- Update to 5.10.260.
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
- bnxt_en: Fix NULL pointer dereference
- bnxt_en: Modify bnxt_disable_int_sync() to be called more than once.
- bpf: use kvfree() for replaced sysctl write buffer
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- crypto: qat - remove unused character device and IOCTLs
- crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user()
- crypto: qat - Return pointer directly in adf_ctl_alloc_resources
- dlm: prevent NPD when writing a positive value to event_done
- Documentation: ioctl-number: Extend "Include File" column width
- Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs
- drm/amd/display: Bound VBIOS record-chain walk loops
- drm/amd/display: Use krealloc_array() in dal_vector_reserve()
- exfat: fix potential use-after-free in exfat_find_dir_entry()
- ext4: add bounds check for inline data length in ext4_read_inline_page
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
- fpga: region: fix use-after-free in child_regions_with_firmware()
- fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios
- hv: utils: handle and propagate errors in kvp_register
- i2c: stub: Reject I2C block transfers with invalid length
- ip6_vti: set netns_immutable on the fallback device.
- irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove
- KEYS: fix overflow in keyctl_pkey_params_get_2()
- keys: Pin request_key_auth payload in instantiate paths
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
- mac802154: llsec: add skb_cow_data() before in-place crypto
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
- misc: fastrpc: Add dma_mask to fastrpc_channel_ctx
- misc: fastrpc: fix DMA address corruption due to find_vma misuse
- misc: fastrpc: Fix NULL pointer dereference in rpmsg callback
- mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC
- mptcp: fix missing wakeups in edge scenarios
- net: 9p: fix refcount leak in p9_read_work() error handling
- net: add skb_header_pointer_careful() helper
- net: cpsw_new: Fix potential unregister of netdev that has not been registered yet
- net: phonet: free phonet_device after RCU grace period
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
- netdevsim: Fix memory leak of nsim_dev->fa_cookie
- net/sched: act_pedit: check static offsets a priori
- net/sched: act_pedit: fix action bind logic
- net/sched: act_pedit: free pedit keys on bail from offset check
- net/sched: act_pedit: Parse L3 Header for L4 offset
- net/sched: act_pedit: rate limit datapath messages
- net/sched: act_pedit: remove extra check for key type
- net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys
- net/sched: cls_u32: use skb_header_pointer_careful()
- net/sched: fix pedit partial COW leading to page cache corruption
- net/sched: simplify tcf_pedit_act
- net/sched: transition act_pedit to rcu and percpu stats
- nfsd: check get_user() return when reading princhashlen
- nfsd: fix posix_acl leak on SETACL decode failure
- NFSD: Fix SECINFO_NO_NAME decode error cleanup
- ocfs2: reject oversized group bitmap descriptors
- phonet: Pass ifindex to fill_addr().
- phonet: Pass net and ifindex to phonet_address_notify().
- pNFS: Fix use-after-free in pnfs_update_layout()
- RDMA/bnxt_re: zero shared page before exposing to userspace
- regulator: core: fix locking in regulator_resolve_supply() error path
- ring-buffer: Remove ring_buffer_read_prepare_sync()
- slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
- vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
- vfio/iommu_type1: replace kfree with kvfree
- virtiofs: fix UAF on submount umount
- wifi: ath11k: fix warning when unbinding
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor