- Lkft-triage - lists.linaro.org

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.24 release. There are 198 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 22 Apr 2026 15:38:57 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.24-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.24-rc1 Leon Romanovsky <leon(a)kernel.org> dma-mapping: handle DMA_ATTR_CPU_CACHE_CLEAN in trace output Leon Romanovsky <leon(a)kernel.org> dma-debug: Allow multiple invocations of overlapping entries Jianhui Zhou <jianhuizzzzz(a)gmail.com> mm/userfaultfd: fix hugetlb fault mutex hash calculation Jeongjun Park <aha310510(a)gmail.com> media: hackrf: fix to not free memory after the device is registered in hackrf_probe() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> media: vidtv: fix pass-by-value structs causing MSAN warnings Deepanshu Kartikey <kartikey406(a)gmail.com> nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map Jeongjun Park <aha310510(a)gmail.com> media: as102: fix to not free memory after the device is registered in as102_usb_probe() Shardul Bankar <shardul.b(a)mpiricsoftware.com> wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit Mingzhe Zou <mingzhe.zou(a)easystack.cn> bcache: fix cached_dev.sb_bio use-after-free and crash Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: 6fire: fix use-after-free on disconnect Sanman Pradhan <psanman(a)juniper.net> hwmon: (powerz) Fix use-after-free on USB disconnect Abhishek Kumar <abhishek_sts8(a)yahoo.com> media: em28xx: fix use-after-free in em28xx_v4l2_open() Fan Wu <fanwu01(a)zju.edu.cn> media: mediatek: vcodec: fix use-after-free in encoder release path Ruslan Valiyev <linuxoid(a)gmail.com> media: vidtv: fix nfeeds state corruption on start_streaming failure Breno Leitao <leitao(a)debian.org> mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> mm/kasan: fix double free for kasan pXds Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: move component registration to unmanaged version Sean Christopherson <seanjc(a)google.com> KVM: x86: Use scratch field in MMIO fragment to hold small write values Linus Torvalds <torvalds(a)linux-foundation.org> x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache Linus Torvalds <torvalds(a)linux-foundation.org> x86: rename and clean up __copy_from_user_inatomic_nocache() Linus Torvalds <torvalds(a)linux-foundation.org> x86-64: rename misleadingly named '__copy_user_nocache()' function Sasha Levin <sashal(a)kernel.org> checkpatch: add support for Assisted-by tag Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix out-of-bounds write in ocfs2_write_end_inline Deepanshu Kartikey <kartikey406(a)gmail.com> ocfs2: validate inline data i_size during inode read Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() David Woodhouse <dwmw(a)amazon.co.uk> KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs Sean Christopherson <seanjc(a)google.com> KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Test refinement of single-value tnum Sean Christopherson <seanjc(a)google.com> KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION Sean Christopherson <seanjc(a)google.com> KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Sean Christopherson <seanjc(a)google.com> KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created Sean Christopherson <seanjc(a)google.com> KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock Sean Christopherson <seanjc(a)google.com> KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Sean Christopherson <seanjc(a)google.com> KVM: selftests: Remove duplicate LAUNCH_UPDATE_VMSA call in SEV-ES migrate test Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup ZhengYuan Huang <gality369(a)gmail.com> ocfs2: handle invalid dinode in ocfs2_group_extend Tejas Bharambe <tejas.bharambe(a)outlook.com> ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix possible deadlock between unlink and dio_end_io_write Ruslan Valiyev <linuxoid(a)gmail.com> media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Handle invalid large leaf mappings correctly Zhihao Cheng <chengzhihao1(a)huawei.com> dcache: Limit the minimal number of bucket to two Harin Lee <me(a)harin.net> ALSA: ctxfi: Limit PTP to a single page SeongJae Park <sj(a)kernel.org> Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FN990A MBIM composition Junrui Luo <moonafterrain(a)outlook.com> staging: sm750fb: fix division by zero in ps_to_hz() Johan Hovold <johan(a)kernel.org> wifi: rtw88: fix device leak on probe failure Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer.py: avoid FD leak Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Xu Yang <xu.yang_2(a)nxp.com> usb: port: add delay after usb_hub_set_port_power() Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: don't call cdev_init while cdev in use Dave Carey <carvsdriver(a)gmail.com> USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen Daniel Brát <danek.brat(a)gmail.com> usb: storage: Expand range of matched versions for VL817 quirks entry Alexey Charkov <alchark(a)flipper.net> usb: typec: fusb302: Switch to threaded IRQ handler Nathan Rebello <nathan.c.rebello(a)gmail.com> usbip: validate number_of_packets in usbip_pack_ret_submit() Stefan Metzmacher <metze(a)samba.org> smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() Stefan Metzmacher <metze(a)samba.org> smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: require 3 sub-authorities before reading sub_auth[2] Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: validate EaNameLength in smb2_get_ea() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> smb: client: fix OOB reads parsing symlink error response Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> smb: client: fix off-by-8 bounds check in check_wsl_eas() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: renesas_usb3: validate endpoint index in standard request handlers Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ALSA: fireworks: bound device-supplied status before string array lookup Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/vc4: platform_get_irq_byname() returns an int Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> NFC: digital: Bounds check NFC-A cascade depth in SDD response handler Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: core: clamp report_size in s32ton() to avoid undefined shift Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: alps: fix NULL pointer dereference in alps_raw_event() Lin YuChen <starpt.official(a)gmail.com> staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> i2c: s3c24xx: check the size of the SMBUS message before using it Samuel Page <sam(a)bynar.io> can: raw: fix ro->uniq use-after-free in raw_rcv() Junxi Qian <qjx1298677004(a)gmail.com> nfc: llcp: add missing return after LLCP_CLOSED checks Florian Westphal <fw(a)strlen.de> netfilter: conntrack: add missing netlink policy validations Herbert Xu <herbert(a)gondor.apana.org.au> crypto: algif_aead - Fix minimum RX size check for decryption Herbert Xu <herbert(a)gondor.apana.org.au> crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl Thomas Gleixner <tglx(a)kernel.org> clockevents: Prevent timer interrupt starvation Peter Zijlstra <peterz(a)infradead.org> sched/deadline: Use revised wakeup rule for dl_server Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Skip discovery table for offline dies Douya Le <ldy3087146292(a)gmail.com> crypto: af_alg - limit RX SG extraction by receive buffer budget Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> gpio: tegra: fix irq_release_resources calling enable instead of disable Alice Mikityanska <alice(a)isovalent.com> l2tp: Drop large packets with UDP encap Alexander Koskovich <akoskovich(a)pm.me> net: ipa: fix event ring index not programmed for IPA v5.0+ Alexander Koskovich <akoskovich(a)pm.me> net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ Li RongQing <lirongqing(a)baidu.com> devlink: Fix incorrect skb socket family dumping Jiexun Wang <wangjiexun2025(a)gmail.com> af_unix: read UNIX_DIAG_VFS data under unix_state_lock Fabio Baltieri <fabio.baltieri(a)gmail.com> net: txgbe: leave space for null terminators on property_entry Justin Iurman <justin.iurman(a)gmail.com> net: ioam6: fix OOB and missing lock Felix Gu <ustc.gu(a)gmail.com> net: mdio: realtek-rtl9300: use scoped device_for_each_child_node loop Syed Saba Kareem <Syed.SabaKareem(a)amd.com> ASoC: amd: acp: update DMI quirk and add ACP DMIC for Lenovo platforms Maciej Strozek <mstrozek(a)opensource.cirrus.com> ASoC: SDCA: Fix overwritten var within for loop Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: make hash table per queue Scott Mitchell <scott.k.mitch1(a)gmail.com> netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation Zhengchuan Liang <zcliangcn(a)gmail.com> netfilter: ip6t_eui64: reject invalid MAC header for all packets Ren Wei <n05ec(a)lzu.edu.cn> netfilter: xt_multiport: validate range encoding in checkentry Xiang Mei <xmei5(a)asu.edu> netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator Weiming Shi <bestswngs(a)gmail.com> ipvs: fix NULL deref in ip_vs_add_service error path Daniel Golle <daniel(a)makrotopia.org> selftests: net: bridge_vlan_mcast: wait for h1 before querier check Vinay Belgaumkar <vinay.belgaumkar(a)intel.com> drm/xe: Fix bug in idledly unit conversion Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: avs: Fix memory leak in avs_register_i2s_test_boards() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_mapping() Kotlyarov Mihail <mihailkotlyarow(a)gmail.com> xfrm: fix refcount leak in xfrm_migrate_policy_find Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Wait for RCU readers during policy netns exit Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: validate MTU against usable frame size on bind Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: fix XDP_UMEM_SG_FLAG issues Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: respect tailroom for ZC setups Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: tighten UMEM headroom validation to account for tailroom and min frame Agalakov Daniil <ade(a)amicon.ru> e1000: check return value of e1000_read_eeprom Michal Schmidt <mschmidt(a)redhat.com> ixgbevf: add missing negotiate_features op to Hyper-V ops table Aleksandr Loktionov <aleksandr.loktionov(a)intel.com> ixgbe: stop re-reading flash on every get_drvinfo for e610 Kohei Enju <kohei(a)enjuk.jp> ice: ptp: don't WARN when controlling PF is unavailable Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing/probe: reject non-closed empty immediate strings Jon Hunter <jonathanh(a)nvidia.com> dt-bindings: net: Fix Tegra234 MGBE PTP clock Jon Hunter <jonathanh(a)nvidia.com> net: stmmac: Fix PTP ref clock for Tegra234 Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: s3fwrn5: allocate rx skb before consuming bytes Chris J Arges <carges(a)cloudflare.com> net: increase IP_TUNNEL_RECURSION_LIMIT to 5 Yiqi Sun <sunyiqixm(a)gmail.com> ipv4: icmp: fix null-ptr-deref in icmp_build_probe() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump Nikolaos Gkarlis <nickgarlis(a)gmail.com> rtnetlink: add missing netlink_ns_capable() check for peer netns Zijing Yin <yzjaurora(a)gmail.com> bridge: guard local VLAN-0 FDB helpers against NULL vlan group Eric Dumazet <edumazet(a)google.com> ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Fix memory leak in airoha_qdma_rx_process() Eric Dumazet <edumazet(a)google.com> net: lapbether: handle NETDEV_PRE_TYPE_CHANGE Ruide Cao <caoruide123(a)gmail.com> net: sched: act_csum: validate nested VLAN headers Nicholas Carlini <nicholas(a)carlini.com> eventpoll: defer struct eventpoll free to RCU grace period Maíra Canal <mcanal(a)igalia.com> drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix a memory leak in hang state error path Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix memory leak of BO array in hang state Maíra Canal <mcanal(a)igalia.com> drm/vc4: Release runtime PM reference after binding V3D Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> dma-debug: suppress cacheline overlap warning when arch has no DMA alignment requirement Michael S. Tsirkin <mst(a)redhat.com> dma-debug: track cache clean flag in entries Michael S. Tsirkin <mst(a)redhat.com> dma-mapping: add DMA_ATTR_CPU_CACHE_CLEAN Keenan Dong <keenanat2000(a)gmail.com> xfrm: account XFRMA_IF_ID in aevent size calculation Maximilian Pezzullo <maximilianpezzullo(a)gmail.com> HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP Long Li <longli(a)microsoft.com> PCI: hv: Set default NUMA node to 0 for devices without affinity info Mihai Sain <mihai.sain(a)microchip.com> ARM: dts: microchip: sam9x7: fix gpio-lines count for pioB Loic Poulain <loic.poulain(a)oss.qualcomm.com> arm64: dts: qcom: monaco: Reserve full Gunyah metadata region Artem Bityutskiy <artem.bityutskiy(a)linux.intel.com> tools/power turbostat: Fix --show/--hide for individual cpuidle counters Serhii Pievniev <spevnev16(a)gmail.com> tools/power/turbostat: Fix microcode patch level output for AMD/Hygon Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei Loic Poulain <loic.poulain(a)oss.qualcomm.com> arm64: dts: qcom: monaco: Fix UART10 pinconf Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx93-tqma9352: improve eMMC pad configuration Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx91-tqma9131: improve eMMC pad configuration Luke Wang <ziniu.wang_1(a)nxp.com> arm64: dts: imx93-9x9-qsb: change usdhc tuning step for eMMC and SD Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> arm64: dts: qcom: qcm6490-idp: Fix WCD9370 reset GPIO polarity Daniel J Blueman <daniel(a)quora.org> arm64: dts: qcom: hamoa/x1: fix idle exit latency Potin Lai <potin.lai.pt(a)gmail.com> soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching Tomasz Merta <tomasz.merta(a)arrow.com> ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J Linus Torvalds <torvalds(a)linux-foundation.org> x86: shadow stacks: proper error handling for mmap lock John Pavlick <jspavlick(a)posteo.net> net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: brcmfmac: validate bsscfg indices in IF events Arthur Husband <artmoty(a)gmail.com> ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 Benoît Sevens <bsevens(a)google.com> HID: roccat: fix use-after-free in roccat_report_event songxiebing <songxiebing(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 leo vriska <leo(a)60228.dev> HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 Even Xu <even.xu(a)intel.com> HID: Intel-thc-hid: Intel-quickspi: Add NVL Device IDs Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) Alexander Savenko <alex.sav4387(a)gmail.com> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 Gilson Marquato Júnior <gilsonmandalogo(a)hotmail.com> ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx Fredric Cover <FredTheDude(a)proton.me> fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath Donet Tom <donettom(a)linux.ibm.com> drm/amdkfd: Fix queue preemption/eviction failures by aligning control stack size to GPU page size songxiebing <songxiebing(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Lenovo Yoga Slim 7 14AKP10 Phil Willoughby <willerz(a)gmail.com> ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: wl1251: validate packet IDs before indexing tx_frames Dustin L. Howett <dustin(a)howett.net> ALSA: hda/realtek: add quirk for Framework F111:000F Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry Kshamendra Kumar Mishra <kshamendrakumarmishra(a)gmail.com> ALSA: hda/realtek: add HP Laptop 15-fd0xxx mute LED quirk Joel Fernandes <joelagnelf(a)nvidia.com> srcu: Use irq_work to start GP in tiny SRCU Donet Tom <donettom(a)linux.ibm.com> drm/amdgpu: Handle GPU page faults correctly on non-4K page systems Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: ensure safe access to master conntrack César Montoya <sprit152009(a)gmail.com> ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add support for Omen 16-wf1xxx (8C76) Filipe Manana <fdmanana(a)suse.com> btrfs: fix zero size inode with non-zero size after log replay Matthew Schwartz <matthew.schwartz(a)linux.dev> platform/x86: asus-nb-wmi: add DMI quirk for ASUS ROG Flow Z13-KJP GZ302EAC Frank Zhang <rmxpzlb(a)gmail.com> ALSA:usb:qcom: add AUXILIARY_BUS to Kconfig dependencies Hasun Park <hasunpark(a)gmail.com> ASoC: amd: acp: add ASUS HN7306EA quirk for legacy SDW machine Wenyuan Li <2063309626(a)qq.com> can: mcp251x: add error handling for power enable in open and resume Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: reject invalid vendor array size in token parser Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: hci_sync: annotate data-races around hdev->req_status Arnd Bergmann <arnd(a)arndb.de> ALSA: asihpi: avoid write overflow check warning Arnd Bergmann <arnd(a)arndb.de> media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() Matthew Schwartz <matthew.schwartz(a)linux.dev> ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for Lenovo Yoga 7 2-in-1 16AKP10 Andrii Kovalchuk <coderpy4(a)proton.me> ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk Vee Satayamas <vsatayamas(a)gmail.com> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix double free related to rereg_user_mr Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix lockdep warnings when calling idxd_device_config() ------------- Diffstat: Documentation/admin-guide/mm/damon/reclaim.rst | 4 + .../bindings/net/nvidia,tegra234-mgbe.yaml | 4 +- Makefile | 4 +- arch/arm/boot/dts/microchip/sam9x7.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx8mq.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx91-tqma9131.dtsi | 20 +- arch/arm64/boot/dts/freescale/imx93-9x9-qsb.dts | 2 + arch/arm64/boot/dts/freescale/imx93-tqma9352.dtsi | 26 +-- arch/arm64/boot/dts/qcom/qcm6490-idp.dts | 2 +- arch/arm64/boot/dts/qcom/qcs8300.dtsi | 9 +- arch/arm64/boot/dts/qcom/x1e80100.dtsi | 2 +- arch/arm64/include/asm/pgtable-prot.h | 2 + arch/arm64/include/asm/pgtable.h | 9 +- arch/arm64/include/asm/uaccess.h | 2 +- arch/arm64/kvm/guest.c | 4 +- arch/arm64/mm/mmu.c | 4 + arch/arm64/mm/pageattr.c | 50 ++--- arch/arm64/mm/trans_pgd.c | 42 +--- arch/loongarch/kvm/vcpu.c | 2 +- arch/loongarch/kvm/vm.c | 2 +- arch/mips/kvm/mips.c | 4 +- arch/powerpc/include/asm/uaccess.h | 3 +- arch/powerpc/kvm/book3s.c | 4 +- arch/powerpc/kvm/booke.c | 4 +- arch/powerpc/lib/pmem.c | 11 +- arch/riscv/kvm/vcpu.c | 2 +- arch/riscv/kvm/vm.c | 2 +- arch/s390/kvm/kvm-s390.c | 4 +- arch/x86/events/intel/uncore_discovery.c | 2 +- arch/x86/include/asm/uaccess.h | 2 +- arch/x86/include/asm/uaccess_32.h | 8 +- arch/x86/include/asm/uaccess_64.h | 16 +- arch/x86/include/uapi/asm/kvm.h | 12 +- arch/x86/kernel/shstk.c | 3 +- arch/x86/kvm/svm/sev.c | 46 +++-- arch/x86/kvm/x86.c | 18 +- arch/x86/lib/copy_user_uncached_64.S | 6 +- arch/x86/lib/usercopy_32.c | 9 +- arch/x86/lib/usercopy_64.c | 12 +- crypto/af_alg.c | 6 +- crypto/algif_aead.c | 2 +- crypto/algif_skcipher.c | 5 + drivers/ata/ahci.c | 14 ++ drivers/dma/idxd/device.c | 17 +- drivers/dma/idxd/init.c | 10 +- drivers/gpio/gpio-tegra.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 7 +- drivers/gpu/drm/i915/i915_gem.c | 2 +- drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +- drivers/gpu/drm/vc4/vc4_bo.c | 3 + drivers/gpu/drm/vc4/vc4_gem.c | 19 +- drivers/gpu/drm/vc4/vc4_hdmi.c | 14 +- drivers/gpu/drm/vc4/vc4_v3d.c | 1 + drivers/gpu/drm/xe/xe_hw_engine.c | 3 +- drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 3 +- drivers/hid/hid-alps.c | 3 + drivers/hid/hid-core.c | 3 + drivers/hid/hid-ids.h | 3 + drivers/hid/hid-quirks.c | 1 + drivers/hid/hid-roccat.c | 2 + .../intel-thc-hid/intel-quickspi/pci-quickspi.c | 6 + .../intel-thc-hid/intel-quickspi/quickspi-dev.h | 2 + drivers/hwmon/powerz.c | 8 +- drivers/i2c/busses/i2c-s3c2410.c | 7 +- drivers/infiniband/hw/irdma/verbs.c | 1 + drivers/infiniband/sw/rdmavt/qp.c | 8 +- drivers/md/bcache/super.c | 7 + .../mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c | 9 + .../media/platform/rockchip/rkvdec/rkvdec-vp9.c | 3 +- drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_channel.c | 4 + drivers/media/test-drivers/vidtv/vidtv_mux.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_ts.c | 48 ++--- drivers/media/test-drivers/vidtv/vidtv_ts.h | 4 +- drivers/media/usb/as102/as102_usb_drv.c | 2 + drivers/media/usb/em28xx/em28xx-video.c | 14 +- drivers/media/usb/hackrf/hackrf.c | 7 +- drivers/net/can/spi/mcp251x.c | 29 ++- drivers/net/ethernet/airoha/airoha_eth.c | 3 +- drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 8 +- drivers/net/ethernet/intel/ice/ice_ptp.c | 8 +- drivers/net/ethernet/intel/ixgbe/devlink/devlink.c | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe.h | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_ethtool.c | 13 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 10 + drivers/net/ethernet/intel/ixgbevf/vf.c | 7 + drivers/net/ethernet/stmicro/stmmac/dwmac-tegra.c | 19 +- drivers/net/ethernet/wangxun/txgbe/txgbe_type.h | 8 +- drivers/net/ipa/reg/gsi_reg-v5.0.c | 9 +- drivers/net/mdio/mdio-realtek-rtl9300.c | 3 +- drivers/net/phy/sfp.c | 16 ++ drivers/net/usb/cdc-phonet.c | 7 +- drivers/net/wan/lapbether.c | 13 +- drivers/net/wireguard/device.c | 8 +- .../wireless/broadcom/brcm80211/brcmfmac/fweh.c | 5 + drivers/net/wireless/realtek/rtw88/usb.c | 3 +- drivers/net/wireless/ti/wl1251/tx.c | 8 +- drivers/nfc/s3fwrn5/uart.c | 10 +- drivers/ntb/ntb_transport.c | 7 +- drivers/pci/controller/pci-hyperv.c | 8 + drivers/pci/endpoint/functions/pci-epf-vntb.c | 20 +- drivers/pinctrl/intel/pinctrl-intel.c | 2 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 9 + drivers/platform/x86/asus-nb-wmi.c | 2 +- drivers/platform/x86/hp/hp-wmi.c | 4 + drivers/soc/aspeed/aspeed-socinfo.c | 2 +- drivers/soc/qcom/pdr_internal.h | 2 +- drivers/soc/qcom/qcom_pdr_msg.c | 2 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/staging/sm750fb/sm750.c | 3 + drivers/usb/class/cdc-acm.c | 53 ++++- drivers/usb/core/port.c | 1 + drivers/usb/gadget/function/f_hid.c | 15 +- drivers/usb/gadget/function/f_ncm.c | 4 +- drivers/usb/gadget/function/f_phonet.c | 9 + drivers/usb/gadget/udc/renesas_usb3.c | 7 +- drivers/usb/serial/option.c | 2 + drivers/usb/storage/unusual_devs.h | 7 +- drivers/usb/typec/tcpm/fusb302.c | 5 +- drivers/usb/usbip/usbip_common.c | 12 ++ drivers/video/fbdev/tdfxfb.c | 3 + drivers/video/fbdev/udlfb.c | 3 + fs/btrfs/tree-log.c | 98 ++++++---- fs/dcache.c | 4 +- fs/eventpoll.c | 6 +- fs/nilfs2/dat.c | 3 + fs/ocfs2/aops.c | 3 +- fs/ocfs2/inode.c | 31 +++ fs/ocfs2/mmap.c | 7 +- fs/ocfs2/ocfs2_trace.h | 10 +- fs/ocfs2/resize.c | 10 +- fs/smb/client/fs_context.c | 4 + fs/smb/client/smb2file.c | 20 +- fs/smb/client/smb2inode.c | 2 +- fs/smb/client/smbdirect.c | 8 + fs/smb/server/connection.c | 1 + fs/smb/server/smb2pdu.c | 7 +- fs/smb/server/smbacl.c | 3 +- fs/smb/server/transport_rdma.c | 8 +- include/linux/clockchips.h | 2 + include/linux/dma-mapping.h | 7 + include/linux/hugetlb.h | 17 ++ include/linux/kvm_host.h | 93 +++++---- include/linux/mmap_lock.h | 6 +- include/linux/soc/qcom/pdr.h | 1 + include/linux/srcutiny.h | 4 + include/linux/uaccess.h | 11 +- include/net/ip_tunnels.h | 2 +- include/net/netfilter/nf_conntrack_core.h | 5 + include/net/netfilter/nf_queue.h | 1 - include/net/xdp_sock.h | 2 +- include/net/xdp_sock_drv.h | 23 ++- include/trace/events/btrfs.h | 11 +- include/trace/events/dma.h | 3 +- include/uapi/linux/kvm.h | 19 +- kernel/dma/debug.c | 35 +++- kernel/rcu/srcutiny.c | 19 +- kernel/sched/deadline.c | 2 +- kernel/time/clockevents.c | 27 ++- kernel/time/hrtimer.c | 1 + kernel/time/tick-broadcast.c | 8 +- kernel/time/tick-common.c | 1 + kernel/time/tick-sched.c | 1 + kernel/trace/trace_probe.c | 2 +- lib/iov_iter.c | 4 +- mm/backing-dev.c | 5 +- mm/kasan/init.c | 8 +- mm/userfaultfd.c | 2 +- net/bluetooth/hci_conn.c | 2 +- net/bluetooth/hci_core.c | 2 +- net/bluetooth/hci_sync.c | 20 +- net/bridge/br_fdb.c | 6 + net/can/raw.c | 11 +- net/core/rtnetlink.c | 40 ++-- net/devlink/health.c | 2 +- net/ipv4/icmp.c | 7 + net/ipv4/nexthop.c | 41 ++-- net/ipv6/ioam6.c | 33 ++-- net/ipv6/netfilter/ip6t_eui64.c | 3 +- net/l2tp/l2tp_core.c | 5 + net/netfilter/ipvs/ip_vs_ctl.c | 1 - net/netfilter/nf_conntrack_ecache.c | 2 + net/netfilter/nf_conntrack_expect.c | 10 +- net/netfilter/nf_conntrack_netlink.c | 30 ++- net/netfilter/nf_conntrack_proto_sctp.c | 3 +- net/netfilter/nfnetlink_log.c | 8 +- net/netfilter/nfnetlink_queue.c | 214 ++++++++------------- net/netfilter/nft_set_pipapo_avx2.c | 20 +- net/netfilter/xt_multiport.c | 34 +++- net/nfc/digital_technology.c | 6 + net/nfc/llcp_core.c | 2 + net/sched/act_csum.c | 6 +- net/unix/diag.c | 21 +- net/xdp/xdp_umem.c | 3 +- net/xdp/xsk.c | 4 +- net/xdp/xsk_buff_pool.c | 32 ++- net/xfrm/xfrm_policy.c | 5 +- net/xfrm/xfrm_user.c | 11 +- scripts/checkpatch.pl | 10 + scripts/generate_rust_analyzer.py | 3 +- sound/firewire/fireworks/fireworks_command.c | 5 +- sound/hda/codecs/realtek/alc269.c | 13 ++ sound/pci/asihpi/hpimsgx.c | 6 +- sound/pci/ctxfi/ctvmem.h | 2 +- sound/soc/amd/acp/acp-sdw-legacy-mach.c | 16 +- sound/soc/amd/yc/acp6x-mach.c | 21 ++ sound/soc/intel/avs/board_selection.c | 9 +- sound/soc/qcom/qdsp6/q6apm.c | 14 +- sound/soc/sdca/sdca_interrupts.c | 4 +- sound/soc/soc-core.c | 1 + sound/soc/sof/topology.c | 2 +- sound/soc/stm/stm32_sai_sub.c | 3 + sound/usb/6fire/chip.c | 17 +- sound/usb/Kconfig | 1 + sound/usb/quirks.c | 2 + sound/usb/usx2y/us144mkii.c | 6 +- tools/objtool/check.c | 2 +- tools/power/x86/turbostat/turbostat.c | 44 +++-- .../testing/selftests/bpf/progs/verifier_bounds.c | 137 +++++++++++++ .../testing/selftests/kvm/x86/sev_migrate_tests.c | 2 - .../selftests/net/forwarding/bridge_vlan_mcast.sh | 1 + virt/kvm/binary_stats.c | 2 +- virt/kvm/kvm_main.c | 20 +- 224 files changed, 1675 insertions(+), 802 deletions(-)

3 weeks, 4 days

13
13
0 0

[PATCH 7.0 00/76] 7.0.1-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.0.1 release. There are 76 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 22 Apr 2026 15:38:50 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.0.1-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.0.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.0.1-rc1 Jianhui Zhou <jianhuizzzzz(a)gmail.com> mm/userfaultfd: fix hugetlb fault mutex hash calculation Jeongjun Park <aha310510(a)gmail.com> media: hackrf: fix to not free memory after the device is registered in hackrf_probe() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> media: vidtv: fix pass-by-value structs causing MSAN warnings Deepanshu Kartikey <kartikey406(a)gmail.com> nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map Jeongjun Park <aha310510(a)gmail.com> media: as102: fix to not free memory after the device is registered in as102_usb_probe() Shardul Bankar <shardul.b(a)mpiricsoftware.com> wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit Mingzhe Zou <mingzhe.zou(a)easystack.cn> bcache: fix cached_dev.sb_bio use-after-free and crash Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: 6fire: fix use-after-free on disconnect Sanman Pradhan <psanman(a)juniper.net> hwmon: (powerz) Fix use-after-free on USB disconnect Abhishek Kumar <abhishek_sts8(a)yahoo.com> media: em28xx: fix use-after-free in em28xx_v4l2_open() Fan Wu <fanwu01(a)zju.edu.cn> media: mediatek: vcodec: fix use-after-free in encoder release path Ruslan Valiyev <linuxoid(a)gmail.com> media: vidtv: fix nfeeds state corruption on start_streaming failure Breno Leitao <leitao(a)debian.org> mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> mm/kasan: fix double free for kasan pXds Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: move component registration to unmanaged version Sean Christopherson <seanjc(a)google.com> KVM: x86: Use scratch field in MMIO fragment to hold small write values Linus Torvalds <torvalds(a)linux-foundation.org> x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache Linus Torvalds <torvalds(a)linux-foundation.org> x86: rename and clean up __copy_from_user_inatomic_nocache() Linus Torvalds <torvalds(a)linux-foundation.org> x86-64: rename misleadingly named '__copy_user_nocache()' function Sasha Levin <sashal(a)kernel.org> checkpatch: add support for Assisted-by tag Matthew Wilcox (Oracle) <willy(a)infradead.org> mm: call ->free_folio() directly in folio_unmap_invalidate() Sean Christopherson <seanjc(a)google.com> KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION Sean Christopherson <seanjc(a)google.com> KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Sean Christopherson <seanjc(a)google.com> KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created Sean Christopherson <seanjc(a)google.com> KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock Sean Christopherson <seanjc(a)google.com> KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Sean Christopherson <seanjc(a)google.com> KVM: selftests: Remove duplicate LAUNCH_UPDATE_VMSA call in SEV-ES migrate test Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup ZhengYuan Huang <gality369(a)gmail.com> ocfs2: handle invalid dinode in ocfs2_group_extend Tejas Bharambe <tejas.bharambe(a)outlook.com> ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix possible deadlock between unlink and dio_end_io_write Ruslan Valiyev <linuxoid(a)gmail.com> media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Handle invalid large leaf mappings correctly Michał Winiarski <michal.winiarski(a)intel.com> vfio/xe: Reorganize the init to decouple migration from reset Zhihao Cheng <chengzhihao1(a)huawei.com> dcache: Limit the minimal number of bucket to two Harin Lee <me(a)harin.net> ALSA: ctxfi: Limit PTP to a single page SeongJae Park <sj(a)kernel.org> Docs/admin-guide/mm/damon/lru_sort: warn commit_inputs vs param updates race SeongJae Park <sj(a)kernel.org> Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FN990A MBIM composition Alistair Popple <apopple(a)nvidia.com> selftests/mm: hmm-tests: don't hardcode THP size to 2MB Junrui Luo <moonafterrain(a)outlook.com> staging: sm750fb: fix division by zero in ps_to_hz() Johan Hovold <johan(a)kernel.org> wifi: rtw88: fix device leak on probe failure Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer.py: avoid FD leak Benjamin Berg <benjamin.berg(a)intel.com> scripts/gdb/symbols: handle module path parameters Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Xu Yang <xu.yang_2(a)nxp.com> usb: port: add delay after usb_hub_set_port_power() Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: don't call cdev_init while cdev in use Dave Carey <carvsdriver(a)gmail.com> USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen Daniel Brát <danek.brat(a)gmail.com> usb: storage: Expand range of matched versions for VL817 quirks entry Alexey Charkov <alchark(a)flipper.net> usb: typec: fusb302: Switch to threaded IRQ handler Nathan Rebello <nathan.c.rebello(a)gmail.com> usbip: validate number_of_packets in usbip_pack_ret_submit() Stefan Metzmacher <metze(a)samba.org> smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() Stefan Metzmacher <metze(a)samba.org> smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: require 3 sub-authorities before reading sub_auth[2] Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: validate EaNameLength in smb2_get_ea() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> smb: client: fix OOB reads parsing symlink error response Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> smb: client: fix off-by-8 bounds check in check_wsl_eas() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: renesas_usb3: validate endpoint index in standard request handlers Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ALSA: fireworks: bound device-supplied status before string array lookup Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> bnge: return after auxiliary_device_uninit() in error path Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/vc4: platform_get_irq_byname() returns an int Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> NFC: digital: Bounds check NFC-A cascade depth in SDD response handler Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: core: clamp report_size in s32ton() to avoid undefined shift Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: alps: fix NULL pointer dereference in alps_raw_event() Lin YuChen <starpt.official(a)gmail.com> staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> i2c: s3c24xx: check the size of the SMBUS message before using it Samuel Page <sam(a)bynar.io> can: raw: fix ro->uniq use-after-free in raw_rcv() Borislav Petkov (AMD) <bp(a)alien8.de> x86/CPU: Fix FPDSS on Zen1 Junxi Qian <qjx1298677004(a)gmail.com> nfc: llcp: add missing return after LLCP_CLOSED checks ------------- Diffstat: Documentation/admin-guide/mm/damon/lru_sort.rst | 4 ++ Documentation/admin-guide/mm/damon/reclaim.rst | 4 ++ Makefile | 4 +- arch/arm64/include/asm/pgtable-prot.h | 2 + arch/arm64/include/asm/pgtable.h | 9 ++- arch/arm64/include/asm/uaccess.h | 2 +- arch/arm64/mm/mmu.c | 4 ++ arch/arm64/mm/pageattr.c | 50 +++++++------ arch/arm64/mm/trans_pgd.c | 42 ++--------- arch/powerpc/include/asm/uaccess.h | 3 +- arch/powerpc/lib/pmem.c | 11 +-- arch/x86/include/asm/msr-index.h | 3 + arch/x86/include/asm/uaccess.h | 2 +- arch/x86/include/asm/uaccess_32.h | 8 +-- arch/x86/include/asm/uaccess_64.h | 16 +++-- arch/x86/kernel/cpu/amd.c | 3 + arch/x86/kvm/svm/sev.c | 46 ++++++++---- arch/x86/kvm/x86.c | 14 +++- arch/x86/lib/copy_user_uncached_64.S | 6 +- arch/x86/lib/usercopy_32.c | 9 +-- arch/x86/lib/usercopy_64.c | 12 ++-- drivers/gpu/drm/i915/i915_gem.c | 2 +- drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +- drivers/gpu/drm/vc4/vc4_hdmi.c | 14 ++-- drivers/hid/hid-alps.c | 3 + drivers/hid/hid-core.c | 3 + drivers/hwmon/powerz.c | 8 ++- drivers/i2c/busses/i2c-s3c2410.c | 7 +- drivers/infiniband/sw/rdmavt/qp.c | 8 +-- drivers/md/bcache/super.c | 7 ++ .../mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c | 9 +++ drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_channel.c | 4 ++ drivers/media/test-drivers/vidtv/vidtv_mux.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_ts.c | 48 ++++++------- drivers/media/test-drivers/vidtv/vidtv_ts.h | 4 +- drivers/media/usb/as102/as102_usb_drv.c | 2 + drivers/media/usb/em28xx/em28xx-video.c | 14 ++-- drivers/media/usb/hackrf/hackrf.c | 7 +- drivers/net/ethernet/broadcom/bnge/bnge_auxr.c | 1 + drivers/net/usb/cdc-phonet.c | 7 +- drivers/net/wireguard/device.c | 8 +-- drivers/net/wireless/realtek/rtw88/usb.c | 3 +- drivers/ntb/ntb_transport.c | 7 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 20 +----- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/staging/sm750fb/sm750.c | 3 + drivers/usb/class/cdc-acm.c | 53 ++++++++++++-- drivers/usb/core/port.c | 1 + drivers/usb/gadget/function/f_hid.c | 15 ++-- drivers/usb/gadget/function/f_ncm.c | 4 +- drivers/usb/gadget/function/f_phonet.c | 9 +++ drivers/usb/gadget/udc/renesas_usb3.c | 7 +- drivers/usb/serial/option.c | 2 + drivers/usb/storage/unusual_devs.h | 7 +- drivers/usb/typec/tcpm/fusb302.c | 5 +- drivers/usb/usbip/usbip_common.c | 12 ++++ drivers/vfio/pci/xe/main.c | 43 ++++++----- drivers/video/fbdev/tdfxfb.c | 3 + drivers/video/fbdev/udlfb.c | 3 + fs/dcache.c | 4 +- fs/nilfs2/dat.c | 3 + fs/ocfs2/aops.c | 3 +- fs/ocfs2/mmap.c | 7 +- fs/ocfs2/ocfs2_trace.h | 10 ++- fs/ocfs2/resize.c | 10 ++- fs/smb/client/smb2file.c | 20 +++--- fs/smb/client/smb2inode.c | 2 +- fs/smb/client/smbdirect.c | 8 +++ fs/smb/server/connection.c | 1 + fs/smb/server/smb2pdu.c | 7 +- fs/smb/server/smbacl.c | 3 +- fs/smb/server/transport_rdma.c | 8 ++- include/linux/hugetlb.h | 17 +++++ include/linux/kvm_host.h | 10 ++- include/linux/uaccess.h | 11 ++- lib/iov_iter.c | 4 +- mm/backing-dev.c | 5 +- mm/filemap.c | 3 +- mm/internal.h | 1 - mm/kasan/init.c | 8 +-- mm/truncate.c | 6 +- mm/userfaultfd.c | 2 +- net/can/raw.c | 11 ++- net/nfc/digital_technology.c | 6 ++ net/nfc/llcp_core.c | 2 + scripts/checkpatch.pl | 10 +++ scripts/gdb/linux/symbols.py | 2 +- scripts/generate_rust_analyzer.py | 3 +- sound/firewire/fireworks/fireworks_command.c | 5 +- sound/pci/ctxfi/ctvmem.h | 2 +- sound/soc/qcom/qdsp6/q6apm.c | 14 +++- sound/usb/6fire/chip.c | 17 +++-- sound/usb/usx2y/us144mkii.c | 6 +- tools/objtool/check.c | 2 +- .../testing/selftests/kvm/x86/sev_migrate_tests.c | 2 - tools/testing/selftests/mm/hmm-tests.c | 83 +++++----------------- 97 files changed, 579 insertions(+), 358 deletions(-)

3 weeks, 5 days

13
12
0 0

売上28倍。AI時代の新・集客術

by 株式会社アセット

事業オーナー様へ今、店舗経営の現場で「静かな、しかし劇的な変化」が起きていることにお気づきでしょうか。実は、ユーザーの99.4％がGoogleマップを利用し、 ”近くの〇〇”とAIに相談してお店を決めているのです。つまり、「AIやマップに認識されない」ということは、新規客の60%にとって「存在しない店」と同じなのです。このような機会損失を避けたい方へ、 80,000店舗以上の実績から導き出した集客ノウハウを無料提供しております。｜―――――――――――――――――――――――― ｜｜　　　　Googleビジネスプロフィール｜　　　　「集客の基本」解析BOOK ｜｜　　　　　＜資料はこちら＞｜　　　　https://assetcorp.jp/26/ ｜｜―――――――――――――――――――――――― 本書では、80,000店舗以上の実績から導き出した「選ばれるお店」の勝ち筋を、3ステップにまとめています。資料を手がかりにして、GoogleマップとAIを掛け合わせ「自動運用」を始めた、あるネイルサロンではわずか4ヶ月で以下の成果を叩き出しました。検索表示回数： 113倍マップ閲覧数： 3倍売上実績： 28倍UP 「今の集客に限界を感じている」「集客基盤を築きたい」そう願うオーナー様にとって、この資料が現状を打破するきっかけになれば嬉しいです。ぜひこの機会にダウンロードしてご活用ください。 [資料ダウンロードURL]　https://assetcorp.jp/26/ ------------------------------------------ 　株式会社アセット　東京都豊島区南池袋2-30-11 　TEL：03-5256-7570 ------------------------------------------ 　本情報が不必要な方にはご迷惑をおかけし申し訳ございません。　配信ストップは下記にて承っております。　https://assetcorp.jp/mail/ 　お手数お掛けしますがよろしくお願いします。

3 weeks, 5 days

1
0
0 0

[PATCH 6.12 000/162] 6.12.83-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.83 release. There are 162 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 22 Apr 2026 15:38:55 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.83-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.83-rc1 John Hancock <john(a)kernel.doghat.io> PCI: Revert "Enable ACS after configuring IOMMU for OF platforms" Minhong He <heminhong(a)kylinos.cn> ipv6: add NULL checks for idev in SRv6 paths Lukas Wunner <lukas(a)wunner.de> PCI: Fix placement of pci_save_state() in pci_bus_add_device() David Howells <dhowells(a)redhat.com> rxrpc: Fix key quota calculation for multitoken keys Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix out-of-bounds write in ocfs2_write_end_inline Deepanshu Kartikey <kartikey406(a)gmail.com> ocfs2: validate inline data i_size during inode read Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() Jeongjun Park <aha310510(a)gmail.com> media: hackrf: fix to not free memory after the device is registered in hackrf_probe() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> media: vidtv: fix pass-by-value structs causing MSAN warnings Deepanshu Kartikey <kartikey406(a)gmail.com> nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map Jeongjun Park <aha310510(a)gmail.com> media: as102: fix to not free memory after the device is registered in as102_usb_probe() Mingzhe Zou <mingzhe.zou(a)easystack.cn> bcache: fix cached_dev.sb_bio use-after-free and crash Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: 6fire: fix use-after-free on disconnect Sanman Pradhan <psanman(a)juniper.net> hwmon: (powerz) Fix use-after-free on USB disconnect Abhishek Kumar <abhishek_sts8(a)yahoo.com> media: em28xx: fix use-after-free in em28xx_v4l2_open() Fan Wu <fanwu01(a)zju.edu.cn> media: mediatek: vcodec: fix use-after-free in encoder release path Ruslan Valiyev <linuxoid(a)gmail.com> media: vidtv: fix nfeeds state corruption on start_streaming failure Breno Leitao <leitao(a)debian.org> mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> mm/kasan: fix double free for kasan pXds Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: move component registration to unmanaged version Sean Christopherson <seanjc(a)google.com> KVM: x86: Use scratch field in MMIO fragment to hold small write values Linus Torvalds <torvalds(a)linux-foundation.org> x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache Linus Torvalds <torvalds(a)linux-foundation.org> x86: rename and clean up __copy_from_user_inatomic_nocache() Linus Torvalds <torvalds(a)linux-foundation.org> x86-64: rename misleadingly named '__copy_user_nocache()' function Sasha Levin <sashal(a)kernel.org> checkpatch: add support for Assisted-by tag David Woodhouse <dwmw(a)amazon.co.uk> KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs Sean Christopherson <seanjc(a)google.com> KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay Liam R. Howlett <Liam.Howlett(a)Oracle.com> kernel: be more careful about dup_mmap() failures and uprobe registering Eric Dumazet <edumazet(a)google.com> net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() Paweł Narewski <pawel.narewski(a)nokia.com> gpiolib: fix race condition for gdev->srcu Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpiolib: unify two loops initializing GPIO descriptors Sean Christopherson <seanjc(a)google.com> KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION Sean Christopherson <seanjc(a)google.com> KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created Sean Christopherson <seanjc(a)google.com> KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup ZhengYuan Huang <gality369(a)gmail.com> ocfs2: handle invalid dinode in ocfs2_group_extend Tejas Bharambe <tejas.bharambe(a)outlook.com> ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix possible deadlock between unlink and dio_end_io_write Ruslan Valiyev <linuxoid(a)gmail.com> media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections Zhihao Cheng <chengzhihao1(a)huawei.com> dcache: Limit the minimal number of bucket to two Harin Lee <me(a)harin.net> ALSA: ctxfi: Limit PTP to a single page SeongJae Park <sj(a)kernel.org> Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FN990A MBIM composition Junrui Luo <moonafterrain(a)outlook.com> staging: sm750fb: fix division by zero in ps_to_hz() Johan Hovold <johan(a)kernel.org> wifi: rtw88: fix device leak on probe failure Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer.py: avoid FD leak Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Xu Yang <xu.yang_2(a)nxp.com> usb: port: add delay after usb_hub_set_port_power() Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: don't call cdev_init while cdev in use Dave Carey <carvsdriver(a)gmail.com> USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen Daniel Brát <danek.brat(a)gmail.com> usb: storage: Expand range of matched versions for VL817 quirks entry Nathan Rebello <nathan.c.rebello(a)gmail.com> usbip: validate number_of_packets in usbip_pack_ret_submit() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: require 3 sub-authorities before reading sub_auth[2] Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: validate EaNameLength in smb2_get_ea() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> smb: client: fix off-by-8 bounds check in check_wsl_eas() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: renesas_usb3: validate endpoint index in standard request handlers Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ALSA: fireworks: bound device-supplied status before string array lookup Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/vc4: platform_get_irq_byname() returns an int Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> NFC: digital: Bounds check NFC-A cascade depth in SDD response handler Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: core: clamp report_size in s32ton() to avoid undefined shift Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: alps: fix NULL pointer dereference in alps_raw_event() Lin YuChen <starpt.official(a)gmail.com> staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> i2c: s3c24xx: check the size of the SMBUS message before using it Samuel Page <sam(a)bynar.io> can: raw: fix ro->uniq use-after-free in raw_rcv() Junxi Qian <qjx1298677004(a)gmail.com> nfc: llcp: add missing return after LLCP_CLOSED checks Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Improve Focusrite sample rate filtering Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Address thermal zone removal races with resume Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Mark thermal zones as exiting before unregistration Sasha Levin <sashal(a)kernel.org> Revert "drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt" Sasha Levin <sashal(a)kernel.org> Revert "drm/xe/mmio: Avoid double-adjust in 64-bit reads" Florian Westphal <fw(a)strlen.de> netfilter: conntrack: add missing netlink policy validations Herbert Xu <herbert(a)gondor.apana.org.au> crypto: algif_aead - Fix minimum RX size check for decryption Thomas Gleixner <tglx(a)kernel.org> clockevents: Prevent timer interrupt starvation Peter Zijlstra <peterz(a)infradead.org> sched/deadline: Use revised wakeup rule for dl_server Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Skip discovery table for offline dies Douya Le <ldy3087146292(a)gmail.com> crypto: af_alg - limit RX SG extraction by receive buffer budget Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> gpio: tegra: fix irq_release_resources calling enable instead of disable Alice Mikityanska <alice(a)isovalent.com> l2tp: Drop large packets with UDP encap Alexander Koskovich <akoskovich(a)pm.me> net: ipa: fix event ring index not programmed for IPA v5.0+ Alexander Koskovich <akoskovich(a)pm.me> net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ Jiexun Wang <wangjiexun2025(a)gmail.com> af_unix: read UNIX_DIAG_VFS data under unix_state_lock Fabio Baltieri <fabio.baltieri(a)gmail.com> net: txgbe: leave space for null terminators on property_entry Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: make hash table per queue Scott Mitchell <scott.k.mitch1(a)gmail.com> netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation Zhengchuan Liang <zcliangcn(a)gmail.com> netfilter: ip6t_eui64: reject invalid MAC header for all packets Ren Wei <n05ec(a)lzu.edu.cn> netfilter: xt_multiport: validate range encoding in checkentry Xiang Mei <xmei5(a)asu.edu> netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator Weiming Shi <bestswngs(a)gmail.com> ipvs: fix NULL deref in ip_vs_add_service error path Daniel Golle <daniel(a)makrotopia.org> selftests: net: bridge_vlan_mcast: wait for h1 before querier check Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_mapping() Kotlyarov Mihail <mihailkotlyarow(a)gmail.com> xfrm: fix refcount leak in xfrm_migrate_policy_find Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Wait for RCU readers during policy netns exit Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: validate MTU against usable frame size on bind Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: fix XDP_UMEM_SG_FLAG issues Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: respect tailroom for ZC setups Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: tighten UMEM headroom validation to account for tailroom and min frame Agalakov Daniil <ade(a)amicon.ru> e1000: check return value of e1000_read_eeprom Michal Schmidt <mschmidt(a)redhat.com> ixgbevf: add missing negotiate_features op to Hyper-V ops table Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing/probe: reject non-closed empty immediate strings Jon Hunter <jonathanh(a)nvidia.com> dt-bindings: net: Fix Tegra234 MGBE PTP clock Jon Hunter <jonathanh(a)nvidia.com> net: stmmac: Fix PTP ref clock for Tegra234 Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: s3fwrn5: allocate rx skb before consuming bytes Chris J Arges <carges(a)cloudflare.com> net: increase IP_TUNNEL_RECURSION_LIMIT to 5 Yiqi Sun <sunyiqixm(a)gmail.com> ipv4: icmp: fix null-ptr-deref in icmp_build_probe() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump Eric Dumazet <edumazet(a)google.com> net: lapbether: handle NETDEV_PRE_TYPE_CHANGE Ruide Cao <caoruide123(a)gmail.com> net: sched: act_csum: validate nested VLAN headers Nicholas Carlini <nicholas(a)carlini.com> eventpoll: defer struct eventpoll free to RCU grace period Maíra Canal <mcanal(a)igalia.com> drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix a memory leak in hang state error path Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix memory leak of BO array in hang state Maíra Canal <mcanal(a)igalia.com> drm/vc4: Release runtime PM reference after binding V3D Keenan Dong <keenanat2000(a)gmail.com> xfrm: account XFRMA_IF_ID in aevent size calculation Maximilian Pezzullo <maximilianpezzullo(a)gmail.com> HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP Long Li <longli(a)microsoft.com> PCI: hv: Set default NUMA node to 0 for devices without affinity info Serhii Pievniev <spevnev16(a)gmail.com> tools/power/turbostat: Fix microcode patch level output for AMD/Hygon Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx93-tqma9352: improve eMMC pad configuration Luke Wang <ziniu.wang_1(a)nxp.com> arm64: dts: imx93-9x9-qsb: change usdhc tuning step for eMMC and SD Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency Daniel J Blueman <daniel(a)quora.org> arm64: dts: qcom: hamoa/x1: fix idle exit latency Potin Lai <potin.lai.pt(a)gmail.com> soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching Tomasz Merta <tomasz.merta(a)arrow.com> ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J John Pavlick <jspavlick(a)posteo.net> net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: brcmfmac: validate bsscfg indices in IF events Arthur Husband <artmoty(a)gmail.com> ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 Benoît Sevens <bsevens(a)google.com> HID: roccat: fix use-after-free in roccat_report_event songxiebing <songxiebing(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 leo vriska <leo(a)60228.dev> HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) Alexander Savenko <alex.sav4387(a)gmail.com> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 Gilson Marquato Júnior <gilsonmandalogo(a)hotmail.com> ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx Fredric Cover <FredTheDude(a)proton.me> fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath Phil Willoughby <willerz(a)gmail.com> ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: wl1251: validate packet IDs before indexing tx_frames Dustin L. Howett <dustin(a)howett.net> ALSA: hda/realtek: add quirk for Framework F111:000F Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry Joel Fernandes <joelagnelf(a)nvidia.com> srcu: Use irq_work to start GP in tiny SRCU Donet Tom <donettom(a)linux.ibm.com> drm/amdgpu: Handle GPU page faults correctly on non-4K page systems César Montoya <sprit152009(a)gmail.com> ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() Matthew Schwartz <matthew.schwartz(a)linux.dev> platform/x86: asus-nb-wmi: add DMI quirk for ASUS ROG Flow Z13-KJP GZ302EAC Wenyuan Li <2063309626(a)qq.com> can: mcp251x: add error handling for power enable in open and resume Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: reject invalid vendor array size in token parser Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: hci_sync: annotate data-races around hdev->req_status Arnd Bergmann <arnd(a)arndb.de> ALSA: asihpi: avoid write overflow check warning Arnd Bergmann <arnd(a)arndb.de> media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() Matthew Schwartz <matthew.schwartz(a)linux.dev> ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC Andrii Kovalchuk <coderpy4(a)proton.me> ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk Vee Satayamas <vsatayamas(a)gmail.com> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix double free related to rereg_user_mr ------------- Diffstat: Documentation/admin-guide/mm/damon/reclaim.rst | 4 + .../bindings/net/nvidia,tegra234-mgbe.yaml | 4 +- Makefile | 4 +- arch/arm64/boot/dts/freescale/imx8mq.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx93-9x9-qsb.dts | 2 + arch/arm64/boot/dts/freescale/imx93-tqma9352.dtsi | 26 +-- arch/arm64/boot/dts/qcom/x1e80100.dtsi | 2 +- arch/arm64/include/asm/uaccess.h | 2 +- arch/arm64/kvm/guest.c | 4 +- arch/loongarch/kvm/vcpu.c | 2 +- arch/loongarch/kvm/vm.c | 2 +- arch/mips/kvm/mips.c | 4 +- arch/powerpc/include/asm/uaccess.h | 3 +- arch/powerpc/kvm/book3s.c | 4 +- arch/powerpc/kvm/booke.c | 4 +- arch/powerpc/lib/pmem.c | 11 +- arch/riscv/kvm/vcpu.c | 2 +- arch/riscv/kvm/vm.c | 2 +- arch/s390/kvm/kvm-s390.c | 4 +- arch/x86/events/intel/uncore_discovery.c | 2 +- arch/x86/include/asm/uaccess.h | 2 +- arch/x86/include/asm/uaccess_32.h | 8 +- arch/x86/include/asm/uaccess_64.h | 16 +- arch/x86/include/uapi/asm/kvm.h | 12 +- arch/x86/kvm/svm/sev.c | 24 ++- arch/x86/kvm/x86.c | 18 +- arch/x86/lib/copy_user_uncached_64.S | 6 +- arch/x86/lib/usercopy_32.c | 9 +- arch/x86/lib/usercopy_64.c | 12 +- crypto/af_alg.c | 2 + crypto/algif_aead.c | 2 +- crypto/algif_skcipher.c | 5 + drivers/ata/ahci.c | 14 ++ drivers/gpio/gpio-tegra.c | 2 +- drivers/gpio/gpiolib.c | 43 ++--- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +- drivers/gpu/drm/i915/i915_gem.c | 2 +- drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +- drivers/gpu/drm/vc4/vc4_bo.c | 3 + drivers/gpu/drm/vc4/vc4_gem.c | 19 +- drivers/gpu/drm/vc4/vc4_hdmi.c | 14 +- drivers/gpu/drm/vc4/vc4_v3d.c | 1 + drivers/gpu/drm/xe/xe_mmio.c | 135 ++++++------- drivers/gpu/drm/xe/xe_mmio.h | 72 ++----- drivers/gpu/drm/xe/xe_trace.h | 7 +- drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 3 +- drivers/hid/hid-alps.c | 3 + drivers/hid/hid-core.c | 3 + drivers/hid/hid-ids.h | 3 + drivers/hid/hid-quirks.c | 1 + drivers/hid/hid-roccat.c | 2 + drivers/hwmon/powerz.c | 8 +- drivers/i2c/busses/i2c-s3c2410.c | 7 +- drivers/infiniband/hw/irdma/verbs.c | 1 + drivers/infiniband/sw/rdmavt/qp.c | 8 +- drivers/md/bcache/super.c | 7 + .../mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c | 9 + drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_channel.c | 4 + drivers/media/test-drivers/vidtv/vidtv_mux.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_ts.c | 48 ++--- drivers/media/test-drivers/vidtv/vidtv_ts.h | 4 +- drivers/media/usb/as102/as102_usb_drv.c | 2 + drivers/media/usb/em28xx/em28xx-video.c | 14 +- drivers/media/usb/hackrf/hackrf.c | 7 +- drivers/net/can/spi/mcp251x.c | 29 ++- drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 8 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.c | 15 +- drivers/net/ethernet/intel/ixgbevf/vf.c | 7 + drivers/net/ethernet/stmicro/stmmac/dwmac-tegra.c | 19 +- drivers/net/ethernet/wangxun/txgbe/txgbe_type.h | 8 +- drivers/net/ipa/reg/gsi_reg-v5.0.c | 9 +- drivers/net/phy/sfp.c | 16 ++ drivers/net/usb/cdc-phonet.c | 7 +- drivers/net/wan/lapbether.c | 13 +- .../wireless/broadcom/brcm80211/brcmfmac/fweh.c | 5 + drivers/net/wireless/realtek/rtw88/usb.c | 3 +- drivers/net/wireless/ti/wl1251/tx.c | 8 +- drivers/nfc/s3fwrn5/uart.c | 10 +- drivers/ntb/ntb_transport.c | 7 +- drivers/pci/bus.c | 6 +- drivers/pci/controller/pci-hyperv.c | 8 + drivers/pci/endpoint/functions/pci-epf-vntb.c | 1 + drivers/pci/pci-driver.c | 8 - drivers/pci/pci.c | 10 +- drivers/pci/pci.h | 1 - drivers/pinctrl/intel/pinctrl-intel.c | 2 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 9 + drivers/platform/x86/asus-nb-wmi.c | 2 +- drivers/soc/aspeed/aspeed-socinfo.c | 2 +- drivers/soc/qcom/pdr_internal.h | 2 +- drivers/soc/qcom/qcom_pdr_msg.c | 2 +- drivers/staging/media/rkvdec/rkvdec-vp9.c | 3 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/staging/sm750fb/sm750.c | 3 + drivers/thermal/thermal_core.c | 36 +++- drivers/thermal/thermal_core.h | 1 + drivers/usb/class/cdc-acm.c | 53 ++++- drivers/usb/core/port.c | 1 + drivers/usb/gadget/function/f_hid.c | 15 +- drivers/usb/gadget/function/f_ncm.c | 4 +- drivers/usb/gadget/function/f_phonet.c | 9 + drivers/usb/gadget/udc/renesas_usb3.c | 7 +- drivers/usb/serial/option.c | 2 + drivers/usb/storage/unusual_devs.h | 7 +- drivers/usb/usbip/usbip_common.c | 12 ++ drivers/video/fbdev/tdfxfb.c | 3 + drivers/video/fbdev/udlfb.c | 3 + fs/dcache.c | 4 +- fs/eventpoll.c | 6 +- fs/nilfs2/dat.c | 3 + fs/ocfs2/aops.c | 3 +- fs/ocfs2/inode.c | 31 +++ fs/ocfs2/mmap.c | 7 +- fs/ocfs2/ocfs2_trace.h | 10 +- fs/ocfs2/resize.c | 10 +- fs/smb/client/fs_context.c | 4 + fs/smb/client/smb2inode.c | 2 +- fs/smb/server/connection.c | 1 + fs/smb/server/smb2pdu.c | 7 +- fs/smb/server/smbacl.c | 3 +- include/linux/clockchips.h | 2 + include/linux/kvm_host.h | 93 +++++---- include/linux/soc/qcom/pdr.h | 1 + include/linux/srcutiny.h | 4 + include/linux/uaccess.h | 11 +- include/net/ip_tunnels.h | 2 +- include/net/netfilter/nf_queue.h | 1 - include/net/pkt_cls.h | 2 + include/net/xdp_sock.h | 2 +- include/net/xdp_sock_drv.h | 23 ++- include/trace/events/btrfs.h | 11 +- include/uapi/linux/kvm.h | 19 +- kernel/events/uprobes.c | 4 + kernel/fork.c | 17 +- kernel/rcu/srcutiny.c | 19 +- kernel/sched/deadline.c | 2 +- kernel/time/clockevents.c | 27 ++- kernel/time/hrtimer.c | 1 + kernel/time/tick-broadcast.c | 8 +- kernel/time/tick-common.c | 1 + kernel/time/tick-sched.c | 1 + kernel/trace/trace_probe.c | 2 +- lib/iov_iter.c | 4 +- mm/backing-dev.c | 5 +- mm/kasan/init.c | 8 +- net/bluetooth/hci_conn.c | 2 +- net/bluetooth/hci_core.c | 2 +- net/bluetooth/hci_sync.c | 20 +- net/can/raw.c | 11 +- net/ipv4/icmp.c | 7 + net/ipv4/nexthop.c | 41 ++-- net/ipv6/exthdrs.c | 4 + net/ipv6/netfilter/ip6t_eui64.c | 3 +- net/ipv6/seg6_hmac.c | 2 + net/l2tp/l2tp_core.c | 5 + net/netfilter/ipvs/ip_vs_ctl.c | 1 - net/netfilter/nf_conntrack_netlink.c | 2 +- net/netfilter/nf_conntrack_proto_sctp.c | 3 +- net/netfilter/nfnetlink_log.c | 8 +- net/netfilter/nfnetlink_queue.c | 214 ++++++++------------- net/netfilter/nft_set_pipapo_avx2.c | 20 +- net/netfilter/xt_multiport.c | 34 +++- net/nfc/digital_technology.c | 6 + net/nfc/llcp_core.c | 2 + net/rxrpc/key.c | 5 +- net/sched/act_csum.c | 6 +- net/sched/em_cmp.c | 5 +- net/sched/em_nbyte.c | 2 + net/sched/em_text.c | 11 +- net/unix/diag.c | 21 +- net/xdp/xdp_umem.c | 3 +- net/xdp/xsk.c | 4 +- net/xdp/xsk_buff_pool.c | 32 ++- net/xfrm/xfrm_policy.c | 5 +- net/xfrm/xfrm_user.c | 11 +- scripts/checkpatch.pl | 10 + scripts/generate_rust_analyzer.py | 3 +- sound/firewire/fireworks/fireworks_command.c | 5 +- sound/pci/asihpi/hpimsgx.c | 6 +- sound/pci/ctxfi/ctvmem.h | 2 +- sound/pci/hda/patch_realtek.c | 10 + sound/soc/amd/yc/acp6x-mach.c | 21 ++ sound/soc/qcom/qdsp6/q6apm.c | 14 +- sound/soc/soc-core.c | 1 + sound/soc/sof/topology.c | 2 +- sound/soc/stm/stm32_sai_sub.c | 3 + sound/usb/6fire/chip.c | 17 +- sound/usb/format.c | 86 +++++++-- sound/usb/quirks.c | 2 + tools/objtool/check.c | 2 +- tools/power/x86/turbostat/turbostat.c | 9 +- .../selftests/net/forwarding/bridge_vlan_mcast.sh | 1 + virt/kvm/binary_stats.c | 2 +- virt/kvm/kvm_main.c | 20 +- 195 files changed, 1379 insertions(+), 736 deletions(-)

3 weeks, 5 days

13
12
0 0

プログラミング教育で、新規事業

by 石嶋紗季

　新しい事業をお考えの方向けに、　日本の将来を担う、こども教育にたずさわる　事業パートナー募集のオンライン説明会を　ご視聴頂きたく、ご連絡いたしました。　　本事業は9割以上、異業種から新規参入されており　「未経験」「社員1名」でスタート可能です。　　本業はそのままに、収益づくりをお考えの方はぜひご視聴ください。 ----------------------------------------------------------- 　　　不況に強く、少子化でも成長する　　　プログラミング教育×個別指導　― 地域に"初"のハイブリッド型学習塾を ― 　　日時：4月23日（木）14：00〜15：00　※残り2枠　形式：オンライン開催　提供：エイチ・エム・グループ　　　　　　＜ご視聴はこちら＞　　　　https://wam-edu-fc.jp/wam2/ ----------------------------------------------------------- 　　　『少子化なのに、教育事業？』と、思うかもしれませんが　　実は、教育無償化などの国策もあり、子ども一人にかける　教育費の増加に伴い、市場は成長し続けています。　　また、教育費は不況時でも削減されにくいため　コロナ下でも大きく落ち込むことなく底堅さを見せました。　　そんな教育業界の中でも、プログラミング（IT教育）は　小学校で必修化されたため、保護者の関心が非常に高まっています。　　　そこで今回ご紹介するのが、全国300校舎、継続率97.6％を誇る　ハイブリッド教育事業「個別指導WAM」です。　　サイバーエージェント社開発の教材を活用した　「プログラミング×個別指導」という　他塾にはない独自の教育事業を提供しています。　いったい、教育市場にどのようなビジネスチャンスがあるのか？　オンラインセミナーで分かりやすく丁寧に　お伝えしますので、ぜひご視聴ください。　　　　　　　＜ご視聴はこちら＞　　　　https://wam-edu-fc.jp/wam2/ 　　 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 　教育事業FCセミナー事務局　電話：0120-889-859 　住所：東京都中央区銀座7-13-6 ――――――――――――――――――――――――――――――― 　本メールのご不要な方には大変ご迷惑をおかけいたしました。　今後ご案内が不要な方は下記URLよりお手続きをお願いいたします。　┗　https://wam-edu-fc.jp/mail/ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

3 weeks, 6 days

1
0
0 0

[PATCH 6.1 00/55] 6.1.169-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.169 release. There are 55 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 15 Apr 2026 15:57:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.169-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.169-rc1 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" David Howells <dhowells(a)redhat.com> rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) Luxiao Xu <rakukuip(a)gmail.com> rxrpc: fix reference count leak in rxrpc_server_keyring() Tyllis Xu <livelycarpet87(a)gmail.com> net: stmmac: fix integer underflow in chain mode Pengpeng Hou <pengpeng(a)iscas.ac.cn> net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure Johan Hovold <johan(a)kernel.org> mmc: vub300: fix NULL-deref on disconnect Michael Guralnik <michaelgur(a)nvidia.com> net/mlx5: Update the list of the PCI supported devices Sebastian Brzezinka <sebastian.brzezinka(a)intel.com> drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat Haoze Xie <royenheart(a)gmail.com> batman-adv: hold claim backbone gateways by reference David Carlier <devnexen(a)gmail.com> net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() Muhammad Alifa Ramdhan <ramdhan(a)starlabs.sg> net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption Borislav Petkov (AMD) <bp(a)alien8.de> EDAC/mc: Fix error path ordering in edac_mc_alloc() Ruide Cao <caoruide123(a)gmail.com> batman-adv: reject oversized global TT response buffers Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: pn533: allocate rx skb before consuming bytes Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity Thomas Fourier <fourier.thomas(a)gmail.com> wifi: brcmsmac: Fix dma_free_coherent() size Oleh Konko <security(a)1seal.org> tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> xfrm: clear trailing padding in build_polexpire() Tuan Do <tuan(a)calif.io> netfilter: nft_ct: fix use-after-free in timeout object destroy Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR Lin.Cao <lincao12(a)amd.com> drm/scheduler: signal scheduled fence when kill job Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Revert "mptcp: add needs_id for netlink appending addr" Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: separate dst_cache for input and output paths in seg6 lwtunnel Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: rfkill: prevent unlimited numbers of rfkill events from being created Johannes Berg <johannes.berg(a)intel.com> net: rfkill: reduce data->mtx scope in rfkill_fop_open Johannes Berg <johannes.berg(a)intel.com> rfkill: sync before userspace visibility/changes Bo Liu <liubo03(a)inspur.com> rfkill: Use sysfs_emit() to instead of sprintf() Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: move list and spinlock inits from bind to alloc Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: EC: Evaluate _REG outside the EC scope more carefully Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPICA: Add a depth argument to acpi_execute_reg_methods() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Revert "ACPI: EC: Evaluate orphan _REG under EC device" Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop John Johansen <john.johansen(a)canonical.com> apparmor: fix race between freeing data and fs accessing it John Johansen <john.johansen(a)canonical.com> apparmor: fix race on rawdata dereference John Johansen <john.johansen(a)canonical.com> apparmor: fix differential encoding verification John Johansen <john.johansen(a)canonical.com> apparmor: fix unprivileged local user can do privileged policy management John Johansen <john.johansen(a)canonical.com> apparmor: Fix double free of ns_name in aa_replace_profiles() Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix missing bounds check on DEFAULT table in verify_dfa() Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix side-effect bug in match_char() macro usage John Johansen <john.johansen(a)canonical.com> apparmor: fix: limit the number of levels of policy namespaces Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: replace recursive profile removal with iterative approach Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix memory leak in verify_header Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: validate DFA start states are in bounds in unpack_pdb Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Use heuristic to find stream entity Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: mm: Rewrite TLB uniquification for the hidden bit feature Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: mm: Suppress TLB uniquification on EHINV hardware Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Always record SEGBITS in cpu_data.vmbits Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: uinput - take event lock when submitting FF request "event" Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Input: uinput - fix circular locking dependency with ff-core Jiayuan Chen <jiayuan.chen(a)linux.dev> mptcp: fix slab-use-after-free in __inet_lookup_established Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_report() Johan Hovold <johan(a)kernel.org> wifi: rt2x00usb: fix devres lifetime Eric Biggers <ebiggers(a)kernel.org> lib/crypto: chacha: Zeroize permuted_state before it leaves scope ------------- Diffstat: Makefile | 4 +- .../boot/dts/hisilicon/hi3798cv200-poplar.dts | 2 +- arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi | 1 + arch/mips/include/asm/cpu-features.h | 1 - arch/mips/include/asm/cpu-info.h | 2 - arch/mips/include/asm/mipsregs.h | 2 + arch/mips/kernel/cpu-probe.c | 13 +- arch/mips/kernel/cpu-r3k-probe.c | 2 + arch/mips/mm/tlb-r4k.c | 285 +++++++++++++++++---- drivers/acpi/acpica/acevents.h | 6 +- drivers/acpi/acpica/evregion.c | 12 +- drivers/acpi/acpica/evxfregn.c | 64 +---- drivers/acpi/ec.c | 14 +- drivers/acpi/internal.h | 1 + drivers/acpi/scan.c | 2 + drivers/edac/edac_mc.c | 6 +- drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c | 26 +- drivers/gpu/drm/scheduler/sched_entity.c | 1 + drivers/input/misc/uinput.c | 35 ++- drivers/media/usb/uvc/uvc_driver.c | 88 +++++-- drivers/media/usb/uvc/uvcvideo.h | 2 + drivers/mmc/host/vub300.c | 2 +- drivers/net/ethernet/altera/altera_tse_main.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/main.c | 1 + drivers/net/ethernet/qualcomm/qca_uart.c | 2 +- drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 11 +- .../net/wireless/broadcom/brcm80211/brcmsmac/dma.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00usb.c | 2 +- drivers/nfc/pn533/uart.c | 11 +- drivers/pci/pci-driver.c | 8 - drivers/pci/pci.c | 10 +- drivers/pci/pci.h | 1 - drivers/usb/gadget/function/f_hid.c | 11 +- drivers/usb/gadget/function/u_ether.c | 8 +- include/acpi/acpixf.h | 5 +- include/net/netfilter/nf_conntrack_timeout.h | 1 + lib/crypto/chacha.c | 4 + net/batman-adv/bridge_loop_avoidance.c | 27 +- net/batman-adv/translation-table.c | 9 +- net/ipv6/seg6_iptunnel.c | 41 ++- net/mptcp/pm_netlink.c | 24 +- net/mptcp/protocol.c | 2 + net/mptcp/protocol.h | 1 + net/mptcp/subflow.c | 15 +- net/netfilter/nft_ct.c | 2 +- net/netfilter/nft_set_pipapo.c | 20 +- net/rfkill/core.c | 84 ++++-- net/rxrpc/af_rxrpc.c | 6 - net/rxrpc/key.c | 2 +- net/rxrpc/server_key.c | 3 + net/tipc/group.c | 6 +- net/tls/tls_sw.c | 10 + net/xfrm/xfrm_user.c | 3 + security/apparmor/apparmorfs.c | 228 ++++++++++------- security/apparmor/include/label.h | 16 +- security/apparmor/include/lib.h | 12 + security/apparmor/include/match.h | 1 + security/apparmor/include/policy.h | 13 +- security/apparmor/include/policy_ns.h | 2 + security/apparmor/include/policy_unpack.h | 83 +++--- security/apparmor/label.c | 12 +- security/apparmor/match.c | 58 +++-- security/apparmor/policy.c | 82 +++++- security/apparmor/policy_ns.c | 2 + security/apparmor/policy_unpack.c | 74 ++++-- 65 files changed, 989 insertions(+), 498 deletions(-)

4 weeks

14
14
0 0

[PATCH 6.12 00/70] 6.12.82-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.82 release. There are 70 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 15 Apr 2026 15:57:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.82-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.82-rc1 Aaron Erhardt <aer(a)tuxedocomputers.com> ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 Jiayuan Chen <jiayuan.chen(a)linux.dev> net: skb: fix cross-cache free of KFENCE-allocated skb head David Howells <dhowells(a)redhat.com> rxrpc: Fix missing error checks for rxkad encryption/decryption failure David Howells <dhowells(a)redhat.com> rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) Luxiao Xu <rakukuip(a)gmail.com> rxrpc: fix reference count leak in rxrpc_server_keyring() Yuqi Xu <xuyuqiabc(a)gmail.com> rxrpc: reject undecryptable rxkad response tickets Douya Le <ldy3087146292(a)gmail.com> rxrpc: Only put the call ref if one was acquired Anderson Nascimento <anderson(a)allelesecurity.com> rxrpc: Fix key reference count leak from call->key David Howells <dhowells(a)redhat.com> rxrpc: Fix call removal to use RCU safe deletion David Howells <dhowells(a)redhat.com> rxrpc: Fix anonymous key handling David Carlier <devnexen(a)gmail.com> net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() David Carlier <devnexen(a)gmail.com> net: lan966x: fix page pool leak in error paths David Carlier <devnexen(a)gmail.com> net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: set the payload size before calling the async handler Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: improve locking around idpf_vc_xn_push_free() Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() Tyllis Xu <livelycarpet87(a)gmail.com> net: stmmac: fix integer underflow in chain mode Pengpeng Hou <pengpeng(a)iscas.ac.cn> net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure Johan Hovold <johan(a)kernel.org> mmc: vub300: fix NULL-deref on disconnect Jacky Bai <ping.bai(a)nxp.com> pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled Michael Guralnik <michaelgur(a)nvidia.com> net/mlx5: Update the list of the PCI supported devices Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Do not use pipe_src as borders for SU area Sebastian Brzezinka <sebastian.brzezinka(a)intel.com> drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat Haoze Xie <royenheart(a)gmail.com> batman-adv: hold claim backbone gateways by reference David Carlier <devnexen(a)gmail.com> net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() Muhammad Alifa Ramdhan <ramdhan(a)starlabs.sg> net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption Borislav Petkov (AMD) <bp(a)alien8.de> EDAC/mc: Fix error path ordering in edac_mc_alloc() Lukas Wunner <lukas(a)wunner.de> X.509: Fix out-of-bounds access when parsing extensions Ruide Cao <caoruide123(a)gmail.com> batman-adv: reject oversized global TT response buffers Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: pn533: allocate rx skb before consuming bytes Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86/intel-uncore-freq: Handle autonomous UFS status bit Thomas Fourier <fourier.thomas(a)gmail.com> wifi: brcmsmac: Fix dma_free_coherent() size Oleh Konko <security(a)1seal.org> tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> xfrm: clear trailing padding in build_polexpire() Matthew Brost <matthew.brost(a)intel.com> workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works Tuan Do <tuan(a)calif.io> netfilter: nft_ct: fix use-after-free in timeout object destroy Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Handle percpu handler address for ORC unwinder Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Remove unnecessary checks for ORC unwinder Li Xiasong <lixiasong1(a)huawei.com> mptcp: fix soft lockup in mptcp_recvmsg() Eric Dumazet <edumazet(a)google.com> net: annotate data-races around sk->sk_{data_ready,write_space} Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Revert "mptcp: add needs_id for netlink appending addr" Andrea Righi <arighi(a)nvidia.com> sched_ext: Fix stale direct dispatch state in ddsp_dsq_id Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe Geert Uytterhoeven <geert+renesas(a)glider.be> arm64: dts: renesas: white-hawk-cpu-common: Add pin control for DSI-eDP IRQ Jakub Kicinski <kuba(a)kernel.org> nfc: nci: complete pending data exchange on device close Chaitanya Kulkarni <kch(a)nvidia.com> blktrace: fix __this_cpu_read/write in preemptible context robbieko <robbieko(a)synology.com> btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() Filipe Manana <fdmanana(a)suse.com> btrfs: remove pointless out labels from extent-tree.c Daniel Vacek <neelx(a)suse.com> btrfs: remove unused flag EXTENT_BUFFER_CORRUPT Daniel Vacek <neelx(a)suse.com> btrfs: remove unused flag EXTENT_BUFFER_READAHEAD David Sterba <dsterba(a)suse.com> btrfs: split waiting from read_extent_buffer_pages(), drop parameter wait David Sterba <dsterba(a)suse.com> btrfs: remove unused define WAIT_PAGE_LOCK for extent io David Sterba <dsterba(a)suse.com> btrfs: make wait_on_extent_buffer_writeback() static inline Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: mm: Rewrite TLB uniquification for the hidden bit feature Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: mm: Suppress TLB uniquification on EHINV hardware Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Always record SEGBITS in cpu_data.vmbits Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: uinput - take event lock when submitting FF request "event" Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Input: uinput - fix circular locking dependency with ff-core Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: separate dst_cache for input and output paths in seg6 lwtunnel Jiayuan Chen <jiayuan.chen(a)linux.dev> mptcp: fix slab-use-after-free in __inet_lookup_established Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: rfkill: prevent unlimited numbers of rfkill events from being created Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_report() Johan Hovold <johan(a)kernel.org> wifi: rt2x00usb: fix devres lifetime Nathan Rebello <nathan.c.rebello(a)gmail.com> usb: typec: ucsi: skip connector validation before init Eric Biggers <ebiggers(a)kernel.org> lib/crypto: chacha: Zeroize permuted_state before it leaves scope ------------- Diffstat: Makefile | 4 +- .../arm64/boot/dts/freescale/imx8mq-librem5-r3.dts | 2 +- arch/arm64/boot/dts/freescale/imx8mq-librem5.dtsi | 24 +- .../boot/dts/hisilicon/hi3798cv200-poplar.dts | 2 +- arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi | 1 + .../boot/dts/renesas/white-hawk-cpu-common.dtsi | 8 + arch/loongarch/include/asm/setup.h | 3 + arch/loongarch/kernel/unwind_orc.c | 28 +- arch/mips/include/asm/cpu-features.h | 1 - arch/mips/include/asm/cpu-info.h | 2 - arch/mips/include/asm/mipsregs.h | 2 + arch/mips/kernel/cpu-probe.c | 13 +- arch/mips/kernel/cpu-r3k-probe.c | 2 + arch/mips/mm/tlb-r4k.c | 285 +++++++++++++++++---- crypto/asymmetric_keys/x509_cert_parser.c | 8 +- drivers/edac/edac_mc.c | 6 +- drivers/gpu/drm/i915/display/intel_psr.c | 30 ++- drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c | 26 +- drivers/input/misc/uinput.c | 35 ++- drivers/misc/fastrpc.c | 4 +- drivers/mmc/host/vub300.c | 2 +- drivers/net/ethernet/altera/altera_tse_main.c | 1 + drivers/net/ethernet/intel/idpf/idpf_virtchnl.c | 6 + drivers/net/ethernet/mellanox/mlx5/core/main.c | 1 + .../net/ethernet/microchip/lan966x/lan966x_fdma.c | 28 +- drivers/net/ethernet/qualcomm/qca_uart.c | 2 +- drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 11 +- .../net/wireless/broadcom/brcm80211/brcmsmac/dma.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00usb.c | 2 +- drivers/nfc/pn533/uart.c | 11 +- .../intel/uncore-frequency/uncore-frequency-tpmi.c | 8 +- drivers/pmdomain/imx/imx8mp-blk-ctrl.c | 8 +- drivers/usb/typec/ucsi/ucsi.c | 3 +- fs/btrfs/disk-io.c | 13 +- fs/btrfs/extent-tree.c | 30 +-- fs/btrfs/extent_io.c | 33 +-- fs/btrfs/extent_io.h | 18 +- include/net/netfilter/nf_conntrack_timeout.h | 1 + include/trace/events/rxrpc.h | 2 +- kernel/sched/ext.c | 48 +++- kernel/trace/blktrace.c | 4 +- kernel/workqueue.c | 14 +- lib/crypto/chacha.c | 4 + mm/filemap.c | 11 +- net/batman-adv/bridge_loop_avoidance.c | 27 +- net/batman-adv/translation-table.c | 9 +- net/core/skbuff.c | 5 +- net/core/skmsg.c | 14 +- net/ipv4/tcp.c | 4 +- net/ipv4/tcp_bpf.c | 2 +- net/ipv4/tcp_input.c | 14 +- net/ipv4/tcp_minisocks.c | 2 +- net/ipv4/udp.c | 3 +- net/ipv4/udp_bpf.c | 2 +- net/ipv6/seg6_iptunnel.c | 34 ++- net/mptcp/pm_netlink.c | 24 +- net/mptcp/protocol.c | 13 +- net/mptcp/protocol.h | 1 + net/mptcp/subflow.c | 15 +- net/netfilter/nft_ct.c | 2 +- net/nfc/nci/core.c | 9 + net/rfkill/core.c | 35 ++- net/rxrpc/af_rxrpc.c | 6 - net/rxrpc/call_object.c | 25 +- net/rxrpc/io_thread.c | 3 +- net/rxrpc/key.c | 2 +- net/rxrpc/rxkad.c | 63 +++-- net/rxrpc/sendmsg.c | 2 +- net/rxrpc/server_key.c | 3 + net/tipc/group.c | 6 +- net/tls/tls_sw.c | 10 + net/unix/af_unix.c | 8 +- net/xfrm/xfrm_user.c | 3 + sound/pci/hda/patch_hdmi.c | 1 + sound/soc/generic/simple-card-utils.c | 7 +- 75 files changed, 742 insertions(+), 361 deletions(-)

1 month

16
17
0 0

ペットを愛する、経営者様へ

by 日本ペットホテル協会

　　ペットを愛する、経営者様へ　　　地域で愛犬を安心して預けられる　ペットホテル・トリミング事業を始めませんか？　　　■　フランチャイズシステム説明会　■ 　　　　愛犬家のオーナー多数！　　　ペットホテル・トリミングサロン　　　“ONE LUKE（ワンルーク）” 　　　　※「開業パック」をご用意しているので　　　　経験や資格が無くても始められます。　　　■　開催方式　　　オンライン（申込後に参加方法をご案内）　　■　日程　　　4月21日（火）13:00〜14:00　残り1枠　　　4月23日（木）13:00〜14:00　残り1枠　　　4月27日（月）13:00〜14:00 　　　4月30日（木）11:00〜12:00 　■　定員　　　5名　　■　参加申込はこちら　　　https://oneluke-fc-seminar.jp/lp/ 　　　お世話になります。　　この度は、ペットホテル・トリミングサロンの　フラチャイズ事業説明会の開催をご案内いたします。　　ペットホテルとトリミングサービスを提供する　　ONE LUKE（ワンルーク）　　は、ワンちゃんが好きすぎる創業者が実際に　ペットホテルに預けたときに感じた不安や　思ったことを施設づくりに活かしています。　　　例えばワンちゃんが泊まるときに、少しでも　広く、心地よく過ごして欲しいという思いから、　鉄のゲージではなくオーダーで職人さんに　「お部屋」をつくっていただいています。　　　そうした愛犬家目線のきめ細かいサービスが支持され、　ワンルークを利用した方は高い確率でリピートしてくれます。　　　日本ではいまや「8世帯に1世帯」がペットを飼うまでに　増えてきましたが、ペットホテルはまだまだ店舗数が　足りていないため、今後も成長が期待できます。　　　ここまでこの文章を読まれたということは、　あなたもワンちゃんが大好きなのではないでしょうか。　　ワンルークのFCオーナー様も愛犬家が多く、中には　ご自身が利用者だった、という方もいらっしゃいます。　　　説明会にて詳しいビジネスモデルをお伝えしますので、　新規事業を探している愛犬家の経営者様は　この機会にぜひご参加ください。　　　地域のペットライフを豊かにし、愛犬が安心して　過ごせる空間を一緒につくっていきましょう。　　　■　フランチャイズシステム説明会　■ 　　　　愛犬家のオーナー多数！　　　ペットホテル・トリミングサロン　　　“ONE LUKE（ワンルーク）” 　　■　参加申込はこちら　　　https://oneluke-fc-seminar.jp/lp/ 　 *********************************************************************** 本メールのご不要な方には大変ご迷惑をおかけいたしました。お手数お掛けしますが、メール不要のお手続きは下記URLよりお願いいたします。 <メール停止フォーム> 　https://oneluke-fc-seminar.jp/mail/ *********************************************************************** 日本ペットホテル協会株式会社愛知県名古屋市千種区内山3丁目9-23 3F TEL:052-784-8416 ***********************************************************************

1 month

1
0
0 0

[PATCH 5.15 000/570] 5.15.203-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.203 release. There are 570 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 15 Apr 2026 15:57:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.203-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.203-rc1 Jens Axboe <axboe(a)kernel.dk> io_uring/poll: correctly handle io_poll_add() return value on update Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" Sean Heelan <seanheelan(a)gmail.com> ksmbd: Fix dangling pointer in krb_authenticate Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: Fix refcount leak when invalid session is found on session lookup Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Johan Hovold <johan(a)kernel.org> i2c: cp2615: fix serial string NULL-deref at probe Justin Stitt <justinstitt(a)google.com> i2c: cp2615: replace deprecated strncpy with strscpy Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix potencial OOB in get_file_all_info() for compound requests Luo Haiyang <luo.haiyang(a)zte.com.cn> tracing: Fix potential deadlock in cpu hotplug with osnoise Nikunj A Dadhania <nikunj(a)amd.com> x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() Jinjiang Tu <tujinjiang(a)huawei.com> mm/huge_memory: fix folio isn't locked in softleaf_to_folio() Josef Bacik <josef(a)toxicpanda.com> scsi: target: tcm_loop: Drain commands in target_reset handler Kevin Hao <haokexin(a)gmail.com> net: macb: Move devm_{free,request}_irq() out of spin lock area Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Protect the driver specific lists Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: save ailp before dropping the AIL lock in push callbacks Jiayuan Chen <jiayuan.chen(a)shopee.com> ext4: fix use-after-free in update_super_work when racing with umount Zqiang <qiang.zhang(a)linux.dev> ext4: fix the might_sleep() warnings in kvfree() Li Chen <me(a)linux.beauty> ext4: publish jinode after initialization Jimmy Hu <hhhuuu(a)google.com> usb: gadget: uvc: fix NULL pointer dereference during unbind race Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: move list and spinlock inits from bind to alloc Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: rfkill: prevent unlimited numbers of rfkill events from being created Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: separate dst_cache for input and output paths in seg6 lwtunnel Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Revert "mptcp: add needs_id for netlink appending addr" GuoHan Zhao <zhaoguohan(a)kylinos.cn> xen/privcmd: unregister xenstore notifier on module exit Florian Westphal <fw(a)strlen.de> netlink: add nla be16/32 types to minlen array David Howells <dhowells(a)redhat.com> rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) Luxiao Xu <rakukuip(a)gmail.com> rxrpc: fix reference count leak in rxrpc_server_keyring() Tyllis Xu <livelycarpet87(a)gmail.com> net: stmmac: fix integer underflow in chain mode Pengpeng Hou <pengpeng(a)iscas.ac.cn> net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure Johan Hovold <johan(a)kernel.org> mmc: vub300: fix NULL-deref on disconnect Sebastian Brzezinka <sebastian.brzezinka(a)intel.com> drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat David Carlier <devnexen(a)gmail.com> net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() Muhammad Alifa Ramdhan <ramdhan(a)starlabs.sg> net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption Ruide Cao <caoruide123(a)gmail.com> batman-adv: reject oversized global TT response buffers Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: pn533: allocate rx skb before consuming bytes Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity Thomas Fourier <fourier.thomas(a)gmail.com> wifi: brcmsmac: Fix dma_free_coherent() size Oleh Konko <security(a)1seal.org> tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG Tuan Do <tuan(a)calif.io> netfilter: nft_ct: fix use-after-free in timeout object destroy John Johansen <john.johansen(a)canonical.com> apparmor: fix race between freeing data and fs accessing it John Johansen <john.johansen(a)canonical.com> apparmor: fix race on rawdata dereference John Johansen <john.johansen(a)canonical.com> apparmor: fix differential encoding verification John Johansen <john.johansen(a)canonical.com> apparmor: fix unprivileged local user can do privileged policy management John Johansen <john.johansen(a)canonical.com> apparmor: Fix double free of ns_name in aa_replace_profiles() Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix missing bounds check on DEFAULT table in verify_dfa() Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix side-effect bug in match_char() macro usage John Johansen <john.johansen(a)canonical.com> apparmor: fix: limit the number of levels of policy namespaces Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: replace recursive profile removal with iterative approach Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix memory leak in verify_header Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: validate DFA start states are in bounds in unpack_pdb Nuno Sa <nuno.sa(a)analog.com> iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer Kent Gibson <warthog618(a)gmail.com> gpiolib: cdev: fix uninitialised kfifo Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Use heuristic to find stream entity Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: uinput - take event lock when submitting FF request "event" Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Input: uinput - fix circular locking dependency with ff-core Jiayuan Chen <jiayuan.chen(a)linux.dev> mptcp: fix slab-use-after-free in __inet_lookup_established Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_report() Johan Hovold <johan(a)kernel.org> wifi: rt2x00usb: fix devres lifetime Eric Biggers <ebiggers(a)kernel.org> lib/crypto: chacha: Zeroize permuted_state before it leaves scope Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: EC: Evaluate orphan _REG under EC device Alexander Popov <alex.popov(a)linux.com> wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Jens Axboe <axboe(a)kernel.dk> io_uring/tctx: work around xa_store() allocation error issue Taegu Ha <hataegu0826(a)gmail.com> usb: gadget: f_uac1_legacy: validate control request size Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Protect RNDIS options with mutex Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix unbalanced refcnt in geth_free Navaneeth K <knavaneeth786(a)gmail.com> staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser Shuhao Fu <sfual(a)cse.ust.hk> smb: client: Fix refcount leak for cifs_sb_tlink Matt Johnston <matt(a)codeconstruct.com.au> net: mctp: Don't access ifa_index when missing Quanmin Yan <yanquanmin1(a)huawei.com> fbcon: Set fb_display[i]->mode to NULL when the mode is released Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak Sebastian Urban <surban(a)surban.net> usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix interrupt synchronization error Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix locking/synchronization error Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> thunderbolt: Fix property read in nhi_wake_supported() Yufan Chen <yufan.chen(a)linux.dev> net: ftgmac100: fix ring allocation unwind on open failure Yang Yang <n05ec(a)lzu.edu.cn> vxlan: validate ND option lengths in vxlan_na_create Yifan Wu <yifanwucs(a)gmail.com> netfilter: ipset: drop logically empty buckets in mtype_del Ian Abbott <abbotti(a)mev.co.uk> comedi: me4000: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: me_daq: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Fix invalid clean-up after failed attach Ian Abbott <abbotti(a)mev.co.uk> comedi: Reinit dev->spinlock between attachments to low-level drivers Deepanshu Kartikey <kartikey406(a)gmail.com> comedi: dt2815: add hardware detection to prevent crash Oliver Neukum <oneukum(a)suse.com> cdc-acm: new quirk for EPSON HMD Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: validate ND option lengths Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Move IRQ request in probe Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind Cengiz Can <cengiz.can(a)canonical.com> nvmet-tcp: fix use-before-check of sg in bounds validation Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix state inconsistency on gadget init failure Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix NULL pointer dereference in ep_queue Juno Choi <juno.choi(a)lge.com> usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() Justin Chen <justin.chen(a)broadcom.com> usb: ehci-brcm: fix sleep during atomic Heitor Alves de Siqueira <halves(a)igalia.com> usb: usbtmc: Flush anchored URBs in usbtmc_release Guangshuo Li <lgs201920130244(a)gmail.com> usb: ulpi: fix double free in ulpi_register_interface() error path Miao Li <limiao(a)kylinos.cn> usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix out-of-sequence free_irq() Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Move iio_device_register() to correct location Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix irq resource leak Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix incorrect free_irq() variable Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only David Lechner <dlechner(a)baylibre.com> iio: light: vcnl4035: fix scan buffer on big-endian Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: dac: ad5770r: fix error return in ad5770r_read_raw() Zoltan Illes <zoliviragh(a)gmail.com> Input: xpad - add support for Razer Wolverine V3 Pro Christoffer Sandberg <cs(a)tuxedo.de> Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Bart Van Assche <bvanassche(a)acm.org> Input: synaptics-rmi4 - fix a locking bug in an error path JP Hein <jp(a)jphein.com> USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Wanquan Zhong <wanquan.zhong(a)fibocom.com> USB: serial: option: add support for Rolling Wireless RW135R-GL Frej Drejhammar <frej(a)stacken.kth.se> USB: serial: io_edgeport: add support for Blackbox IC135A Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: dp501: Fix initialization of SCU2C Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix division by zero in occ_show_power_1() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix the GCC version check for `__multi3' workaround Oleh Konko <security(a)1seal.org> Bluetooth: SMP: force responder MITM requirements before building the pairing response Oleh Konko <security(a)1seal.org> Bluetooth: SMP: derive legacy responder STK authentication from MITM state Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix missing SPDIFI1 index handling Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: fix stack out-of-bounds read in init_card Ernestas Kulik <ernestas.k(a)iconn-networks.com> USB: serial: option: add MeiG Smart SRM825WN Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/ioc32: stop speculation on the drm_compat_ioctl path Paul Walmsley <pjw(a)kernel.org> riscv: kgdb: fix several debug register assignment bugs Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix missing newline in occ_show_extended() Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pxe1610) Check return value of page-select write in probe Qi Tang <tpluszz77(a)gmail.com> bpf: reject direct access to nullable PTR_TO_BUF pointers Eric Dumazet <edumazet(a)google.com> ipv6: avoid overflows in ip6_datagram_send_ctl() Luka Gejak <luka.gejak(a)linux.dev> net: hsr: fix VLAN add unwind on slave errors Xiang Mei <xmei5(a)asu.edu> net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xiang Mei <xmei5(a)asu.edu> net/sched: cls_fw: fix NULL pointer dereference on shared blocks Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix overflow when accumulating packets Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix potential double free of skb Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Avoid "No data available" when FW version queries fail Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: properly unregister fixed rate clocks Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix clk handling on PCI glue driver removal Weiming Shi <bestswngs(a)gmail.com> rds: ib: reject FRMR registration before IB connection is established Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate LTK enc_size on load Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: reject immediate NF_QUEUE verdict Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Qi Tang <tpluszz77(a)gmail.com> netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent Qi Tang <tpluszz77(a)gmail.com> netfilter: nf_conntrack_helper: pass helper to expect cleanup Florian Westphal <fw(a)strlen.de> netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Florian Westphal <fw(a)strlen.de> netfilter: x_tables: ensure names are nul-terminated Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: account for netlink header size Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: strictly check for maximum number of actions Zhengchuan Liang <zcliangcn(a)gmail.com> net: ipv6: flowlabel: defer exclusive option free until RCU teardown Alexei Starovoitov <ast(a)kernel.org> bpf: Fix regsafe() for pointers to packet Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec Pengpeng Hou <pengpeng(a)iscas.ac.cn> NFC: pn533: bound the UART receive buffer Yochai Eisenrich <echelonh(a)gmail.com> net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Paolo Abeni <pabeni(a)redhat.com> ipv6: prevent possible UaF in addrconf_permanent_addr() Xiang Mei <xmei5(a)asu.edu> net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: linearize skb before parsing ND options Eric Dumazet <edumazet(a)google.com> ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Eric Dumazet <edumazet(a)google.com> ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Thomas Bogendoerfer <tbogendoerfer(a)suse.de> tg3: Fix race for querying speed/duplex Yochai Eisenrich <echelonh(a)gmail.com> net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Jiayuan Chen <jiayuan.chen(a)shopee.com> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Norbert Szetei <norbert(a)doyensec.com> crypto: af-alg - fix NULL pointer dereference in scatterwalk Frank Li <Frank.Li(a)nxp.com> dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning ZhengYuan Huang <gality369(a)gmail.com> btrfs: reject root items with drop_progress and zero drop_level Lee Jones <lee(a)kernel.org> HID: multitouch: Check to ensure report responses match the request Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix Clang jump table detection Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: don't take device_list_mutex when querying zone info Deepanshu Kartikey <kartikey406(a)gmail.com> atm: lec: fix use-after-free in sock_def_readable() Benoît Sevens <bsevens(a)google.com> HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Davidlohr Bueso <dave(a)stgolabs.net> futex: Clear stale exiting pointer in futex_lock_pi() retry path Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> dmaengine: xilinx_dma: Program interrupt delay timeout Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix freeing the allocated ida too late Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error when running device stats on multiple devices fs Mark Harmstone <mark(a)harmstone.com> btrfs: fix super block offset in error message in btrfs_validate_super() Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix dma_device directions Felix Gu <ustc.gu(a)gmail.com> phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix not releasing workqueue on .release() Theodore Ts'o <tytso(a)mit.edu> ext4: always drain queued discard work in ext4_mb_release() Baokun Li <libaokun(a)linux.alibaba.com> ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths Helen Koike <koike(a)igalia.com> ext4: reject mount if bigalloc with s_first_data_block != 0 Ye Bin <yebin10(a)huawei.com> ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() Jan Kara <jack(a)suse.cz> ext4: make recently_deleted() properly work with lazy itable initialization Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: convert inline data to extents when truncate exceeds inline size Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: stop reclaim before pushing AIL during unmount Milos Nikic <nikic.milos(a)gmail.com> jbd2: gracefully abort on checkpointing state corruptions Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> scsi: ses: Handle positive SCSI error from ses_recv_diag() Tyllis Xu <livelycarpet87(a)gmail.com> scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Fix argument order in alarm_timer_forward() Jiucheng Xu <jiucheng.xu(a)amlogic.com> erofs: add GFP_NOIO in the bio completion if needed xietangxin <xietangxin(a)yeah.net> virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false Yuchan Nam <entropy1110(a)gmail.com> media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: conservative: Reset requested_freq on limits change Ali Norouzi <ali.norouzi(a)keysight.com> can: gw: fix OOB heap access in cgw_csum_crc8_rel() Vasily Gorbik <gor(a)linux.ibm.com> s390/barrier: Make array_index_mask_nospec() __always_inline Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> s390/syscalls: Add spectre boundary for syscall dispatch table Marc Kleine-Budde <mkl(a)pengutronix.de> spi: spi-fsl-lpspi: fix teardown order issue (UAF) Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix clock leak on PLL lock failure Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix unchecked clk_prepare_enable() return value Marc Buerg <buermarc(a)googlemail.com> sysctl: fix uninitialized variable in proc_do_large_bitmap Sanman Pradhan <psanman(a)juniper.net> hwmon: (adm1177) fix sysfs ABI violation and current unit conversion Weiming Shi <bestswngs(a)gmail.com> ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: EC: Install address space handler at the namespace root Hans de Goede <hdegoede(a)redhat.com> ACPI: EC: Fix ECDT probe ordering issues Hans de Goede <hdegoede(a)redhat.com> ACPI: EC: Fix EC address space handler unregistration Hans de Goede <hdegoede(a)redhat.com> ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps Hans de Goede <hdegoede(a)redhat.com> ACPICA: include/acpi/acpixf.h: Fix indentation Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Fix the device initialization Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> drm/i915/gmbus: fix spurious timeout on 512-byte burst reads Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size Yihang Li <liyihang9(a)huawei.com> scsi: scsi_transport_sas: Fix the maximum channel scanning issue Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Return EINVAL for invalid arp index error Anil Samal <anil.samal(a)intel.com> RDMA/irdma: Fix deadlock during netdev reset with active connections Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() Ivan Barrera <ivan.d.barrera(a)intel.com> RDMA/irdma: Clean up unnecessary dereference of event->cm_node Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Update ibqp state to error if QP is already in error state Chuck Lever <chuck.lever(a)oracle.com> RDMA/rw: Fall back to direct SGE on MR pool exhaustion Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> regmap: Synchronize cache for the page selector Paolo Valerio <pvalerio(a)redhat.com> net: macb: use the current queue number for stats David Carlier <devnexen(a)gmail.com> netfilter: ctnetlink: use netlink policy range checks Florian Westphal <fw(a)strlen.de> netlink: allow be16 and be32 types in all uint policy checks Florian Westphal <fw(a)strlen.de> netlink: introduce bigendian integer types Jakub Kicinski <kuba(a)kernel.org> netlink: hide validation union fields from kdoc Florian Westphal <fw(a)strlen.de> netfilter: nft_payload: reject out-of-range attributes via policy Florian Westphal <fw(a)strlen.de> netlink: introduce NLA_POLICY_MAX_BE Weiming Shi <bestswngs(a)gmail.com> netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: skip expectations in other netns via proc Ren Wei <n05ec(a)lzu.edu.cn> netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Weiming Shi <bestswngs(a)gmail.com> netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: clamp SCO altsetting table indices Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop Miguel Ojeda <ojeda(a)kernel.org> dma-mapping: add missing `inline` for `dma_free_attrs` Wei Fang <wei.fang(a)nxp.com> net: enetc: fix the output issue of 'ethtool --show-ring' Yochai Eisenrich <echelonh(a)gmail.com> net: fix fanout UAF in packet_release() via NETDEV_UP race Alok Tiwari <alok.a.tiwari(a)oracle.com> platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size Qi Tang <tpluszz77(a)gmail.com> net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: validate MPLS set/set_masked payload length Toke Høiland-Jørgensen <toke(a)redhat.com> net: openvswitch: Avoid releasing netdev before teardown completes Jakub Kicinski <kuba(a)kernel.org> nfc: nci: fix circular locking dependency in nci_close_device Mohammad Heib <mheib(a)redhat.com> ionic: fix persistent MAC address override on PF Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: common: Fix probe failure for devices without EINT Helen Koike <koike(a)igalia.com> Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Anas Iqbal <mohd.abd.6602(a)gmail.com> Bluetooth: hci_ll: Fix firmware leak on error path Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() Oliver Hartkopp <socketcan(a)hartkopp.net> can: statistics: add missing atomic access in hot path Eric Dumazet <edumazet(a)google.com> af_key: validate families in pfkey_send_migrate() Sabrina Dubroca <sd(a)queasysnail.net> esp: fix skb leak with espintcp and async crypto Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Fix the usage of skb->sk Sabrina Dubroca <sd(a)queasysnail.net> xfrm: call xdo_dev_state_delete during state update Uzair Mughal <contact(a)uzair.is-a.dev> ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 Isaac J. Manjarres <isaacmanjarres(a)google.com> dma-buf: Include ioctl.h in UAPI header Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() Ihor Solodrai <ihor.solodrai(a)linux.dev> module: Fix kernel panic when a symbol st_shndx is out of bounds Romain Sioen <romain.sioen(a)microchip.com> HID: mcp2221: cancel last I2C command on read error Valentin Spreckels <valentin(a)spreckels.dev> net: usb: r8152: add TRENDnet TUC-ET2G Günther Noack <gnoack(a)google.com> HID: magicmouse: avoid memory leak in magicmouse_report_fixup() Julius Lehmann <lehmanju(a)devpi.de> HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 Keith Busch <kbusch(a)kernel.org> nvme-pci: ensure we're polling a polled queue Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 Leif Skunberg <diamondback(a)cohunt.app> platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 Keith Busch <kbusch(a)kernel.org> nvme-pci: cap queue creation to used queues Peter Metz <peter.metz(a)unarin.com> platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list Günther Noack <gnoack(a)google.com> HID: asus: avoid memory leak in asus_report_fixup() Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Release module BTF IDR before module unload Danilo Krummrich <dakr(a)kernel.org> sh: platform_early: remove pdev->driver_override check Juergen Gross <jgross(a)suse.com> xen/privcmd: add boot control for restricted usage in domU Juergen Gross <jgross(a)suse.com> xen/privcmd: restrict usage in unprivileged domU Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: de-constify set commit ops function argument Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Josh Law <objecting(a)objecting.org> lib/bootconfig: check xbc_init_node() return in override path Rahul Bukte <rahul.bukte(a)sony.com> drm/i915/gt: Check set_default_submission() before deferencing Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free of share_conf in compound request Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Muhammad Hammad Ijaz <mhijaz(a)amazon.com> net: mvpp2: guard flow control update with global_tx_fc in buffer switching Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Jiayuan Chen <jiayuan.chen(a)shopee.com> net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Wen Gu <guwen(a)linux.alibaba.com> net/smc: Fix slab-out-of-bounds issue in fallback Wen Gu <guwen(a)linux.alibaba.com> net/smc: Only save the original clcsock callback functions Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Dexuan Cui <decui(a)microsoft.com> net: mana: Improve the HWC error handling Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Andrii Melnychenko <a.melnychenko(a)vyos.io> netfilter: nft_ct: add seqadj extension for natted connections Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Florian Westphal <fw(a)strlen.de> netfilter: ctnetlink: remove refcounting in expectation dumpers Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: fix ROM version reading on WCN3998 chips Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Felix Gu <ustc.gu(a)gmail.com> firmware: arm_scpi: Fix device_node reference leak in probe path Jonathan Cameron <Jonathan.Cameron(a)huawei.com> of: Add cleanup.h based auto release via __free(device_node) markings Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Kuniyuki Iwashima <kuniyu(a)google.com> wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq ZhengYuan Huang <gality369(a)gmail.com> btrfs: tree-checker: fix misleading root drop_level error message Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: avoid sending RM_ADDR over same subflow Natalie Vock <natalie.vock(a)gmx.de> drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink Andrew Lunn <andrew(a)lunn.ch> net: phy: register phy led_triggers during probe to avoid AB-BA deadlock Thorsten Blum <thorsten.blum(a)linux.dev> smb: client: Don't log plaintext credentials in cifs_set_cifscreds Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() Daniil Dulov <d.dulov(a)aladdin.ru> wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: move scan done work to wiphy work Daniel Hodges <git(a)danielhodges.dev> wifi: libertas: fix use-after-free in lbs_free_adapter() Jan Kara <jack(a)suse.cz> ext4: always allocate blocks only from groups inode can use Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix null pointer dereference error in generate_encryptionkey Brian Foster <bfoster(a)redhat.com> ext4: fix dirtyclusters double decrement on fs shutdown Zhang Yi <yi.zhang(a)huawei.com> ext4: drop extent cache when splitting extent fails Zhang Yi <yi.zhang(a)huawei.com> ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O Fedor Pchelkin <pchelkin(a)ispras.ru> ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: fix to avoid directly dereferencing user pointer Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() Ankit Garg <nktgrg(a)google.com> gve: defer interrupt enabling until NAPI registration Frederic Weisbecker <frederic(a)kernel.org> net: Handle napi_schedule() calls from non-interrupt Huacai Chen <chenhuacai(a)kernel.org> net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather David Hildenbrand (Red Hat) <david(a)kernel.org> mm/rmap: fix two comments related to huge_pmd_unshare() David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix two comments related to huge_pmd_unshare() David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix hugetlb_pmd_shared() Jane Chu <jane.chu(a)oracle.com> mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count Miaohe Lin <linmiaohe(a)huawei.com> mm/hugetlb: make detecting shared pte more reliable Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Maciej Andrzejewski ICEYE <maciej.andrzejewski(a)m-works.net> serial: uartlite: fix PM runtime usage count underflow on probe Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Olivier Sobrie <olivier(a)sobrie.be> mtd: rawnand: pl353: make sure optimal timings are applied Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Julien Stephan <jstephan(a)baylibre.com> driver: iio: add missing checks on iio_info's callback access Jens Axboe <axboe(a)kernel.dk> io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop Eric Dumazet <edumazet(a)google.com> l2tp: do not use sock_hold() in pppol2tp_session_get_sock() Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Forget ranges when refining tnum after JSET Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch to the same value Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-i2c: fix pm_runtime error handling Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-core: fix pm_runtime error handling Chris Spencer <spencercw(a)gmail.com> iio: chemical: bme680: Fix measurement wait duration calculation Lukas Schmid <lukas.schmid(a)netcube.li> iio: potentiometer: mcp4131: fix double application of wiper shift Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() Oleksij Rempel <linux(a)rempel-privat.de> iio: dac: ds4424: reject -128 RAW value Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update root in the received subvol ioctl Josh Law <objecting(a)objecting.org> lib/bootconfig: check bounds before writing in __xbc_open_brace() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() Shashank Balaji <shashank.mahadasyam(a)sony.com> x86/apic: Disable x2apic on resume if the kernel expects so Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix error handling for scsi_alloc_sdev() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error Darrick J. Wong <djwong(a)kernel.org> xfs: fix undersized l_iclog_roundoff values Calvin Owens <calvin(a)wbinvd.org> tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Alysa Liu <Alysa.Liu(a)amd.com> drm/amdgpu: Fix use-after-free race in VM acquire Fan Wu <fanwu01(a)zju.edu.cn> net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Jian Zhang <zhangjian.3032(a)bytedance.com> net: ncsi: fix skb leak in error paths Helge Deller <deller(a)gmx.de> parisc: Fix initial page table creation for boot Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read Dave Airlie <airlied(a)redhat.com> nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Helge Deller <deller(a)gmx.de> parisc: Increase initial mapping to 64 MB with KALLSYMS Sven Eckelmann <sven(a)narfation.org> batman-adv: Avoid double-rtnl_lock ELP metric worker Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: fix retry for AQ command 0x06EE Long Li <longli(a)microsoft.com> net: mana: Ring doorbell at 4 CQ wraparounds Ariel Silver <arielsilver77(a)gmail.com> media: dvb-net: fix OOB access in ULE extension header tables Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Luka Gejak <luka.gejak(a)linux.dev> staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow secondary lookup in fwnode_get_next_child_node() Steven Rostedt <rostedt(a)goodmis.org> time/jiffies: Mark jiffies_64_to_clock_t() notrace Randy Dunlap <rdunlap(a)infradead.org> time: add kernel-doc in time.c Max Kellermann <max.kellermann(a)ionos.com> ceph: fix i_nlink underrun during async unlink Ilya Dryomov <idryomov(a)gmail.com> libceph: admit message frames only in CEPH_CON_S_OPEN state Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Use u32 for non-negative values in ceph_monmap_decode() Ilya Dryomov <idryomov(a)gmail.com> libceph: prevent potential out-of-bounds reads in process_message_header() Ilya Dryomov <idryomov(a)gmail.com> libceph: reject preamble if control segment is empty Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Mehul Rao <mehulrao(a)gmail.com> tipc: fix divide-by-zero in tipc_sk_filter_connect() Penghe Geng <pgeng(a)nvidia.com> mmc: core: Avoid bitfield RMW for claim/retune flags Felix Gu <ustc.gu(a)gmail.com> mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() Kalesh Singh <kaleshsingh(a)google.com> mm/tracing: rss_stat: ensure curr is false from kthread context Ziyi Guo <n7l8m4(a)u.northwestern.edu> usb: image: mdc800: kill download URB on timeout Oliver Neukum <oneukum(a)suse.com> usb: mdc800: handle signal and read racing Fan Wu <fanwu01(a)zju.edu.cn> usb: renesas_usbhs: fix use-after-free in ISR during device removal Oliver Neukum <oneukum(a)suse.com> usb: class: cdc-wdm: fix reordering issue in read code path Alan Stern <stern(a)rowland.harvard.edu> USB: core: Limit the length of unkillable synchronous timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbcore: Introduce usb_bulk_msg_killable() Marc Zyngier <maz(a)kernel.org> usb: cdc-acm: Restore CAP_BRK functionnality to CH343 Gabor Juhos <j4g8y7(a)gmail.com> usb: core: don't power off roothub PHYs if phy_set_mode() fails Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: misc: uss720: properly clean up reference in uss720_probe() Oliver Neukum <oneukum(a)suse.com> usb: yurex: fix race in probe Zilin Guan <zilin(a)seu.edu.cn> usb: xhci: Fix memory leak in xhci_disable_slot() Christoffer Sandberg <cs(a)tuxedo.de> usb/core/quirks: Add Huawei ME906S-device to wakeup quirk Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: skip LTM configuration for LAN7850 Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: fix silent drop of packets with checksum errors Qingye Zhao <zhaoqingye(a)honor.com> cgroup: fix race between task migration and iteration Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status Przemek Kitszel <przemyslaw.kitszel(a)intel.com> octeontx2-af: devlink health: use retained error fmsg API Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter recovery condition Casey Connolly <casey.connolly(a)linaro.org> ASoC: detect empty DMI strings Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition Ben Dooks <ben.dooks(a)codethink.co.uk> ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Matt Vollrath <tactii(a)gmail.com> e1000/e1000e: Fix leak in DMA error cleanup Alok Tiwari <alok.a.tiwari(a)oracle.com> i40e: fix src IP mask checks and memcpy argument names in cloud filter Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Make skipping governor callbacks more consistent Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct interrupt type Frieder Schrempf <frieder.schrempf(a)kontron.de> regulator: pca9450: Make IRQ optional Yuan Tan <tanyuan98(a)outlook.com> netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path David Dull <monderasdor(a)gmail.com> netfilter: x_tables: guard option walkers against 1-byte tail reads Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() Wenyuan Li <2063309626(a)qq.com> can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> serial: caif: hold tty->link reference in ldisc_open and ser_release matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: flush delayed work before removing DAIs and widgets Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: core: Do not call link_exit() on uninitialized rtd objects Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: core: Exit all links before removing their components Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-core: accept zero format at snd_soc_runtime_set_dai_fmt() matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: drop delayed_work_pending() check before flush Weiming Shi <bestswngs(a)gmail.com> net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Hangbin Liu <liuhangbin(a)gmail.com> bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states Eric Badger <ebadger(a)purestorage.com> xprtrdma: Decrement re_receiving on the early exit paths J. Neuschäfer <j.ne(a)posteo.net> powerpc: 83xx: km83xx: Fix keymile vendor prefix Tzung-Bi Shih <tzungbi(a)kernel.org> remoteproc: mediatek: Unprepare SCP clock during system suspend Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: sysmon: Correct subsys_name_len type in QMI request Christophe Leroy (CS GROUP) <chleroy(a)kernel.org> powerpc/uaccess: Fix inline assembly for clang build on PPC32 Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check max frame size for implicit feedback mode, too Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 Tomas Henzl <thenzl(a)redhat.com> scsi: ses: Fix devices attaching to different hosts Sofia Schneider <sofia(a)schn.dev> ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Al Viro <viro(a)zeniv.linux.org.uk> unshare: fix unshare_fs() handling Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add NULL checks when resetting request and reply queues Piotr Mazek <pmazek(a)outlook.com> ACPI: PM: Save NVS memory on Lenovo G70-35 Jan Kiszka <jan.kiszka(a)siemens.com> scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT Victor Nogueira <victor(a)mojatatu.com> net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Jiayuan Chen <jiayuan.chen(a)shopee.com> net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop Fernando Fernandez Mancera <fmancera(a)suse.de> net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled Fernando Fernandez Mancera <fmancera(a)suse.de> net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: stmmac: Fix error handling in VLAN add and delete paths Jakub Kicinski <kuba(a)kernel.org> nfc: rawsock: cancel tx_work before socket teardown Jakub Kicinski <kuba(a)kernel.org> nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback Jakub Kicinski <kuba(a)kernel.org> nfc: nci: free skb on nci_transceive early error paths Ian Ray <ian.ray(a)gehealthcare.com> net: nfc: nci: Fix zero-length proprietary notifications Koichiro Den <den(a)valinux.co.jp> net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix sleep while atomic on suspend/resume Jakub Kicinski <kuba(a)kernel.org> ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() David Thomson <dt(a)linux-mail.net> xen/acpi-processor: fix _CST detection using undersized evaluation buffer Eric Dumazet <edumazet(a)google.com> indirect_call_wrapper: do not reevaluate function pointer Bart Van Assche <bvanassche(a)acm.org> wifi: wlcore: Fix a locking bug Bart Van Assche <bvanassche(a)acm.org> wifi: cw1200: Fix locking in error paths Alban Bedel <alban.bedel(a)lht.dlh.de> can: mcp251x: fix deadlock in error path of mcp251x_open Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix locking for bcm_op runtime updates Jiayuan Chen <jiayuan.chen(a)shopee.com> atm: lec: fix null-ptr-deref in lec_arp_clear_vccs Guenter Roeck <linux(a)roeck-us.net> dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not clear any interrupts automatically Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2-switch: serialize changes to priv->mac with a mutex Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2-switch replace direct MAC access with dpaa2_switch_port_has_mac() Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2-switch: assign port_priv->mac after dpaa2_mac_connect() call Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2: replace dpaa2_mac_is_type_fixed() with dpaa2_mac_is_type_phy() Chintan Vankar <c-vankar(a)ti.com> net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table Jonathan Teh <jonathan.teh(a)outlook.com> platform/x86: thinkpad_acpi: Fix errors reading battery thresholds Paolo Abeni <pabeni(a)redhat.com> selftests: mptcp: more stable simult_flows tests Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix refcount leak for tagset_refcnt Lars Ellenberg <lars.ellenberg(a)linbit.com> drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Phillip Lougher <phillip(a)squashfs.org.uk> Squashfs: check metadata block offset is within range Davide Caratti <dcaratti(a)redhat.com> net/sched: ets: fix divide by zero in the offload path Jason Gunthorpe <jgg(a)ziepe.ca> IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Vahagn Vardanian <vahagn(a)redrays.io> wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() Johannes Berg <johannes.berg(a)intel.com> wifi: radiotap: reject radiotap with unknown bits Jun Seo <jun.seo.93(a)proton.me> ALSA: usb-audio: Use correct version for UAC3 header validation Kurt Borja <kuurtb(a)gmail.com> platform/x86: dell-wmi: Add audio/mic mute key codes Thorsten Blum <thorsten.blum(a)linux.dev> platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: defer freeing of boot services memory Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: etas_es58x: correctly anchor the urb in the read bulk callback Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ucan: Fix infinite loop from zero-length messages Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: pegasus: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kalmia: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kaweth: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> nfc: pn533: properly drop the usb interface reference on disconnect Jens Axboe <axboe(a)kernel.dk> media: dvb-core: fix wrong reinitialization of ringbuffer on reopen Jann Horn <jannh(a)google.com> eventpoll: Fix integer overflow in ep_loop_check_proc() Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: arcnet: com20020-pci: fix support for 2.5Mbit cards Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 Andrey Vatoropin <a.vatoropin(a)crpt.ru> fbcon: check return value of con2fb_acquire_newinfo() Daniel Vetter <daniel.vetter(a)ffwll.ch> fbcon: move more common code into fb_open() Daniel Vetter <daniel.vetter(a)ffwll.ch> fbcon: Extract fbcon_open/release helpers Daniel Vetter <daniel.vetter(a)ffwll.ch> fbcon: Use delayed work for cursor Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths Gui-Dong Han <hanguidong02(a)gmail.com> hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 Thomas Richard (TI) <thomas.richard(a)bootlin.com> usb: cdns3: fix role switching during resume Théo Lebrun <theo.lebrun(a)bootlin.com> usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() Hongyu Xie <xiehongyu1(a)kylinos.cn> usb: cdns3: remove redundant if branch Johan Hovold <johan(a)kernel.org> clk: tegra: tegra124-emc: fix device leak on set_rate() Johan Hovold <johan(a)kernel.org> mfd: omap-usb-host: Fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> mfd: omap-usb-host: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> mfd: qcom-pm8xxx: Fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> mfd: qcom-pm8xxx: Convert to platform remove callback returning void Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> mfd: qcom-pm8xxx: switch away from using chained IRQ handlers Johan Hovold <johan(a)kernel.org> bus: omap-ocp2scp: fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> bus: omap-ocp2scp: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> drm/tegra: dsi: fix device leak on probe Damien Le Moal <dlemoal(a)kernel.org> ata: libata-scsi: refactor ata_scsi_translate() Hannes Reinecke <hare(a)suse.de> ata: libata: remove pointless VPRINTK() calls Hannes Reinecke <hare(a)suse.de> ata: libata-scsi: drop DPRINTK calls for cdb translation Bart Van Assche <bvanassche(a)acm.org> scsi: ata: Call scsi_done() directly Wentao Liang <vulab(a)iscas.ac.cn> ARM: omap2: Fix reference count leaks in omap_control_init() Wang Qing <wangqing(a)vivo.com> ARM: OMAP2+: add missing of_node_put before break and return Johan Hovold <johan(a)kernel.org> memory: mtk-smi: fix device leak on larb probe Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> memory: mtk-smi: Convert to platform remove callback returning void Kohei Enju <kohei(a)enjuk.jp> bpf: Fix stack-out-of-bounds write in devmap Mark Harmstone <mark(a)harmstone.com> btrfs: fix incorrect key offset in error message in check_dev_extent_item() Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Use inclusive terms Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Cap the packet size pre-calculations Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Always initialize the UIC done completion Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices Jussi Laako <jussi(a)sonarnerd.net> ALSA: usb-audio: Update for native DSD support quirks Mathias Krause <minipli(a)grsecurity.net> scsi: lpfc: Properly set WC for DPP mapping Ben Hutchings <ben(a)decadent.org.uk> ip6_tunnel: Fix usage of skb_vlan_inet_prepare() Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> ARM: clean up the memset64() C wrapper ------------- Diffstat: .../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +- Documentation/hwmon/adm1177.rst | 8 +- .../ethernet/freescale/dpaa2/mac-phy-support.rst | 9 +- Makefile | 4 +- arch/arm/include/asm/string.h | 14 +- arch/arm/mach-omap2/cm_common.c | 8 +- arch/arm/mach-omap2/control.c | 29 +- arch/arm/mach-omap2/prm_common.c | 8 +- .../boot/dts/hisilicon/hi3798cv200-poplar.dts | 2 +- arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi | 1 + .../arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 1 - arch/mips/lib/multi3.c | 6 +- arch/parisc/include/asm/pgtable.h | 2 +- arch/parisc/kernel/head.S | 7 +- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/platforms/83xx/km83xx.c | 4 +- arch/riscv/kernel/kgdb.c | 7 +- arch/s390/include/asm/barrier.h | 4 +- arch/s390/kernel/syscall.c | 2 + arch/sh/drivers/platform_early.c | 4 - arch/x86/include/asm/efi.h | 2 +- arch/x86/kernel/apic/apic.c | 6 + arch/x86/kernel/cpu/common.c | 18 +- arch/x86/kvm/mmu/mmu.c | 13 +- arch/x86/platform/efi/efi.c | 2 +- arch/x86/platform/efi/quirks.c | 55 ++- crypto/af_alg.c | 4 +- drivers/acpi/acpi_processor.c | 15 +- drivers/acpi/acpica/acevents.h | 4 + drivers/acpi/acpica/evregion.c | 6 +- drivers/acpi/acpica/evxfregn.c | 146 ++++++- drivers/acpi/ec.c | 52 ++- drivers/acpi/osi.c | 13 + drivers/acpi/osl.c | 2 +- drivers/acpi/sleep.c | 8 + drivers/ata/libata-core.c | 3 - drivers/ata/libata-sata.c | 4 +- drivers/ata/libata-scsi.c | 153 +++---- drivers/ata/libata-sff.c | 4 - drivers/ata/libata.h | 1 - drivers/base/power/runtime.c | 1 + drivers/base/property.c | 27 +- drivers/base/regmap/regmap.c | 30 +- drivers/block/drbd/drbd_actlog.c | 53 +-- drivers/block/drbd/drbd_interval.h | 5 +- drivers/bluetooth/btqca.c | 2 + drivers/bluetooth/btusb.c | 5 +- drivers/bluetooth/hci_ll.c | 2 + drivers/bus/omap-ocp2scp.c | 19 +- drivers/clk/tegra/clk-tegra124-emc.c | 2 +- drivers/comedi/drivers.c | 8 + drivers/comedi/drivers/dt2815.c | 12 + drivers/comedi/drivers/me4000.c | 16 +- drivers/comedi/drivers/me_daq.c | 35 +- drivers/comedi/drivers/ni_atmio16d.c | 3 +- drivers/cpufreq/cpufreq_conservative.c | 12 + drivers/cpufreq/cpufreq_governor.c | 3 + drivers/cpufreq/cpufreq_governor.h | 1 + drivers/cpuidle/cpuidle.c | 10 - drivers/dma/idxd/cdev.c | 10 +- drivers/dma/idxd/sysfs.c | 1 + drivers/dma/sh/rz-dmac.c | 33 +- drivers/dma/xilinx/xilinx_dma.c | 66 +-- drivers/firmware/arm_scpi.c | 5 +- drivers/firmware/efi/mokvar-table.c | 2 +- drivers/gpio/gpiolib-cdev.c | 13 + drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 +- drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/exynos/exynos_drm_drv.h | 1 + drivers/gpu/drm/exynos/exynos_drm_vidi.c | 72 +++- drivers/gpu/drm/i915/display/intel_gmbus.c | 4 +- drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 +- drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c | 26 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/tegra/dsi.c | 6 +- drivers/hid/hid-asus.c | 15 +- drivers/hid/hid-cmedia.c | 2 +- drivers/hid/hid-creative-sb0540.c | 2 +- drivers/hid/hid-magicmouse.c | 6 +- drivers/hid/hid-mcp2221.c | 2 + drivers/hid/hid-multitouch.c | 7 + drivers/hid/hid-zydacron.c | 2 +- drivers/hid/wacom_wac.c | 10 + drivers/hwmon/adm1177.c | 54 ++- drivers/hwmon/max16065.c | 26 +- drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/hwmon/pmbus/q54sj108a2.c | 19 +- drivers/hwmon/pmbus/tps53679.c | 4 +- drivers/i2c/busses/i2c-cp2615.c | 5 +- drivers/i2c/busses/i2c-fsi.c | 1 + drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2 +- drivers/i3c/master/mipi-i3c-hci/core.c | 6 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 4 +- drivers/iio/adc/ad7923.c | 4 +- drivers/iio/chemical/bme680_core.c | 2 +- drivers/iio/chemical/sps30_i2c.c | 2 +- drivers/iio/chemical/sps30_serial.c | 2 +- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/dac/ds4424.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 50 ++- drivers/iio/gyro/mpu3050-i2c.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 + drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4 + drivers/iio/industrialio-core.c | 7 +- drivers/iio/industrialio-event.c | 9 + drivers/iio/inkern.c | 35 +- drivers/iio/light/vcnl4035.c | 18 +- drivers/iio/potentiometer/mcp4131.c | 2 +- drivers/infiniband/core/rw.c | 27 +- drivers/infiniband/hw/irdma/cm.c | 29 +- drivers/infiniband/hw/irdma/utils.c | 2 - drivers/infiniband/hw/irdma/verbs.c | 9 +- drivers/infiniband/hw/mthca/mthca_provider.c | 5 +- drivers/input/joystick/xpad.c | 2 + drivers/input/misc/uinput.c | 35 +- drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/iommu/intel/dmar.c | 3 +- drivers/irqchip/irq-gic-v3-its.c | 4 + drivers/media/dvb-core/dmxdev.c | 4 +- drivers/media/dvb-core/dvb_net.c | 3 + drivers/media/mc/mc-request.c | 5 + drivers/media/usb/uvc/uvc_driver.c | 88 ++-- drivers/media/usb/uvc/uvcvideo.h | 2 + drivers/media/v4l2-core/v4l2-ioctl.c | 5 +- drivers/memory/mtk-smi.c | 11 +- drivers/mfd/omap-usb-host.c | 11 +- drivers/mfd/qcom-pm8xxx.c | 53 +-- drivers/mmc/host/mmci_qcom_dml.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mmc/host/vub300.c | 2 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 + drivers/mtd/parsers/redboot.c | 6 +- drivers/net/arcnet/com20020-pci.c | 16 +- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 8 +- drivers/net/caif/caif_serial.c | 3 + drivers/net/can/spi/hi311x.c | 5 +- drivers/net/can/spi/mcp251x.c | 15 +- drivers/net/can/usb/ems_usb.c | 7 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 7 +- drivers/net/can/usb/gs_usb.c | 11 +- drivers/net/can/usb/ucan.c | 2 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/ethernet/altera/altera_tse_main.c | 1 + drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 10 - drivers/net/ethernet/amd/xgbe/xgbe-main.c | 1 - drivers/net/ethernet/amd/xgbe/xgbe.h | 3 - drivers/net/ethernet/arc/emac_main.c | 11 + drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/broadcom/tg3.c | 2 +- drivers/net/ethernet/cadence/macb_main.c | 18 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 +- drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 7 +- drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.h | 10 +- .../freescale/dpaa2/dpaa2-switch-ethtool.c | 34 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 57 ++- .../net/ethernet/freescale/dpaa2/dpaa2-switch.h | 9 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 2 + drivers/net/ethernet/google/gve/gve.h | 1 + drivers/net/ethernet/google/gve/gve_main.c | 5 +- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 - drivers/net/ethernet/intel/e1000e/netdev.c | 2 - drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 +- drivers/net/ethernet/intel/ice/ice_common.c | 1 + drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 +- drivers/net/ethernet/intel/igc/igc_main.c | 7 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 468 ++++++--------------- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++- .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 4 - drivers/net/ethernet/microsoft/mana/hw_channel.c | 77 ++-- drivers/net/ethernet/microsoft/mana/mana_en.c | 23 +- drivers/net/ethernet/pensando/ionic/ionic_lif.c | 17 +- drivers/net/ethernet/qualcomm/qca_uart.c | 2 +- drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 11 +- .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 2 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 18 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/net/ethernet/ti/cpsw_ale.c | 9 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/phy/phy_device.c | 13 +- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/kalmia.c | 7 + drivers/net/usb/kaweth.c | 13 + drivers/net/usb/lan78xx.c | 8 +- drivers/net/usb/lan78xx.h | 3 + drivers/net/usb/pegasus.c | 13 +- drivers/net/usb/r8152.c | 1 + drivers/net/virtio_net.c | 1 + drivers/net/vxlan/vxlan_core.c | 11 +- .../net/wireless/broadcom/brcm80211/brcmsmac/dma.c | 2 +- drivers/net/wireless/marvell/libertas/main.c | 4 +- drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00usb.c | 2 +- drivers/net/wireless/st/cw1200/pm.c | 2 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/net/wireless/virt_wifi.c | 1 - drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nfc/pn533/uart.c | 14 +- drivers/nfc/pn533/usb.c | 1 + drivers/nvdimm/bus.c | 5 +- drivers/nvme/host/pci.c | 13 +- drivers/nvme/target/tcp.c | 6 +- drivers/pci/pci-driver.c | 8 - drivers/pci/pci.c | 10 +- drivers/pci/pci.h | 1 - drivers/phy/renesas/phy-rcar-gen3-usb2.c | 123 +++--- drivers/phy/ti/phy-j721e-wiz.c | 2 + drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 9 +- drivers/platform/olpc/olpc-xo175-ec.c | 2 +- drivers/platform/x86/dell/dell-wmi-base.c | 6 + .../dell/dell-wmi-sysman/passwordattr-interface.c | 1 - drivers/platform/x86/intel/hid.c | 13 + drivers/platform/x86/thinkpad_acpi.c | 6 +- drivers/platform/x86/touchscreen_dmi.c | 18 + drivers/regulator/pca9450-regulator.c | 41 +- drivers/remoteproc/mtk_scp.c | 39 ++ drivers/remoteproc/qcom_sysmon.c | 2 +- drivers/scsi/ibmvscsi/ibmvfc.c | 3 +- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/lpfc/lpfc_sli.c | 36 +- drivers/scsi/lpfc/lpfc_sli4.h | 3 + drivers/scsi/mpi3mr/mpi3mr_fw.c | 32 +- drivers/scsi/scsi_scan.c | 7 +- drivers/scsi/scsi_transport_sas.c | 2 +- drivers/scsi/ses.c | 7 +- drivers/scsi/storvsc_drv.c | 5 +- drivers/scsi/ufs/ufshcd.c | 29 +- drivers/soc/bcm/bcm2835-power.c | 27 +- drivers/soc/fsl/qbman/qman.c | 24 +- drivers/spi/spi-fsl-lpspi.c | 3 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 29 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/target/loopback/tcm_loop.c | 52 ++- drivers/thunderbolt/nhi.c | 2 +- drivers/tty/serial/8250/8250_dma.c | 15 + drivers/tty/serial/8250/8250_pci.c | 17 + drivers/tty/serial/8250/8250_port.c | 6 + drivers/tty/serial/uartlite.c | 1 + drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/cdns3/core.c | 11 +- drivers/usb/class/cdc-acm.c | 14 + drivers/usb/class/cdc-acm.h | 2 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/class/usbtmc.c | 9 +- drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/message.c | 100 ++++- drivers/usb/core/phy.c | 8 +- drivers/usb/core/quirks.c | 7 + drivers/usb/dwc2/gadget.c | 2 + drivers/usb/gadget/function/f_hid.c | 11 +- drivers/usb/gadget/function/f_rndis.c | 3 + drivers/usb/gadget/function/f_subset.c | 7 + drivers/usb/gadget/function/f_uac1_legacy.c | 47 ++- drivers/usb/gadget/function/f_uvc.c | 46 +- drivers/usb/gadget/function/u_ether.c | 8 +- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 13 +- drivers/usb/gadget/udc/dummy_hcd.c | 42 +- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/host/xhci.c | 4 +- drivers/usb/image/mdc800.c | 6 +- drivers/usb/misc/uss720.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/renesas_usbhs/common.c | 9 + drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + drivers/video/fbdev/core/fbcon.c | 262 ++++++------ drivers/video/fbdev/core/fbcon.h | 4 +- drivers/video/fbdev/core/fbmem.c | 2 + drivers/xen/privcmd.c | 76 +++- drivers/xen/xen-acpi-processor.c | 7 +- fs/btrfs/disk-io.c | 4 +- fs/btrfs/ioctl.c | 3 +- fs/btrfs/tree-checker.c | 21 +- fs/btrfs/volumes.c | 5 +- fs/btrfs/zoned.c | 6 +- fs/ceph/dir.c | 15 +- fs/cifs/connect.c | 1 - fs/cifs/inode.c | 6 +- fs/cifs/smb2ops.c | 8 +- fs/erofs/zdata.c | 3 + fs/eventpoll.c | 5 +- fs/ext4/ext4.h | 1 + fs/ext4/extents.c | 22 +- fs/ext4/fast_commit.c | 17 +- fs/ext4/ialloc.c | 6 + fs/ext4/inode.c | 27 +- fs/ext4/mballoc.c | 69 ++- fs/ext4/super.c | 22 +- fs/ext4/sysfs.c | 10 +- fs/jbd2/checkpoint.c | 15 +- fs/ksmbd/mgmt/user_session.c | 4 +- fs/ksmbd/server.c | 6 +- fs/ksmbd/smb2pdu.c | 63 ++- fs/squashfs/cache.c | 3 + fs/xfs/xfs_dquot_item.c | 9 +- fs/xfs/xfs_inode_item.c | 9 +- fs/xfs/xfs_log.c | 2 + fs/xfs/xfs_mount.c | 7 +- include/acpi/acpixf.h | 142 ++++--- include/asm-generic/tlb.h | 77 +++- include/linux/dma-mapping.h | 4 +- include/linux/fbcon.h | 2 + include/linux/hugetlb.h | 17 +- include/linux/indirect_call_wrapper.h | 18 +- include/linux/irqchip/arm-gic-v3.h | 1 + include/linux/mm_types.h | 1 + include/linux/mmc/host.h | 9 +- include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/of.h | 2 + include/linux/security.h | 1 + include/linux/swapops.h | 20 +- include/linux/usb.h | 8 +- include/linux/usb/r8152.h | 1 + include/net/act_api.h | 1 + include/net/netfilter/nf_conntrack_timeout.h | 1 + include/net/netfilter/nf_tables.h | 7 +- include/net/netlink.h | 39 +- include/net/sch_generic.h | 10 + include/net/udp_tunnel.h | 2 +- include/sound/soc.h | 2 + include/trace/events/kmem.h | 8 +- include/uapi/linux/dma-buf.h | 1 + include/uapi/linux/netfilter/nf_conntrack_common.h | 4 + io_uring/io-wq.c | 2 +- io_uring/io_uring.c | 39 +- kernel/bpf/btf.c | 24 +- kernel/bpf/devmap.c | 22 +- kernel/bpf/verifier.c | 14 +- kernel/cgroup/cgroup.c | 1 + kernel/fork.c | 2 +- kernel/futex/core.c | 3 +- kernel/module.c | 7 + kernel/sched/idle.c | 39 +- kernel/sysctl.c | 2 +- kernel/time/alarmtimer.c | 2 +- kernel/time/time.c | 171 +++++++- kernel/trace/trace.c | 6 +- kernel/trace/trace_osnoise.c | 8 +- lib/bootconfig.c | 9 +- lib/crypto/chacha.c | 4 + lib/nlattr.c | 22 + mm/hugetlb.c | 141 ++++--- mm/mmu_gather.c | 33 ++ mm/rmap.c | 38 +- net/atm/lec.c | 98 +++-- net/atm/lec.h | 2 +- net/batman-adv/bat_iv_ogm.c | 3 + net/batman-adv/bat_v_elp.c | 10 +- net/batman-adv/hard-interface.c | 8 +- net/batman-adv/hard-interface.h | 1 + net/batman-adv/translation-table.c | 9 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 55 ++- net/bluetooth/l2cap_sock.c | 3 + net/bluetooth/mgmt.c | 3 + net/bluetooth/sco.c | 10 +- net/bluetooth/smp.c | 13 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/bridge/br_device.c | 2 +- net/bridge/br_input.c | 2 +- net/can/af_can.c | 4 +- net/can/af_can.h | 2 +- net/can/bcm.c | 1 + net/can/gw.c | 6 +- net/can/proc.c | 3 +- net/ceph/auth.c | 6 +- net/ceph/messenger_v2.c | 31 +- net/ceph/mon_client.c | 6 +- net/core/dev.c | 2 +- net/core/rtnetlink.c | 9 +- net/hsr/hsr_device.c | 32 +- net/ipv4/esp4.c | 11 +- net/ipv4/icmp.c | 4 +- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 + net/ipv6/esp6.c | 11 +- net/ipv6/icmp.c | 3 + net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 7 +- net/ipv6/ndisc.c | 3 + net/ipv6/netfilter/ip6t_rt.c | 4 + net/ipv6/route.c | 11 +- net/ipv6/seg6_iptunnel.c | 41 +- net/ipv6/xfrm6_output.c | 4 +- net/key/af_key.c | 19 +- net/l2tp/l2tp_ppp.c | 25 +- net/mac80211/debugfs.c | 14 +- net/mac80211/mesh.c | 6 + net/mctp/device.c | 17 +- net/mptcp/pm.c | 2 +- net/mptcp/pm_netlink.c | 81 ++-- net/mptcp/protocol.c | 2 + net/mptcp/protocol.h | 3 + net/mptcp/subflow.c | 15 +- net/ncsi/ncsi-aen.c | 3 +- net/ncsi/ncsi-rsp.c | 16 +- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_expect.c | 4 + net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_helper.c | 2 +- net/netfilter/nf_conntrack_netlink.c | 89 ++-- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 20 +- net/netfilter/nf_flow_table_offload.c | 196 ++++++--- net/netfilter/nf_tables_api.c | 12 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nfnetlink_log.c | 10 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nfnetlink_queue.c | 4 +- net/netfilter/nft_ct.c | 11 +- net/netfilter/nft_payload.c | 6 +- net/netfilter/nft_set_pipapo.c | 59 ++- net/netfilter/nft_set_pipapo.h | 2 + net/netfilter/x_tables.c | 23 + net/netfilter/xt_CT.c | 4 + net/netfilter/xt_IDLETIMER.c | 6 + net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_dccp.c | 4 +- net/netfilter/xt_rateest.c | 5 + net/netfilter/xt_tcpudp.c | 6 +- net/netfilter/xt_time.c | 4 +- net/nfc/nci/core.c | 31 +- net/nfc/nci/data.c | 12 +- net/nfc/rawsock.c | 11 + net/openvswitch/flow_netlink.c | 2 + net/openvswitch/vport-netdev.c | 9 +- net/packet/af_packet.c | 1 + net/qrtr/af_qrtr.c | 31 +- net/rds/ib_rdma.c | 7 +- net/rfkill/core.c | 37 +- net/rose/af_rose.c | 5 + net/rxrpc/af_rxrpc.c | 6 - net/rxrpc/key.c | 2 +- net/rxrpc/server_key.c | 3 + net/sched/act_ct.c | 6 + net/sched/cls_api.c | 8 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_ets.c | 12 +- net/sched/sch_hfsc.c | 4 +- net/sched/sch_teql.c | 1 + net/smc/af_smc.c | 152 +++++-- net/smc/smc.h | 34 ++ net/smc/smc_close.c | 7 +- net/smc/smc_rx.c | 9 +- net/sunrpc/cache.c | 26 +- net/sunrpc/xprtrdma/verbs.c | 7 +- net/tipc/group.c | 6 +- net/tipc/socket.c | 2 + net/tls/tls_sw.c | 10 + net/wireless/core.c | 4 +- net/wireless/core.h | 4 +- net/wireless/pmsr.c | 1 + net/wireless/radiotap.c | 4 +- net/wireless/scan.c | 14 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + net/xfrm/xfrm_interface_core.c | 2 +- net/xfrm/xfrm_output.c | 7 +- net/xfrm/xfrm_policy.c | 2 +- net/xfrm/xfrm_state.c | 1 + net/xfrm/xfrm_user.c | 1 + security/apparmor/apparmorfs.c | 228 ++++++---- security/apparmor/include/label.h | 16 +- security/apparmor/include/lib.h | 12 + security/apparmor/include/match.h | 1 + security/apparmor/include/policy.h | 13 +- security/apparmor/include/policy_ns.h | 2 + security/apparmor/include/policy_unpack.h | 83 ++-- security/apparmor/label.c | 12 +- security/apparmor/match.c | 58 ++- security/apparmor/policy.c | 82 +++- security/apparmor/policy_ns.c | 2 + security/apparmor/policy_unpack.c | 74 +++- security/security.c | 1 + sound/pci/ctxfi/ctdaio.c | 1 + sound/pci/hda/patch_conexant.c | 11 + sound/pci/hda/patch_realtek.c | 1 + sound/soc/amd/acp3x-rt5682-max9836.c | 9 +- sound/soc/codecs/adau1372.c | 34 +- sound/soc/fsl/fsl_easrc.c | 14 +- sound/soc/intel/catpt/device.c | 10 +- sound/soc/intel/catpt/dsp.c | 3 - sound/soc/meson/meson-codec-glue.c | 3 - sound/soc/soc-core.c | 44 +- sound/usb/caiaq/device.c | 2 +- sound/usb/endpoint.c | 10 +- sound/usb/quirks.c | 38 +- sound/usb/validate.c | 2 +- tools/bootconfig/main.c | 7 +- tools/objtool/check.c | 5 +- tools/testing/selftests/net/mptcp/simult_flows.sh | 11 +- 518 files changed, 5450 insertions(+), 2789 deletions(-)

1 month

11
10
0 0

社長のNG行動

by 神田／ナレッジリンク

　お世話になります。ナレッジリンクセミナー事務局です。　　　「社員のモチベーションを上げようと声をかける」　「部下の相談に乗り、一緒に悩んであげる」　「現場のトラブルに、自ら先頭に立って対応する」　　もし社長がこれらを率先しているようであれば、　残念ながら、その組織の成長はそこで止まります。　　社長のその“優しさ”が、社員の甘えを生み、責任感を奪い、　「指示待ち人間」を量産する装置になっているからです。　　　4,800社の経営者が衝撃を受けた、　良かれと思ってやってしまう「社長のNG行動」の正体。　　組織を劇的に変えるための、　オンラインセミナーを開催いたします。　　1つでも心当たりがあれば、一度ご視聴ください。　　　>>視聴予約はこちら　https://knowledge-corp.jp/shikigaku5/ 　 ---------------------------------------------- 　　テーマ：　それ、危険です『社長のNG行動』　　　　　〜その行動が、組織崩壊を招く〜　　日程　： 4月21日（火）13:00スタート　※残11席　　　　　 5月19日（火）13:00スタート　　　　　※どちらの日程も内容は同じ　会場　：Zoom開催　定員　：先着100名（費用は不要） ---------------------------------------------- 　※経営層の方限定です　　　なぜ、社員は「言われたこと」しかやらないのか。　なぜ、次世代のリーダー候補が育たないのか。　　それは、能力の問題ではなく、　　良かれと思って続けている「社長の配慮」こそが、　組織成長を止める、最大のボトルネックかもしれません。　　本セミナーでは、4,800社以上が導入した　独自の組織論「識学」に基づき、社長の「NG行動」と　真の経営者へ脱皮するためのマインドセットを伝授します。　　　【セミナー内容(一部抜粋)】　 ○ NG行動3選　 ○ なぜ優秀なNo.2や部長が育たないのか　 ○ マネジメントスタイルの変革について　 ○ 導入企業の事例　　「管理職が育ったら任せる」ではなく「任せるから育つ」　という思考の逆転を提言。　　現場から「冷たくなった」と思われることを恐れず、　機能的な階層構造（仕組み）を作ることで　結果として社員全員を守り、　利益を最大化させる道筋を明示します。　「優しさ」で人を動かすのではなく、　「正しさ」で組織を動かす。　音声やお顔が表に出ることはございませんので　お気軽にご視聴ください。　　>>視聴予約はこちら　https://knowledge-corp.jp/shikigaku5/ 　　 ----------------------- 　一般社団法人ナレッジリンク　東京都千代田区神田小川町1-8-3 　電話：03-5256-7638 　セミナーのご案内が不要な方は大変残念ではございますが、　下記URLより手続き下さいませ。　　メール配信のワンクリック解除はこちら　https://fc-knowledgelink-corp.jp/mail/ 　

1 month

1
0
0 0

[PATCH 6.18 00/83] 6.18.23-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.23 release. There are 83 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 15 Apr 2026 15:57:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.23-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.23-rc1 Jiayuan Chen <jiayuan.chen(a)linux.dev> net: skb: fix cross-cache free of KFENCE-allocated skb head Pengpeng Hou <pengpeng(a)iscas.ac.cn> rxrpc: proc: size address buffers for %pISpc output Wang Jie <jiewang2024(a)lzu.edu.cn> rxrpc: only handle RESPONSE during service challenge David Howells <dhowells(a)redhat.com> rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of rxgk context in rxgk_verify_response() David Howells <dhowells(a)redhat.com> rxrpc: Fix integer overflow in rxgk_verify_response() David Howells <dhowells(a)redhat.com> rxrpc: Fix missing error checks for rxkad encryption/decryption failure David Howells <dhowells(a)redhat.com> rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) Luxiao Xu <rakukuip(a)gmail.com> rxrpc: fix reference count leak in rxrpc_server_keyring() Keenan Dong <keenanat2000(a)gmail.com> rxrpc: fix oversized RESPONSE authenticator length check Keenan Dong <keenanat2000(a)gmail.com> rxrpc: fix RESPONSE authenticator parser OOB read Yuqi Xu <xuyuqiabc(a)gmail.com> rxrpc: reject undecryptable rxkad response tickets Douya Le <ldy3087146292(a)gmail.com> rxrpc: Only put the call ref if one was acquired Marc Dionne <marc.c.dionne(a)gmail.com> rxrpc: Fix to request an ack if window is limited Anderson Nascimento <anderson(a)allelesecurity.com> rxrpc: Fix key reference count leak from call->key Alok Tiwari <alok.a.tiwari(a)oracle.com> rxrpc: Fix rack timer warning to report unexpected mode Alok Tiwari <alok.a.tiwari(a)oracle.com> rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial Oleh Konko <security(a)1seal.org> rxrpc: Fix RxGK token loading to check bounds David Howells <dhowells(a)redhat.com> rxrpc: Fix call removal to use RCU safe deletion David Howells <dhowells(a)redhat.com> rxrpc: Fix anonymous key handling David Howells <dhowells(a)redhat.com> rxrpc: Fix key parsing memleak David Howells <dhowells(a)redhat.com> rxrpc: Fix key quota calculation for multitoken keys David Carlier <devnexen(a)gmail.com> net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() David Carlier <devnexen(a)gmail.com> net: lan966x: fix page pool leak in error paths David Carlier <devnexen(a)gmail.com> net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: set the payload size before calling the async handler Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: improve locking around idpf_vc_xn_push_free() Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() Tyllis Xu <livelycarpet87(a)gmail.com> net: stmmac: fix integer underflow in chain mode Pengpeng Hou <pengpeng(a)iscas.ac.cn> net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure Johan Hovold <johan(a)kernel.org> mmc: vub300: fix use-after-free on disconnect Johan Hovold <johan(a)kernel.org> mmc: vub300: fix NULL-deref on disconnect SeongJae Park <sj(a)kernel.org> mm/damon/stat: deallocate damon_call() failure leaking damon_ctx SeongJae Park <sj(a)kernel.org> mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails Hao Li <hao.li(a)linux.dev> mm/memory_hotplug: maintain N_NORMAL_MEMORY during hotplug Alex Dvoretsky <advoretsky(a)gmail.com> igb: remove napi_synchronize() in igb_down() Jacky Bai <ping.bai(a)nxp.com> pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled Michael Guralnik <michaelgur(a)nvidia.com> net/mlx5: Update the list of the PCI supported devices Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Do not use pipe_src as borders for SU area Sebastian Brzezinka <sebastian.brzezinka(a)intel.com> drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat Haoze Xie <royenheart(a)gmail.com> batman-adv: hold claim backbone gateways by reference David Carlier <devnexen(a)gmail.com> net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() Muhammad Alifa Ramdhan <ramdhan(a)starlabs.sg> net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption Borislav Petkov (AMD) <bp(a)alien8.de> EDAC/mc: Fix error path ordering in edac_mc_alloc() Lukas Wunner <lukas(a)wunner.de> X.509: Fix out-of-bounds access when parsing extensions Ruide Cao <caoruide123(a)gmail.com> batman-adv: reject oversized global TT response buffers Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: pn533: allocate rx skb before consuming bytes Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: sparrow-hawk: Reserve first 128 MiB of DRAM Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" Heiko Stuebner <heiko(a)sntech.de> Revert "arm64: dts: rockchip: Further describe the WiFi for the Pinebook Pro" Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86/intel-uncore-freq: Handle autonomous UFS status bit Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86: ISST: Reset core count to 0 Thomas Fourier <fourier.thomas(a)gmail.com> wifi: brcmsmac: Fix dma_free_coherent() size Oleh Konko <security(a)1seal.org> tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG Qi Tang <tpluszz77(a)gmail.com> xfrm: hold dev ref until after transport_finish NF_HOOK Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> xfrm: clear trailing padding in build_polexpire() Nathan Chancellor <nathan(a)kernel.org> modpost: Declare extra_warn with unused attribute Matthew Brost <matthew.brost(a)intel.com> workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works Michal Wilczynski <m.wilczynski(a)samsung.com> firmware: thead: Fix buffer overflow and use standard endian macros Tuan Do <tuan(a)calif.io> netfilter: nft_ct: fix use-after-free in timeout object destroy Anthony Pighin <anthony.pighin(a)nokia.com> i2c: imx: zero-initialize dma_slave_config for eDMA Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Give up GC if MSG_PEEK intervened. Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Simplify GC state. Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Count cyclic SCC. robbieko <robbieko(a)synology.com> btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() Filipe Manana <fdmanana(a)suse.com> btrfs: remove pointless out labels from extent-tree.c Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: mm: Rewrite TLB uniquification for the hidden bit feature Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: mm: Suppress TLB uniquification on EHINV hardware Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Always record SEGBITS in cpu_data.vmbits Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: uinput - take event lock when submitting FF request "event" Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Input: uinput - fix circular locking dependency with ff-core Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: separate dst_cache for input and output paths in seg6 lwtunnel Jiayuan Chen <jiayuan.chen(a)linux.dev> mptcp: fix slab-use-after-free in __inet_lookup_established Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Revert "mptcp: add needs_id for netlink appending addr" Takashi Iwai <tiwai(a)suse.de> Revert "ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone" Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: rfkill: prevent unlimited numbers of rfkill events from being created Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_report() Johan Hovold <johan(a)kernel.org> wifi: rt2x00usb: fix devres lifetime Nathan Rebello <nathan.c.rebello(a)gmail.com> usb: typec: ucsi: skip connector validation before init ------------- Diffstat: Makefile | 4 +- .../arm64/boot/dts/freescale/imx8mq-librem5-r3.dts | 2 +- arch/arm64/boot/dts/freescale/imx8mq-librem5.dtsi | 24 +- .../boot/dts/hisilicon/hi3798cv200-poplar.dts | 2 +- arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi | 1 + .../boot/dts/renesas/r8a779g3-sparrow-hawk.dts | 11 + .../boot/dts/rockchip/rk3399-pinebook-pro.dts | 18 -- arch/mips/include/asm/cpu-features.h | 1 - arch/mips/include/asm/cpu-info.h | 2 - arch/mips/include/asm/mipsregs.h | 2 + arch/mips/kernel/cpu-probe.c | 13 +- arch/mips/kernel/cpu-r3k-probe.c | 2 + arch/mips/mm/tlb-r4k.c | 285 +++++++++++++++++---- crypto/asymmetric_keys/x509_cert_parser.c | 8 +- drivers/edac/edac_mc.c | 6 +- drivers/firmware/thead,th1520-aon.c | 7 +- drivers/gpu/drm/i915/display/intel_psr.c | 30 ++- drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c | 26 +- drivers/i2c/busses/i2c-imx.c | 2 +- drivers/input/misc/uinput.c | 35 ++- drivers/mmc/host/vub300.c | 19 +- drivers/net/ethernet/altera/altera_tse_main.c | 1 + drivers/net/ethernet/intel/idpf/idpf_virtchnl.c | 20 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.h | 5 +- drivers/net/ethernet/intel/igb/igb_main.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 1 + .../net/ethernet/microchip/lan966x/lan966x_fdma.c | 28 +- drivers/net/ethernet/qualcomm/qca_uart.c | 2 +- drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 11 +- .../net/wireless/broadcom/brcm80211/brcmsmac/dma.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00usb.c | 2 +- drivers/nfc/pn533/uart.c | 11 +- .../x86/intel/speed_select_if/isst_tpmi_core.c | 2 + .../intel/uncore-frequency/uncore-frequency-tpmi.c | 8 +- drivers/pmdomain/imx/imx8mp-blk-ctrl.c | 8 +- drivers/usb/typec/ucsi/ucsi.c | 3 +- fs/btrfs/extent-tree.c | 24 +- include/linux/firmware/thead/thead,th1520-aon.h | 74 ------ include/net/netfilter/nf_conntrack_timeout.h | 1 + include/trace/events/rxrpc.h | 4 +- kernel/workqueue.c | 14 +- mm/damon/stat.c | 7 + mm/damon/sysfs.c | 3 +- mm/filemap.c | 11 +- mm/memory_hotplug.c | 20 ++ net/batman-adv/bridge_loop_avoidance.c | 27 +- net/batman-adv/translation-table.c | 9 +- net/core/skbuff.c | 5 +- net/ipv4/xfrm4_input.c | 5 +- net/ipv6/seg6_iptunnel.c | 34 ++- net/ipv6/xfrm6_input.c | 5 +- net/mptcp/pm_kernel.c | 24 +- net/mptcp/protocol.c | 2 + net/mptcp/protocol.h | 1 + net/mptcp/subflow.c | 15 +- net/netfilter/nft_ct.c | 2 +- net/rfkill/core.c | 35 ++- net/rxrpc/af_rxrpc.c | 6 - net/rxrpc/ar-internal.h | 2 +- net/rxrpc/call_object.c | 25 +- net/rxrpc/conn_event.c | 19 +- net/rxrpc/input_rack.c | 2 +- net/rxrpc/io_thread.c | 3 +- net/rxrpc/key.c | 40 +-- net/rxrpc/output.c | 2 + net/rxrpc/proc.c | 37 +-- net/rxrpc/rxgk.c | 19 +- net/rxrpc/rxkad.c | 63 +++-- net/rxrpc/sendmsg.c | 2 +- net/rxrpc/server_key.c | 3 + net/tipc/group.c | 6 +- net/tls/tls_sw.c | 10 + net/unix/af_unix.c | 2 + net/unix/af_unix.h | 1 + net/unix/garbage.c | 125 +++++---- net/xfrm/xfrm_input.c | 18 +- net/xfrm/xfrm_user.c | 3 + scripts/mod/modpost.c | 2 +- sound/hda/codecs/realtek/alc662.c | 9 - 79 files changed, 838 insertions(+), 490 deletions(-)

1 month

14
13
0 0

[PATCH 6.19 00/86] 6.19.13-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.19.13 release. There are 86 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 15 Apr 2026 15:57:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.13-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.19.13-rc1 Jiayuan Chen <jiayuan.chen(a)linux.dev> net: skb: fix cross-cache free of KFENCE-allocated skb head Pengpeng Hou <pengpeng(a)iscas.ac.cn> rxrpc: proc: size address buffers for %pISpc output Wang Jie <jiewang2024(a)lzu.edu.cn> rxrpc: only handle RESPONSE during service challenge David Howells <dhowells(a)redhat.com> rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of rxgk context in rxgk_verify_response() David Howells <dhowells(a)redhat.com> rxrpc: Fix integer overflow in rxgk_verify_response() David Howells <dhowells(a)redhat.com> rxrpc: Fix missing error checks for rxkad encryption/decryption failure David Howells <dhowells(a)redhat.com> rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) Luxiao Xu <rakukuip(a)gmail.com> rxrpc: fix reference count leak in rxrpc_server_keyring() Keenan Dong <keenanat2000(a)gmail.com> rxrpc: fix oversized RESPONSE authenticator length check Keenan Dong <keenanat2000(a)gmail.com> rxrpc: fix RESPONSE authenticator parser OOB read Yuqi Xu <xuyuqiabc(a)gmail.com> rxrpc: reject undecryptable rxkad response tickets Douya Le <ldy3087146292(a)gmail.com> rxrpc: Only put the call ref if one was acquired Marc Dionne <marc.c.dionne(a)gmail.com> rxrpc: Fix to request an ack if window is limited Anderson Nascimento <anderson(a)allelesecurity.com> rxrpc: Fix key reference count leak from call->key Alok Tiwari <alok.a.tiwari(a)oracle.com> rxrpc: Fix rack timer warning to report unexpected mode Alok Tiwari <alok.a.tiwari(a)oracle.com> rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial Oleh Konko <security(a)1seal.org> rxrpc: Fix RxGK token loading to check bounds David Howells <dhowells(a)redhat.com> rxrpc: Fix call removal to use RCU safe deletion David Howells <dhowells(a)redhat.com> rxrpc: Fix anonymous key handling David Howells <dhowells(a)redhat.com> rxrpc: Fix key parsing memleak David Howells <dhowells(a)redhat.com> rxrpc: Fix key quota calculation for multitoken keys David Carlier <devnexen(a)gmail.com> net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() David Carlier <devnexen(a)gmail.com> net: lan966x: fix page pool leak in error paths David Carlier <devnexen(a)gmail.com> net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: set the payload size before calling the async handler Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: improve locking around idpf_vc_xn_push_free() Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() Tyllis Xu <livelycarpet87(a)gmail.com> net: stmmac: fix integer underflow in chain mode Pengpeng Hou <pengpeng(a)iscas.ac.cn> net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure Johan Hovold <johan(a)kernel.org> mmc: vub300: fix use-after-free on disconnect Johan Hovold <johan(a)kernel.org> mmc: vub300: fix NULL-deref on disconnect SeongJae Park <sj(a)kernel.org> mm/damon/stat: deallocate damon_call() failure leaking damon_ctx SeongJae Park <sj(a)kernel.org> mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails Hao Li <hao.li(a)linux.dev> mm/memory_hotplug: maintain N_NORMAL_MEMORY during hotplug Sechang Lim <rhkrqnwk98(a)gmail.com> mm/vma: fix memory leak in __mmap_region() Alex Dvoretsky <advoretsky(a)gmail.com> igb: remove napi_synchronize() in igb_down() Jacky Bai <ping.bai(a)nxp.com> pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled Michael Guralnik <michaelgur(a)nvidia.com> net/mlx5: Update the list of the PCI supported devices Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Do not use pipe_src as borders for SU area Sebastian Brzezinka <sebastian.brzezinka(a)intel.com> drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat Haoze Xie <royenheart(a)gmail.com> batman-adv: hold claim backbone gateways by reference David Carlier <devnexen(a)gmail.com> net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() Muhammad Alifa Ramdhan <ramdhan(a)starlabs.sg> net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption Borislav Petkov (AMD) <bp(a)alien8.de> EDAC/mc: Fix error path ordering in edac_mc_alloc() Lukas Wunner <lukas(a)wunner.de> X.509: Fix out-of-bounds access when parsing extensions Ruide Cao <caoruide123(a)gmail.com> batman-adv: reject oversized global TT response buffers Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: pn533: allocate rx skb before consuming bytes Leo Timmins <leotimmins1974(a)gmail.com> liveupdate: propagate file deserialization failures Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: sparrow-hawk: Reserve first 128 MiB of DRAM Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" Heiko Stuebner <heiko(a)sntech.de> Revert "arm64: dts: rockchip: Further describe the WiFi for the Pinebook Pro" Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86/intel-uncore-freq: Handle autonomous UFS status bit Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86: ISST: Reset core count to 0 Yazen Ghannam <yazen.ghannam(a)amd.com> x86/mce/amd: Filter bogus hardware errors on Zen3 clients Thomas Fourier <fourier.thomas(a)gmail.com> wifi: brcmsmac: Fix dma_free_coherent() size Kai Vehmanen <kai.vehmanen(a)linux.intel.com> ASoC: SOF: Intel: hda: modify period size constraints for ACE4 Janne Grunau <j(a)jannau.net> kbuild: modules-cpio-pkg: Respect INSTALL_MOD_PATH Oleh Konko <security(a)1seal.org> tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG Qi Tang <tpluszz77(a)gmail.com> xfrm: hold dev ref until after transport_finish NF_HOOK Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> xfrm: clear trailing padding in build_polexpire() Nathan Chancellor <nathan(a)kernel.org> modpost: Declare extra_warn with unused attribute Matthew Brost <matthew.brost(a)intel.com> workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works Michal Wilczynski <m.wilczynski(a)samsung.com> firmware: thead: Fix buffer overflow and use standard endian macros Tuan Do <tuan(a)calif.io> netfilter: nft_ct: fix use-after-free in timeout object destroy Anthony Pighin <anthony.pighin(a)nokia.com> i2c: imx: zero-initialize dma_slave_config for eDMA robbieko <robbieko(a)synology.com> btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() Filipe Manana <fdmanana(a)suse.com> btrfs: remove pointless out labels from extent-tree.c Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: mm: Rewrite TLB uniquification for the hidden bit feature Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: mm: Suppress TLB uniquification on EHINV hardware Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Always record SEGBITS in cpu_data.vmbits Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: uinput - take event lock when submitting FF request "event" Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Input: uinput - fix circular locking dependency with ff-core Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: separate dst_cache for input and output paths in seg6 lwtunnel Jiayuan Chen <jiayuan.chen(a)linux.dev> mptcp: fix slab-use-after-free in __inet_lookup_established Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Revert "mptcp: add needs_id for netlink appending addr" Kai Vehmanen <kai.vehmanen(a)linux.intel.com> ALSA: hda/intel: enforce stricter period-size alignment for Intel NVL Takashi Iwai <tiwai(a)suse.de> Revert "ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone" Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: rfkill: prevent unlimited numbers of rfkill events from being created Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_report() Johan Hovold <johan(a)kernel.org> wifi: rt2x00usb: fix devres lifetime Nathan Rebello <nathan.c.rebello(a)gmail.com> usb: typec: ucsi: skip connector validation before init ------------- Diffstat: Makefile | 4 +- .../arm64/boot/dts/freescale/imx8mq-librem5-r3.dts | 2 +- arch/arm64/boot/dts/freescale/imx8mq-librem5.dtsi | 24 +- .../boot/dts/hisilicon/hi3798cv200-poplar.dts | 2 +- arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi | 1 + .../boot/dts/renesas/r8a779g3-sparrow-hawk.dts | 11 + .../boot/dts/rockchip/rk3399-pinebook-pro.dts | 18 -- arch/mips/include/asm/cpu-features.h | 1 - arch/mips/include/asm/cpu-info.h | 2 - arch/mips/include/asm/mipsregs.h | 2 + arch/mips/kernel/cpu-probe.c | 13 +- arch/mips/kernel/cpu-r3k-probe.c | 2 + arch/mips/mm/tlb-r4k.c | 285 +++++++++++++++++---- arch/x86/kernel/cpu/mce/amd.c | 8 + crypto/asymmetric_keys/x509_cert_parser.c | 8 +- drivers/edac/edac_mc.c | 6 +- drivers/firmware/thead,th1520-aon.c | 7 +- drivers/gpu/drm/i915/display/intel_psr.c | 30 ++- drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c | 26 +- drivers/i2c/busses/i2c-imx.c | 2 +- drivers/input/misc/uinput.c | 35 ++- drivers/mmc/host/vub300.c | 19 +- drivers/net/ethernet/altera/altera_tse_main.c | 1 + drivers/net/ethernet/intel/idpf/idpf_virtchnl.c | 20 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.h | 5 +- drivers/net/ethernet/intel/igb/igb_main.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 1 + .../net/ethernet/microchip/lan966x/lan966x_fdma.c | 28 +- drivers/net/ethernet/qualcomm/qca_uart.c | 2 +- drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 11 +- .../net/wireless/broadcom/brcm80211/brcmsmac/dma.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00usb.c | 2 +- drivers/nfc/pn533/uart.c | 11 +- .../x86/intel/speed_select_if/isst_tpmi_core.c | 2 + .../intel/uncore-frequency/uncore-frequency-tpmi.c | 8 +- drivers/pmdomain/imx/imx8mp-blk-ctrl.c | 8 +- drivers/usb/typec/ucsi/ucsi.c | 3 +- fs/btrfs/extent-tree.c | 24 +- include/linux/firmware/thead/thead,th1520-aon.h | 74 ------ include/net/netfilter/nf_conntrack_timeout.h | 1 + include/trace/events/rxrpc.h | 4 +- kernel/liveupdate/luo_session.c | 9 +- kernel/workqueue.c | 14 +- mm/damon/stat.c | 7 + mm/damon/sysfs.c | 3 +- mm/filemap.c | 11 +- mm/memory_hotplug.c | 20 ++ mm/vma.c | 7 + net/batman-adv/bridge_loop_avoidance.c | 27 +- net/batman-adv/translation-table.c | 9 +- net/core/skbuff.c | 5 +- net/ipv4/xfrm4_input.c | 5 +- net/ipv6/seg6_iptunnel.c | 34 ++- net/ipv6/xfrm6_input.c | 5 +- net/mptcp/pm_kernel.c | 24 +- net/mptcp/protocol.c | 2 + net/mptcp/protocol.h | 1 + net/mptcp/subflow.c | 15 +- net/netfilter/nft_ct.c | 2 +- net/rfkill/core.c | 35 ++- net/rxrpc/af_rxrpc.c | 6 - net/rxrpc/ar-internal.h | 2 +- net/rxrpc/call_object.c | 25 +- net/rxrpc/conn_event.c | 19 +- net/rxrpc/input_rack.c | 2 +- net/rxrpc/io_thread.c | 3 +- net/rxrpc/key.c | 40 +-- net/rxrpc/output.c | 2 + net/rxrpc/proc.c | 37 +-- net/rxrpc/rxgk.c | 19 +- net/rxrpc/rxkad.c | 63 +++-- net/rxrpc/sendmsg.c | 2 +- net/rxrpc/server_key.c | 3 + net/tipc/group.c | 6 +- net/tls/tls_sw.c | 10 + net/xfrm/xfrm_input.c | 18 +- net/xfrm/xfrm_user.c | 3 + scripts/Makefile.package | 3 +- scripts/mod/modpost.c | 2 +- sound/hda/codecs/realtek/alc662.c | 9 - sound/hda/controllers/intel.c | 7 +- sound/soc/sof/intel/hda-pcm.c | 14 +- 82 files changed, 795 insertions(+), 453 deletions(-)

1 month

14
13
0 0

[PATCH 6.6 00/50] 6.6.135-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.135 release. There are 50 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 15 Apr 2026 15:57:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.135-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.135-rc1 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" David Howells <dhowells(a)redhat.com> rxrpc: Fix missing error checks for rxkad encryption/decryption failure David Howells <dhowells(a)redhat.com> rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) Luxiao Xu <rakukuip(a)gmail.com> rxrpc: fix reference count leak in rxrpc_server_keyring() Yuqi Xu <xuyuqiabc(a)gmail.com> rxrpc: reject undecryptable rxkad response tickets Douya Le <ldy3087146292(a)gmail.com> rxrpc: Only put the call ref if one was acquired Anderson Nascimento <anderson(a)allelesecurity.com> rxrpc: Fix key reference count leak from call->key David Howells <dhowells(a)redhat.com> rxrpc: Fix call removal to use RCU safe deletion David Carlier <devnexen(a)gmail.com> net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() Tyllis Xu <livelycarpet87(a)gmail.com> net: stmmac: fix integer underflow in chain mode Pengpeng Hou <pengpeng(a)iscas.ac.cn> net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure Johan Hovold <johan(a)kernel.org> mmc: vub300: fix NULL-deref on disconnect Jacky Bai <ping.bai(a)nxp.com> pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled Michael Guralnik <michaelgur(a)nvidia.com> net/mlx5: Update the list of the PCI supported devices Sebastian Brzezinka <sebastian.brzezinka(a)intel.com> drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat Haoze Xie <royenheart(a)gmail.com> batman-adv: hold claim backbone gateways by reference David Carlier <devnexen(a)gmail.com> net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() Muhammad Alifa Ramdhan <ramdhan(a)starlabs.sg> net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption Borislav Petkov (AMD) <bp(a)alien8.de> EDAC/mc: Fix error path ordering in edac_mc_alloc() Lukas Wunner <lukas(a)wunner.de> X.509: Fix out-of-bounds access when parsing extensions Ruide Cao <caoruide123(a)gmail.com> batman-adv: reject oversized global TT response buffers Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: pn533: allocate rx skb before consuming bytes Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" Thomas Fourier <fourier.thomas(a)gmail.com> wifi: brcmsmac: Fix dma_free_coherent() size Oleh Konko <security(a)1seal.org> tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> xfrm: clear trailing padding in build_polexpire() Tuan Do <tuan(a)calif.io> netfilter: nft_ct: fix use-after-free in timeout object destroy Maarten Lankhorst <dev(a)lankhorst.se> Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: separate dst_cache for input and output paths in seg6 lwtunnel Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Revert "mptcp: add needs_id for netlink appending addr" Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: move list and spinlock inits from bind to alloc Li Xiasong <lixiasong1(a)huawei.com> mptcp: fix soft lockup in mptcp_recvmsg() Srujana Challa <schalla(a)marvell.com> virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN André Draszik <andre.draszik(a)linaro.org> scsi: ufs: core: Fix use-after free in init error and remove paths Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: mm: Rewrite TLB uniquification for the hidden bit feature Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: mm: Suppress TLB uniquification on EHINV hardware Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Always record SEGBITS in cpu_data.vmbits Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: uinput - take event lock when submitting FF request "event" Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Input: uinput - fix circular locking dependency with ff-core Jiayuan Chen <jiayuan.chen(a)linux.dev> mptcp: fix slab-use-after-free in __inet_lookup_established Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: rfkill: prevent unlimited numbers of rfkill events from being created Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_report() Johan Hovold <johan(a)kernel.org> wifi: rt2x00usb: fix devres lifetime Eric Biggers <ebiggers(a)kernel.org> lib/crypto: chacha: Zeroize permuted_state before it leaves scope ------------- Diffstat: Makefile | 4 +- .../arm64/boot/dts/freescale/imx8mq-librem5-r3.dts | 2 +- arch/arm64/boot/dts/freescale/imx8mq-librem5.dtsi | 24 +- .../boot/dts/hisilicon/hi3798cv200-poplar.dts | 2 +- arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi | 1 + arch/mips/include/asm/cpu-features.h | 1 - arch/mips/include/asm/cpu-info.h | 2 - arch/mips/include/asm/mipsregs.h | 2 + arch/mips/kernel/cpu-probe.c | 13 +- arch/mips/kernel/cpu-r3k-probe.c | 2 + arch/mips/mm/tlb-r4k.c | 285 +++++++++++++++++---- crypto/asymmetric_keys/x509_cert_parser.c | 8 +- drivers/edac/edac_mc.c | 6 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c | 26 +- drivers/input/misc/uinput.c | 35 ++- drivers/mmc/host/vub300.c | 2 +- drivers/net/ethernet/altera/altera_tse_main.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/main.c | 1 + .../net/ethernet/microchip/lan966x/lan966x_fdma.c | 2 + drivers/net/ethernet/qualcomm/qca_uart.c | 2 +- drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 11 +- drivers/net/virtio_net.c | 16 +- .../net/wireless/broadcom/brcm80211/brcmsmac/dma.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00usb.c | 2 +- drivers/nfc/pn533/uart.c | 11 +- drivers/pci/pci-driver.c | 8 - drivers/pci/pci.c | 10 +- drivers/pci/pci.h | 1 - drivers/pmdomain/imx/imx8mp-blk-ctrl.c | 8 +- drivers/ufs/core/ufshcd.c | 31 ++- drivers/ufs/host/ufshcd-pci.c | 2 - drivers/ufs/host/ufshcd-pltfrm.c | 25 +- drivers/usb/gadget/function/f_hid.c | 11 +- include/net/netfilter/nf_conntrack_timeout.h | 1 + include/trace/events/rxrpc.h | 2 +- include/ufs/ufshcd.h | 1 - lib/crypto/chacha.c | 4 + mm/filemap.c | 11 +- net/batman-adv/bridge_loop_avoidance.c | 27 +- net/batman-adv/translation-table.c | 9 +- net/ipv6/seg6_iptunnel.c | 41 ++- net/mptcp/pm_netlink.c | 24 +- net/mptcp/protocol.c | 13 +- net/mptcp/protocol.h | 1 + net/mptcp/subflow.c | 15 +- net/netfilter/nft_ct.c | 2 +- net/netfilter/nft_set_pipapo.c | 20 +- net/rfkill/core.c | 35 ++- net/rxrpc/af_rxrpc.c | 6 - net/rxrpc/call_object.c | 25 +- net/rxrpc/io_thread.c | 3 +- net/rxrpc/key.c | 2 +- net/rxrpc/rxkad.c | 63 +++-- net/rxrpc/server_key.c | 3 + net/tipc/group.c | 6 +- net/tls/tls_sw.c | 10 + net/xfrm/xfrm_user.c | 3 + sound/soc/generic/simple-card-utils.c | 7 +- 60 files changed, 599 insertions(+), 308 deletions(-)

1 month

13
12
0 0

[PATCH 5.10 000/491] 5.10.253-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.10.253 release. There are 491 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 15 Apr 2026 15:57:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.253-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.10.253-rc1 Jens Axboe <axboe(a)kernel.dk> io_uring/poll: correctly handle io_poll_add() return value on update Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" Yang Yingliang <yangyingliang(a)huawei.com> device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> s390/syscalls: Add spectre boundary for syscall dispatch table Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow secondary lookup in fwnode_get_next_child_node() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow error pointer to be passed to fwnode APIs Daniel Scally <djrscally(a)gmail.com> device property: Check fwnode->secondary when finding properties Daniel Scally <djrscally(a)gmail.com> device property: Check fwnode->secondary in fwnode_graph_get_next_endpoint() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Unify access to of_node Andy Shevchenko <andy.shevchenko(a)gmail.com> device property: Retrieve fwnode from of_node via accessor Daniel Scally <djrscally(a)gmail.com> media: device property: Return true in fwnode_device_is_available for NULL ops Saravana Kannan <saravanak(a)google.com> device property: Add fwnode_is_ancestor_of() and fwnode_get_next_parent_dev() Jaskaran Singh <jsingh(a)cloudlinux.com> nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() Jaskaran Singh <jsingh(a)cloudlinux.com> Revert "nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()" Penghe Geng <pgeng(a)nvidia.com> mmc: core: Avoid bitfield RMW for claim/retune flags Ulf Hansson <ulf.hansson(a)linaro.org> mmc: core: Drop reference counting of the bus_ops Ulf Hansson <ulf.hansson(a)linaro.org> mmc: core: Drop superfluous validations in mmc_hw|sw_reset() Ulf Hansson <ulf.hansson(a)linaro.org> mmc: core: Drop redundant member in struct mmc host Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Li Chen <me(a)linux.beauty> ext4: publish jinode after initialization Baokun Li <libaokun(a)linux.alibaba.com> ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: stop reclaim before pushing AIL during unmount Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: save ailp before dropping the AIL lock in push callbacks Zqiang <qiang.zhang(a)linux.dev> ext4: fix the might_sleep() warnings in kvfree() Jinjiang Tu <tujinjiang(a)huawei.com> mm/huge_memory: fix folio isn't locked in softleaf_to_folio() Kevin Hao <haokexin(a)gmail.com> net: macb: Move devm_{free,request}_irq() out of spin lock area Jimmy Hu <hhhuuu(a)google.com> usb: gadget: uvc: fix NULL pointer dereference during unbind race Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: move list and spinlock inits from bind to alloc Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: rfkill: prevent unlimited numbers of rfkill events from being created Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: separate dst_cache for input and output paths in seg6 lwtunnel Guangshuo Li <lgs201920130244(a)gmail.com> cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path Liao Chang <liaochang1(a)huawei.com> cpufreq: governor: Free dbs_data directly when gov->init() fails Florian Westphal <fw(a)strlen.de> netlink: add nla be16/32 types to minlen array Jon Hunter <jonathanh(a)nvidia.com> ASoC: tegra: Fix Master Volume Control Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-core: don't use discriminatory terms on snd_soc_runtime_get_dai_fmt() GuoHan Zhao <zhaoguohan(a)kylinos.cn> xen/privcmd: unregister xenstore notifier on module exit David Howells <dhowells(a)redhat.com> rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) Tyllis Xu <livelycarpet87(a)gmail.com> net: stmmac: fix integer underflow in chain mode Pengpeng Hou <pengpeng(a)iscas.ac.cn> net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure Johan Hovold <johan(a)kernel.org> mmc: vub300: fix NULL-deref on disconnect David Carlier <devnexen(a)gmail.com> net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() Ruide Cao <caoruide123(a)gmail.com> batman-adv: reject oversized global TT response buffers Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: pn533: allocate rx skb before consuming bytes Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges Shawn Guo <shawnguo(a)kernel.org> arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity Thomas Fourier <fourier.thomas(a)gmail.com> wifi: brcmsmac: Fix dma_free_coherent() size Oleh Konko <security(a)1seal.org> tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG Tuan Do <tuan(a)calif.io> netfilter: nft_ct: fix use-after-free in timeout object destroy John Johansen <john.johansen(a)canonical.com> apparmor: fix race between freeing data and fs accessing it John Johansen <john.johansen(a)canonical.com> apparmor: fix race on rawdata dereference John Johansen <john.johansen(a)canonical.com> apparmor: fix differential encoding verification John Johansen <john.johansen(a)canonical.com> apparmor: fix unprivileged local user can do privileged policy management John Johansen <john.johansen(a)canonical.com> apparmor: Fix double free of ns_name in aa_replace_profiles() Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix missing bounds check on DEFAULT table in verify_dfa() Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix side-effect bug in match_char() macro usage John Johansen <john.johansen(a)canonical.com> apparmor: fix: limit the number of levels of policy namespaces Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: replace recursive profile removal with iterative approach Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix memory leak in verify_header Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: validate DFA start states are in bounds in unpack_pdb Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Use heuristic to find stream entity Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Implement UVC_EXT_GPIO_UNIT Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Allow extra entities Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Move guid to entity David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather David Hildenbrand (Red Hat) <david(a)kernel.org> mm/rmap: fix two comments related to huge_pmd_unshare() David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix two comments related to huge_pmd_unshare() David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix hugetlb_pmd_shared() Jane Chu <jane.chu(a)oracle.com> mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count Miaohe Lin <linmiaohe(a)huawei.com> mm/hugetlb: make detecting shared pte more reliable David Hildenbrand (Arm) <david(a)kernel.org> mm/hugetlb: fix skipping of unsharing of pmd page tables Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: uinput - take event lock when submitting FF request "event" Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Input: uinput - fix circular locking dependency with ff-core Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> xfrm_user: fix info leak in build_report() Johan Hovold <johan(a)kernel.org> wifi: rt2x00usb: fix devres lifetime Eric Biggers <ebiggers(a)kernel.org> lib/crypto: chacha: Zeroize permuted_state before it leaves scope Jens Axboe <axboe(a)kernel.dk> io_uring/tctx: work around xa_store() allocation error issue Taegu Ha <hataegu0826(a)gmail.com> usb: gadget: f_uac1_legacy: validate control request size Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Protect RNDIS options with mutex Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix unbalanced refcnt in geth_free Cengiz Can <cengiz.can(a)canonical.com> nvmet-tcp: fix use-before-check of sg in bounds validation Sebastian Urban <surban(a)surban.net> usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix locking/synchronization error Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> thunderbolt: Fix property read in nhi_wake_supported() Yufan Chen <yufan.chen(a)linux.dev> net: ftgmac100: fix ring allocation unwind on open failure Yang Yang <n05ec(a)lzu.edu.cn> vxlan: validate ND option lengths in vxlan_na_create Yifan Wu <yifanwucs(a)gmail.com> netfilter: ipset: drop logically empty buckets in mtype_del Ian Abbott <abbotti(a)mev.co.uk> comedi: me4000: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: me_daq: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Fix invalid clean-up after failed attach Ian Abbott <abbotti(a)mev.co.uk> comedi: Reinit dev->spinlock between attachments to low-level drivers Deepanshu Kartikey <kartikey406(a)gmail.com> comedi: dt2815: add hardware detection to prevent crash Oliver Neukum <oneukum(a)suse.com> cdc-acm: new quirk for EPSON HMD Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: validate ND option lengths Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Move IRQ request in probe Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind Justin Chen <justin.chen(a)broadcom.com> usb: ehci-brcm: fix sleep during atomic Heitor Alves de Siqueira <halves(a)igalia.com> usb: usbtmc: Flush anchored URBs in usbtmc_release Guangshuo Li <lgs201920130244(a)gmail.com> usb: ulpi: fix double free in ulpi_register_interface() error path Miao Li <limiao(a)kylinos.cn> usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix out-of-sequence free_irq() Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Move iio_device_register() to correct location Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix irq resource leak Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix incorrect free_irq() variable Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only David Lechner <dlechner(a)baylibre.com> iio: light: vcnl4035: fix scan buffer on big-endian Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: dac: ad5770r: fix error return in ad5770r_read_raw() Zoltan Illes <zoliviragh(a)gmail.com> Input: xpad - add support for Razer Wolverine V3 Pro Christoffer Sandberg <cs(a)tuxedo.de> Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Bart Van Assche <bvanassche(a)acm.org> Input: synaptics-rmi4 - fix a locking bug in an error path JP Hein <jp(a)jphein.com> USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Wanquan Zhong <wanquan.zhong(a)fibocom.com> USB: serial: option: add support for Rolling Wireless RW135R-GL Frej Drejhammar <frej(a)stacken.kth.se> USB: serial: io_edgeport: add support for Blackbox IC135A Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: dp501: Fix initialization of SCU2C Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix division by zero in occ_show_power_1() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix the GCC version check for `__multi3' workaround Oleh Konko <security(a)1seal.org> Bluetooth: SMP: force responder MITM requirements before building the pairing response Oleh Konko <security(a)1seal.org> Bluetooth: SMP: derive legacy responder STK authentication from MITM state Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix missing SPDIFI1 index handling Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: fix stack out-of-bounds read in init_card Ernestas Kulik <ernestas.k(a)iconn-networks.com> USB: serial: option: add MeiG Smart SRM825WN Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/ioc32: stop speculation on the drm_compat_ioctl path Paul Walmsley <pjw(a)kernel.org> riscv: kgdb: fix several debug register assignment bugs Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix missing newline in occ_show_extended() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pxe1610) Check return value of page-select write in probe Alex Guo <alexguo1023(a)gmail.com> media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar Sasha Levin <sashal(a)kernel.org> Revert "media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar" David Jeffery <djeffery(a)redhat.com> scsi: core: Wake up the error handler when final completions race against each other Sasha Levin <sashal(a)kernel.org> Revert "scsi: core: Wake up the error handler when final completions race against each other" Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Add seqno waiter for sync_files Sasha Levin <sashal(a)kernel.org> Revert "drm/vmwgfx: Add seqno waiter for sync_files" Ard Biesheuvel <ardb(a)kernel.org> efi/mokvar-table: Avoid repeated map/unmap of the same page Eric Dumazet <edumazet(a)google.com> ipv6: avoid overflows in ip6_datagram_send_ctl() Xiang Mei <xmei5(a)asu.edu> net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xiang Mei <xmei5(a)asu.edu> net/sched: cls_fw: fix NULL pointer dereference on shared blocks Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix overflow when accumulating packets Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix potential double free of skb Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Avoid "No data available" when FW version queries fail Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: properly unregister fixed rate clocks Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix clk handling on PCI glue driver removal Weiming Shi <bestswngs(a)gmail.com> rds: ib: reject FRMR registration before IB connection is established Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate LTK enc_size on load Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: reject immediate NF_QUEUE verdict Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Qi Tang <tpluszz77(a)gmail.com> netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent Qi Tang <tpluszz77(a)gmail.com> netfilter: nf_conntrack_helper: pass helper to expect cleanup Florian Westphal <fw(a)strlen.de> netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Florian Westphal <fw(a)strlen.de> netfilter: x_tables: ensure names are nul-terminated Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: account for netlink header size Zhengchuan Liang <zcliangcn(a)gmail.com> net: ipv6: flowlabel: defer exclusive option free until RCU teardown Alexei Starovoitov <ast(a)kernel.org> bpf: Fix regsafe() for pointers to packet Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec Pengpeng Hou <pengpeng(a)iscas.ac.cn> NFC: pn533: bound the UART receive buffer Yochai Eisenrich <echelonh(a)gmail.com> net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Paolo Abeni <pabeni(a)redhat.com> ipv6: prevent possible UaF in addrconf_permanent_addr() Xiang Mei <xmei5(a)asu.edu> net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: linearize skb before parsing ND options Eric Dumazet <edumazet(a)google.com> ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Eric Dumazet <edumazet(a)google.com> ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Thomas Bogendoerfer <tbogendoerfer(a)suse.de> tg3: Fix race for querying speed/duplex Yochai Eisenrich <echelonh(a)gmail.com> net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Jiayuan Chen <jiayuan.chen(a)shopee.com> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Loic Poulain <loic.poulain(a)linaro.org> net: qrtr: Release distant nodes along the bridge node Loic Poulain <loic.poulain(a)linaro.org> net: qrtr: Add GFP flags parameter to qrtr_alloc_ctrl_packet Norbert Szetei <norbert(a)doyensec.com> crypto: af-alg - fix NULL pointer dereference in scatterwalk Lee Jones <lee(a)kernel.org> HID: multitouch: Check to ensure report responses match the request Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix Clang jump table detection Deepanshu Kartikey <kartikey406(a)gmail.com> atm: lec: fix use-after-free in sock_def_readable() Benoît Sevens <bsevens(a)google.com> HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Davidlohr Bueso <dave(a)stgolabs.net> futex: Clear stale exiting pointer in futex_lock_pi() retry path Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> dmaengine: xilinx_dma: Program interrupt delay timeout Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error when running device stats on multiple devices fs Mark Harmstone <mark(a)harmstone.com> btrfs: fix super block offset in error message in btrfs_validate_super() Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix dma_device directions Felix Gu <ustc.gu(a)gmail.com> phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() Helen Koike <koike(a)igalia.com> ext4: reject mount if bigalloc with s_first_data_block != 0 Ye Bin <yebin10(a)huawei.com> ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() Jan Kara <jack(a)suse.cz> ext4: make recently_deleted() properly work with lazy itable initialization Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: convert inline data to extents when truncate exceeds inline size Milos Nikic <nikic.milos(a)gmail.com> jbd2: gracefully abort on checkpointing state corruptions Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> scsi: ses: Handle positive SCSI error from ses_recv_diag() Tyllis Xu <livelycarpet87(a)gmail.com> scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Fix argument order in alarm_timer_forward() xietangxin <xietangxin(a)yeah.net> virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false Yuchan Nam <entropy1110(a)gmail.com> media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: conservative: Reset requested_freq on limits change Ali Norouzi <ali.norouzi(a)keysight.com> can: gw: fix OOB heap access in cgw_csum_crc8_rel() Vasily Gorbik <gor(a)linux.ibm.com> s390/barrier: Make array_index_mask_nospec() __always_inline Marc Kleine-Budde <mkl(a)pengutronix.de> spi: spi-fsl-lpspi: fix teardown order issue (UAF) Marc Buerg <buermarc(a)googlemail.com> sysctl: fix uninitialized variable in proc_do_large_bitmap Sanman Pradhan <psanman(a)juniper.net> hwmon: (adm1177) fix sysfs ABI violation and current unit conversion Weiming Shi <bestswngs(a)gmail.com> ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: EC: Install address space handler at the namespace root Hans de Goede <hdegoede(a)redhat.com> ACPI: EC: Fix ECDT probe ordering issues Hans de Goede <hdegoede(a)redhat.com> ACPI: EC: Fix EC address space handler unregistration Hans de Goede <hdegoede(a)redhat.com> ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps Hans de Goede <hdegoede(a)redhat.com> ACPICA: include/acpi/acpixf.h: Fix indentation Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Fix the device initialization Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> drm/i915/gmbus: fix spurious timeout on 512-byte burst reads Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size Andy Lutomirski <luto(a)kernel.org> x86/fault: Improve kernel-executing-user-memory handling Andy Lutomirski <luto(a)kernel.org> x86/fault: Fold mm_fault_error() into do_user_addr_fault() Yihang Li <liyihang9(a)huawei.com> scsi: scsi_transport_sas: Fix the maximum channel scanning issue Chuck Lever <chuck.lever(a)oracle.com> RDMA/rw: Fall back to direct SGE on MR pool exhaustion Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> regmap: Synchronize cache for the page selector Paolo Valerio <pvalerio(a)redhat.com> net: macb: use the current queue number for stats David Carlier <devnexen(a)gmail.com> netfilter: ctnetlink: use netlink policy range checks Florian Westphal <fw(a)strlen.de> netlink: allow be16 and be32 types in all uint policy checks Florian Westphal <fw(a)strlen.de> netlink: introduce bigendian integer types Jakub Kicinski <kuba(a)kernel.org> netlink: hide validation union fields from kdoc Florian Westphal <fw(a)strlen.de> netfilter: nft_payload: reject out-of-range attributes via policy Florian Westphal <fw(a)strlen.de> netlink: introduce NLA_POLICY_MAX_BE Weiming Shi <bestswngs(a)gmail.com> netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: skip expectations in other netns via proc Ren Wei <n05ec(a)lzu.edu.cn> netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Weiming Shi <bestswngs(a)gmail.com> netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: clamp SCO altsetting table indices Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop Miguel Ojeda <ojeda(a)kernel.org> dma-mapping: add missing `inline` for `dma_free_attrs` Wei Fang <wei.fang(a)nxp.com> net: enetc: fix the output issue of 'ethtool --show-ring' Yochai Eisenrich <echelonh(a)gmail.com> net: fix fanout UAF in packet_release() via NETDEV_UP race Alok Tiwari <alok.a.tiwari(a)oracle.com> platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size Qi Tang <tpluszz77(a)gmail.com> net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: validate MPLS set/set_masked payload length Toke Høiland-Jørgensen <toke(a)redhat.com> net: openvswitch: Avoid releasing netdev before teardown completes Jakub Kicinski <kuba(a)kernel.org> nfc: nci: fix circular locking dependency in nci_close_device Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: common: Fix probe failure for devices without EINT Helen Koike <koike(a)igalia.com> Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Anas Iqbal <mohd.abd.6602(a)gmail.com> Bluetooth: hci_ll: Fix firmware leak on error path Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() Oliver Hartkopp <socketcan(a)hartkopp.net> can: statistics: add missing atomic access in hot path Eric Dumazet <edumazet(a)google.com> af_key: validate families in pfkey_send_migrate() Sabrina Dubroca <sd(a)queasysnail.net> esp: fix skb leak with espintcp and async crypto Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Fix the usage of skb->sk Sabrina Dubroca <sd(a)queasysnail.net> xfrm: call xdo_dev_state_delete during state update Uzair Mughal <contact(a)uzair.is-a.dev> ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 Isaac J. Manjarres <isaacmanjarres(a)google.com> dma-buf: Include ioctl.h in UAPI header Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() Romain Sioen <romain.sioen(a)microchip.com> HID: mcp2221: cancel last I2C command on read error Keith Busch <kbusch(a)kernel.org> nvme-pci: ensure we're polling a polled queue Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 Leif Skunberg <diamondback(a)cohunt.app> platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 Günther Noack <gnoack(a)google.com> HID: asus: avoid memory leak in asus_report_fixup() Danilo Krummrich <dakr(a)kernel.org> sh: platform_early: remove pdev->driver_override check Juergen Gross <jgross(a)suse.com> xen/privcmd: add boot control for restricted usage in domU Juergen Gross <jgross(a)suse.com> xen/privcmd: restrict usage in unprivileged domU Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kdasu.kdev(a)gmail.com> mtd: rawnand: brcmnand: move to polling in pio mode on oops write Kamal Dasu <kdasu.kdev(a)gmail.com> mtd: rawnand: brcmnand: read/write oob during EDU transfer Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Andrii Melnychenko <a.melnychenko(a)vyos.io> netfilter: nft_ct: add seqadj extension for natted connections Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Florian Westphal <fw(a)strlen.de> netfilter: ctnetlink: remove refcounting in expectation dumpers Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq Ethan Tidmore <ethantidmore06(a)gmail.com> staging: rtl8723bs: fix null dereference in find_network Eric Biggers <ebiggers(a)kernel.org> net/tcp-md5: Fix MAC comparison to be constant-time Eric Biggers <ebiggers(a)kernel.org> smb: client: Compare MACs in constant time Mehul Rao <mehulrao(a)gmail.com> ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() Oswald Buddenhagen <oswald.buddenhagen(a)gmx.de> ALSA: pcm: fix wait_time calculations Sean Christopherson <seanjc(a)google.com> KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_can_open(): always configure bitrates before starting device Jiasheng Jiang <jiashengjiangcool(a)gmail.com> usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling Xu Yang <xu.yang_2(a)nxp.com> usb: roles: get usb role switch from parent only for usb-b-connector Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch when turning buffer off Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Corentin Labbe <clabbe(a)baylibre.com> mtd: partitions: redboot: fix style issues Jeff Layton <jlayton(a)kernel.org> nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Chuck Lever <chuck.lever(a)oracle.com> NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Tom Rix <trix(a)redhat.com> nfsd: define exports_proc_ops with CONFIG_PROC_FS Catalin Marinas <catalin.marinas(a)arm.com> arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation Thomas Fourier <fourier.thomas(a)gmail.com> drm/msm: Fix dma_free_attrs() buffer size Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OOM ->tfm_count leak Long Li <leo.lilong(a)huawei.com> xfs: fix integer overflow in bmap intent sort comparator Long Li <leo.lilong(a)huawei.com> xfs: ensure dquot item is deleted from AIL only after log shutdown Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix iface port assignment in parse_server_interfaces Paulo Alcantara <pc(a)manguebit.org> smb: client: fix atomic open with O_DIRECT & O_SYNC Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: light: bh1780: fix PM runtime leak on error path Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Fix broken reset status read Huiwen He <hehuiwen(a)kylinos.cn> tracing: Fix syscall events activation by ensuring refcount hits zero Darrick J. Wong <djwong(a)kernel.org> iomap: reject delalloc mappings during writeback Heiko Carstens <hca(a)linux.ibm.com> s390/xor: Fix xor_xc_2() inline assembly constraints Paul Moses <p(a)1g4.org> net/sched: act_gate: snapshot parameters with RCU on replace Natalie Vock <natalie.vock(a)gmx.de> drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink Andrew Lunn <andrew(a)lunn.ch> net: phy: register phy led_triggers during probe to avoid AB-BA deadlock Thorsten Blum <thorsten.blum(a)linux.dev> smb: client: Don't log plaintext credentials in cifs_set_cifscreds Daniil Dulov <d.dulov(a)aladdin.ru> wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Vahagn Vardanian <vahagn(a)redrays.io> wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() Daniel Hodges <git(a)danielhodges.dev> wifi: libertas: fix use-after-free in lbs_free_adapter() Damien Le Moal <dlemoal(a)kernel.org> ata: libata-scsi: refactor ata_scsi_translate() Hannes Reinecke <hare(a)suse.de> ata: libata: remove pointless VPRINTK() calls Brian Foster <bfoster(a)redhat.com> ext4: fix dirtyclusters double decrement on fs shutdown Zhang Yi <yi.zhang(a)huawei.com> ext4: drop extent cache when splitting extent fails Zhang Yi <yi.zhang(a)huawei.com> ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: fix to avoid directly dereferencing user pointer Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() Ankit Garg <nktgrg(a)google.com> gve: defer interrupt enabling until NAPI registration Frederic Weisbecker <frederic(a)kernel.org> net: Handle napi_schedule() calls from non-interrupt Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Jens Axboe <axboe(a)kernel.dk> io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop Eric Dumazet <edumazet(a)google.com> l2tp: do not use sock_hold() in pppol2tp_session_get_sock() Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Forget ranges when refining tnum after JSET Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch to the same value Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-i2c: fix pm_runtime error handling Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-core: fix pm_runtime error handling Chris Spencer <spencercw(a)gmail.com> iio: chemical: bme680: Fix measurement wait duration calculation Lukas Schmid <lukas.schmid(a)netcube.li> iio: potentiometer: mcp4131: fix double application of wiper shift Oleksij Rempel <linux(a)rempel-privat.de> iio: dac: ds4424: reject -128 RAW value Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update root in the received subvol ioctl Josh Law <objecting(a)objecting.org> lib/bootconfig: check bounds before writing in __xbc_open_brace() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() Shashank Balaji <shashank.mahadasyam(a)sony.com> x86/apic: Disable x2apic on resume if the kernel expects so Josh Law <objecting(a)objecting.org> lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error Calvin Owens <calvin(a)wbinvd.org> tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Alysa Liu <Alysa.Liu(a)amd.com> drm/amdgpu: Fix use-after-free race in VM acquire Fan Wu <fanwu01(a)zju.edu.cn> net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Jian Zhang <zhangjian.3032(a)bytedance.com> net: ncsi: fix skb leak in error paths Helge Deller <deller(a)gmx.de> parisc: Fix initial page table creation for boot Dave Airlie <airlied(a)redhat.com> nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Helge Deller <deller(a)gmx.de> parisc: Increase initial mapping to 64 MB with KALLSYMS Sven Eckelmann <sven(a)narfation.org> batman-adv: Avoid double-rtnl_lock ELP metric worker Ariel Silver <arielsilver77(a)gmail.com> media: dvb-net: fix OOB access in ULE extension header tables Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Luka Gejak <luka.gejak(a)linux.dev> staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Steven Rostedt <rostedt(a)goodmis.org> time/jiffies: Mark jiffies_64_to_clock_t() notrace Randy Dunlap <rdunlap(a)infradead.org> time: add kernel-doc in time.c Max Kellermann <max.kellermann(a)ionos.com> ceph: fix i_nlink underrun during async unlink Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Mehul Rao <mehulrao(a)gmail.com> tipc: fix divide-by-zero in tipc_sk_filter_connect() Felix Gu <ustc.gu(a)gmail.com> mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() Kalesh Singh <kaleshsingh(a)google.com> mm/tracing: rss_stat: ensure curr is false from kthread context Ziyi Guo <n7l8m4(a)u.northwestern.edu> usb: image: mdc800: kill download URB on timeout Oliver Neukum <oneukum(a)suse.com> usb: mdc800: handle signal and read racing Fan Wu <fanwu01(a)zju.edu.cn> usb: renesas_usbhs: fix use-after-free in ISR during device removal Oliver Neukum <oneukum(a)suse.com> usb: class: cdc-wdm: fix reordering issue in read code path Alan Stern <stern(a)rowland.harvard.edu> USB: core: Limit the length of unkillable synchronous timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbcore: Introduce usb_bulk_msg_killable() Marc Zyngier <maz(a)kernel.org> usb: cdc-acm: Restore CAP_BRK functionnality to CH343 Gabor Juhos <j4g8y7(a)gmail.com> usb: core: don't power off roothub PHYs if phy_set_mode() fails Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: misc: uss720: properly clean up reference in uss720_probe() Oliver Neukum <oneukum(a)suse.com> usb: yurex: fix race in probe Zilin Guan <zilin(a)seu.edu.cn> usb: xhci: Fix memory leak in xhci_disable_slot() Christoffer Sandberg <cs(a)tuxedo.de> usb/core/quirks: Add Huawei ME906S-device to wakeup quirk Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: skip LTM configuration for LAN7850 Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: fix silent drop of packets with checksum errors Qingye Zhao <zhaoqingye(a)honor.com> cgroup: fix race between task migration and iteration Casey Connolly <casey.connolly(a)linaro.org> ASoC: detect empty DMI strings Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition Ben Dooks <ben.dooks(a)codethink.co.uk> ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Matt Vollrath <tactii(a)gmail.com> e1000/e1000e: Fix leak in DMA error cleanup Alok Tiwari <alok.a.tiwari(a)oracle.com> i40e: fix src IP mask checks and memcpy argument names in cloud filter Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Make skipping governor callbacks more consistent Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct interrupt type Frieder Schrempf <frieder.schrempf(a)kontron.de> regulator: pca9450: Make IRQ optional Yuan Tan <tanyuan98(a)outlook.com> netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path David Dull <monderasdor(a)gmail.com> netfilter: x_tables: guard option walkers against 1-byte tail reads Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() Wenyuan Li <2063309626(a)qq.com> can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> serial: caif: hold tty->link reference in ldisc_open and ser_release matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: flush delayed work before removing DAIs and widgets Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: core: Do not call link_exit() on uninitialized rtd objects Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: core: Exit all links before removing their components Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-core: accept zero format at snd_soc_runtime_set_dai_fmt() Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-core: add snd_soc_runtime_get_dai_fmt() Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-core: move snd_soc_runtime_set_dai_fmt() to upside Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: don't indicate error message for snd_soc_[pcm_]dai_xxx() Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> ASoC: topology: use inclusive language for bclk and fsync matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: drop delayed_work_pending() check before flush Weiming Shi <bestswngs(a)gmail.com> net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Hangbin Liu <liuhangbin(a)gmail.com> bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states J. Neuschäfer <j.ne(a)posteo.net> powerpc: 83xx: km83xx: Fix keymile vendor prefix Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: sysmon: Correct subsys_name_len type in QMI request Christophe Leroy (CS GROUP) <chleroy(a)kernel.org> powerpc/uaccess: Fix inline assembly for clang build on PPC32 Tomas Henzl <thenzl(a)redhat.com> scsi: ses: Fix devices attaching to different hosts Sofia Schneider <sofia(a)schn.dev> ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Al Viro <viro(a)zeniv.linux.org.uk> unshare: fix unshare_fs() handling Piotr Mazek <pmazek(a)outlook.com> ACPI: PM: Save NVS memory on Lenovo G70-35 Jan Kiszka <jan.kiszka(a)siemens.com> scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT Jiayuan Chen <jiayuan.chen(a)shopee.com> net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop Fernando Fernandez Mancera <fmancera(a)suse.de> net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled Fernando Fernandez Mancera <fmancera(a)suse.de> net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled Jakub Kicinski <kuba(a)kernel.org> nfc: rawsock: cancel tx_work before socket teardown Jakub Kicinski <kuba(a)kernel.org> nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback Jakub Kicinski <kuba(a)kernel.org> nfc: nci: free skb on nci_transceive early error paths Ian Ray <ian.ray(a)gehealthcare.com> net: nfc: nci: Fix zero-length proprietary notifications Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix sleep while atomic on suspend/resume Jakub Kicinski <kuba(a)kernel.org> ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() David Thomson <dt(a)linux-mail.net> xen/acpi-processor: fix _CST detection using undersized evaluation buffer Eric Dumazet <edumazet(a)google.com> indirect_call_wrapper: do not reevaluate function pointer Bart Van Assche <bvanassche(a)acm.org> wifi: wlcore: Fix a locking bug Bart Van Assche <bvanassche(a)acm.org> wifi: cw1200: Fix locking in error paths Alban Bedel <alban.bedel(a)lht.dlh.de> can: mcp251x: fix deadlock in error path of mcp251x_open Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix locking for bcm_op runtime updates Jiayuan Chen <jiayuan.chen(a)shopee.com> atm: lec: fix null-ptr-deref in lec_arp_clear_vccs Chintan Vankar <c-vankar(a)ti.com> net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table Jonathan Teh <jonathan.teh(a)outlook.com> platform/x86: thinkpad_acpi: Fix errors reading battery thresholds Paolo Abeni <pabeni(a)redhat.com> selftests: mptcp: more stable simult_flows tests Lars Ellenberg <lars.ellenberg(a)linbit.com> drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Phillip Lougher <phillip(a)squashfs.org.uk> Squashfs: check metadata block offset is within range Davide Caratti <dcaratti(a)redhat.com> net/sched: ets: fix divide by zero in the offload path Jason Gunthorpe <jgg(a)ziepe.ca> IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Johannes Berg <johannes.berg(a)intel.com> wifi: radiotap: reject radiotap with unknown bits Jun Seo <jun.seo.93(a)proton.me> ALSA: usb-audio: Use correct version for UAC3 header validation Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: defer freeing of boot services memory Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ucan: Fix infinite loop from zero-length messages Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: pegasus: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kalmia: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kaweth: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> nfc: pn533: properly drop the usb interface reference on disconnect Jens Axboe <axboe(a)kernel.dk> media: dvb-core: fix wrong reinitialization of ringbuffer on reopen Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: arcnet: com20020-pci: fix support for 2.5Mbit cards Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 Gui-Dong Han <hanguidong02(a)gmail.com> hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 Johan Hovold <johan(a)kernel.org> clk: tegra: tegra124-emc: fix device leak on set_rate() Johan Hovold <johan(a)kernel.org> bus: omap-ocp2scp: fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> bus: omap-ocp2scp: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> drm/tegra: dsi: fix device leak on probe Gui-Dong Han <hanguidong02(a)gmail.com> bus: fsl-mc: fix use-after-free in driver_override_show() Chelsy Ratnawat <chelsyratnawat2001(a)gmail.com> bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions Wentao Liang <vulab(a)iscas.ac.cn> ARM: omap2: Fix reference count leaks in omap_control_init() Wang Qing <wangqing(a)vivo.com> ARM: OMAP2+: add missing of_node_put before break and return Mark Harmstone <mark(a)harmstone.com> btrfs: fix incorrect key offset in error message in check_dev_extent_item() Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Cap the packet size pre-calculations Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume Mathias Krause <minipli(a)grsecurity.net> scsi: lpfc: Properly set WC for DPP mapping Ben Hutchings <ben(a)decadent.org.uk> ip6_tunnel: Fix usage of skb_vlan_inet_prepare() Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> ARM: clean up the memset64() C wrapper ------------- Diffstat: Documentation/hwmon/adm1177.rst | 8 +- Makefile | 4 +- arch/arm/include/asm/string.h | 14 +- arch/arm/mach-omap2/cm_common.c | 8 +- arch/arm/mach-omap2/control.c | 29 +- arch/arm/mach-omap2/prm_common.c | 8 +- .../boot/dts/hisilicon/hi3798cv200-poplar.dts | 2 +- arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi | 1 + arch/arm64/include/asm/pgtable-prot.h | 10 +- arch/mips/lib/multi3.c | 6 +- arch/parisc/include/asm/pgtable.h | 2 +- arch/parisc/kernel/head.S | 7 +- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/platforms/83xx/km83xx.c | 4 +- arch/riscv/kernel/kgdb.c | 7 +- arch/s390/include/asm/barrier.h | 4 +- arch/s390/kernel/entry.S | 7 +- arch/s390/lib/xor.c | 4 +- arch/sh/drivers/platform_early.c | 4 - arch/x86/include/asm/efi.h | 2 +- arch/x86/kernel/apic/apic.c | 6 + arch/x86/kvm/svm/avic.c | 2 +- arch/x86/kvm/svm/svm.c | 2 +- arch/x86/mm/fault.c | 118 +++---- arch/x86/platform/efi/efi.c | 2 +- arch/x86/platform/efi/quirks.c | 55 +++- crypto/af_alg.c | 4 +- drivers/acpi/acpica/evxfregn.c | 92 +++++- drivers/acpi/ec.c | 49 ++- drivers/acpi/osi.c | 13 + drivers/acpi/osl.c | 2 +- drivers/acpi/sleep.c | 8 + drivers/ata/libata-core.c | 3 - drivers/ata/libata-sata.c | 2 - drivers/ata/libata-scsi.c | 123 +++----- drivers/ata/libata-sff.c | 4 - drivers/ata/libata.h | 1 - drivers/base/power/runtime.c | 1 + drivers/base/property.c | 205 ++++++++---- drivers/base/regmap/regmap.c | 30 +- drivers/block/drbd/drbd_actlog.c | 53 ++-- drivers/block/drbd/drbd_interval.h | 5 +- drivers/bluetooth/btusb.c | 5 +- drivers/bluetooth/hci_ll.c | 2 + drivers/bus/fsl-mc/fsl-mc-bus.c | 10 +- drivers/bus/omap-ocp2scp.c | 19 +- drivers/clk/tegra/clk-tegra124-emc.c | 2 +- drivers/cpufreq/cpufreq_conservative.c | 12 + drivers/cpufreq/cpufreq_governor.c | 13 +- drivers/cpufreq/cpufreq_governor.h | 1 + drivers/cpuidle/cpuidle.c | 10 - drivers/crypto/atmel-sha204a.c | 5 +- drivers/dma/xilinx/xilinx_dma.c | 66 ++-- drivers/firmware/efi/mokvar-table.c | 20 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 +- drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/exynos/exynos_drm_drv.h | 1 + drivers/gpu/drm/exynos/exynos_drm_vidi.c | 72 ++++- drivers/gpu/drm/i915/display/intel_gmbus.c | 4 +- drivers/gpu/drm/msm/msm_gpummu.c | 2 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/tegra/dsi.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 4 +- drivers/hid/hid-asus.c | 15 +- drivers/hid/hid-cmedia.c | 2 +- drivers/hid/hid-creative-sb0540.c | 2 +- drivers/hid/hid-mcp2221.c | 2 + drivers/hid/hid-multitouch.c | 7 + drivers/hid/hid-zydacron.c | 2 +- drivers/hid/wacom_wac.c | 10 + drivers/hwmon/adm1177.c | 54 ++-- drivers/hwmon/max16065.c | 26 +- drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/i2c/busses/i2c-fsi.c | 1 + drivers/iio/chemical/bme680_core.c | 2 +- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/dac/ds4424.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 50 ++- drivers/iio/gyro/mpu3050-i2c.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 3 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 + drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4 + drivers/iio/light/bh1780.c | 4 +- drivers/iio/light/vcnl4035.c | 18 +- drivers/iio/potentiometer/mcp4131.c | 2 +- drivers/infiniband/core/rw.c | 27 +- drivers/infiniband/hw/mthca/mthca_provider.c | 5 +- drivers/input/joystick/xpad.c | 2 + drivers/input/misc/uinput.c | 35 ++- drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/iommu/intel/dmar.c | 3 +- drivers/irqchip/irq-gic-v3-its.c | 4 + drivers/media/dvb-core/dmxdev.c | 4 +- drivers/media/dvb-core/dvb_net.c | 3 + drivers/media/dvb-frontends/dib7000p.c | 10 +- drivers/media/mc/mc-request.c | 5 + drivers/media/usb/uvc/uvc_ctrl.c | 33 +- drivers/media/usb/uvc/uvc_driver.c | 234 ++++++++++++-- drivers/media/usb/uvc/uvc_entity.c | 1 + drivers/media/usb/uvc/uvcvideo.h | 27 +- drivers/media/v4l2-core/v4l2-ioctl.c | 5 +- drivers/mmc/core/block.c | 2 +- drivers/mmc/core/core.c | 110 +------ drivers/mmc/host/mmci_qcom_dml.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mmc/host/vub300.c | 2 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 63 +++- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/parsers/redboot.c | 71 +++-- drivers/net/arcnet/com20020-pci.c | 16 +- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 8 +- drivers/net/caif/caif_serial.c | 3 + drivers/net/can/spi/hi311x.c | 5 +- drivers/net/can/spi/mcp251x.c | 15 +- drivers/net/can/usb/ems_usb.c | 7 +- drivers/net/can/usb/gs_usb.c | 13 +- drivers/net/can/usb/ucan.c | 2 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/ethernet/altera/altera_tse_main.c | 1 + drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 10 - drivers/net/ethernet/amd/xgbe/xgbe-main.c | 1 - drivers/net/ethernet/amd/xgbe/xgbe.h | 3 - drivers/net/ethernet/arc/emac_main.c | 11 + drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/broadcom/tg3.c | 2 +- drivers/net/ethernet/cadence/macb_main.c | 18 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 2 + drivers/net/ethernet/google/gve/gve.h | 1 + drivers/net/ethernet/google/gve/gve_main.c | 5 +- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 - drivers/net/ethernet/intel/e1000e/netdev.c | 2 - drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 +- drivers/net/ethernet/intel/igc/igc_main.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++- .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/qualcomm/qca_uart.c | 2 +- drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 11 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/net/ethernet/ti/cpsw_ale.c | 9 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/phy/phy_device.c | 13 +- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/kalmia.c | 7 + drivers/net/usb/kaweth.c | 13 + drivers/net/usb/lan78xx.c | 8 +- drivers/net/usb/lan78xx.h | 3 + drivers/net/usb/pegasus.c | 13 +- drivers/net/virtio_net.c | 1 + drivers/net/vxlan/vxlan_core.c | 11 +- .../net/wireless/broadcom/brcm80211/brcmsmac/dma.c | 2 +- drivers/net/wireless/marvell/libertas/main.c | 4 +- drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00usb.c | 2 +- drivers/net/wireless/st/cw1200/pm.c | 2 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nfc/pn533/uart.c | 14 +- drivers/nfc/pn533/usb.c | 1 + drivers/nvdimm/bus.c | 5 +- drivers/nvme/host/fc.c | 2 +- drivers/nvme/host/pci.c | 5 +- drivers/nvme/target/tcp.c | 6 +- drivers/pci/pci-driver.c | 8 - drivers/pci/pci.c | 10 +- drivers/pci/pci.h | 1 - drivers/phy/renesas/phy-rcar-gen3-usb2.c | 122 +++++--- drivers/phy/ti/phy-j721e-wiz.c | 2 + drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 9 +- drivers/platform/olpc/olpc-xo175-ec.c | 2 +- drivers/platform/x86/intel-hid.c | 7 + drivers/platform/x86/thinkpad_acpi.c | 6 +- drivers/platform/x86/touchscreen_dmi.c | 18 ++ drivers/regulator/pca9450-regulator.c | 41 ++- drivers/remoteproc/qcom_sysmon.c | 2 +- drivers/s390/crypto/zcrypt_ccamisc.c | 12 +- drivers/s390/crypto/zcrypt_cex4.c | 3 +- drivers/scsi/ibmvscsi/ibmvfc.c | 3 +- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/lpfc/lpfc_sli.c | 36 ++- drivers/scsi/lpfc/lpfc_sli4.h | 3 + drivers/scsi/scsi_lib.c | 3 +- drivers/scsi/scsi_transport_sas.c | 2 +- drivers/scsi/ses.c | 7 +- drivers/scsi/storvsc_drv.c | 5 +- drivers/scsi/ufs/ufshcd.c | 18 +- drivers/soc/bcm/bcm2835-power.c | 33 +- drivers/soc/fsl/qbman/qman.c | 24 +- drivers/spi/spi-fsl-lpspi.c | 3 +- drivers/staging/comedi/drivers.c | 8 + drivers/staging/comedi/drivers/dt2815.c | 12 + drivers/staging/comedi/drivers/me4000.c | 16 +- drivers/staging/comedi/drivers/me_daq.c | 35 ++- drivers/staging/comedi/drivers/ni_atmio16d.c | 3 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 16 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 13 +- drivers/thunderbolt/nhi.c | 2 +- drivers/tty/serial/8250/8250_dma.c | 15 + drivers/tty/serial/8250/8250_pci.c | 17 + drivers/tty/serial/8250/8250_port.c | 6 + drivers/usb/class/cdc-acm.c | 14 + drivers/usb/class/cdc-acm.h | 2 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/class/usbtmc.c | 9 +- drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/message.c | 97 ++++-- drivers/usb/core/phy.c | 8 +- drivers/usb/core/quirks.c | 7 + drivers/usb/gadget/function/f_hid.c | 11 +- drivers/usb/gadget/function/f_rndis.c | 3 + drivers/usb/gadget/function/f_subset.c | 7 + drivers/usb/gadget/function/f_tcm.c | 14 + drivers/usb/gadget/function/f_uac1_legacy.c | 47 ++- drivers/usb/gadget/function/f_uvc.c | 46 ++- drivers/usb/gadget/function/u_ether.c | 8 +- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 13 +- drivers/usb/gadget/udc/dummy_hcd.c | 13 +- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/host/xhci.c | 4 +- drivers/usb/image/mdc800.c | 6 +- drivers/usb/misc/uss720.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/renesas_usbhs/common.c | 9 + drivers/usb/roles/class.c | 7 +- drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + drivers/xen/privcmd.c | 76 ++++- drivers/xen/xen-acpi-processor.c | 7 +- fs/btrfs/disk-io.c | 4 +- fs/btrfs/ioctl.c | 3 +- fs/btrfs/tree-checker.c | 2 +- fs/btrfs/volumes.c | 5 +- fs/ceph/dir.c | 15 +- fs/cifs/cifsencrypt.c | 3 +- fs/cifs/cifsglob.h | 11 + fs/cifs/connect.c | 1 - fs/cifs/dir.c | 1 + fs/cifs/file.c | 17 +- fs/cifs/smb2ops.c | 18 +- fs/cifs/smb2transport.c | 4 +- fs/ext4/extents.c | 22 +- fs/ext4/fast_commit.c | 17 +- fs/ext4/ialloc.c | 6 + fs/ext4/inode.c | 27 +- fs/ext4/mballoc.c | 37 +-- fs/ext4/super.c | 13 +- fs/iomap/buffered-io.c | 7 +- fs/jbd2/checkpoint.c | 15 +- fs/nfsd/nfs4xdr.c | 9 +- fs/nfsd/nfsctl.c | 31 +- fs/nfsd/state.h | 17 +- fs/squashfs/cache.c | 3 + fs/xfs/xfs_bmap_item.c | 3 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_dquot_item.c | 9 +- fs/xfs/xfs_inode_item.c | 9 +- fs/xfs/xfs_mount.c | 7 +- include/acpi/acpixf.h | 138 +++++---- include/asm-generic/tlb.h | 77 ++++- include/linux/dma-mapping.h | 4 +- include/linux/fwnode.h | 10 +- include/linux/hugetlb.h | 17 +- include/linux/indirect_call_wrapper.h | 18 +- include/linux/irqchip/arm-gic-v3.h | 1 + include/linux/mm_types.h | 2 + include/linux/mmc/host.h | 12 +- include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/property.h | 5 +- include/linux/security.h | 1 + include/linux/swapops.h | 6 + include/linux/usb.h | 8 +- include/net/netfilter/nf_conntrack_timeout.h | 1 + include/net/netfilter/nf_tables.h | 5 + include/net/netlink.h | 39 ++- include/net/tc_act/tc_gate.h | 33 +- include/net/udp_tunnel.h | 2 +- include/sound/soc-dai.h | 85 ++++- include/sound/soc.h | 2 + include/trace/events/kmem.h | 8 +- include/uapi/linux/dma-buf.h | 1 + include/uapi/linux/netfilter/nf_conntrack_common.h | 4 + include/uapi/sound/asoc.h | 22 +- io_uring/io-wq.c | 2 +- io_uring/io_uring.c | 39 ++- kernel/bpf/verifier.c | 11 +- kernel/cgroup/cgroup.c | 1 + kernel/fork.c | 2 +- kernel/futex/core.c | 3 +- kernel/sched/idle.c | 39 ++- kernel/sysctl.c | 2 +- kernel/time/alarmtimer.c | 2 +- kernel/time/time.c | 171 +++++++++- kernel/trace/trace.c | 6 +- kernel/trace/trace_events.c | 51 ++- lib/bootconfig.c | 6 +- lib/crypto/chacha.c | 4 + lib/nlattr.c | 22 ++ mm/hugetlb.c | 143 ++++----- mm/mmu_gather.c | 36 +++ mm/rmap.c | 20 +- net/atm/lec.c | 98 +++--- net/atm/lec.h | 2 +- net/batman-adv/bat_iv_ogm.c | 3 + net/batman-adv/bat_v_elp.c | 10 +- net/batman-adv/hard-interface.c | 8 +- net/batman-adv/hard-interface.h | 1 + net/batman-adv/translation-table.c | 9 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 55 +++- net/bluetooth/l2cap_sock.c | 3 + net/bluetooth/mgmt.c | 3 + net/bluetooth/smp.c | 13 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/bridge/br_device.c | 2 +- net/bridge/br_input.c | 2 +- net/can/af_can.c | 4 +- net/can/af_can.h | 2 +- net/can/bcm.c | 1 + net/can/gw.c | 6 +- net/can/proc.c | 3 +- net/ceph/auth.c | 6 +- net/core/dev.c | 2 +- net/core/rtnetlink.c | 9 +- net/ipv4/esp4.c | 11 +- net/ipv4/icmp.c | 4 +- net/ipv4/tcp_ipv4.c | 5 +- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 + net/ipv6/esp6.c | 11 +- net/ipv6/icmp.c | 3 + net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 7 +- net/ipv6/ndisc.c | 3 + net/ipv6/netfilter/ip6t_rt.c | 4 + net/ipv6/route.c | 11 +- net/ipv6/seg6_iptunnel.c | 34 +- net/ipv6/tcp_ipv6.c | 5 +- net/ipv6/xfrm6_output.c | 4 +- net/key/af_key.c | 19 +- net/l2tp/l2tp_ppp.c | 25 +- net/mac80211/mesh.c | 6 + net/ncsi/ncsi-aen.c | 3 +- net/ncsi/ncsi-rsp.c | 16 +- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_expect.c | 4 + net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_helper.c | 2 +- net/netfilter/nf_conntrack_netlink.c | 89 +++--- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 20 +- net/netfilter/nf_tables_api.c | 12 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nfnetlink_log.c | 10 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nfnetlink_queue.c | 4 +- net/netfilter/nft_ct.c | 11 +- net/netfilter/nft_payload.c | 6 +- net/netfilter/nft_set_pipapo.c | 46 ++- net/netfilter/nft_set_pipapo.h | 2 + net/netfilter/x_tables.c | 23 ++ net/netfilter/xt_CT.c | 4 + net/netfilter/xt_IDLETIMER.c | 6 + net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_dccp.c | 4 +- net/netfilter/xt_rateest.c | 5 + net/netfilter/xt_tcpudp.c | 6 +- net/netfilter/xt_time.c | 4 +- net/nfc/nci/core.c | 31 +- net/nfc/nci/data.c | 12 +- net/nfc/rawsock.c | 11 + net/openvswitch/flow_netlink.c | 2 + net/openvswitch/vport-netdev.c | 9 +- net/packet/af_packet.c | 1 + net/qrtr/af_qrtr.c | 66 ++-- net/rds/ib_rdma.c | 7 +- net/rfkill/core.c | 40 ++- net/rose/af_rose.c | 5 + net/rxrpc/af_rxrpc.c | 6 - net/rxrpc/key.c | 2 +- net/sched/act_gate.c | 264 +++++++++++----- net/sched/cls_api.c | 1 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_ets.c | 12 +- net/sched/sch_hfsc.c | 4 +- net/sched/sch_teql.c | 1 + net/smc/smc_rx.c | 9 +- net/sunrpc/cache.c | 26 +- net/tipc/group.c | 6 +- net/tipc/socket.c | 2 + net/wireless/core.c | 1 + net/wireless/pmsr.c | 1 + net/wireless/radiotap.c | 4 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + net/xfrm/xfrm_interface_core.c | 2 +- net/xfrm/xfrm_output.c | 7 +- net/xfrm/xfrm_policy.c | 2 +- net/xfrm/xfrm_state.c | 1 + net/xfrm/xfrm_user.c | 1 + security/apparmor/apparmorfs.c | 228 ++++++++------ security/apparmor/include/label.h | 16 +- security/apparmor/include/lib.h | 12 + security/apparmor/include/match.h | 1 + security/apparmor/include/policy.h | 13 +- security/apparmor/include/policy_ns.h | 2 + security/apparmor/include/policy_unpack.h | 83 +++-- security/apparmor/label.c | 12 +- security/apparmor/match.c | 58 +++- security/apparmor/policy.c | 82 ++++- security/apparmor/policy_ns.c | 2 + security/apparmor/policy_unpack.c | 74 +++-- security/security.c | 1 + sound/core/pcm_lib.c | 11 +- sound/core/pcm_native.c | 25 +- sound/pci/ctxfi/ctdaio.c | 1 + sound/pci/hda/patch_conexant.c | 11 + sound/pci/hda/patch_realtek.c | 1 + sound/soc/amd/acp3x-rt5682-max9836.c | 9 +- sound/soc/fsl/fsl_easrc.c | 14 +- sound/soc/intel/catpt/device.c | 10 +- sound/soc/intel/catpt/dsp.c | 3 - sound/soc/meson/meson-codec-glue.c | 3 - sound/soc/soc-core.c | 344 +++++++++++++++------ sound/soc/soc-dai.c | 63 ++++ sound/soc/soc-dapm.c | 24 +- sound/soc/soc-pcm.c | 10 +- sound/soc/soc-topology.c | 24 +- sound/soc/soc-utils.c | 29 ++ sound/soc/sof/topology.c | 6 +- sound/soc/tegra/tegra_pcm.c | 3 + sound/usb/caiaq/device.c | 2 +- sound/usb/endpoint.c | 3 + sound/usb/validate.c | 2 +- tools/bootconfig/main.c | 7 +- tools/objtool/check.c | 5 +- tools/testing/selftests/net/mptcp/simult_flows.sh | 11 +- 458 files changed, 5215 insertions(+), 2261 deletions(-)

1 month

9
9
0 0

[PATCH 6.1 000/312] 6.1.168-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.168 release. There are 312 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 10 Apr 2026 17:58:42 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.168-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.168-rc1 Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: EC: Evaluate orphan _REG under EC device Nathan Chancellor <nathan(a)kernel.org> ext4: fix unused iterator variable warnings Theodore Ts'o <tytso(a)mit.edu> ext4: fix lost error code reporting in __ext4_fill_super() Bart Van Assche <bvanassche(a)acm.org> block: Fix the blk_mq_destroy_queue() documentation Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: eir: Fix possible crashes on eir_create_adv_data Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check removing signal+subflow endp Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: implicit: stop transfer after last check Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Fix unlikely race in gdlm_put_lock Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: phy: fix phy_uses_state_machine() Vladimir Oltean <vladimir.oltean(a)nxp.com> net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY Vladimir Oltean <vladimir.oltean(a)nxp.com> net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: save ailp before dropping the AIL lock in push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: avoid dereferencing log items after push callbacks Denis Arefev <arefev(a)swemel.ru> erofs: Fix the slab-out-of-bounds in drop_buffers() Gao Xiang <xiang(a)kernel.org> erofs: fix PSI memstall accounting Gao Xiang <xiang(a)kernel.org> erofs: handle overlapped pclusters out of crafted images properly Pratyush Yadav <p.yadav(a)ti.com> mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode Pratyush Yadav <p.yadav(a)ti.com> mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode Guangshuo Li <lgs201920130244(a)gmail.com> cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path Liao Chang <liaochang1(a)huawei.com> cpufreq: governor: Free dbs_data directly when gov->init() fails Theodore Ts'o <tytso(a)mit.edu> ext4: handle wraparound when searching for blocks for indirect mapped blocks Li Xiasong <lixiasong1(a)huawei.com> MPTCP: fix lock class name family in pm_nl_create_listen_socket Li Chen <me(a)linux.beauty> ext4: publish jinode after initialization Zqiang <qiang.zhang(a)linux.dev> ext4: fix the might_sleep() warnings in kvfree() Jason Yan <yanaijie(a)huawei.com> ext4: factor out ext4_flex_groups_free() Jason Yan <yanaijie(a)huawei.com> ext4: use ext4_group_desc_free() in ext4_put_super() to save some duplicated code Jason Yan <yanaijie(a)huawei.com> ext4: factor out ext4_percpu_param_init() and ext4_percpu_param_destroy() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes Eddie James <eajames(a)linux.ibm.com> hwmon: (pmbus/core) Add lock and unlock functions Luo Haiyang <luo.haiyang(a)zte.com.cn> tracing: Fix potential deadlock in cpu hotplug with osnoise Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix potencial OOB in get_file_all_info() for compound requests Werner Kasselman <werner(a)verivus.com> ksmbd: fix memory leaks and NULL deref in smb2_lock() Nikunj A Dadhania <nikunj(a)amd.com> x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() Jinjiang Tu <tujinjiang(a)huawei.com> mm/huge_memory: fix folio isn't locked in softleaf_to_folio() Josef Bacik <josef(a)toxicpanda.com> scsi: target: tcm_loop: Drain commands in target_reset handler Kevin Hao <haokexin(a)gmail.com> net: macb: Move devm_{free,request}_irq() out of spin lock area Willem de Bruijn <willemb(a)google.com> net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Zheng Qixing <zhengqixing(a)huawei.com> block: fix resource leak in blk_register_queue() error path Jiayuan Chen <jiayuan.chen(a)shopee.com> ext4: fix use-after-free in update_super_work when racing with umount Alexander Popov <alex.popov(a)linux.com> wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Taegu Ha <hataegu0826(a)gmail.com> usb: gadget: f_uac1_legacy: validate control request size Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Protect RNDIS options with mutex Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix unbalanced refcnt in geth_free Jimmy Hu <hhhuuu(a)google.com> usb: gadget: uvc: fix NULL pointer dereference during unbind race Vladimir Oltean <vladimir.oltean(a)nxp.com> net: enetc: fix PF !of_device_is_available() teardown path Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Ming Lei <ming.lei(a)redhat.com> nvme: fix admin queue leak on controller reset Keith Busch <kbusch(a)kernel.org> nvme: fix admin request_queue lifetime Christoph Hellwig <hch(a)lst.de> nvme-pci: put the admin queue in nvme_dev_remove_admin Christoph Hellwig <hch(a)lst.de> nvme-pci: remove an extra queue reference Christoph Hellwig <hch(a)lst.de> blk-mq: move the call to blk_put_queue out of blk_mq_destroy_queue Heyne, Maximilian <mheyne(a)amazon.de> Revert "nvme: fix admin request_queue lifetime" Filipe Manana <fdmanana(a)suse.com> btrfs: do not free data reservation in fallback from inline due to -ENOSPC Qu Wenruo <wqu(a)suse.com> btrfs: fix the qgroup data free range for inline data extents Sebastian Urban <surban(a)surban.net> usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix interrupt synchronization error Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix locking/synchronization error Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> thunderbolt: Fix property read in nhi_wake_supported() Yufan Chen <yufan.chen(a)linux.dev> net: ftgmac100: fix ring allocation unwind on open failure Yang Yang <n05ec(a)lzu.edu.cn> vxlan: validate ND option lengths in vxlan_na_create Yifan Wu <yifanwucs(a)gmail.com> netfilter: ipset: drop logically empty buckets in mtype_del Ian Abbott <abbotti(a)mev.co.uk> comedi: me4000: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: me_daq: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Fix invalid clean-up after failed attach Ian Abbott <abbotti(a)mev.co.uk> comedi: Reinit dev->spinlock between attachments to low-level drivers Deepanshu Kartikey <kartikey406(a)gmail.com> comedi: dt2815: add hardware detection to prevent crash Oliver Neukum <oneukum(a)suse.com> cdc-acm: new quirk for EPSON HMD Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: validate ND option lengths Sasha Levin <sashal(a)kernel.org> Revert "ext4: make ext4_es_remove_extent() return void" Sasha Levin <sashal(a)kernel.org> Revert "ext4: get rid of ppath in ext4_find_extent()" Sasha Levin <sashal(a)kernel.org> Revert "ext4: get rid of ppath in ext4_ext_create_new_leaf()" Sasha Levin <sashal(a)kernel.org> Revert "ext4: get rid of ppath in ext4_ext_insert_extent()" Sasha Levin <sashal(a)kernel.org> Revert "ext4: get rid of ppath in ext4_split_extent_at()" Sasha Levin <sashal(a)kernel.org> Revert "ext4: subdivide EXT4_EXT_DATA_VALID1" Sasha Levin <sashal(a)kernel.org> Revert "ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1" Sasha Levin <sashal(a)kernel.org> Revert "ext4: drop extent cache after doing PARTIAL_VALID1 zeroout" Sasha Levin <sashal(a)kernel.org> Revert "ext4: drop extent cache when splitting extent fails" Sasha Levin <sashal(a)kernel.org> Revert "ext4: avoid infinite loops caused by residual data" Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix state inconsistency on gadget init failure Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix NULL pointer dereference in ep_queue Juno Choi <juno.choi(a)lge.com> usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() Justin Chen <justin.chen(a)broadcom.com> usb: ehci-brcm: fix sleep during atomic Heitor Alves de Siqueira <halves(a)igalia.com> usb: usbtmc: Flush anchored URBs in usbtmc_release Guangshuo Li <lgs201920130244(a)gmail.com> usb: ulpi: fix double free in ulpi_register_interface() error path Miao Li <limiao(a)kylinos.cn> usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix out-of-sequence free_irq() Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Move iio_device_register() to correct location Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix irq resource leak Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix incorrect free_irq() variable Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only Josh Poimboeuf <jpoimboe(a)kernel.org> iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() David Lechner <dlechner(a)baylibre.com> iio: light: vcnl4035: fix scan buffer on big-endian Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: dac: ad5770r: fix error return in ad5770r_read_raw() Valek Andrej <andrej.v(a)skyrain.eu> iio: accel: fix ADXL355 temperature signature value Zoltan Illes <zoliviragh(a)gmail.com> Input: xpad - add support for Razer Wolverine V3 Pro Christoffer Sandberg <cs(a)tuxedo.de> Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Bart Van Assche <bvanassche(a)acm.org> Input: synaptics-rmi4 - fix a locking bug in an error path David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() JP Hein <jp(a)jphein.com> USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Wanquan Zhong <wanquan.zhong(a)fibocom.com> USB: serial: option: add support for Rolling Wireless RW135R-GL Frej Drejhammar <frej(a)stacken.kth.se> USB: serial: io_edgeport: add support for Blackbox IC135A Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: dp501: Fix initialization of SCU2C David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: fix buffer read on big-endian Stefan Wiehler <stefan.wiehler(a)nokia.com> mips: mm: Allocate tlb_vpn array atomically Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix division by zero in occ_show_power_1() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix the GCC version check for `__multi3' workaround Oleh Konko <security(a)1seal.org> Bluetooth: SMP: force responder MITM requirements before building the pairing response Oleh Konko <security(a)1seal.org> Bluetooth: SMP: derive legacy responder STK authentication from MITM state Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix missing SPDIFI1 index handling Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: fix stack out-of-bounds read in init_card Ernestas Kulik <ernestas.k(a)iconn-networks.com> USB: serial: option: add MeiG Smart SRM825WN Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/ioc32: stop speculation on the drm_compat_ioctl path Paul Walmsley <pjw(a)kernel.org> riscv: kgdb: fix several debug register assignment bugs Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix missing newline in occ_show_extended() Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() Jamie Gibbons <jamie.gibbons(a)microchip.com> dt-bindings: gpio: fix microchip #interrupt-cells Sanman Pradhan <psanman(a)juniper.net> hwmon: (pxe1610) Check return value of page-select write in probe David Lechner <dlechner(a)baylibre.com> iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one Qi Tang <tpluszz77(a)gmail.com> bpf: reject direct access to nullable PTR_TO_BUF pointers Eric Dumazet <edumazet(a)google.com> ipv6: avoid overflows in ip6_datagram_send_ctl() Luka Gejak <luka.gejak(a)linux.dev> net: hsr: fix VLAN add unwind on slave errors Xiang Mei <xmei5(a)asu.edu> net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xiang Mei <xmei5(a)asu.edu> net/sched: cls_fw: fix NULL pointer dereference on shared blocks Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix overflow when accumulating packets Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix potential double free of skb Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Avoid "No data available" when FW version queries fail Shay Drory <shayd(a)nvidia.com> net/mlx5: lag: Check for LAG device before creating debugfs Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: properly unregister fixed rate clocks Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix clk handling on PCI glue driver removal Weiming Shi <bestswngs(a)gmail.com> rds: ib: reject FRMR registration before IB connection is established Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate mesh send advertising payload length Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate LTK enc_size on load Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: SCO: fix race conditions in sco_sock_connect() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: reject immediate NF_QUEUE verdict Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: ignore explicit helper on new expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store netns and zone in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use expect->helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: honor expectation helper field Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> netfilter: Reorder fields in 'struct nf_conntrack_expect' Qi Tang <tpluszz77(a)gmail.com> netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent Qi Tang <tpluszz77(a)gmail.com> netfilter: nf_conntrack_helper: pass helper to expect cleanup Florian Westphal <fw(a)strlen.de> netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Florian Westphal <fw(a)strlen.de> netfilter: x_tables: ensure names are nul-terminated Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: account for netlink header size Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: strictly check for maximum number of actions Zhengchuan Liang <zcliangcn(a)gmail.com> net: ipv6: flowlabel: defer exclusive option free until RCU teardown Alexei Starovoitov <ast(a)kernel.org> bpf: Fix regsafe() for pointers to packet Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec Pengpeng Hou <pengpeng(a)iscas.ac.cn> NFC: pn533: bound the UART receive buffer Yochai Eisenrich <echelonh(a)gmail.com> net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Paolo Abeni <pabeni(a)redhat.com> ipv6: prevent possible UaF in addrconf_permanent_addr() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure Alexander Sverdlin <alexander.sverdlin(a)gmail.com> ASoC: ep93xx: i2s: move enable call to startup callback Xiang Mei <xmei5(a)asu.edu> net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: linearize skb before parsing ND options Eric Dumazet <edumazet(a)google.com> ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Eric Dumazet <edumazet(a)google.com> ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Thomas Bogendoerfer <tbogendoerfer(a)suse.de> tg3: Fix race for querying speed/duplex Pengpeng Hou <pengpeng(a)iscas.ac.cn> net/ipv6: ioam6: prevent schema length wraparound in trace fill Yochai Eisenrich <echelonh(a)gmail.com> net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Jiayuan Chen <jiayuan.chen(a)shopee.com> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Norbert Szetei <norbert(a)doyensec.com> crypto: af-alg - fix NULL pointer dereference in scatterwalk Frank Li <Frank.Li(a)nxp.com> dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning ZhengYuan Huang <gality369(a)gmail.com> btrfs: reject root items with drop_progress and zero drop_level Mikko Perttunen <mperttunen(a)nvidia.com> i2c: tegra: Don't mark devices with pins as IRQ safe Lee Jones <lee(a)kernel.org> HID: multitouch: Check to ensure report responses match the request Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix Clang jump table detection Paul SAGE <paul.sage(a)42.fr> tg3: replace placeholder MAC address with device property Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: don't take device_list_mutex when querying zone info Deepanshu Kartikey <kartikey406(a)gmail.com> atm: lec: fix use-after-free in sock_def_readable() Benoît Sevens <bsevens(a)google.com> HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses. Davidlohr Bueso <dave(a)stgolabs.net> futex: Clear stale exiting pointer in futex_lock_pi() retry path Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> dmaengine: xilinx_dma: Program interrupt delay timeout Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix freeing the allocated ida too late Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error when running device stats on multiple devices fs Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> btrfs: fix leak of kobject name for sub-group space_info Mark Harmstone <mark(a)harmstone.com> btrfs: fix super block offset in error message in btrfs_validate_super() Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix dma_device directions Felix Gu <ustc.gu(a)gmail.com> phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix memory leak when a wq is reset Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix not releasing workqueue on .release() Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: do not increment tailcall count when prog is NULL Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off Theodore Ts'o <tytso(a)mit.edu> ext4: always drain queued discard work in ext4_mb_release() Baokun Li <libaokun(a)linux.alibaba.com> ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths Helen Koike <koike(a)igalia.com> ext4: reject mount if bigalloc with s_first_data_block != 0 Ye Bin <yebin10(a)huawei.com> ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() Edward Adam Davis <eadavis(a)qq.com> ext4: avoid infinite loops caused by residual data Jan Kara <jack(a)suse.cz> ext4: make recently_deleted() properly work with lazy itable initialization Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: convert inline data to extents when truncate exceeds inline size Simon Weber <simon.weber.39(a)gmail.com> ext4: fix journal credit check when setting fscrypt context Long Li <leo.lilong(a)huawei.com> xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: stop reclaim before pushing AIL during unmount Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Workaround LS2K/LS7A GPU DMA hang bug Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Protect the driver specific lists Jassi Brar <jassisinghbrar(a)gmail.com> irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment Milos Nikic <nikic.milos(a)gmail.com> jbd2: gracefully abort on checkpointing state corruptions Kevin Hao <haokexin(a)gmail.com> net: macb: Use dev_consume_skb_any() to free TX SKBs Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> scsi: ses: Handle positive SCSI error from ses_recv_diag() Tyllis Xu <livelycarpet87(a)gmail.com> scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Fix argument order in alarm_timer_forward() Jiucheng Xu <jiucheng.xu(a)amlogic.com> erofs: add GFP_NOIO in the bio completion if needed xietangxin <xietangxin(a)yeah.net> virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false Yuchan Nam <entropy1110(a)gmail.com> media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature Marc Zyngier <maz(a)kernel.org> KVM: arm64: Discard PC update state on vcpu reset Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: conservative: Reset requested_freq on limits change Ali Norouzi <ali.norouzi(a)keysight.com> can: gw: fix OOB heap access in cgw_csum_crc8_rel() Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: do not expire session on binding failure Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Vasily Gorbik <gor(a)linux.ibm.com> s390/barrier: Make array_index_mask_nospec() __always_inline Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> s390/syscalls: Add spectre boundary for syscall dispatch table Marc Kleine-Budde <mkl(a)pengutronix.de> spi: spi-fsl-lpspi: fix teardown order issue (UAF) Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix clock leak on PLL lock failure Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix unchecked clk_prepare_enable() return value Marc Buerg <buermarc(a)googlemail.com> sysctl: fix uninitialized variable in proc_do_large_bitmap Sanman Pradhan <psanman(a)juniper.net> hwmon: (adm1177) fix sysfs ABI violation and current unit conversion Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib Weiming Shi <bestswngs(a)gmail.com> ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: EC: Install address space handler at the namespace root Hans de Goede <hdegoede(a)redhat.com> ACPI: EC: Fix ECDT probe ordering issues Hans de Goede <hdegoede(a)redhat.com> ACPI: EC: Fix EC address space handler unregistration Hans de Goede <hdegoede(a)redhat.com> ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps Hans de Goede <hdegoede(a)redhat.com> ACPICA: include/acpi/acpixf.h: Fix indentation Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Fix the device initialization Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> drm/i915/gmbus: fix spurious timeout on 512-byte burst reads Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size Yihang Li <liyihang9(a)huawei.com> scsi: scsi_transport_sas: Fix the maximum channel scanning issue Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Return EINVAL for invalid arp index error Anil Samal <anil.samal(a)intel.com> RDMA/irdma: Fix deadlock during netdev reset with active connections Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() Ivan Barrera <ivan.d.barrera(a)intel.com> RDMA/irdma: Clean up unnecessary dereference of event->cm_node Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Update ibqp state to error if QP is already in error state Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize free_qp completion before using it Chuck Lever <chuck.lever(a)oracle.com> RDMA/rw: Fall back to direct SGE on MR pool exhaustion Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> regmap: Synchronize cache for the page selector Paolo Valerio <pvalerio(a)redhat.com> net: macb: use the current queue number for stats David Carlier <devnexen(a)gmail.com> netfilter: ctnetlink: use netlink policy range checks Florian Westphal <fw(a)strlen.de> netlink: allow be16 and be32 types in all uint policy checks Weiming Shi <bestswngs(a)gmail.com> netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: skip expectations in other netns via proc Ren Wei <n05ec(a)lzu.edu.cn> netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Weiming Shi <bestswngs(a)gmail.com> netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD Chuck Lever <chuck.lever(a)oracle.com> tls: Purge async_hold in tls_decrypt_async_wait() Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: clamp SCO altsetting table indices Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop Zhang Chen <zhangchen01(a)kylinos.cn> Bluetooth: L2CAP: Fix send LE flow credits in ACL link Miguel Ojeda <ojeda(a)kernel.org> dma-mapping: add missing `inline` for `dma_free_attrs` Wei Fang <wei.fang(a)nxp.com> net: enetc: fix the output issue of 'ethtool --show-ring' Martin KaFai Lau <martin.lau(a)kernel.org> udp: Fix wildcard bind conflict check when using hash2 Eric Dumazet <edumazet(a)google.com> tcp: optimize inet_use_bhash2_on_bind() Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Rearrange tests in inet_csk_bind_conflict(). Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Use bhash2 for v4-mapped-v6 non-wildcard address. Yochai Eisenrich <echelonh(a)gmail.com> net: fix fanout UAF in packet_release() via NETDEV_UP race Petr Oros <poros(a)redhat.com> ice: use ice_update_eth_stats() for representor stats Alok Tiwari <alok.a.tiwari(a)oracle.com> platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size Qi Tang <tpluszz77(a)gmail.com> net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: validate MPLS set/set_masked payload length Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: defer tunnel netdev_put to RCU release Hangbin Liu <liuhangbin(a)gmail.com> rtnetlink: Honour NLM_F_ECHO flag in rtnl_delete_link Hangbin Liu <liuhangbin(a)gmail.com> net: add new helper unregister_netdevice_many_notify Hangbin Liu <liuhangbin(a)gmail.com> rtnetlink: pass netlink message header and portid to rtnl_configure_link() Toke Høiland-Jørgensen <toke(a)redhat.com> net: openvswitch: Avoid releasing netdev before teardown completes Jakub Kicinski <kuba(a)kernel.org> nfc: nci: fix circular locking dependency in nci_close_device Mohammad Heib <mheib(a)redhat.com> ionic: fix persistent MAC address override on PF Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: common: Fix probe failure for devices without EINT Helen Koike <koike(a)igalia.com> Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Anas Iqbal <mohd.abd.6602(a)gmail.com> Bluetooth: hci_ll: Fix firmware leak on error path Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() Oliver Hartkopp <socketcan(a)hartkopp.net> can: statistics: add missing atomic access in hot path Shigeru Yoshida <syoshida(a)redhat.com> dma: swiotlb: add KMSAN annotations to swiotlb_bounce() Eric Dumazet <edumazet(a)google.com> af_key: validate families in pfkey_send_migrate() Sabrina Dubroca <sd(a)queasysnail.net> esp: fix skb leak with espintcp and async crypto Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Fix the usage of skb->sk Sabrina Dubroca <sd(a)queasysnail.net> xfrm: call xdo_dev_state_delete during state update Jie Deng <dengjie03(a)kylinos.cn> usb: core: new quirk to handle devices with zero configurations Uzair Mughal <contact(a)uzair.is-a.dev> ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 Liucheng Lu <luliucheng100(a)outlook.com> ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk Boris Burkov <boris(a)bur.io> btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create Günther Noack <gnoack(a)google.com> HID: apple: avoid memory leak in apple_report_fixup() Isaac J. Manjarres <isaacmanjarres(a)google.com> dma-buf: Include ioctl.h in UAPI header Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() Ihor Solodrai <ihor.solodrai(a)linux.dev> module: Fix kernel panic when a symbol st_shndx is out of bounds Romain Sioen <romain.sioen(a)microchip.com> HID: mcp2221: cancel last I2C command on read error Valentin Spreckels <valentin(a)spreckels.dev> net: usb: r8152: add TRENDnet TUC-ET2G Günther Noack <gnoack(a)google.com> HID: magicmouse: avoid memory leak in magicmouse_report_fixup() Julius Lehmann <lehmanju(a)devpi.de> HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 Keith Busch <kbusch(a)kernel.org> nvme-pci: ensure we're polling a polled queue Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 Leif Skunberg <diamondback(a)cohunt.app> platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 Daniel Hodges <hodgesd(a)meta.com> nvme-fabrics: use kfree_sensitive() for DHCHAP secrets Keith Busch <kbusch(a)kernel.org> nvme-pci: cap queue creation to used queues Peter Metz <peter.metz(a)unarin.com> platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list Günther Noack <gnoack(a)google.com> HID: asus: avoid memory leak in asus_report_fixup() Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Release module BTF IDR before module unload Danilo Krummrich <dakr(a)kernel.org> sh: platform_early: remove pdev->driver_override check ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 3 + .../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +- .../bindings/gpio/microchip,mpfs-gpio.yaml | 4 +- Documentation/hwmon/adm1177.rst | 8 +- Documentation/hwmon/peci-cputemp.rst | 10 +- Makefile | 4 +- .../boot/dts/freescale/imx8mn-tqma8mqnl-mba8mx.dts | 13 +- .../arm64/boot/dts/freescale/imx8mn-tqma8mqnl.dtsi | 22 ++ arch/arm64/kvm/reset.c | 14 + arch/loongarch/pci/pci.c | 80 ++++++ arch/mips/lib/multi3.c | 6 +- arch/mips/mm/tlb-r4k.c | 2 +- arch/powerpc/net/bpf_jit_comp64.c | 23 +- arch/riscv/kernel/kgdb.c | 7 +- arch/s390/include/asm/barrier.h | 4 +- arch/s390/kernel/syscall.c | 2 + arch/sh/drivers/platform_early.c | 4 - arch/x86/kernel/cpu/common.c | 18 +- arch/x86/kvm/mmu/mmu.c | 15 +- arch/x86/platform/efi/quirks.c | 2 +- block/blk-mq.c | 9 +- block/blk-sysfs.c | 2 + block/bsg-lib.c | 2 + crypto/af_alg.c | 4 +- drivers/acpi/acpica/acevents.h | 4 + drivers/acpi/acpica/evregion.c | 6 +- drivers/acpi/acpica/evxfregn.c | 146 +++++++++- drivers/acpi/ec.c | 52 +++- drivers/base/regmap/regmap.c | 30 +- drivers/bluetooth/btusb.c | 5 +- drivers/bluetooth/hci_ll.c | 2 + drivers/comedi/drivers.c | 8 + drivers/comedi/drivers/dt2815.c | 12 + drivers/comedi/drivers/me4000.c | 16 +- drivers/comedi/drivers/me_daq.c | 35 +-- drivers/comedi/drivers/ni_atmio16d.c | 3 +- drivers/cpufreq/cpufreq_conservative.c | 12 + drivers/cpufreq/cpufreq_governor.c | 13 +- drivers/cpufreq/cpufreq_governor.h | 1 + drivers/dma/idxd/cdev.c | 10 +- drivers/dma/idxd/device.c | 3 +- drivers/dma/idxd/sysfs.c | 1 + drivers/dma/sh/rz-dmac.c | 68 +++-- drivers/dma/xilinx/xilinx_dma.c | 66 +++-- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 4 +- drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/i915/display/intel_gmbus.c | 4 +- drivers/hid/hid-apple.c | 4 +- drivers/hid/hid-asus.c | 15 +- drivers/hid/hid-magicmouse.c | 6 +- drivers/hid/hid-mcp2221.c | 2 + drivers/hid/hid-multitouch.c | 7 + drivers/hid/wacom_wac.c | 10 + drivers/hwmon/adm1177.c | 54 ++-- drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/peci/cputemp.c | 4 +- drivers/hwmon/pmbus/isl68137.c | 21 +- drivers/hwmon/pmbus/pmbus.h | 2 + drivers/hwmon/pmbus/pmbus_core.c | 30 ++ drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/hwmon/pmbus/tps53679.c | 4 +- drivers/i2c/busses/Kconfig | 2 + drivers/i2c/busses/i2c-tegra.c | 5 +- drivers/iio/accel/adxl355_core.c | 2 +- drivers/iio/adc/ti-adc161s626.c | 41 ++- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 32 ++- drivers/iio/imu/bmi160/bmi160_core.c | 15 +- drivers/iio/imu/bno055/bno055.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4 + drivers/iio/light/vcnl4035.c | 18 +- drivers/infiniband/core/rw.c | 27 +- drivers/infiniband/hw/irdma/cm.c | 29 +- drivers/infiniband/hw/irdma/utils.c | 2 - drivers/infiniband/hw/irdma/verbs.c | 9 +- drivers/input/joystick/xpad.c | 2 + drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/irqchip/irq-qcom-mpm.c | 3 + drivers/media/mc/mc-request.c | 5 + drivers/media/v4l2-core/v4l2-ioctl.c | 5 +- drivers/mtd/spi-nor/core.c | 145 +++++++++- drivers/net/can/vxcan.c | 2 +- drivers/net/ethernet/broadcom/tg3.c | 13 +- drivers/net/ethernet/cadence/macb_main.c | 17 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 2 + drivers/net/ethernet/freescale/enetc/enetc_pf.c | 2 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 14 +- drivers/net/ethernet/intel/ice/ice_repr.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++-- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 + .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/pensando/ionic/ionic_lif.c | 17 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/geneve.c | 2 +- drivers/net/phy/phy_device.c | 58 +++- drivers/net/usb/r8152.c | 1 + drivers/net/veth.c | 2 +- drivers/net/virtio_net.c | 1 + drivers/net/vxlan/vxlan_core.c | 10 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +- drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/virt_wifi.c | 1 - drivers/net/wwan/wwan_core.c | 2 +- drivers/nfc/pn533/uart.c | 3 + drivers/nvme/host/apple.c | 1 + drivers/nvme/host/core.c | 16 +- drivers/nvme/host/fabrics.c | 4 +- drivers/nvme/host/pci.c | 25 +- drivers/phy/ti/phy-j721e-wiz.c | 2 + drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 9 +- drivers/platform/olpc/olpc-xo175-ec.c | 2 +- drivers/platform/x86/intel/hid.c | 13 + drivers/platform/x86/touchscreen_dmi.c | 18 ++ drivers/scsi/ibmvscsi/ibmvfc.c | 3 +- drivers/scsi/scsi_sysfs.c | 1 + drivers/scsi/scsi_transport_sas.c | 2 +- drivers/scsi/ses.c | 2 +- drivers/spi/spi-fsl-lpspi.c | 3 +- drivers/target/loopback/tcm_loop.c | 52 +++- drivers/thunderbolt/nhi.c | 2 +- drivers/ufs/core/ufshcd.c | 2 + drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/class/cdc-acm.c | 9 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/usbtmc.c | 3 + drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/config.c | 6 +- drivers/usb/core/quirks.c | 8 + drivers/usb/dwc2/gadget.c | 2 + drivers/usb/gadget/function/f_rndis.c | 9 +- drivers/usb/gadget/function/f_subset.c | 6 + drivers/usb/gadget/function/f_uac1_legacy.c | 47 +++- drivers/usb/gadget/function/f_uvc.c | 39 ++- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 5 +- drivers/usb/gadget/udc/dummy_hcd.c | 42 +-- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + fs/btrfs/block-group.c | 2 +- fs/btrfs/disk-io.c | 4 +- fs/btrfs/inode.c | 6 +- fs/btrfs/ioctl.c | 7 + fs/btrfs/tree-checker.c | 17 ++ fs/btrfs/volumes.c | 5 +- fs/btrfs/zoned.c | 6 +- fs/erofs/data.c | 2 + fs/erofs/zdata.c | 70 ++--- fs/ext4/crypto.c | 9 +- fs/ext4/ext4.h | 10 +- fs/ext4/extents.c | 312 +++++++++------------ fs/ext4/extents_status.c | 12 +- fs/ext4/extents_status.h | 4 +- fs/ext4/fast_commit.c | 25 +- fs/ext4/ialloc.c | 6 + fs/ext4/inline.c | 12 +- fs/ext4/inode.c | 35 ++- fs/ext4/mballoc.c | 30 +- fs/ext4/migrate.c | 5 +- fs/ext4/move_extent.c | 7 +- fs/ext4/super.c | 164 +++++------ fs/ext4/sysfs.c | 10 +- fs/gfs2/lock_dlm.c | 10 +- fs/jbd2/checkpoint.c | 15 +- fs/smb/server/smb2pdu.c | 72 +++-- fs/xfs/xfs_attr_item.c | 4 +- fs/xfs/xfs_dquot_item.c | 9 +- fs/xfs/xfs_inode_item.c | 9 +- fs/xfs/xfs_mount.c | 7 +- fs/xfs/xfs_trace.c | 1 + fs/xfs/xfs_trace.h | 36 ++- fs/xfs/xfs_trans_ail.c | 26 +- include/acpi/acpixf.h | 142 +++++----- include/linux/dma-mapping.h | 4 +- include/linux/netdevice.h | 2 - include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/rtnetlink.h | 9 +- include/linux/swapops.h | 20 +- include/linux/usb/quirks.h | 3 + include/linux/usb/r8152.h | 1 + include/net/inet_hashtables.h | 14 + include/net/netfilter/nf_conntrack_expect.h | 44 ++- include/net/netlink.h | 21 +- include/net/rtnetlink.h | 5 +- include/uapi/linux/dma-buf.h | 1 + include/uapi/linux/netfilter/nf_conntrack_common.h | 4 + kernel/bpf/btf.c | 24 +- kernel/bpf/verifier.c | 10 +- kernel/dma/swiotlb.c | 21 +- kernel/futex/pi.c | 3 +- kernel/module/main.c | 7 + kernel/sysctl.c | 2 +- kernel/time/alarmtimer.c | 2 +- kernel/trace/trace_osnoise.c | 8 +- lib/nlattr.c | 6 + mm/damon/sysfs.c | 3 + net/atm/lec.c | 72 +++-- net/atm/lec.h | 2 +- net/bluetooth/eir.c | 7 +- net/bluetooth/eir.h | 2 +- net/bluetooth/hci_event.c | 33 ++- net/bluetooth/hci_sync.c | 5 +- net/bluetooth/l2cap_core.c | 28 +- net/bluetooth/l2cap_sock.c | 3 + net/bluetooth/mgmt.c | 17 +- net/bluetooth/sco.c | 40 ++- net/bluetooth/smp.c | 11 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/can/af_can.c | 4 +- net/can/af_can.h | 2 +- net/can/gw.c | 6 +- net/can/proc.c | 3 +- net/core/dev.c | 70 +++-- net/core/dev.h | 7 + net/core/rtnetlink.c | 51 ++-- net/hsr/hsr_device.c | 32 ++- net/ipv4/esp4.c | 11 +- net/ipv4/inet_connection_sock.c | 72 +++-- net/ipv4/inet_hashtables.c | 3 +- net/ipv4/ip_gre.c | 2 +- net/ipv4/udp.c | 2 +- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 + net/ipv6/esp6.c | 11 +- net/ipv6/icmp.c | 3 + net/ipv6/ioam6.c | 4 +- net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 5 + net/ipv6/ndisc.c | 3 + net/ipv6/netfilter/ip6t_rt.c | 4 + net/ipv6/xfrm6_output.c | 4 +- net/key/af_key.c | 19 +- net/mptcp/pm_netlink.c | 2 +- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_broadcast.c | 8 +- net/netfilter/nf_conntrack_expect.c | 29 +- net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 13 +- net/netfilter/nf_conntrack_netlink.c | 103 +++---- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 18 +- net/netfilter/nf_flow_table_offload.c | 196 ++++++++----- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_log.c | 10 +- net/netfilter/x_tables.c | 23 ++ net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_rateest.c | 5 + net/nfc/nci/core.c | 10 +- net/openvswitch/flow_netlink.c | 2 + net/openvswitch/vport-geneve.c | 2 +- net/openvswitch/vport-gre.c | 2 +- net/openvswitch/vport-netdev.c | 13 +- net/openvswitch/vport-vxlan.c | 2 +- net/packet/af_packet.c | 1 + net/qrtr/af_qrtr.c | 31 +- net/rds/ib_rdma.c | 7 +- net/sched/cls_api.c | 1 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_hfsc.c | 4 +- net/smc/smc_rx.c | 9 +- net/tls/tls_sw.c | 2 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + net/xfrm/xfrm_interface_core.c | 2 +- net/xfrm/xfrm_output.c | 7 +- net/xfrm/xfrm_policy.c | 2 +- net/xfrm/xfrm_state.c | 1 + sound/pci/ctxfi/ctdaio.c | 1 + sound/pci/hda/patch_realtek.c | 2 + sound/soc/cirrus/ep93xx-i2s.c | 40 ++- sound/soc/codecs/adau1372.c | 34 ++- sound/soc/fsl/fsl_easrc.c | 14 +- sound/soc/intel/catpt/device.c | 10 +- sound/soc/intel/catpt/dsp.c | 3 - sound/usb/caiaq/device.c | 2 +- tools/objtool/check.c | 5 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 14 + 286 files changed, 3071 insertions(+), 1445 deletions(-)

1 month

11
11
0 0

[PATCH 6.19 000/311] 6.19.12-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.19.12 release. There are 311 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 11 Apr 2026 09:16:46 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.12-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.19.12-rc2 Alexander Popov <alex.popov(a)linux.com> wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Petr Mladek <pmladek(a)suse.com> kallsyms: prevent module removal when printing module name and buildid Petr Mladek <pmladek(a)suse.com> kallsyms: cleanup code for appending the module buildid Petr Mladek <pmladek(a)suse.com> kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() Petr Mladek <pmladek(a)suse.com> kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid() Taegu Ha <hataegu0826(a)gmail.com> usb: gadget: f_uac1_legacy: validate control request size Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: move list and spinlock inits from bind to alloc Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_eem: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ecm: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Protect RNDIS options with mutex Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix unbalanced refcnt in geth_free Jimmy Hu <hhhuuu(a)google.com> usb: gadget: uvc: fix NULL pointer dereference during unbind race Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop Aditya Garg <gargaditya08(a)live.com> HID: appletb-kbd: add .resume method in PM Nathan Rebello <nathan.c.rebello(a)gmail.com> usb: typec: ucsi: validate connector number in ucsi_notify_common() Sebastian Urban <surban(a)surban.net> usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix interrupt synchronization error Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix locking/synchronization error Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> thunderbolt: Fix property read in nhi_wake_supported() Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: thunderbolt: Set enter_vdo during initialization Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: possible double-free of cctx->remote_heap Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Fix thermal zone device registration error path Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Address thermal zone removal races with resume Tzung-Bi Shih <tzungbi(a)kernel.org> gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() Shenwei Wang <shenwei.wang(a)nxp.com> gpio: mxc: map Both Edge pad wakeup to Rising Edge Andrea Righi <arighi(a)nvidia.com> sched_ext: Fix stale direct dispatch state in ddsp_dsq_id Changwoo Min <changwoo(a)igalia.com> sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU Guangshuo Li <lgs201920130244(a)gmail.com> cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path Srujana Challa <schalla(a)marvell.com> virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN Jason Gunthorpe <jgg(a)ziepe.ca> iommupt: Fix short gather if the unmap goes into a large mapping Sven Eckelmann (Plasma Cloud) <se(a)simonwunderlich.de> net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled Yufan Chen <yufan.chen(a)linux.dev> net: ftgmac100: fix ring allocation unwind on open failure Yang Yang <n05ec(a)lzu.edu.cn> vxlan: validate ND option lengths in vxlan_na_create Eric Biggers <ebiggers(a)kernel.org> crypto: tegra - Add missing CRYPTO_ALG_ASYNC Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Nicolas Pitre <nico(a)fluxnic.net> vt: resize saved unicode buffer on alt screen exit after resize Liav Mordouch <liavmordouch(a)gmail.com> vt: discard stale unicode buffer on alt screen exit after resize Dave Penkler <dpenkler(a)gmail.com> gpib: Fix fluke driver s390 compile issue Yifan Wu <yifanwucs(a)gmail.com> netfilter: ipset: drop logically empty buckets in mtype_del Ivan Vera <ivanverasantos(a)gmail.com> nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Christian Eggers <ceggers(a)arri.de> nvmem: imx: assign nvmem_cell_info::raw_len Changwoo Min <changwoo(a)igalia.com> PM: EM: Fix NULL pointer dereference when perf domain ID is not found Guangshuo Li <lgs201920130244(a)gmail.com> reset: gpio: fix double free in reset_add_gpio_aux_device() error path Thomas Richter <tmricht(a)linux.ibm.com> s390/cpum_sf: Cap sampling rate to prevent lsctl exception Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix memory leak with CCA cards used as accelerator Emanuele Ghidoli <emanuele.ghidoli(a)toradex.com> spi: cadence-qspi: Fix exec_mem_op error handling Xu Yang <xu.yang_2(a)nxp.com> dt-bindings: connector: add pd-disable dependency Conor Dooley <conor.dooley(a)microchip.com> firmware: microchip: fail auto-update probe if no flash found Ian Abbott <abbotti(a)mev.co.uk> comedi: me4000: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: me_daq: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Fix invalid clean-up after failed attach Ian Abbott <abbotti(a)mev.co.uk> comedi: Reinit dev->spinlock between attachments to low-level drivers Edward Adam Davis <eadavis(a)qq.com> comedi: runflags cannot determine whether to reclaim chanlist Deepanshu Kartikey <kartikey406(a)gmail.com> comedi: dt2815: add hardware detection to prevent crash Oliver Neukum <oneukum(a)suse.com> cdc-acm: new quirk for EPSON HMD Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: validate ND option lengths Guangshuo Li <lgs201920130244(a)gmail.com> auxdisplay: line-display: fix NULL dereference in linedisp_release Jens Axboe <axboe(a)kernel.dk> io_uring: protect remaining lockless ctx->rings accesses with RCU Guan-Yu Lin <guanyulin(a)google.com> usb: core: use dedicated spinlock for offload state Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix state inconsistency on gadget init failure Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix NULL pointer dereference in ep_queue Gabor Juhos <j4g8y7(a)gmail.com> usb: core: phy: avoid double use of 'usb3-phy' Juno Choi <juno.choi(a)lge.com> usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() Justin Chen <justin.chen(a)broadcom.com> usb: ehci-brcm: fix sleep during atomic Guan-Yu Lin <guanyulin(a)google.com> usb: host: xhci-sideband: delegate offload_usage tracking to class drivers Felix Gu <ustc.gu(a)gmail.com> usb: misc: usbio: Fix URB memory leak on submit failure Heitor Alves de Siqueira <halves(a)igalia.com> usb: usbtmc: Flush anchored URBs in usbtmc_release Guangshuo Li <lgs201920130244(a)gmail.com> usb: ulpi: fix double free in ulpi_register_interface() error path Miao Li <limiao(a)kylinos.cn> usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Johan Hovold <johan(a)kernel.org> gpib: lpvo_usb: fix memory leak on disconnect Alexander Usyskin <alexander.usyskin(a)intel.com> mei: me: reduce the scope on unexpected reset Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix out-of-sequence free_irq() Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Move iio_device_register() to correct location Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix irq resource leak Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix incorrect free_irq() variable Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only Josh Poimboeuf <jpoimboe(a)kernel.org> iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() Aldo Conte <aldocontelk(a)gmail.com> iio: light: veml6070: fix veml6070_read() return value David Lechner <dlechner(a)baylibre.com> iio: light: vcnl4035: fix scan buffer on big-endian Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: imu: adis16550: fix swapped gyro/accel filter functions Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: dac: ad5770r: fix error return in ad5770r_read_raw() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: accel: adxl313: add missing error check in predisable Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 Valek Andrej <andrej.v(a)skyrain.eu> iio: accel: fix ADXL355 temperature signature value Billy Tsai <billy_tsai(a)aspeedtech.com> iio: adc: aspeed: clear reference voltage bits before configuring vref Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: adc: ade9000: move mutex init before IRQ registration Giorgi Tchankvetadze <giorgitchankvetadze1997(a)gmail.com> iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power Giorgi Tchankvetadze <giorgitchankvetadze1997(a)gmail.com> iio: adc: ade9000: fix wrong return type in streaming push Dmitry Torokhov <dmitry.torokhov(a)gmail.com> iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> iio: adc: ti-ads7950: normalize return value of gpio_get Zoltan Illes <zoliviragh(a)gmail.com> Input: xpad - add support for Razer Wolverine V3 Pro Shengyu Qu <wiagn233(a)outlook.com> Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode Liam Mitchell <mitchell.liam(a)gmail.com> Input: bcm5974 - recover from failed mode switch Christoffer Sandberg <cs(a)tuxedo.de> Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Bart Van Assche <bvanassche(a)acm.org> Input: synaptics-rmi4 - fix a locking bug in an error path JP Hein <jp(a)jphein.com> USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Wanquan Zhong <wanquan.zhong(a)fibocom.com> USB: serial: option: add support for Rolling Wireless RW135R-GL Frej Drejhammar <frej(a)stacken.kth.se> USB: serial: io_edgeport: add support for Blackbox IC135A Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/pm: drop SMU driver if version not matched messages Donet Tom <donettom(a)linux.ibm.com> drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Junrui Luo <moonafterrain(a)outlook.com> drm/amdgpu: validate doorbell_offset in user queue creation Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Fix wait after reset sequence in S4 Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/cdclk: Do the full CDCLK dance for min_voltage_level changes Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: dp501: Fix initialization of SCU2C Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: fix buffer read on big-endian David Lechner <dlechner(a)baylibre.com> iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace David Lechner <dlechner(a)baylibre.com> iio: orientation: hid-sensor-rotation: fix quaternion alignment David Lechner <dlechner(a)baylibre.com> iio: add IIO_DECLARE_QUATERNION() macro Adam Crosser <adam.crosser(a)praetorian.com> gpib: fix use-after-free in IO ioctl handlers Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: fix the idr allocation flags Aleksandr Nogikh <nogikh(a)google.com> x86/kexec: Disable KCOV instrumentation after load_segments() Stefan Wiehler <stefan.wiehler(a)nokia.com> mips: mm: Allocate tlb_vpn array atomically Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix division by zero in occ_show_power_1() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix the GCC version check for `__multi3' workaround Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: SiByte: Bring back cache initialisation Asim Viladi Oglu Manizada <manizada(a)pm.me> ksmbd: fix OOB write in QUERY_INFO for compound requests Oleh Konko <security(a)1seal.org> Bluetooth: hci_event: move wake reason storage into validated event handlers hkbinbin <hkbinbinbin(a)gmail.com> Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync Oleh Konko <security(a)1seal.org> Bluetooth: SMP: force responder MITM requirements before building the pairing response Oleh Konko <security(a)1seal.org> Bluetooth: SMP: derive legacy responder STK authentication from MITM state Junxi Qian <qjx1298677004(a)gmail.com> io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxx Sourav Nayak <nonameblank007(a)gmail.com> ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15 Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for Acer Swift SFG14-73 Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix missing SPDIFI1 index handling Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Check the error for index mapping Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: fix stack out-of-bounds read in init_card Tejun Heo <tj(a)kernel.org> sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback Eric Biggers <ebiggers(a)kernel.org> lib/crypto: chacha: Zeroize permuted_state before it leaves scope Cheng-Yang Chou <yphbchou0911(a)gmail.com> sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() Ernestas Kulik <ernestas.k(a)iconn-networks.com> USB: serial: option: add MeiG Smart SRM825WN Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Alice Ryhl <aliceryhl(a)google.com> rust_binder: use AssertSync for BINDER_VM_OPS Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/ioc32: stop speculation on the drm_compat_ioctl path Sunil V L <sunilvl(a)oss.qualcomm.com> ACPI: RIMT: Add dependency between iommu and devices Zishun Yi <vulab(a)iscas.ac.cn> riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set Paul Walmsley <pjw(a)kernel.org> riscv: kgdb: fix several debug register assignment bugs Ian Rogers <irogers(a)google.com> perf/x86: Fix potential bad container_of in intel_pmu_hw_config Peter Zijlstra <peterz(a)infradead.org> sched/debug: Fix avg_vruntime() usage Peter Zijlstra <peterz(a)infradead.org> sched/fair: Fix zero_vruntime tracking fix Shiji Yang <yangshiji66(a)outlook.com> mips: ralink: update CPU clock index Corey Hickey <bugfood-c(a)fatooh.org> hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI Chen Ni <nichen(a)iscas.ac.cn> drm/sysfb: Fix efidrm error handling and memory type mismatch Jessica Liu <liu.xuemei1(a)zte.com.cn> irqchip/riscv-aplic: Restrict genpd notifier to device tree only Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix missing newline in occ_show_extended() Felix Gu <ustc.gu(a)gmail.com> spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Clear restart flag in pxp_start after jumping back Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Remove incorrect handling of impossible state during suspend Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Clean up termination status on failure Jonathan Cavitt <jonathan.cavitt(a)intel.com> drm/xe/xe_pagefault: Disallow writes to read-only VMAs Felix Gu <ustc.gu(a)gmail.com> spi: stm32-ospi: Fix reset control leak on probe error Felix Gu <ustc.gu(a)gmail.com> spi: stm32-ospi: Fix resource leak in remove() callback Jamie Gibbons <jamie.gibbons(a)microchip.com> dt-bindings: gpio: fix microchip #interrupt-cells Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: shared: shorten the critical section in gpiochip_setup_shared() Sanman Pradhan <psanman(a)juniper.net> hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") Sanman Pradhan <psanman(a)juniper.net> hwmon: (pxe1610) Check return value of page-select write in probe Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix array access with zero-length block read Qi Tang <tpluszz77(a)gmail.com> io_uring/rsrc: reject zero-length fixed buffer import Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> accel/qaic: Handle DBC deactivation if the owner went away Liu Ying <victor.liu(a)nxp.com> drm/bridge: Fix refcount shown via debugfs for encoder_bridges_show() Felix Gu <ustc.gu(a)gmail.com> gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: shared: handle pins shared by child nodes of devices Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: shared: call gpio_chip::of_xlate() if set Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org> interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes() Barnabás Pőcze <pobrn(a)protonmail.com> gpiolib: clear requested flag if line is invalid David Lechner <dlechner(a)baylibre.com> iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one Maarten Lankhorst <dev(a)lankhorst.se> Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix incorrect pruning due to atomic fetch precision tracking Varun R Mallya <varunrmallya(a)gmail.com> bpf: Reject sleepable kprobe_multi programs at attach time Qi Tang <tpluszz77(a)gmail.com> bpf: reject direct access to nullable PTR_TO_BUF pointers Dimitri Daskalakis <daskald(a)meta.com> eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64 Eric Dumazet <edumazet(a)google.com> ipv6: avoid overflows in ip6_datagram_send_ctl() Luka Gejak <luka.gejak(a)linux.dev> net: hsr: fix VLAN add unwind on slave errors Xiang Mei <xmei5(a)asu.edu> net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xiang Mei <xmei5(a)asu.edu> net/sched: cls_fw: fix NULL pointer dereference on shared blocks Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix overflow when accumulating packets Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix potential double free of skb Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Restore default stat ctxs for ULP when resource is available Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode() Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Refactor some basic ring setup and adjustment logic Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Fix switchdev mode rollback in case of failure Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Avoid "No data available" when FW version queries fail Shay Drory <shayd(a)nvidia.com> net/mlx5: lag: Check for LAG device before creating debugfs Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: properly unregister fixed rate clocks Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix clk handling on PCI glue driver removal Yucheng Lu <kanolyc(a)gmail.com> net/sched: sch_netem: fix out-of-bounds access in packet corruption Kuniyuki Iwashima <kuniyu(a)google.com> bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). Weiming Shi <bestswngs(a)gmail.com> rds: ib: reject FRMR registration before IB connection is established Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate mesh send advertising payload length Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate LTK enc_size on load Jonathan Rissanen <jonathan.rissanen(a)axis.com> Bluetooth: hci_h4: Fix race during initialization Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_sync: Fix UAF in le_read_features_complete Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Add support for setting BT_PHY Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: SCO: fix race conditions in sco_sock_connect() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: reject immediate NF_QUEUE verdict Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: ignore explicit helper on new expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store netns and zone in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use expect->helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: honor expectation helper field Qi Tang <tpluszz77(a)gmail.com> netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent Qi Tang <tpluszz77(a)gmail.com> netfilter: nf_conntrack_helper: pass helper to expect cleanup Florian Westphal <fw(a)strlen.de> netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Florian Westphal <fw(a)strlen.de> netfilter: x_tables: ensure names are nul-terminated Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: account for netlink header size Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: strictly check for maximum number of actions Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP Michal Piekos <michal.piekos(a)mmpsystems.pl> net: stmmac: skip VLAN restore when VLAN hash ops are missing Li Xiasong <lixiasong1(a)huawei.com> mptcp: fix soft lockup in mptcp_recvmsg() Geliang Tang <geliang(a)kernel.org> mptcp: add eat_recv_skb helper Zhengchuan Liang <zcliangcn(a)gmail.com> net: ipv6: flowlabel: defer exclusive option free until RCU teardown Alexei Starovoitov <ast(a)kernel.org> bpf: Fix regsafe() for pointers to packet Xiang Mei <xmei5(a)asu.edu> bridge: mrp: reject zero test interval to avoid OOM panic Julian Braha <julianbraha(a)gmail.com> ASoC: Intel: boards: fix unmet dependency on PINCTRL Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec Pengpeng Hou <pengpeng(a)iscas.ac.cn> NFC: pn533: bound the UART receive buffer Xiang Mei <xmei5(a)asu.edu> net: bonding: fix use-after-free in bond_xmit_broadcast() Herbert Xu <herbert(a)gondor.apana.org.au> crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption Herbert Xu <herbert(a)gondor.apana.org.au> crypto: algif_aead - Revert to operating out-of-place Pengpeng Hou <pengpeng(a)iscas.ac.cn> bnxt_en: set backing store type from query type Yochai Eisenrich <echelonh(a)gmail.com> net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Guoyu Su <yss2813483011xxl(a)gmail.com> net: use skb_header_pointer() for TCPv4 GSO frag_off check Paolo Abeni <pabeni(a)redhat.com> net: introduce mangleid_features Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() Paolo Abeni <pabeni(a)redhat.com> ipv6: prevent possible UaF in addrconf_permanent_addr() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure Dag Smedberg <dag(a)dsmedberg.se> ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP Wei Fang <wei.fang(a)nxp.com> net: enetc: do not allow VF to configure the RSS key Wei Fang <wei.fang(a)nxp.com> net: enetc: check whether the RSS algorithm is Toeplitz Marek Behún <kabel(a)kernel.org> net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta Xiang Mei <xmei5(a)asu.edu> net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: linearize skb before parsing ND options Dimitri Daskalakis <daskald(a)meta.com> eth: fbnic: Account for page fragments when updating BDQ tail Eric Dumazet <edumazet(a)google.com> ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Eric Dumazet <edumazet(a)google.com> ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() David Carlier <devnexen(a)gmail.com> net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch Thomas Bogendoerfer <tbogendoerfer(a)suse.de> tg3: Fix race for querying speed/duplex Pengpeng Hou <pengpeng(a)iscas.ac.cn> net/ipv6: ioam6: prevent schema length wraparound in trace fill Sherry Yang <sherry.yang(a)oracle.com> iommupt/amdv1: mark amdv1pt_install_leaf_entry as __always_inline Yochai Eisenrich <echelonh(a)gmail.com> net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Jiayuan Chen <jiayuan.chen(a)shopee.com> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Wei Fang <wei.fang(a)nxp.com> net: enetc: do not access non-existent registers on pseudo MAC Wei Fang <wei.fang(a)nxp.com> net: enetc: add graceful stop to safely reinitialize the TX Ring Wei Fang <wei.fang(a)nxp.com> net: enetc: reset PIR and CIR if they are not equal when initializing TX ring Buday Csaba <buday.csaba(a)prolan.hu> net: fec: fix the PTP periodic output sysfs interface Qingfang Deng <dqfext(a)gmail.com> netdevsim: fix build if SKB_EXTENSIONS=n Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: Fix RX skb truesize accounting Sabrina Dubroca <sd(a)queasysnail.net> mpls: add seqcount to protect the platform_label{,s} pair Norbert Szetei <norbert(a)doyensec.com> crypto: af-alg - fix NULL pointer dereference in scatterwalk Mikulas Patocka <mpatocka(a)redhat.com> crypto: deflate - fix spurious -ENOSPC Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix overflow on long hmac keys Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix DMA corruption on long hmac keys Tejun Heo <tj(a)kernel.org> cgroup: Fix cgroup_drain_dying() testing the wrong condition Tejun Heo <tj(a)kernel.org> selftests/cgroup: Don't require synchronous populated update on task exit Tejun Heo <tj(a)kernel.org> cgroup: Wait for dying tasks to leave on rmdir Reshma Immaculate Rajkumar <reshma.rajkumar(a)oss.qualcomm.com> wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mld: correctly set wifi generation data Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: don't send a 6E related command when not supported Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: iwlwifi: mld: Fix MLO scan timing Frank Li <Frank.Li(a)nxp.com> dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Fix error handling in mshv_region_pin Praveen Talari <praveen.talari(a)oss.qualcomm.com> spi: geni-qcom: Check DMA interrupts early in ISR Paulo Alcantara <pc(a)manguebit.org> smb: client: fix generic/694 due to wrong ->i_blocks Alex Hung <alex.hung(a)amd.com> drm/amd/display: Fix gamma 2.2 colorop TFs ZhengYuan Huang <gality369(a)gmail.com> btrfs: reject root items with drop_progress and zero drop_level Mikko Perttunen <mperttunen(a)nvidia.com> i2c: tegra: Don't mark devices with pins as IRQ safe Filipe Manana <fdmanana(a)suse.com> btrfs: reserve enough transaction items for qgroup ioctls Lee Jones <lee(a)kernel.org> HID: multitouch: Check to ensure report responses match the request Joe Lawrence <joe.lawrence(a)redhat.com> objtool/klp: fix mkstemp() failure with long paths Lee Jones <lee(a)kernel.org> HID: core: Mitigate potential OOB by removing bogus memset() Lee Jones <lee(a)kernel.org> HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix Clang jump table detection Paul SAGE <paul.sage(a)42.fr> tg3: replace placeholder MAC address with device property Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: don't take device_list_mutex when querying zone info Deepanshu Kartikey <kartikey406(a)gmail.com> atm: lec: fix use-after-free in sock_def_readable() Benoît Sevens <bsevens(a)google.com> HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: mac80211: check tdls flag in ieee80211_tdls_oper Adrian Freund <adrian(a)freund.io> HID: logitech-hidpp: Enable MX Master 4 over bluetooth Pepper Gray <hello(a)peppergray.xyz> arm64/scs: Fix handling of advance_loc4 Long Li <leo.lilong(a)huawei.com> xfs: close crash window in attr dabtree inactivation Long Li <leo.lilong(a)huawei.com> xfs: factor out xfs_attr3_leaf_init Long Li <leo.lilong(a)huawei.com> xfs: factor out xfs_attr3_node_entry_remove Long Li <leo.lilong(a)huawei.com> xfs: only assert new size for datafork during truncate extents Josef Bacik <josef(a)toxicpanda.com> scsi: target: tcm_loop: Drain commands in target_reset handler Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> scsi: target: file: Use kzalloc_flex for aio_cmd Guangshuo Li <lgs201920130244(a)gmail.com> net: mana: fix use-after-free in add_adev() error path Willem de Bruijn <willemb(a)google.com> net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 ------------- Diffstat: .../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +- .../bindings/connector/usb-connector.yaml | 1 + .../bindings/gpio/microchip,mpfs-gpio.yaml | 4 +- Makefile | 4 +- arch/arm64/kernel/pi/patch-scs.c | 8 + arch/mips/lib/multi3.c | 6 +- arch/mips/mm/cache.c | 3 +- arch/mips/mm/tlb-r4k.c | 2 +- arch/mips/ralink/clk.c | 8 +- arch/riscv/kernel/kgdb.c | 7 +- arch/riscv/kernel/process.c | 4 +- arch/s390/kernel/perf_cpum_sf.c | 6 +- arch/x86/events/intel/core.c | 6 +- arch/x86/kernel/Makefile | 14 ++ arch/x86/mm/Makefile | 2 + crypto/af_alg.c | 53 ++---- crypto/algif_aead.c | 100 ++--------- crypto/algif_skcipher.c | 6 +- crypto/authencesn.c | 50 +++--- crypto/deflate.c | 11 +- drivers/accel/qaic/qaic_control.c | 47 ++++- drivers/acpi/riscv/rimt.c | 7 + drivers/android/binder/page_range.rs | 8 +- drivers/android/binder/rust_binder_main.rs | 2 +- drivers/auxdisplay/line-display.c | 2 +- drivers/bluetooth/hci_h4.c | 3 - drivers/comedi/comedi_fops.c | 8 +- drivers/comedi/drivers.c | 8 + drivers/comedi/drivers/dt2815.c | 12 ++ drivers/comedi/drivers/me4000.c | 16 +- drivers/comedi/drivers/me_daq.c | 35 ++-- drivers/comedi/drivers/ni_atmio16d.c | 3 +- drivers/counter/rz-mtu3-cnt.c | 67 +++---- drivers/cpufreq/cpufreq_governor.c | 6 +- drivers/crypto/caam/caamalg_qi2.c | 3 +- drivers/crypto/caam/caamhash.c | 3 +- drivers/crypto/tegra/tegra-se-aes.c | 11 +- drivers/crypto/tegra/tegra-se-hash.c | 30 ++-- drivers/firmware/microchip/mpfs-auto-update.c | 10 +- drivers/gpib/Kconfig | 1 + drivers/gpib/common/gpib_os.c | 96 +++++++--- drivers/gpib/include/gpib_types.h | 8 + drivers/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c | 4 +- drivers/gpio/gpio-mxc.c | 10 +- drivers/gpio/gpio-qixis-fpga.c | 4 +- drivers/gpio/gpiolib-shared.c | 57 ++++-- drivers/gpio/gpiolib-shared.h | 11 +- drivers/gpio/gpiolib.c | 135 +++++++------- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 +- drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_colorop.c | 6 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 17 +- drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 1 - drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c | 1 - .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 33 +++- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 33 +++- drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1 - drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_bridge.c | 16 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/g4x_dp.c | 2 +- drivers/gpu/drm/i915/display/icl_dsi.c | 4 +- drivers/gpu/drm/i915/display/intel_cdclk.c | 54 ++++++ drivers/gpu/drm/sysfb/efidrm.c | 46 +++-- drivers/gpu/drm/xe/xe_pagefault.c | 6 + drivers/gpu/drm/xe/xe_pxp.c | 11 +- drivers/hid/hid-appletb-kbd.c | 5 +- drivers/hid/hid-core.c | 7 +- drivers/hid/hid-logitech-hidpp.c | 6 +- drivers/hid/hid-multitouch.c | 7 + drivers/hid/wacom_wac.c | 10 ++ drivers/hv/mshv_regions.c | 6 +- drivers/hwmon/asus-ec-sensors.c | 7 +- drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/pmbus/ltc4286.c | 1 + drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/hwmon/pmbus/tps53679.c | 10 +- drivers/i2c/busses/Kconfig | 2 + drivers/i2c/busses/i2c-tegra.c | 5 +- drivers/iio/accel/adxl313_core.c | 2 + drivers/iio/accel/adxl355_core.c | 2 +- drivers/iio/accel/adxl380.c | 2 +- drivers/iio/adc/ade9000.c | 12 +- drivers/iio/adc/aspeed_adc.c | 1 + drivers/iio/adc/ti-adc161s626.c | 41 +++-- drivers/iio/adc/ti-ads1119.c | 11 +- drivers/iio/adc/ti-ads7950.c | 8 +- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 32 ++-- drivers/iio/imu/adis16550.c | 8 +- drivers/iio/imu/bmi160/bmi160_core.c | 15 +- drivers/iio/imu/bno055/bno055.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 15 +- drivers/iio/light/vcnl4035.c | 18 +- drivers/iio/light/veml6070.c | 4 +- drivers/iio/orientation/hid-sensor-rotation.c | 24 ++- drivers/input/joystick/xpad.c | 5 + drivers/input/mouse/bcm5974.c | 42 ++++- drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/interconnect/qcom/sm8450.c | 4 +- drivers/iommu/generic_pt/fmt/amdv1.h | 2 +- drivers/iommu/generic_pt/iommu_pt.h | 2 +- drivers/irqchip/irq-riscv-aplic-main.c | 4 +- drivers/misc/fastrpc.c | 5 +- drivers/misc/mei/hw-me.c | 14 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 18 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 76 +++++--- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 5 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 5 +- drivers/net/ethernet/broadcom/tg3.c | 13 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 ++- drivers/net/ethernet/freescale/enetc/enetc.c | 13 +- drivers/net/ethernet/freescale/enetc/enetc4_hw.h | 11 ++ drivers/net/ethernet/freescale/enetc/enetc4_pf.c | 118 +++++++++++-- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 10 +- drivers/net/ethernet/freescale/fec_ptp.c | 3 - drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 21 ++- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++++-- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 + .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 6 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.h | 2 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 13 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 14 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 2 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 9 +- drivers/net/phy/sfp.c | 7 +- drivers/net/virtio_net.c | 20 +-- drivers/net/vxlan/vxlan_core.c | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 15 +- .../net/wireless/intel/iwlwifi/fw/api/commands.h | 5 + drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 10 ++ drivers/net/wireless/intel/iwlwifi/mld/iface.c | 101 +++++++---- drivers/net/wireless/intel/iwlwifi/mld/mac80211.c | 19 ++ drivers/net/wireless/intel/iwlwifi/mld/mld.c | 1 + drivers/net/wireless/intel/iwlwifi/mld/mlo.c | 4 +- drivers/net/wireless/intel/iwlwifi/mld/notif.c | 5 + drivers/net/wireless/intel/iwlwifi/mld/scan.c | 30 +++- drivers/net/wireless/intel/iwlwifi/mld/scan.h | 9 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 3 +- drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/virtual/virt_wifi.c | 1 - drivers/nfc/pn533/uart.c | 3 + drivers/nvmem/imx-ocotp-ele.c | 1 + drivers/nvmem/imx-ocotp.c | 1 + drivers/nvmem/zynqmp_nvmem.c | 8 +- drivers/reset/core.c | 1 - drivers/s390/crypto/zcrypt_msgtype6.c | 32 ++-- drivers/spi/spi-amlogic-spifc-a4.c | 12 ++ drivers/spi/spi-cadence-quadspi.c | 17 +- drivers/spi/spi-geni-qcom.c | 9 +- drivers/spi/spi-stm32-ospi.c | 9 +- drivers/target/loopback/tcm_loop.c | 52 +++++- drivers/target/target_core_file.c | 2 +- drivers/thermal/thermal_core.c | 32 +++- drivers/thunderbolt/nhi.c | 2 +- drivers/tty/vt/vt.c | 18 ++ drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/class/cdc-acm.c | 9 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/usbtmc.c | 3 + drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/driver.c | 23 ++- drivers/usb/core/offload.c | 102 ++++++----- drivers/usb/core/phy.c | 12 +- drivers/usb/core/quirks.c | 3 + drivers/usb/core/usb.c | 1 + drivers/usb/dwc2/gadget.c | 2 + drivers/usb/gadget/function/f_ecm.c | 35 ++-- drivers/usb/gadget/function/f_eem.c | 59 ++++--- drivers/usb/gadget/function/f_hid.c | 19 +- drivers/usb/gadget/function/f_rndis.c | 49 ++++-- drivers/usb/gadget/function/f_subset.c | 63 ++++--- drivers/usb/gadget/function/f_uac1_legacy.c | 47 +++-- drivers/usb/gadget/function/f_uvc.c | 39 +++- drivers/usb/gadget/function/u_ecm.h | 21 ++- drivers/usb/gadget/function/u_eem.h | 21 ++- drivers/usb/gadget/function/u_ether.c | 16 +- drivers/usb/gadget/function/u_gether.h | 22 ++- drivers/usb/gadget/function/u_rndis.h | 31 +++- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 5 +- drivers/usb/gadget/udc/dummy_hcd.c | 42 +++-- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/host/xhci-sideband.c | 18 +- drivers/usb/misc/usbio.c | 7 +- drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + drivers/usb/typec/altmodes/thunderbolt.c | 44 ++--- drivers/usb/typec/ucsi/ucsi.c | 9 +- fs/btrfs/ioctl.c | 12 +- fs/btrfs/tree-checker.c | 17 ++ fs/btrfs/zoned.c | 6 +- fs/smb/client/cifsglob.h | 6 + fs/smb/client/file.c | 1 - fs/smb/client/inode.c | 21 +-- fs/smb/client/smb2ops.c | 20 +-- fs/smb/server/smb2pdu.c | 121 +++++++++---- fs/smb/server/smbacl.c | 43 +++++ fs/smb/server/smbacl.h | 2 + fs/xfs/libxfs/xfs_attr_leaf.c | 22 +++ fs/xfs/libxfs/xfs_attr_leaf.h | 3 + fs/xfs/libxfs/xfs_da_btree.c | 53 ++++-- fs/xfs/libxfs/xfs_da_btree.h | 2 + fs/xfs/xfs_attr_inactive.c | 99 ++++++----- fs/xfs/xfs_inode.c | 3 +- include/crypto/if_alg.h | 5 +- include/linux/cgroup-defs.h | 3 + include/linux/iio/iio.h | 12 ++ include/linux/netdevice.h | 3 + include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/skbuff.h | 1 + include/linux/usb.h | 10 +- include/net/bluetooth/bluetooth.h | 39 ++-- include/net/bluetooth/hci.h | 9 + include/net/bluetooth/hci_core.h | 1 + include/net/bluetooth/hci_sync.h | 3 + include/net/netfilter/nf_conntrack_expect.h | 20 ++- include/net/netns/mpls.h | 1 + io_uring/io_uring.c | 62 ++++--- io_uring/io_uring.h | 34 +++- io_uring/net.c | 4 + io_uring/rsrc.c | 4 + kernel/bpf/verifier.c | 37 +++- kernel/cgroup/cgroup.c | 88 ++++++++- kernel/kallsyms.c | 64 +++++-- kernel/power/em_netlink.c | 2 + kernel/sched/debug.c | 4 +- kernel/sched/ext.c | 144 +++++++++++---- kernel/sched/ext_idle.c | 33 ++-- kernel/sched/fair.c | 10 +- kernel/sched/sched.h | 3 + kernel/trace/bpf_trace.c | 4 + lib/crypto/chacha-block-generic.c | 4 + net/atm/lec.c | 72 +++++--- net/atm/lec.h | 2 +- net/bluetooth/hci_conn.c | 113 +++++++++++- net/bluetooth/hci_event.c | 153 ++++++++-------- net/bluetooth/hci_sync.c | 152 +++++++++++++--- net/bluetooth/l2cap_sock.c | 20 ++- net/bluetooth/mgmt.c | 17 +- net/bluetooth/sco.c | 30 +++- net/bluetooth/smp.c | 11 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/bridge/br_mrp_netlink.c | 4 +- net/core/dev.c | 38 +++- net/core/skmsg.c | 13 +- net/hsr/hsr_device.c | 32 ++-- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 ++ net/ipv6/icmp.c | 3 + net/ipv6/ioam6.c | 4 +- net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 5 + net/ipv6/ndisc.c | 3 + net/mac80211/tdls.c | 2 +- net/mpls/af_mpls.c | 29 ++- net/mptcp/protocol.c | 30 ++-- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_broadcast.c | 8 +- net/netfilter/nf_conntrack_expect.c | 25 ++- net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 13 +- net/netfilter/nf_conntrack_netlink.c | 87 +++------ net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_flow_table_offload.c | 196 ++++++++++++++------- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_log.c | 2 +- net/netfilter/x_tables.c | 23 +++ net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_rateest.c | 5 + net/qrtr/af_qrtr.c | 31 ++-- net/rds/ib_rdma.c | 7 +- net/sched/cls_api.c | 1 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_hfsc.c | 4 +- net/sched/sch_netem.c | 5 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + sound/hda/codecs/realtek/alc269.c | 12 +- sound/pci/ctxfi/ctatc.c | 10 +- sound/pci/ctxfi/ctdaio.c | 82 +++++---- sound/soc/cirrus/ep93xx-i2s.c | 34 ++-- sound/soc/intel/boards/Kconfig | 2 - sound/usb/caiaq/device.c | 2 +- sound/usb/qcom/qc_audio_offload.c | 10 +- sound/usb/quirks.c | 2 + tools/objtool/check.c | 5 +- tools/objtool/elf.c | 23 +-- tools/testing/selftests/cgroup/lib/cgroup_util.c | 15 ++ .../selftests/cgroup/lib/include/cgroup_util.h | 2 + tools/testing/selftests/cgroup/test_core.c | 3 +- tools/testing/selftests/cgroup/test_kill.c | 7 +- 311 files changed, 3910 insertions(+), 1760 deletions(-)

1 month, 1 week

11
10
0 0

[PATCH 6.6 000/160] 6.6.134-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.134 release. There are 160 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 10 Apr 2026 17:58:42 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.134-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.134-rc1 Marek Behún <kabel(a)kernel.org> net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta Li Xiasong <lixiasong1(a)huawei.com> MPTCP: fix lock class name family in pm_nl_create_listen_socket Theodore Ts'o <tytso(a)mit.edu> ext4: handle wraparound when searching for blocks for indirect mapped blocks Li Chen <me(a)linux.beauty> ext4: publish jinode after initialization Joy Zou <joy.zou(a)nxp.com> dmaengine: fsl-edma: fix channel parameter config for fixed channel requests Joy Zou <joy.zou(a)nxp.com> dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate() Nikunj A Dadhania <nikunj(a)amd.com> x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() Jinjiang Tu <tujinjiang(a)huawei.com> mm/huge_memory: fix folio isn't locked in softleaf_to_folio() Josef Bacik <josef(a)toxicpanda.com> scsi: target: tcm_loop: Drain commands in target_reset handler Guangshuo Li <lgs201920130244(a)gmail.com> net: mana: fix use-after-free in add_adev() error path Willem de Bruijn <willemb(a)google.com> net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback Kevin Hao <haokexin(a)gmail.com> net: macb: Move devm_{free,request}_irq() out of spin lock area Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch when turning buffer off Alexander Popov <alex.popov(a)linux.com> wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Taegu Ha <hataegu0826(a)gmail.com> usb: gadget: f_uac1_legacy: validate control request size Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Protect RNDIS options with mutex Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix unbalanced refcnt in geth_free Jimmy Hu <hhhuuu(a)google.com> usb: gadget: uvc: fix NULL pointer dereference during unbind race Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop Xi Ruoyao <xry111(a)xry111.site> LoongArch: vDSO: Emit GNU_EH_FRAME correctly Andrew Price <anprice(a)redhat.com> gfs2: Validate i_depth for exhash directories Andrew Price <anprice(a)redhat.com> gfs2: Improve gfs2_consist_inode() usage Filipe Manana <fdmanana(a)suse.com> btrfs: do not free data reservation in fallback from inline due to -ENOSPC Qu Wenruo <wqu(a)suse.com> btrfs: fix the qgroup data free range for inline data extents Sebastian Urban <surban(a)surban.net> usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix interrupt synchronization error Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix locking/synchronization error Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> thunderbolt: Fix property read in nhi_wake_supported() Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: possible double-free of cctx->remote_heap Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Fix thermal zone device registration error path Shenwei Wang <shenwei.wang(a)nxp.com> gpio: mxc: map Both Edge pad wakeup to Rising Edge Guangshuo Li <lgs201920130244(a)gmail.com> cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path Yufan Chen <yufan.chen(a)linux.dev> net: ftgmac100: fix ring allocation unwind on open failure Yang Yang <n05ec(a)lzu.edu.cn> vxlan: validate ND option lengths in vxlan_na_create Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Yifan Wu <yifanwucs(a)gmail.com> netfilter: ipset: drop logically empty buckets in mtype_del Christian Eggers <ceggers(a)arri.de> nvmem: imx: assign nvmem_cell_info::raw_len Xu Yang <xu.yang_2(a)nxp.com> dt-bindings: connector: add pd-disable dependency Ian Abbott <abbotti(a)mev.co.uk> comedi: me4000: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: me_daq: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Fix invalid clean-up after failed attach Ian Abbott <abbotti(a)mev.co.uk> comedi: Reinit dev->spinlock between attachments to low-level drivers Deepanshu Kartikey <kartikey406(a)gmail.com> comedi: dt2815: add hardware detection to prevent crash Oliver Neukum <oneukum(a)suse.com> cdc-acm: new quirk for EPSON HMD Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: validate ND option lengths Miaohe Lin <linmiaohe(a)huawei.com> fork: defer linking file vma until vma is fully initialized Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Insert full vma on mmap'd MMIO fault Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Use unmap_mapping_range() Alex Williamson <alex.williamson(a)redhat.com> vfio: Create vfio_fs_type with inode per device Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix state inconsistency on gadget init failure Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix NULL pointer dereference in ep_queue Juno Choi <juno.choi(a)lge.com> usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() Justin Chen <justin.chen(a)broadcom.com> usb: ehci-brcm: fix sleep during atomic Heitor Alves de Siqueira <halves(a)igalia.com> usb: usbtmc: Flush anchored URBs in usbtmc_release Guangshuo Li <lgs201920130244(a)gmail.com> usb: ulpi: fix double free in ulpi_register_interface() error path Miao Li <limiao(a)kylinos.cn> usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix out-of-sequence free_irq() Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Move iio_device_register() to correct location Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix irq resource leak Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix incorrect free_irq() variable Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only Josh Poimboeuf <jpoimboe(a)kernel.org> iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() David Lechner <dlechner(a)baylibre.com> iio: light: vcnl4035: fix scan buffer on big-endian Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: dac: ad5770r: fix error return in ad5770r_read_raw() Valek Andrej <andrej.v(a)skyrain.eu> iio: accel: fix ADXL355 temperature signature value Zoltan Illes <zoliviragh(a)gmail.com> Input: xpad - add support for Razer Wolverine V3 Pro Shengyu Qu <wiagn233(a)outlook.com> Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode Christoffer Sandberg <cs(a)tuxedo.de> Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Bart Van Assche <bvanassche(a)acm.org> Input: synaptics-rmi4 - fix a locking bug in an error path David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() JP Hein <jp(a)jphein.com> USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Wanquan Zhong <wanquan.zhong(a)fibocom.com> USB: serial: option: add support for Rolling Wireless RW135R-GL Frej Drejhammar <frej(a)stacken.kth.se> USB: serial: io_edgeport: add support for Blackbox IC135A Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: dp501: Fix initialization of SCU2C David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: fix buffer read on big-endian Stefan Wiehler <stefan.wiehler(a)nokia.com> mips: mm: Allocate tlb_vpn array atomically Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix division by zero in occ_show_power_1() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix the GCC version check for `__multi3' workaround Oleh Konko <security(a)1seal.org> Bluetooth: SMP: force responder MITM requirements before building the pairing response Oleh Konko <security(a)1seal.org> Bluetooth: SMP: derive legacy responder STK authentication from MITM state Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix missing SPDIFI1 index handling Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: fix stack out-of-bounds read in init_card Ernestas Kulik <ernestas.k(a)iconn-networks.com> USB: serial: option: add MeiG Smart SRM825WN Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/ioc32: stop speculation on the drm_compat_ioctl path Paul Walmsley <pjw(a)kernel.org> riscv: kgdb: fix several debug register assignment bugs Shiji Yang <yangshiji66(a)outlook.com> mips: ralink: update CPU clock index Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix missing newline in occ_show_extended() Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() Jamie Gibbons <jamie.gibbons(a)microchip.com> dt-bindings: gpio: fix microchip #interrupt-cells Sanman Pradhan <psanman(a)juniper.net> hwmon: (pxe1610) Check return value of page-select write in probe Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> accel/qaic: Handle DBC deactivation if the owner went away David Lechner <dlechner(a)baylibre.com> iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one Qi Tang <tpluszz77(a)gmail.com> bpf: reject direct access to nullable PTR_TO_BUF pointers Eric Dumazet <edumazet(a)google.com> ipv6: avoid overflows in ip6_datagram_send_ctl() Luka Gejak <luka.gejak(a)linux.dev> net: hsr: fix VLAN add unwind on slave errors Xiang Mei <xmei5(a)asu.edu> net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xiang Mei <xmei5(a)asu.edu> net/sched: cls_fw: fix NULL pointer dereference on shared blocks Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix overflow when accumulating packets Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix potential double free of skb Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Avoid "No data available" when FW version queries fail Shay Drory <shayd(a)nvidia.com> net/mlx5: lag: Check for LAG device before creating debugfs Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: properly unregister fixed rate clocks Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix clk handling on PCI glue driver removal Yucheng Lu <kanolyc(a)gmail.com> net/sched: sch_netem: fix out-of-bounds access in packet corruption Kuniyuki Iwashima <kuniyu(a)google.com> bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). Weiming Shi <bestswngs(a)gmail.com> rds: ib: reject FRMR registration before IB connection is established Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate mesh send advertising payload length Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate LTK enc_size on load Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: SCO: fix race conditions in sco_sock_connect() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: reject immediate NF_QUEUE verdict Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: ignore explicit helper on new expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store netns and zone in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use expect->helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: honor expectation helper field Qi Tang <tpluszz77(a)gmail.com> netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent Qi Tang <tpluszz77(a)gmail.com> netfilter: nf_conntrack_helper: pass helper to expect cleanup Florian Westphal <fw(a)strlen.de> netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Florian Westphal <fw(a)strlen.de> netfilter: x_tables: ensure names are nul-terminated Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: account for netlink header size Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: strictly check for maximum number of actions Zhengchuan Liang <zcliangcn(a)gmail.com> net: ipv6: flowlabel: defer exclusive option free until RCU teardown Alexei Starovoitov <ast(a)kernel.org> bpf: Fix regsafe() for pointers to packet Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec Pengpeng Hou <pengpeng(a)iscas.ac.cn> NFC: pn533: bound the UART receive buffer Yochai Eisenrich <echelonh(a)gmail.com> net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Paolo Abeni <pabeni(a)redhat.com> ipv6: prevent possible UaF in addrconf_permanent_addr() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure Xiang Mei <xmei5(a)asu.edu> net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: linearize skb before parsing ND options Eric Dumazet <edumazet(a)google.com> ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Eric Dumazet <edumazet(a)google.com> ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Thomas Bogendoerfer <tbogendoerfer(a)suse.de> tg3: Fix race for querying speed/duplex Pengpeng Hou <pengpeng(a)iscas.ac.cn> net/ipv6: ioam6: prevent schema length wraparound in trace fill Yochai Eisenrich <echelonh(a)gmail.com> net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Jiayuan Chen <jiayuan.chen(a)shopee.com> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Buday Csaba <buday.csaba(a)prolan.hu> net: fec: fix the PTP periodic output sysfs interface Norbert Szetei <norbert(a)doyensec.com> crypto: af-alg - fix NULL pointer dereference in scatterwalk Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix overflow on long hmac keys Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix DMA corruption on long hmac keys Reshma Immaculate Rajkumar <reshma.rajkumar(a)oss.qualcomm.com> wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation Venkateswara Naralasetty <quic_vnaralas(a)quicinc.com> wifi: ath11k: skip status ring entry processing Frank Li <Frank.Li(a)nxp.com> dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning Praveen Talari <praveen.talari(a)oss.qualcomm.com> spi: geni-qcom: Check DMA interrupts early in ISR ZhengYuan Huang <gality369(a)gmail.com> btrfs: reject root items with drop_progress and zero drop_level Mikko Perttunen <mperttunen(a)nvidia.com> i2c: tegra: Don't mark devices with pins as IRQ safe Lee Jones <lee(a)kernel.org> HID: multitouch: Check to ensure report responses match the request Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix Clang jump table detection Paul SAGE <paul.sage(a)42.fr> tg3: replace placeholder MAC address with device property Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: don't take device_list_mutex when querying zone info Deepanshu Kartikey <kartikey406(a)gmail.com> atm: lec: fix use-after-free in sock_def_readable() Benoît Sevens <bsevens(a)google.com> HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Pepper Gray <hello(a)peppergray.xyz> arm64/scs: Fix handling of advance_loc4 ------------- Diffstat: .../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +- .../bindings/connector/usb-connector.yaml | 1 + .../bindings/gpio/microchip,mpfs-gpio.yaml | 4 +- Makefile | 4 +- arch/arm64/kernel/patch-scs.c | 8 + arch/loongarch/include/asm/linkage.h | 36 +++ arch/loongarch/include/asm/sigframe.h | 9 + arch/loongarch/kernel/asm-offsets.c | 2 + arch/loongarch/kernel/signal.c | 6 +- arch/loongarch/vdso/Makefile | 4 +- arch/loongarch/vdso/sigreturn.S | 6 +- arch/mips/lib/multi3.c | 6 +- arch/mips/mm/tlb-r4k.c | 2 +- arch/mips/ralink/clk.c | 8 +- arch/riscv/kernel/kgdb.c | 7 +- arch/x86/kernel/cpu/common.c | 18 +- crypto/af_alg.c | 4 +- drivers/accel/qaic/qaic_control.c | 47 +++- drivers/comedi/drivers.c | 8 + drivers/comedi/drivers/dt2815.c | 12 + drivers/comedi/drivers/me4000.c | 16 +- drivers/comedi/drivers/me_daq.c | 35 +-- drivers/comedi/drivers/ni_atmio16d.c | 3 +- drivers/counter/rz-mtu3-cnt.c | 67 ++--- drivers/cpufreq/cpufreq_governor.c | 6 +- drivers/crypto/caam/caamalg_qi2.c | 3 +- drivers/crypto/caam/caamhash.c | 3 +- drivers/dma/fsl-edma-main.c | 31 +-- drivers/gpio/gpio-mxc.c | 10 +- drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/i915/display/g4x_dp.c | 2 +- drivers/hid/hid-multitouch.c | 7 + drivers/hid/wacom_wac.c | 10 + drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/hwmon/pmbus/tps53679.c | 4 +- drivers/i2c/busses/Kconfig | 2 + drivers/i2c/busses/i2c-tegra.c | 5 +- drivers/iio/accel/adxl355_core.c | 2 +- drivers/iio/adc/ti-adc161s626.c | 41 ++- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 32 ++- drivers/iio/imu/bmi160/bmi160_core.c | 15 +- drivers/iio/imu/bno055/bno055.c | 2 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 3 + drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4 + drivers/iio/light/vcnl4035.c | 18 +- drivers/input/joystick/xpad.c | 5 + drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/misc/fastrpc.c | 1 + drivers/net/ethernet/broadcom/tg3.c | 13 +- drivers/net/ethernet/cadence/macb_main.c | 13 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 ++- drivers/net/ethernet/freescale/fec_ptp.c | 3 - drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++-- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 + .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 6 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/phy/sfp.c | 7 +- drivers/net/vxlan/vxlan_core.c | 6 +- drivers/net/wireless/ath/ath11k/dp.h | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 210 ++++++++++------ drivers/net/wireless/ath/ath11k/hal.c | 16 +- drivers/net/wireless/ath/ath11k/hal.h | 2 + drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +- drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/virtual/virt_wifi.c | 1 - drivers/nfc/pn533/uart.c | 3 + drivers/nvmem/imx-ocotp-ele.c | 1 + drivers/nvmem/imx-ocotp.c | 1 + drivers/spi/spi-geni-qcom.c | 9 +- drivers/target/loopback/tcm_loop.c | 52 +++- drivers/thermal/thermal_core.c | 1 + drivers/thunderbolt/nhi.c | 2 +- drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/class/cdc-acm.c | 9 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/usbtmc.c | 3 + drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/quirks.c | 3 + drivers/usb/dwc2/gadget.c | 2 + drivers/usb/gadget/function/f_rndis.c | 9 +- drivers/usb/gadget/function/f_subset.c | 6 + drivers/usb/gadget/function/f_uac1_legacy.c | 47 +++- drivers/usb/gadget/function/f_uvc.c | 39 ++- drivers/usb/gadget/function/u_ether.c | 10 +- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 5 +- drivers/usb/gadget/udc/dummy_hcd.c | 42 ++-- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + drivers/vfio/device_cdev.c | 7 + drivers/vfio/group.c | 7 + drivers/vfio/pci/vfio_pci_core.c | 277 +++++---------------- drivers/vfio/vfio_main.c | 44 ++++ fs/btrfs/inode.c | 6 +- fs/btrfs/tree-checker.c | 17 ++ fs/btrfs/zoned.c | 6 +- fs/ext4/fast_commit.c | 4 +- fs/ext4/inode.c | 15 +- fs/ext4/mballoc.c | 2 + fs/gfs2/dir.c | 37 +-- fs/gfs2/glops.c | 40 +-- fs/gfs2/xattr.c | 28 ++- include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/swapops.h | 20 +- include/linux/vfio.h | 1 + include/linux/vfio_pci_core.h | 2 - include/net/netfilter/nf_conntrack_expect.h | 20 +- kernel/bpf/verifier.c | 10 +- kernel/fork.c | 29 +-- net/atm/lec.c | 72 ++++-- net/atm/lec.h | 2 +- net/bluetooth/hci_event.c | 33 ++- net/bluetooth/hci_sync.c | 11 +- net/bluetooth/mgmt.c | 17 +- net/bluetooth/sco.c | 30 ++- net/bluetooth/smp.c | 11 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/core/dev.c | 22 +- net/core/skmsg.c | 13 +- net/hsr/hsr_device.c | 32 +-- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 + net/ipv6/icmp.c | 3 + net/ipv6/ioam6.c | 4 +- net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 5 + net/ipv6/ndisc.c | 3 + net/mptcp/pm_netlink.c | 2 +- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_broadcast.c | 8 +- net/netfilter/nf_conntrack_expect.c | 25 +- net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 13 +- net/netfilter/nf_conntrack_netlink.c | 87 +++---- net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_flow_table_offload.c | 196 ++++++++++----- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_log.c | 2 +- net/netfilter/x_tables.c | 23 ++ net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_rateest.c | 5 + net/qrtr/af_qrtr.c | 31 +-- net/rds/ib_rdma.c | 7 +- net/sched/cls_api.c | 1 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_hfsc.c | 4 +- net/sched/sch_netem.c | 5 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + sound/pci/ctxfi/ctdaio.c | 1 + sound/soc/cirrus/ep93xx-i2s.c | 34 ++- sound/usb/caiaq/device.c | 2 +- tools/objtool/check.c | 5 +- 165 files changed, 1668 insertions(+), 947 deletions(-)

1 month, 1 week

11
10
0 0

[PATCH 6.12 000/241] 6.12.81-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.81 release. There are 241 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 11 Apr 2026 09:16:49 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.81-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.81-rc2 Eduard Zingerman <eddyz87(a)gmail.com> selftests/bpf: test refining u32/s32 bounds when ranges cross min/max boundary Eduard Zingerman <eddyz87(a)gmail.com> bpf: Fix u32/s32 bounds when ranges cross min/max boundary Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Add third round of bounds deduction Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Test invariants on JSLT crossing sign Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Test cross-sign 64bits range refinement Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Improve bounds when s64 crosses sign boundary Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: Correct logic check error for fastboot Timur Kristóf <timur.kristof(a)gmail.com> drm/amd: Disable ASPM on SI Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Disable scaling on DCE6 for now Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15% Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming. Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Keep PLL0 running on DCE 6.0 and 6.4 Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Reject modes with too high pixel clock on DCE6-10 Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Disable fastboot on DCE 6 too Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/amdgpu: disable ASPM in some situations Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/amdgpu: decouple ASPM with pcie dpm Mario Limonciello <mario.limonciello(a)amd.com> x86/CPU/AMD: Add additional fixed RDSEED microcode revisions Li Xiasong <lixiasong1(a)huawei.com> MPTCP: fix lock class name family in pm_nl_create_listen_socket Thomas Richter <tmricht(a)linux.ibm.com> s390/cpum_sf: Cap sampling rate to prevent lsctl exception Heiko Carstens <hca(a)linux.ibm.com> s390/perf_cpum_sf: Convert to use try_cmpxchg128() Li Chen <me(a)linux.beauty> ext4: publish jinode after initialization Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 David Hildenbrand (Arm) <david(a)kernel.org> mm/memory: fix PMD/PUD checks in follow_pfnmap_start() Anshuman Khandual <anshuman.khandual(a)arm.com> mm: replace READ_ONCE() with standard page table accessors Jinjiang Tu <tujinjiang(a)huawei.com> mm/huge_memory: fix folio isn't locked in softleaf_to_folio() Nikunj A Dadhania <nikunj(a)amd.com> x86/fred: Fix early boot failures on SEV-ES/SNP guests Josef Bacik <josef(a)toxicpanda.com> scsi: target: tcm_loop: Drain commands in target_reset handler Guangshuo Li <lgs201920130244(a)gmail.com> net: mana: fix use-after-free in add_adev() error path Willem de Bruijn <willemb(a)google.com> net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback Emanuele Ghidoli <emanuele.ghidoli(a)toradex.com> spi: cadence-qspi: Fix exec_mem_op error handling Alexander Popov <alex.popov(a)linux.com> wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Taegu Ha <hataegu0826(a)gmail.com> usb: gadget: f_uac1_legacy: validate control request size Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: move list and spinlock inits from bind to alloc Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_eem: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ecm: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Protect RNDIS options with mutex Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix unbalanced refcnt in geth_free Jimmy Hu <hhhuuu(a)google.com> usb: gadget: uvc: fix NULL pointer dereference during unbind race Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop Filipe Manana <fdmanana(a)suse.com> btrfs: do not free data reservation in fallback from inline due to -ENOSPC Qu Wenruo <wqu(a)suse.com> btrfs: fix the qgroup data free range for inline data extents Zilin Guan <zilin(a)seu.edu.cn> ice: Fix memory leak in ice_set_ringparam() Nathan Rebello <nathan.c.rebello(a)gmail.com> usb: typec: ucsi: validate connector number in ucsi_notify_common() Sebastian Urban <surban(a)surban.net> usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix interrupt synchronization error Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix locking/synchronization error Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> thunderbolt: Fix property read in nhi_wake_supported() Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: possible double-free of cctx->remote_heap Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Fix thermal zone device registration error path Shenwei Wang <shenwei.wang(a)nxp.com> gpio: mxc: map Both Edge pad wakeup to Rising Edge Guangshuo Li <lgs201920130244(a)gmail.com> cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path Sven Eckelmann (Plasma Cloud) <se(a)simonwunderlich.de> net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled Yufan Chen <yufan.chen(a)linux.dev> net: ftgmac100: fix ring allocation unwind on open failure Yang Yang <n05ec(a)lzu.edu.cn> vxlan: validate ND option lengths in vxlan_na_create Eric Biggers <ebiggers(a)kernel.org> crypto: tegra - Add missing CRYPTO_ALG_ASYNC Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Yifan Wu <yifanwucs(a)gmail.com> netfilter: ipset: drop logically empty buckets in mtype_del Ivan Vera <ivanverasantos(a)gmail.com> nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Christian Eggers <ceggers(a)arri.de> nvmem: imx: assign nvmem_cell_info::raw_len Xu Yang <xu.yang_2(a)nxp.com> dt-bindings: connector: add pd-disable dependency Conor Dooley <conor.dooley(a)microchip.com> firmware: microchip: fail auto-update probe if no flash found Ian Abbott <abbotti(a)mev.co.uk> comedi: me4000: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: me_daq: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Fix invalid clean-up after failed attach Ian Abbott <abbotti(a)mev.co.uk> comedi: Reinit dev->spinlock between attachments to low-level drivers Deepanshu Kartikey <kartikey406(a)gmail.com> comedi: dt2815: add hardware detection to prevent crash Oliver Neukum <oneukum(a)suse.com> cdc-acm: new quirk for EPSON HMD Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: validate ND option lengths Sasha Levin <sashal(a)kernel.org> Revert "LoongArch/orc: Use RCU in all users of __module_address()." Sasha Levin <sashal(a)kernel.org> Revert "LoongArch: Remove unnecessary checks for ORC unwinder" Sasha Levin <sashal(a)kernel.org> Revert "LoongArch: Handle percpu handler address for ORC unwinder" Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix state inconsistency on gadget init failure Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix NULL pointer dereference in ep_queue Gabor Juhos <j4g8y7(a)gmail.com> usb: core: phy: avoid double use of 'usb3-phy' Juno Choi <juno.choi(a)lge.com> usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() Justin Chen <justin.chen(a)broadcom.com> usb: ehci-brcm: fix sleep during atomic Heitor Alves de Siqueira <halves(a)igalia.com> usb: usbtmc: Flush anchored URBs in usbtmc_release Guangshuo Li <lgs201920130244(a)gmail.com> usb: ulpi: fix double free in ulpi_register_interface() error path Miao Li <limiao(a)kylinos.cn> usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix out-of-sequence free_irq() Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Move iio_device_register() to correct location Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix irq resource leak Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix incorrect free_irq() variable Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only Josh Poimboeuf <jpoimboe(a)kernel.org> iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() David Lechner <dlechner(a)baylibre.com> iio: light: vcnl4035: fix scan buffer on big-endian Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: dac: ad5770r: fix error return in ad5770r_read_raw() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 Valek Andrej <andrej.v(a)skyrain.eu> iio: accel: fix ADXL355 temperature signature value Billy Tsai <billy_tsai(a)aspeedtech.com> iio: adc: aspeed: clear reference voltage bits before configuring vref Zoltan Illes <zoliviragh(a)gmail.com> Input: xpad - add support for Razer Wolverine V3 Pro Shengyu Qu <wiagn233(a)outlook.com> Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode Liam Mitchell <mitchell.liam(a)gmail.com> Input: bcm5974 - recover from failed mode switch Christoffer Sandberg <cs(a)tuxedo.de> Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Bart Van Assche <bvanassche(a)acm.org> Input: synaptics-rmi4 - fix a locking bug in an error path JP Hein <jp(a)jphein.com> USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Wanquan Zhong <wanquan.zhong(a)fibocom.com> USB: serial: option: add support for Rolling Wireless RW135R-GL Frej Drejhammar <frej(a)stacken.kth.se> USB: serial: io_edgeport: add support for Blackbox IC135A Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/pm: drop SMU driver if version not matched messages Donet Tom <donettom(a)linux.ibm.com> drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: dp501: Fix initialization of SCU2C Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: fix buffer read on big-endian Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: fix the idr allocation flags Stefan Wiehler <stefan.wiehler(a)nokia.com> mips: mm: Allocate tlb_vpn array atomically Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix division by zero in occ_show_power_1() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix the GCC version check for `__multi3' workaround Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: SiByte: Bring back cache initialisation Asim Viladi Oglu Manizada <manizada(a)pm.me> ksmbd: fix OOB write in QUERY_INFO for compound requests hkbinbin <hkbinbinbin(a)gmail.com> Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync Oleh Konko <security(a)1seal.org> Bluetooth: SMP: force responder MITM requirements before building the pairing response Oleh Konko <security(a)1seal.org> Bluetooth: SMP: derive legacy responder STK authentication from MITM state Junxi Qian <qjx1298677004(a)gmail.com> io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix missing SPDIFI1 index handling Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: fix stack out-of-bounds read in init_card Ernestas Kulik <ernestas.k(a)iconn-networks.com> USB: serial: option: add MeiG Smart SRM825WN Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/ioc32: stop speculation on the drm_compat_ioctl path Paul Walmsley <pjw(a)kernel.org> riscv: kgdb: fix several debug register assignment bugs Peter Zijlstra <peterz(a)infradead.org> sched/fair: Fix zero_vruntime tracking fix Vincent Guittot <vincent.guittot(a)linaro.org> sched/fair: Use protect_slice() instead of direct comparison Shiji Yang <yangshiji66(a)outlook.com> mips: ralink: update CPU clock index Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix missing newline in occ_show_extended() Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() Jamie Gibbons <jamie.gibbons(a)microchip.com> dt-bindings: gpio: fix microchip #interrupt-cells Sanman Pradhan <psanman(a)juniper.net> hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") Sanman Pradhan <psanman(a)juniper.net> hwmon: (pxe1610) Check return value of page-select write in probe Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> accel/qaic: Handle DBC deactivation if the owner went away David Lechner <dlechner(a)baylibre.com> iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one Maarten Lankhorst <dev(a)lankhorst.se> Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" Qi Tang <tpluszz77(a)gmail.com> bpf: reject direct access to nullable PTR_TO_BUF pointers Eric Dumazet <edumazet(a)google.com> ipv6: avoid overflows in ip6_datagram_send_ctl() Luka Gejak <luka.gejak(a)linux.dev> net: hsr: fix VLAN add unwind on slave errors Xiang Mei <xmei5(a)asu.edu> net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xiang Mei <xmei5(a)asu.edu> net/sched: cls_fw: fix NULL pointer dereference on shared blocks Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix overflow when accumulating packets Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix potential double free of skb Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Restore default stat ctxs for ULP when resource is available Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Fix switchdev mode rollback in case of failure Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Avoid "No data available" when FW version queries fail Shay Drory <shayd(a)nvidia.com> net/mlx5: lag: Check for LAG device before creating debugfs Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: properly unregister fixed rate clocks Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix clk handling on PCI glue driver removal Yucheng Lu <kanolyc(a)gmail.com> net/sched: sch_netem: fix out-of-bounds access in packet corruption Kuniyuki Iwashima <kuniyu(a)google.com> bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). Weiming Shi <bestswngs(a)gmail.com> rds: ib: reject FRMR registration before IB connection is established Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate mesh send advertising payload length Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate LTK enc_size on load Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: SCO: fix race conditions in sco_sock_connect() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: reject immediate NF_QUEUE verdict Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: ignore explicit helper on new expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store netns and zone in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use expect->helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: honor expectation helper field Qi Tang <tpluszz77(a)gmail.com> netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent Qi Tang <tpluszz77(a)gmail.com> netfilter: nf_conntrack_helper: pass helper to expect cleanup Florian Westphal <fw(a)strlen.de> netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Florian Westphal <fw(a)strlen.de> netfilter: x_tables: ensure names are nul-terminated Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: account for netlink header size Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: strictly check for maximum number of actions Zhengchuan Liang <zcliangcn(a)gmail.com> net: ipv6: flowlabel: defer exclusive option free until RCU teardown Alexei Starovoitov <ast(a)kernel.org> bpf: Fix regsafe() for pointers to packet Julian Braha <julianbraha(a)gmail.com> ASoC: Intel: boards: fix unmet dependency on PINCTRL Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec Pengpeng Hou <pengpeng(a)iscas.ac.cn> NFC: pn533: bound the UART receive buffer Yochai Eisenrich <echelonh(a)gmail.com> net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Guoyu Su <yss2813483011xxl(a)gmail.com> net: use skb_header_pointer() for TCPv4 GSO frag_off check Paolo Abeni <pabeni(a)redhat.com> net: introduce mangleid_features Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() Paolo Abeni <pabeni(a)redhat.com> ipv6: prevent possible UaF in addrconf_permanent_addr() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure Wei Fang <wei.fang(a)nxp.com> net: enetc: check whether the RSS algorithm is Toeplitz Marek Behún <kabel(a)kernel.org> net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta Xiang Mei <xmei5(a)asu.edu> net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: linearize skb before parsing ND options Dimitri Daskalakis <daskald(a)meta.com> eth: fbnic: Account for page fragments when updating BDQ tail Eric Dumazet <edumazet(a)google.com> ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Eric Dumazet <edumazet(a)google.com> ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Thomas Bogendoerfer <tbogendoerfer(a)suse.de> tg3: Fix race for querying speed/duplex Pengpeng Hou <pengpeng(a)iscas.ac.cn> net/ipv6: ioam6: prevent schema length wraparound in trace fill Yochai Eisenrich <echelonh(a)gmail.com> net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Jiayuan Chen <jiayuan.chen(a)shopee.com> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Buday Csaba <buday.csaba(a)prolan.hu> net: fec: fix the PTP periodic output sysfs interface Norbert Szetei <norbert(a)doyensec.com> crypto: af-alg - fix NULL pointer dereference in scatterwalk Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix overflow on long hmac keys Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix DMA corruption on long hmac keys Reshma Immaculate Rajkumar <reshma.rajkumar(a)oss.qualcomm.com> wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session Frank Li <Frank.Li(a)nxp.com> dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning Praveen Talari <praveen.talari(a)oss.qualcomm.com> spi: geni-qcom: Check DMA interrupts early in ISR ZhengYuan Huang <gality369(a)gmail.com> btrfs: reject root items with drop_progress and zero drop_level Mikko Perttunen <mperttunen(a)nvidia.com> i2c: tegra: Don't mark devices with pins as IRQ safe Filipe Manana <fdmanana(a)suse.com> btrfs: reserve enough transaction items for qgroup ioctls Lee Jones <lee(a)kernel.org> HID: multitouch: Check to ensure report responses match the request Lee Jones <lee(a)kernel.org> HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix Clang jump table detection Paul SAGE <paul.sage(a)42.fr> tg3: replace placeholder MAC address with device property Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: don't take device_list_mutex when querying zone info Deepanshu Kartikey <kartikey406(a)gmail.com> atm: lec: fix use-after-free in sock_def_readable() Benoît Sevens <bsevens(a)google.com> HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: mac80211: check tdls flag in ieee80211_tdls_oper Adrian Freund <adrian(a)freund.io> HID: logitech-hidpp: Enable MX Master 4 over bluetooth Pepper Gray <hello(a)peppergray.xyz> arm64/scs: Fix handling of advance_loc4 Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: propagate BUF_MORE through early buffer commit path Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF Joanne Koong <joannelkoong(a)gmail.com> io_uring/kbuf: use WRITE_ONCE() for userspace-shared buffer ring fields Caleb Sander Mateos <csander(a)purestorage.com> io_uring/kbuf: use READ_ONCE() for userspace-mapped memory Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: enable bundles for incrementally consumed buffers Jens Axboe <axboe(a)kernel.dk> io_uring/rw: check for NULL io_br_sel when putting a buffer Jens Axboe <axboe(a)kernel.dk> io_uring/net: correct type for min_not_zero() cast Jens Axboe <axboe(a)kernel.dk> io_uring: remove async/poll related provided buffer recycles Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: switch to storing struct io_buffer_list locally Jens Axboe <axboe(a)kernel.dk> io_uring/net: use struct io_br_sel->val as the send finish value Jens Axboe <axboe(a)kernel.dk> io_uring/net: use struct io_br_sel->val as the recv finish value Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: use struct io_br_sel for multiple buffers picking Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: introduce struct io_br_sel Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: pass in struct io_buffer_list to commit/recycle helpers Jens Axboe <axboe(a)kernel.dk> io_uring/net: clarify io_recv_buf_select() return value Jens Axboe <axboe(a)kernel.dk> io_uring/net: don't use io_net_kbuf_recyle() for non-provided cases Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: drop 'issue_flags' from io_put_kbuf(s)() arguments Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: uninline __io_put_kbufs Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: introduce io_kbuf_drop_legacy() Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: open code __io_put_kbuf() Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: remove legacy kbuf caching Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: simplify __io_put_kbuf Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: remove legacy kbuf kmem cache Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: remove legacy kbuf bulk allocation ------------- Diffstat: .../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +- .../bindings/connector/usb-connector.yaml | 1 + .../bindings/gpio/microchip,mpfs-gpio.yaml | 4 +- Makefile | 4 +- arch/arm64/kernel/pi/patch-scs.c | 8 + arch/loongarch/include/asm/setup.h | 3 - arch/loongarch/kernel/unwind_orc.c | 32 +-- arch/mips/lib/multi3.c | 6 +- arch/mips/mm/cache.c | 3 +- arch/mips/mm/tlb-r4k.c | 2 +- arch/mips/ralink/clk.c | 8 +- arch/riscv/kernel/kgdb.c | 7 +- arch/s390/kernel/perf_cpum_sf.c | 30 +-- arch/x86/coco/sev/core.c | 6 + arch/x86/entry/entry_fred.c | 14 + arch/x86/kernel/cpu/amd.c | 7 + crypto/af_alg.c | 4 +- drivers/accel/qaic/qaic_control.c | 47 +++- drivers/comedi/drivers.c | 8 + drivers/comedi/drivers/dt2815.c | 12 + drivers/comedi/drivers/me4000.c | 16 +- drivers/comedi/drivers/me_daq.c | 35 +-- drivers/comedi/drivers/ni_atmio16d.c | 3 +- drivers/counter/rz-mtu3-cnt.c | 67 ++--- drivers/cpufreq/cpufreq_governor.c | 6 +- drivers/crypto/caam/caamalg_qi2.c | 3 +- drivers/crypto/caam/caamhash.c | 3 +- drivers/crypto/tegra/tegra-se-aes.c | 11 +- drivers/crypto/tegra/tegra-se-hash.c | 30 ++- drivers/firmware/microchip/mpfs-auto-update.c | 10 +- drivers/gpio/gpio-mxc.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 39 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 +- .../amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 20 +- .../amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 5 + .../gpu/drm/amd/display/dc/dce60/dce60_resource.c | 59 +++-- .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 6 +- .../display/dc/resource/dce100/dce100_resource.c | 10 +- .../amd/display/dc/resource/dce80/dce80_resource.c | 10 +- drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 1 - drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c | 1 - .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 33 ++- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 33 ++- drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1 - drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/g4x_dp.c | 2 +- drivers/gpu/drm/i915/display/icl_dsi.c | 4 +- drivers/hid/hid-logitech-hidpp.c | 6 +- drivers/hid/hid-multitouch.c | 7 + drivers/hid/wacom_wac.c | 10 + drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/pmbus/ltc4286.c | 1 + drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/hwmon/pmbus/tps53679.c | 4 +- drivers/i2c/busses/Kconfig | 2 + drivers/i2c/busses/i2c-tegra.c | 5 +- drivers/iio/accel/adxl355_core.c | 2 +- drivers/iio/accel/adxl380.c | 2 +- drivers/iio/adc/aspeed_adc.c | 1 + drivers/iio/adc/ti-adc161s626.c | 41 ++- drivers/iio/adc/ti-ads1119.c | 11 +- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 32 ++- drivers/iio/imu/bmi160/bmi160_core.c | 15 +- drivers/iio/imu/bno055/bno055.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4 + drivers/iio/light/vcnl4035.c | 18 +- drivers/input/joystick/xpad.c | 5 + drivers/input/mouse/bcm5974.c | 42 ++- drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/misc/fastrpc.c | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 + drivers/net/ethernet/broadcom/tg3.c | 13 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 4 + drivers/net/ethernet/freescale/fec_ptp.c | 3 - drivers/net/ethernet/intel/ice/ice_ethtool.c | 11 +- drivers/net/ethernet/mediatek/airoha_eth.c | 18 +- drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 21 +- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++-- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 + .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 6 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 6 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/phy/sfp.c | 7 +- drivers/net/vxlan/vxlan_core.c | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 15 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +- drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/virtual/virt_wifi.c | 1 - drivers/nfc/pn533/uart.c | 3 + drivers/nvmem/imx-ocotp-ele.c | 1 + drivers/nvmem/imx-ocotp.c | 1 + drivers/nvmem/zynqmp_nvmem.c | 8 +- drivers/spi/spi-cadence-quadspi.c | 13 +- drivers/spi/spi-geni-qcom.c | 9 +- drivers/target/loopback/tcm_loop.c | 52 +++- drivers/thermal/thermal_core.c | 1 + drivers/thunderbolt/nhi.c | 2 +- drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/class/cdc-acm.c | 9 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/usbtmc.c | 3 + drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/phy.c | 12 +- drivers/usb/core/quirks.c | 3 + drivers/usb/dwc2/gadget.c | 2 + drivers/usb/gadget/function/f_ecm.c | 35 ++- drivers/usb/gadget/function/f_eem.c | 59 +++-- drivers/usb/gadget/function/f_hid.c | 19 +- drivers/usb/gadget/function/f_rndis.c | 49 ++-- drivers/usb/gadget/function/f_subset.c | 63 +++-- drivers/usb/gadget/function/f_uac1_legacy.c | 47 +++- drivers/usb/gadget/function/f_uvc.c | 39 ++- drivers/usb/gadget/function/u_ecm.h | 21 +- drivers/usb/gadget/function/u_eem.h | 21 +- drivers/usb/gadget/function/u_ether.c | 16 +- drivers/usb/gadget/function/u_gether.h | 22 +- drivers/usb/gadget/function/u_rndis.h | 31 ++- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 5 +- drivers/usb/gadget/udc/dummy_hcd.c | 42 +-- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + drivers/usb/typec/ucsi/ucsi.c | 9 +- fs/btrfs/inode.c | 6 +- fs/btrfs/ioctl.c | 12 +- fs/btrfs/tree-checker.c | 17 ++ fs/btrfs/zoned.c | 6 +- fs/ext4/fast_commit.c | 4 +- fs/ext4/inode.c | 15 +- fs/smb/server/smb2pdu.c | 121 ++++++--- fs/smb/server/smbacl.c | 43 +++ fs/smb/server/smbacl.h | 2 + include/linux/io_uring_types.h | 9 - include/linux/netdevice.h | 3 + include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/swapops.h | 27 +- include/net/netfilter/nf_conntrack_expect.h | 20 +- io_uring/io_uring.c | 15 +- io_uring/io_uring.h | 1 - io_uring/kbuf.c | 289 ++++++++++----------- io_uring/kbuf.h | 148 +++-------- io_uring/net.c | 149 ++++++----- io_uring/poll.c | 4 - io_uring/rw.c | 58 +++-- kernel/bpf/verifier.c | 87 ++++++- kernel/sched/fair.c | 12 +- mm/gup.c | 10 +- mm/hmm.c | 2 +- mm/memory.c | 22 +- mm/mprotect.c | 2 +- mm/sparse-vmemmap.c | 2 +- mm/vmscan.c | 2 +- net/atm/lec.c | 72 +++-- net/atm/lec.h | 2 +- net/bluetooth/hci_conn.c | 8 +- net/bluetooth/hci_event.c | 33 ++- net/bluetooth/hci_sync.c | 14 +- net/bluetooth/mgmt.c | 17 +- net/bluetooth/sco.c | 30 ++- net/bluetooth/smp.c | 11 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/core/dev.c | 38 ++- net/core/skmsg.c | 13 +- net/hsr/hsr_device.c | 32 +-- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 + net/ipv6/icmp.c | 3 + net/ipv6/ioam6.c | 4 +- net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 5 + net/ipv6/ndisc.c | 3 + net/mac80211/tdls.c | 2 +- net/mptcp/pm_netlink.c | 2 +- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_broadcast.c | 8 +- net/netfilter/nf_conntrack_expect.c | 25 +- net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 13 +- net/netfilter/nf_conntrack_netlink.c | 87 +++---- net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_flow_table_offload.c | 196 +++++++++----- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_log.c | 2 +- net/netfilter/x_tables.c | 23 ++ net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_rateest.c | 5 + net/qrtr/af_qrtr.c | 31 +-- net/rds/ib_rdma.c | 7 +- net/sched/cls_api.c | 1 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_hfsc.c | 4 +- net/sched/sch_netem.c | 5 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + sound/pci/ctxfi/ctdaio.c | 1 + sound/soc/cirrus/ep93xx-i2s.c | 34 ++- sound/soc/intel/boards/Kconfig | 2 - sound/usb/caiaq/device.c | 2 +- tools/objtool/check.c | 5 +- .../testing/selftests/bpf/prog_tests/reg_bounds.c | 62 ++++- .../testing/selftests/bpf/progs/verifier_bounds.c | 159 +++++++++++- 218 files changed, 2626 insertions(+), 1283 deletions(-)

1 month, 1 week

8
7
0 0

[PATCH 6.18 000/276] 6.18.22-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.22 release. There are 276 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 11 Apr 2026 09:26:30 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.22-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.22-rc2 Andrea Righi <arighi(a)nvidia.com> sched_ext: Fix stale direct dispatch state in ddsp_dsq_id Tejun Heo <tj(a)kernel.org> sched_ext: Refactor do_enqueue_task() local and global DSQ paths David Hildenbrand (Arm) <david(a)kernel.org> mm/memory: fix PMD/PUD checks in follow_pfnmap_start() Anshuman Khandual <anshuman.khandual(a)arm.com> mm: replace READ_ONCE() with standard page table accessors Josef Bacik <josef(a)toxicpanda.com> scsi: target: tcm_loop: Drain commands in target_reset handler Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> scsi: target: file: Use kzalloc_flex for aio_cmd Willem de Bruijn <willemb(a)google.com> net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback Guangshuo Li <lgs201920130244(a)gmail.com> net: mana: fix use-after-free in add_adev() error path Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display: Fix DCE LVDS handling Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 Alexander Popov <alex.popov(a)linux.com> wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Petr Mladek <pmladek(a)suse.com> kallsyms: prevent module removal when printing module name and buildid Petr Mladek <pmladek(a)suse.com> kallsyms: cleanup code for appending the module buildid Petr Mladek <pmladek(a)suse.com> kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() Petr Mladek <pmladek(a)suse.com> kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid() Taegu Ha <hataegu0826(a)gmail.com> usb: gadget: f_uac1_legacy: validate control request size Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: move list and spinlock inits from bind to alloc Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_eem: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ecm: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Protect RNDIS options with mutex Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix unbalanced refcnt in geth_free Jimmy Hu <hhhuuu(a)google.com> usb: gadget: uvc: fix NULL pointer dereference during unbind race Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop Zilin Guan <zilin(a)seu.edu.cn> ice: Fix memory leak in ice_set_ringparam() Aditya Garg <gargaditya08(a)live.com> HID: appletb-kbd: add .resume method in PM Nathan Rebello <nathan.c.rebello(a)gmail.com> usb: typec: ucsi: validate connector number in ucsi_notify_common() Sebastian Urban <surban(a)surban.net> usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix interrupt synchronization error Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix locking/synchronization error Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> thunderbolt: Fix property read in nhi_wake_supported() Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: thunderbolt: Set enter_vdo during initialization Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: possible double-free of cctx->remote_heap Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Fix thermal zone device registration error path Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Address thermal zone removal races with resume Tzung-Bi Shih <tzungbi(a)kernel.org> gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() Shenwei Wang <shenwei.wang(a)nxp.com> gpio: mxc: map Both Edge pad wakeup to Rising Edge Changwoo Min <changwoo(a)igalia.com> sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU Guangshuo Li <lgs201920130244(a)gmail.com> cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path Srujana Challa <schalla(a)marvell.com> virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN Sven Eckelmann (Plasma Cloud) <se(a)simonwunderlich.de> net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled Yufan Chen <yufan.chen(a)linux.dev> net: ftgmac100: fix ring allocation unwind on open failure Yang Yang <n05ec(a)lzu.edu.cn> vxlan: validate ND option lengths in vxlan_na_create Eric Biggers <ebiggers(a)kernel.org> crypto: tegra - Add missing CRYPTO_ALG_ASYNC Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Nicolas Pitre <nico(a)fluxnic.net> vt: resize saved unicode buffer on alt screen exit after resize Liav Mordouch <liavmordouch(a)gmail.com> vt: discard stale unicode buffer on alt screen exit after resize Dave Penkler <dpenkler(a)gmail.com> gpib: Fix fluke driver s390 compile issue Yifan Wu <yifanwucs(a)gmail.com> netfilter: ipset: drop logically empty buckets in mtype_del Ivan Vera <ivanverasantos(a)gmail.com> nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Christian Eggers <ceggers(a)arri.de> nvmem: imx: assign nvmem_cell_info::raw_len Thomas Richter <tmricht(a)linux.ibm.com> s390/cpum_sf: Cap sampling rate to prevent lsctl exception Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix memory leak with CCA cards used as accelerator Emanuele Ghidoli <emanuele.ghidoli(a)toradex.com> spi: cadence-qspi: Fix exec_mem_op error handling Xu Yang <xu.yang_2(a)nxp.com> dt-bindings: connector: add pd-disable dependency Conor Dooley <conor.dooley(a)microchip.com> firmware: microchip: fail auto-update probe if no flash found Ian Abbott <abbotti(a)mev.co.uk> comedi: me4000: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: me_daq: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Fix invalid clean-up after failed attach Ian Abbott <abbotti(a)mev.co.uk> comedi: Reinit dev->spinlock between attachments to low-level drivers Deepanshu Kartikey <kartikey406(a)gmail.com> comedi: dt2815: add hardware detection to prevent crash Oliver Neukum <oneukum(a)suse.com> cdc-acm: new quirk for EPSON HMD Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: validate ND option lengths Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: sc7280: make use of common helpers Jens Axboe <axboe(a)kernel.dk> io_uring: protect remaining lockless ctx->rings accesses with RCU Guan-Yu Lin <guanyulin(a)google.com> usb: core: use dedicated spinlock for offload state Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix state inconsistency on gadget init failure Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix NULL pointer dereference in ep_queue Gabor Juhos <j4g8y7(a)gmail.com> usb: core: phy: avoid double use of 'usb3-phy' Juno Choi <juno.choi(a)lge.com> usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() Justin Chen <justin.chen(a)broadcom.com> usb: ehci-brcm: fix sleep during atomic Guan-Yu Lin <guanyulin(a)google.com> usb: host: xhci-sideband: delegate offload_usage tracking to class drivers Felix Gu <ustc.gu(a)gmail.com> usb: misc: usbio: Fix URB memory leak on submit failure Heitor Alves de Siqueira <halves(a)igalia.com> usb: usbtmc: Flush anchored URBs in usbtmc_release Guangshuo Li <lgs201920130244(a)gmail.com> usb: ulpi: fix double free in ulpi_register_interface() error path Miao Li <limiao(a)kylinos.cn> usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Johan Hovold <johan(a)kernel.org> gpib: lpvo_usb: fix memory leak on disconnect Alexander Usyskin <alexander.usyskin(a)intel.com> mei: me: reduce the scope on unexpected reset Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix out-of-sequence free_irq() Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Move iio_device_register() to correct location Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix irq resource leak Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix incorrect free_irq() variable Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only Josh Poimboeuf <jpoimboe(a)kernel.org> iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() Aldo Conte <aldocontelk(a)gmail.com> iio: light: veml6070: fix veml6070_read() return value David Lechner <dlechner(a)baylibre.com> iio: light: vcnl4035: fix scan buffer on big-endian Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: imu: adis16550: fix swapped gyro/accel filter functions Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: dac: ad5770r: fix error return in ad5770r_read_raw() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: accel: adxl313: add missing error check in predisable Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 Valek Andrej <andrej.v(a)skyrain.eu> iio: accel: fix ADXL355 temperature signature value Billy Tsai <billy_tsai(a)aspeedtech.com> iio: adc: aspeed: clear reference voltage bits before configuring vref Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: adc: ade9000: move mutex init before IRQ registration Giorgi Tchankvetadze <giorgitchankvetadze1997(a)gmail.com> iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power Giorgi Tchankvetadze <giorgitchankvetadze1997(a)gmail.com> iio: adc: ade9000: fix wrong return type in streaming push Dmitry Torokhov <dmitry.torokhov(a)gmail.com> iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> iio: adc: ti-ads7950: normalize return value of gpio_get Zoltan Illes <zoliviragh(a)gmail.com> Input: xpad - add support for Razer Wolverine V3 Pro Shengyu Qu <wiagn233(a)outlook.com> Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode Liam Mitchell <mitchell.liam(a)gmail.com> Input: bcm5974 - recover from failed mode switch Christoffer Sandberg <cs(a)tuxedo.de> Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Bart Van Assche <bvanassche(a)acm.org> Input: synaptics-rmi4 - fix a locking bug in an error path JP Hein <jp(a)jphein.com> USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Wanquan Zhong <wanquan.zhong(a)fibocom.com> USB: serial: option: add support for Rolling Wireless RW135R-GL Frej Drejhammar <frej(a)stacken.kth.se> USB: serial: io_edgeport: add support for Blackbox IC135A Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/pm: drop SMU driver if version not matched messages Donet Tom <donettom(a)linux.ibm.com> drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Junrui Luo <moonafterrain(a)outlook.com> drm/amdgpu: validate doorbell_offset in user queue creation Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Fix wait after reset sequence in S4 Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: dp501: Fix initialization of SCU2C Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: fix buffer read on big-endian David Lechner <dlechner(a)baylibre.com> iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace David Lechner <dlechner(a)baylibre.com> iio: orientation: hid-sensor-rotation: fix quaternion alignment David Lechner <dlechner(a)baylibre.com> iio: add IIO_DECLARE_QUATERNION() macro Adam Crosser <adam.crosser(a)praetorian.com> gpib: fix use-after-free in IO ioctl handlers Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: fix the idr allocation flags Aleksandr Nogikh <nogikh(a)google.com> x86/kexec: Disable KCOV instrumentation after load_segments() Stefan Wiehler <stefan.wiehler(a)nokia.com> mips: mm: Allocate tlb_vpn array atomically Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix division by zero in occ_show_power_1() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix the GCC version check for `__multi3' workaround Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: SiByte: Bring back cache initialisation Asim Viladi Oglu Manizada <manizada(a)pm.me> ksmbd: fix OOB write in QUERY_INFO for compound requests hkbinbin <hkbinbinbin(a)gmail.com> Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync Oleh Konko <security(a)1seal.org> Bluetooth: SMP: force responder MITM requirements before building the pairing response Oleh Konko <security(a)1seal.org> Bluetooth: SMP: derive legacy responder STK authentication from MITM state Junxi Qian <qjx1298677004(a)gmail.com> io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() Sourav Nayak <nonameblank007(a)gmail.com> ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15 Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix missing SPDIFI1 index handling Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: fix stack out-of-bounds read in init_card Eric Biggers <ebiggers(a)kernel.org> lib/crypto: chacha: Zeroize permuted_state before it leaves scope Cheng-Yang Chou <yphbchou0911(a)gmail.com> sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() Ernestas Kulik <ernestas.k(a)iconn-networks.com> USB: serial: option: add MeiG Smart SRM825WN Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Alice Ryhl <aliceryhl(a)google.com> rust_binder: use AssertSync for BINDER_VM_OPS Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/ioc32: stop speculation on the drm_compat_ioctl path Sunil V L <sunilvl(a)oss.qualcomm.com> ACPI: RIMT: Add dependency between iommu and devices Zishun Yi <vulab(a)iscas.ac.cn> riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set Paul Walmsley <pjw(a)kernel.org> riscv: kgdb: fix several debug register assignment bugs Ian Rogers <irogers(a)google.com> perf/x86: Fix potential bad container_of in intel_pmu_hw_config Peter Zijlstra <peterz(a)infradead.org> sched/fair: Fix zero_vruntime tracking fix Shiji Yang <yangshiji66(a)outlook.com> mips: ralink: update CPU clock index Corey Hickey <bugfood-c(a)fatooh.org> hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI Chen Ni <nichen(a)iscas.ac.cn> drm/sysfb: Fix efidrm error handling and memory type mismatch Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix missing newline in occ_show_extended() Felix Gu <ustc.gu(a)gmail.com> spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Clear restart flag in pxp_start after jumping back Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Remove incorrect handling of impossible state during suspend Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Clean up termination status on failure Felix Gu <ustc.gu(a)gmail.com> spi: stm32-ospi: Fix reset control leak on probe error Felix Gu <ustc.gu(a)gmail.com> spi: stm32-ospi: Fix resource leak in remove() callback Jamie Gibbons <jamie.gibbons(a)microchip.com> dt-bindings: gpio: fix microchip #interrupt-cells Sanman Pradhan <psanman(a)juniper.net> hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") Sanman Pradhan <psanman(a)juniper.net> hwmon: (pxe1610) Check return value of page-select write in probe Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix array access with zero-length block read Qi Tang <tpluszz77(a)gmail.com> io_uring/rsrc: reject zero-length fixed buffer import Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> accel/qaic: Handle DBC deactivation if the owner went away Barnabás Pőcze <pobrn(a)protonmail.com> gpiolib: clear requested flag if line is invalid Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpio: rename gpio_chip_hwgpio() to gpiod_hwgpio() David Lechner <dlechner(a)baylibre.com> iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one Maarten Lankhorst <dev(a)lankhorst.se> Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" Varun R Mallya <varunrmallya(a)gmail.com> bpf: Reject sleepable kprobe_multi programs at attach time Qi Tang <tpluszz77(a)gmail.com> bpf: reject direct access to nullable PTR_TO_BUF pointers Dimitri Daskalakis <daskald(a)meta.com> eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64 Eric Dumazet <edumazet(a)google.com> ipv6: avoid overflows in ip6_datagram_send_ctl() Luka Gejak <luka.gejak(a)linux.dev> net: hsr: fix VLAN add unwind on slave errors Xiang Mei <xmei5(a)asu.edu> net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xiang Mei <xmei5(a)asu.edu> net/sched: cls_fw: fix NULL pointer dereference on shared blocks Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix overflow when accumulating packets Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix potential double free of skb Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Restore default stat ctxs for ULP when resource is available Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Fix switchdev mode rollback in case of failure Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Avoid "No data available" when FW version queries fail Shay Drory <shayd(a)nvidia.com> net/mlx5: lag: Check for LAG device before creating debugfs Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: properly unregister fixed rate clocks Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix clk handling on PCI glue driver removal Yucheng Lu <kanolyc(a)gmail.com> net/sched: sch_netem: fix out-of-bounds access in packet corruption Kuniyuki Iwashima <kuniyu(a)google.com> bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). Weiming Shi <bestswngs(a)gmail.com> rds: ib: reject FRMR registration before IB connection is established Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate mesh send advertising payload length Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate LTK enc_size on load Jonathan Rissanen <jonathan.rissanen(a)axis.com> Bluetooth: hci_h4: Fix race during initialization Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: SCO: fix race conditions in sco_sock_connect() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: reject immediate NF_QUEUE verdict Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: ignore explicit helper on new expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store netns and zone in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use expect->helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: honor expectation helper field Qi Tang <tpluszz77(a)gmail.com> netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent Qi Tang <tpluszz77(a)gmail.com> netfilter: nf_conntrack_helper: pass helper to expect cleanup Florian Westphal <fw(a)strlen.de> netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Florian Westphal <fw(a)strlen.de> netfilter: x_tables: ensure names are nul-terminated Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: account for netlink header size Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: strictly check for maximum number of actions Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP Michal Piekos <michal.piekos(a)mmpsystems.pl> net: stmmac: skip VLAN restore when VLAN hash ops are missing Li Xiasong <lixiasong1(a)huawei.com> mptcp: fix soft lockup in mptcp_recvmsg() Geliang Tang <geliang(a)kernel.org> mptcp: add eat_recv_skb helper Zhengchuan Liang <zcliangcn(a)gmail.com> net: ipv6: flowlabel: defer exclusive option free until RCU teardown Alexei Starovoitov <ast(a)kernel.org> bpf: Fix regsafe() for pointers to packet Julian Braha <julianbraha(a)gmail.com> ASoC: Intel: boards: fix unmet dependency on PINCTRL Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec Pengpeng Hou <pengpeng(a)iscas.ac.cn> NFC: pn533: bound the UART receive buffer Xiang Mei <xmei5(a)asu.edu> net: bonding: fix use-after-free in bond_xmit_broadcast() Herbert Xu <herbert(a)gondor.apana.org.au> crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption Herbert Xu <herbert(a)gondor.apana.org.au> crypto: algif_aead - Revert to operating out-of-place Pengpeng Hou <pengpeng(a)iscas.ac.cn> bnxt_en: set backing store type from query type Yochai Eisenrich <echelonh(a)gmail.com> net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Guoyu Su <yss2813483011xxl(a)gmail.com> net: use skb_header_pointer() for TCPv4 GSO frag_off check Paolo Abeni <pabeni(a)redhat.com> net: introduce mangleid_features Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() Paolo Abeni <pabeni(a)redhat.com> ipv6: prevent possible UaF in addrconf_permanent_addr() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure Dag Smedberg <dag(a)dsmedberg.se> ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP Wei Fang <wei.fang(a)nxp.com> net: enetc: do not allow VF to configure the RSS key Wei Fang <wei.fang(a)nxp.com> net: enetc: check whether the RSS algorithm is Toeplitz Marek Behún <kabel(a)kernel.org> net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta Xiang Mei <xmei5(a)asu.edu> net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: linearize skb before parsing ND options Dimitri Daskalakis <daskald(a)meta.com> eth: fbnic: Account for page fragments when updating BDQ tail Eric Dumazet <edumazet(a)google.com> ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Eric Dumazet <edumazet(a)google.com> ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Thomas Bogendoerfer <tbogendoerfer(a)suse.de> tg3: Fix race for querying speed/duplex Pengpeng Hou <pengpeng(a)iscas.ac.cn> net/ipv6: ioam6: prevent schema length wraparound in trace fill Yochai Eisenrich <echelonh(a)gmail.com> net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Jiayuan Chen <jiayuan.chen(a)shopee.com> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Wei Fang <wei.fang(a)nxp.com> net: enetc: reset PIR and CIR if they are not equal when initializing TX ring Buday Csaba <buday.csaba(a)prolan.hu> net: fec: fix the PTP periodic output sysfs interface Qingfang Deng <dqfext(a)gmail.com> netdevsim: fix build if SKB_EXTENSIONS=n Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: Fix RX skb truesize accounting Norbert Szetei <norbert(a)doyensec.com> crypto: af-alg - fix NULL pointer dereference in scatterwalk Mikulas Patocka <mpatocka(a)redhat.com> crypto: deflate - fix spurious -ENOSPC Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix overflow on long hmac keys Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix DMA corruption on long hmac keys Reshma Immaculate Rajkumar <reshma.rajkumar(a)oss.qualcomm.com> wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mld: correctly set wifi generation data Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: disable EHT if the device doesn't allow it Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: cfg: add new device names Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: don't send a 6E related command when not supported Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: iwlwifi: mld: Fix MLO scan timing Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: fix remaining kernel-doc warnings Frank Li <Frank.Li(a)nxp.com> dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning Praveen Talari <praveen.talari(a)oss.qualcomm.com> spi: geni-qcom: Check DMA interrupts early in ISR Paulo Alcantara <pc(a)manguebit.org> smb: client: fix generic/694 due to wrong ->i_blocks ZhengYuan Huang <gality369(a)gmail.com> btrfs: reject root items with drop_progress and zero drop_level Mikko Perttunen <mperttunen(a)nvidia.com> i2c: tegra: Don't mark devices with pins as IRQ safe Filipe Manana <fdmanana(a)suse.com> btrfs: reserve enough transaction items for qgroup ioctls Lee Jones <lee(a)kernel.org> HID: multitouch: Check to ensure report responses match the request Lee Jones <lee(a)kernel.org> HID: core: Mitigate potential OOB by removing bogus memset() Lee Jones <lee(a)kernel.org> HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix Clang jump table detection Paul SAGE <paul.sage(a)42.fr> tg3: replace placeholder MAC address with device property Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: don't take device_list_mutex when querying zone info Deepanshu Kartikey <kartikey406(a)gmail.com> atm: lec: fix use-after-free in sock_def_readable() Benoît Sevens <bsevens(a)google.com> HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: mac80211: check tdls flag in ieee80211_tdls_oper Adrian Freund <adrian(a)freund.io> HID: logitech-hidpp: Enable MX Master 4 over bluetooth Pepper Gray <hello(a)peppergray.xyz> arm64/scs: Fix handling of advance_loc4 ------------- Diffstat: .../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +- .../bindings/connector/usb-connector.yaml | 1 + .../bindings/gpio/microchip,mpfs-gpio.yaml | 4 +- Makefile | 4 +- arch/arm64/kernel/pi/patch-scs.c | 8 + arch/mips/lib/multi3.c | 6 +- arch/mips/mm/cache.c | 3 +- arch/mips/mm/tlb-r4k.c | 2 +- arch/mips/ralink/clk.c | 8 +- arch/riscv/kernel/kgdb.c | 7 +- arch/riscv/kernel/process.c | 4 +- arch/s390/kernel/perf_cpum_sf.c | 6 +- arch/x86/events/intel/core.c | 6 +- arch/x86/kernel/Makefile | 14 ++ arch/x86/mm/Makefile | 2 + crypto/af_alg.c | 53 ++---- crypto/algif_aead.c | 100 ++--------- crypto/algif_skcipher.c | 6 +- crypto/authencesn.c | 50 +++--- crypto/deflate.c | 11 +- drivers/accel/qaic/qaic_control.c | 47 ++++- drivers/acpi/riscv/rimt.c | 7 + drivers/android/binder/page_range.rs | 8 +- drivers/android/binder/rust_binder_main.rs | 2 +- drivers/bluetooth/hci_h4.c | 3 - drivers/comedi/drivers.c | 8 + drivers/comedi/drivers/dt2815.c | 12 ++ drivers/comedi/drivers/me4000.c | 16 +- drivers/comedi/drivers/me_daq.c | 35 ++-- drivers/comedi/drivers/ni_atmio16d.c | 3 +- drivers/counter/rz-mtu3-cnt.c | 67 +++---- drivers/cpufreq/cpufreq_governor.c | 6 +- drivers/crypto/caam/caamalg_qi2.c | 3 +- drivers/crypto/caam/caamhash.c | 3 +- drivers/crypto/tegra/tegra-se-aes.c | 11 +- drivers/crypto/tegra/tegra-se-hash.c | 30 ++-- drivers/firmware/microchip/mpfs-auto-update.c | 10 +- drivers/gpio/gpio-aspeed.c | 6 +- drivers/gpio/gpio-mxc.c | 10 +- drivers/gpio/gpiolib-cdev.c | 12 +- drivers/gpio/gpiolib-sysfs.c | 14 +- drivers/gpio/gpiolib.c | 175 +++++++++--------- drivers/gpio/gpiolib.h | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 +- drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 17 +- .../display/dc/resource/dce100/dce100_resource.c | 5 +- .../display/dc/resource/dce110/dce110_resource.c | 5 +- .../display/dc/resource/dce112/dce112_resource.c | 5 +- .../display/dc/resource/dce120/dce120_resource.c | 5 +- .../amd/display/dc/resource/dce60/dce60_resource.c | 13 +- .../amd/display/dc/resource/dce80/dce80_resource.c | 5 +- drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 1 - drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c | 1 - .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 33 +++- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 33 +++- drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1 - drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/g4x_dp.c | 2 +- drivers/gpu/drm/i915/display/icl_dsi.c | 4 +- drivers/gpu/drm/sysfb/efidrm.c | 46 +++-- drivers/gpu/drm/xe/xe_pxp.c | 11 +- drivers/hid/hid-appletb-kbd.c | 5 +- drivers/hid/hid-core.c | 7 +- drivers/hid/hid-logitech-hidpp.c | 6 +- drivers/hid/hid-multitouch.c | 7 + drivers/hid/wacom_wac.c | 10 ++ drivers/hwmon/asus-ec-sensors.c | 7 +- drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/pmbus/ltc4286.c | 1 + drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/hwmon/pmbus/tps53679.c | 10 +- drivers/i2c/busses/Kconfig | 2 + drivers/i2c/busses/i2c-tegra.c | 5 +- drivers/iio/accel/adxl313_core.c | 2 + drivers/iio/accel/adxl355_core.c | 2 +- drivers/iio/accel/adxl380.c | 2 +- drivers/iio/adc/ade9000.c | 12 +- drivers/iio/adc/aspeed_adc.c | 1 + drivers/iio/adc/ti-adc161s626.c | 41 +++-- drivers/iio/adc/ti-ads1119.c | 11 +- drivers/iio/adc/ti-ads7950.c | 8 +- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 32 ++-- drivers/iio/imu/adis16550.c | 8 +- drivers/iio/imu/bmi160/bmi160_core.c | 15 +- drivers/iio/imu/bno055/bno055.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4 + drivers/iio/light/vcnl4035.c | 18 +- drivers/iio/light/veml6070.c | 4 +- drivers/iio/orientation/hid-sensor-rotation.c | 24 ++- drivers/input/joystick/xpad.c | 5 + drivers/input/mouse/bcm5974.c | 42 ++++- drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/misc/fastrpc.c | 5 +- drivers/misc/mei/hw-me.c | 14 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 18 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 10 +- drivers/net/ethernet/broadcom/tg3.c | 13 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 ++- drivers/net/ethernet/freescale/enetc/enetc.c | 13 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 10 +- drivers/net/ethernet/freescale/fec_ptp.c | 3 - drivers/net/ethernet/intel/ice/ice_ethtool.c | 11 +- drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 21 ++- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++++-- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 + .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 6 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.h | 2 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 13 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 14 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 9 +- drivers/net/phy/sfp.c | 7 +- drivers/net/virtio_net.c | 20 +-- drivers/net/vxlan/vxlan_core.c | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 15 +- drivers/net/wireless/intel/iwlwifi/cfg/rf-fm.c | 1 + drivers/net/wireless/intel/iwlwifi/cfg/rf-wh.c | 24 +++ drivers/net/wireless/intel/iwlwifi/fw/acpi.h | 1 + drivers/net/wireless/intel/iwlwifi/fw/api/cmdhdr.h | 4 +- drivers/net/wireless/intel/iwlwifi/fw/api/coex.h | 4 +- .../net/wireless/intel/iwlwifi/fw/api/commands.h | 5 + .../net/wireless/intel/iwlwifi/fw/api/dbg-tlv.h | 14 +- drivers/net/wireless/intel/iwlwifi/fw/api/debug.h | 2 +- .../net/wireless/intel/iwlwifi/fw/api/location.h | 8 +- drivers/net/wireless/intel/iwlwifi/fw/api/power.h | 5 +- drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 88 +++++---- drivers/net/wireless/intel/iwlwifi/fw/api/sta.h | 6 +- drivers/net/wireless/intel/iwlwifi/fw/api/stats.h | 39 ++-- drivers/net/wireless/intel/iwlwifi/fw/api/tx.h | 2 +- drivers/net/wireless/intel/iwlwifi/fw/error-dump.h | 4 +- drivers/net/wireless/intel/iwlwifi/fw/file.h | 74 ++++++-- drivers/net/wireless/intel/iwlwifi/fw/img.h | 12 +- drivers/net/wireless/intel/iwlwifi/fw/runtime.h | 22 ++- drivers/net/wireless/intel/iwlwifi/iwl-config.h | 8 +- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.h | 4 +- drivers/net/wireless/intel/iwlwifi/iwl-drv.h | 3 +- drivers/net/wireless/intel/iwlwifi/iwl-modparams.h | 4 +- drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c | 2 +- drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.h | 17 +- drivers/net/wireless/intel/iwlwifi/iwl-op-mode.h | 1 + drivers/net/wireless/intel/iwlwifi/iwl-trans.h | 6 +- drivers/net/wireless/intel/iwlwifi/mld/iface.c | 101 +++++++---- drivers/net/wireless/intel/iwlwifi/mld/mac80211.c | 19 ++ drivers/net/wireless/intel/iwlwifi/mld/mld.c | 1 + drivers/net/wireless/intel/iwlwifi/mld/mlo.c | 4 +- drivers/net/wireless/intel/iwlwifi/mld/notif.c | 5 + drivers/net/wireless/intel/iwlwifi/mld/scan.c | 30 +++- drivers/net/wireless/intel/iwlwifi/mld/scan.h | 9 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 3 +- drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 5 + drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/virtual/virt_wifi.c | 1 - drivers/nfc/pn533/uart.c | 3 + drivers/nvmem/imx-ocotp-ele.c | 1 + drivers/nvmem/imx-ocotp.c | 1 + drivers/nvmem/zynqmp_nvmem.c | 8 +- drivers/s390/crypto/zcrypt_msgtype6.c | 32 ++-- drivers/spi/spi-amlogic-spifc-a4.c | 12 ++ drivers/spi/spi-cadence-quadspi.c | 17 +- drivers/spi/spi-geni-qcom.c | 9 +- drivers/spi/spi-stm32-ospi.c | 9 +- drivers/staging/gpib/Kconfig | 1 + drivers/staging/gpib/common/gpib_os.c | 96 +++++++--- drivers/staging/gpib/include/gpib_types.h | 8 + drivers/staging/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c | 4 +- drivers/target/loopback/tcm_loop.c | 52 +++++- drivers/target/target_core_file.c | 2 +- drivers/thermal/thermal_core.c | 32 +++- drivers/thunderbolt/nhi.c | 2 +- drivers/tty/vt/vt.c | 18 ++ drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/class/cdc-acm.c | 9 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/usbtmc.c | 3 + drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/driver.c | 23 ++- drivers/usb/core/offload.c | 102 ++++++----- drivers/usb/core/phy.c | 12 +- drivers/usb/core/quirks.c | 3 + drivers/usb/core/usb.c | 1 + drivers/usb/dwc2/gadget.c | 2 + drivers/usb/gadget/function/f_ecm.c | 35 ++-- drivers/usb/gadget/function/f_eem.c | 59 ++++--- drivers/usb/gadget/function/f_hid.c | 19 +- drivers/usb/gadget/function/f_rndis.c | 49 ++++-- drivers/usb/gadget/function/f_subset.c | 63 ++++--- drivers/usb/gadget/function/f_uac1_legacy.c | 47 +++-- drivers/usb/gadget/function/f_uvc.c | 39 +++- drivers/usb/gadget/function/u_ecm.h | 21 ++- drivers/usb/gadget/function/u_eem.h | 21 ++- drivers/usb/gadget/function/u_ether.c | 16 +- drivers/usb/gadget/function/u_gether.h | 22 ++- drivers/usb/gadget/function/u_rndis.h | 31 +++- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 5 +- drivers/usb/gadget/udc/dummy_hcd.c | 42 +++-- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/host/xhci-sideband.c | 18 +- drivers/usb/misc/usbio.c | 7 +- drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + drivers/usb/typec/altmodes/thunderbolt.c | 44 ++--- drivers/usb/typec/ucsi/ucsi.c | 9 +- fs/btrfs/ioctl.c | 12 +- fs/btrfs/tree-checker.c | 17 ++ fs/btrfs/zoned.c | 6 +- fs/smb/client/cifsglob.h | 6 + fs/smb/client/file.c | 1 - fs/smb/client/inode.c | 21 +-- fs/smb/client/smb2ops.c | 20 +-- fs/smb/server/smb2pdu.c | 121 +++++++++---- fs/smb/server/smbacl.c | 43 +++++ fs/smb/server/smbacl.h | 2 + include/crypto/if_alg.h | 5 +- include/linux/iio/iio.h | 12 ++ include/linux/netdevice.h | 3 + include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/skbuff.h | 1 + include/linux/usb.h | 10 +- include/net/netfilter/nf_conntrack_expect.h | 20 ++- io_uring/io_uring.c | 62 ++++--- io_uring/io_uring.h | 34 +++- io_uring/net.c | 4 + io_uring/rsrc.c | 4 + kernel/bpf/verifier.c | 10 +- kernel/kallsyms.c | 64 +++++-- kernel/sched/ext.c | 70 +++++--- kernel/sched/ext_idle.c | 33 ++-- kernel/sched/fair.c | 10 +- kernel/trace/bpf_trace.c | 4 + lib/crypto/chacha-block-generic.c | 4 + mm/gup.c | 10 +- mm/hmm.c | 2 +- mm/memory.c | 22 ++- mm/mprotect.c | 2 +- mm/sparse-vmemmap.c | 2 +- mm/vmscan.c | 2 +- net/atm/lec.c | 72 +++++--- net/atm/lec.h | 2 +- net/bluetooth/hci_conn.c | 8 +- net/bluetooth/hci_event.c | 33 ++-- net/bluetooth/hci_sync.c | 14 +- net/bluetooth/mgmt.c | 17 +- net/bluetooth/sco.c | 30 +++- net/bluetooth/smp.c | 11 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/core/dev.c | 38 +++- net/core/skmsg.c | 13 +- net/hsr/hsr_device.c | 32 ++-- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 ++ net/ipv6/icmp.c | 3 + net/ipv6/ioam6.c | 4 +- net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 5 + net/ipv6/ndisc.c | 3 + net/mac80211/tdls.c | 2 +- net/mptcp/protocol.c | 30 ++-- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_broadcast.c | 8 +- net/netfilter/nf_conntrack_expect.c | 25 ++- net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 13 +- net/netfilter/nf_conntrack_netlink.c | 87 +++------ net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_flow_table_offload.c | 196 ++++++++++++++------- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_log.c | 2 +- net/netfilter/x_tables.c | 23 +++ net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_rateest.c | 5 + net/qrtr/af_qrtr.c | 31 ++-- net/rds/ib_rdma.c | 7 +- net/sched/cls_api.c | 1 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_hfsc.c | 4 +- net/sched/sch_netem.c | 5 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + sound/hda/codecs/realtek/alc269.c | 2 + sound/pci/ctxfi/ctdaio.c | 1 + sound/soc/cirrus/ep93xx-i2s.c | 34 ++-- sound/soc/intel/boards/Kconfig | 2 - sound/soc/qcom/sdw.c | 11 ++ sound/usb/caiaq/device.c | 2 +- sound/usb/qcom/qc_audio_offload.c | 10 +- sound/usb/quirks.c | 2 + tools/objtool/check.c | 5 +- 308 files changed, 3160 insertions(+), 1629 deletions(-)

1 month, 1 week

6
5
0 0

[PATCH 6.12 000/242] 6.12.81-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.81 release. There are 242 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 10 Apr 2026 17:58:42 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.81-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.81-rc1 Eduard Zingerman <eddyz87(a)gmail.com> selftests/bpf: test refining u32/s32 bounds when ranges cross min/max boundary Eduard Zingerman <eddyz87(a)gmail.com> bpf: Fix u32/s32 bounds when ranges cross min/max boundary Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Add third round of bounds deduction Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Test invariants on JSLT crossing sign Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Test cross-sign 64bits range refinement Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Improve bounds when s64 crosses sign boundary Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: Correct logic check error for fastboot Timur Kristóf <timur.kristof(a)gmail.com> drm/amd: Disable ASPM on SI Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Disable scaling on DCE6 for now Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15% Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming. Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Keep PLL0 running on DCE 6.0 and 6.4 Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Reject modes with too high pixel clock on DCE6-10 Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Disable fastboot on DCE 6 too Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/amdgpu: disable ASPM in some situations Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/amdgpu: decouple ASPM with pcie dpm Mario Limonciello <mario.limonciello(a)amd.com> x86/CPU/AMD: Add additional fixed RDSEED microcode revisions Li Xiasong <lixiasong1(a)huawei.com> MPTCP: fix lock class name family in pm_nl_create_listen_socket Thomas Richter <tmricht(a)linux.ibm.com> s390/cpum_sf: Cap sampling rate to prevent lsctl exception Heiko Carstens <hca(a)linux.ibm.com> s390/perf_cpum_sf: Convert to use try_cmpxchg128() Li Chen <me(a)linux.beauty> ext4: publish jinode after initialization Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 David Hildenbrand (Arm) <david(a)kernel.org> mm/memory: fix PMD/PUD checks in follow_pfnmap_start() Anshuman Khandual <anshuman.khandual(a)arm.com> mm: replace READ_ONCE() with standard page table accessors Jinjiang Tu <tujinjiang(a)huawei.com> mm/huge_memory: fix folio isn't locked in softleaf_to_folio() Nikunj A Dadhania <nikunj(a)amd.com> x86/fred: Fix early boot failures on SEV-ES/SNP guests Josef Bacik <josef(a)toxicpanda.com> scsi: target: tcm_loop: Drain commands in target_reset handler Guangshuo Li <lgs201920130244(a)gmail.com> net: mana: fix use-after-free in add_adev() error path Willem de Bruijn <willemb(a)google.com> net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback Emanuele Ghidoli <emanuele.ghidoli(a)toradex.com> spi: cadence-qspi: Fix exec_mem_op error handling Alexander Popov <alex.popov(a)linux.com> wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Taegu Ha <hataegu0826(a)gmail.com> usb: gadget: f_uac1_legacy: validate control request size Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: move list and spinlock inits from bind to alloc Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_eem: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ecm: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Protect RNDIS options with mutex Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix unbalanced refcnt in geth_free Jimmy Hu <hhhuuu(a)google.com> usb: gadget: uvc: fix NULL pointer dereference during unbind race Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop Filipe Manana <fdmanana(a)suse.com> btrfs: do not free data reservation in fallback from inline due to -ENOSPC Qu Wenruo <wqu(a)suse.com> btrfs: fix the qgroup data free range for inline data extents Zilin Guan <zilin(a)seu.edu.cn> ice: Fix memory leak in ice_set_ringparam() Nathan Rebello <nathan.c.rebello(a)gmail.com> usb: typec: ucsi: validate connector number in ucsi_notify_common() Sebastian Urban <surban(a)surban.net> usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix interrupt synchronization error Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix locking/synchronization error Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> thunderbolt: Fix property read in nhi_wake_supported() Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: possible double-free of cctx->remote_heap Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Fix thermal zone device registration error path Shenwei Wang <shenwei.wang(a)nxp.com> gpio: mxc: map Both Edge pad wakeup to Rising Edge Guangshuo Li <lgs201920130244(a)gmail.com> cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path Sven Eckelmann (Plasma Cloud) <se(a)simonwunderlich.de> net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled Yufan Chen <yufan.chen(a)linux.dev> net: ftgmac100: fix ring allocation unwind on open failure Yang Yang <n05ec(a)lzu.edu.cn> vxlan: validate ND option lengths in vxlan_na_create Eric Biggers <ebiggers(a)kernel.org> crypto: tegra - Add missing CRYPTO_ALG_ASYNC Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Yifan Wu <yifanwucs(a)gmail.com> netfilter: ipset: drop logically empty buckets in mtype_del Ivan Vera <ivanverasantos(a)gmail.com> nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Christian Eggers <ceggers(a)arri.de> nvmem: imx: assign nvmem_cell_info::raw_len Xu Yang <xu.yang_2(a)nxp.com> dt-bindings: connector: add pd-disable dependency Conor Dooley <conor.dooley(a)microchip.com> firmware: microchip: fail auto-update probe if no flash found Ian Abbott <abbotti(a)mev.co.uk> comedi: me4000: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: me_daq: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Fix invalid clean-up after failed attach Ian Abbott <abbotti(a)mev.co.uk> comedi: Reinit dev->spinlock between attachments to low-level drivers Deepanshu Kartikey <kartikey406(a)gmail.com> comedi: dt2815: add hardware detection to prevent crash Oliver Neukum <oneukum(a)suse.com> cdc-acm: new quirk for EPSON HMD Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: validate ND option lengths Sasha Levin <sashal(a)kernel.org> Revert "LoongArch/orc: Use RCU in all users of __module_address()." Sasha Levin <sashal(a)kernel.org> Revert "LoongArch: Remove unnecessary checks for ORC unwinder" Sasha Levin <sashal(a)kernel.org> Revert "LoongArch: Handle percpu handler address for ORC unwinder" Dmitry Torokhov <dmitry.torokhov(a)gmail.com> x86/platform/geode: Fix on-stack property data use-after-return bug Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix state inconsistency on gadget init failure Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix NULL pointer dereference in ep_queue Gabor Juhos <j4g8y7(a)gmail.com> usb: core: phy: avoid double use of 'usb3-phy' Juno Choi <juno.choi(a)lge.com> usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() Justin Chen <justin.chen(a)broadcom.com> usb: ehci-brcm: fix sleep during atomic Heitor Alves de Siqueira <halves(a)igalia.com> usb: usbtmc: Flush anchored URBs in usbtmc_release Guangshuo Li <lgs201920130244(a)gmail.com> usb: ulpi: fix double free in ulpi_register_interface() error path Miao Li <limiao(a)kylinos.cn> usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix out-of-sequence free_irq() Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Move iio_device_register() to correct location Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix irq resource leak Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix incorrect free_irq() variable Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only Josh Poimboeuf <jpoimboe(a)kernel.org> iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() David Lechner <dlechner(a)baylibre.com> iio: light: vcnl4035: fix scan buffer on big-endian Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: dac: ad5770r: fix error return in ad5770r_read_raw() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 Valek Andrej <andrej.v(a)skyrain.eu> iio: accel: fix ADXL355 temperature signature value Billy Tsai <billy_tsai(a)aspeedtech.com> iio: adc: aspeed: clear reference voltage bits before configuring vref Zoltan Illes <zoliviragh(a)gmail.com> Input: xpad - add support for Razer Wolverine V3 Pro Shengyu Qu <wiagn233(a)outlook.com> Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode Liam Mitchell <mitchell.liam(a)gmail.com> Input: bcm5974 - recover from failed mode switch Christoffer Sandberg <cs(a)tuxedo.de> Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Bart Van Assche <bvanassche(a)acm.org> Input: synaptics-rmi4 - fix a locking bug in an error path JP Hein <jp(a)jphein.com> USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Wanquan Zhong <wanquan.zhong(a)fibocom.com> USB: serial: option: add support for Rolling Wireless RW135R-GL Frej Drejhammar <frej(a)stacken.kth.se> USB: serial: io_edgeport: add support for Blackbox IC135A Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/pm: drop SMU driver if version not matched messages Donet Tom <donettom(a)linux.ibm.com> drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: dp501: Fix initialization of SCU2C Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: fix buffer read on big-endian Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: fix the idr allocation flags Stefan Wiehler <stefan.wiehler(a)nokia.com> mips: mm: Allocate tlb_vpn array atomically Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix division by zero in occ_show_power_1() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix the GCC version check for `__multi3' workaround Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: SiByte: Bring back cache initialisation Asim Viladi Oglu Manizada <manizada(a)pm.me> ksmbd: fix OOB write in QUERY_INFO for compound requests hkbinbin <hkbinbinbin(a)gmail.com> Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync Oleh Konko <security(a)1seal.org> Bluetooth: SMP: force responder MITM requirements before building the pairing response Oleh Konko <security(a)1seal.org> Bluetooth: SMP: derive legacy responder STK authentication from MITM state Junxi Qian <qjx1298677004(a)gmail.com> io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix missing SPDIFI1 index handling Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: fix stack out-of-bounds read in init_card Ernestas Kulik <ernestas.k(a)iconn-networks.com> USB: serial: option: add MeiG Smart SRM825WN Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/ioc32: stop speculation on the drm_compat_ioctl path Paul Walmsley <pjw(a)kernel.org> riscv: kgdb: fix several debug register assignment bugs Peter Zijlstra <peterz(a)infradead.org> sched/fair: Fix zero_vruntime tracking fix Vincent Guittot <vincent.guittot(a)linaro.org> sched/fair: Use protect_slice() instead of direct comparison Shiji Yang <yangshiji66(a)outlook.com> mips: ralink: update CPU clock index Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix missing newline in occ_show_extended() Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() Jamie Gibbons <jamie.gibbons(a)microchip.com> dt-bindings: gpio: fix microchip #interrupt-cells Sanman Pradhan <psanman(a)juniper.net> hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") Sanman Pradhan <psanman(a)juniper.net> hwmon: (pxe1610) Check return value of page-select write in probe Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> accel/qaic: Handle DBC deactivation if the owner went away David Lechner <dlechner(a)baylibre.com> iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one Maarten Lankhorst <dev(a)lankhorst.se> Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" Qi Tang <tpluszz77(a)gmail.com> bpf: reject direct access to nullable PTR_TO_BUF pointers Eric Dumazet <edumazet(a)google.com> ipv6: avoid overflows in ip6_datagram_send_ctl() Luka Gejak <luka.gejak(a)linux.dev> net: hsr: fix VLAN add unwind on slave errors Xiang Mei <xmei5(a)asu.edu> net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xiang Mei <xmei5(a)asu.edu> net/sched: cls_fw: fix NULL pointer dereference on shared blocks Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix overflow when accumulating packets Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix potential double free of skb Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Restore default stat ctxs for ULP when resource is available Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Fix switchdev mode rollback in case of failure Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Avoid "No data available" when FW version queries fail Shay Drory <shayd(a)nvidia.com> net/mlx5: lag: Check for LAG device before creating debugfs Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: properly unregister fixed rate clocks Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix clk handling on PCI glue driver removal Yucheng Lu <kanolyc(a)gmail.com> net/sched: sch_netem: fix out-of-bounds access in packet corruption Kuniyuki Iwashima <kuniyu(a)google.com> bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). Weiming Shi <bestswngs(a)gmail.com> rds: ib: reject FRMR registration before IB connection is established Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate mesh send advertising payload length Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate LTK enc_size on load Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: SCO: fix race conditions in sco_sock_connect() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: reject immediate NF_QUEUE verdict Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: ignore explicit helper on new expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store netns and zone in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use expect->helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: honor expectation helper field Qi Tang <tpluszz77(a)gmail.com> netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent Qi Tang <tpluszz77(a)gmail.com> netfilter: nf_conntrack_helper: pass helper to expect cleanup Florian Westphal <fw(a)strlen.de> netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Florian Westphal <fw(a)strlen.de> netfilter: x_tables: ensure names are nul-terminated Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: account for netlink header size Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: strictly check for maximum number of actions Zhengchuan Liang <zcliangcn(a)gmail.com> net: ipv6: flowlabel: defer exclusive option free until RCU teardown Alexei Starovoitov <ast(a)kernel.org> bpf: Fix regsafe() for pointers to packet Julian Braha <julianbraha(a)gmail.com> ASoC: Intel: boards: fix unmet dependency on PINCTRL Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec Pengpeng Hou <pengpeng(a)iscas.ac.cn> NFC: pn533: bound the UART receive buffer Yochai Eisenrich <echelonh(a)gmail.com> net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Guoyu Su <yss2813483011xxl(a)gmail.com> net: use skb_header_pointer() for TCPv4 GSO frag_off check Paolo Abeni <pabeni(a)redhat.com> net: introduce mangleid_features Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() Paolo Abeni <pabeni(a)redhat.com> ipv6: prevent possible UaF in addrconf_permanent_addr() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure Wei Fang <wei.fang(a)nxp.com> net: enetc: check whether the RSS algorithm is Toeplitz Marek Behún <kabel(a)kernel.org> net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta Xiang Mei <xmei5(a)asu.edu> net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: linearize skb before parsing ND options Dimitri Daskalakis <daskald(a)meta.com> eth: fbnic: Account for page fragments when updating BDQ tail Eric Dumazet <edumazet(a)google.com> ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Eric Dumazet <edumazet(a)google.com> ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Thomas Bogendoerfer <tbogendoerfer(a)suse.de> tg3: Fix race for querying speed/duplex Pengpeng Hou <pengpeng(a)iscas.ac.cn> net/ipv6: ioam6: prevent schema length wraparound in trace fill Yochai Eisenrich <echelonh(a)gmail.com> net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Jiayuan Chen <jiayuan.chen(a)shopee.com> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Buday Csaba <buday.csaba(a)prolan.hu> net: fec: fix the PTP periodic output sysfs interface Norbert Szetei <norbert(a)doyensec.com> crypto: af-alg - fix NULL pointer dereference in scatterwalk Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix overflow on long hmac keys Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix DMA corruption on long hmac keys Reshma Immaculate Rajkumar <reshma.rajkumar(a)oss.qualcomm.com> wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session Frank Li <Frank.Li(a)nxp.com> dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning Praveen Talari <praveen.talari(a)oss.qualcomm.com> spi: geni-qcom: Check DMA interrupts early in ISR ZhengYuan Huang <gality369(a)gmail.com> btrfs: reject root items with drop_progress and zero drop_level Mikko Perttunen <mperttunen(a)nvidia.com> i2c: tegra: Don't mark devices with pins as IRQ safe Filipe Manana <fdmanana(a)suse.com> btrfs: reserve enough transaction items for qgroup ioctls Lee Jones <lee(a)kernel.org> HID: multitouch: Check to ensure report responses match the request Lee Jones <lee(a)kernel.org> HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix Clang jump table detection Paul SAGE <paul.sage(a)42.fr> tg3: replace placeholder MAC address with device property Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: don't take device_list_mutex when querying zone info Deepanshu Kartikey <kartikey406(a)gmail.com> atm: lec: fix use-after-free in sock_def_readable() Benoît Sevens <bsevens(a)google.com> HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: mac80211: check tdls flag in ieee80211_tdls_oper Adrian Freund <adrian(a)freund.io> HID: logitech-hidpp: Enable MX Master 4 over bluetooth Pepper Gray <hello(a)peppergray.xyz> arm64/scs: Fix handling of advance_loc4 Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: propagate BUF_MORE through early buffer commit path Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF Joanne Koong <joannelkoong(a)gmail.com> io_uring/kbuf: use WRITE_ONCE() for userspace-shared buffer ring fields Caleb Sander Mateos <csander(a)purestorage.com> io_uring/kbuf: use READ_ONCE() for userspace-mapped memory Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: enable bundles for incrementally consumed buffers Jens Axboe <axboe(a)kernel.dk> io_uring/rw: check for NULL io_br_sel when putting a buffer Jens Axboe <axboe(a)kernel.dk> io_uring/net: correct type for min_not_zero() cast Jens Axboe <axboe(a)kernel.dk> io_uring: remove async/poll related provided buffer recycles Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: switch to storing struct io_buffer_list locally Jens Axboe <axboe(a)kernel.dk> io_uring/net: use struct io_br_sel->val as the send finish value Jens Axboe <axboe(a)kernel.dk> io_uring/net: use struct io_br_sel->val as the recv finish value Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: use struct io_br_sel for multiple buffers picking Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: introduce struct io_br_sel Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: pass in struct io_buffer_list to commit/recycle helpers Jens Axboe <axboe(a)kernel.dk> io_uring/net: clarify io_recv_buf_select() return value Jens Axboe <axboe(a)kernel.dk> io_uring/net: don't use io_net_kbuf_recyle() for non-provided cases Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: drop 'issue_flags' from io_put_kbuf(s)() arguments Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: uninline __io_put_kbufs Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: introduce io_kbuf_drop_legacy() Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: open code __io_put_kbuf() Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: remove legacy kbuf caching Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: simplify __io_put_kbuf Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: remove legacy kbuf kmem cache Pavel Begunkov <asml.silence(a)gmail.com> io_uring/kbuf: remove legacy kbuf bulk allocation ------------- Diffstat: .../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +- .../bindings/connector/usb-connector.yaml | 1 + .../bindings/gpio/microchip,mpfs-gpio.yaml | 4 +- Makefile | 4 +- arch/arm64/kernel/pi/patch-scs.c | 8 + arch/loongarch/include/asm/setup.h | 3 - arch/loongarch/kernel/unwind_orc.c | 32 +-- arch/mips/lib/multi3.c | 6 +- arch/mips/mm/cache.c | 3 +- arch/mips/mm/tlb-r4k.c | 2 +- arch/mips/ralink/clk.c | 8 +- arch/riscv/kernel/kgdb.c | 7 +- arch/s390/kernel/perf_cpum_sf.c | 30 +-- arch/x86/coco/sev/core.c | 6 + arch/x86/entry/entry_fred.c | 14 + arch/x86/kernel/cpu/amd.c | 7 + arch/x86/platform/geode/geode-common.c | 24 +- crypto/af_alg.c | 4 +- drivers/accel/qaic/qaic_control.c | 47 +++- drivers/comedi/drivers.c | 8 + drivers/comedi/drivers/dt2815.c | 12 + drivers/comedi/drivers/me4000.c | 16 +- drivers/comedi/drivers/me_daq.c | 35 +-- drivers/comedi/drivers/ni_atmio16d.c | 3 +- drivers/counter/rz-mtu3-cnt.c | 67 ++--- drivers/cpufreq/cpufreq_governor.c | 6 +- drivers/crypto/caam/caamalg_qi2.c | 3 +- drivers/crypto/caam/caamhash.c | 3 +- drivers/crypto/tegra/tegra-se-aes.c | 11 +- drivers/crypto/tegra/tegra-se-hash.c | 30 ++- drivers/firmware/microchip/mpfs-auto-update.c | 10 +- drivers/gpio/gpio-mxc.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 39 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 +- .../amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 20 +- .../amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 5 + .../gpu/drm/amd/display/dc/dce60/dce60_resource.c | 59 +++-- .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 6 +- .../display/dc/resource/dce100/dce100_resource.c | 10 +- .../amd/display/dc/resource/dce80/dce80_resource.c | 10 +- drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 1 - drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c | 1 - .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 33 ++- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 33 ++- drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1 - drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/g4x_dp.c | 2 +- drivers/gpu/drm/i915/display/icl_dsi.c | 4 +- drivers/hid/hid-logitech-hidpp.c | 6 +- drivers/hid/hid-multitouch.c | 7 + drivers/hid/wacom_wac.c | 10 + drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/pmbus/ltc4286.c | 1 + drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/hwmon/pmbus/tps53679.c | 4 +- drivers/i2c/busses/Kconfig | 2 + drivers/i2c/busses/i2c-tegra.c | 5 +- drivers/iio/accel/adxl355_core.c | 2 +- drivers/iio/accel/adxl380.c | 2 +- drivers/iio/adc/aspeed_adc.c | 1 + drivers/iio/adc/ti-adc161s626.c | 41 ++- drivers/iio/adc/ti-ads1119.c | 11 +- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 32 ++- drivers/iio/imu/bmi160/bmi160_core.c | 15 +- drivers/iio/imu/bno055/bno055.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4 + drivers/iio/light/vcnl4035.c | 18 +- drivers/input/joystick/xpad.c | 5 + drivers/input/mouse/bcm5974.c | 42 ++- drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/misc/fastrpc.c | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 + drivers/net/ethernet/broadcom/tg3.c | 13 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 4 + drivers/net/ethernet/freescale/fec_ptp.c | 3 - drivers/net/ethernet/intel/ice/ice_ethtool.c | 11 +- drivers/net/ethernet/mediatek/airoha_eth.c | 18 +- drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 21 +- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++-- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 + .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 6 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 6 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/phy/sfp.c | 7 +- drivers/net/vxlan/vxlan_core.c | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 15 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +- drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/virtual/virt_wifi.c | 1 - drivers/nfc/pn533/uart.c | 3 + drivers/nvmem/imx-ocotp-ele.c | 1 + drivers/nvmem/imx-ocotp.c | 1 + drivers/nvmem/zynqmp_nvmem.c | 8 +- drivers/spi/spi-cadence-quadspi.c | 13 +- drivers/spi/spi-geni-qcom.c | 9 +- drivers/target/loopback/tcm_loop.c | 52 +++- drivers/thermal/thermal_core.c | 1 + drivers/thunderbolt/nhi.c | 2 +- drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/class/cdc-acm.c | 9 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/usbtmc.c | 3 + drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/phy.c | 12 +- drivers/usb/core/quirks.c | 3 + drivers/usb/dwc2/gadget.c | 2 + drivers/usb/gadget/function/f_ecm.c | 35 ++- drivers/usb/gadget/function/f_eem.c | 59 +++-- drivers/usb/gadget/function/f_hid.c | 19 +- drivers/usb/gadget/function/f_rndis.c | 49 ++-- drivers/usb/gadget/function/f_subset.c | 63 +++-- drivers/usb/gadget/function/f_uac1_legacy.c | 47 +++- drivers/usb/gadget/function/f_uvc.c | 39 ++- drivers/usb/gadget/function/u_ecm.h | 21 +- drivers/usb/gadget/function/u_eem.h | 21 +- drivers/usb/gadget/function/u_ether.c | 16 +- drivers/usb/gadget/function/u_gether.h | 22 +- drivers/usb/gadget/function/u_rndis.h | 31 ++- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 5 +- drivers/usb/gadget/udc/dummy_hcd.c | 42 +-- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + drivers/usb/typec/ucsi/ucsi.c | 9 +- fs/btrfs/inode.c | 6 +- fs/btrfs/ioctl.c | 12 +- fs/btrfs/tree-checker.c | 17 ++ fs/btrfs/zoned.c | 6 +- fs/ext4/fast_commit.c | 4 +- fs/ext4/inode.c | 15 +- fs/smb/server/smb2pdu.c | 121 ++++++--- fs/smb/server/smbacl.c | 43 +++ fs/smb/server/smbacl.h | 2 + include/linux/io_uring_types.h | 9 - include/linux/netdevice.h | 3 + include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/swapops.h | 27 +- include/net/netfilter/nf_conntrack_expect.h | 20 +- io_uring/io_uring.c | 15 +- io_uring/io_uring.h | 1 - io_uring/kbuf.c | 289 ++++++++++----------- io_uring/kbuf.h | 148 +++-------- io_uring/net.c | 149 ++++++----- io_uring/poll.c | 4 - io_uring/rw.c | 58 +++-- kernel/bpf/verifier.c | 87 ++++++- kernel/sched/fair.c | 12 +- mm/gup.c | 10 +- mm/hmm.c | 2 +- mm/memory.c | 22 +- mm/mprotect.c | 2 +- mm/sparse-vmemmap.c | 2 +- mm/vmscan.c | 2 +- net/atm/lec.c | 72 +++-- net/atm/lec.h | 2 +- net/bluetooth/hci_conn.c | 8 +- net/bluetooth/hci_event.c | 33 ++- net/bluetooth/hci_sync.c | 14 +- net/bluetooth/mgmt.c | 17 +- net/bluetooth/sco.c | 30 ++- net/bluetooth/smp.c | 11 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/core/dev.c | 38 ++- net/core/skmsg.c | 13 +- net/hsr/hsr_device.c | 32 +-- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 + net/ipv6/icmp.c | 3 + net/ipv6/ioam6.c | 4 +- net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 5 + net/ipv6/ndisc.c | 3 + net/mac80211/tdls.c | 2 +- net/mptcp/pm_netlink.c | 2 +- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_broadcast.c | 8 +- net/netfilter/nf_conntrack_expect.c | 25 +- net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 13 +- net/netfilter/nf_conntrack_netlink.c | 87 +++---- net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_flow_table_offload.c | 196 +++++++++----- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_log.c | 2 +- net/netfilter/x_tables.c | 23 ++ net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_rateest.c | 5 + net/qrtr/af_qrtr.c | 31 +-- net/rds/ib_rdma.c | 7 +- net/sched/cls_api.c | 1 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_hfsc.c | 4 +- net/sched/sch_netem.c | 5 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + sound/pci/ctxfi/ctdaio.c | 1 + sound/soc/cirrus/ep93xx-i2s.c | 34 ++- sound/soc/intel/boards/Kconfig | 2 - sound/usb/caiaq/device.c | 2 +- tools/objtool/check.c | 5 +- .../testing/selftests/bpf/prog_tests/reg_bounds.c | 62 ++++- .../testing/selftests/bpf/progs/verifier_bounds.c | 159 +++++++++++- 219 files changed, 2644 insertions(+), 1289 deletions(-)

1 month, 1 week

8
7
0 0

[PATCH 6.18 000/277] 6.18.22-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.22 release. There are 277 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 10 Apr 2026 17:58:42 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.22-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.22-rc1 Andrea Righi <arighi(a)nvidia.com> sched_ext: Fix stale direct dispatch state in ddsp_dsq_id Tejun Heo <tj(a)kernel.org> sched_ext: Refactor do_enqueue_task() local and global DSQ paths David Hildenbrand (Arm) <david(a)kernel.org> mm/memory: fix PMD/PUD checks in follow_pfnmap_start() Anshuman Khandual <anshuman.khandual(a)arm.com> mm: replace READ_ONCE() with standard page table accessors Josef Bacik <josef(a)toxicpanda.com> scsi: target: tcm_loop: Drain commands in target_reset handler Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> scsi: target: file: Use kzalloc_flex for aio_cmd Willem de Bruijn <willemb(a)google.com> net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback Guangshuo Li <lgs201920130244(a)gmail.com> net: mana: fix use-after-free in add_adev() error path Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display: Fix DCE LVDS handling Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 Alexander Popov <alex.popov(a)linux.com> wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Petr Mladek <pmladek(a)suse.com> kallsyms: prevent module removal when printing module name and buildid Petr Mladek <pmladek(a)suse.com> kallsyms: cleanup code for appending the module buildid Petr Mladek <pmladek(a)suse.com> kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() Petr Mladek <pmladek(a)suse.com> kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid() Taegu Ha <hataegu0826(a)gmail.com> usb: gadget: f_uac1_legacy: validate control request size Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: move list and spinlock inits from bind to alloc Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_eem: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ecm: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Protect RNDIS options with mutex Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix unbalanced refcnt in geth_free Jimmy Hu <hhhuuu(a)google.com> usb: gadget: uvc: fix NULL pointer dereference during unbind race Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop Zilin Guan <zilin(a)seu.edu.cn> ice: Fix memory leak in ice_set_ringparam() Aditya Garg <gargaditya08(a)live.com> HID: appletb-kbd: add .resume method in PM Nathan Rebello <nathan.c.rebello(a)gmail.com> usb: typec: ucsi: validate connector number in ucsi_notify_common() Sebastian Urban <surban(a)surban.net> usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix interrupt synchronization error Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix locking/synchronization error Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> thunderbolt: Fix property read in nhi_wake_supported() Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: thunderbolt: Set enter_vdo during initialization Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: possible double-free of cctx->remote_heap Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Fix thermal zone device registration error path Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Address thermal zone removal races with resume Tzung-Bi Shih <tzungbi(a)kernel.org> gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() Shenwei Wang <shenwei.wang(a)nxp.com> gpio: mxc: map Both Edge pad wakeup to Rising Edge Changwoo Min <changwoo(a)igalia.com> sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU Guangshuo Li <lgs201920130244(a)gmail.com> cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path Srujana Challa <schalla(a)marvell.com> virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN Sven Eckelmann (Plasma Cloud) <se(a)simonwunderlich.de> net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled Yufan Chen <yufan.chen(a)linux.dev> net: ftgmac100: fix ring allocation unwind on open failure Yang Yang <n05ec(a)lzu.edu.cn> vxlan: validate ND option lengths in vxlan_na_create Eric Biggers <ebiggers(a)kernel.org> crypto: tegra - Add missing CRYPTO_ALG_ASYNC Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Nicolas Pitre <nico(a)fluxnic.net> vt: resize saved unicode buffer on alt screen exit after resize Liav Mordouch <liavmordouch(a)gmail.com> vt: discard stale unicode buffer on alt screen exit after resize Dave Penkler <dpenkler(a)gmail.com> gpib: Fix fluke driver s390 compile issue Yifan Wu <yifanwucs(a)gmail.com> netfilter: ipset: drop logically empty buckets in mtype_del Ivan Vera <ivanverasantos(a)gmail.com> nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Christian Eggers <ceggers(a)arri.de> nvmem: imx: assign nvmem_cell_info::raw_len Thomas Richter <tmricht(a)linux.ibm.com> s390/cpum_sf: Cap sampling rate to prevent lsctl exception Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix memory leak with CCA cards used as accelerator Emanuele Ghidoli <emanuele.ghidoli(a)toradex.com> spi: cadence-qspi: Fix exec_mem_op error handling Xu Yang <xu.yang_2(a)nxp.com> dt-bindings: connector: add pd-disable dependency Conor Dooley <conor.dooley(a)microchip.com> firmware: microchip: fail auto-update probe if no flash found Ian Abbott <abbotti(a)mev.co.uk> comedi: me4000: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: me_daq: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Fix invalid clean-up after failed attach Ian Abbott <abbotti(a)mev.co.uk> comedi: Reinit dev->spinlock between attachments to low-level drivers Deepanshu Kartikey <kartikey406(a)gmail.com> comedi: dt2815: add hardware detection to prevent crash Oliver Neukum <oneukum(a)suse.com> cdc-acm: new quirk for EPSON HMD Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: validate ND option lengths Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: sc7280: make use of common helpers Jens Axboe <axboe(a)kernel.dk> io_uring: protect remaining lockless ctx->rings accesses with RCU Dmitry Torokhov <dmitry.torokhov(a)gmail.com> x86/platform/geode: Fix on-stack property data use-after-return bug Guan-Yu Lin <guanyulin(a)google.com> usb: core: use dedicated spinlock for offload state Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix state inconsistency on gadget init failure Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix NULL pointer dereference in ep_queue Gabor Juhos <j4g8y7(a)gmail.com> usb: core: phy: avoid double use of 'usb3-phy' Juno Choi <juno.choi(a)lge.com> usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() Justin Chen <justin.chen(a)broadcom.com> usb: ehci-brcm: fix sleep during atomic Guan-Yu Lin <guanyulin(a)google.com> usb: host: xhci-sideband: delegate offload_usage tracking to class drivers Felix Gu <ustc.gu(a)gmail.com> usb: misc: usbio: Fix URB memory leak on submit failure Heitor Alves de Siqueira <halves(a)igalia.com> usb: usbtmc: Flush anchored URBs in usbtmc_release Guangshuo Li <lgs201920130244(a)gmail.com> usb: ulpi: fix double free in ulpi_register_interface() error path Miao Li <limiao(a)kylinos.cn> usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Johan Hovold <johan(a)kernel.org> gpib: lpvo_usb: fix memory leak on disconnect Alexander Usyskin <alexander.usyskin(a)intel.com> mei: me: reduce the scope on unexpected reset Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix out-of-sequence free_irq() Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Move iio_device_register() to correct location Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix irq resource leak Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix incorrect free_irq() variable Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only Josh Poimboeuf <jpoimboe(a)kernel.org> iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() Aldo Conte <aldocontelk(a)gmail.com> iio: light: veml6070: fix veml6070_read() return value David Lechner <dlechner(a)baylibre.com> iio: light: vcnl4035: fix scan buffer on big-endian Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: imu: adis16550: fix swapped gyro/accel filter functions Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: dac: ad5770r: fix error return in ad5770r_read_raw() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: accel: adxl313: add missing error check in predisable Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 Valek Andrej <andrej.v(a)skyrain.eu> iio: accel: fix ADXL355 temperature signature value Billy Tsai <billy_tsai(a)aspeedtech.com> iio: adc: aspeed: clear reference voltage bits before configuring vref Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: adc: ade9000: move mutex init before IRQ registration Giorgi Tchankvetadze <giorgitchankvetadze1997(a)gmail.com> iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power Giorgi Tchankvetadze <giorgitchankvetadze1997(a)gmail.com> iio: adc: ade9000: fix wrong return type in streaming push Dmitry Torokhov <dmitry.torokhov(a)gmail.com> iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> iio: adc: ti-ads7950: normalize return value of gpio_get Zoltan Illes <zoliviragh(a)gmail.com> Input: xpad - add support for Razer Wolverine V3 Pro Shengyu Qu <wiagn233(a)outlook.com> Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode Liam Mitchell <mitchell.liam(a)gmail.com> Input: bcm5974 - recover from failed mode switch Christoffer Sandberg <cs(a)tuxedo.de> Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Bart Van Assche <bvanassche(a)acm.org> Input: synaptics-rmi4 - fix a locking bug in an error path JP Hein <jp(a)jphein.com> USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Wanquan Zhong <wanquan.zhong(a)fibocom.com> USB: serial: option: add support for Rolling Wireless RW135R-GL Frej Drejhammar <frej(a)stacken.kth.se> USB: serial: io_edgeport: add support for Blackbox IC135A Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/pm: drop SMU driver if version not matched messages Donet Tom <donettom(a)linux.ibm.com> drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Junrui Luo <moonafterrain(a)outlook.com> drm/amdgpu: validate doorbell_offset in user queue creation Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Fix wait after reset sequence in S4 Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: dp501: Fix initialization of SCU2C Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: fix buffer read on big-endian David Lechner <dlechner(a)baylibre.com> iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace David Lechner <dlechner(a)baylibre.com> iio: orientation: hid-sensor-rotation: fix quaternion alignment David Lechner <dlechner(a)baylibre.com> iio: add IIO_DECLARE_QUATERNION() macro Adam Crosser <adam.crosser(a)praetorian.com> gpib: fix use-after-free in IO ioctl handlers Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: fix the idr allocation flags Aleksandr Nogikh <nogikh(a)google.com> x86/kexec: Disable KCOV instrumentation after load_segments() Stefan Wiehler <stefan.wiehler(a)nokia.com> mips: mm: Allocate tlb_vpn array atomically Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix division by zero in occ_show_power_1() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix the GCC version check for `__multi3' workaround Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: SiByte: Bring back cache initialisation Asim Viladi Oglu Manizada <manizada(a)pm.me> ksmbd: fix OOB write in QUERY_INFO for compound requests hkbinbin <hkbinbinbin(a)gmail.com> Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync Oleh Konko <security(a)1seal.org> Bluetooth: SMP: force responder MITM requirements before building the pairing response Oleh Konko <security(a)1seal.org> Bluetooth: SMP: derive legacy responder STK authentication from MITM state Junxi Qian <qjx1298677004(a)gmail.com> io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() Sourav Nayak <nonameblank007(a)gmail.com> ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15 Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix missing SPDIFI1 index handling Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: fix stack out-of-bounds read in init_card Eric Biggers <ebiggers(a)kernel.org> lib/crypto: chacha: Zeroize permuted_state before it leaves scope Cheng-Yang Chou <yphbchou0911(a)gmail.com> sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() Ernestas Kulik <ernestas.k(a)iconn-networks.com> USB: serial: option: add MeiG Smart SRM825WN Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Alice Ryhl <aliceryhl(a)google.com> rust_binder: use AssertSync for BINDER_VM_OPS Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/ioc32: stop speculation on the drm_compat_ioctl path Sunil V L <sunilvl(a)oss.qualcomm.com> ACPI: RIMT: Add dependency between iommu and devices Zishun Yi <vulab(a)iscas.ac.cn> riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set Paul Walmsley <pjw(a)kernel.org> riscv: kgdb: fix several debug register assignment bugs Ian Rogers <irogers(a)google.com> perf/x86: Fix potential bad container_of in intel_pmu_hw_config Peter Zijlstra <peterz(a)infradead.org> sched/fair: Fix zero_vruntime tracking fix Shiji Yang <yangshiji66(a)outlook.com> mips: ralink: update CPU clock index Corey Hickey <bugfood-c(a)fatooh.org> hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI Chen Ni <nichen(a)iscas.ac.cn> drm/sysfb: Fix efidrm error handling and memory type mismatch Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix missing newline in occ_show_extended() Felix Gu <ustc.gu(a)gmail.com> spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Clear restart flag in pxp_start after jumping back Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Remove incorrect handling of impossible state during suspend Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Clean up termination status on failure Felix Gu <ustc.gu(a)gmail.com> spi: stm32-ospi: Fix reset control leak on probe error Felix Gu <ustc.gu(a)gmail.com> spi: stm32-ospi: Fix resource leak in remove() callback Jamie Gibbons <jamie.gibbons(a)microchip.com> dt-bindings: gpio: fix microchip #interrupt-cells Sanman Pradhan <psanman(a)juniper.net> hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") Sanman Pradhan <psanman(a)juniper.net> hwmon: (pxe1610) Check return value of page-select write in probe Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix array access with zero-length block read Qi Tang <tpluszz77(a)gmail.com> io_uring/rsrc: reject zero-length fixed buffer import Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> accel/qaic: Handle DBC deactivation if the owner went away Barnabás Pőcze <pobrn(a)protonmail.com> gpiolib: clear requested flag if line is invalid Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpio: rename gpio_chip_hwgpio() to gpiod_hwgpio() David Lechner <dlechner(a)baylibre.com> iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one Maarten Lankhorst <dev(a)lankhorst.se> Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" Varun R Mallya <varunrmallya(a)gmail.com> bpf: Reject sleepable kprobe_multi programs at attach time Qi Tang <tpluszz77(a)gmail.com> bpf: reject direct access to nullable PTR_TO_BUF pointers Dimitri Daskalakis <daskald(a)meta.com> eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64 Eric Dumazet <edumazet(a)google.com> ipv6: avoid overflows in ip6_datagram_send_ctl() Luka Gejak <luka.gejak(a)linux.dev> net: hsr: fix VLAN add unwind on slave errors Xiang Mei <xmei5(a)asu.edu> net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xiang Mei <xmei5(a)asu.edu> net/sched: cls_fw: fix NULL pointer dereference on shared blocks Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix overflow when accumulating packets Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix potential double free of skb Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Restore default stat ctxs for ULP when resource is available Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Fix switchdev mode rollback in case of failure Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Avoid "No data available" when FW version queries fail Shay Drory <shayd(a)nvidia.com> net/mlx5: lag: Check for LAG device before creating debugfs Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: properly unregister fixed rate clocks Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix clk handling on PCI glue driver removal Yucheng Lu <kanolyc(a)gmail.com> net/sched: sch_netem: fix out-of-bounds access in packet corruption Kuniyuki Iwashima <kuniyu(a)google.com> bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). Weiming Shi <bestswngs(a)gmail.com> rds: ib: reject FRMR registration before IB connection is established Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate mesh send advertising payload length Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate LTK enc_size on load Jonathan Rissanen <jonathan.rissanen(a)axis.com> Bluetooth: hci_h4: Fix race during initialization Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: SCO: fix race conditions in sco_sock_connect() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: reject immediate NF_QUEUE verdict Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: ignore explicit helper on new expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store netns and zone in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use expect->helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: honor expectation helper field Qi Tang <tpluszz77(a)gmail.com> netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent Qi Tang <tpluszz77(a)gmail.com> netfilter: nf_conntrack_helper: pass helper to expect cleanup Florian Westphal <fw(a)strlen.de> netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Florian Westphal <fw(a)strlen.de> netfilter: x_tables: ensure names are nul-terminated Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: account for netlink header size Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: strictly check for maximum number of actions Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP Michal Piekos <michal.piekos(a)mmpsystems.pl> net: stmmac: skip VLAN restore when VLAN hash ops are missing Li Xiasong <lixiasong1(a)huawei.com> mptcp: fix soft lockup in mptcp_recvmsg() Geliang Tang <geliang(a)kernel.org> mptcp: add eat_recv_skb helper Zhengchuan Liang <zcliangcn(a)gmail.com> net: ipv6: flowlabel: defer exclusive option free until RCU teardown Alexei Starovoitov <ast(a)kernel.org> bpf: Fix regsafe() for pointers to packet Julian Braha <julianbraha(a)gmail.com> ASoC: Intel: boards: fix unmet dependency on PINCTRL Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec Pengpeng Hou <pengpeng(a)iscas.ac.cn> NFC: pn533: bound the UART receive buffer Xiang Mei <xmei5(a)asu.edu> net: bonding: fix use-after-free in bond_xmit_broadcast() Herbert Xu <herbert(a)gondor.apana.org.au> crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption Herbert Xu <herbert(a)gondor.apana.org.au> crypto: algif_aead - Revert to operating out-of-place Pengpeng Hou <pengpeng(a)iscas.ac.cn> bnxt_en: set backing store type from query type Yochai Eisenrich <echelonh(a)gmail.com> net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Guoyu Su <yss2813483011xxl(a)gmail.com> net: use skb_header_pointer() for TCPv4 GSO frag_off check Paolo Abeni <pabeni(a)redhat.com> net: introduce mangleid_features Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() Paolo Abeni <pabeni(a)redhat.com> ipv6: prevent possible UaF in addrconf_permanent_addr() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure Dag Smedberg <dag(a)dsmedberg.se> ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP Wei Fang <wei.fang(a)nxp.com> net: enetc: do not allow VF to configure the RSS key Wei Fang <wei.fang(a)nxp.com> net: enetc: check whether the RSS algorithm is Toeplitz Marek Behún <kabel(a)kernel.org> net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta Xiang Mei <xmei5(a)asu.edu> net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: linearize skb before parsing ND options Dimitri Daskalakis <daskald(a)meta.com> eth: fbnic: Account for page fragments when updating BDQ tail Eric Dumazet <edumazet(a)google.com> ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Eric Dumazet <edumazet(a)google.com> ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Thomas Bogendoerfer <tbogendoerfer(a)suse.de> tg3: Fix race for querying speed/duplex Pengpeng Hou <pengpeng(a)iscas.ac.cn> net/ipv6: ioam6: prevent schema length wraparound in trace fill Yochai Eisenrich <echelonh(a)gmail.com> net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Jiayuan Chen <jiayuan.chen(a)shopee.com> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Wei Fang <wei.fang(a)nxp.com> net: enetc: reset PIR and CIR if they are not equal when initializing TX ring Buday Csaba <buday.csaba(a)prolan.hu> net: fec: fix the PTP periodic output sysfs interface Qingfang Deng <dqfext(a)gmail.com> netdevsim: fix build if SKB_EXTENSIONS=n Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: Fix RX skb truesize accounting Norbert Szetei <norbert(a)doyensec.com> crypto: af-alg - fix NULL pointer dereference in scatterwalk Mikulas Patocka <mpatocka(a)redhat.com> crypto: deflate - fix spurious -ENOSPC Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix overflow on long hmac keys Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix DMA corruption on long hmac keys Reshma Immaculate Rajkumar <reshma.rajkumar(a)oss.qualcomm.com> wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mld: correctly set wifi generation data Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: disable EHT if the device doesn't allow it Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: cfg: add new device names Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: don't send a 6E related command when not supported Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: iwlwifi: mld: Fix MLO scan timing Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: fix remaining kernel-doc warnings Frank Li <Frank.Li(a)nxp.com> dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning Praveen Talari <praveen.talari(a)oss.qualcomm.com> spi: geni-qcom: Check DMA interrupts early in ISR Paulo Alcantara <pc(a)manguebit.org> smb: client: fix generic/694 due to wrong ->i_blocks ZhengYuan Huang <gality369(a)gmail.com> btrfs: reject root items with drop_progress and zero drop_level Mikko Perttunen <mperttunen(a)nvidia.com> i2c: tegra: Don't mark devices with pins as IRQ safe Filipe Manana <fdmanana(a)suse.com> btrfs: reserve enough transaction items for qgroup ioctls Lee Jones <lee(a)kernel.org> HID: multitouch: Check to ensure report responses match the request Lee Jones <lee(a)kernel.org> HID: core: Mitigate potential OOB by removing bogus memset() Lee Jones <lee(a)kernel.org> HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix Clang jump table detection Paul SAGE <paul.sage(a)42.fr> tg3: replace placeholder MAC address with device property Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: don't take device_list_mutex when querying zone info Deepanshu Kartikey <kartikey406(a)gmail.com> atm: lec: fix use-after-free in sock_def_readable() Benoît Sevens <bsevens(a)google.com> HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: mac80211: check tdls flag in ieee80211_tdls_oper Adrian Freund <adrian(a)freund.io> HID: logitech-hidpp: Enable MX Master 4 over bluetooth Pepper Gray <hello(a)peppergray.xyz> arm64/scs: Fix handling of advance_loc4 ------------- Diffstat: .../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +- .../bindings/connector/usb-connector.yaml | 1 + .../bindings/gpio/microchip,mpfs-gpio.yaml | 4 +- Makefile | 4 +- arch/arm64/kernel/pi/patch-scs.c | 8 + arch/mips/lib/multi3.c | 6 +- arch/mips/mm/cache.c | 3 +- arch/mips/mm/tlb-r4k.c | 2 +- arch/mips/ralink/clk.c | 8 +- arch/riscv/kernel/kgdb.c | 7 +- arch/riscv/kernel/process.c | 4 +- arch/s390/kernel/perf_cpum_sf.c | 6 +- arch/x86/events/intel/core.c | 6 +- arch/x86/kernel/Makefile | 14 ++ arch/x86/mm/Makefile | 2 + arch/x86/platform/geode/geode-common.c | 24 ++- crypto/af_alg.c | 53 ++---- crypto/algif_aead.c | 100 ++--------- crypto/algif_skcipher.c | 6 +- crypto/authencesn.c | 50 +++--- crypto/deflate.c | 11 +- drivers/accel/qaic/qaic_control.c | 47 ++++- drivers/acpi/riscv/rimt.c | 7 + drivers/android/binder/page_range.rs | 8 +- drivers/android/binder/rust_binder_main.rs | 2 +- drivers/bluetooth/hci_h4.c | 3 - drivers/comedi/drivers.c | 8 + drivers/comedi/drivers/dt2815.c | 12 ++ drivers/comedi/drivers/me4000.c | 16 +- drivers/comedi/drivers/me_daq.c | 35 ++-- drivers/comedi/drivers/ni_atmio16d.c | 3 +- drivers/counter/rz-mtu3-cnt.c | 67 +++---- drivers/cpufreq/cpufreq_governor.c | 6 +- drivers/crypto/caam/caamalg_qi2.c | 3 +- drivers/crypto/caam/caamhash.c | 3 +- drivers/crypto/tegra/tegra-se-aes.c | 11 +- drivers/crypto/tegra/tegra-se-hash.c | 30 ++-- drivers/firmware/microchip/mpfs-auto-update.c | 10 +- drivers/gpio/gpio-aspeed.c | 6 +- drivers/gpio/gpio-mxc.c | 10 +- drivers/gpio/gpiolib-cdev.c | 12 +- drivers/gpio/gpiolib-sysfs.c | 14 +- drivers/gpio/gpiolib.c | 175 +++++++++--------- drivers/gpio/gpiolib.h | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 +- drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 17 +- .../display/dc/resource/dce100/dce100_resource.c | 5 +- .../display/dc/resource/dce110/dce110_resource.c | 5 +- .../display/dc/resource/dce112/dce112_resource.c | 5 +- .../display/dc/resource/dce120/dce120_resource.c | 5 +- .../amd/display/dc/resource/dce60/dce60_resource.c | 13 +- .../amd/display/dc/resource/dce80/dce80_resource.c | 5 +- drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 1 - drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c | 1 - .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 33 +++- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 33 +++- drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1 - drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/g4x_dp.c | 2 +- drivers/gpu/drm/i915/display/icl_dsi.c | 4 +- drivers/gpu/drm/sysfb/efidrm.c | 46 +++-- drivers/gpu/drm/xe/xe_pxp.c | 11 +- drivers/hid/hid-appletb-kbd.c | 5 +- drivers/hid/hid-core.c | 7 +- drivers/hid/hid-logitech-hidpp.c | 6 +- drivers/hid/hid-multitouch.c | 7 + drivers/hid/wacom_wac.c | 10 ++ drivers/hwmon/asus-ec-sensors.c | 7 +- drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/pmbus/ltc4286.c | 1 + drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/hwmon/pmbus/tps53679.c | 10 +- drivers/i2c/busses/Kconfig | 2 + drivers/i2c/busses/i2c-tegra.c | 5 +- drivers/iio/accel/adxl313_core.c | 2 + drivers/iio/accel/adxl355_core.c | 2 +- drivers/iio/accel/adxl380.c | 2 +- drivers/iio/adc/ade9000.c | 12 +- drivers/iio/adc/aspeed_adc.c | 1 + drivers/iio/adc/ti-adc161s626.c | 41 +++-- drivers/iio/adc/ti-ads1119.c | 11 +- drivers/iio/adc/ti-ads7950.c | 8 +- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 32 ++-- drivers/iio/imu/adis16550.c | 8 +- drivers/iio/imu/bmi160/bmi160_core.c | 15 +- drivers/iio/imu/bno055/bno055.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4 + drivers/iio/light/vcnl4035.c | 18 +- drivers/iio/light/veml6070.c | 4 +- drivers/iio/orientation/hid-sensor-rotation.c | 24 ++- drivers/input/joystick/xpad.c | 5 + drivers/input/mouse/bcm5974.c | 42 ++++- drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/misc/fastrpc.c | 5 +- drivers/misc/mei/hw-me.c | 14 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 18 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 10 +- drivers/net/ethernet/broadcom/tg3.c | 13 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 ++- drivers/net/ethernet/freescale/enetc/enetc.c | 13 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 10 +- drivers/net/ethernet/freescale/fec_ptp.c | 3 - drivers/net/ethernet/intel/ice/ice_ethtool.c | 11 +- drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 21 ++- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++++-- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 + .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 6 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.h | 2 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 13 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 14 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 9 +- drivers/net/phy/sfp.c | 7 +- drivers/net/virtio_net.c | 20 +-- drivers/net/vxlan/vxlan_core.c | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 15 +- drivers/net/wireless/intel/iwlwifi/cfg/rf-fm.c | 1 + drivers/net/wireless/intel/iwlwifi/cfg/rf-wh.c | 24 +++ drivers/net/wireless/intel/iwlwifi/fw/acpi.h | 1 + drivers/net/wireless/intel/iwlwifi/fw/api/cmdhdr.h | 4 +- drivers/net/wireless/intel/iwlwifi/fw/api/coex.h | 4 +- .../net/wireless/intel/iwlwifi/fw/api/commands.h | 5 + .../net/wireless/intel/iwlwifi/fw/api/dbg-tlv.h | 14 +- drivers/net/wireless/intel/iwlwifi/fw/api/debug.h | 2 +- .../net/wireless/intel/iwlwifi/fw/api/location.h | 8 +- drivers/net/wireless/intel/iwlwifi/fw/api/power.h | 5 +- drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 88 +++++---- drivers/net/wireless/intel/iwlwifi/fw/api/sta.h | 6 +- drivers/net/wireless/intel/iwlwifi/fw/api/stats.h | 39 ++-- drivers/net/wireless/intel/iwlwifi/fw/api/tx.h | 2 +- drivers/net/wireless/intel/iwlwifi/fw/error-dump.h | 4 +- drivers/net/wireless/intel/iwlwifi/fw/file.h | 74 ++++++-- drivers/net/wireless/intel/iwlwifi/fw/img.h | 12 +- drivers/net/wireless/intel/iwlwifi/fw/runtime.h | 22 ++- drivers/net/wireless/intel/iwlwifi/iwl-config.h | 8 +- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.h | 4 +- drivers/net/wireless/intel/iwlwifi/iwl-drv.h | 3 +- drivers/net/wireless/intel/iwlwifi/iwl-modparams.h | 4 +- drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c | 2 +- drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.h | 17 +- drivers/net/wireless/intel/iwlwifi/iwl-op-mode.h | 1 + drivers/net/wireless/intel/iwlwifi/iwl-trans.h | 6 +- drivers/net/wireless/intel/iwlwifi/mld/iface.c | 101 +++++++---- drivers/net/wireless/intel/iwlwifi/mld/mac80211.c | 19 ++ drivers/net/wireless/intel/iwlwifi/mld/mld.c | 1 + drivers/net/wireless/intel/iwlwifi/mld/mlo.c | 4 +- drivers/net/wireless/intel/iwlwifi/mld/notif.c | 5 + drivers/net/wireless/intel/iwlwifi/mld/scan.c | 30 +++- drivers/net/wireless/intel/iwlwifi/mld/scan.h | 9 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 3 +- drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 5 + drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/virtual/virt_wifi.c | 1 - drivers/nfc/pn533/uart.c | 3 + drivers/nvmem/imx-ocotp-ele.c | 1 + drivers/nvmem/imx-ocotp.c | 1 + drivers/nvmem/zynqmp_nvmem.c | 8 +- drivers/s390/crypto/zcrypt_msgtype6.c | 32 ++-- drivers/spi/spi-amlogic-spifc-a4.c | 12 ++ drivers/spi/spi-cadence-quadspi.c | 17 +- drivers/spi/spi-geni-qcom.c | 9 +- drivers/spi/spi-stm32-ospi.c | 9 +- drivers/staging/gpib/Kconfig | 1 + drivers/staging/gpib/common/gpib_os.c | 96 +++++++--- drivers/staging/gpib/include/gpib_types.h | 8 + drivers/staging/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c | 4 +- drivers/target/loopback/tcm_loop.c | 52 +++++- drivers/target/target_core_file.c | 2 +- drivers/thermal/thermal_core.c | 32 +++- drivers/thunderbolt/nhi.c | 2 +- drivers/tty/vt/vt.c | 18 ++ drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/class/cdc-acm.c | 9 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/usbtmc.c | 3 + drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/driver.c | 23 ++- drivers/usb/core/offload.c | 102 ++++++----- drivers/usb/core/phy.c | 12 +- drivers/usb/core/quirks.c | 3 + drivers/usb/core/usb.c | 1 + drivers/usb/dwc2/gadget.c | 2 + drivers/usb/gadget/function/f_ecm.c | 35 ++-- drivers/usb/gadget/function/f_eem.c | 59 ++++--- drivers/usb/gadget/function/f_hid.c | 19 +- drivers/usb/gadget/function/f_rndis.c | 49 ++++-- drivers/usb/gadget/function/f_subset.c | 63 ++++--- drivers/usb/gadget/function/f_uac1_legacy.c | 47 +++-- drivers/usb/gadget/function/f_uvc.c | 39 +++- drivers/usb/gadget/function/u_ecm.h | 21 ++- drivers/usb/gadget/function/u_eem.h | 21 ++- drivers/usb/gadget/function/u_ether.c | 16 +- drivers/usb/gadget/function/u_gether.h | 22 ++- drivers/usb/gadget/function/u_rndis.h | 31 +++- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 5 +- drivers/usb/gadget/udc/dummy_hcd.c | 42 +++-- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/host/xhci-sideband.c | 18 +- drivers/usb/misc/usbio.c | 7 +- drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + drivers/usb/typec/altmodes/thunderbolt.c | 44 ++--- drivers/usb/typec/ucsi/ucsi.c | 9 +- fs/btrfs/ioctl.c | 12 +- fs/btrfs/tree-checker.c | 17 ++ fs/btrfs/zoned.c | 6 +- fs/smb/client/cifsglob.h | 6 + fs/smb/client/file.c | 1 - fs/smb/client/inode.c | 21 +-- fs/smb/client/smb2ops.c | 20 +-- fs/smb/server/smb2pdu.c | 121 +++++++++---- fs/smb/server/smbacl.c | 43 +++++ fs/smb/server/smbacl.h | 2 + include/crypto/if_alg.h | 5 +- include/linux/iio/iio.h | 12 ++ include/linux/netdevice.h | 3 + include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/skbuff.h | 1 + include/linux/usb.h | 10 +- include/net/netfilter/nf_conntrack_expect.h | 20 ++- io_uring/io_uring.c | 62 ++++--- io_uring/io_uring.h | 34 +++- io_uring/net.c | 4 + io_uring/rsrc.c | 4 + kernel/bpf/verifier.c | 10 +- kernel/kallsyms.c | 64 +++++-- kernel/sched/ext.c | 70 +++++--- kernel/sched/ext_idle.c | 33 ++-- kernel/sched/fair.c | 10 +- kernel/trace/bpf_trace.c | 4 + lib/crypto/chacha-block-generic.c | 4 + mm/gup.c | 10 +- mm/hmm.c | 2 +- mm/memory.c | 22 ++- mm/mprotect.c | 2 +- mm/sparse-vmemmap.c | 2 +- mm/vmscan.c | 2 +- net/atm/lec.c | 72 +++++--- net/atm/lec.h | 2 +- net/bluetooth/hci_conn.c | 8 +- net/bluetooth/hci_event.c | 33 ++-- net/bluetooth/hci_sync.c | 14 +- net/bluetooth/mgmt.c | 17 +- net/bluetooth/sco.c | 30 +++- net/bluetooth/smp.c | 11 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/core/dev.c | 38 +++- net/core/skmsg.c | 13 +- net/hsr/hsr_device.c | 32 ++-- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 ++ net/ipv6/icmp.c | 3 + net/ipv6/ioam6.c | 4 +- net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 5 + net/ipv6/ndisc.c | 3 + net/mac80211/tdls.c | 2 +- net/mptcp/protocol.c | 30 ++-- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_broadcast.c | 8 +- net/netfilter/nf_conntrack_expect.c | 25 ++- net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 13 +- net/netfilter/nf_conntrack_netlink.c | 87 +++------ net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_flow_table_offload.c | 196 ++++++++++++++------- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_log.c | 2 +- net/netfilter/x_tables.c | 23 +++ net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_rateest.c | 5 + net/qrtr/af_qrtr.c | 31 ++-- net/rds/ib_rdma.c | 7 +- net/sched/cls_api.c | 1 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_hfsc.c | 4 +- net/sched/sch_netem.c | 5 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + sound/hda/codecs/realtek/alc269.c | 2 + sound/pci/ctxfi/ctdaio.c | 1 + sound/soc/cirrus/ep93xx-i2s.c | 34 ++-- sound/soc/intel/boards/Kconfig | 2 - sound/soc/qcom/sdw.c | 11 ++ sound/usb/caiaq/device.c | 2 +- sound/usb/qcom/qc_audio_offload.c | 10 +- sound/usb/quirks.c | 2 + tools/objtool/check.c | 5 +- 309 files changed, 3178 insertions(+), 1635 deletions(-)

1 month, 1 week

8
7
0 0

[PATCH 6.19 000/311] 6.19.12-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.19.12 release. There are 311 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 10 Apr 2026 17:58:42 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.12-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.19.12-rc1 Alexander Popov <alex.popov(a)linux.com> wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Petr Mladek <pmladek(a)suse.com> kallsyms: prevent module removal when printing module name and buildid Petr Mladek <pmladek(a)suse.com> kallsyms: cleanup code for appending the module buildid Petr Mladek <pmladek(a)suse.com> kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() Petr Mladek <pmladek(a)suse.com> kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid() Taegu Ha <hataegu0826(a)gmail.com> usb: gadget: f_uac1_legacy: validate control request size Michael Zimmermann <sigmaepsilon92(a)gmail.com> usb: gadget: f_hid: move list and spinlock inits from bind to alloc Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_eem: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ecm: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_rndis: Protect RNDIS options with mutex Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_subset: Fix unbalanced refcnt in geth_free Jimmy Hu <hhhuuu(a)google.com> usb: gadget: uvc: fix NULL pointer dereference during unbind race Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop Aditya Garg <gargaditya08(a)live.com> HID: appletb-kbd: add .resume method in PM Nathan Rebello <nathan.c.rebello(a)gmail.com> usb: typec: ucsi: validate connector number in ucsi_notify_common() Sebastian Urban <surban(a)surban.net> usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix interrupt synchronization error Alan Stern <stern(a)rowland.harvard.edu> USB: dummy-hcd: Fix locking/synchronization error Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> thunderbolt: Fix property read in nhi_wake_supported() Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: thunderbolt: Set enter_vdo during initialization Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe Xingjing Deng <micro6947(a)gmail.com> misc: fastrpc: possible double-free of cctx->remote_heap Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Fix thermal zone device registration error path Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: core: Address thermal zone removal races with resume Tzung-Bi Shih <tzungbi(a)kernel.org> gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() Shenwei Wang <shenwei.wang(a)nxp.com> gpio: mxc: map Both Edge pad wakeup to Rising Edge Andrea Righi <arighi(a)nvidia.com> sched_ext: Fix stale direct dispatch state in ddsp_dsq_id Changwoo Min <changwoo(a)igalia.com> sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU Guangshuo Li <lgs201920130244(a)gmail.com> cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path Srujana Challa <schalla(a)marvell.com> virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN Jason Gunthorpe <jgg(a)ziepe.ca> iommupt: Fix short gather if the unmap goes into a large mapping Sven Eckelmann (Plasma Cloud) <se(a)simonwunderlich.de> net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled Yufan Chen <yufan.chen(a)linux.dev> net: ftgmac100: fix ring allocation unwind on open failure Yang Yang <n05ec(a)lzu.edu.cn> vxlan: validate ND option lengths in vxlan_na_create Eric Biggers <ebiggers(a)kernel.org> crypto: tegra - Add missing CRYPTO_ALG_ASYNC Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Nicolas Pitre <nico(a)fluxnic.net> vt: resize saved unicode buffer on alt screen exit after resize Liav Mordouch <liavmordouch(a)gmail.com> vt: discard stale unicode buffer on alt screen exit after resize Dave Penkler <dpenkler(a)gmail.com> gpib: Fix fluke driver s390 compile issue Yifan Wu <yifanwucs(a)gmail.com> netfilter: ipset: drop logically empty buckets in mtype_del Ivan Vera <ivanverasantos(a)gmail.com> nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Christian Eggers <ceggers(a)arri.de> nvmem: imx: assign nvmem_cell_info::raw_len Changwoo Min <changwoo(a)igalia.com> PM: EM: Fix NULL pointer dereference when perf domain ID is not found Guangshuo Li <lgs201920130244(a)gmail.com> reset: gpio: fix double free in reset_add_gpio_aux_device() error path Thomas Richter <tmricht(a)linux.ibm.com> s390/cpum_sf: Cap sampling rate to prevent lsctl exception Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix memory leak with CCA cards used as accelerator Emanuele Ghidoli <emanuele.ghidoli(a)toradex.com> spi: cadence-qspi: Fix exec_mem_op error handling Xu Yang <xu.yang_2(a)nxp.com> dt-bindings: connector: add pd-disable dependency Conor Dooley <conor.dooley(a)microchip.com> firmware: microchip: fail auto-update probe if no flash found Ian Abbott <abbotti(a)mev.co.uk> comedi: me4000: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: me_daq: Fix potential overrun of firmware buffer Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Fix invalid clean-up after failed attach Ian Abbott <abbotti(a)mev.co.uk> comedi: Reinit dev->spinlock between attachments to low-level drivers Edward Adam Davis <eadavis(a)qq.com> comedi: runflags cannot determine whether to reclaim chanlist Deepanshu Kartikey <kartikey406(a)gmail.com> comedi: dt2815: add hardware detection to prevent crash Oliver Neukum <oneukum(a)suse.com> cdc-acm: new quirk for EPSON HMD Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: validate ND option lengths Guangshuo Li <lgs201920130244(a)gmail.com> auxdisplay: line-display: fix NULL dereference in linedisp_release Jens Axboe <axboe(a)kernel.dk> io_uring: protect remaining lockless ctx->rings accesses with RCU Dmitry Torokhov <dmitry.torokhov(a)gmail.com> x86/platform/geode: Fix on-stack property data use-after-return bug Guan-Yu Lin <guanyulin(a)google.com> usb: core: use dedicated spinlock for offload state Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix state inconsistency on gadget init failure Yongchao Wu <yongchao.wu(a)autochips.com> usb: cdns3: gadget: fix NULL pointer dereference in ep_queue Gabor Juhos <j4g8y7(a)gmail.com> usb: core: phy: avoid double use of 'usb3-phy' Juno Choi <juno.choi(a)lge.com> usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() Justin Chen <justin.chen(a)broadcom.com> usb: ehci-brcm: fix sleep during atomic Guan-Yu Lin <guanyulin(a)google.com> usb: host: xhci-sideband: delegate offload_usage tracking to class drivers Felix Gu <ustc.gu(a)gmail.com> usb: misc: usbio: Fix URB memory leak on submit failure Heitor Alves de Siqueira <halves(a)igalia.com> usb: usbtmc: Flush anchored URBs in usbtmc_release Guangshuo Li <lgs201920130244(a)gmail.com> usb: ulpi: fix double free in ulpi_register_interface() error path Miao Li <limiao(a)kylinos.cn> usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Johan Hovold <johan(a)kernel.org> gpib: lpvo_usb: fix memory leak on disconnect Alexander Usyskin <alexander.usyskin(a)intel.com> mei: me: reduce the scope on unexpected reset Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix out-of-sequence free_irq() Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Move iio_device_register() to correct location Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix irq resource leak Ethan Tidmore <ethantidmore06(a)gmail.com> iio: gyro: mpu3050: Fix incorrect free_irq() variable Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only Josh Poimboeuf <jpoimboe(a)kernel.org> iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() Aldo Conte <aldocontelk(a)gmail.com> iio: light: veml6070: fix veml6070_read() return value David Lechner <dlechner(a)baylibre.com> iio: light: vcnl4035: fix scan buffer on big-endian Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: imu: adis16550: fix swapped gyro/accel filter functions Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: dac: ad5770r: fix error return in ad5770r_read_raw() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: accel: adxl313: add missing error check in predisable Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 Valek Andrej <andrej.v(a)skyrain.eu> iio: accel: fix ADXL355 temperature signature value Billy Tsai <billy_tsai(a)aspeedtech.com> iio: adc: aspeed: clear reference voltage bits before configuring vref Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: adc: ade9000: move mutex init before IRQ registration Giorgi Tchankvetadze <giorgitchankvetadze1997(a)gmail.com> iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power Giorgi Tchankvetadze <giorgitchankvetadze1997(a)gmail.com> iio: adc: ade9000: fix wrong return type in streaming push Dmitry Torokhov <dmitry.torokhov(a)gmail.com> iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> iio: adc: ti-ads7950: normalize return value of gpio_get Zoltan Illes <zoliviragh(a)gmail.com> Input: xpad - add support for Razer Wolverine V3 Pro Shengyu Qu <wiagn233(a)outlook.com> Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode Liam Mitchell <mitchell.liam(a)gmail.com> Input: bcm5974 - recover from failed mode switch Christoffer Sandberg <cs(a)tuxedo.de> Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Bart Van Assche <bvanassche(a)acm.org> Input: synaptics-rmi4 - fix a locking bug in an error path JP Hein <jp(a)jphein.com> USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Wanquan Zhong <wanquan.zhong(a)fibocom.com> USB: serial: option: add support for Rolling Wireless RW135R-GL Frej Drejhammar <frej(a)stacken.kth.se> USB: serial: io_edgeport: add support for Blackbox IC135A Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/pm: drop SMU driver if version not matched messages Donet Tom <donettom(a)linux.ibm.com> drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Junrui Luo <moonafterrain(a)outlook.com> drm/amdgpu: validate doorbell_offset in user queue creation Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Fix wait after reset sequence in S4 Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/cdclk: Do the full CDCLK dance for min_voltage_level changes Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: dp501: Fix initialization of SCU2C Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() Felix Gu <ustc.gu(a)gmail.com> iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() David Lechner <dlechner(a)baylibre.com> iio: adc: ti-adc161s626: fix buffer read on big-endian David Lechner <dlechner(a)baylibre.com> iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace David Lechner <dlechner(a)baylibre.com> iio: orientation: hid-sensor-rotation: fix quaternion alignment David Lechner <dlechner(a)baylibre.com> iio: add IIO_DECLARE_QUATERNION() macro Adam Crosser <adam.crosser(a)praetorian.com> gpib: fix use-after-free in IO ioctl handlers Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: fix the idr allocation flags Aleksandr Nogikh <nogikh(a)google.com> x86/kexec: Disable KCOV instrumentation after load_segments() Stefan Wiehler <stefan.wiehler(a)nokia.com> mips: mm: Allocate tlb_vpn array atomically Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix division by zero in occ_show_power_1() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix the GCC version check for `__multi3' workaround Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: SiByte: Bring back cache initialisation Asim Viladi Oglu Manizada <manizada(a)pm.me> ksmbd: fix OOB write in QUERY_INFO for compound requests Oleh Konko <security(a)1seal.org> Bluetooth: hci_event: move wake reason storage into validated event handlers hkbinbin <hkbinbinbin(a)gmail.com> Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync Oleh Konko <security(a)1seal.org> Bluetooth: SMP: force responder MITM requirements before building the pairing response Oleh Konko <security(a)1seal.org> Bluetooth: SMP: derive legacy responder STK authentication from MITM state Junxi Qian <qjx1298677004(a)gmail.com> io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxx Sourav Nayak <nonameblank007(a)gmail.com> ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15 Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for Acer Swift SFG14-73 Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix missing SPDIFI1 index handling Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Check the error for index mapping Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: caiaq: fix stack out-of-bounds read in init_card Tejun Heo <tj(a)kernel.org> sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback Eric Biggers <ebiggers(a)kernel.org> lib/crypto: chacha: Zeroize permuted_state before it leaves scope Cheng-Yang Chou <yphbchou0911(a)gmail.com> sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() Ernestas Kulik <ernestas.k(a)iconn-networks.com> USB: serial: option: add MeiG Smart SRM825WN Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() Yasuaki Torimaru <yasuakitorimaru(a)gmail.com> wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Alice Ryhl <aliceryhl(a)google.com> rust_binder: use AssertSync for BINDER_VM_OPS Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> drm/ioc32: stop speculation on the drm_compat_ioctl path Sunil V L <sunilvl(a)oss.qualcomm.com> ACPI: RIMT: Add dependency between iommu and devices Zishun Yi <vulab(a)iscas.ac.cn> riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set Paul Walmsley <pjw(a)kernel.org> riscv: kgdb: fix several debug register assignment bugs Ian Rogers <irogers(a)google.com> perf/x86: Fix potential bad container_of in intel_pmu_hw_config Peter Zijlstra <peterz(a)infradead.org> sched/debug: Fix avg_vruntime() usage Peter Zijlstra <peterz(a)infradead.org> sched/fair: Fix zero_vruntime tracking fix Shiji Yang <yangshiji66(a)outlook.com> mips: ralink: update CPU clock index Corey Hickey <bugfood-c(a)fatooh.org> hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI Chen Ni <nichen(a)iscas.ac.cn> drm/sysfb: Fix efidrm error handling and memory type mismatch Jessica Liu <liu.xuemei1(a)zte.com.cn> irqchip/riscv-aplic: Restrict genpd notifier to device tree only Sanman Pradhan <psanman(a)juniper.net> hwmon: (occ) Fix missing newline in occ_show_extended() Felix Gu <ustc.gu(a)gmail.com> spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Clear restart flag in pxp_start after jumping back Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Remove incorrect handling of impossible state during suspend Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/pxp: Clean up termination status on failure Jonathan Cavitt <jonathan.cavitt(a)intel.com> drm/xe/xe_pagefault: Disallow writes to read-only VMAs Felix Gu <ustc.gu(a)gmail.com> spi: stm32-ospi: Fix reset control leak on probe error Felix Gu <ustc.gu(a)gmail.com> spi: stm32-ospi: Fix resource leak in remove() callback Jamie Gibbons <jamie.gibbons(a)microchip.com> dt-bindings: gpio: fix microchip #interrupt-cells Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: shared: shorten the critical section in gpiochip_setup_shared() Sanman Pradhan <psanman(a)juniper.net> hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") Sanman Pradhan <psanman(a)juniper.net> hwmon: (pxe1610) Check return value of page-select write in probe Sanman Pradhan <psanman(a)juniper.net> hwmon: (tps53679) Fix array access with zero-length block read Qi Tang <tpluszz77(a)gmail.com> io_uring/rsrc: reject zero-length fixed buffer import Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> accel/qaic: Handle DBC deactivation if the owner went away Liu Ying <victor.liu(a)nxp.com> drm/bridge: Fix refcount shown via debugfs for encoder_bridges_show() Felix Gu <ustc.gu(a)gmail.com> gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: shared: handle pins shared by child nodes of devices Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: shared: call gpio_chip::of_xlate() if set Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org> interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes() Barnabás Pőcze <pobrn(a)protonmail.com> gpiolib: clear requested flag if line is invalid David Lechner <dlechner(a)baylibre.com> iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one Maarten Lankhorst <dev(a)lankhorst.se> Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix incorrect pruning due to atomic fetch precision tracking Varun R Mallya <varunrmallya(a)gmail.com> bpf: Reject sleepable kprobe_multi programs at attach time Qi Tang <tpluszz77(a)gmail.com> bpf: reject direct access to nullable PTR_TO_BUF pointers Dimitri Daskalakis <daskald(a)meta.com> eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64 Eric Dumazet <edumazet(a)google.com> ipv6: avoid overflows in ip6_datagram_send_ctl() Luka Gejak <luka.gejak(a)linux.dev> net: hsr: fix VLAN add unwind on slave errors Xiang Mei <xmei5(a)asu.edu> net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xiang Mei <xmei5(a)asu.edu> net/sched: cls_fw: fix NULL pointer dereference on shared blocks Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix overflow when accumulating packets Martin Schiller <ms(a)dev.tdt.de> net/x25: Fix potential double free of skb Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Restore default stat ctxs for ULP when resource is available Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode() Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Refactor some basic ring setup and adjustment logic Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Fix switchdev mode rollback in case of failure Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Avoid "No data available" when FW version queries fail Shay Drory <shayd(a)nvidia.com> net/mlx5: lag: Check for LAG device before creating debugfs Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: properly unregister fixed rate clocks Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix clk handling on PCI glue driver removal Yucheng Lu <kanolyc(a)gmail.com> net/sched: sch_netem: fix out-of-bounds access in packet corruption Kuniyuki Iwashima <kuniyu(a)google.com> bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). Weiming Shi <bestswngs(a)gmail.com> rds: ib: reject FRMR registration before IB connection is established Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate mesh send advertising payload length Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync Keenan Dong <keenanat2000(a)gmail.com> Bluetooth: MGMT: validate LTK enc_size on load Jonathan Rissanen <jonathan.rissanen(a)axis.com> Bluetooth: hci_h4: Fix race during initialization Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_sync: Fix UAF in le_read_features_complete Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Add support for setting BT_PHY Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: SCO: fix race conditions in sco_sock_connect() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: reject immediate NF_QUEUE verdict Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: ignore explicit helper on new expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store netns and zone in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use expect->helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: honor expectation helper field Qi Tang <tpluszz77(a)gmail.com> netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent Qi Tang <tpluszz77(a)gmail.com> netfilter: nf_conntrack_helper: pass helper to expect cleanup Florian Westphal <fw(a)strlen.de> netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Florian Westphal <fw(a)strlen.de> netfilter: x_tables: ensure names are nul-terminated Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: account for netlink header size Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: strictly check for maximum number of actions Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP Michal Piekos <michal.piekos(a)mmpsystems.pl> net: stmmac: skip VLAN restore when VLAN hash ops are missing Li Xiasong <lixiasong1(a)huawei.com> mptcp: fix soft lockup in mptcp_recvmsg() Geliang Tang <geliang(a)kernel.org> mptcp: add eat_recv_skb helper Zhengchuan Liang <zcliangcn(a)gmail.com> net: ipv6: flowlabel: defer exclusive option free until RCU teardown Alexei Starovoitov <ast(a)kernel.org> bpf: Fix regsafe() for pointers to packet Xiang Mei <xmei5(a)asu.edu> bridge: mrp: reject zero test interval to avoid OOM panic Julian Braha <julianbraha(a)gmail.com> ASoC: Intel: boards: fix unmet dependency on PINCTRL Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec Pengpeng Hou <pengpeng(a)iscas.ac.cn> NFC: pn533: bound the UART receive buffer Xiang Mei <xmei5(a)asu.edu> net: bonding: fix use-after-free in bond_xmit_broadcast() Herbert Xu <herbert(a)gondor.apana.org.au> crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption Herbert Xu <herbert(a)gondor.apana.org.au> crypto: algif_aead - Revert to operating out-of-place Pengpeng Hou <pengpeng(a)iscas.ac.cn> bnxt_en: set backing store type from query type Yochai Eisenrich <echelonh(a)gmail.com> net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Guoyu Su <yss2813483011xxl(a)gmail.com> net: use skb_header_pointer() for TCPv4 GSO frag_off check Paolo Abeni <pabeni(a)redhat.com> net: introduce mangleid_features Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() Paolo Abeni <pabeni(a)redhat.com> ipv6: prevent possible UaF in addrconf_permanent_addr() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure Dag Smedberg <dag(a)dsmedberg.se> ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP Wei Fang <wei.fang(a)nxp.com> net: enetc: do not allow VF to configure the RSS key Wei Fang <wei.fang(a)nxp.com> net: enetc: check whether the RSS algorithm is Toeplitz Marek Behún <kabel(a)kernel.org> net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta Xiang Mei <xmei5(a)asu.edu> net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() Yang Yang <n05ec(a)lzu.edu.cn> bridge: br_nd_send: linearize skb before parsing ND options Dimitri Daskalakis <daskald(a)meta.com> eth: fbnic: Account for page fragments when updating BDQ tail Eric Dumazet <edumazet(a)google.com> ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Eric Dumazet <edumazet(a)google.com> ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() David Carlier <devnexen(a)gmail.com> net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch Thomas Bogendoerfer <tbogendoerfer(a)suse.de> tg3: Fix race for querying speed/duplex Pengpeng Hou <pengpeng(a)iscas.ac.cn> net/ipv6: ioam6: prevent schema length wraparound in trace fill Sherry Yang <sherry.yang(a)oracle.com> iommupt/amdv1: mark amdv1pt_install_leaf_entry as __always_inline Yochai Eisenrich <echelonh(a)gmail.com> net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Jiayuan Chen <jiayuan.chen(a)shopee.com> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Wei Fang <wei.fang(a)nxp.com> net: enetc: do not access non-existent registers on pseudo MAC Wei Fang <wei.fang(a)nxp.com> net: enetc: add graceful stop to safely reinitialize the TX Ring Wei Fang <wei.fang(a)nxp.com> net: enetc: reset PIR and CIR if they are not equal when initializing TX ring Buday Csaba <buday.csaba(a)prolan.hu> net: fec: fix the PTP periodic output sysfs interface Qingfang Deng <dqfext(a)gmail.com> netdevsim: fix build if SKB_EXTENSIONS=n Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: Fix RX skb truesize accounting Sabrina Dubroca <sd(a)queasysnail.net> mpls: add seqcount to protect the platform_label{,s} pair Norbert Szetei <norbert(a)doyensec.com> crypto: af-alg - fix NULL pointer dereference in scatterwalk Mikulas Patocka <mpatocka(a)redhat.com> crypto: deflate - fix spurious -ENOSPC Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix overflow on long hmac keys Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix DMA corruption on long hmac keys Tejun Heo <tj(a)kernel.org> cgroup: Fix cgroup_drain_dying() testing the wrong condition Tejun Heo <tj(a)kernel.org> selftests/cgroup: Don't require synchronous populated update on task exit Tejun Heo <tj(a)kernel.org> cgroup: Wait for dying tasks to leave on rmdir Reshma Immaculate Rajkumar <reshma.rajkumar(a)oss.qualcomm.com> wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mld: correctly set wifi generation data Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: don't send a 6E related command when not supported Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: iwlwifi: mld: Fix MLO scan timing Frank Li <Frank.Li(a)nxp.com> dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Fix error handling in mshv_region_pin Praveen Talari <praveen.talari(a)oss.qualcomm.com> spi: geni-qcom: Check DMA interrupts early in ISR Paulo Alcantara <pc(a)manguebit.org> smb: client: fix generic/694 due to wrong ->i_blocks Alex Hung <alex.hung(a)amd.com> drm/amd/display: Fix gamma 2.2 colorop TFs ZhengYuan Huang <gality369(a)gmail.com> btrfs: reject root items with drop_progress and zero drop_level Mikko Perttunen <mperttunen(a)nvidia.com> i2c: tegra: Don't mark devices with pins as IRQ safe Filipe Manana <fdmanana(a)suse.com> btrfs: reserve enough transaction items for qgroup ioctls Lee Jones <lee(a)kernel.org> HID: multitouch: Check to ensure report responses match the request Joe Lawrence <joe.lawrence(a)redhat.com> objtool/klp: fix mkstemp() failure with long paths Lee Jones <lee(a)kernel.org> HID: core: Mitigate potential OOB by removing bogus memset() Lee Jones <lee(a)kernel.org> HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix Clang jump table detection Paul SAGE <paul.sage(a)42.fr> tg3: replace placeholder MAC address with device property Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: don't take device_list_mutex when querying zone info Deepanshu Kartikey <kartikey406(a)gmail.com> atm: lec: fix use-after-free in sock_def_readable() Benoît Sevens <bsevens(a)google.com> HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: mac80211: check tdls flag in ieee80211_tdls_oper Adrian Freund <adrian(a)freund.io> HID: logitech-hidpp: Enable MX Master 4 over bluetooth Pepper Gray <hello(a)peppergray.xyz> arm64/scs: Fix handling of advance_loc4 Long Li <leo.lilong(a)huawei.com> xfs: close crash window in attr dabtree inactivation Long Li <leo.lilong(a)huawei.com> xfs: factor out xfs_attr3_leaf_init Long Li <leo.lilong(a)huawei.com> xfs: factor out xfs_attr3_node_entry_remove Josef Bacik <josef(a)toxicpanda.com> scsi: target: tcm_loop: Drain commands in target_reset handler Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> scsi: target: file: Use kzalloc_flex for aio_cmd Guangshuo Li <lgs201920130244(a)gmail.com> net: mana: fix use-after-free in add_adev() error path Willem de Bruijn <willemb(a)google.com> net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 ------------- Diffstat: .../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +- .../bindings/connector/usb-connector.yaml | 1 + .../bindings/gpio/microchip,mpfs-gpio.yaml | 4 +- Makefile | 4 +- arch/arm64/kernel/pi/patch-scs.c | 8 + arch/mips/lib/multi3.c | 6 +- arch/mips/mm/cache.c | 3 +- arch/mips/mm/tlb-r4k.c | 2 +- arch/mips/ralink/clk.c | 8 +- arch/riscv/kernel/kgdb.c | 7 +- arch/riscv/kernel/process.c | 4 +- arch/s390/kernel/perf_cpum_sf.c | 6 +- arch/x86/events/intel/core.c | 6 +- arch/x86/kernel/Makefile | 14 ++ arch/x86/mm/Makefile | 2 + arch/x86/platform/geode/geode-common.c | 24 ++- crypto/af_alg.c | 53 ++---- crypto/algif_aead.c | 100 ++--------- crypto/algif_skcipher.c | 6 +- crypto/authencesn.c | 50 +++--- crypto/deflate.c | 11 +- drivers/accel/qaic/qaic_control.c | 47 ++++- drivers/acpi/riscv/rimt.c | 7 + drivers/android/binder/page_range.rs | 8 +- drivers/android/binder/rust_binder_main.rs | 2 +- drivers/auxdisplay/line-display.c | 2 +- drivers/bluetooth/hci_h4.c | 3 - drivers/comedi/comedi_fops.c | 8 +- drivers/comedi/drivers.c | 8 + drivers/comedi/drivers/dt2815.c | 12 ++ drivers/comedi/drivers/me4000.c | 16 +- drivers/comedi/drivers/me_daq.c | 35 ++-- drivers/comedi/drivers/ni_atmio16d.c | 3 +- drivers/counter/rz-mtu3-cnt.c | 67 +++---- drivers/cpufreq/cpufreq_governor.c | 6 +- drivers/crypto/caam/caamalg_qi2.c | 3 +- drivers/crypto/caam/caamhash.c | 3 +- drivers/crypto/tegra/tegra-se-aes.c | 11 +- drivers/crypto/tegra/tegra-se-hash.c | 30 ++-- drivers/firmware/microchip/mpfs-auto-update.c | 10 +- drivers/gpib/Kconfig | 1 + drivers/gpib/common/gpib_os.c | 96 +++++++--- drivers/gpib/include/gpib_types.h | 8 + drivers/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c | 4 +- drivers/gpio/gpio-mxc.c | 10 +- drivers/gpio/gpio-qixis-fpga.c | 4 +- drivers/gpio/gpiolib-shared.c | 57 ++++-- drivers/gpio/gpiolib-shared.h | 11 +- drivers/gpio/gpiolib.c | 135 +++++++------- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 +- drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_colorop.c | 6 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 17 +- drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 1 - drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c | 1 - .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 33 +++- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 33 +++- drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1 - drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_bridge.c | 16 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/g4x_dp.c | 2 +- drivers/gpu/drm/i915/display/icl_dsi.c | 4 +- drivers/gpu/drm/i915/display/intel_cdclk.c | 54 ++++++ drivers/gpu/drm/sysfb/efidrm.c | 46 +++-- drivers/gpu/drm/xe/xe_pagefault.c | 6 + drivers/gpu/drm/xe/xe_pxp.c | 11 +- drivers/hid/hid-appletb-kbd.c | 5 +- drivers/hid/hid-core.c | 7 +- drivers/hid/hid-logitech-hidpp.c | 6 +- drivers/hid/hid-multitouch.c | 7 + drivers/hid/wacom_wac.c | 10 ++ drivers/hv/mshv_regions.c | 6 +- drivers/hwmon/asus-ec-sensors.c | 7 +- drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/pmbus/ltc4286.c | 1 + drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/hwmon/pmbus/tps53679.c | 10 +- drivers/i2c/busses/Kconfig | 2 + drivers/i2c/busses/i2c-tegra.c | 5 +- drivers/iio/accel/adxl313_core.c | 2 + drivers/iio/accel/adxl355_core.c | 2 +- drivers/iio/accel/adxl380.c | 2 +- drivers/iio/adc/ade9000.c | 12 +- drivers/iio/adc/aspeed_adc.c | 1 + drivers/iio/adc/ti-adc161s626.c | 41 +++-- drivers/iio/adc/ti-ads1119.c | 11 +- drivers/iio/adc/ti-ads7950.c | 8 +- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 32 ++-- drivers/iio/imu/adis16550.c | 8 +- drivers/iio/imu/bmi160/bmi160_core.c | 15 +- drivers/iio/imu/bno055/bno055.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 15 +- drivers/iio/light/vcnl4035.c | 18 +- drivers/iio/light/veml6070.c | 4 +- drivers/iio/orientation/hid-sensor-rotation.c | 24 ++- drivers/input/joystick/xpad.c | 5 + drivers/input/mouse/bcm5974.c | 42 ++++- drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/interconnect/qcom/sm8450.c | 4 +- drivers/iommu/generic_pt/fmt/amdv1.h | 2 +- drivers/iommu/generic_pt/iommu_pt.h | 2 +- drivers/irqchip/irq-riscv-aplic-main.c | 4 +- drivers/misc/fastrpc.c | 5 +- drivers/misc/mei/hw-me.c | 14 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 18 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 76 +++++--- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 5 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 5 +- drivers/net/ethernet/broadcom/tg3.c | 13 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 ++- drivers/net/ethernet/freescale/enetc/enetc.c | 13 +- drivers/net/ethernet/freescale/enetc/enetc4_hw.h | 11 ++ drivers/net/ethernet/freescale/enetc/enetc4_pf.c | 118 +++++++++++-- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 10 +- drivers/net/ethernet/freescale/fec_ptp.c | 3 - drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 21 ++- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++++-- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 + .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 6 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.h | 2 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 13 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 14 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 2 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 9 +- drivers/net/phy/sfp.c | 7 +- drivers/net/virtio_net.c | 20 +-- drivers/net/vxlan/vxlan_core.c | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 15 +- .../net/wireless/intel/iwlwifi/fw/api/commands.h | 5 + drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 10 ++ drivers/net/wireless/intel/iwlwifi/mld/iface.c | 101 +++++++---- drivers/net/wireless/intel/iwlwifi/mld/mac80211.c | 19 ++ drivers/net/wireless/intel/iwlwifi/mld/mld.c | 1 + drivers/net/wireless/intel/iwlwifi/mld/mlo.c | 4 +- drivers/net/wireless/intel/iwlwifi/mld/notif.c | 5 + drivers/net/wireless/intel/iwlwifi/mld/scan.c | 30 +++- drivers/net/wireless/intel/iwlwifi/mld/scan.h | 9 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 3 +- drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/virtual/virt_wifi.c | 1 - drivers/nfc/pn533/uart.c | 3 + drivers/nvmem/imx-ocotp-ele.c | 1 + drivers/nvmem/imx-ocotp.c | 1 + drivers/nvmem/zynqmp_nvmem.c | 8 +- drivers/reset/core.c | 1 - drivers/s390/crypto/zcrypt_msgtype6.c | 32 ++-- drivers/spi/spi-amlogic-spifc-a4.c | 12 ++ drivers/spi/spi-cadence-quadspi.c | 17 +- drivers/spi/spi-geni-qcom.c | 9 +- drivers/spi/spi-stm32-ospi.c | 9 +- drivers/target/loopback/tcm_loop.c | 52 +++++- drivers/target/target_core_file.c | 2 +- drivers/thermal/thermal_core.c | 32 +++- drivers/thunderbolt/nhi.c | 2 +- drivers/tty/vt/vt.c | 18 ++ drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/class/cdc-acm.c | 9 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/usbtmc.c | 3 + drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/driver.c | 23 ++- drivers/usb/core/offload.c | 102 ++++++----- drivers/usb/core/phy.c | 12 +- drivers/usb/core/quirks.c | 3 + drivers/usb/core/usb.c | 1 + drivers/usb/dwc2/gadget.c | 2 + drivers/usb/gadget/function/f_ecm.c | 35 ++-- drivers/usb/gadget/function/f_eem.c | 59 ++++--- drivers/usb/gadget/function/f_hid.c | 19 +- drivers/usb/gadget/function/f_rndis.c | 49 ++++-- drivers/usb/gadget/function/f_subset.c | 63 ++++--- drivers/usb/gadget/function/f_uac1_legacy.c | 47 +++-- drivers/usb/gadget/function/f_uvc.c | 39 +++- drivers/usb/gadget/function/u_ecm.h | 21 ++- drivers/usb/gadget/function/u_eem.h | 21 ++- drivers/usb/gadget/function/u_ether.c | 16 +- drivers/usb/gadget/function/u_gether.h | 22 ++- drivers/usb/gadget/function/u_rndis.h | 31 +++- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 5 +- drivers/usb/gadget/udc/dummy_hcd.c | 42 +++-- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/host/xhci-sideband.c | 18 +- drivers/usb/misc/usbio.c | 7 +- drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + drivers/usb/typec/altmodes/thunderbolt.c | 44 ++--- drivers/usb/typec/ucsi/ucsi.c | 9 +- fs/btrfs/ioctl.c | 12 +- fs/btrfs/tree-checker.c | 17 ++ fs/btrfs/zoned.c | 6 +- fs/smb/client/cifsglob.h | 6 + fs/smb/client/file.c | 1 - fs/smb/client/inode.c | 21 +-- fs/smb/client/smb2ops.c | 20 +-- fs/smb/server/smb2pdu.c | 121 +++++++++---- fs/smb/server/smbacl.c | 43 +++++ fs/smb/server/smbacl.h | 2 + fs/xfs/libxfs/xfs_attr_leaf.c | 22 +++ fs/xfs/libxfs/xfs_attr_leaf.h | 3 + fs/xfs/libxfs/xfs_da_btree.c | 53 ++++-- fs/xfs/libxfs/xfs_da_btree.h | 2 + fs/xfs/xfs_attr_inactive.c | 99 ++++++----- include/crypto/if_alg.h | 5 +- include/linux/cgroup-defs.h | 3 + include/linux/iio/iio.h | 12 ++ include/linux/netdevice.h | 3 + include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/skbuff.h | 1 + include/linux/usb.h | 10 +- include/net/bluetooth/bluetooth.h | 39 ++-- include/net/bluetooth/hci.h | 9 + include/net/bluetooth/hci_core.h | 1 + include/net/bluetooth/hci_sync.h | 3 + include/net/netfilter/nf_conntrack_expect.h | 20 ++- include/net/netns/mpls.h | 1 + io_uring/io_uring.c | 62 ++++--- io_uring/io_uring.h | 34 +++- io_uring/net.c | 4 + io_uring/rsrc.c | 4 + kernel/bpf/verifier.c | 37 +++- kernel/cgroup/cgroup.c | 88 ++++++++- kernel/kallsyms.c | 64 +++++-- kernel/power/em_netlink.c | 2 + kernel/sched/debug.c | 4 +- kernel/sched/ext.c | 144 +++++++++++---- kernel/sched/ext_idle.c | 33 ++-- kernel/sched/fair.c | 10 +- kernel/sched/sched.h | 3 + kernel/trace/bpf_trace.c | 4 + lib/crypto/chacha-block-generic.c | 4 + net/atm/lec.c | 72 +++++--- net/atm/lec.h | 2 +- net/bluetooth/hci_conn.c | 113 +++++++++++- net/bluetooth/hci_event.c | 153 ++++++++-------- net/bluetooth/hci_sync.c | 152 +++++++++++++--- net/bluetooth/l2cap_sock.c | 20 ++- net/bluetooth/mgmt.c | 17 +- net/bluetooth/sco.c | 30 +++- net/bluetooth/smp.c | 11 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/bridge/br_mrp_netlink.c | 4 +- net/core/dev.c | 38 +++- net/core/skmsg.c | 13 +- net/hsr/hsr_device.c | 32 ++-- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 ++ net/ipv6/icmp.c | 3 + net/ipv6/ioam6.c | 4 +- net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 5 + net/ipv6/ndisc.c | 3 + net/mac80211/tdls.c | 2 +- net/mpls/af_mpls.c | 29 ++- net/mptcp/protocol.c | 30 ++-- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_broadcast.c | 8 +- net/netfilter/nf_conntrack_expect.c | 25 ++- net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 13 +- net/netfilter/nf_conntrack_netlink.c | 87 +++------ net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_flow_table_offload.c | 196 ++++++++++++++------- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_log.c | 2 +- net/netfilter/x_tables.c | 23 +++ net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_rateest.c | 5 + net/qrtr/af_qrtr.c | 31 ++-- net/rds/ib_rdma.c | 7 +- net/sched/cls_api.c | 1 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_hfsc.c | 4 +- net/sched/sch_netem.c | 5 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + sound/hda/codecs/realtek/alc269.c | 12 +- sound/pci/ctxfi/ctatc.c | 10 +- sound/pci/ctxfi/ctdaio.c | 82 +++++---- sound/soc/cirrus/ep93xx-i2s.c | 34 ++-- sound/soc/intel/boards/Kconfig | 2 - sound/usb/caiaq/device.c | 2 +- sound/usb/qcom/qc_audio_offload.c | 10 +- sound/usb/quirks.c | 2 + tools/objtool/check.c | 5 +- tools/objtool/elf.c | 23 +-- tools/testing/selftests/cgroup/lib/cgroup_util.c | 15 ++ .../selftests/cgroup/lib/include/cgroup_util.h | 2 + tools/testing/selftests/cgroup/test_core.c | 3 +- tools/testing/selftests/cgroup/test_kill.c | 7 +- 311 files changed, 3926 insertions(+), 1765 deletions(-)

1 month, 1 week

9
8
0 0

Potential supply partnership.

by N

Hello lkft-triage, My name is Neil, and I am a Research Assistant in the R&D department of a leading biopharmaceutical company in England. I would like to introduce a potential supply opportunity that may be of mutual interest. Please let me know if you would be interested in receiving further details. Best regards, N. E. O'May

1 month, 1 week

1
0
0 0

[PATCH 6.19 000/342] 6.19.11-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.19.11 release. There are 342 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 02 Apr 2026 16:16:56 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.11-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.19.11-rc1 Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix regressions caused by reusing ident Arnd Bergmann <arnd(a)arndb.de> bug: avoid format attribute warning for clang as well Ye Bin <yebin10(a)huawei.com> ext4: fix mballoc-test.c is not compiled when EXT4_KUNIT_TESTS=M Ye Bin <yebin10(a)huawei.com> ext4: introduce EXPORT_SYMBOL_FOR_EXT4_TEST() helper Hao-Yu Yang <naup96721(a)gmail.com> futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() Peter Zijlstra <peterz(a)infradead.org> futex: Require sys_futex_requeue() to have identical flags Biju Das <biju.das.jz(a)bp.renesas.com> irqchip/renesas-rzv2h: Fix error path in rzv2h_icu_probe_common() David Howells <dhowells(a)redhat.com> netfs: Fix the handling of stream->front by removing it GuoHan Zhao <zhaoguohan(a)kylinos.cn> xen/privcmd: unregister xenstore notifier on module exit Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error when running device stats on multiple devices fs Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> btrfs: fix leak of kobject name for sub-group space_info Mark Harmstone <mark(a)harmstone.com> btrfs: fix super block offset in error message in btrfs_validate_super() David Howells <dhowells(a)redhat.com> netfs: Fix read abandonment during retry Christian Brauner <brauner(a)kernel.org> selftests/mount_setattr: increase tmpfs size for idmapped mount tests Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix dma_device directions Tuo Li <islituo(a)gmail.com> dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() Deepanshu Kartikey <kartikey406(a)gmail.com> netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry Deepanshu Kartikey <kartikey406(a)gmail.com> netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators Alexander Stein <alexander.stein(a)ew.tq-group.com> dmaengine: xilinx: xdma: Fix regmap init error handling LUO Haowen <luo-hw(a)foxmail.com> dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. Felix Gu <ustc.gu(a)gmail.com> phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix leaking event log memory Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix freeing the allocated ida too late Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix memory leak when a wq is reset Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix not releasing workqueue on .release() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix possible invalid memory access after FLR Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix crash when the event log is disabled Werner Kasselman <werner(a)verivus.com> ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() Benno Lossin <lossin(a)kernel.org> rust: pin-init: internal: init: document load-bearing fact of field accessors SeongJae Park <sj(a)kernel.org> mm/damon/core: avoid use of half-online-committed context Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: do not increment tailcall count when prog is NULL Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off Theodore Ts'o <tytso(a)mit.edu> ext4: always drain queued discard work in ext4_mb_release() Baokun Li <libaokun(a)linux.alibaba.com> ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths Theodore Ts'o <tytso(a)mit.edu> ext4: handle wraparound when searching for blocks for indirect mapped blocks Zqiang <qiang.zhang(a)linux.dev> ext4: fix the might_sleep() warnings in kvfree() Jiayuan Chen <jiayuan.chen(a)shopee.com> ext4: fix use-after-free in update_super_work when racing with umount Helen Koike <koike(a)igalia.com> ext4: reject mount if bigalloc with s_first_data_block != 0 Ye Bin <yebin10(a)huawei.com> ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() Edward Adam Davis <eadavis(a)qq.com> ext4: avoid infinite loops caused by residual data Tejas Bharambe <tejas.bharambe(a)outlook.com> ext4: validate p_idx bounds in ext4_ext_correct_indexes Ye Bin <yebin10(a)huawei.com> ext4: test if inode's all dirty pages are submitted to disk Li Chen <me(a)linux.beauty> ext4: publish jinode after initialization Yuto Ohnuki <ytohnuki(a)amazon.com> ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Jan Kara <jack(a)suse.cz> ext4: make recently_deleted() properly work with lazy itable initialization Jan Kara <jack(a)suse.cz> ext4: fix fsync(2) for nojournal mode Zhang Yi <yi.zhang(a)huawei.com> ext4: do not check fast symlink during orphan recovery Jan Kara <jack(a)suse.cz> ext4: fix stale xarray tags after writeback Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: convert inline data to extents when truncate exceeds inline size Simon Weber <simon.weber.39(a)gmail.com> ext4: fix journal credit check when setting fscrypt context Darrick J. Wong <djwong(a)kernel.org> xfs: remove file_path tracepoint data Darrick J. Wong <djwong(a)kernel.org> xfs: don't irele after failing to iget in xfs_attri_recover_work Long Li <leo.lilong(a)huawei.com> xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 hongao <hongao(a)uniontech.com> xfs: scrub: unlock dquot before early return in quota scrub Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: avoid dereferencing log items after push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: save ailp before dropping the AIL lock in push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: stop reclaim before pushing AIL during unmount Max Boone <mboone(a)akamai.com> mm/pagewalk: fix race between concurrent split and refault Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr in repeat_call_fn Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Josh Law <objecting(a)objecting.org> mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Lorenzo Stoakes (Oracle) <ljs(a)kernel.org> mm/mseal: update VMA end correctly on merge David Hildenbrand (Arm) <david(a)kernel.org> mm/memory: fix PMD/PUD checks in follow_pfnmap_start() Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: Return -EOPNOTSUPP for unsupported OD_MCLK on smu_v13_0_6 Huacai Chen <chenhuacai(a)kernel.org> LoongArch: KVM: Handle the case that EIOINTC's coremap is empty Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Workaround LS2K/LS7A GPU DMA hang bug Xi Ruoyao <xry111(a)xry111.site> LoongArch: vDSO: Emit GNU_EH_FRAME correctly Li Jun <lijun01(a)kylinos.cn> LoongArch: Fix missing NULL checks for kstrdup() Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Unlink NV12 planes earlier Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Order OP vs. timeout correctly in __wait_for() Imre Deak <imre.deak(a)intel.com> drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display: check if ext_caps is valid in BL setup Alex Hung <alex.hung(a)amd.com> drm/amd/display: Fix drm_edid leak in amdgpu_dm Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display: Fix DCE LVDS handling Ruijing Dong <ruijing.dong(a)amd.com> drm/amdgpu: fix strsep() corrupting lockup_timeout on multi-GPU (v3) Eric Huang <jinhuieric.huang(a)amd.com> drm/amdgpu: prevent immediate PASID reuse case Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Protect the driver specific lists Joy Zou <joy.zou(a)nxp.com> dmaengine: fsl-edma: fix channel parameter config for fixed channel requests Stefan Eichenberger <stefan.eichenberger(a)toradex.com> i2c: imx: ensure no clock is generated after last read Stefan Eichenberger <stefan.eichenberger(a)toradex.com> i2c: imx: fix i2c issue when reading multiple messages Davidlohr Bueso <dave(a)stgolabs.net> futex: Clear stale exiting pointer in futex_lock_pi() retry path Pratap Nirujogi <pratap.nirujogi(a)amd.com> i2c: designware: amdisp: Fix resume-probe race condition issue Joanne Koong <joannelkoong(a)gmail.com> iomap: fix invalid folio access when i_blkbits differs from I/O granularity Jassi Brar <jassisinghbrar(a)gmail.com> irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment Milos Nikic <nikic.milos(a)gmail.com> jbd2: gracefully abort on checkpointing state corruptions Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Kevin Hao <haokexin(a)gmail.com> net: macb: Use dev_consume_skb_any() to free TX SKBs Kevin Hao <haokexin(a)gmail.com> net: macb: Protect access to net_device::ip_ptr with RCU lock Kevin Hao <haokexin(a)gmail.com> net: macb: Move devm_{free,request}_irq() out of spin lock area Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> scsi: ses: Handle positive SCSI error from ses_recv_diag() Tyllis Xu <livelycarpet87(a)gmail.com> scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() Amir Goldstein <amir73il(a)gmail.com> ovl: fix wrong detection of 32bit inode numbers Fei Lv <feilv(a)asrmicro.com> ovl: make fsync after metadata copy-up opt-in mount option Abel Vesa <abel.vesa(a)oss.qualcomm.com> phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 Nikunj A Dadhania <nikunj(a)amd.com> x86/fred: Fix early boot failures on SEV-ES/SNP guests Borislav Petkov (AMD) <bp(a)alien8.de> x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask Nikunj A Dadhania <nikunj(a)amd.com> x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() Joanne Koong <joannelkoong(a)gmail.com> writeback: don't block sync for filesystems with no data integrity guarantees Jinjiang Tu <tujinjiang(a)huawei.com> mm/huge_memory: fix folio isn't locked in softleaf_to_folio() Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Fix argument order in alarm_timer_forward() Jiucheng Xu <jiucheng.xu(a)amlogic.com> erofs: add GFP_NOIO in the bio completion if needed Alex Williamson <alex.williamson(a)nvidia.com> vfio/pci: Fix double free in dma-buf feature xietangxin <xietangxin(a)yeah.net> virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false Zubin Mithra <zsm(a)google.com> virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Paul Moses <p(a)1g4.org> xfrm: iptfs: only publish mode_data after clone setup Roshan Kumar <roshaen09(a)gmail.com> xfrm: iptfs: validate inner IPv4 header length in IPTFS payload Ming Qian <ming.qian(a)oss.nxp.com> media: verisilicon: Fix kernel panic due to __initconst misuse Yuchan Nam <entropy1110(a)gmail.com> media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/ina233) Fix error handling and sign extension in shunt voltage read Zenghui Yu (Huawei) <zenghui.yu(a)linux.dev> KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() Marc Zyngier <maz(a)kernel.org> KVM: arm64: Discard PC update state on vcpu reset Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86: ISST: Correct locked bit width Abhijit Gangurde <abhijit.gangurde(a)amd.com> RDMA/ionic: Preserve and set Ethernet source MAC after ib_ud_header_init() Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> thermal: intel: int340x: soc_slider: Set offset only for balanced mode SeongJae Park <sj(a)kernel.org> mm/damon/stat: monitor all System RAM resources Charles Mirabile <cmirabil(a)redhat.com> kbuild: Delete .builtin-dtbs.S when running make clean Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: conservative: Reset requested_freq on limits change Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: Don't skip cpufreq_frequency_table_cpuinfo() Marc Kleine-Budde <mkl(a)pengutronix.de> can: netlink: can_changelink(): add missing error handling to call can_ctrlmode_changelink() Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix tx.buf use-after-free in isotp_sendmsg() Ali Norouzi <ali.norouzi(a)keysight.com> can: gw: fix OOB heap access in cgw_csum_crc8_rel() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: sma1307: fix double free of devm_kzalloc() memory Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: wcd934x: fix typo in dt parsing Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: Add disable clock relinquish workaround for NVL-A0 Alexey Nepomnyashih <sdl(a)nppct.ru> ALSA: firewire-lib: fix uninitialized local variable Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for ASUS Strix G16 G615JMR Mario Limonciello <mario.limonciello(a)amd.com> Revert "ALSA: hda/intel: Add MSI X870E Tomahawk to denylist" Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: do not expire session on binding failure Werner Kasselman <werner(a)verivus.com> ksmbd: fix memory leaks and NULL deref in smb2_lock() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix potencial OOB in get_file_all_info() for compound requests Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Matthew Auld <matthew.auld(a)intel.com> drm/xe: always keep track of remap prev/next Luo Haiyang <luo.haiyang(a)zte.com.cn> tracing: Fix potential deadlock in cpu hotplug with osnoise Wesley Atwell <atwellwea(a)gmail.com> tracing: Drain deferred trigger frees if kthread creation fails Vasily Gorbik <gor(a)linux.ibm.com> s390/entry: Scrub r12 register on kernel entry Vasily Gorbik <gor(a)linux.ibm.com> s390/barrier: Make array_index_mask_nospec() __always_inline Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> s390/syscalls: Add spectre boundary for syscall dispatch table Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i4 1st Gen from SKIP_IFACE_SETUP Nicholas Carlini <nicholas(a)carlini.com> io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check Jens Axboe <axboe(a)kernel.dk> io_uring/fdinfo: fix SQE_MIXED SQE displaying Marc Kleine-Budde <mkl(a)pengutronix.de> spi: spi-fsl-lpspi: fix teardown order issue (UAF) Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix clock leak on PLL lock failure Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix unchecked clk_prepare_enable() return value Marc Buerg <buermarc(a)googlemail.com> sysctl: fix uninitialized variable in proc_do_large_bitmap Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus/core) Protect regulator operations with mutex Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Introduce the concept of "write-only" attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only Shuming Fan <shumingf(a)realtek.com> ASoC: SDCA: fix finding wrong entity Sanman Pradhan <psanman(a)juniper.net> hwmon: (adm1177) fix sysfs ABI violation and current unit conversion Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib Weiming Shi <bestswngs(a)gmail.com> ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() Danilo Krummrich <dakr(a)kernel.org> spi: use generic driver_override infrastructure Matt Roper <matthew.d.roper(a)intel.com> drm/xe: Implement recent spec updates to Wa_16025250150 Alice Ryhl <aliceryhl(a)google.com> rust: regulator: do not assume that regulator_get() returns non-null Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: dt-bindings: stm32: Fix incorrect compatible string in stm32h7-sai match Yussuf Khalil <dev(a)pp3345.net> drm/amd/display: Do not skip unrelated mode changes in DSC validation Felix Gu <ustc.gu(a)gmail.com> spi: meson-spicc: Fix double-put in remove path Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Fix the device initialization Felix Gu <ustc.gu(a)gmail.com> spi: sn-f-ospi: Fix resource leak in f_ospi_probe() Michał Winiarski <michal.winiarski(a)intel.com> drm/xe/pf: Fix use-after-free in migration restore Youngjun Park <youngjun.park(a)lge.com> PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask() Alberto Garcia <berto(a)igalia.com> PM: hibernate: Drain trailing zero pages on userspace restore Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> drm/i915/gmbus: fix spurious timeout on 512-byte burst reads Luca Leonardo Scorcia <l.scorcia(a)gmail.com> drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size Yihang Li <liyihang9(a)huawei.com> scsi: scsi_transport_sas: Fix the maximum channel scanning issue Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl: imx-card: initialize playback_only and capture_only Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: simple-card-utils: Check value of is_playback_only and is_capture_only Shiraz Saleem <shiraz.saleem(a)intel.com> RDMA/irdma: Harden depth calculation functions Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Return EINVAL for invalid arp index error Anil Samal <anil.samal(a)intel.com> RDMA/irdma: Fix deadlock during netdev reset with active connections Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() Ivan Barrera <ivan.d.barrera(a)intel.com> RDMA/irdma: Clean up unnecessary dereference of event->cm_node Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Update ibqp state to error if QP is already in error state Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize free_qp completion before using it Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen from SKIP_IFACE_SETUP Ethan Tidmore <ethantidmore06(a)gmail.com> RDMA/efa: Fix possible deadlock Chuck Lever <chuck.lever(a)oracle.com> RDMA/rw: Fall back to direct SGE on MR pool exhaustion Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> regmap: Synchronize cache for the page selector Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Fix use of completion ctx after free Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Improve admin completion context state machine Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Check stored completion CTX command ID with received one Kamal Heib <kheib(a)redhat.com> RDMA/bng_re: Fix silent failure in HWRM version query Paolo Valerio <pvalerio(a)redhat.com> net: macb: use the current queue number for stats David Carlier <devnexen(a)gmail.com> netfilter: ctnetlink: use netlink policy range checks Weiming Shi <bestswngs(a)gmail.com> netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: skip expectations in other netns via proc Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_rbtree: revisit array resize logic Ren Wei <n05ec(a)lzu.edu.cn> netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Weiming Shi <bestswngs(a)gmail.com> netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD Chuck Lever <chuck.lever(a)oracle.com> tls: Purge async_hold in tls_decrypt_async_wait() Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: clamp SCO altsetting table indices Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not tracking outstanding TX ident Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock Zhang Chen <zhangchen01(a)kylinos.cn> Bluetooth: L2CAP: Fix send LE flow credits in ACL link Miguel Ojeda <ojeda(a)kernel.org> dma-mapping: add missing `inline` for `dma_free_attrs` Jonas Köppeler <j.koeppeler(a)tu-berlin.de> net_sched: codel: fix stale state for empty flows in fq_codel Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: fix leak of SRCU struct in rtnl_link_register Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: fix duplex configuration in mac_link_up David Carlier <devnexen(a)gmail.com> net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path Jiayuan Chen <jiayuan.chen(a)shopee.com> team: fix header_ops type confusion with non-Ethernet ports Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio-net: correct hdr_len handling for tunnel gso Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio-net: correct hdr_len handling for VIRTIO_NET_F_GUEST_HDRLEN Wei Fang <wei.fang(a)nxp.com> net: enetc: fix the output issue of 'ethtool --show-ring' Martin KaFai Lau <martin.lau(a)kernel.org> udp: Fix wildcard bind conflict check when using hash2 Arnd Bergmann <arnd(a)arndb.de> net: b44: always select CONFIG_FIXED_PHY Qingfang Deng <dqfext(a)gmail.com> net: airoha: add RCU lock around dev_fill_forward_path Yochai Eisenrich <echelonh(a)gmail.com> net: fix fanout UAF in packet_release() via NETDEV_UP race Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. Kohei Enju <kohei(a)enjuk.jp> iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() Petr Oros <poros(a)redhat.com> ice: use ice_update_eth_stats() for representor stats Petr Oros <poros(a)redhat.com> ice: fix inverted ready check for VF representors David McFarland <corngood(a)gmail.com> platform/x86: intel-hid: disable wakeup_mode during hibernation Alok Tiwari <alok.a.tiwari(a)oracle.com> platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen Nathan Chancellor <nathan(a)kernel.org> platform/x86: lenovo: wmi-gamezone: Drop gz_chain_head Li RongQing <lirongqing(a)baidu.com> platform/x86: ISST: Check HWP support before MSR access Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix double disable of clk Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix double free of WoL irq Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: streamline early exit in probe Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_PARENT_DEV_{NAME,BUS_NAME} in if_nlmsg_size Qi Tang <tpluszz77(a)gmail.com> net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: validate MPLS set/set_masked payload length Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: defer tunnel netdev_put to RCU release Toke Høiland-Jørgensen <toke(a)redhat.com> net: openvswitch: Avoid releasing netdev before teardown completes Jakub Kicinski <kuba(a)kernel.org> nfc: nci: fix circular locking dependency in nci_close_device Mohammad Heib <mheib(a)redhat.com> ionic: fix persistent MAC address override on PF Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: common: Fix probe failure for devices without EINT Helen Koike <koike(a)igalia.com> Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Anas Iqbal <mohd.abd.6602(a)gmail.com> Bluetooth: hci_ll: Fix firmware leak on error path Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() Minseo Park <jacob.park.9436(a)gmail.com> Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req Amelie Delaunay <amelie.delaunay(a)foss.st.com> pinctrl: stm32: fix HDP driver dependency on GPIO_GENERIC Oliver Hartkopp <socketcan(a)hartkopp.net> can: statistics: add missing atomic access in hot path Sheng Yong <shengyong1(a)xiaomi.com> erofs: set fileio bio failed in short read case Shigeru Yoshida <syoshida(a)redhat.com> dma: swiotlb: add KMSAN annotations to swiotlb_bounce() Eric Dumazet <edumazet(a)google.com> af_key: validate families in pfkey_send_migrate() Minwoo Ra <raminwo0202(a)gmail.com> xfrm: prevent policy_hthresh.work from racing with netns teardown Hyunwoo Kim <imv4bel(a)gmail.com> xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> pinctrl: renesas: rza1: Normalize return value of gpio_get() Neil Armstrong <neil.armstrong(a)linaro.org> pinctrl: qcom: spmi-gpio: implement .get_direction() Fernando Fernandez Mancera <fmancera(a)suse.de> xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly Felix Gu <ustc.gu(a)gmail.com> pinctrl: renesas: rzt2h: Fix device node leak in rzt2h_gpio_register() Sabrina Dubroca <sd(a)queasysnail.net> esp: fix skb leak with espintcp and async crypto Sabrina Dubroca <sd(a)queasysnail.net> xfrm: call xdo_dev_state_delete during state update Sabrina Dubroca <sd(a)queasysnail.net> xfrm: fix the condition on x->pcpu_num in xfrm_sa_len Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi Peter Yin <peteryin.openbmc(a)gmail.com> i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for ASUS UM6702RC Lianqin Hu <hulianqin(a)vivo.com> ALSA: usb-audio: Add iface reset and delay quirk for SPACETOUCH USB Audio Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> spi: intel-pci: Add support for Nova Lake mobile SPI flash Jie Deng <dengjie03(a)kylinos.cn> usb: core: new quirk to handle devices with zero configurations Yang Wang <kevinyang.wang(a)amd.com> drm/amdgpu: fix gpu idle power consumption issue for gfx v12 Chaitanya Kulkarni <kch(a)nvidia.com> nvmet: move async event work off nvmet-wq Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Handle Clang RSP musical chairs Uzair Mughal <contact(a)uzair.is-a.dev> ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Disable unsupported pr_debug() usage Liucheng Lu <luliucheng100(a)outlook.com> ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/ftrace: fix OOL stub count with clang HONG Yifan <elsk(a)google.com> objtool: Use HOSTCFLAGS for HAVE_XXHASH test Boris Burkov <boris(a)bur.io> btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create zhidao su <soolaugust(a)gmail.com> sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update Günther Noack <gnoack(a)google.com> HID: apple: avoid memory leak in apple_report_fixup() Eduard Zingerman <eddyz87(a)gmail.com> bpf: Fix u32/s32 bounds when ranges cross min/max boundary Simon Trimmer <simont(a)opensource.cirrus.com> ASoC: amd: acp: Add ACP6.3 match entries for Cirrus Logic parts Maarten Lankhorst <dev(a)lankhorst.se> drm/ttm/tests: Fix build failure on PREEMPT_RT wangdicheng <wangdicheng(a)kylinos.cn> ALSA: hda/senary: Ensure EAPD is enabled during init Nilay Shroff <nilay(a)linux.ibm.com> block: break pcpu_alloc_mutex dependency on freeze_lock Isaac J. Manjarres <isaacmanjarres(a)google.com> dma-buf: Include ioctl.h in UAPI header Vladimir Yakovlev <vovchkir(a)gmail.com> spi: spi-dw-dma: fix print error log when wait finish transaction Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Only patch ASP registers if the DAI is part of a DAIlink Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() Sheetal <sheetal(a)nvidia.com> ALSA: hda/hdmi: Add Tegra238 HDA codec device ID Oliver Freyermuth <o.freyermuth(a)googlemail.com> ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCD SKU Florian Fuchs <fuchsfl(a)gmail.com> scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP Shuming Fan <shumingf(a)realtek.com> ASoC: rt1321: fix DMIC ch2/3 mask issue Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Clear reset history on ready and recheck state after timeout Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() Ihor Solodrai <ihor.solodrai(a)linux.dev> module: Fix kernel panic when a symbol st_shndx is out of bounds Denis Benato <denis.benato(a)linux.dev> HID: asus: add xg mobile 2023 external hardware support Romain Sioen <romain.sioen(a)microchip.com> HID: mcp2221: cancel last I2C command on read error Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer X1 Air Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for Aokzoe A2 Pro Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> kbuild: install-extmod-build: Package resolve_btfids if necessary Valentin Spreckels <valentin(a)spreckels.dev> net: usb: r8152: add TRENDnet TUC-ET2G Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer X1z Takashi Iwai <tiwai(a)suse.de> HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer APEX Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs Victor Lattaro Volpini <victorlattaro(a)proton.me> platform/x86: hp-wmi: Add Victus 16-d0xxx support Günther Noack <gnoack(a)google.com> HID: magicmouse: avoid memory leak in magicmouse_report_fixup() Julius Lehmann <lehmanju(a)devpi.de> HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 Keith Busch <kbusch(a)kernel.org> nvme-pci: ensure we're polling a polled queue Anton Plotnikov <plotnikovanton(a)gmail.com> platform/x86: hp-wmi: add Omen 14-fb1xxx (board 8E41) support Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 Leif Skunberg <diamondback(a)cohunt.app> platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add Omen 16-xd0xxx fan and thermal support Daniel Hodges <hodgesd(a)meta.com> nvme-fabrics: use kfree_sensitive() for DHCHAP secrets Keith Busch <kbusch(a)kernel.org> nvme-pci: cap queue creation to used queues Peter Metz <peter.metz(a)unarin.com> platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list Günther Noack <gnoack(a)google.com> HID: asus: avoid memory leak in asus_report_fixup() Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add Omen 16-wf0xxx fan and thermal support Xuewen Yan <xuewen.yan(a)unisoc.com> tracing: Revert "tracing: Remove pid in task_rename tracing output" Daniel Wade <danjwade95(a)gmail.com> bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR Jenny Guanni Qu <qguanni(a)gmail.com> bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN Ihor Solodrai <ihor.solodrai(a)linux.dev> bpf: Fix exception exit lock checking for subprogs Cui Chao <cuichao1753(a)phytium.com.cn> cxl: Adjust the startup priority of cxl_pmem to be higher than that of cxl_acpi Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Release module BTF IDR before module unload Ian Rogers <irogers(a)google.com> perf metricgroup: Fix metricgroup__has_metric_or_groups() Danilo Krummrich <dakr(a)kernel.org> driver core: platform: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> driver core: generalize driver_override in struct device Danilo Krummrich <dakr(a)kernel.org> sh: platform_early: remove pdev->driver_override check Danilo Krummrich <dakr(a)kernel.org> hwmon: axi-fan: don't use driver_override as IRQ name Smita Koralahalli <Smita.KoralahalliChannabasappa(a)amd.com> cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled Josh Poimboeuf <jpoimboe(a)kernel.org> livepatch/klp-build: Fix inconsistent kernel version Joe Lawrence <joe.lawrence(a)redhat.com> objtool/klp: fix data alignment in __clone_symbol() Janosch Frank <frankja(a)linux.ibm.com> s390/mm: Add missing secure storage access fixups for donated memory Peter Zijlstra <peterz(a)infradead.org> perf: Make sure to use pmu_ctx->pmu for groups Peter Zijlstra <peterz(a)infradead.org> x86/perf: Make sure to program the counter value for stopped events on migration Sachin Kumar <xcyfun(a)protonmail.com> bpf: Fix constant blinding for PROBE_MEM32 stores Yazhou Tang <tangyazhou518(a)outlook.com> bpf: Reset register ID for BPF_END value tracking Davidlohr Bueso <dave(a)stgolabs.net> cxl/region: Fix leakage in __construct_region() Alison Schofield <alison.schofield(a)intel.com> cxl/port: Fix use after free of parent_port in cxl_detach_ep() ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 3 + .../devicetree/bindings/sound/st,stm32-sai.yaml | 2 +- Documentation/filesystems/overlayfs.rst | 50 +++ Documentation/hwmon/adm1177.rst | 8 +- Documentation/hwmon/peci-cputemp.rst | 10 +- Makefile | 6 +- .../boot/dts/freescale/imx8mn-tqma8mqnl-mba8mx.dts | 13 +- .../arm64/boot/dts/freescale/imx8mn-tqma8mqnl.dtsi | 22 ++ arch/arm64/kvm/at.c | 2 +- arch/arm64/kvm/reset.c | 14 + arch/loongarch/include/asm/linkage.h | 36 ++ arch/loongarch/include/asm/sigframe.h | 9 + arch/loongarch/kernel/asm-offsets.c | 2 + arch/loongarch/kernel/env.c | 7 +- arch/loongarch/kernel/signal.c | 6 +- arch/loongarch/kvm/intc/eiointc.c | 16 +- arch/loongarch/kvm/vcpu.c | 3 + arch/loongarch/pci/pci.c | 80 ++++ arch/loongarch/vdso/Makefile | 4 +- arch/loongarch/vdso/sigreturn.S | 6 +- arch/powerpc/net/bpf_jit_comp64.c | 23 +- arch/powerpc/tools/ftrace-gen-ool-stubs.sh | 4 +- arch/s390/include/asm/barrier.h | 4 +- arch/s390/kernel/entry.S | 3 + arch/s390/kernel/syscall.c | 5 +- arch/s390/mm/fault.c | 11 +- arch/sh/drivers/platform_early.c | 4 - arch/x86/coco/sev/noinstr.c | 6 + arch/x86/entry/entry_fred.c | 14 + arch/x86/events/core.c | 4 +- arch/x86/kernel/cpu/common.c | 20 +- arch/x86/kvm/mmu/mmu.c | 17 +- arch/x86/platform/efi/quirks.c | 2 +- block/blk-mq.c | 45 ++- drivers/accel/ivpu/ivpu_drv.h | 1 + drivers/accel/ivpu/ivpu_hw.c | 6 +- drivers/acpi/ec.c | 2 + drivers/base/bus.c | 43 ++- drivers/base/core.c | 2 + drivers/base/dd.c | 60 +++ drivers/base/platform.c | 37 +- drivers/base/regmap/regmap.c | 30 +- drivers/bluetooth/btintel.c | 11 +- drivers/bluetooth/btusb.c | 5 +- drivers/bluetooth/hci_ll.c | 2 + drivers/bus/simple-pm-bus.c | 4 +- drivers/clk/imx/clk-scu.c | 3 +- drivers/cpufreq/cpufreq.c | 9 +- drivers/cpufreq/cpufreq_conservative.c | 12 + drivers/cpufreq/cpufreq_governor.c | 3 + drivers/cpufreq/cpufreq_governor.h | 1 + drivers/cpufreq/freq_table.c | 4 + drivers/cxl/core/hdm.c | 25 +- drivers/cxl/core/port.c | 8 +- drivers/cxl/core/region.c | 4 +- drivers/cxl/pmem.c | 2 +- drivers/dma/dw-edma/dw-hdma-v0-core.c | 6 +- drivers/dma/fsl-edma-main.c | 26 +- drivers/dma/idxd/cdev.c | 8 +- drivers/dma/idxd/device.c | 6 +- drivers/dma/idxd/init.c | 4 +- drivers/dma/idxd/submit.c | 2 +- drivers/dma/idxd/sysfs.c | 1 + drivers/dma/sh/rz-dmac.c | 68 ++-- drivers/dma/xilinx/xdma.c | 4 +- drivers/dma/xilinx/xilinx_dma.c | 46 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 45 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 5 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 10 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 1 + .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 4 +- .../display/dc/resource/dce100/dce100_resource.c | 6 +- .../display/dc/resource/dce110/dce110_resource.c | 5 +- .../display/dc/resource/dce112/dce112_resource.c | 5 +- .../display/dc/resource/dce120/dce120_resource.c | 5 +- .../amd/display/dc/resource/dce60/dce60_resource.c | 14 +- .../amd/display/dc/resource/dce80/dce80_resource.c | 6 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c | 2 +- drivers/gpu/drm/i915/display/intel_display.c | 8 +- drivers/gpu/drm/i915/display/intel_dp_tunnel.c | 20 +- drivers/gpu/drm/i915/display/intel_dp_tunnel.h | 11 +- drivers/gpu/drm/i915/display/intel_gmbus.c | 4 +- drivers/gpu/drm/i915/display/intel_plane.c | 11 +- drivers/gpu/drm/i915/i915_wait_util.h | 2 +- drivers/gpu/drm/mediatek/mtk_dsi.c | 9 +- drivers/gpu/drm/ttm/tests/ttm_bo_test.c | 4 +- drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 + drivers/gpu/drm/xe/xe_pt.c | 12 +- drivers/gpu/drm/xe/xe_sriov_packet.c | 2 + drivers/gpu/drm/xe/xe_vm.c | 22 +- drivers/gpu/drm/xe/xe_vm_types.h | 4 + drivers/gpu/drm/xe/xe_wa.c | 3 +- drivers/hid/hid-apple.c | 7 +- drivers/hid/hid-asus.c | 18 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-magicmouse.c | 6 +- drivers/hid/hid-mcp2221.c | 2 + drivers/hid/intel-ish-hid/ipc/hw-ish.h | 2 + drivers/hid/intel-ish-hid/ipc/pci-ish.c | 12 + drivers/hwmon/adm1177.c | 54 +-- drivers/hwmon/axi-fan-control.c | 2 +- drivers/hwmon/peci/cputemp.c | 4 +- drivers/hwmon/pmbus/ina233.c | 3 +- drivers/hwmon/pmbus/isl68137.c | 21 +- drivers/hwmon/pmbus/pmbus_core.c | 192 ++++++++-- drivers/i2c/busses/i2c-designware-amdisp.c | 11 +- drivers/i2c/busses/i2c-imx.c | 51 ++- drivers/i3c/master/dw-i3c-master.c | 2 + drivers/infiniband/core/rw.c | 27 +- drivers/infiniband/hw/bng_re/bng_dev.c | 14 +- drivers/infiniband/hw/efa/efa_com.c | 175 ++++----- drivers/infiniband/hw/ionic/ionic_controlpath.c | 4 +- drivers/infiniband/hw/irdma/cm.c | 29 +- drivers/infiniband/hw/irdma/uk.c | 39 +- drivers/infiniband/hw/irdma/utils.c | 2 - drivers/infiniband/hw/irdma/verbs.c | 9 +- drivers/irqchip/irq-qcom-mpm.c | 3 + drivers/irqchip/irq-renesas-rzv2h.c | 2 +- drivers/media/mc/mc-request.c | 5 + drivers/media/platform/verisilicon/imx8m_vpu_hw.c | 2 +- drivers/media/v4l2-core/v4l2-ioctl.c | 5 +- drivers/net/can/dev/netlink.c | 4 +- drivers/net/ethernet/airoha/airoha_ppe.c | 2 + drivers/net/ethernet/broadcom/Kconfig | 2 +- drivers/net/ethernet/broadcom/asp2/bcmasp.c | 66 ++-- drivers/net/ethernet/cadence/macb_main.c | 41 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 2 + drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 31 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 14 +- drivers/net/ethernet/intel/ice/ice_repr.c | 5 +- drivers/net/ethernet/microchip/lan743x_main.c | 5 + drivers/net/ethernet/pensando/ionic/ionic_lif.c | 17 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 4 +- drivers/net/team/team_core.c | 65 +++- drivers/net/tun_vnet.h | 2 +- drivers/net/usb/r8152.c | 1 + drivers/net/virtio_net.c | 7 +- drivers/nvme/host/fabrics.c | 4 +- drivers/nvme/host/pci.c | 11 +- drivers/nvme/target/admin-cmd.c | 2 +- drivers/nvme/target/core.c | 14 +- drivers/nvme/target/nvmet.h | 1 + drivers/nvme/target/rdma.c | 1 + drivers/phy/qualcomm/phy-qcom-qmp-ufs.c | 3 +- drivers/phy/ti/phy-j721e-wiz.c | 2 + drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 9 +- drivers/pinctrl/qcom/pinctrl-spmi-gpio.c | 16 + drivers/pinctrl/renesas/pinctrl-rza1.c | 2 +- drivers/pinctrl/renesas/pinctrl-rzt2h.c | 1 + drivers/pinctrl/stm32/Kconfig | 1 + drivers/platform/olpc/olpc-xo175-ec.c | 2 +- drivers/platform/x86/hp/hp-wmi.c | 12 +- drivers/platform/x86/intel/hid.c | 23 +- .../x86/intel/speed_select_if/isst_tpmi_core.c | 5 +- drivers/platform/x86/lenovo/wmi-gamezone.c | 2 - drivers/platform/x86/oxpec.c | 30 +- drivers/platform/x86/touchscreen_dmi.c | 18 + drivers/scsi/ibmvscsi/ibmvfc.c | 3 +- drivers/scsi/mpi3mr/mpi3mr_fw.c | 10 + drivers/scsi/scsi_devinfo.c | 2 +- drivers/scsi/scsi_transport_sas.c | 2 +- drivers/scsi/ses.c | 2 +- drivers/slimbus/qcom-ngd-ctrl.c | 6 +- drivers/spi/spi-dw-dma.c | 2 +- drivers/spi/spi-fsl-lpspi.c | 3 +- drivers/spi/spi-intel-pci.c | 1 + drivers/spi/spi-meson-spicc.c | 2 - drivers/spi/spi-sn-f-ospi.c | 17 +- drivers/spi/spi.c | 19 +- .../int340x_thermal/processor_thermal_soc_slider.c | 8 +- drivers/usb/core/config.c | 6 +- drivers/usb/core/quirks.c | 5 + drivers/vfio/pci/vfio_pci_dmabuf.c | 5 +- drivers/virt/coco/tdx-guest/tdx-guest.c | 12 +- drivers/xen/privcmd.c | 3 + fs/btrfs/block-group.c | 2 +- fs/btrfs/disk-io.c | 4 +- fs/btrfs/ioctl.c | 7 + fs/btrfs/volumes.c | 5 +- fs/erofs/fileio.c | 6 +- fs/erofs/zdata.c | 3 + fs/ext4/Makefile | 4 +- fs/ext4/crypto.c | 9 +- fs/ext4/ext4.h | 6 + fs/ext4/extents.c | 23 +- fs/ext4/fast_commit.c | 17 +- fs/ext4/fsync.c | 16 +- fs/ext4/ialloc.c | 6 + fs/ext4/inline.c | 10 +- fs/ext4/inode.c | 75 +++- fs/ext4/mballoc-test.c | 81 ++-- fs/ext4/mballoc.c | 132 ++++++- fs/ext4/mballoc.h | 30 ++ fs/ext4/page-io.c | 10 +- fs/ext4/super.c | 16 +- fs/ext4/sysfs.c | 10 +- fs/fs-writeback.c | 18 +- fs/fuse/file.c | 4 +- fs/fuse/inode.c | 1 + fs/iomap/buffered-io.c | 15 +- fs/jbd2/checkpoint.c | 15 +- fs/netfs/buffered_read.c | 3 +- fs/netfs/direct_read.c | 3 +- fs/netfs/direct_write.c | 15 +- fs/netfs/iterator.c | 43 +++ fs/netfs/read_collect.c | 4 +- fs/netfs/read_retry.c | 5 +- fs/netfs/read_single.c | 1 - fs/netfs/write_collect.c | 4 +- fs/netfs/write_issue.c | 3 +- fs/overlayfs/copy_up.c | 6 +- fs/overlayfs/overlayfs.h | 21 ++ fs/overlayfs/ovl_entry.h | 7 +- fs/overlayfs/params.c | 33 +- fs/overlayfs/super.c | 2 +- fs/overlayfs/util.c | 5 +- fs/smb/server/oplock.c | 72 ++-- fs/smb/server/smb2pdu.c | 73 ++-- fs/xfs/scrub/quota.c | 4 +- fs/xfs/scrub/trace.h | 12 +- fs/xfs/xfs_attr_item.c | 5 +- fs/xfs/xfs_dquot_item.c | 9 +- fs/xfs/xfs_inode_item.c | 9 +- fs/xfs/xfs_mount.c | 7 +- fs/xfs/xfs_trace.h | 47 ++- fs/xfs/xfs_trans_ail.c | 26 +- include/linux/damon.h | 7 + include/linux/device.h | 54 +++ include/linux/device/bus.h | 4 + include/linux/dma-mapping.h | 4 +- include/linux/fs/super_types.h | 1 + include/linux/leafops.h | 32 +- include/linux/mempolicy.h | 1 + include/linux/netfs.h | 1 - include/linux/pagemap.h | 11 - include/linux/platform_device.h | 5 - include/linux/spi/spi.h | 5 - include/linux/usb/quirks.h | 3 + include/linux/usb/r8152.h | 1 + include/linux/virtio_net.h | 53 ++- include/net/bluetooth/l2cap.h | 2 +- include/net/codel_impl.h | 1 + include/net/inet_hashtables.h | 14 + include/net/ip6_fib.h | 21 +- include/sound/cs35l56.h | 1 + include/trace/events/netfs.h | 8 +- include/trace/events/task.h | 7 +- include/uapi/linux/dma-buf.h | 1 + include/uapi/linux/netfilter/nf_conntrack_common.h | 4 + io_uring/fdinfo.c | 4 +- kernel/bpf/btf.c | 24 +- kernel/bpf/core.c | 43 ++- kernel/bpf/verifier.c | 36 +- kernel/dma/swiotlb.c | 21 +- kernel/events/core.c | 19 +- kernel/futex/core.c | 2 +- kernel/futex/pi.c | 3 +- kernel/futex/syscalls.c | 8 + kernel/module/main.c | 7 + kernel/power/main.c | 2 +- kernel/power/snapshot.c | 11 + kernel/sched/ext.c | 2 +- kernel/sysctl.c | 2 +- kernel/time/alarmtimer.c | 2 +- kernel/trace/trace_events_trigger.c | 85 ++++- kernel/trace/trace_osnoise.c | 10 +- lib/bug.c | 7 +- mm/damon/core.c | 9 +- mm/damon/stat.c | 53 ++- mm/damon/sysfs.c | 10 +- mm/memory.c | 18 +- mm/mempolicy.c | 10 +- mm/mseal.c | 3 +- mm/pagewalk.c | 25 +- net/bluetooth/l2cap_core.c | 103 +++-- net/bluetooth/l2cap_sock.c | 3 + net/bluetooth/mgmt.c | 2 +- net/bluetooth/sco.c | 10 +- net/can/af_can.c | 4 +- net/can/af_can.h | 2 +- net/can/gw.c | 6 +- net/can/isotp.c | 24 +- net/can/proc.c | 3 +- net/core/rtnetlink.c | 28 +- net/ipv4/esp4.c | 9 +- net/ipv4/inet_connection_sock.c | 20 +- net/ipv4/udp.c | 2 +- net/ipv6/addrconf.c | 4 +- net/ipv6/esp6.c | 9 +- net/ipv6/ip6_fib.c | 15 +- net/ipv6/netfilter/ip6t_rt.c | 4 + net/ipv6/route.c | 2 +- net/key/af_key.c | 19 +- net/netfilter/nf_conntrack_expect.c | 4 + net/netfilter/nf_conntrack_netlink.c | 16 +- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 14 +- net/netfilter/nfnetlink_log.c | 8 +- net/netfilter/nft_set_rbtree.c | 92 ++++- net/nfc/nci/core.c | 10 +- net/openvswitch/flow_netlink.c | 2 + net/openvswitch/vport-netdev.c | 11 +- net/packet/af_packet.c | 1 + net/smc/smc_rx.c | 9 +- net/tls/tls_sw.c | 2 +- net/xfrm/xfrm_iptfs.c | 17 +- net/xfrm/xfrm_nat_keepalive.c | 2 +- net/xfrm/xfrm_policy.c | 2 + net/xfrm/xfrm_state.c | 1 + net/xfrm/xfrm_user.c | 7 +- rust/kernel/regulator.rs | 33 +- rust/pin-init/src/macros.rs | 16 + scripts/livepatch/klp-build | 9 +- scripts/package/install-extmod-build | 4 + sound/firewire/amdtp-stream.c | 2 +- sound/hda/codecs/hdmi/tegrahdmi.c | 1 + sound/hda/codecs/realtek/alc269.c | 42 ++- sound/hda/codecs/realtek/alc662.c | 9 + sound/hda/codecs/senarytech.c | 5 + sound/hda/controllers/intel.c | 1 - sound/soc/amd/acp/amd-acp63-acpi-match.c | 413 +++++++++++++++++++++ sound/soc/codecs/adau1372.c | 34 +- sound/soc/codecs/cs35l56-shared.c | 16 +- sound/soc/codecs/cs35l56.c | 8 + sound/soc/codecs/rt1320-sdw.c | 5 +- sound/soc/codecs/sma1307.c | 6 +- sound/soc/codecs/wcd934x.c | 2 +- sound/soc/fsl/fsl_easrc.c | 14 +- sound/soc/fsl/imx-card.c | 2 + sound/soc/generic/simple-card-utils.c | 4 +- sound/soc/intel/boards/sof_sdw.c | 8 + sound/soc/intel/catpt/device.c | 10 +- sound/soc/intel/catpt/dsp.c | 3 - sound/soc/samsung/i2s.c | 6 +- sound/soc/sdca/sdca_functions.c | 11 +- sound/soc/sof/ipc4-topology.c | 2 +- sound/usb/quirks.c | 4 + tools/objtool/Makefile | 2 +- tools/objtool/arch/x86/decode.c | 68 ++-- tools/objtool/check.c | 14 + tools/objtool/klp-diff.c | 26 +- tools/perf/util/metricgroup.c | 6 +- .../testing/selftests/bpf/prog_tests/reg_bounds.c | 62 +++- .../testing/selftests/bpf/progs/exceptions_fail.c | 9 +- .../selftests/mount_setattr/mount_setattr_test.c | 2 +- 349 files changed, 3991 insertions(+), 1331 deletions(-)

1 month, 1 week

18
18
0 0

[PATCH 6.18 000/309] 6.18.21-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.21 release. There are 309 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 02 Apr 2026 16:16:56 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.21-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.21-rc1 Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix regressions caused by reusing ident Hao-Yu Yang <naup96721(a)gmail.com> futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() Peter Zijlstra <peterz(a)infradead.org> futex: Require sys_futex_requeue() to have identical flags Biju Das <biju.das.jz(a)bp.renesas.com> irqchip/renesas-rzv2h: Fix error path in rzv2h_icu_probe_common() David Howells <dhowells(a)redhat.com> netfs: Fix the handling of stream->front by removing it GuoHan Zhao <zhaoguohan(a)kylinos.cn> xen/privcmd: unregister xenstore notifier on module exit Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error when running device stats on multiple devices fs Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> btrfs: fix leak of kobject name for sub-group space_info Mark Harmstone <mark(a)harmstone.com> btrfs: fix super block offset in error message in btrfs_validate_super() David Howells <dhowells(a)redhat.com> netfs: Fix read abandonment during retry Christian Brauner <brauner(a)kernel.org> selftests/mount_setattr: increase tmpfs size for idmapped mount tests Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix dma_device directions Tuo Li <islituo(a)gmail.com> dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() Deepanshu Kartikey <kartikey406(a)gmail.com> netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry Deepanshu Kartikey <kartikey406(a)gmail.com> netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators Alexander Stein <alexander.stein(a)ew.tq-group.com> dmaengine: xilinx: xdma: Fix regmap init error handling LUO Haowen <luo-hw(a)foxmail.com> dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. Felix Gu <ustc.gu(a)gmail.com> phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix leaking event log memory Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix freeing the allocated ida too late Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix memory leak when a wq is reset Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix not releasing workqueue on .release() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix possible invalid memory access after FLR Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix crash when the event log is disabled Lorenzo Stoakes (Oracle) <ljs(a)kernel.org> mm/mseal: update VMA end correctly on merge Werner Kasselman <werner(a)verivus.com> ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() Jinjiang Tu <tujinjiang(a)huawei.com> mm/huge_memory: fix folio isn't locked in softleaf_to_folio() Josh Law <objecting(a)objecting.org> mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure SeongJae Park <sj(a)kernel.org> mm/damon/core: avoid use of half-online-committed context SeongJae Park <sj(a)kernel.org> mm/damon/stat: monitor all System RAM resources Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix amdgpu_irq enabled counter unbalanced on smu v11.0 Benno Lossin <lossin(a)kernel.org> rust: pin-init: internal: init: document load-bearing fact of field accessors Peter Zijlstra <peterz(a)infradead.org> unwind_user/x86: Fix arch=um build Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: do not increment tailcall count when prog is NULL Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off Theodore Ts'o <tytso(a)mit.edu> ext4: always drain queued discard work in ext4_mb_release() Baokun Li <libaokun(a)linux.alibaba.com> ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths Theodore Ts'o <tytso(a)mit.edu> ext4: handle wraparound when searching for blocks for indirect mapped blocks Zqiang <qiang.zhang(a)linux.dev> ext4: fix the might_sleep() warnings in kvfree() Jiayuan Chen <jiayuan.chen(a)shopee.com> ext4: fix use-after-free in update_super_work when racing with umount Helen Koike <koike(a)igalia.com> ext4: reject mount if bigalloc with s_first_data_block != 0 Ye Bin <yebin10(a)huawei.com> ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() Edward Adam Davis <eadavis(a)qq.com> ext4: avoid infinite loops caused by residual data Tejas Bharambe <tejas.bharambe(a)outlook.com> ext4: validate p_idx bounds in ext4_ext_correct_indexes Ye Bin <yebin10(a)huawei.com> ext4: test if inode's all dirty pages are submitted to disk Li Chen <me(a)linux.beauty> ext4: publish jinode after initialization Yuto Ohnuki <ytohnuki(a)amazon.com> ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Jan Kara <jack(a)suse.cz> ext4: make recently_deleted() properly work with lazy itable initialization Jan Kara <jack(a)suse.cz> ext4: fix fsync(2) for nojournal mode Zhang Yi <yi.zhang(a)huawei.com> ext4: do not check fast symlink during orphan recovery Jan Kara <jack(a)suse.cz> ext4: fix stale xarray tags after writeback Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: convert inline data to extents when truncate exceeds inline size Simon Weber <simon.weber.39(a)gmail.com> ext4: fix journal credit check when setting fscrypt context Darrick J. Wong <djwong(a)kernel.org> xfs: remove file_path tracepoint data Darrick J. Wong <djwong(a)kernel.org> xfs: don't irele after failing to iget in xfs_attri_recover_work Long Li <leo.lilong(a)huawei.com> xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 hongao <hongao(a)uniontech.com> xfs: scrub: unlock dquot before early return in quota scrub Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: avoid dereferencing log items after push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: save ailp before dropping the AIL lock in push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: stop reclaim before pushing AIL during unmount Max Boone <mboone(a)akamai.com> mm/pagewalk: fix race between concurrent split and refault Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr in repeat_call_fn Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: Return -EOPNOTSUPP for unsupported OD_MCLK on smu_v13_0_6 Huacai Chen <chenhuacai(a)kernel.org> LoongArch: KVM: Handle the case that EIOINTC's coremap is empty Huacai Chen <chenhuacai(a)kernel.org> LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Workaround LS2K/LS7A GPU DMA hang bug Xi Ruoyao <xry111(a)xry111.site> LoongArch: vDSO: Emit GNU_EH_FRAME correctly Li Jun <lijun01(a)kylinos.cn> LoongArch: Fix missing NULL checks for kstrdup() Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Unlink NV12 planes earlier Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Order OP vs. timeout correctly in __wait_for() Imre Deak <imre.deak(a)intel.com> drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state Alex Hung <alex.hung(a)amd.com> drm/amd/display: Fix drm_edid leak in amdgpu_dm Eric Huang <jinhuieric.huang(a)amd.com> drm/amdgpu: prevent immediate PASID reuse case Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Protect the driver specific lists Joy Zou <joy.zou(a)nxp.com> dmaengine: fsl-edma: fix channel parameter config for fixed channel requests Stefan Eichenberger <stefan.eichenberger(a)toradex.com> i2c: imx: ensure no clock is generated after last read Stefan Eichenberger <stefan.eichenberger(a)toradex.com> i2c: imx: fix i2c issue when reading multiple messages Davidlohr Bueso <dave(a)stgolabs.net> futex: Clear stale exiting pointer in futex_lock_pi() retry path Pratap Nirujogi <pratap.nirujogi(a)amd.com> i2c: designware: amdisp: Fix resume-probe race condition issue Jassi Brar <jassisinghbrar(a)gmail.com> irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment Milos Nikic <nikic.milos(a)gmail.com> jbd2: gracefully abort on checkpointing state corruptions Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Kevin Hao <haokexin(a)gmail.com> net: macb: Use dev_consume_skb_any() to free TX SKBs Kevin Hao <haokexin(a)gmail.com> net: macb: Protect access to net_device::ip_ptr with RCU lock Kevin Hao <haokexin(a)gmail.com> net: macb: Move devm_{free,request}_irq() out of spin lock area Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> scsi: ses: Handle positive SCSI error from ses_recv_diag() Tyllis Xu <livelycarpet87(a)gmail.com> scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() Amir Goldstein <amir73il(a)gmail.com> ovl: fix wrong detection of 32bit inode numbers Fei Lv <feilv(a)asrmicro.com> ovl: make fsync after metadata copy-up opt-in mount option Abel Vesa <abel.vesa(a)oss.qualcomm.com> phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 Nikunj A Dadhania <nikunj(a)amd.com> x86/fred: Fix early boot failures on SEV-ES/SNP guests Borislav Petkov (AMD) <bp(a)alien8.de> x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask Nikunj A Dadhania <nikunj(a)amd.com> x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() Joanne Koong <joannelkoong(a)gmail.com> writeback: don't block sync for filesystems with no data integrity guarantees Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Fix argument order in alarm_timer_forward() Jiucheng Xu <jiucheng.xu(a)amlogic.com> erofs: add GFP_NOIO in the bio completion if needed xietangxin <xietangxin(a)yeah.net> virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false Zubin Mithra <zsm(a)google.com> virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Paul Moses <p(a)1g4.org> xfrm: iptfs: only publish mode_data after clone setup Roshan Kumar <roshaen09(a)gmail.com> xfrm: iptfs: validate inner IPv4 header length in IPTFS payload Yuchan Nam <entropy1110(a)gmail.com> media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/ina233) Fix error handling and sign extension in shunt voltage read Marc Zyngier <maz(a)kernel.org> KVM: arm64: Discard PC update state on vcpu reset Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86: ISST: Correct locked bit width Abhijit Gangurde <abhijit.gangurde(a)amd.com> RDMA/ionic: Preserve and set Ethernet source MAC after ib_ud_header_init() Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> thermal: intel: int340x: soc_slider: Set offset only for balanced mode Charles Mirabile <cmirabil(a)redhat.com> kbuild: Delete .builtin-dtbs.S when running make clean Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: conservative: Reset requested_freq on limits change Marc Kleine-Budde <mkl(a)pengutronix.de> can: netlink: can_changelink(): add missing error handling to call can_ctrlmode_changelink() Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix tx.buf use-after-free in isotp_sendmsg() Ali Norouzi <ali.norouzi(a)keysight.com> can: gw: fix OOB heap access in cgw_csum_crc8_rel() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: sma1307: fix double free of devm_kzalloc() memory Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: wcd934x: fix typo in dt parsing Alexey Nepomnyashih <sdl(a)nppct.ru> ALSA: firewire-lib: fix uninitialized local variable Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for ASUS Strix G16 G615JMR Mario Limonciello <mario.limonciello(a)amd.com> Revert "ALSA: hda/intel: Add MSI X870E Tomahawk to denylist" Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: do not expire session on binding failure Werner Kasselman <werner(a)verivus.com> ksmbd: fix memory leaks and NULL deref in smb2_lock() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix potencial OOB in get_file_all_info() for compound requests Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Matthew Auld <matthew.auld(a)intel.com> drm/xe: always keep track of remap prev/next Luo Haiyang <luo.haiyang(a)zte.com.cn> tracing: Fix potential deadlock in cpu hotplug with osnoise Vasily Gorbik <gor(a)linux.ibm.com> s390/entry: Scrub r12 register on kernel entry Vasily Gorbik <gor(a)linux.ibm.com> s390/barrier: Make array_index_mask_nospec() __always_inline Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> s390/syscalls: Add spectre boundary for syscall dispatch table Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i4 1st Gen from SKIP_IFACE_SETUP Marc Kleine-Budde <mkl(a)pengutronix.de> spi: spi-fsl-lpspi: fix teardown order issue (UAF) Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix clock leak on PLL lock failure Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix unchecked clk_prepare_enable() return value Marc Buerg <buermarc(a)googlemail.com> sysctl: fix uninitialized variable in proc_do_large_bitmap Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus/core) Protect regulator operations with mutex Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Introduce the concept of "write-only" attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only Sanman Pradhan <psanman(a)juniper.net> hwmon: (adm1177) fix sysfs ABI violation and current unit conversion Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib Weiming Shi <bestswngs(a)gmail.com> ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() Danilo Krummrich <dakr(a)kernel.org> spi: use generic driver_override infrastructure Matt Roper <matthew.d.roper(a)intel.com> drm/xe: Implement recent spec updates to Wa_16025250150 Alice Ryhl <aliceryhl(a)google.com> rust: regulator: do not assume that regulator_get() returns non-null Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: dt-bindings: stm32: Fix incorrect compatible string in stm32h7-sai match Yussuf Khalil <dev(a)pp3345.net> drm/amd/display: Do not skip unrelated mode changes in DSC validation Felix Gu <ustc.gu(a)gmail.com> spi: meson-spicc: Fix double-put in remove path Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Fix the device initialization Felix Gu <ustc.gu(a)gmail.com> spi: sn-f-ospi: Fix resource leak in f_ospi_probe() Youngjun Park <youngjun.park(a)lge.com> PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask() Alberto Garcia <berto(a)igalia.com> PM: hibernate: Drain trailing zero pages on userspace restore Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> drm/i915/gmbus: fix spurious timeout on 512-byte burst reads Luca Leonardo Scorcia <l.scorcia(a)gmail.com> drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size Yihang Li <liyihang9(a)huawei.com> scsi: scsi_transport_sas: Fix the maximum channel scanning issue Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl: imx-card: initialize playback_only and capture_only Shiraz Saleem <shiraz.saleem(a)intel.com> RDMA/irdma: Harden depth calculation functions Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Return EINVAL for invalid arp index error Anil Samal <anil.samal(a)intel.com> RDMA/irdma: Fix deadlock during netdev reset with active connections Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() Ivan Barrera <ivan.d.barrera(a)intel.com> RDMA/irdma: Clean up unnecessary dereference of event->cm_node Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Update ibqp state to error if QP is already in error state Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize free_qp completion before using it Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen from SKIP_IFACE_SETUP Ethan Tidmore <ethantidmore06(a)gmail.com> RDMA/efa: Fix possible deadlock Chuck Lever <chuck.lever(a)oracle.com> RDMA/rw: Fall back to direct SGE on MR pool exhaustion Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> regmap: Synchronize cache for the page selector Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Fix use of completion ctx after free Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Improve admin completion context state machine Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Check stored completion CTX command ID with received one Paolo Valerio <pvalerio(a)redhat.com> net: macb: use the current queue number for stats David Carlier <devnexen(a)gmail.com> netfilter: ctnetlink: use netlink policy range checks Weiming Shi <bestswngs(a)gmail.com> netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: skip expectations in other netns via proc Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_rbtree: revisit array resize logic Ren Wei <n05ec(a)lzu.edu.cn> netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Weiming Shi <bestswngs(a)gmail.com> netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD Chuck Lever <chuck.lever(a)oracle.com> tls: Purge async_hold in tls_decrypt_async_wait() Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: clamp SCO altsetting table indices Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not tracking outstanding TX ident Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock Zhang Chen <zhangchen01(a)kylinos.cn> Bluetooth: L2CAP: Fix send LE flow credits in ACL link Miguel Ojeda <ojeda(a)kernel.org> dma-mapping: add missing `inline` for `dma_free_attrs` Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: fix leak of SRCU struct in rtnl_link_register Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: fix duplex configuration in mac_link_up Jiayuan Chen <jiayuan.chen(a)shopee.com> team: fix header_ops type confusion with non-Ethernet ports Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio-net: correct hdr_len handling for tunnel gso Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio-net: correct hdr_len handling for VIRTIO_NET_F_GUEST_HDRLEN Wei Fang <wei.fang(a)nxp.com> net: enetc: fix the output issue of 'ethtool --show-ring' Martin KaFai Lau <martin.lau(a)kernel.org> udp: Fix wildcard bind conflict check when using hash2 Qingfang Deng <dqfext(a)gmail.com> net: airoha: add RCU lock around dev_fill_forward_path Yochai Eisenrich <echelonh(a)gmail.com> net: fix fanout UAF in packet_release() via NETDEV_UP race Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. Kohei Enju <kohei(a)enjuk.jp> iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() Petr Oros <poros(a)redhat.com> ice: use ice_update_eth_stats() for representor stats Petr Oros <poros(a)redhat.com> ice: fix inverted ready check for VF representors David McFarland <corngood(a)gmail.com> platform/x86: intel-hid: disable wakeup_mode during hibernation Alok Tiwari <alok.a.tiwari(a)oracle.com> platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen Nathan Chancellor <nathan(a)kernel.org> platform/x86: lenovo: wmi-gamezone: Drop gz_chain_head Li RongQing <lirongqing(a)baidu.com> platform/x86: ISST: Check HWP support before MSR access Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix double disable of clk Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix double free of WoL irq Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: streamline early exit in probe Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_PARENT_DEV_{NAME,BUS_NAME} in if_nlmsg_size Qi Tang <tpluszz77(a)gmail.com> net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: validate MPLS set/set_masked payload length Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: defer tunnel netdev_put to RCU release Toke Høiland-Jørgensen <toke(a)redhat.com> net: openvswitch: Avoid releasing netdev before teardown completes Jakub Kicinski <kuba(a)kernel.org> nfc: nci: fix circular locking dependency in nci_close_device Mohammad Heib <mheib(a)redhat.com> ionic: fix persistent MAC address override on PF Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: common: Fix probe failure for devices without EINT Helen Koike <koike(a)igalia.com> Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Anas Iqbal <mohd.abd.6602(a)gmail.com> Bluetooth: hci_ll: Fix firmware leak on error path Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() Minseo Park <jacob.park.9436(a)gmail.com> Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req Amelie Delaunay <amelie.delaunay(a)foss.st.com> pinctrl: stm32: fix HDP driver dependency on GPIO_GENERIC Oliver Hartkopp <socketcan(a)hartkopp.net> can: statistics: add missing atomic access in hot path Sheng Yong <shengyong1(a)xiaomi.com> erofs: set fileio bio failed in short read case Shigeru Yoshida <syoshida(a)redhat.com> dma: swiotlb: add KMSAN annotations to swiotlb_bounce() Eric Dumazet <edumazet(a)google.com> af_key: validate families in pfkey_send_migrate() Minwoo Ra <raminwo0202(a)gmail.com> xfrm: prevent policy_hthresh.work from racing with netns teardown Hyunwoo Kim <imv4bel(a)gmail.com> xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> pinctrl: renesas: rza1: Normalize return value of gpio_get() Fernando Fernandez Mancera <fmancera(a)suse.de> xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly Felix Gu <ustc.gu(a)gmail.com> pinctrl: renesas: rzt2h: Fix device node leak in rzt2h_gpio_register() Sabrina Dubroca <sd(a)queasysnail.net> esp: fix skb leak with espintcp and async crypto Sabrina Dubroca <sd(a)queasysnail.net> xfrm: call xdo_dev_state_delete during state update Sabrina Dubroca <sd(a)queasysnail.net> xfrm: fix the condition on x->pcpu_num in xfrm_sa_len Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi Peter Yin <peteryin.openbmc(a)gmail.com> i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for ASUS UM6702RC Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> spi: intel-pci: Add support for Nova Lake mobile SPI flash Jie Deng <dengjie03(a)kylinos.cn> usb: core: new quirk to handle devices with zero configurations Yang Wang <kevinyang.wang(a)amd.com> drm/amdgpu: fix gpu idle power consumption issue for gfx v12 Chaitanya Kulkarni <kch(a)nvidia.com> nvmet: move async event work off nvmet-wq Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Handle Clang RSP musical chairs Uzair Mughal <contact(a)uzair.is-a.dev> ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone Liucheng Lu <luliucheng100(a)outlook.com> ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/ftrace: fix OOL stub count with clang Boris Burkov <boris(a)bur.io> btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create zhidao su <soolaugust(a)gmail.com> sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update Günther Noack <gnoack(a)google.com> HID: apple: avoid memory leak in apple_report_fixup() Eduard Zingerman <eddyz87(a)gmail.com> bpf: Fix u32/s32 bounds when ranges cross min/max boundary Simon Trimmer <simont(a)opensource.cirrus.com> ASoC: amd: acp: Add ACP6.3 match entries for Cirrus Logic parts Maarten Lankhorst <dev(a)lankhorst.se> drm/ttm/tests: Fix build failure on PREEMPT_RT wangdicheng <wangdicheng(a)kylinos.cn> ALSA: hda/senary: Ensure EAPD is enabled during init Nilay Shroff <nilay(a)linux.ibm.com> block: break pcpu_alloc_mutex dependency on freeze_lock Isaac J. Manjarres <isaacmanjarres(a)google.com> dma-buf: Include ioctl.h in UAPI header Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Only patch ASP registers if the DAI is part of a DAIlink Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() Sheetal <sheetal(a)nvidia.com> ALSA: hda/hdmi: Add Tegra238 HDA codec device ID Oliver Freyermuth <o.freyermuth(a)googlemail.com> ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCD SKU Florian Fuchs <fuchsfl(a)gmail.com> scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP Shuming Fan <shumingf(a)realtek.com> ASoC: rt1321: fix DMIC ch2/3 mask issue Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Clear reset history on ready and recheck state after timeout Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() Ihor Solodrai <ihor.solodrai(a)linux.dev> module: Fix kernel panic when a symbol st_shndx is out of bounds Denis Benato <denis.benato(a)linux.dev> HID: asus: add xg mobile 2023 external hardware support Romain Sioen <romain.sioen(a)microchip.com> HID: mcp2221: cancel last I2C command on read error Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer X1 Air Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for Aokzoe A2 Pro Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> kbuild: install-extmod-build: Package resolve_btfids if necessary Valentin Spreckels <valentin(a)spreckels.dev> net: usb: r8152: add TRENDnet TUC-ET2G Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer X1z Takashi Iwai <tiwai(a)suse.de> HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer APEX Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs Günther Noack <gnoack(a)google.com> HID: magicmouse: avoid memory leak in magicmouse_report_fixup() Julius Lehmann <lehmanju(a)devpi.de> HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 Keith Busch <kbusch(a)kernel.org> nvme-pci: ensure we're polling a polled queue Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 Leif Skunberg <diamondback(a)cohunt.app> platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add Omen 16-xd0xxx fan and thermal support Daniel Hodges <hodgesd(a)meta.com> nvme-fabrics: use kfree_sensitive() for DHCHAP secrets Keith Busch <kbusch(a)kernel.org> nvme-pci: cap queue creation to used queues Peter Metz <peter.metz(a)unarin.com> platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list Günther Noack <gnoack(a)google.com> HID: asus: avoid memory leak in asus_report_fixup() Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add Omen 16-wf0xxx fan and thermal support Xuewen Yan <xuewen.yan(a)unisoc.com> tracing: Revert "tracing: Remove pid in task_rename tracing output" Daniel Wade <danjwade95(a)gmail.com> bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR Jenny Guanni Qu <qguanni(a)gmail.com> bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN Ihor Solodrai <ihor.solodrai(a)linux.dev> bpf: Fix exception exit lock checking for subprogs Cui Chao <cuichao1753(a)phytium.com.cn> cxl: Adjust the startup priority of cxl_pmem to be higher than that of cxl_acpi Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Release module BTF IDR before module unload Danilo Krummrich <dakr(a)kernel.org> driver core: platform: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> driver core: generalize driver_override in struct device Danilo Krummrich <dakr(a)kernel.org> sh: platform_early: remove pdev->driver_override check Danilo Krummrich <dakr(a)kernel.org> hwmon: axi-fan: don't use driver_override as IRQ name Smita Koralahalli <Smita.KoralahalliChannabasappa(a)amd.com> cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled Janosch Frank <frankja(a)linux.ibm.com> s390/mm: Add missing secure storage access fixups for donated memory Peter Zijlstra <peterz(a)infradead.org> perf: Make sure to use pmu_ctx->pmu for groups Peter Zijlstra <peterz(a)infradead.org> x86/perf: Make sure to program the counter value for stopped events on migration Sachin Kumar <xcyfun(a)protonmail.com> bpf: Fix constant blinding for PROBE_MEM32 stores Yazhou Tang <tangyazhou518(a)outlook.com> bpf: Reset register ID for BPF_END value tracking Alison Schofield <alison.schofield(a)intel.com> cxl/port: Fix use after free of parent_port in cxl_detach_ep() ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 3 + .../devicetree/bindings/sound/st,stm32-sai.yaml | 2 +- Documentation/filesystems/overlayfs.rst | 50 +++ Documentation/hwmon/adm1177.rst | 8 +- Documentation/hwmon/peci-cputemp.rst | 10 +- Makefile | 6 +- .../boot/dts/freescale/imx8mn-tqma8mqnl-mba8mx.dts | 13 +- .../arm64/boot/dts/freescale/imx8mn-tqma8mqnl.dtsi | 22 ++ arch/arm64/kvm/reset.c | 14 + arch/loongarch/include/asm/linkage.h | 36 ++ arch/loongarch/include/asm/sigframe.h | 9 + arch/loongarch/kernel/asm-offsets.c | 2 + arch/loongarch/kernel/env.c | 7 +- arch/loongarch/kernel/signal.c | 6 +- arch/loongarch/kvm/intc/eiointc.c | 2 +- arch/loongarch/kvm/vcpu.c | 3 + arch/loongarch/pci/pci.c | 80 ++++ arch/loongarch/vdso/Makefile | 4 +- arch/loongarch/vdso/sigreturn.S | 6 +- arch/powerpc/net/bpf_jit_comp64.c | 23 +- arch/powerpc/tools/ftrace-gen-ool-stubs.sh | 4 +- arch/s390/include/asm/barrier.h | 4 +- arch/s390/kernel/entry.S | 3 + arch/s390/kernel/syscall.c | 5 +- arch/s390/mm/fault.c | 11 +- arch/sh/drivers/platform_early.c | 4 - arch/x86/coco/sev/noinstr.c | 6 + arch/x86/entry/entry_fred.c | 14 + arch/x86/events/core.c | 4 +- arch/x86/include/asm/unwind_user.h | 4 + arch/x86/kernel/cpu/common.c | 20 +- arch/x86/kvm/mmu/mmu.c | 17 +- arch/x86/platform/efi/quirks.c | 2 +- block/blk-mq.c | 45 ++- drivers/acpi/ec.c | 2 + drivers/base/bus.c | 43 ++- drivers/base/core.c | 2 + drivers/base/dd.c | 60 +++ drivers/base/platform.c | 37 +- drivers/base/regmap/regmap.c | 30 +- drivers/bluetooth/btintel.c | 11 +- drivers/bluetooth/btusb.c | 5 +- drivers/bluetooth/hci_ll.c | 2 + drivers/bus/simple-pm-bus.c | 4 +- drivers/clk/imx/clk-scu.c | 3 +- drivers/cpufreq/cpufreq_conservative.c | 12 + drivers/cpufreq/cpufreq_governor.c | 3 + drivers/cpufreq/cpufreq_governor.h | 1 + drivers/cxl/core/hdm.c | 25 +- drivers/cxl/core/port.c | 8 +- drivers/cxl/pmem.c | 2 +- drivers/dma/dw-edma/dw-hdma-v0-core.c | 6 +- drivers/dma/fsl-edma-main.c | 26 +- drivers/dma/idxd/cdev.c | 8 +- drivers/dma/idxd/device.c | 6 +- drivers/dma/idxd/init.c | 4 +- drivers/dma/idxd/submit.c | 2 +- drivers/dma/idxd/sysfs.c | 1 + drivers/dma/sh/rz-dmac.c | 68 ++-- drivers/dma/xilinx/xdma.c | 4 +- drivers/dma/xilinx/xilinx_dma.c | 46 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 45 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 5 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 8 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 1 + .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 4 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 7 +- drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 7 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c | 2 +- drivers/gpu/drm/i915/display/intel_display.c | 8 +- drivers/gpu/drm/i915/display/intel_dp_tunnel.c | 20 +- drivers/gpu/drm/i915/display/intel_dp_tunnel.h | 11 +- drivers/gpu/drm/i915/display/intel_gmbus.c | 4 +- drivers/gpu/drm/i915/display/intel_plane.c | 11 +- drivers/gpu/drm/i915/i915_wait_util.h | 2 +- drivers/gpu/drm/mediatek/mtk_dsi.c | 9 +- drivers/gpu/drm/ttm/tests/ttm_bo_test.c | 4 +- drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 + drivers/gpu/drm/xe/xe_pt.c | 12 +- drivers/gpu/drm/xe/xe_vm.c | 22 +- drivers/gpu/drm/xe/xe_vm_types.h | 4 + drivers/gpu/drm/xe/xe_wa.c | 3 +- drivers/hid/hid-apple.c | 7 +- drivers/hid/hid-asus.c | 18 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-magicmouse.c | 6 +- drivers/hid/hid-mcp2221.c | 2 + drivers/hid/intel-ish-hid/ipc/hw-ish.h | 2 + drivers/hid/intel-ish-hid/ipc/pci-ish.c | 12 + drivers/hwmon/adm1177.c | 54 +-- drivers/hwmon/axi-fan-control.c | 2 +- drivers/hwmon/peci/cputemp.c | 4 +- drivers/hwmon/pmbus/ina233.c | 3 +- drivers/hwmon/pmbus/isl68137.c | 21 +- drivers/hwmon/pmbus/pmbus_core.c | 192 ++++++++-- drivers/i2c/busses/i2c-designware-amdisp.c | 11 +- drivers/i2c/busses/i2c-imx.c | 51 ++- drivers/i3c/master/dw-i3c-master.c | 2 + drivers/infiniband/core/rw.c | 27 +- drivers/infiniband/hw/efa/efa_com.c | 175 ++++----- drivers/infiniband/hw/ionic/ionic_controlpath.c | 4 +- drivers/infiniband/hw/irdma/cm.c | 29 +- drivers/infiniband/hw/irdma/uk.c | 39 +- drivers/infiniband/hw/irdma/utils.c | 2 - drivers/infiniband/hw/irdma/verbs.c | 9 +- drivers/irqchip/irq-qcom-mpm.c | 3 + drivers/irqchip/irq-renesas-rzv2h.c | 2 +- drivers/media/mc/mc-request.c | 5 + drivers/media/v4l2-core/v4l2-ioctl.c | 5 +- drivers/net/can/dev/netlink.c | 4 +- drivers/net/ethernet/airoha/airoha_ppe.c | 2 + drivers/net/ethernet/broadcom/asp2/bcmasp.c | 66 ++-- drivers/net/ethernet/cadence/macb_main.c | 41 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 2 + drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 31 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 14 +- drivers/net/ethernet/intel/ice/ice_repr.c | 5 +- drivers/net/ethernet/microchip/lan743x_main.c | 5 + drivers/net/ethernet/pensando/ionic/ionic_lif.c | 17 +- drivers/net/team/team_core.c | 65 +++- drivers/net/tun_vnet.h | 2 +- drivers/net/usb/r8152.c | 1 + drivers/net/virtio_net.c | 7 +- drivers/nvme/host/fabrics.c | 4 +- drivers/nvme/host/pci.c | 11 +- drivers/nvme/target/admin-cmd.c | 2 +- drivers/nvme/target/core.c | 14 +- drivers/nvme/target/nvmet.h | 1 + drivers/nvme/target/rdma.c | 1 + drivers/phy/qualcomm/phy-qcom-qmp-ufs.c | 3 +- drivers/phy/ti/phy-j721e-wiz.c | 2 + drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 9 +- drivers/pinctrl/renesas/pinctrl-rza1.c | 2 +- drivers/pinctrl/renesas/pinctrl-rzt2h.c | 1 + drivers/pinctrl/stm32/Kconfig | 1 + drivers/platform/olpc/olpc-xo175-ec.c | 2 +- drivers/platform/x86/hp/hp-wmi.c | 8 + drivers/platform/x86/intel/hid.c | 23 +- .../x86/intel/speed_select_if/isst_tpmi_core.c | 5 +- drivers/platform/x86/lenovo/wmi-gamezone.c | 2 - drivers/platform/x86/oxpec.c | 30 +- drivers/platform/x86/touchscreen_dmi.c | 18 + drivers/scsi/ibmvscsi/ibmvfc.c | 3 +- drivers/scsi/mpi3mr/mpi3mr_fw.c | 10 + drivers/scsi/scsi_devinfo.c | 2 +- drivers/scsi/scsi_transport_sas.c | 2 +- drivers/scsi/ses.c | 2 +- drivers/slimbus/qcom-ngd-ctrl.c | 6 +- drivers/spi/spi-fsl-lpspi.c | 3 +- drivers/spi/spi-intel-pci.c | 1 + drivers/spi/spi-meson-spicc.c | 2 - drivers/spi/spi-sn-f-ospi.c | 17 +- drivers/spi/spi.c | 19 +- .../int340x_thermal/processor_thermal_soc_slider.c | 8 +- drivers/usb/core/config.c | 6 +- drivers/usb/core/quirks.c | 5 + drivers/virt/coco/tdx-guest/tdx-guest.c | 12 +- drivers/xen/privcmd.c | 3 + fs/btrfs/block-group.c | 2 +- fs/btrfs/disk-io.c | 4 +- fs/btrfs/ioctl.c | 7 + fs/btrfs/volumes.c | 5 +- fs/erofs/fileio.c | 6 +- fs/erofs/zdata.c | 3 + fs/ext4/crypto.c | 9 +- fs/ext4/ext4.h | 1 + fs/ext4/extents.c | 23 +- fs/ext4/fast_commit.c | 17 +- fs/ext4/fsync.c | 16 +- fs/ext4/ialloc.c | 6 + fs/ext4/inline.c | 10 +- fs/ext4/inode.c | 75 +++- fs/ext4/mballoc.c | 30 +- fs/ext4/page-io.c | 10 +- fs/ext4/super.c | 16 +- fs/ext4/sysfs.c | 10 +- fs/fs-writeback.c | 18 +- fs/fuse/file.c | 4 +- fs/fuse/inode.c | 1 + fs/jbd2/checkpoint.c | 15 +- fs/netfs/buffered_read.c | 3 +- fs/netfs/direct_read.c | 3 +- fs/netfs/direct_write.c | 15 +- fs/netfs/iterator.c | 43 +++ fs/netfs/read_collect.c | 4 +- fs/netfs/read_retry.c | 5 +- fs/netfs/read_single.c | 1 - fs/netfs/write_collect.c | 4 +- fs/netfs/write_issue.c | 3 +- fs/overlayfs/copy_up.c | 6 +- fs/overlayfs/overlayfs.h | 21 ++ fs/overlayfs/ovl_entry.h | 7 +- fs/overlayfs/params.c | 33 +- fs/overlayfs/super.c | 2 +- fs/overlayfs/util.c | 5 +- fs/smb/server/oplock.c | 72 ++-- fs/smb/server/smb2pdu.c | 73 ++-- fs/xfs/scrub/quota.c | 4 +- fs/xfs/scrub/trace.h | 12 +- fs/xfs/xfs_attr_item.c | 5 +- fs/xfs/xfs_dquot_item.c | 9 +- fs/xfs/xfs_inode_item.c | 9 +- fs/xfs/xfs_mount.c | 7 +- fs/xfs/xfs_trace.h | 47 ++- fs/xfs/xfs_trans_ail.c | 26 +- include/linux/damon.h | 6 + include/linux/device.h | 54 +++ include/linux/device/bus.h | 4 + include/linux/dma-mapping.h | 4 +- include/linux/fs.h | 1 + include/linux/mempolicy.h | 1 + include/linux/netfs.h | 1 - include/linux/pagemap.h | 11 - include/linux/platform_device.h | 5 - include/linux/spi/spi.h | 5 - include/linux/swapops.h | 27 +- include/linux/usb/quirks.h | 3 + include/linux/usb/r8152.h | 1 + include/linux/virtio_net.h | 53 ++- include/net/bluetooth/l2cap.h | 2 +- include/net/inet_hashtables.h | 14 + include/net/ip6_fib.h | 21 +- include/sound/cs35l56.h | 1 + include/trace/events/netfs.h | 8 +- include/trace/events/task.h | 7 +- include/uapi/linux/dma-buf.h | 1 + include/uapi/linux/netfilter/nf_conntrack_common.h | 4 + kernel/bpf/btf.c | 24 +- kernel/bpf/core.c | 43 ++- kernel/bpf/verifier.c | 36 +- kernel/dma/swiotlb.c | 21 +- kernel/events/core.c | 19 +- kernel/futex/core.c | 2 +- kernel/futex/pi.c | 3 +- kernel/futex/syscalls.c | 8 + kernel/module/main.c | 7 + kernel/power/main.c | 2 +- kernel/power/snapshot.c | 11 + kernel/sched/ext.c | 2 +- kernel/sysctl.c | 2 +- kernel/time/alarmtimer.c | 2 +- kernel/trace/trace_osnoise.c | 10 +- mm/damon/core.c | 8 + mm/damon/stat.c | 36 +- mm/damon/sysfs.c | 10 +- mm/mempolicy.c | 10 +- mm/mseal.c | 5 +- mm/pagewalk.c | 25 +- net/bluetooth/l2cap_core.c | 103 +++-- net/bluetooth/l2cap_sock.c | 3 + net/bluetooth/mgmt.c | 2 +- net/bluetooth/sco.c | 10 +- net/can/af_can.c | 4 +- net/can/af_can.h | 2 +- net/can/gw.c | 6 +- net/can/isotp.c | 24 +- net/can/proc.c | 3 +- net/core/rtnetlink.c | 28 +- net/ipv4/esp4.c | 9 +- net/ipv4/inet_connection_sock.c | 20 +- net/ipv4/udp.c | 2 +- net/ipv6/addrconf.c | 4 +- net/ipv6/esp6.c | 9 +- net/ipv6/ip6_fib.c | 15 +- net/ipv6/netfilter/ip6t_rt.c | 4 + net/ipv6/route.c | 2 +- net/key/af_key.c | 19 +- net/netfilter/nf_conntrack_expect.c | 4 + net/netfilter/nf_conntrack_netlink.c | 16 +- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 14 +- net/netfilter/nfnetlink_log.c | 8 +- net/netfilter/nft_set_rbtree.c | 92 ++++- net/nfc/nci/core.c | 10 +- net/openvswitch/flow_netlink.c | 2 + net/openvswitch/vport-netdev.c | 11 +- net/packet/af_packet.c | 1 + net/smc/smc_rx.c | 9 +- net/tls/tls_sw.c | 2 +- net/xfrm/xfrm_iptfs.c | 17 +- net/xfrm/xfrm_nat_keepalive.c | 2 +- net/xfrm/xfrm_policy.c | 2 + net/xfrm/xfrm_state.c | 1 + net/xfrm/xfrm_user.c | 7 +- rust/kernel/regulator.rs | 33 +- rust/pin-init/src/macros.rs | 16 + scripts/package/install-extmod-build | 4 + sound/firewire/amdtp-stream.c | 2 +- sound/hda/codecs/hdmi/tegrahdmi.c | 1 + sound/hda/codecs/realtek/alc269.c | 42 ++- sound/hda/codecs/realtek/alc662.c | 9 + sound/hda/codecs/senarytech.c | 5 + sound/hda/controllers/intel.c | 1 - sound/soc/amd/acp/amd-acp63-acpi-match.c | 413 +++++++++++++++++++++ sound/soc/codecs/adau1372.c | 34 +- sound/soc/codecs/cs35l56-shared.c | 16 +- sound/soc/codecs/cs35l56.c | 8 + sound/soc/codecs/rt1320-sdw.c | 5 +- sound/soc/codecs/sma1307.c | 6 +- sound/soc/codecs/wcd934x.c | 2 +- sound/soc/fsl/fsl_easrc.c | 14 +- sound/soc/fsl/imx-card.c | 2 + sound/soc/intel/boards/sof_sdw.c | 8 + sound/soc/intel/catpt/device.c | 10 +- sound/soc/intel/catpt/dsp.c | 3 - sound/soc/samsung/i2s.c | 6 +- sound/soc/sof/ipc4-topology.c | 2 +- sound/usb/quirks.c | 2 + tools/objtool/arch/x86/decode.c | 68 ++-- tools/objtool/check.c | 14 + .../testing/selftests/bpf/prog_tests/reg_bounds.c | 62 +++- .../testing/selftests/bpf/progs/exceptions_fail.c | 9 +- .../selftests/mount_setattr/mount_setattr_test.c | 2 +- 316 files changed, 3581 insertions(+), 1178 deletions(-)

1 month, 1 week

14
13
0 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage