October 2022 - Linux-stable-mirror

[PATCH] soc: ux500: do not directly dereference __iomem

by Jason A. Donenfeld

Sparse reports that calling add_device_randomness() on `uid` is a violation of address spaces. And indeed the next usage uses readl() properly, but that was left out when passing it toadd_device_ randomness(). So instead copy the whole thing to the stack first. Fixes: 4040d10a3d44 ("ARM: ux500: add DB serial number to entropy pool") Cc: Linus Walleij <linus.walleij(a)linaro.org> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/all/202210230819.loF90KDh-lkp@intel.com/ Reported-by: kernel test robot <lkp(a)intel.com> Signed-off-by: Jason A. Donenfeld <Jason(a)zx2c4.com> --- Untested, but hopefully correct. drivers/soc/ux500/ux500-soc-id.c | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/drivers/soc/ux500/ux500-soc-id.c b/drivers/soc/ux500/ux500-soc-id.c index a9472e0e5d61..27d6e25a0115 100644 --- a/drivers/soc/ux500/ux500-soc-id.c +++ b/drivers/soc/ux500/ux500-soc-id.c @@ -167,20 +167,18 @@ ATTRIBUTE_GROUPS(ux500_soc); static const char *db8500_read_soc_id(struct device_node *backupram) { void __iomem *base; - void __iomem *uid; const char *retstr; + u32 uid[5]; base = of_iomap(backupram, 0); if (!base) return NULL; - uid = base + 0x1fc0; + memcpy_fromio(uid, base + 0x1fc0, sizeof(uid)); /* Throw these device-specific numbers into the entropy pool */ - add_device_randomness(uid, 0x14); + add_device_randomness(uid, sizeof(uid)); retstr = kasprintf(GFP_KERNEL, "%08x%08x%08x%08x%08x", - readl((u32 *)uid+0), - readl((u32 *)uid+1), readl((u32 *)uid+2), - readl((u32 *)uid+3), readl((u32 *)uid+4)); + uid[0], uid[1], uid[2], uid[3], uid[4]); iounmap(base); return retstr; } -- 2.38.1

3 years, 1 month

1
2
0 0

[PATCH] staging: media: tegra-video: fix device_node use after free

by luca.ceresoli＠bootlin.com

From: Luca Ceresoli <luca.ceresoli(a)bootlin.com> At probe time this code path is followed: * tegra_csi_init * tegra_csi_channels_alloc * for_each_child_of_node(node, channel) -- iterates over channels * automatically gets 'channel' * tegra_csi_channel_alloc() * saves into chan->of_node a pointer to the channel OF node * automatically gets and puts 'channel' * now the node saved in chan->of_node has refcount 0, can disappear * tegra_csi_channels_init * iterates over channels * tegra_csi_channel_init -- uses chan->of_node After that, chan->of_node keeps storing the node until the device is removed. of_node_get() the node and of_node_put() it during teardown to avoid any risk. Fixes: 1ebaeb09830f ("media: tegra-video: Add support for external sensor capture") Cc: stable(a)vger.kernel.org Cc: Sowjanya Komatineni <skomatineni(a)nvidia.com> Signed-off-by: Luca Ceresoli <luca.ceresoli(a)bootlin.com> --- drivers/staging/media/tegra-video/csi.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/staging/media/tegra-video/csi.c b/drivers/staging/media/tegra-video/csi.c index b26e44adb2be..1b05f620b476 100644 --- a/drivers/staging/media/tegra-video/csi.c +++ b/drivers/staging/media/tegra-video/csi.c @@ -433,7 +433,7 @@ static int tegra_csi_channel_alloc(struct tegra_csi *csi, for (i = 0; i < chan->numgangports; i++) chan->csi_port_nums[i] = port_num + i * CSI_PORTS_PER_BRICK; - chan->of_node = node; + chan->of_node = of_node_get(node); chan->numpads = num_pads; if (num_pads & 0x2) { chan->pads[0].flags = MEDIA_PAD_FL_SINK; @@ -640,6 +640,7 @@ static void tegra_csi_channels_cleanup(struct tegra_csi *csi) media_entity_cleanup(&subdev->entity); } + of_node_put(chan->of_node); list_del(&chan->list); kfree(chan); } -- 2.34.1

3 years, 1 month

3
4
0 0

[PATCH] ipvs: use explicitly signed chars

by Jason A. Donenfeld

The `char` type with no explicit sign is sometimes signed and sometimes unsigned. This code will break on platforms such as arm, where char is unsigned. So mark it here as explicitly signed, so that the todrop_counter decrement and subsequent comparison is correct. Cc: Pablo Neira Ayuso <pablo(a)netfilter.org> Cc: Julian Anastasov <ja(a)ssi.bg> Cc: Simon Horman <horms(a)verge.net.au> Cc: stable(a)vger.kernel.org Signed-off-by: Jason A. Donenfeld <Jason(a)zx2c4.com> --- net/netfilter/ipvs/ip_vs_conn.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/net/netfilter/ipvs/ip_vs_conn.c b/net/netfilter/ipvs/ip_vs_conn.c index 8c04bb57dd6f..7c4866c04343 100644 --- a/net/netfilter/ipvs/ip_vs_conn.c +++ b/net/netfilter/ipvs/ip_vs_conn.c @@ -1249,40 +1249,40 @@ static const struct seq_operations ip_vs_conn_sync_seq_ops = { .next = ip_vs_conn_seq_next, .stop = ip_vs_conn_seq_stop, .show = ip_vs_conn_sync_seq_show, }; #endif /* Randomly drop connection entries before running out of memory * Can be used for DATA and CTL conns. For TPL conns there are exceptions: * - traffic for services in OPS mode increases ct->in_pkts, so it is supported * - traffic for services not in OPS mode does not increase ct->in_pkts in * all cases, so it is not supported */ static inline int todrop_entry(struct ip_vs_conn *cp) { /* * The drop rate array needs tuning for real environments. * Called from timer bh only => no locking */ - static const char todrop_rate[9] = {0, 1, 2, 3, 4, 5, 6, 7, 8}; - static char todrop_counter[9] = {0}; + static const signed char todrop_rate[9] = {0, 1, 2, 3, 4, 5, 6, 7, 8}; + static signed char todrop_counter[9] = {0}; int i; /* if the conn entry hasn't lasted for 60 seconds, don't drop it. This will leave enough time for normal connection to get through. */ if (time_before(cp->timeout + jiffies, cp->timer.expires + 60*HZ)) return 0; /* Don't drop the entry if its number of incoming packets is not located in [0, 8] */ i = atomic_read(&cp->in_pkts); if (i > 8 || i < 0) return 0; if (!todrop_rate[i]) return 0; if (--todrop_counter[i] > 0) return 0; todrop_counter[i] = todrop_rate[i]; return 1; } -- 2.38.1

3 years, 1 month

3
5
0 0

[PATCH 5.15 1/2] serial: core: move RS485 configuration tasks from drivers into core

by Dominique Martinet

From: Lino Sanfilippo <LinoSanfilippo(a)gmx.de> Several drivers that support setting the RS485 configuration via userspace implement one or more of the following tasks: - in case of an invalid RTS configuration (both RTS after send and RTS on send set or both unset) fall back to enable RTS on send and disable RTS after send - nullify the padding field of the returned serial_rs485 struct - copy the configuration into the uart port struct - limit RTS delays to 100 ms Move these tasks into the serial core to make them generic and to provide a consistent behaviour among all drivers. [ Upstream commit 0ed12afa5655512ee418047fb3546d229df20aa1 ] Link: https://lkml.kernel.org/r/20221017051737.51727-1-dominique.martinet@atmark-… Signed-off-by: Lino Sanfilippo <LinoSanfilippo(a)gmx.de> Link: https://lore.kernel.org/r/20220410104642.32195-2-LinoSanfilippo@gmx.de Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Daisuke Mizobuchi <mizo(a)atmark-techno.com> Signed-off-by: Dominique Martinet <dominique.martinet(a)atmark-techno.com> --- 5.15 version of the 5.10 backport: https://lkml.kernel.org/r/20221017051737.51727-1-dominique.martinet@atmark-… (only build tested) drivers/tty/serial/serial_core.c | 33 ++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/drivers/tty/serial/serial_core.c b/drivers/tty/serial/serial_core.c index 82ddbb92d07d..48dafd1e084b 100644 --- a/drivers/tty/serial/serial_core.c +++ b/drivers/tty/serial/serial_core.c @@ -42,6 +42,11 @@ static struct lock_class_key port_lock_key; #define HIGH_BITS_OFFSET ((sizeof(long)-sizeof(int))*8) +/* + * Max time with active RTS before/after data is sent. + */ +#define RS485_MAX_RTS_DELAY 100 /* msecs */ + static void uart_change_speed(struct tty_struct *tty, struct uart_state *state, struct ktermios *old_termios); static void uart_wait_until_sent(struct tty_struct *tty, int timeout); @@ -1299,8 +1304,36 @@ static int uart_set_rs485_config(struct uart_port *port, if (copy_from_user(&rs485, rs485_user, sizeof(*rs485_user))) return -EFAULT; + /* pick sane settings if the user hasn't */ + if (!(rs485.flags & SER_RS485_RTS_ON_SEND) == + !(rs485.flags & SER_RS485_RTS_AFTER_SEND)) { + dev_warn_ratelimited(port->dev, + "%s (%d): invalid RTS setting, using RTS_ON_SEND instead\n", + port->name, port->line); + rs485.flags |= SER_RS485_RTS_ON_SEND; + rs485.flags &= ~SER_RS485_RTS_AFTER_SEND; + } + + if (rs485.delay_rts_before_send > RS485_MAX_RTS_DELAY) { + rs485.delay_rts_before_send = RS485_MAX_RTS_DELAY; + dev_warn_ratelimited(port->dev, + "%s (%d): RTS delay before sending clamped to %u ms\n", + port->name, port->line, rs485.delay_rts_before_send); + } + + if (rs485.delay_rts_after_send > RS485_MAX_RTS_DELAY) { + rs485.delay_rts_after_send = RS485_MAX_RTS_DELAY; + dev_warn_ratelimited(port->dev, + "%s (%d): RTS delay after sending clamped to %u ms\n", + port->name, port->line, rs485.delay_rts_after_send); + } + /* Return clean padding area to userspace */ + memset(rs485.padding, 0, sizeof(rs485.padding)); + spin_lock_irqsave(&port->lock, flags); ret = port->rs485_config(port, &rs485); + if (!ret) + port->rs485 = rs485; spin_unlock_irqrestore(&port->lock, flags); if (ret) return ret; -- 2.35.1

3 years, 1 month

2
2
0 0

[PATCH] can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive

by Biju Das

commit 702de2c21eed04c67cefaaedc248ef16e5f6b293 upstream. We are seeing an IRQ storm on the global receive IRQ line under heavy CAN bus load conditions with both CAN channels enabled. Conditions: The global receive IRQ line is shared between can0 and can1, either of the channels can trigger interrupt while the other channel's IRQ line is disabled (RFIE). When global a receive IRQ interrupt occurs, we mask the interrupt in the IRQ handler. Clearing and unmasking of the interrupt is happening in rx_poll(). There is a race condition where rx_poll() unmasks the interrupt, but the next IRQ handler does not mask the IRQ due to NAPIF_STATE_MISSED flag (e.g.: can0 RX FIFO interrupt is disabled and can1 is triggering RX interrupt, the delay in rx_poll() processing results in setting NAPIF_STATE_MISSED flag) leading to an IRQ storm. This patch fixes the issue by checking IRQ active and enabled before handling the IRQ on a particular channel. Fixes: dd3bd23eb438 ("can: rcar_canfd: Add Renesas R-Car CAN FD driver") Suggested-by: Marc Kleine-Budde <mkl(a)pengutronix.de> Signed-off-by: Biju Das <biju.das.jz(a)bp.renesas.com> Link: https://lore.kernel.org/all/20221025155657.1426948-2-biju.das.jz@bp.renesas… Cc: stable(a)vger.kernel.org # 4.9.x [mkl: adjust commit message] Signed-off-by: Marc Kleine-Budde <mkl(a)pengutronix.de> [biju: removed gpriv from RCANFD_RFCC_RFIE macro] Signed-off-by: Biju Das <biju.das.jz(a)bp.renesas.com> --- Resending to 4.9 with confilcts[1] fixed [1] https://lore.kernel.org/stable/OS0PR01MB59226F2443DFCE7C5D73778786379@OS0PR… --- drivers/net/can/rcar/rcar_canfd.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/drivers/net/can/rcar/rcar_canfd.c b/drivers/net/can/rcar/rcar_canfd.c index a127c853a4e9..694a3354554f 100644 --- a/drivers/net/can/rcar/rcar_canfd.c +++ b/drivers/net/can/rcar/rcar_canfd.c @@ -1079,7 +1079,7 @@ static irqreturn_t rcar_canfd_global_interrupt(int irq, void *dev_id) struct rcar_canfd_global *gpriv = dev_id; struct net_device *ndev; struct rcar_canfd_channel *priv; - u32 sts, gerfl; + u32 sts, cc, gerfl; u32 ch, ridx; /* Global error interrupts still indicate a condition specific @@ -1097,7 +1097,9 @@ static irqreturn_t rcar_canfd_global_interrupt(int irq, void *dev_id) /* Handle Rx interrupts */ sts = rcar_canfd_read(priv->base, RCANFD_RFSTS(ridx)); - if (likely(sts & RCANFD_RFSTS_RFIF)) { + cc = rcar_canfd_read(priv->base, RCANFD_RFCC(ridx)); + if (likely(sts & RCANFD_RFSTS_RFIF && + cc & RCANFD_RFCC_RFIE)) { if (napi_schedule_prep(&priv->napi)) { /* Disable Rx FIFO interrupts */ rcar_canfd_clear_bit(priv->base, -- 2.25.1

3 years, 1 month

2
1
0 0

[PATCH] can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L

by Biju Das

commit d887087c896881715c1a82f1d4f71fbfe5344ffd upstream. RZ/G2L has separate channel specific IRQs for transmit and error interrupts. But the IRQ handler processes both channels, even if there no interrupt occurred on one of the channels. This patch fixes the issue by passing a channel specific context parameter instead of global one for the IRQ register and the IRQ handler, it just handles the channel which is triggered the interrupt. Fixes: 76e9353a80e9 ("can: rcar_canfd: Add support for RZ/G2L family") Signed-off-by: Biju Das <biju.das.jz(a)bp.renesas.com> Link: https://lore.kernel.org/all/20221025155657.1426948-3-biju.das.jz@bp.renesas… Cc: stable(a)vger.kernel.org [mkl: adjust commit message] Signed-off-by: Marc Kleine-Budde <mkl(a)pengutronix.de> [biju: fixed the conflicts manually] Signed-off-by: Biju Das <biju.das.jz(a)bp.renesas.com> --- Resending to 5.15 with conflicts[1] fixed [1] https://lore.kernel.org/stable/1667194217249235@kroah.com/T/#u --- drivers/net/can/rcar/rcar_canfd.c | 18 +++++++----------- 1 file changed, 7 insertions(+), 11 deletions(-) diff --git a/drivers/net/can/rcar/rcar_canfd.c b/drivers/net/can/rcar/rcar_canfd.c index 9991bb475ae1..4e230e145664 100644 --- a/drivers/net/can/rcar/rcar_canfd.c +++ b/drivers/net/can/rcar/rcar_canfd.c @@ -1197,11 +1197,9 @@ static void rcar_canfd_handle_channel_tx(struct rcar_canfd_global *gpriv, u32 ch static irqreturn_t rcar_canfd_channel_tx_interrupt(int irq, void *dev_id) { - struct rcar_canfd_global *gpriv = dev_id; - u32 ch; + struct rcar_canfd_channel *priv = dev_id; - for_each_set_bit(ch, &gpriv->channels_mask, RCANFD_NUM_CHANNELS) - rcar_canfd_handle_channel_tx(gpriv, ch); + rcar_canfd_handle_channel_tx(priv->gpriv, priv->channel); return IRQ_HANDLED; } @@ -1229,11 +1227,9 @@ static void rcar_canfd_handle_channel_err(struct rcar_canfd_global *gpriv, u32 c static irqreturn_t rcar_canfd_channel_err_interrupt(int irq, void *dev_id) { - struct rcar_canfd_global *gpriv = dev_id; - u32 ch; + struct rcar_canfd_channel *priv = dev_id; - for_each_set_bit(ch, &gpriv->channels_mask, RCANFD_NUM_CHANNELS) - rcar_canfd_handle_channel_err(gpriv, ch); + rcar_canfd_handle_channel_err(priv->gpriv, priv->channel); return IRQ_HANDLED; } @@ -1651,6 +1647,7 @@ static int rcar_canfd_channel_probe(struct rcar_canfd_global *gpriv, u32 ch, priv->ndev = ndev; priv->base = gpriv->base; priv->channel = ch; + priv->gpriv = gpriv; priv->can.clock.freq = fcan_freq; dev_info(&pdev->dev, "can_clk rate is %u\n", priv->can.clock.freq); @@ -1679,7 +1676,7 @@ static int rcar_canfd_channel_probe(struct rcar_canfd_global *gpriv, u32 ch, } err = devm_request_irq(&pdev->dev, err_irq, rcar_canfd_channel_err_interrupt, 0, - irq_name, gpriv); + irq_name, priv); if (err) { dev_err(&pdev->dev, "devm_request_irq CH Err(%d) failed, error %d\n", err_irq, err); @@ -1693,7 +1690,7 @@ static int rcar_canfd_channel_probe(struct rcar_canfd_global *gpriv, u32 ch, } err = devm_request_irq(&pdev->dev, tx_irq, rcar_canfd_channel_tx_interrupt, 0, - irq_name, gpriv); + irq_name, priv); if (err) { dev_err(&pdev->dev, "devm_request_irq Tx (%d) failed, error %d\n", tx_irq, err); @@ -1717,7 +1714,6 @@ static int rcar_canfd_channel_probe(struct rcar_canfd_global *gpriv, u32 ch, priv->can.do_set_mode = rcar_canfd_do_set_mode; priv->can.do_get_berr_counter = rcar_canfd_get_berr_counter; - priv->gpriv = gpriv; SET_NETDEV_DEV(ndev, &pdev->dev); netif_napi_add(ndev, &priv->napi, rcar_canfd_rx_poll, -- 2.25.1

3 years, 1 month

2
1
0 0

[PATCH 5.10 0/2] arm64: backport two patches to 5.10-stable

by Zenghui Yu

Patch #1 (merged in 5.12-rc3) is required to address the issue Anders Roxell reported on the list [1]. Patch #2 (in 5.15-rc1) is a follow up. [1] https://lore.kernel.org/lkml/20220826120020.GB520@mutt Anshuman Khandual (1): arm64/kexec: Test page size support with new TGRAN range values James Morse (1): arm64/mm: Fix __enable_mmu() for new TGRAN range values arch/arm64/include/asm/cpufeature.h | 9 ++++-- arch/arm64/include/asm/sysreg.h | 36 +++++++++++++++-------- arch/arm64/kernel/head.S | 6 ++-- arch/arm64/kvm/reset.c | 10 ++++--- drivers/firmware/efi/libstub/arm64-stub.c | 2 +- 5 files changed, 41 insertions(+), 22 deletions(-) -- 2.33.0

3 years, 1 month

2
3
0 0

[PATCH] efi: Add iMac Pro 2017 to uefi skip cert quirk

by Aditya Garg

From: Aditya Garg <gargaditya08(a)live.com> The iMac Pro 2017 is also a T2 Mac. Thus add it to the list of uefi skip cert. Cc: stable(a)vger.kernel.org Signed-off-by: Aditya Garg <gargaditya08(a)live.com> --- security/integrity/platform_certs/load_uefi.c | 1 + 1 file changed, 1 insertion(+) diff --git a/security/integrity/platform_certs/load_uefi.c b/security/integrity/platform_certs/load_uefi.c index b78753d27d8ea6..d1fdd113450a63 100644 --- a/security/integrity/platform_certs/load_uefi.c +++ b/security/integrity/platform_certs/load_uefi.c @@ -35,6 +35,7 @@ static const struct dmi_system_id uefi_skip_cert[] = { { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "MacPro7,1") }, { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "iMac20,1") }, { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "iMac20,2") }, + { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "iMacPro1,1") }, { } };

3 years, 1 month

2
3
0 0

ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices

by John Veness

Hello, Please can you consider my "ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices" patch, with upstream commit ID 6e2c9105e0b743c92a157389d40f00b81bdd09fe for inclusion in all -stable kernels. Apart from the device IDs, it is a copy of the similar existing patch for MS2109 devices, which is already present in -stable kernels. John Veness

3 years, 1 month

2
2
0 0

[PATCH 5.4 000/255] 5.4.220-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.4.220 release. There are 255 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 26 Oct 2022 11:29:24 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.220-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.4.220-rc1 Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: intel_powerclamp: Use first online CPU as control_cpu Eric Dumazet <edumazet(a)google.com> inet: fully convert sk->sk_rx_dst to RCU rules Ard Biesheuvel <ardb(a)kernel.org> efi: libstub: drop pointless get_memory_map() call Saurabh Sengar <ssengar(a)linux.microsoft.com> md: Replace snprintf with scnprintf Jerry Lee 李修賢 <jerrylee(a)qnap.com> ext4: continue to expand file system when the target size doesn't reach Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> net/ieee802154: don't warn zero-sized raw_sendmsg() Alexander Aring <aahringo(a)redhat.com> Revert "net/ieee802154: reject zero-sized raw_sendmsg()" Alexander Aring <aahringo(a)redhat.com> net: ieee802154: return -EINVAL for unknown addr type Pavel Begunkov <asml.silence(a)gmail.com> io_uring/af_unix: defer registered files gc to io_uring release Adrian Hunter <adrian.hunter(a)intel.com> perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc Maxime Ripard <maxime(a)cerno.tech> clk: bcm2835: Make peripheral PLLC critical Dongliang Mu <mudongliangabcd(a)gmail.com> usb: idmouse: fix an uninit-value in idmouse_open Varun Prakash <varun(a)chelsio.com> nvmet-tcp: add bounds check on Transfer Tag Keith Busch <kbusch(a)kernel.org> nvme: copy firmware_rev on each init Xiaoke Wang <xkernel.wang(a)foxmail.com> staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() sunghwan jung <onenowy(a)gmail.com> Revert "usb: storage: Add quirk for Samsung Fit flash" Robin Guo <guoweibin(a)inspur.com> usb: musb: Fix musb_gadget.c rxstate overflow bug Jianglei Nie <niejianglei2021(a)163.com> usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() Logan Gunthorpe <logang(a)deltatee.com> md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d Hyunwoo Kim <imv4bel(a)gmail.com> HID: roccat: Fix use-after-free in roccat_read() Coly Li <colyli(a)suse.de> bcache: fix set_at_max_writeback_rate() for multiple attached devices Serge Semin <Sergey.Semin(a)baikalelectronics.ru> ata: libahci_platform: Sanity check the DT child nodes number Nam Cao <namcaov(a)gmail.com> staging: vt6655: fix potential memory leak Wei Yongjun <weiyongjun1(a)huawei.com> power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() Shigeru Yoshida <syoshida(a)redhat.com> nbd: Fix hung when signal interrupts nbd_start_device_ioctl() Letu Ren <fantasquex(a)gmail.com> scsi: 3w-9xxx: Avoid disabling device if failing to enable it Quanyang Wang <quanyang.wang(a)windriver.com> clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate Zheyu Ma <zheyuma97(a)gmail.com> media: cx88: Fix a null-ptr-deref bug in buffer_prepare() Ian Nam <young.kwan.nam(a)xilinx.com> clk: zynqmp: Fix stack-out-of-bounds in strncpy` Qu Wenruo <wqu(a)suse.com> btrfs: scrub: try to fix super block errors Alexander Stein <alexander.stein(a)ew.tq-group.com> ARM: dts: imx6sx: add missing properties for sram Alexander Stein <alexander.stein(a)ew.tq-group.com> ARM: dts: imx6sll: add missing properties for sram Alexander Stein <alexander.stein(a)ew.tq-group.com> ARM: dts: imx6sl: add missing properties for sram Alexander Stein <alexander.stein(a)ew.tq-group.com> ARM: dts: imx6qp: add missing properties for sram Alexander Stein <alexander.stein(a)ew.tq-group.com> ARM: dts: imx6dl: add missing properties for sram Alexander Stein <alexander.stein(a)ew.tq-group.com> ARM: dts: imx6q: add missing properties for sram Haibo Chen <haibo.chen(a)nxp.com> ARM: dts: imx7d-sdb: config the max pressure for tsc2046 Richard Acayan <mailingradian(a)gmail.com> mmc: sdhci-msm: add compatible string check for sdm670 hongao <hongao(a)uniontech.com> drm/amdgpu: fix initial connector audio value Hans de Goede <hdegoede(a)redhat.com> platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading Maya Matuszczyk <maccraft123mc(a)gmail.com> drm: panel-orientation-quirks: Add quirk for Anbernic Win600 Mateusz Kwiatkowski <kfyatek+publicgit(a)gmail.com> drm/vc4: vec: Fix timings for VEC modes David Gow <davidgow(a)google.com> drm/amd/display: fix overflow on MIN_I64 definition Javier Martinez Canillas <javierm(a)redhat.com> drm: Prevent drm_copy_field() to attempt copying a NULL pointer Javier Martinez Canillas <javierm(a)redhat.com> drm: Use size_t type for len variable in drm_copy_field() Jianglei Nie <niejianglei2021(a)163.com> drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() Andrew Gaul <gaul(a)gaul.org> r8152: Rate limit overflow messages Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix user-after-free Liu Jian <liujian56(a)huawei.com> net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory Daniel Golle <daniel(a)makrotopia.org> wifi: rt2x00: correctly set BBP register 86 for MT7620 Daniel Golle <daniel(a)makrotopia.org> wifi: rt2x00: set SoC wmac clock register Daniel Golle <daniel(a)makrotopia.org> wifi: rt2x00: set VGC gain for both chains of MT7620 Daniel Golle <daniel(a)makrotopia.org> wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 Daniel Golle <daniel(a)makrotopia.org> wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 Ziyang Xuan <william.xuanziyang(a)huawei.com> can: bcm: check the result of can_send() in bcm_can_tx() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() Alexander Coffin <alex.coffin(a)matician.com> wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() Khalid Masum <khalid.masum.92(a)gmail.com> xfrm: Update ipcomp_scratches with NULL when freed Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() Eric Dumazet <edumazet(a)google.com> tcp: annotate data-race around tcp_md5sig_pool_populated Mike Pattrick <mkp(a)redhat.com> openvswitch: Fix overreporting of drops in dropwatch Mike Pattrick <mkp(a)redhat.com> openvswitch: Fix double reporting of drops in dropwatch Quentin Monnet <quentin(a)isovalent.com> bpftool: Clear errno after libcap's checks Wright Feng <wright.feng(a)cypress.com> wifi: brcmfmac: fix invalid address access when enabling SCAN log level Anna Schumaker <Anna.Schumaker(a)Netapp.com> NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data Kees Cook <keescook(a)chromium.org> x86/entry: Work around Clang __bdos() bug Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash Chao Qin <chao.qin(a)intel.com> powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue Kees Cook <keescook(a)chromium.org> MIPS: BCM47XX: Cast memcmp() of function to (void *) Arvid Norlander <lkml(a)vorpal.se> ACPI: video: Add Toshiba Satellite/Portege Z830 quirk Zhang Qilong <zhangqilong3(a)huawei.com> f2fs: fix race condition on setting FI_NO_EXTENT flag Dan Carpenter <dan.carpenter(a)oracle.com> crypto: cavium - prevent integer overflow loading firmware Masahiro Yamada <masahiroy(a)kernel.org> kbuild: remove the target in signal traps when interrupted Robin Murphy <robin.murphy(a)arm.com> iommu/iova: Fix module config properly Koba Ko <koba.ko(a)canonical.com> crypto: ccp - Release dma channels before dmaengine unrgister Ignat Korchagin <ignat(a)cloudflare.com> crypto: akcipher - default implementation for setting a private key Dan Carpenter <dan.carpenter(a)oracle.com> iommu/omap: Fix buffer overflow in debugfs Waiman Long <longman(a)redhat.com> cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset Pali Rohár <pali(a)kernel.org> powerpc: Fix SPE Power ISA properties for e500v1 platforms Nicholas Piggin <npiggin(a)gmail.com> powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 Vitaly Kuznetsov <vkuznets(a)redhat.com> x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition Zheng Yongjun <zhengyongjun3(a)huawei.com> powerpc/powernv: add missing of_node_put() in opal_export_attrs() Liang He <windhl(a)126.com> powerpc/pci_dn: Add missing of_node_put() Liang He <windhl(a)126.com> powerpc/sysdev/fsl_msi: Add missing of_node_put() Nathan Chancellor <nathan(a)kernel.org> powerpc/math_emu/efp: Include module.h Jack Wang <jinpu.wang(a)ionos.com> mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg Joel Stanley <joel(a)jms.id.au> clk: ast2600: BCLK comes from EPLL Miaoqian Lin <linmq006(a)gmail.com> clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe Stefan Wahren <stefan.wahren(a)i2se.com> clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration David Collins <collinsd(a)codeaurora.org> spmi: pmic-arb: correct duplicate APID to PPID mapping logic Dave Jiang <dave.jiang(a)intel.com> dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() Chen-Yu Tsai <wenst(a)chromium.org> clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent Jiasheng Jiang <jiasheng(a)iscas.ac.cn> mfd: sm501: Add check for platform_driver_register() Dan Carpenter <dan.carpenter(a)oracle.com> mfd: fsl-imx25: Fix check for platform_get_irq() errors Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> mfd: lp8788: Fix an error handling path in lp8788_probe() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() Jiasheng Jiang <jiasheng(a)iscas.ac.cn> fsi: core: Check error number after calling ida_simple_get Duoming Zhou <duoming(a)zju.edu.cn> scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() Pali Rohár <pali(a)kernel.org> serial: 8250: Fix restoring termios speed after suspend Guilherme G. Piccoli <gpiccoli(a)igalia.com> firmware: google: Test spinlock on panic path to avoid lockups Nam Cao <namcaov(a)gmail.com> staging: vt6655: fix some erroneous memory clean-up loops Dongliang Mu <mudongliangabcd(a)gmail.com> phy: qualcomm: call clk_disable_unprepare in the error handling Sherry Sun <sherry.sun(a)nxp.com> tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown Dan Carpenter <dan.carpenter(a)oracle.com> drivers: serial: jsm: fix some leaks in probe Albert Briscoe <albertsbriscoe(a)gmail.com> usb: gadget: function: fix dangling pnp_string in f_printer.c Mario Limonciello <mario.limonciello(a)amd.com> xhci: Don't show warning for reinit on known broken suspend Logan Gunthorpe <logang(a)deltatee.com> md/raid5: Ensure stripe_fill happens on non-read IO with journal Dan Carpenter <dan.carpenter(a)oracle.com> mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() Niklas Cassel <niklas.cassel(a)wdc.com> ata: fix ata_id_has_dipm() Niklas Cassel <niklas.cassel(a)wdc.com> ata: fix ata_id_has_ncq_autosense() Niklas Cassel <niklas.cassel(a)wdc.com> ata: fix ata_id_has_devslp() Niklas Cassel <niklas.cassel(a)wdc.com> ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() Bernard Metzler <bmt(a)zurich.ibm.com> RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. William Dean <williamsukatube(a)gmail.com> mtd: devices: docg3: check the return value of devm_ioremap() in the probe Jim Cromie <jim.cromie(a)gmail.com> dyndbg: let query-modname override actual module name Jim Cromie <jim.cromie(a)gmail.com> dyndbg: fix module.dyndbg handling Hangyu Hua <hbh25y(a)gmail.com> misc: ocxl: fix possible refcount leak in afu_ioctl() Zhu Yanjun <yanjun.zhu(a)linux.dev> RDMA/rxe: Fix the error caused by qp->sk Zhu Yanjun <yanjun.zhu(a)linux.dev> RDMA/rxe: Fix "kernel NULL pointer dereference" error Miaoqian Lin <linmq006(a)gmail.com> media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init Shubhrajyoti Datta <shubhrajyoti.datta(a)xilinx.com> tty: xilinx_uartps: Fix the ignore_status Liang He <windhl(a)126.com> media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop Jack Wang <jinpu.wang(a)ionos.com> HSI: omap_ssi_port: Fix dma_map_sg error check Miaoqian Lin <linmq006(a)gmail.com> HSI: omap_ssi: Fix refcount leak in ssi_probe Miaoqian Lin <linmq006(a)gmail.com> clk: tegra20: Fix refcount leak in tegra20_clock_init Miaoqian Lin <linmq006(a)gmail.com> clk: tegra: Fix refcount leak in tegra114_clock_init Miaoqian Lin <linmq006(a)gmail.com> clk: tegra: Fix refcount leak in tegra210_clock_init Liang He <windhl(a)126.com> clk: berlin: Add of_node_put() for of_get_parent() Liang He <windhl(a)126.com> clk: oxnas: Hold reference returned by of_get_parent() Liang He <windhl(a)126.com> clk: meson: Hold reference returned by of_get_parent() Jonathan Cameron <Jonathan.Cameron(a)huawei.com> iio: ABI: Fix wrong format of differential capacitance channel ABI. Nuno Sá <nuno.sa(a)analog.com> iio: inkern: only release the device node when done with it Claudiu Beznea <claudiu.beznea(a)microchip.com> iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq Claudiu Beznea <claudiu.beznea(a)microchip.com> iio: adc: at91-sama5d2_adc: check return status for pressure and touch Claudiu Beznea <claudiu.beznea(a)microchip.com> iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX Dmitry Torokhov <dmitry.torokhov(a)gmail.com> ARM: dts: exynos: fix polarity of VBUS GPIO of Origen Geert Uytterhoeven <geert+renesas(a)glider.be> ARM: Drop CMDLINE_* dependency on ATAGS Dmitry Torokhov <dmitry.torokhov(a)gmail.com> ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family Michael Walle <michael(a)walle.cc> ARM: dts: kirkwood: lsxl: remove first ethernet port Michael Walle <michael(a)walle.cc> ARM: dts: kirkwood: lsxl: fix serial line Marek Behún <kabel(a)kernel.org> ARM: dts: turris-omnia: Fix mpp26 pin name and comment Liang He <windhl(a)126.com> soc: qcom: smem_state: Add refcounting for the 'state->of_node' Liang He <windhl(a)126.com> soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() Liang He <windhl(a)126.com> memory: of: Fix refcount leak bug in of_get_ddr_timings() Liang He <windhl(a)126.com> memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() Takashi Iwai <tiwai(a)suse.de> ALSA: hda/hdmi: Don't skip notification handling during PM operation Zhang Qilong <zhangqilong3(a)huawei.com> ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe Zhang Qilong <zhangqilong3(a)huawei.com> ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe Zhang Qilong <zhangqilong3(a)huawei.com> ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() Andreas Pape <apape(a)de.adit-jv.com> ALSA: dmaengine: increment buffer pointer atomically Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx Liang He <windhl(a)126.com> ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() Liang He <windhl(a)126.com> drm/omap: dss: Fix refcount leak bugs Takashi Iwai <tiwai(a)suse.de> ALSA: hda: beep: Simplify keep-power-at-enable behavior Jiasheng Jiang <jiasheng(a)iscas.ac.cn> ASoC: rsnd: Add check for rsnd_mod_power_on Zheyu Ma <zheyuma97(a)gmail.com> drm/bridge: megachips: Fix a null pointer dereference bug Randy Dunlap <rdunlap(a)infradead.org> drm: fix drm_mipi_dbi build errors Hans de Goede <hdegoede(a)redhat.com> platform/x86: msi-laptop: Fix resource cleanup Hans de Goede <hdegoede(a)redhat.com> platform/x86: msi-laptop: Fix old-ec check for backlight registering Dan Carpenter <dan.carpenter(a)oracle.com> platform/chrome: fix memory corruption in ioctl Rustam Subkhankulov <subkhankulov(a)ispras.ru> platform/chrome: fix double-free in chromeos_laptop_prepare() Maxime Ripard <maxime(a)cerno.tech> drm/mipi-dsi: Detach devices when removing the host Alvin Šipraga <alsi(a)bang-olufsen.dk> drm: bridge: adv7511: fix CEC power down control register offset Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: mvpp2: fix mvpp2 debugfs leak Eric Dumazet <edumazet(a)google.com> once: add DO_ONCE_SLOW() for sleepable contexts Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> net/ieee802154: reject zero-sized raw_sendmsg() Jianglei Nie <niejianglei2021(a)163.com> bnx2x: fix potential memory leak in bnx2x_tpa_stop() Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() Neal Cardwell <ncardwell(a)google.com> tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited Xin Long <lucien.xin(a)gmail.com> sctp: handle the error returned from sctp_auth_asoc_init_active_key Duoming Zhou <duoming(a)zju.edu.cn> mISDN: fix use-after-free bugs in l1oip timer handlers Junichi Uekawa <uekawa(a)chromium.org> vhost/vsock: Use kvmalloc/kvfree for larger packets. Vincent Whitchurch <vincent.whitchurch(a)axis.com> spi: s3c64xx: Fix large transfers with DMA Phil Sutter <phil(a)nwl.cc> netfilter: nft_fib: Fix for rpath check with VRF devices Zhang Qilong <zhangqilong3(a)huawei.com> spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe Kees Cook <keescook(a)chromium.org> x86/microcode/AMD: Track patch allocation size explicitly Lee Jones <lee(a)kernel.org> bpf: Ensure correct locking around vulnerable function find_vpid() Zheng Yongjun <zhengyongjun3(a)huawei.com> net: fs_enet: Fix wrong check in do_pd_setup Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration Lorenz Bauer <oss(a)lmb.io> bpf: btf: fix truncated last_member_type_id in btf_struct_resolve Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtl8xxxu: Fix skb misuse in TX queue selection Xu Qiang <xuqiang36(a)huawei.com> spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() Xu Qiang <xuqiang36(a)huawei.com> spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() Dan Carpenter <dan.carpenter(a)oracle.com> wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() Kohei Tarumizu <tarumizu.kohei(a)fujitsu.com> x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register Lam Thai <lamthai(a)arista.com> bpftool: Fix a wrong type cast in btf_dumper_int Hari Chandrakanthan <quic_haric(a)quicinc.com> wifi: mac80211: allow bw change during channel switch in mesh Wen Gong <quic_wgong(a)quicinc.com> wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> nfsd: Fix a memory leak in an error handling path Wang Kefeng <wangkefeng.wang(a)huawei.com> ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE Kees Cook <keescook(a)chromium.org> sh: machvec: Use char[] for section boundaries Ondrej Mosnacek <omosnace(a)redhat.com> userfaultfd: open userfaultfds with O_RDONLY Waiman Long <longman(a)redhat.com> tracing: Disable interrupt or preemption before acquiring arch_spinlock_t Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> selinux: use "grep -E" instead of "egrep" Jianglei Nie <niejianglei2021(a)163.com> drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() Martin Liska <mliska(a)suse.cz> gcov: support GCC 12.1 and newer compilers Sean Christopherson <seanjc(a)google.com> KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" Michal Luczaj <mhal(a)rbox.co> KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility Dmitry Osipenko <dmitry.osipenko(a)collabora.com> media: cedrus: Set the platform driver data earlier Steven Rostedt (Google) <rostedt(a)goodmis.org> ring-buffer: Fix race between reset page and reading page Steven Rostedt (Google) <rostedt(a)goodmis.org> ring-buffer: Check pending waiters when doing wake ups as well Steven Rostedt (Google) <rostedt(a)goodmis.org> ring-buffer: Have the shortest_full queue be the shortest not longest Steven Rostedt (Google) <rostedt(a)goodmis.org> ring-buffer: Allow splice to read previous partially read pages Zheng Yejian <zhengyejian1(a)huawei.com> ftrace: Properly unset FTRACE_HASH_FL_MOD Rik van Riel <riel(a)surriel.com> livepatch: fix race between fork and KLP transition Jinke Han <hanjinke.666(a)bytedance.com> ext4: place buffer head allocation before handle start Lalith Rajendran <lalithkraj(a)google.com> ext4: make ext4_lazyinit_thread freezable Baokun Li <libaokun1(a)huawei.com> ext4: fix null-ptr-deref in ext4_write_info Jan Kara <jack(a)suse.cz> ext4: avoid crash when inline data creation follows DIO write Andrew Perepechko <anserper(a)ya.ru> jbd2: wake up journal waiters in FIFO order, not LIFO Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix use-after-free bug of struct nilfs_root Chao Yu <chao(a)kernel.org> f2fs: fix to do sanity check on summary info Chao Yu <chao(a)kernel.org> f2fs: fix to do sanity check on destination blkaddr during recovery Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: increase the limit for reserve_root Filipe Manana <fdmanana(a)suse.com> btrfs: fix race between quota enable and quota rescan ioctl Hyunwoo Kim <imv4bel(a)gmail.com> fbdev: smscufx: Fix use-after-free in ufx_ops_open() Pali Rohár <pali(a)kernel.org> powerpc/boot: Explicitly disable usage of SPE instructions Maciej W. Rozycki <macro(a)orcam.me.uk> PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge Huacai Chen <chenhuacai(a)loongson.cn> UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK Fangrui Song <maskray(a)google.com> riscv: Pass -mno-relax only on lld < 15.0.0 Andrew Bresticker <abrestic(a)rivosinc.com> riscv: Allow PROT_WRITE-only mmap() Helge Deller <deller(a)gmx.de> parisc: fbdev/stifb: Align graphics memory size to 4MB Maciej W. Rozycki <macro(a)orcam.me.uk> RISC-V: Make port I/O string accessors actually work Linus Walleij <linus.walleij(a)linaro.org> regulator: qcom_rpm: Fix circular deferral regression Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: wcd9335: fix order of Slimbus unprepare/disable Zhihao Cheng <chengzhihao1(a)huawei.com> quota: Check next/prev free block number after reading from quota file Andri Yngvason <andri(a)yngvason.is> HID: multitouch: Add memory barriers Alexander Aring <aahringo(a)redhat.com> fs: dlm: handle -EBUSY first in lock arg validation Alexander Aring <aahringo(a)redhat.com> fs: dlm: fix race between test_bit() and queue_work() Wenchao Chen <wenchao.chen(a)unisoc.com> mmc: sdhci-sprd: Fix minimum clock limit Anssi Hannula <anssi.hannula(a)bitwise.fi> can: kvaser_usb_leaf: Fix CAN state after restart Anssi Hannula <anssi.hannula(a)bitwise.fi> can: kvaser_usb_leaf: Fix TX queue out of sync after restart Anssi Hannula <anssi.hannula(a)bitwise.fi> can: kvaser_usb_leaf: Fix overread with an invalid command Anssi Hannula <anssi.hannula(a)bitwise.fi> can: kvaser_usb: Fix use of uninitialized completion Jean-Francois Le Fillatre <jflf_kernel(a)gmx.com> usb: add quirks for Lenovo OneLink+ Dock Eddie James <eajames(a)linux.ibm.com> iio: pressure: dps310: Reset chip after timeout Eddie James <eajames(a)linux.ibm.com> iio: pressure: dps310: Refactor startup procedure Michael Hennerich <michael.hennerich(a)analog.com> iio: dac: ad5593r: Fix i2c read protocol requirements Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com> cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message Ronnie Sahlberg <lsahlber(a)redhat.com> cifs: destage dirty pages before re-reading them for cache=none Tudor Ambarus <tudor.ambarus(a)microchip.com> mtd: rawnand: atmel: Unmap streaming DMA mappings Saranya Gopal <saranya.gopal(a)intel.com> ALSA: hda/realtek: Add Intel Reference SSID to support headset keys Luke D. Jones <luke(a)ljones.dev> ALSA: hda/realtek: Add quirk for ASUS GV601R laptop Luke D. Jones <luke(a)ljones.dev> ALSA: hda/realtek: Correct pin configs for ASUS G533Z Callum Osmotherly <callum.osmotherly(a)gmail.com> ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Fix NULL dererence at error path Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Fix potential memory leaks Takashi Iwai <tiwai(a)suse.de> ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() Takashi Iwai <tiwai(a)suse.de> ALSA: oss: Fix potential deadlock at unregistration ------------- Diffstat: Documentation/ABI/testing/sysfs-bus-iio | 2 +- Makefile | 4 +- arch/arm/Kconfig | 1 - arch/arm/boot/dts/armada-385-turris-omnia.dts | 4 +- arch/arm/boot/dts/exynos4412-midas.dtsi | 2 +- arch/arm/boot/dts/exynos4412-origen.dts | 2 +- arch/arm/boot/dts/imx6dl.dtsi | 3 + arch/arm/boot/dts/imx6q.dtsi | 3 + arch/arm/boot/dts/imx6qp.dtsi | 6 + arch/arm/boot/dts/imx6sl.dtsi | 3 + arch/arm/boot/dts/imx6sll.dtsi | 3 + arch/arm/boot/dts/imx6sx.dtsi | 6 + arch/arm/boot/dts/imx7d-sdb.dts | 7 +- arch/arm/boot/dts/kirkwood-lsxl.dtsi | 16 +- arch/arm/mm/mmu.c | 4 + arch/mips/bcm47xx/prom.c | 4 +- arch/powerpc/Makefile | 2 +- arch/powerpc/boot/Makefile | 1 + arch/powerpc/boot/dts/fsl/e500v1_power_isa.dtsi | 51 ++++ arch/powerpc/boot/dts/fsl/mpc8540ads.dts | 2 +- arch/powerpc/boot/dts/fsl/mpc8541cds.dts | 2 +- arch/powerpc/boot/dts/fsl/mpc8555cds.dts | 2 +- arch/powerpc/boot/dts/fsl/mpc8560ads.dts | 2 +- arch/powerpc/kernel/pci_dn.c | 1 + arch/powerpc/math-emu/math_efp.c | 1 + arch/powerpc/platforms/powernv/opal.c | 1 + arch/powerpc/sysdev/fsl_msi.c | 2 + arch/riscv/Makefile | 2 + arch/riscv/include/asm/io.h | 16 +- arch/riscv/kernel/sys_riscv.c | 3 - arch/sh/include/asm/sections.h | 2 +- arch/sh/kernel/machvec.c | 10 +- arch/um/kernel/um_arch.c | 2 +- arch/x86/include/asm/hyperv-tlfs.h | 4 +- arch/x86/include/asm/microcode.h | 1 + arch/x86/kernel/cpu/microcode/amd.c | 3 +- arch/x86/kernel/cpu/resctrl/pseudo_lock.c | 12 +- arch/x86/kvm/emulate.c | 2 +- arch/x86/kvm/vmx/nested.c | 30 ++- arch/x86/kvm/vmx/vmx.c | 12 +- arch/x86/xen/enlighten_pv.c | 3 +- crypto/akcipher.c | 8 + drivers/acpi/acpi_video.c | 16 ++ drivers/ata/libahci_platform.c | 14 +- drivers/block/nbd.c | 6 +- drivers/clk/bcm/clk-bcm2835.c | 8 +- drivers/clk/berlin/bg2.c | 5 +- drivers/clk/berlin/bg2q.c | 6 +- drivers/clk/clk-ast2600.c | 2 +- drivers/clk/clk-oxnas.c | 6 +- drivers/clk/mediatek/clk-mt8183-mfgcfg.c | 6 +- drivers/clk/meson/meson-aoclk.c | 5 +- drivers/clk/meson/meson-eeclk.c | 5 +- drivers/clk/meson/meson8b.c | 5 +- drivers/clk/tegra/clk-tegra114.c | 1 + drivers/clk/tegra/clk-tegra20.c | 1 + drivers/clk/tegra/clk-tegra210.c | 1 + drivers/clk/ti/clk-dra7-atl.c | 9 +- drivers/clk/zynqmp/clkc.c | 7 + drivers/clk/zynqmp/pll.c | 31 ++- drivers/crypto/cavium/cpt/cptpf_main.c | 6 +- drivers/crypto/ccp/ccp-dmaengine.c | 6 +- drivers/dma/ioat/dma.c | 6 +- drivers/firmware/efi/libstub/fdt.c | 8 - drivers/firmware/google/gsmi.c | 9 + drivers/fsi/fsi-core.c | 3 + drivers/gpu/drm/Kconfig | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 7 +- drivers/gpu/drm/amd/display/dc/calcs/bw_fixed.c | 6 +- drivers/gpu/drm/bridge/adv7511/adv7511.h | 5 +- drivers/gpu/drm/bridge/adv7511/adv7511_cec.c | 4 +- .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 4 +- drivers/gpu/drm/drm_ioctl.c | 8 +- drivers/gpu/drm/drm_mipi_dsi.c | 1 + drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 + drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 12 +- drivers/gpu/drm/msm/disp/dpu1/dpu_vbif.c | 29 +-- drivers/gpu/drm/nouveau/nouveau_bo.c | 4 +- drivers/gpu/drm/nouveau/nouveau_prime.c | 1 - drivers/gpu/drm/omapdrm/dss/dss.c | 3 + drivers/gpu/drm/vc4/vc4_vec.c | 4 +- drivers/hid/hid-multitouch.c | 8 +- drivers/hid/hid-roccat.c | 4 + drivers/hsi/controllers/omap_ssi_core.c | 1 + drivers/hsi/controllers/omap_ssi_port.c | 8 +- drivers/iio/adc/at91-sama5d2_adc.c | 14 +- drivers/iio/dac/ad5593r.c | 46 ++-- drivers/iio/inkern.c | 6 +- drivers/iio/pressure/dps310.c | 262 +++++++++++++-------- drivers/infiniband/sw/rxe/rxe_qp.c | 10 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 27 ++- drivers/iommu/omap-iommu-debug.c | 6 +- drivers/isdn/mISDN/l1oip.h | 1 + drivers/isdn/mISDN/l1oip_core.c | 13 +- drivers/mailbox/bcm-flexrm-mailbox.c | 8 +- drivers/md/bcache/writeback.c | 73 ++++-- drivers/md/raid0.c | 4 +- drivers/md/raid5.c | 14 +- drivers/media/pci/cx88/cx88-vbi.c | 9 +- drivers/media/pci/cx88/cx88-video.c | 43 ++-- drivers/media/platform/exynos4-is/fimc-is.c | 1 + drivers/media/platform/xilinx/xilinx-vipp.c | 9 +- drivers/memory/of_memory.c | 1 + drivers/memory/pl353-smc.c | 1 + drivers/mfd/fsl-imx25-tsadc.c | 34 ++- drivers/mfd/intel_soc_pmic_core.c | 1 + drivers/mfd/lp8788-irq.c | 3 + drivers/mfd/lp8788.c | 12 +- drivers/mfd/sm501.c | 7 +- drivers/misc/ocxl/file.c | 2 + drivers/mmc/host/au1xmmc.c | 3 +- drivers/mmc/host/sdhci-msm.c | 1 + drivers/mmc/host/sdhci-sprd.c | 2 +- drivers/mmc/host/wmt-sdmmc.c | 5 +- drivers/mtd/devices/docg3.c | 7 +- drivers/mtd/nand/raw/atmel/nand-controller.c | 1 + drivers/mtd/nand/raw/meson_nand.c | 4 +- drivers/net/can/usb/kvaser_usb/kvaser_usb.h | 2 + drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 3 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c | 2 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 79 +++++++ drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 1 + drivers/net/ethernet/freescale/fs_enet/mac-fec.c | 2 +- drivers/net/ethernet/marvell/mvpp2/mvpp2.h | 1 + drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c | 10 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 13 +- drivers/net/usb/r8152.c | 4 +- drivers/net/wireless/ath/ath10k/mac.c | 54 +++-- drivers/net/wireless/ath/ath9k/htc_hst.c | 43 ++-- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 3 +- .../net/wireless/broadcom/brcm80211/brcmfmac/pno.c | 12 +- drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 34 ++- .../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 21 +- drivers/nvme/host/core.c | 3 +- drivers/nvme/target/tcp.c | 11 +- drivers/pci/setup-res.c | 11 + drivers/phy/qualcomm/phy-qcom-usb-hsic.c | 6 +- drivers/platform/chrome/chromeos_laptop.c | 24 +- drivers/platform/chrome/cros_ec_chardev.c | 3 + drivers/platform/x86/msi-laptop.c | 14 +- drivers/power/supply/adp5061.c | 6 +- drivers/powercap/intel_rapl_common.c | 3 + drivers/regulator/qcom_rpm-regulator.c | 24 +- drivers/scsi/3w-9xxx.c | 2 +- drivers/scsi/libsas/sas_expander.c | 2 +- drivers/soc/qcom/smem_state.c | 3 +- drivers/soc/qcom/smsm.c | 20 +- drivers/spi/spi-omap-100k.c | 1 + drivers/spi/spi-qup.c | 21 +- drivers/spi/spi-s3c64xx.c | 9 + drivers/spmi/spmi-pmic-arb.c | 13 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/rtl8723bs/core/rtw_cmd.c | 16 +- drivers/staging/vt6655/device_main.c | 8 +- drivers/thermal/intel/intel_powerclamp.c | 4 +- drivers/tty/serial/8250/8250_port.c | 7 +- drivers/tty/serial/fsl_lpuart.c | 2 + drivers/tty/serial/jsm/jsm_driver.c | 3 +- drivers/tty/serial/xilinx_uartps.c | 2 + drivers/usb/core/quirks.c | 4 + drivers/usb/gadget/function/f_printer.c | 12 +- drivers/usb/host/xhci-mem.c | 7 +- drivers/usb/host/xhci.c | 3 +- drivers/usb/misc/idmouse.c | 8 +- drivers/usb/musb/musb_gadget.c | 3 + drivers/usb/storage/unusual_devs.h | 6 - drivers/vhost/vsock.c | 2 +- drivers/video/fbdev/smscufx.c | 14 +- drivers/video/fbdev/stifb.c | 2 +- fs/btrfs/qgroup.c | 15 ++ fs/btrfs/scrub.c | 36 +++ fs/cifs/file.c | 9 + fs/cifs/smb2pdu.c | 4 +- fs/dlm/ast.c | 6 +- fs/dlm/lock.c | 16 +- fs/ext4/file.c | 6 + fs/ext4/inode.c | 7 + fs/ext4/resize.c | 2 +- fs/ext4/super.c | 3 +- fs/f2fs/checkpoint.c | 10 +- fs/f2fs/extent_cache.c | 3 +- fs/f2fs/f2fs.h | 4 + fs/f2fs/gc.c | 10 +- fs/f2fs/recovery.c | 23 +- fs/f2fs/super.c | 4 +- fs/io_uring.c | 1 + fs/jbd2/commit.c | 2 +- fs/jbd2/transaction.c | 6 +- fs/nfsd/nfs4recover.c | 4 +- fs/nfsd/nfs4xdr.c | 2 +- fs/nilfs2/inode.c | 18 +- fs/quota/quota_tree.c | 38 +++ fs/userfaultfd.c | 4 +- include/linux/ata.h | 39 +-- include/linux/dynamic_debug.h | 2 +- include/linux/iova.h | 2 +- include/linux/once.h | 28 +++ include/linux/skbuff.h | 2 + include/linux/tcp.h | 2 +- include/net/ieee802154_netdev.h | 12 +- include/net/sock.h | 2 +- include/net/tcp.h | 5 +- kernel/bpf/btf.c | 2 +- kernel/bpf/syscall.c | 2 + kernel/cgroup/cpuset.c | 18 +- kernel/gcov/gcc_4_7.c | 18 +- kernel/livepatch/transition.c | 18 +- kernel/trace/ftrace.c | 8 +- kernel/trace/ring_buffer.c | 48 +++- kernel/trace/trace.c | 22 ++ lib/dynamic_debug.c | 11 +- lib/once.c | 30 +++ net/bluetooth/hci_sysfs.c | 3 + net/bluetooth/l2cap_core.c | 17 +- net/can/bcm.c | 7 +- net/core/stream.c | 3 +- net/ieee802154/socket.c | 4 + net/ipv4/af_inet.c | 2 +- net/ipv4/inet_hashtables.c | 4 +- net/ipv4/netfilter/nft_fib_ipv4.c | 3 + net/ipv4/tcp.c | 19 +- net/ipv4/tcp_input.c | 2 +- net/ipv4/tcp_ipv4.c | 11 +- net/ipv4/tcp_output.c | 19 +- net/ipv4/udp.c | 6 +- net/ipv6/netfilter/nft_fib_ipv6.c | 6 +- net/ipv6/tcp_ipv6.c | 11 +- net/ipv6/udp.c | 4 +- net/mac80211/cfg.c | 3 - net/openvswitch/datapath.c | 18 +- net/rds/tcp.c | 2 +- net/sctp/auth.c | 18 +- net/unix/garbage.c | 20 ++ net/vmw_vsock/virtio_transport_common.c | 2 +- net/xfrm/xfrm_ipcomp.c | 1 + scripts/Kbuild.include | 23 +- scripts/selinux/install_policy.sh | 2 +- sound/core/pcm_dmaengine.c | 8 +- sound/core/rawmidi.c | 2 - sound/core/sound_oss.c | 13 +- sound/pci/hda/hda_beep.c | 15 +- sound/pci/hda/hda_beep.h | 1 + sound/pci/hda/patch_hdmi.c | 6 - sound/pci/hda/patch_realtek.c | 11 +- sound/pci/hda/patch_sigmatel.c | 25 +- sound/soc/codecs/wcd9335.c | 2 +- sound/soc/codecs/wm5102.c | 6 +- sound/soc/codecs/wm5110.c | 6 +- sound/soc/codecs/wm8997.c | 6 +- sound/soc/fsl/eukrea-tlv320.c | 8 +- sound/soc/sh/rcar/ctu.c | 6 +- sound/soc/sh/rcar/dvc.c | 6 +- sound/soc/sh/rcar/mix.c | 6 +- sound/soc/sh/rcar/src.c | 5 +- sound/soc/sh/rcar/ssi.c | 4 +- sound/usb/endpoint.c | 6 +- tools/bpf/bpftool/btf_dumper.c | 2 +- tools/bpf/bpftool/main.c | 10 + tools/perf/util/intel-pt.c | 9 +- 259 files changed, 1849 insertions(+), 760 deletions(-)

3 years, 1 month

12
275
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror October 2022