can: usb: f81604: correctly anchor the urb in the read bulk callback

arm64: io: Extract user memory type in ioremap_prot()

xdp: produce a warning when calculated tailroom is negative

net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs

nfc: nci: free skb on nci_transceive early error paths

wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()

RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()

can: usb: f81604: handle short interrupt urb messages properly

netfilter: nft_set_rbtree: validate open interval overlap

nfc: nci: complete pending data exchange on device close

cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()

wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()

can: usb: etas_es58x: correctly anchor the urb in the read bulk callback

usb: gadget: f_ncm: align net_device lifecycle with bind/unbind

bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim

ALSA: usb-audio: Use correct version for UAC3 header validation

drm/vmwgfx: Return the correct value in vmw_translate_ptr functions

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

i40e: Fix preempt count leak in napi poll tracepoint

net: usb: kaweth: validate USB endpoints