This is the start of the stable review cycle for the 5.15.180 release. There are 279 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 10 Apr 2025 10:47:53 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.180-rc... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 5.15.180-rc1

Vlastimil Babka vbabka@suse.cz mm, slab: remove duplicate kernel-doc comment for ksize()

Kamal Dasu kdasu.kdev@gmail.com mmc: sdhci-brcmstb: use clk_get_rate(base_clk) in PM resume

Chuck Lever chuck.lever@oracle.com NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up

Li Lingfeng lilingfeng3@huawei.com nfsd: put dl_stid if fail to queue dl_recall

Roman Smirnov r.smirnov@omp.ru jfs: add index corruption check to DT_GETPAGE()

Qasim Ijaz qasdev00@gmail.com jfs: fix slab-out-of-bounds read in ea_get()

Acs, Jakub acsjakub@amazon.de ext4: fix OOB read when checking dotdot dir

Theodore Ts'o tytso@mit.edu ext4: don't over-report free space or inodes in statvfs

Ran Xiaokai ran.xiaokai@zte.com.cn tracing/osnoise: Fix possible recursive locking for cpus_read_lock()

Douglas Raillard douglas.raillard@arm.com tracing: Fix synth event printk format for str fields

Douglas Raillard douglas.raillard@arm.com tracing: Ensure module defining synth event cannot be unloaded while tracing

Tengda Wu wutengda@huaweicloud.com tracing: Fix use-after-free in print_graph_function_flags during tracer switching

Karel Balej balejk@matfyz.cz mmc: sdhci-pxav3: set NEED_RSP_BUSY capability

Paul Menzel pmenzel@molgen.mpg.de ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP

Murad Masimov m.masimov@mt-integration.ru acpi: nfit: fix narrowing conversion in acpi_nfit_ctl

Jann Horn jannh@google.com x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs

Guilherme G. Piccoli gpiccoli@igalia.com x86/tsc: Always save/restore TSC sched_clock() on suspend/resume

Josef Bacik josef@toxicpanda.com btrfs: handle errors from btrfs_dec_ref() properly

Markus Elfring elfring@users.sourceforge.net ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()

Srinivas Pandruvada srinivas.pandruvada@linux.intel.com platform/x86: ISST: Correct command storage data length

Ying Lu luying1@xiaomi.com usbnet:fix NPE during rx_complete

Hersen Wu hersenxs.wu@amd.com drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration

Jesse Zhang jesse.zhang@amd.com drm/amd/pm: Fix negative array index read

Sherry Sun sherry.sun@nxp.com tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers

Sherry Sun sherry.sun@nxp.com tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform

Kamal Dasu kamal.dasu@broadcom.com mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops

Kamal Dasu kdasu.kdev@gmail.com mmc: sdhci-brcmstb: Add ability to increase max clock rate for 72116b0

Haibo Chen haibo.chen@nxp.com can: flexcan: disable transceiver during system PM

Haibo Chen haibo.chen@nxp.com can: flexcan: only change CAN state when link up in system PM

Henry Martin bsdhenrymartin@gmail.com arcnet: Add NULL check in com20020pci_probe()

Lin Ma linma@zju.edu.cn net: fix geneve_opt length integer overflow

Fernando Fernandez Mancera ffmancera@riseup.net ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS

Lin Ma linma@zju.edu.cn netfilter: nft_tunnel: fix geneve_opt type confusion addition

Guillaume Nault gnault@redhat.com tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().

Stefano Garzarella sgarzare@redhat.com vsock: avoid timeout during connect() if the socket is closing

Tobias Waldekranz tobias@waldekranz.com net: mvpp2: Prevent parser TCAM memory corruption

Cong Wang xiyou.wangcong@gmail.com net_sched: skbprio: Remove overly strict queue assertions

Debin Zhu mowenroot@163.com netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets

Pablo Neira Ayuso pablo@netfilter.org netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only

Henry Martin bsdhenrymartin@gmail.com ASoC: imx-card: Add NULL check in imx_card_probe()

Nikita Shubin n.shubin@yadro.com ntb: intel: Fix using link status DB's

Yajun Deng yajun.deng@linux.dev ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

Juhan Jin juhan.jin@foxmail.com riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra

Al Viro viro@zeniv.linux.org.uk spufs: fix a leak in spufs_create_context()

Al Viro viro@zeniv.linux.org.uk spufs: fix a leak on spufs_new_file() failure

Tasos Sahanidis tasos@tasossah.com hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}

Oliver Hartkopp socketcan@hartkopp.net can: statistics: use atomic access in hot path

Navon John Lukose navonjohnlukose@gmail.com ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx

Mario Limonciello mario.limonciello@amd.com drm/amd: Keep display off while going into S4

Vladis Dronov vdronov@redhat.com x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled

Waiman Long longman@redhat.com locking/semaphore: Use wake_q to wake up processes outside lock critical section

Shrikanth Hegde sshegde@linux.ibm.com sched/deadline: Use online cpus for validating runtime

Namjae Jeon linkinjeon@kernel.org ksmbd: fix incorrect validation for num_aces field of smb_acl

Simon Tatham anakin@pobox.com affs: don't write overlarge OFS data block size fields

Simon Tatham anakin@pobox.com affs: generate OFS sequence numbers starting at 1

Icenowy Zheng uwu@icenowy.me nvme-pci: skip CMB blocks incompatible with PCI P2P DMA

Icenowy Zheng uwu@icenowy.me nvme-pci: clean up CMBMSC when registering CMB fails

Sagi Grimberg sagi@grimberg.me nvme-tcp: fix possible UAF in nvme_tcp_poll

Johannes Berg johannes.berg@intel.com wifi: iwlwifi: fw: allocate chained SG tables for dump

Josh Poimboeuf jpoimboe@kernel.org sched/smt: Always inline sched_smt_active()

Geetha sowjanya gakula@marvell.com octeontx2-af: Free NIX_AF_INT_VEC_GEN irq

Geetha sowjanya gakula@marvell.com octeontx2-af: Fix mbox INTR handler when num VFs > 64

Giovanni Gherdovich ggherdovich@suse.cz ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid

Feng Yang yangfeng@kylinos.cn ring-buffer: Fix bytes_dropped calculation issue

Namjae Jeon linkinjeon@kernel.org ksmbd: fix multichannel connection failure

Miaoqian Lin linmq006@gmail.com ksmbd: use aead_request_free to match aead_request_alloc

Mark Zhang markzhang@nvidia.com rtnetlink: Allocate vfinfo size for VF GUIDs when supported

Yuezhang Mo Yuezhang.Mo@sony.com exfat: fix the infinite loop in exfat_find_last_cluster()

Josh Poimboeuf jpoimboe@kernel.org objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()

Bart Van Assche bvanassche@acm.org fs/procfs: fix the comment above proc_pid_wchan()

Arnaldo Carvalho de Melo acme@redhat.com perf python: Check if there is space to copy all the event

Arnaldo Carvalho de Melo acme@redhat.com perf python: Don't keep a raw_data pointer to consumed ring buffer space

Arnaldo Carvalho de Melo acme@redhat.com perf python: Decrement the refcount of just created event on failure

Arnaldo Carvalho de Melo acme@redhat.com perf python: Fixup description of sample.id event member

Stanley Chu yschu@nuvoton.com i3c: master: svc: Fix missing the IBI rules

Alistair Popple apopple@nvidia.com fuse: fix dax truncate/punch_hole fault path

Trond Myklebust trond.myklebust@hammerspace.com NFSv4: Don't trigger uneccessary scans for return-on-close delegations

Vasiliy Kovalev kovalev@altlinux.org ocfs2: validate l_tree_depth to avoid out-of-bounds access

Sourabh Jain sourabhjain@linux.ibm.com kexec: initialize ELF lowest address to ULONG_MAX

Arnaldo Carvalho de Melo acme@redhat.com perf units: Fix insufficient array space

Uwe Kleine-König u.kleine-koenig@baylibre.com iio: adc: ad7124: Fix comparison of channel configs

Dan Carpenter dan.carpenter@linaro.org fs/ntfs3: Fix a couple integer overflows on 32bit systems

Jonathan Cameron Jonathan.Cameron@huawei.com iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio

Ilkka Koskinen ilkka@os.amperecomputing.com coresight: catu: Fix number of pages while using 64k pages

Joe Hattori joe@pf.is.s.u-tokyo.ac.jp soundwire: slave: fix an OF node reference leak in soundwire slave device

Qasim Ijaz qasdev00@gmail.com isofs: fix KMSAN uninit-value bug in do_isofs_readdir()

Barnabás Czémán barnabas.czeman@mainlining.org clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock

Wenkai Lin linwenkai6@hisilicon.com crypto: hisilicon/sec2 - fix for aead auth key length

Jann Horn jannh@google.com x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment

Nikita Zhandarovich n.zhandarovich@fintech.ru mfd: sm501: Switch to BIT() to mitigate integer overflows

Patrisious Haddad phaddad@nvidia.com RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow

Herbert Xu herbert@gondor.apana.org.au crypto: nx - Fix uninitialised hv_nxc on error

Artur Weber aweber.kernel@gmail.com power: supply: max77693: Fix wrong conversion of charge input threshold value

Jann Horn jannh@google.com x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1

Jerome Brunet jbrunet@baylibre.com clk: amlogic: g12a: fix mmc A peripheral clock

Jerome Brunet jbrunet@baylibre.com clk: amlogic: gxbb: drop non existing 32k clock parent

Jerome Brunet jbrunet@baylibre.com clk: amlogic: g12b: fix cluster A parent data

Prathamesh Shete pshete@nvidia.com pinctrl: tegra: Set SFIO mode to Mux Register

Maher Sanalla msanalla@nvidia.com IB/mad: Check available slots before posting receive WRs

Luca Weiss luca@lucaweiss.eu remoteproc: qcom_q6v5_mss: Handle platforms with one power domain

Roman Gushchin roman.gushchin@linux.dev RDMA/core: Don't expose hw_counters outside of init net namespace

Peter Geis pgwipeout@gmail.com clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent

Fabrizio Castro fabrizio.castro.jz@renesas.com pinctrl: renesas: rzg2l: Fix missing of_node_put() call

Fabrizio Castro fabrizio.castro.jz@renesas.com pinctrl: renesas: rza2: Fix missing of_node_put() call

Tanya Agarwal tanyaagarwal25699@gmail.com lib: 842: Improve error handling in sw842_compress()

Hou Tao houtao1@huawei.com bpf: Use preempt_count() directly in bpf_send_signal_common()

Vladimir Lypak vladimir.lypak@gmail.com clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock

Will McVicker willmcvicker@google.com clk: samsung: Fix UBSAN panic in samsung_clk_init()

Andrii Nakryiko andrii@kernel.org libbpf: Fix hypothetical STT_SECTION extern NULL deref case

Luca Weiss luca@lucaweiss.eu remoteproc: qcom_q6v5_pas: Make single-PD handling more robust

Zijun Hu quic_zijuhu@quicinc.com of: property: Increase NR_FWNODE_REFERENCE_ARGS

Peng Fan peng.fan@nxp.com remoteproc: core: Clear table_sz when rproc_shutdown

Wenkai Lin linwenkai6@hisilicon.com crypto: hisilicon/sec2 - fix for aead authsize alignment

Jerome Brunet jbrunet@baylibre.com clk: amlogic: gxbb: drop incorrect flag on 32k clock

Danila Chernetsov listdansp@mail.ru fbdev: sm501fb: Add some geometry checks.

Arnd Bergmann arnd@arndb.de mdacon: rework dependency list

Markus Elfring elfring@users.sourceforge.net fbdev: au1100fb: Move a variable assignment behind a null pointer check

Ilpo Järvinen ilpo.jarvinen@linux.intel.com PCI: pciehp: Don't enable HPIE when resuming in poll mode

Dan Carpenter dan.carpenter@linaro.org drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()

Thippeswamy Havalige thippeswamy.havalige@amd.com PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe

Dan Carpenter dan.carpenter@linaro.org PCI: Remove stray put_device() in pci_register_host_bridge()

Vitaliy Shevtsov v.shevtsov@mt-integration.ru drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()

Nishanth Aravamudan naravamudan@nvidia.com PCI: Avoid reset when disabled via sysfs

Feng Tang feng.tang@linux.alibaba.com PCI/portdrv: Only disable pciehp interrupts early when needed

Jim Quinlan james.quinlan@broadcom.com PCI: brcmstb: Use internal register to change link capability

Hans Zhang 18255117159@163.com PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload

Daniel Stodden daniel.stodden@gmail.com PCI/ASPM: Fix link state exit during switch upstream function removal

AngeloGioacchino Del Regno angelogioacchino.delregno@collabora.com drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member

AngeloGioacchino Del Regno angelogioacchino.delregno@collabora.com drm/mediatek: mtk_hdmi: Unregister audio platform device on failure

José Expósito jose.exposito89@gmail.com drm/vkms: Fix use after free and double free on init error

Tomi Valkeinen tomi.valkeinen@ideasonboard.com drm: xlnx: zynqmp: Fix max dma segment size

Wayne Lin Wayne.Lin@amd.com drm/dp_mst: Fix drm RAD print

Geert Uytterhoeven geert+renesas@glider.be drm/bridge: ti-sn65dsi86: Fix multiple instances

Jayesh Choudhary j-choudhary@ti.com ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible

Takashi Iwai tiwai@suse.de ALSA: hda/realtek: Always honor no_shutup_pins

Jiri Kosina jkosina@suse.com HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER

Joe Hattori joe@pf.is.s.u-tokyo.ac.jp media: platform: allgro-dvt: unregister v4l2_device on the error path

Tao Chen chen.dylane@linux.dev perf/ring_buffer: Allow the EPOLLRDNORM flag for poll

Sebastian Andrzej Siewior bigeasy@linutronix.de lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()

Rafael J. Wysocki rafael.j.wysocki@intel.com PM: sleep: Fix handling devices with direct_complete set on errors

Chenyuan Yang chenyuan0y@gmail.com thermal: int340x: Add NULL check for adev

Qiuxu Zhuo qiuxu.zhuo@intel.com EDAC/ie31200: Fix the error path order of ie31200_init()

Qiuxu Zhuo qiuxu.zhuo@intel.com EDAC/ie31200: Fix the DIMM size mask for several SoCs

Qiuxu Zhuo qiuxu.zhuo@intel.com EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer

Tim Schumacher tim.schumacher1@huawei.com selinux: Chain up tool resolving errors in install_policy.sh

Rafael J. Wysocki rafael.j.wysocki@intel.com PM: sleep: Adjust check before setting power.must_resume

Arnd Bergmann arnd@arndb.de x86/platform: Only allow CONFIG_EISA for 32-bit

Benjamin Berg benjamin.berg@intel.com x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()

Jie Zhan zhanjie9@hisilicon.com cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()

zuoqian zuoqian113@gmail.com cpufreq: scpi: compare kHz instead of Hz

Mike Rapoport (Microsoft) rppt@kernel.org x86/mm/pat: cpa-test: fix length for CPA_ARRAY test

Eric Sandeen sandeen@redhat.com watch_queue: fix pipe accounting mismatch

Uwe Kleine-König u.kleine-koenig@pengutronix.de media: i2c: et8ek8: Don't strip remove function when driver is builtin

John Keeping jkeeping@inmusicbrands.com serial: 8250_dma: terminate correct DMA in tx_dma_flush()

Luo Qiu luoqiu@kylinsec.com.cn memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove

Dominique Martinet dominique.martinet@atmark-techno.com net: usb: usbnet: restore usb%d name exception for local mac addresses

Fabio Porcedda fabio.porcedda@gmail.com net: usb: qmi_wwan: add Telit Cinterion FE990B composition

Fabio Porcedda fabio.porcedda@gmail.com net: usb: qmi_wwan: add Telit Cinterion FN990B composition

Cameron Williams cang1@live.co.uk tty: serial: 8250: Add Brainboxes XC devices

Cameron Williams cang1@live.co.uk tty: serial: 8250: Add some more device IDs

William Breathitt Gray wbg@kernel.org counter: microchip-tcb-capture: Fix undefined counter channel state on probe

Fabrice Gasnier fabrice.gasnier@foss.st.com counter: stm32-lptimer-cnt: fix error handling when enabling

Dhruv Deshpande dhrv.d@proton.me ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx

Maxim Mikityanskiy maxtram95@gmail.com netfilter: socket: Lookup orig tuple for IPv6 SNAT

Yanjun Yang yangyj.ee@gmail.com ARM: Remove address checking for MMUless devices

Kees Cook keescook@chromium.org ARM: 9351/1: fault: Add "cut here" line for prefetch aborts

Kees Cook keescook@chromium.org ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()

Minjoong Kim pwn9uin@gmail.com atm: Fix NULL pointer dereference

Terry Junge linuxhid@cosmicgizmosystems.com HID: hid-plantronics: Add mic mute mapping and generalize quirks

Terry Junge linuxhid@cosmicgizmosystems.com ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names

Michal Luczaj mhal@rbox.co bpf, sockmap: Fix race between element replace and close()

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

Justin Klaassen justin@tidylabs.net arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S

Arthur Mongodin amongodin@randorisec.fr mptcp: Fix data stream corruption in the address announcement

David Rosca david.rosca@amd.com drm/amdgpu: Fix JPEG video caps max size for navi1x and raven

Nikita Zhandarovich n.zhandarovich@fintech.ru drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()

Saranya R quic_sarar@quicinc.com soc: qcom: pdr: Fix the potential deadlock

Sven Eckelmann sven@narfation.org batman-adv: Ignore own maximum aggregation size during RX

Geert Uytterhoeven geert+renesas@glider.be ARM: shmobile: smp: Enforce shmobile_smp_* alignment

Ye Bin yebin10@huawei.com proc: fix UAF in proc_get_inode()

Gu Bowen gubowen5@huawei.com mmc: atmel-mci: Add missing clk_disable_unprepare()

Christian Eggers ceggers@arri.de regulator: check that dummy regulator has been probed before using it

Maíra Canal mcanal@igalia.com drm/v3d: Don't run jobs that have errors flagged in its fence

Andreas Kemnade andreas@kemnade.info i2c: omap: fix IRQ storms

Guillaume Nault gnault@redhat.com Revert "gre: Fix IPv6 link-local address generation."

Lin Ma linma@zju.edu.cn net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES

Dan Carpenter dan.carpenter@linaro.org net: atm: fix use after free in lec_send()

Kuniyuki Iwashima kuniyu@amazon.com ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().

Kuniyuki Iwashima kuniyu@amazon.com ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().

Dan Carpenter dan.carpenter@linaro.org Bluetooth: Fix error code in chan_alloc_skb_cb()

Junxian Huang huangjunxian6@hisilicon.com RDMA/hns: Fix wrong value of max_sge_rd

Junxian Huang huangjunxian6@hisilicon.com RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()

Junxian Huang huangjunxian6@hisilicon.com RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()

Junxian Huang huangjunxian6@hisilicon.com RDMA/hns: Fix soft lockup during bt pages loop

Chengchang Tang tangchengchang@huawei.com RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt()

Saravanan Vajravel saravanan.vajravel@broadcom.com RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path

Phil Elwell phil@raspberrypi.com ARM: dts: bcm2711: Don't mark timer regs unconfigured

Kashyap Desai kashyap.desai@broadcom.com RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx

Phil Elwell phil@raspberrypi.com ARM: dts: bcm2711: PL011 UARTs are actually r1p5

Cosmin Ratiu cratiu@nvidia.com xfrm_output: Force software GSO only in tunnel mode

Joe Hattori joe@pf.is.s.u-tokyo.ac.jp firmware: imx-scu: fix OF node leak in .probe()

Paulo Alcantara pc@manguebit.com smb: client: fix potential UAF in cifs_debug_files_proc_show()

Henrique Carvalho henrique.carvalho@suse.com smb: client: Fix match_session bug preventing session reuse

Ma Ke make24@iscas.ac.cn drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

Michael Strauss michael.strauss@amd.com drm/amd/display: Check for invalid input params when building scaling params

Christophe JAILLET christophe.jaillet@wanadoo.fr i2c: sis630: Fix an error handling path in sis630_probe()

Christophe JAILLET christophe.jaillet@wanadoo.fr i2c: ali15x3: Fix an error handling path in ali15x3_probe()

Christophe JAILLET christophe.jaillet@wanadoo.fr i2c: ali1535: Fix an error handling path in ali1535_probe()

Murad Masimov m.masimov@mt-integration.ru cifs: Fix integer overflow while processing closetimeo mount option

Murad Masimov m.masimov@mt-integration.ru cifs: Fix integer overflow while processing actimeo mount option

Murad Masimov m.masimov@mt-integration.ru cifs: Fix integer overflow while processing acdirmax mount option

Murad Masimov m.masimov@mt-integration.ru cifs: Fix integer overflow while processing acregmax mount option

Christophe JAILLET christophe.jaillet@wanadoo.fr ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()

Ivan Abramov i.abramov@mt-integration.ru drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()

Charles Keepax ckeepax@opensource.cirrus.com ASoC: ops: Consistently treat platform_max as control value

Eric Dumazet edumazet@google.com tcp: fix races in tcp_abort()

Andrii Nakryiko andrii@kernel.org lib/buildid: Handle memfd_secret() files in build_id_parse()

Haoxiang Li haoxiang_li2024@163.com qlcnic: fix memory leak issues in qlcnic_sriov_common.c

Mario Limonciello mario.limonciello@amd.com drm/amd/display: Fix slab-use-after-free on hdcp_work

Alex Hung alex.hung@amd.com drm/amd/display: Assign normalized_pix_clk when color depth = 14

Mario Limonciello mario.limonciello@amd.com drm/amd/display: Restore correct backlight brightness after a GPU reset

Ville Syrjälä ville.syrjala@linux.intel.com drm/atomic: Filter out redundant DPMS calls

Florent Revest revest@chromium.org x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes

Johan Hovold johan@kernel.org USB: serial: option: match on interface class for Telit FN990B

Fabio Porcedda fabio.porcedda@gmail.com USB: serial: option: fix Telit Cinterion FE990A name

Fabio Porcedda fabio.porcedda@gmail.com USB: serial: option: add Telit Cinterion FE990B compositions

Boon Khai Ng boon.khai.ng@intel.com USB: serial: ftdi_sio: add support for Altera USB Blaster 3

Ming Lei ming.lei@redhat.com block: fix 'kmem_cache of name 'bio-108' already exists'

Thomas Zimmermann tzimmermann@suse.de drm/nouveau: Do not override forced connector status

Matthieu Baerts (NGI0) matttbe@kernel.org mptcp: safety check before fallback

Arnd Bergmann arnd@arndb.de x86/irq: Define trace events conditionally

Miklos Szeredi mszeredi@redhat.com fuse: don't truncate cached, mutated symlink

Hector Martin marcan@marcan.st ASoC: tas2764: Set the SDOUT polarity correctly

Hector Martin marcan@marcan.st ASoC: tas2764: Fix power control mask

Hector Martin marcan@marcan.st ASoC: tas2770: Fix volume scale

Daniel Wagner wagi@kernel.org nvme: only allow entering LIVE from CONNECTING state

Yu-Chun Lin eleanor15x@gmail.com sctp: Fix undefined behavior in left shift operation

Ruozhu Li david.li@jaguarmicro.com nvmet-rdma: recheck queue state is LIVE in state lock in recv done

Stephan Gerhold stephan.gerhold@linaro.org net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors

Terry Cheong htcheong@chromium.org ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module

Vitaly Rodionov vitalyr@opensource.cirrus.com ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.

Kuninori Morimoto kuninori.morimoto.gx@renesas.com ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()

Daniel Lezcano daniel.lezcano@linaro.org thermal/cpufreq_cooling: Remove structure member documentation

Peter Oberparleiter oberpar@linux.ibm.com s390/cio: Fix CHPID "configure" attribute caching

Jann Horn jannh@google.com sched: Clarify wake_up_q()'s write to task->wake_q.next

Chia-Lin Kao (AceLan) acelan.kao@canonical.com HID: ignore non-functional sensor in HP 5MP Camera

Zhang Lixu lixu.zhang@intel.com HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell

Brahmajit Das brahmajit.xyz@gmail.com vboxsf: fix building with GCC 15

Eric W. Biederman ebiederm@xmission.com alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support

Gannon Kolding gannon.kolding@gmail.com ACPI: resource: IRQ override for Eluktronics MECH-17

Magnus Lindholm linmag7@gmail.com scsi: qla1280: Fix kernel oops when debug level > 2

Rik van Riel riel@surriel.com scsi: core: Use GFP_NOIO to avoid circular locking dependency

Chengen Du chengen.du@canonical.com iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

Joe Hattori joe@pf.is.s.u-tokyo.ac.jp powercap: call put_device() on an error path in powercap_register_control_type()

Andy Shevchenko andriy.shevchenko@linux.intel.com hrtimers: Mark is_migration_base() with __always_inline

Daniel Wagner wagi@kernel.org nvme-fc: go straight to connecting state when initializing

Carolina Jubran cjubran@nvidia.com net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices

Jianbo Liu jianbol@nvidia.com net/mlx5: Bridge, fix the crash caused by LAG state check

Ilya Maximets i.maximets@ovn.org net: openvswitch: remove misbehaving actions length check

Kees Cook keescook@chromium.org openvswitch: Use kmalloc_size_roundup() to match ksize() usage

Kees Cook keescook@chromium.org slab: Introduce kmalloc_size_roundup()

Kees Cook keescook@chromium.org slab: clean up function prototypes

Guillaume Nault gnault@redhat.com gre: Fix IPv6 link-local address generation.

Alexey Kashavkin akashavkin@gmail.com netfilter: nft_exthdr: fix offset with ipv4_find_option()

Cong Wang xiyou.wangcong@gmail.com net_sched: Prevent creation of classes with TC_H_ROOT

Dan Carpenter dan.carpenter@linaro.org ipvs: prevent integer overflow in do_ip_vs_get_ctl()

Kohei Enju enjuk@amazon.com netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()

Wentao Liang vulab@iscas.ac.cn net/mlx5: handle errors in mlx5_chains_create_table()

Michael Kelley mhklinux@outlook.com Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()

Breno Leitao leitao@debian.org netpoll: hold rcu read lock in __netpoll_send_skb()

Joseph Huang Joseph.Huang@garmin.com net: dsa: mv88e6xxx: Verify after ATU Load ops

Grzegorz Nitka grzegorz.nitka@intel.com ice: fix memory leak in aRFS after reset

Sebastian Andrzej Siewior bigeasy@linutronix.de netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.

Artur Weber aweber.kernel@gmail.com pinctrl: bcm281xx: Fix incorrect regmap max_registers value

Michael Kelley mhklinux@outlook.com fbdev: hyperv_fb: iounmap() the correct memory when removing a device

Wang Yufen wangyufen@huawei.com ipv6: Fix signed integer overflow in __ip6_append_data

Oleg Nesterov oleg@redhat.com sched/isolation: Prevent boot crash when the boot CPU is nohz_full

David Woodhouse dwmw@amazon.co.uk clockevents/drivers/i8253: Fix stop sequence for timer 0

Eric Dumazet edumazet@google.com vlan: fix memory leak in vlan_newlink()

-------------

Diffstat:

Documentation/timers/no_hz.rst | 7 +- Makefile | 4 +- arch/alpha/include/asm/elf.h | 6 +- arch/alpha/include/asm/pgtable.h | 2 +- arch/alpha/include/asm/processor.h | 8 +- arch/alpha/kernel/osf_sys.c | 11 +- arch/arm/boot/dts/bcm2711.dtsi | 11 +- arch/arm/mach-shmobile/headsmp.S | 1 + arch/arm/mm/fault.c | 8 + arch/arm64/boot/dts/rockchip/rk3399-nanopi-r4s.dts | 2 +- arch/powerpc/platforms/cell/spufs/inode.c | 9 +- arch/riscv/include/asm/ftrace.h | 4 +- arch/x86/Kconfig | 2 +- arch/x86/entry/calling.h | 2 + arch/x86/include/asm/tlbflush.h | 2 +- arch/x86/kernel/cpu/microcode/amd.c | 2 +- arch/x86/kernel/cpu/mshyperv.c | 11 -- arch/x86/kernel/cpu/sgx/driver.c | 10 +- arch/x86/kernel/dumpstack.c | 5 +- arch/x86/kernel/irq.c | 2 + arch/x86/kernel/process.c | 7 +- arch/x86/kernel/tsc.c | 4 +- arch/x86/mm/pat/cpa-test.c | 2 +- block/bio.c | 2 +- drivers/acpi/nfit/core.c | 2 +- drivers/acpi/processor_idle.c | 4 + drivers/acpi/resource.c | 13 ++ drivers/base/power/main.c | 21 +-- drivers/base/power/runtime.c | 2 +- drivers/clk/meson/g12a.c | 38 ++-- drivers/clk/meson/gxbb.c | 14 +- drivers/clk/qcom/gcc-msm8953.c | 2 +- drivers/clk/qcom/mmcc-sdm660.c | 2 +- drivers/clk/rockchip/clk-rk3328.c | 2 +- drivers/clk/samsung/clk.c | 2 +- drivers/clocksource/i8253.c | 36 ++-- drivers/counter/microchip-tcb-capture.c | 19 ++ drivers/counter/stm32-lptimer-cnt.c | 24 ++- drivers/cpufreq/cpufreq_governor.c | 45 ++--- drivers/cpufreq/scpi-cpufreq.c | 5 +- drivers/crypto/hisilicon/sec2/sec_crypto.c | 30 ++- drivers/crypto/nx/nx-common-pseries.c | 37 ++-- drivers/edac/ie31200_edac.c | 19 +- drivers/firmware/imx/imx-scu.c | 1 + drivers/firmware/iscsi_ibft.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 11 +- drivers/gpu/drm/amd/amdgpu/nv.c | 2 +- drivers/gpu/drm/amd/amdgpu/soc15.c | 2 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 15 ++ .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c | 1 + drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 17 +- .../amd/display/dc/dml/dcn30/display_mode_vba_30.c | 12 +- .../gpu/drm/amd/display/dc/dml/display_mode_vba.c | 24 +++ drivers/gpu/drm/amd/pm/swsmu/smu11/navi10_ppt.c | 21 ++- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 2 + drivers/gpu/drm/drm_atomic_uapi.c | 4 + drivers/gpu/drm/drm_connector.c | 4 + drivers/gpu/drm/drm_dp_mst_topology.c | 8 +- drivers/gpu/drm/gma500/mid_bios.c | 5 + drivers/gpu/drm/mediatek/mtk_dsi.c | 6 +- drivers/gpu/drm/mediatek/mtk_hdmi.c | 33 +++- drivers/gpu/drm/nouveau/nouveau_connector.c | 1 - drivers/gpu/drm/radeon/radeon_vce.c | 2 +- drivers/gpu/drm/v3d/v3d_sched.c | 9 +- drivers/gpu/drm/vkms/vkms_drv.c | 15 +- drivers/gpu/drm/xlnx/zynqmp_dpsub.c | 2 + drivers/hid/Makefile | 1 - drivers/hid/hid-ids.h | 1 + drivers/hid/hid-plantronics.c | 144 +++++++-------- drivers/hid/hid-quirks.c | 1 + drivers/hid/intel-ish-hid/ipc/ipc.c | 6 +- drivers/hv/vmbus_drv.c | 13 ++ drivers/hwmon/nct6775.c | 4 +- drivers/hwtracing/coresight/coresight-catu.c | 2 +- drivers/i2c/busses/i2c-ali1535.c | 12 +- drivers/i2c/busses/i2c-ali15x3.c | 12 +- drivers/i2c/busses/i2c-omap.c | 26 +-- drivers/i2c/busses/i2c-sis630.c | 12 +- drivers/i3c/master/svc-i3c-master.c | 2 +- drivers/iio/accel/mma8452.c | 10 +- drivers/iio/adc/ad7124.c | 35 +++- drivers/infiniband/core/device.c | 9 + drivers/infiniband/core/mad.c | 38 ++-- drivers/infiniband/core/sysfs.c | 1 + drivers/infiniband/hw/bnxt_re/qplib_fp.c | 2 - drivers/infiniband/hw/bnxt_re/qplib_rcfw.h | 3 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 23 ++- drivers/infiniband/hw/hns/hns_roce_hem.h | 2 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/hns/hns_roce_mr.c | 4 +- drivers/infiniband/hw/hns/hns_roce_qp.c | 10 +- drivers/infiniband/hw/mlx5/cq.c | 2 +- drivers/media/dvb-frontends/dib8000.c | 5 +- drivers/media/i2c/et8ek8/et8ek8_driver.c | 4 +- drivers/media/platform/allegro-dvt/allegro-core.c | 1 + drivers/memstick/host/rtsx_usb_ms.c | 1 + drivers/mfd/sm501.c | 6 +- drivers/mmc/host/atmel-mci.c | 4 +- drivers/mmc/host/sdhci-brcmstb.c | 86 ++++++++- drivers/mmc/host/sdhci-pxav3.c | 1 + drivers/net/arcnet/com20020-pci.c | 17 +- drivers/net/can/flexcan.c | 18 +- drivers/net/dsa/mv88e6xxx/chip.c | 59 ++++-- drivers/net/ethernet/intel/ice/ice_arfs.c | 2 +- drivers/net/ethernet/marvell/mvpp2/mvpp2.h | 3 + drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 3 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_prs.c | 201 ++++++++++++++------- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 2 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 2 +- .../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 12 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 6 +- .../ethernet/mellanox/mlx5/core/lib/fs_chains.c | 5 + .../ethernet/qlogic/qlcnic/qlcnic_sriov_common.c | 8 +- drivers/net/usb/qmi_wwan.c | 2 + drivers/net/usb/usbnet.c | 27 ++- drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 86 ++++++--- drivers/net/wwan/mhi_wwan_mbim.c | 2 +- drivers/ntb/hw/intel/ntb_hw_gen3.c | 3 + drivers/ntb/hw/mscc/ntb_hw_switchtec.c | 2 +- drivers/ntb/test/ntb_perf.c | 4 +- drivers/nvme/host/core.c | 2 - drivers/nvme/host/fc.c | 3 +- drivers/nvme/host/pci.c | 21 ++- drivers/nvme/host/tcp.c | 5 +- drivers/nvme/target/rdma.c | 33 +++- drivers/pci/controller/cadence/pcie-cadence-ep.c | 3 +- drivers/pci/controller/cadence/pcie-cadence.h | 2 +- drivers/pci/controller/pcie-brcmstb.c | 4 +- drivers/pci/controller/pcie-xilinx-cpm.c | 10 +- drivers/pci/hotplug/pciehp_hpc.c | 4 +- drivers/pci/pci.c | 4 + drivers/pci/pcie/aspm.c | 17 +- drivers/pci/pcie/portdrv_core.c | 8 +- drivers/pci/probe.c | 5 +- drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 2 +- drivers/pinctrl/renesas/pinctrl-rza2.c | 2 + drivers/pinctrl/renesas/pinctrl-rzg2l.c | 2 + drivers/pinctrl/tegra/pinctrl-tegra.c | 3 + .../x86/intel/speed_select_if/isst_if_common.c | 2 +- drivers/power/supply/max77693_charger.c | 2 +- drivers/powercap/powercap_sys.c | 3 +- drivers/regulator/core.c | 12 +- drivers/remoteproc/qcom_q6v5_mss.c | 21 ++- drivers/remoteproc/qcom_q6v5_pas.c | 10 +- drivers/remoteproc/remoteproc_core.c | 1 + drivers/s390/cio/chp.c | 3 +- drivers/scsi/qla1280.c | 2 +- drivers/scsi/scsi_scan.c | 2 +- drivers/soc/qcom/pdr_interface.c | 8 +- drivers/soundwire/slave.c | 1 + drivers/thermal/cpufreq_cooling.c | 2 - .../intel/int340x_thermal/int3402_thermal.c | 3 + drivers/tty/serial/8250/8250_dma.c | 2 +- drivers/tty/serial/8250/8250_pci.c | 46 +++++ drivers/tty/serial/fsl_lpuart.c | 25 ++- drivers/usb/serial/ftdi_sio.c | 14 ++ drivers/usb/serial/ftdi_sio_ids.h | 13 ++ drivers/usb/serial/option.c | 48 +++-- drivers/video/console/Kconfig | 2 +- drivers/video/fbdev/au1100fb.c | 4 +- drivers/video/fbdev/hyperv_fb.c | 2 +- drivers/video/fbdev/sm501fb.c | 7 + fs/affs/file.c | 9 +- fs/btrfs/extent-tree.c | 5 +- fs/cifs/cifs_debug.c | 2 + fs/cifs/cifsglob.h | 8 + fs/cifs/connect.c | 15 +- fs/cifs/fs_context.c | 14 +- fs/exfat/fatent.c | 2 +- fs/ext4/dir.c | 3 + fs/ext4/super.c | 27 ++- fs/fuse/dax.c | 1 - fs/fuse/dir.c | 4 +- fs/fuse/file.c | 4 +- fs/isofs/dir.c | 3 +- fs/jfs/jfs_dtree.c | 3 +- fs/jfs/xattr.c | 13 +- fs/ksmbd/auth.c | 2 +- fs/ksmbd/mgmt/user_session.c | 16 ++ fs/ksmbd/mgmt/user_session.h | 2 + fs/ksmbd/smb2pdu.c | 12 +- fs/ksmbd/smbacl.c | 5 +- fs/namei.c | 24 ++- fs/nfs/delegation.c | 33 ++-- fs/nfsd/nfs4state.c | 31 +++- fs/ntfs3/index.c | 4 +- fs/ocfs2/alloc.c | 8 + fs/proc/base.c | 2 +- fs/proc/generic.c | 10 +- fs/proc/inode.c | 6 +- fs/proc/internal.h | 14 ++ fs/vboxsf/super.c | 3 +- include/drm/drm_dp_mst_helper.h | 7 + include/linux/fs.h | 2 + include/linux/fwnode.h | 2 +- include/linux/i8253.h | 1 - include/linux/interrupt.h | 8 +- include/linux/pm_runtime.h | 2 + include/linux/proc_fs.h | 7 +- include/linux/sched/smt.h | 2 +- include/linux/slab.h | 99 ++++++---- include/net/ipv6.h | 4 +- include/rdma/ib_verbs.h | 1 + include/sound/soc.h | 5 +- kernel/events/ring_buffer.c | 2 +- kernel/kexec_elf.c | 2 +- kernel/locking/semaphore.c | 13 +- kernel/sched/core.c | 5 +- kernel/sched/deadline.c | 2 +- kernel/time/hrtimer.c | 22 ++- kernel/trace/bpf_trace.c | 2 +- kernel/trace/ring_buffer.c | 4 +- kernel/trace/trace_events_synth.c | 33 +++- kernel/trace/trace_functions_graph.c | 1 + kernel/trace/trace_irqsoff.c | 2 - kernel/trace/trace_osnoise.c | 1 - kernel/trace/trace_sched_wakeup.c | 2 - kernel/watch_queue.c | 9 + lib/842/842_compress.c | 2 + lib/buildid.c | 5 + mm/slab.c | 9 +- mm/slab_common.c | 34 ++-- mm/slob.c | 14 ++ net/8021q/vlan_netlink.c | 10 +- net/atm/lec.c | 3 +- net/atm/mpc.c | 2 + net/batman-adv/bat_iv_ogm.c | 3 +- net/batman-adv/bat_v_ogm.c | 3 +- net/bluetooth/6lowpan.c | 7 +- net/bluetooth/hci_event.c | 13 +- net/can/af_can.c | 12 +- net/can/af_can.h | 12 +- net/can/proc.c | 46 +++-- net/core/neighbour.c | 1 + net/core/netpoll.c | 9 +- net/core/rtnetlink.c | 3 + net/core/sock_map.c | 5 +- net/ipv4/ip_tunnel_core.c | 4 +- net/ipv4/tcp.c | 6 +- net/ipv6/addrconf.c | 37 ++-- net/ipv6/calipso.c | 21 ++- net/ipv6/ip6_output.c | 6 +- net/ipv6/netfilter/nf_socket_ipv6.c | 23 +++ net/ipv6/route.c | 5 +- net/mptcp/options.c | 6 +- net/mptcp/protocol.h | 2 + net/netfilter/ipvs/ip_vs_ctl.c | 8 +- net/netfilter/nf_conncount.c | 2 + net/netfilter/nft_ct.c | 6 +- net/netfilter/nft_exthdr.c | 10 +- net/netfilter/nft_set_hash.c | 3 +- net/netfilter/nft_tunnel.c | 6 +- net/openvswitch/actions.c | 6 - net/openvswitch/flow_netlink.c | 17 +- net/sched/act_tunnel_key.c | 2 +- net/sched/cls_flower.c | 2 +- net/sched/sch_api.c | 6 + net/sched/sch_skbprio.c | 3 - net/sctp/stream.c | 2 +- net/vmw_vsock/af_vsock.c | 6 +- net/xfrm/xfrm_output.c | 2 +- scripts/selinux/install_policy.sh | 15 +- sound/pci/hda/patch_realtek.c | 28 ++- sound/soc/codecs/arizona.c | 14 +- sound/soc/codecs/madera.c | 10 +- sound/soc/codecs/tas2764.c | 10 +- sound/soc/codecs/tas2764.h | 8 +- sound/soc/codecs/tas2770.c | 2 +- sound/soc/codecs/wm0010.c | 13 +- sound/soc/codecs/wm5110.c | 8 +- sound/soc/fsl/imx-card.c | 4 + sound/soc/sh/rcar/core.c | 14 -- sound/soc/sh/rcar/rsnd.h | 1 - sound/soc/sh/rcar/src.c | 18 +- sound/soc/soc-ops.c | 15 +- sound/soc/sof/intel/hda-codec.c | 1 + sound/soc/ti/j721e-evm.c | 2 + sound/usb/mixer_quirks.c | 51 ++++++ tools/lib/bpf/linker.c | 2 +- tools/perf/util/python.c | 17 +- tools/perf/util/units.c | 2 +- 281 files changed, 2101 insertions(+), 1000 deletions(-)