[PATCH 5.10 000/209] 5.10.240-rc3 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.10.240 release.
There are 209 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 17 Jul 2025 16:35:35 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.240-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.10.240-rc3
Michael Jeanson <mjeanson(a)efficios.com>
rseq: Fix segfault on registration when rseq_cs is non-zero
Borislav Petkov <bp(a)kernel.org>
x86/process: Move the buffer clearing before MONITOR
Borislav Petkov <bp(a)kernel.org>
KVM: SVM: Advertise TSA CPUID bits to guests
Borislav Petkov <bp(a)kernel.org>
KVM: x86: add support for CPUID leaf 0x80000021
Borislav Petkov <bp(a)kernel.org>
x86/bugs: Add a Transient Scheduler Attacks mitigation
Borislav Petkov <bp(a)kernel.org>
x86/bugs: Rename MDS machinery to something more generic
Jann Horn <jannh(a)google.com>
x86/mm: Disable hugetlb page table sharing on 32-bit
Dongli Zhang <dongli.zhang(a)oracle.com>
vhost-scsi: protect vq->log_used with vq->mutex
Hans de Goede <hdegoede(a)redhat.com>
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Zhang Heng <zhangheng(a)kylinos.cn>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Nicolas Pitre <npitre(a)baylibre.com>
vt: add missing notification when switching back to text mode
Xiaowei Li <xiaowei.li(a)simcom.com>
net: usb: qmi_wwan: add SIMCom 8230C composition
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: vector: Reduce stack usage in vector_eth_configure()
Thomas Fourier <fourier.thomas(a)gmail.com>
atm: idt77252: Add missing `dma_map_error()`
Somnath Kotur <somnath.kotur(a)broadcom.com>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Fix DCB ETS validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Sean Nyekjaer <sean(a)geanix.com>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Kito Xu <veritas501(a)foxmail.com>
net: appletalk: Fix device refcount leak in atrtr_create()
Wang Jinchao <wangjinchao600(a)gmail.com>
md/raid1: Fix stack memory use after return in raid1_reshape
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Christian König <christian.koenig(a)amd.com>
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
Nilton Perim Neto <niltonperimneto(a)gmail.com>
Input: xpad - support Acer NGR 200 Controller
Vicki Pfau <vi(a)endrift.com>
Input: xpad - add VID for Turtle Beach controllers
Matt Reynolds <mattreynolds(a)chromium.org>
Input: xpad - add support for Amazon Game Controller
Jakub Kicinski <kuba(a)kernel.org>
netlink: make sure we allow at least one dump skb
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix rmem check in netlink_broadcast_deliver().
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Ensure to disable clocks in error path
Alexandre Belloni <alexandre.belloni(a)bootlin.com>
rtc: lib_test: add MODULE_LICENSE
Thomas Fourier <fourier.thomas(a)gmail.com>
ethernet: atl1: Add missing DMA mapping error checks and count errors
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "ACPI: battery: negate current when discharging"
Kuen-Han Tsai <khtsai(a)google.com>
usb: gadget: u_serial: Fix race condition in TTY wakeup
Matthew Brost <matthew.brost(a)intel.com>
drm/sched: Increment job count before swapping tail spsc queue
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
JP Kobryn <inwardvessel(a)gmail.com>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Fix threshold limit reset
Peter Zijlstra <peterz(a)infradead.org>
x86/its: FineIBT-paranoid vs ITS
Eric Biggers <ebiggers(a)google.com>
x86/its: Fix build errors when CONFIG_MODULES=n
Peter Zijlstra <peterz(a)infradead.org>
x86/its: Use dynamic thunks for indirect branches
Thomas Gleixner <tglx(a)linutronix.de>
x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc()
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Add "vmexit" option to skip mitigation on some CPUs
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Enable Indirect Target Selection mitigation
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Fix undefined reference to cpu_wants_rethunk_at()
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Add support for ITS-safe return thunk
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/alternatives: Remove faulty optimization
Borislav Petkov (AMD) <bp(a)alien8.de>
x86/alternative: Optimize returns patching
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Add support for ITS-safe indirect thunk
Peter Zijlstra <peterz(a)infradead.org>
x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions
Peter Zijlstra <peterz(a)infradead.org>
x86/alternatives: Introduce int3_emulate_jcc()
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Enumerate Indirect Target Selection (ITS) bug
Daniel Sneddon <daniel.sneddon(a)linux.intel.com>
x86/bhi: Define SPEC_CTRL_BHI_DIS_S
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
Documentation: x86/bugs/its: Add ITS documentation
David Howells <dhowells(a)redhat.com>
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Oleg Nesterov <oleg(a)redhat.com>
fs/proc: do_task_stat: use __for_each_thread()
Victor Nogueira <victor(a)mojatatu.com>
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Yue Haibing <yuehaibing(a)huawei.com>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix infinite recursive call of clip_push().
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix memory leak of struct clip_vcc.
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_* TOCTOU
Andra Paraschiv <andraprs(a)amazon.com>
af_vsock: Assign the vsock transport considering the vsock address flags
Andra Paraschiv <andraprs(a)amazon.com>
af_vsock: Set VMADDR_FLAG_TO_HOST flag on the receive path
Andra Paraschiv <andraprs(a)amazon.com>
vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag
Andra Paraschiv <andraprs(a)amazon.com>
vm_sockets: Add flags field in the vsock address data structure
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_{g2h,h2g} TOCTOU
Kuniyuki Iwashima <kuniyu(a)google.com>
tipc: Fix use-after-free in tipc_conn_close().
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix wraparounds of sk->sk_rmem_alloc.
Al Viro <viro(a)zeniv.linux.org.uk>
fix proc_sys_compare() handling of in-lookup dentries
Peter Zijlstra <peterz(a)infradead.org>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Kaustabh Chakraborty <kauschluss(a)disroot.org>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Nathan Chancellor <nathan(a)kernel.org>
staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Rollback non processed entities on error
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Send control events for partial succeeds
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Return the number of processed controls
Seiji Nishikawa <snishika(a)redhat.com>
ACPI: PAD: fix crash in exit_round_robin()
Andrei Kuchynski <akuchynski(a)chromium.org>
usb: typec: displayport: Fix potential deadlock
Oliver Neukum <oneukum(a)suse.com>
Logitech C-270 even more broken
Mathias Nyman <mathias.nyman(a)linux.intel.com>
xhci: dbc: Flush queued requests before stopping dbc
Łukasz Bartosik <ukaszb(a)chromium.org>
xhci: dbctty: disable ECHO flag by default
Fushuai Wang <wangfushuai(a)baidu.com>
dpaa2-eth: fix xdp_rxq_info leak
Ioana Ciornei <ioana.ciornei(a)nxp.com>
net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats
Radu Bulie <radu-andrei.bulie(a)nxp.com>
dpaa2-eth: Update SINGLE_STEP register access
Radu Bulie <radu-andrei.bulie(a)nxp.com>
dpaa2-eth: Update dpni_get_single_step_cfg command
Ioana Ciornei <ioana.ciornei(a)nxp.com>
dpaa2-eth: rename dpaa2_eth_xdp_release_buf into dpaa2_eth_recycle_buf
Filipe Manana <fdmanana(a)suse.com>
btrfs: use btrfs_record_snapshot_destroy() during rmdir
Filipe Manana <fdmanana(a)suse.com>
btrfs: propagate last_unlink_trans earlier when doing a rmdir
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFSv4/flexfiles: Fix handling of NFS level errors in I/O
Tigran Mkrtchyan <tigran.mkrtchyan(a)desy.de>
flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes
Patrisious Haddad <phaddad(a)nvidia.com>
RDMA/mlx5: Fix vport loopback for MPV device
Maíra Canal <mcanal(a)igalia.com>
drm/v3d: Disable interrupts before resetting the GPU
Sergey Senozhatsky <senozhatsky(a)chromium.org>
mtk-sd: reset host->mrq on prepare_data() error
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
mtk-sd: Prevent memory corruption from DMA map failure
Yue Hu <huyue2(a)yulong.com>
mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data()
Manivannan Sadhasivam <mani(a)kernel.org>
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
Uladzislau Rezki (Sony) <urezki(a)gmail.com>
rcu: Return early if callback is not specified
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
ACPICA: Refuse to evaluate a method if arguments are missing
Johannes Berg <johannes.berg(a)intel.com>
wifi: ath6kl: remove WARN on bad firmware input
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: drop invalid source address OCB frames
Maurizio Lombardi <mlombard(a)redhat.com>
scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
Madhavan Srinivasan <maddy(a)linux.ibm.com>
powerpc: Fix struct termio related ioctl macros
Johannes Berg <johannes.berg(a)intel.com>
ata: pata_cs5536: fix build on 32-bit UML
Takashi Iwai <tiwai(a)suse.de>
ALSA: sb: Force to disable DMAs once when DMA mode is changed
Lion Ackermann <nnamrec(a)gmail.com>
net/sched: Always pass notifications when child class becomes empty
Thomas Fourier <fourier.thomas(a)gmail.com>
nui: Fix dma_mapping_error() check
Kohei Enju <enjuk(a)amazon.com>
rose: fix dangling neighbour pointers in rose_rt_device_down()
Gustavo A. R. Silva <gustavoars(a)kernel.org>
net: rose: Fix fall-through warnings for Clang
Alok Tiwari <alok.a.tiwari(a)oracle.com>
enic: fix incorrect MTU comparison in enic_change_mtu()
Raju Rangoju <Raju.Rangoju(a)amd.com>
amd-xgbe: align CL37 AN sequence as per databook
Dan Carpenter <dan.carpenter(a)linaro.org>
lib: test_objagg: Set error message in check_expect_hints_stats()
Janusz Krzysztofik <janusz.krzysztofik(a)linux.intel.com>
drm/i915/gt: Fix timeline left held on VMA alloc error
Dan Carpenter <dan.carpenter(a)linaro.org>
drm/i915/selftests: Change mock_request() to return error pointers
James Clark <james.clark(a)linaro.org>
spi: spi-fsl-dspi: Clear completion counter before initiating transfer
Marek Szyprowski <m.szyprowski(a)samsung.com>
drm/exynos: fimd: Guard display clock control with runtime PM calls
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix missing error handling when searching for inode refs during log replay
Patrisious Haddad <phaddad(a)nvidia.com>
RDMA/mlx5: Fix CC counters query for MPV
Bart Van Assche <bvanassche(a)acm.org>
scsi: ufs: core: Fix spelling of a sysfs attribute name
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
Benjamin Coddington <bcodding(a)redhat.com>
NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
Kuniyuki Iwashima <kuniyu(a)google.com>
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
Mark Zhang <markzhang(a)nvidia.com>
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
David Thompson <davthompson(a)nvidia.com>
platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
RD Babiera <rdbabiera(a)google.com>
usb: typec: altmodes/displayport: do not index invalid pin_assignments
Ulf Hansson <ulf.hansson(a)linaro.org>
Revert "mmc: sdhci: Disable SD card clock before changing parameters"
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci: Add a helper function for dump register in dynamic debug mode
HarshaVardhana S A <harshavardhana.sa(a)broadcom.com>
vsock/vmci: Clear the vmci transport packet properly when initializing it
Mateusz Jończyk <mat.jonczyk(a)o2.pl>
rtc: cmos: use spin_lock_irqsave in cmos_interrupt
Dev Jain <dev.jain(a)arm.com>
arm64: Restrict pagetable teardown to avoid false warning
Brett A C Sheffield (Librecast) <bacs(a)librecast.net>
Revert "ipv6: save dontfrag in cork"
Nathan Chancellor <nathan(a)kernel.org>
s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
Dexuan Cui <decui(a)microsoft.com>
PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time
Aradhya Bhatia <a-bhatia1(a)ti.com>
drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
Aradhya Bhatia <a-bhatia1(a)ti.com>
drm/bridge: cdns-dsi: Check return value when getting default PHY config
Aradhya Bhatia <a-bhatia1(a)ti.com>
drm/bridge: cdns-dsi: Fix connecting to next bridge
Aradhya Bhatia <a-bhatia1(a)ti.com>
drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
Jay Cornwall <jay.cornwall(a)amd.com>
drm/amdkfd: Fix race in GWS queue scheduling
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/udl: Unregister device before cleaning up on disconnect
Qiu-ji Chen <chenqiuji666(a)gmail.com>
drm/tegra: Fix a possible null pointer dereference
Thierry Reding <treding(a)nvidia.com>
drm/tegra: Assign plane type before registration
Qasim Ijaz <qasdev00(a)gmail.com>
HID: wacom: fix kobject reference count leak
Qasim Ijaz <qasdev00(a)gmail.com>
HID: wacom: fix memory leak on sysfs attribute creation failure
Qasim Ijaz <qasdev00(a)gmail.com>
HID: wacom: fix memory leak on kobject creation failure
Mark Harmstone <maharmstone(a)fb.com>
btrfs: update superblock's device bytes_used when dropping chunk
Heinz Mauelshagen <heinzm(a)redhat.com>
dm-raid: fix variable in journal device check
Frédéric Danis <frederic.danis(a)collabora.com>
Bluetooth: L2CAP: Fix L2CAP MTU negotiation
Yao Zi <ziyao(a)disroot.org>
dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
Simon Horman <horms(a)kernel.org>
net: enetc: Correct endianness handling in _enetc_rd_reg64
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: ubd: Add missing error check in start_io_thread()
Stefano Garzarella <sgarzare(a)redhat.com>
vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: mac80211: fix beacon interval calculation overflow
Yuan Chen <chenyuan(a)kylinos.cn>
libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
Al Viro <viro(a)zeniv.linux.org.uk>
attach_recursive_mnt(): do not lock the covering tree when sliding something under it
Youngjun Lee <yjjuny.lee(a)samsung.com>
ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
Eric Dumazet <edumazet(a)google.com>
atm: clip: prevent NULL deref in clip_push()
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i2c: robotfuzz-osif: disable zero-length read messages
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i2c: tiny-usb: disable zero-length read messages
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: reject invalid perturb period
Niklas Cassel <cassel(a)kernel.org>
PCI: cadence-ep: Correct PBA offset in .set_msix() callback
Long Li <longli(a)microsoft.com>
uio_hv_generic: Align ring size to system page
Saurabh Sengar <ssengar(a)linux.microsoft.com>
uio_hv_generic: Query the ringbuffer size for device
Saurabh Sengar <ssengar(a)linux.microsoft.com>
Drivers: hv: vmbus: Add utility function for querying ring size
Vitaly Kuznetsov <vkuznets(a)redhat.com>
Drivers: hv: Rename 'alloced' to 'allocated'
Haiyang Zhang <haiyangz(a)microsoft.com>
Drivers: hv: vmbus: Fix duplicate CPU assignments within a device
Alexandru Ardelean <alexandru.ardelean(a)analog.com>
uio: uio_hv_generic: use devm_kzalloc() for private data alloc
Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com>
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
Weihang Li <liweihang(a)huawei.com>
RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
Chao Yu <chao(a)kernel.org>
f2fs: don't over-report free space or inodes in statvfs
Brett Werling <brett.werling(a)garmin.com>
can: tcan4x5x: fix power regulator retrieval during probe
Marek Szyprowski <m.szyprowski(a)samsung.com>
media: omap3isp: use sgtable-based scatterlist wrappers
Vasiliy Kovalev <kovalev(a)altlinux.org>
jfs: validate AG parameters in dbMount() to prevent crashes
Dave Kleikamp <dave.kleikamp(a)oracle.com>
fs/jfs: consolidate sanity checking in dbMount
Amit Sunil Dhamne <amitsd(a)google.com>
usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
Junlin Yang <yangjunlin(a)yulong.com>
usb: typec: tcpci_maxim: add terminating newlines to logging
Junlin Yang <yangjunlin(a)yulong.com>
usb: typec: tcpci_maxim: remove redundant assignment
Badhri Jagan Sridharan <badhri(a)google.com>
usb: typec: tcpci_maxim: Fix uninitialized return variable
Wupeng Ma <mawupeng1(a)huawei.com>
VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
George Kennedy <george.kennedy(a)oracle.com>
VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
Dave Penkler <dpenkler(a)gmail.com>
usb: usbtmc: Fix read_stb function and get_stb ioctl
Dave Penkler <dpenkler(a)gmail.com>
USB: usbtmc: Add USBTMC_IOCTL_GET_STB
Dave Penkler <dpenkler(a)gmail.com>
USB: usbtmc: Fix reading stale status byte
Kees Cook <kees(a)kernel.org>
ovl: Check for NULL d_inode() in ovl_dentry_upper()
Dmitry Kandybka <d.kandybka(a)gmail.com>
ceph: fix possible integer overflow in ceph_zero_objects()
Vijendar Mukunda <Vijendar.Mukunda(a)amd.com>
ALSA: hda: Add new pci id for AMD GPU display HD audio controller
Cezary Rojewski <cezary.rojewski(a)intel.com>
ALSA: hda: Ignore unsol events for cards being shut down
Jos Wang <joswang(a)lenovo.com>
usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
Robert Hodaszi <robert.hodaszi(a)digi.com>
usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
usb: Add checks for snprintf() calls in usb_alloc_dev()
Chance Yang <chance.yang(a)kneron.us>
usb: common: usb-conn-gpio: use a unique name for usb connector device
Chen Yufeng <chenyufeng(a)iie.ac.cn>
usb: potential integer overflow in usbg_make_tpg()
Sami Tolvanen <samitolvanen(a)google.com>
um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: pressure: zpa2326: Use aligned_s64 for the timestamp
Linggang Zeng <linggang.zeng(a)easystack.cn>
bcache: fix NULL pointer in cache_set_flush()
Yu Kuai <yukuai3(a)huawei.com>
md/md-bitmap: fix dm-raid max_write_behind setting
Thomas Gessler <thomas.gessler(a)brueckmann-gmbh.de>
dmaengine: xilinx_dma: Set dma_device directions
Alexis Czezar Torreno <alexisczezar.torreno(a)analog.com>
hwmon: (pmbus/max34440) Fix support for max34451
Sven Schwermer <sven.schwermer(a)disruptive-technologies.com>
leds: multicolor: Fix intensity setting while SW blinking
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
mfd: max14577: Fix wakeup source leaks on device unbind
Peng Fan <peng.fan(a)nxp.com>
mailbox: Not protect module_put with spin_lock_irqsave
Olga Kornievskaia <okorniev(a)redhat.com>
NFSv4.2: fix listxattr to return selinux security label
Pali Rohár <pali(a)kernel.org>
cifs: Fix cifs_query_path_info() for Windows NT servers
-------------
Diffstat:
Documentation/ABI/testing/sysfs-devices-system-cpu | 2 +
Documentation/ABI/testing/sysfs-driver-ufs | 2 +-
Documentation/admin-guide/hw-vuln/index.rst | 1 +
.../hw-vuln/indirect-target-selection.rst | 156 +++++++++++
.../hw-vuln/processor_mmio_stale_data.rst | 4 +-
Documentation/admin-guide/kernel-parameters.txt | 28 ++
Documentation/devicetree/bindings/serial/8250.yaml | 2 +-
Makefile | 4 +-
arch/arm64/mm/mmu.c | 3 +-
arch/powerpc/include/uapi/asm/ioctls.h | 8 +-
arch/s390/Makefile | 2 +-
arch/s390/purgatory/Makefile | 2 +-
arch/um/drivers/ubd_user.c | 2 +-
arch/um/drivers/vector_kern.c | 42 +--
arch/um/include/asm/asm-prototypes.h | 5 +
arch/x86/Kconfig | 22 +-
arch/x86/entry/entry.S | 8 +-
arch/x86/include/asm/alternative.h | 26 ++
arch/x86/include/asm/cpu.h | 13 +
arch/x86/include/asm/cpufeature.h | 5 +-
arch/x86/include/asm/cpufeatures.h | 14 +-
arch/x86/include/asm/disabled-features.h | 2 +-
arch/x86/include/asm/irqflags.h | 4 +-
arch/x86/include/asm/msr-index.h | 13 +-
arch/x86/include/asm/mwait.h | 19 +-
arch/x86/include/asm/nospec-branch.h | 50 ++--
arch/x86/include/asm/required-features.h | 2 +-
arch/x86/include/asm/text-patching.h | 31 +++
arch/x86/kernel/alternative.c | 308 ++++++++++++++++++++-
arch/x86/kernel/cpu/amd.c | 58 ++++
arch/x86/kernel/cpu/bugs.c | 272 +++++++++++++++++-
arch/x86/kernel/cpu/common.c | 77 +++++-
arch/x86/kernel/cpu/mce/amd.c | 15 +-
arch/x86/kernel/cpu/mce/core.c | 8 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kernel/cpu/scattered.c | 1 +
arch/x86/kernel/ftrace.c | 4 +-
arch/x86/kernel/kprobes/core.c | 39 +--
arch/x86/kernel/module.c | 14 +-
arch/x86/kernel/process.c | 15 +-
arch/x86/kernel/static_call.c | 2 +-
arch/x86/kernel/vmlinux.lds.S | 8 +
arch/x86/kvm/cpuid.c | 31 ++-
arch/x86/kvm/cpuid.h | 1 +
arch/x86/kvm/svm/vmenter.S | 3 +
arch/x86/kvm/vmx/vmx.c | 2 +-
arch/x86/kvm/x86.c | 4 +-
arch/x86/lib/retpoline.S | 39 +++
arch/x86/net/bpf_jit_comp.c | 8 +-
arch/x86/um/asm/checksum.h | 3 +
drivers/acpi/acpi_pad.c | 7 +-
drivers/acpi/acpica/dsmethod.c | 7 +
drivers/acpi/battery.c | 19 +-
drivers/ata/pata_cs5536.c | 2 +-
drivers/atm/idt77252.c | 5 +
drivers/base/cpu.c | 15 +
drivers/dma-buf/dma-resv.c | 2 +-
drivers/dma/xilinx/xilinx_dma.c | 2 +
drivers/gpu/drm/amd/amdkfd/kfd_packet_manager_v9.c | 2 +-
drivers/gpu/drm/bridge/cdns-dsi.c | 27 +-
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/exynos/exynos_drm_fimd.c | 12 +
drivers/gpu/drm/i915/gt/intel_ring_submission.c | 3 +-
drivers/gpu/drm/i915/selftests/i915_request.c | 20 +-
drivers/gpu/drm/i915/selftests/mock_request.c | 2 +-
drivers/gpu/drm/tegra/dc.c | 17 +-
drivers/gpu/drm/tegra/hub.c | 4 +-
drivers/gpu/drm/tegra/hub.h | 3 +-
drivers/gpu/drm/udl/udl_drv.c | 2 +-
drivers/gpu/drm/v3d/v3d_drv.h | 7 +
drivers/gpu/drm/v3d/v3d_gem.c | 2 +
drivers/gpu/drm/v3d/v3d_irq.c | 38 ++-
drivers/hid/hid-ids.h | 5 +
drivers/hid/hid-quirks.c | 3 +
drivers/hid/wacom_sys.c | 6 +-
drivers/hv/channel_mgmt.c | 121 +++++---
drivers/hv/hyperv_vmbus.h | 19 +-
drivers/hv/vmbus_drv.c | 2 +-
drivers/hwmon/pmbus/max34440.c | 48 +++-
drivers/i2c/busses/i2c-robotfuzz-osif.c | 6 +
drivers/i2c/busses/i2c-tiny-usb.c | 6 +
drivers/iio/pressure/zpa2326.c | 2 +-
drivers/infiniband/core/iwcm.c | 38 +--
drivers/infiniband/core/iwcm.h | 2 +-
drivers/infiniband/hw/mlx5/counters.c | 2 +-
drivers/infiniband/hw/mlx5/devx.c | 2 +-
drivers/infiniband/hw/mlx5/main.c | 33 +++
drivers/input/joystick/xpad.c | 5 +
drivers/input/keyboard/atkbd.c | 3 +-
drivers/leds/led-class-multicolor.c | 3 +-
drivers/mailbox/mailbox.c | 2 +-
drivers/md/bcache/super.c | 7 +-
drivers/md/dm-raid.c | 2 +-
drivers/md/md-bitmap.c | 2 +-
drivers/md/raid1.c | 1 +
drivers/media/platform/omap3isp/ispccdc.c | 8 +-
drivers/media/platform/omap3isp/ispstat.c | 6 +-
drivers/media/usb/uvc/uvc_ctrl.c | 61 ++--
drivers/mfd/max14577.c | 1 +
drivers/misc/vmw_vmci/vmci_host.c | 9 +-
drivers/mmc/host/mtk-sd.c | 39 ++-
drivers/mmc/host/sdhci.c | 9 +-
drivers/mmc/host/sdhci.h | 16 ++
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/can/m_can/tcan4x5x.c | 9 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 2 +
drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 9 +
drivers/net/ethernet/amd/xgbe/xgbe.h | 4 +-
drivers/net/ethernet/atheros/atlx/atl1.c | 78 ++++--
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/cisco/enic/enic_main.c | 4 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 141 ++++++++--
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 20 +-
.../net/ethernet/freescale/dpaa2/dpaa2-ethtool.c | 18 +-
drivers/net/ethernet/freescale/dpaa2/dpni-cmd.h | 6 +-
drivers/net/ethernet/freescale/dpaa2/dpni.c | 2 +
drivers/net/ethernet/freescale/dpaa2/dpni.h | 6 +
drivers/net/ethernet/freescale/enetc/enetc_hw.h | 2 +-
drivers/net/ethernet/sun/niu.c | 31 ++-
drivers/net/ethernet/sun/niu.h | 4 +
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 2 +-
drivers/net/phy/smsc.c | 28 +-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/ath/ath6kl/bmi.c | 4 +-
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pci/controller/cadence/pcie-cadence-ep.c | 5 +-
drivers/pci/controller/pci-hyperv.c | 17 +-
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/platform/mellanox/mlxbf-tmfifo.c | 3 +-
drivers/pwm/pwm-mediatek.c | 15 +-
drivers/regulator/gpio-regulator.c | 4 +-
drivers/rtc/lib_test.c | 2 +
drivers/rtc/rtc-cmos.c | 10 +-
drivers/scsi/qla2xxx/qla_mbx.c | 2 +-
drivers/scsi/qla4xxx/ql4_os.c | 2 +
drivers/scsi/ufs/ufs-sysfs.c | 4 +-
drivers/spi/spi-fsl-dspi.c | 11 +-
drivers/staging/rtl8723bs/core/rtw_security.c | 46 +--
drivers/target/target_core_pr.c | 4 +-
drivers/tty/vt/vt.c | 1 +
drivers/uio/uio_hv_generic.c | 18 +-
drivers/usb/class/cdc-wdm.c | 23 +-
drivers/usb/class/usbtmc.c | 53 ++--
drivers/usb/common/usb-conn-gpio.c | 25 +-
drivers/usb/core/quirks.c | 3 +-
drivers/usb/core/usb.c | 14 +-
drivers/usb/gadget/function/f_tcm.c | 4 +-
drivers/usb/gadget/function/u_serial.c | 6 +-
drivers/usb/host/xhci-dbgcap.c | 4 +
drivers/usb/host/xhci-dbgtty.c | 1 +
drivers/usb/typec/altmodes/displayport.c | 5 +-
drivers/usb/typec/tcpm/tcpci_maxim.c | 20 +-
drivers/vhost/scsi.c | 7 +-
fs/btrfs/inode.c | 36 +--
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 6 +
fs/ceph/file.c | 2 +-
fs/cifs/misc.c | 8 +
fs/f2fs/super.c | 30 +-
fs/jfs/jfs_dmap.c | 41 +--
fs/namespace.c | 8 +-
fs/nfs/flexfilelayout/flexfilelayout.c | 121 +++++---
fs/nfs/inode.c | 17 +-
fs/nfs/nfs4proc.c | 12 +-
fs/nfs/pnfs.c | 4 +-
fs/overlayfs/util.c | 4 +-
fs/proc/array.c | 6 +-
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
include/drm/spsc_queue.h | 4 +-
include/linux/cpu.h | 3 +
include/linux/hyperv.h | 2 +
include/linux/ipv6.h | 1 -
include/linux/module.h | 5 +
include/linux/usb/typec_dp.h | 1 +
include/uapi/linux/usb/tmc.h | 2 +
include/uapi/linux/vm_sockets.h | 30 +-
kernel/events/core.c | 2 +-
kernel/rcu/tree.c | 4 +
kernel/rseq.c | 60 +++-
lib/test_objagg.c | 4 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 75 +++--
net/atm/resources.c | 3 +-
net/bluetooth/l2cap_core.c | 9 +-
net/ipv6/ip6_output.c | 9 +-
net/mac80211/rx.c | 4 +
net/mac80211/util.c | 2 +-
net/netlink/af_netlink.c | 90 +++---
net/rose/rose_route.c | 15 +-
net/rxrpc/call_accept.c | 3 +
net/sched/sch_api.c | 42 +--
net/sched/sch_sfq.c | 10 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 78 +++++-
net/vmw_vsock/vmci_transport.c | 4 +-
sound/isa/sb/sb16_main.c | 4 +
sound/pci/hda/hda_bind.c | 2 +-
sound/pci/hda/hda_intel.c | 3 +
sound/soc/fsl/fsl_asrc.c | 3 +-
sound/usb/stream.c | 2 +
tools/lib/bpf/btf_dump.c | 3 +
204 files changed, 2750 insertions(+), 821 deletions(-)
1 week, 3 days
- 8
- 7
[PATCH v2] wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
by Muhammad Usama Anjum
Don't deinitialize and reinitialize the HAL helpers. The dma memory is
deallocated and there is high possibility that we'll not be able to get
the same memory allocated from dma when there is high memory pressure.
Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
Fixes: d5c65159f289 ("ath11k: driver for Qualcomm IEEE 802.11ax devices")
Cc: stable(a)vger.kernel.org
Cc: Baochen Qiang <baochen.qiang(a)oss.qualcomm.com>
Signed-off-by: Muhammad Usama Anjum <usama.anjum(a)collabora.com>
---
Changes since v1:
- Cc stable and fix tested on tag
- Clear essential fields as they may have stale data
---
drivers/net/wireless/ath/ath11k/core.c | 6 +-----
drivers/net/wireless/ath/ath11k/hal.c | 12 ++++++++++++
drivers/net/wireless/ath/ath11k/hal.h | 1 +
3 files changed, 14 insertions(+), 5 deletions(-)
diff --git a/drivers/net/wireless/ath/ath11k/core.c b/drivers/net/wireless/ath/ath11k/core.c
index 4488e4cdc5e9e..34b27711ed00f 100644
--- a/drivers/net/wireless/ath/ath11k/core.c
+++ b/drivers/net/wireless/ath/ath11k/core.c
@@ -2213,14 +2213,10 @@ static int ath11k_core_reconfigure_on_crash(struct ath11k_base *ab)
mutex_unlock(&ab->core_lock);
ath11k_dp_free(ab);
- ath11k_hal_srng_deinit(ab);
+ ath11k_hal_srng_clear(ab);
ab->free_vdev_map = (1LL << (ab->num_radios * TARGET_NUM_VDEVS(ab))) - 1;
- ret = ath11k_hal_srng_init(ab);
- if (ret)
- return ret;
-
clear_bit(ATH11K_FLAG_CRASH_FLUSH, &ab->dev_flags);
ret = ath11k_core_qmi_firmware_ready(ab);
diff --git a/drivers/net/wireless/ath/ath11k/hal.c b/drivers/net/wireless/ath/ath11k/hal.c
index b32de563d453a..dafa9bdbb3d32 100644
--- a/drivers/net/wireless/ath/ath11k/hal.c
+++ b/drivers/net/wireless/ath/ath11k/hal.c
@@ -1359,6 +1359,18 @@ void ath11k_hal_srng_deinit(struct ath11k_base *ab)
}
EXPORT_SYMBOL(ath11k_hal_srng_deinit);
+void ath11k_hal_srng_clear(struct ath11k_base *ab)
+{
+ memset(ab->hal.srng_list, 0,
+ sizeof(ab->hal.srng_list));
+ memset(ab->hal.shadow_reg_addr, 0,
+ sizeof(ab->hal.shadow_reg_addr));
+ ab->hal.avail_blk_resource = 0;
+ ab->hal.current_blk_index = 0;
+ ab->hal.num_shadow_reg_configured = 0;
+}
+EXPORT_SYMBOL(ath11k_hal_srng_clear);
+
void ath11k_hal_dump_srng_stats(struct ath11k_base *ab)
{
struct hal_srng *srng;
diff --git a/drivers/net/wireless/ath/ath11k/hal.h b/drivers/net/wireless/ath/ath11k/hal.h
index 601542410c752..839095af9267e 100644
--- a/drivers/net/wireless/ath/ath11k/hal.h
+++ b/drivers/net/wireless/ath/ath11k/hal.h
@@ -965,6 +965,7 @@ int ath11k_hal_srng_setup(struct ath11k_base *ab, enum hal_ring_type type,
struct hal_srng_params *params);
int ath11k_hal_srng_init(struct ath11k_base *ath11k);
void ath11k_hal_srng_deinit(struct ath11k_base *ath11k);
+void ath11k_hal_srng_clear(struct ath11k_base *ab);
void ath11k_hal_dump_srng_stats(struct ath11k_base *ab);
void ath11k_hal_srng_get_shadow_config(struct ath11k_base *ab,
u32 **cfg, u32 *len);
--
2.39.5
1 week, 3 days
- 2
- 2
[PATCH v4 1/9] vhost/vsock: Avoid allocating arbitrarily-sized SKBs
by Will Deacon
vhost_vsock_alloc_skb() returns NULL for packets advertising a length
larger than VIRTIO_VSOCK_MAX_PKT_BUF_SIZE in the packet header. However,
this is only checked once the SKB has been allocated and, if the length
in the packet header is zero, the SKB may not be freed immediately.
Hoist the size check before the SKB allocation so that an iovec larger
than VIRTIO_VSOCK_MAX_PKT_BUF_SIZE + the header size is rejected
outright. The subsequent check on the length field in the header can
then simply check that the allocated SKB is indeed large enough to hold
the packet.
Cc: <stable(a)vger.kernel.org>
Fixes: 71dc9ec9ac7d ("virtio/vsock: replace virtio_vsock_pkt with sk_buff")
Reviewed-by: Stefano Garzarella <sgarzare(a)redhat.com>
Signed-off-by: Will Deacon <will(a)kernel.org>
---
drivers/vhost/vsock.c | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/drivers/vhost/vsock.c b/drivers/vhost/vsock.c
index 802153e23073..66a0f060770e 100644
--- a/drivers/vhost/vsock.c
+++ b/drivers/vhost/vsock.c
@@ -344,6 +344,9 @@ vhost_vsock_alloc_skb(struct vhost_virtqueue *vq,
len = iov_length(vq->iov, out);
+ if (len > VIRTIO_VSOCK_MAX_PKT_BUF_SIZE + VIRTIO_VSOCK_SKB_HEADROOM)
+ return NULL;
+
/* len contains both payload and hdr */
skb = virtio_vsock_alloc_skb(len, GFP_KERNEL);
if (!skb)
@@ -367,8 +370,7 @@ vhost_vsock_alloc_skb(struct vhost_virtqueue *vq,
return skb;
/* The pkt is too big or the length in the header is invalid */
- if (payload_len > VIRTIO_VSOCK_MAX_PKT_BUF_SIZE ||
- payload_len + sizeof(*hdr) > len) {
+ if (payload_len + sizeof(*hdr) > len) {
kfree_skb(skb);
return NULL;
}
--
2.50.0.727.gbf7dc18ff4-goog
1 week, 3 days
- 3
- 2
[PATCH 6.1 00/89] 6.1.146-rc2 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.1.146 release.
There are 89 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 17 Jul 2025 16:35:20 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.146-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.1.146-rc2
Michael Jeanson <mjeanson(a)efficios.com>
rseq: Fix segfault on registration when rseq_cs is non-zero
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix potential use-after-free in oplock/lease break ack
Yeoreum Yun <yeoreum.yun(a)arm.com>
kasan: remove kasan_find_vm_area() to prevent possible deadlock
Jack Wang <jinpu.wang(a)ionos.com>
x86: Fix X86_FEATURE_VERW_CLEAR definition
Jann Horn <jannh(a)google.com>
x86/mm: Disable hugetlb page table sharing on 32-bit
Dongli Zhang <dongli.zhang(a)oracle.com>
vhost-scsi: protect vq->log_used with vq->mutex
Hans de Goede <hdegoede(a)redhat.com>
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Zhang Heng <zhangheng(a)kylinos.cn>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Nicolas Pitre <npitre(a)baylibre.com>
vt: add missing notification when switching back to text mode
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix assertion when building free space tree
Akira Inoue <niyarium(a)gmail.com>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
Xiaowei Li <xiaowei.li(a)simcom.com>
net: usb: qmi_wwan: add SIMCom 8230C composition
Yasmin Fitzgerald <sunoflife1.git(a)gmail.com>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
Yuzuru10 <yuzuru_10(a)proton.me>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: vector: Reduce stack usage in vector_eth_configure()
Thomas Fourier <fourier.thomas(a)gmail.com>
atm: idt77252: Add missing `dma_map_error()`
Somnath Kotur <somnath.kotur(a)broadcom.com>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Fix DCB ETS validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Sean Nyekjaer <sean(a)geanix.com>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Mingming Cao <mmc(a)linux.ibm.com>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
Kito Xu <veritas501(a)foxmail.com>
net: appletalk: Fix device refcount leak in atrtr_create()
Eric Dumazet <edumazet(a)google.com>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_read_folio()
Gao Xiang <xiang(a)kernel.org>
erofs: adapt folios for z_erofs_read_folio()
Gao Xiang <xiang(a)kernel.org>
erofs: avoid on-stack pagepool directly passed by arguments
Gao Xiang <xiang(a)kernel.org>
erofs: allocate extra bvec pages directly instead of retrying
Yue Hu <huyue2(a)coolpad.com>
erofs: clean up z_erofs_pcluster_readmore()
Yue Hu <huyue2(a)coolpad.com>
erofs: remove the member readahead from struct z_erofs_decompress_frontend
Zheng Qixing <zhengqixing(a)huawei.com>
nbd: fix uaf in nbd_genl_connect() error path
Nigel Croxon <ncroxon(a)redhat.com>
raid10: cleanup memleak at raid10_make_request
Wang Jinchao <wangjinchao600(a)gmail.com>
md/raid1: Fix stack memory use after return in raid1_reshape
Mikko Perttunen <mperttunen(a)nvidia.com>
drm/tegra: nvdec: Fix dma_alloc_coherent error check
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Zhang Rui <rui.zhang(a)intel.com>
platform/x86: think-lmi: Fix sysfs group cleanup
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Abort suspend on soft disconnect failure
Pawel Laszczak <pawell(a)cadence.com>
usb: cdnsp: Fix issue with CV Bad Descriptor test
Lee Jones <lee(a)kernel.org>
usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
Pawel Laszczak <pawell(a)cadence.com>
usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
Nilton Perim Neto <niltonperimneto(a)gmail.com>
Input: xpad - support Acer NGR 200 Controller
Raju Rangoju <Raju.Rangoju(a)amd.com>
usb: xhci: quirk for data loss in ISOC transfers
Basavaraj Natikar <Basavaraj.Natikar(a)amd.com>
xhci: Allow RPM on the USB controller (1022:43f7) by default
Filipe Manana <fdmanana(a)suse.com>
btrfs: propagate last_unlink_trans earlier when doing a rmdir
Shivank Garg <shivankg(a)amd.com>
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
Jakub Kicinski <kuba(a)kernel.org>
netlink: make sure we allow at least one dump skb
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix rmem check in netlink_broadcast_deliver().
Al Viro <viro(a)zeniv.linux.org.uk>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
Stefan Metzmacher <metze(a)samba.org>
smb: server: make use of rdma_destroy_qp()
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Ensure to disable clocks in error path
Wei Yang <richard.weiyang(a)gmail.com>
maple_tree: fix mt_destroy_walk() on root leaf node
Achill Gilgenast <fossdd(a)pwned.life>
kallsyms: fix build without execinfo
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "ACPI: battery: negate current when discharging"
Kuen-Han Tsai <khtsai(a)google.com>
usb: gadget: u_serial: Fix race condition in TTY wakeup
Simona Vetter <simona.vetter(a)ffwll.ch>
drm/gem: Fix race in drm_gem_handle_create_tail()
Christian König <christian.koenig(a)amd.com>
drm/ttm: fix error handling in ttm_buffer_object_transfer
Matthew Brost <matthew.brost(a)intel.com>
drm/sched: Increment job count before swapping tail spsc queue
Mathy Vanhoef <Mathy.Vanhoef(a)kuleuven.be>
wifi: prevent A-MSDU attacks in mesh networks
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Håkon Bugge <haakon.bugge(a)oracle.com>
md/md-bitmap: fix GPF in bitmap_get_stats()
Guillaume Nault <gnault(a)redhat.com>
gre: Fix IPv6 multicast route creation.
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
David Woodhouse <dwmw(a)amazon.co.uk>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
JP Kobryn <inwardvessel(a)gmail.com>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Fix threshold limit reset
Dan Carpenter <dan.carpenter(a)linaro.org>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
Alexey Dobriyan <adobriyan(a)gmail.com>
x86/boot: Compile boot code with -std=gnu11 too
David Howells <dhowells(a)redhat.com>
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Liam R. Howlett <Liam.Howlett(a)oracle.com>
maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
Victor Nogueira <victor(a)mojatatu.com>
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Yue Haibing <yuehaibing(a)huawei.com>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix infinite recursive call of clip_push().
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix memory leak of struct clip_vcc.
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_* TOCTOU
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_{g2h,h2g} TOCTOU
Kuniyuki Iwashima <kuniyu(a)google.com>
tipc: Fix use-after-free in tipc_conn_close().
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix wraparounds of sk->sk_rmem_alloc.
Al Viro <viro(a)zeniv.linux.org.uk>
fix proc_sys_compare() handling of in-lookup dentries
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix not disabling advertising instance
Peter Zijlstra <peterz(a)infradead.org>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Rong Zhang <i(a)rong.moe>
platform/x86: ideapad-laptop: use usleep_range() for EC polling
Kaustabh Chakraborty <kauschluss(a)disroot.org>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
-------------
Diffstat:
Makefile | 4 +-
arch/um/drivers/vector_kern.c | 42 +--
arch/x86/Kconfig | 2 +-
arch/x86/Makefile | 2 +-
arch/x86/include/asm/cpufeatures.h | 2 +-
arch/x86/kernel/cpu/mce/amd.c | 15 +-
arch/x86/kernel/cpu/mce/core.c | 8 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kvm/svm/sev.c | 4 +
arch/x86/kvm/xen.c | 15 +-
drivers/acpi/battery.c | 19 +-
drivers/atm/idt77252.c | 5 +
drivers/block/nbd.c | 6 +-
drivers/char/ipmi/ipmi_msghandler.c | 3 +-
drivers/gpu/drm/drm_gem.c | 10 +-
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/tegra/nvdec.c | 6 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 13 +-
drivers/hid/hid-ids.h | 6 +
drivers/hid/hid-lenovo.c | 8 +
drivers/hid/hid-multitouch.c | 8 +-
drivers/hid/hid-quirks.c | 3 +
drivers/input/joystick/xpad.c | 2 +
drivers/input/keyboard/atkbd.c | 3 +-
drivers/md/md-bitmap.c | 3 +-
drivers/md/raid1.c | 1 +
drivers/md/raid10.c | 10 +-
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/ibm/ibmvnic.h | 8 +-
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 2 +-
drivers/net/phy/smsc.c | 28 +-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/platform/x86/ideapad-laptop.c | 19 +-
drivers/powercap/intel_rapl_common.c | 22 +-
drivers/pwm/pwm-mediatek.c | 13 +-
drivers/tty/vt/vt.c | 1 +
drivers/usb/cdns3/cdnsp-debug.h | 358 +++++++++++++-------------
drivers/usb/cdns3/cdnsp-ep0.c | 18 +-
drivers/usb/cdns3/cdnsp-gadget.c | 6 +-
drivers/usb/cdns3/cdnsp-gadget.h | 11 +-
drivers/usb/cdns3/cdnsp-ring.c | 27 +-
drivers/usb/dwc3/core.c | 9 +-
drivers/usb/dwc3/gadget.c | 22 +-
drivers/usb/gadget/function/u_serial.c | 6 +-
drivers/usb/host/xhci-mem.c | 4 +
drivers/usb/host/xhci-pci.c | 30 ++-
drivers/usb/host/xhci.h | 1 +
drivers/vhost/scsi.c | 7 +-
fs/anon_inodes.c | 23 +-
fs/btrfs/free-space-tree.c | 16 +-
fs/btrfs/inode.c | 28 +-
fs/erofs/data.c | 2 +
fs/erofs/zdata.c | 124 ++++-----
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
fs/smb/server/smb2pdu.c | 29 +--
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/vfs.c | 1 +
include/drm/drm_file.h | 3 +
include/drm/spsc_queue.h | 4 +-
include/linux/fs.h | 2 +
include/net/netfilter/nf_flow_table.h | 2 +-
include/trace/events/erofs.h | 16 +-
kernel/events/core.c | 2 +-
kernel/rseq.c | 60 ++++-
lib/maple_tree.c | 7 +-
mm/kasan/report.c | 13 +-
mm/secretmem.c | 11 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 64 +++--
net/bluetooth/hci_sync.c | 2 +-
net/ipv6/addrconf.c | 9 +-
net/netlink/af_netlink.c | 90 ++++---
net/rxrpc/call_accept.c | 3 +
net/sched/sch_api.c | 23 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 57 +++-
net/wireless/util.c | 52 +++-
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/amd/yc/acp6x-mach.c | 7 +
sound/soc/fsl/fsl_asrc.c | 3 +-
tools/include/linux/kallsyms.h | 4 +
87 files changed, 924 insertions(+), 594 deletions(-)
1 week, 3 days
- 10
- 9
[PATCH 6.6 000/111] 6.6.99-rc2 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.6.99 release.
There are 111 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 17 Jul 2025 16:35:12 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.99-rc2…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.6.99-rc2
Michael Jeanson <mjeanson(a)efficios.com>
rseq: Fix segfault on registration when rseq_cs is non-zero
Lukas Wunner <lukas(a)wunner.de>
crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix potential use-after-free in oplock/lease break ack
Yeoreum Yun <yeoreum.yun(a)arm.com>
kasan: remove kasan_find_vm_area() to prevent possible deadlock
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix potential race in cifs_put_tcon()
Willem de Bruijn <willemb(a)google.com>
selftests/bpf: adapt one more case in test_lru_map to the new target_free
Hans de Goede <hdegoede(a)redhat.com>
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Zhang Heng <zhangheng(a)kylinos.cn>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Willem de Bruijn <willemb(a)google.com>
bpf: Adjust free target to avoid global starvation of LRU map
Nicolas Pitre <npitre(a)baylibre.com>
vt: add missing notification when switching back to text mode
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix assertion when building free space tree
Long Li <longli(a)microsoft.com>
net: mana: Record doorbell physical address in PF mode
Akira Inoue <niyarium(a)gmail.com>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
Xiaowei Li <xiaowei.li(a)simcom.com>
net: usb: qmi_wwan: add SIMCom 8230C composition
Yasmin Fitzgerald <sunoflife1.git(a)gmail.com>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
Yuzuru10 <yuzuru_10(a)proton.me>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
Fengnan Chang <changfengnan(a)bytedance.com>
io_uring: make fallocate be hashed work
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: vector: Reduce stack usage in vector_eth_configure()
Thomas Fourier <fourier.thomas(a)gmail.com>
atm: idt77252: Add missing `dma_map_error()`
Ronnie Sahlberg <rsahlberg(a)whamcloud.com>
ublk: sanity check add_dev input for underflow
Somnath Kotur <somnath.kotur(a)broadcom.com>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Fix DCB ETS validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Sean Nyekjaer <sean(a)geanix.com>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Mingming Cao <mmc(a)linux.ibm.com>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
Kito Xu <veritas501(a)foxmail.com>
net: appletalk: Fix device refcount leak in atrtr_create()
Eric Dumazet <edumazet(a)google.com>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
Zheng Qixing <zhengqixing(a)huawei.com>
nbd: fix uaf in nbd_genl_connect() error path
Nigel Croxon <ncroxon(a)redhat.com>
raid10: cleanup memleak at raid10_make_request
Wang Jinchao <wangjinchao600(a)gmail.com>
md/raid1: Fix stack memory use after return in raid1_reshape
Mikko Perttunen <mperttunen(a)nvidia.com>
drm/tegra: nvdec: Fix dma_alloc_coherent error check
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Shyam Prasad N <sprasad(a)microsoft.com>
cifs: all initializations for tcon should happen in tcon_info_alloc
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix DFS interlink failover
Paulo Alcantara <pc(a)manguebit.com>
smb: client: avoid unnecessary reconnects when refreshing referrals
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Abort suspend on soft disconnect failure
Pawel Laszczak <pawell(a)cadence.com>
usb: cdnsp: Fix issue with CV Bad Descriptor test
Lee Jones <lee(a)kernel.org>
usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
Pawel Laszczak <pawell(a)cadence.com>
usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix inode lookup error handling during log replay
Filipe Manana <fdmanana(a)suse.com>
btrfs: return a btrfs_inode from btrfs_iget_logging()
Filipe Manana <fdmanana(a)suse.com>
btrfs: remove redundant root argument from fixup_inode_link_count()
Filipe Manana <fdmanana(a)suse.com>
btrfs: remove redundant root argument from btrfs_update_inode_fallback()
Filipe Manana <fdmanana(a)suse.com>
btrfs: remove noinline from btrfs_update_inode()
Jakub Kicinski <kuba(a)kernel.org>
netlink: make sure we allow at least one dump skb
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix rmem check in netlink_broadcast_deliver().
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_read_folio()
Al Viro <viro(a)zeniv.linux.org.uk>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
Stefan Metzmacher <metze(a)samba.org>
smb: server: make use of rdma_destroy_qp()
Jann Horn <jannh(a)google.com>
x86/mm: Disable hugetlb page table sharing on 32-bit
Mikhail Paulyshka <me(a)mixaill.net>
x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Ensure to disable clocks in error path
Alexander Gordeev <agordeev(a)linux.ibm.com>
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts.py after maple tree conversion
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: de-reference per-CPU MCE interrupts
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts display after MCP on x86
Baolin Wang <baolin.wang(a)linux.alibaba.com>
mm: fix the inaccurate memory statistics issue for users
Wei Yang <richard.weiyang(a)gmail.com>
maple_tree: fix mt_destroy_walk() on root leaf node
Achill Gilgenast <fossdd(a)pwned.life>
kallsyms: fix build without execinfo
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "ACPI: battery: negate current when discharging"
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/framebuffer: Acquire internal references on GEM handles
Kuen-Han Tsai <khtsai(a)google.com>
Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
Kuen-Han Tsai <khtsai(a)google.com>
usb: gadget: u_serial: Fix race condition in TTY wakeup
Simona Vetter <simona.vetter(a)ffwll.ch>
drm/gem: Fix race in drm_gem_handle_create_tail()
Christian König <christian.koenig(a)amd.com>
drm/ttm: fix error handling in ttm_buffer_object_transfer
Matthew Brost <matthew.brost(a)intel.com>
drm/sched: Increment job count before swapping tail spsc queue
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/gem: Acquire references on GEM handles for framebuffers
Mathy Vanhoef <Mathy.Vanhoef(a)kuleuven.be>
wifi: prevent A-MSDU attacks in mesh networks
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Håkon Bugge <haakon.bugge(a)oracle.com>
md/md-bitmap: fix GPF in bitmap_get_stats()
Guillaume Nault <gnault(a)redhat.com>
gre: Fix IPv6 multicast route creation.
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
David Woodhouse <dwmw(a)amazon.co.uk>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
JP Kobryn <inwardvessel(a)gmail.com>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Fix threshold limit reset
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Dan Carpenter <dan.carpenter(a)linaro.org>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
David Howells <dhowells(a)redhat.com>
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Christian Eggers <ceggers(a)arri.de>
Bluetooth: HCI: Set extended advertising data synchronously
Leo Yan <leo.yan(a)arm.com>
perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
Liam R. Howlett <Liam.Howlett(a)oracle.com>
maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
David Howells <dhowells(a)redhat.com>
rxrpc: Fix bug due to prealloc collision
Victor Nogueira <victor(a)mojatatu.com>
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Yue Haibing <yuehaibing(a)huawei.com>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix infinite recursive call of clip_push().
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix memory leak of struct clip_vcc.
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Force predictable MDI-X state on LAN87xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
EricChan <chenchuangyu(a)xiaomi.com>
net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_* TOCTOU
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_{g2h,h2g} TOCTOU
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: Correct signedness in skb remaining space calculation
Kuniyuki Iwashima <kuniyu(a)google.com>
tipc: Fix use-after-free in tipc_conn_close().
Stefano Garzarella <sgarzare(a)redhat.com>
vsock: fix `vsock_proto` declaration
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix wraparounds of sk->sk_rmem_alloc.
Al Viro <viro(a)zeniv.linux.org.uk>
fix proc_sys_compare() handling of in-lookup dentries
Mario Limonciello <mario.limonciello(a)amd.com>
pinctrl: amd: Clear GPIO debounce for suspend
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix not disabling advertising instance
Richard Fitzgerald <rf(a)opensource.cirrus.com>
ASoC: cs35l56: probe() should fail if the device ID is not recognized
Peter Zijlstra <peterz(a)infradead.org>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Luo Gengkun <luogengkun(a)huaweicloud.com>
perf/core: Fix the WARN_ON_ONCE is out of lock protected region
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Kaustabh Chakraborty <kauschluss(a)disroot.org>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Linus Torvalds <torvalds(a)linux-foundation.org>
eventpoll: don't decrement ep refcount while still holding the ep mutex
-------------
Diffstat:
Documentation/bpf/map_hash.rst | 8 +-
Documentation/bpf/map_lru_hash_update.dot | 6 +-
Makefile | 4 +-
arch/um/drivers/vector_kern.c | 42 +--
arch/x86/Kconfig | 2 +-
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/kernel/cpu/amd.c | 7 +
arch/x86/kernel/cpu/mce/amd.c | 28 +-
arch/x86/kernel/cpu/mce/core.c | 8 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kvm/svm/sev.c | 4 +
arch/x86/kvm/xen.c | 15 +-
crypto/ecc.c | 2 +-
drivers/acpi/battery.c | 19 +-
drivers/atm/idt77252.c | 5 +
drivers/block/nbd.c | 6 +-
drivers/block/ublk_drv.c | 3 +-
drivers/char/ipmi/ipmi_msghandler.c | 3 +-
drivers/gpu/drm/drm_framebuffer.c | 31 +-
drivers/gpu/drm/drm_gem.c | 74 ++++-
drivers/gpu/drm/drm_internal.h | 2 +
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/tegra/nvdec.c | 6 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 13 +-
drivers/hid/hid-ids.h | 6 +
drivers/hid/hid-lenovo.c | 8 +
drivers/hid/hid-multitouch.c | 8 +-
drivers/hid/hid-quirks.c | 3 +
drivers/input/keyboard/atkbd.c | 3 +-
drivers/md/md-bitmap.c | 3 +-
drivers/md/raid1.c | 1 +
drivers/md/raid10.c | 10 +-
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/ibm/ibmvnic.h | 8 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 3 +
drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 24 +-
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 2 +-
drivers/net/phy/smsc.c | 57 +++-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pinctrl/pinctrl-amd.c | 11 +
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/pwm/pwm-mediatek.c | 13 +-
drivers/tty/vt/vt.c | 1 +
drivers/usb/cdns3/cdnsp-debug.h | 358 ++++++++++-----------
drivers/usb/cdns3/cdnsp-ep0.c | 18 +-
drivers/usb/cdns3/cdnsp-gadget.c | 6 +-
drivers/usb/cdns3/cdnsp-gadget.h | 11 +-
drivers/usb/cdns3/cdnsp-ring.c | 27 +-
drivers/usb/dwc3/core.c | 9 +-
drivers/usb/dwc3/gadget.c | 22 +-
drivers/usb/gadget/function/u_serial.c | 12 +-
fs/btrfs/btrfs_inode.h | 2 +-
fs/btrfs/free-space-tree.c | 16 +-
fs/btrfs/inode.c | 18 +-
fs/btrfs/transaction.c | 2 +-
fs/btrfs/tree-log.c | 331 +++++++++++--------
fs/erofs/data.c | 2 +
fs/eventpoll.c | 12 +-
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
fs/proc/task_mmu.c | 14 +-
fs/smb/client/cifsglob.h | 3 +
fs/smb/client/cifsproto.h | 13 +-
fs/smb/client/connect.c | 47 ++-
fs/smb/client/dfs.c | 73 ++---
fs/smb/client/dfs.h | 42 ++-
fs/smb/client/dfs_cache.c | 198 +++++++-----
fs/smb/client/fs_context.h | 1 +
fs/smb/client/misc.c | 9 +
fs/smb/client/namespace.c | 2 +-
fs/smb/server/smb2pdu.c | 29 +-
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/vfs.c | 1 +
include/drm/drm_file.h | 3 +
include/drm/drm_framebuffer.h | 7 +
include/drm/spsc_queue.h | 4 +-
include/linux/math.h | 12 +
include/linux/mm.h | 5 +
include/net/af_vsock.h | 2 +-
include/net/netfilter/nf_flow_table.h | 2 +-
io_uring/opdef.c | 1 +
kernel/bpf/bpf_lru_list.c | 9 +-
kernel/bpf/bpf_lru_list.h | 1 +
kernel/events/core.c | 6 +-
kernel/rseq.c | 60 +++-
lib/maple_tree.c | 14 +-
mm/kasan/report.c | 13 +-
mm/vmalloc.c | 22 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 64 +++-
net/bluetooth/hci_event.c | 39 +--
net/bluetooth/hci_sync.c | 215 ++++++++-----
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 9 +-
net/netlink/af_netlink.c | 90 +++---
net/rxrpc/call_accept.c | 4 +
net/sched/sch_api.c | 23 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 57 +++-
net/wireless/util.c | 52 ++-
scripts/gdb/linux/constants.py.in | 7 +
scripts/gdb/linux/interrupts.py | 16 +-
scripts/gdb/linux/mapletree.py | 252 +++++++++++++++
scripts/gdb/linux/xarray.py | 28 ++
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/amd/yc/acp6x-mach.c | 7 +
sound/soc/codecs/cs35l56-shared.c | 2 +-
sound/soc/fsl/fsl_asrc.c | 3 +-
tools/arch/x86/include/asm/msr-index.h | 1 +
tools/build/feature/Makefile | 25 +-
tools/include/linux/kallsyms.h | 4 +
tools/perf/Makefile.perf | 27 +-
tools/testing/selftests/bpf/test_lru_map.c | 105 +++---
117 files changed, 1948 insertions(+), 1042 deletions(-)
From gregkh(a)linuxfoundation.org Tue Jul 15 18:35:42 2025
Message-ID: <20250715163542.121531643(a)linuxfoundation.org>
User-Agent: quilt/0.68
Date: Tue, 15 Jul 2025 18:35:43 +0200
From: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
To: stable(a)vger.kernel.org
Cc: patches(a)lists.linux.dev, linux-kernel(a)vger.kernel.org, torvalds(a)linux-foundation.org, akpm(a)linux-foundation.org, linux(a)roeck-us.net, shuah(a)kernel.org, patches(a)kernelci.org, lkft-triage(a)lists.linaro.org, pavel(a)denx.de, jonathanh(a)nvidia.com, f.fainelli(a)gmail.com, sudipm.mukherjee(a)gmail.com, srw(a)sladewatkins.net, rwarsow(a)gmx.de, conor(a)kernel.org, hargar(a)microsoft.com, broonie(a)kernel.org,
Jann Horn <jannh(a)google.com>,
Alexander Viro <viro(a)zeniv.linux.org.uk>,
Christian Brauner <brauner(a)kernel.org>,
Jan Kara <jack(a)suse.cz>,
Linus Torvalds <torvalds(a)linux-foundation.org>
X-stable: review
X-Patchwork-Hint: ignore
Subject: [PATCH 6.6 001/111] eventpoll: dont decrement ep refcount while still holding the ep mutex
MIME-Version: 1.0
6.6-stable review patch. If anyone has any objections, please let me know.
------------------
From: Linus Torvalds <torvalds(a)linux-foundation.org>
commit 8c2e52ebbe885c7eeaabd3b7ddcdc1246fc400d2 upstream.
Jann Horn points out that epoll is decrementing the ep refcount and then
doing a
mutex_unlock(&ep->mtx);
afterwards. That's very wrong, because it can lead to a use-after-free.
That pattern is actually fine for the very last reference, because the
code in question will delay the actual call to "ep_free(ep)" until after
it has unlocked the mutex.
But it's wrong for the much subtler "next to last" case when somebody
*else* may also be dropping their reference and free the ep while we're
still using the mutex.
Note that this is true even if that other user is also using the same ep
mutex: mutexes, unlike spinlocks, can not be used for object ownership,
even if they guarantee mutual exclusion.
A mutex "unlock" operation is not atomic, and as one user is still
accessing the mutex as part of unlocking it, another user can come in
and get the now released mutex and free the data structure while the
first user is still cleaning up.
See our mutex documentation in Documentation/locking/mutex-design.rst,
in particular the section [1] about semantics:
"mutex_unlock() may access the mutex structure even after it has
internally released the lock already - so it's not safe for
another context to acquire the mutex and assume that the
mutex_unlock() context is not using the structure anymore"
So if we drop our ep ref before the mutex unlock, but we weren't the
last one, we may then unlock the mutex, another user comes in, drops
_their_ reference and releases the 'ep' as it now has no users - all
while the mutex_unlock() is still accessing it.
Fix this by simply moving the ep refcount dropping to outside the mutex:
the refcount itself is atomic, and doesn't need mutex protection (that's
the whole _point_ of refcounts: unlike mutexes, they are inherently
about object lifetimes).
Reported-by: Jann Horn <jannh(a)google.com>
Link: https://docs.kernel.org/locking/mutex-design.html#semantics [1]
Cc: Alexander Viro <viro(a)zeniv.linux.org.uk>
Cc: Christian Brauner <brauner(a)kernel.org>
Cc: Jan Kara <jack(a)suse.cz>
Signed-off-by: Linus Torvalds <torvalds(a)linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
---
fs/eventpoll.c | 12 +++++-------
1 file changed, 5 insertions(+), 7 deletions(-)
--- a/fs/eventpoll.c
+++ b/fs/eventpoll.c
@@ -772,7 +772,7 @@ static bool __ep_remove(struct eventpoll
call_rcu(&epi->rcu, epi_rcu_free);
percpu_counter_dec(&ep->user->epoll_watches);
- return ep_refcount_dec_and_test(ep);
+ return true;
}
/*
@@ -780,14 +780,14 @@ static bool __ep_remove(struct eventpoll
*/
static void ep_remove_safe(struct eventpoll *ep, struct epitem *epi)
{
- WARN_ON_ONCE(__ep_remove(ep, epi, false));
+ if (__ep_remove(ep, epi, false))
+ WARN_ON_ONCE(ep_refcount_dec_and_test(ep));
}
static void ep_clear_and_put(struct eventpoll *ep)
{
struct rb_node *rbp, *next;
struct epitem *epi;
- bool dispose;
/* We need to release all tasks waiting for these file */
if (waitqueue_active(&ep->poll_wait))
@@ -820,10 +820,8 @@ static void ep_clear_and_put(struct even
cond_resched();
}
- dispose = ep_refcount_dec_and_test(ep);
mutex_unlock(&ep->mtx);
-
- if (dispose)
+ if (ep_refcount_dec_and_test(ep))
ep_free(ep);
}
@@ -1003,7 +1001,7 @@ again:
dispose = __ep_remove(ep, epi, true);
mutex_unlock(&ep->mtx);
- if (dispose)
+ if (dispose && ep_refcount_dec_and_test(ep))
ep_free(ep);
goto again;
}
1 week, 3 days
- 10
- 9
[PATCH 5.10 000/355] 5.10.239-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.10.239 release.
There are 355 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 25 Jun 2025 13:05:51 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.239-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.10.239-rc1
Tengda Wu <wutengda(a)huaweicloud.com>
arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
Peter Zijlstra <peterz(a)infradead.org>
perf: Fix sample vs do_exit()
Aaron Lu <ziqianlu(a)bytedance.com>
Revert "bpf: allow precision tracking for programs with subprogs"
Aaron Lu <ziqianlu(a)bytedance.com>
Revert "bpf: stop setting precise in current state"
Aaron Lu <ziqianlu(a)bytedance.com>
Revert "bpf: aggressively forget precise markings during state checkpointing"
Aaron Lu <ziqianlu(a)bytedance.com>
Revert "selftests/bpf: make test_align selftest more robust"
Heiko Carstens <hca(a)linux.ibm.com>
s390/pci: Fix __pcilg_mio_inuser() inline assembly
David Gow <davidgow(a)google.com>
rtc: test: Fix invalid format specifier.
Eddie James <eajames(a)linux.ibm.com>
hwmon: (occ) Fix P10 VRM temp sensors
Gavin Guo <gavinguo(a)igalia.com>
mm/huge_memory: fix dereferencing invalid pmd migration entry
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: move the limit validation
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: use a temporary work area for validating configuration
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: don't allow 1 packet limit
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: handle bigger packets
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: annotate data-races around q->perturb_period
Alexandre Mergnat <amergnat(a)baylibre.com>
rtc: Make rtc_time64_to_tm() support dates before 1970
Cassio Neri <cassio.neri(a)gmail.com>
rtc: Improve performance of rtc_time64_to_tm(). Add tests.
Paul Chaignon <paul.chaignon(a)gmail.com>
bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
Paul Chaignon <paul.chaignon(a)gmail.com>
net: Fix checksum update for ILA adj-transport
Eliav Farber <farbere(a)amazon.com>
net/ipv4: fix type mismatch in inet_ehash_locks_alloc() causing build failure
James Morse <james.morse(a)arm.com>
arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
James Morse <james.morse(a)arm.com>
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
James Morse <james.morse(a)arm.com>
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
Liu Song <liusong(a)linux.alibaba.com>
arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually
James Morse <james.morse(a)arm.com>
arm64: proton-pack: Expose whether the branchy loop k value
Will Deacon <will(a)kernel.org>
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
James Morse <james.morse(a)arm.com>
arm64: proton-pack: Expose whether the platform is mitigated by firmware
James Morse <james.morse(a)arm.com>
arm64: insn: Add support for encoding DSB
Hou Tao <houtao1(a)huawei.com>
arm64: insn: add encoders for atomic operations
Hou Tao <houtao1(a)huawei.com>
arm64: move AARCH64_BREAK_FAULT into insn-def.h
Julien Thierry <jthierry(a)redhat.com>
arm64: insn: Add barrier encodings
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
serial: sh-sci: Increment the runtime usage counter for the earlycon device
Geert Uytterhoeven <geert+renesas(a)glider.be>
ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
Colin Foster <colin.foster(a)in-advantage.com>
ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
Shengyu Qu <wiagn233(a)outlook.com>
ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
Eric Dumazet <edumazet(a)google.com>
net: atm: fix /proc/net/atm/lec handling
Eric Dumazet <edumazet(a)google.com>
net: atm: add lec_mutex
Kuniyuki Iwashima <kuniyu(a)google.com>
calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
Haixia Qu <hxqu(a)hillstonenet.com>
tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
Neal Cardwell <ncardwell(a)google.com>
tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: atmtcp: Free invalid length skb in atmtcp_c_send().
Kuniyuki Iwashima <kuniyu(a)google.com>
mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
Dmitry Antipov <dmantipov(a)yandex.ru>
wifi: carl9170: do not ping device which has failed to load firmware
Krishna Kumar <krikku(a)gmail.com>
net: ice: Perform accurate aRFS flow match
Justin Sanders <jsanders.devel(a)gmail.com>
aoe: clean device rq_list in aoedev_downdev()
Simon Horman <horms(a)kernel.org>
pldmfw: Select CRC32 when PLDMFW is selected
Arnd Bergmann <arnd(a)arndb.de>
hwmon: (occ) fix unaligned accesses
Arnd Bergmann <arnd(a)arndb.de>
hwmon: (occ) Rework attribute registration for stack usage
Eddie James <eajames(a)linux.ibm.com>
hwmon: (occ) Add soft minimum power cap attribute
Eddie James <eajames(a)linux.ibm.com>
hwmon: (occ) Add new temperature sensor type
Jacob Keller <jacob.e.keller(a)intel.com>
drm/nouveau/bl: increase buffer size to avoid truncate warning
Gao Xiang <hsiangkao(a)linux.alibaba.com>
erofs: remove unused trace event erofs_destroy_inode
Jann Horn <jannh(a)google.com>
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
Liu Shixin <liushixin2(a)huawei.com>
mm: hugetlb: independent PMD page table shared count
Jann Horn <jannh(a)google.com>
mm/hugetlb: unshare page tables during VMA split, not before
James Houghton <jthoughton(a)google.com>
hugetlb: unshare some PMDs when splitting VMAs
Jonathan Lane <jon(a)borg.moe>
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda/intel: Add Thinkpad E15 to PM deny list
wangdicheng <wangdicheng(a)kylinos.cn>
ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card
WangYuli <wangyuli(a)uniontech.com>
Input: sparcspkr - avoid unannotated fall-through
Terry Junge <linuxhid(a)cosmicgizmosystems.com>
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: Revert atm_account_tx() if copy_from_iter_full() fails.
Stephen Smalley <stephen.smalley.work(a)gmail.com>
selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
Marek Szyprowski <m.szyprowski(a)samsung.com>
udmabuf: use sgtable-based scatterlist wrappers
Peter Oberparleiter <oberpar(a)linux.ibm.com>
scsi: s390: zfcp: Ensure synchronous unit_add
Dexuan Cui <decui(a)microsoft.com>
scsi: storvsc: Increase the timeouts to storvsc_timeout
Fedor Pchelkin <pchelkin(a)ispras.ru>
jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
Artem Sadovnikov <a.sadovnikov(a)ispras.ru>
jffs2: check that raw node were preallocated before writing summary
Andrew Morton <akpm(a)linux-foundation.org>
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
Breno Leitao <leitao(a)debian.org>
Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
Narayana Murty N <nnmlinux(a)linux.ibm.com>
powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
Stuart Hayes <stuart.w.hayes(a)gmail.com>
platform/x86: dell_rbu: Stop overwriting data buffer
Stuart Hayes <stuart.w.hayes(a)gmail.com>
platform/x86: dell_rbu: Fix list usage
Maximilian Luz <luzmaximilian(a)gmail.com>
platform: Add Surface platform directory
Alexander Sverdlin <alexander.sverdlin(a)siemens.com>
Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
Jann Horn <jannh(a)google.com>
tee: Prevent size calculation wraparound on 32-bit kernels
Sukrut Bellary <sbellary(a)baylibre.com>
ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
Laurentiu Tudor <laurentiu.tudor(a)nxp.com>
bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
Marcus Folkesson <marcus.folkesson(a)gmail.com>
watchdog: da9052_wdt: respect TWDMIN
Kyungwook Boo <bookyungwook(a)gmail.com>
i40e: fix MMIO write access to an invalid page in i40e_clear_hw
Zijun Hu <quic_zijuhu(a)quicinc.com>
sock: Correct error checking condition for (assign|release)_proto_idx()
Daniel Wagner <wagi(a)kernel.org>
scsi: lpfc: Use memcpy() for BIOS version
Zijun Hu <quic_zijuhu(a)quicinc.com>
software node: Correct a OOB check in software_node_get_reference_args()
Ido Schimmel <idosch(a)nvidia.com>
vxlan: Do not treat dst cache initialization errors as fatal
Sean Christopherson <seanjc(a)google.com>
iommu/amd: Ensure GA log notifier callbacks finish running before module unload
Justin Tee <justin.tee(a)broadcom.com>
scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
Heiko Stuebner <heiko(a)sntech.de>
clk: rockchip: rk3036: mark ddrphy as critical
Benjamin Berg <benjamin(a)sipsolutions.net>
wifi: mac80211: do not offer a mesh path if forwarding is disabled
Jason Xing <kernelxing(a)tencent.com>
net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
Jason Xing <kernelxing(a)tencent.com>
net: atlantic: generate software timestamp just before the doorbell
Sebastian Andrzej Siewior <bigeasy(a)linutronix.de>
ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
Eric Dumazet <edumazet(a)google.com>
tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
Eric Dumazet <edumazet(a)google.com>
tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
Moon Yeounsu <yyyynoom(a)gmail.com>
net: dlink: add synchronization for stats update
Tali Perry <tali.perry1(a)gmail.com>
i2c: npcm: Add clock toggle recovery
Petr Malat <oss(a)malat.biz>
sctp: Do not wake readers in __sctp_write_space()
Henk Vergonet <henk.vergonet(a)gmail.com>
wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
Alok Tiwari <alok.a.tiwari(a)oracle.com>
emulex/benet: correct command version selection in be_cmd_get_stats()
Tan En De <ende.tan(a)starfivetech.com>
i2c: designware: Invoke runtime suspend on quick slave re-registration
Zilin Guan <zilin(a)seu.edu.cn>
tipc: use kfree_sensitive() for aead cleanup
Sergio Perez Gonzalez <sperezglz(a)gmail.com>
net: macb: Check return value of dma_set_mask_and_coherent()
Viresh Kumar <viresh.kumar(a)linaro.org>
cpufreq: Force sync policy boost with global boost on sysfs update
George Moussalem <george.moussalem(a)outlook.com>
thermal/drivers/qcom/tsens: Update conditions to strictly evaluate for IP v2+
Simon Schuster <schuster.simon(a)siemens-energy.com>
nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults
Wentao Liang <vulab(a)iscas.ac.cn>
media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
Hans Verkuil <hverkuil(a)xs4all.nl>
media: tc358743: ignore video while HPD is low
Amber Lin <Amber.Lin(a)amd.com>
drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB
Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org>
drm/msm/dpu: don't select single flush for active CTL blocks
Dylan Wolff <wolffd(a)comp.nus.edu.sg>
jfs: Fix null-ptr-deref in jfs_ioc_trim
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx9: fix CSIB handling
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx8: fix CSIB handling
Zhang Yi <yi.zhang(a)huawei.com>
ext4: prevent stale extent cache entries caused by concurrent get es_cache
Long Li <leo.lilong(a)huawei.com>
sunrpc: fix race in cache cleanup causing stale nextcheck time
Nicolas Dufresne <nicolas.dufresne(a)collabora.com>
media: rkvdec: Initialize the m2m context before the controls
Aditya Dutt <duttaditya18(a)gmail.com>
jfs: fix array-index-out-of-bounds read in add_missing_indices
Zhang Yi <yi.zhang(a)huawei.com>
ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx7: fix CSIB handling
Nas Chung <nas.chung(a)chipsnmedia.com>
media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx10: fix CSIB handling
Akhil P Oommen <quic_akhilpo(a)quicinc.com>
drm/msm/a6xx: Increase HFI response timeout
Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com>
drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit()
Nas Chung <nas.chung(a)chipsnmedia.com>
media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition
Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org>
drm/msm/hdmi: add runtime PM calls to DDC transfer function
Namjae Jeon <linkinjeon(a)kernel.org>
exfat: fix double free in delayed_free
Damon Ding <damon.ding(a)rock-chips.com>
drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq()
Long Li <leo.lilong(a)huawei.com>
sunrpc: update nextcheck time when adding new cache entries
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx6: fix CSIB handling
Peter Marheine <pmarheine(a)chromium.org>
ACPI: battery: negate current when discharging
Charan Teja Kalla <quic_charante(a)quicinc.com>
PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
Yuanjun Gong <ruc_gongyuanjun(a)163.com>
ASoC: tegra210_ahub: Add check to of_device_get_match_data()
gldrk <me(a)rarity.fan>
ACPICA: utilities: Fix overflow check in vsnprintf()
Jerry Lv <Jerry.Lv(a)axis.com>
power: supply: bq27xxx: Retrieve again when busy
Seunghun Han <kkamagui(a)gmail.com>
ACPICA: fix acpi parse and parseext cache leaks
Hector Martin <marcan(a)marcan.st>
ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
Ahmed Salem <x0rw3ll(a)gmail.com>
ACPICA: Avoid sequence overread in call to strncmp()
Guilherme G. Piccoli <gpiccoli(a)igalia.com>
clocksource: Fix the CPUs' choice in the watchdog per CPU verification
Seunghun Han <kkamagui(a)gmail.com>
ACPICA: fix acpi operand cache leak in dswstate.c
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad7606_spi: fix reg write value mask
Sean Nyekjaer <sean(a)geanix.com>
iio: imu: inv_icm42600: Fix temperature calculation
Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
PCI: Fix lock symmetry in pci_slot_unlock()
Huacai Chen <chenhuacai(a)loongson.cn>
PCI: Add ACS quirk for Loongson PCIe
Long Li <longli(a)microsoft.com>
uio_hv_generic: Use correct size for interrupt and monitor pages
Wentao Liang <vulab(a)iscas.ac.cn>
regulator: max14577: Add error check for max14577_read_reg()
Khem Raj <raj.khem(a)gmail.com>
mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
Gabriel Shahrouzi <gshahrouzi(a)gmail.com>
staging: iio: ad5933: Correct settling cycles encoding per datasheet
Qasim Ijaz <qasdev00(a)gmail.com>
net: ch9200: fix uninitialised access during mii_nway_restart
Ye Bin <yebin10(a)huawei.com>
ftrace: Fix UAF when lookup kallsym after ftrace disabled
Mikulas Patocka <mpatocka(a)redhat.com>
dm-mirror: fix a tiny race condition
Wentao Liang <vulab(a)iscas.ac.cn>
mtd: nand: sunxi: Add randomizer configuration before randomizer enable
Wentao Liang <vulab(a)iscas.ac.cn>
mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
Jinliang Zheng <alexjlzheng(a)tencent.com>
mm: fix ratelimit_pages update error in dirty_ratio_handler()
Jeongjun Park <aha310510(a)gmail.com>
ipc: fix to protect IPCS lookups using RCU
Da Xue <da(a)libre.computer>
clk: meson-g12a: add missing fclk_div2 to spicc
Arnd Bergmann <arnd(a)arndb.de>
parisc: fix building with gcc-15
GONG Ruiqi <gongruiqi1(a)huawei.com>
vgacon: Add check for vc_origin address range in vgacon_scroll()
Murad Masimov <m.masimov(a)mt-integration.ru>
fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
Niravkumar L Rabara <niravkumar.l.rabara(a)intel.com>
EDAC/altera: Use correct write width with the INTTEST register
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
NFC: nci: uart: Set tty->disc_data only in success path
Chao Yu <chao(a)kernel.org>
f2fs: fix to do sanity check on sit_bitmap_size
Jaegeuk Kim <jaegeuk(a)kernel.org>
f2fs: prevent kernel warning due to negative i_nlink from corrupted image
Dan Carpenter <dan.carpenter(a)linaro.org>
Input: ims-pcu - check record size in ims_pcu_flash_firmware()
Zhang Yi <yi.zhang(a)huawei.com>
ext4: ensure i_size is smaller than maxbytes
Zhang Yi <yi.zhang(a)huawei.com>
ext4: factor out ext4_get_maxbytes()
Jan Kara <jack(a)suse.cz>
ext4: fix calculation of credits for extent tree modification
Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com>
ext4: inline: fix len overflow in ext4_prepare_inline_data
Ioana Ciornei <ioana.ciornei(a)nxp.com>
bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
Tasos Sahanidis <tasos(a)tasossah.com>
ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
Jeff Hugo <quic_jhugo(a)quicinc.com>
bus: mhi: host: Fix conflict between power_up and SYSERR
Andreas Kemnade <andreas(a)kemnade.info>
ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
Ross Stutterheim <ross.stutterheim(a)garmin.com>
ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
Denis Arefev <arefev(a)swemel.ru>
media: vivid: Change the siize of the composing
Edward Adam Davis <eadavis(a)qq.com>
media: vidtv: Terminating the subsequent process of initialization failure
Marek Szyprowski <m.szyprowski(a)samsung.com>
media: videobuf2: use sgtable-based scatterlist wrappers
Loic Poulain <loic.poulain(a)oss.qualcomm.com>
media: venus: Fix probe error handling
Ma Ke <make24(a)iscas.ac.cn>
media: v4l2-dev: fix error handling in __video_register_device()
Wentao Liang <vulab(a)iscas.ac.cn>
media: gspca: Add error handling for stv06xx_read_sensor()
Edward Adam Davis <eadavis(a)qq.com>
media: cxusb: no longer judge rbuf when the write fails
Johan Hovold <johan+linaro(a)kernel.org>
media: ov8856: suppress probe deferral errors
Mingcong Bai <jeffbai(a)aosc.io>
wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
Jeongjun Park <aha310510(a)gmail.com>
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
Li Lingfeng <lilingfeng3(a)huawei.com>
nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
NeilBrown <neil(a)brown.name>
nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
Christian Lamparter <chunkeey(a)gmail.com>
wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
Wentao Liang <vulab(a)iscas.ac.cn>
net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
Wentao Liang <vulab(a)iscas.ac.cn>
net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
Martin Blumenstingl <martin.blumenstingl(a)googlemail.com>
ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
Wentao Liang <vulab(a)iscas.ac.cn>
ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
Alexander Aring <aahringo(a)redhat.com>
gfs2: move msleep to sleepable context
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Do not chain submitted requests
Zijun Hu <quic_zijuhu(a)quicinc.com>
configfs: Do not override creating attribute file failure in populate_attrs()
Eric Dumazet <edumazet(a)google.com>
tcp: tcp_data_ready() must look at SOCK_DONE
Arnd Bergmann <arnd(a)arndb.de>
kbuild: hdrcheck: fix cross build with clang
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
kbuild: userprogs: fix bitsize and target detection on clang
Oliver Neukum <oneukum(a)suse.com>
net: usb: aqc111: debug info before sanitation
Eric Dumazet <edumazet(a)google.com>
calipso: unlock rcu before returning -EAFNOSUPPORT
Thomas Gleixner <tglx(a)linutronix.de>
x86/iopl: Cure TIF_IO_BITMAP inconsistencies
Stefano Stabellini <stefano.stabellini(a)amd.com>
xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: Flush altsetting 0 endpoints before reinitializating them after reset.
Nathan Chancellor <nathan(a)kernel.org>
drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add KBUILD_CPPFLAGS to as-option invocation
Masahiro Yamada <masahiroy(a)kernel.org>
kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add CLANG_FLAGS to as-instr
Nathan Chancellor <nathan(a)kernel.org>
mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
Nathan Chancellor <nathan(a)kernel.org>
drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang
Nick Desaulniers <ndesaulniers(a)google.com>
kbuild: Update assembler calls to use proper flags and language target
Nathan Chancellor <nathan(a)kernel.org>
MIPS: Prefer cc-option for additions to cflags
Nathan Chancellor <nathan(a)kernel.org>
MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
Nick Desaulniers <ndesaulniers(a)google.com>
x86/boot/compressed: prefer cc-option for CFLAGS additions
Oleg Nesterov <oleg(a)redhat.com>
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
Zijun Hu <quic_zijuhu(a)quicinc.com>
fs/filesystems: Fix potential unsigned integer underflow in fs_name()
Eric Dumazet <edumazet(a)google.com>
net_sched: ets: fix a race in ets_qdisc_change()
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_ets: make est_qlen_notify() idempotent
Eric Dumazet <edumazet(a)google.com>
net_sched: tbf: fix a race in tbf_change()
Eric Dumazet <edumazet(a)google.com>
net_sched: red: fix a race in __red_change()
Eric Dumazet <edumazet(a)google.com>
net_sched: prio: fix a race in prio_tune()
Patrisious Haddad <phaddad(a)nvidia.com>
net/mlx5: Fix return value when searching for existing flow group
Moshe Shemesh <moshe(a)nvidia.com>
net/mlx5: Ensure fw pages are always allocated on same NUMA
Jakub Raczynski <j.raczynski(a)samsung.com>
net/mdiobus: Fix potential out-of-bounds read/write access
Andrew Lunn <andrew(a)lunn.ch>
net: mdio: C22 is now optional, EOPNOTSUPP if not provided
Carlos Fernandez <carlos.fernandez(a)technica-engineering.de>
macsec: MACsec SCI assignment for ES = 0
Michal Luczaj <mhal(a)rbox.co>
net: Fix TOCTOU issue in sk_is_readable()
Cong Wang <cong.wang(a)bytedance.com>
net: Rename ->stream_memory_read to ->sock_is_readable
Cong Wang <cong.wang(a)bytedance.com>
bpf: Clean up sockmap related Kconfigs
Eric Dumazet <edumazet(a)google.com>
tcp: factorize logic into tcp_epollin_ready()
Robert Malz <robert.malz(a)canonical.com>
i40e: retry VFLR handling if there is ongoing VF reset
Robert Malz <robert.malz(a)canonical.com>
i40e: return false from i40e_reset_vf if reset is in progress
Haren Myneni <haren(a)linux.ibm.com>
powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
Haren Myneni <haren(a)linux.ibm.com>
powerpc/vas: Move VAS API to book3s common platform
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: fix a potential crash on gso_skb handling
Alok Tiwari <alok.a.tiwari(a)oracle.com>
scsi: iscsi: Fix incorrect error path labels for flashnode operations
Caleb Connolly <caleb.connolly(a)linaro.org>
ath10k: snoc: fix unbalanced IRQ enable in crash recovery
Wen Gong <wgong(a)codeaurora.org>
ath10k: prevent deinitializing NAPI twice
Wen Gong <wgong(a)codeaurora.org>
ath10k: add atomic protection for device recovery
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
serial: sh-sci: Clean sci_ports[0] after at earlycon exit
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
serial: sh-sci: Move runtime PM enable to sci_probe_single()
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
serial: sh-sci: Check if TX data was written to device in .tx_empty()
Judith Mendez <jm(a)ti.com>
arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
Judith Mendez <jm(a)ti.com>
arm64: dts: ti: k3-am65-main: Fix sdhci node properties
Nishanth Menon <nm(a)ti.com>
arm64: dts: ti: k3-am65-main: Drop deprecated ti,otap-del-sel property
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: synaptics-rmi - fix crash with unsupported versions of F34
zhang songyi <zhang.songyi(a)zte.com.cn>
Input: synaptics-rmi4 - convert to use sysfs_emit() APIs
Dan Carpenter <dan.carpenter(a)linaro.org>
pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
Al Viro <viro(a)zeniv.linux.org.uk>
do_change_type(): refuse to operate on unmounted/not ours mounts
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
Ronak Doshi <ronak.doshi(a)broadcom.com>
vmxnet3: correctly report gso type for UDP tunnels
Michal Kubiak <michal.kubiak(a)intel.com>
ice: create new Tx scheduler nodes for new queues only
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
Álvaro Fernández Rojas <noltari(a)gmail.com>
spi: bcm63xx-hsspi: fix shared reset
Álvaro Fernández Rojas <noltari(a)gmail.com>
spi: bcm63xx-spi: fix shared reset
Dan Carpenter <dan.carpenter(a)linaro.org>
net/mlx4_en: Prevent potential integer overflow calculating Hz
Yanqing Wang <ot_yanqing.wang(a)mediatek.com>
driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
Charalampos Mitrodimas <charmitro(a)posteo.net>
net: tipc: fix refcount warning in tipc_aead_encrypt
Alok Tiwari <alok.a.tiwari(a)oracle.com>
gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
Quentin Schulz <quentin.schulz(a)cherry.de>
net: stmmac: platform: guarantee uniqueness of bus_id
Nicolas Pitre <npitre(a)baylibre.com>
vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
WangYuli <wangyuli(a)uniontech.com>
MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
iio: adc: ad7124: Fix 3dB filter frequency reading
Henry Martin <bsdhenrymartin(a)gmail.com>
serial: Fix potential null-ptr-deref in mlb_usio_probe()
Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com>
usb: renesas_usbhs: Reorder clock handling and power management in probe
Alexandre Mergnat <amergnat(a)baylibre.com>
rtc: Fix offset calculation for .start_secs < 0
Bjorn Helgaas <bhelgaas(a)google.com>
PCI/DPC: Initialize aer_err_info before using it
Henry Martin <bsdhenrymartin(a)gmail.com>
dmaengine: ti: Add NULL check in udma_probe()
Hans Zhang <18255117159(a)163.com>
PCI: cadence: Fix runtime atomic count underflow
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
rtc: sh: assign correct interrupts with DT
Li Lingfeng <lilingfeng3(a)huawei.com>
nfs: ignore SB_RDONLY when remounting nfs
Li Lingfeng <lilingfeng3(a)huawei.com>
nfs: clear SB_RDONLY before getting superblock
Dapeng Mi <dapeng1.mi(a)linux.intel.com>
perf record: Fix incorrect --user-regs comments
Leo Yan <leo.yan(a)arm.com>
perf tests switch-tracking: Fix timestamp comparison
Alexey Gladkov <legion(a)kernel.org>
mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
Christophe JAILLET <christophe.jaillet(a)wanadoo.fr>
mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
Dan Carpenter <dan.carpenter(a)linaro.org>
rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
Adrian Hunter <adrian.hunter(a)intel.com>
perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
Henry Martin <bsdhenrymartin(a)gmail.com>
backlight: pm8941: Add NULL check in wled_configure()
Arnaldo Carvalho de Melo <acme(a)redhat.com>
perf ui browser hists: Set actions->thread before calling do_zoom_thread()
Arnaldo Carvalho de Melo <acme(a)redhat.com>
perf build: Warn when libdebuginfod devel files are not available
Kees Cook <kees(a)kernel.org>
randstruct: gcc-plugin: Fix attribute addition
Kees Cook <kees(a)kernel.org>
randstruct: gcc-plugin: Remove bogus void member
Sergey Shtylyov <s.shtylyov(a)omp.ru>
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
Henry Martin <bsdhenrymartin(a)gmail.com>
soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
Su Hui <suhui(a)nfschina.com>
soc: aspeed: lpc: Fix impossible judgment condition
Quentin Schulz <quentin.schulz(a)cherry.de>
arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com>
ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
Ioana Ciornei <ioana.ciornei(a)nxp.com>
bus: fsl-mc: fix double-free on mc_dev
Ryusuke Konishi <konishi.ryusuke(a)gmail.com>
nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
Wentao Liang <vulab(a)iscas.ac.cn>
nilfs2: add pointer check for nilfs_direct_propagate()
Phillip Lougher <phillip(a)squashfs.org.uk>
Squashfs: check return result of sb_min_blocksize
Adam Ford <aford173(a)gmail.com>
arm64: dts: imx8mm-beacon: Fix RTC capacitive load
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
ARM: dts: at91: at91sam9263: fix NAND chip selects
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
Zhiguo Niu <zhiguo.niu(a)unisoc.com>
f2fs: fix to correct check conditions in f2fs_cross_rename
Zhiguo Niu <zhiguo.niu(a)unisoc.com>
f2fs: use d_inode(dentry) cleanup dentry->d_inode
Horatiu Vultur <horatiu.vultur(a)microchip.com>
net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
Faicker Mo <faicker.mo(a)zenlayer.com>
net: openvswitch: Fix the dead loop of MPLS parse
Kuniyuki Iwashima <kuniyu(a)amazon.com>
calipso: Don't call calipso functions for AF_INET sk.
Thangaraj Samynathan <thangaraj.s(a)microchip.com>
net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
Nikita Zhandarovich <n.zhandarovich(a)fintech.ru>
net: usb: aqc111: fix error handling of usbnet read calls
Fernando Fernandez Mancera <fmancera(a)suse.de>
netfilter: nft_tunnel: fix geneve_opt dump
Li RongQing <lirongqing(a)baidu.com>
vfio/type1: Fix error unwind in migration dirty bitmap allocation
Florian Westphal <fw(a)strlen.de>
netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
Toke Høiland-Jørgensen <toke(a)toke.dk>
wifi: ath9k_htc: Abort software beacon handling if disabled
Ilya Leoshkevich <iii(a)linux.ibm.com>
s390/bpf: Store backchain even for leaf progs
Vincent Knecht <vincent.knecht(a)mailoo.org>
clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
Tao Chen <chen.dylane(a)linux.dev>
bpf: Fix WARN() in get_bpf_raw_tp_regs
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
pinctrl: at91: Fix possible out-of-boundary access
Anton Protopopov <a.s.protopopov(a)gmail.com>
libbpf: Use proper errno value in nlattr
Jiayuan Chen <jiayuan.chen(a)linux.dev>
ktls, sockmap: Fix missing uncharge operation
Henry Martin <bsdhenrymartin(a)gmail.com>
clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
Patrisious Haddad <phaddad(a)nvidia.com>
RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
Huajian Yang <huajianyang(a)asrmicro.com>
netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
Chao Yu <chao(a)kernel.org>
f2fs: clean up w/ fscrypt_is_bounce_page()
Junxian Huang <huangjunxian6(a)hisilicon.com>
RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
Dmitry Antipov <dmantipov(a)yandex.ru>
wifi: rtw88: do not ignore hardware read error during DPK
Hari Kalavakunta <kalavakunta.hari.prasad(a)gmail.com>
net: ncsi: Fix GCPS 64-bit member variables
Chao Yu <chao(a)kernel.org>
f2fs: fix to do sanity check on sbi->total_valid_block_count
Stone Zhang <quic_stonez(a)quicinc.com>
wifi: ath11k: fix node corruption in ar->arvifs list
Huang Yiwei <quic_hyiwei(a)quicinc.com>
firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
Biju Das <biju.das.jz(a)bp.renesas.com>
drm/tegra: rgb: Fix the unbound reference count
Kees Cook <kees(a)kernel.org>
drm/vkms: Adjust vkms_state->active_planes allocation type
Biju Das <biju.das.jz(a)bp.renesas.com>
drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
Neill Kapron <nkapron(a)google.com>
selftests/seccomp: fix syscall_restart test for arm compat
Miaoqian Lin <linmq006(a)gmail.com>
firmware: psci: Fix refcount leak in psci_dt_init
Finn Thain <fthain(a)linux-m68k.org>
m68k: mac: Fix macintosh_config for Mac II
Jonas Karlman <jonas(a)kwiboo.se>
media: rkvdec: Fix frame size enumeration
Ian Forbes <ian.forbes(a)broadcom.com>
drm/vmwgfx: Add seqno waiter for sync_files
Geert Uytterhoeven <geert+renesas(a)glider.be>
spi: sh-msiof: Fix maximum DMA transfer size
Armin Wolf <W_Armin(a)gmx.de>
ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
Jiaqing Zhao <jiaqing.zhao(a)linux.intel.com>
x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
Zijun Hu <quic_zijuhu(a)quicinc.com>
PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
Alexander Shiyan <eagle.alexander923(a)gmail.com>
power: reset: at91-reset: Optimize at91_reset()
Qiuxu Zhuo <qiuxu.zhuo(a)intel.com>
EDAC/skx_common: Fix general protection fault
Ovidiu Panait <ovidiu.panait.oss(a)gmail.com>
crypto: sun8i-ce - move fallback ahash_request to the end of the struct
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: xts - Only add ecb if it is not already there
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: lrw - Only add ecb if it is not already there
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Avoid empty transfer descriptor
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Handle zero-length skcipher requests
Ahmed S. Darwish <darwi(a)linutronix.de>
x86/cpu: Sanitize CPUID(0x80000000) output
Corentin Labbe <clabbe.montjoie(a)gmail.com>
crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
Qing Wang <wangqing7171(a)gmail.com>
perf/core: Fix broken throttling when max_samples_per_tick=1
Andreas Gruenbacher <agruenba(a)redhat.com>
gfs2: gfs2_create_inode error handling fix
Florian Westphal <fw(a)strlen.de>
netfilter: nft_socket: fix sk refcount leaks
Sergey Senozhatsky <senozhatsky(a)chromium.org>
thunderbolt: Do not double dequeue a configuration request
Dave Penkler <dpenkler(a)gmail.com>
usb: usbtmc: Fix timeout value in get_stb
Hongyu Xie <xiehongyu1(a)kylinos.cn>
usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
Jiayi Li <lijiayi(a)kylinos.cn>
usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
Gautham R. Shenoy <gautham.shenoy(a)amd.com>
acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: set GPIO output value before setting direction
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
Pan Taixi <pantaixi(a)huaweicloud.com>
tracing: Fix compilation warning on arm32
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +-
MAINTAINERS | 9 +
Makefile | 11 +-
arch/arm/boot/dts/am335x-bone-common.dtsi | 8 +
arch/arm/boot/dts/at91sam9263ek.dts | 2 +-
arch/arm/boot/dts/qcom-apq8064.dtsi | 13 +-
arch/arm/boot/dts/tny_a9263.dts | 2 +-
arch/arm/boot/dts/usb_a9263.dts | 4 +-
arch/arm/mach-omap2/clockdomain.h | 1 +
arch/arm/mach-omap2/clockdomains33xx_data.c | 2 +-
arch/arm/mach-omap2/cm33xx.c | 14 +-
arch/arm/mach-omap2/pmic-cpcap.c | 6 +-
arch/arm/mm/ioremap.c | 4 +-
.../boot/dts/freescale/imx8mm-beacon-som.dtsi | 1 +
.../arm64/boot/dts/rockchip/rk3399-puma-haikou.dts | 8 -
arch/arm64/boot/dts/ti/k3-am65-main.dtsi | 20 +-
arch/arm64/include/asm/cputype.h | 2 +
arch/arm64/include/asm/debug-monitors.h | 12 -
arch/arm64/include/asm/insn.h | 114 +++++++-
arch/arm64/include/asm/spectre.h | 4 +-
arch/arm64/kernel/insn.c | 199 ++++++++++++-
arch/arm64/kernel/proton-pack.c | 202 ++++++++------
arch/arm64/kernel/ptrace.c | 2 +-
arch/arm64/net/bpf_jit.h | 11 +-
arch/arm64/net/bpf_jit_comp.c | 58 +++-
arch/arm64/xen/hypercall.S | 21 +-
arch/m68k/mac/config.c | 2 +-
arch/mips/Makefile | 6 +-
.../boot/dts/loongson/loongson64c_4core_ls7a.dts | 1 +
arch/mips/loongson2ef/Platform | 2 +-
arch/mips/vdso/Makefile | 1 +
arch/nios2/include/asm/pgtable.h | 16 ++
arch/parisc/boot/compressed/Makefile | 1 +
arch/powerpc/include/asm/vas.h | 3 +
arch/powerpc/kernel/eeh.c | 2 +
arch/powerpc/platforms/Kconfig | 1 +
arch/powerpc/platforms/Makefile | 1 +
arch/powerpc/platforms/book3s/Kconfig | 15 +
arch/powerpc/platforms/book3s/Makefile | 2 +
.../platforms/{powernv => book3s}/vas-api.c | 11 +-
arch/powerpc/platforms/powernv/Kconfig | 14 -
arch/powerpc/platforms/powernv/Makefile | 2 +-
arch/powerpc/platforms/powernv/vas.h | 2 -
arch/s390/net/bpf_jit_comp.c | 12 +-
arch/s390/pci/pci_mmio.c | 2 +-
arch/x86/boot/compressed/Makefile | 2 +-
arch/x86/kernel/cpu/bugs.c | 10 +-
arch/x86/kernel/cpu/common.c | 17 +-
arch/x86/kernel/cpu/mtrr/generic.c | 2 +-
arch/x86/kernel/ioport.c | 13 +-
arch/x86/kernel/process.c | 6 +
crypto/lrw.c | 4 +-
crypto/xts.c | 4 +-
drivers/acpi/acpica/dsutils.c | 9 +-
drivers/acpi/acpica/psobject.c | 52 +---
drivers/acpi/acpica/utprint.c | 7 +-
drivers/acpi/apei/Kconfig | 1 +
drivers/acpi/apei/ghes.c | 2 +-
drivers/acpi/battery.c | 19 +-
drivers/acpi/osi.c | 1 -
drivers/ata/pata_via.c | 3 +-
drivers/atm/atmtcp.c | 4 +-
drivers/base/power/domain.c | 2 +-
drivers/base/power/main.c | 3 +-
drivers/base/power/runtime.c | 2 +-
drivers/base/swnode.c | 2 +-
drivers/block/aoe/aoedev.c | 8 +
drivers/bus/fsl-mc/fsl-mc-bus.c | 6 +-
drivers/bus/fsl-mc/mc-io.c | 19 +-
drivers/bus/fsl-mc/mc-sys.c | 2 +-
drivers/bus/mhi/host/pm.c | 18 +-
drivers/bus/ti-sysc.c | 49 ----
drivers/clk/bcm/clk-raspberrypi.c | 2 +
drivers/clk/meson/g12a.c | 1 +
drivers/clk/qcom/gcc-msm8939.c | 4 +-
drivers/clk/rockchip/clk-rk3036.c | 1 +
drivers/cpufreq/acpi-cpufreq.c | 2 +-
drivers/cpufreq/cpufreq.c | 6 +-
drivers/crypto/allwinner/sun8i-ce/sun8i-ce.h | 2 +-
.../crypto/allwinner/sun8i-ss/sun8i-ss-cipher.c | 2 +-
drivers/crypto/marvell/cesa/cesa.c | 2 +-
drivers/crypto/marvell/cesa/cesa.h | 9 +-
drivers/crypto/marvell/cesa/cipher.c | 3 +
drivers/crypto/marvell/cesa/hash.c | 2 +-
drivers/crypto/marvell/cesa/tdma.c | 53 ++--
drivers/dma-buf/udmabuf.c | 5 +-
drivers/dma/ti/k3-udma.c | 3 +-
drivers/edac/altera_edac.c | 6 +-
drivers/edac/skx_common.c | 1 +
drivers/firmware/Kconfig | 1 -
drivers/firmware/arm_sdei.c | 11 +-
drivers/firmware/psci/psci.c | 4 +-
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 2 -
drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 2 -
drivers/gpu/drm/amd/amdgpu/gfx_v7_0.c | 2 -
drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 2 -
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 2 -
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 4 +
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 18 +-
drivers/gpu/drm/amd/display/dc/dcn20/Makefile | 2 +-
drivers/gpu/drm/amd/display/dc/dcn21/Makefile | 2 +-
drivers/gpu/drm/amd/display/dc/dml/Makefile | 3 +-
drivers/gpu/drm/bridge/analogix/analogix_dp_core.c | 5 +-
drivers/gpu/drm/msm/adreno/a6xx_hfi.c | 2 +-
.../gpu/drm/msm/disp/dpu1/dpu_encoder_phys_vid.c | 3 +-
drivers/gpu/drm/msm/hdmi/hdmi_i2c.c | 14 +-
drivers/gpu/drm/nouveau/nouveau_backlight.c | 2 +-
drivers/gpu/drm/rcar-du/rcar_du_kms.c | 10 +-
drivers/gpu/drm/tegra/rgb.c | 14 +-
drivers/gpu/drm/vkms/vkms_crtc.c | 2 +-
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 26 ++
drivers/hid/hid-hyperv.c | 5 +-
drivers/hid/usbhid/hid-core.c | 25 +-
drivers/hwmon/occ/common.c | 307 ++++++++++++---------
drivers/i2c/busses/i2c-designware-slave.c | 2 +-
drivers/i2c/busses/i2c-npcm7xx.c | 12 +-
drivers/iio/adc/ad7124.c | 4 +-
drivers/iio/adc/ad7606_spi.c | 2 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 8 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 1 -
drivers/infiniband/hw/hns/hns_roce_hw_v2.h | 1 +
drivers/infiniband/hw/hns/hns_roce_main.c | 1 -
drivers/infiniband/hw/hns/hns_roce_restrack.c | 1 -
drivers/infiniband/hw/mlx5/qpc.c | 30 +-
drivers/input/misc/ims-pcu.c | 6 +
drivers/input/misc/sparcspkr.c | 22 +-
drivers/input/rmi4/rmi_f34.c | 135 +++++----
drivers/iommu/amd/iommu.c | 8 +
drivers/md/dm-raid1.c | 5 +-
drivers/media/common/videobuf2/videobuf2-dma-sg.c | 4 +-
drivers/media/i2c/ov8856.c | 9 +-
drivers/media/i2c/tc358743.c | 4 +
drivers/media/platform/exynos4-is/fimc-is-regs.c | 1 +
drivers/media/platform/qcom/venus/core.c | 16 +-
drivers/media/test-drivers/vidtv/vidtv_channel.c | 2 +-
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 2 +-
drivers/media/usb/dvb-usb/cxusb.c | 3 +-
drivers/media/usb/gspca/stv06xx/stv06xx_hdcs.c | 7 +-
drivers/media/v4l2-core/v4l2-dev.c | 14 +-
drivers/mfd/exynos-lpass.c | 1 -
drivers/mfd/stmpe-spi.c | 2 +-
drivers/mtd/nand/raw/sunxi_nand.c | 2 +
drivers/net/ethernet/aquantia/atlantic/aq_main.c | 1 -
drivers/net/ethernet/aquantia/atlantic/aq_nic.c | 2 +
drivers/net/ethernet/cadence/macb_main.c | 6 +-
drivers/net/ethernet/dlink/dl2k.c | 14 +-
drivers/net/ethernet/dlink/dl2k.h | 2 +
drivers/net/ethernet/emulex/benet/be_cmds.c | 2 +-
drivers/net/ethernet/google/gve/gve_main.c | 2 +-
drivers/net/ethernet/intel/i40e/i40e_common.c | 7 +-
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 11 +-
drivers/net/ethernet/intel/ice/ice_arfs.c | 48 ++++
drivers/net/ethernet/intel/ice/ice_sched.c | 11 +-
drivers/net/ethernet/mediatek/mtk_star_emac.c | 4 +
drivers/net/ethernet/mellanox/mlx4/en_clock.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/en_ethtool.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 5 +-
.../net/ethernet/mellanox/mlx5/core/pagealloc.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/vport.c | 18 +-
drivers/net/ethernet/microchip/lan743x_main.c | 4 +-
.../net/ethernet/stmicro/stmmac/stmmac_platform.c | 11 +-
drivers/net/macsec.c | 40 ++-
drivers/net/phy/mdio_bus.c | 16 +-
drivers/net/phy/mscc/mscc_ptp.c | 4 +-
drivers/net/usb/aqc111.c | 10 +-
drivers/net/usb/ch9200.c | 7 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 26 ++
drivers/net/vxlan/vxlan_core.c | 8 +-
drivers/net/wireless/ath/ath10k/ahb.c | 5 +-
drivers/net/wireless/ath/ath10k/core.c | 36 +++
drivers/net/wireless/ath/ath10k/core.h | 9 +
drivers/net/wireless/ath/ath10k/debug.c | 6 +-
drivers/net/wireless/ath/ath10k/mac.c | 1 +
drivers/net/wireless/ath/ath10k/pci.c | 9 +-
drivers/net/wireless/ath/ath10k/sdio.c | 11 +-
drivers/net/wireless/ath/ath10k/snoc.c | 12 +-
drivers/net/wireless/ath/ath10k/wmi.c | 2 +-
drivers/net/wireless/ath/ath11k/core.c | 8 +-
drivers/net/wireless/ath/ath9k/htc_drv_beacon.c | 3 +
drivers/net/wireless/ath/carl9170/usb.c | 19 +-
drivers/net/wireless/intersil/p54/fwio.c | 2 +
drivers/net/wireless/intersil/p54/p54.h | 1 +
drivers/net/wireless/intersil/p54/txrx.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 2 +
.../net/wireless/mediatek/mt76/mt76x2/usb_init.c | 13 +-
drivers/net/wireless/realtek/rtlwifi/pci.c | 10 +
drivers/net/wireless/realtek/rtw88/rtw8822c.c | 3 +-
drivers/pci/controller/cadence/pcie-cadence-host.c | 11 +-
drivers/pci/pci.c | 3 +-
drivers/pci/pcie/dpc.c | 2 +-
drivers/pci/quirks.c | 23 ++
drivers/pinctrl/mvebu/pinctrl-armada-37xx.c | 35 ++-
drivers/pinctrl/pinctrl-at91.c | 6 +-
drivers/platform/Kconfig | 2 +
drivers/platform/Makefile | 1 +
drivers/platform/surface/Kconfig | 14 +
drivers/platform/surface/Makefile | 5 +
drivers/platform/x86/dell_rbu.c | 6 +-
drivers/power/reset/at91-reset.c | 5 +-
drivers/power/supply/bq27xxx_battery.c | 2 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 13 +-
drivers/rapidio/rio_cm.c | 3 +
drivers/regulator/max14577-regulator.c | 5 +-
drivers/rpmsg/qcom_smd.c | 2 +-
drivers/rtc/Kconfig | 10 +
drivers/rtc/Makefile | 1 +
drivers/rtc/class.c | 2 +-
drivers/rtc/lib.c | 121 ++++++--
drivers/rtc/lib_test.c | 79 ++++++
drivers/rtc/rtc-sh.c | 12 +-
drivers/s390/scsi/zfcp_sysfs.c | 2 +
drivers/scsi/lpfc/lpfc_hbadisc.c | 2 +-
drivers/scsi/lpfc/lpfc_sli.c | 4 +-
drivers/scsi/scsi_transport_iscsi.c | 11 +-
drivers/scsi/storvsc_drv.c | 10 +-
drivers/soc/aspeed/aspeed-lpc-snoop.c | 17 +-
drivers/spi/spi-bcm63xx-hsspi.c | 2 +-
drivers/spi/spi-bcm63xx.c | 2 +-
drivers/spi/spi-sh-msiof.c | 13 +-
drivers/staging/iio/impedance-analyzer/ad5933.c | 2 +-
drivers/staging/media/rkvdec/rkvdec.c | 24 +-
drivers/tee/tee_core.c | 11 +-
drivers/thermal/qcom/tsens.c | 10 +-
drivers/thunderbolt/ctl.c | 5 +
drivers/tty/serial/milbeaut_usio.c | 5 +-
drivers/tty/serial/sh-sci.c | 97 +++++--
drivers/tty/vt/vt_ioctl.c | 2 -
drivers/uio/uio_hv_generic.c | 4 +-
drivers/usb/class/usbtmc.c | 4 +-
drivers/usb/core/hub.c | 16 +-
drivers/usb/core/quirks.c | 3 +
drivers/usb/gadget/function/f_hid.c | 12 +-
drivers/usb/renesas_usbhs/common.c | 50 +++-
drivers/usb/storage/unusual_uas.h | 7 +
drivers/vfio/vfio_iommu_type1.c | 2 +-
drivers/video/backlight/qcom-wled.c | 6 +-
drivers/video/console/vgacon.c | 2 +-
drivers/video/fbdev/core/fbcvt.c | 2 +-
drivers/video/fbdev/core/fbmem.c | 4 +-
drivers/watchdog/da9052_wdt.c | 1 +
fs/configfs/dir.c | 2 +-
fs/exfat/nls.c | 1 +
fs/ext4/ext4.h | 7 +
fs/ext4/extents.c | 39 ++-
fs/ext4/file.c | 7 +-
fs/ext4/inline.c | 2 +-
fs/ext4/inode.c | 3 +-
fs/ext4/ioctl.c | 8 +-
fs/f2fs/data.c | 2 +-
fs/f2fs/f2fs.h | 10 +-
fs/f2fs/namei.c | 19 +-
fs/f2fs/super.c | 12 +-
fs/filesystems.c | 14 +-
fs/gfs2/inode.c | 3 +-
fs/gfs2/lock_dlm.c | 3 +-
fs/jbd2/transaction.c | 5 +-
fs/jffs2/erase.c | 4 +-
fs/jffs2/scan.c | 4 +-
fs/jffs2/summary.c | 7 +-
fs/jfs/jfs_discard.c | 3 +-
fs/jfs/jfs_dtree.c | 18 +-
fs/namespace.c | 4 +
fs/nfs/super.c | 19 ++
fs/nfsd/nfs4proc.c | 3 +-
fs/nfsd/nfssvc.c | 6 +-
fs/nilfs2/btree.c | 4 +-
fs/nilfs2/direct.c | 3 +
fs/squashfs/super.c | 5 +
include/acpi/actypes.h | 2 +-
include/linux/arm_sdei.h | 4 +-
include/linux/atmdev.h | 6 +
include/linux/bpf.h | 26 +-
include/linux/bpf_types.h | 6 +-
include/linux/hid.h | 3 +-
include/linux/hugetlb.h | 6 +
include/linux/mlx5/driver.h | 1 +
include/linux/mm.h | 3 +
include/linux/mm_types.h | 3 +
include/linux/skmsg.h | 18 ++
include/net/checksum.h | 2 +-
include/net/sock.h | 11 +-
include/net/tcp.h | 28 +-
include/net/tls.h | 2 +-
include/net/udp.h | 4 +-
include/trace/events/erofs.h | 18 --
include/uapi/linux/bpf.h | 2 +
include/uapi/linux/videodev2.h | 12 +-
init/Kconfig | 1 +
ipc/shm.c | 5 +-
kernel/bpf/verifier.c | 175 +-----------
kernel/events/core.c | 23 +-
kernel/exit.c | 17 +-
kernel/power/wakelock.c | 3 +
kernel/time/clocksource.c | 2 +-
kernel/time/posix-cpu-timers.c | 9 +
kernel/trace/bpf_trace.c | 2 +-
kernel/trace/ftrace.c | 10 +-
kernel/trace/trace.c | 2 +-
lib/Kconfig | 1 +
mm/huge_memory.c | 2 +-
mm/hugetlb.c | 117 +++++++-
mm/mmap.c | 8 +
mm/page-writeback.c | 2 +-
net/Kconfig | 6 +-
net/atm/common.c | 1 +
net/atm/lec.c | 12 +-
net/atm/raw.c | 2 +-
net/bluetooth/l2cap_core.c | 3 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 12 +-
net/core/Makefile | 6 +-
net/core/filter.c | 5 +-
net/core/skmsg.c | 145 +++++-----
net/core/sock.c | 4 +-
net/core/sock_map.c | 2 +
net/core/utils.c | 4 +-
net/ipv4/Makefile | 2 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/route.c | 4 +
net/ipv4/tcp.c | 21 +-
net/ipv4/tcp_bpf.c | 8 +-
net/ipv4/tcp_input.c | 74 ++---
net/ipv6/calipso.c | 8 +
net/ipv6/ila/ila_common.c | 6 +-
net/ipv6/netfilter.c | 12 +-
net/ipv6/netfilter/nft_fib_ipv6.c | 13 +-
net/mac80211/mesh_hwmp.c | 6 +-
net/mpls/af_mpls.c | 4 +-
net/ncsi/internal.h | 21 +-
net/ncsi/ncsi-pkt.h | 23 +-
net/ncsi/ncsi-rsp.c | 21 +-
net/netfilter/nft_socket.c | 5 +-
net/netfilter/nft_tunnel.c | 8 +-
net/netlabel/netlabel_kapi.c | 5 +
net/nfc/nci/uart.c | 8 +-
net/openvswitch/flow.c | 2 +-
net/sched/sch_ets.c | 10 +-
net/sched/sch_prio.c | 2 +-
net/sched/sch_red.c | 2 +-
net/sched/sch_sfq.c | 117 +++++---
net/sched/sch_tbf.c | 2 +-
net/sctp/socket.c | 3 +-
net/sunrpc/cache.c | 17 +-
net/tipc/crypto.c | 8 +-
net/tipc/udp_media.c | 4 +-
net/tls/tls_main.c | 4 +-
net/tls/tls_sw.c | 9 +-
scripts/Kbuild.include | 8 +-
scripts/Kconfig.include | 2 +-
scripts/as-version.sh | 2 +-
scripts/gcc-plugins/gcc-common.h | 32 +++
scripts/gcc-plugins/randomize_layout_plugin.c | 40 +--
security/selinux/xfrm.c | 2 +-
sound/pci/hda/hda_intel.c | 2 +
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/codecs/tas2770.c | 30 +-
sound/soc/meson/meson-card-utils.c | 2 +-
sound/soc/qcom/sdm845.c | 4 +
sound/soc/tegra/tegra210_ahub.c | 2 +
sound/usb/mixer_maps.c | 12 +
tools/include/uapi/linux/bpf.h | 2 +
tools/lib/bpf/nlattr.c | 15 +-
tools/perf/Makefile.config | 2 +
tools/perf/builtin-record.c | 2 +-
tools/perf/scripts/python/exported-sql-viewer.py | 5 +-
tools/perf/tests/switch-tracking.c | 2 +-
tools/perf/ui/browsers/hists.c | 2 +-
tools/testing/selftests/bpf/prog_tests/align.c | 36 +--
tools/testing/selftests/seccomp/seccomp_bpf.c | 7 +-
usr/include/Makefile | 2 +-
369 files changed, 3117 insertions(+), 1586 deletions(-)
1 week, 3 days
- 8
- 364
[PATCH 6.12 000/165] 6.12.39-rc2 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.12.39 release.
There are 165 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 17 Jul 2025 16:35:06 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.39-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.12.39-rc2
Michael Jeanson <mjeanson(a)efficios.com>
rseq: Fix segfault on registration when rseq_cs is non-zero
Lukas Wunner <lukas(a)wunner.de>
crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
Mark Brown <broonie(a)kernel.org>
arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix potential use-after-free in oplock/lease break ack
Yeoreum Yun <yeoreum.yun(a)arm.com>
kasan: remove kasan_find_vm_area() to prevent possible deadlock
Jiawen Wu <jiawenwu(a)trustnetic.com>
net: wangxun: revert the adjustment of the IRQ vector sequence
Gao Xiang <xiang(a)kernel.org>
erofs: fix rare pcluster memory leak after unmounting
Willem de Bruijn <willemb(a)google.com>
selftests/bpf: adapt one more case in test_lru_map to the new target_free
Daniel J. Ogorchock <djogorchock(a)gmail.com>
HID: nintendo: avoid bluetooth suspend/resume stalls
Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Zhang Heng <zhangheng(a)kylinos.cn>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Fangrui Song <i(a)maskray.me>
riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment
Willem de Bruijn <willemb(a)google.com>
bpf: Adjust free target to avoid global starvation of LRU map
Nicolas Pitre <npitre(a)baylibre.com>
vt: add missing notification when switching back to text mode
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix assertion when building free space tree
Long Li <longli(a)microsoft.com>
net: mana: Record doorbell physical address in PF mode
Akira Inoue <niyarium(a)gmail.com>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
Shuai Zhang <quic_shuaz(a)quicinc.com>
driver: bluetooth: hci_qca:fix unable to load the BT driver
Xiaowei Li <xiaowei.li(a)simcom.com>
net: usb: qmi_wwan: add SIMCom 8230C composition
Tim Crawford <tcrawford(a)system76.com>
ALSA: hda/realtek: Add quirks for some Clevo laptops
Yasmin Fitzgerald <sunoflife1.git(a)gmail.com>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
Yuzuru10 <yuzuru_10(a)proton.me>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
Fengnan Chang <changfengnan(a)bytedance.com>
io_uring: make fallocate be hashed work
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606
Tamura Dai <kirinode0(a)gmail.com>
ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: vector: Reduce stack usage in vector_eth_configure()
Thomas Fourier <fourier.thomas(a)gmail.com>
atm: idt77252: Add missing `dma_map_error()`
Ronnie Sahlberg <rsahlberg(a)whamcloud.com>
ublk: sanity check add_dev input for underflow
Somnath Kotur <somnath.kotur(a)broadcom.com>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Fix DCB ETS validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Jianbo Liu <jianbol(a)nvidia.com>
net/mlx5e: Add new prio for promiscuous mode
Carolina Jubran <cjubran(a)nvidia.com>
net/mlx5e: Fix race between DIM disable and net_dim()
Sean Nyekjaer <sean(a)geanix.com>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Shuicheng Lin <shuicheng.lin(a)intel.com>
drm/xe/pm: Correct comment of xe_pm_set_vram_threshold()
Hangbin Liu <liuhangbin(a)gmail.com>
selftests: net: lib: fix shift count out of range
Petr Machata <petrm(a)nvidia.com>
selftests: net: lib: Move logging from forwarding/lib.sh here
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits
Mingming Cao <mmc(a)linux.ibm.com>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
Kito Xu <veritas501(a)foxmail.com>
net: appletalk: Fix device refcount leak in atrtr_create()
Eric Dumazet <edumazet(a)google.com>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_readahead()
Gao Xiang <xiang(a)kernel.org>
erofs: refine readahead tracepoint
Gao Xiang <xiang(a)kernel.org>
erofs: tidy up zdata.c
Gao Xiang <xiang(a)kernel.org>
erofs: get rid of `z_erofs_next_pcluster_t`
Chunhai Guo <guochunhai(a)vivo.com>
erofs: free pclusters if no cached folio is attached
Michal Wajdeczko <michal.wajdeczko(a)intel.com>
drm/xe/pf: Clear all LMTT pages on alloc
Zheng Qixing <zhengqixing(a)huawei.com>
nbd: fix uaf in nbd_genl_connect() error path
Henry Martin <bsdhenrymartin(a)gmail.com>
wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init()
Ben Skeggs <bskeggs(a)nvidia.com>
drm/nouveau/gsp: fix potential leak of memory used during acpi init
Felix Fietkau <nbd(a)nbd.name>
wifi: rt2x00: fix remove callback type mismatch
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: fix non-transmitted BSSID profile search
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: mac80211: correctly identify S1G short beacon
Nigel Croxon <ncroxon(a)redhat.com>
raid10: cleanup memleak at raid10_make_request
Wang Jinchao <wangjinchao600(a)gmail.com>
md/raid1: Fix stack memory use after return in raid1_reshape
Mikko Perttunen <mperttunen(a)nvidia.com>
drm/tegra: nvdec: Fix dma_alloc_coherent error check
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: cfg80211: fix S1G beacon head validation in nl80211
David Howells <dhowells(a)redhat.com>
netfs: Fix ref leak on inserted extra subreq in write retry
Jakub Kicinski <kuba(a)kernel.org>
netlink: make sure we allow at least one dump skb
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix rmem check in netlink_broadcast_deliver().
Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com>
ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count
Gao Xiang <xiang(a)kernel.org>
erofs: address D-cache aliasing
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_read_folio()
Al Viro <viro(a)zeniv.linux.org.uk>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
Stefan Metzmacher <metze(a)samba.org>
smb: server: make use of rdma_destroy_qp()
Sascha Hauer <s.hauer(a)pengutronix.de>
clk: scmi: Handle case where child clocks are initialized before their parents
Jann Horn <jannh(a)google.com>
x86/mm: Disable hugetlb page table sharing on 32-bit
Mikhail Paulyshka <me(a)mixaill.net>
x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
Xiaolei Wang <xiaolei.wang(a)windriver.com>
clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data
Miguel Ojeda <ojeda(a)kernel.org>
rust: init: allow `dead_code` warnings for Rust >= 1.89.0
Harry Yoo <harry.yoo(a)oracle.com>
lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users()
Alexander Gordeev <agordeev(a)linux.ibm.com>
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts.py after maple tree conversion
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: de-reference per-CPU MCE interrupts
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts display after MCP on x86
Baolin Wang <baolin.wang(a)linux.alibaba.com>
mm: fix the inaccurate memory statistics issue for users
Wei Yang <richard.weiyang(a)gmail.com>
maple_tree: fix mt_destroy_walk() on root leaf node
Achill Gilgenast <fossdd(a)pwned.life>
kallsyms: fix build without execinfo
Zhe Qiao <qiaozhe(a)iscas.ac.cn>
Revert "PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root()"
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "ACPI: battery: negate current when discharging"
Matthew Brost <matthew.brost(a)intel.com>
drm/xe: Allocate PF queue size on pow2 boundary
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/framebuffer: Acquire internal references on GEM handles
Kuen-Han Tsai <khtsai(a)google.com>
Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
Kuen-Han Tsai <khtsai(a)google.com>
usb: gadget: u_serial: Fix race condition in TTY wakeup
Matthew Brost <matthew.brost(a)intel.com>
Revert "drm/xe/xe2: Enable Indirect Ring State support for Xe2"
Matthew Auld <matthew.auld(a)intel.com>
drm/xe/bmg: fix compressed VRAM handling
Simona Vetter <simona.vetter(a)ffwll.ch>
drm/gem: Fix race in drm_gem_handle_create_tail()
Christian König <christian.koenig(a)amd.com>
drm/ttm: fix error handling in ttm_buffer_object_transfer
Matthew Brost <matthew.brost(a)intel.com>
drm/sched: Increment job count before swapping tail spsc queue
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/gem: Acquire references on GEM handles for framebuffers
Philip Yang <Philip.Yang(a)amd.com>
drm/amdkfd: Don't call mmput from MMU notifier callback
Alessio Belle <alessio.belle(a)imgtec.com>
drm/imagination: Fix kernel crash when hard resetting the GPU
Michael Lo <michael.lo(a)mediatek.com>
wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan
Ming Yen Hsieh <mingyen.hsieh(a)mediatek.com>
wifi: mt76: mt7925: fix the wrong config for tx interrupt
Deren Wu <deren.wu(a)mediatek.com>
wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload()
Deren Wu <deren.wu(a)mediatek.com>
wifi: mt76: mt7921: prevent decap offload config before STA initialization
Vitor Soares <vitor.soares(a)toradex.com>
wifi: mwifiex: discard erroneous disassoc frames on STA interface
Mathy Vanhoef <Mathy.Vanhoef(a)kuleuven.be>
wifi: prevent A-MSDU attacks in mesh networks
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Ensure to disable clocks in error path
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: Fix invalid state detection
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Håkon Bugge <haakon.bugge(a)oracle.com>
md/md-bitmap: fix GPF in bitmap_get_stats()
Haoxiang Li <haoxiang_li2024(a)163.com>
net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe()
Guillaume Nault <gnault(a)redhat.com>
gre: Fix IPv6 multicast route creation.
Arun Raghavan <arun(a)asymptotic.io>
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Thorsten Blum <thorsten.blum(a)linux.dev>
ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp()
Liam Merwick <liam.merwick(a)oracle.com>
KVM: Allow CPU to reschedule while setting per-page memory attributes
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
Nikunj A Dadhania <nikunj(a)amd.com>
KVM: SVM: Add missing member in SNP_LAUNCH_START command structure
David Woodhouse <dwmw(a)amazon.co.uk>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
JP Kobryn <inwardvessel(a)gmail.com>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Ensure user polling settings are honored when restarting timer
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Fix threshold limit reset
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Dan Carpenter <dan.carpenter(a)linaro.org>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
David Howells <dhowells(a)redhat.com>
rxrpc: Fix oops due to non-existence of prealloc backlog struct
David Howells <dhowells(a)redhat.com>
rxrpc: Fix bug due to prealloc collision
Victor Nogueira <victor(a)mojatatu.com>
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Chintan Vankar <c-vankar(a)ti.com>
net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info
Yue Haibing <yuehaibing(a)huawei.com>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix infinite recursive call of clip_push().
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix memory leak of struct clip_vcc.
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Force predictable MDI-X state on LAN87xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
EricChan <chenchuangyu(a)xiaomi.com>
net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_* TOCTOU
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_{g2h,h2g} TOCTOU
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: Correct signedness in skb remaining space calculation
Kuniyuki Iwashima <kuniyu(a)google.com>
tipc: Fix use-after-free in tipc_conn_close().
Stefano Garzarella <sgarzare(a)redhat.com>
vsock: fix `vsock_proto` declaration
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix wraparounds of sk->sk_rmem_alloc.
Luo Jie <quic_luoj(a)quicinc.com>
net: phy: qcom: qca808x: Fix WoL issue by utilizing at8031_set_wol()
Luo Jie <quic_luoj(a)quicinc.com>
net: phy: qcom: move the WoL function to shared library
Kevin Brodsky <kevin.brodsky(a)arm.com>
arm64: poe: Handle spurious Overlay faults
Jason Xing <kernelxing(a)tencent.com>
bnxt_en: eliminate the compile warning in bnxt_request_irq due to CONFIG_RFS_ACCEL
kuyo chang <kuyo.chang(a)mediatek.com>
sched/deadline: Fix dl_server runtime calculation formula
Al Viro <viro(a)zeniv.linux.org.uk>
fix proc_sys_compare() handling of in-lookup dentries
Mario Limonciello <mario.limonciello(a)amd.com>
pinctrl: amd: Clear GPIO debounce for suspend
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix not disabling advertising instance
Richard Fitzgerald <rf(a)opensource.cirrus.com>
ASoC: cs35l56: probe() should fail if the device ID is not recognized
Peter Zijlstra <peterz(a)infradead.org>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Peter Zijlstra <peterz(a)infradead.org>
sched/core: Fix migrate_swap() vs. hotplug
Nam Cao <namcao(a)linutronix.de>
irqchip/irq-msi-lib: Select CONFIG_GENERIC_MSI_IRQ
Luo Gengkun <luogengkun(a)huaweicloud.com>
perf/core: Fix the WARN_ON_ONCE is out of lock protected region
Charles Keepax <ckeepax(a)opensource.cirrus.com>
ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: add sof_sdw_get_tplg_files ops
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: soc-acpi: add get_function_tplg_files ops
Simon Trimmer <simont(a)opensource.cirrus.com>
ASoC: Intel: soc-acpi: arl: Add match entries for new cs42l43 laptops
Simon Trimmer <simont(a)opensource.cirrus.com>
ASoC: Intel: soc-acpi: arl: Correct naming of a cs35l56 address struct
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com>
drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
Eric Biggers <ebiggers(a)kernel.org>
crypto: s390/sha - Fix uninitialized variable in SHA-1 and SHA-2
Flora Cui <flora.cui(a)amd.com>
drm/amdgpu/ip_discovery: add missing ip_discovery fw
Flora Cui <flora.cui(a)amd.com>
drm/amdgpu/discovery: use specific ip_discovery.bin for legacy asics
Kaustabh Chakraborty <kauschluss(a)disroot.org>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Linus Torvalds <torvalds(a)linux-foundation.org>
eventpoll: don't decrement ep refcount while still holding the ep mutex
-------------
Diffstat:
Documentation/bpf/map_hash.rst | 8 +-
Documentation/bpf/map_lru_hash_update.dot | 6 +-
Makefile | 4 +-
arch/arm64/kernel/cpufeature.c | 45 ++--
arch/arm64/kernel/process.c | 5 +
arch/arm64/mm/fault.c | 30 ++-
arch/riscv/kernel/vdso/vdso.lds.S | 2 +-
arch/s390/crypto/sha1_s390.c | 2 +
arch/s390/crypto/sha256_s390.c | 3 +
arch/s390/crypto/sha512_s390.c | 3 +
arch/um/drivers/vector_kern.c | 42 ++--
arch/x86/Kconfig | 2 +-
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/kernel/cpu/amd.c | 7 +
arch/x86/kernel/cpu/mce/amd.c | 28 ++-
arch/x86/kernel/cpu/mce/core.c | 24 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kvm/svm/sev.c | 4 +
arch/x86/kvm/xen.c | 15 +-
crypto/ecc.c | 2 +-
drivers/acpi/battery.c | 19 +-
drivers/atm/idt77252.c | 5 +
drivers/block/nbd.c | 6 +-
drivers/block/ublk_drv.c | 3 +-
drivers/bluetooth/hci_qca.c | 13 +-
drivers/char/ipmi/ipmi_msghandler.c | 3 +-
drivers/clk/clk-scmi.c | 20 +-
drivers/clk/imx/clk-imx95-blk-ctl.c | 12 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 30 ++-
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 3 +-
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 43 ++--
drivers/gpu/drm/drm_framebuffer.c | 31 ++-
drivers/gpu/drm/drm_gem.c | 74 +++++-
drivers/gpu/drm/drm_internal.h | 2 +
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/imagination/pvr_power.c | 4 +-
drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c | 20 +-
drivers/gpu/drm/tegra/nvdec.c | 6 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 13 +-
drivers/gpu/drm/xe/xe_gt_pagefault.c | 1 +
drivers/gpu/drm/xe/xe_lmtt.c | 11 +
drivers/gpu/drm/xe/xe_migrate.c | 2 +-
drivers/gpu/drm/xe/xe_pci.c | 1 -
drivers/gpu/drm/xe/xe_pm.c | 8 +-
drivers/hid/hid-ids.h | 6 +
drivers/hid/hid-lenovo.c | 8 +
drivers/hid/hid-multitouch.c | 8 +-
drivers/hid/hid-nintendo.c | 38 +++-
drivers/hid/hid-quirks.c | 3 +
drivers/irqchip/Kconfig | 1 +
drivers/md/md-bitmap.c | 3 +-
drivers/md/raid1.c | 1 +
drivers/md/raid10.c | 10 +-
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 10 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/ibm/ibmvnic.h | 8 +-
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 9 +-
drivers/net/ethernet/mellanox/mlx5/core/en_dim.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 13 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 3 +
drivers/net/ethernet/renesas/rtsn.c | 5 +
drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 24 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 4 +-
drivers/net/ethernet/wangxun/libwx/wx_lib.c | 16 +-
drivers/net/ethernet/wangxun/libwx/wx_type.h | 2 +-
drivers/net/ethernet/wangxun/ngbe/ngbe_main.c | 2 +-
drivers/net/ethernet/wangxun/ngbe/ngbe_type.h | 2 +-
drivers/net/ethernet/wangxun/txgbe/txgbe_irq.c | 4 +-
drivers/net/ethernet/wangxun/txgbe/txgbe_type.h | 4 +-
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 3 +-
drivers/net/phy/qcom/at803x.c | 27 ---
drivers/net/phy/qcom/qca808x.c | 2 +-
drivers/net/phy/qcom/qcom-phy-lib.c | 25 ++
drivers/net/phy/qcom/qcom.h | 5 +
drivers/net/phy/smsc.c | 57 ++++-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/marvell/mwifiex/util.c | 4 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7921/main.c | 3 +
drivers/net/wireless/mediatek/mt76/mt7925/init.c | 2 +
drivers/net/wireless/mediatek/mt76/mt7925/main.c | 6 +
drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7925/regs.h | 2 +-
drivers/net/wireless/ralink/rt2x00/rt2x00soc.c | 4 +-
drivers/net/wireless/ralink/rt2x00/rt2x00soc.h | 2 +-
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pci/pci-acpi.c | 23 +-
drivers/pinctrl/pinctrl-amd.c | 11 +
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/pwm/core.c | 2 +-
drivers/pwm/pwm-mediatek.c | 13 +-
drivers/tty/vt/vt.c | 1 +
drivers/usb/gadget/function/u_serial.c | 12 +-
fs/btrfs/free-space-tree.c | 16 +-
fs/erofs/data.c | 21 +-
fs/erofs/decompressor.c | 12 +-
fs/erofs/fileio.c | 6 +-
fs/erofs/internal.h | 2 +-
fs/erofs/zdata.c | 251 +++++++++-----------
fs/erofs/zutil.c | 7 +-
fs/eventpoll.c | 12 +-
fs/netfs/write_collect.c | 2 +-
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
fs/proc/task_mmu.c | 14 +-
fs/smb/server/smb2pdu.c | 29 +--
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/vfs.c | 1 +
include/drm/drm_file.h | 3 +
include/drm/drm_framebuffer.h | 7 +
include/drm/spsc_queue.h | 4 +-
include/linux/ieee80211.h | 45 +++-
include/linux/math.h | 12 +
include/linux/mm.h | 5 +
include/linux/psp-sev.h | 2 +
include/net/af_vsock.h | 2 +-
include/net/netfilter/nf_flow_table.h | 2 +-
include/sound/soc-acpi.h | 13 ++
include/trace/events/erofs.h | 2 +-
io_uring/opdef.c | 1 +
kernel/bpf/bpf_lru_list.c | 9 +-
kernel/bpf/bpf_lru_list.h | 1 +
kernel/events/core.c | 6 +-
kernel/rseq.c | 60 ++++-
kernel/sched/core.c | 5 +
kernel/sched/deadline.c | 10 +-
kernel/stop_machine.c | 20 +-
lib/alloc_tag.c | 3 +
lib/maple_tree.c | 1 +
mm/kasan/report.c | 13 +-
mm/vmalloc.c | 22 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 64 ++++--
net/bluetooth/hci_event.c | 3 +
net/bluetooth/hci_sync.c | 2 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 9 +-
net/mac80211/mlme.c | 7 +-
net/mac80211/parse.c | 6 +-
net/netlink/af_netlink.c | 90 +++++---
net/rxrpc/call_accept.c | 4 +
net/sched/sch_api.c | 23 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 57 ++++-
net/wireless/nl80211.c | 7 +-
net/wireless/util.c | 52 ++++-
rust/kernel/init/macros.rs | 2 +
scripts/gdb/linux/constants.py.in | 7 +
scripts/gdb/linux/interrupts.py | 16 +-
scripts/gdb/linux/mapletree.py | 252 +++++++++++++++++++++
scripts/gdb/linux/xarray.py | 28 +++
sound/isa/ad1816a/ad1816a.c | 2 +-
sound/pci/hda/patch_realtek.c | 7 +
sound/soc/amd/yc/acp6x-mach.c | 7 +
sound/soc/codecs/cs35l56-shared.c | 2 +-
sound/soc/fsl/fsl_asrc.c | 3 +-
sound/soc/fsl/fsl_sai.c | 14 +-
sound/soc/intel/boards/Kconfig | 1 +
sound/soc/intel/common/Makefile | 2 +-
sound/soc/intel/common/soc-acpi-intel-arl-match.c | 66 +++++-
sound/soc/intel/common/sof-function-topology-lib.c | 136 +++++++++++
sound/soc/intel/common/sof-function-topology-lib.h | 15 ++
sound/soc/sof/intel/hda.c | 6 +-
tools/arch/x86/include/asm/msr-index.h | 1 +
tools/include/linux/kallsyms.h | 4 +
tools/testing/selftests/bpf/test_lru_map.c | 105 ++++-----
tools/testing/selftests/net/forwarding/lib.sh | 113 ---------
tools/testing/selftests/net/lib.sh | 115 ++++++++++
virt/kvm/kvm_main.c | 3 +
175 files changed, 2014 insertions(+), 880 deletions(-)
1 week, 3 days
- 10
- 9
[PATCH 6.15 000/192] 6.15.7-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.15.7 release.
There are 192 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 17 Jul 2025 13:07:32 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.15.7-rc1…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.15.7-rc1
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix potential use-after-free in oplock/lease break ack
Nikunj A Dadhania <nikunj(a)amd.com>
x86/sev: Use TSC_FACTOR for Secure TSC frequency calculation
Jiawen Wu <jiawenwu(a)trustnetic.com>
net: wangxun: revert the adjustment of the IRQ vector sequence
Willem de Bruijn <willemb(a)google.com>
selftests/bpf: adapt one more case in test_lru_map to the new target_free
Daniel J. Ogorchock <djogorchock(a)gmail.com>
HID: nintendo: avoid bluetooth suspend/resume stalls
Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Zhang Heng <zhangheng(a)kylinos.cn>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Fangrui Song <i(a)maskray.me>
riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment
Willem de Bruijn <willemb(a)google.com>
bpf: Adjust free target to avoid global starvation of LRU map
Nicolas Pitre <npitre(a)baylibre.com>
vt: add missing notification when switching back to text mode
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix assertion when building free space tree
Long Li <longli(a)microsoft.com>
net: mana: Record doorbell physical address in PF mode
Akira Inoue <niyarium(a)gmail.com>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
Shuai Zhang <quic_shuaz(a)quicinc.com>
driver: bluetooth: hci_qca:fix unable to load the BT driver
Xiaowei Li <xiaowei.li(a)simcom.com>
net: usb: qmi_wwan: add SIMCom 8230C composition
Tim Crawford <tcrawford(a)system76.com>
ALSA: hda/realtek: Add quirks for some Clevo laptops
Yasmin Fitzgerald <sunoflife1.git(a)gmail.com>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
Yuzuru10 <yuzuru_10(a)proton.me>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
Fengnan Chang <changfengnan(a)bytedance.com>
io_uring: make fallocate be hashed work
Chris Chiu <chris.chiu(a)canonical.com>
ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 6 G1a
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606
Jack Yu <jack.yu(a)realtek.com>
ASoC: rt721-sdca: fix boost gain calculation error
Tamura Dai <kirinode0(a)gmail.com>
ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: vector: Reduce stack usage in vector_eth_configure()
Thomas Fourier <fourier.thomas(a)gmail.com>
atm: idt77252: Add missing `dma_map_error()`
Ronnie Sahlberg <rsahlberg(a)whamcloud.com>
ublk: sanity check add_dev input for underflow
Somnath Kotur <somnath.kotur(a)broadcom.com>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Shruti Parab <shruti.parab(a)broadcom.com>
bnxt_en: Flush FW trace before copying to the coredump
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Fix DCB ETS validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Jianbo Liu <jianbol(a)nvidia.com>
net/mlx5e: Add new prio for promiscuous mode
Carolina Jubran <cjubran(a)nvidia.com>
net/mlx5e: Fix race between DIM disable and net_dim()
Carolina Jubran <cjubran(a)nvidia.com>
net/mlx5: Reset bw_share field when changing a node's parent
Sean Nyekjaer <sean(a)geanix.com>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Shuicheng Lin <shuicheng.lin(a)intel.com>
drm/xe/pm: Correct comment of xe_pm_set_vram_threshold()
Shuicheng Lin <shuicheng.lin(a)intel.com>
drm/xe/pm: Restore display pm if there is error after display suspend
Hangbin Liu <liuhangbin(a)gmail.com>
selftests: net: lib: fix shift count out of range
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits
Mingming Cao <mmc(a)linux.ibm.com>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
Kito Xu <veritas501(a)foxmail.com>
net: appletalk: Fix device refcount leak in atrtr_create()
Eric Dumazet <edumazet(a)google.com>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
Miri Korenblit <miriam.rachel.korenblit(a)intel.com>
wifi: mac80211: add the virtual monitor after reconfig complete
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_readahead()
Gao Xiang <xiang(a)kernel.org>
erofs: refine readahead tracepoint
Michal Wajdeczko <michal.wajdeczko(a)intel.com>
drm/xe/pf: Clear all LMTT pages on alloc
Pankaj Raghav <p.raghav(a)samsung.com>
block: reject bs > ps block devices when THP is disabled
Zheng Qixing <zhengqixing(a)huawei.com>
nbd: fix uaf in nbd_genl_connect() error path
Henry Martin <bsdhenrymartin(a)gmail.com>
wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init()
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: Remove RCU section in mt7996_mac_sta_rc_work()
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: Move RCU section in mt7996_mcu_add_rate_ctrl()
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: Move RCU section in mt7996_mcu_add_rate_ctrl_fixed()
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: Move RCU section in mt7996_mcu_set_fixed_field()
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: Assume __mt76_connac_mcu_alloc_sta_req runs in atomic context
Ben Skeggs <bskeggs(a)nvidia.com>
drm/nouveau/gsp: fix potential leak of memory used during acpi init
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring/zcrx: fix pp destruction warnings
Felix Fietkau <nbd(a)nbd.name>
wifi: rt2x00: fix remove callback type mismatch
Moon Hee Lee <moonhee.lee.ca(a)gmail.com>
wifi: mac80211: reject VHT opmode for unsupported channel widths
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: fix non-transmitted BSSID profile search
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: mac80211: correctly identify S1G short beacon
Zheng Qixing <zhengqixing(a)huawei.com>
md/raid1,raid10: strip REQ_NOWAIT from member bios
Nigel Croxon <ncroxon(a)redhat.com>
raid10: cleanup memleak at raid10_make_request
Wang Jinchao <wangjinchao600(a)gmail.com>
md/raid1: Fix stack memory use after return in raid1_reshape
Mikko Perttunen <mperttunen(a)nvidia.com>
drm/tegra: nvdec: Fix dma_alloc_coherent error check
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: cfg80211: fix S1G beacon head validation in nl80211
Jakub Kicinski <kuba(a)kernel.org>
netlink: make sure we allow at least one dump skb
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix rmem check in netlink_broadcast_deliver().
Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com>
ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count
Gao Xiang <xiang(a)kernel.org>
erofs: fix large fragment handling
Gao Xiang <xiang(a)kernel.org>
erofs: address D-cache aliasing
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_read_folio()
Al Viro <viro(a)zeniv.linux.org.uk>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
Stefan Metzmacher <metze(a)samba.org>
smb: server: make use of rdma_destroy_qp()
Sascha Hauer <s.hauer(a)pengutronix.de>
clk: scmi: Handle case where child clocks are initialized before their parents
Julien Massot <julien.massot(a)collabora.com>
dt-bindings: clock: mediatek: Add #reset-cells property for MT8188
Mikhail Paulyshka <me(a)mixaill.net>
x86/CPU/AMD: Disable INVLPGB on Zen2
Jann Horn <jannh(a)google.com>
x86/mm: Disable hugetlb page table sharing on 32-bit
Mikhail Paulyshka <me(a)mixaill.net>
x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
Xiaolei Wang <xiaolei.wang(a)windriver.com>
clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data
Harry Yoo <harry.yoo(a)oracle.com>
lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users()
Honggyu Kim <honggyu.kim(a)sk.com>
samples/damon: fix damon sample wsse for start failure
Honggyu Kim <honggyu.kim(a)sk.com>
samples/damon: fix damon sample prcl for start failure
Honggyu Kim <honggyu.kim(a)sk.com>
mm/damon: fix divide by zero in damon_get_intervals_score()
SeongJae Park <sj(a)kernel.org>
mm/damon/core: handle damon_call_control as normal under kdmond deactivation
Lance Yang <lance.yang(a)linux.dev>
mm/rmap: fix potential out-of-bounds page table access during batched unmap
Alexander Gordeev <agordeev(a)linux.ibm.com>
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Illia Ostapyshyn <illia(a)yshyn.com>
scripts: gdb: vfs: support external dentry names
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts.py after maple tree conversion
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: de-reference per-CPU MCE interrupts
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts display after MCP on x86
Baolin Wang <baolin.wang(a)linux.alibaba.com>
mm: fix the inaccurate memory statistics issue for users
Wei Yang <richard.weiyang(a)gmail.com>
maple_tree: fix mt_destroy_walk() on root leaf node
Yeoreum Yun <yeoreum.yun(a)arm.com>
kasan: remove kasan_find_vm_area() to prevent possible deadlock
Achill Gilgenast <fossdd(a)pwned.life>
kallsyms: fix build without execinfo
Zhe Qiao <qiaozhe(a)iscas.ac.cn>
Revert "PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root()"
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "ACPI: battery: negate current when discharging"
Matthew Brost <matthew.brost(a)intel.com>
drm/xe: Allocate PF queue size on pow2 boundary
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/framebuffer: Acquire internal references on GEM handles
Kuen-Han Tsai <khtsai(a)google.com>
Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
Kuen-Han Tsai <khtsai(a)google.com>
usb: gadget: u_serial: Fix race condition in TTY wakeup
Aaron Thompson <dev(a)aaront.org>
drm/nouveau: Do not fail module init on debugfs errors
Matthew Brost <matthew.brost(a)intel.com>
Revert "drm/xe/xe2: Enable Indirect Ring State support for Xe2"
Matthew Auld <matthew.auld(a)intel.com>
drm/xe/bmg: fix compressed VRAM handling
Simona Vetter <simona.vetter(a)ffwll.ch>
drm/gem: Fix race in drm_gem_handle_create_tail()
Christian König <christian.koenig(a)amd.com>
drm/ttm: fix error handling in ttm_buffer_object_transfer
Matthew Brost <matthew.brost(a)intel.com>
drm/sched: Increment job count before swapping tail spsc queue
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/gem: Acquire references on GEM handles for framebuffers
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdkfd: add hqd_sdma_get_doorbell callbacks for gfx7/8
Kent Russell <kent.russell(a)amd.com>
drm/amdgpu: Include sdma_4_4_4.bin
Philip Yang <Philip.Yang(a)amd.com>
drm/amdkfd: Don't call mmput from MMU notifier callback
Alessio Belle <alessio.belle(a)imgtec.com>
drm/imagination: Fix kernel crash when hard resetting the GPU
Michael Lo <michael.lo(a)mediatek.com>
wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan
Ming Yen Hsieh <mingyen.hsieh(a)mediatek.com>
wifi: mt76: mt7925: fix the wrong config for tx interrupt
Deren Wu <deren.wu(a)mediatek.com>
wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload()
Deren Wu <deren.wu(a)mediatek.com>
wifi: mt76: mt7921: prevent decap offload config before STA initialization
Vitor Soares <vitor.soares(a)toradex.com>
wifi: mwifiex: discard erroneous disassoc frames on STA interface
Mathy Vanhoef <Mathy.Vanhoef(a)kuleuven.be>
wifi: prevent A-MSDU attacks in mesh networks
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Ensure to disable clocks in error path
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: Fix invalid state detection
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Miquel Raynal <miquel.raynal(a)bootlin.com>
pinctrl: nuvoton: Fix boot on ma35dx platforms
Håkon Bugge <haakon.bugge(a)oracle.com>
md/md-bitmap: fix GPF in bitmap_get_stats()
Hugo Villeneuve <hvilleneuve(a)dimonoff.com>
gpiolib: fix performance regression when using gpio_chip_get_multiple()
Haoxiang Li <haoxiang_li2024(a)163.com>
net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe()
Guillaume Nault <gnault(a)redhat.com>
gre: Fix IPv6 multicast route creation.
Jens Axboe <axboe(a)kernel.dk>
io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
Arun Raghavan <arun(a)asymptotic.io>
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Mark Brown <broonie(a)kernel.org>
arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
Edip Hazuri <edip(a)medip.dev>
ALSA: hda/realtek - Add mute LED support for HP Victus 15-fb2xxx
Thorsten Blum <thorsten.blum(a)linux.dev>
ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp()
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
sched: Fix preemption string of preempt_dynamic_none
Liam Merwick <liam.merwick(a)oracle.com>
KVM: Allow CPU to reschedule while setting per-page memory attributes
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
Nikunj A Dadhania <nikunj(a)amd.com>
KVM: SVM: Add missing member in SNP_LAUNCH_START command structure
Manuel Andreas <manuel.andreas(a)tum.de>
KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
David Woodhouse <dwmw(a)amazon.co.uk>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
JP Kobryn <inwardvessel(a)gmail.com>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Ensure user polling settings are honored when restarting timer
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Fix threshold limit reset
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Dan Carpenter <dan.carpenter(a)linaro.org>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
David Howells <dhowells(a)redhat.com>
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Eric Biggers <ebiggers(a)kernel.org>
crypto: s390/sha - Fix uninitialized variable in SHA-1 and SHA-2
David Howells <dhowells(a)redhat.com>
rxrpc: Fix bug due to prealloc collision
Victor Nogueira <victor(a)mojatatu.com>
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Chintan Vankar <c-vankar(a)ti.com>
net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info
Yue Haibing <yuehaibing(a)huawei.com>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix infinite recursive call of clip_push().
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix memory leak of struct clip_vcc.
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Force predictable MDI-X state on LAN87xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
EricChan <chenchuangyu(a)xiaomi.com>
net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
Petr Pavlu <petr.pavlu(a)suse.com>
module: Fix memory deallocation on error path in move_module()
Christophe JAILLET <christophe.jaillet(a)wanadoo.fr>
net: airoha: Fix an error handling path in airoha_probe()
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_* TOCTOU
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_{g2h,h2g} TOCTOU
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: Correct signedness in skb remaining space calculation
Kuniyuki Iwashima <kuniyu(a)google.com>
tipc: Fix use-after-free in tipc_conn_close().
Stefano Garzarella <sgarzare(a)redhat.com>
vsock: fix `vsock_proto` declaration
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix wraparounds of sk->sk_rmem_alloc.
Luo Jie <quic_luoj(a)quicinc.com>
net: phy: qcom: qca808x: Fix WoL issue by utilizing at8031_set_wol()
Luo Jie <quic_luoj(a)quicinc.com>
net: phy: qcom: move the WoL function to shared library
Anshuman Khandual <anshuman.khandual(a)arm.com>
arm64/mm: Drop wrong writes into TCR2_EL1
Kevin Brodsky <kevin.brodsky(a)arm.com>
arm64: poe: Handle spurious Overlay faults
Jason Xing <kernelxing(a)tencent.com>
bnxt_en: eliminate the compile warning in bnxt_request_irq due to CONFIG_RFS_ACCEL
kuyo chang <kuyo.chang(a)mediatek.com>
sched/deadline: Fix dl_server runtime calculation formula
Al Viro <viro(a)zeniv.linux.org.uk>
fix proc_sys_compare() handling of in-lookup dentries
Mario Limonciello <mario.limonciello(a)amd.com>
pinctrl: amd: Clear GPIO debounce for suspend
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix not disabling advertising instance
Richard Fitzgerald <rf(a)opensource.cirrus.com>
ASoC: cs35l56: probe() should fail if the device ID is not recognized
Peter Zijlstra <peterz(a)infradead.org>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Heiko Carstens <hca(a)linux.ibm.com>
objtool: Add missing endian conversion to read_annotate()
Peter Zijlstra <peterz(a)infradead.org>
sched/core: Fix migrate_swap() vs. hotplug
Nam Cao <namcao(a)linutronix.de>
irqchip/irq-msi-lib: Select CONFIG_GENERIC_MSI_IRQ
Shiju Jose <shiju.jose(a)huawei.com>
EDAC: Initialize EDAC features sysfs attributes
Luo Gengkun <luogengkun(a)huaweicloud.com>
perf/core: Fix the WARN_ON_ONCE is out of lock protected region
Charles Keepax <ckeepax(a)opensource.cirrus.com>
ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: add sof_sdw_get_tplg_files ops
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: soc-acpi: add get_function_tplg_files ops
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Kaustabh Chakraborty <kauschluss(a)disroot.org>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Linus Torvalds <torvalds(a)linux-foundation.org>
eventpoll: don't decrement ep refcount while still holding the ep mutex
-------------
Diffstat:
Documentation/bpf/map_hash.rst | 8 +-
Documentation/bpf/map_lru_hash_update.dot | 6 +-
.../bindings/clock/mediatek,mt8188-clock.yaml | 3 +
Makefile | 4 +-
arch/arm64/kernel/cpufeature.c | 57 +++--
arch/arm64/kernel/process.c | 5 +
arch/arm64/mm/fault.c | 30 ++-
arch/arm64/mm/proc.S | 1 -
arch/riscv/kernel/vdso/vdso.lds.S | 2 +-
arch/s390/crypto/sha1_s390.c | 2 +
arch/s390/crypto/sha256_s390.c | 3 +
arch/s390/crypto/sha512_s390.c | 3 +
arch/um/drivers/vector_kern.c | 42 ++--
arch/x86/Kconfig | 2 +-
arch/x86/coco/sev/core.c | 22 +-
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/include/asm/sev.h | 17 +-
arch/x86/kernel/cpu/amd.c | 10 +
arch/x86/kernel/cpu/mce/amd.c | 28 ++-
arch/x86/kernel/cpu/mce/core.c | 24 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kvm/hyperv.c | 3 +
arch/x86/kvm/svm/sev.c | 4 +
arch/x86/kvm/xen.c | 15 +-
drivers/acpi/battery.c | 19 +-
drivers/atm/idt77252.c | 5 +
drivers/block/nbd.c | 6 +-
drivers/block/ublk_drv.c | 3 +-
drivers/bluetooth/hci_qca.c | 13 +-
drivers/char/ipmi/ipmi_msghandler.c | 3 +-
drivers/clk/clk-scmi.c | 20 +-
drivers/clk/imx/clk-imx95-blk-ctl.c | 12 +-
drivers/edac/ecs.c | 4 +-
drivers/edac/mem_repair.c | 1 +
drivers/edac/scrub.c | 1 +
drivers/gpio/gpiolib.c | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v7.c | 8 +
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v8.c | 8 +
drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 43 ++--
drivers/gpu/drm/drm_framebuffer.c | 31 ++-
drivers/gpu/drm/drm_gem.c | 74 +++++-
drivers/gpu/drm/drm_internal.h | 2 +
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/imagination/pvr_power.c | 4 +-
drivers/gpu/drm/nouveau/nouveau_debugfs.c | 6 +-
drivers/gpu/drm/nouveau/nouveau_debugfs.h | 5 +-
drivers/gpu/drm/nouveau/nouveau_drm.c | 4 +-
drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c | 20 +-
drivers/gpu/drm/tegra/nvdec.c | 6 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 13 +-
drivers/gpu/drm/xe/xe_gt_pagefault.c | 1 +
drivers/gpu/drm/xe/xe_lmtt.c | 11 +
drivers/gpu/drm/xe/xe_migrate.c | 2 +-
drivers/gpu/drm/xe/xe_pci.c | 1 -
drivers/gpu/drm/xe/xe_pm.c | 11 +-
drivers/hid/hid-ids.h | 6 +
drivers/hid/hid-lenovo.c | 8 +
drivers/hid/hid-multitouch.c | 8 +-
drivers/hid/hid-nintendo.c | 38 +++-
drivers/hid/hid-quirks.c | 3 +
drivers/irqchip/Kconfig | 1 +
drivers/md/md-bitmap.c | 3 +-
drivers/md/raid1.c | 4 +-
drivers/md/raid10.c | 12 +-
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/ethernet/airoha/airoha_eth.c | 1 +
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 10 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_coredump.c | 18 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/ibm/ibmvnic.h | 8 +-
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 9 +-
drivers/net/ethernet/mellanox/mlx5/core/en_dim.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 13 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 3 +
drivers/net/ethernet/renesas/rtsn.c | 5 +
drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 24 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 4 +-
drivers/net/ethernet/wangxun/libwx/wx_lib.c | 16 +-
drivers/net/ethernet/wangxun/libwx/wx_type.h | 2 +-
drivers/net/ethernet/wangxun/ngbe/ngbe_main.c | 2 +-
drivers/net/ethernet/wangxun/ngbe/ngbe_type.h | 2 +-
drivers/net/ethernet/wangxun/txgbe/txgbe_irq.c | 4 +-
drivers/net/ethernet/wangxun/txgbe/txgbe_type.h | 4 +-
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 3 +-
drivers/net/phy/qcom/at803x.c | 27 ---
drivers/net/phy/qcom/qca808x.c | 2 +-
drivers/net/phy/qcom/qcom-phy-lib.c | 25 ++
drivers/net/phy/qcom/qcom.h | 5 +
drivers/net/phy/smsc.c | 57 ++++-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/marvell/mwifiex/util.c | 4 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 6 +-
drivers/net/wireless/mediatek/mt76/mt7921/main.c | 3 +
drivers/net/wireless/mediatek/mt76/mt7925/init.c | 2 +
drivers/net/wireless/mediatek/mt76/mt7925/main.c | 6 +
drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7925/regs.h | 2 +-
drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 40 +---
drivers/net/wireless/mediatek/mt76/mt7996/main.c | 5 +-
drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 188 ++++++++++-----
drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h | 16 +-
drivers/net/wireless/ralink/rt2x00/rt2x00soc.c | 4 +-
drivers/net/wireless/ralink/rt2x00/rt2x00soc.h | 2 +-
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pci/pci-acpi.c | 23 +-
drivers/pinctrl/nuvoton/pinctrl-ma35.c | 10 +-
drivers/pinctrl/pinctrl-amd.c | 11 +
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/pwm/core.c | 2 +-
drivers/pwm/pwm-mediatek.c | 13 +-
drivers/tty/vt/vt.c | 1 +
drivers/usb/gadget/function/u_serial.c | 12 +-
fs/btrfs/free-space-tree.c | 16 +-
fs/erofs/data.c | 21 +-
fs/erofs/decompressor.c | 12 +-
fs/erofs/fileio.c | 6 +-
fs/erofs/internal.h | 6 +-
fs/erofs/zdata.c | 13 +-
fs/erofs/zmap.c | 9 +-
fs/eventpoll.c | 12 +-
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
fs/proc/task_mmu.c | 14 +-
fs/smb/server/smb2pdu.c | 29 +--
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/vfs.c | 1 +
include/drm/drm_file.h | 3 +
include/drm/drm_framebuffer.h | 7 +
include/drm/spsc_queue.h | 4 +-
include/linux/blkdev.h | 5 +
include/linux/ieee80211.h | 45 +++-
include/linux/io_uring_types.h | 2 +
include/linux/mm.h | 5 +
include/linux/psp-sev.h | 2 +
include/net/af_vsock.h | 2 +-
include/net/bluetooth/hci_core.h | 3 +-
include/net/netfilter/nf_flow_table.h | 2 +-
include/sound/soc-acpi.h | 13 ++
include/trace/events/erofs.h | 2 +-
io_uring/msg_ring.c | 4 +-
io_uring/opdef.c | 1 +
io_uring/zcrx.c | 3 -
kernel/bpf/bpf_lru_list.c | 9 +-
kernel/bpf/bpf_lru_list.h | 1 +
kernel/events/core.c | 6 +-
kernel/module/main.c | 4 +-
kernel/sched/core.c | 7 +-
kernel/sched/deadline.c | 10 +-
kernel/stop_machine.c | 20 +-
lib/alloc_tag.c | 3 +
lib/maple_tree.c | 1 +
mm/damon/core.c | 8 +-
mm/kasan/report.c | 45 +---
mm/rmap.c | 46 ++--
mm/vmalloc.c | 22 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 64 ++++--
net/bluetooth/hci_event.c | 3 +
net/bluetooth/hci_sync.c | 4 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 9 +-
net/mac80211/cfg.c | 14 ++
net/mac80211/mlme.c | 7 +-
net/mac80211/parse.c | 6 +-
net/mac80211/util.c | 9 +-
net/netlink/af_netlink.c | 90 +++++---
net/rxrpc/call_accept.c | 4 +
net/sched/sch_api.c | 23 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 57 ++++-
net/wireless/nl80211.c | 7 +-
net/wireless/util.c | 52 ++++-
samples/damon/prcl.c | 8 +-
samples/damon/wsse.c | 8 +-
scripts/gdb/linux/constants.py.in | 7 +
scripts/gdb/linux/interrupts.py | 16 +-
scripts/gdb/linux/mapletree.py | 252 +++++++++++++++++++++
scripts/gdb/linux/vfs.py | 2 +-
scripts/gdb/linux/xarray.py | 28 +++
sound/isa/ad1816a/ad1816a.c | 2 +-
sound/pci/hda/patch_realtek.c | 10 +
sound/soc/amd/yc/acp6x-mach.c | 7 +
sound/soc/codecs/cs35l56-shared.c | 2 +-
sound/soc/codecs/rt721-sdca.c | 23 +-
sound/soc/fsl/fsl_asrc.c | 3 +-
sound/soc/fsl/fsl_sai.c | 14 +-
sound/soc/intel/boards/Kconfig | 1 +
sound/soc/intel/common/Makefile | 2 +-
sound/soc/intel/common/soc-acpi-intel-arl-match.c | 21 +-
sound/soc/intel/common/sof-function-topology-lib.c | 136 +++++++++++
sound/soc/intel/common/sof-function-topology-lib.h | 15 ++
sound/soc/sof/intel/hda.c | 6 +-
tools/arch/x86/include/asm/msr-index.h | 1 +
tools/include/linux/kallsyms.h | 4 +
tools/objtool/check.c | 1 +
tools/testing/selftests/bpf/test_lru_map.c | 105 ++++-----
tools/testing/selftests/net/lib.sh | 2 +-
virt/kvm/kvm_main.c | 3 +
203 files changed, 2012 insertions(+), 833 deletions(-)
1 week, 3 days
- 20
- 212
[PATCH net v2 5/5] rxrpc: Fix to use conn aborts for conn-wide failures
by David Howells
Fix rxrpc to use connection-level aborts for things that affect the whole
connection, such as the service ID not matching a local service.
Fixes: 57af281e5389 ("rxrpc: Tidy up abort generation infrastructure")
Reported-by: Jeffrey Altman <jaltman(a)auristor.com>
Signed-off-by: David Howells <dhowells(a)redhat.com>
Reviewed-by: Jeffrey Altman <jaltman(a)auristor.com>
cc: Marc Dionne <marc.dionne(a)auristor.com>
cc: Jakub Kicinski <kuba(a)kernel.org>
cc: Paolo Abeni <pabeni(a)redhat.com>
cc: "David S. Miller" <davem(a)davemloft.net>
cc: Eric Dumazet <edumazet(a)google.com>
cc: Simon Horman <horms(a)kernel.org>
cc: linux-afs(a)lists.infradead.org
cc: netdev(a)vger.kernel.org
cc: stable(a)vger.kernel.org
---
Notes:
Changes
=======
ver #2)
- Moved trace note declaration out to earlier patch that uses it
net/rxrpc/ar-internal.h | 3 +++
net/rxrpc/call_accept.c | 12 ++++++------
net/rxrpc/io_thread.c | 14 ++++++++++++++
net/rxrpc/output.c | 19 ++++++++++---------
net/rxrpc/security.c | 8 ++++----
5 files changed, 37 insertions(+), 19 deletions(-)
diff --git a/net/rxrpc/ar-internal.h b/net/rxrpc/ar-internal.h
index df1a618dbf7d..5b7342d43486 100644
--- a/net/rxrpc/ar-internal.h
+++ b/net/rxrpc/ar-internal.h
@@ -44,6 +44,7 @@ enum rxrpc_skb_mark {
RXRPC_SKB_MARK_SERVICE_CONN_SECURED, /* Service connection response has been verified */
RXRPC_SKB_MARK_REJECT_BUSY, /* Reject with BUSY */
RXRPC_SKB_MARK_REJECT_ABORT, /* Reject with ABORT (code in skb->priority) */
+ RXRPC_SKB_MARK_REJECT_CONN_ABORT, /* Reject with connection ABORT (code in skb->priority) */
};
/*
@@ -1253,6 +1254,8 @@ int rxrpc_encap_rcv(struct sock *, struct sk_buff *);
void rxrpc_error_report(struct sock *);
bool rxrpc_direct_abort(struct sk_buff *skb, enum rxrpc_abort_reason why,
s32 abort_code, int err);
+bool rxrpc_direct_conn_abort(struct sk_buff *skb, enum rxrpc_abort_reason why,
+ s32 abort_code, int err);
int rxrpc_io_thread(void *data);
void rxrpc_post_response(struct rxrpc_connection *conn, struct sk_buff *skb);
static inline void rxrpc_wake_up_io_thread(struct rxrpc_local *local)
diff --git a/net/rxrpc/call_accept.c b/net/rxrpc/call_accept.c
index a4d76f2da684..00982a030744 100644
--- a/net/rxrpc/call_accept.c
+++ b/net/rxrpc/call_accept.c
@@ -374,8 +374,8 @@ bool rxrpc_new_incoming_call(struct rxrpc_local *local,
spin_lock(&rx->incoming_lock);
if (rx->sk.sk_state == RXRPC_SERVER_LISTEN_DISABLED ||
rx->sk.sk_state == RXRPC_CLOSE) {
- rxrpc_direct_abort(skb, rxrpc_abort_shut_down,
- RX_INVALID_OPERATION, -ESHUTDOWN);
+ rxrpc_direct_conn_abort(skb, rxrpc_abort_shut_down,
+ RX_INVALID_OPERATION, -ESHUTDOWN);
goto no_call;
}
@@ -422,12 +422,12 @@ bool rxrpc_new_incoming_call(struct rxrpc_local *local,
unsupported_service:
read_unlock_irq(&local->services_lock);
- return rxrpc_direct_abort(skb, rxrpc_abort_service_not_offered,
- RX_INVALID_OPERATION, -EOPNOTSUPP);
+ return rxrpc_direct_conn_abort(skb, rxrpc_abort_service_not_offered,
+ RX_INVALID_OPERATION, -EOPNOTSUPP);
unsupported_security:
read_unlock_irq(&local->services_lock);
- return rxrpc_direct_abort(skb, rxrpc_abort_service_not_offered,
- RX_INVALID_OPERATION, -EKEYREJECTED);
+ return rxrpc_direct_conn_abort(skb, rxrpc_abort_service_not_offered,
+ RX_INVALID_OPERATION, -EKEYREJECTED);
no_call:
spin_unlock(&rx->incoming_lock);
read_unlock_irq(&local->services_lock);
diff --git a/net/rxrpc/io_thread.c b/net/rxrpc/io_thread.c
index 27b650d30f4d..e939ecf417c4 100644
--- a/net/rxrpc/io_thread.c
+++ b/net/rxrpc/io_thread.c
@@ -97,6 +97,20 @@ bool rxrpc_direct_abort(struct sk_buff *skb, enum rxrpc_abort_reason why,
return false;
}
+/*
+ * Directly produce a connection abort from a packet.
+ */
+bool rxrpc_direct_conn_abort(struct sk_buff *skb, enum rxrpc_abort_reason why,
+ s32 abort_code, int err)
+{
+ struct rxrpc_skb_priv *sp = rxrpc_skb(skb);
+
+ trace_rxrpc_abort(0, why, sp->hdr.cid, 0, sp->hdr.seq, abort_code, err);
+ skb->mark = RXRPC_SKB_MARK_REJECT_CONN_ABORT;
+ skb->priority = abort_code;
+ return false;
+}
+
static bool rxrpc_bad_message(struct sk_buff *skb, enum rxrpc_abort_reason why)
{
return rxrpc_direct_abort(skb, why, RX_PROTOCOL_ERROR, -EBADMSG);
diff --git a/net/rxrpc/output.c b/net/rxrpc/output.c
index 17c33b5cf7dd..8b5903b6e481 100644
--- a/net/rxrpc/output.c
+++ b/net/rxrpc/output.c
@@ -829,7 +829,13 @@ void rxrpc_reject_packet(struct rxrpc_local *local, struct sk_buff *skb)
msg.msg_controllen = 0;
msg.msg_flags = 0;
- memset(&whdr, 0, sizeof(whdr));
+ whdr = (struct rxrpc_wire_header) {
+ .epoch = htonl(sp->hdr.epoch),
+ .cid = htonl(sp->hdr.cid),
+ .callNumber = htonl(sp->hdr.callNumber),
+ .serviceId = htons(sp->hdr.serviceId),
+ .flags = ~sp->hdr.flags & RXRPC_CLIENT_INITIATED,
+ };
switch (skb->mark) {
case RXRPC_SKB_MARK_REJECT_BUSY:
@@ -837,6 +843,9 @@ void rxrpc_reject_packet(struct rxrpc_local *local, struct sk_buff *skb)
size = sizeof(whdr);
ioc = 1;
break;
+ case RXRPC_SKB_MARK_REJECT_CONN_ABORT:
+ whdr.callNumber = 0;
+ fallthrough;
case RXRPC_SKB_MARK_REJECT_ABORT:
whdr.type = RXRPC_PACKET_TYPE_ABORT;
code = htonl(skb->priority);
@@ -850,14 +859,6 @@ void rxrpc_reject_packet(struct rxrpc_local *local, struct sk_buff *skb)
if (rxrpc_extract_addr_from_skb(&srx, skb) == 0) {
msg.msg_namelen = srx.transport_len;
- whdr.epoch = htonl(sp->hdr.epoch);
- whdr.cid = htonl(sp->hdr.cid);
- whdr.callNumber = htonl(sp->hdr.callNumber);
- whdr.serviceId = htons(sp->hdr.serviceId);
- whdr.flags = sp->hdr.flags;
- whdr.flags ^= RXRPC_CLIENT_INITIATED;
- whdr.flags &= RXRPC_CLIENT_INITIATED;
-
iov_iter_kvec(&msg.msg_iter, WRITE, iov, ioc, size);
ret = do_udp_sendmsg(local->socket, &msg, size);
if (ret < 0)
diff --git a/net/rxrpc/security.c b/net/rxrpc/security.c
index 078d91a6b77f..2bfbf2b2bb37 100644
--- a/net/rxrpc/security.c
+++ b/net/rxrpc/security.c
@@ -140,15 +140,15 @@ const struct rxrpc_security *rxrpc_get_incoming_security(struct rxrpc_sock *rx,
sec = rxrpc_security_lookup(sp->hdr.securityIndex);
if (!sec) {
- rxrpc_direct_abort(skb, rxrpc_abort_unsupported_security,
- RX_INVALID_OPERATION, -EKEYREJECTED);
+ rxrpc_direct_conn_abort(skb, rxrpc_abort_unsupported_security,
+ RX_INVALID_OPERATION, -EKEYREJECTED);
return NULL;
}
if (sp->hdr.securityIndex != RXRPC_SECURITY_NONE &&
!rx->securities) {
- rxrpc_direct_abort(skb, rxrpc_abort_no_service_key,
- sec->no_key_abort, -EKEYREJECTED);
+ rxrpc_direct_conn_abort(skb, rxrpc_abort_no_service_key,
+ sec->no_key_abort, -EKEYREJECTED);
return NULL;
}
1 week, 3 days
- 1
- 0
[PATCH net v2 4/5] rxrpc: Fix transmission of an abort in response to an abort
by David Howells
Under some circumstances, such as when a server socket is closing, ABORT
packets will be generated in response to incoming packets. Unfortunately,
this also may include generating aborts in response to incoming aborts -
which may cause a cycle. It appears this may be made possible by giving
the client a multicast address.
Fix this such that rxrpc_reject_packet() will refuse to generate aborts in
response to aborts.
Fixes: 248f219cb8bc ("rxrpc: Rewrite the data and ack handling code")
Signed-off-by: David Howells <dhowells(a)redhat.com>
Reviewed-by: Jeffrey Altman <jaltman(a)auristor.com>
cc: Marc Dionne <marc.dionne(a)auristor.com>
cc: Junvyyang, Tencent Zhuque Lab <zhuque(a)tencent.com>
cc: LePremierHomme <kwqcheii(a)proton.me>
cc: Linus Torvalds <torvalds(a)linux-foundation.org>
cc: Jakub Kicinski <kuba(a)kernel.org>
cc: Paolo Abeni <pabeni(a)redhat.com>
cc: "David S. Miller" <davem(a)davemloft.net>
cc: Eric Dumazet <edumazet(a)google.com>
cc: Simon Horman <horms(a)kernel.org>
cc: linux-afs(a)lists.infradead.org
cc: netdev(a)vger.kernel.org
cc: stable(a)vger.kernel.org
---
net/rxrpc/output.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/net/rxrpc/output.c b/net/rxrpc/output.c
index ef7b3096c95e..17c33b5cf7dd 100644
--- a/net/rxrpc/output.c
+++ b/net/rxrpc/output.c
@@ -814,6 +814,9 @@ void rxrpc_reject_packet(struct rxrpc_local *local, struct sk_buff *skb)
__be32 code;
int ret, ioc;
+ if (sp->hdr.type == RXRPC_PACKET_TYPE_ABORT)
+ return; /* Never abort an abort. */
+
rxrpc_see_skb(skb, rxrpc_skb_see_reject);
iov[0].iov_base = &whdr;
1 week, 3 days
- 1
- 0