usb: gadget: f_hid: move list and spinlock inits from bind to alloc

ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger

ksmbd: validate owner of durable handle on reconnect

f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()

ksmbd: require minimum ACE size in smb_check_perm_dacl()

smb: server: fix active_num_conn leak on transport allocation failure

smb: client: validate the whole DACL before rewriting it in cifsacl

smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path

ksmbd: validate response sizes in ipc_validate_msg()

ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()

ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment

ksmbd: use check_add_overflow() to prevent u16 DACL size overflow

f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()

net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()

crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed

crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed

crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed

rxrpc: Fix missing validation of ticket length in non-XDR key preparsing

fuse: reject oversized dirents in page cache

rtnetlink: add missing netlink_ns_capable() check for peer netns