November 2024 - Linux-stable-mirror

FAILED: patch "[PATCH] media: av7110: fix a spectre vulnerability" failed to apply to 5.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y git checkout FETCH_HEAD git cherry-pick -x 458ea1c0be991573ec436aa0afa23baacfae101a # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024110948-sharply-unissued-74b9@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 458ea1c0be991573ec436aa0afa23baacfae101a Mon Sep 17 00:00:00 2001 From: Mauro Carvalho Chehab <mchehab+huawei(a)kernel.org> Date: Tue, 15 Oct 2024 09:24:24 +0200 Subject: [PATCH] media: av7110: fix a spectre vulnerability As warned by smatch: drivers/staging/media/av7110/av7110_ca.c:270 dvb_ca_ioctl() warn: potential spectre issue 'av7110->ci_slot' [w] (local cap) There is a spectre-related vulnerability at the code. Fix it. Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Cc: stable(a)vger.kernel.org Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei(a)kernel.org> diff --git a/drivers/staging/media/av7110/av7110.h b/drivers/staging/media/av7110/av7110.h index ec461fd187af..b584754f4be0 100644 --- a/drivers/staging/media/av7110/av7110.h +++ b/drivers/staging/media/av7110/av7110.h @@ -88,6 +88,8 @@ struct infrared { u32 ir_config; }; +#define MAX_CI_SLOTS 2 + /* place to store all the necessary device information */ struct av7110 { /* devices */ @@ -163,7 +165,7 @@ struct av7110 { /* CA */ - struct ca_slot_info ci_slot[2]; + struct ca_slot_info ci_slot[MAX_CI_SLOTS]; enum av7110_video_mode vidmode; struct dmxdev dmxdev; diff --git a/drivers/staging/media/av7110/av7110_ca.c b/drivers/staging/media/av7110/av7110_ca.c index 6ce212c64e5d..fce4023c9dea 100644 --- a/drivers/staging/media/av7110/av7110_ca.c +++ b/drivers/staging/media/av7110/av7110_ca.c @@ -26,23 +26,28 @@ void CI_handle(struct av7110 *av7110, u8 *data, u16 len) { + unsigned slot_num; + dprintk(8, "av7110:%p\n", av7110); if (len < 3) return; switch (data[0]) { case CI_MSG_CI_INFO: - if (data[2] != 1 && data[2] != 2) + if (data[2] != 1 && data[2] != MAX_CI_SLOTS) break; + + slot_num = array_index_nospec(data[2] - 1, MAX_CI_SLOTS); + switch (data[1]) { case 0: - av7110->ci_slot[data[2] - 1].flags = 0; + av7110->ci_slot[slot_num].flags = 0; break; case 1: - av7110->ci_slot[data[2] - 1].flags |= CA_CI_MODULE_PRESENT; + av7110->ci_slot[slot_num].flags |= CA_CI_MODULE_PRESENT; break; case 2: - av7110->ci_slot[data[2] - 1].flags |= CA_CI_MODULE_READY; + av7110->ci_slot[slot_num].flags |= CA_CI_MODULE_READY; break; } break; @@ -262,15 +267,19 @@ static int dvb_ca_ioctl(struct file *file, unsigned int cmd, void *parg) case CA_GET_SLOT_INFO: { struct ca_slot_info *info = (struct ca_slot_info *)parg; + unsigned int slot_num; if (info->num < 0 || info->num > 1) { mutex_unlock(&av7110->ioctl_mutex); return -EINVAL; } - av7110->ci_slot[info->num].num = info->num; - av7110->ci_slot[info->num].type = FW_CI_LL_SUPPORT(av7110->arm_app) ? - CA_CI_LINK : CA_CI; - memcpy(info, &av7110->ci_slot[info->num], sizeof(struct ca_slot_info)); + slot_num = array_index_nospec(info->num, MAX_CI_SLOTS); + + av7110->ci_slot[slot_num].num = info->num; + av7110->ci_slot[slot_num].type = FW_CI_LL_SUPPORT(av7110->arm_app) ? + CA_CI_LINK : CA_CI; + memcpy(info, &av7110->ci_slot[slot_num], + sizeof(struct ca_slot_info)); break; }

5 months, 2 weeks

1
0
0 0

FAILED: patch "[PATCH] media: av7110: fix a spectre vulnerability" failed to apply to 6.1-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.1-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y git checkout FETCH_HEAD git cherry-pick -x 458ea1c0be991573ec436aa0afa23baacfae101a # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024110947-probing-conform-ac38@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 458ea1c0be991573ec436aa0afa23baacfae101a Mon Sep 17 00:00:00 2001 From: Mauro Carvalho Chehab <mchehab+huawei(a)kernel.org> Date: Tue, 15 Oct 2024 09:24:24 +0200 Subject: [PATCH] media: av7110: fix a spectre vulnerability As warned by smatch: drivers/staging/media/av7110/av7110_ca.c:270 dvb_ca_ioctl() warn: potential spectre issue 'av7110->ci_slot' [w] (local cap) There is a spectre-related vulnerability at the code. Fix it. Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Cc: stable(a)vger.kernel.org Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei(a)kernel.org> diff --git a/drivers/staging/media/av7110/av7110.h b/drivers/staging/media/av7110/av7110.h index ec461fd187af..b584754f4be0 100644 --- a/drivers/staging/media/av7110/av7110.h +++ b/drivers/staging/media/av7110/av7110.h @@ -88,6 +88,8 @@ struct infrared { u32 ir_config; }; +#define MAX_CI_SLOTS 2 + /* place to store all the necessary device information */ struct av7110 { /* devices */ @@ -163,7 +165,7 @@ struct av7110 { /* CA */ - struct ca_slot_info ci_slot[2]; + struct ca_slot_info ci_slot[MAX_CI_SLOTS]; enum av7110_video_mode vidmode; struct dmxdev dmxdev; diff --git a/drivers/staging/media/av7110/av7110_ca.c b/drivers/staging/media/av7110/av7110_ca.c index 6ce212c64e5d..fce4023c9dea 100644 --- a/drivers/staging/media/av7110/av7110_ca.c +++ b/drivers/staging/media/av7110/av7110_ca.c @@ -26,23 +26,28 @@ void CI_handle(struct av7110 *av7110, u8 *data, u16 len) { + unsigned slot_num; + dprintk(8, "av7110:%p\n", av7110); if (len < 3) return; switch (data[0]) { case CI_MSG_CI_INFO: - if (data[2] != 1 && data[2] != 2) + if (data[2] != 1 && data[2] != MAX_CI_SLOTS) break; + + slot_num = array_index_nospec(data[2] - 1, MAX_CI_SLOTS); + switch (data[1]) { case 0: - av7110->ci_slot[data[2] - 1].flags = 0; + av7110->ci_slot[slot_num].flags = 0; break; case 1: - av7110->ci_slot[data[2] - 1].flags |= CA_CI_MODULE_PRESENT; + av7110->ci_slot[slot_num].flags |= CA_CI_MODULE_PRESENT; break; case 2: - av7110->ci_slot[data[2] - 1].flags |= CA_CI_MODULE_READY; + av7110->ci_slot[slot_num].flags |= CA_CI_MODULE_READY; break; } break; @@ -262,15 +267,19 @@ static int dvb_ca_ioctl(struct file *file, unsigned int cmd, void *parg) case CA_GET_SLOT_INFO: { struct ca_slot_info *info = (struct ca_slot_info *)parg; + unsigned int slot_num; if (info->num < 0 || info->num > 1) { mutex_unlock(&av7110->ioctl_mutex); return -EINVAL; } - av7110->ci_slot[info->num].num = info->num; - av7110->ci_slot[info->num].type = FW_CI_LL_SUPPORT(av7110->arm_app) ? - CA_CI_LINK : CA_CI; - memcpy(info, &av7110->ci_slot[info->num], sizeof(struct ca_slot_info)); + slot_num = array_index_nospec(info->num, MAX_CI_SLOTS); + + av7110->ci_slot[slot_num].num = info->num; + av7110->ci_slot[slot_num].type = FW_CI_LL_SUPPORT(av7110->arm_app) ? + CA_CI_LINK : CA_CI; + memcpy(info, &av7110->ci_slot[slot_num], + sizeof(struct ca_slot_info)); break; }

5 months, 2 weeks

1
0
0 0

FAILED: patch "[PATCH] media: av7110: fix a spectre vulnerability" failed to apply to 6.6-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.6-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y git checkout FETCH_HEAD git cherry-pick -x 458ea1c0be991573ec436aa0afa23baacfae101a # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024110947-passivism-unstirred-8a08@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 458ea1c0be991573ec436aa0afa23baacfae101a Mon Sep 17 00:00:00 2001 From: Mauro Carvalho Chehab <mchehab+huawei(a)kernel.org> Date: Tue, 15 Oct 2024 09:24:24 +0200 Subject: [PATCH] media: av7110: fix a spectre vulnerability As warned by smatch: drivers/staging/media/av7110/av7110_ca.c:270 dvb_ca_ioctl() warn: potential spectre issue 'av7110->ci_slot' [w] (local cap) There is a spectre-related vulnerability at the code. Fix it. Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Cc: stable(a)vger.kernel.org Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei(a)kernel.org> diff --git a/drivers/staging/media/av7110/av7110.h b/drivers/staging/media/av7110/av7110.h index ec461fd187af..b584754f4be0 100644 --- a/drivers/staging/media/av7110/av7110.h +++ b/drivers/staging/media/av7110/av7110.h @@ -88,6 +88,8 @@ struct infrared { u32 ir_config; }; +#define MAX_CI_SLOTS 2 + /* place to store all the necessary device information */ struct av7110 { /* devices */ @@ -163,7 +165,7 @@ struct av7110 { /* CA */ - struct ca_slot_info ci_slot[2]; + struct ca_slot_info ci_slot[MAX_CI_SLOTS]; enum av7110_video_mode vidmode; struct dmxdev dmxdev; diff --git a/drivers/staging/media/av7110/av7110_ca.c b/drivers/staging/media/av7110/av7110_ca.c index 6ce212c64e5d..fce4023c9dea 100644 --- a/drivers/staging/media/av7110/av7110_ca.c +++ b/drivers/staging/media/av7110/av7110_ca.c @@ -26,23 +26,28 @@ void CI_handle(struct av7110 *av7110, u8 *data, u16 len) { + unsigned slot_num; + dprintk(8, "av7110:%p\n", av7110); if (len < 3) return; switch (data[0]) { case CI_MSG_CI_INFO: - if (data[2] != 1 && data[2] != 2) + if (data[2] != 1 && data[2] != MAX_CI_SLOTS) break; + + slot_num = array_index_nospec(data[2] - 1, MAX_CI_SLOTS); + switch (data[1]) { case 0: - av7110->ci_slot[data[2] - 1].flags = 0; + av7110->ci_slot[slot_num].flags = 0; break; case 1: - av7110->ci_slot[data[2] - 1].flags |= CA_CI_MODULE_PRESENT; + av7110->ci_slot[slot_num].flags |= CA_CI_MODULE_PRESENT; break; case 2: - av7110->ci_slot[data[2] - 1].flags |= CA_CI_MODULE_READY; + av7110->ci_slot[slot_num].flags |= CA_CI_MODULE_READY; break; } break; @@ -262,15 +267,19 @@ static int dvb_ca_ioctl(struct file *file, unsigned int cmd, void *parg) case CA_GET_SLOT_INFO: { struct ca_slot_info *info = (struct ca_slot_info *)parg; + unsigned int slot_num; if (info->num < 0 || info->num > 1) { mutex_unlock(&av7110->ioctl_mutex); return -EINVAL; } - av7110->ci_slot[info->num].num = info->num; - av7110->ci_slot[info->num].type = FW_CI_LL_SUPPORT(av7110->arm_app) ? - CA_CI_LINK : CA_CI; - memcpy(info, &av7110->ci_slot[info->num], sizeof(struct ca_slot_info)); + slot_num = array_index_nospec(info->num, MAX_CI_SLOTS); + + av7110->ci_slot[slot_num].num = info->num; + av7110->ci_slot[slot_num].type = FW_CI_LL_SUPPORT(av7110->arm_app) ? + CA_CI_LINK : CA_CI; + memcpy(info, &av7110->ci_slot[slot_num], + sizeof(struct ca_slot_info)); break; }

5 months, 2 weeks

1
0
0 0

FAILED: Patch "posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone" failed to apply to v6.1-stable tree

by Sasha Levin

The patch below does not apply to the v6.1-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. Thanks, Sasha ------------------ original commit in Linus's tree ------------------ From b5413156bad91dc2995a5c4eab1b05e56914638a Mon Sep 17 00:00:00 2001 From: Benjamin Segall <bsegall(a)google.com> Date: Fri, 25 Oct 2024 18:35:35 -0700 Subject: [PATCH] posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone When cloning a new thread, its posix_cputimers are not inherited, and are cleared by posix_cputimers_init(). However, this does not clear the tick dependency it creates in tsk->tick_dep_mask, and the handler does not reach the code to clear the dependency if there were no timers to begin with. Thus if a thread has a cputimer running before clone/fork, all descendants will prevent nohz_full unless they create a cputimer of their own. Fix this by entirely clearing the tick_dep_mask in copy_process(). (There is currently no inherited state that needs a tick dependency) Process-wide timers do not have this problem because fork does not copy signal_struct as a baseline, it creates one from scratch. Fixes: b78783000d5c ("posix-cpu-timers: Migrate to use new tick dependency mask model") Signed-off-by: Ben Segall <bsegall(a)google.com> Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de> Reviewed-by: Frederic Weisbecker <frederic(a)kernel.org> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/all/xm26o737bq8o.fsf@google.com --- include/linux/tick.h | 8 ++++++++ kernel/fork.c | 2 ++ 2 files changed, 10 insertions(+) diff --git a/include/linux/tick.h b/include/linux/tick.h index 72744638c5b0f..99c9c5a7252aa 100644 --- a/include/linux/tick.h +++ b/include/linux/tick.h @@ -251,12 +251,19 @@ static inline void tick_dep_set_task(struct task_struct *tsk, if (tick_nohz_full_enabled()) tick_nohz_dep_set_task(tsk, bit); } + static inline void tick_dep_clear_task(struct task_struct *tsk, enum tick_dep_bits bit) { if (tick_nohz_full_enabled()) tick_nohz_dep_clear_task(tsk, bit); } + +static inline void tick_dep_init_task(struct task_struct *tsk) +{ + atomic_set(&tsk->tick_dep_mask, 0); +} + static inline void tick_dep_set_signal(struct task_struct *tsk, enum tick_dep_bits bit) { @@ -290,6 +297,7 @@ static inline void tick_dep_set_task(struct task_struct *tsk, enum tick_dep_bits bit) { } static inline void tick_dep_clear_task(struct task_struct *tsk, enum tick_dep_bits bit) { } +static inline void tick_dep_init_task(struct task_struct *tsk) { } static inline void tick_dep_set_signal(struct task_struct *tsk, enum tick_dep_bits bit) { } static inline void tick_dep_clear_signal(struct signal_struct *signal, diff --git a/kernel/fork.c b/kernel/fork.c index 89ceb4a68af25..6fa9fe62e01e3 100644 --- a/kernel/fork.c +++ b/kernel/fork.c @@ -105,6 +105,7 @@ #include <linux/rseq.h> #include <uapi/linux/pidfd.h> #include <linux/pidfs.h> +#include <linux/tick.h> #include <asm/pgalloc.h> #include <linux/uaccess.h> @@ -2292,6 +2293,7 @@ __latent_entropy struct task_struct *copy_process( acct_clear_integrals(p); posix_cputimers_init(&p->posix_cputimers); + tick_dep_init_task(p); p->io_context = NULL; audit_set_context(p, NULL); -- 2.43.0

5 months, 2 weeks

2
2
0 0

[PATCH] USB: core: remove dead code in do_proc_bulk()

by Rex Nie

Since len1 is unsigned int, len1 < 0 always false. Remove it keep code simple. Signed-off-by: Rex Nie <rex.nie(a)jaguarmicro.com> --- drivers/usb/core/devio.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/usb/core/devio.c b/drivers/usb/core/devio.c index 3beb6a862e80..712e290bab04 100644 --- a/drivers/usb/core/devio.c +++ b/drivers/usb/core/devio.c @@ -1295,7 +1295,7 @@ static int do_proc_bulk(struct usb_dev_state *ps, return ret; len1 = bulk->len; - if (len1 < 0 || len1 >= (INT_MAX - sizeof(struct urb))) + if (len1 >= (INT_MAX - sizeof(struct urb))) return -EINVAL; if (bulk->ep & USB_DIR_IN) -- 2.17.1

5 months, 2 weeks

3
3
0 0

[PATCH 1/3] spmi: pmic-arb: fix return path in for_each_available_child_of_node()

by Stephen Boyd

From: Javier Carrasco <javier.carrasco.cruz(a)gmail.com> This loop requires explicit calls to of_node_put() upon early exits (break, goto, return) to decrement the child refcounter and avoid memory leaks if the child is not required out of the loop. A more robust solution is using the scoped variant of the macro, which automatically calls of_node_put() when the child goes out of scope. Cc: stable(a)vger.kernel.org Fixes: 979987371739 ("spmi: pmic-arb: Add multi bus support") Signed-off-by: Javier Carrasco <javier.carrasco.cruz(a)gmail.com> Link: https://lore.kernel.org/r/20241001-spmi-pmic-arb-scoped-v1-1-5872bab34ed6@g… Reviewed-by: Neil Armstrong <neil.armstrong(a)linaro.org> Signed-off-by: Stephen Boyd <sboyd(a)kernel.org> --- drivers/spmi/spmi-pmic-arb.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/drivers/spmi/spmi-pmic-arb.c b/drivers/spmi/spmi-pmic-arb.c index 9ba9495fcc4b..ea843159b745 100644 --- a/drivers/spmi/spmi-pmic-arb.c +++ b/drivers/spmi/spmi-pmic-arb.c @@ -1763,14 +1763,13 @@ static int spmi_pmic_arb_register_buses(struct spmi_pmic_arb *pmic_arb, { struct device *dev = &pdev->dev; struct device_node *node = dev->of_node; - struct device_node *child; int ret; /* legacy mode doesn't provide child node for the bus */ if (of_device_is_compatible(node, "qcom,spmi-pmic-arb")) return spmi_pmic_arb_bus_init(pdev, node, pmic_arb); - for_each_available_child_of_node(node, child) { + for_each_available_child_of_node_scoped(node, child) { if (of_node_name_eq(child, "spmi")) { ret = spmi_pmic_arb_bus_init(pdev, child, pmic_arb); if (ret) -- https://git.kernel.org/pub/scm/linux/kernel/git/clk/linux.git/ https://git.kernel.org/pub/scm/linux/kernel/git/sboyd/spmi.git

5 months, 2 weeks

1
0
0 0

[PATCH v5 04/10] crypto: ccp: Fix uapi definitions of PSP errors

by Dionna Glaze

Additions to the error enum after the explicit 0x27 setting for SEV_RET_INVALID_KEY leads to incorrect value assignments. Use explicit values to match the manufacturer specifications more clearly. Fixes: 3a45dc2b419e ("crypto: ccp: Define the SEV-SNP commands") CC: Sean Christopherson <seanjc(a)google.com> CC: Paolo Bonzini <pbonzini(a)redhat.com> CC: Thomas Gleixner <tglx(a)linutronix.de> CC: Ingo Molnar <mingo(a)redhat.com> CC: Borislav Petkov <bp(a)alien8.de> CC: Dave Hansen <dave.hansen(a)linux.intel.com> CC: Ashish Kalra <ashish.kalra(a)amd.com> CC: Tom Lendacky <thomas.lendacky(a)amd.com> CC: John Allen <john.allen(a)amd.com> CC: Herbert Xu <herbert(a)gondor.apana.org.au> CC: "David S. Miller" <davem(a)davemloft.net> CC: Michael Roth <michael.roth(a)amd.com> CC: Luis Chamberlain <mcgrof(a)kernel.org> CC: Russ Weight <russ.weight(a)linux.dev> CC: Danilo Krummrich <dakr(a)redhat.com> CC: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> CC: "Rafael J. Wysocki" <rafael(a)kernel.org> CC: Tianfei zhang <tianfei.zhang(a)intel.com> CC: Alexey Kardashevskiy <aik(a)amd.com> CC: stable(a)vger.kernel.org From: Alexey Kardashevskiy <aik(a)amd.com> Signed-off-by: Alexey Kardashevskiy <aik(a)amd.com> Signed-off-by: Dionna Glaze <dionnaglaze(a)google.com> --- include/uapi/linux/psp-sev.h | 21 ++++++++++++++------- 1 file changed, 14 insertions(+), 7 deletions(-) diff --git a/include/uapi/linux/psp-sev.h b/include/uapi/linux/psp-sev.h index 832c15d9155bd..eeb20dfb1fdaa 100644 --- a/include/uapi/linux/psp-sev.h +++ b/include/uapi/linux/psp-sev.h @@ -73,13 +73,20 @@ typedef enum { SEV_RET_INVALID_PARAM, SEV_RET_RESOURCE_LIMIT, SEV_RET_SECURE_DATA_INVALID, - SEV_RET_INVALID_KEY = 0x27, - SEV_RET_INVALID_PAGE_SIZE, - SEV_RET_INVALID_PAGE_STATE, - SEV_RET_INVALID_MDATA_ENTRY, - SEV_RET_INVALID_PAGE_OWNER, - SEV_RET_INVALID_PAGE_AEAD_OFLOW, - SEV_RET_RMP_INIT_REQUIRED, + SEV_RET_INVALID_PAGE_SIZE = 0x0019, + SEV_RET_INVALID_PAGE_STATE = 0x001A, + SEV_RET_INVALID_MDATA_ENTRY = 0x001B, + SEV_RET_INVALID_PAGE_OWNER = 0x001C, + SEV_RET_AEAD_OFLOW = 0x001D, + SEV_RET_EXIT_RING_BUFFER = 0x001F, + SEV_RET_RMP_INIT_REQUIRED = 0x0020, + SEV_RET_BAD_SVN = 0x0021, + SEV_RET_BAD_VERSION = 0x0022, + SEV_RET_SHUTDOWN_REQUIRED = 0x0023, + SEV_RET_UPDATE_FAILED = 0x0024, + SEV_RET_RESTORE_REQUIRED = 0x0025, + SEV_RET_RMP_INITIALIZATION_FAILED = 0x0026, + SEV_RET_INVALID_KEY = 0x0027, SEV_RET_MAX, } sev_ret_code; -- 2.47.0.277.g8800431eea-goog

5 months, 2 weeks

3
2
0 0

Linux 6.6.60

by Greg Kroah-Hartman

I'm announcing the release of the 6.6.60 kernel. All users of the 6.6 kernel series must upgrade. The updated 6.6.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm64/boot/dts/freescale/imx8ulp.dtsi | 2 arch/riscv/kernel/acpi.c | 4 arch/riscv/kernel/asm-offsets.c | 2 arch/riscv/kernel/cpu-hotplug.c | 2 arch/riscv/kernel/efi-header.S | 2 arch/riscv/kernel/traps_misaligned.c | 2 arch/riscv/kernel/vdso/Makefile | 1 arch/x86/include/asm/bug.h | 12 arch/x86/kernel/traps.c | 71 ++ block/blk-map.c | 4 drivers/acpi/cppc_acpi.c | 9 drivers/base/core.c | 48 +- drivers/base/module.c | 4 drivers/cxl/acpi.c | 7 drivers/cxl/core/hdm.c | 50 +- drivers/cxl/core/port.c | 13 drivers/cxl/core/region.c | 48 -- drivers/cxl/core/trace.h | 17 drivers/cxl/cxl.h | 3 drivers/firmware/arm_sdei.c | 2 drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 drivers/iio/adc/ad7124.c | 2 drivers/iio/industrialio-gts-helper.c | 4 drivers/iio/light/veml6030.c | 2 drivers/infiniband/hw/bnxt_re/qplib_fp.c | 4 drivers/infiniband/hw/bnxt_re/qplib_rcfw.c | 38 - drivers/infiniband/hw/bnxt_re/qplib_rcfw.h | 2 drivers/infiniband/hw/cxgb4/provider.c | 1 drivers/infiniband/hw/mlx5/qp.c | 4 drivers/input/joystick/xpad.c | 12 drivers/input/touchscreen/edt-ft5x06.c | 19 drivers/misc/mei/client.c | 4 drivers/misc/sgi-gru/grukservices.c | 2 drivers/misc/sgi-gru/grumain.c | 4 drivers/misc/sgi-gru/grutlbpurge.c | 2 drivers/mmc/host/sdhci-pci-gli.c | 38 + drivers/mtd/spi-nor/winbond.c | 7 drivers/net/ethernet/amd/mvme147.c | 7 drivers/net/ethernet/mellanox/mlxsw/spectrum_ipip.c | 26 + drivers/net/ethernet/mellanox/mlxsw/spectrum_ptp.c | 7 drivers/net/ethernet/stmicro/stmmac/dwmac4_dma.c | 8 drivers/net/ethernet/stmicro/stmmac/dwmac4_dma.h | 2 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 22 drivers/net/gtp.c | 22 drivers/net/macsec.c | 3 drivers/net/mctp/mctp-i2c.c | 3 drivers/net/netdevsim/fib.c | 4 drivers/net/wireless/ath/ath10k/wmi-tlv.c | 7 drivers/net/wireless/ath/ath10k/wmi.c | 2 drivers/net/wireless/ath/ath11k/dp_rx.c | 7 drivers/net/wireless/broadcom/brcm80211/Kconfig | 1 drivers/net/wireless/intel/iwlegacy/common.c | 15 drivers/net/wireless/intel/iwlegacy/common.h | 12 drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 22 drivers/net/wireless/intel/iwlwifi/mvm/mld-mac80211.c | 24 - drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 3 drivers/nvme/target/auth.c | 1 drivers/phy/freescale/phy-fsl-imx8m-pcie.c | 10 drivers/phy/qualcomm/phy-qcom-qmp-usb-legacy.c | 1 drivers/phy/qualcomm/phy-qcom-qmp-usb.c | 1 drivers/scsi/scsi_transport_fc.c | 4 drivers/spi/spi-fsl-dspi.c | 6 drivers/spi/spi-geni-qcom.c | 8 drivers/staging/iio/frequency/ad9832.c | 7 drivers/thermal/intel/int340x_thermal/processor_thermal_rapl.c | 70 +- drivers/thermal/thermal_core.c | 25 - drivers/thunderbolt/tb.c | 48 +- drivers/usb/gadget/udc/dummy_hcd.c | 57 +- drivers/usb/host/xhci-pci.c | 6 drivers/usb/host/xhci-ring.c | 16 drivers/usb/phy/phy.c | 2 drivers/usb/typec/class.c | 1 drivers/usb/typec/tcpm/qcom/qcom_pmic_typec.c | 4 fs/afs/dir.c | 25 + fs/afs/dir_edit.c | 91 +++ fs/afs/internal.h | 2 fs/dax.c | 45 + fs/iomap/buffered-io.c | 7 fs/nfs/delegation.c | 5 fs/nilfs2/namei.c | 3 fs/nilfs2/page.c | 1 fs/ntfs3/file.c | 9 fs/ntfs3/frecord.c | 4 fs/ntfs3/inode.c | 15 fs/ntfs3/lznt.c | 3 fs/ntfs3/namei.c | 2 fs/ntfs3/ntfs_fs.h | 2 fs/ntfs3/record.c | 31 - fs/ocfs2/file.c | 8 fs/smb/client/cifs_unicode.c | 17 fs/smb/client/reparse.c | 174 ++++++- fs/smb/client/reparse.h | 9 fs/smb/client/smb2inode.c | 3 fs/smb/client/smb2proto.h | 1 fs/xfs/xfs_filestream.c | 23 fs/xfs/xfs_trace.h | 15 include/acpi/cppc_acpi.h | 2 include/linux/compiler-gcc.h | 4 include/linux/device.h | 3 include/linux/huge_mm.h | 18 include/linux/iomap.h | 19 include/linux/sched.h | 2 include/linux/thermal.h | 2 include/linux/ubsan.h | 5 include/net/ip_tunnels.h | 2 include/trace/events/afs.h | 240 +--------- init/init_task.c | 1 io_uring/io_uring.c | 13 io_uring/rw.c | 23 kernel/bpf/cgroup.c | 19 kernel/bpf/lpm_trie.c | 2 kernel/bpf/verifier.c | 9 kernel/cgroup/cgroup.c | 4 kernel/fork.c | 1 kernel/rcu/tasks.h | 90 ++- kernel/sched/fair.c | 4 lib/Kconfig.ubsan | 4 lib/iov_iter.c | 6 mm/huge_memory.c | 13 mm/kasan/kasan_test.c | 27 - mm/memory.c | 9 mm/migrate.c | 2 mm/page_alloc.c | 10 mm/shmem.c | 2 net/bluetooth/hci_sync.c | 18 net/bpf/test_run.c | 1 net/core/dev.c | 4 net/core/rtnetlink.c | 4 net/ipv6/netfilter/nf_reject_ipv6.c | 15 net/mac80211/Kconfig | 2 net/mac80211/agg-tx.c | 4 net/mac80211/cfg.c | 3 net/mac80211/key.c | 42 + net/mptcp/protocol.c | 2 net/netfilter/nft_payload.c | 3 net/netfilter/x_tables.c | 2 net/sched/sch_api.c | 2 net/sunrpc/svc.c | 9 net/wireless/core.c | 1 sound/pci/hda/patch_realtek.c | 23 sound/soc/codecs/cs42l51.c | 7 sound/soc/sof/ipc4-control.c | 175 +++++++ sound/soc/sof/ipc4-topology.c | 49 +- sound/soc/sof/ipc4-topology.h | 19 sound/usb/mixer_quirks.c | 3 tools/mm/page-types.c | 9 tools/mm/slabinfo.c | 4 tools/testing/cxl/test/cxl.c | 14 tools/testing/selftests/bpf/bpf_experimental.h | 31 + tools/testing/selftests/mm/uffd-common.c | 5 tools/testing/selftests/mm/uffd-common.h | 3 tools/testing/selftests/mm/uffd-unit-tests.c | 21 tools/usb/usbip/src/usbip_detach.c | 1 154 files changed, 1653 insertions(+), 771 deletions(-) Alan Stern (1): USB: gadget: dummy-hcd: Fix "task hung" problem Alexander Usyskin (1): mei: use kvmalloc for read buffer Alexandre Ghiti (1): riscv: vdso: Prevent the compiler from inserting calls to memset() Amit Cohen (1): mlxsw: spectrum_ptp: Add missing verification before pushing Tx header Andrew Ballance (1): fs/ntfs3: Check if more than chunk-size bytes are written Andrey Konovalov (2): usb: gadget: dummy_hcd: execute hrtimer callback in softirq context kasan: remove vmalloc_percpu test Basavaraj Natikar (1): xhci: Use pm_runtime_get to prevent RPM on unsupported systems Ben Chuang (2): mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process Ben Hutchings (1): wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() Benjamin Marzinski (1): scsi: scsi_transport_fc: Allow setting rport state to current state Benoît Monin (1): net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension Brenton Simpson (1): Input: xpad - sort xpad_device by vendor and product ID Byeonguk Jeong (1): bpf: Fix out-of-bounds write in trie_get_next_key() Chen Ridong (1): cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction Christoffer Sandberg (2): ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 Christoph Hellwig (3): iomap: improve shared block detection in iomap_unshare_iter iomap: turn iomap_want_unshare_iter into an inline function xfs: fix finding a last resort AG in xfs_filestream_pick_ag Christophe JAILLET (1): ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() Chuck Lever (1): SUNRPC: Remove BUG_ON call sites Chunyan Zhang (2): riscv: Remove unused GENERATING_ASM_OFFSETS riscv: Remove duplicated GET_RM Dai Ngo (1): NFS: remove revoked delegation from server's delegation list Dan Williams (3): cxl/port: Fix use-after-free, permit out-of-order decoder shutdown cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() cxl/acpi: Ensure ports ready at cxl_acpi_probe() return Daniel Gabay (1): wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() Daniel Palmer (1): net: amd: mvme147: Fix probe banner message Darrick J. Wong (4): iomap: don't bother unsharing delalloc extents iomap: share iomap_unshare_iter predicate code with fsdax fsdax: remove zeroing code from dax_unshare_iter fsdax: dax_unshare_iter needs to copy entire blocks David Hildenbrand (1): mm: don't install PMD mappings when THPs are disabled by the hw/process/vma David Howells (2): afs: Automatically generate trace tag enums afs: Fix missing subdir edit when renamed between parent dirs Dimitri Sivanich (1): misc: sgi-gru: Don't disable preemption in GRU driver Dmitry Torokhov (1): Input: edt-ft5x06 - fix regmap leak when probe fails Dong Chenchen (1): netfilter: Fix use-after-free in get_info() Eduard Zingerman (1): bpf: Force checkpoint when jmp history is too long Edward Adam Davis (1): ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Edward Liaw (2): Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM" Revert "selftests/mm: replace atomic_bool with pthread_barrier_t" Emmanuel Grumbach (2): wifi: iwlwifi: mvm: disconnect station vifs if recovery failed wifi: iwlwifi: mvm: don't add default link in fw restart flow Eric Dumazet (1): netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() Faisal Hassan (1): xhci: Fix Link TRB DMA in command ring stopped completion event Felix Fietkau (2): wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Frank Li (1): spi: spi-fsl-dspi: Fix crash when not using GPIO chip select Furong Xu (1): net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data Gatlin Newhouse (1): x86/traps: Enable UBSAN traps on x86 Geert Uytterhoeven (2): mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING wifi: brcm80211: BRCM_TRACING should depend on TRACING Georgi Djakov (1): spi: geni-qcom: Fix boot warning related to pm_runtime and devres Gil Fine (1): thunderbolt: Honor TMU requirements in the domain when setting TMU mode Greg Kroah-Hartman (2): Revert "driver core: Fix uevent_show() vs driver detach race" Linux 6.6.60 Gregory Price (1): vmscan,migrate: fix page count imbalance on node stats when demoting pages Haibo Chen (1): arm64: dts: imx8ulp: correct the flexspi compatible string Heinrich Schuchardt (1): riscv: efi: Set NX compat flag in PE/COFF header Hugh Dickins (1): iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP Ido Schimmel (2): ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address Jan Schär (1): ALSA: usb-audio: Add quirks for Dell WD19 dock Javier Carrasco (3): usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes iio: light: veml6030: fix microlux value calculation Jens Axboe (1): io_uring/rw: fix missing NOWAIT check for O_DIRECT start write Jeongjun Park (1): mm: shmem: fix data-race in shmem_getattr() Jianbo Liu (1): macsec: Fix use-after-free while sending the offloading packet Jinjie Ruan (2): iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() Johan Hovold (2): phy: qcom: qmp-usb: fix NULL-deref on runtime suspend phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Johannes Berg (2): wifi: cfg80211: clear wdev->cqm_config pointer on free wifi: iwlwifi: mvm: fix 6 GHz scan construction Kailang Yang (1): ALSA: hda/realtek: Limit internal Mic boost on Dell platform Kefeng Wang (1): mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw() Konstantin Komarov (8): fs/ntfs3: Fix warning possible deadlock in ntfs_set_state fs/ntfs3: Stale inode instead of bad fs/ntfs3: Add rough attr alloc_size check fs/ntfs3: Fix possible deadlock in mi_read fs/ntfs3: Additional check in ni_clear() fs/ntfs3: Fix general protection fault in run_is_mapped_full fs/ntfs3: Additional check in ntfs_file_release fs/ntfs3: Sequential field availability check in mi_enum_attr() Leon Romanovsky (1): RDMA/cxgb4: Dump vendor specific QP details Ley Foon Tan (1): net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values Manikanta Pubbisetty (1): wifi: ath10k: Fix memory leak in management tx Marcello Sylvester Bauer (2): usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler usb: gadget: dummy_hcd: Set transfer interval to 1 microframe Marco Elver (1): kasan: Fix Software Tag-Based KASAN with GCC Matt Fleming (1): mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves Matt Johnston (1): mctp i2c: handle NULL header address Matthieu Baerts (NGI0) (1): mptcp: init: protect sched with rcu_read_lock Michael Walle (1): mtd: spi-nor: winbond: fix w25q128 regression Pablo Neira Ayuso (2): gtp: allow -1 to be specified as file description from userspace netfilter: nft_payload: sanitize offset and length before calling skb_checksum() Pali Rohár (2): cifs: Improve creating native symlinks pointing to directory cifs: Fix creating native symlinks pointing to current or parent directory Patrisious Haddad (1): RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down Paul E. McKenney (3): rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks Paulo Alcantara (2): smb: client: fix parsing of device numbers smb: client: set correct device number on nfs reparse points Pavel Begunkov (1): io_uring: always lock __io_cqring_overflow_flush Pedro Tammela (1): net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT Peter Ujfalusi (3): ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control ASoC: SOF: ipc4-control: Add support for ALSA switch control ASoC: SOF: ipc4-control: Add support for ALSA enum control Pierre Gondois (1): ACPI: CPPC: Make rmw_lock a raw_spin_lock Rafael J. Wysocki (3): thermal: core: Make thermal_zone_device_unregister() return after freeing the zone thermal: core: Rework thermal zone availability check thermal: core: Free tzp copy along with the thermal zone Remi Pommarel (1): wifi: ath11k: Fix invalid ring usage in full monitor mode Richard Zhu (1): phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check Ryusuke Konishi (2): nilfs2: fix potential deadlock with newly created symlinks nilfs2: fix kernel bug due to missing clearing of checked flag Sabyrzhan Tasbolatov (1): x86/traps: move kmsan check after instrumentation_begin Selvin Xavier (2): RDMA/bnxt_re: Fix the usage of control path spin locks RDMA/bnxt_re: synchronize the qp-handle table array Shawn Wang (1): sched/numa: Fix the potential null pointer dereference in task_numa_work() Shiju Jose (1): cxl/events: Fix Trace DRAM Event Record Srinivasan Shanmugam (1): drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing Stefan Kerkmann (1): Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller Sungwoo Kim (1): Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs Toke Høiland-Jørgensen (1): bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled Ville Syrjälä (1): wifi: iwlegacy: Clear stale interrupts before resuming device Vitaliy Shevtsov (1): nvmet-auth: assign dh_key to NULL after kfree_sensitive Wang Liang (1): net: fix crash when config small gso_max_size/gso_ipv4_max_size WangYuli (1): riscv: Use '%u' to format the output of 'cpu' Wladislav Wiebe (1): tools/mm: -Werror fixes in page-types/slabinfo Xinyu Zhang (1): block: fix sanity checks in blk_rq_map_user_bvec Xiongfeng Wang (1): firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() Xiu Jianfeng (1): cgroup: Fix potential overflow issue when checking max_depth Yonghong Song (1): selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h Yunhui Cui (1): RISC-V: ACPI: fix early_ioremap to early_memremap Zhang Rui (2): thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support thermal: intel: int340x: processor: Add MMIO RAPL PL4 support Zichen Xie (1): netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() Zicheng Qu (2): staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() Zijun Hu (1): usb: phy: Fix API devm_usb_put_phy() can not release the phy Zong-Zhe Yang (1): wifi: mac80211: fix NULL dereference at band check in starting tx ba session Zongmin Zhou (1): usbip: tools: Fix detach_port() invalid port error path Zqiang (1): rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb() lei lu (1): ntfs3: Add bounds checking to mi_enum_attr()

5 months, 3 weeks

1
1
0 0

Linux 6.11.7

by Greg Kroah-Hartman

I'm announcing the release of the 6.11.7 kernel. All users of the 6.11 kernel series must upgrade. The updated 6.11.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.11.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/iio/adc/adi,ad7380.yaml | 21 Documentation/driver-api/dpll.rst | 21 Documentation/netlink/specs/dpll.yaml | 24 Documentation/rust/arch-support.rst | 2 Makefile | 2 arch/arm64/boot/dts/freescale/imx8ulp.dtsi | 2 arch/arm64/boot/dts/qcom/msm8939.dtsi | 2 arch/arm64/boot/dts/qcom/x1e80100-asus-vivobook-s15.dts | 2 arch/arm64/boot/dts/qcom/x1e80100-crd.dts | 2 arch/arm64/boot/dts/qcom/x1e80100-lenovo-yoga-slim7x.dts | 2 arch/arm64/boot/dts/qcom/x1e80100-qcp.dts | 2 arch/arm64/boot/dts/qcom/x1e80100.dtsi | 34 - arch/mips/kernel/cmpxchg.c | 1 arch/riscv/Kconfig | 2 arch/riscv/boot/dts/starfive/jh7110-common.dtsi | 2 arch/riscv/boot/dts/starfive/jh7110-pine64-star64.dts | 3 arch/riscv/kernel/acpi.c | 4 arch/riscv/kernel/asm-offsets.c | 2 arch/riscv/kernel/cacheinfo.c | 7 arch/riscv/kernel/cpu-hotplug.c | 2 arch/riscv/kernel/efi-header.S | 2 arch/riscv/kernel/traps_misaligned.c | 2 arch/riscv/kernel/vdso/Makefile | 1 arch/x86/include/asm/bug.h | 12 arch/x86/kernel/traps.c | 71 ++ block/blk-map.c | 4 drivers/accel/ivpu/ivpu_debugfs.c | 9 drivers/accel/ivpu/ivpu_hw.c | 1 drivers/accel/ivpu/ivpu_hw.h | 1 drivers/accel/ivpu/ivpu_hw_ip.c | 5 drivers/acpi/cppc_acpi.c | 9 drivers/acpi/resource.c | 18 drivers/base/core.c | 48 + drivers/base/module.c | 4 drivers/char/tpm/tpm-chip.c | 10 drivers/char/tpm/tpm-dev-common.c | 3 drivers/char/tpm/tpm-interface.c | 6 drivers/char/tpm/tpm2-sessions.c | 100 ++- drivers/cxl/Kconfig | 1 drivers/cxl/Makefile | 20 drivers/cxl/acpi.c | 7 drivers/cxl/core/hdm.c | 50 + drivers/cxl/core/port.c | 13 drivers/cxl/core/region.c | 48 - drivers/cxl/core/trace.h | 17 drivers/cxl/cxl.h | 3 drivers/cxl/port.c | 17 drivers/dpll/dpll_netlink.c | 130 ++++ drivers/dpll/dpll_nl.c | 5 drivers/firmware/arm_sdei.c | 2 drivers/firmware/microchip/mpfs-auto-update.c | 42 - drivers/gpio/gpio-sloppy-logic-analyzer.c | 4 drivers/gpio/gpiolib.c | 4 drivers/gpu/drm/amd/amdgpu/sdma_v7_0.c | 9 drivers/gpu/drm/amd/display/dc/dml2/dml2_policy.c | 1 drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 15 drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 4 drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 6 drivers/gpu/drm/i915/display/intel_alpm.c | 2 drivers/gpu/drm/i915/display/intel_backlight.c | 10 drivers/gpu/drm/i915/display/intel_display_device.c | 5 drivers/gpu/drm/i915/display/intel_display_device.h | 2 drivers/gpu/drm/i915/display/intel_display_power.c | 8 drivers/gpu/drm/i915/display/intel_display_power_well.c | 4 drivers/gpu/drm/i915/display/intel_display_types.h | 1 drivers/gpu/drm/i915/display/intel_display_wa.h | 8 drivers/gpu/drm/i915/display/intel_dp.c | 29 drivers/gpu/drm/i915/display/intel_dp.h | 1 drivers/gpu/drm/i915/display/intel_dp_aux.c | 4 drivers/gpu/drm/i915/display/intel_dp_hdcp.c | 11 drivers/gpu/drm/i915/display/intel_fbc.c | 6 drivers/gpu/drm/i915/display/intel_hdcp.c | 7 drivers/gpu/drm/i915/display/intel_pps.c | 14 drivers/gpu/drm/i915/display/intel_psr.c | 6 drivers/gpu/drm/i915/display/intel_tc.c | 3 drivers/gpu/drm/i915/display/intel_vrr.c | 3 drivers/gpu/drm/i915/display/skl_universal_plane.c | 5 drivers/gpu/drm/i915/intel_device_info.c | 5 drivers/gpu/drm/i915/intel_device_info.h | 2 drivers/gpu/drm/mediatek/mtk_crtc.c | 47 - drivers/gpu/drm/mediatek/mtk_disp_ovl.c | 9 drivers/gpu/drm/mediatek/mtk_dp.c | 85 ++ drivers/gpu/drm/panthor/panthor_fw.c | 4 drivers/gpu/drm/panthor/panthor_gem.c | 11 drivers/gpu/drm/panthor/panthor_mmu.c | 16 drivers/gpu/drm/panthor/panthor_mmu.h | 1 drivers/gpu/drm/panthor/panthor_sched.c | 20 drivers/gpu/drm/tegra/drm.c | 4 drivers/gpu/drm/tests/drm_connector_test.c | 24 drivers/gpu/drm/tests/drm_hdmi_state_helper_test.c | 8 drivers/gpu/drm/tests/drm_kunit_helpers.c | 42 + drivers/gpu/drm/xe/Makefile | 1 drivers/gpu/drm/xe/compat-i915-headers/i915_drv.h | 1 drivers/gpu/drm/xe/display/xe_display_wa.c | 16 drivers/gpu/drm/xe/regs/xe_gt_regs.h | 17 drivers/gpu/drm/xe/regs/xe_regs.h | 10 drivers/gpu/drm/xe/regs/xe_sriov_regs.h | 23 drivers/gpu/drm/xe/xe_device_types.h | 6 drivers/gpu/drm/xe/xe_ggtt.c | 10 drivers/gpu/drm/xe/xe_gt.c | 10 drivers/gpu/drm/xe/xe_gt_sriov_pf.c | 2 drivers/gpu/drm/xe/xe_guc_submit.c | 18 drivers/gpu/drm/xe/xe_lmtt.c | 2 drivers/gpu/drm/xe/xe_module.c | 39 + drivers/gpu/drm/xe/xe_sriov.c | 2 drivers/gpu/drm/xe/xe_tuning.c | 21 drivers/gpu/drm/xe/xe_wa.c | 4 drivers/iio/adc/ad7124.c | 2 drivers/iio/industrialio-gts-helper.c | 4 drivers/iio/light/veml6030.c | 2 drivers/infiniband/hw/bnxt_re/qplib_fp.c | 4 drivers/infiniband/hw/bnxt_re/qplib_rcfw.c | 38 - drivers/infiniband/hw/bnxt_re/qplib_rcfw.h | 2 drivers/infiniband/hw/cxgb4/provider.c | 1 drivers/infiniband/hw/mlx5/qp.c | 4 drivers/input/input.c | 134 ++-- drivers/input/touchscreen/edt-ft5x06.c | 19 drivers/misc/mei/client.c | 4 drivers/misc/sgi-gru/grukservices.c | 2 drivers/misc/sgi-gru/grumain.c | 4 drivers/misc/sgi-gru/grutlbpurge.c | 2 drivers/mmc/host/sdhci-pci-gli.c | 38 - drivers/net/ethernet/amd/mvme147.c | 7 drivers/net/ethernet/intel/ice/ice_dpll.c | 293 +++++++++- drivers/net/ethernet/intel/ice/ice_dpll.h | 1 drivers/net/ethernet/intel/ice/ice_ptp_hw.c | 21 drivers/net/ethernet/intel/ice/ice_ptp_hw.h | 1 drivers/net/ethernet/mediatek/mtk_wed_wo.h | 4 drivers/net/ethernet/mellanox/mlxsw/pci.c | 25 drivers/net/ethernet/mellanox/mlxsw/spectrum_ipip.c | 26 drivers/net/ethernet/mellanox/mlxsw/spectrum_ptp.c | 7 drivers/net/ethernet/stmicro/stmmac/dwmac4_dma.c | 8 drivers/net/ethernet/stmicro/stmmac/dwmac4_dma.h | 2 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 22 drivers/net/gtp.c | 22 drivers/net/macsec.c | 3 drivers/net/mctp/mctp-i2c.c | 3 drivers/net/netdevsim/fib.c | 4 drivers/net/wireless/ath/ath10k/wmi-tlv.c | 7 drivers/net/wireless/ath/ath10k/wmi.c | 2 drivers/net/wireless/ath/ath11k/dp_rx.c | 7 drivers/net/wireless/broadcom/brcm80211/Kconfig | 1 drivers/net/wireless/intel/iwlegacy/common.c | 15 drivers/net/wireless/intel/iwlegacy/common.h | 12 drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 28 drivers/net/wireless/intel/iwlwifi/iwl-drv.h | 3 drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 10 drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 12 drivers/net/wireless/intel/iwlwifi/mvm/mld-mac80211.c | 34 - drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 6 drivers/net/wireless/realtek/rtlwifi/rtl8192du/sw.c | 1 drivers/net/wireless/realtek/rtw89/pci.c | 48 + drivers/nvme/host/core.c | 19 drivers/nvme/host/ioctl.c | 7 drivers/nvme/target/auth.c | 1 drivers/pci/pci.c | 14 drivers/phy/freescale/phy-fsl-imx8m-pcie.c | 10 drivers/phy/qualcomm/phy-qcom-qmp-usb-legacy.c | 1 drivers/phy/qualcomm/phy-qcom-qmp-usb.c | 1 drivers/phy/qualcomm/phy-qcom-qmp-usbc.c | 1 drivers/powercap/intel_rapl_msr.c | 1 drivers/scsi/scsi_debug.c | 10 drivers/scsi/scsi_transport_fc.c | 4 drivers/soc/qcom/pmic_glink.c | 25 drivers/spi/spi-fsl-dspi.c | 6 drivers/spi/spi-geni-qcom.c | 8 drivers/staging/iio/frequency/ad9832.c | 7 drivers/thermal/intel/int340x_thermal/processor_thermal_rapl.c | 70 -- drivers/thunderbolt/retimer.c | 5 drivers/thunderbolt/tb.c | 48 + drivers/ufs/core/ufshcd.c | 2 drivers/usb/host/xhci-pci.c | 6 drivers/usb/host/xhci-ring.c | 16 drivers/usb/phy/phy.c | 2 drivers/usb/typec/class.c | 1 drivers/usb/typec/tcpm/qcom/qcom_pmic_typec.c | 10 drivers/usb/typec/tcpm/tcpm.c | 10 fs/afs/dir.c | 25 fs/afs/dir_edit.c | 91 +++ fs/afs/internal.h | 2 fs/btrfs/bio.c | 62 -- fs/btrfs/bio.h | 3 fs/btrfs/defrag.c | 10 fs/btrfs/extent_map.c | 7 fs/btrfs/volumes.c | 1 fs/dax.c | 45 - fs/iomap/buffered-io.c | 7 fs/nfs/delegation.c | 5 fs/nfsd/nfs4proc.c | 8 fs/nilfs2/namei.c | 3 fs/nilfs2/page.c | 1 fs/ntfs3/file.c | 9 fs/ntfs3/frecord.c | 4 fs/ntfs3/inode.c | 15 fs/ntfs3/lznt.c | 3 fs/ntfs3/namei.c | 2 fs/ntfs3/ntfs_fs.h | 2 fs/ntfs3/record.c | 31 - fs/ocfs2/file.c | 8 fs/smb/client/cifs_unicode.c | 17 fs/smb/client/reparse.c | 174 +++++ fs/smb/client/reparse.h | 9 fs/smb/client/smb2inode.c | 3 fs/smb/client/smb2proto.h | 1 fs/userfaultfd.c | 28 fs/xfs/xfs_filestream.c | 23 fs/xfs/xfs_trace.h | 15 include/acpi/cppc_acpi.h | 2 include/drm/drm_kunit_helpers.h | 4 include/linux/bpf_mem_alloc.h | 3 include/linux/compiler-gcc.h | 4 include/linux/device.h | 3 include/linux/dpll.h | 15 include/linux/input.h | 10 include/linux/iomap.h | 19 include/linux/ksm.h | 10 include/linux/mmzone.h | 7 include/linux/rcutiny.h | 5 include/linux/rcutree.h | 1 include/linux/tick.h | 8 include/linux/ubsan.h | 5 include/linux/userfaultfd_k.h | 5 include/net/ip_tunnels.h | 2 include/trace/events/afs.h | 7 include/uapi/linux/dpll.h | 3 io_uring/rw.c | 23 kernel/bpf/cgroup.c | 19 kernel/bpf/helpers.c | 21 kernel/bpf/lpm_trie.c | 2 kernel/bpf/memalloc.c | 14 kernel/bpf/verifier.c | 9 kernel/cgroup/cgroup.c | 4 kernel/fork.c | 14 kernel/rcu/tree.c | 118 +++- kernel/resource.c | 4 kernel/sched/fair.c | 4 lib/Kconfig.ubsan | 4 lib/codetag.c | 3 lib/iov_iter.c | 6 lib/slub_kunit.c | 2 mm/kasan/kasan_test.c | 27 mm/migrate.c | 2 mm/mmap.c | 3 mm/page_alloc.c | 10 mm/rmap.c | 24 mm/shmem.c | 2 mm/shrinker.c | 8 mm/vmscan.c | 109 ++- net/bluetooth/hci_sync.c | 18 net/bpf/test_run.c | 1 net/core/dev.c | 4 net/core/rtnetlink.c | 4 net/core/sock_map.c | 4 net/ipv4/ip_tunnel.c | 2 net/ipv6/netfilter/nf_reject_ipv6.c | 15 net/mac80211/Kconfig | 2 net/mac80211/cfg.c | 3 net/mac80211/key.c | 42 - net/mptcp/protocol.c | 2 net/netfilter/nft_payload.c | 3 net/netfilter/x_tables.c | 2 net/sched/cls_api.c | 1 net/sched/sch_api.c | 2 net/sunrpc/xprtrdma/ib_client.c | 1 net/wireless/core.c | 1 rust/kernel/device.rs | 15 rust/kernel/firmware.rs | 2 sound/pci/hda/patch_realtek.c | 23 sound/soc/codecs/cs42l51.c | 7 sound/soc/soc-dapm.c | 2 sound/usb/mixer_quirks.c | 3 tools/mm/page-types.c | 9 tools/mm/slabinfo.c | 4 tools/perf/util/python.c | 3 tools/perf/util/syscalltbl.c | 10 tools/testing/cxl/test/cxl.c | 14 tools/testing/selftests/mm/uffd-common.c | 5 tools/testing/selftests/mm/uffd-common.h | 3 tools/testing/selftests/mm/uffd-unit-tests.c | 21 tools/usb/usbip/src/usbip_detach.c | 1 280 files changed, 2925 insertions(+), 1075 deletions(-) Abel Vesa (1): arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block Akshata Jahagirdar (1): drm/xe/xe2: Introduce performance changes Aleksei Vetrov (1): ASoC: dapm: fix bounds checker error in dapm_widget_list_create Alex Deucher (4): drm/amdgpu/smu13: fix profile reporting drm/amdgpu/swsmu: fix ordering for setting workload_mask drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs drm/amdgpu: handle default profile on on devices without fullscreen 3D Alexander Usyskin (1): mei: use kvmalloc for read buffer Alexandre Ghiti (1): riscv: vdso: Prevent the compiler from inserting calls to memset() Amit Cohen (3): mlxsw: spectrum_ptp: Add missing verification before pushing Tx header mlxsw: pci: Sync Rx buffers for CPU mlxsw: pci: Sync Rx buffers for device Amit Sunil Dhamne (1): usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non self-powered devices Andrew Ballance (1): fs/ntfs3: Check if more than chunk-size bytes are written Andrey Konovalov (1): kasan: remove vmalloc_percpu test Andrzej Kacprowski (1): accel/ivpu: Fix NOC firewall interrupt handling Andy Shevchenko (1): gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init() call Arkadiusz Kubalewski (3): dpll: add Embedded SYNC feature for a pin ice: add callbacks for Embedded SYNC enablement on dpll pins ice: fix crash on probe for DPLL enabled E810 LOM Arnaldo Carvalho de Melo (1): perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT Basavaraj Natikar (1): xhci: Use pm_runtime_get to prevent RPM on unsupported systems Ben Chuang (2): mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process Ben Hutchings (1): wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() Benjamin Marzinski (1): scsi: scsi_transport_fc: Allow setting rport state to current state Benjamin Segall (1): posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone Benoît Monin (1): net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension Bitterblue Smith (1): wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171 Bjorn Andersson (1): soc: qcom: pmic_glink: Handle GLINK intent allocation rejections Boris Brezillon (3): drm/panthor: Fix firmware initialization on systems with a page size > 4k drm/panthor: Fail job creation when the group is dead drm/panthor: Report group as timedout when we fail to properly suspend Byeonguk Jeong (1): bpf: Fix out-of-bounds write in trie_get_next_key() Chen Ridong (2): mm: shrinker: avoid memleak in alloc_shrinker_info cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction Christoffer Sandberg (2): ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 Christoph Hellwig (3): iomap: improve shared block detection in iomap_unshare_iter iomap: turn iomap_want_unshare_iter into an inline function xfs: fix finding a last resort AG in xfs_filestream_pick_ag Christophe JAILLET (1): ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() Chuck Lever (3): NFSD: Initialize struct nfsd4_copy earlier NFSD: Never decrement pending_async_copies on error rpcrdma: Always release the rpcrdma_device's xa_array Chun-Kuang Hu (1): drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy() Chunyan Zhang (2): riscv: Remove unused GENERATING_ASM_OFFSETS riscv: Remove duplicated GET_RM Cong Wang (1): sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() Conor Dooley (3): firmware: microchip: auto-update: fix poll_complete() to not report spurious timeout errors riscv: dts: starfive: disable unused csi/camss nodes RISC-V: disallow gcc + rust builds Dai Ngo (1): NFS: remove revoked delegation from server's delegation list Dan Carpenter (2): drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() drm/tegra: Fix NULL vs IS_ERR() check in probe() Dan Williams (4): cxl/port: Fix use-after-free, permit out-of-order decoder shutdown cxl/port: Fix CXL port initialization order when the subsystem is built-in cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() cxl/acpi: Ensure ports ready at cxl_acpi_probe() return Daniel Gabay (1): wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() Daniel Golle (1): net: ethernet: mtk_wed: fix path of MT7988 WO firmware Daniel Palmer (1): net: amd: mvme147: Fix probe banner message Darrick J. Wong (4): iomap: don't bother unsharing delalloc extents iomap: share iomap_unshare_iter predicate code with fsdax fsdax: remove zeroing code from dax_unshare_iter fsdax: dax_unshare_iter needs to copy entire blocks David Howells (1): afs: Fix missing subdir edit when renamed between parent dirs David Sterba (1): MIPS: export __cmpxchg_small() Dimitri Sivanich (1): misc: sgi-gru: Don't disable preemption in GRU driver Dmitry Torokhov (2): Input: edt-ft5x06 - fix regmap leak when probe fails Input: fix regression when re-registering input handlers Dong Chenchen (1): netfilter: Fix use-after-free in get_info() E Shattow (1): riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64 Eduard Zingerman (1): bpf: Force checkpoint when jmp history is too long Edward Adam Davis (1): ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Edward Liaw (2): Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM" Revert "selftests/mm: replace atomic_bool with pthread_barrier_t" Emmanuel Grumbach (3): wifi: iwlwifi: mvm: don't leak a link on AP removal wifi: iwlwifi: mvm: don't add default link in fw restart flow Revert "wifi: iwlwifi: remove retry loops in start" Eric Dumazet (1): netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() Fabien Parent (1): arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM Faisal Hassan (1): xhci: Fix Link TRB DMA in command ring stopped completion event Felix Fietkau (2): wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Filipe Manana (2): btrfs: fix extent map merging not happening for adjacent extents btrfs: fix defrag not merging contiguous extents due to merged extent maps Florian Westphal (1): lib: alloc_tag_module_unload must wait for pending kfree_rcu calls Frank Li (1): spi: spi-fsl-dspi: Fix crash when not using GPIO chip select Frank Min (1): drm/amdgpu: fix random data corruption for sdma 7 Furong Xu (1): net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data Gatlin Newhouse (1): x86/traps: Enable UBSAN traps on x86 Geert Uytterhoeven (2): mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING wifi: brcm80211: BRCM_TRACING should depend on TRACING Georgi Djakov (1): spi: geni-qcom: Fix boot warning related to pm_runtime and devres Gil Fine (1): thunderbolt: Honor TMU requirements in the domain when setting TMU mode Greg Kroah-Hartman (2): Revert "driver core: Fix uevent_show() vs driver detach race" Linux 6.11.7 Gregory Price (2): resource,kexec: walk_system_ram_res_rev must retain resource flags vmscan,migrate: fix page count imbalance on node stats when demoting pages Guilherme Giacomo Simoes (1): rust: device: change the from_raw() function Gustavo Sousa (1): drm/i915: Skip programming FIA link enable bits for MTL+ Haibo Chen (1): arm64: dts: imx8ulp: correct the flexspi compatible string Hans de Goede (1): ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together Heinrich Schuchardt (1): riscv: efi: Set NX compat flag in PE/COFF header Hou Tao (3): bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() bpf: Add bpf_mem_alloc_check_size() helper bpf: Check the validity of nr_words in bpf_iter_bits_new() Hsin-Te Yuan (1): drm/mediatek: Fix color format MACROs in OVL Hugh Dickins (1): iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP Ido Schimmel (3): ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address Jan Schär (1): ALSA: usb-audio: Add quirks for Dell WD19 dock Jani Nikula (2): drm/i915: move rawclk from runtime to display runtime info drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO() Jarkko Sakkinen (3): tpm: Return tpm2_sessions_init() when null key creation fails tpm: Rollback tpm2_load_null() tpm: Lazily flush the auth session Jason Gunthorpe (1): PCI: Fix pci_enable_acs() support for the ACS quirks Jason-JH.Lin (1): drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert() Javier Carrasco (4): usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path iio: light: veml6030: fix microlux value calculation Jens Axboe (1): io_uring/rw: fix missing NOWAIT check for O_DIRECT start write Jeongjun Park (1): mm: shmem: fix data-race in shmem_getattr() Jianbo Liu (1): macsec: Fix use-after-free while sending the offloading packet Jinjie Ruan (5): iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() Jiri Slaby (1): perf trace: Fix non-listed archs in the syscalltbl routines Johan Hovold (11): phy: qcom: qmp-usb: fix NULL-deref on runtime suspend phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend gpiolib: fix debugfs newline separators gpiolib: fix debugfs dangling chip separator arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100: fix PCIe4 interconnect arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks Johannes Berg (2): wifi: cfg80211: clear wdev->cqm_config pointer on free wifi: iwlwifi: mvm: fix 6 GHz scan construction John Garry (1): scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length Jouni Högander (1): drm/i915/psr: Prevent Panel Replay if CRC calculation is enabled Juha-Pekka Heikkila (1): drm/i915/display: Don't enable decompression on Xe2 with Tile4 Julien Stephan (1): dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply Kailang Yang (1): ALSA: hda/realtek: Limit internal Mic boost on Dell platform Keith Busch (2): nvme: module parameter to disable pi with offsets nvme: re-fix error-handling for io_uring nvme-passthrough Konrad Dybcio (1): arm64: dts: qcom: x1e80100: Fix up BAR spaces Konstantin Komarov (8): fs/ntfs3: Fix warning possible deadlock in ntfs_set_state fs/ntfs3: Stale inode instead of bad fs/ntfs3: Add rough attr alloc_size check fs/ntfs3: Fix possible deadlock in mi_read fs/ntfs3: Additional check in ni_clear() fs/ntfs3: Fix general protection fault in run_is_mapped_full fs/ntfs3: Additional check in ntfs_file_release fs/ntfs3: Sequential field availability check in mi_enum_attr() Leon Romanovsky (1): RDMA/cxgb4: Dump vendor specific QP details Ley Foon Tan (1): net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values Liankun Yang (1): drm/mediatek: Fix get efuse issue for MT8188 DPTX Lorenzo Stoakes (2): fork: do not invoke uffd on fork if error occurs fork: only invoke khugepaged, ksm hooks if no error Manikanta Pubbisetty (1): wifi: ath10k: Fix memory leak in management tx Marco Elver (1): kasan: Fix Software Tag-Based KASAN with GCC Matt Fleming (1): mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves Matt Johnston (1): mctp i2c: handle NULL header address Matthew Auld (1): drm/i915: disable fbc due to Wa_16023588340 Matthew Brost (2): drm/xe: Add mmio read before GGTT invalidate drm/xe: Don't short circuit TDR on jobs not started Matthieu Baerts (NGI0) (1): mptcp: init: protect sched with rcu_read_lock Michal Wajdeczko (2): drm/xe: Fix register definition order in xe_regs.h drm/xe: Kill regs/xe_sriov_regs.h Mika Westerberg (1): thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() Miquel Sabaté Solà (1): riscv: Prevent a bad reference count on CPU nodes Miri Korenblit (1): wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd Mitul Golani (3): drm/i915/display: Cache adpative sync caps to use it later drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock drm/i915/display/dp: Compute AS SDP when vrr is also enabled Naohiro Aota (1): btrfs: fix error propagation of split bios Ovidiu Bunea (1): Revert "drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35" Pablo Neira Ayuso (2): gtp: allow -1 to be specified as file description from userspace netfilter: nft_payload: sanitize offset and length before calling skb_checksum() Pali Rohár (2): cifs: Improve creating native symlinks pointing to directory cifs: Fix creating native symlinks pointing to current or parent directory Patrisious Haddad (1): RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down Paulo Alcantara (2): smb: client: fix parsing of device numbers smb: client: set correct device number on nfs reparse points Pedro Tammela (1): net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT Pei Xiao (1): slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof Peter Wang (1): scsi: ufs: core: Fix another deadlock during RTC update Pierre Gondois (1): ACPI: CPPC: Make rmw_lock a raw_spin_lock Ping-Ke Shih (1): wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts Qu Wenruo (1): btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() Remi Pommarel (1): wifi: ath11k: Fix invalid ring usage in full monitor mode Richard Zhu (1): phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check Ryusuke Konishi (2): nilfs2: fix kernel bug due to missing clearing of checked flag nilfs2: fix potential deadlock with newly created symlinks Sabyrzhan Tasbolatov (1): x86/traps: move kmsan check after instrumentation_begin Sai Teja Pottumuttu (1): drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG Selvin Xavier (2): RDMA/bnxt_re: Fix the usage of control path spin locks RDMA/bnxt_re: synchronize the qp-handle table array Shawn Wang (1): sched/numa: Fix the potential null pointer dereference in task_numa_work() Shekhar Chauhan (1): drm/xe/xe2: Add performance turning changes Shiju Jose (1): cxl/events: Fix Trace DRAM Event Record Sumeet Pawnikar (1): powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U Sungwoo Kim (1): Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs Suraj Kandpal (4): drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability drm/i915/hdcp: Add encoder check in hdcp2_get_capability drm/i915/dp: Clear VSC SDP during post ddi disable routine drm/i915/pps: Disable DPLS_GATING around pps sequence Tejas Upadhyay (4): drm/xe/xe2hpg: Add Wa_15016589081 drm/xe: Move enable host l2 VRAM post MCR init drm/xe: Define STATELESS_COMPRESSION_CTRL as mcr register drm/xe: Write all slices if its mcr register Thomas Zimmermann (1): drm/xe: Support 'nomodeset' kernel command-line option Toke Høiland-Jørgensen (1): bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled Tvrtko Ursulin (1): drm/amd/pm: Vangogh: Fix kernel memory out of bounds write Uladzislau Rezki (Sony) (2): rcu/kvfree: Add kvfree_rcu_barrier() API rcu/kvfree: Refactor kvfree_rcu_queue_batch() Ville Syrjälä (1): wifi: iwlegacy: Clear stale interrupts before resuming device Vitaliy Shevtsov (1): nvmet-auth: assign dh_key to NULL after kfree_sensitive Vladimir Oltean (1): net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() Vlastimil Babka (1): mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes Wang Liang (1): net: fix crash when config small gso_max_size/gso_ipv4_max_size WangYuli (1): riscv: Use '%u' to format the output of 'cpu' Wladislav Wiebe (1): tools/mm: -Werror fixes in page-types/slabinfo Xinyu Zhang (1): block: fix sanity checks in blk_rq_map_user_bvec Xiongfeng Wang (1): firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() Xiu Jianfeng (1): cgroup: Fix potential overflow issue when checking max_depth Yu Zhao (2): mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() Yuanchu Xie (1): mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true Yunhui Cui (1): RISC-V: ACPI: fix early_ioremap to early_memremap Zhang Rui (2): thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support thermal: intel: int340x: processor: Add MMIO RAPL PL4 support Zhiguo Jiang (1): mm: shrink skip folio mapped by an exiting process Zhihao Cheng (1): btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() Zichen Xie (1): netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() Zicheng Qu (2): staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() Zijun Hu (1): usb: phy: Fix API devm_usb_put_phy() can not release the phy Zongmin Zhou (1): usbip: tools: Fix detach_port() invalid port error path lei lu (1): ntfs3: Add bounds checking to mi_enum_attr()

5 months, 3 weeks

1
1
0 0

Linux 6.1.116

by Greg Kroah-Hartman

I'm announcing the release of the 6.1.116 kernel. All users of the 6.1 kernel series must upgrade. The updated 6.1.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/alpha/include/asm/pgtable.h | 2 arch/arc/include/asm/pgtable-bits-arcv2.h | 2 arch/arm/include/asm/pgtable-nommu.h | 2 arch/arm/include/asm/pgtable.h | 4 arch/arm64/include/asm/pgtable.h | 2 arch/arm64/mm/mmu.c | 47 - arch/arm64/mm/pageattr.c | 3 arch/csky/include/asm/pgtable.h | 3 arch/hexagon/include/asm/page.h | 7 arch/ia64/include/asm/pgtable.h | 16 arch/loongarch/include/asm/pgtable.h | 2 arch/loongarch/kernel/vdso.c | 28 arch/m68k/include/asm/pgtable_mm.h | 2 arch/m68k/include/asm/pgtable_no.h | 1 arch/microblaze/include/asm/pgtable.h | 3 arch/mips/include/asm/pgtable.h | 2 arch/nios2/include/asm/pgtable.h | 2 arch/openrisc/include/asm/pgtable.h | 2 arch/parisc/include/asm/pgtable.h | 15 arch/powerpc/include/asm/pgtable.h | 7 arch/riscv/include/asm/pgtable.h | 2 arch/riscv/kernel/asm-offsets.c | 2 arch/riscv/kernel/cpu-hotplug.c | 2 arch/riscv/kernel/efi-header.S | 2 arch/riscv/kernel/traps_misaligned.c | 2 arch/riscv/kernel/vdso/Makefile | 1 arch/s390/include/asm/io.h | 2 arch/s390/include/asm/pgtable.h | 2 arch/sh/include/asm/pgtable.h | 2 arch/sparc/include/asm/pgtable_32.h | 6 arch/sparc/mm/init_32.c | 3 arch/sparc/mm/init_64.c | 1 arch/um/include/asm/pgtable.h | 2 arch/x86/include/asm/nospec-branch.h | 11 arch/x86/include/asm/pgtable_32.h | 9 arch/x86/include/asm/pgtable_64.h | 1 arch/x86/mm/init_64.c | 41 - arch/xtensa/include/asm/pgtable.h | 2 block/blk-map.c | 4 drivers/acpi/cppc_acpi.c | 9 drivers/base/core.c | 13 drivers/base/module.c | 4 drivers/cpufreq/mediatek-cpufreq-hw.c | 14 drivers/cxl/acpi.c | 17 drivers/cxl/core/port.c | 26 drivers/cxl/cxl.h | 3 drivers/firmware/arm_sdei.c | 2 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 10 drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 drivers/iio/adc/ad7124.c | 2 drivers/iio/light/veml6030.c | 2 drivers/infiniband/hw/bnxt_re/qplib_fp.c | 4 drivers/infiniband/hw/bnxt_re/qplib_rcfw.c | 13 drivers/infiniband/hw/bnxt_re/qplib_rcfw.h | 2 drivers/infiniband/hw/cxgb4/provider.c | 1 drivers/infiniband/hw/mlx5/qp.c | 4 drivers/misc/sgi-gru/grukservices.c | 2 drivers/misc/sgi-gru/grumain.c | 4 drivers/misc/sgi-gru/grutlbpurge.c | 2 drivers/mtd/spi-nor/winbond.c | 7 drivers/net/ethernet/amd/mvme147.c | 7 drivers/net/ethernet/mellanox/mlxsw/spectrum_ipip.c | 119 ++- drivers/net/ethernet/mellanox/mlxsw/spectrum_ipip.h | 1 drivers/net/ethernet/mellanox/mlxsw/spectrum_ptp.c | 7 drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c | 2 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 22 drivers/net/gtp.c | 22 drivers/net/macsec.c | 3 drivers/net/mctp/mctp-i2c.c | 3 drivers/net/netdevsim/fib.c | 4 drivers/net/wireless/ath/ath10k/wmi-tlv.c | 7 drivers/net/wireless/ath/ath10k/wmi.c | 2 drivers/net/wireless/ath/ath11k/dp_rx.c | 7 drivers/net/wireless/broadcom/brcm80211/Kconfig | 1 drivers/net/wireless/intel/iwlegacy/common.c | 15 drivers/net/wireless/intel/iwlegacy/common.h | 12 drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 22 drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 3 drivers/nvme/target/auth.c | 1 drivers/scsi/scsi_transport_fc.c | 4 drivers/staging/iio/frequency/ad9832.c | 7 drivers/tty/vt/vt.c | 2 drivers/usb/gadget/udc/dummy_hcd.c | 57 + drivers/usb/host/xhci-pci.c | 6 drivers/usb/host/xhci-ring.c | 16 drivers/usb/phy/phy.c | 2 drivers/usb/typec/class.c | 1 fs/afs/dir.c | 25 fs/afs/dir_edit.c | 91 ++ fs/afs/internal.h | 2 fs/dax.c | 45 - fs/iomap/buffered-io.c | 31 fs/nfs/delegation.c | 5 fs/nilfs2/namei.c | 3 fs/nilfs2/page.c | 1 fs/ntfs3/frecord.c | 4 fs/ntfs3/inode.c | 10 fs/ntfs3/lznt.c | 3 fs/ntfs3/namei.c | 2 fs/ntfs3/ntfs_fs.h | 2 fs/ocfs2/file.c | 8 fs/proc/kcore.c | 94 +- include/acpi/cppc_acpi.h | 2 include/linux/compiler-gcc.h | 12 include/linux/cpufreq.h | 34 include/linux/fs.h | 36 + include/linux/iomap.h | 19 include/linux/migrate.h | 1 include/net/ip_tunnels.h | 2 include/trace/events/afs.h | 240 ------ io_uring/io_uring.c | 11 io_uring/rw.c | 52 - kernel/bpf/cgroup.c | 19 kernel/bpf/lpm_trie.c | 2 kernel/cgroup/cgroup.c | 4 mm/huge_memory.c | 4 mm/internal.h | 13 mm/kasan/kasan_test.c | 27 mm/migrate.c | 636 ++++++++++++------ mm/page_alloc.c | 93 +- mm/shmem.c | 2 net/bluetooth/hci_sync.c | 18 net/core/dev.c | 4 net/ipv6/netfilter/nf_reject_ipv6.c | 15 net/mac80211/Kconfig | 2 net/mac80211/agg-tx.c | 4 net/mac80211/cfg.c | 3 net/mac80211/key.c | 42 - net/netfilter/nft_payload.c | 3 net/netfilter/x_tables.c | 2 net/sched/sch_api.c | 2 net/wireless/core.c | 1 sound/pci/hda/patch_realtek.c | 22 sound/soc/codecs/cs42l51.c | 7 sound/usb/mixer_quirks.c | 3 tools/testing/selftests/vm/hmm-tests.c | 2 tools/usb/usbip/src/usbip_detach.c | 1 138 files changed, 1421 insertions(+), 995 deletions(-) Alan Stern (1): USB: gadget: dummy-hcd: Fix "task hung" problem Alex Hung (1): drm/amd/display: Skip on writeback when it's not applicable Alexander Gordeev (1): fs/proc/kcore.c: allow translation of physical memory addresses Alexandre Ghiti (1): riscv: vdso: Prevent the compiler from inserting calls to memset() Amir Goldstein (3): io_uring: rename kiocb_end_write() local helper fs: create kiocb_{start,end}_write() helpers io_uring: use kiocb_{start,end}_write() helpers Amit Cohen (1): mlxsw: spectrum_ptp: Add missing verification before pushing Tx header Andrew Ballance (1): fs/ntfs3: Check if more than chunk-size bytes are written Andrey Konovalov (2): usb: gadget: dummy_hcd: execute hrtimer callback in softirq context kasan: remove vmalloc_percpu test Baolin Wang (1): mm: migrate: try again if THP split is failed due to page refcnt Basavaraj Natikar (1): xhci: Use pm_runtime_get to prevent RPM on unsupported systems Ben Hutchings (1): wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() Benjamin Marzinski (1): scsi: scsi_transport_fc: Allow setting rport state to current state Benoît Monin (1): net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension Byeonguk Jeong (1): bpf: Fix out-of-bounds write in trie_get_next_key() Chen Ridong (1): cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction Christoffer Sandberg (1): ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 Christoph Hellwig (2): iomap: improve shared block detection in iomap_unshare_iter iomap: turn iomap_want_unshare_iter into an inline function Christophe JAILLET (1): ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() Chunyan Zhang (2): riscv: Remove unused GENERATING_ASM_OFFSETS riscv: Remove duplicated GET_RM Dai Ngo (1): NFS: remove revoked delegation from server's delegation list Dan Williams (2): cxl/acpi: Move rescan to the workqueue cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() Daniel Gabay (1): wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() Daniel Palmer (1): net: amd: mvme147: Fix probe banner message Darrick J. Wong (5): iomap: convert iomap_unshare_iter to use large folios iomap: don't bother unsharing delalloc extents iomap: share iomap_unshare_iter predicate code with fsdax fsdax: remove zeroing code from dax_unshare_iter fsdax: dax_unshare_iter needs to copy entire blocks David Howells (2): afs: Automatically generate trace tag enums afs: Fix missing subdir edit when renamed between parent dirs Dimitri Sivanich (1): misc: sgi-gru: Don't disable preemption in GRU driver Donet Tom (1): selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test Dong Chenchen (1): netfilter: Fix use-after-free in get_info() Edward Adam Davis (1): ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Emmanuel Grumbach (1): wifi: iwlwifi: mvm: disconnect station vifs if recovery failed Eric Dumazet (1): netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() Faisal Hassan (1): xhci: Fix Link TRB DMA in command ring stopped completion event Felix Fietkau (2): wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Furong Xu (1): net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data Geert Uytterhoeven (2): mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING wifi: brcm80211: BRCM_TRACING should depend on TRACING Greg Kroah-Hartman (2): Revert "driver core: Fix uevent_show() vs driver detach race" Linux 6.1.116 Gregory Price (1): vmscan,migrate: fix page count imbalance on node stats when demoting pages Hector Martin (1): cpufreq: Generalize of_perf_domain_get_sharing_cpumask phandle format Heinrich Schuchardt (1): riscv: efi: Set NX compat flag in PE/COFF header Huacai Chen (1): LoongArch: Fix build errors due to backported TIMENS Huang Ying (7): migrate: convert unmap_and_move() to use folios migrate: convert migrate_pages() to use folios migrate_pages: organize stats with struct migrate_pages_stats migrate_pages: separate hugetlb folios migration migrate_pages: restrict number of pages to migrate in batch migrate_pages: split unmap_and_move() to _unmap() and _move() migrate_pages_batch: fix statistics for longterm pin retry Ido Schimmel (4): ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() mlxsw: spectrum_router: Add support for double entry RIFs mlxsw: spectrum_ipip: Rename Spectrum-2 ip6gre operations mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address Jan Schär (1): ALSA: usb-audio: Add quirks for Dell WD19 dock Javier Carrasco (2): usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() iio: light: veml6030: fix microlux value calculation Jens Axboe (1): io_uring/rw: fix missing NOWAIT check for O_DIRECT start write Jeongjun Park (2): mm: shmem: fix data-race in shmem_getattr() vt: prevent kernel-infoleak in con_font_get() Jianbo Liu (1): macsec: Fix use-after-free while sending the offloading packet Johannes Berg (2): wifi: cfg80211: clear wdev->cqm_config pointer on free wifi: iwlwifi: mvm: fix 6 GHz scan construction Kailang Yang (1): ALSA: hda/realtek: Limit internal Mic boost on Dell platform Kefeng Wang (1): mm: remove kern_addr_valid() completely Konstantin Komarov (4): fs/ntfs3: Fix warning possible deadlock in ntfs_set_state fs/ntfs3: Stale inode instead of bad fs/ntfs3: Fix possible deadlock in mi_read fs/ntfs3: Additional check in ni_clear() Leon Romanovsky (1): RDMA/cxgb4: Dump vendor specific QP details Linus Torvalds (1): mm: avoid gcc complaint about pointer casting Lorenzo Stoakes (3): fs/proc/kcore: avoid bounce buffer for ktext data fs/proc/kcore: convert read_kcore() to read_kcore_iter() fs/proc/kcore: reinstate bounce buffer for KCORE_TEXT regions Manikanta Pubbisetty (1): wifi: ath10k: Fix memory leak in management tx Marcello Sylvester Bauer (2): usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler usb: gadget: dummy_hcd: Set transfer interval to 1 microframe Marco Elver (1): kasan: Fix Software Tag-Based KASAN with GCC Matt Fleming (1): mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves Matt Johnston (1): mctp i2c: handle NULL header address Mel Gorman (5): mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE mm/page_alloc: treat RT tasks similar to __GFP_HIGH mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags mm/page_alloc: explicitly define what alloc flags deplete min reserves mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves Michael Walle (1): mtd: spi-nor: winbond: fix w25q128 regression Miguel Ojeda (2): compiler-gcc: be consistent with underscores use for `no_sanitize` compiler-gcc: remove attribute support check for `__no_sanitize_address__` Miquel Sabaté Solà (1): cpufreq: Avoid a bad reference count on CPU node Pablo Neira Ayuso (2): gtp: allow -1 to be specified as file description from userspace netfilter: nft_payload: sanitize offset and length before calling skb_checksum() Patrisious Haddad (1): RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down Pavel Begunkov (1): io_uring: always lock __io_cqring_overflow_flush Pawan Gupta (1): x86/bugs: Use code segment selector for VERW operand Pedro Tammela (1): net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT Pierre Gondois (1): ACPI: CPPC: Make rmw_lock a raw_spin_lock Remi Pommarel (1): wifi: ath11k: Fix invalid ring usage in full monitor mode Ryusuke Konishi (2): nilfs2: fix potential deadlock with newly created symlinks nilfs2: fix kernel bug due to missing clearing of checked flag Selvin Xavier (1): RDMA/bnxt_re: synchronize the qp-handle table array Srinivasan Shanmugam (1): drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing Sungwoo Kim (1): Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs Ville Syrjälä (1): wifi: iwlegacy: Clear stale interrupts before resuming device Vitaliy Shevtsov (1): nvmet-auth: assign dh_key to NULL after kfree_sensitive WangYuli (1): riscv: Use '%u' to format the output of 'cpu' Xinyu Zhang (1): block: fix sanity checks in blk_rq_map_user_bvec Xiongfeng Wang (1): firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() Xiu Jianfeng (1): cgroup: Fix potential overflow issue when checking max_depth Yang Li (1): mm/migrate.c: stop using 0 as NULL pointer Zichen Xie (1): netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() Zicheng Qu (2): staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() Zijun Hu (1): usb: phy: Fix API devm_usb_put_phy() can not release the phy Zong-Zhe Yang (1): wifi: mac80211: fix NULL dereference at band check in starting tx ba session Zongmin Zhou (1): usbip: tools: Fix detach_port() invalid port error path

5 months, 3 weeks

1
1
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror November 2024