Commit aa6fc3defb36 for kernel

commit aa6fc3defb36b11eb82c4d1f4e95b5f6d8a0bca6
Merge: e895a6fc204f a82c8a05e86f
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Mon Jul 27 14:14:11 2026 -0700

    Merge tag 'for-next-keys-7.2-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd

    Pull keys fixes from Jarkko Sakkinen:

     - An unprivileged keyring whose keys collide through the
       description-chunk path can drive assoc_array node splitting
       into an out-of-bounds slot write. Fix it.

     - Fix the DCP trusted keys backend

    * tag 'for-next-keys-7.2-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd:
      assoc_array: trim the final shortcut word using the current chunk end
      keys: make keyring key-chunk byte order agree with keyring_diff_objects()
      keys: fix out-of-bounds read in keyring_get_key_chunk()
      KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return type