media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()

media: venus: Fix OOB read due to missing payload bound check

netfilter: nf_tables: reject duplicate device on updates

f2fs: fix to avoid out-of-boundary access in dnode page

iommu/amd: Avoid stack buffer overflow from kernel cmdline

i2c: qup: jump out of the loop in case of timeout

arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()

regulator: core: fix NULL dereference on unbind due to stale coupling data

net: appletalk: Fix use-after-free in AARP proxy probe

can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode

ice: Fix a null pointer dereference in ice_copy_and_init_pkg()

nilfs2: reject invalid file types when reading inodes

[ceph] parse_longname(): strrchr() expects NUL-terminated string

gfs2: No more self recovery

wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

f2fs: fix to avoid out-of-boundary access in devs.path

hfsplus: remove mutex_lock check in hfsplus_free_extents

spi: stm32: Check for cfg availability in stm32_spi_probe

wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band