October 2025 - Linux-stable-mirror

[PATCH] ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down

by Peter Ujfalusi

From: Ranjani Sridharan <ranjani.sridharan(a)linux.intel.com> In the case of static pipelines, freeing the widgets in the pipelines that were not suspended after freeing the scheduler widgets results in errors because the secondary cores are powered off when the scheduler widgets are freed. Fix this by tearing down the leftover pipelines before powering off the secondary cores. Cc: stable(a)vger.kernel.org Fixes: d7332c4a4f1a ("ASoC: SOF: ipc3-topology: Fix pipeline tear down logic") Signed-off-by: Ranjani Sridharan <ranjani.sridharan(a)linux.intel.com> Reviewed-by: Péter Ujfalusi <peter.ujfalusi(a)linux.intel.com> Reviewed-by: Kai Vehmanen <kai.vehmanen(a)linux.intel.com> Signed-off-by: Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> --- sound/soc/sof/ipc3-topology.c | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/sound/soc/sof/ipc3-topology.c b/sound/soc/sof/ipc3-topology.c index 473d416bc910..f449362a2905 100644 --- a/sound/soc/sof/ipc3-topology.c +++ b/sound/soc/sof/ipc3-topology.c @@ -2473,11 +2473,6 @@ static int sof_ipc3_tear_down_all_pipelines(struct snd_sof_dev *sdev, bool verif if (ret < 0) return ret; - /* free all the scheduler widgets now */ - ret = sof_ipc3_free_widgets_in_list(sdev, true, &dyn_widgets, verify); - if (ret < 0) - return ret; - /* * Tear down all pipelines associated with PCMs that did not get suspended * and unset the prepare flag so that they can be set up again during resume. @@ -2493,6 +2488,11 @@ static int sof_ipc3_tear_down_all_pipelines(struct snd_sof_dev *sdev, bool verif } } + /* free all the scheduler widgets now. This will also power down the secondary cores */ + ret = sof_ipc3_free_widgets_in_list(sdev, true, &dyn_widgets, verify); + if (ret < 0) + return ret; + list_for_each_entry(sroute, &sdev->route_list, list) sroute->setup = false; -- 2.51.0

3 weeks, 6 days

2
1
0 0

[PATCH 6.1 00/61] 6.1.154-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.154 release. There are 61 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 24 Sep 2025 19:23:52 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.154-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.154-rc1 Herbert Xu <herbert(a)gondor.apana.org.au> crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg David Howells <dhowells(a)redhat.com> crypto: af_alg: Convert af_alg_sendpage() to use MSG_SPLICE_PAGES Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org> ASoC: q6apm-lpass-dai: close graph on prepare errors Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org> ASoC: qcom: q6apm-lpass-dai: close graphs before opening a new one Hans de Goede <hansg(a)kernel.org> net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer Philipp Zabel <p.zabel(a)pengutronix.de> net: rfkill: gpio: add DT support Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: connect: catch IO errors on listen side Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: propagate shutdown to subflows when possible Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: dbc: Fix full DbC transfer ring after several reconnects Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: dbc: decouple endpoint allocation from initialization Johan Hovold <johan(a)kernel.org> phy: ti: omap-usb2: fix device leak at unbind Rob Herring <robh(a)kernel.org> phy: Use device_get_match_data() Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: userspace pm: validate deny-join-id0 flag Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: nl: announce deny-join-id0 flag Stefan Metzmacher <metze(a)samba.org> smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path Herbert Xu <herbert(a)gondor.apana.org.au> crypto: af_alg - Set merge to zero early in af_alg_sendmsg David Howells <dhowells(a)redhat.com> crypto: af_alg: Indent the loop in af_alg_sendmsg() Qi Xi <xiqi2(a)huawei.com> drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path Loic Poulain <loic.poulain(a)oss.qualcomm.com> drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ Colin Ian King <colin.i.king(a)gmail.com> ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: wm8974: Correct PLL rate rounding Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: wm8940: Correct typo in control name Jens Axboe <axboe(a)kernel.dk> io_uring: include dying ring in task_work "should cancel" state Jens Axboe <axboe(a)kernel.dk> io_uring: backport io_should_terminate_tw() Praful Adiga <praful.adiga(a)gmail.com> ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: avoid spurious errors on TCP disconnect Håkon Bugge <haakon.bugge(a)oracle.com> rds: ib: Increment i_fastreg_wrs before bailing out Maciej S. Szmigiero <maciej.szmigiero(a)oracle.com> KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active Thomas Fourier <fourier.thomas(a)gmail.com> mmc: mvsdio: Fix dma_unmap_sg() nents value Mohammad Rafi Shaik <mohammad.rafi.shaik(a)oss.qualcomm.com> ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S Mohammad Rafi Shaik <mohammad.rafi.shaik(a)oss.qualcomm.com> ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface Qu Wenruo <wqu(a)suse.com> btrfs: tree-checker: fix the incorrect inode ref size check Eugene Koira <eugkoira(a)amazon.com> iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() Tao Cui <cuitao(a)kylinos.cn> LoongArch: Check the return value when creating kobj Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled H. Nikolaus Schaller <hns(a)goldelico.com> power: supply: bq27xxx: restrict no-battery detection to bq27000 H. Nikolaus Schaller <hns(a)goldelico.com> power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery Nathan Chancellor <nathan(a)kernel.org> nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* Stefan Metzmacher <metze(a)samba.org> ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer Duoming Zhou <duoming(a)zju.edu.cn> octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() Duoming Zhou <duoming(a)zju.edu.cn> cnic: Fix use-after-free bugs in cnic_delete_task Alexey Nepomnyashih <sdl(a)nppct.ru> net: liquidio: fix overflow in octeon_init_instr_queue() Tariq Toukan <tariqt(a)nvidia.com> Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" Jakub Kicinski <kuba(a)kernel.org> tls: make sure to abort the stream if headers are bogus Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). Hangbin Liu <liuhangbin(a)gmail.com> bonding: don't set oif to bond dev when getting NS target destination Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> i40e: remove redundant memory barrier when cleaning Tx descs Yeounsu Moon <yyyynoom(a)gmail.com> net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: set remote_deny_join_id0 on SYN recv Jamie Bainbridge <jamie.bainbridge(a)gmail.com> qed: Don't collect too many protection override GRC elements Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix buffer pool seeding for control traffic Miaoqian Lin <linmq006(a)gmail.com> um: virtio_uml: Fix use-after-free after put_device in probe Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid extref key setup when replaying dentry Chen Ridong <chenridong(a)huawei.com> cgroup: split cgroup_destroy_wq into 3 workqueues Geert Uytterhoeven <geert+renesas(a)glider.be> pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch Liao Yuanhong <liaoyuanhong(a)vivo.com> wifi: mac80211: fix incorrect type for ret Lachlan Hodges <lachlan.hodges(a)morsemicro.com> wifi: mac80211: increase scan_ies_len for S1G Takashi Sakamoto <o-takashi(a)sakamocchi.jp> ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported ------------- Diffstat: Makefile | 4 +- arch/loongarch/include/asm/acenv.h | 7 +- arch/loongarch/kernel/env.c | 2 + arch/um/drivers/virtio_uml.c | 6 +- arch/x86/kvm/svm/svm.c | 3 +- crypto/af_alg.c | 112 ++++++++------------- drivers/gpu/drm/bridge/analogix/anx7625.c | 6 +- .../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 6 +- drivers/iommu/intel/iommu.c | 7 +- drivers/mmc/host/mvsdio.c | 2 +- drivers/net/bonding/bond_main.c | 1 - drivers/net/ethernet/broadcom/cnic.c | 3 +- .../net/ethernet/cavium/liquidio/request_manager.c | 2 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_txrx.c | 3 - .../net/ethernet/marvell/octeontx2/nic/otx2_ptp.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 2 - drivers/net/ethernet/natsemi/ns83820.c | 13 ++- drivers/net/ethernet/qlogic/qed/qed_debug.c | 7 +- drivers/pcmcia/omap_cf.c | 8 +- drivers/phy/broadcom/phy-bcm-ns-usb3.c | 9 +- drivers/phy/marvell/phy-berlin-usb.c | 7 +- drivers/phy/ralink/phy-ralink-usb.c | 10 +- drivers/phy/rockchip/phy-rockchip-pcie.c | 11 +- drivers/phy/rockchip/phy-rockchip-usb.c | 10 +- drivers/phy/ti/phy-omap-control.c | 9 +- drivers/phy/ti/phy-omap-usb2.c | 24 +++-- drivers/phy/ti/phy-ti-pipe3.c | 14 +-- drivers/power/supply/bq27xxx_battery.c | 4 +- drivers/usb/host/xhci-dbgcap.c | 94 ++++++++++++----- fs/btrfs/tree-checker.c | 4 +- fs/btrfs/tree-log.c | 2 +- fs/nilfs2/sysfs.c | 4 +- fs/nilfs2/sysfs.h | 8 +- fs/smb/client/smbdirect.c | 4 +- fs/smb/server/transport_rdma.c | 26 +++-- include/crypto/if_alg.h | 10 +- include/uapi/linux/mptcp.h | 6 +- io_uring/io_uring.c | 13 ++- io_uring/io_uring.h | 13 +++ io_uring/poll.c | 3 +- io_uring/timeout.c | 2 +- kernel/cgroup/cgroup.c | 43 ++++++-- net/ipv4/tcp.c | 5 + net/mac80211/driver-ops.h | 2 +- net/mac80211/main.c | 7 +- net/mptcp/pm_netlink.c | 7 ++ net/mptcp/protocol.c | 15 +++ net/mptcp/subflow.c | 4 + net/rds/ib_frmr.c | 20 ++-- net/rfkill/rfkill-gpio.c | 22 +++- net/tls/tls.h | 1 + net/tls/tls_strp.c | 14 ++- net/tls/tls_sw.c | 3 +- sound/firewire/motu/motu-hwdep.c | 2 +- sound/pci/hda/patch_realtek.c | 1 + sound/soc/codecs/wm8940.c | 2 +- sound/soc/codecs/wm8974.c | 8 +- sound/soc/qcom/qdsp6/audioreach.c | 1 + sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 36 +++++-- sound/soc/sof/intel/hda-stream.c | 2 +- tools/testing/selftests/net/mptcp/mptcp_connect.c | 11 +- tools/testing/selftests/net/mptcp/pm_nl_ctl.c | 7 ++ tools/testing/selftests/net/mptcp/userspace_pm.sh | 14 ++- 64 files changed, 440 insertions(+), 272 deletions(-)

3 weeks, 6 days

13
77
0 0

[PATCH v2 01/15] serial: sc16is7xx: remove useless enable of enhanced features

by Hugo Villeneuve

From: Hugo Villeneuve <hvilleneuve(a)dimonoff.com> Commit 43c51bb573aa ("sc16is7xx: make sure device is in suspend once probed") permanently enabled access to the enhanced features in sc16is7xx_probe(), and it is never disabled after that. Therefore, remove useless re-enable of enhanced features in sc16is7xx_set_baud(). Fixes: 43c51bb573aa ("sc16is7xx: make sure device is in suspend once probed") Cc: stable(a)vger.kernel.org Signed-off-by: Hugo Villeneuve <hvilleneuve(a)dimonoff.com> --- drivers/tty/serial/sc16is7xx.c | 7 ------- 1 file changed, 7 deletions(-) diff --git a/drivers/tty/serial/sc16is7xx.c b/drivers/tty/serial/sc16is7xx.c index 1a2c4c14f6aac..c7435595dce13 100644 --- a/drivers/tty/serial/sc16is7xx.c +++ b/drivers/tty/serial/sc16is7xx.c @@ -588,13 +588,6 @@ static int sc16is7xx_set_baud(struct uart_port *port, int baud) div /= prescaler; } - /* Enable enhanced features */ - sc16is7xx_efr_lock(port); - sc16is7xx_port_update(port, SC16IS7XX_EFR_REG, - SC16IS7XX_EFR_ENABLE_BIT, - SC16IS7XX_EFR_ENABLE_BIT); - sc16is7xx_efr_unlock(port); - /* If bit MCR_CLKSEL is set, the divide by 4 prescaler is activated. */ sc16is7xx_port_update(port, SC16IS7XX_MCR_REG, SC16IS7XX_MCR_CLKSEL_BIT, -- 2.39.5

3 weeks, 6 days

2
2
0 0

[PATCH 11/14] iommu/omap: fix device leaks on probe_device()

by Johan Hovold

Make sure to drop the reference taken to the iommu platform devices during probe_device() on errors and when the device is later released. Fixes: 9d5018deec86 ("iommu/omap: Add support to program multiple iommus") Fixes: 7d6827748d54 ("iommu/omap: Fix iommu archdata name for DT-based devices") Cc: stable(a)vger.kernel.org # 3.18 Cc: Suman Anna <s-anna(a)ti.com> Signed-off-by: Johan Hovold <johan(a)kernel.org> --- drivers/iommu/omap-iommu.c | 27 +++++++++++++++++++-------- 1 file changed, 19 insertions(+), 8 deletions(-) diff --git a/drivers/iommu/omap-iommu.c b/drivers/iommu/omap-iommu.c index 6fb93927bdb9..77023d49bd24 100644 --- a/drivers/iommu/omap-iommu.c +++ b/drivers/iommu/omap-iommu.c @@ -1636,7 +1636,7 @@ static struct iommu_device *omap_iommu_probe_device(struct device *dev) struct platform_device *pdev; struct omap_iommu *oiommu; struct device_node *np; - int num_iommus, i; + int num_iommus, i, ret; /* * Allocate the per-device iommu structure for DT-based devices. @@ -1663,22 +1663,22 @@ static struct iommu_device *omap_iommu_probe_device(struct device *dev) for (i = 0, tmp = arch_data; i < num_iommus; i++, tmp++) { np = of_parse_phandle(dev->of_node, "iommus", i); if (!np) { - kfree(arch_data); - return ERR_PTR(-EINVAL); + ret = -EINVAL; + goto err_put_iommus; } pdev = of_find_device_by_node(np); if (!pdev) { of_node_put(np); - kfree(arch_data); - return ERR_PTR(-ENODEV); + ret = -ENODEV; + goto err_put_iommus; } oiommu = platform_get_drvdata(pdev); if (!oiommu) { of_node_put(np); - kfree(arch_data); - return ERR_PTR(-EINVAL); + ret = -EINVAL; + goto err_put_iommus; } tmp->iommu_dev = oiommu; @@ -1697,17 +1697,28 @@ static struct iommu_device *omap_iommu_probe_device(struct device *dev) oiommu = arch_data->iommu_dev; return &oiommu->iommu; + +err_put_iommus: + for (tmp = arch_data; tmp->dev; tmp++) + put_device(tmp->dev); + + kfree(arch_data); + + return ERR_PTR(ret); } static void omap_iommu_release_device(struct device *dev) { struct omap_iommu_arch_data *arch_data = dev_iommu_priv_get(dev); + struct omap_iommu_arch_data *tmp; if (!dev->of_node || !arch_data) return; - kfree(arch_data); + for (tmp = arch_data; tmp->dev; tmp++) + put_device(tmp->dev); + kfree(arch_data); } static int omap_iommu_of_xlate(struct device *dev, const struct of_phandle_args *args) -- 2.49.1

3 weeks, 6 days

2
2
0 0

Linux 6.16.10

by Greg Kroah-Hartman

I'm announcing the release of the 6.16.10 kernel. All users of the 6.16 kernel series must upgrade. The updated 6.16.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.16.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/laptops/lg-laptop.rst | 4 Makefile | 2 arch/arm/boot/dts/intel/socfpga/socfpga_cyclone5_sodia.dts | 6 arch/arm/boot/dts/marvell/kirkwood-openrd-client.dts | 2 arch/arm64/boot/dts/freescale/imx8mp.dtsi | 4 arch/arm64/boot/dts/marvell/cn9130-cf.dtsi | 7 arch/arm64/boot/dts/marvell/cn9131-cf-solidwan.dts | 6 arch/arm64/boot/dts/marvell/cn9132-clearfog.dts | 22 arch/arm64/boot/dts/marvell/cn9132-sr-cex7.dtsi | 8 arch/arm64/boot/dts/rockchip/rk3588s-orangepi-5.dtsi | 3 arch/riscv/include/asm/pgtable.h | 17 arch/x86/Kconfig | 2 arch/x86/include/asm/topology.h | 10 arch/x86/kernel/cpu/topology.c | 13 drivers/cpufreq/cpufreq.c | 20 drivers/firewire/core-cdev.c | 2 drivers/gpio/gpio-regmap.c | 2 drivers/gpio/gpiolib-acpi-quirks.c | 14 drivers/gpio/gpiolib.c | 21 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 44 drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 3 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 12 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 7 drivers/gpu/drm/amd/display/dc/dc.h | 1 drivers/gpu/drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c | 6 drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 6 drivers/gpu/drm/ast/ast_dp.c | 2 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 drivers/gpu/drm/i915/display/intel_ddi.c | 5 drivers/gpu/drm/panfrost/panfrost_drv.c | 61 - drivers/gpu/drm/panthor/panthor_sched.c | 8 drivers/gpu/drm/xe/abi/guc_actions_abi.h | 5 drivers/gpu/drm/xe/abi/guc_klvs_abi.h | 40 drivers/gpu/drm/xe/xe_bo_evict.c | 4 drivers/gpu/drm/xe/xe_configfs.c | 2 drivers/gpu/drm/xe/xe_device_sysfs.c | 2 drivers/gpu/drm/xe/xe_gt.c | 3 drivers/gpu/drm/xe/xe_guc.c | 62 - drivers/gpu/drm/xe/xe_guc.h | 1 drivers/gpu/drm/xe/xe_guc_submit.c | 87 - drivers/gpu/drm/xe/xe_guc_submit.h | 2 drivers/gpu/drm/xe/xe_uc.c | 4 drivers/hid/amd-sfh-hid/amd_sfh_client.c | 12 drivers/hid/amd-sfh-hid/amd_sfh_common.h | 3 drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 4 drivers/hid/hid-asus.c | 3 drivers/hid/hid-cp2112.c | 10 drivers/hid/hid-multitouch.c | 45 drivers/hid/intel-thc-hid/intel-quickspi/pci-quickspi.c | 2 drivers/hid/intel-thc-hid/intel-quickspi/quickspi-dev.h | 2 drivers/i2c/busses/i2c-designware-platdrv.c | 7 drivers/infiniband/hw/mlx5/devx.c | 1 drivers/iommu/iommufd/eventq.c | 9 drivers/iommu/iommufd/main.c | 35 drivers/mmc/host/sdhci-cadence.c | 11 drivers/net/can/rcar/rcar_can.c | 8 drivers/net/can/spi/hi311x.c | 1 drivers/net/can/sun4i_can.c | 1 drivers/net/can/usb/etas_es58x/es58x_core.c | 3 drivers/net/can/usb/mcba_usb.c | 1 drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 drivers/net/dsa/lantiq_gswip.c | 21 drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 2 drivers/net/ethernet/freescale/fec_main.c | 4 drivers/net/ethernet/intel/i40e/i40e.h | 3 drivers/net/ethernet/intel/i40e/i40e_main.c | 26 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 110 + drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 3 drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 3 drivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 1 drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 2 drivers/net/ethernet/mellanox/mlx5/core/fs_core.h | 1 drivers/net/ethernet/mellanox/mlx5/core/fs_counters.c | 25 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/action.c | 7 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/fs_hws.c | 18 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/fs_hws_pools.c | 8 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/mlx5hws.h | 7 drivers/net/phy/bcm-phy-ptp.c | 6 drivers/net/phy/sfp.c | 24 drivers/net/tun.c | 3 drivers/net/wireless/intel/iwlwifi/pcie/tx.c | 3 drivers/net/wireless/virtual/virt_wifi.c | 4 drivers/pinctrl/mediatek/pinctrl-airoha.c | 31 drivers/platform/x86/lg-laptop.c | 34 drivers/platform/x86/oxpec.c | 7 drivers/spi/spi-cadence-quadspi.c | 90 + drivers/ufs/core/ufs-mcq.c | 4 drivers/usb/core/quirks.c | 2 drivers/vhost/net.c | 33 drivers/video/fbdev/core/fbcon.c | 13 fs/afs/server.c | 3 fs/btrfs/volumes.c | 5 fs/hugetlbfs/inode.c | 10 fs/netfs/buffered_read.c | 10 fs/netfs/direct_read.c | 7 fs/netfs/direct_write.c | 6 fs/netfs/internal.h | 1 fs/netfs/objects.c | 30 fs/netfs/read_pgpriv2.c | 2 fs/netfs/read_single.c | 2 fs/netfs/write_issue.c | 3 fs/nfs/file.c | 33 fs/nfs/inode.c | 9 fs/nfs/internal.h | 2 fs/nfs/nfs42proc.c | 33 fs/nfs/nfstrace.h | 1 fs/proc/task_mmu.c | 3 fs/smb/client/smb2inode.c | 2 fs/smb/server/transport_rdma.c | 22 include/crypto/if_alg.h | 2 include/linux/firmware/imx/sm.h | 47 include/linux/mlx5/fs.h | 2 include/net/bluetooth/hci_core.h | 21 kernel/bpf/core.c | 5 kernel/bpf/verifier.c | 6 kernel/fork.c | 2 kernel/futex/requeue.c | 6 kernel/sched/ext_idle.c | 52 kernel/sched/ext_idle.h | 7 kernel/trace/fgraph.c | 12 kernel/trace/fprobe.c | 7 kernel/trace/trace_dynevent.c | 4 kernel/trace/trace_osnoise.c | 3 kernel/vhost_task.c | 3 mm/damon/sysfs.c | 4 mm/kmsan/core.c | 10 mm/kmsan/kmsan_test.c | 16 net/bluetooth/hci_event.c | 30 net/bluetooth/hci_sync.c | 7 net/bluetooth/mgmt.c | 259 +++- net/bluetooth/mgmt_util.c | 46 net/bluetooth/mgmt_util.h | 3 net/core/skbuff.c | 2 net/ipv4/nexthop.c | 7 net/smc/smc_loopback.c | 14 net/xfrm/xfrm_device.c | 2 net/xfrm/xfrm_state.c | 3 sound/pci/hda/patch_realtek.c | 11 sound/soc/intel/boards/sof_es8336.c | 10 sound/soc/intel/boards/sof_rt5682.c | 7 sound/soc/intel/common/soc-acpi-intel-ptl-match.c | 32 sound/usb/mixer_quirks.c | 571 +++++++--- sound/usb/quirks.c | 24 sound/usb/usbaudio.h | 4 tools/testing/selftests/bpf/prog_tests/free_timer.c | 4 tools/testing/selftests/bpf/prog_tests/timer.c | 4 tools/testing/selftests/bpf/prog_tests/timer_crash.c | 4 tools/testing/selftests/bpf/prog_tests/timer_lockup.c | 4 tools/testing/selftests/bpf/prog_tests/timer_mim.c | 4 tools/testing/selftests/filesystems/mount-notify/mount-notify_test.c | 17 tools/testing/selftests/filesystems/mount-notify/mount-notify_test_ns.c | 18 tools/testing/selftests/net/fib_nexthops.sh | 12 153 files changed, 1832 insertions(+), 851 deletions(-) Adrián Larumbe (1): drm/panthor: Defer scheduler entitiy destruction to queue release Akinobu Mita (1): mm/damon/sysfs: do not ignore callback's return value in damon_sysfs_damon_call() Aleksander Jan Bajkowski (1): net: sfp: add quirk for FLYPRO copper SFP+ module Alexander Popov (1): x86/Kconfig: Reenable PTDUMP on i386 Alexandre Ghiti (1): riscv: Use an atomic xchg in pudp_huge_get_and_clear() Alok Tiwari (2): scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE bnxt_en: correct offset handling for IPv6 destination address Amit Chaudhari (1): HID: asus: add support for missing PX series fn keys Andrea Righi (2): sched_ext: idle: Make local functions static in ext_idle.c sched_ext: idle: Handle migration-disabled tasks in BPF code Antheas Kapenekakis (1): platform/x86: oxpec: Add support for OneXPlayer X1 Mini Pro (Strix Point) Balamurugan C (3): ASoC: Intel: soc-acpi: Add entry for sof_es8336 in PTL match table. ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in PTL match table ASoC: Intel: sof_rt5682: Add HDMI-In capture with rt5682 support for PTL. Basavaraj Natikar (1): HID: amd_sfh: Add sync across amd sfh work functions Benoît Monin (1): mmc: sdhci-cadence: add Mobileye eyeQ support Carolina Jubran (1): net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD Chen Ni (1): ALSA: usb-audio: Convert comma to semicolon Chris Morgan (1): net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick Christian Loehle (1): cpufreq: Initialize cpufreq-based invariance before subsys Christian Marangi (2): pinctrl: airoha: fix wrong PHY LED mux value for LED1 GPIO46 pinctrl: airoha: fix wrong MDIO function bitmaks Cristian Ciocaltea (8): ALSA: usb-audio: Fix code alignment in mixer_quirks ALSA: usb-audio: Fix whitespace & blank line issues in mixer_quirks ALSA: usb-audio: Fix block comments in mixer_quirks ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks ALSA: usb-audio: Avoid multiple assignments in mixer_quirks ALSA: usb-audio: Simplify NULL comparison in mixer_quirks ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 Cryolitia PukNgae (1): ALSA: usb-audio: move mixer_quirks' min_mute into common quirk Dan Carpenter (1): octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() Daniel Lee (1): platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() Eric Biggers (2): crypto: af_alg - Fix incorrect boolean values in af_alg_ctx kmsan: fix out-of-bounds access to shadow memory Eric Huang (1): drm/amdkfd: fix p2p links bug in topology Geert Uytterhoeven (1): can: rcar_can: rcar_can_resume(): fix s2ram with PSCI Greg Kroah-Hartman (1): Linux 6.16.10 Hans de Goede (1): gpiolib: Extend software-node support to support secondary software-nodes Heikki Krogerus (1): i2c: designware: Add quirk for Intel Xe Ido Schimmel (2): nexthop: Forbid FDB status change while nexthop is in a group selftests: fib_nexthops: Fix creation of non-FDB nexthops Ioana Ciornei (1): gpio: regmap: fix memory leak of gpio_regmap structure Jacob Keller (2): broadcom: fix support for PTP_PEROUT_DUTY_CYCLE broadcom: fix support for PTP_EXTTS_REQUEST2 ioctl Jakub Acs (1): fs/proc/task_mmu: check p->vec_buf for NULL James Guan (1): wifi: virt_wifi: Fix page fault on connect Jason Baron (1): net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS Jason Gunthorpe (1): iommufd: Fix race during abort for file descriptors Jason Wang (1): vhost-net: flush batched before enabling notifications Jiayi Li (1): usb: core: Add 0x prefix to quirks debug output Jihed Chaibi (1): ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients Jimmy Hon (1): arm64: dts: rockchip: Fix the headphone detection on the orangepi 5 Jinjiang Tu (1): mm/hugetlb: fix folio is still mapped when deleted Jiri Olsa (1): bpf: Check the helper function is valid in get_helper_proto Johannes Berg (2): wifi: iwlwifi: fix byte count table for old devices wifi: iwlwifi: pcie: fix byte count table for some devices Josua Mayer (3): arm64: dts: marvell: cn913x-solidrun: fix sata ports status arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports Kerem Karabay (4): HID: multitouch: Get the contact ID from HID_DG_TRANSDUCER_INDEX fields in case of Apple Touch Bar HID: multitouch: support getting the tip state from HID_DG_TOUCH fields in Apple Touch Bar HID: multitouch: take cls->maxcontacts into account for Apple Touch Bar even without a HID_DG_CONTACTMAX field HID: multitouch: specify that Apple Touch Bar is direct Khairul Anuar Romli (2): spi: cadence-quadspi: Implement refcount to handle unbind during busy spi: cadence-qspi: defer runtime support on socfpga if reset bit is enabled Leon Hwang (2): bpf: Reject bpf_timer for PREEMPT_RT selftests/bpf: Skip timer cases when bpf_timer is not supported Louis-Alexis Eyraud (3): drm/panfrost: Drop duplicated Mediatek supplies arrays drm/panfrost: Commonize Mediatek power domain array definitions drm/panfrost: Add support for Mali on the MT8370 SoC Lucas De Marchi (1): drm/xe: Fix build with CONFIG_MODULES=n Luiz Augusto von Dentz (4): Bluetooth: hci_sync: Fix hci_resume_advertising_sync Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync Bluetooth: MGMT: Fix possible UAFs Lukasz Czapnik (8): i40e: add validation for ring_len param i40e: fix idx validation in i40e_validate_queue_map i40e: fix idx validation in config queues msg i40e: fix input validation logic for action_meta i40e: fix validation of VF state in get resources i40e: add max boundary check for VF filters i40e: add mask to apply valid bits for itr_idx i40e: improve VF MAC filters accounting Marc Kleine-Budde (1): net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info Mario Limonciello (AMD) (1): gpiolib: acpi: Add quirk for ASUS ProArt PX13 Mark Harmstone (1): btrfs: don't allow adding block device of less than 1 MB Masami Hiramatsu (Google) (3): tracing: dynevent: Add a missing lockdown check on dynevent tracing: fgraph: Protect return handler from recursion loop tracing: fprobe: Fix to remove recorded module addresses from filter Matthew Schwartz (1): drm/amd/display: Only restore backlight after amdgpu_dm_init or dm_resume Max Kellermann (1): netfs: fix reference leak Melissa Wen (1): drm/amd/display: remove output_tf_change flag Michael S. Tsirkin (1): Revert "vhost/net: Defer TX queue re-enable until after sendmsg" Michal Wajdeczko (1): drm/xe/vf: Don't expose sysfs attributes not applicable for VFs Moshe Shemesh (1): net/mlx5: fs, fix UAF in flow counter release Nirmoy Das (1): drm/ast: Use msleep instead of mdelay for edid read Nobuhiro Iwamatsu (1): ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address Or Har-Toov (1): IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions Peng Fan (4): firmware: imx: Add stub functions for SCMI MISC API firmware: imx: Add stub functions for SCMI LMM API firmware: imx: Add stub functions for SCMI CPU API arm64: dts: imx8mp: Correct thermal sensor index Petr Malat (1): ethernet: rvu-af: Remove slash from the driver name Sabrina Dubroca (2): xfrm: xfrm_alloc_spi shouldn't use 0 as SPI xfrm: fix offloading of cross-family tunnels Samasth Norway Ananda (1): fbcon: fix integer overflow in fbcon_do_set_font Sang-Heon Jeon (1): smb: client: fix wrong index reference in smb2_compound_op() Sasha Levin (2): Revert "drm/xe/guc: Set RCS/CCS yield policy" Revert "drm/xe/guc: Enable extended CAT error reporting" Sebastian Andrzej Siewior (3): vhost: Take a reference on the task in struct vhost_task. futex: Prevent use-after-free during requeue-PI futex: Use correct exit on failure from futex_hash_allocate_default() Sidraya Jayagond (1): net/smc: fix warning in smc_rx_splice() when calling get_page() Stefan Binding (1): ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA Stefan Metzmacher (2): smb: server: don't use delayed_work for post_recv_credits_work smb: server: use disable_work_sync in transport_rdma.c Stéphane Grosjean (1): can: peak_usb: fix shift-out-of-bounds issue Suraj Kandpal (1): drm/i915/ddi: Guard reg_val against a INVALID_TRANSCODER Sébastien Szymanski (1): HID: cp2112: fix setter callbacks return value Takashi Iwai (1): ALSA: usb-audio: Fix build with CONFIG_INPUT=n Takashi Sakamoto (1): firewire: core: fix overlooked update of subsystem ABI version Thomas Gleixner (1): x86/topology: Implement topology_is_core_online() to address SMT regression Thomas Hellström (1): drm/xe: Don't copy pinned kernel bos twice on suspend Thomas Zimmermann (1): fbcon: Fix OOB access in font allocation Trond Myklebust (2): NFS: Protect against 'eof page pollution' NFSv4.2: Protect copy offload and clone against 'eof page pollution' Vincent Mailhol (4): can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow can: hi311x: populate ndo_change_mtu() to prevent buffer overflow can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow Vlad Dogaru (1): net/mlx5: HWS, remove unused create_dest_array parameter Vladimir Oltean (2): net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port Wang Liang (2): net: tun: Update napi->skb after XDP process tracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit() Xing Guo (1): selftests/fs/mount-notify: Fix compilation failure. Xinpeng Sun (1): HID: intel-thc-hid: intel-quickspi: Add WCL Device IDs Yevgeny Kliteynik (1): net/mlx5: HWS, ignore flow level for multi-dest table Yifan Zhang (1): amd/amdkfd: correct mem limit calculation for small APUs Zabelin Nikita (1): drm/gma500: Fix null dereference in hdmi teardown Zhen Ni (1): afs: Fix potential null pointer dereference in afs_put_server noble.yang (1): ALSA: usb-audio: Add DSD support for Comtrue USB Audio device qaqland (1): ALSA: usb-audio: Add mute TLV for playback volumes on more devices

3 weeks, 6 days

1
1
0 0

Linux 6.12.50

by Greg Kroah-Hartman

I'm announcing the release of the 6.12.50 kernel. All users of the 6.12 kernel series must upgrade. The updated 6.12.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.12.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/laptops/lg-laptop.rst | 4 Makefile | 2 arch/arm/boot/dts/intel/socfpga/socfpga_cyclone5_sodia.dts | 6 arch/arm/boot/dts/marvell/kirkwood-openrd-client.dts | 2 arch/arm64/boot/dts/freescale/imx8mp.dtsi | 4 arch/arm64/boot/dts/marvell/cn9132-clearfog.dts | 16 arch/arm64/boot/dts/marvell/cn9132-sr-cex7.dtsi | 8 drivers/cpufreq/cpufreq.c | 20 drivers/firewire/core-cdev.c | 2 drivers/gpio/gpiolib.c | 21 drivers/gpu/drm/ast/ast_dp.c | 2 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 drivers/gpu/drm/i915/display/intel_backlight.c | 5 drivers/gpu/drm/panthor/panthor_sched.c | 8 drivers/hid/amd-sfh-hid/amd_sfh_client.c | 12 drivers/hid/amd-sfh-hid/amd_sfh_common.h | 3 drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 4 drivers/hid/hid-asus.c | 3 drivers/i2c/busses/i2c-designware-platdrv.c | 7 drivers/infiniband/hw/mlx5/devx.c | 1 drivers/iommu/iommufd/fault.c | 4 drivers/iommu/iommufd/main.c | 34 drivers/mmc/host/sdhci-cadence.c | 11 drivers/net/can/rcar/rcar_can.c | 8 drivers/net/can/spi/hi311x.c | 1 drivers/net/can/sun4i_can.c | 1 drivers/net/can/usb/etas_es58x/es58x_core.c | 3 drivers/net/can/usb/mcba_usb.c | 1 drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 drivers/net/dsa/lantiq_gswip.c | 21 drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 2 drivers/net/ethernet/freescale/fec_main.c | 4 drivers/net/ethernet/intel/i40e/i40e.h | 3 drivers/net/ethernet/intel/i40e/i40e_main.c | 26 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 110 +- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 3 drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 3 drivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 2 drivers/net/phy/sfp.c | 24 drivers/net/tun.c | 3 drivers/net/wireless/virtual/virt_wifi.c | 4 drivers/platform/x86/lg-laptop.c | 34 drivers/ufs/core/ufs-mcq.c | 4 drivers/usb/core/quirks.c | 2 drivers/usb/host/xhci-dbgcap.c | 2 drivers/usb/host/xhci-mem.c | 50 - drivers/usb/host/xhci.c | 2 drivers/usb/host/xhci.h | 6 drivers/video/fbdev/core/fbcon.c | 13 fs/afs/server.c | 3 fs/btrfs/volumes.c | 5 fs/hugetlbfs/inode.c | 10 fs/proc/task_mmu.c | 3 fs/smb/client/smb2inode.c | 2 fs/smb/server/transport_rdma.c | 22 include/crypto/if_alg.h | 2 include/linux/firmware/imx/sm.h | 12 include/linux/swap.h | 10 include/net/bluetooth/hci_core.h | 21 kernel/bpf/core.c | 5 kernel/bpf/verifier.c | 6 kernel/futex/requeue.c | 6 kernel/trace/trace_dynevent.c | 4 kernel/vhost_task.c | 3 mm/gup.c | 15 mm/kmsan/core.c | 10 mm/kmsan/kmsan_test.c | 16 mm/mlock.c | 6 mm/swap.c | 51 - net/bluetooth/hci_event.c | 26 net/bluetooth/hci_sync.c | 7 net/core/skbuff.c | 2 net/ipv4/nexthop.c | 7 net/smc/smc_loopback.c | 14 net/xfrm/xfrm_state.c | 3 sound/pci/hda/patch_realtek.c | 11 sound/usb/mixer_quirks.c | 545 +++++++++---- sound/usb/quirks.c | 24 sound/usb/usbaudio.h | 4 tools/testing/selftests/net/fib_nexthops.sh | 12 80 files changed, 999 insertions(+), 383 deletions(-) Adrián Larumbe (1): drm/panthor: Defer scheduler entitiy destruction to queue release Aleksander Jan Bajkowski (1): net: sfp: add quirk for FLYPRO copper SFP+ module Alok Tiwari (2): scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE bnxt_en: correct offset handling for IPv6 destination address Amit Chaudhari (1): HID: asus: add support for missing PX series fn keys Basavaraj Natikar (1): HID: amd_sfh: Add sync across amd sfh work functions Benoît Monin (1): mmc: sdhci-cadence: add Mobileye eyeQ support Chen Ni (1): ALSA: usb-audio: Convert comma to semicolon Chris Morgan (1): net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick Christian Loehle (1): cpufreq: Initialize cpufreq-based invariance before subsys Cristian Ciocaltea (7): ALSA: usb-audio: Fix code alignment in mixer_quirks ALSA: usb-audio: Fix block comments in mixer_quirks ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks ALSA: usb-audio: Avoid multiple assignments in mixer_quirks ALSA: usb-audio: Simplify NULL comparison in mixer_quirks ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 Cryolitia PukNgae (1): ALSA: usb-audio: move mixer_quirks' min_mute into common quirk Dan Carpenter (1): octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() Daniel Lee (1): platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() Eric Biggers (2): crypto: af_alg - Fix incorrect boolean values in af_alg_ctx kmsan: fix out-of-bounds access to shadow memory Geert Uytterhoeven (1): can: rcar_can: rcar_can_resume(): fix s2ram with PSCI Greg Kroah-Hartman (1): Linux 6.12.50 Guenter Roeck (1): drm/i915/backlight: Return immediately when scale() finds invalid parameters Hans de Goede (1): gpiolib: Extend software-node support to support secondary software-nodes Heikki Krogerus (1): i2c: designware: Add quirk for Intel Xe Hugh Dickins (3): mm/gup: local lru_add_drain() to avoid lru_add_drain_all() mm: revert "mm/gup: clear the LRU flag of a page before adding to LRU batch" mm: folio_may_be_lru_cached() unless folio_test_large() Ido Schimmel (2): nexthop: Forbid FDB status change while nexthop is in a group selftests: fib_nexthops: Fix creation of non-FDB nexthops Jakub Acs (1): fs/proc/task_mmu: check p->vec_buf for NULL James Guan (1): wifi: virt_wifi: Fix page fault on connect Jason Baron (1): net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS Jason Gunthorpe (1): iommufd: Fix race during abort for file descriptors Jiayi Li (1): usb: core: Add 0x prefix to quirks debug output Jihed Chaibi (1): ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients Jinjiang Tu (1): mm/hugetlb: fix folio is still mapped when deleted Jiri Olsa (1): bpf: Check the helper function is valid in get_helper_proto Josua Mayer (2): arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports Leon Hwang (1): bpf: Reject bpf_timer for PREEMPT_RT Luiz Augusto von Dentz (2): Bluetooth: hci_sync: Fix hci_resume_advertising_sync Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync Lukasz Czapnik (8): i40e: add validation for ring_len param i40e: fix idx validation in i40e_validate_queue_map i40e: fix idx validation in config queues msg i40e: fix input validation logic for action_meta i40e: fix validation of VF state in get resources i40e: add max boundary check for VF filters i40e: add mask to apply valid bits for itr_idx i40e: improve VF MAC filters accounting Marc Kleine-Budde (1): net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info Mark Harmstone (1): btrfs: don't allow adding block device of less than 1 MB Masami Hiramatsu (Google) (1): tracing: dynevent: Add a missing lockdown check on dynevent Niklas Neronin (1): Revert "usb: xhci: remove option to change a default ring's TRB cycle bit" Nirmoy Das (1): drm/ast: Use msleep instead of mdelay for edid read Nobuhiro Iwamatsu (1): ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address Or Har-Toov (1): IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions Peng Fan (2): firmware: imx: Add stub functions for SCMI MISC API arm64: dts: imx8mp: Correct thermal sensor index Petr Malat (1): ethernet: rvu-af: Remove slash from the driver name Sabrina Dubroca (1): xfrm: xfrm_alloc_spi shouldn't use 0 as SPI Samasth Norway Ananda (1): fbcon: fix integer overflow in fbcon_do_set_font Sang-Heon Jeon (1): smb: client: fix wrong index reference in smb2_compound_op() Sebastian Andrzej Siewior (2): vhost: Take a reference on the task in struct vhost_task. futex: Prevent use-after-free during requeue-PI Sidraya Jayagond (1): net/smc: fix warning in smc_rx_splice() when calling get_page() Stefan Binding (1): ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA Stefan Metzmacher (2): smb: server: don't use delayed_work for post_recv_credits_work smb: server: use disable_work_sync in transport_rdma.c Stéphane Grosjean (1): can: peak_usb: fix shift-out-of-bounds issue Takashi Iwai (1): ALSA: usb-audio: Fix build with CONFIG_INPUT=n Takashi Sakamoto (1): firewire: core: fix overlooked update of subsystem ABI version Thomas Zimmermann (1): fbcon: Fix OOB access in font allocation Vincent Mailhol (4): can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow can: hi311x: populate ndo_change_mtu() to prevent buffer overflow can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow Vladimir Oltean (2): net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port Wang Liang (1): net: tun: Update napi->skb after XDP process Zabelin Nikita (1): drm/gma500: Fix null dereference in hdmi teardown Zhen Ni (1): afs: Fix potential null pointer dereference in afs_put_server noble.yang (1): ALSA: usb-audio: Add DSD support for Comtrue USB Audio device qaqland (1): ALSA: usb-audio: Add mute TLV for playback volumes on more devices

3 weeks, 6 days

1
1
0 0

Linux 6.6.109

by Greg Kroah-Hartman

I'm announcing the release of the 6.6.109 kernel. All users of the 6.6 kernel series must upgrade. The updated 6.6.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/boot/dts/intel/socfpga/socfpga_cyclone5_sodia.dts | 6 arch/arm/boot/dts/marvell/kirkwood-openrd-client.dts | 2 arch/arm/mach-bcm/Kconfig | 1 arch/arm64/boot/dts/freescale/imx8mp.dtsi | 4 arch/s390/kernel/perf_cpum_cf.c | 4 arch/um/drivers/mconsole_user.c | 2 drivers/block/loop.c | 40 + drivers/cpufreq/cpufreq.c | 20 drivers/edac/skx_common.h | 1 drivers/firewire/core-cdev.c | 2 drivers/gpio/gpiolib.c | 19 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c | 2 drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppevvmath.h | 14 drivers/gpu/drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 3 drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 3 drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c | 2 drivers/gpu/drm/ast/ast_dp.c | 2 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 drivers/gpu/drm/i915/display/intel_backlight.c | 5 drivers/gpu/drm/radeon/evergreen_cs.c | 2 drivers/hid/hid-asus.c | 3 drivers/hwmon/adt7475.c | 24 drivers/i2c/busses/i2c-designware-platdrv.c | 7 drivers/infiniband/hw/mlx5/devx.c | 1 drivers/input/touchscreen/cyttsp4_core.c | 2 drivers/irqchip/irq-sun6i-r.c | 2 drivers/media/dvb-frontends/stv0367_priv.h | 3 drivers/mmc/host/sdhci-cadence.c | 11 drivers/net/can/rcar/rcar_can.c | 8 drivers/net/can/spi/hi311x.c | 1 drivers/net/can/sun4i_can.c | 1 drivers/net/can/usb/etas_es58x/es58x_core.c | 3 drivers/net/can/usb/etas_es58x/es58x_devlink.c | 2 drivers/net/can/usb/mcba_usb.c | 1 drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 drivers/net/dsa/lantiq_gswip.c | 37 - drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 2 drivers/net/ethernet/intel/i40e/i40e.h | 4 drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 25 drivers/net/ethernet/intel/i40e/i40e_main.c | 26 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 110 ++- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 3 drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 3 drivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 2 drivers/net/fjes/fjes_main.c | 4 drivers/net/wireless/virtual/virt_wifi.c | 4 drivers/nfc/pn544/i2c.c | 2 drivers/platform/x86/sony-laptop.c | 1 drivers/scsi/isci/init.c | 6 drivers/staging/media/atomisp/pci/hive_isp_css_include/math_support.h | 5 drivers/ufs/core/ufs-mcq.c | 4 drivers/usb/core/quirks.c | 2 drivers/video/fbdev/core/fbcon.c | 13 fs/afs/server.c | 3 fs/btrfs/tree-checker.c | 2 fs/hugetlbfs/inode.c | 10 fs/smb/client/smb2inode.c | 2 fs/smb/server/transport_rdma.c | 18 include/crypto/if_alg.h | 2 include/linux/compiler.h | 9 include/linux/minmax.h | 220 ++++--- include/linux/mm.h | 55 + include/linux/swap.h | 10 include/net/bluetooth/hci_core.h | 21 kernel/bpf/verifier.c | 4 kernel/futex/requeue.c | 6 kernel/trace/preemptirq_delay_test.c | 2 kernel/trace/trace_dynevent.c | 4 kernel/vhost_task.c | 3 lib/btree.c | 1 lib/decompress_unlzma.c | 2 lib/vsprintf.c | 2 mm/gup.c | 28 mm/kmsan/core.c | 10 mm/kmsan/kmsan_test.c | 16 mm/migrate_device.c | 42 - mm/mlock.c | 6 mm/swap.c | 4 mm/zsmalloc.c | 2 net/bluetooth/hci_event.c | 26 net/bluetooth/hci_sync.c | 7 net/core/skbuff.c | 2 net/ipv4/nexthop.c | 7 net/xfrm/xfrm_state.c | 3 sound/usb/mixer_quirks.c | 295 +++++++++- sound/usb/quirks.c | 24 sound/usb/usbaudio.h | 4 tools/testing/selftests/mm/mremap_test.c | 2 tools/testing/selftests/net/fib_nexthops.sh | 12 tools/testing/selftests/seccomp/seccomp_bpf.c | 2 93 files changed, 984 insertions(+), 350 deletions(-) Alok Tiwari (2): scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE bnxt_en: correct offset handling for IPv6 destination address Amit Chaudhari (1): HID: asus: add support for missing PX series fn keys Benoît Monin (1): mmc: sdhci-cadence: add Mobileye eyeQ support Chen Ni (1): ALSA: usb-audio: Convert comma to semicolon Christian Loehle (1): cpufreq: Initialize cpufreq-based invariance before subsys Cristian Ciocaltea (6): ALSA: usb-audio: Fix block comments in mixer_quirks ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks ALSA: usb-audio: Avoid multiple assignments in mixer_quirks ALSA: usb-audio: Simplify NULL comparison in mixer_quirks ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 Cryolitia PukNgae (1): ALSA: usb-audio: move mixer_quirks' min_mute into common quirk Dan Carpenter (1): octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() David Hildenbrand (2): mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() David Laight (7): minmax.h: add whitespace around operators and after commas minmax.h: update some comments minmax.h: reduce the #define expansion of min(), max() and clamp() minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() minmax.h: move all the clamp() definitions after the min/max() ones minmax.h: simplify the variants of clamp() minmax.h: remove some #defines that are only expanded once Eric Biggers (2): crypto: af_alg - Fix incorrect boolean values in af_alg_ctx kmsan: fix out-of-bounds access to shadow memory Florian Fainelli (1): ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB Geert Uytterhoeven (1): can: rcar_can: rcar_can_resume(): fix s2ram with PSCI Greg Kroah-Hartman (1): Linux 6.6.109 Guenter Roeck (1): drm/i915/backlight: Return immediately when scale() finds invalid parameters Hans de Goede (1): gpiolib: Extend software-node support to support secondary software-nodes Heikki Krogerus (1): i2c: designware: Add quirk for Intel Xe Hugh Dickins (3): mm/gup: check ref_count instead of lru before migration mm/gup: local lru_add_drain() to avoid lru_add_drain_all() mm: folio_may_be_lru_cached() unless folio_test_large() Ido Schimmel (2): nexthop: Forbid FDB status change while nexthop is in a group selftests: fib_nexthops: Fix creation of non-FDB nexthops James Guan (1): wifi: virt_wifi: Fix page fault on connect Jan Kara (1): loop: Avoid updating block size under exclusive owner Jason Baron (1): net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS Jiayi Li (1): usb: core: Add 0x prefix to quirks debug output Jihed Chaibi (1): ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients Jinjiang Tu (1): mm/hugetlb: fix folio is still mapped when deleted Justin Bronder (1): i40e: increase max descriptors for XL710 Kefeng Wang (1): mm: migrate_device: use more folio in migrate_device_finalize() Leon Hwang (1): bpf: Reject bpf_timer for PREEMPT_RT Linus Torvalds (5): minmax: make generic MIN() and MAX() macros available everywhere minmax: simplify min()/max()/clamp() implementation minmax: don't use max() in situations that want a C constant expression minmax: improve macro expansion and type checking minmax: fix up min3() and max3() too Luiz Augusto von Dentz (2): Bluetooth: hci_sync: Fix hci_resume_advertising_sync Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync Lukasz Czapnik (8): i40e: fix idx validation in i40e_validate_queue_map i40e: fix idx validation in config queues msg i40e: fix input validation logic for action_meta i40e: fix validation of VF state in get resources i40e: add max boundary check for VF filters i40e: add mask to apply valid bits for itr_idx i40e: improve VF MAC filters accounting i40e: add validation for ring_len param Martin Schiller (1): net: dsa: lantiq_gswip: do also enable or disable cpu port Masami Hiramatsu (Google) (1): tracing: dynevent: Add a missing lockdown check on dynevent Nathan Chancellor (1): s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b Nirmoy Das (1): drm/ast: Use msleep instead of mdelay for edid read Nobuhiro Iwamatsu (1): ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address Or Har-Toov (1): IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions Peng Fan (1): arm64: dts: imx8mp: Correct thermal sensor index Petr Malat (1): ethernet: rvu-af: Remove slash from the driver name Sabrina Dubroca (1): xfrm: xfrm_alloc_spi shouldn't use 0 as SPI Samasth Norway Ananda (1): fbcon: fix integer overflow in fbcon_do_set_font Sang-Heon Jeon (1): smb: client: fix wrong index reference in smb2_compound_op() Sebastian Andrzej Siewior (2): vhost: Take a reference on the task in struct vhost_task. futex: Prevent use-after-free during requeue-PI Shivank Garg (1): mm: add folio_expected_ref_count() for reference count calculation Stefan Metzmacher (1): smb: server: don't use delayed_work for post_recv_credits_work Stéphane Grosjean (1): can: peak_usb: fix shift-out-of-bounds issue Takashi Iwai (1): ALSA: usb-audio: Fix build with CONFIG_INPUT=n Takashi Sakamoto (1): firewire: core: fix overlooked update of subsystem ABI version Thomas Zimmermann (1): fbcon: Fix OOB access in font allocation Vincent Mailhol (4): can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow can: hi311x: populate ndo_change_mtu() to prevent buffer overflow can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow Vladimir Oltean (2): net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port Zabelin Nikita (1): drm/gma500: Fix null dereference in hdmi teardown Zhen Ni (1): afs: Fix potential null pointer dereference in afs_put_server noble.yang (1): ALSA: usb-audio: Add DSD support for Comtrue USB Audio device qaqland (1): ALSA: usb-audio: Add mute TLV for playback volumes on more devices

3 weeks, 6 days

1
1
0 0

Linux 6.1.155

by Greg Kroah-Hartman

I'm announcing the release of the 6.1.155 kernel. All users of the 6.1 kernel series must upgrade. The updated 6.1.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/mm/pageattr.c | 6 arch/arm64/boot/dts/freescale/imx8mp.dtsi | 4 arch/s390/kernel/perf_cpum_cf.c | 4 arch/um/drivers/mconsole_user.c | 2 arch/x86/mm/pgtable.c | 2 drivers/cpufreq/cpufreq.c | 20 drivers/edac/sb_edac.c | 4 drivers/edac/skx_common.h | 1 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c | 2 drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppevvmath.h | 14 drivers/gpu/drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 3 drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 3 drivers/gpu/drm/arm/display/include/malidp_utils.h | 2 drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c | 24 drivers/gpu/drm/ast/ast_dp.c | 2 drivers/gpu/drm/drm_color_mgmt.c | 2 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 drivers/gpu/drm/i915/display/intel_backlight.c | 5 drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 6 drivers/gpu/drm/radeon/evergreen_cs.c | 2 drivers/hwmon/adt7475.c | 24 drivers/infiniband/hw/mlx5/devx.c | 1 drivers/md/dm-integrity.c | 2 drivers/media/dvb-frontends/stv0367_priv.h | 3 drivers/net/can/rcar/rcar_can.c | 8 drivers/net/can/spi/hi311x.c | 1 drivers/net/can/sun4i_can.c | 1 drivers/net/can/usb/etas_es58x/es581_4.c | 4 drivers/net/can/usb/etas_es58x/es58x_core.c | 7 drivers/net/can/usb/etas_es58x/es58x_core.h | 8 drivers/net/can/usb/etas_es58x/es58x_fd.c | 4 drivers/net/can/usb/mcba_usb.c | 1 drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 drivers/net/dsa/lantiq_gswip.c | 37 - drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 2 drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 18 drivers/net/ethernet/intel/i40e/i40e.h | 4 drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 25 drivers/net/ethernet/intel/i40e/i40e_main.c | 26 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 110 ++- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 3 drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 3 drivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 2 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 2 drivers/net/fjes/fjes_main.c | 4 drivers/nfc/pn544/i2c.c | 2 drivers/platform/x86/sony-laptop.c | 1 drivers/scsi/isci/init.c | 6 drivers/staging/media/atomisp/pci/hive_isp_css_include/math_support.h | 5 drivers/usb/core/quirks.c | 2 drivers/video/fbdev/core/fbcon.c | 13 drivers/virt/acrn/ioreq.c | 4 fs/afs/server.c | 3 fs/btrfs/misc.h | 2 fs/ext2/balloc.c | 2 fs/ext4/ext4.h | 2 fs/hugetlbfs/inode.c | 10 fs/smb/server/transport_rdma.c | 18 fs/ufs/util.h | 6 include/crypto/if_alg.h | 2 include/linux/minmax.h | 122 +++- include/linux/mm.h | 54 + include/linux/pageblock-flags.h | 2 include/linux/swap.h | 10 include/net/bluetooth/hci_core.h | 21 kernel/bpf/verifier.c | 4 kernel/futex/requeue.c | 6 kernel/trace/preemptirq_delay_test.c | 2 kernel/trace/trace_dynevent.c | 4 lib/btree.c | 1 lib/decompress_unlzma.c | 2 lib/logic_pio.c | 3 mm/gup.c | 28 mm/kmsan/core.c | 10 mm/kmsan/kmsan_test.c | 16 mm/migrate_device.c | 42 - mm/mlock.c | 2 mm/swap.c | 4 mm/zsmalloc.c | 1 net/bluetooth/hci_event.c | 26 net/bluetooth/hci_sync.c | 7 net/ipv4/nexthop.c | 7 net/ipv4/proc.c | 2 net/ipv6/proc.c | 2 net/netfilter/nf_nat_core.c | 6 net/tipc/core.h | 2 net/tipc/link.c | 10 sound/usb/mixer_quirks.c | 295 +++++++++- sound/usb/quirks.c | 24 sound/usb/usbaudio.h | 4 tools/testing/selftests/bpf/progs/get_branch_snapshot.c | 4 tools/testing/selftests/net/fib_nexthops.sh | 12 tools/testing/selftests/seccomp/seccomp_bpf.c | 2 tools/testing/selftests/vm/mremap_test.c | 2 97 files changed, 910 insertions(+), 325 deletions(-) Alok Tiwari (1): bnxt_en: correct offset handling for IPv6 destination address Andy Shevchenko (1): minmax: deduplicate __unconst_integer_typeof() Chen Ni (1): ALSA: usb-audio: Convert comma to semicolon Christian Loehle (1): cpufreq: Initialize cpufreq-based invariance before subsys Cristian Ciocaltea (6): ALSA: usb-audio: Fix block comments in mixer_quirks ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks ALSA: usb-audio: Avoid multiple assignments in mixer_quirks ALSA: usb-audio: Simplify NULL comparison in mixer_quirks ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 Cryolitia PukNgae (1): ALSA: usb-audio: move mixer_quirks' min_mute into common quirk Dan Carpenter (1): octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() David Hildenbrand (2): mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() David Laight (1): minmax: fix indentation of __cmp_once() and __clamp_once() Eric Biggers (2): crypto: af_alg - Fix incorrect boolean values in af_alg_ctx kmsan: fix out-of-bounds access to shadow memory Geert Uytterhoeven (1): can: rcar_can: rcar_can_resume(): fix s2ram with PSCI Greg Kroah-Hartman (1): Linux 6.1.155 Guenter Roeck (1): drm/i915/backlight: Return immediately when scale() finds invalid parameters Herve Codina (1): minmax: Introduce {min,max}_array() Hugh Dickins (3): mm/gup: check ref_count instead of lru before migration mm/gup: local lru_add_drain() to avoid lru_add_drain_all() mm: folio_may_be_lru_cached() unless folio_test_large() Ido Schimmel (2): nexthop: Forbid FDB status change while nexthop is in a group selftests: fib_nexthops: Fix creation of non-FDB nexthops Jiayi Li (1): usb: core: Add 0x prefix to quirks debug output Jinjiang Tu (1): mm/hugetlb: fix folio is still mapped when deleted Justin Bronder (1): i40e: increase max descriptors for XL710 Kefeng Wang (1): mm: migrate_device: use more folio in migrate_device_finalize() Leon Hwang (1): bpf: Reject bpf_timer for PREEMPT_RT Linus Torvalds (4): minmax: avoid overly complicated constant expressions in VM code minmax: make generic MIN() and MAX() macros available everywhere minmax: add a few more MIN_T/MAX_T users minmax: simplify and clarify min_t()/max_t() implementation Luiz Augusto von Dentz (2): Bluetooth: hci_sync: Fix hci_resume_advertising_sync Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync Lukasz Czapnik (8): i40e: fix idx validation in i40e_validate_queue_map i40e: fix input validation logic for action_meta i40e: add max boundary check for VF filters i40e: add mask to apply valid bits for itr_idx i40e: improve VF MAC filters accounting i40e: fix validation of VF state in get resources i40e: fix idx validation in config queues msg i40e: add validation for ring_len param Martin Schiller (1): net: dsa: lantiq_gswip: do also enable or disable cpu port Masami Hiramatsu (Google) (1): tracing: dynevent: Add a missing lockdown check on dynevent Matthew Wilcox (Oracle) (1): minmax: add in_range() macro Nathan Chancellor (1): s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b Nirmoy Das (1): drm/ast: Use msleep instead of mdelay for edid read Or Har-Toov (1): IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions Peng Fan (1): arm64: dts: imx8mp: Correct thermal sensor index Petr Malat (1): ethernet: rvu-af: Remove slash from the driver name Samasth Norway Ananda (1): fbcon: fix integer overflow in fbcon_do_set_font Sebastian Andrzej Siewior (1): futex: Prevent use-after-free during requeue-PI Shivank Garg (1): mm: add folio_expected_ref_count() for reference count calculation Stefan Metzmacher (1): smb: server: don't use delayed_work for post_recv_credits_work Stéphane Grosjean (1): can: peak_usb: fix shift-out-of-bounds issue Takashi Iwai (1): ALSA: usb-audio: Fix build with CONFIG_INPUT=n Thomas Zimmermann (1): fbcon: Fix OOB access in font allocation Vincent Mailhol (5): can: etas_es58x: sort the includes by alphabetic order can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow can: hi311x: populate ndo_change_mtu() to prevent buffer overflow can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow Vladimir Oltean (2): net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port Zabelin Nikita (1): drm/gma500: Fix null dereference in hdmi teardown Zhen Ni (1): afs: Fix potential null pointer dereference in afs_put_server noble.yang (1): ALSA: usb-audio: Add DSD support for Comtrue USB Audio device qaqland (1): ALSA: usb-audio: Add mute TLV for playback volumes on more devices

3 weeks, 6 days

1
1
0 0

Linux 5.15.194

by Greg Kroah-Hartman

I'm announcing the release of the 5.15.194 kernel. All users of the 5.15 kernel series must upgrade. The updated 5.15.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/serial/brcm,bcm7271-uart.yaml | 2 Makefile | 2 arch/arm64/boot/dts/freescale/imx8mp.dtsi | 4 arch/um/drivers/virtio_uml.c | 6 arch/x86/kvm/cpuid.c | 31 - arch/x86/kvm/svm/svm.c | 3 crypto/af_alg.c | 7 drivers/cpufreq/cpufreq.c | 20 drivers/dma/qcom/bam_dma.c | 8 drivers/dma/ti/edma.c | 4 drivers/edac/altera_edac.c | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 drivers/gpu/drm/bridge/analogix/anx7625.c | 6 drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 6 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 drivers/gpu/drm/i915/display/intel_backlight.c | 5 drivers/gpu/drm/i915/display/intel_display_power.c | 6 drivers/infiniband/hw/mlx5/devx.c | 1 drivers/input/serio/i8042-acpipnpio.h | 14 drivers/media/i2c/imx214.c | 27 drivers/media/platform/mtk-vcodec/venc/venc_h264_if.c | 6 drivers/mmc/host/mvsdio.c | 2 drivers/mtd/nand/raw/atmel/nand-controller.c | 18 drivers/mtd/nand/raw/stm32_fmc2_nand.c | 48 - drivers/net/can/dev/bittiming.c | 15 drivers/net/can/dev/dev.c | 50 + drivers/net/can/rcar/rcar_can.c | 8 drivers/net/can/spi/hi311x.c | 1 drivers/net/can/sun4i_can.c | 1 drivers/net/can/usb/etas_es58x/es581_4.c | 9 drivers/net/can/usb/etas_es58x/es58x_core.c | 16 drivers/net/can/usb/etas_es58x/es58x_core.h | 8 drivers/net/can/usb/etas_es58x/es58x_fd.c | 16 drivers/net/can/usb/mcba_usb.c | 1 drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 drivers/net/can/xilinx_can.c | 16 drivers/net/dsa/lantiq_gswip.c | 37 - drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 2 drivers/net/ethernet/broadcom/cnic.c | 3 drivers/net/ethernet/cavium/liquidio/request_manager.c | 2 drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 drivers/net/ethernet/freescale/fec_main.c | 3 drivers/net/ethernet/intel/i40e/i40e.h | 1 drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 25 drivers/net/ethernet/intel/i40e/i40e_main.c | 10 drivers/net/ethernet/intel/i40e/i40e_txrx.c | 3 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 45 + drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 3 drivers/net/ethernet/intel/igb/igb_ethtool.c | 5 drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 3 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 2 drivers/net/ethernet/natsemi/ns83820.c | 13 drivers/net/ethernet/qlogic/qed/qed_debug.c | 7 drivers/pcmcia/omap_cf.c | 8 drivers/phy/broadcom/phy-bcm-ns-usb3.c | 9 drivers/phy/marvell/phy-berlin-usb.c | 7 drivers/phy/ralink/phy-ralink-usb.c | 10 drivers/phy/rockchip/phy-rockchip-pcie.c | 11 drivers/phy/rockchip/phy-rockchip-usb.c | 10 drivers/phy/tegra/xusb-tegra210.c | 6 drivers/phy/ti/phy-omap-control.c | 9 drivers/phy/ti/phy-omap-usb2.c | 24 drivers/phy/ti/phy-ti-pipe3.c | 27 drivers/power/supply/bq27xxx_battery.c | 4 drivers/regulator/sy7636a-regulator.c | 7 drivers/soc/qcom/mdt_loader.c | 12 drivers/tty/hvc/hvc_console.c | 6 drivers/tty/serial/sc16is7xx.c | 14 drivers/usb/core/quirks.c | 2 drivers/usb/gadget/udc/dummy_hcd.c | 25 drivers/usb/host/xhci-dbgcap.c | 94 ++- drivers/usb/serial/option.c | 17 drivers/video/fbdev/core/fbcon.c | 13 drivers/video/fbdev/core/fbmem.c | 12 fs/btrfs/tree-checker.c | 4 fs/fuse/file.c | 5 fs/hugetlbfs/inode.c | 14 fs/ksmbd/transport_rdma.c | 17 fs/nfs/client.c | 2 fs/nfs/flexfilelayout/flexfilelayout.c | 21 fs/nfs/nfs4proc.c | 6 fs/nilfs2/sysfs.c | 4 fs/nilfs2/sysfs.h | 8 fs/ocfs2/extent_map.c | 10 fs/xfs/xfs_fsops.c | 4 include/crypto/if_alg.h | 10 include/linux/can/bittiming.h | 69 +- include/linux/can/dev.h | 8 include/linux/compiler-clang.h | 29 - include/linux/interrupt.h | 53 + include/linux/pgalloc.h | 29 + include/linux/pgtable.h | 13 include/net/sock.h | 40 + include/uapi/linux/can/netlink.h | 2 kernel/bpf/verifier.c | 4 kernel/cgroup/cgroup.c | 43 + kernel/irq/manage.c | 8 kernel/time/hrtimer.c | 50 - kernel/trace/trace.c | 4 kernel/trace/trace_dynevent.c | 4 kernel/trace/trace_events_synth.c | 2 lib/test_kasan.c | 1 mm/kasan/init.c | 12 mm/khugepaged.c | 2 mm/memory-failure.c | 7 mm/migrate.c | 12 mm/rmap.c | 2 mm/sparse-vmemmap.c | 6 net/can/j1939/bus.c | 5 net/can/j1939/socket.c | 3 net/ceph/messenger.c | 7 net/core/sock.c | 5 net/hsr/hsr_device.c | 163 +++++ net/hsr/hsr_main.c | 4 net/hsr/hsr_main.h | 4 net/hsr/hsr_slave.c | 18 net/ipv4/ip_tunnel_core.c | 6 net/ipv4/nexthop.c | 7 net/ipv4/tcp.c | 5 net/ipv4/tcp_bpf.c | 5 net/mac80211/driver-ops.h | 2 net/mptcp/protocol.c | 15 net/mptcp/sockopt.c | 11 net/mptcp/subflow.c | 3 net/rds/ib_frmr.c | 20 net/rfkill/rfkill-gpio.c | 22 net/unix/af_unix.c | 15 sound/firewire/motu/motu-hwdep.c | 2 sound/soc/codecs/wm8940.c | 2 sound/soc/codecs/wm8974.c | 8 sound/soc/sof/intel/hda-stream.c | 2 sound/usb/mixer_quirks.c | 285 +++++++++- tools/testing/selftests/net/fib_nexthops.sh | 12 133 files changed, 1468 insertions(+), 535 deletions(-) Alan Stern (1): USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels Alex Deucher (1): drm/amdgpu: fix a memory leak in fence cleanup when unloading Alexander Dahl (1): mtd: nand: raw: atmel: Fix comment in timings preparation Alexander Sverdlin (1): mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing Alexey Nepomnyashih (1): net: liquidio: fix overflow in octeon_init_instr_queue() Alok Tiwari (1): bnxt_en: correct offset handling for IPv6 destination address Anders Roxell (1): dmaengine: ti: edma: Fix memory allocation size for queue_priority_map Andreas Kemnade (1): regulator: sy7636a: fix lifecycle of power good gpio André Apitzsch (1): media: i2c: imx214: Fix link frequency validation Anssi Hannula (1): can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB Antoine Tenart (1): tunnels: reset the GSO metadata before reusing the skb Arnd Bergmann (1): media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning Bjorn Andersson (1): soc: qcom: mdt_loader: Deal with zero e_shentsize Boris Ostrovsky (1): KVM: SVM: Return TSA_SQ_NO and TSA_L1_NO bits in __do_cpuid_func() Borislav Petkov (AMD) (1): KVM: SVM: Set synthesized TSA CPUID flags Brett A C Sheffield (1): Revert "fbdev: Disable sysfb device registration when removing conflicting FBs" Charles Keepax (2): ASoC: wm8940: Correct typo in control name ASoC: wm8974: Correct PLL rate rounding Chen Ni (1): ALSA: usb-audio: Convert comma to semicolon Chen Ridong (1): cgroup: split cgroup_destroy_wq into 3 workqueues Christian Loehle (1): cpufreq: Initialize cpufreq-based invariance before subsys Christoffer Sandberg (1): Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table Christophe Kerello (2): mtd: rawnand: stm32_fmc2: fix ECC overwrite mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer Colin Ian King (1): ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message Cristian Ciocaltea (6): ALSA: usb-audio: Fix block comments in mixer_quirks ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks ALSA: usb-audio: Avoid multiple assignments in mixer_quirks ALSA: usb-audio: Simplify NULL comparison in mixer_quirks ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 David Hildenbrand (2): mm/rmap: reject hugetlb folios in folio_make_device_exclusive() mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() Duoming Zhou (1): cnic: Fix use-after-free bugs in cnic_delete_task Eric Biggers (1): crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Eric Sandeen (1): xfs: short circuit xfs_growfs_data_private() if delta is zero Fabian Vogt (1): tty: hvc_console: Call hvc_kick in hvc_write unconditionally Fabio Porcedda (2): USB: serial: option: add Telit Cinterion FN990A w/audio compositions USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions Geert Uytterhoeven (2): pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch can: rcar_can: rcar_can_resume(): fix s2ram with PSCI Greg Kroah-Hartman (1): Linux 5.15.194 Guenter Roeck (1): drm/i915/backlight: Return immediately when scale() finds invalid parameters H. Nikolaus Schaller (2): power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery power: supply: bq27xxx: restrict no-battery detection to bq27000 Hangbin Liu (2): hsr: use rtnl lock when iterating over ports hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr Hans de Goede (1): net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer Harry Yoo (1): mm: introduce and use {pgd,p4d}_populate_kernel() Herbert Xu (1): crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Hugo Villeneuve (1): serial: sc16is7xx: fix bug in flow control levels init Håkon Bugge (1): rds: ib: Increment i_fastreg_wrs before bailing out Ido Schimmel (2): nexthop: Forbid FDB status change while nexthop is in a group selftests: fib_nexthops: Fix creation of non-FDB nexthops Ilya Dryomov (1): libceph: fix invalid accesses to ceph_connection_v1_info Ioana Ciornei (1): dpaa2-switch: fix buffer pool seeding for control traffic Jack Wang (1): mtd: rawnand: stm32_fmc2: Fix dma_map_sg error check Jakob Koschel (1): usb: gadget: dummy_hcd: remove usage of list iterator past the loop body Jamie Bainbridge (1): qed: Don't collect too many protection override GRC elements Jani Nikula (1): drm/i915/power: fix size for for_each_set_bit() in abox iteration Jiapeng Chong (2): hrtimer: Remove unused function hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active() Jiayi Li (1): usb: core: Add 0x prefix to quirks debug output Jinjiang Tu (1): mm/hugetlb: fix folio is still mapped when deleted Johan Hovold (3): phy: tegra: xusb: fix device and OF node leak at probe phy: ti-pipe3: fix device leak at unbind phy: ti: omap-usb2: fix device leak at unbind Jonathan Curley (1): NFSv4/flexfiles: Fix layout merge mirror check. Justin Bronder (1): i40e: increase max descriptors for XL710 Kim Phillips (1): KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code Kohei Enju (1): igb: fix link test skipping when interface is admin down Krister Johansen (1): mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN Krzysztof Kozlowski (2): dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning Kuniyuki Iwashima (4): net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). af_unix: Don't leave consecutive consumed OOB skbs. Leon Hwang (1): bpf: Reject bpf_timer for PREEMPT_RT Liao Yuanhong (1): wifi: mac80211: fix incorrect type for ret Loic Poulain (1): drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ Lukasz Czapnik (7): i40e: fix idx validation in i40e_validate_queue_map i40e: fix input validation logic for action_meta i40e: add max boundary check for VF filters i40e: add mask to apply valid bits for itr_idx i40e: fix validation of VF state in get resources i40e: fix idx validation in config queues msg i40e: add validation for ring_len param Luo Gengkun (1): tracing: Fix tracing_marker may trigger page fault during preempt_disable Maciej Fijalkowski (1): i40e: remove redundant memory barrier when cleaning Tx descs Maciej S. Szmigiero (1): KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active Mark Tinguely (1): ocfs2: fix recursive semaphore deadlock in fiemap call Martin Schiller (1): net: dsa: lantiq_gswip: do also enable or disable cpu port Masami Hiramatsu (Google) (1): tracing: dynevent: Add a missing lockdown check on dynevent Mathias Nyman (2): xhci: dbc: decouple endpoint allocation from initialization xhci: dbc: Fix full DbC transfer ring after several reconnects Matthieu Baerts (NGI0) (2): mptcp: set remote_deny_join_id0 on SYN recv mptcp: propagate shutdown to subflows when possible Miaohe Lin (1): mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory Miaoqian Lin (1): um: virtio_uml: Fix use-after-free after put_device in probe Michal Schmidt (1): i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path Miklos Szeredi (2): fuse: check if copy_file_range() returns larger than requested size fuse: prevent overflow in copy_file_range return value Murali Karicheri (2): net: hsr: Add support for MC filtering at the slave device net: hsr: Add VLAN CTAG filter support Namjae Jeon (1): ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer Nathan Chancellor (2): compiler-clang.h: define __SANITIZE_*__ macros only when undefined nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* Nitesh Narayan Lal (1): i40e: Use irq_update_affinity_hint() Or Har-Toov (1): IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions Peng Fan (1): arm64: dts: imx8mp: Correct thermal sensor index Petr Malat (1): ethernet: rvu-af: Remove slash from the driver name Philipp Zabel (1): net: rfkill: gpio: add DT support Qi Xi (1): drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path Qu Wenruo (1): btrfs: tree-checker: fix the incorrect inode ref size check Ravi Gunasekaran (2): net: hsr: Disable promiscuous mode in offload mode net: hsr: hsr_slave: Fix the promiscuous mode in offload mode Rob Herring (1): phy: Use device_get_match_data() Salah Triki (1): EDAC/altera: Delete an inappropriate dma_free_coherent() call Samasth Norway Ananda (1): fbcon: fix integer overflow in fbcon_do_set_font Stefan Wahren (1): net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() Stephan Gerhold (1): dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees Steven Rostedt (1): tracing: Do not add length to print format in synthetic events Stéphane Grosjean (1): can: peak_usb: fix shift-out-of-bounds issue Takashi Iwai (1): ALSA: usb-audio: Fix build with CONFIG_INPUT=n Takashi Sakamoto (1): ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported Tariq Toukan (1): Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" Tetsuo Handa (2): can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails Thomas Fourier (1): mmc: mvsdio: Fix dma_unmap_sg() nents value Thomas Gleixner (1): genirq: Provide new interfaces for affinity hints Thomas Zimmermann (1): fbcon: Fix OOB access in font allocation Tigran Mkrtchyan (1): flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read Trond Myklebust (3): NFSv4: Don't clear capabilities that won't be reset NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server Vincent Mailhol (10): can: bittiming: allow TDC{V,O} to be zero and add can_tdc_const::tdc{v,o,f}_min can: bittiming: replace CAN units with the generic ones from linux/units.h can: dev: add generic function can_ethtool_op_get_ts_info_hwts() can: dev: add generic function can_eth_ioctl_hwts() can: etas_es58x: advertise timestamping capabilities and add ioctl support can: etas_es58x: sort the includes by alphabetic order can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow can: hi311x: populate ndo_change_mtu() to prevent buffer overflow can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow Vladimir Oltean (2): net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port Wei Yang (1): mm/khugepaged: fix the address passed to notifier on testing young Xiongfeng Wang (1): hrtimers: Unconditionally update target CPU base after offline timer migration Yeoreum Yun (1): kunit: kasan_test: disable fortify string checker on kasan_strings() test Yeounsu Moon (1): net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure Zabelin Nikita (1): drm/gma500: Fix null dereference in hdmi teardown

3 weeks, 6 days

1
1
0 0

Linux 5.10.245

by Greg Kroah-Hartman

I'm announcing the release of the 5.10.245 kernel. All users of the 5.10 kernel series must upgrade. The updated 5.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm64/boot/dts/freescale/imx8mp.dtsi | 4 arch/um/drivers/virtio_uml.c | 6 arch/x86/kvm/svm/svm.c | 3 crypto/af_alg.c | 7 drivers/cpufreq/cpufreq.c | 20 - drivers/dma/qcom/bam_dma.c | 8 drivers/dma/ti/edma.c | 4 drivers/edac/altera_edac.c | 1 drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 6 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 drivers/gpu/drm/i915/display/intel_display_power.c | 6 drivers/infiniband/hw/mlx5/devx.c | 1 drivers/input/serio/i8042-acpipnpio.h | 14 drivers/media/i2c/imx214.c | 27 + drivers/media/platform/mtk-vcodec/venc/venc_h264_if.c | 6 drivers/mmc/host/mvsdio.c | 2 drivers/mtd/mtdpstore.c | 3 drivers/mtd/nand/raw/atmel/nand-controller.c | 18 - drivers/mtd/nand/raw/stm32_fmc2_nand.c | 48 +- drivers/net/can/rcar/rcar_can.c | 8 drivers/net/can/spi/hi311x.c | 1 drivers/net/can/sun4i_can.c | 1 drivers/net/can/usb/mcba_usb.c | 1 drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 2 drivers/net/ethernet/broadcom/cnic.c | 3 drivers/net/ethernet/cavium/liquidio/request_manager.c | 2 drivers/net/ethernet/freescale/fec_main.c | 3 drivers/net/ethernet/intel/i40e/i40e.h | 1 drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 25 + drivers/net/ethernet/intel/i40e/i40e_main.c | 10 drivers/net/ethernet/intel/i40e/i40e_txrx.c | 3 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 45 ++ drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 3 drivers/net/ethernet/intel/igb/igb_ethtool.c | 5 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 2 drivers/net/ethernet/natsemi/ns83820.c | 13 drivers/net/ethernet/qlogic/qed/qed_debug.c | 7 drivers/pcmcia/omap_cf.c | 8 drivers/phy/broadcom/phy-bcm-cygnus-pcie.c | 4 drivers/phy/broadcom/phy-bcm-kona-usb2.c | 4 drivers/phy/broadcom/phy-bcm-ns-usb2.c | 4 drivers/phy/broadcom/phy-bcm-ns-usb3.c | 168 ---------- drivers/phy/broadcom/phy-bcm-ns2-usbdrd.c | 13 drivers/phy/broadcom/phy-bcm-sr-pcie.c | 5 drivers/phy/broadcom/phy-bcm-sr-usb.c | 4 drivers/phy/broadcom/phy-brcm-sata.c | 8 drivers/phy/marvell/phy-berlin-usb.c | 7 drivers/phy/ralink/phy-ralink-usb.c | 10 drivers/phy/rockchip/phy-rockchip-pcie.c | 11 drivers/phy/rockchip/phy-rockchip-usb.c | 10 drivers/phy/ti/phy-omap-control.c | 26 - drivers/phy/ti/phy-omap-usb2.c | 28 + drivers/phy/ti/phy-ti-pipe3.c | 42 +- drivers/power/supply/bq27xxx_battery.c | 4 drivers/soc/qcom/mdt_loader.c | 12 drivers/tty/hvc/hvc_console.c | 6 drivers/tty/serial/sc16is7xx.c | 14 drivers/usb/core/quirks.c | 2 drivers/usb/gadget/udc/dummy_hcd.c | 25 - drivers/usb/host/xhci-dbgcap.c | 94 +++-- drivers/usb/serial/option.c | 17 + drivers/video/fbdev/core/fbcon.c | 13 fs/btrfs/tree-checker.c | 4 fs/fuse/file.c | 5 fs/hugetlbfs/inode.c | 14 fs/nfs/client.c | 2 fs/nfs/flexfilelayout/flexfilelayout.c | 21 - fs/nfs/nfs4proc.c | 1 fs/nilfs2/sysfs.c | 4 fs/nilfs2/sysfs.h | 8 fs/ocfs2/extent_map.c | 10 include/crypto/if_alg.h | 10 include/linux/compiler-clang.h | 42 +- include/linux/compiler-gcc.h | 4 include/linux/interrupt.h | 72 ++-- include/linux/overflow.h | 208 ++---------- include/net/nexthop.h | 3 include/net/sock.h | 40 ++ include/uapi/linux/rtnetlink.h | 6 kernel/cgroup/cgroup.c | 43 ++ kernel/irq/manage.c | 111 ++++++ kernel/trace/trace.c | 4 kernel/trace/trace_dynevent.c | 4 mm/khugepaged.c | 2 mm/memory-failure.c | 7 mm/migrate.c | 12 net/can/j1939/bus.c | 5 net/can/j1939/socket.c | 3 net/core/sock.c | 5 net/ipv4/fib_semantics.c | 2 net/ipv4/ip_tunnel_core.c | 6 net/ipv4/nexthop.c | 28 + net/ipv4/tcp.c | 5 net/ipv4/tcp_bpf.c | 5 net/mac80211/driver-ops.h | 2 net/mptcp/pm_netlink.c | 1 net/mptcp/protocol.c | 16 net/rds/ib_frmr.c | 20 - net/rfkill/rfkill-gpio.c | 22 + sound/firewire/motu/motu-hwdep.c | 2 sound/soc/codecs/wm8940.c | 2 sound/soc/codecs/wm8974.c | 8 sound/soc/sof/intel/hda-stream.c | 2 sound/usb/mixer_quirks.c | 285 ++++++++++++++++- tools/include/linux/compiler-gcc.h | 4 tools/include/linux/overflow.h | 140 -------- tools/testing/selftests/net/fib_nexthops.sh | 12 109 files changed, 1181 insertions(+), 895 deletions(-) Alan Stern (1): USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels Alexander Dahl (1): mtd: nand: raw: atmel: Fix comment in timings preparation Alexander Sverdlin (1): mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing Alexey Nepomnyashih (1): net: liquidio: fix overflow in octeon_init_instr_queue() Alok Tiwari (1): bnxt_en: correct offset handling for IPv6 destination address Anders Roxell (1): dmaengine: ti: edma: Fix memory allocation size for queue_priority_map André Apitzsch (1): media: i2c: imx214: Fix link frequency validation Antoine Tenart (1): tunnels: reset the GSO metadata before reusing the skb Arnd Bergmann (1): media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning Bjorn Andersson (1): soc: qcom: mdt_loader: Deal with zero e_shentsize Charles Keepax (2): ASoC: wm8940: Correct typo in control name ASoC: wm8974: Correct PLL rate rounding Chen Ni (1): ALSA: usb-audio: Convert comma to semicolon Chen Ridong (1): cgroup: split cgroup_destroy_wq into 3 workqueues Christian Loehle (1): cpufreq: Initialize cpufreq-based invariance before subsys Christoffer Sandberg (1): Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table Christophe Kerello (2): mtd: rawnand: stm32_fmc2: fix ECC overwrite mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer Chunfeng Yun (2): phy: broadcom: convert to devm_platform_ioremap_resource(_byname) phy: ti: convert to devm_platform_ioremap_resource(_byname) Colin Ian King (1): ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message Cristian Ciocaltea (6): ALSA: usb-audio: Fix block comments in mixer_quirks ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks ALSA: usb-audio: Avoid multiple assignments in mixer_quirks ALSA: usb-audio: Simplify NULL comparison in mixer_quirks ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 David Hildenbrand (1): mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() Duoming Zhou (1): cnic: Fix use-after-free bugs in cnic_delete_task Eric Biggers (1): crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Fabian Vogt (1): tty: hvc_console: Call hvc_kick in hvc_write unconditionally Fabio Porcedda (2): USB: serial: option: add Telit Cinterion FN990A w/audio compositions USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions Geert Uytterhoeven (2): pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch can: rcar_can: rcar_can_resume(): fix s2ram with PSCI Greg Kroah-Hartman (1): Linux 5.10.245 H. Nikolaus Schaller (2): power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery power: supply: bq27xxx: restrict no-battery detection to bq27000 Hans de Goede (1): net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer Herbert Xu (1): crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Hugo Villeneuve (1): serial: sc16is7xx: fix bug in flow control levels init Håkon Bugge (1): rds: ib: Increment i_fastreg_wrs before bailing out Ido Schimmel (6): nexthop: Pass extack to nexthop notifier rtnetlink: Add RTNH_F_TRAP flag nexthop: Emit a notification when a nexthop is added nexthop: Emit a notification when a single nexthop is replaced nexthop: Forbid FDB status change while nexthop is in a group selftests: fib_nexthops: Fix creation of non-FDB nexthops Jack Wang (1): mtd: rawnand: stm32_fmc2: Fix dma_map_sg error check Jakob Koschel (1): usb: gadget: dummy_hcd: remove usage of list iterator past the loop body Jamie Bainbridge (1): qed: Don't collect too many protection override GRC elements Jani Nikula (1): drm/i915/power: fix size for for_each_set_bit() in abox iteration Jiasheng Jiang (1): mtd: Add check for devm_kcalloc() Jiayi Li (1): usb: core: Add 0x prefix to quirks debug output Jinjiang Tu (1): mm/hugetlb: fix folio is still mapped when deleted Johan Hovold (2): phy: ti-pipe3: fix device leak at unbind phy: ti: omap-usb2: fix device leak at unbind John Garry (1): genirq/affinity: Add irq_update_affinity_desc() Jonathan Curley (1): NFSv4/flexfiles: Fix layout merge mirror check. Justin Bronder (1): i40e: increase max descriptors for XL710 Kees Cook (1): overflow: Allow mixed type arguments Keith Busch (1): overflow: Correct check_shl_overflow() comment Kohei Enju (1): igb: fix link test skipping when interface is admin down Krzysztof Kozlowski (1): phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning Kuniyuki Iwashima (3): net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). Liao Yuanhong (1): wifi: mac80211: fix incorrect type for ret Lukasz Czapnik (7): i40e: fix idx validation in i40e_validate_queue_map i40e: fix input validation logic for action_meta i40e: add max boundary check for VF filters i40e: add mask to apply valid bits for itr_idx i40e: add validation for ring_len param i40e: fix idx validation in config queues msg i40e: fix validation of VF state in get resources Luo Gengkun (1): tracing: Fix tracing_marker may trigger page fault during preempt_disable Maciej Fijalkowski (1): i40e: remove redundant memory barrier when cleaning Tx descs Maciej S. Szmigiero (1): KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active Mark Tinguely (1): ocfs2: fix recursive semaphore deadlock in fiemap call Masami Hiramatsu (Google) (1): tracing: dynevent: Add a missing lockdown check on dynevent Mathias Nyman (2): xhci: dbc: decouple endpoint allocation from initialization xhci: dbc: Fix full DbC transfer ring after several reconnects Matthieu Baerts (NGI0) (2): mptcp: pm: kernel: flush: do not reset ADD_ADDR limit mptcp: propagate shutdown to subflows when possible Miaohe Lin (1): mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory Miaoqian Lin (1): um: virtio_uml: Fix use-after-free after put_device in probe Michal Schmidt (1): i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path Miklos Szeredi (2): fuse: check if copy_file_range() returns larger than requested size fuse: prevent overflow in copy_file_range return value Nathan Chancellor (2): compiler-clang.h: define __SANITIZE_*__ macros only when undefined nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* Nick Desaulniers (1): compiler.h: drop fallback overflow checkers Nitesh Narayan Lal (1): i40e: Use irq_update_affinity_hint() Or Har-Toov (1): IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions Peng Fan (1): arm64: dts: imx8mp: Correct thermal sensor index Philipp Zabel (1): net: rfkill: gpio: add DT support Qi Xi (1): drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path Qu Wenruo (1): btrfs: tree-checker: fix the incorrect inode ref size check Rafał Miłecki (1): phy: phy-bcm-ns-usb3: drop support for deprecated DT binding Rob Herring (1): phy: Use device_get_match_data() Salah Triki (1): EDAC/altera: Delete an inappropriate dma_free_coherent() call Samasth Norway Ananda (1): fbcon: fix integer overflow in fbcon_do_set_font Stefan Wahren (1): net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() Stephan Gerhold (1): dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees Stéphane Grosjean (1): can: peak_usb: fix shift-out-of-bounds issue Takashi Iwai (1): ALSA: usb-audio: Fix build with CONFIG_INPUT=n Takashi Sakamoto (1): ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported Tariq Toukan (1): Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" Tetsuo Handa (2): can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails Thomas Fourier (1): mmc: mvsdio: Fix dma_unmap_sg() nents value Thomas Gleixner (2): genirq: Export affinity setter for modules genirq: Provide new interfaces for affinity hints Thomas Zimmermann (1): fbcon: Fix OOB access in font allocation Tigran Mkrtchyan (1): flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read Trond Myklebust (2): NFSv4: Don't clear capabilities that won't be reset NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server Vincent Mailhol (3): can: hi311x: populate ndo_change_mtu() to prevent buffer overflow can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow Wei Yang (1): mm/khugepaged: fix the address passed to notifier on testing young Yeounsu Moon (1): net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure Zabelin Nikita (1): drm/gma500: Fix null dereference in hdmi teardown

3 weeks, 6 days

1
1
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror October 2025