KVM: x86: hyper-v: Bound the bank index when querying sparse banks

power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()

fbdev: modedb: fix a possible UAF in fb_find_mode()

drivers/base/memory: set mem->altmap after successful device registration

gpio: rockchip: teardown bugs and resource leaks

Input: elan_i2c - validate firmware size before use

ACPI: driver: Check ACPI_COMPANION() against NULL during probe

drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

hwmon: (lm90) Add lock protection to lm90_alert

wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it

net/mlx5e: xsk: Fix unlocked writing to ICOSQ

Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock

i2c: i801: fix hardware state machine corruption in error path

bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

i2c: stub: Reject I2C block transfers with invalid length

net: team: fix NULL pointer dereference in team_xmit during mode change

netfilter: ipset: fix race between dump and ip_set_list resize

net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()

xfs: fail recovery on a committed log item with no regions

netfs: Fix potential for tearing in ->remote_i_size and ->zero_point