nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

nvmet-auth: validate reply message payload bounds against transfer length

partitions: aix: bound the pp_count scan to the ppe array

isofs: bound Rock Ridge symlink components to the SL record

crypto: caam - use print_hex_dump_devel to guard key hex dumps

crypto: caam - use print_hex_dump_devel to guard key hex dumps

crypto: ecc - Fix carry overflow in vli multiplication

crypto: pcrypt - restore callback for non-parallel fallback

crypto: drbg - Fix returning success on failure in CTR_DRBG

crypto: qat - protect service table iterations with service_lock

crypto: qat - validate RSA CRT component lengths

spi: fsl-lpspi: terminate the RX channel on TX prepare failure path

regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()

netrc credential leak with reused proxy connection

tracing: Prevent out-of-bounds read in glob matching

NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

module: decompress: check return value of module_extend_max_pages()

exfat: bound uniname advance in exfat_find_dir_entry()

mm: do file ownership checks with the proper mount idmap

KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU