netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels

netfilter: nf_tables: unconditionally bump set->nelems before insertion

perf: Fix __perf_event_overflow() vs perf_remove_from_context() race

apparmor: validate DFA start states are in bounds in unpack_pdb

apparmor: fix unprivileged local user can do privileged policy management

f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes

fbdev: rivafb: fix divide error in nv3_arb()

f2fs: fix to do sanity check on node footer in {read,write}_end_io

io_uring/rw: free potentially allocated iovec on cache put failure

net: add proper RCU protection to /proc/net/ptype

media: dvb-core: fix wrong reinitialization of ringbuffer on reopen

perf/core: Fix refcount bug and potential UAF in perf_mmap

tcp: secure_seq: add back ports to TS offset

wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration

net/sched: act_gate: snapshot parameters with RCU on replace

nvme: fix memory allocation in nvme_pr_read_keys()

RDMA/umad: Reject negative data_len in ib_umad_write

RDMA/siw: Fix potential NULL pointer dereference in header processing

audit: add missing syscalls to read class

tls: Fix race condition in tls_sw_cancel_work_tx()