Lkft-triage

lkft-triage@lists.linaro.org

23 participants
34125 discussions

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.27 release. There are 275 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 06 May 2026 13:50:54 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.27-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.27-rc1 Kai Ma <k4729.23098(a)gmail.com> netfilter: reject zero shift in nft_bitwise Andrea Mayer <andrea.mayer(a)uniroma2.it> net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels Harry Yoo (Oracle) <harry(a)kernel.org> mm/slab: return NULL early from kmalloc_nolock() in NMI on UP Harry Yoo (Oracle) <harry(a)kernel.org> mm/page_alloc: return NULL early from alloc_frozen_pages_nolock() in NMI on UP Marco Elver <elver(a)google.com> vmalloc: fix buffer overflow in vrealloc_node_align() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: aloop: Fix peer runtime UAF during format-change stop Deepanshu Kartikey <kartikey406(a)gmail.com> ALSA: caiaq: fix usb_dev refcount leak on probe failure Arjan van de Ven <arjan(a)linux.intel.com> drm/amdgpu: fix zero-size GDS range init on RDNA4 Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ipv6: rpl: reserve mac_len headroom when recompressed SRH grows Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Don't abort when no input device is available Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path Douglas Anderson <dianders(a)chromium.org> driver core: Add kernel-doc for DEV_FLAG_COUNT enum value Yucheng Lu <kanolyc(a)gmail.com> crypto: authencesn - reject short ahash digests during instance creation Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: ns: Limit the total number of nodes Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: ns: Limit the maximum number of lookups Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: ns: Limit the maximum server registration per node Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: frequency: admv1013: fix NULL pointer dereference on str Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: frequency: admv1013: add dev variable Oliver Neukum <oneukum(a)suse.com> media: rc: igorplugusb: heed coherency rules Oliver Neukum <oneukum(a)suse.com> media: rc: ttusbir: respect DMA coherency rules Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor Elson Serrao <elson.serrao(a)oss.qualcomm.com> phy: qcom: m31-eusb2: clear PLL_EN during init Ronak Raheja <ronak.raheja(a)oss.qualcomm.com> phy: qcom: m31-eusb2: Update init sequence to set PHY_ENABLE Alexander Usyskin <alexander.usyskin(a)intel.com> mei: me: add nova lake point H DID Alexander Usyskin <alexander.usyskin(a)intel.com> mei: me: use PCI_DEVICE_DATA macro Alistair Popple <apopple(a)nvidia.com> lib: test_hmm: evict device pages on file close to avoid use-after-free Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Fix rodata=full block mapping support for realm guests Kevin Brodsky <kevin.brodsky(a)arm.com> arm64: mm: Simplify check in arch_kfence_init_pool() Anthony Yznaga <anthony.yznaga(a)oracle.com> mm: prevent droppable mappings from being locked Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode Yang Xiuwei <yangxiuwei(a)kylinos.cn> scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails Andrea Righi <arighi(a)nvidia.com> sched_ext: Documentation: Clarify ops.dispatch() role in task lifecycle David Howells <dhowells(a)redhat.com> rxgk: Fix potential integer overflow in length check Keenan Dong <keenanat2000(a)gmail.com> rtmutex: Use waiter::task instead of current in remove_waiter() Tobias Gaertner <tob.gaertner(a)me.com> ntfs3: fix integer overflow in run_unpack() volume boundary check Tobias Gaertner <tob.gaertner(a)me.com> ntfs3: add buffer boundary checks to run_unpack() Tushar Sariya <tushar.97(a)hotmail.com> NFSv4.1: Apply session size limits on clone path Steven Rostedt <rostedt(a)goodmis.org> ktest: Fix the month in the name of the failure directory Chen Zhao <chezhao(a)nvidia.com> IB/core: Fix zero dmac race in neighbor resolution David Carlier <devnexen(a)gmail.com> gtp: disable BH before calling udp_tunnel_xmit_skb() Max Kellermann <max.kellermann(a)ionos.com> ceph: only d_add() negative dentries when they are unhashed Junrui Luo <moonafterrain(a)outlook.com> dm mirror: fix integer overflow in create_dirty_log() Gustavo A. R. Silva <gustavoars(a)kernel.org> crypto: nx - Fix packed layout in struct nx842_crypto_header Thorsten Blum <thorsten.blum(a)linux.dev> crypto: nx - fix context leak in nx842_crypto_free_ctx Thorsten Blum <thorsten.blum(a)linux.dev> crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix uninitialized data access on OTP read error Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix error codes in OTP reads Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-tdes - fix DMA sync direction Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> crypto: ccree - fix a memory leak in cc_mac_digest() Thomas Fourier <fourier.thomas(a)gmail.com> crypto: hisilicon - Fix dma_unmap_single() direction Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-ecc - Release client on allocation failure Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup Eric Biggers <ebiggers(a)kernel.org> crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: acomp - fix wrong pointer stored by acomp_save_req() Johan Hovold <johan(a)kernel.org> can: ucan: fix devres lifetime Qiang Yu <qiang.yu(a)oss.qualcomm.com> bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays Shuvam Pandey <shuvampandey1(a)gmail.com> Bluetooth: hci_event: fix potential UAF in SSP passkey handlers Cengiz Can <cengiz.can(a)canonical.com> apparmor: use target task's context in apparmor_getprocattr() Brian Mak <makb(a)juniper.net> mfd: core: Preserve OF node when ACPI handle is present Gang Yan <yangang(a)kylinos.cn> mptcp: sync the msk->sndbuf at accept() time Yiyang Chen <cyyzero16(a)gmail.com> taskstats: set version in TGID exit notifications Zhenzhong Wu <jt26wzz(a)gmail.com> tcp: call sk_data_ready() after listener migration Yi Cong <yicong(a)kylinos.cn> wifi: rtl8xxxu: fix potential use of uninitialized value Rick Edgecombe <rick.p.edgecombe(a)intel.com> x86/shstk: Prevent deadlock during shstk sigreturn Dave Hansen <dave.hansen(a)linux.intel.com> x86/cpu: Disable FRED when PTI is forced on Chia-Ming Chang <chiamingc(a)synology.com> inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails Aditya Garg <gargaditya08(a)live.com> HID: apple: ensure the keyboard backlight is off if suspending Arnd Bergmann <arnd(a)arndb.de> check-uapi: link into shared objects Junrui Luo <moonafterrain(a)outlook.com> md/raid5: validate payload size before accessing journal metadata Chia-Ming Chang <chiamingc(a)synology.com> md/raid5: fix soft lockup in retry_aligned_read() Yu Kuai <yukuai(a)fnnas.com> md/md-llbitmap: raise barrier before state machine transition Yu Kuai <yukuai(a)fnnas.com> md/md-llbitmap: skip reading rdevs that are not in_sync David (Ming Qiang) Wu <David.Wu3(a)amd.com> amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spinand: winbond: Declare the QE bit on W25NxxJW Sanjaikumar V S <sanjaikumar.vs(a)dicortech.com> mtd: spi-nor: sst: Fix write enable before AAI sequence Sohei Koyama <skoyama(a)ddn.com> ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access Masami Hiramatsu (Google) <mhiramat(a)kernel.org> ring-buffer: Do not double count the reader_page Brian Ruley <brian.ruley(a)gehealthcare.com> ARM: 9472/1: fix race condition on PG_dcache_clean in __sync_icache_dcache() Rong Bao <rong.bao(a)csmantle.top> perf annotate: Use jump__delete when freeing LoongArch jumps Sean Christopherson <seanjc(a)google.com> KVM: nSVM: Always intercept VMMCALL when L2 is active Kevin Cheng <chengkev(a)google.com> KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Add missing consistency check for nCR3 validity Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Drop the non-architectural consistency check for NP_ENABLE Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Triple fault if mapping VMCB12 fails on nested #VMEXIT Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Refactor writing vmcb12 on nested #VMEXIT as a helper Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Refactor checking LBRV enablement in vmcb12 into a helper Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN Yosry Ahmed <yosry(a)kernel.org> KVM: SVM: Add missing save/restore handling of LBR MSRs Yosry Ahmed <yosry(a)kernel.org> KVM: SVM: Switch svm_copy_lbrs() to a macro Sean Christopherson <seanjc(a)google.com> KVM: nSVM: Delay setting soft IRQ RIP tracking fields until vCPU run Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 Yosry Ahmed <yosry.ahmed(a)linux.dev> KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Delay stuffing L2's current RIP into NextRIP until vCPU run Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode Sean Christopherson <seanjc(a)google.com> KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts Kevin Cheng <chengkev(a)google.com> KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 Yosry Ahmed <yosry.ahmed(a)linux.dev> KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state Sean Christopherson <seanjc(a)google.com> KVM: x86: Defer non-architectural deliver of exception payload to userspace read Tao Cui <cuitao(a)kylinos.cn> LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() Denis M. Karpov <komlomal(a)gmail.com> userfaultfd: allow registration of ranges below mmap_min_addr SeongJae Park <sj(a)kernel.org> mm/damon/core: use time_in_range_open() for damos quota window start SeongJae Park <sj(a)kernel.org> mm/damon/core: validate damos_quota_goal->nid for node_mem_{used,free}_bp Jackie Liu <liuyun01(a)kylinos.cn> mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start() Jackie Liu <liuyun01(a)kylinos.cn> mm/mempolicy: fix memory leaks in weighted_interleave_auto_store() Uladzislau Rezki (Sony) <urezki(a)gmail.com> mm/vmalloc: take vmap_purge_lock in shrinker Johan Hovold <johan(a)kernel.org> rtc: ntxec: fix OF node reference imbalance Jacqueline Wong <jacqwong(a)google.com> tpm: tpm_tis: stop transmit if retries are exhausted Jacqueline Wong <jacqwong(a)google.com> tpm: tpm_tis: add error logging for data transfer Gunnar Kudrjavets <gunnarku(a)amazon.com> tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() Gunnar Kudrjavets <gunnarku(a)amazon.com> tpm: Fix auth session leak in tpm2_get_random() error path Gunnar Kudrjavets <gunnarku(a)amazon.com> tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public() Viorel Suman (OSS) <viorel.suman(a)oss.nxp.com> pwm: imx-tpm: Count the number of enabled channels in probe Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - rename first/last to first_desc/last_desc Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - fix SEC1 32k ahash request limitation Thomas Zimmermann <tzimmermann(a)suse.de> firmware: google: framebuffer: Do not unregister platform device Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> xfs: fix a resource leak in xfs_alloc_buftarg() Hans Holmberg <hans.holmberg(a)wdc.com> xfs: start gc on zonegc_low_space attribute updates Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - fix IRQ cleanup on 6xxx probe failure Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins Shawn Lin <shawn.lin(a)rock-chips.com> mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration Bin Liu <b-liu(a)ti.com> mmc: block: use single block write in retry Ryan Roberts <ryan.roberts(a)arm.com> randomize_kstack: Maintain kstack_offset per task Sanman Pradhan <psanman(a)juniper.net> hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() Brahmajit Das <listout(a)listout.xyz> ASoC: Intel: avs: replace strcmp with sysfs_streq Tiezhu Yang <yangtiezhu(a)loongson.cn> drm/amd: Fix set but not used warnings Amir Goldstein <amir73il(a)gmail.com> fs: prepare for adding LSM blob to backing_file Sanman Pradhan <psanman(a)juniper.net> hwmon: (isl28022) Fix integer overflow in power calculation on 32-bit Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> power: supply: axp288_charger: Do not cancel work before initializing it Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Show CPU vulnerabilites correctly Arnd Bergmann <arnd(a)arndb.de> tpm: avoid -Wunused-but-set-variable Nathan Chancellor <nathan(a)kernel.org> extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' Johan Hovold <johan(a)kernel.org> spi: fix resource leaks on device setup failure Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() Ruide Cao <caoruide123(a)gmail.com> ipv4: icmp: validate reply type before using icmp_pointers hkbinbin <hkbinbinbin(a)gmail.com> RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/fprobe: Reject registration of a registered fprobe before init Marco Elver <elver(a)google.com> slub: fix data loss and overflow in krealloc() Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/arcpgu: fix device node leak Marek Vasut <marex(a)nabladev.com> net: ks8851: Avoid excess softirq scheduling Yuan Zhaoming <yuanzm2(a)lenovo.com> net: mctp: fix don't require received header reserved bits to be zero Breno Leitao <leitao(a)debian.org> netconsole: avoid out-of-bounds access on empty string in trim_newline() Zhengchuan Liang <zcliangcn(a)gmail.com> net: bridge: use a stable FDB dst snapshot in RCU readers Marek Vasut <marex(a)nabladev.com> net: ks8851: Reinstate disabling of BHs around IRQ handler Ruijie Li <ruijieli51(a)gmail.com> net/smc: avoid early lgr access in smc_clc_wait_msg Jiawen Wu <jiawenwu(a)trustnetic.com> net: txgbe: fix firmware version check Ao Zhou <draw51280(a)163.com> net: rds: fix MR cleanup on copy error Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: ns: Free the node during ctrl_cmd_bye() Robert Marko <robert.marko(a)sartura.hr> arm64: dts: marvell: uDPU: add ethernet aliases Jiawen Wu <jiawenwu(a)trustnetic.com> net: txgbe: fix RTNL assertion warning when remove module Yiyang Chen <cyyzero16(a)gmail.com> tools/accounting: handle truncated taskstats netlink messages Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> EDAC/versalnet: Fix memory leak in remove and probe error paths David Howells <dhowells(a)redhat.com> rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets David Howells <dhowells(a)redhat.com> rxrpc: Fix re-decryption of RESPONSE packets David Howells <dhowells(a)redhat.com> rxrpc: Fix error handling in rxgk_extract_token() David Howells <dhowells(a)redhat.com> rxrpc: Fix rxkad crypto unalignment handling David Howells <dhowells(a)redhat.com> rxrpc: Fix conn-level packet handling to unshare RESPONSE packets David Howells <dhowells(a)redhat.com> rxrpc: Fix memory leaks in rxkad_verify_response() David Howells <dhowells(a)redhat.com> rxrpc: Fix potential UAF after skb_unshare() failure Jonathan Santos <Jonathan.Santos(a)analog.com> iio: adc: ad7768-1: remove switch to one-shot mode Jonathan Santos <Jonathan.Santos(a)analog.com> iio: adc: ad7768-1: fix one-shot mode data acquisition Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: pcmtest: Fix resource leaks in module init error paths Guangshuo Li <lgs201920130244(a)gmail.com> ALSA: pcmtest: fix reference leak on failed device registration Spencer Payton <spayton681(a)gmail.com> ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa2xxx Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: 6fire: Fix input volume change detection Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Handle probe errors properly Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: caiaq: Fix control_put() result and cache rollback Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix potential data race at fasync handling Jens Axboe <axboe(a)kernel.dk> io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE Longxuan Yu <ylong030(a)ucr.edu> io_uring/poll: fix signed comparison in io_poll_get_ownership() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() Naman Jain <namjain(a)linux.microsoft.com> block: relax pgmap check in bio_add_page for compatible zone device pages Pavel Begunkov <asml.silence(a)gmail.com> io_uring/timeout: check unused sqe fields Damien Le Moal <dlemoal(a)kernel.org> block: fix zone write plugs refcount handling in disk_zone_wplug_schedule_bio_work() Dawei Feng <dawei.feng(a)seu.edu.cn> rbd: fix null-ptr-deref when device_add_disk() fails Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Skip stale records in audit_match_record() Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Fix snprintf truncation checks in audit helpers Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Fix format warning for __u64 in net_test Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Drain stale audit records on init Mickaël Salaün <mic(a)digikod.net> landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() Simon Liebold <simonlie(a)amazon.de> selftests/mqueue: Fix incorrectly named file Joseph Salisbury <joseph.salisbury(a)oracle.com> sched: Use u64 for bandwidth ratio calculations Tommaso Merciai <tommaso.merciai.xr(a)bp.renesas.com> reset: rzv2h-usb2phy: Keep PHY clock enabled for entire device lifetime Ben Levinsky <ben.levinsky(a)amd.com> remoteproc: xlnx: Only access buffer information if IPI is buffered Long Li <longli(a)microsoft.com> RDMA/mana_ib: Disable RX steering on RSS QP destroy Aksh Garg <a-garg7(a)ti.com> PCI: cadence: Use cdns_pcie_read_sz() for byte or word read access Helge Deller <deller(a)gmx.de> parisc: Drop ip_fast_csum() inline assembly implementation Helge Deller <deller(a)gmx.de> parisc: _llseek syscall is only available for 32-bit userspace Robert Beckett <bob.beckett(a)collabora.com> nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set Robert Beckett <bob.beckett(a)collabora.com> nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 James Kim <james010kim(a)gmail.com> mtd: docg3: fix use-after-free in docg3_release() Thorsten Blum <thorsten.blum(a)linux.dev> mm/hugetlb: fix early boot crash on parameters without '=' separator SeongJae Park <sj(a)kernel.org> mm/damon/core: fix damon_call() vs kdamond_fn() exit race Hao Ge <hao.ge(a)linux.dev> mm/alloc_tag: clear codetag for pages allocated before page_ext initialization Marek Vasut <marex(a)nabladev.com> mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused Jens Axboe <axboe(a)kernel.dk> io_uring/register: fix ring resizing with mixed/large SQEs/CQEs Josh Hunt <johunt(a)akamai.com> md/raid10: fix deadlock with check operation and nowait requests Sean Christopherson <seanjc(a)google.com> KVM: selftests: Fix reserved value WRMSR testcase for multi-feature MSRs Zhang Yi <yi.zhang(a)huawei.com> jbd2: fix deadlock in jbd2_journal_cancel_revoke() Corey Minyard <corey(a)minyard.net> ipmi:ssif: Clean up kthread on errors Gao Xiang <xiang(a)kernel.org> erofs: fix the out-of-bounds nameoff handling for trailing dirents Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes Harin Lee <me(a)harin.net> ALSA: ctxfi: Add fallback to default RSR for S/PDIF Thorsten Blum <thorsten.blum(a)linux.dev> ALSA: aoa: Skip devices with no codecs in i2sbus_resume() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: aoa: i2sbus: fix OF node lifetime handling Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: aoa: i2sbus: clear stale prepared state Shigeru Yoshida <syoshida(a)redhat.com> mm/zsmalloc: copy KMSAN metadata in zs_page_migrate() Vasiliy Kovalev <kovalev(a)altlinux.org> ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: ns: Fix use-after-free in driver remove() Chen Ni <nichen(a)iscas.ac.cn> media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() Josh Law <objecting(a)objecting.org> lib/ts_kmp: fix integer overflow in pattern length calculation Daniel Hodges <git(a)danielhodges.dev> PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete Rong Zhang <i(a)rong.moe> Revert "ALSA: usb: Increase volume range that triggers a warning" Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OTP sysfs read and error handling Fan Wu <fanwu01(a)zju.edu.cn> media: mtk-jpeg: fix use-after-free in release path due to uncancelled work Luxiao Xu <rakukuip(a)gmail.com> net: strparser: fix skb_head leak in strp_abort_strp() Zhengchuan Liang <zcliangcn(a)gmail.com> net: caif: clear client service pointer on teardown Ziqing Chen <chenziqing(a)xiaomi.com> ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() Ming Qian <ming.qian(a)oss.nxp.com> media: amphion: Fix race between m2m job_abort and device_run Richard Zhu <hongxing.zhu(a)nxp.com> PCI: imx6: Skip waiting for L2/L3 Ready on i.MX6SX Felix Gu <ustc.gu(a)gmail.com> EDAC/versalnet: Fix device_node leak in mc_probe() Sanman Pradhan <psanman(a)juniper.net> hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt Wentao Liang <vulab(a)iscas.ac.cn> of: unittest: fix use-after-free in testdrv_probe() Wentao Liang <vulab(a)iscas.ac.cn> of: unittest: fix use-after-free in of_unittest_changeset() Swamil Jain <s-jain1(a)ti.com> dt-bindings: display: ti, am65x-dss: Fix AM62L DSS reg and clock constraints Herbert Xu <herbert(a)gondor.apana.org.au> crypto: pcrypt - Fix handling of MAY_BACKLOG requests Douya Le <ldy3087146292(a)gmail.com> crypto: algif_aead - snapshot IV for async AEAD requests Matthew Wilcox (Oracle) <willy(a)infradead.org> mm: call ->free_folio() directly in folio_unmap_invalidate() Johan Hovold <johan(a)kernel.org> spi: ch341: fix memory leaks on probe failures Johan Hovold <johan(a)kernel.org> spi: imx: fix use-after-free on unbind Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Fix thermal zone governor cleanup issues Michael Bommarito <michael.bommarito(a)gmail.com> um: drivers: call kernel_strrchr() explicitly in cow_user.c Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> vfio/cdx: Fix NULL pointer dereference in interrupt trigger path Alex Williamson <alex.williamson(a)nvidia.com> vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex Alex Williamson <alex.williamson(a)nvidia.com> vfio/virtio: Convert list_lock from spinlock to mutex Manish Honap <mhonap(a)nvidia.com> vfio: selftests: Fix VLA initialisation in vfio_pci_irq_set() Daniel Hodges <git(a)danielhodges.dev> wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() Fedor Pchelkin <pchelkin(a)ispras.ru> wifi: rtw88: check for PCI upstream bridge existence Sergey Senozhatsky <senozhatsky(a)chromium.org> zram: do not forget to endio for partial discard requests Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: edt-ft5x06 - fix use-after-free in debugfs teardown Heming Zhao <heming.zhao(a)suse.com> ocfs2: split transactions in dio completion to avoid credit exhaustion Usama Arif <usama.arif(a)linux.dev> mm: migrate: requeue destination folio on deferred split queue Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Enable batched TLB flush in unmap_hotplug_range() Thomas Zimmermann <tzimmermann(a)suse.de> firmware: google: framebuffer: Do not mark framebuffer as busy Lorenzo Stoakes (Oracle) <ljs(a)kernel.org> fs: afs: revert mmap_prepare() change Miguel Ojeda <ojeda(a)kernel.org> kbuild: rust: allow `clippy::uninlined_format_args` Danilo Krummrich <dakr(a)kernel.org> rust: dma: remove DMA_ATTR_NO_KERNEL_MAPPING from public attrs David Carlier <devnexen(a)gmail.com> drm/nouveau: fix nvkm_device leak on aperture removal failure Douglas Anderson <dianders(a)chromium.org> device property: Make modifications of fwnode "flags" thread safe Douglas Anderson <dianders(a)chromium.org> driver core: Don't let a device probe until it's ready Tyllis Xu <livelycarpet87(a)gmail.com> ibmasm: fix heap over-read in ibmasm_send_i2o_message() Tyllis Xu <livelycarpet87(a)gmail.com> ibmasm: fix OOB reads in command_file_write due to missing size checks Tyllis Xu <livelycarpet87(a)gmail.com> misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() Weigang He <geoffreyhe2(a)gmail.com> greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames() Pengpeng Hou <pengpeng(a)iscas.ac.cn> greybus: gb-beagleplay: bound bootloader receive buffering Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> leds: qcom-lpg: Check for array overflow when selecting the high resolution Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/nouveau: fix u32 overflow in pushbuf reloc bounds check Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> LoongArch: Add spectre boundry for syscall dispatch table Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Evaluate packsize caps at the right place Xu Yang <xu.yang_2(a)nxp.com> usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change Xu Yang <xu.yang_2(a)nxp.com> usb: chipidea: otg: not wait vbus drop if use role_switch Michal Pecio <michal.pecio(a)gmail.com> usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Avoid false E-MU sample-rate notifications Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES ------------- Diffstat: .../bindings/display/ti/ti,am65x-dss.yaml | 70 +++-- Documentation/scheduler/sched-ext.rst | 14 +- Makefile | 5 +- arch/arm/mm/flush.c | 4 +- arch/arm64/boot/dts/marvell/armada-3720-uDPU.dtsi | 5 + arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 20 +- arch/arm64/crypto/aes-modes.S | 4 +- arch/arm64/include/asm/mmu.h | 2 + arch/arm64/mm/init.c | 9 +- arch/arm64/mm/mmu.c | 92 +++--- arch/loongarch/kernel/cpu-probe.c | 7 + arch/loongarch/kernel/syscall.c | 3 +- arch/loongarch/kvm/vcpu.c | 2 +- arch/parisc/Kconfig | 3 + arch/parisc/include/asm/checksum.h | 89 +----- arch/parisc/kernel/syscalls/syscall.tbl | 2 +- arch/parisc/lib/Makefile | 2 +- arch/parisc/lib/checksum.c | 99 ------ arch/um/drivers/cow_user.c | 8 +- arch/x86/Kconfig | 1 + arch/x86/kernel/shstk.c | 42 +-- arch/x86/kvm/hyperv.h | 8 - arch/x86/kvm/svm/hyperv.h | 9 +- arch/x86/kvm/svm/nested.c | 195 +++++++----- arch/x86/kvm/svm/svm.c | 139 +++++++-- arch/x86/kvm/svm/svm.h | 11 +- arch/x86/kvm/x86.c | 65 ++-- arch/x86/mm/pti.c | 5 + block/bio-integrity.c | 6 +- block/bio.c | 6 +- block/blk-zoned.c | 12 +- block/blk.h | 19 ++ certs/extract-cert.c | 6 +- crypto/acompress.c | 8 +- crypto/algif_aead.c | 10 +- crypto/authencesn.c | 5 + crypto/pcrypt.c | 7 +- drivers/base/core.c | 39 ++- drivers/base/dd.c | 20 ++ drivers/block/rbd.c | 6 +- drivers/block/zram/zram_drv.c | 3 +- drivers/bus/imx-weim.c | 2 +- drivers/bus/mhi/host/pci_generic.c | 2 +- drivers/char/ipmi/ipmi_ssif.c | 13 +- drivers/char/tpm/tpm-chip.c | 2 +- drivers/char/tpm/tpm2-cmd.c | 6 +- drivers/char/tpm/tpm2-sessions.c | 5 +- drivers/char/tpm/tpm_tis_core.c | 11 +- drivers/crypto/atmel-aes.c | 2 +- drivers/crypto/atmel-ecc.c | 1 + drivers/crypto/atmel-i2c.c | 4 +- drivers/crypto/atmel-sha204a.c | 37 ++- drivers/crypto/atmel-tdes.c | 8 +- drivers/crypto/ccree/cc_hash.c | 1 + drivers/crypto/hisilicon/sec/sec_algs.c | 2 +- drivers/crypto/intel/qat/qat_6xxx/adf_drv.c | 4 +- drivers/crypto/nx/nx-842.c | 10 +- drivers/crypto/nx/nx-842.h | 4 +- drivers/crypto/talitos.c | 340 +++++++++++++-------- drivers/edac/versalnet_edac.c | 6 +- drivers/firmware/google/framebuffer-coreboot.c | 12 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h | 6 +- drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 52 +++- drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c | 9 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 2 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 +- drivers/gpu/drm/tiny/arcpgu.c | 3 +- drivers/greybus/gb-beagleplay.c | 112 ++++++- drivers/hid/hid-apple.c | 2 + drivers/hwmon/isl28022.c | 5 +- drivers/hwmon/powerz.c | 11 +- drivers/hwmon/pt5161l.c | 4 +- drivers/i2c/i2c-core-of.c | 2 +- drivers/iio/adc/ad7768-1.c | 16 +- drivers/iio/adc/ti-ads7950.c | 11 +- drivers/iio/frequency/admv1013.c | 90 +++--- drivers/infiniband/core/addr.c | 3 + drivers/infiniband/hw/mana/qp.c | 15 + drivers/infiniband/sw/rxe/rxe_recv.c | 3 +- drivers/input/touchscreen/edt-ft5x06.c | 3 + drivers/leds/rgb/leds-qcom-lpg.c | 7 +- drivers/md/dm-raid1.c | 6 +- drivers/md/md-llbitmap.c | 11 +- drivers/md/raid10.c | 4 +- drivers/md/raid5-cache.c | 48 ++- drivers/md/raid5.c | 8 +- drivers/media/i2c/imx219.c | 3 + drivers/media/platform/amphion/vpu_v4l2.c | 9 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 1 + drivers/media/rc/igorplugusb.c | 16 +- drivers/media/rc/ttusbir.c | 13 +- drivers/mfd/mfd-core.c | 12 +- drivers/mfd/stpmic1.c | 20 +- drivers/misc/ibmasm/ibmasmfs.c | 7 + drivers/misc/ibmasm/lowlevel.c | 12 +- drivers/misc/ibmasm/remote.c | 5 + drivers/misc/mei/bus-fixup.c | 6 +- drivers/misc/mei/hw-me-regs.h | 163 +++++----- drivers/misc/mei/hw-me.h | 6 - drivers/misc/mei/pci-me.c | 163 +++++----- drivers/mmc/core/block.c | 12 +- drivers/mmc/core/queue.h | 3 + drivers/mmc/host/sdhci-of-dwcmshc.c | 19 +- drivers/mtd/devices/docg3.c | 3 +- drivers/mtd/nand/spi/winbond.c | 4 +- drivers/mtd/spi-nor/sst.c | 13 + drivers/net/can/usb/ucan.c | 2 +- drivers/net/ethernet/micrel/ks8851.h | 6 +- drivers/net/ethernet/micrel/ks8851_common.c | 69 ++--- drivers/net/ethernet/micrel/ks8851_par.c | 15 +- drivers/net/ethernet/micrel/ks8851_spi.c | 11 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 11 +- drivers/net/ethernet/wangxun/txgbe/txgbe_main.c | 3 +- drivers/net/ethernet/wangxun/txgbe/txgbe_phy.c | 2 + drivers/net/gtp.c | 2 + drivers/net/netconsole.c | 2 + drivers/net/phy/mdio_bus_provider.c | 4 +- drivers/net/wireless/marvell/mwifiex/init.c | 2 +- drivers/net/wireless/mediatek/mt76/mt792x_regs.h | 4 + drivers/net/wireless/mediatek/mt76/mt792x_usb.c | 51 +++- drivers/net/wireless/realtek/rtl8xxxu/core.c | 28 +- drivers/net/wireless/realtek/rtw88/pci.c | 3 +- drivers/nvme/host/core.c | 2 +- drivers/nvme/host/pci.c | 2 + drivers/of/base.c | 2 +- drivers/of/dynamic.c | 2 +- drivers/of/platform.c | 2 +- drivers/of/unittest.c | 4 +- drivers/pci/controller/cadence/pcie-cadence.h | 56 ++-- drivers/pci/controller/dwc/pci-imx6.c | 1 + drivers/pci/endpoint/functions/pci-epf-mhi.c | 4 + drivers/pci/endpoint/functions/pci-epf-ntb.c | 56 +--- drivers/phy/qualcomm/phy-qcom-m31-eusb2.c | 4 +- drivers/power/supply/axp288_charger.c | 19 +- drivers/pwm/pwm-imx-tpm.c | 9 +- drivers/remoteproc/xlnx_r5_remoteproc.c | 20 +- drivers/reset/reset-rzv2h-usb2phy.c | 64 ++-- drivers/rtc/rtc-ntxec.c | 2 +- drivers/scsi/sd.c | 1 + drivers/spi/spi-ch341.c | 36 ++- drivers/spi/spi-imx.c | 4 + drivers/spi/spi.c | 63 ++-- drivers/thermal/thermal_core.c | 7 +- drivers/usb/chipidea/core.c | 45 +-- drivers/usb/chipidea/otg.c | 7 +- drivers/usb/host/xhci.c | 1 - drivers/vfio/cdx/intr.c | 13 +- drivers/vfio/cdx/main.c | 19 ++ drivers/vfio/cdx/private.h | 3 + drivers/vfio/pci/virtio/common.h | 2 +- drivers/vfio/pci/virtio/migrate.c | 33 +- fs/afs/file.c | 12 +- fs/ceph/dir.c | 6 +- fs/erofs/dir.c | 28 +- fs/ext2/inode.c | 14 +- fs/ext4/xattr.c | 6 +- fs/file_table.c | 22 +- fs/jbd2/revoke.c | 8 +- fs/nfs/internal.h | 2 + fs/nfs/nfs4client.c | 4 +- fs/nfs/nfs4proc.c | 3 + fs/notify/inotify/inotify_user.c | 1 + fs/ntfs3/run.c | 18 +- fs/ocfs2/aops.c | 74 +++-- fs/userfaultfd.c | 2 - fs/xfs/xfs_buf.c | 1 + fs/xfs/xfs_sysfs.c | 7 +- fs/xfs/xfs_zone_alloc.h | 4 + fs/xfs/xfs_zone_gc.c | 17 ++ include/linux/alloc_tag.h | 2 + include/linux/damon.h | 1 + include/linux/device.h | 45 +++ include/linux/fwnode.h | 44 ++- include/linux/hugetlb_inline.h | 4 +- include/linux/pgalloc_tag.h | 2 +- include/linux/randomize_kstack.h | 26 +- include/linux/sched.h | 4 + include/linux/tpm_eventlog.h | 9 +- include/linux/usb.h | 3 +- include/net/mana/mana.h | 1 + include/net/mctp.h | 3 + include/trace/events/rxrpc.h | 6 +- init/main.c | 1 - io_uring/poll.c | 6 +- io_uring/register.c | 32 +- io_uring/timeout.c | 4 + kernel/fork.c | 2 + kernel/locking/rtmutex.c | 13 +- kernel/sched/core.c | 2 +- kernel/sched/rt.c | 2 +- kernel/sched/sched.h | 2 +- kernel/taskstats.c | 1 + kernel/trace/fprobe.c | 21 +- kernel/trace/ring_buffer.c | 13 +- lib/alloc_tag.c | 109 +++++++ lib/test_hmm.c | 86 +++--- lib/ts_kmp.c | 18 +- mm/damon/core.c | 60 ++-- mm/damon/stat.c | 5 +- mm/filemap.c | 3 +- mm/hugetlb.c | 3 + mm/internal.h | 11 +- mm/mempolicy.c | 23 +- mm/migrate.c | 17 ++ mm/mlock.c | 10 +- mm/page_alloc.c | 15 +- mm/slub.c | 29 +- mm/truncate.c | 6 +- mm/vma.c | 4 +- mm/vmalloc.c | 3 +- mm/zsmalloc.c | 1 + net/bluetooth/hci_event.c | 18 +- net/bridge/br_arp_nd_proxy.c | 8 +- net/bridge/br_fdb.c | 28 +- net/caif/cfsrvl.c | 14 +- net/ceph/auth.c | 2 +- net/ipv4/icmp.c | 5 +- net/ipv4/inet_connection_sock.c | 3 + net/ipv6/exthdrs.c | 9 +- net/ipv6/rpl_iptunnel.c | 9 + net/ipv6/seg6_iptunnel.c | 12 +- net/mctp/route.c | 8 +- net/mptcp/protocol.c | 2 +- net/netfilter/nft_bitwise.c | 3 +- net/qrtr/ns.c | 86 +++++- net/rds/rdma.c | 4 - net/rxrpc/ar-internal.h | 1 - net/rxrpc/call_event.c | 20 +- net/rxrpc/conn_event.c | 43 ++- net/rxrpc/io_thread.c | 24 +- net/rxrpc/rxgk_app.c | 3 +- net/rxrpc/rxgk_common.h | 1 + net/rxrpc/rxkad.c | 112 +++---- net/rxrpc/skbuff.c | 9 - net/smc/smc_clc.c | 4 +- net/strparser/strparser.c | 8 + rust/kernel/dma.rs | 3 - scripts/check-uapi.sh | 7 +- security/apparmor/lsm.c | 16 +- security/landlock/cred.c | 6 +- sound/aoa/soundbus/i2sbus/core.c | 12 +- sound/aoa/soundbus/i2sbus/pcm.c | 71 +++-- sound/core/control.c | 4 + sound/core/misc.c | 13 +- sound/core/seq/oss/seq_oss_rw.c | 6 +- sound/drivers/aloop.c | 43 ++- sound/drivers/pcmtest.c | 19 +- sound/hda/codecs/realtek/alc269.c | 1 + sound/pci/ctxfi/ctatc.c | 3 +- sound/soc/intel/avs/path.c | 2 +- sound/usb/6fire/control.c | 10 +- sound/usb/caiaq/control.c | 52 +++- sound/usb/caiaq/device.c | 35 ++- sound/usb/caiaq/input.c | 2 +- sound/usb/endpoint.c | 6 +- sound/usb/format.c | 2 +- sound/usb/mixer.c | 7 +- sound/usb/mixer_quirks.c | 12 +- tools/accounting/getdelays.c | 41 ++- tools/accounting/procacct.c | 40 ++- tools/perf/arch/loongarch/annotate/instructions.c | 1 + tools/perf/util/disasm.c | 1 + tools/testing/ktest/ktest.pl | 2 +- tools/testing/selftests/kvm/x86/msrs_test.c | 2 +- tools/testing/selftests/landlock/audit.h | 105 +++++-- tools/testing/selftests/landlock/audit_test.c | 124 ++++++-- tools/testing/selftests/landlock/net_test.c | 2 +- tools/testing/selftests/landlock/ptrace_test.c | 1 - .../selftests/landlock/scoped_abstract_unix_test.c | 1 - .../testing/selftests/mqueue/{setting => settings} | 0 tools/testing/selftests/vfio/lib/vfio_pci_device.c | 4 +- tools/testing/vma/vma_internal.h | 7 +- 274 files changed, 3267 insertions(+), 1877 deletions(-)

1 month, 1 week

[PATCH 7.0 000/307] 7.0.4-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.0.4 release. There are 307 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 06 May 2026 13:50:49 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.0.4-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.0.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.0.4-rc1 Kai Ma <k4729.23098(a)gmail.com> netfilter: reject zero shift in nft_bitwise Andrea Mayer <andrea.mayer(a)uniroma2.it> net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels Harry Yoo (Oracle) <harry(a)kernel.org> mm/slab: return NULL early from kmalloc_nolock() in NMI on UP Harry Yoo (Oracle) <harry(a)kernel.org> mm/page_alloc: return NULL early from alloc_frozen_pages_nolock() in NMI on UP Marco Elver <elver(a)google.com> vmalloc: fix buffer overflow in vrealloc_node_align() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: aloop: Fix peer runtime UAF during format-change stop Deepanshu Kartikey <kartikey406(a)gmail.com> ALSA: caiaq: fix usb_dev refcount leak on probe failure Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Fix segfault when updating ftrace mask Arjan van de Ven <arjan(a)linux.intel.com> drm/amdgpu: fix zero-size GDS range init on RDNA4 Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ipv6: rpl: reserve mac_len headroom when recompressed SRH grows Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Don't abort when no input device is available Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path Douglas Anderson <dianders(a)chromium.org> driver core: Add kernel-doc for DEV_FLAG_COUNT enum value Yucheng Lu <kanolyc(a)gmail.com> crypto: authencesn - reject short ahash digests during instance creation Alexander Usyskin <alexander.usyskin(a)intel.com> mei: me: add nova lake point H DID Alexander Usyskin <alexander.usyskin(a)intel.com> mei: me: use PCI_DEVICE_DATA macro Lorenzo Stoakes (Oracle) <ljs(a)kernel.org> mm: avoid deadlock when holding rmap on mmap_prepare error Lorenzo Stoakes (Oracle) <ljs(a)kernel.org> mm: various small mmap_prepare cleanups Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: frequency: admv1013: fix NULL pointer dereference on str Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: frequency: admv1013: add dev variable WANG Rui <r(a)hev.cc> perf loongarch: Fix build failure with CONFIG_LIBDW_DWARF_UNWIND Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode Yang Xiuwei <yangxiuwei(a)kylinos.cn> scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails Andrea Righi <arighi(a)nvidia.com> sched_ext: Documentation: Clarify ops.dispatch() role in task lifecycle David Howells <dhowells(a)redhat.com> rxgk: Fix potential integer overflow in length check Keenan Dong <keenanat2000(a)gmail.com> rtmutex: Use waiter::task instead of current in remove_waiter() Tobias Gaertner <tob.gaertner(a)me.com> ntfs3: fix integer overflow in run_unpack() volume boundary check Tobias Gaertner <tob.gaertner(a)me.com> ntfs3: add buffer boundary checks to run_unpack() Tushar Sariya <tushar.97(a)hotmail.com> NFSv4.1: Apply session size limits on clone path Steven Rostedt <rostedt(a)goodmis.org> ktest: Fix the month in the name of the failure directory Chen Zhao <chezhao(a)nvidia.com> IB/core: Fix zero dmac race in neighbor resolution David Carlier <devnexen(a)gmail.com> gtp: disable BH before calling udp_tunnel_xmit_skb() Max Kellermann <max.kellermann(a)ionos.com> ceph: only d_add() negative dentries when they are unhashed Sam Edwards <cfsworks(a)gmail.com> ceph: fix num_ops off-by-one when crypto allocation fails Junrui Luo <moonafterrain(a)outlook.com> erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() Junrui Luo <moonafterrain(a)outlook.com> dm mirror: fix integer overflow in create_dirty_log() Gustavo A. R. Silva <gustavoars(a)kernel.org> crypto: nx - Fix packed layout in struct nx842_crypto_header Thorsten Blum <thorsten.blum(a)linux.dev> crypto: nx - fix context leak in nx842_crypto_free_ctx Thorsten Blum <thorsten.blum(a)linux.dev> crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix uninitialized data access on OTP read error Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix error codes in OTP reads Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-tdes - fix DMA sync direction Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> crypto: ccree - fix a memory leak in cc_mac_digest() Thomas Fourier <fourier.thomas(a)gmail.com> crypto: hisilicon - Fix dma_unmap_single() direction Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-ecc - Release client on allocation failure Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup Eric Biggers <ebiggers(a)kernel.org> crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: acomp - fix wrong pointer stored by acomp_save_req() Johan Hovold <johan(a)kernel.org> can: ucan: fix devres lifetime Qiang Yu <qiang.yu(a)oss.qualcomm.com> bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays Shuvam Pandey <shuvampandey1(a)gmail.com> Bluetooth: hci_event: fix potential UAF in SSP passkey handlers Cengiz Can <cengiz.can(a)canonical.com> apparmor: use target task's context in apparmor_getprocattr() Pierre Barre <pierre(a)barre.sh> 9p: fix access mode flags being ORed instead of replaced Brian Mak <makb(a)juniper.net> mfd: core: Preserve OF node when ACPI handle is present Gang Yan <yangang(a)kylinos.cn> mptcp: sync the msk->sndbuf at accept() time Yiyang Chen <cyyzero16(a)gmail.com> taskstats: set version in TGID exit notifications Zhenzhong Wu <jt26wzz(a)gmail.com> tcp: call sk_data_ready() after listener migration Yi Cong <yicong(a)kylinos.cn> wifi: rtl8xxxu: fix potential use of uninitialized value Rick Edgecombe <rick.p.edgecombe(a)intel.com> x86/shstk: Prevent deadlock during shstk sigreturn Dave Hansen <dave.hansen(a)linux.intel.com> x86/cpu: Disable FRED when PTI is forced on Chia-Ming Chang <chiamingc(a)synology.com> inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails Aditya Garg <gargaditya08(a)live.com> HID: apple: ensure the keyboard backlight is off if suspending Kairui Song <kasong(a)tencent.com> mm, swap: speed up hibernation allocation and writeout Arnd Bergmann <arnd(a)arndb.de> check-uapi: link into shared objects Junrui Luo <moonafterrain(a)outlook.com> md/raid5: validate payload size before accessing journal metadata Chia-Ming Chang <chiamingc(a)synology.com> md/raid5: fix soft lockup in retry_aligned_read() Yu Kuai <yukuai(a)fnnas.com> md/md-llbitmap: raise barrier before state machine transition Yu Kuai <yukuai(a)fnnas.com> md/md-llbitmap: skip reading rdevs that are not in_sync David (Ming Qiang) Wu <David.Wu3(a)amd.com> amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spinand: winbond: Declare the QE bit on W25NxxJW Sanjaikumar V S <sanjaikumar.vs(a)dicortech.com> mtd: spi-nor: sst: Fix write enable before AAI sequence Seohyeon Maeng <bioloidgp(a)gmail.com> udf: fix partition descriptor append bookkeeping Sohei Koyama <skoyama(a)ddn.com> ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access Masami Hiramatsu (Google) <mhiramat(a)kernel.org> ring-buffer: Do not double count the reader_page Brian Ruley <brian.ruley(a)gehealthcare.com> ARM: 9472/1: fix race condition on PG_dcache_clean in __sync_icache_dcache() Sean Christopherson <seanjc(a)google.com> KVM: nSVM: Always intercept VMMCALL when L2 is active Kevin Cheng <chengkev(a)google.com> KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Add missing consistency check for nCR3 validity Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Drop the non-architectural consistency check for NP_ENABLE Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Triple fault if mapping VMCB12 fails on nested #VMEXIT Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Refactor writing vmcb12 on nested #VMEXIT as a helper Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Refactor checking LBRV enablement in vmcb12 into a helper Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN Yosry Ahmed <yosry(a)kernel.org> KVM: SVM: Add missing save/restore handling of LBR MSRs Yosry Ahmed <yosry(a)kernel.org> KVM: SVM: Switch svm_copy_lbrs() to a macro Sean Christopherson <seanjc(a)google.com> KVM: nSVM: Delay setting soft IRQ RIP tracking fields until vCPU run Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 Marc Zyngier <maz(a)kernel.org> KVM: arm64: Account for RESx bits in __compute_fgt() Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Delay stuffing L2's current RIP into NextRIP until vCPU run Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode Sean Christopherson <seanjc(a)google.com> KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts Kevin Cheng <chengkev(a)google.com> KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state Sean Christopherson <seanjc(a)google.com> KVM: x86: Defer non-architectural deliver of exception payload to userspace read Tao Cui <cuitao(a)kylinos.cn> LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() Denis M. Karpov <komlomal(a)gmail.com> userfaultfd: allow registration of ranges below mmap_min_addr SeongJae Park <sj(a)kernel.org> mm/damon/core: disallow non-power of two min_region_sz on damon_start() SeongJae Park <sj(a)kernel.org> mm/damon/core: disallow time-quota setting zero esz SeongJae Park <sj(a)kernel.org> mm/damon/core: use time_in_range_open() for damos quota window start SeongJae Park <sj(a)kernel.org> mm/damon/core: validate damos_quota_goal->nid for node_memcg_{used,free}_bp SeongJae Park <sj(a)kernel.org> mm/damon/core: validate damos_quota_goal->nid for node_mem_{used,free}_bp Jackie Liu <liuyun01(a)kylinos.cn> mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start() Jackie Liu <liuyun01(a)kylinos.cn> mm/mempolicy: fix memory leaks in weighted_interleave_auto_store() Chenghao Duan <duanchenghao(a)kylinos.cn> mm/memfd_luo: fix physical address conversion in put_folios cleanup Uladzislau Rezki (Sony) <urezki(a)gmail.com> mm/vmalloc: take vmap_purge_lock in shrinker Johan Hovold <johan(a)kernel.org> rtc: ntxec: fix OF node reference imbalance Jacqueline Wong <jacqwong(a)google.com> tpm: tpm_tis: stop transmit if retries are exhausted Jacqueline Wong <jacqwong(a)google.com> tpm: tpm_tis: add error logging for data transfer Gunnar Kudrjavets <gunnarku(a)amazon.com> tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() Gunnar Kudrjavets <gunnarku(a)amazon.com> tpm: Fix auth session leak in tpm2_get_random() error path Gunnar Kudrjavets <gunnarku(a)amazon.com> tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public() Viorel Suman (OSS) <viorel.suman(a)oss.nxp.com> pwm: imx-tpm: Count the number of enabled channels in probe Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - rename first/last to first_desc/last_desc Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - fix SEC1 32k ahash request limitation Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> firmware: exynos-acpm: Drop fake 'const' on handle pointer Thomas Zimmermann <tzimmermann(a)suse.de> firmware: google: framebuffer: Do not unregister platform device Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> xfs: fix a resource leak in xfs_alloc_buftarg() Hans Holmberg <hans.holmberg(a)wdc.com> xfs: start gc on zonegc_low_space attribute updates Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - fix IRQ cleanup on 6xxx probe failure Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins Shawn Lin <shawn.lin(a)rock-chips.com> mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration Bin Liu <b-liu(a)ti.com> mmc: block: use single block write in retry Ryan Roberts <ryan.roberts(a)arm.com> randomize_kstack: Maintain kstack_offset per task Sanman Pradhan <psanman(a)juniper.net> hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() Paul Moore <paul(a)paul-moore.com> selinux: fix overlayfs mmap() and mprotect() access checks Paul Moore <paul(a)paul-moore.com> lsm: add backing_file LSM hooks Amir Goldstein <amir73il(a)gmail.com> fs: prepare for adding LSM blob to backing_file Barnabás Pőcze <barnabas.pocze+renesas(a)ideasonboard.com> media: rzv2h-ivc: Fix AXIRX_VBLANK register write Daniel Scally <dan.scally+renesas(a)ideasonboard.com> media: rzv2h-ivc: Revise default VBLANK formula Thomas Weißschuh <linux(a)weissschuh.net> hwmon: (powerz) Avoid cacheline sharing for DMA buffer Sanman Pradhan <psanman(a)juniper.net> hwmon: (isl28022) Fix integer overflow in power calculation on 32-bit Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> power: supply: axp288_charger: Do not cancel work before initializing it Thomas Zimmermann <tzimmermann(a)suse.de> fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Show CPU vulnerabilites correctly Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Make arch_irq_work_has_interrupt() true only if IPI HW exist Arnd Bergmann <arnd(a)arndb.de> tpm: avoid -Wunused-but-set-variable Nathan Chancellor <nathan(a)kernel.org> extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' Daniel J Blueman <daniel(a)quora.org> apparmor: Fix string overrun due to missing termination Johan Hovold <johan(a)kernel.org> spi: fix resource leaks on device setup failure Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() Ruide Cao <caoruide123(a)gmail.com> ipv4: icmp: validate reply type before using icmp_pointers Petr Mladek <pmladek(a)suse.com> printf: Compile the kunit test with DISABLE_BRANCH_PROFILING DISABLE_BRANCH_PROFILING hkbinbin <hkbinbinbin(a)gmail.com> RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/fprobe: Reject registration of a registered fprobe before init Marco Elver <elver(a)google.com> slub: fix data loss and overflow in krealloc() Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/arcpgu: fix device node leak Marek Vasut <marex(a)nabladev.com> net: ks8851: Avoid excess softirq scheduling Yuan Zhaoming <yuanzm2(a)lenovo.com> net: mctp: fix don't require received header reserved bits to be zero Breno Leitao <leitao(a)debian.org> netconsole: avoid out-of-bounds access on empty string in trim_newline() Zhengchuan Liang <zcliangcn(a)gmail.com> net: bridge: use a stable FDB dst snapshot in RCU readers Marek Vasut <marex(a)nabladev.com> net: ks8851: Reinstate disabling of BHs around IRQ handler Ruijie Li <ruijieli51(a)gmail.com> net/smc: avoid early lgr access in smc_clc_wait_msg Jiawen Wu <jiawenwu(a)trustnetic.com> net: txgbe: fix firmware version check Ao Zhou <draw51280(a)163.com> net: rds: fix MR cleanup on copy error Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: ns: Limit the total number of nodes Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: ns: Free the node during ctrl_cmd_bye() Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: ns: Limit the maximum number of lookups Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: ns: Limit the maximum server registration per node Robert Marko <robert.marko(a)sartura.hr> arm64: dts: marvell: uDPU: add ethernet aliases Jiawen Wu <jiawenwu(a)trustnetic.com> net: txgbe: fix RTNL assertion warning when remove module Yiyang Chen <cyyzero16(a)gmail.com> tools/accounting: handle truncated taskstats netlink messages Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> EDAC/versalnet: Fix memory leak in remove and probe error paths David Howells <dhowells(a)redhat.com> rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets David Howells <dhowells(a)redhat.com> rxrpc: Fix re-decryption of RESPONSE packets David Howells <dhowells(a)redhat.com> rxrpc: Fix error handling in rxgk_extract_token() David Howells <dhowells(a)redhat.com> rxrpc: Fix rxkad crypto unalignment handling David Howells <dhowells(a)redhat.com> rxrpc: Fix conn-level packet handling to unshare RESPONSE packets David Howells <dhowells(a)redhat.com> rxrpc: Fix memory leaks in rxkad_verify_response() David Howells <dhowells(a)redhat.com> rxrpc: Fix potential UAF after skb_unshare() failure Jonathan Santos <Jonathan.Santos(a)analog.com> iio: adc: ad7768-1: remove switch to one-shot mode Jonathan Santos <Jonathan.Santos(a)analog.com> iio: adc: ad7768-1: fix one-shot mode data acquisition Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: pcmtest: Fix resource leaks in module init error paths Guangshuo Li <lgs201920130244(a)gmail.com> ALSA: pcmtest: fix reference leak on failed device registration Spencer Payton <spayton681(a)gmail.com> ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa2xxx Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: 6fire: Fix input volume change detection Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Handle probe errors properly Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: caiaq: Fix control_put() result and cache rollback Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix potential data race at fasync handling Helge Deller <deller(a)gmx.de> module.lds.S: Fix modules on 32-bit parisc architecture Joe Lawrence <joe.lawrence(a)redhat.com> module.lds,codetag: force 0 sh_addr for sections Jens Axboe <axboe(a)kernel.dk> io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE Longxuan Yu <ylong030(a)ucr.edu> io_uring/poll: fix signed comparison in io_poll_get_ownership() Pavel Begunkov <asml.silence(a)gmail.com> io_uring/zcrx: fix user_struct uaf Jens Axboe <axboe(a)kernel.dk> io_uring/register: fix ring resizing with mixed/large SQEs/CQEs David Lechner <dlechner(a)baylibre.com> iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() Naman Jain <namjain(a)linux.microsoft.com> block: relax pgmap check in bio_add_page for compatible zone device pages Pavel Begunkov <asml.silence(a)gmail.com> io_uring/timeout: check unused sqe fields Pavel Begunkov <asml.silence(a)gmail.com> io_uring/zcrx: return back two step unregistration Damien Le Moal <dlemoal(a)kernel.org> block: fix zone write plugs refcount handling in disk_zone_wplug_schedule_bio_work() Matthew Brost <matthew.brost(a)intel.com> mm/zone_device: do not touch device folio after calling ->folio_free() Dawei Feng <dawei.feng(a)seu.edu.cn> rbd: fix null-ptr-deref when device_add_disk() fails Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Skip stale records in audit_match_record() Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Fix snprintf truncation checks in audit helpers Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Fix format warning for __u64 in net_test Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Drain stale audit records on init Mickaël Salaün <mic(a)digikod.net> landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1 Mickaël Salaün <mic(a)digikod.net> landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() Simon Liebold <simonlie(a)amazon.de> selftests/mqueue: Fix incorrectly named file Joseph Salisbury <joseph.salisbury(a)oracle.com> sched: Use u64 for bandwidth ratio calculations Tommaso Merciai <tommaso.merciai.xr(a)bp.renesas.com> reset: rzv2h-usb2phy: Keep PHY clock enabled for entire device lifetime Ben Levinsky <ben.levinsky(a)amd.com> remoteproc: xlnx: Only access buffer information if IPI is buffered Long Li <longli(a)microsoft.com> RDMA/mana_ib: Disable RX steering on RSS QP destroy Rong Bao <rong.bao(a)csmantle.top> perf annotate: Use jump__delete when freeing LoongArch jumps Franz Schnyder <franz.schnyder(a)toradex.com> PCI: imx6: Fix reference clock source selection for i.MX95 Aksh Garg <a-garg7(a)ti.com> PCI: cadence: Use cdns_pcie_read_sz() for byte or word read access Helge Deller <deller(a)gmx.de> parisc: Drop ip_fast_csum() inline assembly implementation Helge Deller <deller(a)gmx.de> parisc: _llseek syscall is only available for 32-bit userspace Robert Beckett <bob.beckett(a)collabora.com> nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set Robert Beckett <bob.beckett(a)collabora.com> nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 James Kim <james010kim(a)gmail.com> mtd: docg3: fix use-after-free in docg3_release() Thorsten Blum <thorsten.blum(a)linux.dev> mm/hugetlb: fix early boot crash on parameters without '=' separator SeongJae Park <sj(a)kernel.org> mm/damon/core: fix damos_walk() vs kdamond_fn() exit race SeongJae Park <sj(a)kernel.org> mm/damon/core: fix damon_call() vs kdamond_fn() exit race Hao Ge <hao.ge(a)linux.dev> mm/alloc_tag: clear codetag for pages allocated before page_ext initialization Marek Vasut <marex(a)nabladev.com> mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused Michael Riesch <michael.riesch(a)collabora.com> media: rockchip: rkcif: comply with minimum number of buffers requirement Dan Carpenter <dan.carpenter(a)linaro.org> media: rockchip: rkcif: fix off by one bugs Oliver Neukum <oneukum(a)suse.com> media: rc: igorplugusb: heed coherency rules Josh Hunt <johunt(a)akamai.com> md/raid10: fix deadlock with check operation and nowait requests Sean Christopherson <seanjc(a)google.com> KVM: selftests: Fix reserved value WRMSR testcase for multi-feature MSRs Zhang Yi <yi.zhang(a)huawei.com> jbd2: fix deadlock in jbd2_journal_cancel_revoke() Corey Minyard <corey(a)minyard.net> ipmi:ssif: Clean up kthread on errors Gao Xiang <xiang(a)kernel.org> erofs: fix the out-of-bounds nameoff handling for trailing dirents Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes Harin Lee <me(a)harin.net> ALSA: ctxfi: Add fallback to default RSR for S/PDIF Thorsten Blum <thorsten.blum(a)linux.dev> ALSA: aoa: Skip devices with no codecs in i2sbus_resume() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: aoa: i2sbus: fix OF node lifetime handling Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: aoa: i2sbus: clear stale prepared state Shigeru Yoshida <syoshida(a)redhat.com> mm/zsmalloc: copy KMSAN metadata in zs_page_migrate() Vasiliy Kovalev <kovalev(a)altlinux.org> ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: ns: Fix use-after-free in driver remove() Chen Ni <nichen(a)iscas.ac.cn> media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() Josh Law <objecting(a)objecting.org> lib/ts_kmp: fix integer overflow in pattern length calculation Daniel Hodges <git(a)danielhodges.dev> PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete Elson Serrao <elson.serrao(a)oss.qualcomm.com> phy: qcom: m31-eusb2: clear PLL_EN during init Rong Zhang <i(a)rong.moe> Revert "ALSA: usb: Increase volume range that triggers a warning" Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OTP sysfs read and error handling Fan Wu <fanwu01(a)zju.edu.cn> media: mtk-jpeg: fix use-after-free in release path due to uncancelled work Luxiao Xu <rakukuip(a)gmail.com> net: strparser: fix skb_head leak in strp_abort_strp() Zhengchuan Liang <zcliangcn(a)gmail.com> net: caif: clear client service pointer on teardown Ziqing Chen <chenziqing(a)xiaomi.com> ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() Ming Qian <ming.qian(a)oss.nxp.com> media: amphion: Fix race between m2m job_abort and device_run Richard Zhu <hongxing.zhu(a)nxp.com> PCI: imx6: Skip waiting for L2/L3 Ready on i.MX6SX Felix Gu <ustc.gu(a)gmail.com> EDAC/versalnet: Fix device_node leak in mc_probe() Sanman Pradhan <psanman(a)juniper.net> hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt Wentao Liang <vulab(a)iscas.ac.cn> of: unittest: fix use-after-free in testdrv_probe() Wentao Liang <vulab(a)iscas.ac.cn> of: unittest: fix use-after-free in of_unittest_changeset() Swamil Jain <s-jain1(a)ti.com> dt-bindings: display: ti, am65x-dss: Fix AM62L DSS reg and clock constraints Herbert Xu <herbert(a)gondor.apana.org.au> crypto: pcrypt - Fix handling of MAY_BACKLOG requests Douya Le <ldy3087146292(a)gmail.com> crypto: algif_aead - snapshot IV for async AEAD requests Johan Hovold <johan(a)kernel.org> spi: ch341: fix memory leaks on probe failures Johan Hovold <johan(a)kernel.org> spi: imx: fix use-after-free on unbind Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Fix thermal zone governor cleanup issues Michael Bommarito <michael.bommarito(a)gmail.com> um: drivers: call kernel_strrchr() explicitly in cow_user.c Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> vfio/cdx: Fix NULL pointer dereference in interrupt trigger path Alex Williamson <alex.williamson(a)nvidia.com> vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex Alex Williamson <alex.williamson(a)nvidia.com> vfio/virtio: Convert list_lock from spinlock to mutex Michał Winiarski <michal.winiarski(a)intel.com> vfio/xe: Add a missing vfio_pci_core_release_dev() Manish Honap <mhonap(a)nvidia.com> vfio: selftests: Fix VLA initialisation in vfio_pci_irq_set() Daniel Hodges <git(a)danielhodges.dev> wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() Fedor Pchelkin <pchelkin(a)ispras.ru> wifi: rtw88: check for PCI upstream bridge existence Sergey Senozhatsky <senozhatsky(a)chromium.org> zram: do not forget to endio for partial discard requests Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: edt-ft5x06 - fix use-after-free in debugfs teardown Heming Zhao <heming.zhao(a)suse.com> ocfs2: split transactions in dio completion to avoid credit exhaustion Lance Yang <lance.yang(a)linux.dev> mm: fix deferred split queue races during migration Anthony Yznaga <anthony.yznaga(a)oracle.com> mm: prevent droppable mappings from being locked Usama Arif <usama.arif(a)linux.dev> mm: migrate: requeue destination folio on deferred split queue Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Fix rodata=full block mapping support for realm guests Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Enable batched TLB flush in unmap_hotplug_range() Alistair Popple <apopple(a)nvidia.com> lib: test_hmm: evict device pages on file close to avoid use-after-free Thomas Zimmermann <tzimmermann(a)suse.de> firmware: google: framebuffer: Do not mark framebuffer as busy Lorenzo Stoakes (Oracle) <ljs(a)kernel.org> fs: afs: revert mmap_prepare() change Miguel Ojeda <ojeda(a)kernel.org> kbuild: rust: allow `clippy::uninlined_format_args` Danilo Krummrich <dakr(a)kernel.org> rust: dma: remove DMA_ATTR_NO_KERNEL_MAPPING from public attrs David Carlier <devnexen(a)gmail.com> drm/nouveau: fix nvkm_device leak on aperture removal failure Douglas Anderson <dianders(a)chromium.org> device property: Make modifications of fwnode "flags" thread safe Douglas Anderson <dianders(a)chromium.org> driver core: Don't let a device probe until it's ready Thomas Weißschuh <linux(a)weissschuh.net> sysfs: attribute_group: Respect is_visible_const() when changing owner Tyllis Xu <livelycarpet87(a)gmail.com> ibmasm: fix heap over-read in ibmasm_send_i2o_message() Tyllis Xu <livelycarpet87(a)gmail.com> ibmasm: fix OOB reads in command_file_write due to missing size checks Tyllis Xu <livelycarpet87(a)gmail.com> misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() Weigang He <geoffreyhe2(a)gmail.com> greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames() Pengpeng Hou <pengpeng(a)iscas.ac.cn> greybus: gb-beagleplay: bound bootloader receive buffering Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> leds: qcom-lpg: Check for array overflow when selecting the high resolution Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/nouveau: fix u32 overflow in pushbuf reloc bounds check Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> LoongArch: Add spectre boundry for syscall dispatch table Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Evaluate packsize caps at the right place Xu Yang <xu.yang_2(a)nxp.com> usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change Xu Yang <xu.yang_2(a)nxp.com> usb: chipidea: otg: not wait vbus drop if use role_switch Michal Pecio <michal.pecio(a)gmail.com> usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Avoid false E-MU sample-rate notifications Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES ------------- Diffstat: .../bindings/display/ti/ti,am65x-dss.yaml | 70 ++-- Documentation/scheduler/sched-ext.rst | 14 +- Makefile | 5 +- arch/Kconfig | 7 + arch/arm/mm/flush.c | 4 +- arch/arm64/boot/dts/marvell/armada-3720-uDPU.dtsi | 5 + arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 20 +- arch/arm64/crypto/aes-modes.S | 4 +- arch/arm64/include/asm/mmu.h | 2 + arch/arm64/kvm/config.c | 4 +- arch/arm64/mm/init.c | 9 +- arch/arm64/mm/mmu.c | 81 +++-- arch/loongarch/include/asm/irq_work.h | 2 +- arch/loongarch/kernel/cpu-probe.c | 7 + arch/loongarch/kernel/syscall.c | 3 +- arch/loongarch/kvm/vcpu.c | 2 +- arch/parisc/Kconfig | 4 + arch/parisc/include/asm/checksum.h | 89 +---- arch/parisc/kernel/syscalls/syscall.tbl | 2 +- arch/parisc/lib/Makefile | 2 +- arch/parisc/lib/checksum.c | 99 ------ arch/um/drivers/cow_user.c | 8 +- arch/x86/Kconfig | 1 + arch/x86/kernel/shstk.c | 42 +-- arch/x86/kvm/hyperv.h | 8 - arch/x86/kvm/svm/hyperv.h | 9 +- arch/x86/kvm/svm/nested.c | 201 +++++++----- arch/x86/kvm/svm/svm.c | 150 +++++++-- arch/x86/kvm/svm/svm.h | 17 +- arch/x86/kvm/x86.c | 65 ++-- arch/x86/mm/pti.c | 5 + block/bio-integrity.c | 6 +- block/bio.c | 6 +- block/blk-zoned.c | 12 +- block/blk.h | 19 ++ certs/extract-cert.c | 6 +- crypto/acompress.c | 8 +- crypto/algif_aead.c | 10 +- crypto/authencesn.c | 5 + crypto/pcrypt.c | 7 +- drivers/base/core.c | 39 ++- drivers/base/dd.c | 20 ++ drivers/block/rbd.c | 6 +- drivers/block/zram/zram_drv.c | 3 +- drivers/bus/imx-weim.c | 2 +- drivers/bus/mhi/host/pci_generic.c | 2 +- drivers/char/ipmi/ipmi_ssif.c | 13 +- drivers/char/tpm/tpm-chip.c | 2 +- drivers/char/tpm/tpm2-cmd.c | 6 +- drivers/char/tpm/tpm2-sessions.c | 5 +- drivers/char/tpm/tpm_tis_core.c | 11 +- drivers/clk/samsung/clk-acpm.c | 4 +- drivers/crypto/atmel-aes.c | 2 +- drivers/crypto/atmel-ecc.c | 1 + drivers/crypto/atmel-i2c.c | 4 +- drivers/crypto/atmel-sha204a.c | 37 ++- drivers/crypto/atmel-tdes.c | 8 +- drivers/crypto/ccree/cc_hash.c | 1 + drivers/crypto/hisilicon/sec/sec_algs.c | 2 +- drivers/crypto/intel/qat/qat_6xxx/adf_drv.c | 4 +- drivers/crypto/nx/nx-842.c | 10 +- drivers/crypto/nx/nx-842.h | 4 +- drivers/crypto/talitos.c | 340 ++++++++++++-------- drivers/edac/versalnet_edac.c | 6 +- drivers/firmware/google/framebuffer-coreboot.c | 12 +- drivers/firmware/samsung/exynos-acpm-dvfs.c | 4 +- drivers/firmware/samsung/exynos-acpm-dvfs.h | 4 +- drivers/firmware/samsung/exynos-acpm-pmic.c | 10 +- drivers/firmware/samsung/exynos-acpm-pmic.h | 10 +- drivers/firmware/samsung/exynos-acpm.c | 16 +- drivers/firmware/samsung/exynos-acpm.h | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 3 + drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 52 ++- drivers/gpu/drm/imagination/pvr_fw_trace.c | 2 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 2 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 +- drivers/gpu/drm/tiny/arcpgu.c | 3 +- drivers/greybus/gb-beagleplay.c | 112 ++++++- drivers/hid/hid-apple.c | 2 + drivers/hwmon/isl28022.c | 5 +- drivers/hwmon/powerz.c | 16 +- drivers/hwmon/pt5161l.c | 4 +- drivers/i2c/i2c-core-of.c | 2 +- drivers/iio/adc/ad7768-1.c | 16 +- drivers/iio/adc/ti-ads7950.c | 11 +- drivers/iio/frequency/admv1013.c | 90 +++--- drivers/infiniband/core/addr.c | 3 + drivers/infiniband/hw/mana/qp.c | 15 + drivers/infiniband/sw/rxe/rxe_recv.c | 3 +- drivers/input/touchscreen/edt-ft5x06.c | 3 + drivers/leds/rgb/leds-qcom-lpg.c | 7 +- drivers/md/dm-raid1.c | 6 +- drivers/md/md-llbitmap.c | 11 +- drivers/md/raid10.c | 4 +- drivers/md/raid5-cache.c | 48 ++- drivers/md/raid5.c | 8 +- drivers/media/i2c/imx219.c | 3 + drivers/media/platform/amphion/vpu_v4l2.c | 9 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 1 + .../platform/renesas/rzv2h-ivc/rzv2h-ivc-video.c | 9 +- .../media/platform/renesas/rzv2h-ivc/rzv2h-ivc.h | 2 +- .../platform/rockchip/rkcif/rkcif-capture-mipi.c | 10 +- .../media/platform/rockchip/rkcif/rkcif-stream.c | 44 +-- drivers/media/rc/igorplugusb.c | 16 +- drivers/mfd/mfd-core.c | 12 +- drivers/mfd/sec-acpm.c | 10 +- drivers/mfd/stpmic1.c | 20 +- drivers/misc/ibmasm/ibmasmfs.c | 7 + drivers/misc/ibmasm/lowlevel.c | 12 +- drivers/misc/ibmasm/remote.c | 5 + drivers/misc/mei/bus-fixup.c | 6 +- drivers/misc/mei/hw-me-regs.h | 163 +++++----- drivers/misc/mei/hw-me.h | 6 - drivers/misc/mei/pci-me.c | 163 +++++----- drivers/mmc/core/block.c | 12 +- drivers/mmc/core/queue.h | 3 + drivers/mmc/host/sdhci-of-dwcmshc.c | 19 +- drivers/mtd/devices/docg3.c | 3 +- drivers/mtd/nand/spi/winbond.c | 4 +- drivers/mtd/spi-nor/sst.c | 13 + drivers/net/can/usb/ucan.c | 2 +- drivers/net/ethernet/micrel/ks8851.h | 6 +- drivers/net/ethernet/micrel/ks8851_common.c | 69 ++-- drivers/net/ethernet/micrel/ks8851_par.c | 15 +- drivers/net/ethernet/micrel/ks8851_spi.c | 11 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 11 +- drivers/net/ethernet/wangxun/txgbe/txgbe_main.c | 3 +- drivers/net/ethernet/wangxun/txgbe/txgbe_phy.c | 2 + drivers/net/gtp.c | 2 + drivers/net/netconsole.c | 2 + drivers/net/phy/mdio_bus_provider.c | 4 +- drivers/net/wireless/marvell/mwifiex/init.c | 2 +- drivers/net/wireless/mediatek/mt76/mt792x_regs.h | 4 + drivers/net/wireless/mediatek/mt76/mt792x_usb.c | 51 ++- drivers/net/wireless/realtek/rtl8xxxu/core.c | 28 +- drivers/net/wireless/realtek/rtw88/pci.c | 3 +- drivers/nvme/host/core.c | 2 +- drivers/nvme/host/pci.c | 2 + drivers/of/base.c | 2 +- drivers/of/dynamic.c | 2 +- drivers/of/platform.c | 2 +- drivers/of/unittest.c | 4 +- drivers/pci/controller/cadence/pcie-cadence.h | 56 ++-- drivers/pci/controller/dwc/pci-imx6.c | 5 +- drivers/pci/endpoint/functions/pci-epf-mhi.c | 4 + drivers/pci/endpoint/functions/pci-epf-ntb.c | 56 +--- drivers/phy/qualcomm/phy-qcom-m31-eusb2.c | 2 +- drivers/power/supply/axp288_charger.c | 19 +- drivers/pwm/pwm-imx-tpm.c | 9 +- drivers/remoteproc/xlnx_r5_remoteproc.c | 20 +- drivers/reset/reset-rzv2h-usb2phy.c | 64 ++-- drivers/rtc/rtc-ntxec.c | 2 +- drivers/scsi/sd.c | 1 + drivers/spi/spi-ch341.c | 36 ++- drivers/spi/spi-imx.c | 4 + drivers/spi/spi.c | 63 ++-- drivers/thermal/thermal_core.c | 7 +- drivers/usb/chipidea/core.c | 45 +-- drivers/usb/chipidea/otg.c | 7 +- drivers/usb/host/xhci.c | 1 - drivers/vfio/cdx/intr.c | 13 +- drivers/vfio/cdx/main.c | 19 ++ drivers/vfio/cdx/private.h | 3 + drivers/vfio/pci/virtio/common.h | 2 +- drivers/vfio/pci/virtio/migrate.c | 33 +- drivers/vfio/pci/xe/main.c | 1 + drivers/video/fbdev/core/fb_defio.c | 178 +++++++--- fs/9p/v9fs.c | 4 + fs/afs/file.c | 12 +- fs/backing-file.c | 18 +- fs/ceph/addr.c | 4 + fs/ceph/dir.c | 6 +- fs/erofs/decompressor.c | 1 + fs/erofs/dir.c | 28 +- fs/erofs/ishare.c | 10 +- fs/ext2/inode.c | 14 +- fs/ext4/xattr.c | 6 +- fs/file_table.c | 43 ++- fs/fuse/passthrough.c | 2 +- fs/internal.h | 3 +- fs/jbd2/revoke.c | 8 +- fs/nfs/internal.h | 2 + fs/nfs/nfs4client.c | 4 +- fs/nfs/nfs4proc.c | 3 + fs/notify/inotify/inotify_user.c | 1 + fs/ntfs3/run.c | 18 +- fs/ocfs2/aops.c | 74 +++-- fs/overlayfs/dir.c | 2 +- fs/overlayfs/file.c | 2 +- fs/sysfs/group.c | 7 +- fs/udf/super.c | 4 +- fs/userfaultfd.c | 2 - fs/xfs/xfs_buf.c | 1 + fs/xfs/xfs_sysfs.c | 7 +- fs/xfs/xfs_zone_alloc.h | 4 + fs/xfs/xfs_zone_gc.c | 17 + include/asm-generic/codetag.lds.h | 2 +- include/linux/alloc_tag.h | 2 + include/linux/backing-file.h | 4 +- include/linux/damon.h | 2 + include/linux/device.h | 45 +++ include/linux/fb.h | 4 +- .../linux/firmware/samsung/exynos-acpm-protocol.h | 40 +-- include/linux/fs.h | 15 +- include/linux/fwnode.h | 44 ++- include/linux/hugetlb_inline.h | 2 +- include/linux/lsm_audit.h | 2 +- include/linux/lsm_hook_defs.h | 5 + include/linux/lsm_hooks.h | 1 + include/linux/mm.h | 7 +- include/linux/pgalloc_tag.h | 2 +- include/linux/randomize_kstack.h | 26 +- include/linux/sched.h | 4 + include/linux/security.h | 22 ++ include/linux/tpm_eventlog.h | 9 +- include/linux/usb.h | 3 +- include/net/mana/mana.h | 1 + include/net/mctp.h | 3 + include/trace/events/rxrpc.h | 6 +- include/uapi/linux/landlock.h | 4 +- init/main.c | 1 - io_uring/io_uring.c | 4 + io_uring/poll.c | 6 +- io_uring/register.c | 32 +- io_uring/timeout.c | 4 + io_uring/zcrx.c | 48 ++- io_uring/zcrx.h | 4 + kernel/fork.c | 2 + kernel/locking/rtmutex.c | 13 +- kernel/sched/core.c | 2 +- kernel/sched/rt.c | 2 +- kernel/sched/sched.h | 2 +- kernel/taskstats.c | 1 + kernel/trace/fprobe.c | 21 +- kernel/trace/ring_buffer.c | 13 +- lib/alloc_tag.c | 109 +++++++ lib/test_hmm.c | 112 ++++--- lib/tests/Makefile | 2 + lib/ts_kmp.c | 18 +- mm/damon/core.c | 101 +++--- mm/damon/stat.c | 5 +- mm/huge_memory.c | 15 +- mm/hugetlb.c | 3 + mm/internal.h | 42 ++- mm/memfd_luo.c | 7 +- mm/memory.c | 53 +-- mm/mempolicy.c | 23 +- mm/memremap.c | 2 +- mm/migrate.c | 17 + mm/mlock.c | 10 +- mm/page_alloc.c | 15 +- mm/slub.c | 28 +- mm/swapfile.c | 21 +- mm/util.c | 131 ++++---- mm/vma.c | 39 ++- mm/vmalloc.c | 3 +- mm/zsmalloc.c | 1 + net/bluetooth/hci_event.c | 18 +- net/bridge/br_arp_nd_proxy.c | 8 +- net/bridge/br_fdb.c | 28 +- net/caif/cfsrvl.c | 14 +- net/ceph/auth.c | 2 +- net/ipv4/icmp.c | 5 +- net/ipv4/inet_connection_sock.c | 3 + net/ipv6/exthdrs.c | 9 +- net/ipv6/rpl_iptunnel.c | 9 + net/ipv6/seg6_iptunnel.c | 12 +- net/mctp/route.c | 8 +- net/mptcp/protocol.c | 2 +- net/netfilter/nft_bitwise.c | 3 +- net/qrtr/ns.c | 79 ++++- net/rds/rdma.c | 4 - net/rxrpc/ar-internal.h | 1 - net/rxrpc/call_event.c | 20 +- net/rxrpc/conn_event.c | 43 ++- net/rxrpc/io_thread.c | 24 +- net/rxrpc/rxgk_app.c | 3 +- net/rxrpc/rxgk_common.h | 1 + net/rxrpc/rxkad.c | 112 +++---- net/rxrpc/skbuff.c | 9 - net/smc/smc_clc.c | 4 +- net/strparser/strparser.c | 8 + rust/kernel/dma.rs | 3 - scripts/check-uapi.sh | 7 +- scripts/module.lds.S | 14 +- security/apparmor/lsm.c | 16 +- security/apparmor/path.c | 8 +- security/landlock/cred.c | 6 +- security/landlock/syscalls.c | 14 +- security/lsm.h | 1 + security/lsm_init.c | 9 + security/security.c | 102 ++++++ security/selinux/hooks.c | 256 +++++++++++---- security/selinux/include/objsec.h | 11 + sound/aoa/soundbus/i2sbus/core.c | 12 +- sound/aoa/soundbus/i2sbus/pcm.c | 71 ++-- sound/core/control.c | 4 + sound/core/misc.c | 13 +- sound/core/seq/oss/seq_oss_rw.c | 6 +- sound/drivers/aloop.c | 43 ++- sound/drivers/pcmtest.c | 19 +- sound/hda/codecs/realtek/alc269.c | 1 + sound/pci/ctxfi/ctatc.c | 3 +- sound/usb/6fire/control.c | 10 +- sound/usb/caiaq/control.c | 52 ++- sound/usb/caiaq/device.c | 35 +- sound/usb/caiaq/input.c | 2 +- sound/usb/endpoint.c | 6 +- sound/usb/format.c | 2 +- sound/usb/mixer.c | 7 +- sound/usb/mixer_quirks.c | 12 +- tools/accounting/getdelays.c | 41 ++- tools/accounting/procacct.c | 40 ++- tools/perf/arch/loongarch/util/Build | 1 - tools/perf/util/annotate-arch/annotate-loongarch.c | 1 + tools/perf/util/disasm.c | 2 +- tools/perf/util/disasm.h | 2 + tools/testing/ktest/ktest.pl | 2 +- tools/testing/selftests/kvm/x86/msrs_test.c | 2 +- tools/testing/selftests/landlock/audit.h | 105 ++++-- tools/testing/selftests/landlock/audit_test.c | 357 +++++++++++++++++++-- tools/testing/selftests/landlock/net_test.c | 2 +- tools/testing/selftests/landlock/ptrace_test.c | 1 - .../selftests/landlock/scoped_abstract_unix_test.c | 1 - tools/testing/selftests/landlock/tsync_test.c | 77 +++++ .../testing/selftests/mqueue/{setting => settings} | 0 tools/testing/selftests/vfio/lib/vfio_pci_device.c | 4 +- tools/testing/vma/include/dup.h | 7 +- tools/testing/vma/include/stubs.h | 13 +- 329 files changed, 4508 insertions(+), 2269 deletions(-)

1 month, 1 week

Incoming Mails on Hold for lkft-triage@lists.linaro.org

by Admin lists.linaro.org

Incoming Failed Messages The following messages have been quarantined by your administrator as inline attachment has exceeded server quota. You can view 5 new messages in your email quarantine below: Status Recipient Subject Date [1]Read lkft-triage(a)lists.linaro.org Proforma Invoice 5/5/2026 11:49:35 p.m. [2]Read lkft-triage(a)lists.linaro.org Payment Confirmation 5/5/2026 11:49:35 p.m. [3]Read lkft-triage(a)lists.linaro.org Export Requirements 5/5/2026 11:49:35 p.m. [4]Read All Thank you for your attention. (c) Powered by: IT lists.linaro.org Support. References 1. https://url1.io/rFtSx#lkft-triage@lists.linaro.org 2. https://url1.io/rFtSx#lkft-triage@lists.linaro.org 3. https://url1.io/rFtSx#lkft-triage@lists.linaro.org 4. https://url1.io/rFtSx#lkft-triage@lists.linaro.org

1 month, 1 week

MWC Shanghai 2026 Contacts - 40% OFF!

by Aaron Daniel

Hi, We’re pleased to offer you exclusive access to the MWC Shanghai 2026 Visitor Contact List—a powerful resource to connect directly with key industry professionals. Event Recap:- Date: 24 - 26 Jun 2026 Registrants Counts: 45,754 Visitors Contacts Data Fields Available: Individual Email Address, Cell Phone Number, Contact Name, Job Title, Company Name, Website, Physical Address, LinkedIn Profile, and more. Get 40% off Reply Today! If you're interested, let me know and I’ll be happy to share the pricing details. Best regards, Aaron Daniel Sr. Marketing Manager If you do not wish to receive this newsletter reply “Not interested”

1 month, 1 week

[PATCH 6.12 00/35] 6.12.84-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.84 release. There are 35 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 26 Apr 2026 13:23:21 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.84-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.84-rc1 Anderson Nascimento <anderson(a)allelesecurity.com> rxrpc: Fix missing validation of ticket length in non-XDR key preparsing Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed Bingquan Chen <patzilla007(a)gmail.com> net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: take a reference on the USB device in create_card() Cryolitia PukNgae <cryolitia.pukngae(a)linux.dev> ALSA: usb-audio: apply quirk for MOONDROP JU Jiu George Saad <geoo115(a)gmail.com> f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() Tristan Madani <tristan(a)talencesecurity.com> ksmbd: use check_add_overflow() to prevent u16 DACL size overflow Tristan Madani <tristan(a)talencesecurity.com> ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment Michael Bommarito <michael.bommarito(a)gmail.com> ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() Michael Bommarito <michael.bommarito(a)gmail.com> ksmbd: validate response sizes in ipc_validate_msg() Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: require a full NFS mode SID before reading mode bits DaeMyung Kang <charsyam(a)gmail.com> smb: server: fix max_connections off-by-one in tcp accept path Michael Bommarito <michael.bommarito(a)gmail.com> smb: server: fix active_num_conn leak on transport allocation failure Michael Bommarito <michael.bommarito(a)gmail.com> ksmbd: require minimum ACE size in smb_check_perm_dacl() Darrick J. Wong <djwong(a)kernel.org> fuse: quiet down complaints in fuse_conn_limit_write Bernd Schubert <bschubert(a)ddn.com> fuse: Check for large folio with SPLICE_F_MOVE Samuel Page <sam(a)bynar.io> fuse: reject oversized dirents in page cache Chao Yu <chao(a)kernel.org> f2fs: fix to avoid memory leak in f2fs_rename() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fs/ntfs3: validate rec->used in journal-replay file record check Wang Jie <jiewang2024(a)lzu.edu.cn> rxrpc: only handle RESPONSE during service challenge Nathan Chancellor <nathan(a)kernel.org> scripts/dtc: Remove unused dts_version in dtc-lexer.l Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger Max Boone <mboone(a)akamai.com> mm/pagewalk: fix race between concurrent split and refault Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer.py: define scripts Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amdgpu: replace PASID IDR with XArray Daniel Golle <daniel(a)makrotopia.org> net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers Miguel Ojeda <ojeda(a)kernel.org> rust: warn on bindgen < 0.69.5 and libclang >= 19.1 Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure Steven Chen <chenste(a)linux.microsoft.com> ima: do not copy measurement list to kdump kernel Steven Chen <chenste(a)linux.microsoft.com> ima: verify if the segment size has changed Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown Jianhui Zhou <jianhuizzzzz(a)gmail.com> mm/userfaultfd: fix hugetlb fault mutex hash calculation ------------- Diffstat: Makefile | 4 +- drivers/crypto/ccp/sev-dev.c | 19 ++++++- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 39 +++++++------- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 22 +++++++- drivers/net/ethernet/mediatek/mtk_ppe.c | 30 +++++++++++ drivers/net/ethernet/mediatek/mtk_ppe.h | 1 + drivers/net/wireless/ath/ath9k/channel.c | 6 +-- drivers/net/wireless/virtual/mac80211_hwsim.c | 1 - drivers/pci/endpoint/functions/pci-epf-vntb.c | 18 +------ fs/f2fs/compress.c | 14 +++-- fs/f2fs/namei.c | 1 + fs/fuse/control.c | 4 +- fs/fuse/dev.c | 3 ++ fs/fuse/readdir.c | 4 ++ fs/ntfs3/fslog.c | 12 ++++- fs/smb/client/cifsacl.c | 1 + fs/smb/client/smb2ops.c | 6 +++ fs/smb/server/mgmt/user_config.c | 6 --- fs/smb/server/smb2pdu.c | 2 + fs/smb/server/smbacl.c | 61 +++++++++++++++++----- fs/smb/server/transport_ipc.c | 16 ++++-- fs/smb/server/transport_tcp.c | 4 +- fs/smb/server/vfs_cache.c | 41 +++++++++++---- include/linux/hugetlb.h | 17 ++++++ include/net/mac80211.h | 4 +- mm/pagewalk.c | 24 ++++++++- mm/userfaultfd.c | 2 +- net/mac80211/tx.c | 4 +- net/packet/af_packet.c | 21 +++++--- net/rxrpc/conn_event.c | 14 ++++- net/rxrpc/key.c | 4 ++ scripts/dtc/dtc-lexer.l | 3 -- scripts/generate_rust_analyzer.py | 14 ++++- scripts/rust_is_available.sh | 15 ++++++ .../rust_is_available_bindgen_libclang_concat.h | 3 ++ scripts/rust_is_available_test.py | 34 +++++++++++- security/integrity/ima/ima_kexec.c | 13 +++++ sound/usb/caiaq/device.c | 4 +- sound/usb/mixer.c | 7 +++ 39 files changed, 389 insertions(+), 109 deletions(-)

1 month, 2 weeks

[PATCH 7.0 00/42] 7.0.2-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.0.2 release. There are 42 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 26 Apr 2026 13:23:22 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.0.2-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.0.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.0.2-rc1 Naman Jain <namjain(a)linux.microsoft.com> mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER Anderson Nascimento <anderson(a)allelesecurity.com> rxrpc: Fix missing validation of ticket length in non-XDR key preparsing Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed Bingquan Chen <patzilla007(a)gmail.com> net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: take a reference on the USB device in create_card() Eric Naim <dnaim(a)cachyos.org> ALSA: hda/realtek: Add quirk for Legion S7 15IMH Cryolitia PukNgae <cryolitia.pukngae(a)linux.dev> ALSA: usb-audio: apply quirk for MOONDROP JU Jiu George Saad <geoo115(a)gmail.com> f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() Jan Kara <jack(a)suse.cz> writeback: Fix use after free in inode_switch_wbs_work_fn() DaeMyung Kang <charsyam(a)gmail.com> ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() Tristan Madani <tristan(a)talencesecurity.com> ksmbd: use check_add_overflow() to prevent u16 DACL size overflow Tristan Madani <tristan(a)talencesecurity.com> ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment Michael Bommarito <michael.bommarito(a)gmail.com> ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() Michael Bommarito <michael.bommarito(a)gmail.com> ksmbd: validate response sizes in ipc_validate_msg() Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: validate the whole DACL before rewriting it in cifsacl Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: require a full NFS mode SID before reading mode bits DaeMyung Kang <charsyam(a)gmail.com> smb: server: fix max_connections off-by-one in tcp accept path Paulo Alcantara <pc(a)manguebit.org> smb: client: fix dir separator in SMB1 UNIX mounts Michael Bommarito <michael.bommarito(a)gmail.com> smb: server: fix active_num_conn leak on transport allocation failure Michael Bommarito <michael.bommarito(a)gmail.com> ksmbd: require minimum ACE size in smb_check_perm_dacl() Miklos Szeredi <mszeredi(a)redhat.com> fuse: fuse_dev_ioctl_clone() should wait for device file to be initialized Darrick J. Wong <djwong(a)kernel.org> fuse: quiet down complaints in fuse_conn_limit_write Bernd Schubert <bschubert(a)ddn.com> fuse: Check for large folio with SPLICE_F_MOVE Miklos Szeredi <mszeredi(a)redhat.com> fuse: abort on fatal signal during sync init Samuel Page <sam(a)bynar.io> fuse: reject oversized dirents in page cache Chao Yu <chao(a)kernel.org> f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer Chao Yu <chao(a)kernel.org> f2fs: fix to avoid memory leak in f2fs_rename() Yongpeng Yang <yangyongpeng(a)xiaomi.com> f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() Chao Yu <chao(a)kernel.org> f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fs/ntfs3: validate rec->used in journal-replay file record check Nathan Chancellor <nathan(a)kernel.org> scripts/dtc: Remove unused dts_version in dtc-lexer.l Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer.py: define scripts Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate owner of durable handle on reconnect Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger Dudu Lu <phx0fer(a)gmail.com> crypto: krb5enc - fix async decrypt skipping hash verification Wesley Atwell <atwellwea(a)gmail.com> crypto: krb5enc - fix sleepable flag handling in encrypt dispatch Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amdgpu: replace PASID IDR with XArray Miguel Ojeda <ojeda(a)kernel.org> pwm: th1520: fix `CLIPPY=1` warning Herbert Xu <herbert(a)gondor.apana.org.au> crypto: authencesn - Fix src offset when decrypting in-place ------------- Diffstat: Makefile | 4 +- crypto/authencesn.c | 6 +- crypto/krb5enc.c | 51 ++++++++----- drivers/crypto/ccp/sev-dev.c | 19 ++++- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 39 +++++----- drivers/hv/mshv_vtl_main.c | 12 ++- drivers/pwm/pwm_th1520.rs | 5 +- fs/f2fs/compress.c | 14 +++- fs/f2fs/data.c | 7 +- fs/f2fs/f2fs.h | 2 +- fs/f2fs/namei.c | 1 + fs/f2fs/segment.c | 6 +- fs/f2fs/super.c | 11 ++- fs/fs-writeback.c | 36 ++++----- fs/fuse/control.c | 4 +- fs/fuse/dev.c | 30 +++++--- fs/fuse/fuse_i.h | 1 + fs/fuse/inode.c | 1 + fs/fuse/readdir.c | 4 + fs/ntfs3/fslog.c | 12 ++- fs/smb/client/cifsacl.c | 117 +++++++++++++++++++++-------- fs/smb/client/connect.c | 10 +-- fs/smb/client/smb1ops.c | 19 ++--- fs/smb/client/smb2ops.c | 6 ++ fs/smb/server/connection.c | 5 +- fs/smb/server/mgmt/user_config.c | 6 -- fs/smb/server/mgmt/user_session.c | 8 +- fs/smb/server/oplock.c | 7 ++ fs/smb/server/oplock.h | 1 + fs/smb/server/smb2pdu.c | 5 +- fs/smb/server/smbacl.c | 61 +++++++++++---- fs/smb/server/transport_ipc.c | 16 +++- fs/smb/server/transport_tcp.c | 4 +- fs/smb/server/vfs_cache.c | 128 +++++++++++++++++++++++++++----- fs/smb/server/vfs_cache.h | 12 ++- include/uapi/linux/mshv.h | 2 +- net/packet/af_packet.c | 21 ++++-- net/rxrpc/key.c | 4 + scripts/dtc/dtc-lexer.l | 3 - scripts/generate_rust_analyzer.py | 14 +++- sound/hda/codecs/realtek/alc269.c | 1 + sound/usb/caiaq/device.c | 4 +- sound/usb/mixer.c | 7 ++ 43 files changed, 513 insertions(+), 213 deletions(-)

1 month, 2 weeks

Verified DMEA Berlin 2026 Contacts + 40% Off

by Alyssa Morgan

Hi, Since your company exhibited at DMEA Berlin 2026, I wanted to check if you'd be interested in accessing the final attendee database containing 25,718 verified contacts. All contacts are opt-in, GDPR-compliant, and can be customized by job title, industry, company size, or region based on your target audience. Let me know your ideal prospects, and I’ll share the relevant counts and pricing. As the expo has now concluded, we’re offering an exclusive 40% discount on the full attendee list for a limited time. Best regards, Alyssa Morgan Sr. Demand Generation We hope you found this message to be useful. However, if you'd rather not receive future e-mails, please reply opt-out

1 month, 2 weeks

[PATCH 6.18 00/55] 6.18.25-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.25 release. There are 55 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 26 Apr 2026 13:23:22 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.25-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.25-rc1 Anderson Nascimento <anderson(a)allelesecurity.com> rxrpc: Fix missing validation of ticket length in non-XDR key preparsing Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed Bingquan Chen <patzilla007(a)gmail.com> net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: take a reference on the USB device in create_card() Eric Naim <dnaim(a)cachyos.org> ALSA: hda/realtek: Add quirk for Legion S7 15IMH Cryolitia PukNgae <cryolitia.pukngae(a)linux.dev> ALSA: usb-audio: apply quirk for MOONDROP JU Jiu George Saad <geoo115(a)gmail.com> f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() Jan Kara <jack(a)suse.cz> writeback: Fix use after free in inode_switch_wbs_work_fn() DaeMyung Kang <charsyam(a)gmail.com> ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() Tristan Madani <tristan(a)talencesecurity.com> ksmbd: use check_add_overflow() to prevent u16 DACL size overflow Tristan Madani <tristan(a)talencesecurity.com> ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment Michael Bommarito <michael.bommarito(a)gmail.com> ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() Michael Bommarito <michael.bommarito(a)gmail.com> ksmbd: validate response sizes in ipc_validate_msg() Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: require a full NFS mode SID before reading mode bits DaeMyung Kang <charsyam(a)gmail.com> smb: server: fix max_connections off-by-one in tcp accept path Michael Bommarito <michael.bommarito(a)gmail.com> smb: server: fix active_num_conn leak on transport allocation failure Michael Bommarito <michael.bommarito(a)gmail.com> ksmbd: require minimum ACE size in smb_check_perm_dacl() Miklos Szeredi <mszeredi(a)redhat.com> fuse: fuse_dev_ioctl_clone() should wait for device file to be initialized Darrick J. Wong <djwong(a)kernel.org> fuse: quiet down complaints in fuse_conn_limit_write Bernd Schubert <bschubert(a)ddn.com> fuse: Check for large folio with SPLICE_F_MOVE Miklos Szeredi <mszeredi(a)redhat.com> fuse: abort on fatal signal during sync init Samuel Page <sam(a)bynar.io> fuse: reject oversized dirents in page cache Chao Yu <chao(a)kernel.org> f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer Chao Yu <chao(a)kernel.org> f2fs: fix to avoid memory leak in f2fs_rename() Yongpeng Yang <yangyongpeng(a)xiaomi.com> f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() Chao Yu <chao(a)kernel.org> f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fs/ntfs3: validate rec->used in journal-replay file record check Nathan Chancellor <nathan(a)kernel.org> scripts/dtc: Remove unused dts_version in dtc-lexer.l Eric Biggers <ebiggers(a)kernel.org> lib/crypto: tests: Drop the default to CRYPTO_SELFTESTS Eric Biggers <ebiggers(a)kernel.org> kunit: configs: Enable all crypto library tests in all_tests.config Eric Biggers <ebiggers(a)kernel.org> lib/crypto: tests: Introduce CRYPTO_LIB_ENABLE_ALL_FOR_KUNIT Eric Biggers <ebiggers(a)kernel.org> lib/crypto: tests: Add a .kunitconfig file Eric Biggers <ebiggers(a)kernel.org> kunit: configs: Enable all CRC tests in all_tests.config Eric Biggers <ebiggers(a)kernel.org> lib/crc: tests: Add a .kunitconfig file Eric Biggers <ebiggers(a)kernel.org> lib/crc: tests: Add CRC_ENABLE_ALL_FOR_KUNIT Eric Biggers <ebiggers(a)kernel.org> lib/crc: tests: Make crc_kunit test only the enabled CRC variants Peter Zijlstra <peterz(a)infradead.org> sched/debug: Fix avg_vruntime() usage Catalin Marinas <catalin.marinas(a)arm.com> arm64: errata: Work around early CME DVMSync acknowledgement Catalin Marinas <catalin.marinas(a)arm.com> arm64: cputype: Add C1-Pro definitions Catalin Marinas <catalin.marinas(a)arm.com> arm64: tlb: Pass the corresponding mm to __tlbi_sync_s1ish() Catalin Marinas <catalin.marinas(a)arm.com> arm64: tlb: Introduce __tlbi_sync_s1ish_{kernel,batch}() for TLB maintenance Mark Rutland <mark.rutland(a)arm.com> arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI Mark Rutland <mark.rutland(a)arm.com> arm64: tlb: Allow XZR argument to TLBI ops Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate owner of durable handle on reconnect Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer.py: define scripts Dudu Lu <phx0fer(a)gmail.com> crypto: krb5enc - fix async decrypt skipping hash verification Wesley Atwell <atwellwea(a)gmail.com> crypto: krb5enc - fix sleepable flag handling in encrypt dispatch Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amdgpu: replace PASID IDR with XArray Daniel Golle <daniel(a)makrotopia.org> net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers Minhong He <heminhong(a)kylinos.cn> ipv6: add NULL checks for idev in SRv6 paths Herbert Xu <herbert(a)gondor.apana.org.au> crypto: authencesn - Fix src offset when decrypting in-place ------------- Diffstat: Documentation/arch/arm64/silicon-errata.rst | 2 + Makefile | 4 +- arch/arm64/Kconfig | 12 +++ arch/arm64/include/asm/cpucaps.h | 2 + arch/arm64/include/asm/cputype.h | 2 + arch/arm64/include/asm/fpsimd.h | 21 ++++ arch/arm64/include/asm/tlbbatch.h | 10 +- arch/arm64/include/asm/tlbflush.h | 143 ++++++++++++++++++++++----- arch/arm64/kernel/cpu_errata.c | 30 ++++++ arch/arm64/kernel/entry-common.c | 3 + arch/arm64/kernel/fpsimd.c | 79 +++++++++++++++ arch/arm64/kernel/process.c | 36 +++++++ arch/arm64/kernel/sys_compat.c | 2 +- arch/arm64/kvm/hyp/nvhe/mm.c | 2 +- arch/arm64/kvm/hyp/nvhe/tlb.c | 8 +- arch/arm64/kvm/hyp/pgtable.c | 2 +- arch/arm64/kvm/hyp/vhe/tlb.c | 10 +- arch/arm64/tools/cpucaps | 1 + crypto/authencesn.c | 6 +- crypto/krb5enc.c | 51 ++++++---- drivers/crypto/ccp/sev-dev.c | 19 +++- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 39 ++++---- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 22 ++++- drivers/net/ethernet/mediatek/mtk_ppe.c | 30 ++++++ drivers/net/ethernet/mediatek/mtk_ppe.h | 1 + fs/f2fs/compress.c | 14 ++- fs/f2fs/data.c | 7 +- fs/f2fs/f2fs.h | 2 +- fs/f2fs/namei.c | 1 + fs/f2fs/segment.c | 6 +- fs/f2fs/super.c | 11 ++- fs/fs-writeback.c | 36 +++---- fs/fuse/control.c | 4 +- fs/fuse/dev.c | 30 +++--- fs/fuse/fuse_i.h | 1 + fs/fuse/inode.c | 1 + fs/fuse/readdir.c | 4 + fs/ntfs3/fslog.c | 12 ++- fs/smb/client/cifsacl.c | 1 + fs/smb/client/smb2ops.c | 6 ++ fs/smb/server/connection.c | 5 +- fs/smb/server/mgmt/user_config.c | 6 -- fs/smb/server/mgmt/user_session.c | 7 +- fs/smb/server/oplock.c | 7 ++ fs/smb/server/oplock.h | 1 + fs/smb/server/smb2pdu.c | 5 +- fs/smb/server/smbacl.c | 61 +++++++++--- fs/smb/server/transport_ipc.c | 16 ++- fs/smb/server/transport_tcp.c | 4 +- fs/smb/server/vfs_cache.c | 128 ++++++++++++++++++++---- fs/smb/server/vfs_cache.h | 12 ++- kernel/sched/debug.c | 4 +- lib/crc/.kunitconfig | 3 + lib/crc/Kconfig | 21 ++-- lib/crc/tests/crc_kunit.c | 28 ++++-- lib/crypto/.kunitconfig | 11 +++ lib/crypto/tests/Kconfig | 32 ++++-- net/ipv6/exthdrs.c | 4 + net/ipv6/seg6_hmac.c | 2 + net/packet/af_packet.c | 21 ++-- net/rxrpc/key.c | 4 + scripts/dtc/dtc-lexer.l | 3 - scripts/generate_rust_analyzer.py | 14 ++- sound/hda/codecs/realtek/alc269.c | 1 + sound/usb/caiaq/device.c | 4 +- sound/usb/mixer.c | 7 ++ tools/testing/kunit/configs/all_tests.config | 4 + 67 files changed, 870 insertions(+), 218 deletions(-)

1 month, 2 weeks

[PATCH 6.6 000/166] 6.6.136-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.136 release. There are 166 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 26 Apr 2026 13:23:21 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.136-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.136-rc1 Yu Kuai <yukuai3(a)huawei.com> md/raid1: fix data lost for writemostly rdev Anderson Nascimento <anderson(a)allelesecurity.com> rxrpc: Fix missing validation of ticket length in non-XDR key preparsing Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed Sean Christopherson <seanjc(a)google.com> crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed Herbert Xu <herbert(a)gondor.apana.org.au> crypto: testmgr - Hide ENOENT errors better Herbert Xu <herbert(a)gondor.apana.org.au> crypto: testmgr - Hide ENOENT errors Bingquan Chen <patzilla007(a)gmail.com> net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: take a reference on the USB device in create_card() Cryolitia PukNgae <cryolitia.pukngae(a)linux.dev> ALSA: usb-audio: apply quirk for MOONDROP JU Jiu George Saad <geoo115(a)gmail.com> f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() Tristan Madani <tristan(a)talencesecurity.com> ksmbd: use check_add_overflow() to prevent u16 DACL size overflow Tristan Madani <tristan(a)talencesecurity.com> ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: require a full NFS mode SID before reading mode bits DaeMyung Kang <charsyam(a)gmail.com> smb: server: fix max_connections off-by-one in tcp accept path Michael Bommarito <michael.bommarito(a)gmail.com> smb: server: fix active_num_conn leak on transport allocation failure Darrick J. Wong <djwong(a)kernel.org> fuse: quiet down complaints in fuse_conn_limit_write Bernd Schubert <bschubert(a)ddn.com> fuse: Check for large folio with SPLICE_F_MOVE Samuel Page <sam(a)bynar.io> fuse: reject oversized dirents in page cache Chao Yu <chao(a)kernel.org> f2fs: fix to avoid memory leak in f2fs_rename() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fs/ntfs3: validate rec->used in journal-replay file record check Wang Jie <jiewang2024(a)lzu.edu.cn> rxrpc: only handle RESPONSE during service challenge David Howells <dhowells(a)redhat.com> rxrpc: Fix anonymous key handling Nathan Chancellor <nathan(a)kernel.org> scripts/dtc: Remove unused dts_version in dtc-lexer.l Guocai He <guocai.he.cn(a)windriver.com> Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave" Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix out-of-bounds write in ocfs2_write_end_inline Deepanshu Kartikey <kartikey406(a)gmail.com> ocfs2: validate inline data i_size during inode read Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() David Howells <dhowells(a)redhat.com> rxrpc: Fix key quota calculation for multitoken keys David Woodhouse <dwmw(a)amazon.co.uk> KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer.py: define scripts Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup Eric Dumazet <edumazet(a)google.com> net: annotate data-races around sk->sk_{data_ready,write_space} Thomas Gleixner <tglx(a)kernel.org> i40e: Fix preempt count leak in napi poll tracepoint Daniel Golle <daniel(a)makrotopia.org> net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure Yu Kuai <yukuai3(a)huawei.com> md/raid1,raid10: don't ignore IO flags Minhong He <heminhong(a)kylinos.cn> ipv6: add NULL checks for idev in SRv6 paths Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown Kenta Akagi <k(a)mgml.me> Revert "perf unwind-libdw: Fix invalid reference counts" Jeongjun Park <aha310510(a)gmail.com> media: hackrf: fix to not free memory after the device is registered in hackrf_probe() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> media: vidtv: fix pass-by-value structs causing MSAN warnings Deepanshu Kartikey <kartikey406(a)gmail.com> nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map Jeongjun Park <aha310510(a)gmail.com> media: as102: fix to not free memory after the device is registered in as102_usb_probe() Mingzhe Zou <mingzhe.zou(a)easystack.cn> bcache: fix cached_dev.sb_bio use-after-free and crash Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: 6fire: fix use-after-free on disconnect Abhishek Kumar <abhishek_sts8(a)yahoo.com> media: em28xx: fix use-after-free in em28xx_v4l2_open() Fan Wu <fanwu01(a)zju.edu.cn> media: mediatek: vcodec: fix use-after-free in encoder release path Ruslan Valiyev <linuxoid(a)gmail.com> media: vidtv: fix nfeeds state corruption on start_streaming failure Breno Leitao <leitao(a)debian.org> mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> mm/kasan: fix double free for kasan pXds Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: move component registration to unmanaged version Sean Christopherson <seanjc(a)google.com> KVM: x86: Use scratch field in MMIO fragment to hold small write values Sasha Levin <sashal(a)kernel.org> checkpatch: add support for Assisted-by tag Zilin Guan <zilin(a)seu.edu.cn> ice: Fix memory leak in ice_set_ringparam() Pablo Neira Ayuso <pablo(a)netfilter.org> nf_tables: nft_dynset: fix possible stateful expression memleak in error path Chaitanya Kulkarni <kch(a)nvidia.com> blktrace: fix __this_cpu_read/write in preemptible context Jakub Kicinski <kuba(a)kernel.org> nfc: nci: complete pending data exchange on device close Eric Dumazet <edumazet(a)google.com> net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Fold requested virtual interrupt check into has_nested_events() Eric Dumazet <edumazet(a)google.com> net: add proper RCU protection to /proc/net/ptype Maud Spierings <maudspierings(a)gocontroll.com> iio: common: st_sensors: Fix use of uninitialize device structs Qu Wenruo <wqu(a)suse.com> btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() Jiayuan Chen <jiayuan.chen(a)linux.dev> net: skb: fix cross-cache free of KFENCE-allocated skb head Sean Christopherson <seanjc(a)google.com> KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION ZhengYuan Huang <gality369(a)gmail.com> ocfs2: handle invalid dinode in ocfs2_group_extend Tejas Bharambe <tejas.bharambe(a)outlook.com> ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix possible deadlock between unlink and dio_end_io_write Ruslan Valiyev <linuxoid(a)gmail.com> media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections Zhihao Cheng <chengzhihao1(a)huawei.com> dcache: Limit the minimal number of bucket to two Harin Lee <me(a)harin.net> ALSA: ctxfi: Limit PTP to a single page SeongJae Park <sj(a)kernel.org> Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FN990A MBIM composition Junrui Luo <moonafterrain(a)outlook.com> staging: sm750fb: fix division by zero in ps_to_hz() Johan Hovold <johan(a)kernel.org> wifi: rtw88: fix device leak on probe failure Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer.py: avoid FD leak Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Xu Yang <xu.yang_2(a)nxp.com> usb: port: add delay after usb_hub_set_port_power() Dave Carey <carvsdriver(a)gmail.com> USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen Daniel Brát <danek.brat(a)gmail.com> usb: storage: Expand range of matched versions for VL817 quirks entry Nathan Rebello <nathan.c.rebello(a)gmail.com> usbip: validate number_of_packets in usbip_pack_ret_submit() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: require 3 sub-authorities before reading sub_auth[2] Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: validate EaNameLength in smb2_get_ea() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> smb: client: fix off-by-8 bounds check in check_wsl_eas() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: renesas_usb3: validate endpoint index in standard request handlers Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ALSA: fireworks: bound device-supplied status before string array lookup Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/vc4: platform_get_irq_byname() returns an int Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> NFC: digital: Bounds check NFC-A cascade depth in SDD response handler Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: core: clamp report_size in s32ton() to avoid undefined shift Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: alps: fix NULL pointer dereference in alps_raw_event() Lin YuChen <starpt.official(a)gmail.com> staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> i2c: s3c24xx: check the size of the SMBUS message before using it Samuel Page <sam(a)bynar.io> can: raw: fix ro->uniq use-after-free in raw_rcv() Junxi Qian <qjx1298677004(a)gmail.com> nfc: llcp: add missing return after LLCP_CLOSED checks Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Do not use pipe_src as borders for SU area Aaron Plattner <aplattner(a)nvidia.com> objtool: Remove max symbol name length limitation Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Improve Focusrite sample rate filtering Florian Westphal <fw(a)strlen.de> netfilter: conntrack: add missing netlink policy validations Herbert Xu <herbert(a)gondor.apana.org.au> crypto: algif_aead - Fix minimum RX size check for decryption Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Skip discovery table for offline dies Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> gpio: tegra: fix irq_release_resources calling enable instead of disable Alice Mikityanska <alice(a)isovalent.com> l2tp: Drop large packets with UDP encap Alexander Koskovich <akoskovich(a)pm.me> net: ipa: fix event ring index not programmed for IPA v5.0+ Alexander Koskovich <akoskovich(a)pm.me> net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ Jiexun Wang <wangjiexun2025(a)gmail.com> af_unix: read UNIX_DIAG_VFS data under unix_state_lock Fabio Baltieri <fabio.baltieri(a)gmail.com> net: txgbe: leave space for null terminators on property_entry Zhengchuan Liang <zcliangcn(a)gmail.com> netfilter: ip6t_eui64: reject invalid MAC header for all packets Ren Wei <n05ec(a)lzu.edu.cn> netfilter: xt_multiport: validate range encoding in checkentry Xiang Mei <xmei5(a)asu.edu> netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator Weiming Shi <bestswngs(a)gmail.com> ipvs: fix NULL deref in ip_vs_add_service error path Daniel Golle <daniel(a)makrotopia.org> selftests: net: bridge_vlan_mcast: wait for h1 before querier check Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_mapping() Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Wait for RCU readers during policy netns exit Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: validate MTU against usable frame size on bind Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: fix XDP_UMEM_SG_FLAG issues Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: respect tailroom for ZC setups Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: tighten UMEM headroom validation to account for tailroom and min frame Agalakov Daniil <ade(a)amicon.ru> e1000: check return value of e1000_read_eeprom Michal Schmidt <mschmidt(a)redhat.com> ixgbevf: add missing negotiate_features op to Hyper-V ops table Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing/probe: reject non-closed empty immediate strings Jon Hunter <jonathanh(a)nvidia.com> dt-bindings: net: Fix Tegra234 MGBE PTP clock Jon Hunter <jonathanh(a)nvidia.com> net: stmmac: Fix PTP ref clock for Tegra234 Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: s3fwrn5: allocate rx skb before consuming bytes Yiqi Sun <sunyiqixm(a)gmail.com> ipv4: icmp: fix null-ptr-deref in icmp_build_probe() Eric Dumazet <edumazet(a)google.com> net: lapbether: handle NETDEV_PRE_TYPE_CHANGE Ruide Cao <caoruide123(a)gmail.com> net: sched: act_csum: validate nested VLAN headers Nicholas Carlini <nicholas(a)carlini.com> eventpoll: defer struct eventpoll free to RCU grace period Maíra Canal <mcanal(a)igalia.com> drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix a memory leak in hang state error path Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix memory leak of BO array in hang state Maíra Canal <mcanal(a)igalia.com> drm/vc4: Release runtime PM reference after binding V3D Long Li <longli(a)microsoft.com> PCI: hv: Set default NUMA node to 0 for devices without affinity info Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency Potin Lai <potin.lai.pt(a)gmail.com> soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching Tomasz Merta <tomasz.merta(a)arrow.com> ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: brcmfmac: validate bsscfg indices in IF events Arthur Husband <artmoty(a)gmail.com> ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 Benoît Sevens <bsevens(a)google.com> HID: roccat: fix use-after-free in roccat_report_event songxiebing <songxiebing(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 leo vriska <leo(a)60228.dev> HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) Gilson Marquato Júnior <gilsonmandalogo(a)hotmail.com> ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx Fredric Cover <FredTheDude(a)proton.me> fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath Phil Willoughby <willerz(a)gmail.com> ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: wl1251: validate packet IDs before indexing tx_frames Dustin L. Howett <dustin(a)howett.net> ALSA: hda/realtek: add quirk for Framework F111:000F Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry César Montoya <sprit152009(a)gmail.com> ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() Wenyuan Li <2063309626(a)qq.com> can: mcp251x: add error handling for power enable in open and resume Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: reject invalid vendor array size in token parser Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF Arnd Bergmann <arnd(a)arndb.de> ALSA: asihpi: avoid write overflow check warning Arnd Bergmann <arnd(a)arndb.de> media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() Matthew Schwartz <matthew.schwartz(a)linux.dev> ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC Andrii Kovalchuk <coderpy4(a)proton.me> ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk Vee Satayamas <vsatayamas(a)gmail.com> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix double free related to rereg_user_mr ------------- Diffstat: Documentation/admin-guide/mm/damon/reclaim.rst | 4 + .../bindings/net/nvidia,tegra234-mgbe.yaml | 4 +- Makefile | 4 +- arch/arm64/boot/dts/freescale/imx8mq.dtsi | 2 +- arch/x86/events/intel/uncore_discovery.c | 2 +- arch/x86/include/asm/kvm-x86-ops.h | 1 - arch/x86/include/asm/kvm_host.h | 1 - arch/x86/include/uapi/asm/kvm.h | 12 +-- arch/x86/kvm/svm/sev.c | 11 ++- arch/x86/kvm/vmx/nested.c | 4 + arch/x86/kvm/vmx/vmx.c | 21 ------ arch/x86/kvm/x86.c | 24 +++--- crypto/algif_aead.c | 2 +- crypto/testmgr.c | 24 +++++- drivers/ata/ahci.c | 14 ++++ drivers/crypto/ccp/sev-dev.c | 19 ++++- drivers/gpio/gpio-tegra.c | 2 +- drivers/gpu/drm/i915/display/intel_psr.c | 18 +++-- drivers/gpu/drm/vc4/vc4_bo.c | 3 + drivers/gpu/drm/vc4/vc4_gem.c | 19 +++-- drivers/gpu/drm/vc4/vc4_hdmi.c | 14 +++- drivers/gpu/drm/vc4/vc4_v3d.c | 1 + drivers/hid/hid-alps.c | 3 + drivers/hid/hid-core.c | 3 + drivers/hid/hid-ids.h | 3 + drivers/hid/hid-quirks.c | 1 + drivers/hid/hid-roccat.c | 2 + drivers/i2c/busses/i2c-s3c2410.c | 7 +- drivers/iio/accel/st_accel_core.c | 10 +-- drivers/iio/common/st_sensors/st_sensors_core.c | 36 +++++---- drivers/iio/common/st_sensors/st_sensors_trigger.c | 20 +++-- drivers/infiniband/hw/irdma/verbs.c | 1 + drivers/md/bcache/super.c | 7 ++ drivers/md/raid1.c | 6 +- drivers/md/raid10.c | 7 -- .../mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c | 9 +++ drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_channel.c | 4 + drivers/media/test-drivers/vidtv/vidtv_mux.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_ts.c | 48 ++++++------ drivers/media/test-drivers/vidtv/vidtv_ts.h | 4 +- drivers/media/usb/as102/as102_usb_drv.c | 2 + drivers/media/usb/em28xx/em28xx-video.c | 14 +++- drivers/media/usb/hackrf/hackrf.c | 7 +- drivers/net/can/spi/mcp251x.c | 29 ++++++-- drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 8 +- drivers/net/ethernet/intel/i40e/i40e_trace.h | 2 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 11 ++- drivers/net/ethernet/intel/ixgbevf/vf.c | 7 ++ drivers/net/ethernet/mediatek/mtk_eth_soc.c | 22 +++++- drivers/net/ethernet/mediatek/mtk_ppe.c | 30 ++++++++ drivers/net/ethernet/mediatek/mtk_ppe.h | 1 + drivers/net/ethernet/stmicro/stmmac/dwmac-tegra.c | 19 ++++- drivers/net/ethernet/wangxun/txgbe/txgbe_type.h | 8 +- drivers/net/ipa/reg/gsi_reg-v5.0.c | 9 ++- drivers/net/usb/cdc-phonet.c | 7 +- drivers/net/wan/lapbether.c | 13 ++-- drivers/net/wireless/ath/ath9k/channel.c | 6 +- .../wireless/broadcom/brcm80211/brcmfmac/fweh.c | 5 ++ drivers/net/wireless/realtek/rtw88/usb.c | 3 +- drivers/net/wireless/ti/wl1251/tx.c | 8 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 1 - drivers/nfc/s3fwrn5/uart.c | 10 ++- drivers/pci/controller/pci-hyperv.c | 8 ++ drivers/pci/endpoint/functions/pci-epf-vntb.c | 19 +---- drivers/pinctrl/intel/pinctrl-intel.c | 2 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 9 +++ drivers/soc/aspeed/aspeed-socinfo.c | 2 +- drivers/staging/media/rkvdec/rkvdec-vp9.c | 3 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/staging/sm750fb/sm750.c | 3 + drivers/usb/class/cdc-acm.c | 53 +++++++++++-- drivers/usb/core/port.c | 1 + drivers/usb/gadget/function/f_ncm.c | 4 +- drivers/usb/gadget/function/f_phonet.c | 9 +++ drivers/usb/gadget/udc/renesas_usb3.c | 7 +- drivers/usb/serial/option.c | 2 + drivers/usb/storage/unusual_devs.h | 7 +- drivers/usb/usbip/usbip_common.c | 12 +++ drivers/video/fbdev/tdfxfb.c | 3 + drivers/video/fbdev/udlfb.c | 3 + fs/btrfs/bio.c | 29 +++----- fs/dcache.c | 4 +- fs/eventpoll.c | 6 +- fs/f2fs/compress.c | 14 +++- fs/f2fs/namei.c | 1 + fs/fuse/control.c | 4 +- fs/fuse/dev.c | 3 + fs/fuse/readdir.c | 4 + fs/nilfs2/dat.c | 3 + fs/ntfs3/fslog.c | 12 ++- fs/ocfs2/aops.c | 3 +- fs/ocfs2/inode.c | 31 ++++++++ fs/ocfs2/mmap.c | 7 +- fs/ocfs2/ocfs2_trace.h | 10 +-- fs/ocfs2/resize.c | 10 ++- fs/smb/client/cifsacl.c | 1 + fs/smb/client/fs_context.c | 4 + fs/smb/client/smb2inode.c | 2 +- fs/smb/client/smb2ops.c | 6 ++ fs/smb/server/connection.c | 1 + fs/smb/server/smb2pdu.c | 9 ++- fs/smb/server/smbacl.c | 19 +++-- fs/smb/server/transport_tcp.c | 4 +- include/linux/kvm_host.h | 3 +- include/net/mac80211.h | 4 + include/net/netfilter/nf_tables.h | 2 + include/net/pkt_cls.h | 2 + include/net/xdp_sock.h | 2 +- include/net/xdp_sock_drv.h | 23 +++++- include/trace/events/btrfs.h | 11 ++- include/uapi/linux/kvm.h | 11 +-- kernel/trace/blktrace.c | 4 +- kernel/trace/trace_probe.c | 2 +- mm/backing-dev.c | 5 +- mm/kasan/init.c | 8 +- net/can/raw.c | 11 ++- net/core/net-procfs.c | 49 ++++++++---- net/core/skbuff.c | 5 +- net/core/skmsg.c | 14 ++-- net/ipv4/icmp.c | 7 ++ net/ipv4/tcp.c | 4 +- net/ipv4/tcp_bpf.c | 2 +- net/ipv4/tcp_input.c | 14 ++-- net/ipv4/tcp_minisocks.c | 2 +- net/ipv4/udp.c | 3 +- net/ipv4/udp_bpf.c | 2 +- net/ipv6/exthdrs.c | 4 + net/ipv6/netfilter/ip6t_eui64.c | 3 +- net/ipv6/seg6_hmac.c | 2 + net/l2tp/l2tp_core.c | 5 ++ net/mac80211/tx.c | 4 +- net/netfilter/ipvs/ip_vs_ctl.c | 1 - net/netfilter/nf_conntrack_netlink.c | 2 +- net/netfilter/nf_conntrack_proto_sctp.c | 3 +- net/netfilter/nf_tables_api.c | 4 +- net/netfilter/nfnetlink_log.c | 8 +- net/netfilter/nft_dynset.c | 10 ++- net/netfilter/nft_set_pipapo_avx2.c | 20 ++--- net/netfilter/xt_multiport.c | 34 ++++++++- net/nfc/digital_technology.c | 6 ++ net/nfc/llcp_core.c | 2 + net/nfc/nci/core.c | 9 +++ net/packet/af_packet.c | 21 ++++-- net/rxrpc/conn_event.c | 14 +++- net/rxrpc/key.c | 9 ++- net/rxrpc/sendmsg.c | 2 +- net/sched/act_csum.c | 6 +- net/sched/em_cmp.c | 5 +- net/sched/em_nbyte.c | 2 + net/sched/em_text.c | 11 ++- net/unix/af_unix.c | 8 +- net/unix/diag.c | 21 ++++-- net/wireless/core.c | 4 +- net/xdp/xdp_umem.c | 3 +- net/xdp/xsk.c | 4 +- net/xdp/xsk_buff_pool.c | 32 +++++++- net/xfrm/xfrm_policy.c | 2 + net/xfrm/xfrm_user.c | 1 + scripts/checkpatch.pl | 10 +++ scripts/dtc/dtc-lexer.l | 3 - scripts/generate_rust_analyzer.py | 17 ++++- sound/firewire/fireworks/fireworks_command.c | 5 +- sound/pci/asihpi/hpimsgx.c | 6 +- sound/pci/ctxfi/ctvmem.h | 2 +- sound/pci/hda/patch_realtek.c | 5 ++ sound/soc/amd/yc/acp6x-mach.c | 21 ++++++ sound/soc/qcom/qdsp6/q6apm.c | 14 +++- sound/soc/soc-core.c | 1 + sound/soc/sof/topology.c | 2 +- sound/soc/stm/stm32_sai_sub.c | 3 + sound/usb/6fire/chip.c | 17 +++-- sound/usb/caiaq/device.c | 4 +- sound/usb/format.c | 86 +++++++++++++++++++--- sound/usb/mixer.c | 7 ++ sound/usb/quirks.c | 2 + tools/objtool/elf.c | 14 ++-- tools/perf/util/unwind-libdw.c | 7 +- .../selftests/net/forwarding/bridge_vlan_mcast.sh | 1 + 179 files changed, 1172 insertions(+), 450 deletions(-)

1 month, 2 weeks

[PATCH 6.19 000/220] 6.19.14-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.19.14 release. There are 220 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 22 Apr 2026 15:38:52 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.14-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.19.14-rc1 Leon Romanovsky <leon(a)kernel.org> dma-mapping: handle DMA_ATTR_CPU_CACHE_CLEAN in trace output Leon Romanovsky <leon(a)kernel.org> dma-debug: Allow multiple invocations of overlapping entries Jianhui Zhou <jianhuizzzzz(a)gmail.com> mm/userfaultfd: fix hugetlb fault mutex hash calculation Jeongjun Park <aha310510(a)gmail.com> media: hackrf: fix to not free memory after the device is registered in hackrf_probe() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> media: vidtv: fix pass-by-value structs causing MSAN warnings Deepanshu Kartikey <kartikey406(a)gmail.com> nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map Jeongjun Park <aha310510(a)gmail.com> media: as102: fix to not free memory after the device is registered in as102_usb_probe() Shardul Bankar <shardul.b(a)mpiricsoftware.com> wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit Mingzhe Zou <mingzhe.zou(a)easystack.cn> bcache: fix cached_dev.sb_bio use-after-free and crash Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: 6fire: fix use-after-free on disconnect Sanman Pradhan <psanman(a)juniper.net> hwmon: (powerz) Fix use-after-free on USB disconnect Abhishek Kumar <abhishek_sts8(a)yahoo.com> media: em28xx: fix use-after-free in em28xx_v4l2_open() Fan Wu <fanwu01(a)zju.edu.cn> media: mediatek: vcodec: fix use-after-free in encoder release path Ruslan Valiyev <linuxoid(a)gmail.com> media: vidtv: fix nfeeds state corruption on start_streaming failure Breno Leitao <leitao(a)debian.org> mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> mm/kasan: fix double free for kasan pXds Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: move component registration to unmanaged version Sean Christopherson <seanjc(a)google.com> KVM: x86: Use scratch field in MMIO fragment to hold small write values Linus Torvalds <torvalds(a)linux-foundation.org> x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache Linus Torvalds <torvalds(a)linux-foundation.org> x86: rename and clean up __copy_from_user_inatomic_nocache() Linus Torvalds <torvalds(a)linux-foundation.org> x86-64: rename misleadingly named '__copy_user_nocache()' function Sasha Levin <sashal(a)kernel.org> checkpatch: add support for Assisted-by tag Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix out-of-bounds write in ocfs2_write_end_inline Deepanshu Kartikey <kartikey406(a)gmail.com> ocfs2: validate inline data i_size during inode read David Woodhouse <dwmw(a)amazon.co.uk> KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs Sean Christopherson <seanjc(a)google.com> KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Test refinement of single-value tnum Matthew Wilcox (Oracle) <willy(a)infradead.org> mm: call ->free_folio() directly in folio_unmap_invalidate() Sean Christopherson <seanjc(a)google.com> KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION Sean Christopherson <seanjc(a)google.com> KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Sean Christopherson <seanjc(a)google.com> KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created Sean Christopherson <seanjc(a)google.com> KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock Sean Christopherson <seanjc(a)google.com> KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Sean Christopherson <seanjc(a)google.com> KVM: selftests: Remove duplicate LAUNCH_UPDATE_VMSA call in SEV-ES migrate test Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup ZhengYuan Huang <gality369(a)gmail.com> ocfs2: handle invalid dinode in ocfs2_group_extend Tejas Bharambe <tejas.bharambe(a)outlook.com> ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix possible deadlock between unlink and dio_end_io_write Ruslan Valiyev <linuxoid(a)gmail.com> media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Handle invalid large leaf mappings correctly Michał Winiarski <michal.winiarski(a)intel.com> vfio/xe: Reorganize the init to decouple migration from reset Zhihao Cheng <chengzhihao1(a)huawei.com> dcache: Limit the minimal number of bucket to two Harin Lee <me(a)harin.net> ALSA: ctxfi: Limit PTP to a single page SeongJae Park <sj(a)kernel.org> Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FN990A MBIM composition Alistair Popple <apopple(a)nvidia.com> selftests/mm: hmm-tests: don't hardcode THP size to 2MB Junrui Luo <moonafterrain(a)outlook.com> staging: sm750fb: fix division by zero in ps_to_hz() Johan Hovold <johan(a)kernel.org> wifi: rtw88: fix device leak on probe failure Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer.py: avoid FD leak Benjamin Berg <benjamin.berg(a)intel.com> scripts/gdb/symbols: handle module path parameters Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Xu Yang <xu.yang_2(a)nxp.com> usb: port: add delay after usb_hub_set_port_power() Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: don't call cdev_init while cdev in use Dave Carey <carvsdriver(a)gmail.com> USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen Daniel Brát <danek.brat(a)gmail.com> usb: storage: Expand range of matched versions for VL817 quirks entry Alexey Charkov <alchark(a)flipper.net> usb: typec: fusb302: Switch to threaded IRQ handler Nathan Rebello <nathan.c.rebello(a)gmail.com> usbip: validate number_of_packets in usbip_pack_ret_submit() Stefan Metzmacher <metze(a)samba.org> smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() Stefan Metzmacher <metze(a)samba.org> smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: require 3 sub-authorities before reading sub_auth[2] Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: validate EaNameLength in smb2_get_ea() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> smb: client: fix OOB reads parsing symlink error response Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> smb: client: fix off-by-8 bounds check in check_wsl_eas() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: renesas_usb3: validate endpoint index in standard request handlers Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ALSA: fireworks: bound device-supplied status before string array lookup Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> bnge: return after auxiliary_device_uninit() in error path Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/vc4: platform_get_irq_byname() returns an int Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> NFC: digital: Bounds check NFC-A cascade depth in SDD response handler Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: core: clamp report_size in s32ton() to avoid undefined shift Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: alps: fix NULL pointer dereference in alps_raw_event() Lin YuChen <starpt.official(a)gmail.com> staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> i2c: s3c24xx: check the size of the SMBUS message before using it Samuel Page <sam(a)bynar.io> can: raw: fix ro->uniq use-after-free in raw_rcv() Junxi Qian <qjx1298677004(a)gmail.com> nfc: llcp: add missing return after LLCP_CLOSED checks Herbert Xu <herbert(a)gondor.apana.org.au> crypto: algif_aead - Fix minimum RX size check for decryption Herbert Xu <herbert(a)gondor.apana.org.au> crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl Thomas Gleixner <tglx(a)kernel.org> clockevents: Prevent timer interrupt starvation Peter Zijlstra <peterz(a)infradead.org> sched/deadline: Use revised wakeup rule for dl_server Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix die ID init and look up bugs Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Skip discovery table for offline dies Douya Le <ldy3087146292(a)gmail.com> crypto: af_alg - limit RX SG extraction by receive buffer budget Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> gpio: tegra: fix irq_release_resources calling enable instead of disable Alice Mikityanska <alice(a)isovalent.com> l2tp: Drop large packets with UDP encap Alexander Koskovich <akoskovich(a)pm.me> net: ipa: fix event ring index not programmed for IPA v5.0+ Alexander Koskovich <akoskovich(a)pm.me> net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ Li RongQing <lirongqing(a)baidu.com> devlink: Fix incorrect skb socket family dumping Jiexun Wang <wangjiexun2025(a)gmail.com> af_unix: read UNIX_DIAG_VFS data under unix_state_lock Fabio Baltieri <fabio.baltieri(a)gmail.com> net: txgbe: leave space for null terminators on property_entry Justin Iurman <justin.iurman(a)gmail.com> net: ioam6: fix OOB and missing lock Felix Gu <ustc.gu(a)gmail.com> net: mdio: realtek-rtl9300: use scoped device_for_each_child_node loop Syed Saba Kareem <Syed.SabaKareem(a)amd.com> ASoC: amd: acp: update DMI quirk and add ACP DMIC for Lenovo platforms Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: SDCA: Unregister IRQ handlers on module remove Maciej Strozek <mstrozek(a)opensource.cirrus.com> ASoC: SDCA: Fix overwritten var within for loop Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: make hash table per queue Scott Mitchell <scott.k.mitch1(a)gmail.com> netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation Zhengchuan Liang <zcliangcn(a)gmail.com> netfilter: ip6t_eui64: reject invalid MAC header for all packets Ren Wei <n05ec(a)lzu.edu.cn> netfilter: xt_multiport: validate range encoding in checkentry Xiang Mei <xmei5(a)asu.edu> netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator Weiming Shi <bestswngs(a)gmail.com> ipvs: fix NULL deref in ip_vs_add_service error path Daniel Golle <daniel(a)makrotopia.org> selftests: net: bridge_vlan_mcast: wait for h1 before querier check Vinay Belgaumkar <vinay.belgaumkar(a)intel.com> drm/xe: Fix bug in idledly unit conversion Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: avs: Fix memory leak in avs_register_i2s_test_boards() Francesco Lavra <flavra(a)baylibre.com> pinctrl: mcp23s08: Disable all pin interrupts during probe Zhengchuan Liang <zcliangcn(a)gmail.com> net: af_key: zero aligned sockaddr tail in PF_KEY exports Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_mapping() Kotlyarov Mihail <mihailkotlyarow(a)gmail.com> xfrm: fix refcount leak in xfrm_migrate_policy_find Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Wait for RCU readers during policy netns exit Stefano Garzarella <sgarzare(a)redhat.com> vsock/test: fix send_buf()/recv_buf() EINTR handling Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: validate MTU against usable frame size on bind Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: fix XDP_UMEM_SG_FLAG issues Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: respect tailroom for ZC setups Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: tighten UMEM headroom validation to account for tailroom and min frame Agalakov Daniil <ade(a)amicon.ru> e1000: check return value of e1000_read_eeprom Michal Schmidt <mschmidt(a)redhat.com> ixgbevf: add missing negotiate_features op to Hyper-V ops table Aleksandr Loktionov <aleksandr.loktionov(a)intel.com> ixgbe: stop re-reading flash on every get_drvinfo for e610 Kohei Enju <kohei(a)enjuk.jp> ice: ptp: don't WARN when controlling PF is unavailable Maciej Strozek <mstrozek(a)opensource.cirrus.com> ASoC: SOF: Intel: fix iteration in is_endpoint_present() Maciej Strozek <mstrozek(a)opensource.cirrus.com> ASoC: SOF: Intel: Fix endpoint index if endpoints are missing Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: SDCA: Fix errors in IRQ cleanup Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: SDCA: Add ASoC jack hookup in class driver Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing/probe: reject non-closed empty immediate strings Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Fix infinite fault loop on permission-denied GPA intercepts Sahil Chandna <sahilchandna(a)linux.microsoft.com> PCI: hv: Fix double ida_free in hv_pci_probe error path Jon Hunter <jonathanh(a)nvidia.com> dt-bindings: net: Fix Tegra234 MGBE PTP clock Jon Hunter <jonathanh(a)nvidia.com> net: stmmac: Fix PTP ref clock for Tegra234 Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: s3fwrn5: allocate rx skb before consuming bytes Chris J Arges <carges(a)cloudflare.com> net: increase IP_TUNNEL_RECURSION_LIMIT to 5 Yiqi Sun <sunyiqixm(a)gmail.com> ipv4: icmp: fix null-ptr-deref in icmp_build_probe() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump Nikolaos Gkarlis <nickgarlis(a)gmail.com> rtnetlink: add missing netlink_ns_capable() check for peer netns Zijing Yin <yzjaurora(a)gmail.com> bridge: guard local VLAN-0 FDB helpers against NULL vlan group Eric Dumazet <edumazet(a)google.com> ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Fix memory leak in airoha_qdma_rx_process() Eric Dumazet <edumazet(a)google.com> net: lapbether: handle NETDEV_PRE_TYPE_CHANGE Arnd Bergmann <arnd(a)arndb.de> net: fec: make FIXED_PHY dependency unconditional Ruide Cao <caoruide123(a)gmail.com> net: sched: act_csum: validate nested VLAN headers Nicholas Carlini <nicholas(a)carlini.com> eventpoll: defer struct eventpoll free to RCU grace period Maíra Canal <mcanal(a)igalia.com> drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix a memory leak in hang state error path Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix memory leak of BO array in hang state Maíra Canal <mcanal(a)igalia.com> drm/vc4: Release runtime PM reference after binding V3D NeilBrown <neilb(a)ownmail.net> cachefiles: fix incorrect dentry refcount in cachefiles_cull() Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> dma-debug: suppress cacheline overlap warning when arch has no DMA alignment requirement Michael S. Tsirkin <mst(a)redhat.com> dma-debug: track cache clean flag in entries Michael S. Tsirkin <mst(a)redhat.com> dma-mapping: add DMA_ATTR_CPU_CACHE_CLEAN Keenan Dong <keenanat2000(a)gmail.com> xfrm: account XFRMA_IF_ID in aevent size calculation Maximilian Pezzullo <maximilianpezzullo(a)gmail.com> HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP Long Li <longli(a)microsoft.com> PCI: hv: Set default NUMA node to 0 for devices without affinity info Mihai Sain <mihai.sain(a)microchip.com> ARM: dts: microchip: sam9x7: fix gpio-lines count for pioB Felix Gu <ustc.gu(a)gmail.com> soc: microchip: mpfs-mss-top-sysreg: Fix resource leak on driver unbind Felix Gu <ustc.gu(a)gmail.com> soc: microchip: mpfs-control-scb: Fix resource leak on driver unbind Artem Bityutskiy <artem.bityutskiy(a)linux.intel.com> tools/power turbostat: Fix delimiter bug in print functions Loic Poulain <loic.poulain(a)oss.qualcomm.com> arm64: dts: qcom: monaco: Reserve full Gunyah metadata region Artem Bityutskiy <artem.bityutskiy(a)linux.intel.com> tools/power turbostat: Fix --show/--hide for individual cpuidle counters Artem Bityutskiy <artem.bityutskiy(a)linux.intel.com> tools/power turbostat: Fix incorrect format variable Serhii Pievniev <spevnev16(a)gmail.com> tools/power/turbostat: Fix microcode patch level output for AMD/Hygon Len Brown <len.brown(a)intel.com> tools/power turbostat: Fix swidle header vs data display Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei Loic Poulain <loic.poulain(a)oss.qualcomm.com> arm64: dts: qcom: monaco: Fix UART10 pinconf Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx93-tqma9352: improve eMMC pad configuration Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx91-tqma9131: improve eMMC pad configuration Luke Wang <ziniu.wang_1(a)nxp.com> arm64: dts: imx93-9x9-qsb: change usdhc tuning step for eMMC and SD Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> arm64: dts: qcom: qcm6490-idp: Fix WCD9370 reset GPIO polarity Daniel J Blueman <daniel(a)quora.org> arm64: dts: qcom: hamoa/x1: fix idle exit latency Potin Lai <potin.lai.pt(a)gmail.com> soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching Tomasz Merta <tomasz.merta(a)arrow.com> ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J Linus Torvalds <torvalds(a)linux-foundation.org> x86: shadow stacks: proper error handling for mmap lock John Pavlick <jspavlick(a)posteo.net> net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: brcmfmac: validate bsscfg indices in IF events Arthur Husband <artmoty(a)gmail.com> ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 Benoît Sevens <bsevens(a)google.com> HID: roccat: fix use-after-free in roccat_report_event songxiebing <songxiebing(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 leo vriska <leo(a)60228.dev> HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 Even Xu <even.xu(a)intel.com> HID: Intel-thc-hid: Intel-quickspi: Add NVL Device IDs Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) Alexander Savenko <alex.sav4387(a)gmail.com> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 Gilson Marquato Júnior <gilsonmandalogo(a)hotmail.com> ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx Fredric Cover <FredTheDude(a)proton.me> fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath Donet Tom <donettom(a)linux.ibm.com> drm/amdkfd: Fix queue preemption/eviction failures by aligning control stack size to GPU page size songxiebing <songxiebing(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Lenovo Yoga Slim 7 14AKP10 Phil Willoughby <willerz(a)gmail.com> ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: wl1251: validate packet IDs before indexing tx_frames Dustin L. Howett <dustin(a)howett.net> ALSA: hda/realtek: add quirk for Framework F111:000F Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek - Fixed Speaker Mute LED for HP EliteBoard G1a platform Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry Kshamendra Kumar Mishra <kshamendrakumarmishra(a)gmail.com> ALSA: hda/realtek: add HP Laptop 15-fd0xxx mute LED quirk Joel Fernandes <joelagnelf(a)nvidia.com> srcu: Use irq_work to start GP in tiny SRCU Donet Tom <donettom(a)linux.ibm.com> drm/amdgpu: Handle GPU page faults correctly on non-4K page systems Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: ensure safe access to master conntrack César Montoya <sprit152009(a)gmail.com> ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add support for Omen 16-wf1xxx (8C76) Filipe Manana <fdmanana(a)suse.com> btrfs: fix zero size inode with non-zero size after log replay Matthew Schwartz <matthew.schwartz(a)linux.dev> platform/x86: asus-nb-wmi: add DMI quirk for ASUS ROG Flow Z13-KJP GZ302EAC Frank Zhang <rmxpzlb(a)gmail.com> ALSA:usb:qcom: add AUXILIARY_BUS to Kconfig dependencies Hasun Park <hasunpark(a)gmail.com> ASoC: amd: acp: add ASUS HN7306EA quirk for legacy SDW machine Wenyuan Li <2063309626(a)qq.com> can: mcp251x: add error handling for power enable in open and resume Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: reject invalid vendor array size in token parser Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: hci_sync: annotate data-races around hdev->req_status Arnd Bergmann <arnd(a)arndb.de> ALSA: asihpi: avoid write overflow check warning Arnd Bergmann <arnd(a)arndb.de> media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() Matthew Schwartz <matthew.schwartz(a)linux.dev> ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for Lenovo Yoga 7 2-in-1 16AKP10 Andrii Kovalchuk <coderpy4(a)proton.me> ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk Vee Satayamas <vsatayamas(a)gmail.com> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix double free related to rereg_user_mr Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix lockdep warnings when calling idxd_device_config() ------------- Diffstat: Documentation/admin-guide/mm/damon/reclaim.rst | 4 + .../bindings/net/nvidia,tegra234-mgbe.yaml | 4 +- Makefile | 4 +- arch/arm/boot/dts/microchip/sam9x7.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx8mq.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx91-tqma9131.dtsi | 20 +- arch/arm64/boot/dts/freescale/imx93-9x9-qsb.dts | 2 + arch/arm64/boot/dts/freescale/imx93-tqma9352.dtsi | 26 +-- arch/arm64/boot/dts/qcom/hamoa.dtsi | 2 +- arch/arm64/boot/dts/qcom/monaco.dtsi | 9 +- arch/arm64/boot/dts/qcom/qcm6490-idp.dts | 2 +- arch/arm64/include/asm/pgtable-prot.h | 2 + arch/arm64/include/asm/pgtable.h | 9 +- arch/arm64/include/asm/uaccess.h | 2 +- arch/arm64/kvm/guest.c | 4 +- arch/arm64/mm/mmu.c | 4 + arch/arm64/mm/pageattr.c | 50 ++--- arch/arm64/mm/trans_pgd.c | 42 +--- arch/loongarch/kvm/vcpu.c | 2 +- arch/loongarch/kvm/vm.c | 2 +- arch/mips/kvm/mips.c | 4 +- arch/powerpc/include/asm/uaccess.h | 3 +- arch/powerpc/kvm/book3s.c | 4 +- arch/powerpc/kvm/booke.c | 4 +- arch/powerpc/lib/pmem.c | 11 +- arch/riscv/kvm/vcpu.c | 2 +- arch/riscv/kvm/vm.c | 2 +- arch/s390/kvm/kvm-s390.c | 4 +- arch/x86/events/intel/uncore.c | 1 + arch/x86/events/intel/uncore_discovery.c | 2 +- arch/x86/events/intel/uncore_snbep.c | 13 +- arch/x86/include/asm/uaccess.h | 2 +- arch/x86/include/asm/uaccess_32.h | 8 +- arch/x86/include/asm/uaccess_64.h | 16 +- arch/x86/include/uapi/asm/kvm.h | 12 +- arch/x86/kernel/shstk.c | 3 +- arch/x86/kvm/svm/sev.c | 46 +++-- arch/x86/kvm/x86.c | 18 +- arch/x86/lib/copy_user_uncached_64.S | 6 +- arch/x86/lib/usercopy_32.c | 9 +- arch/x86/lib/usercopy_64.c | 12 +- crypto/af_alg.c | 6 +- crypto/algif_aead.c | 2 +- crypto/algif_skcipher.c | 5 + drivers/ata/ahci.c | 14 ++ drivers/dma/idxd/device.c | 17 +- drivers/dma/idxd/init.c | 10 +- drivers/gpio/gpio-tegra.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 7 +- drivers/gpu/drm/i915/i915_gem.c | 2 +- drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +- drivers/gpu/drm/vc4/vc4_bo.c | 3 + drivers/gpu/drm/vc4/vc4_gem.c | 19 +- drivers/gpu/drm/vc4/vc4_hdmi.c | 14 +- drivers/gpu/drm/vc4/vc4_v3d.c | 1 + drivers/gpu/drm/xe/xe_hw_engine.c | 3 +- drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 3 +- drivers/hid/hid-alps.c | 3 + drivers/hid/hid-core.c | 3 + drivers/hid/hid-ids.h | 3 + drivers/hid/hid-quirks.c | 1 + drivers/hid/hid-roccat.c | 2 + .../intel-thc-hid/intel-quickspi/pci-quickspi.c | 6 + .../intel-thc-hid/intel-quickspi/quickspi-dev.h | 2 + drivers/hv/mshv_root_main.c | 15 +- drivers/hwmon/powerz.c | 8 +- drivers/i2c/busses/i2c-s3c2410.c | 7 +- drivers/infiniband/hw/irdma/verbs.c | 1 + drivers/infiniband/sw/rdmavt/qp.c | 8 +- drivers/md/bcache/super.c | 7 + .../mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c | 9 + .../media/platform/rockchip/rkvdec/rkvdec-vp9.c | 3 +- drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_channel.c | 4 + drivers/media/test-drivers/vidtv/vidtv_mux.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_ts.c | 48 ++--- drivers/media/test-drivers/vidtv/vidtv_ts.h | 4 +- drivers/media/usb/as102/as102_usb_drv.c | 2 + drivers/media/usb/em28xx/em28xx-video.c | 14 +- drivers/media/usb/hackrf/hackrf.c | 7 +- drivers/net/can/spi/mcp251x.c | 29 ++- drivers/net/ethernet/airoha/airoha_eth.c | 3 +- drivers/net/ethernet/broadcom/bnge/bnge_auxr.c | 1 + drivers/net/ethernet/freescale/Kconfig | 2 +- drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 8 +- drivers/net/ethernet/intel/ice/ice_ptp.c | 8 +- drivers/net/ethernet/intel/ixgbe/devlink/devlink.c | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe.h | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_ethtool.c | 13 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 10 + drivers/net/ethernet/intel/ixgbevf/vf.c | 7 + drivers/net/ethernet/stmicro/stmmac/dwmac-tegra.c | 19 +- drivers/net/ethernet/wangxun/txgbe/txgbe_type.h | 8 +- drivers/net/ipa/reg/gsi_reg-v5.0.c | 9 +- drivers/net/mdio/mdio-realtek-rtl9300.c | 3 +- drivers/net/phy/sfp.c | 16 ++ drivers/net/usb/cdc-phonet.c | 7 +- drivers/net/wan/lapbether.c | 13 +- drivers/net/wireguard/device.c | 8 +- .../wireless/broadcom/brcm80211/brcmfmac/fweh.c | 5 + drivers/net/wireless/realtek/rtw88/usb.c | 3 +- drivers/net/wireless/ti/wl1251/tx.c | 8 +- drivers/nfc/s3fwrn5/uart.c | 10 +- drivers/ntb/ntb_transport.c | 7 +- drivers/pci/controller/pci-hyperv.c | 12 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 20 +- drivers/pinctrl/intel/pinctrl-intel.c | 2 +- drivers/pinctrl/pinctrl-mcp23s08.c | 9 + drivers/platform/x86/amd/pmc/pmc-quirks.c | 9 + drivers/platform/x86/asus-nb-wmi.c | 2 +- drivers/platform/x86/hp/hp-wmi.c | 4 + drivers/soc/aspeed/aspeed-socinfo.c | 2 +- drivers/soc/microchip/mpfs-control-scb.c | 6 +- drivers/soc/microchip/mpfs-mss-top-sysreg.c | 6 +- drivers/soc/qcom/pdr_internal.h | 2 +- drivers/soc/qcom/qcom_pdr_msg.c | 2 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/staging/sm750fb/sm750.c | 3 + drivers/usb/class/cdc-acm.c | 53 ++++- drivers/usb/core/port.c | 1 + drivers/usb/gadget/function/f_hid.c | 15 +- drivers/usb/gadget/function/f_ncm.c | 4 +- drivers/usb/gadget/function/f_phonet.c | 9 + drivers/usb/gadget/udc/renesas_usb3.c | 7 +- drivers/usb/serial/option.c | 2 + drivers/usb/storage/unusual_devs.h | 7 +- drivers/usb/typec/tcpm/fusb302.c | 5 +- drivers/usb/usbip/usbip_common.c | 12 ++ drivers/vfio/pci/xe/main.c | 43 +++-- drivers/video/fbdev/tdfxfb.c | 3 + drivers/video/fbdev/udlfb.c | 3 + fs/btrfs/tree-log.c | 98 ++++++---- fs/cachefiles/namei.c | 5 + fs/dcache.c | 4 +- fs/eventpoll.c | 6 +- fs/nilfs2/dat.c | 3 + fs/ocfs2/aops.c | 3 +- fs/ocfs2/inode.c | 35 +++- fs/ocfs2/mmap.c | 7 +- fs/ocfs2/ocfs2_trace.h | 10 +- fs/ocfs2/resize.c | 10 +- fs/smb/client/fs_context.c | 4 + fs/smb/client/smb2file.c | 20 +- fs/smb/client/smb2inode.c | 2 +- fs/smb/client/smbdirect.c | 8 + fs/smb/server/connection.c | 1 + fs/smb/server/smb2pdu.c | 7 +- fs/smb/server/smbacl.c | 3 +- fs/smb/server/transport_rdma.c | 8 +- include/hyperv/hvgdk_mini.h | 6 + include/hyperv/hvhdk.h | 4 +- include/linux/clockchips.h | 2 + include/linux/dma-mapping.h | 7 + include/linux/hugetlb.h | 17 ++ include/linux/kvm_host.h | 93 +++++---- include/linux/mmap_lock.h | 6 +- include/linux/soc/qcom/pdr.h | 1 + include/linux/srcutiny.h | 4 + include/linux/uaccess.h | 11 +- include/net/ip_tunnels.h | 2 +- include/net/netfilter/nf_conntrack_core.h | 5 + include/net/netfilter/nf_queue.h | 1 - include/net/xdp_sock.h | 2 +- include/net/xdp_sock_drv.h | 23 ++- include/sound/sdca_interrupts.h | 5 + include/trace/events/btrfs.h | 11 +- include/trace/events/dma.h | 3 +- include/uapi/linux/kvm.h | 19 +- kernel/dma/debug.c | 35 +++- kernel/rcu/srcutiny.c | 19 +- kernel/sched/deadline.c | 2 +- kernel/time/clockevents.c | 27 ++- kernel/time/hrtimer.c | 1 + kernel/time/tick-broadcast.c | 8 +- kernel/time/tick-common.c | 1 + kernel/time/tick-sched.c | 1 + kernel/trace/trace_probe.c | 2 +- lib/iov_iter.c | 4 +- mm/backing-dev.c | 5 +- mm/filemap.c | 3 +- mm/internal.h | 1 - mm/kasan/init.c | 8 +- mm/truncate.c | 6 +- mm/userfaultfd.c | 2 +- net/bluetooth/hci_conn.c | 2 +- net/bluetooth/hci_core.c | 2 +- net/bluetooth/hci_sync.c | 20 +- net/bridge/br_fdb.c | 6 + net/can/raw.c | 11 +- net/core/rtnetlink.c | 40 ++-- net/devlink/health.c | 2 +- net/ipv4/icmp.c | 7 + net/ipv4/nexthop.c | 41 ++-- net/ipv6/ioam6.c | 33 ++-- net/ipv6/netfilter/ip6t_eui64.c | 3 +- net/key/af_key.c | 52 +++-- net/l2tp/l2tp_core.c | 5 + net/netfilter/ipvs/ip_vs_ctl.c | 1 - net/netfilter/nf_conntrack_ecache.c | 2 + net/netfilter/nf_conntrack_expect.c | 10 +- net/netfilter/nf_conntrack_netlink.c | 28 ++- net/netfilter/nfnetlink_log.c | 8 +- net/netfilter/nfnetlink_queue.c | 214 ++++++++------------- net/netfilter/nft_set_pipapo_avx2.c | 20 +- net/netfilter/xt_multiport.c | 34 +++- net/nfc/digital_technology.c | 6 + net/nfc/llcp_core.c | 2 + net/sched/act_csum.c | 6 +- net/unix/diag.c | 21 +- net/xdp/xdp_umem.c | 3 +- net/xdp/xsk.c | 4 +- net/xdp/xsk_buff_pool.c | 32 ++- net/xfrm/xfrm_policy.c | 5 +- net/xfrm/xfrm_user.c | 11 +- scripts/checkpatch.pl | 10 + scripts/gdb/linux/symbols.py | 2 +- scripts/generate_rust_analyzer.py | 3 +- sound/firewire/fireworks/fireworks_command.c | 5 +- sound/hda/codecs/realtek/alc269.c | 35 +++- sound/pci/asihpi/hpimsgx.c | 6 +- sound/pci/ctxfi/ctvmem.h | 2 +- sound/soc/amd/acp/acp-sdw-legacy-mach.c | 16 +- sound/soc/amd/yc/acp6x-mach.c | 21 ++ sound/soc/intel/avs/board_selection.c | 9 +- sound/soc/qcom/qdsp6/q6apm.c | 14 +- sound/soc/sdca/sdca_class_function.c | 30 +++ sound/soc/sdca/sdca_interrupts.c | 80 +++++++- sound/soc/soc-core.c | 1 + sound/soc/sof/intel/hda.c | 10 +- sound/soc/sof/topology.c | 2 +- sound/soc/stm/stm32_sai_sub.c | 3 + sound/usb/6fire/chip.c | 17 +- sound/usb/Kconfig | 1 + sound/usb/quirks.c | 2 + sound/usb/usx2y/us144mkii.c | 6 +- tools/objtool/check.c | 2 +- tools/power/x86/turbostat/turbostat.c | 67 ++++--- .../testing/selftests/bpf/progs/verifier_bounds.c | 137 +++++++++++++ .../testing/selftests/kvm/x86/sev_migrate_tests.c | 2 - tools/testing/selftests/mm/hmm-tests.c | 83 ++------ .../selftests/net/forwarding/bridge_vlan_mcast.sh | 1 + tools/testing/vsock/util.c | 8 +- virt/kvm/binary_stats.c | 2 +- virt/kvm/kvm_main.c | 20 +- 245 files changed, 1954 insertions(+), 958 deletions(-)

1 month, 2 weeks

← Newer
1
2
3
4
5
6
7
8
...
3413
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage