writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()

cpufreq: qcom-cpufreq-hw: Fix possible double free

firmware_loader: fix device reference leak in firmware_upload_register()

proc: protect ptrace_may_access() with exec_update_lock (FD links)

sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT

cpufreq: Fix hotplug-suspend race during reboot

cpufreq: pcc: fix use-after-free and double free in _OSC evaluation

proc: protect ptrace_may_access() with exec_update_lock (part 1)

posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

HID: letsketch: fix UAF on inrange_timer at driver unbind

HID: multitouch: fix out-of-bounds bit access on mt_io_flags

HID: appleir: fix UAF on pending key_up_timer in remove()

HID: lg-g15: cancel pending work on remove to fix a use-after-free

hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length

hfs/hfsplus: zero-initialize buffer in hfs_bnode_read

nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers

media: mtk-jpeg: cancel workqueue on release for supported platforms only

bpf: Reject fragmented frames in devmap

bpf: Allow LPM map access from sleepable BPF programs