This is the start of the stable review cycle for the 7.1.10 release. There are 228 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 22 Aug 2026 14:51:11 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.10-rc1.... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 7.1.10-rc1

Gao Xiang xiang@kernel.org erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms

Jasper Wise jaspwise@amazon.co.uk spi: virtio: mark device ready before registering the controller

Shixiong Ou oushixiong@kylinos.cn drm/log: Fix infinite loop when scale is too large for display

Shixiong Ou oushixiong@kylinos.cn drm/log: Fix out-of-bounds read on empty message length

Shixiong Ou oushixiong@kylinos.cn drm/log: Fix division by zero when scale module parameter is 0

Vinay Belgaumkar vinay.belgaumkar@intel.com drm/xe: Fix a bug in pc_adjust_freq_bounds()

Nareshkumar Gollakoti naresh.kumar.g@intel.com drm/xe: Set GT rp min frequency as 1.2GHz default for BMG/CRI

Linmao Li lilinmao@kylinos.cn drm/xe/oa: Check managed mutex initialization errors

Linmao Li lilinmao@kylinos.cn drm/xe/oa: Fix sync entry leak on OA config emit failure

Daniele Ceraolo Spurio daniele.ceraolospurio@intel.com drm/xe/pxp: add termination on resume

Aleksandr Nogikh nogikh@google.com firewire: ohci: fix NULL pointer dereference in ar_context_release

Eric Dumazet edumazet@google.com l2tp: fix tunnel and session refcount leak on seq_file release

Jamal Hadi Salim jhs@mojatatu.com net/sched: cls_bpf: reject dev-bound programs bound to a different device

Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Skip unmapped range in aie2_populate_range()

Siddharth Vadapalli s-vadapalli@ti.com net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

Andrey Golovko andrey.golovko@gmail.com regmap: sdw-mbq: don't call an unset readable_reg callback

Uwe Kleine-König ukleinek@kernel.org m68k: Define NR_CPUS to 1

Jérémy Jean Jeremy.Jean@oss.cyber.gouv.fr pid: reject allocations through dead ancestor pid namespaces

Zhang Changzhong zhangchangzhong@huawei.com net/sched: cls_u32: skip hash tables in u32_bind_class()

Jamal Hadi Salim jhs@mojatatu.com net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain

Eric Dumazet edumazet@google.com af_packet: Don't send zero-byte data in tpacket_snd().

Charles Keepax ckeepax@opensource.cirrus.com regmap: sdw-mbq: Fix swap of timeout and retry times

Rosen Penev rosenp@gmail.com ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

Chuck Lever chuck.lever@oracle.com net/tls: Fail tls_sw_splice_read() after a failed async decrypt

Jiawen Wu jiawenwu@trustnetic.com net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling

Wei Fang wei.fang@nxp.com net: tap: fix wrong transport_header when sending VLAN-tagged frame

Wei Fang wei.fang@nxp.com net: packet: fix wrong transport_header when sending VLAN-tagged frame

Oleksij Rempel o.rempel@pengutronix.de net: phy: realtek: fix EEE advertisement write on the internal PHY MMD path

Jiayuan Chen jiayuan.chen@linux.dev tcp: fix icsk_ack.ato bitfield overflow

Jonas Köppeler j.koeppeler@tu-berlin.de veth: fix queue index used to wake the peer txq in veth_poll

Eric Dumazet edumazet@google.com macvlan: inherit needed_headroom and needed_tailroom from lowerdev

Eric Dumazet edumazet@google.com ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

Jakub Kicinski kuba@kernel.org eth: bnxt: avoid deadlock when canceling IRQ affinity notifier

Jakub Kicinski kuba@kernel.org eth: bnxt: decrease indent in bnxt_request_irq()

Jakub Kicinski kuba@kernel.org eth: bnxt: keep the aRFS rmap updated when TPH is enabled

Jakub Kicinski kuba@kernel.org eth: bnxt: cancel IRQ notifier before freeing affinity mask

Florian Westphal fw@strlen.de netfilter: ipset: let destroy callbacks adjust ext mem size

Florian Westphal fw@strlen.de netfilter: ipset: fix list type element drift bug

Jérémy Jean Jeremy.Jean@oss.cyber.gouv.fr netfilter: flowtable: publish GC-visible tuple last

Alexey Velichayshiy a.velichayshiy@ispras.ru netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path

Julian Anastasov ja@ssi.bg ipvs: revalidate ihl to prevent out-of-bounds access

Xiang Mei (Microsoft) xmei5@asu.edu netfilter: ipset: fix refcount race between list:set GC and swap

Karl Mehltretter kmehltretter@gmail.com tick: Include ktime.h and jiffies.h in linux/tick.h

Shenghao Ding shenghao-ding@ti.com ASoC: tas2781: fix clang build error for goto bypassing cleanup variable

Junjie Cao junjie.cao@intel.com gpio: ml-ioh: share the register lock across channels

Niels Pressel npressel@ethz.ch rseq: Prevent hard lockup on granted time slice extension

Ralf Lici ralf@mandelbit.com ovpn: defer key slot crypto freeing to workqueue

Ralf Lici ralf@mandelbit.com ovpn: run deferred work on a module-owned workqueue

Michael Neuling mikey@neuling.org riscv: lib: Fix ZBB strnlen reading past count boundary

Takashi Iwai tiwai@suse.de ALSA: usb-audio: Fix mixer regression on SteelSeries Arctis Nova 5

Jérémy Jean Jeremy.Jean@oss.cyber.gouv.fr sctp: validate cookie AUTH state before use

Kyle Zeng kylebot@openai.com perf: Reject exited events as group leaders

Hongjie Fang hongjiefang@asrmicro.com scsi: core: pair EH runtime PM get and put

Pu Lehui pulehui@huawei.com riscv: ftrace: Fix ftrace_modify_call failure on kprobed functions

Ralf Lici ralf@mandelbit.com ovpn: finish crypto callback cleanup before peer release

Ralf Lici ralf@mandelbit.com ovpn: fix NULL dereference when killing missing key

Kuniyuki Iwashima kuniyu@google.com af_unix: Unlink scc_entry in unix_del_edge().

Robby Cai robby.cai@nxp.com regulator: fp9931: Fix VPOS/VNEG voltage selector table

Christophe Leroy (CS GROUP) chleroy@kernel.org gpiolib: Check gc->get_direction() before calling gpiod_get_direction()

Florian Westphal fw@strlen.de rhashtable: fix false-positive lockdep splat on rhltable destruction

Vladislav Dronov vdronov@redhat.com crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

Herbert Xu herbert@gondor.apana.org.au crypto: ccm - Set rfc4309 maxauthsize from child

Jon Hunter jonathanh@nvidia.com arm64: tegra: Add EL2 virtual timer interrupt for Tegra194

Yixun Lan dlan@kernel.org clk: spacemit: k3: set hdma clock as critical

Yixun Lan dlan@kernel.org clk: spacemit: k3: fix USB2 bus clock

Mostafa Saleh smostafa@google.com optee: ffa: Add NULL check in optee_ffa_lend_protmem

Krzysztof Kozlowski krzysztof.kozlowski@oss.qualcomm.com clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup

Jakub Kicinski kuba@kernel.org net: expect instance lock in netdev_queue_get_dma_dev()

Jakub Kicinski kuba@kernel.org net: rename netdev_ops_assert_locked()

William Palacek William.Palacek@amd.com drm/amdkfd: Add bounds check for CRAT subtype length

AngeloGioacchino Del Regno angelogioacchino.delregno@collabora.com drm/mediatek: mtk_dsi: Enable HS clock only at pre-enable

Abhishek Rajput abhiraj21put@gmail.com drm/mediatek: Convert legacy DRM logging to drm_* helpers in mtk_dsi.c

Mark Brown broonie@kernel.org ASoC: tas2562: Validate values for volume writes

Max Kellermann max.kellermann@ionos.com ceph: fix hanging __ceph_get_caps() with stale mds_wanted

Max Kellermann max.kellermann@ionos.com ceph: avoid fs reclaim while using current->journal_info

Clay King clayking@amd.com drm/amd/display: Fix warnings

Gaghik Khachatrian gaghik.khachatrian@amd.com drm/amd/display: Fix type mismatches in DML and normalize loop bounds

Christoph Hellwig hch@lst.de xfs: check v5 superblock features early

Darrick J. Wong djwong@kernel.org xfs: check xfarray iteration errors when committing unlinked inode lists

Darrick J. Wong djwong@kernel.org xfs: don't ignore runtime errors in xrep_iunlink_reload_next

Long Li leo.lilong@huawei.com xfs: don't swallow dquot recovery verification errors

Lin Jiapeng ljp1205831794@gmail.com xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN

Darrick J. Wong djwong@kernel.org xfs: avoid UAF on sc->tempip in xrep_tempfile_create

Darrick J. Wong djwong@kernel.org xfs: don't return EFSCORRUPTED when scrubbing corrupt parent pointers

Darrick J. Wong djwong@kernel.org xfs: fix another iunlink infinite loop bug in online fsck

Darrick J. Wong djwong@kernel.org xfs: fix allocated inodes that show up in the unlinked list

Darrick J. Wong djwong@kernel.org xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair

Darrick J. Wong djwong@kernel.org xfs: don't zap the attr fork on repair when there are queued pptr updates

Long Li leo.lilong@huawei.com xfs: fix ilock leak on error in xfs_dq_get_next_id

Darrick J. Wong djwong@kernel.org xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev

Darrick J. Wong djwong@kernel.org xfs: nlink scrub must take IOLOCK before determining ILOCK state

Darrick J. Wong djwong@kernel.org xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers

Darrick J. Wong djwong@kernel.org xfs: set the prev pointer when reinserting an inode on the unlinked list

Darrick J. Wong djwong@kernel.org xfs: don't double-lock when deleting a self-referential directory

Darrick J. Wong djwong@kernel.org xfs: only check mergeability of bnobt records

Darrick J. Wong djwong@kernel.org xfs: zero i_nlink before repair puts inode on unlinked list

Darrick J. Wong djwong@kernel.org xfs: fix transaction block reservation in xrep_rtbitmap

Darrick J. Wong djwong@kernel.org xfs: check cowextsize in xrep_inode_cowextsize

Qiang Ma maqianga@uniontech.com xfs: clear zapped attr fork state when bmap repair finds no attr fork

Darrick J. Wong djwong@kernel.org xfs: mark nonzero sb_gquotino as corrupt on metadir filesystems

Ibrahim Hashimov security@auditcode.ai xfs: bounds-check buffer log item's dirty bitmap

Xiang Mei xmei5@asu.edu xfs: fix off-by-one in rtrefcount btree root level validation

Guanghui Yang 3497809730@qq.com xfs: propagate errors from xfs_rtginode_load

Junrui Luo moonafterrain@outlook.com drm/amdgpu: disallow multiple FENCE chunks in one submit

David Rosca david.rosca@amd.com drm/amdgpu: Fix UVD decode image min size calculation

David Rosca david.rosca@amd.com drm/amdgpu: Fix UVD dpb min size calculation for H264

David Rosca david.rosca@amd.com drm/amdgpu: Fix UVD min buffer sizes

David Rosca david.rosca@amd.com drm/amdgpu: Implement insert_end for VCE 3

David Rosca david.rosca@amd.com drm/amdgpu: Reject UVD message with dimensions above 4096

Candice Li candice.li@amd.com drm/amdgpu: validate GEM_CREATE domain combinations

Yang Wang kevinyang.wang@amd.com drm/amdgpu: check ASPM on the dGPU host link

Alex Deucher alexander.deucher@amd.com drm/amdgpu: fix missing check in vm_flush()

Yang Wang kevinyang.wang@amd.com drm/amdgpu: fix nbif 6.3.1 l1 low power not functional

Lijo Lazar lijo.lazar@amd.com drm/amdgpu: Prefer default discovery offset

David Rosca david.rosca@amd.com drm/amdgpu: Reject UVD message with invalid number of h265 refs

Nathan Lucas nlucasgit@gmail.com drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE

Nathan Lucas nlucasgit@gmail.com drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix

Samuel Pitoiset samuel.pitoiset@gmail.com drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()

Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Pad trailing CCA or EP11 message with zeros

Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing

Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Improve EP11 CPRB length and overflow checks

Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Improve CCA CPRB length and overflow checks

Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Fix CPRB memory allocation in zcrypt misc code

Eric Farman farman@linux.ibm.com s390/vfio_ccw: Implement a crw lock

Eric Farman farman@linux.ibm.com s390/vfio_ccw: Calculate idal length based on idaw type

Eric Farman farman@linux.ibm.com s390/vfio_ccw: Selectively expand io_mutex

Eric Farman farman@linux.ibm.com s390/vfio_ccw: Move cp cleanup out of not operational

Eric Farman farman@linux.ibm.com s390/vfio_ccw: Fix out of bounds check on CCW array

Eric Farman farman@linux.ibm.com s390/vfio_ccw: Ensure first IDAW remains constant

Eric Farman farman@linux.ibm.com s390/vfio_ccw: Ensure index for read/write regions are within range

Eric Farman farman@linux.ibm.com s390/vfio_ccw: Cancel existing workqueues

Eric Farman farman@linux.ibm.com s390/vfio_ccw: Limit the number of channel program segments

Eric Farman farman@linux.ibm.com s390/vfio_ccw: Free all memory if cp_init() fails

Guangshuo Li lgs201920130244@gmail.com drm/radeon: fix autosuspend cleanup during teardown

Jia Yao jia.yao@intel.com drm/xe/guc_ads: use uncached mapping for UM queue BO

Jia Yao jia.yao@intel.com drm/xe/guc_ads: allocate UM queues in VRAM on dGFX

Jia Yao jia.yao@intel.com drm/xe/guc_ads: allocate UM queues in a separate BO

Raag Jadav raag.jadav@intel.com drm/xe: Fix xe_device_probe() failure

Matthew Brost matthew.brost@intel.com drm/xe: Order ring writes before ring tail updates

Rui Qi qirui.001@bytedance.com riscv: hwprobe: Register unaligned probes before usermode

Dmitry Osipenko dmitry.osipenko@collabora.com pmdomain: mediatek: Fix mt8183 hang on boot

Binbin Zhou zhoubinbin@loongson.cn mmc: loongson2: Fix sg iteration in data reorder functions

John Harrison John.Harrison@Igalia.com drm/connector/hdmi: Fix out of bounds memory read

Pei Xiao xiaopei01@kylinos.cn mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition

AngeloGioacchino Del Regno angelogioacchino.delregno@collabora.com pmdomains: mediatek: Avoid setting RTFF's CLK_DIS before NRESTORE

Haibo Chen haibo.chen@nxp.com mmc: sdhci: make tuning_err a signed int

Guangshuo Li lgs201920130244@gmail.com pmdomain: mediatek: fix remaining %pOF after of_node_put()

Myeonghun Pak mhun512@gmail.com mmc: sdhci: unmap the bounce buffer before device release

Zhan Xusheng zhanxusheng1024@gmail.com mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit

Kefu Chai k.chai@proxmox.com libceph: tolerate addrvecs with multiple entries of the same type

Pavitra Jha jhapavitra98@gmail.com libceph: fix OOB read in decode_watchers() via missing bounds check

Yiming Zhu zhuyiming@kuaishou.com ceph: fix MDS random selection readiness predicate

Raphael Zimmer raphael.zimmer@tu-ilmenau.de libceph: Avoid using invalid osd indices from primary_temp

Dmitry Torokhov dmitry.torokhov@gmail.com Input: sur40 - fix V4L error path cleanup

Dmitry Torokhov dmitry.torokhov@gmail.com Input: sur40 - fix input device registration ordering

Ali Ahmet Memis ali@iusegentoo.com openrisc: signal: do not restore privileged SR bits on sigreturn

Josh Poimboeuf jpoimboe@kernel.org ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()

Leon Hwang leon.hwang@linux.dev ftrace: Protect direct_functions in update_ftrace_direct_mod

Leon Hwang leon.hwang@linux.dev ftrace: Protect direct_functions in update_ftrace_direct_del

Leon Hwang leon.hwang@linux.dev ftrace: Protect direct_functions in ftrace_find_rec_direct

Karl Mehltretter kmehltretter@gmail.com pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()

Pavitra Jha jhapavitra98@gmail.com libceph: fix multiple unsafe decodes in decode_locker()

Praveen Talari praveen.talari@oss.qualcomm.com pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0

Abel Vesa abel.vesa@oss.qualcomm.com pmdomain: qcom: rpmhpd: Add missing MXC and MMCX power domains for Eliza

Junjie Cao junjie.cao@intel.com gpio: ml-ioh: use raw_spinlock_t for the register lock

Jordan Rhee jordanrhee@google.com gve: fix zero-length skb frag with header-split

Rui Qi qirui.001@bytedance.com selftests/ftrace: Convert ELF entry point to file offset in uprobe test

Cengiz Can cengiz.can@canonical.com gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind

Jordan Rhee jordanrhee@google.com gve: fix NULL dereference due to missing ptp adjfine

Thorsten Blum thorsten.blum@linux.dev crypto: qce - fix error path in devm_qce_register_algs

Thorsten Blum thorsten.blum@linux.dev crypto: starfive - use scatterlist length before DMA mapping

Jianing Li m13940358460@163.com Input: hynitron_cstxxx - validate touch count and finger IDs

Dmitry Torokhov dmitry.torokhov@gmail.com Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue

Dmitry Torokhov dmitry.torokhov@gmail.com Input: synaptics-rmi4 - block s_input when F54 queue is busy

Bryam Vargas hexlabsecurity@proton.me Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

Dmitry Torokhov dmitry.torokhov@gmail.com Input: synaptics-rmi4 - zero report size on F54 work error

George Wilson gcwilson@linux.ibm.com powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

George Wilson gcwilson@linux.ibm.com powerpc/pseries: lparcfg - fix kbuf[] underflow

Linmao Li lilinmao@kylinos.cn Input: byd - synchronize timer deletion before freeing private data

Pengpeng Hou pengpeng@iscas.ac.cn Input: iforce - validate input packet lengths

Donglin Lyu DongLin_Lyu@outlook.com Input: atkbd - skip deactivate for HONOR ZQC-P

Zhefu Zhang a723356@gmail.com Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard

Linmao Li lilinmao@kylinos.cn Input: psxpad-spi - set driver data before use

Richard Davies richard@arachsys.com Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet

Dmitry Torokhov dmitry.torokhov@gmail.com Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

George Wilson gcwilson@linux.ibm.com powerpc/pseries: pci - logic bug

HyeongJun An sammiee5311@gmail.com Input: cs40l50-vibra - validate custom data from user space

Kyohei Kadota lufia@lufia.org Input: xpad - add support for ZENAIM LEVERLESS

Bard Liao yung-chuan.liao@linux.intel.com ASoC: SOF: topology: Use acpi mach from the machine driver

Alex Deucher alexander.deucher@amd.com drm/amdgpu/gmc12.1: fix MMHUB0 check in pasid tlb flush

Alex Deucher alexander.deucher@amd.com drm/amdgpu/gmc12.1: implement tlb inv semaphore

Asad Kamal asad.kamal@amd.com drm/amdgpu: fix aperture iounmap skipped on device removal

Jesse Zhang Jesse.Zhang@amd.com drm/amdgpu: fix JPEG v4.0.5 queue reset failure in DPG mode

Jesse Zhang Jesse.Zhang@amd.com drm/amdgpu: fix JPEG v5.0.0 queue reset failure in DPG mode

Jesse Zhang Jesse.Zhang@amd.com drm/amdgpu: fix JPEG v5.3.0 queue reset failure in DPG mode

Lijo Lazar lijo.lazar@amd.com drm/amdgpu: Use virtual alloc during coredump

Wang Jiang jiangwang@kylinos.cn drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression

Travis K. Bangs tbangs89@gmail.com drm/amd: Disable DP audio spread spectrum for Cyan Skillfish

Jesse Zhang Jesse.Zhang@amd.com drm/amdgpu/userq: serialize queue map against GPU reset

Qiang Yu Qiang.Yu@amd.com drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12

Candice Li candice.li@amd.com drm/amdgpu: reject oversized IBs with per-ring packet limits

Osama Abdelkader osama.abdelkader@gmail.com drm/panthor: skip zero-sized firmware sections

Mingyu Wang 25181214217@stu.xidian.edu.cn fbdev: core: Fix pointer desynchronization in fb_io_read()

Melbin K Mathew mlbnkm1@gmail.com fbdev: clear fb_info->mode before deleting a videomode

Melbin K Mathew mlbnkm1@gmail.com fbdev: bound mode sysfs output to the sysfs buffer

Dawid Wróbel me@dawidwrobel.com ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: cs35l41: sort the register default table

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: cs35l45: sort the register default table

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: cs4265: sort the register default table

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()

Christian A. Ehrhardt lk@c--e.de drm/shmem_helper: Check VMA boundaries for PMD mappings

Dawid Wróbel me@dawidwrobel.com ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses

Ramin Moussavi ramin.moussavi@yacoub.de microblaze: restore the page alignment of swapper_pg_dir

Hidayath Khan hidayath@linux.ibm.com s390/qeth: validate user buffer length in SNMP and ARP query ioctls

Wyatt Feng bronzed_45_vested@icloud.com mptcp: fastopen: only mark MPTFO subflows with SYN data

Qing Luo luoqing@kylinos.cn mptcp: pm: fix data race in add_addr timer callback

Matthieu Baerts (NGI0) matttbe@kernel.org mptcp: options: reset DSS fields in case of unexpected size

Matthieu Baerts (NGI0) matttbe@kernel.org mptcp: avoid combining some incoming suboptions

Gang Yan yangang@kylinos.cn selftests: mptcp: join: mark tests with data corruption as failed

Paolo Abeni pabeni@redhat.com mptcp: reclaim forward-allocated memory on RX path errors

Bryam Vargas hexlabsecurity@proton.me selinux: reject a permission value exceeding the class permission count

Bryam Vargas hexlabsecurity@proton.me selinux: reject an unclaimed class value in security_get_classes()

Bryam Vargas hexlabsecurity@proton.me selinux: do not cancel a policy conversion that never started

Bryam Vargas hexlabsecurity@proton.me selinux: reject a class permission count below its inherited common

Bryam Vargas hexlabsecurity@proton.me selinux: require every boolean value to be defined

Chao Shi coshi036@gmail.com block: stop the timeout timer when releasing a never added disk

-------------

Diffstat:

Makefile | 4 +- arch/arm64/boot/dts/nvidia/tegra194.dtsi | 2 + arch/m68k/Kconfig.cpu | 4 + arch/microblaze/kernel/head.S | 2 + arch/openrisc/include/asm/processor.h | 2 + arch/openrisc/kernel/signal.c | 5 +- arch/powerpc/platforms/pseries/lparcfg.c | 2 +- arch/powerpc/platforms/pseries/papr-phy-attest.c | 12 +- arch/powerpc/platforms/pseries/pci.c | 2 +- arch/riscv/kernel/ftrace.c | 5 +- arch/riscv/kernel/unaligned_access_speed.c | 8 +- arch/riscv/lib/strnlen.S | 10 +- block/genhd.c | 12 +- crypto/ccm.c | 2 +- drivers/accel/amdxdna/aie2_ctx.c | 16 + drivers/base/regmap/regmap-sdw-mbq.c | 4 +- drivers/clk/qcom/dispcc-eliza.c | 2 +- drivers/clk/spacemit/ccu-k3.c | 4 +- drivers/crypto/qce/core.c | 2 +- drivers/crypto/starfive/jh7110-aes.c | 2 +- drivers/crypto/tegra/tegra-se-aes.c | 22 +- drivers/firewire/ohci.c | 4 +- drivers/gpio/gpio-ml-ioh.c | 71 +-- drivers/gpio/gpio-sloppy-logic-analyzer.c | 2 +- drivers/gpio/gpiolib.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 31 +- drivers/gpu/drm/amd/amdgpu/amdgpu_dev_coredump.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 50 +- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 13 + drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 21 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 5 + drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 85 +--- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 3 +- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 5 + drivers/gpu/drm/amd/amdgpu/gmc_v12_1.c | 48 +- drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_5.c | 21 +- drivers/gpu/drm/amd/amdgpu/jpeg_v5_0_0.c | 21 +- drivers/gpu/drm/amd/amdgpu/jpeg_v5_3_0.c | 21 +- drivers/gpu/drm/amd/amdgpu/nbif_v6_3_1.c | 42 +- drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 26 +- drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 9 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 5 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 2 +- .../amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 6 +- .../amd/display/dc/clk_mgr/dce100/dce_clk_mgr.h | 2 +- .../amd/display/dc/clk_mgr/dcn20/dcn20_clk_mgr.c | 8 +- .../dc/clk_mgr/dcn30/dcn30_clk_mgr_smu_msg.c | 4 +- .../dc/clk_mgr/dcn30/dcn30_clk_mgr_smu_msg.h | 2 +- .../amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c | 2 +- .../amd/display/dc/clk_mgr/dcn401/dcn401_clk_mgr.c | 2 +- .../amd/display/dc/clk_mgr/dcn401/dcn401_clk_mgr.h | 4 +- .../dc/clk_mgr/dcn401/dcn401_clk_mgr_smu_msg.c | 4 +- .../dc/clk_mgr/dcn401/dcn401_clk_mgr_smu_msg.h | 2 +- .../amd/display/dc/clk_mgr/dcn42/dcn42_clk_mgr.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 4 +- .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c | 31 +- .../gpu/drm/amd/display/dc/core/dc_link_exports.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 18 +- drivers/gpu/drm/amd/display/dc/core/dc_vm_helper.c | 4 +- drivers/gpu/drm/amd/display/dc/dc.h | 68 +-- drivers/gpu/drm/amd/display/dc/dc_dsc.h | 2 +- drivers/gpu/drm/amd/display/dc/dc_stream.h | 4 +- drivers/gpu/drm/amd/display/dc/dc_types.h | 2 +- drivers/gpu/drm/amd/display/dc/dce/dce_transform.c | 7 +- .../drm/amd/display/dc/dce110/dce110_opp_csc_v.c | 7 +- .../drm/amd/display/dc/dcn21/dcn21_link_encoder.c | 2 +- .../amd/display/dc/dio/dcn10/dcn10_link_encoder.c | 2 +- .../gpu/drm/amd/display/dc/dml/calcs/dcn_calcs.c | 9 +- .../gpu/drm/amd/display/dc/dml/dcn20/dcn20_fpu.c | 38 +- .../amd/display/dc/dml/dcn20/display_mode_vba_20.c | 36 +- .../display/dc/dml/dcn20/display_mode_vba_20v2.c | 36 +- .../amd/display/dc/dml/dcn21/display_mode_vba_21.c | 64 +-- .../gpu/drm/amd/display/dc/dml/dcn30/dcn30_fpu.c | 14 +- .../amd/display/dc/dml/dcn30/display_mode_vba_30.c | 425 +++++++++-------- .../gpu/drm/amd/display/dc/dml/dcn301/dcn301_fpu.c | 5 +- .../gpu/drm/amd/display/dc/dml/dcn302/dcn302_fpu.c | 2 +- .../gpu/drm/amd/display/dc/dml/dcn303/dcn303_fpu.c | 2 +- .../gpu/drm/amd/display/dc/dml/dcn31/dcn31_fpu.c | 15 +- .../amd/display/dc/dml/dcn31/display_mode_vba_31.c | 527 +++++++++++---------- .../gpu/drm/amd/display/dc/dml/dcn314/dcn314_fpu.c | 5 +- .../display/dc/dml/dcn314/display_mode_vba_314.c | 527 +++++++++++---------- .../gpu/drm/amd/display/dc/dml/dcn32/dcn32_fpu.c | 77 +-- .../amd/display/dc/dml/dcn32/display_mode_vba_32.c | 21 +- .../dc/dml/dcn32/display_mode_vba_util_32.c | 10 +- .../dc/dml/dcn32/display_mode_vba_util_32.h | 8 +- .../gpu/drm/amd/display/dc/dml/dcn321/dcn321_fpu.c | 46 +- .../gpu/drm/amd/display/dc/dml/dcn35/dcn35_fpu.c | 5 +- .../gpu/drm/amd/display/dc/dml/dcn351/dcn351_fpu.c | 5 +- .../gpu/drm/amd/display/dc/dml/display_mode_vba.c | 4 +- .../gpu/drm/amd/display/dc/dml/display_mode_vba.h | 12 +- .../drm/amd/display/dc/dpp/dcn10/dcn10_dpp_cm.c | 2 +- .../gpu/drm/amd/display/dc/dpp/dcn30/dcn30_dpp.c | 2 +- .../drm/amd/display/dc/dpp/dcn30/dcn30_dpp_cm.c | 4 +- drivers/gpu/drm/amd/display/dc/dsc/dc_dsc.c | 2 +- .../gpu/drm/amd/display/dc/dsc/dcn20/dcn20_dsc.c | 8 +- .../gpu/drm/amd/display/dc/dsc/dcn35/dcn35_dsc.c | 8 +- .../gpu/drm/amd/display/dc/dsc/dcn401/dcn401_dsc.c | 10 +- .../drm/amd/display/dc/hubp/dcn401/dcn401_hubp.c | 4 +- .../drm/amd/display/dc/hubp/dcn401/dcn401_hubp.h | 2 +- .../drm/amd/display/dc/hwss/dcn10/dcn10_hwseq.c | 6 +- .../drm/amd/display/dc/hwss/dcn314/dcn314_hwseq.c | 2 +- .../drm/amd/display/dc/hwss/dcn32/dcn32_hwseq.c | 2 +- .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 2 +- drivers/gpu/drm/amd/display/dc/inc/bw_fixed.h | 2 +- drivers/gpu/drm/amd/display/dc/inc/hw/hubp.h | 2 +- drivers/gpu/drm/amd/display/dc/inc/hw/opp.h | 4 +- .../drm/amd/display/dc/inc/hw/timing_generator.h | 8 +- drivers/gpu/drm/amd/display/dc/inc/link_service.h | 2 +- drivers/gpu/drm/amd/display/dc/inc/reg_helper.h | 72 +-- .../gpu/drm/amd/display/dc/link/link_detection.c | 2 +- .../gpu/drm/amd/display/dc/link/link_detection.h | 2 +- .../dc/link/protocols/link_edp_panel_control.c | 8 +- .../gpu/drm/amd/display/dc/mpc/dcn10/dcn10_mpc.c | 2 +- .../gpu/drm/amd/display/dc/mpc/dcn30/dcn30_mpc.c | 6 +- .../gpu/drm/amd/display/dc/opp/dcn20/dcn20_opp.c | 2 +- .../gpu/drm/amd/display/dc/opp/dcn20/dcn20_opp.h | 2 +- .../gpu/drm/amd/display/dc/optc/dcn32/dcn32_optc.c | 2 +- drivers/gpu/drm/amd/display/include/fixed31_32.h | 6 +- .../gpu/drm/amd/display/modules/hdcp/hdcp_log.c | 2 +- drivers/gpu/drm/clients/drm_log.c | 12 + drivers/gpu/drm/display/drm_hdmi_state_helper.c | 3 +- drivers/gpu/drm/drm_gem_shmem_helper.c | 6 +- drivers/gpu/drm/mediatek/mtk_dsi.c | 32 +- drivers/gpu/drm/panthor/panthor_fw.c | 3 + drivers/gpu/drm/radeon/radeon_fence.c | 7 + drivers/gpu/drm/radeon/radeon_kms.c | 1 + drivers/gpu/drm/xe/xe_bo.h | 14 + drivers/gpu/drm/xe/xe_device.c | 6 +- drivers/gpu/drm/xe/xe_guc_ads.c | 93 ++-- drivers/gpu/drm/xe/xe_guc_ads_types.h | 5 + drivers/gpu/drm/xe/xe_guc_pc.c | 43 +- drivers/gpu/drm/xe/xe_lrc.c | 7 + drivers/gpu/drm/xe/xe_oa.c | 13 +- drivers/gpu/drm/xe/xe_pxp.c | 162 +++++-- drivers/gpu/drm/xe/xe_pxp_types.h | 27 +- drivers/input/joystick/iforce/iforce-packets.c | 11 +- drivers/input/joystick/iforce/iforce-usb.c | 3 + drivers/input/joystick/psxpad-spi.c | 1 + drivers/input/joystick/xpad.c | 2 + drivers/input/keyboard/atkbd.c | 20 +- drivers/input/misc/cs40l50-vibra.c | 10 +- drivers/input/mouse/byd.c | 2 +- drivers/input/mouse/focaltech.c | 2 +- drivers/input/rmi4/rmi_f54.c | 43 +- drivers/input/rmi4/rmi_f55.c | 4 +- drivers/input/touchscreen/hynitron_cstxxx.c | 13 +- drivers/input/touchscreen/sur40.c | 23 +- drivers/mmc/host/atmel-mci.c | 2 + drivers/mmc/host/loongson2-mmc.c | 8 +- drivers/mmc/host/omap_hsmmc.c | 2 +- drivers/mmc/host/sdhci.c | 16 + drivers/mmc/host/sdhci.h | 2 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 131 +++-- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 3 + drivers/net/ethernet/google/gve/gve_ptp.c | 6 + drivers/net/ethernet/google/gve/gve_rx_dqo.c | 5 + drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 + drivers/net/ethernet/wangxun/ngbe/ngbe_main.c | 4 +- drivers/net/ipvlan/ipvlan_main.c | 4 + drivers/net/macvlan.c | 4 + drivers/net/ovpn/crypto.c | 26 +- drivers/net/ovpn/crypto.h | 4 +- drivers/net/ovpn/crypto_aead.c | 19 +- drivers/net/ovpn/crypto_aead.h | 1 - drivers/net/ovpn/io.c | 10 +- drivers/net/ovpn/main.c | 19 +- drivers/net/ovpn/ovpnpriv.h | 4 + drivers/net/ovpn/peer.c | 8 +- drivers/net/ovpn/tcp.c | 9 +- drivers/net/phy/realtek/realtek_main.c | 2 +- drivers/net/tap.c | 3 +- drivers/net/veth.c | 2 +- drivers/pmdomain/arm/scmi_perf_domain.c | 2 +- drivers/pmdomain/mediatek/mt8183-pm-domains.h | 7 +- drivers/pmdomain/mediatek/mtk-mfg-pmdomain.c | 2 +- drivers/pmdomain/mediatek/mtk-pm-domains.c | 30 +- drivers/pmdomain/qcom/rpmhpd.c | 4 + drivers/regulator/fp9931.c | 54 +-- drivers/s390/cio/vfio_ccw_async.c | 16 + drivers/s390/cio/vfio_ccw_chp.c | 31 +- drivers/s390/cio/vfio_ccw_cp.c | 74 ++- drivers/s390/cio/vfio_ccw_cp.h | 10 + drivers/s390/cio/vfio_ccw_drv.c | 21 +- drivers/s390/cio/vfio_ccw_fsm.c | 8 +- drivers/s390/cio/vfio_ccw_ops.c | 39 +- drivers/s390/cio/vfio_ccw_private.h | 10 +- drivers/s390/crypto/zcrypt_ccamisc.c | 20 +- drivers/s390/crypto/zcrypt_ep11misc.c | 16 +- drivers/s390/crypto/zcrypt_msgtype6.c | 364 +++++++++----- drivers/s390/net/qeth_core_main.c | 3 + drivers/s390/net/qeth_l3_main.c | 5 + drivers/scsi/scsi_error.c | 6 +- drivers/spi/spi-virtio.c | 2 + drivers/tee/optee/ffa_abi.c | 3 + drivers/ufs/core/ufshcd.c | 4 +- drivers/video/fbdev/core/fb_io_fops.c | 8 + drivers/video/fbdev/core/fbmem.c | 5 +- drivers/video/fbdev/core/fbsysfs.c | 15 +- fs/ceph/caps.c | 17 +- fs/ceph/file.c | 9 +- fs/ceph/mds_client.c | 11 + fs/ceph/mds_client.h | 1 + fs/ceph/mdsmap.c | 2 +- fs/erofs/Kconfig | 3 +- fs/xfs/libxfs/xfs_exchmaps.c | 10 + fs/xfs/libxfs/xfs_rtrefcount_btree.c | 4 +- fs/xfs/libxfs/xfs_sb.c | 4 +- fs/xfs/scrub/agheader.c | 2 +- fs/xfs/scrub/agheader_repair.c | 152 ++++-- fs/xfs/scrub/alloc.c | 5 +- fs/xfs/scrub/attr_repair.c | 3 +- fs/xfs/scrub/bmap.c | 5 + fs/xfs/scrub/dirtree_repair.c | 22 +- fs/xfs/scrub/inode_repair.c | 2 +- fs/xfs/scrub/nlinks.c | 13 +- fs/xfs/scrub/nlinks_repair.c | 7 +- fs/xfs/scrub/parent.c | 2 +- fs/xfs/scrub/rtbitmap_repair.c | 46 +- fs/xfs/scrub/tempfile.c | 1 + fs/xfs/scrub/trace.h | 2 + fs/xfs/xfs_buf_item_recover.c | 57 ++- fs/xfs/xfs_dquot.c | 3 +- fs/xfs/xfs_dquot_item_recover.c | 2 +- fs/xfs/xfs_rtalloc.c | 2 +- include/linux/rseq_entry.h | 1 + include/linux/tick.h | 2 + include/net/ip_vs.h | 2 +- include/net/netdev_lock.h | 6 +- include/net/sctp/auth.h | 3 + include/scsi/scsi_host.h | 6 +- kernel/events/core.c | 8 +- kernel/pid.c | 6 +- kernel/trace/ftrace.c | 33 +- lib/rhashtable.c | 2 +- net/ceph/cls_lock_client.c | 13 +- net/ceph/decode.c | 18 +- net/ceph/osd_client.c | 5 +- net/ceph/osdmap.c | 5 +- net/core/dev.c | 26 +- net/core/dev_addr_lists.c | 2 +- net/core/link_watch.c | 2 +- net/core/lock_debug.c | 2 +- net/core/netdev_queues.c | 2 +- net/ethtool/netlink.c | 4 +- net/ipv4/tcp_input.c | 6 +- net/ipv4/tcp_timer.c | 4 +- net/ipv6/addrconf.c | 2 +- net/l2tp/l2tp_debugfs.c | 4 + net/l2tp/l2tp_ppp.c | 56 ++- net/mptcp/fastopen.c | 7 +- net/mptcp/options.c | 67 ++- net/mptcp/pm.c | 6 +- net/mptcp/protocol.c | 6 + net/mptcp/protocol.h | 1 + net/netfilter/ipset/ip_set_bitmap_gen.h | 2 +- net/netfilter/ipset/ip_set_core.c | 19 +- net/netfilter/ipset/ip_set_list_set.c | 10 +- net/netfilter/ipvs/ip_vs_core.c | 11 +- net/netfilter/ipvs/ip_vs_xmit.c | 3 +- net/netfilter/nf_flow_table_core.c | 7 +- net/netfilter/nf_tables_offload.c | 2 +- net/packet/af_packet.c | 7 +- net/sched/act_api.c | 10 +- net/sched/cls_bpf.c | 18 +- net/sched/cls_u32.c | 3 + net/sctp/auth.c | 75 +++ net/sctp/sm_make_chunk.c | 3 + net/tls/tls_sw.c | 5 + net/unix/garbage.c | 1 + net/xdp/xsk_buff_pool.c | 2 +- security/selinux/ss/policydb.c | 34 ++ security/selinux/ss/services.c | 28 +- sound/soc/codecs/cs35l41-lib.c | 2 +- sound/soc/codecs/cs35l45-tables.c | 32 +- sound/soc/codecs/cs4265.c | 4 +- sound/soc/codecs/lpass-tx-macro.c | 4 +- sound/soc/codecs/lpass-wsa-macro.c | 8 +- sound/soc/codecs/tas2562.c | 9 +- sound/soc/codecs/tas2781-i2c.c | 18 +- sound/soc/intel/common/sof-function-topology-lib.c | 7 +- sound/soc/sof/ipc4-pcm.c | 25 +- sound/soc/sof/ipc4-topology.c | 33 ++ sound/soc/sof/sof-audio.c | 9 +- sound/soc/xilinx/xlnx_formatter_pcm.c | 10 +- sound/usb/quirks.c | 2 + .../ftrace/test.d/dynevent/add_remove_uprobe.tc | 27 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 4 +- 288 files changed, 3633 insertions(+), 2012 deletions(-)