sctp: avoid NULL dereference when chunk data buffer is missing

libceph: fix potential use-after-free in have_mon_and_osd_map()

libceph: fix potential use-after-free in have_mon_and_osd_map()

media: rc: fix races with imon_disconnect()

Complex adaptation required.

drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

net: atlantic: fix fragment overflow handling in RX path

smb: client: Fix use-after-free in cifs_fill_dirent

smb: client: let recv_done verify data_offset, data_length and remaining_data_length

mm: compaction: update the COMPACT[STALL|FAIL] events properly

vsock: Ignore signal/timeout on connect() if already established

drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

Bluetooth: hci_event: call disconnect callback before deleting conn

ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

tcp: fix a signed-integer-overflow bug in tcp_add_backlog()

Squashfs: check return result of sb_min_blocksize

squashfs: fix memory leak in squashfs_fill_super

Squashfs: check return result of sb_min_blocksize

IB/hfi1: Fix sdma.h tx->num_descs off-by-one error

RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem

RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug

atm: clip: Fix infinite recursive call of clip_push().

usb: core: config: Prevent OOB read in SS endpoint companion parsing

mptcp: fix race condition in mptcp_schedule_work()

fs/proc: fix uaf in proc_readdir_de()

fbdev: bitblit: bound-check glyph index in bit_putcs*

ext4: fix use-after-free in ext4_orphan_cleanup

vsock/vmci: Clear the vmci transport packet properly when initializing it

ALSA: usb-audio: Fix potential overflow of PCM transfer buffer

NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid

nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec

net: dst: add four helpers to annotate data-races around dst->dev

net: Add locking to protect skb->dev access in ip_output

net: gain ipv4 mtu when mtu is not locked

ipv4: use RCU protection in __ip_rt_update_pmtu()

net: dst: introduce dst->dev_rcu

ipv6: use RCU in ip6_output()

ipv6: use RCU in ip6_xmit()

net: use dst_dev_rcu() in sk_setup_caps()

ipv4: add RCU protection to ip4_dst_hoplimit()

ipv4: use RCU protection in ip_dst_mtu_maybe_forward()

net: use dst_dev_rcu() in sk_setup_caps()

smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds

smc: Fix use-after-free in __pnet_find_base_ndev().

mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats

net/sched: Enforce that teql can only be used as root qdisc

bridge: mcast: Fix use-after-free during router port configuration

x86 xen add xenpv restore regs and return to usermode

kpatch add alt asm definitions