This is the start of the stable review cycle for the 5.15.192 release. There are 64 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Tue, 09 Sep 2025 19:55:53 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.192-rc... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 5.15.192-rc1

Qiu-ji Chen chenqiuji666@gmail.com dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()

Aaron Kling webgeek1234@gmail.com spi: tegra114: Use value to check for invalid delays

Taniya Das quic_tdas@quicinc.com clk: qcom: gdsc: Set retain_ff before moving to HW CTRL

Ian Rogers irogers@google.com perf bpf-event: Fix use-after-free in synthesis

Michael Walle mwalle@kernel.org drm/bridge: ti-sn65dsi86: fix REFCLK setting

Larisa Grigore larisa.grigore@nxp.com spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort

Larisa Grigore larisa.grigore@nxp.com spi: spi-fsl-lpspi: Set correct chip-select polarity bit

Larisa Grigore larisa.grigore@nxp.com spi: spi-fsl-lpspi: Fix transmissions when using CONT

Wentao Liang vulab@iscas.ac.cn pcmcia: Add error handling for add_interval() in do_validate_mem()

Takashi Iwai tiwai@suse.de ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model

Li Qiong liqiong@nfschina.com mm/slub: avoid accessing metadata when pointer is invalid in object_err()

Kees Cook kees@kernel.org randstruct: gcc-plugin: Fix attribute addition

Kees Cook kees@kernel.org randstruct: gcc-plugin: Remove bogus void member

Gabor Juhos j4g8y7@gmail.com arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs

Ronak Doshi ronak.doshi@broadcom.com vmxnet3: update MTU after device quiesce

Jakob Unterwurzacher jakobunt@gmail.com net: dsa: microchip: linearize skb for tail-tagging switches

Pieter Van Trappen pieter.van.trappen@cern.ch net: dsa: microchip: update tag_ksz masks for KSZ9477 family

Qiu-ji Chen chenqiuji666@gmail.com dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()

Hyejeong Choi hjeong.choi@samsung.com dma-buf: insert memory barrier before updating num_fences

Emanuele Ghidoli emanuele.ghidoli@toradex.com gpio: pca953x: fix IRQ storm on system wake up

Luca Ceresoli luca.ceresoli@bootlin.com iio: light: opt3001: fix deadlock due to concurrent flag access

David Lechner dlechner@baylibre.com iio: chemical: pms7003: use aligned_s64 for timestamp

Aaron Kling webgeek1234@gmail.com spi: tegra114: Don't fail set_cs_timing when delays are zero

Alexander Danilenko al.b.danilenko@gmail.com spi: tegra114: Remove unnecessary NULL-pointer checks

Sean Christopherson seanjc@google.com KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer

Rafael J. Wysocki rafael.j.wysocki@intel.com cpufreq/sched: Explicitly synchronize limits_changed flag handling

Jann Horn jannh@google.com mm/khugepaged: fix ->anon_vma race

Vitaly Lifshits vitaly.lifshits@intel.com e1000e: fix heap overflow in e1000_set_eeprom

Stanislav Fort stanislav.fort@aisle.com batman-adv: fix OOB read/write in network-coding decode

John Evans evans1210144@gmail.com scsi: lpfc: Fix buffer free/clear order in deferred receive path

Alex Deucher alexander.deucher@amd.com drm/amdgpu: drop hw access in non-DC audio fini

Qianfeng Rong rongqianfeng@vivo.com wifi: mwifiex: Initialize the chan_stats array to zero

Harry Yoo harry.yoo@oracle.com mm: move page table sync declarations to linux/pgtable.h

Harry Yoo harry.yoo@oracle.com x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()

Ma Ke make24@iscas.ac.cn pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()

Cryolitia PukNgae cryolitia@uniontech.com ALSA: usb-audio: Add mute TLV for playback volumes on some devices

Horatiu Vultur horatiu.vultur@microchip.com phy: mscc: Stop taking ts_lock for tx_queue and use its own lock

Horatiu Vultur horatiu.vultur@microchip.com net: phy: mscc: Fix memory leak when using one step timestamping

Kurt Kanzenbach kurt@linutronix.de ptp: Add generic PTP is_sync() function

Qingfang Deng dqfext@gmail.com ppp: fix memory leak in pad_compress_skb

Wang Liang wangliang74@huawei.com net: atm: fix memory leak in atm_register_sysfs when device_register fail

Eric Dumazet edumazet@google.com ax25: properly unshare skbs in ax25_kiss_rcv()

Dan Carpenter dan.carpenter@linaro.org ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()

Rosen Penev rosenp@gmail.com net: thunder_bgx: decrement cleanup index before use

Rosen Penev rosenp@gmail.com net: thunder_bgx: add a missing of_node_put

Dan Carpenter dan.carpenter@linaro.org wifi: libertas: cap SSID len in lbs_associate()

Dan Carpenter dan.carpenter@linaro.org wifi: cw1200: cap SSID length in cw1200_do_join()

Felix Fietkau nbd@nbd.name net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets

Zhen Ni zhen.ni@easystack.cn i40e: Fix potential invalid access when MAC list is empty

Fabian Bläse fabian@blaese.de icmp: fix icmp_ndo_send address translation for reply direction

Miaoqian Lin linmq006@gmail.com mISDN: Fix memory leak in dsp_hwec_enable()

Alok Tiwari alok.a.tiwari@oracle.com xirc2ps_cs: fix register access when enabling FullDuplex

Kuniyuki Iwashima kuniyu@google.com Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()

Phil Sutter phil@nwl.cc netfilter: conntrack: helper: Replace -EEXIST by -EBUSY

Wang Liang wangliang74@huawei.com netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm

Dmitry Antipov dmantipov@yandex.ru wifi: cfg80211: fix use-after-free in cmp_bss()

Peter Robinson pbrobinson@gmail.com arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro

Pei Xiao xiaopei01@kylinos.cn tee: fix NULL pointer dereference in tee_shm_put

Jiufei Xue jiufei.xue@samsung.com fs: writeback: fix use-after-free in __mark_inode_dirty()

Timur Kristóf timur.kristof@gmail.com drm/amd/display: Don't warn when missing DCE encoder caps

Daniel Borkmann daniel@iogearbox.net bpf: Fix oob access in cgroup local storage

Daniel Borkmann daniel@iogearbox.net bpf: Move bpf map owner out of common struct

Daniel Borkmann daniel@iogearbox.net bpf: Move cgroup iterator helpers to bpf.h

Daniel Borkmann daniel@iogearbox.net bpf: Add cookie object to bpf maps

-------------

Diffstat:

Makefile | 4 +- arch/arm64/boot/dts/marvell/armada-3720-uDPU.dts | 9 +- .../boot/dts/rockchip/rk3399-pinebook-pro.dts | 1 + arch/x86/include/asm/pgtable_64_types.h | 3 + arch/x86/kvm/x86.c | 18 ++- arch/x86/mm/init_64.c | 18 +++ drivers/clk/qcom/gdsc.c | 21 ++-- drivers/dma-buf/dma-resv.c | 5 +- drivers/dma/mediatek/mtk-cqdma.c | 10 +- drivers/gpio/gpio-pca953x.c | 5 + drivers/gpu/drm/amd/amdgpu/dce_v10_0.c | 5 - drivers/gpu/drm/amd/amdgpu/dce_v11_0.c | 5 - drivers/gpu/drm/amd/amdgpu/dce_v6_0.c | 5 - drivers/gpu/drm/amd/amdgpu/dce_v8_0.c | 5 - .../gpu/drm/amd/display/dc/dce/dce_link_encoder.c | 8 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 11 ++ drivers/iio/chemical/pms7003.c | 5 +- drivers/iio/light/opt3001.c | 5 +- drivers/isdn/mISDN/dsp_hwec.c | 6 +- drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 20 +-- drivers/net/ethernet/intel/e1000e/ethtool.c | 10 +- drivers/net/ethernet/intel/i40e/i40e_client.c | 4 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 10 +- drivers/net/ethernet/xircom/xirc2ps_cs.c | 2 +- drivers/net/phy/mscc/mscc_ptp.c | 34 +++--- drivers/net/ppp/ppp_generic.c | 6 +- drivers/net/vmxnet3/vmxnet3_drv.c | 5 +- drivers/net/wireless/marvell/libertas/cfg.c | 9 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 5 +- drivers/net/wireless/marvell/mwifiex/main.c | 4 +- drivers/net/wireless/st/cw1200/sta.c | 2 +- drivers/pcmcia/rsrc_iodyn.c | 3 + drivers/pcmcia/rsrc_nonstatic.c | 4 +- drivers/scsi/lpfc/lpfc_nvmet.c | 10 +- drivers/spi/spi-fsl-lpspi.c | 15 +-- drivers/spi/spi-tegra114.c | 18 ++- drivers/tee/tee_shm.c | 6 +- fs/fs-writeback.c | 9 +- include/linux/bpf-cgroup.h | 5 - include/linux/bpf.h | 134 ++++++++++++++++++--- include/linux/pgtable.h | 16 +++ include/linux/ptp_classify.h | 15 +++ include/linux/vmalloc.h | 16 --- kernel/bpf/arraymap.c | 1 - kernel/bpf/core.c | 83 ++++++++++--- kernel/bpf/syscall.c | 22 ++-- kernel/sched/cpufreq_schedutil.c | 28 ++++- mm/khugepaged.c | 15 ++- mm/slub.c | 7 +- net/atm/resources.c | 6 +- net/ax25/ax25_in.c | 4 + net/batman-adv/network-coding.c | 7 +- net/bluetooth/l2cap_sock.c | 3 + net/bridge/br_netfilter_hooks.c | 3 - net/core/ptp_classifier.c | 12 ++ net/dsa/tag_ksz.c | 22 +++- net/ipv4/devinet.c | 7 +- net/ipv4/icmp.c | 6 +- net/ipv6/ip6_icmp.c | 6 +- net/netfilter/nf_conntrack_helper.c | 4 +- net/wireless/scan.c | 3 +- scripts/gcc-plugins/gcc-common.h | 32 +++++ scripts/gcc-plugins/randomize_layout_plugin.c | 40 ++---- sound/pci/hda/patch_hdmi.c | 1 + sound/usb/mixer_quirks.c | 2 + tools/perf/util/bpf-event.c | 39 ++++-- 66 files changed, 600 insertions(+), 264 deletions(-)