Chromium: CVE-2026-2314 Heap buffer overflow in Codecs

btrfs: send: check for inline extents in range_is_hole_in_parent()

Chromium: CVE-2026-2313 Use after free in CSS

tracing: Add recursion protection in kernel stack trace recording

of: unittest: Fix memory leak in unittest_data_add()

netdevsim: fix a race issue related to the operation on bpf_bound_progs list

rxrpc: Fix data-race warning and potential load/store tearing

io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop

scsi: core: Wake up the error handler when final completions race against each other

mm/hugetlb: fix hugetlb_pmd_shared()

tracing: Fix crash on synthetic stacktrace field usage

vsock/virtio: cap TX credit to local buffer size

vsock/virtio: fix potential underflow in virtio_transport_get_credit()

spi: spi-sprd-adi: Fix double free in probe error path

rxrpc: Fix recvmsg() unconditional requeue

net/mlx5e: Fix crash on profile change rollback failure

net/sched: sch_qfq: do not free existing class in qfq_change_class()

nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec

net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts

net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv