drm/amdgpu: fix amdgpu_hmm_range_get_pages

esp: fix page frag reference leak on skb_to_sgvec failure

Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls

netfilter: nf_tables: add hook transactions for device deletions

drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring

Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation

batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd

batman-adv: v: prevent OGM aggregation on disabled hardif

batman-adv: tp_meter: restrict number of unacked list entries

ntfs3: reject direct userspace writes to reserved $LX* xattrs

wifi: mt76: add wcid publish check in mt76_sta_add

mac802154: llsec: add skb_cow_data() before in-place crypto

net: skmsg: preserve sg.copy across SG transforms

net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink

apparmor: mediate the implicit connect of TCP fast open sendmsg

apparmor: fix use-after-free in rawdata dedup loop

fbdev: fix use-after-free in store_modes()

gcov: use atomic counter updates to fix concurrent access crashes

KEYS: fix overflow in keyctl_pkey_params_get_2()

keys: Pin request_key_auth payload in instantiate paths