4 days, 8 hours
- 1
- 0
AV & Systems Integration Industry Contacts
by Shana Eudy
Integrated Systems Europe (ISE)
Hi,
Hope you are doing great!
As I can see that you are one of the exhibitors at Integrated Systems Europe (ISE), would you like to get your hands on verified AV & Systems Integration Industry Contacts?
We can help you connect with AV Professionals, System Integrators, AV Consultants, AV Designers, IT Specialists, Facilities Managers, Technology Decision-Makers, Corporate AV Teams, Education Institutions, Retailers, Hospitality Groups, and other professionals involved in professional audiovisual solutions across Europe, USA or globally.
Let me know if you are interested to see a sample, counts and pricing. If yes, let me know your target audience and geography.
Regards,
Shana Eudy
Sr. Marketing Manager
To stop receiving future emails, reply with Omit.
4 days, 22 hours
- 1
- 0
[PATCH 7.1 000/271] 7.1.9-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 7.1.9 release.
There are 271 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.9-rc1.…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 7.1.9-rc1
Xu Rao <raoxu(a)uniontech.com>
thunderbolt: Fix bandwidth group reservation indexing
Bryam Vargas <hexlabsecurity(a)proton.me>
thunderbolt: Bound the DROM dual link port number before indexing sw->ports
Qing Ming <a0yami(a)mailbox.org>
sctp: clear new_transport when removing a peer
Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn>
sctp: fix use-after-free of cached ASCONF chunk
Baul Lee <baul.lee(a)xbow.com>
sctp: keep chunk->transport in step with the list it is queued on
Xu Rao <raoxu(a)uniontech.com>
scsi: scsi_debug: Negate wrapped memcmp() result
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf, sockmap: Fix sk_redir use-after-free in send verdict
Eric Biggers <ebiggers(a)kernel.org>
fsverity: Fix silent truncation in bpf_get_fsverity_digest()
Eric Biggers <ebiggers(a)kernel.org>
fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
Hugh Dickins <hughd(a)google.com>
mm/filemap: __filemap_add_folio() restore index before retrying
Mimi Zohar <zohar(a)linux.ibm.com>
ima: Instantiate file_truncate and path_truncate hooks
Tejun Heo <tj(a)kernel.org>
sched_ext: Take cgroup_lock() first in scx_cgroup_lock()
Tejun Heo <tj(a)kernel.org>
sched/psi: Create the psimon kthread outside of cgroup_mutex
Tejun Heo <tj(a)kernel.org>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
Zhan Xusheng <zhanxusheng(a)xiaomi.com>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
Andrey Albershteyn <aalbersh(a)kernel.org>
fs,fsverity: remove check for fsverity being enabled in setattr_prepare()
Zhiling Zou <zhilinz(a)nebusec.ai>
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
Yuejie Shi <syjcnss(a)gmail.com>
ipv6: fix Route Information option length validation
Lorenzo Stoakes (ARM) <ljs(a)kernel.org>
mm/ptdump: always stabilise against page table freeing using init_mm
Zhiling Zou <zhilinz(a)nebusec.ai>
mm/page_table_check: skip special zero mappings
Tengda Wu <wutengda(a)huaweicloud.com>
ring-buffer: Use current_context for safe per-CPU buffer swap
Vincent Donnefort <vdonnefort(a)google.com>
ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
Ahmad Byagowi <ahmadexp(a)gmail.com>
ptp: ocp: Fix board ID over-read
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "thermal: hwmon: Register a hwmon device for each thermal zone"
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
Vincent Donnefort <vdonnefort(a)google.com>
ring-buffer: Prevent resizing of persistent ring buffer
Steven Rostedt <rostedt(a)goodmis.org>
eventfs: Use children field for rcu head and add memory barriers
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
eventfs: Fix use-after-free in eventfs_remove_rec()
Sean Christopherson <seanjc(a)google.com>
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page
Paolo Bonzini <pbonzini(a)redhat.com>
KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
Frank Sorenson <sorenson(a)redhat.com>
smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive()
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
smb: client: Fix use-after-free in cifs_try_adding_channels()
Jun Yang <junvyyang(a)tencent.com>
tipc: read le->link under the node lock in tipc_node_link_down()
chanyoung <ppoo1220(a)gmail.com>
tls: don't leave a full plaintext sk_msg ring unpushed
Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr>
tls: rx: restore msg_iter before TLS 1.3 optimistic retry
Jun Yang <junvyyang(a)tencent.com>
vhost: reset the vring metadata cache on vring reconfiguration
Sun Jian <sun.jian.kdev(a)gmail.com>
veth: fix skb length accounting after XDP frag adjustment
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: avoid refilling the RX queue after teardown
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: read virtqueues under worker locks
Baul Lee <baul.lee(a)xbow.com>
vxlan: do not arm the ageing timer on a device that is down
Zhiling Zou <zhilinz(a)nebusec.ai>
xdp: reject clones that overrun skb_shared_info tailroom
Breno Leitao <leitao(a)debian.org>
x86/mce: Set up the polling timer before CMCI discovery
Rik van Riel <riel(a)surriel.com>
x86/CPU: Add a tlbi= cmdline switch
Lorenzo Stoakes (ARM) <ljs(a)kernel.org>
arm64: remove redundant concurrent ptdump UAF mitigation
Hidayath Khan <hidayath(a)linux.ibm.com>
dibs: initialise dibs->lock in dibs_dev_alloc()
Asad Kamal <asad.kamal(a)amd.com>
Revert "drm/amdgpu: fix aperture mapping leak"
Christian Brauner <brauner(a)kernel.org>
binfmt_misc: don't warn when the mount is completed from another user namespace
Christian Brauner <brauner(a)kernel.org>
ovl: don't warn when the mount is completed from another user namespace
Hyunjung Ko <hj351016(a)gmail.com>
net/sched: act_gact, act_police: range check the fallback control action
Hyunjung Ko <hj351016(a)gmail.com>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free RX pages of consumed but not refilled buffers
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free stranded TX buffers on ring deinit
Zihan Xi <zihanx(a)nebusec.ai>
netfilter: nf_conntrack: defer invalid log until after unlock
Zhiling Zou <zhilinz(a)nebusec.ai>
netfilter: bridge: release template ct on non-IP path
Koichiro Den <den(a)valinux.co.jp>
NTB: ntb_netdev: Preserve RX queue depth on allocation failure
Pavel Begunkov <asml.silence(a)gmail.com>
net: devmem: prevent net-iov / page mixing
Baul Lee <baul.lee(a)xbow.com>
net/x25: fix use-after-free of the socket by its timers
Alexandra Winter <wintera(a)linux.ibm.com>
net/dibs: Correct freeing of dmb_clientid_arr
Kyle Zeng <kylebot(a)openai.com>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev
Daming Li <d4n.for.sec(a)gmail.com>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice
Ahmed Naseef <naseefkm(a)gmail.com>
net: phy: mediatek: fix TX blink masks using the RX bits
Lorenzo Stoakes (ARM) <ljs(a)kernel.org>
mm/huge_memory: fix huge_zero_pfn race
Matt Fleming <mfleming(a)cloudflare.com>
mm/huge_memory: initialise workingset state before folio split
Hui Su <sh_def(a)163.com>
tracing: Fix NULL pointer dereference in module event cache removal
Vincent Donnefort <vdonnefort(a)google.com>
ring-buffer: Prevent subbuf order change when resizing is disabled
Rik van Riel <riel(a)surriel.com>
fbdev: bitblit: bound-check glyph index in bit_cursor()
Michael Wu <michael(a)allwinnertech.com>
tracing: Fix race between update_event_fields and, event_define_fields
Aditya Chillara <aditya.chillara(a)oss.qualcomm.com>
perf/core: Fix group leader use-after-free after sibling detach
Maíra Canal <mcanal(a)igalia.com>
drm/v3d: Serialize the scheduler timeout handlers
Baul Lee <baul.lee(a)xbow.com>
ALSA: us144mkii: re-anchor capture URBs on resubmission
Xu Rao <raoxu(a)uniontech.com>
ALSA: hda/tas2781: fix ACPI reference handling
Baul Lee <baul.lee(a)xbow.com>
ALSA: FCP: fix OOB write in fcp_meter_ctl_get()
Baul Lee <baul.lee(a)xbow.com>
ALSA: usx2y: bound the hwdep mmap fault offset
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
SJ Park <sj(a)kernel.org>
mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD}
SJ Park <sj(a)kernel.org>
samples/damon/mtier: error out for zero quota goal target values
liyouhong <liyouhong(a)kylinos.cn>
mm/damon/ops-common: putback folios on invalid migrate nid
SJ Park <sj(a)kernel.org>
mm/damon/lru_sort: error out for >10000 active_mem_bp
Hui Su <sh_def(a)163.com>
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
Eddie Lin <eddie.lin(a)oss.qualcomm.com>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free
Junrui Luo <moonafterrain(a)outlook.com>
misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
Ekansh Gupta <ekansh.gupta(a)oss.qualcomm.com>
misc: fastrpc: Remove buffer from list prior to unmap operation
Anandu Krishnan E <anandu.e(a)oss.qualcomm.com>
misc: fastrpc: fix channel ctx ref leak when session alloc fails
Ekansh Gupta <ekansh.gupta(a)oss.qualcomm.com>
misc: fastrpc: Fix initial memory allocation for Audio PD memory pool
Mariano Baragiola <mbaragiola(a)linux.com>
staging: rtl8723bs: validate monitor transmit frame lengths
Panagiotis Petrakopoulos <npetrakopoulos2003(a)gmail.com>
staging: rtl8723bs: fix missing shared-key auth challenge length check
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in WMM_param_handler()
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
Fan Wu <fanwu01(a)zju.edu.cn>
serial: amba-pl011: synchronize DMA teardown
Fan Wu <fanwu01(a)zju.edu.cn>
serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ
Fan Wu <fanwu01(a)zju.edu.cn>
serial: amba-pl011: fix indefinite RS485 post-send delay
Ryan Wilbur <rwilbur633(a)gmail.com>
serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx
Cunhao Lu <1579567540(a)qq.com>
serial: 8250_dma: Clear stale RX state on shutdown
Luca Fresi <luca.fresi(a)bithiatec.com>
serial: sc16is7xx: enable THRI before filling TX FIFO
Jan Sebastian Götte <linux(a)jaseg.de>
serial: qcom-geni: fix TX DMA buffer flush
Alice Ryhl <aliceryhl(a)google.com>
rust_binder: do not query current thread for all ioctls
Mathieu Dubois-Briand <mathieu.dubois-briand(a)bootlin.com>
nvmem: layouts: Add fixed-layout driver
Aelin Reidel <aelin(a)mainlining.org>
nvmem: apple-spmi-nvmem: wrap regmap calls to satisfy CFI
Alexander Usyskin <alexander.usyskin(a)intel.com>
mei: pull kvfree out of spinlock
Chengfeng Ye <nicoyip.dev(a)gmail.com>
ipv4: fix use-after-free in fib_nhc_update_mtu()
Zihan Xi <zihanx(a)nebusec.ai>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Adapt sockmap update error handling
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Ensure UDP sockets are bound
Nils Helmig <nils.helmig(a)web.de>
Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV
Alexej Sidorenko <alexej(a)sidorenko.cz>
Bluetooth: btrtl: fix RTL8761B/BU broken LE extended scan
Maciej Fijalkowski <maciej.fijalkowski(a)intel.com>
selftests/xsk: account reclaimed invalid Tx descriptors
Maciej Fijalkowski <maciej.fijalkowski(a)intel.com>
selftests/xsk: fix too-many-frags multi-buffer Tx test
Keno Fischer <keno(a)juliacomputing.com>
futex: Prevent robust futex exit race some more
Alex Deucher <alexander.deucher(a)amd.com>
Revert "drm/amd/display: Fix backlight max_brightness to match exported range"
Baul Lee <baul.lee(a)xbow.com>
net: bridge: mrp: fix uninitialised bytes on the wire
Chengfeng Ye <nicoyip.dev(a)gmail.com>
netfilter: ebt_nflog: pin the NFLOG backend
Philipp David <pd-lkml(a)3b.pm>
igc: fix netdev not re-attached after resume if interface is down
Zihan Xi <zihanx(a)nebusec.ai>
mac802154: fix netdev use-after-free in beacon worker
Zhiling Zou <zhilinz(a)nebusec.ai>
inet: frags: publish queues before arming timer
Qihang Tang <q.h.hack.winter(a)gmail.com>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
Sergey V. Frolov <Sergey.V.Frolov(a)kaspersky.com>
net: octeontx2-pf: Fix UB in shift operation
Zijie Huang <milkory(a)outlook.com>
net/sched: reject overly deep qdisc hierarchies
Zhiling Zou <zhilinz(a)nebusec.ai>
net: openvswitch: reallocate update replies for mismatched IDs
Sun Jian <sun.jian.kdev(a)gmail.com>
net: fix skb length accounting after generic XDP frag adjustment
Zihan Xi <zihanx(a)nebusec.ai>
packet: synchronize pressure clearing with ring reconfiguration
Doruk Tan Ozturk <doruk(a)0sec.ai>
net/packet: reset the MAC header on the packet-socket transmit path
Qihang Tang <q.h.hack.winter(a)gmail.com>
packet: use consistent hard_header_len in TX_RING send path
Qihang Tang <q.h.hack.winter(a)gmail.com>
packet: use consistent hard_header_len in non-ring send paths
Kyle Zeng <kylebot(a)openai.com>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn>
ipvs: separate destination availability state
Julian Anastasov <ja(a)ssi.bg>
ipvs: properly update the overload flag on dest edit
Julian Anastasov <ja(a)ssi.bg>
ipvs: add totalconns for dest
Zhiling Zou <zhilinz(a)nebusec.ai>
ipvs: stop estimator after disabled calc phase
Lincoln Wallace <locnnil0(a)gmail.com>
ima: fix out-of-bounds read in xattr_verify()
Lorenzo Stoakes (ARM) <ljs(a)kernel.org>
mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - fix information leak in evdev_pass_values()
Andy Lutomirski <luto(a)kernel.org>
mm: fix incorrect flush address in direct page table reclaim
Joshua Rogers <linux(a)joshua.hu>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
Joshua Rogers <linux(a)joshua.hu>
vt: add permission check for KDSKBMETA ioctl
Laurent Vivier <lvivier(a)redhat.com>
usbnet: cap max_mtu for drivers without bind callback
Doruk Tan Ozturk <doruk(a)0sec.ai>
net: usb: ipheth: fix carrier_work UAF on disconnect
Yi Cong <yicong(a)kylinos.cn>
net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()
Sonali Pradhan <sonalipradhan(a)google.com>
usb: gadget: f_ncm: Use unsigned int for ndp_index
Pawel Laszczak <pawell(a)cadence.com>
usb: cdnsp: fix incorrect endian conversions for APB timeout register
Xu Rao <raoxu(a)uniontech.com>
thunderbolt: icm: Preserve USB4 proxy data-valid bit
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
usb: xhci: use BIT_ULL for CRCR bits to fix incorrect 64bit mask
Aleksandr Nogikh <nogikh(a)google.com>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
Jiangshan Yi <yijiangshan(a)kylinos.cn>
usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg
Ishaan Dandekar <ishaan.dandekar(a)gmail.com>
usb: quirks: Add ShanWan gamepad to quirk list
Nikhil Solanke <nikhilsolanke5(a)gmail.com>
usb: core: Add quirk for 255-bytes initial config read
Baul Lee <baul.lee(a)xbow.com>
ALSA: usb-audio: fix OOB write on Type II inbound URBs
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - sanitize event type index when fetching event masks
Dongli Zhang <dongli.zhang(a)oracle.com>
net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Fix sticky mixer regressions on M-Audio Fast Track Ultra
Ali Ahmet Memis <ali(a)iusegentoo.com>
hwmon: (corsair-psu) serialize debugfs access against hwmon
Guenter Roeck <linux(a)roeck-us.net>
hwmon: Support guard() and scoped_guard for subsystem locks
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (ltc4282) Clamp negative current limits
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (ltc4282) Avoid overflow in maximum power calculation
Qingshuang Fu <fuqingshuang(a)kylinos.cn>
hwmon: (ads7828) Fix external VREF regulator handling
Wilken Gottwalt <wilken.gottwalt(a)posteo.net>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination
Kumar Kartikeya Dwivedi <memxor(a)gmail.com>
rqspinlock: Reset tail when preserving queue on deadlock
Hongyan Xu <getshell(a)seu.edu.cn>
watchdog: at91sam9_wdt: prevent timer rearm during teardown
Maximilian Immanuel Brandtner <maxbr(a)linux.ibm.com>
tls: don't abort the connection on signal-interrupted sends
Xin Long <lucien.xin(a)gmail.com>
sctp: clear control chunk transport if it is being removed
Eric Dumazet <edumazet(a)google.com>
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
Alexandra Winter <wintera(a)linux.ibm.com>
s390/ism: Fix UAF of sba and ieq during ism_dev_exit()
Bhargava Marreddy <bhargava.marreddy(a)broadcom.com>
bnge: Fix resource leak in bnge_init_nic() error path
Hongyan Xu <getshell(a)seu.edu.cn>
ata: pata_sl82c105: fix bridge revision use-after-free
Fan XinRan <shinjiangjiang(a)gmail.com>
net: thunderbolt: Tear down DMA paths before stopping the rings
Łukasz Patron <priv.luk(a)gmail.com>
net: qrtr: ns: Raise lookup limit to 128
Sidraya Jayagond <sidraya(a)linux.ibm.com>
net/smc: fix TOCTOU race between smc_listen_out() and listener close
Eric Dumazet <edumazet(a)google.com>
net: remove WARN_ON_ONCE() from sk_mc_loop()
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
net: prestera: validate firmware header length
Henry Martin <bsdhenrymartin(a)gmail.com>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
Eric Dumazet <edumazet(a)google.com>
netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: fix TFO max_qlen accounting across reuseport migration
Luxiao Xu <rakukuip(a)gmail.com>
bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie
Qing Luo <luoqing(a)kylinos.cn>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure
Keegan Freyhof <keegan.freyhof(a)broadcom.com>
bnxt_en: Fix PTP PPS setting bug
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Refresh VNIC default ring on queue restart if needed
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Determine and store default RX ring in vnic structure
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()
Bobby Eshleman <bobbyeshleman(a)meta.com>
net/mlx5e: fix BQL reset on SQ re-activation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
bnge: use int for bnge_fix_rings_count() return value
Stefan Agner <stefan(a)agner.ch>
net: stmmac: resume PHY before hardware setup when opening the interface
Martin Kaiser <martin(a)kaiser.cx>
selftests/ftrace: refactor eprobes test to fix argument checks
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations
Qingshuang Fu <fuqingshuang(a)kylinos.cn>
hwmon: (nzxt-smart2) Check return value of init_device() in probe
Marcin Bernatowicz <marcin.bernatowicz(a)linux.intel.com>
drm/xe/uc: Apply RCS/CCS yield policy to SR-IOV VFs
Michał Winiarski <michal.winiarski(a)intel.com>
drm/xe: Fix memory leak in exec_queue_set_hang_replay_state()
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
net/openvswitch: check Ethernet header length in key_extract()
Jia Jia <physicalmtea(a)gmail.com>
vhost-scsi: reject feature changes after endpoint
Linfeng Sun <slf(a)hdu.edu.cn>
vhost-scsi: Validate T10 PI scatterlist counts
Toke Høiland-Jørgensen <toke(a)toke.dk>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
udp: fix potential use-after-free in tunnel segmentation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
bnge: Fix NULL pointer dereference in aux device release
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: validate metadata when processing requests
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: move xsk_tx_metadata_request() to xdp_sock_drv.h
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: validate launch-time metadata size
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: clear metadata pointer when no timestamp is requested
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: pass TX metadata pointer by reference
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: require at least 16 bytes of TX metadata
Will Chen <will.chen.tty(a)gmail.com>
bnxt: fix memory leak in bnxt_queue_mem_alloc error cases
Nathan Gao <zcgao(a)amazon.com>
tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus) Fix type confusion in notification logic
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus/core) Avoid race condition during probe
Christian Borntraeger <borntraeger(a)linux.ibm.com>
vdpa/mlx5: Fix buffer length in create_direct_keys()
Yousef Alhouseen <alhouseenyousef(a)gmail.com>
vhost/vdpa: reject overflowing PA map page counts on 32-bit
Linfeng Sun <linfeng.sun.dev(a)gamil.com>
vhost_iotlb: bound map allocation in add_range
Rong Zhang <i(a)rong.moe>
ALSA: usb-audio: Add QUIRK_FLAG_MIXER_GET_CUR_BROKEN for Logitech PRO X 2 LIGHTSPEED
Rong Zhang <i(a)rong.moe>
ALSA: usb-audio: Add QUIRK_FLAG_MIXER_GET_CUR_BROKEN
Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev>
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()
Babanpreet Singh <bbnpreetsingh(a)gmail.com>
counter: microchip-tcb-capture: Fix DT channel validation
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf: Fix netns reference imbalance in conntrack kfuncs
Lizhi Hou <lizhi.hou(a)amd.com>
accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()
Michael Guralnik <michaelgur(a)nvidia.com>
net/mlx5: fw_tracer, return NULL on create error
Or Har-Toov <ohartoov(a)nvidia.com>
devlink: fix net namespace reference leak in reload
Jiawen Liu <1298662399(a)qq.com>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_route: fix fastmap use-after-free on filter
Mahanta Jambigi <mjambigi(a)linux.ibm.com>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn>
bpf: Propagate untrusted pointer state in commuted arithmetic
Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn>
bpf: Preserve pointer state for commuted arithmetic
Lizhi Hou <lizhi.hou(a)amd.com>
accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()
Qu Wenruo <wqu(a)suse.com>
btrfs: initialize inode mapping flags for cached inodes
Dmitry Antipov <dmantipov(a)yandex.ru>
btrfs: fix memory leak in btrfs_do_encoded_write()
David Lee <david.lee(a)trailofbits.com>
btrfs: lzo: reject inline extents without valid headers
Qu Wenruo <wqu(a)suse.com>
btrfs: lzo: add error message for invalid headers
Matti Vaittinen <mazziesaccount(a)gmail.com>
watchdog: bd96801_wdt: Fix timeout for enabled WDG
Julian Anastasov <ja(a)ssi.bg>
ipvs: return the csum validation for forward hook
Julian Anastasov <ja(a)ssi.bg>
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
Jozsef Kadlecsik <kadlec(a)netfilter.org>
netfilter: ipset: switch ext_size to atomic64_t
Nikhil P. Rao <nikhil.rao(a)amd.com>
pds_core: cancel pending PCI reset work on AER recovery
Nikhil P. Rao <nikhil.rao(a)amd.com>
pds_core: keep the health thread stopped during reset
Shay Drory <shayd(a)nvidia.com>
net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock
Satish Kharat <satishkh(a)cisco.com>
enic: fix tx_hang_reset use-after-free on device removal
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
Fan Ye <fy15309206903(a)gmail.com>
Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"
Jijie Shao <shaojijie(a)huawei.com>
net: hns3: fix speed configuration residue after driver reload
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
drm/bridge: ps8640: propagate AUX transfer register errors
Qingfang Deng <qingfang.deng(a)linux.dev>
ovpn: fix incorrect use of rcu_access_pointer()
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: ensure TCP vars are initialized first
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: disable IPv4 redirects on MP interfaces
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: hash floated peer by transport identity only
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: zero-initialize sockaddr before learning a floated endpoint
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: ensure socket is owned by ovpn before deref sk_user_data
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: rehash peer in by_transp_addr table on CMD_PEER_SET
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: skip rehash for peers already removed from by_id
Rosen Penev <rosenp(a)gmail.com>
ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt
Ralf Lici <ralf(a)mandelbit.com>
ovpn: add missing rtnl_link_ops->get_size callback
Hans Ulli Kroll <linux(a)ulli-kroll.de>
pinctrl: qcom: ipq806x: mark pci reset as a GPIO pin function
Hans Ulli Kroll <linux(a)ulli-kroll.de>
pinctrl: qcom: ipq806x: mark gpio as a GPIO pin function
Kuba Piecuch <jpiecuch(a)google.com>
selftests/sched_ext: Handle sleeping task affinity changes in numa test
Yuho Choi <dbgh9129(a)gmail.com>
ARM: npcm: Fix OF node refcount leaks in SMP setup
Yun Zhou <yun.zhou(a)windriver.com>
xfs: handle NULL b_addr in xfs_buf_free
Karthikeyan KS <karthiproffesional(a)gmail.com>
soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read
Daniel Drake <dan(a)reactivated.net>
arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer
Anna Schumaker <anna.schumaker(a)hammerspace.com>
NFS: Decrement refcounts if allocating nfs_free_stateid_data fails
Anna Schumaker <anna.schumaker(a)hammerspace.com>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
Tejun Heo <tj(a)kernel.org>
sched_ext: Don't enable non-ext tasks in the sub-sched task loops
Tejun Heo <tj(a)kernel.org>
sched_ext: Skip sub-disable teardown for never-linked sub-schedulers
Tejun Heo <tj(a)kernel.org>
sched_ext: Reject setting disallow from init_task outside the enable path
Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com>
arm64: dts: qcom: sdm850-lenovo-yoga-c630: lower PSCI cluster idle
Alexander Koskovich <akoskovich(a)pm.me>
arm64: dts: qcom: sm8650: Fix IPA IMEM slice
Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com>
arm64: dts: qcom: monaco: Add default GIC address cells
Akhil P Oommen <akhilpo(a)oss.qualcomm.com>
arm64: dts: qcom: purwa: Fix GPU IOMMU property
Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>
arm64: dts: qcom: glymur: fix QUP serial engine IRQs
Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>
arm64: dts: qcom: glymur: fix PCIe SMMU interrupts
Ray Wu <ray.wu(a)amd.com>
drm/amd/display: Check for tg ops in dce110_set_avmute
Ray Wu <ray.wu(a)amd.com>
drm/amd/display: Add AV mute wait frames to dce110_set_avmute
Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz>
gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock
Mykyta Yatsenko <yatsenko(a)meta.com>
selftests/bpf: Add tests for sleepable tracepoint programs
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Fail unbound UDP on sockmap update
Al Viro <viro(a)zeniv.linux.org.uk>
mount: honour SB_NOUSER in the new mount API
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 9 ++
Documentation/hwmon/hwmon-kernel-api.rst | 7 +-
Documentation/sound/alsa-configuration.rst | 12 ++
MAINTAINERS | 5 +
Makefile | 4 +-
arch/arm/boot/dts/broadcom/bcm-ns.dtsi | 2 +-
arch/arm/mach-npcm/platsmp.c | 2 +
arch/arm64/boot/dts/broadcom/bcm2712.dtsi | 2 -
arch/arm64/boot/dts/qcom/glymur.dtsi | 32 ++--
arch/arm64/boot/dts/qcom/monaco.dtsi | 1 +
arch/arm64/boot/dts/qcom/purwa.dtsi | 2 +
.../boot/dts/qcom/sdm850-lenovo-yoga-c630.dts | 4 +
arch/arm64/boot/dts/qcom/sm8650.dtsi | 4 +-
arch/arm64/include/asm/ptdump.h | 2 -
arch/arm64/mm/mmu.c | 43 +-----
arch/arm64/mm/ptdump.c | 11 +-
arch/x86/kernel/cpu/common.c | 10 ++
arch/x86/kernel/cpu/mce/core.c | 2 +-
arch/x86/kvm/mmu/mmu.c | 3 +
arch/x86/kvm/svm/sev.c | 34 ++--
arch/x86/kvm/svm/svm.h | 1 +
drivers/accel/amdxdna/amdxdna_gem.c | 47 +++---
drivers/android/binder/process.rs | 12 +-
drivers/ata/pata_sl82c105.c | 4 +-
drivers/bluetooth/btrtl.c | 13 ++
drivers/bluetooth/btusb.c | 2 +
drivers/counter/microchip-tcb-capture.c | 4 +-
drivers/dibs/dibs_loopback.c | 1 -
drivers/dibs/dibs_main.c | 16 +-
drivers/gpio/gpio-pca953x.c | 19 ++-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 35 +++--
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 6 +-
.../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 24 ++-
drivers/gpu/drm/bridge/parade-ps8640.c | 27 +++-
drivers/gpu/drm/v3d/v3d_drv.h | 6 +
drivers/gpu/drm/v3d/v3d_sched.c | 9 +-
drivers/gpu/drm/xe/xe_exec_queue.c | 3 +
drivers/gpu/drm/xe/xe_uc.c | 7 +-
drivers/hwmon/ads7828.c | 11 +-
drivers/hwmon/corsair-psu.c | 8 +-
drivers/hwmon/ltc4282.c | 20 ++-
drivers/hwmon/nzxt-smart2.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 5 +-
drivers/hwmon/pmbus/pmbus_core.c | 65 +++++---
drivers/input/evdev.c | 27 ++--
drivers/misc/fastrpc.c | 27 ++--
drivers/misc/mei/client.c | 25 +--
drivers/net/bonding/bond_alb.c | 10 +-
drivers/net/ethernet/amd/pds_core/core.h | 1 +
drivers/net/ethernet/amd/pds_core/main.c | 14 +-
drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 51 +++++-
drivers/net/ethernet/aquantia/atlantic/aq_ring.h | 1 +
drivers/net/ethernet/aquantia/atlantic/aq_vec.c | 2 +-
drivers/net/ethernet/broadcom/bnge/bnge_auxr.c | 9 +-
drivers/net/ethernet/broadcom/bnge/bnge_netdev.c | 2 -
drivers/net/ethernet/broadcom/bnge/bnge_resc.c | 3 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 64 +++++---
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 +
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 7 +-
drivers/net/ethernet/cisco/enic/enic_main.c | 5 +-
drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 1 -
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 6 +-
drivers/net/ethernet/intel/igc/igc_main.c | 10 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 6 +-
.../net/ethernet/marvell/prestera/prestera_pci.c | 3 +
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 16 +-
drivers/net/ethernet/mellanox/mlx5/core/en.h | 2 +-
.../net/ethernet/mellanox/mlx5/core/en/tc_priv.h | 1 +
drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 15 +-
drivers/net/ethernet/mellanox/mlx5/core/en/xdp.h | 4 +-
.../net/ethernet/mellanox/mlx5/core/en/xsk/tx.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 4 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 13 +-
drivers/net/ntb_netdev.c | 15 +-
drivers/net/ovpn/main.c | 64 +++++---
drivers/net/ovpn/netlink.c | 6 +
drivers/net/ovpn/peer.c | 172 +++++++++++++++------
drivers/net/ovpn/peer.h | 1 +
drivers/net/ovpn/socket.c | 9 ++
drivers/net/phy/mediatek/mtk.h | 8 +-
drivers/net/tap.c | 24 +--
drivers/net/thunderbolt/main.c | 33 ++--
drivers/net/usb/ax88179_178a.c | 4 +-
drivers/net/usb/ipheth.c | 11 +-
drivers/net/usb/usbnet.c | 3 +-
drivers/net/veth.c | 22 ++-
drivers/net/vxlan/vxlan_core.c | 2 +-
drivers/nvmem/apple-spmi-nvmem.c | 20 ++-
drivers/nvmem/core.c | 24 +--
drivers/nvmem/internals.h | 2 +
drivers/nvmem/layouts.c | 11 --
drivers/nvmem/layouts/Makefile | 1 +
drivers/nvmem/layouts/fixed-layout.c | 58 +++++++
drivers/pinctrl/qcom/pinctrl-ipq8064.c | 8 +-
drivers/pinctrl/qcom/pinctrl-msm.h | 5 +
drivers/ptp/ptp_ocp.c | 4 +-
drivers/s390/net/ism_drv.c | 19 ++-
drivers/scsi/scsi_debug.c | 4 +-
drivers/soc/aspeed/Makefile | 1 +
drivers/soc/aspeed/aspeed-lpc-snoop.c | 38 +++--
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 3 +
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 2 +-
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 +
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 4 +
drivers/thermal/thermal_hwmon.c | 154 ++++++++++++------
drivers/thunderbolt/eeprom.c | 9 +-
drivers/thunderbolt/icm.c | 2 +-
drivers/thunderbolt/tb.c | 2 +-
drivers/tty/serial/8250/8250_dma.c | 12 +-
drivers/tty/serial/8250/8250_of.c | 38 +++++
drivers/tty/serial/amba-pl011.c | 86 +++++++----
drivers/tty/serial/qcom_geni_serial.c | 43 +++---
drivers/tty/serial/sc16is7xx.c | 3 +
drivers/tty/vt/keyboard.c | 5 +-
drivers/tty/vt/vt_ioctl.c | 2 +
drivers/usb/atm/cxacru.c | 2 +
drivers/usb/cdns3/cdnsp-gadget.c | 4 +-
drivers/usb/core/config.c | 32 +++-
drivers/usb/core/quirks.c | 7 +
drivers/usb/gadget/function/f_ncm.c | 2 +-
drivers/usb/host/xhci.h | 12 +-
drivers/usb/misc/usbio.c | 2 +-
drivers/vdpa/mlx5/core/mlx5_vdpa.h | 2 +
drivers/vdpa/mlx5/core/mr.c | 8 +-
drivers/vdpa/mlx5/core/resources.c | 11 +-
drivers/vdpa/vdpa_sim/vdpa_sim.c | 10 +-
drivers/vdpa/vdpa_user/iova_domain.c | 11 +-
drivers/vhost/iotlb.c | 47 ++++--
drivers/vhost/scsi.c | 17 ++
drivers/vhost/vdpa.c | 18 ++-
drivers/vhost/vhost.c | 16 ++
drivers/video/fbdev/core/bitblit.c | 9 +-
drivers/watchdog/at91sam9_wdt.c | 4 +-
drivers/watchdog/bd96801_wdt.c | 5 +-
fs/attr.c | 2 +-
fs/binfmt_misc.c | 3 +-
fs/btrfs/inode.c | 4 +-
fs/btrfs/lzo.c | 16 +-
fs/crypto/policy.c | 2 +-
fs/namespace.c | 4 +
fs/nfs/nfs4proc.c | 17 +-
fs/overlayfs/super.c | 3 +-
fs/smb/client/sess.c | 2 +-
fs/smb/client/smb1transport.c | 28 +++-
fs/tracefs/event_inode.c | 28 +++-
fs/tracefs/internal.h | 4 +-
fs/verity/measure.c | 15 +-
fs/xfs/xfs_buf.c | 2 +-
include/linux/dibs.h | 2 +-
include/linux/hwmon.h | 3 +
include/linux/mmap_lock.h | 1 +
include/linux/netdevice.h | 11 +-
include/linux/netfilter/ipset/ip_set.h | 2 +-
include/linux/nvmem-provider.h | 6 +
include/linux/psi.h | 4 +-
include/linux/sched/ext.h | 10 +-
include/linux/usb/quirks.h | 3 +
include/net/act_api.h | 19 +++
include/net/addrconf.h | 4 +-
include/net/ip_vs.h | 48 +++---
include/net/libeth/xsk.h | 2 +-
include/net/route.h | 2 +
include/net/sch_generic.h | 1 +
include/net/xdp_sock.h | 47 +-----
include/net/xdp_sock_drv.h | 77 +++++++--
include/uapi/linux/ip_vs.h | 6 -
kernel/bpf/rqspinlock.c | 5 +-
kernel/bpf/verifier.c | 29 ++--
kernel/cgroup/cgroup.c | 23 ++-
kernel/events/core.c | 67 ++++----
kernel/futex/core.c | 85 ++++++----
kernel/sched/ext.c | 47 ++++--
kernel/sched/psi.c | 75 +++++++--
kernel/trace/ring_buffer.c | 15 +-
kernel/trace/trace_events.c | 4 +-
mm/damon/lru_sort.c | 2 +
mm/damon/ops-common.c | 13 +-
mm/damon/paddr.c | 2 +
mm/damon/vaddr.c | 3 +-
mm/filemap.c | 6 +
mm/huge_memory.c | 53 ++++---
mm/memory.c | 2 +-
mm/page_table_check.c | 20 ++-
mm/pagewalk.c | 36 +++--
mm/ptdump.c | 7 +
mm/vmalloc.c | 40 +++--
net/atm/common.c | 14 +-
net/bridge/br_mrp.c | 6 +-
net/bridge/netfilter/ebt_nflog.c | 17 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 1 +
net/core/datagram.c | 3 +
net/core/dev.c | 10 +-
net/core/filter.c | 4 +-
net/core/sock.c | 1 -
net/core/xdp.c | 2 +-
net/devlink/dev.c | 1 +
net/ipv4/fib_semantics.c | 101 +++++++-----
net/ipv4/inet_connection_sock.c | 20 ++-
net/ipv4/inet_fragment.c | 10 +-
net/ipv4/route.c | 29 ++++
net/ipv4/tcp_bpf.c | 2 +
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 43 +++---
net/ipv4/udp_offload.c | 4 +-
net/ipv6/ip6_tunnel.c | 3 +
net/ipv6/route.c | 8 +-
net/mac802154/scan.c | 4 +
net/ncsi/ncsi-netlink.c | 4 +
net/netfilter/ipset/ip_set_bitmap_gen.h | 4 +-
net/netfilter/ipset/ip_set_core.c | 6 +-
net/netfilter/ipset/ip_set_hash_gen.h | 2 +-
net/netfilter/ipset/ip_set_list_set.c | 4 +-
net/netfilter/ipvs/ip_vs_conn.c | 45 ++----
net/netfilter/ipvs/ip_vs_core.c | 76 ++++-----
net/netfilter/ipvs/ip_vs_ctl.c | 81 ++++++++--
net/netfilter/ipvs/ip_vs_dh.c | 4 +-
net/netfilter/ipvs/ip_vs_est.c | 10 +-
net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
net/netfilter/ipvs/ip_vs_lblcr.c | 8 +-
net/netfilter/ipvs/ip_vs_lc.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_tcp.c | 2 -
net/netfilter/ipvs/ip_vs_sync.c | 7 +-
net/netfilter/ipvs/ip_vs_xmit.c | 6 +-
net/netfilter/nf_conntrack_bpf.c | 72 ++++++---
net/netfilter/nf_conntrack_proto.c | 6 +
net/netfilter/nf_conntrack_proto_sctp.c | 12 +-
net/netfilter/nf_conntrack_proto_tcp.c | 132 ++++++++++------
net/netfilter/nf_flow_table_ip.c | 3 +
net/openvswitch/datapath.c | 29 +++-
net/openvswitch/flow.c | 11 +-
net/packet/af_packet.c | 72 ++++++---
net/qrtr/ns.c | 2 +-
net/sched/act_ct.c | 29 +++-
net/sched/act_gact.c | 5 +
net/sched/act_police.c | 6 +
net/sched/cls_api.c | 17 +-
net/sched/cls_route.c | 35 +++--
net/sched/sch_api.c | 9 ++
net/sched/sch_cake.c | 1 -
net/sctp/associola.c | 11 +-
net/sctp/outqueue.c | 1 +
net/sctp/sm_make_chunk.c | 3 +-
net/sctp/sm_statefuns.c | 6 +-
net/smc/af_smc.c | 3 +-
net/smc/smc_llc.c | 3 +-
net/smc/smc_rx.c | 19 +--
net/tipc/node.c | 15 +-
net/tls/tls_sw.c | 18 ++-
net/vmw_vsock/virtio_transport.c | 14 +-
net/x25/af_x25.c | 4 +-
net/x25/x25_timer.c | 25 +--
net/xdp/xdp_umem.c | 2 +
net/xdp/xsk.c | 11 +-
net/xdp/xsk_buff_pool.c | 6 +-
samples/damon/mtier.c | 3 +
security/integrity/ima/ima_appraise.c | 9 +-
security/integrity/ima/ima_main.c | 39 +++++
sound/hda/codecs/side-codecs/tas2781_hda_spi.c | 3 +-
sound/usb/endpoint.c | 6 +-
sound/usb/fcp.c | 10 +-
sound/usb/midi2.c | 9 ++
sound/usb/mixer.c | 60 +++++--
sound/usb/mixer.h | 1 +
sound/usb/quirks.c | 7 +
sound/usb/usbaudio.h | 13 ++
sound/usb/usx2y/us144mkii_capture.c | 1 +
sound/usb/usx2y/usX2Yhwdep.c | 2 +
sound/usb/usx2y/usx2yhwdeppcm.c | 2 +
.../selftests/bpf/prog_tests/sockmap_basic.c | 6 +-
.../selftests/bpf/prog_tests/sockmap_listen.c | 21 +--
tools/testing/selftests/bpf/prog_tests/test_xsk.c | 50 +++---
tools/testing/selftests/bpf/test_maps.c | 13 +-
tools/testing/selftests/bpf/verifier/sleepable.c | 17 +-
.../ftrace/test.d/dynevent/add_remove_eprobe.tc | 16 +-
tools/testing/selftests/net/tls.c | 57 +++++++
tools/testing/selftests/sched_ext/numa.bpf.c | 13 +-
279 files changed, 3087 insertions(+), 1355 deletions(-)
5 days, 11 hours
- 15
- 14
[PATCH 6.12 000/181] 6.12.104-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.12.104 release.
There are 181 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.104-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.12.104-rc1
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
bpf: tcp: fix double sock release on batch realloc
Xu Rao <raoxu(a)uniontech.com>
thunderbolt: Fix bandwidth group reservation indexing
Bryam Vargas <hexlabsecurity(a)proton.me>
thunderbolt: Bound the DROM dual link port number before indexing sw->ports
Qing Ming <a0yami(a)mailbox.org>
sctp: clear new_transport when removing a peer
Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn>
sctp: fix use-after-free of cached ASCONF chunk
Baul Lee <baul.lee(a)xbow.com>
sctp: keep chunk->transport in step with the list it is queued on
Xu Rao <raoxu(a)uniontech.com>
scsi: scsi_debug: Negate wrapped memcmp() result
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf, sockmap: Fix sk_redir use-after-free in send verdict
Eric Biggers <ebiggers(a)kernel.org>
fsverity: Fix silent truncation in bpf_get_fsverity_digest()
Eric Biggers <ebiggers(a)kernel.org>
fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
Mimi Zohar <zohar(a)linux.ibm.com>
ima: Instantiate file_truncate and path_truncate hooks
Tejun Heo <tj(a)kernel.org>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
Zhan Xusheng <zhanxusheng(a)xiaomi.com>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
Zhiling Zou <zhilinz(a)nebusec.ai>
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
Yuejie Shi <syjcnss(a)gmail.com>
ipv6: fix Route Information option length validation
Tengda Wu <wutengda(a)huaweicloud.com>
ring-buffer: Use current_context for safe per-CPU buffer swap
Ahmad Byagowi <ahmadexp(a)gmail.com>
ptp: ocp: Fix board ID over-read
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
Steven Rostedt <rostedt(a)goodmis.org>
eventfs: Use children field for rcu head and add memory barriers
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
eventfs: Fix use-after-free in eventfs_remove_rec()
Sean Christopherson <seanjc(a)google.com>
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
smb: client: Fix use-after-free in cifs_try_adding_channels()
Jun Yang <junvyyang(a)tencent.com>
tipc: read le->link under the node lock in tipc_node_link_down()
chanyoung <ppoo1220(a)gmail.com>
tls: don't leave a full plaintext sk_msg ring unpushed
Jun Yang <junvyyang(a)tencent.com>
vhost: reset the vring metadata cache on vring reconfiguration
Sun Jian <sun.jian.kdev(a)gmail.com>
veth: fix skb length accounting after XDP frag adjustment
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: avoid refilling the RX queue after teardown
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: read virtqueues under worker locks
Baul Lee <baul.lee(a)xbow.com>
vxlan: do not arm the ageing timer on a device that is down
Zhiling Zou <zhilinz(a)nebusec.ai>
xdp: reject clones that overrun skb_shared_info tailroom
Asad Kamal <asad.kamal(a)amd.com>
Revert "drm/amdgpu: fix aperture mapping leak"
Christian Brauner <brauner(a)kernel.org>
binfmt_misc: don't warn when the mount is completed from another user namespace
Christian Brauner <brauner(a)kernel.org>
ovl: don't warn when the mount is completed from another user namespace
Hyunjung Ko <hj351016(a)gmail.com>
net/sched: act_gact, act_police: range check the fallback control action
Hyunjung Ko <hj351016(a)gmail.com>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free RX pages of consumed but not refilled buffers
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free stranded TX buffers on ring deinit
Zihan Xi <zihanx(a)nebusec.ai>
netfilter: nf_conntrack: defer invalid log until after unlock
Zhiling Zou <zhilinz(a)nebusec.ai>
netfilter: bridge: release template ct on non-IP path
Kyle Zeng <kylebot(a)openai.com>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev
Daming Li <d4n.for.sec(a)gmail.com>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice
Lorenzo Stoakes (ARM) <ljs(a)kernel.org>
mm/huge_memory: fix huge_zero_pfn race
Vincent Donnefort <vdonnefort(a)google.com>
ring-buffer: Prevent subbuf order change when resizing is disabled
Rik van Riel <riel(a)surriel.com>
fbdev: bitblit: bound-check glyph index in bit_cursor()
Michael Wu <michael(a)allwinnertech.com>
tracing: Fix race between update_event_fields and, event_define_fields
Baul Lee <baul.lee(a)xbow.com>
ALSA: usx2y: bound the hwdep mmap fault offset
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
Hui Su <sh_def(a)163.com>
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
Eddie Lin <eddie.lin(a)oss.qualcomm.com>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free
Junrui Luo <moonafterrain(a)outlook.com>
misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
Ekansh Gupta <ekansh.gupta(a)oss.qualcomm.com>
misc: fastrpc: Remove buffer from list prior to unmap operation
Anandu Krishnan E <anandu.e(a)oss.qualcomm.com>
misc: fastrpc: fix channel ctx ref leak when session alloc fails
Mariano Baragiola <mbaragiola(a)linux.com>
staging: rtl8723bs: validate monitor transmit frame lengths
Panagiotis Petrakopoulos <npetrakopoulos2003(a)gmail.com>
staging: rtl8723bs: fix missing shared-key auth challenge length check
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in WMM_param_handler()
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
Cunhao Lu <1579567540(a)qq.com>
serial: 8250_dma: Clear stale RX state on shutdown
Jan Sebastian Götte <linux(a)jaseg.de>
serial: qcom-geni: fix TX DMA buffer flush
Mathieu Dubois-Briand <mathieu.dubois-briand(a)bootlin.com>
nvmem: layouts: Add fixed-layout driver
Alexander Usyskin <alexander.usyskin(a)intel.com>
mei: pull kvfree out of spinlock
Chengfeng Ye <nicoyip.dev(a)gmail.com>
ipv4: fix use-after-free in fib_nhc_update_mtu()
Zihan Xi <zihanx(a)nebusec.ai>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Adapt sockmap update error handling
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Ensure UDP sockets are bound
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP
Kees Cook <kees(a)kernel.org>
kunit/fortify: Add back "volatile" for sizeof() constants
Kees Cook <kees(a)kernel.org>
kunit/fortify: Replace "volatile" with OPTIMIZER_HIDE_VAR()
Keno Fischer <keno(a)juliacomputing.com>
futex: Prevent robust futex exit race some more
Ashish Kalra <ashish.kalra(a)amd.com>
crypto: ccp - Abort doing SEV INIT if SNP INIT fails
Michael Roth <michael.roth(a)amd.com>
crypto: ccp - Fix checks for SNP_VLEK_LOAD input buffer length
Ashish Kalra <ashish.kalra(a)amd.com>
KVM: SVM: Add support to initialize SEV/SNP functionality in KVM
Ashish Kalra <ashish.kalra(a)amd.com>
crypto: ccp - Add new SEV/SNP platform shutdown API
Harshal Dev <harshal.dev(a)oss.qualcomm.com>
dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk
Keith Busch <kbusch(a)kernel.org>
blk-mq: reinsert cached request to the list
Keith Busch <kbusch(a)kernel.org>
blk-mq: pop cached request if it is usable
Bart Van Assche <bvanassche(a)acm.org>
block: Reorder the request allocation code in blk_mq_submit_bio()
Matthew Rosato <mjrosato(a)linux.ibm.com>
KVM: s390: pci: Fix aisb calculation
Farhan Ali <alifm(a)linux.ibm.com>
KVM: s390: pci: Fix resource leak on IRQ registration failure
Farhan Ali <alifm(a)linux.ibm.com>
KVM: s390: pci: Fix missing error codes and memory unaccounting
Farhan Ali <alifm(a)linux.ibm.com>
KVM: s390: pci: Fix memory accounting for pinned/unpinned pages
Baul Lee <baul.lee(a)xbow.com>
net: bridge: mrp: fix uninitialised bytes on the wire
Chengfeng Ye <nicoyip.dev(a)gmail.com>
netfilter: ebt_nflog: pin the NFLOG backend
Zihan Xi <zihanx(a)nebusec.ai>
mac802154: fix netdev use-after-free in beacon worker
Qihang Tang <q.h.hack.winter(a)gmail.com>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
Sergey V. Frolov <Sergey.V.Frolov(a)kaspersky.com>
net: octeontx2-pf: Fix UB in shift operation
Zijie Huang <milkory(a)outlook.com>
net/sched: reject overly deep qdisc hierarchies
Zhiling Zou <zhilinz(a)nebusec.ai>
net: openvswitch: reallocate update replies for mismatched IDs
Sun Jian <sun.jian.kdev(a)gmail.com>
net: fix skb length accounting after generic XDP frag adjustment
Zihan Xi <zihanx(a)nebusec.ai>
packet: synchronize pressure clearing with ring reconfiguration
Doruk Tan Ozturk <doruk(a)0sec.ai>
net/packet: reset the MAC header on the packet-socket transmit path
Qihang Tang <q.h.hack.winter(a)gmail.com>
packet: use consistent hard_header_len in TX_RING send path
Qihang Tang <q.h.hack.winter(a)gmail.com>
packet: use consistent hard_header_len in non-ring send paths
Kyle Zeng <kylebot(a)openai.com>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
Julian Anastasov <ja(a)ssi.bg>
ipvs: properly update the overload flag on dest edit
Julian Anastasov <ja(a)ssi.bg>
ipvs: add totalconns for dest
Zhiling Zou <zhilinz(a)nebusec.ai>
ipvs: stop estimator after disabled calc phase
Lincoln Wallace <locnnil0(a)gmail.com>
ima: fix out-of-bounds read in xattr_verify()
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - fix information leak in evdev_pass_values()
Joshua Rogers <linux(a)joshua.hu>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
Joshua Rogers <linux(a)joshua.hu>
vt: add permission check for KDSKBMETA ioctl
Doruk Tan Ozturk <doruk(a)0sec.ai>
net: usb: ipheth: fix carrier_work UAF on disconnect
Yi Cong <yicong(a)kylinos.cn>
net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()
Sonali Pradhan <sonalipradhan(a)google.com>
usb: gadget: f_ncm: Use unsigned int for ndp_index
Pawel Laszczak <pawell(a)cadence.com>
usb: cdnsp: fix incorrect endian conversions for APB timeout register
Xu Rao <raoxu(a)uniontech.com>
thunderbolt: icm: Preserve USB4 proxy data-valid bit
Aleksandr Nogikh <nogikh(a)google.com>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
Baul Lee <baul.lee(a)xbow.com>
ALSA: usb-audio: fix OOB write on Type II inbound URBs
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - sanitize event type index when fetching event masks
Guillaume Morin <guillaume(a)morinfr.org>
swapfile: call cond_resched() before locking si->lock
Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu>
mtd: spinand: repeat reading in regular mode if continuous reading fails
Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu>
mtd: spinand: try a regular dirmap if creating a dirmap for continuous reading fails
Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu>
mtd: spinand: fix direct mapping creation sizes
Larisa Grigore <larisa.grigore(a)nxp.com>
spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers
Mehmet Fide <mehmet.fide(a)screeningeagle.com>
net: fec: do not release NULL pages when RX buffer allocation fails
Zeng Jingxiang <linuszeng(a)tencent.com>
mm/vmscan: wake up flushers conditionally to avoid cgroup OOM
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (ltc4282) Clamp negative current limits
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (ltc4282) Avoid overflow in maximum power calculation
Qingshuang Fu <fuqingshuang(a)kylinos.cn>
hwmon: (ads7828) Fix external VREF regulator handling
Wilken Gottwalt <wilken.gottwalt(a)posteo.net>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination
Maximilian Immanuel Brandtner <maxbr(a)linux.ibm.com>
tls: don't abort the connection on signal-interrupted sends
Xin Long <lucien.xin(a)gmail.com>
sctp: clear control chunk transport if it is being removed
Eric Dumazet <edumazet(a)google.com>
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
Hongyan Xu <getshell(a)seu.edu.cn>
ata: pata_sl82c105: fix bridge revision use-after-free
Fan XinRan <shinjiangjiang(a)gmail.com>
net: thunderbolt: Tear down DMA paths before stopping the rings
Sidraya Jayagond <sidraya(a)linux.ibm.com>
net/smc: fix TOCTOU race between smc_listen_out() and listener close
Eric Dumazet <edumazet(a)google.com>
net: remove WARN_ON_ONCE() from sk_mc_loop()
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
net: prestera: validate firmware header length
Henry Martin <bsdhenrymartin(a)gmail.com>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: fix TFO max_qlen accounting across reuseport migration
Qing Luo <luoqing(a)kylinos.cn>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure
Keegan Freyhof <keegan.freyhof(a)broadcom.com>
bnxt_en: Fix PTP PPS setting bug
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Refresh VNIC default ring on queue restart if needed
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Determine and store default RX ring in vnic structure
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()
Martin Kaiser <martin(a)kaiser.cx>
selftests/ftrace: refactor eprobes test to fix argument checks
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations
Qingshuang Fu <fuqingshuang(a)kylinos.cn>
hwmon: (nzxt-smart2) Check return value of init_device() in probe
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
net/openvswitch: check Ethernet header length in key_extract()
Toke Høiland-Jørgensen <toke(a)toke.dk>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
udp: fix potential use-after-free in tunnel segmentation
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: require at least 16 bytes of TX metadata
Nathan Gao <zcgao(a)amazon.com>
tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()
Christian Borntraeger <borntraeger(a)linux.ibm.com>
vdpa/mlx5: Fix buffer length in create_direct_keys()
Yousef Alhouseen <alhouseenyousef(a)gmail.com>
vhost/vdpa: reject overflowing PA map page counts on 32-bit
Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev>
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Avoid socket skips and repeats during iteration
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Get rid of st_bucket_done
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Make sure iter->batch always contains a full bucket snapshot
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch
Babanpreet Singh <bbnpreetsingh(a)gmail.com>
counter: microchip-tcb-capture: Fix DT channel validation
Michael Guralnik <michaelgur(a)nvidia.com>
net/mlx5: fw_tracer, return NULL on create error
Or Har-Toov <ohartoov(a)nvidia.com>
devlink: fix net namespace reference leak in reload
Jiawen Liu <1298662399(a)qq.com>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_route: fix fastmap use-after-free on filter
Mahanta Jambigi <mjambigi(a)linux.ibm.com>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn>
bpf: Preserve pointer state for commuted arithmetic
Dmitry Antipov <dmantipov(a)yandex.ru>
btrfs: fix memory leak in btrfs_do_encoded_write()
Matti Vaittinen <mazziesaccount(a)gmail.com>
watchdog: bd96801_wdt: Fix timeout for enabled WDG
Julian Anastasov <ja(a)ssi.bg>
ipvs: return the csum validation for forward hook
Julian Anastasov <ja(a)ssi.bg>
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
Jozsef Kadlecsik <kadlec(a)netfilter.org>
netfilter: ipset: switch ext_size to atomic64_t
Nikhil P. Rao <nikhil.rao(a)amd.com>
pds_core: cancel pending PCI reset work on AER recovery
Nikhil P. Rao <nikhil.rao(a)amd.com>
pds_core: keep the health thread stopped during reset
Shay Drory <shayd(a)nvidia.com>
net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock
Satish Kharat <satishkh(a)cisco.com>
enic: fix tx_hang_reset use-after-free on device removal
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
Fan Ye <fy15309206903(a)gmail.com>
Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"
Jijie Shao <shaojijie(a)huawei.com>
net: hns3: fix speed configuration residue after driver reload
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
drm/bridge: ps8640: propagate AUX transfer register errors
Rosen Penev <rosenp(a)gmail.com>
ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt
Yuho Choi <dbgh9129(a)gmail.com>
ARM: npcm: Fix OF node refcount leaks in SMP setup
Daniel Drake <dan(a)reactivated.net>
arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer
Anna Schumaker <anna.schumaker(a)hammerspace.com>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
Harald Freudenberger <freude(a)linux.ibm.com>
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
Ray Wu <ray.wu(a)amd.com>
drm/amd/display: Check for tg ops in dce110_set_avmute
Ray Wu <ray.wu(a)amd.com>
drm/amd/display: Add AV mute wait frames to dce110_set_avmute
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Fail unbound UDP on sockmap update
Al Viro <viro(a)zeniv.linux.org.uk>
mount: honour SB_NOUSER in the new mount API
-------------
Diffstat:
.../bindings/crypto/qcom,inline-crypto-engine.yaml | 16 +-
MAINTAINERS | 5 +
Makefile | 4 +-
arch/arm/boot/dts/broadcom/bcm-ns.dtsi | 2 +-
arch/arm/mach-npcm/platsmp.c | 2 +
arch/arm64/boot/dts/broadcom/bcm2712.dtsi | 2 -
arch/s390/kvm/pci.c | 86 ++++--
arch/s390/kvm/pci.h | 2 +
arch/x86/kvm/mmu/mmu.c | 3 +
arch/x86/kvm/svm/sev.c | 12 +
block/blk-mq.c | 38 +--
drivers/ata/pata_sl82c105.c | 4 +-
drivers/counter/microchip-tcb-capture.c | 4 +-
drivers/crypto/ccp/sev-dev.c | 17 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 35 +--
.../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 24 +-
drivers/gpu/drm/bridge/parade-ps8640.c | 27 +-
drivers/hwmon/ads7828.c | 11 +-
drivers/hwmon/corsair-psu.c | 4 +-
drivers/hwmon/ltc4282.c | 20 +-
drivers/hwmon/nzxt-smart2.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 5 +-
drivers/input/evdev.c | 27 +-
drivers/misc/fastrpc.c | 19 +-
drivers/misc/mei/client.c | 25 +-
drivers/mtd/nand/spi/core.c | 74 ++++--
drivers/net/bonding/bond_alb.c | 10 +-
drivers/net/ethernet/amd/pds_core/core.h | 1 +
drivers/net/ethernet/amd/pds_core/main.c | 14 +-
drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 51 +++-
drivers/net/ethernet/aquantia/atlantic/aq_ring.h | 1 +
drivers/net/ethernet/aquantia/atlantic/aq_vec.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 50 ++--
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 +
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 7 +-
drivers/net/ethernet/cisco/enic/enic_main.c | 5 +-
drivers/net/ethernet/freescale/fec_main.c | 11 +-
drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 1 -
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 6 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 6 +-
.../net/ethernet/marvell/prestera/prestera_pci.c | 3 +
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 16 +-
.../net/ethernet/mellanox/mlx5/core/en/tc_priv.h | 1 +
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 4 +-
drivers/net/thunderbolt/main.c | 33 ++-
drivers/net/usb/ax88179_178a.c | 4 +-
drivers/net/usb/ipheth.c | 11 +-
drivers/net/veth.c | 22 +-
drivers/net/vxlan/vxlan_core.c | 2 +-
drivers/nvmem/core.c | 24 +-
drivers/nvmem/internals.h | 2 +
drivers/nvmem/layouts.c | 11 -
drivers/nvmem/layouts/Makefile | 1 +
drivers/nvmem/layouts/fixed-layout.c | 58 ++++
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 4 +-
drivers/ptp/ptp_ocp.c | 4 +-
drivers/s390/crypto/zcrypt_ccamisc.c | 20 +-
drivers/scsi/scsi_debug.c | 4 +-
drivers/spi/spi-fsl-dspi.c | 13 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 3 +
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 2 +-
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 +
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 4 +
drivers/thermal/thermal_hwmon.c | 3 +-
drivers/thunderbolt/eeprom.c | 9 +-
drivers/thunderbolt/icm.c | 2 +-
drivers/thunderbolt/tb.c | 2 +-
drivers/tty/serial/8250/8250_dma.c | 12 +-
drivers/tty/serial/qcom_geni_serial.c | 43 +--
drivers/tty/vt/keyboard.c | 5 +-
drivers/tty/vt/vt_ioctl.c | 2 +
drivers/usb/atm/cxacru.c | 2 +
drivers/usb/cdns3/cdnsp-gadget.c | 4 +-
drivers/usb/gadget/function/f_ncm.c | 2 +-
drivers/vdpa/mlx5/core/mr.c | 3 +-
drivers/vhost/vdpa.c | 9 +-
drivers/vhost/vhost.c | 8 +
drivers/video/fbdev/core/bitblit.c | 9 +-
drivers/watchdog/bd96801_wdt.c | 5 +-
fs/binfmt_misc.c | 3 +-
fs/btrfs/inode.c | 1 +
fs/crypto/policy.c | 2 +-
fs/namespace.c | 5 +
fs/nfs/nfs4proc.c | 5 +
fs/overlayfs/super.c | 3 +-
fs/smb/client/sess.c | 2 +-
fs/tracefs/event_inode.c | 28 +-
fs/tracefs/internal.h | 4 +-
fs/verity/measure.c | 15 +-
include/linux/netdevice.h | 11 +-
include/linux/netfilter/ipset/ip_set.h | 2 +-
include/linux/nvmem-provider.h | 6 +
include/linux/psp-sev.h | 3 +
include/net/act_api.h | 19 ++
include/net/addrconf.h | 4 +-
include/net/ip_vs.h | 41 +--
include/net/route.h | 2 +
include/net/sch_generic.h | 1 +
kernel/bpf/verifier.c | 15 +-
kernel/futex/core.c | 85 ++++--
kernel/sched/psi.c | 6 +
kernel/trace/ring_buffer.c | 12 +-
kernel/trace/trace_events.c | 2 +
lib/fortify_kunit.c | 139 +++++-----
mm/huge_memory.c | 49 ++--
mm/swapfile.c | 2 +-
mm/vmscan.c | 25 +-
net/atm/common.c | 14 +-
net/bridge/br_mrp.c | 6 +-
net/bridge/netfilter/ebt_nflog.c | 17 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 1 +
net/core/dev.c | 10 +-
net/core/sock.c | 1 -
net/core/xdp.c | 2 +-
net/devlink/dev.c | 1 +
net/ipv4/fib_semantics.c | 101 ++++---
net/ipv4/inet_connection_sock.c | 20 +-
net/ipv4/route.c | 29 ++
net/ipv4/tcp_bpf.c | 2 +
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 293 +++++++++++++++------
net/ipv4/udp_offload.c | 4 +-
net/ipv6/ip6_tunnel.c | 3 +
net/ipv6/route.c | 8 +-
net/mac802154/scan.c | 4 +
net/ncsi/ncsi-netlink.c | 4 +
net/netfilter/ipset/ip_set_bitmap_gen.h | 4 +-
net/netfilter/ipset/ip_set_core.c | 6 +-
net/netfilter/ipset/ip_set_hash_gen.h | 2 +-
net/netfilter/ipset/ip_set_list_set.c | 4 +-
net/netfilter/ipvs/ip_vs_conn.c | 41 +--
net/netfilter/ipvs/ip_vs_core.c | 70 ++---
net/netfilter/ipvs/ip_vs_ctl.c | 77 +++++-
net/netfilter/ipvs/ip_vs_est.c | 10 +-
net/netfilter/ipvs/ip_vs_lc.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_tcp.c | 2 -
net/netfilter/ipvs/ip_vs_sync.c | 7 +-
net/netfilter/ipvs/ip_vs_xmit.c | 2 +-
net/netfilter/nf_conntrack_proto.c | 6 +
net/netfilter/nf_conntrack_proto_sctp.c | 12 +-
net/netfilter/nf_conntrack_proto_tcp.c | 132 ++++++----
net/openvswitch/datapath.c | 29 +-
net/openvswitch/flow.c | 11 +-
net/packet/af_packet.c | 72 +++--
net/sched/act_ct.c | 29 +-
net/sched/act_gact.c | 5 +
net/sched/act_police.c | 6 +
net/sched/cls_api.c | 17 +-
net/sched/cls_route.c | 35 ++-
net/sched/sch_api.c | 9 +
net/sched/sch_cake.c | 1 -
net/sctp/associola.c | 11 +-
net/sctp/outqueue.c | 1 +
net/sctp/sm_make_chunk.c | 3 +-
net/sctp/sm_statefuns.c | 6 +-
net/smc/af_smc.c | 3 +-
net/smc/smc_llc.c | 3 +-
net/smc/smc_rx.c | 19 +-
net/tipc/node.c | 15 +-
net/tls/tls_sw.c | 16 +-
net/vmw_vsock/virtio_transport.c | 14 +-
net/xdp/xdp_umem.c | 2 +
security/integrity/ima/ima_appraise.c | 9 +-
security/integrity/ima/ima_main.c | 39 +++
sound/usb/endpoint.c | 6 +-
sound/usb/midi2.c | 9 +
sound/usb/usx2y/usX2Yhwdep.c | 2 +
sound/usb/usx2y/usx2yhwdeppcm.c | 2 +
.../selftests/bpf/prog_tests/sockmap_basic.c | 6 +-
.../selftests/bpf/prog_tests/sockmap_listen.c | 21 +-
tools/testing/selftests/bpf/test_maps.c | 13 +-
.../ftrace/test.d/dynevent/add_remove_eprobe.tc | 16 +-
174 files changed, 1957 insertions(+), 881 deletions(-)
5 days, 14 hours
- 11
- 10
[PATCH 6.18 000/250] 6.18.45-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.18.45 release.
There are 250 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.45-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.18.45-rc1
Pablo Neira Ayuso <pablo(a)netfilter.org>
netfilter: flowtable: ensure sufficient headroom in xmit path
Lorenzo Bianconi <lorenzo(a)kernel.org>
netfilter: always set route tuple out ifindex
Xu Rao <raoxu(a)uniontech.com>
thunderbolt: Fix bandwidth group reservation indexing
Bryam Vargas <hexlabsecurity(a)proton.me>
thunderbolt: Bound the DROM dual link port number before indexing sw->ports
Qing Ming <a0yami(a)mailbox.org>
sctp: clear new_transport when removing a peer
Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn>
sctp: fix use-after-free of cached ASCONF chunk
Baul Lee <baul.lee(a)xbow.com>
sctp: keep chunk->transport in step with the list it is queued on
Xu Rao <raoxu(a)uniontech.com>
scsi: scsi_debug: Negate wrapped memcmp() result
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf, sockmap: Fix sk_redir use-after-free in send verdict
Eric Biggers <ebiggers(a)kernel.org>
fsverity: Fix silent truncation in bpf_get_fsverity_digest()
Eric Biggers <ebiggers(a)kernel.org>
fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
Hugh Dickins <hughd(a)google.com>
mm/filemap: __filemap_add_folio() restore index before retrying
Mimi Zohar <zohar(a)linux.ibm.com>
ima: Instantiate file_truncate and path_truncate hooks
Tejun Heo <tj(a)kernel.org>
sched/psi: Create the psimon kthread outside of cgroup_mutex
Tejun Heo <tj(a)kernel.org>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
Zhan Xusheng <zhanxusheng(a)xiaomi.com>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
Zhiling Zou <zhilinz(a)nebusec.ai>
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
Yuejie Shi <syjcnss(a)gmail.com>
ipv6: fix Route Information option length validation
Lorenzo Stoakes (ARM) <ljs(a)kernel.org>
mm/ptdump: always stabilise against page table freeing using init_mm
Tengda Wu <wutengda(a)huaweicloud.com>
ring-buffer: Use current_context for safe per-CPU buffer swap
Vincent Donnefort <vdonnefort(a)google.com>
ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
Ahmad Byagowi <ahmadexp(a)gmail.com>
ptp: ocp: Fix board ID over-read
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
Steven Rostedt <rostedt(a)goodmis.org>
eventfs: Use children field for rcu head and add memory barriers
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
eventfs: Fix use-after-free in eventfs_remove_rec()
Sean Christopherson <seanjc(a)google.com>
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page
Paolo Bonzini <pbonzini(a)redhat.com>
KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
smb: client: Fix use-after-free in cifs_try_adding_channels()
Jun Yang <junvyyang(a)tencent.com>
tipc: read le->link under the node lock in tipc_node_link_down()
chanyoung <ppoo1220(a)gmail.com>
tls: don't leave a full plaintext sk_msg ring unpushed
Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr>
tls: rx: restore msg_iter before TLS 1.3 optimistic retry
Jun Yang <junvyyang(a)tencent.com>
vhost: reset the vring metadata cache on vring reconfiguration
Sun Jian <sun.jian.kdev(a)gmail.com>
veth: fix skb length accounting after XDP frag adjustment
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: avoid refilling the RX queue after teardown
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: read virtqueues under worker locks
Baul Lee <baul.lee(a)xbow.com>
vxlan: do not arm the ageing timer on a device that is down
Zhiling Zou <zhilinz(a)nebusec.ai>
xdp: reject clones that overrun skb_shared_info tailroom
Breno Leitao <leitao(a)debian.org>
x86/mce: Set up the polling timer before CMCI discovery
Rik van Riel <riel(a)surriel.com>
x86/CPU: Add a tlbi= cmdline switch
Lorenzo Stoakes (ARM) <ljs(a)kernel.org>
arm64: remove redundant concurrent ptdump UAF mitigation
Hidayath Khan <hidayath(a)linux.ibm.com>
dibs: initialise dibs->lock in dibs_dev_alloc()
Asad Kamal <asad.kamal(a)amd.com>
Revert "drm/amdgpu: fix aperture mapping leak"
Christian Brauner <brauner(a)kernel.org>
binfmt_misc: don't warn when the mount is completed from another user namespace
Christian Brauner <brauner(a)kernel.org>
ovl: don't warn when the mount is completed from another user namespace
Hyunjung Ko <hj351016(a)gmail.com>
net/sched: act_gact, act_police: range check the fallback control action
Hyunjung Ko <hj351016(a)gmail.com>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free RX pages of consumed but not refilled buffers
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free stranded TX buffers on ring deinit
Zihan Xi <zihanx(a)nebusec.ai>
netfilter: nf_conntrack: defer invalid log until after unlock
Zhiling Zou <zhilinz(a)nebusec.ai>
netfilter: bridge: release template ct on non-IP path
Pavel Begunkov <asml.silence(a)gmail.com>
net: devmem: prevent net-iov / page mixing
Baul Lee <baul.lee(a)xbow.com>
net/x25: fix use-after-free of the socket by its timers
Alexandra Winter <wintera(a)linux.ibm.com>
net/dibs: Correct freeing of dmb_clientid_arr
Kyle Zeng <kylebot(a)openai.com>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev
Daming Li <d4n.for.sec(a)gmail.com>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice
Ahmed Naseef <naseefkm(a)gmail.com>
net: phy: mediatek: fix TX blink masks using the RX bits
Lorenzo Stoakes (ARM) <ljs(a)kernel.org>
mm/huge_memory: fix huge_zero_pfn race
Hui Su <sh_def(a)163.com>
tracing: Fix NULL pointer dereference in module event cache removal
Vincent Donnefort <vdonnefort(a)google.com>
ring-buffer: Prevent subbuf order change when resizing is disabled
Rik van Riel <riel(a)surriel.com>
fbdev: bitblit: bound-check glyph index in bit_cursor()
Michael Wu <michael(a)allwinnertech.com>
tracing: Fix race between update_event_fields and, event_define_fields
Aditya Chillara <aditya.chillara(a)oss.qualcomm.com>
perf/core: Fix group leader use-after-free after sibling detach
Maíra Canal <mcanal(a)igalia.com>
drm/v3d: Serialize the scheduler timeout handlers
Baul Lee <baul.lee(a)xbow.com>
ALSA: us144mkii: re-anchor capture URBs on resubmission
Xu Rao <raoxu(a)uniontech.com>
ALSA: hda/tas2781: fix ACPI reference handling
Baul Lee <baul.lee(a)xbow.com>
ALSA: FCP: fix OOB write in fcp_meter_ctl_get()
Baul Lee <baul.lee(a)xbow.com>
ALSA: usx2y: bound the hwdep mmap fault offset
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
SJ Park <sj(a)kernel.org>
mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD}
SJ Park <sj(a)kernel.org>
samples/damon/mtier: error out for zero quota goal target values
liyouhong <liyouhong(a)kylinos.cn>
mm/damon/ops-common: putback folios on invalid migrate nid
Hui Su <sh_def(a)163.com>
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
Eddie Lin <eddie.lin(a)oss.qualcomm.com>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free
Junrui Luo <moonafterrain(a)outlook.com>
misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
Ekansh Gupta <ekansh.gupta(a)oss.qualcomm.com>
misc: fastrpc: Remove buffer from list prior to unmap operation
Anandu Krishnan E <anandu.e(a)oss.qualcomm.com>
misc: fastrpc: fix channel ctx ref leak when session alloc fails
Ekansh Gupta <ekansh.gupta(a)oss.qualcomm.com>
misc: fastrpc: Fix initial memory allocation for Audio PD memory pool
Mariano Baragiola <mbaragiola(a)linux.com>
staging: rtl8723bs: validate monitor transmit frame lengths
Panagiotis Petrakopoulos <npetrakopoulos2003(a)gmail.com>
staging: rtl8723bs: fix missing shared-key auth challenge length check
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in WMM_param_handler()
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
Fan Wu <fanwu01(a)zju.edu.cn>
serial: amba-pl011: synchronize DMA teardown
Fan Wu <fanwu01(a)zju.edu.cn>
serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ
Fan Wu <fanwu01(a)zju.edu.cn>
serial: amba-pl011: fix indefinite RS485 post-send delay
Ryan Wilbur <rwilbur633(a)gmail.com>
serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx
Cunhao Lu <1579567540(a)qq.com>
serial: 8250_dma: Clear stale RX state on shutdown
Jan Sebastian Götte <linux(a)jaseg.de>
serial: qcom-geni: fix TX DMA buffer flush
Alice Ryhl <aliceryhl(a)google.com>
rust_binder: do not query current thread for all ioctls
Mathieu Dubois-Briand <mathieu.dubois-briand(a)bootlin.com>
nvmem: layouts: Add fixed-layout driver
Aelin Reidel <aelin(a)mainlining.org>
nvmem: apple-spmi-nvmem: wrap regmap calls to satisfy CFI
Alexander Usyskin <alexander.usyskin(a)intel.com>
mei: pull kvfree out of spinlock
Chengfeng Ye <nicoyip.dev(a)gmail.com>
ipv4: fix use-after-free in fib_nhc_update_mtu()
Zihan Xi <zihanx(a)nebusec.ai>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Adapt sockmap update error handling
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Ensure UDP sockets are bound
Nils Helmig <nils.helmig(a)web.de>
Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV
Alexej Sidorenko <alexej(a)sidorenko.cz>
Bluetooth: btrtl: fix RTL8761B/BU broken LE extended scan
Florian Westphal <fw(a)strlen.de>
netfilter: nf_tables: avoid softlockup warnings in nft_chain_validate
Keno Fischer <keno(a)juliacomputing.com>
futex: Prevent robust futex exit race some more
Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev>
iommu/vt-d: Gather the unmapped range before freeing its page tables
Harshal Dev <harshal.dev(a)oss.qualcomm.com>
dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk
Matthew Rosato <mjrosato(a)linux.ibm.com>
KVM: s390: pci: Fix aisb calculation
Keith Busch <kbusch(a)kernel.org>
blk-mq: reinsert cached request to the list
Keith Busch <kbusch(a)kernel.org>
blk-mq: pop cached request if it is usable
Alex Deucher <alexander.deucher(a)amd.com>
Revert "drm/amd/display: Fix backlight max_brightness to match exported range"
Baul Lee <baul.lee(a)xbow.com>
net: bridge: mrp: fix uninitialised bytes on the wire
Chengfeng Ye <nicoyip.dev(a)gmail.com>
netfilter: ebt_nflog: pin the NFLOG backend
Philipp David <pd-lkml(a)3b.pm>
igc: fix netdev not re-attached after resume if interface is down
Zihan Xi <zihanx(a)nebusec.ai>
mac802154: fix netdev use-after-free in beacon worker
Zhiling Zou <zhilinz(a)nebusec.ai>
inet: frags: publish queues before arming timer
Qihang Tang <q.h.hack.winter(a)gmail.com>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
Sergey V. Frolov <Sergey.V.Frolov(a)kaspersky.com>
net: octeontx2-pf: Fix UB in shift operation
Zijie Huang <milkory(a)outlook.com>
net/sched: reject overly deep qdisc hierarchies
Zhiling Zou <zhilinz(a)nebusec.ai>
net: openvswitch: reallocate update replies for mismatched IDs
Sun Jian <sun.jian.kdev(a)gmail.com>
net: fix skb length accounting after generic XDP frag adjustment
Zihan Xi <zihanx(a)nebusec.ai>
packet: synchronize pressure clearing with ring reconfiguration
Doruk Tan Ozturk <doruk(a)0sec.ai>
net/packet: reset the MAC header on the packet-socket transmit path
Qihang Tang <q.h.hack.winter(a)gmail.com>
packet: use consistent hard_header_len in TX_RING send path
Qihang Tang <q.h.hack.winter(a)gmail.com>
packet: use consistent hard_header_len in non-ring send paths
Kyle Zeng <kylebot(a)openai.com>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
Julian Anastasov <ja(a)ssi.bg>
ipvs: properly update the overload flag on dest edit
Julian Anastasov <ja(a)ssi.bg>
ipvs: add totalconns for dest
Zhiling Zou <zhilinz(a)nebusec.ai>
ipvs: stop estimator after disabled calc phase
Lincoln Wallace <locnnil0(a)gmail.com>
ima: fix out-of-bounds read in xattr_verify()
Lorenzo Stoakes (ARM) <ljs(a)kernel.org>
mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - fix information leak in evdev_pass_values()
Joshua Rogers <linux(a)joshua.hu>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
Joshua Rogers <linux(a)joshua.hu>
vt: add permission check for KDSKBMETA ioctl
Doruk Tan Ozturk <doruk(a)0sec.ai>
net: usb: ipheth: fix carrier_work UAF on disconnect
Yi Cong <yicong(a)kylinos.cn>
net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()
Sonali Pradhan <sonalipradhan(a)google.com>
usb: gadget: f_ncm: Use unsigned int for ndp_index
Pawel Laszczak <pawell(a)cadence.com>
usb: cdnsp: fix incorrect endian conversions for APB timeout register
Xu Rao <raoxu(a)uniontech.com>
thunderbolt: icm: Preserve USB4 proxy data-valid bit
Aleksandr Nogikh <nogikh(a)google.com>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
Jiangshan Yi <yijiangshan(a)kylinos.cn>
usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg
Ishaan Dandekar <ishaan.dandekar(a)gmail.com>
usb: quirks: Add ShanWan gamepad to quirk list
Nikhil Solanke <nikhilsolanke5(a)gmail.com>
usb: core: Add quirk for 255-bytes initial config read
Baul Lee <baul.lee(a)xbow.com>
ALSA: usb-audio: fix OOB write on Type II inbound URBs
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - sanitize event type index when fetching event masks
Dongli Zhang <dongli.zhang(a)oracle.com>
net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()
Mehmet Fide <mehmet.fide(a)screeningeagle.com>
net: fec: do not release NULL pages when RX buffer allocation fails
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (ltc4282) Clamp negative current limits
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (ltc4282) Avoid overflow in maximum power calculation
Qingshuang Fu <fuqingshuang(a)kylinos.cn>
hwmon: (ads7828) Fix external VREF regulator handling
Wilken Gottwalt <wilken.gottwalt(a)posteo.net>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination
Hongyan Xu <getshell(a)seu.edu.cn>
watchdog: at91sam9_wdt: prevent timer rearm during teardown
Maximilian Immanuel Brandtner <maxbr(a)linux.ibm.com>
tls: don't abort the connection on signal-interrupted sends
Xin Long <lucien.xin(a)gmail.com>
sctp: clear control chunk transport if it is being removed
Eric Dumazet <edumazet(a)google.com>
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
Alexandra Winter <wintera(a)linux.ibm.com>
s390/ism: Fix UAF of sba and ieq during ism_dev_exit()
Bhargava Marreddy <bhargava.marreddy(a)broadcom.com>
bnge: Fix resource leak in bnge_init_nic() error path
Hongyan Xu <getshell(a)seu.edu.cn>
ata: pata_sl82c105: fix bridge revision use-after-free
Fan XinRan <shinjiangjiang(a)gmail.com>
net: thunderbolt: Tear down DMA paths before stopping the rings
Sidraya Jayagond <sidraya(a)linux.ibm.com>
net/smc: fix TOCTOU race between smc_listen_out() and listener close
Eric Dumazet <edumazet(a)google.com>
net: remove WARN_ON_ONCE() from sk_mc_loop()
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
net: prestera: validate firmware header length
Henry Martin <bsdhenrymartin(a)gmail.com>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
Eric Dumazet <edumazet(a)google.com>
netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
Pablo Neira Ayuso <pablo(a)netfilter.org>
netfilter: flowtable: consolidate xmit path
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: fix TFO max_qlen accounting across reuseport migration
Qing Luo <luoqing(a)kylinos.cn>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure
Keegan Freyhof <keegan.freyhof(a)broadcom.com>
bnxt_en: Fix PTP PPS setting bug
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Refresh VNIC default ring on queue restart if needed
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Determine and store default RX ring in vnic structure
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()
Bobby Eshleman <bobbyeshleman(a)meta.com>
net/mlx5e: fix BQL reset on SQ re-activation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
bnge: use int for bnge_fix_rings_count() return value
Stefan Agner <stefan(a)agner.ch>
net: stmmac: resume PHY before hardware setup when opening the interface
Martin Kaiser <martin(a)kaiser.cx>
selftests/ftrace: refactor eprobes test to fix argument checks
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations
Qingshuang Fu <fuqingshuang(a)kylinos.cn>
hwmon: (nzxt-smart2) Check return value of init_device() in probe
Marcin Bernatowicz <marcin.bernatowicz(a)linux.intel.com>
drm/xe/uc: Apply RCS/CCS yield policy to SR-IOV VFs
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
net/openvswitch: check Ethernet header length in key_extract()
Jia Jia <physicalmtea(a)gmail.com>
vhost-scsi: reject feature changes after endpoint
Linfeng Sun <slf(a)hdu.edu.cn>
vhost-scsi: Validate T10 PI scatterlist counts
Toke Høiland-Jørgensen <toke(a)toke.dk>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
udp: fix potential use-after-free in tunnel segmentation
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: validate metadata when processing requests
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: move xsk_tx_metadata_request() to xdp_sock_drv.h
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: validate launch-time metadata size
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: clear metadata pointer when no timestamp is requested
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: pass TX metadata pointer by reference
Stanislav Fomichev <sdf.kernel(a)gmail.com>
xsk: require at least 16 bytes of TX metadata
Will Chen <will.chen.tty(a)gmail.com>
bnxt: fix memory leak in bnxt_queue_mem_alloc error cases
Pavel Begunkov <asml.silence(a)gmail.com>
eth: bnxt: support qcfg provided rx page size
Pavel Begunkov <asml.silence(a)gmail.com>
eth: bnxt: store rx buffer size per queue
Pavel Begunkov <asml.silence(a)gmail.com>
net: pass queue rx page size from memory provider
Pavel Begunkov <asml.silence(a)gmail.com>
net: add bare bone queue configs
Jakub Kicinski <kuba(a)kernel.org>
net: reduce indent of struct netdev_queue_mgmt_ops members
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips
Nathan Gao <zcgao(a)amazon.com>
tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus) Fix type confusion in notification logic
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus_core) Use guard() for mutex protection
Christian Borntraeger <borntraeger(a)linux.ibm.com>
vdpa/mlx5: Fix buffer length in create_direct_keys()
Yousef Alhouseen <alhouseenyousef(a)gmail.com>
vhost/vdpa: reject overflowing PA map page counts on 32-bit
Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev>
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()
Babanpreet Singh <bbnpreetsingh(a)gmail.com>
counter: microchip-tcb-capture: Fix DT channel validation
Michael Guralnik <michaelgur(a)nvidia.com>
net/mlx5: fw_tracer, return NULL on create error
Or Har-Toov <ohartoov(a)nvidia.com>
devlink: fix net namespace reference leak in reload
Jiawen Liu <1298662399(a)qq.com>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_route: fix fastmap use-after-free on filter
Mahanta Jambigi <mjambigi(a)linux.ibm.com>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn>
bpf: Propagate untrusted pointer state in commuted arithmetic
Eduard Zingerman <eddyz87(a)gmail.com>
bpf: split check_reg_sane_offset() in two parts
Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn>
bpf: Preserve pointer state for commuted arithmetic
Dmitry Antipov <dmantipov(a)yandex.ru>
btrfs: fix memory leak in btrfs_do_encoded_write()
Matti Vaittinen <mazziesaccount(a)gmail.com>
watchdog: bd96801_wdt: Fix timeout for enabled WDG
Julian Anastasov <ja(a)ssi.bg>
ipvs: return the csum validation for forward hook
Julian Anastasov <ja(a)ssi.bg>
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
Jozsef Kadlecsik <kadlec(a)netfilter.org>
netfilter: ipset: switch ext_size to atomic64_t
Nikhil P. Rao <nikhil.rao(a)amd.com>
pds_core: cancel pending PCI reset work on AER recovery
Nikhil P. Rao <nikhil.rao(a)amd.com>
pds_core: keep the health thread stopped during reset
Shay Drory <shayd(a)nvidia.com>
net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock
Satish Kharat <satishkh(a)cisco.com>
enic: fix tx_hang_reset use-after-free on device removal
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
Fan Ye <fy15309206903(a)gmail.com>
Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"
Jijie Shao <shaojijie(a)huawei.com>
net: hns3: fix speed configuration residue after driver reload
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
drm/bridge: ps8640: propagate AUX transfer register errors
Qingfang Deng <qingfang.deng(a)linux.dev>
ovpn: fix incorrect use of rcu_access_pointer()
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: ensure TCP vars are initialized first
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: disable IPv4 redirects on MP interfaces
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: hash floated peer by transport identity only
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: zero-initialize sockaddr before learning a floated endpoint
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: ensure socket is owned by ovpn before deref sk_user_data
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: rehash peer in by_transp_addr table on CMD_PEER_SET
Antonio Quartulli <antonio(a)openvpn.net>
ovpn: skip rehash for peers already removed from by_id
Rosen Penev <rosenp(a)gmail.com>
ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt
Ralf Lici <ralf(a)mandelbit.com>
ovpn: add missing rtnl_link_ops->get_size callback
Hans Ulli Kroll <linux(a)ulli-kroll.de>
pinctrl: qcom: ipq806x: mark pci reset as a GPIO pin function
Hans Ulli Kroll <linux(a)ulli-kroll.de>
pinctrl: qcom: ipq806x: mark gpio as a GPIO pin function
Kuba Piecuch <jpiecuch(a)google.com>
selftests/sched_ext: Handle sleeping task affinity changes in numa test
Yuho Choi <dbgh9129(a)gmail.com>
ARM: npcm: Fix OF node refcount leaks in SMP setup
Yun Zhou <yun.zhou(a)windriver.com>
xfs: handle NULL b_addr in xfs_buf_free
Daniel Drake <dan(a)reactivated.net>
arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer
Anna Schumaker <anna.schumaker(a)hammerspace.com>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com>
arm64: dts: qcom: sdm850-lenovo-yoga-c630: lower PSCI cluster idle
Akhil P Oommen <akhilpo(a)oss.qualcomm.com>
arm64: dts: qcom: purwa: Fix GPU IOMMU property
Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com>
arm64: dts: qcom: rename x1p42100 to purwa
Aleksandrs Vinarskis <alex(a)vinarskis.com>
arm64: dts: qcom: Rework X1-based Asus Zenbook A14's displays
Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com>
arm64: dts: qcom: rename x1e80100 to hamoa
Ray Wu <ray.wu(a)amd.com>
drm/amd/display: Check for tg ops in dce110_set_avmute
Ray Wu <ray.wu(a)amd.com>
drm/amd/display: Add AV mute wait frames to dce110_set_avmute
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Fail unbound UDP on sockmap update
Peter Zijlstra <peterz(a)infradead.org>
sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag")
Ingo Molnar <mingo(a)kernel.org>
sched/fair: Separate se->vlag from se->vprot
Al Viro <viro(a)zeniv.linux.org.uk>
mount: honour SB_NOUSER in the new mount API
Farhan Ali <alifm(a)linux.ibm.com>
KVM: s390: pci: Fix resource leak on IRQ registration failure
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 9 +
.../bindings/crypto/qcom,inline-crypto-engine.yaml | 16 +-
MAINTAINERS | 5 +
Makefile | 4 +-
arch/arm/boot/dts/broadcom/bcm-ns.dtsi | 2 +-
arch/arm/mach-npcm/platsmp.c | 2 +
arch/arm64/boot/dts/broadcom/bcm2712.dtsi | 2 -
arch/arm64/boot/dts/qcom/Makefile | 2 +
arch/arm64/boot/dts/qcom/hamoa-iot-som.dtsi | 4 +-
.../qcom/{x1e80100-pmics.dtsi => hamoa-pmics.dtsi} | 0
.../boot/dts/qcom/{x1e80100.dtsi => hamoa.dtsi} | 0
.../boot/dts/qcom/{x1p42100.dtsi => purwa.dtsi} | 6 +-
.../boot/dts/qcom/sdm850-lenovo-yoga-c630.dts | 4 +
arch/arm64/boot/dts/qcom/x1-asus-zenbook-a14.dtsi | 9 +-
arch/arm64/boot/dts/qcom/x1-crd.dtsi | 2 +-
arch/arm64/boot/dts/qcom/x1-dell-thena.dtsi | 2 +-
arch/arm64/boot/dts/qcom/x1e001de-devkit.dts | 4 +-
.../dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi | 4 +-
.../boot/dts/qcom/x1e80100-asus-vivobook-s15.dts | 4 +-
.../boot/dts/qcom/x1e80100-asus-zenbook-a14.dts | 10 +-
arch/arm64/boot/dts/qcom/x1e80100-crd.dts | 2 +-
.../qcom/x1e80100-dell-inspiron-14-plus-7441.dts | 2 +-
.../boot/dts/qcom/x1e80100-dell-latitude-7455.dts | 2 +-
.../boot/dts/qcom/x1e80100-dell-xps13-9345.dts | 4 +-
.../boot/dts/qcom/x1e80100-hp-omnibook-x14.dts | 4 +-
.../boot/dts/qcom/x1e80100-lenovo-yoga-slim7x.dts | 4 +-
.../boot/dts/qcom/x1e80100-microsoft-romulus.dtsi | 4 +-
arch/arm64/boot/dts/qcom/x1e80100-qcp.dts | 4 +-
.../dts/qcom/x1p42100-asus-zenbook-a14-lcd.dts | 62 ++++
.../boot/dts/qcom/x1p42100-asus-zenbook-a14.dts | 133 +-------
.../boot/dts/qcom/x1p42100-asus-zenbook-a14.dtsi | 138 +++++++++
arch/arm64/boot/dts/qcom/x1p42100-crd.dts | 2 +-
.../boot/dts/qcom/x1p42100-hp-omnibook-x14.dts | 4 +-
.../boot/dts/qcom/x1p42100-lenovo-thinkbook-16.dts | 4 +-
arch/arm64/include/asm/ptdump.h | 2 -
arch/arm64/mm/mmu.c | 43 +--
arch/arm64/mm/ptdump.c | 11 +-
arch/s390/kvm/pci.c | 31 +-
arch/x86/kernel/cpu/common.c | 10 +
arch/x86/kernel/cpu/mce/core.c | 2 +-
arch/x86/kvm/mmu/mmu.c | 3 +
arch/x86/kvm/svm/sev.c | 34 ++-
arch/x86/kvm/svm/svm.h | 1 +
block/blk-mq.c | 34 +--
drivers/android/binder/process.rs | 12 +-
drivers/ata/pata_sl82c105.c | 4 +-
drivers/bluetooth/btrtl.c | 13 +
drivers/bluetooth/btusb.c | 2 +
drivers/counter/microchip-tcb-capture.c | 4 +-
drivers/dibs/dibs_loopback.c | 1 -
drivers/dibs/dibs_main.c | 16 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 35 ++-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 6 +-
.../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 24 +-
drivers/gpu/drm/bridge/parade-ps8640.c | 27 +-
drivers/gpu/drm/v3d/v3d_drv.h | 6 +
drivers/gpu/drm/v3d/v3d_sched.c | 9 +-
drivers/gpu/drm/xe/xe_uc.c | 7 +-
drivers/hwmon/ads7828.c | 11 +-
drivers/hwmon/corsair-psu.c | 4 +-
drivers/hwmon/ltc4282.c | 20 +-
drivers/hwmon/nzxt-smart2.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 5 +-
drivers/hwmon/pmbus/pmbus_core.c | 340 +++++++++------------
drivers/input/evdev.c | 27 +-
drivers/iommu/intel/iommu.c | 11 +-
drivers/misc/fastrpc.c | 27 +-
drivers/misc/mei/client.c | 25 +-
drivers/net/bonding/bond_alb.c | 10 +-
drivers/net/ethernet/amd/pds_core/core.h | 1 +
drivers/net/ethernet/amd/pds_core/main.c | 14 +-
drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 51 +++-
drivers/net/ethernet/aquantia/atlantic/aq_ring.h | 1 +
drivers/net/ethernet/aquantia/atlantic/aq_vec.c | 2 +-
drivers/net/ethernet/broadcom/bnge/bnge_netdev.c | 2 -
drivers/net/ethernet/broadcom/bnge/bnge_resc.c | 3 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 163 +++++++---
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 4 +
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 7 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 6 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h | 2 +-
drivers/net/ethernet/cisco/enic/enic_main.c | 5 +-
drivers/net/ethernet/freescale/fec_main.c | 11 +-
drivers/net/ethernet/google/gve/gve_main.c | 9 +-
drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 1 -
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 6 +-
drivers/net/ethernet/intel/igc/igc_main.c | 10 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 6 +-
.../net/ethernet/marvell/prestera/prestera_pci.c | 3 +
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 16 +-
drivers/net/ethernet/mellanox/mlx5/core/en.h | 2 +-
.../net/ethernet/mellanox/mlx5/core/en/tc_priv.h | 1 +
drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 15 +-
drivers/net/ethernet/mellanox/mlx5/core/en/xdp.h | 4 +-
.../net/ethernet/mellanox/mlx5/core/en/xsk/tx.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 14 +-
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 4 +-
drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 8 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 13 +-
drivers/net/netdevsim/netdev.c | 7 +-
drivers/net/ovpn/main.c | 64 ++--
drivers/net/ovpn/netlink.c | 6 +
drivers/net/ovpn/peer.c | 172 ++++++++---
drivers/net/ovpn/peer.h | 1 +
drivers/net/ovpn/socket.c | 9 +
drivers/net/phy/mediatek/mtk.h | 8 +-
drivers/net/tap.c | 24 +-
drivers/net/thunderbolt/main.c | 33 +-
drivers/net/usb/ax88179_178a.c | 4 +-
drivers/net/usb/ipheth.c | 11 +-
drivers/net/veth.c | 22 +-
drivers/net/vxlan/vxlan_core.c | 2 +-
drivers/nvmem/apple-spmi-nvmem.c | 20 +-
drivers/nvmem/core.c | 24 +-
drivers/nvmem/internals.h | 2 +
drivers/nvmem/layouts.c | 11 -
drivers/nvmem/layouts/Makefile | 1 +
drivers/nvmem/layouts/fixed-layout.c | 58 ++++
drivers/pinctrl/qcom/pinctrl-ipq8064.c | 8 +-
drivers/pinctrl/qcom/pinctrl-msm.h | 5 +
drivers/ptp/ptp_ocp.c | 4 +-
drivers/s390/net/ism_drv.c | 19 +-
drivers/scsi/scsi_debug.c | 4 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 3 +
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 2 +-
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 +
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 4 +
drivers/thermal/thermal_hwmon.c | 3 +-
drivers/thunderbolt/eeprom.c | 9 +-
drivers/thunderbolt/icm.c | 2 +-
drivers/thunderbolt/tb.c | 2 +-
drivers/tty/serial/8250/8250_dma.c | 12 +-
drivers/tty/serial/8250/8250_of.c | 38 +++
drivers/tty/serial/amba-pl011.c | 86 ++++--
drivers/tty/serial/qcom_geni_serial.c | 43 +--
drivers/tty/vt/keyboard.c | 5 +-
drivers/tty/vt/vt_ioctl.c | 2 +
drivers/usb/atm/cxacru.c | 2 +
drivers/usb/cdns3/cdnsp-gadget.c | 4 +-
drivers/usb/core/config.c | 32 +-
drivers/usb/core/quirks.c | 7 +
drivers/usb/gadget/function/f_ncm.c | 2 +-
drivers/usb/misc/usbio.c | 2 +-
drivers/vdpa/mlx5/core/mr.c | 3 +-
drivers/vhost/scsi.c | 17 ++
drivers/vhost/vdpa.c | 9 +-
drivers/vhost/vhost.c | 8 +
drivers/video/fbdev/core/bitblit.c | 9 +-
drivers/watchdog/at91sam9_wdt.c | 4 +-
drivers/watchdog/bd96801_wdt.c | 5 +-
fs/binfmt_misc.c | 3 +-
fs/btrfs/inode.c | 1 +
fs/crypto/policy.c | 2 +-
fs/namespace.c | 5 +
fs/nfs/nfs4proc.c | 5 +
fs/overlayfs/super.c | 3 +-
fs/smb/client/sess.c | 2 +-
fs/tracefs/event_inode.c | 28 +-
fs/tracefs/internal.h | 4 +-
fs/verity/measure.c | 15 +-
fs/xfs/xfs_buf.c | 2 +-
include/linux/dibs.h | 2 +-
include/linux/mmap_lock.h | 1 +
include/linux/netdevice.h | 11 +-
include/linux/netfilter/ipset/ip_set.h | 2 +-
include/linux/nvmem-provider.h | 6 +
include/linux/psi.h | 4 +-
include/linux/sched.h | 13 +-
include/linux/usb/quirks.h | 3 +
include/net/act_api.h | 19 ++
include/net/addrconf.h | 4 +-
include/net/ip_vs.h | 41 +--
include/net/libeth/xsk.h | 2 +-
include/net/netdev_queues.h | 47 ++-
include/net/netdev_rx_queue.h | 2 +
include/net/netfilter/nf_flow_table.h | 1 +
include/net/page_pool/types.h | 1 +
include/net/route.h | 2 +
include/net/sch_generic.h | 1 +
include/net/xdp_sock.h | 47 +--
include/net/xdp_sock_drv.h | 77 ++++-
kernel/bpf/verifier.c | 68 +++--
kernel/cgroup/cgroup.c | 23 +-
kernel/events/core.c | 67 ++--
kernel/futex/core.c | 85 ++++--
kernel/sched/fair.c | 148 +++++++--
kernel/sched/psi.c | 75 ++++-
kernel/trace/ring_buffer.c | 13 +-
kernel/trace/trace_events.c | 4 +-
mm/damon/ops-common.c | 13 +-
mm/damon/paddr.c | 2 +
mm/damon/vaddr.c | 3 +-
mm/filemap.c | 6 +
mm/huge_memory.c | 49 +--
mm/pagewalk.c | 36 ++-
mm/ptdump.c | 7 +
mm/vmalloc.c | 40 ++-
net/atm/common.c | 14 +-
net/bridge/br_mrp.c | 6 +-
net/bridge/netfilter/ebt_nflog.c | 17 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 1 +
net/core/datagram.c | 3 +
net/core/dev.c | 27 +-
net/core/netdev_rx_queue.c | 21 +-
net/core/sock.c | 1 -
net/core/xdp.c | 2 +-
net/devlink/dev.c | 1 +
net/ipv4/fib_semantics.c | 101 +++---
net/ipv4/inet_connection_sock.c | 20 +-
net/ipv4/inet_fragment.c | 10 +-
net/ipv4/route.c | 29 ++
net/ipv4/tcp_bpf.c | 2 +
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 43 +--
net/ipv4/udp_offload.c | 4 +-
net/ipv6/ip6_tunnel.c | 3 +
net/ipv6/route.c | 8 +-
net/mac802154/scan.c | 4 +
net/ncsi/ncsi-netlink.c | 4 +
net/netfilter/ipset/ip_set_bitmap_gen.h | 4 +-
net/netfilter/ipset/ip_set_core.c | 6 +-
net/netfilter/ipset/ip_set_hash_gen.h | 2 +-
net/netfilter/ipset/ip_set_list_set.c | 4 +-
net/netfilter/ipvs/ip_vs_conn.c | 41 +--
net/netfilter/ipvs/ip_vs_core.c | 70 ++---
net/netfilter/ipvs/ip_vs_ctl.c | 77 ++++-
net/netfilter/ipvs/ip_vs_est.c | 10 +-
net/netfilter/ipvs/ip_vs_lc.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_tcp.c | 2 -
net/netfilter/ipvs/ip_vs_sync.c | 7 +-
net/netfilter/ipvs/ip_vs_xmit.c | 2 +-
net/netfilter/nf_conntrack_proto.c | 6 +
net/netfilter/nf_conntrack_proto_sctp.c | 12 +-
net/netfilter/nf_conntrack_proto_tcp.c | 132 +++++---
net/netfilter/nf_flow_table_core.c | 1 +
net/netfilter/nf_flow_table_ip.c | 95 ++++--
net/netfilter/nf_flow_table_path.c | 9 +-
net/netfilter/nf_tables_api.c | 4 +-
net/openvswitch/datapath.c | 29 +-
net/openvswitch/flow.c | 11 +-
net/packet/af_packet.c | 72 +++--
net/sched/act_ct.c | 29 +-
net/sched/act_gact.c | 5 +
net/sched/act_police.c | 6 +
net/sched/cls_api.c | 17 +-
net/sched/cls_route.c | 35 ++-
net/sched/sch_api.c | 9 +
net/sched/sch_cake.c | 1 -
net/sctp/associola.c | 11 +-
net/sctp/outqueue.c | 1 +
net/sctp/sm_make_chunk.c | 3 +-
net/sctp/sm_statefuns.c | 6 +-
net/smc/af_smc.c | 3 +-
net/smc/smc_llc.c | 3 +-
net/smc/smc_rx.c | 19 +-
net/tipc/node.c | 15 +-
net/tls/tls_sw.c | 18 +-
net/vmw_vsock/virtio_transport.c | 14 +-
net/x25/af_x25.c | 4 +-
net/x25/x25_timer.c | 25 +-
net/xdp/xdp_umem.c | 2 +
net/xdp/xsk.c | 11 +-
net/xdp/xsk_buff_pool.c | 6 +-
samples/damon/mtier.c | 3 +
security/integrity/ima/ima_appraise.c | 9 +-
security/integrity/ima/ima_main.c | 39 +++
sound/hda/codecs/side-codecs/tas2781_hda_spi.c | 3 +-
sound/usb/endpoint.c | 6 +-
sound/usb/fcp.c | 10 +-
sound/usb/midi2.c | 9 +
sound/usb/usx2y/us144mkii_capture.c | 1 +
sound/usb/usx2y/usX2Yhwdep.c | 2 +
sound/usb/usx2y/usx2yhwdeppcm.c | 2 +
.../selftests/bpf/prog_tests/sockmap_basic.c | 6 +-
.../selftests/bpf/prog_tests/sockmap_listen.c | 21 +-
tools/testing/selftests/bpf/test_maps.c | 13 +-
.../ftrace/test.d/dynevent/add_remove_eprobe.tc | 16 +-
tools/testing/selftests/net/tls.c | 57 ++++
tools/testing/selftests/sched_ext/numa.bpf.c | 13 +-
281 files changed, 3279 insertions(+), 1604 deletions(-)
5 days, 19 hours
- 11
- 11
[PATCH 6.6 000/156] 6.6.152-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.6.152 release.
There are 156 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.152-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.6.152-rc1
David Lechner <dlechner(a)baylibre.com>
regulator: devres: fix devm_regulator_get_enable_read_voltage() return
Dmitry Safonov <0x7f454c46(a)gmail.com>
net/tcp_sigpool: Use kref_get_unless_zero()
Dan Carpenter <dan.carpenter(a)linaro.org>
net/tcp_sigpool: Fix some off by one bugs
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
bpf: tcp: fix double sock release on batch realloc
Bryam Vargas <hexlabsecurity(a)proton.me>
thunderbolt: Bound the DROM dual link port number before indexing sw->ports
Qing Ming <a0yami(a)mailbox.org>
sctp: clear new_transport when removing a peer
Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn>
sctp: fix use-after-free of cached ASCONF chunk
Baul Lee <baul.lee(a)xbow.com>
sctp: keep chunk->transport in step with the list it is queued on
Xu Rao <raoxu(a)uniontech.com>
scsi: scsi_debug: Negate wrapped memcmp() result
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf, sockmap: Fix sk_redir use-after-free in send verdict
Tejun Heo <tj(a)kernel.org>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
Zhan Xusheng <zhanxusheng(a)xiaomi.com>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
Zhiling Zou <zhilinz(a)nebusec.ai>
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
Yuejie Shi <syjcnss(a)gmail.com>
ipv6: fix Route Information option length validation
Tengda Wu <wutengda(a)huaweicloud.com>
ring-buffer: Use current_context for safe per-CPU buffer swap
Ahmad Byagowi <ahmadexp(a)gmail.com>
ptp: ocp: Fix board ID over-read
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
Steven Rostedt <rostedt(a)goodmis.org>
eventfs: Use children field for rcu head and add memory barriers
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
eventfs: Fix use-after-free in eventfs_remove_rec()
Sean Christopherson <seanjc(a)google.com>
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
smb: client: Fix use-after-free in cifs_try_adding_channels()
Jun Yang <junvyyang(a)tencent.com>
tipc: read le->link under the node lock in tipc_node_link_down()
chanyoung <ppoo1220(a)gmail.com>
tls: don't leave a full plaintext sk_msg ring unpushed
Jun Yang <junvyyang(a)tencent.com>
vhost: reset the vring metadata cache on vring reconfiguration
Sun Jian <sun.jian.kdev(a)gmail.com>
veth: fix skb length accounting after XDP frag adjustment
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: avoid refilling the RX queue after teardown
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: read virtqueues under worker locks
Baul Lee <baul.lee(a)xbow.com>
vxlan: do not arm the ageing timer on a device that is down
Zhiling Zou <zhilinz(a)nebusec.ai>
xdp: reject clones that overrun skb_shared_info tailroom
Asad Kamal <asad.kamal(a)amd.com>
Revert "drm/amdgpu: fix aperture mapping leak"
Christian Brauner <brauner(a)kernel.org>
ovl: don't warn when the mount is completed from another user namespace
Hyunjung Ko <hj351016(a)gmail.com>
net/sched: act_gact, act_police: range check the fallback control action
Hyunjung Ko <hj351016(a)gmail.com>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free RX pages of consumed but not refilled buffers
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free stranded TX buffers on ring deinit
Zihan Xi <zihanx(a)nebusec.ai>
netfilter: nf_conntrack: defer invalid log until after unlock
Zhiling Zou <zhilinz(a)nebusec.ai>
netfilter: bridge: release template ct on non-IP path
Kyle Zeng <kylebot(a)openai.com>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev
Daming Li <d4n.for.sec(a)gmail.com>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice
Rik van Riel <riel(a)surriel.com>
fbdev: bitblit: bound-check glyph index in bit_cursor()
Michael Wu <michael(a)allwinnertech.com>
tracing: Fix race between update_event_fields and, event_define_fields
Baul Lee <baul.lee(a)xbow.com>
ALSA: usx2y: bound the hwdep mmap fault offset
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
Hui Su <sh_def(a)163.com>
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
Eddie Lin <eddie.lin(a)oss.qualcomm.com>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free
Junrui Luo <moonafterrain(a)outlook.com>
misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
Ekansh Gupta <ekansh.gupta(a)oss.qualcomm.com>
misc: fastrpc: Remove buffer from list prior to unmap operation
Anandu Krishnan E <anandu.e(a)oss.qualcomm.com>
misc: fastrpc: fix channel ctx ref leak when session alloc fails
Mariano Baragiola <mbaragiola(a)linux.com>
staging: rtl8723bs: validate monitor transmit frame lengths
Panagiotis Petrakopoulos <npetrakopoulos2003(a)gmail.com>
staging: rtl8723bs: fix missing shared-key auth challenge length check
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in WMM_param_handler()
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
Cunhao Lu <1579567540(a)qq.com>
serial: 8250_dma: Clear stale RX state on shutdown
Alexander Usyskin <alexander.usyskin(a)intel.com>
mei: pull kvfree out of spinlock
Chengfeng Ye <nicoyip.dev(a)gmail.com>
ipv4: fix use-after-free in fib_nhc_update_mtu()
Zihan Xi <zihanx(a)nebusec.ai>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Adapt sockmap update error handling
Eric Biggers <ebiggers(a)kernel.org>
fscrypt: Replace mk_users keyring with simple list
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP
Nathan Chancellor <nathan(a)kernel.org>
fortify: Disable -Wstringop-overread in tests
Masahiro Yamada <masahiroy(a)kernel.org>
fortify: refactor test_fortify Makefile to fix some build problems
Keno Fischer <keno(a)juliacomputing.com>
futex: Prevent robust futex exit race some more
Harshal Dev <harshal.dev(a)oss.qualcomm.com>
dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk
Matthew Rosato <mjrosato(a)linux.ibm.com>
KVM: s390: pci: Fix aisb calculation
Farhan Ali <alifm(a)linux.ibm.com>
KVM: s390: pci: Fix resource leak on IRQ registration failure
Farhan Ali <alifm(a)linux.ibm.com>
KVM: s390: pci: Fix missing error codes and memory unaccounting
Farhan Ali <alifm(a)linux.ibm.com>
KVM: s390: pci: Fix memory accounting for pinned/unpinned pages
Baul Lee <baul.lee(a)xbow.com>
net: bridge: mrp: fix uninitialised bytes on the wire
Chengfeng Ye <nicoyip.dev(a)gmail.com>
netfilter: ebt_nflog: pin the NFLOG backend
Zihan Xi <zihanx(a)nebusec.ai>
mac802154: fix netdev use-after-free in beacon worker
Qihang Tang <q.h.hack.winter(a)gmail.com>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
Sergey V. Frolov <Sergey.V.Frolov(a)kaspersky.com>
net: octeontx2-pf: Fix UB in shift operation
Zijie Huang <milkory(a)outlook.com>
net/sched: reject overly deep qdisc hierarchies
Zhiling Zou <zhilinz(a)nebusec.ai>
net: openvswitch: reallocate update replies for mismatched IDs
Zihan Xi <zihanx(a)nebusec.ai>
packet: synchronize pressure clearing with ring reconfiguration
Doruk Tan Ozturk <doruk(a)0sec.ai>
net/packet: reset the MAC header on the packet-socket transmit path
Qihang Tang <q.h.hack.winter(a)gmail.com>
packet: use consistent hard_header_len in TX_RING send path
Qihang Tang <q.h.hack.winter(a)gmail.com>
packet: use consistent hard_header_len in non-ring send paths
Kyle Zeng <kylebot(a)openai.com>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
Julian Anastasov <ja(a)ssi.bg>
ipvs: properly update the overload flag on dest edit
Julian Anastasov <ja(a)ssi.bg>
ipvs: add totalconns for dest
Zhiling Zou <zhilinz(a)nebusec.ai>
ipvs: stop estimator after disabled calc phase
Lincoln Wallace <locnnil0(a)gmail.com>
ima: fix out-of-bounds read in xattr_verify()
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - fix information leak in evdev_pass_values()
Joshua Rogers <linux(a)joshua.hu>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
Joshua Rogers <linux(a)joshua.hu>
vt: add permission check for KDSKBMETA ioctl
Yi Cong <yicong(a)kylinos.cn>
net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()
Sonali Pradhan <sonalipradhan(a)google.com>
usb: gadget: f_ncm: Use unsigned int for ndp_index
Pawel Laszczak <pawell(a)cadence.com>
usb: cdnsp: fix incorrect endian conversions for APB timeout register
Xu Rao <raoxu(a)uniontech.com>
thunderbolt: icm: Preserve USB4 proxy data-valid bit
Aleksandr Nogikh <nogikh(a)google.com>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
Baul Lee <baul.lee(a)xbow.com>
ALSA: usb-audio: fix OOB write on Type II inbound URBs
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - sanitize event type index when fetching event masks
Larisa Grigore <larisa.grigore(a)nxp.com>
spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers
Mehmet Fide <mehmet.fide(a)screeningeagle.com>
net: fec: do not release NULL pages when RX buffer allocation fails
Qingshuang Fu <fuqingshuang(a)kylinos.cn>
hwmon: (ads7828) Fix external VREF regulator handling
David Lechner <dlechner(a)baylibre.com>
regulator: devres: add API for reference voltage supplies
Wilken Gottwalt <wilken.gottwalt(a)posteo.net>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination
Maximilian Immanuel Brandtner <maxbr(a)linux.ibm.com>
tls: don't abort the connection on signal-interrupted sends
Xin Long <lucien.xin(a)gmail.com>
sctp: clear control chunk transport if it is being removed
Eric Dumazet <edumazet(a)google.com>
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
Dmitry Safonov <0x7f454c46(a)gmail.com>
net/tcp: Add TCP-AO config and structures
Dmitry Safonov <0x7f454c46(a)gmail.com>
net/tcp: Prepare tcp_md5sig_pool for TCP-AO
Hongyan Xu <getshell(a)seu.edu.cn>
ata: pata_sl82c105: fix bridge revision use-after-free
Fan XinRan <shinjiangjiang(a)gmail.com>
net: thunderbolt: Tear down DMA paths before stopping the rings
Sidraya Jayagond <sidraya(a)linux.ibm.com>
net/smc: fix TOCTOU race between smc_listen_out() and listener close
Eric Dumazet <edumazet(a)google.com>
net: remove WARN_ON_ONCE() from sk_mc_loop()
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
net: prestera: validate firmware header length
Henry Martin <bsdhenrymartin(a)gmail.com>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: fix TFO max_qlen accounting across reuseport migration
Qing Luo <luoqing(a)kylinos.cn>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure
Keegan Freyhof <keegan.freyhof(a)broadcom.com>
bnxt_en: Fix PTP PPS setting bug
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips
Martin Kaiser <martin(a)kaiser.cx>
selftests/ftrace: refactor eprobes test to fix argument checks
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations
Rob Herring <robh(a)kernel.org>
hwmon: (lm25066) Use i2c_get_match_data()
Qingshuang Fu <fuqingshuang(a)kylinos.cn>
hwmon: (nzxt-smart2) Check return value of init_device() in probe
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers
Xin Long <lucien.xin(a)gmail.com>
net: sched: refine software bypass handling in tc_run
Jianbo Liu <jianbol(a)nvidia.com>
net: sched: cls_api: fix slab-use-after-free in fl_dump_key
Asbjørn Sloth Tønnesen <ast(a)fiberby.net>
net: sched: make skip_sw actually skip software
Asbjørn Sloth Tønnesen <ast(a)fiberby.net>
net: sched: cls_api: add filter counter
Asbjørn Sloth Tønnesen <ast(a)fiberby.net>
net: sched: cls_api: add skip_sw counter
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
net/openvswitch: check Ethernet header length in key_extract()
Toke Høiland-Jørgensen <toke(a)toke.dk>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
udp: fix potential use-after-free in tunnel segmentation
Nathan Gao <zcgao(a)amazon.com>
tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()
Yousef Alhouseen <alhouseenyousef(a)gmail.com>
vhost/vdpa: reject overflowing PA map page counts on 32-bit
Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev>
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Avoid socket skips and repeats during iteration
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Get rid of st_bucket_done
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Make sure iter->batch always contains a full bucket snapshot
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch
Babanpreet Singh <bbnpreetsingh(a)gmail.com>
counter: microchip-tcb-capture: Fix DT channel validation
Michael Guralnik <michaelgur(a)nvidia.com>
net/mlx5: fw_tracer, return NULL on create error
Or Har-Toov <ohartoov(a)nvidia.com>
devlink: fix net namespace reference leak in reload
Jiawen Liu <1298662399(a)qq.com>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_route: fix fastmap use-after-free on filter
Mahanta Jambigi <mjambigi(a)linux.ibm.com>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn>
bpf: Preserve pointer state for commuted arithmetic
Dmitry Antipov <dmantipov(a)yandex.ru>
btrfs: fix memory leak in btrfs_do_encoded_write()
Julian Anastasov <ja(a)ssi.bg>
ipvs: return the csum validation for forward hook
Julian Anastasov <ja(a)ssi.bg>
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
Jozsef Kadlecsik <kadlec(a)netfilter.org>
netfilter: ipset: switch ext_size to atomic64_t
Shay Drory <shayd(a)nvidia.com>
net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
Fan Ye <fy15309206903(a)gmail.com>
Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
drm/bridge: ps8640: propagate AUX transfer register errors
Rosen Penev <rosenp(a)gmail.com>
ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt
Yuho Choi <dbgh9129(a)gmail.com>
ARM: npcm: Fix OF node refcount leaks in SMP setup
Anna Schumaker <anna.schumaker(a)hammerspace.com>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
Harald Freudenberger <freude(a)linux.ibm.com>
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Fail unbound UDP on sockmap update
Al Viro <viro(a)zeniv.linux.org.uk>
mount: honour SB_NOUSER in the new mount API
-------------
Diffstat:
.../bindings/crypto/qcom,inline-crypto-engine.yaml | 16 +-
Documentation/driver-api/driver-model/devres.rst | 1 +
Makefile | 4 +-
arch/arm/boot/dts/broadcom/bcm-ns.dtsi | 2 +-
arch/arm/mach-npcm/platsmp.c | 2 +
arch/s390/kvm/pci.c | 86 +++--
arch/s390/kvm/pci.h | 2 +
arch/x86/kvm/mmu/mmu.c | 3 +
drivers/ata/pata_sl82c105.c | 4 +-
drivers/counter/microchip-tcb-capture.c | 4 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 35 +-
drivers/gpu/drm/bridge/parade-ps8640.c | 27 +-
drivers/hwmon/ads7828.c | 11 +-
drivers/hwmon/corsair-psu.c | 4 +-
drivers/hwmon/nzxt-smart2.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 19 +-
drivers/input/evdev.c | 27 +-
drivers/misc/fastrpc.c | 19 +-
drivers/misc/mei/client.c | 25 +-
drivers/net/bonding/bond_alb.c | 10 +-
drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 51 ++-
drivers/net/ethernet/aquantia/atlantic/aq_ring.h | 1 +
drivers/net/ethernet/aquantia/atlantic/aq_vec.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 12 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 +
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 7 +-
drivers/net/ethernet/freescale/fec_main.c | 11 +-
drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 1 -
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 6 +-
.../net/ethernet/marvell/prestera/prestera_pci.c | 3 +
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 16 +-
.../net/ethernet/mellanox/mlx5/core/en/tc_priv.h | 1 +
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 4 +-
drivers/net/thunderbolt/main.c | 33 +-
drivers/net/usb/ax88179_178a.c | 4 +-
drivers/net/veth.c | 22 +-
drivers/net/vxlan/vxlan_core.c | 2 +-
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 4 +-
drivers/ptp/ptp_ocp.c | 4 +-
drivers/regulator/devres.c | 59 ++++
drivers/s390/crypto/zcrypt_ccamisc.c | 20 +-
drivers/scsi/scsi_debug.c | 4 +-
drivers/spi/spi-fsl-dspi.c | 13 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 3 +
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 2 +-
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 +
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 4 +
drivers/thermal/thermal_hwmon.c | 3 +-
drivers/thunderbolt/eeprom.c | 9 +-
drivers/thunderbolt/icm.c | 2 +-
drivers/tty/serial/8250/8250_dma.c | 12 +-
drivers/tty/vt/keyboard.c | 5 +-
drivers/tty/vt/vt_ioctl.c | 2 +
drivers/usb/atm/cxacru.c | 2 +
drivers/usb/cdns3/cdnsp-gadget.c | 4 +-
drivers/usb/gadget/function/f_ncm.c | 2 +-
drivers/vhost/vdpa.c | 9 +-
drivers/vhost/vhost.c | 8 +
drivers/video/fbdev/core/bitblit.c | 9 +-
fs/btrfs/inode.c | 1 +
fs/crypto/fscrypt_private.h | 32 +-
fs/crypto/keyring.c | 212 +++++------
fs/crypto/policy.c | 2 +-
fs/namespace.c | 5 +
fs/nfs/nfs4proc.c | 5 +
fs/overlayfs/super.c | 3 +-
fs/smb/client/sess.c | 2 +-
fs/tracefs/event_inode.c | 28 +-
fs/tracefs/internal.h | 4 +-
include/linux/netdevice.h | 11 +-
include/linux/netfilter/ipset/ip_set.h | 2 +-
include/linux/regulator/consumer.h | 7 +
include/linux/tcp.h | 9 +-
include/net/act_api.h | 19 +
include/net/addrconf.h | 4 +-
include/net/ip_vs.h | 41 +--
include/net/pkt_cls.h | 18 +
include/net/route.h | 2 +
include/net/sch_generic.h | 4 +
include/net/tcp.h | 58 +--
include/net/tcp_ao.h | 90 +++++
include/uapi/linux/tcp.h | 2 +
kernel/bpf/verifier.c | 15 +-
kernel/futex/core.c | 82 +++--
kernel/sched/psi.c | 6 +
kernel/trace/ring_buffer.c | 10 +-
kernel/trace/trace_events.c | 2 +
lib/.gitignore | 2 -
lib/Makefile | 34 +-
lib/test_fortify/.gitignore | 2 +
lib/test_fortify/Makefile | 29 ++
net/atm/common.c | 14 +-
net/bridge/br_mrp.c | 6 +-
net/bridge/netfilter/ebt_nflog.c | 17 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 1 +
net/core/dev.c | 13 +
net/core/sock.c | 1 -
net/core/xdp.c | 2 +-
net/devlink/dev.c | 1 +
net/ipv4/Kconfig | 17 +
net/ipv4/Makefile | 1 +
net/ipv4/fib_semantics.c | 101 +++---
net/ipv4/inet_connection_sock.c | 20 +-
net/ipv4/route.c | 29 ++
net/ipv4/tcp.c | 145 ++------
net/ipv4/tcp_bpf.c | 2 +
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 390 ++++++++++++++-------
net/ipv4/tcp_minisocks.c | 21 +-
net/ipv4/tcp_sigpool.c | 357 +++++++++++++++++++
net/ipv4/udp_offload.c | 4 +-
net/ipv6/ip6_tunnel.c | 3 +
net/ipv6/route.c | 8 +-
net/ipv6/tcp_ipv6.c | 60 ++--
net/mac802154/scan.c | 4 +
net/ncsi/ncsi-netlink.c | 4 +
net/netfilter/ipset/ip_set_bitmap_gen.h | 4 +-
net/netfilter/ipset/ip_set_core.c | 6 +-
net/netfilter/ipset/ip_set_hash_gen.h | 2 +-
net/netfilter/ipset/ip_set_list_set.c | 4 +-
net/netfilter/ipvs/ip_vs_conn.c | 41 +--
net/netfilter/ipvs/ip_vs_core.c | 70 ++--
net/netfilter/ipvs/ip_vs_ctl.c | 77 +++-
net/netfilter/ipvs/ip_vs_est.c | 10 +-
net/netfilter/ipvs/ip_vs_lc.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_tcp.c | 2 -
net/netfilter/ipvs/ip_vs_sync.c | 7 +-
net/netfilter/ipvs/ip_vs_xmit.c | 2 +-
net/netfilter/nf_conntrack_proto.c | 6 +
net/netfilter/nf_conntrack_proto_sctp.c | 12 +-
net/netfilter/nf_conntrack_proto_tcp.c | 132 ++++---
net/openvswitch/datapath.c | 29 +-
net/openvswitch/flow.c | 11 +-
net/packet/af_packet.c | 72 ++--
net/sched/act_ct.c | 29 +-
net/sched/act_gact.c | 5 +
net/sched/act_police.c | 6 +
net/sched/cls_api.c | 47 ++-
net/sched/cls_bpf.c | 2 +
net/sched/cls_flower.c | 2 +
net/sched/cls_matchall.c | 2 +
net/sched/cls_route.c | 35 +-
net/sched/cls_u32.c | 4 +
net/sched/sch_api.c | 9 +
net/sched/sch_cake.c | 1 -
net/sctp/associola.c | 11 +-
net/sctp/outqueue.c | 1 +
net/sctp/sm_make_chunk.c | 3 +-
net/sctp/sm_statefuns.c | 6 +-
net/smc/af_smc.c | 3 +-
net/smc/smc_llc.c | 3 +-
net/smc/smc_rx.c | 19 +-
net/tipc/node.c | 15 +-
net/tls/tls_sw.c | 16 +-
net/vmw_vsock/virtio_transport.c | 14 +-
scripts/remove-stale-files | 2 +
security/integrity/ima/ima_appraise.c | 9 +-
sound/usb/endpoint.c | 6 +-
sound/usb/midi2.c | 9 +
sound/usb/usx2y/usX2Yhwdep.c | 2 +
sound/usb/usx2y/usx2yhwdeppcm.c | 2 +
.../selftests/bpf/prog_tests/sockmap_listen.c | 21 +-
tools/testing/selftests/bpf/test_maps.c | 13 +-
.../ftrace/test.d/dynevent/add_remove_eprobe.tc | 16 +-
166 files changed, 2407 insertions(+), 1036 deletions(-)
5 days, 21 hours
- 11
- 11
[PATCH 6.1 000/609] 6.1.183-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.1.183 release.
There are 609 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.183-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.1.183-rc1
Ahmad Khalifa <ahmad(a)khalifa.ws>
hwmon: (nct6775) Fix non-existent ALARM warning
Ahmad Khalifa <ahmad(a)khalifa.ws>
hwmon: (nct6775) Fix register for nct6799
David Lechner <dlechner(a)baylibre.com>
regulator: devres: fix devm_regulator_get_enable_read_voltage() return
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
bpf: tcp: fix double sock release on batch realloc
Bryam Vargas <hexlabsecurity(a)proton.me>
thunderbolt: Bound the DROM dual link port number before indexing sw->ports
Qing Ming <a0yami(a)mailbox.org>
sctp: clear new_transport when removing a peer
Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn>
sctp: fix use-after-free of cached ASCONF chunk
Baul Lee <baul.lee(a)xbow.com>
sctp: keep chunk->transport in step with the list it is queued on
Xu Rao <raoxu(a)uniontech.com>
scsi: scsi_debug: Negate wrapped memcmp() result
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf, sockmap: Fix sk_redir use-after-free in send verdict
Tejun Heo <tj(a)kernel.org>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
Zhiling Zou <zhilinz(a)nebusec.ai>
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
Yuejie Shi <syjcnss(a)gmail.com>
ipv6: fix Route Information option length validation
Tengda Wu <wutengda(a)huaweicloud.com>
ring-buffer: Use current_context for safe per-CPU buffer swap
Ahmad Byagowi <ahmadexp(a)gmail.com>
ptp: ocp: Fix board ID over-read
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
Sean Christopherson <seanjc(a)google.com>
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
smb: client: Fix use-after-free in cifs_try_adding_channels()
Jun Yang <junvyyang(a)tencent.com>
tipc: read le->link under the node lock in tipc_node_link_down()
Jun Yang <junvyyang(a)tencent.com>
vhost: reset the vring metadata cache on vring reconfiguration
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: avoid refilling the RX queue after teardown
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: read virtqueues under worker locks
Baul Lee <baul.lee(a)xbow.com>
vxlan: do not arm the ageing timer on a device that is down
Zhiling Zou <zhilinz(a)nebusec.ai>
xdp: reject clones that overrun skb_shared_info tailroom
Hyunjung Ko <hj351016(a)gmail.com>
net/sched: act_gact, act_police: range check the fallback control action
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free RX pages of consumed but not refilled buffers
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free stranded TX buffers on ring deinit
Zhiling Zou <zhilinz(a)nebusec.ai>
netfilter: bridge: release template ct on non-IP path
Kyle Zeng <kylebot(a)openai.com>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev
Daming Li <d4n.for.sec(a)gmail.com>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice
Rik van Riel <riel(a)surriel.com>
fbdev: bitblit: bound-check glyph index in bit_cursor()
Michael Wu <michael(a)allwinnertech.com>
tracing: Fix race between update_event_fields and, event_define_fields
Baul Lee <baul.lee(a)xbow.com>
ALSA: usx2y: bound the hwdep mmap fault offset
Hui Su <sh_def(a)163.com>
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
Eddie Lin <eddie.lin(a)oss.qualcomm.com>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free
Anandu Krishnan E <anandu.e(a)oss.qualcomm.com>
misc: fastrpc: fix channel ctx ref leak when session alloc fails
Mariano Baragiola <mbaragiola(a)linux.com>
staging: rtl8723bs: validate monitor transmit frame lengths
Panagiotis Petrakopoulos <npetrakopoulos2003(a)gmail.com>
staging: rtl8723bs: fix missing shared-key auth challenge length check
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in WMM_param_handler()
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
Cunhao Lu <1579567540(a)qq.com>
serial: 8250_dma: Clear stale RX state on shutdown
Chengfeng Ye <nicoyip.dev(a)gmail.com>
ipv4: fix use-after-free in fib_nhc_update_mtu()
Zihan Xi <zihanx(a)nebusec.ai>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Fail unbound UDP on sockmap update
Michal Luczaj <mhal(a)rbox.co>
selftests/bpf: Adapt sockmap update error handling
Eric Biggers <ebiggers(a)kernel.org>
fscrypt: Replace mk_users keyring with simple list
Zhu Yanjun <yanjun.zhu(a)linux.dev>
RDMA/rxe: Fix a use-after-free problem in rxe_mmap
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP
Nathan Chancellor <nathan(a)kernel.org>
fortify: Disable -Wstringop-overread in tests
Masahiro Yamada <masahiroy(a)kernel.org>
fortify: refactor test_fortify Makefile to fix some build problems
Keno Fischer <keno(a)juliacomputing.com>
futex: Prevent robust futex exit race some more
Baul Lee <baul.lee(a)xbow.com>
net: bridge: mrp: fix uninitialised bytes on the wire
Chengfeng Ye <nicoyip.dev(a)gmail.com>
netfilter: ebt_nflog: pin the NFLOG backend
Qihang Tang <q.h.hack.winter(a)gmail.com>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
Sergey V. Frolov <Sergey.V.Frolov(a)kaspersky.com>
net: octeontx2-pf: Fix UB in shift operation
Zijie Huang <milkory(a)outlook.com>
net/sched: reject overly deep qdisc hierarchies
Zhiling Zou <zhilinz(a)nebusec.ai>
net: openvswitch: reallocate update replies for mismatched IDs
Doruk Tan Ozturk <doruk(a)0sec.ai>
net/packet: reset the MAC header on the packet-socket transmit path
Kyle Zeng <kylebot(a)openai.com>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
Julian Anastasov <ja(a)ssi.bg>
ipvs: properly update the overload flag on dest edit
Julian Anastasov <ja(a)ssi.bg>
ipvs: add totalconns for dest
Lincoln Wallace <locnnil0(a)gmail.com>
ima: fix out-of-bounds read in xattr_verify()
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - fix information leak in evdev_pass_values()
Joshua Rogers <linux(a)joshua.hu>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
Joshua Rogers <linux(a)joshua.hu>
vt: add permission check for KDSKBMETA ioctl
Yi Cong <yicong(a)kylinos.cn>
net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()
Sonali Pradhan <sonalipradhan(a)google.com>
usb: gadget: f_ncm: Use unsigned int for ndp_index
Pawel Laszczak <pawell(a)cadence.com>
usb: cdnsp: fix incorrect endian conversions for APB timeout register
Xu Rao <raoxu(a)uniontech.com>
thunderbolt: icm: Preserve USB4 proxy data-valid bit
Aleksandr Nogikh <nogikh(a)google.com>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
Baul Lee <baul.lee(a)xbow.com>
ALSA: usb-audio: fix OOB write on Type II inbound URBs
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - sanitize event type index when fetching event masks
Larisa Grigore <larisa.grigore(a)nxp.com>
spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
David Matlack <dmatlack(a)google.com>
KVM: x86/mmu: Rename __direct_map() to direct_map()
Qingshuang Fu <fuqingshuang(a)kylinos.cn>
hwmon: (ads7828) Fix external VREF regulator handling
David Lechner <dlechner(a)baylibre.com>
regulator: devres: add API for reference voltage supplies
Wilken Gottwalt <wilken.gottwalt(a)posteo.net>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination
Maximilian Immanuel Brandtner <maxbr(a)linux.ibm.com>
tls: don't abort the connection on signal-interrupted sends
Xin Long <lucien.xin(a)gmail.com>
sctp: clear control chunk transport if it is being removed
Eric Dumazet <edumazet(a)google.com>
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
Hongyan Xu <getshell(a)seu.edu.cn>
ata: pata_sl82c105: fix bridge revision use-after-free
Fan XinRan <shinjiangjiang(a)gmail.com>
net: thunderbolt: Tear down DMA paths before stopping the rings
Łukasz Patron <priv.luk(a)gmail.com>
net: qrtr: ns: Raise lookup limit to 128
Sidraya Jayagond <sidraya(a)linux.ibm.com>
net/smc: fix TOCTOU race between smc_listen_out() and listener close
Eric Dumazet <edumazet(a)google.com>
net: remove WARN_ON_ONCE() from sk_mc_loop()
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
net: prestera: validate firmware header length
Henry Martin <bsdhenrymartin(a)gmail.com>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: fix TFO max_qlen accounting across reuseport migration
Qing Luo <luoqing(a)kylinos.cn>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure
Keegan Freyhof <keegan.freyhof(a)broadcom.com>
bnxt_en: Fix PTP PPS setting bug
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips
Martin Kaiser <martin(a)kaiser.cx>
selftests/ftrace: refactor eprobes test to fix argument checks
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations
Rob Herring <robh(a)kernel.org>
hwmon: (lm25066) Use i2c_get_match_data()
Qingshuang Fu <fuqingshuang(a)kylinos.cn>
hwmon: (nzxt-smart2) Check return value of init_device() in probe
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
net/openvswitch: check Ethernet header length in key_extract()
Toke Høiland-Jørgensen <toke(a)toke.dk>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
udp: fix potential use-after-free in tunnel segmentation
Yousef Alhouseen <alhouseenyousef(a)gmail.com>
vhost/vdpa: reject overflowing PA map page counts on 32-bit
Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev>
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Avoid socket skips and repeats during iteration
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Get rid of st_bucket_done
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Make sure iter->batch always contains a full bucket snapshot
Jordan Rife <jordan(a)jrife.io>
bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch
Jian Wen <wenjianhn(a)gmail.com>
tcp: add a scheduling point in established_get_first()
Babanpreet Singh <bbnpreetsingh(a)gmail.com>
counter: microchip-tcb-capture: Fix DT channel validation
Michael Guralnik <michaelgur(a)nvidia.com>
net/mlx5: fw_tracer, return NULL on create error
Jiawen Liu <1298662399(a)qq.com>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_route: fix fastmap use-after-free on filter
Mahanta Jambigi <mjambigi(a)linux.ibm.com>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn>
bpf: Preserve pointer state for commuted arithmetic
Dmitry Antipov <dmantipov(a)yandex.ru>
btrfs: fix memory leak in btrfs_do_encoded_write()
Julian Anastasov <ja(a)ssi.bg>
ipvs: return the csum validation for forward hook
Julian Anastasov <ja(a)ssi.bg>
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
Jozsef Kadlecsik <kadlec(a)netfilter.org>
netfilter: ipset: switch ext_size to atomic64_t
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
Fan Ye <fy15309206903(a)gmail.com>
Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"
Yuho Choi <dbgh9129(a)gmail.com>
ARM: npcm: Fix OF node refcount leaks in SMP setup
Anna Schumaker <anna.schumaker(a)hammerspace.com>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
Harald Freudenberger <freude(a)linux.ibm.com>
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
Al Viro <viro(a)zeniv.linux.org.uk>
mount: honour SB_NOUSER in the new mount API
David Carlier <devnexen(a)gmail.com>
Bluetooth: hci_conn: fix potential UAF in create_big_sync
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
Marco Elver <elver(a)google.com>
Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
Junjie Cao <junjie.cao(a)intel.com>
gpio: pch: use raw_spinlock_t for the register lock
Tze Yee Ng <tze.yee.ng(a)altera.com>
firmware: stratix10-svc: fix memory leaks and list corruption bugs
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix skb leak on flow key update failure during recirculation
Kiryl Shutsemau (Meta) <kas(a)kernel.org>
mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios
Kiryl Shutsemau (Meta) <kas(a)kernel.org>
mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()
Niklas Cassel <cassel(a)kernel.org>
ata: ahci: Make ahci_ignore_port() handle empty mask_port_map
Damien Le Moal <dlemoal(a)kernel.org>
ata: libahci_platform: Do not set mask_port_map when not needed
HyeongJun An <sammiee5311(a)gmail.com>
HID: logitech-dj: Fix maxfield check in DJ short report validation
Zack Rusin <zack.rusin(a)broadcom.com>
drm/vmwgfx: bound DMA command body size against suffix pointer
Zack Rusin <zack.rusin(a)broadcom.com>
drm/vmwgfx: validate DRAW_PRIMITIVES header size before division
Zack Rusin <zack.rusin(a)broadcom.com>
drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
William Palacek <William.Palacek(a)amd.com>
drm/amdkfd: hold event_mutex while checkpointing CRIU events
David Francis <David.Francis(a)amd.com>
drm/amdkfd: Handle invalid event type in CRIU event restore
Harkirat Gill <harkirat.gill(a)amd.com>
drm/amdgpu: cap GTT size to physical RAM on APUs
Candice Li <candice.li(a)amd.com>
drm/amdgpu: restore UMD profile pstate after runtime resume
Maíra Canal <mcanal(a)igalia.com>
drm/vc4: Zero the tile state data array before each BIN job
Jose Maria Casanova Crespo <jmcasanova(a)igalia.com>
drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size
Alexander Kaplan <alexander.kaplan(a)sms-medipool.de>
drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs
Avi Weiss <thnkslprpt(a)gmail.com>
can: ctucanfd: mark error-active controller status valid
Avi Weiss <thnkslprpt(a)gmail.com>
can: ctucanfd: handle bus error interrupts
Avi Weiss <thnkslprpt(a)gmail.com>
can: ctucanfd: unmap BAR0 using base address
Avi Weiss <thnkslprpt(a)gmail.com>
can: ctucanfd: use self-test mode for PRESUME_ACK
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: ctucanfd: add missing MODULE_DEVICE_TABLE()
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: peak_usb: validate uCAN receive record lengths
Maoyi Xie <maoyixie.tju(a)gmail.com>
can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error
James Gao <jamesgao5(a)outlook.com>
can: peak_usb: add bounds check for USB channel index
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: softing: fw_parse(): validate firmware record spans
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents
Abdun Nihaal <nihaal(a)cse.iitm.ac.in>
can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams()
Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp>
can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking
Oleksij Rempel <linux(a)rempel-privat.de>
can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
Guangshuo Li <lgs201920130244(a)gmail.com>
can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: ems_usb: validate CPC message lengths
Lucas Martins Alves <lucas.alves(a)lumal21.com.br>
can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured
Liem <liem16213(a)gmail.com>
i2c: imx: Cancel hrtimer before clearing slave pointer
Liem <liem16213(a)gmail.com>
i2c: imx: Fix slave registration race and error handling
H. Nikolaus Schaller <hns(a)goldelico.com>
i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock
Aaron Ma <aaron.ma(a)canonical.com>
ice: wait for reset completion in ice_resume()
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix skb leak on flow key update failure during ct
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix potential UAF on meter attach failure
Nava kishore Manne <nava.kishore.manne(a)amd.com>
phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB
Nava kishore Manne <nava.kishore.manne(a)amd.com>
phy: zynqmp: use read-modify-write for SERDES scrambler bypass
Nava kishore Manne <nava.kishore.manne(a)amd.com>
phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask
Holger Dengler <dengler(a)linux.ibm.com>
s390/zcrypt: Validate length for CCA ECC private key requests
Holger Dengler <dengler(a)linux.ibm.com>
s390/zcrypt: Validate length for CCA AES cipher key requests
Harald Freudenberger <freude(a)linux.ibm.com>
s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs
Jan Höppner <hoeppner(a)linux.ibm.com>
s390/dasd: Fix potential NULL pointer dereference
Aswin Karuvally <aswin(a)linux.ibm.com>
s390/qeth: Check CAP_NET_ADMIN for private ioctls
Xu Rao <raoxu(a)uniontech.com>
power: supply: bq25890: fix the -10 C NTC lookup entry
Abdun Nihaal <nihaal(a)cse.iitm.ac.in>
cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init()
bui duc phuc <phucduc.bui(a)gmail.com>
gpio: pca953x: fix cache_only and IRQ state on restore_context() failure
Myeonghun Pak <mhun512(a)gmail.com>
i2c: amd-mp2: Unregister callback on adapter add failure
Hongyan Xu <getshell(a)seu.edu.cn>
hwmon: (npcm750-pwm-fan): stop fan timer on device detach
Asim Viladi Oglu Manizada <manizada(a)pm.me>
sctp: prevent peer transport count overflow
Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn>
sctp: reject stale cookies with mismatched verification tags
Ibrahim Hashimov <security(a)auditcode.ai>
scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write
Chris Gellermann <christian.gellermann(a)codasip.com>
selftests/clone3: fix wild pointer access of getline due to missing init
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/filters: Fix false positive match in regex_match_full()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing: Check return value of __register_event() in trace_module_add_events()
Ming Lei <tom.leiming(a)gmail.com>
ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()
Eric Dumazet <edumazet(a)google.com>
vxlan: use pskb_network_may_pull() in route_shortcircuit()
Eric Dumazet <edumazet(a)google.com>
vxlan: use neigh_ha_snapshot() in route_shortcircuit()
Eric Dumazet <edumazet(a)google.com>
vxlan: unclone skb head before modifying eth header in route_shortcircuit()
Eric Dumazet <edumazet(a)google.com>
vxlan: re-fetch eth header after route_shortcircuit()
Michael Bommarito <michael.bommarito(a)gmail.com>
um: vector: fix use-after-free in vector_mmsg_rx()
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/ps3: Fix map failure path in dma_ioc0_map_pages()
Zhiling Zou <zhilinz(a)nebusec.ai>
net: ipv6: clear suppressed fib6 rule result
Zhiling Zou <zhilinz(a)nebusec.ai>
net: bridge: stop fast-leave after deleting a port group
Link Lin <linkl(a)google.com>
mm/page_reporting: use system_freezable_wq to fix UAF during suspend
Christian Brauner <brauner(a)kernel.org>
binfmt_misc: reject a flag character as the field delimiter
Zhao Li <enderaoelyther(a)gmail.com>
wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames
Zihan Xi <zihanx(a)nebusec.ai>
tipc: avoid use-after-free in poll trace queue dumps
David Lee <david.lee(a)trailofbits.com>
netfilter: ipset: do not update comments from kernel-side hash adds
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
net/smc: fix socket use-after-free during link group termination
Zhiling Zou <roxy520tt(a)gmail.com>
ipvs: do not propagate one-packet flag to synced conns
Matt Vollrath <tactii(a)gmail.com>
igbvf: Fix leak in TX DMA error cleanup
Dawei Feng <dawei.feng(a)seu.edu.cn>
e1000: fix memory leak in e1000_probe()
Md Sadre Alam <md.alam(a)oss.qualcomm.com>
dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+
Sonali Pradhan <sonalipradhan(a)google.com>
ALSA: usb-audio: Clamp frame size in implicit-feedback mode
Sonali Pradhan <sonalipradhan(a)google.com>
ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set
Baul Lee <baul.lee(a)xbow.com>
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()
Haidar Lee <haidar.lee(a)adlinktech.com>
ASoC: tas2562: fix broken entries in the volume lookup table
Haidar Lee <haidar.lee(a)adlinktech.com>
ASoC: tas2562: fix DVC coefficient write order
Norbert Szetei <norbert(a)doyensec.com>
ALSA: pcm: wake linked drain waiters on unlink
Xu Rao <raoxu(a)uniontech.com>
ALSA: lx6464es: fix period byte count for 16-bit streams
Takashi Iwai <tiwai(a)suse.de>
ALSA: 6fire: Fix UAF at error handling during probe
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
bpf: lwt: Fix dst reference leak on reroute failure
Sangho Lee <kudo3228(a)gmail.com>
Bluetooth: HIDP: validate numbered report payloads
Sangho Lee <kudo3228(a)gmail.com>
Bluetooth: HIDP: reject frames without a transaction header
Luxiao Xu <rakukuip(a)gmail.com>
audit: fix potential use-after-free in audit_del_rule()
Zhan Xusheng <zhanxusheng1024(a)gmail.com>
audit: fix potential integer overflow in audit_log_n_string()
Charles Vosburgh <trilobyte777(a)gmail.com>
sctp: validate Adaptation Indication parameter length
Farhan Ali <alifm(a)linux.ibm.com>
KVM: s390: pci: Validate AIBV and AISB before pinning guest pages
Farhan Ali <alifm(a)linux.ibm.com>
KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
Farhan Ali <alifm(a)linux.ibm.com>
KVM: s390: pci: Reject adapter interrupt forwarding if already enabled
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active
Xiangfeng Cai <caixiangfeng(a)bytedance.com>
mm/hugetlb: fix list corruption in allocate_file_region_entries()
Zi Yan <ziy(a)nvidia.com>
mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
Benjamin Boortz <bennib(a)mailbox.org>
pinctrl: bm1880: add missing select GENERIC_PINCONF
Karl Mehltretter <kmehltretter(a)gmail.com>
pinctrl: devicetree: don't free uninitialized dev_name on error path
Benjamin Boortz <bennib(a)mailbox.org>
pinctrl: microchip-sgpio: add missing select REGMAP_MMIO
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
rhashtable: clear stale iter->p on table restart
Kuniyuki Iwashima <kuniyu(a)google.com>
af_unix: Give up GC if MSG_PEEK intervened.
Pengfei Zhang <zhangfeionline(a)gmail.com>
ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix use-after-free in __close_file_table_ids()
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: return success for deferred final close
Denis V. Lunev <den(a)openvz.org>
qede: sync udp_tunnel ports outside qede_lock in the recovery path
Suman Ghosh <sumang(a)marvell.com>
octeontx2-pf: Set correct sequence for carrier off and tx queue stop
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/mmiotrace: Reset dropped_count in mmio_reset_data()
Minhong He <heminhong(a)kylinos.cn>
can: isotp: check register_netdevice_notifier() error in module init
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
net: sxgbe: check descriptor ring allocation failures
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
net: sxgbe: free TX rings on RX allocation failure
Leon Romanovsky <leon(a)kernel.org>
scsi: target: Clear cmd_cnt when initial counter enrollment fails
Benjamin Block <bblock(a)linux.ibm.com>
scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req
Christian Marangi <ansuelsmth(a)gmail.com>
net: phylink: put link_gpio if phylink_create fails
Jiale Yao <yaojiale02(a)163.com>
Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus) Fix return value from pmbus_update_byte_data()
Zhao Li <enderaoelyther(a)gmail.com>
wifi: mac80211: validate individual TWT params before driver setup
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/boot: Fix treeboot-akebono CPU node lookup check
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/boot: Fix treeboot-currituck CPU node lookup check
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/boot: Fix simpleboot CPU node lookup check
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix PWM auto temp state array and bounds check
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Use cached PWM frequency value
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read()
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix cache updated before hardware write on I2C error
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
forcedeth: fix UAF of txrx_stats in nv_remove
David Corvaglia <david(a)corvaglia.dev>
net: bridge: mrp: fix Option TLV length in MRP_Test frames
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (nct6775-core) Prevent access to unsupported weight registers
Eric Dumazet <edumazet(a)google.com>
net: do not send ICMP/NDISC Redirects when peer allocation fails
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (nzxt-smart2) DMA-align output buffer
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (lm90) Only report alarms if driver is ready
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (nct6775-core) Fix number of temperature registers for NCT6116
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (nct6775) Fix access to temperature configuration registers
Ahmad Khalifa <ahmad(a)khalifa.ws>
hwmon: (nct6775) Additional TEMP registers for nct6799
Ahmad Khalifa <ahmad(a)khalifa.ws>
hwmon: (nct6775) Add support for 18 IN readings for nct6799
Ahmad Khalifa <ahmad(a)khalifa.ws>
hwmon: (nct6775) Increase and reorder ALARM/BEEP bits
Ahmad Khalifa <ahmad(a)khalifa.ws>
hwmon: (nct6775) Fix IN scaling factors for 6798/6799
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (nct6755) Add support for NCT6799D
Dawei Feng <dawei.feng(a)seu.edu.cn>
smb: client: fix buffer leaks in SMB1 read and write
Xingui Yang <yangxingui(a)huawei.com>
scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race
John Garry <john.g.garry(a)oracle.com>
scsi: libsas: Delete struct scsi_core
Jason Yan <yanaijie(a)huawei.com>
scsi: libsas: Abort all in-flight requests when device is gone
HyeongJun An <sammiee5311(a)gmail.com>
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer
HyeongJun An <sammiee5311(a)gmail.com>
scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer
Mario Limonciello <mario.limonciello(a)amd.com>
pinctrl-amd: Don't clear S4 wake bits at probe
Xiang Mei <xmei5(a)asu.edu>
rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()
Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru>
rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
netfilter: nft_payload: fix mask build for partial field offload
Julian Anastasov <ja(a)ssi.bg>
ipvs: do not mangle ICMP replies for non-first fragments
Julian Anastasov <ja(a)ssi.bg>
ipvs: fix places with wrong packet offsets
Julian Anastasov <ja(a)ssi.bg>
ipvs: fix the checksum validations
Eric Dumazet <edumazet(a)google.com>
ipv6: introduce dst_rt6_info() helper
Pablo Neira Ayuso <pablo(a)netfilter.org>
netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
Michael Bommarito <michael.bommarito(a)gmail.com>
assoc_array: trim the final shortcut word using the current chunk end
Michael Bommarito <michael.bommarito(a)gmail.com>
keys: make keyring key-chunk byte order agree with keyring_diff_objects()
Michael Bommarito <michael.bommarito(a)gmail.com>
keys: fix out-of-bounds read in keyring_get_key_chunk()
Ruoyu Wang <ruoyuw560(a)gmail.com>
drm/mediatek: Check CRTC state before freeing
Xiang Mei <xmei5(a)asu.edu>
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com>
phy: zynqmp: fix runtime PM leak on probe allocation failure
Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com>
phy: zynqmp: fix clock error handling in xpsgtr_phy_init()
Mike Looijmans <mike.looijmans(a)topic.nl>
phy-zynqmp: Postpone getting clock rate until actually needed
Sean Anderson <sean.anderson(a)seco.com>
phy: zynqmp: Allow variation in refclk rate
Uday Khare <udaykhare77(a)gmail.com>
ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup
Uday Khare <udaykhare77(a)gmail.com>
ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup
Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com>
ata: ahci_ceva: fix error paths in ceva_ahci_platform_enable_resources()
Damien Le Moal <dlemoal(a)kernel.org>
ahci: Introduce ahci_ignore_port() helper
Josua Mayer <josua(a)solid-run.com>
ata: libahci_platform: support non-consecutive port numbers
Rosen Penev <rosenp(a)gmail.com>
ata: sata_mv: accept 1 or 2 resources in platform probe
Hongling Zeng <zenghongling(a)kylinos.cn>
dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com>
pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151
Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com>
net: qrtr: ns: Raise node count limit to 512
Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com>
net: qrtr: ns: Limit the maximum server registration per node
Benjamin Tissoires <bentiss(a)kernel.org>
HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report
Lee Jones <lee(a)kernel.org>
HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write
Lee Jones <lee(a)kernel.org>
HID: logitech-dj: Standardise hid_report_enum variable nomenclature
Eddie Phillips <eddiephillips(a)google.com>
gve: fix Rx queue stall on alloc failure
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Fix sequence number when no EOF
Isaac Scott <isaac.scott(a)ideasonboard.com>
media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
Yehyeong Lee <yhlee(a)isslab.korea.ac.kr>
net: mpls: initialize rtm_tos in mpls_getroute()
Lorenzo Bianconi <lorenzo(a)kernel.org>
netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge()
Pablo Neira Ayuso <pablo(a)netfilter.org>
netfilter: nf_conntrack_expect: restore helper propagation via expectation
SJ Park <sj(a)kernel.org>
mm/damon/core: disallow overlapping input ranges for damon_set_regions()
SJ Park <sj(a)kernel.org>
mm/damon/core: validate ranges in damon_set_regions()
Yitang Yang <yi1tang.yang(a)gmail.com>
io_uring/rw: fix missing ERESTARTSYS conversion in read paths
Nikunj A Dadhania <nikunj(a)amd.com>
KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug
Wentao Guan <guanwentao(a)uniontech.com>
bpf: drop bpf_lsm_getselfattr from hook list
Namjae Jeon <linkinjeon(a)kernel.org>
exfat: validate cluster allocation bits of the allocation bitmap
Eric Biggers <ebiggers(a)kernel.org>
fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
Kyle Zeng <kylebot(a)openai.com>
openvswitch: fix GSO userspace truncation underflow
Weiming Shi <bestswngs(a)gmail.com>
tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
Weiming Shi <bestswngs(a)gmail.com>
ipv6: ndisc: fix NULL deref in accept_untracked_na()
Jacob Keller <jacob.e.keller(a)intel.com>
i40e: remove read access to debugfs files
Xie Bo <xb(a)ultrarisc.com>
RISC-V: KVM: Serialize virtual interrupt pending state updates
Ce Sun <cesun102(a)amd.com>
drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
Boyuan Zhang <boyuan.zhang(a)amd.com>
drm/amdgpu: fix division by zero with invalid uvd dimensions
Boyuan Zhang <boyuan.zhang(a)amd.com>
drm/amdgpu/vce: fix integer overflow in image size
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx8: drop unecessary BUG_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()
Yang Wang <kevinyang.wang(a)amd.com>
drm/amd/pm: make pp_features read-only when scpm is enabled
Daehyeon Ko <4ncienth(a)gmail.com>
tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
Asim Viladi Oglu Manizada <manizada(a)pm.me>
pppoe: reload header pointer after dev_hard_header()
Doruk Tan Ozturk <doruk(a)0sec.ai>
mctp: serial: handle zero-length frames to prevent rx buffer overflow
Doruk Tan Ozturk <doruk(a)0sec.ai>
mac802154: llsec: reject frames shorter than the authentication tag
Michael Bommarito <michael.bommarito(a)gmail.com>
ila: reload IPv6 header after pskb_may_pull in checksum adjust
Sergey Temerkhanov <sergey.temerkhanov(a)intel.com>
ice: use READ_ONCE() to access cached PHC time
James Montgomery <james_montgomery(a)disroot.org>
ksmbd: defer destroy_previous_session() until after NTLM authentication
Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de>
rbd: Reset positive result codes to zero in object map update path
Jann Horn <jannh(a)google.com>
proc: Fix broken error paths for namespace links
Fan Wu <fanwu01(a)zju.edu.cn>
net: hip04: fix RX buffer leak on build_skb failure
David Lee <david.lee(a)trailofbits.com>
net/x25: fix use-after-free in x25_kill_by_neigh()
Bryam Vargas <hexlabsecurity(a)proton.me>
net/iucv: fix use-after-free of a severed iucv_path
Hidayath Khan <hidayath(a)linux.ibm.com>
net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
Doruk Tan Ozturk <doruk(a)0sec.ai>
geneve: require CAP_NET_ADMIN in the device netns for changelink
Sungmin Kang <726ksm(a)gmail.com>
net: slip: serialize receive against buffer reallocation
Doruk Tan Ozturk <doruk(a)0sec.ai>
vxlan: require CAP_NET_ADMIN in the device netns for changelink
Breno Leitao <leitao(a)debian.org>
phonet: pep: fix use-after-free in pep_get_sb()
Lu Baolu <baolu.lu(a)linux.intel.com>
iommu/vt-d: Disallow SVA if page walk is not coherent
Tengda Wu <wutengda(a)huaweicloud.com>
ftrace: Add global mutex to serialize trace_parser access
Eric Biggers <ebiggers(a)kernel.org>
fscrypt: Add missing superblock check in find_or_insert_direct_key()
Christian Brauner <brauner(a)kernel.org>
binfmt_elf_fdpic: only honour the first PT_INTERP
Douya Le <ldy3087146292(a)gmail.com>
libceph: remove debugfs files before client teardown
Douya Le <ldy3087146292(a)gmail.com>
libceph: reject zero bucket types in crush_decode
Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de>
libceph: Reject monmaps advertising zero monitors
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
libceph: refresh auth->authorizer_buf{,_len} after authorizer update
Zhao Zhang <zzhan461(a)ucr.edu>
libceph: guard missing CRUSH type name lookup
Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de>
libceph: Fix multiplication overflow in decode_new_up_state_weight()
Douya Le <ldy3087146292(a)gmail.com>
libceph: bound get_version reply decode to front len
Bryam Vargas <hexlabsecurity(a)proton.me>
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
Jun Yang <junvyyang(a)tencent.com>
sctp: don't free the ASCONF's own transport in DEL-IP processing
Michael Bommarito <michael.bommarito(a)gmail.com>
mptcp: only set DATA_FIN when a mapping is present
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
mptcp: decrement subflows counter on failed passive join
Will Deacon <will(a)kernel.org>
Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"
Will Deacon <will(a)kernel.org>
arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()
deepakraog <gaikwad.dcg(a)gmail.com>
tracing: Fix resource leak on mmiotrace trace_pipe close
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
Guangshuo Li <lgs201920130244(a)gmail.com>
intel_th: fix MSC output device reference leak
Jiangshan Yi <yijiangshan(a)kylinos.cn>
serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
Hugo Villeneuve <hvilleneuve(a)dimonoff.com>
serial: sc16is7xx: implement gpio get_direction() callback
Ian Abbott <abbotti(a)mev.co.uk>
comedi: comedi_parport: deal with premature interrupt
Nathan Chancellor <nathan(a)kernel.org>
x86/boot/compressed: Disable jump tables
Xu Rao <raoxu(a)uniontech.com>
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
Zixing Liu <liushuyu(a)aosc.io>
platform/loongarch: laptop: Explicitly reset bl_powered state when suspend
Christian Brauner <brauner(a)kernel.org>
binfmt_misc: set have_execfd only once the interpreter is opened
Christian Brauner <brauner(a)kernel.org>
exec: fix unsigned loop counter wrap in transfer_args_to_stack()
Chengfeng Ye <nicoyip.dev(a)gmail.com>
Bluetooth: RFCOMM: Fix session UAF in set_termios
Chengfeng Ye <nicoyip.dev(a)gmail.com>
Bluetooth: hci_sync: Protect UUID list traversal
MinJea Kim <qndkdrnl(a)gmail.com>
staging: rtl8723bs: fix inverted HT40 secondary channel offset
Moksh Panicker <mokshpanicker.7(a)gmail.com>
staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
Fan Wu <fanwu01(a)zju.edu.cn>
wifi: brcmfmac: make release_scratchbuffers idempotent
Devin Wittmayer <lucid_duck(a)justthetip.ca>
wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
Devin Wittmayer <lucid_duck(a)justthetip.ca>
wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
Huihui Huang <hhhuang(a)smu.edu.sg>
wifi: wilc1000: validate assoc response length before subtracting header
Doruk Tan Ozturk <doruk(a)0sec.ai>
wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
Tristan Madani <tristan(a)talencesecurity.com>
wifi: ath6kl: fix OOB access from firmware ADDBA window size
Norbert Szetei <norbert(a)doyensec.com>
ALSA: seq: close a re-opened queue timer in the destructor
Johan Hovold <johan(a)kernel.org>
media: vpif_capture: fix OF node reference imbalance
Hans Verkuil <hverkuil+cisco(a)kernel.org>
media: vivid: check for vb2_is_busy() when toggling caps
Hans Verkuil <hverkuil+cisco(a)kernel.org>
media: vivid: add vivid_update_reduced_fps()
Guangshuo Li <lgs201920130244(a)gmail.com>
media: vimc: fix reference leak on failed device registration
Guangshuo Li <lgs201920130244(a)gmail.com>
media: vidtv: fix reference leak on failed device registration
Zile Xiong <xiongzile99(a)gmail.com>
media: vb2: use ssize_t for vb2_read/vb2_write
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
media: v4l2-ctrls: validate HEVC active reference counts
Sergey Shtylyov <s.shtylyov(a)auroraos.dev>
media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete()
Myeonghun Pak <mhun512(a)gmail.com>
media: ti: vpe: unwind v4l2 device registration on probe error
Hungyu Lin <dennylin0707(a)gmail.com>
media: tegra-video: vi: fix invalid u32 return value in format lookup
Valery Borovsky <vebohr(a)gmail.com>
media: sun4i-csi: Return queued buffers on start_streaming() failure
Myeonghun Pak <mhun512(a)gmail.com>
media: stm32: dcmi: unregister notifier on probe failure
Ma Ke <make24(a)iscas.ac.cn>
media: saa7134: Fix a possible memory leak in saa7134_video_init1
Valery Borovsky <vebohr(a)gmail.com>
media: rtl2832_sdr: Return queued buffers on start_streaming() failure
Deepanshu Kartikey <kartikey406(a)gmail.com>
media: rtl2832: fix use-after-free in rtl2832_remove()
Myeonghun Pak <mhun512(a)gmail.com>
media: radio-si476x: Unregister v4l2_device on probe failure
Valery Borovsky <vebohr(a)gmail.com>
media: pwc: Return queued buffers on start_streaming() failure
Valery Borovsky <vebohr(a)gmail.com>
media: pwc: Drain fill_buf on start_streaming() failure
Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com>
media: pci: dm1105: Free allocated workqueue
Valery Borovsky <vebohr(a)gmail.com>
media: msi2500: Return queued buffers on start_streaming() failure
Anand Moon <linux.amoon(a)gmail.com>
media: meson: vdec: Fix memory leak in error path of vdec_open
Guangshuo Li <lgs201920130244(a)gmail.com>
media: marvell-cam: fix missing pci_disable_device() on remove
Wang Jun <1742789905(a)qq.com>
media: cx23885: add ioremap return check and cleanup
Johan Hovold <johan(a)kernel.org>
media: cx231xx: fix devres lifetime
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
media: cedrus: skip invalid H.264 reference list entries
Samuel Holland <samuel(a)sholland.org>
media: cedrus: Fix missing cleanup in error path
Myeonghun Pak <mhun512(a)gmail.com>
media: cedrus: clean up media device on probe failure
Myeonghun Pak <mhun512(a)gmail.com>
media: cec: seco: unregister adapter on IR probe failure
David Carlier <devnexen(a)gmail.com>
media: aspeed: fix missing of_reserved_mem_device_release() on probe failure
Valery Borovsky <vebohr(a)gmail.com>
media: airspy: Return queued buffers on start_streaming() failure
Ian Forbes <ian.forbes(a)broadcom.com>
drm/vmwgfx: Validate vmw_surface_metadata::array_size
Zhu Lingshan <lingshan.zhu(a)amd.com>
drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X)
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amdgpu: Fix VFCT bus number matching with soft filter
Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com>
drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com>
drm/i915/gem: Do not leak siblings[] on proto context error
Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com>
drm/i915: Return NULL on error in active_instance
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
Bryam Vargas <hexlabsecurity(a)proton.me>
drm/virtio: bound EDID block reads to the response buffer
David Francis <David.Francis(a)amd.com>
drm/amdkfd: Check bounds in allocate_event_notification_slot
Pavel Ondračka <pavel.ondracka(a)gmail.com>
drm/radeon: fix r100_copy_blit for large BOs
Wentao Liang <vulab(a)iscas.ac.cn>
drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()
Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com>
drm/i915/gem: Add missing nospec on parallel submit slot
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT
Ashutosh Desai <ashutoshdesai993(a)gmail.com>
drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers
Ashutosh Desai <ashutoshdesai993(a)gmail.com>
drm/dp/mst: fix buffer overflows in sideband chunk accumulation
Ashutosh Desai <ashutoshdesai993(a)gmail.com>
drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers
Sergey Shtylyov <s.shtylyov(a)auroraos.dev>
drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
Li RongQing <lirongqing(a)baidu.com>
net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
Alexei Lazar <alazar(a)nvidia.com>
net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
Alexei Lazar <alazar(a)nvidia.com>
net/mlx5e: Report zero bandwidth for non-ETS traffic classes
Yael Chemla <ychemla(a)nvidia.com>
net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule
Aldo Ariel Panzardo <qwe.aldo(a)gmail.com>
net: qrtr: restrict socket creation to the initial network namespace
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
hinic: remove unused ethtool RSS user configuration buffers
Eric Dumazet <edumazet(a)google.com>
ppp: annotate data races in ppp_generic
Qingfang Deng <dqfext(a)gmail.com>
ppp: enable TX scatter-gather
Qingfang Deng <dqfext(a)gmail.com>
ppp: convert to percpu netstats
Qingfang Deng <dqfext(a)gmail.com>
ppp: use IFF_NO_QUEUE in virtual interfaces
Eric Dumazet <edumazet(a)google.com>
ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup
Suman Ghosh <sumang(a)marvell.com>
octeontx2-vf: set TC flower flag on MCAM entry allocation
Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com>
net: stmmac: reset residual action in L3L4 filters on delete
Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com>
net: stmmac: fix l3l4 filter rejecting unsupported offload requests
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
tipc: fix u16 MTU truncation in media and bearer MTU validation
Harshaka Narayana <harshaka.narayana(a)broadcom.com>
vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
Qing Luo <luoqing(a)kylinos.cn>
sctp: auth: verify auth requirement when auth_chunk is NULL
Eric Dumazet <edumazet(a)google.com>
net: hsr: fix memory leak on slave unregistration by removing synced VLANs
Nikolay Aleksandrov <razor(a)blackwall.org>
net: bridge: vlan: fix vlan range dumps starting with pvid
Michael Bommarito <michael.bommarito(a)gmail.com>
amt: make the head writable before rewriting the L2 header
Michael Bommarito <michael.bommarito(a)gmail.com>
amt: re-read skb header pointers after every pull
Shelley Yang <shelley.yang(a)infineon.com>
wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()
Ruoyu Wang <ruoyuw560(a)gmail.com>
wifi: mt76: mt7915: guard HE capability lookups
Helen Koike <koike(a)igalia.com>
tipc: fix infinite loop in __tipc_nl_compat_dumpit
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
nexthop: initialize extack in nh_res_bucket_migrate()
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: openvswitch: add config file
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: af_unix: add USER_NS config
Kuniyuki Iwashima <kuniyu(a)amazon.com>
selftest: af_unix: Add Kconfig file.
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
sctp: validate stream count in sctp_process_strreset_inreq()
HanQuan <eilaimemedsnaimel(a)gmail.com>
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid
Prashanth Kumar KR <PrashanthKumar.K.R(a)amd.com>
amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN
Andrew Pope <andrew.pope(a)morsemicro.com>
wifi: mac80211: recalculate TIM when a station enters power save
Li RongQing <lirongqing(a)baidu.com>
iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
iommu/amd: Bound the early ACPI HID map
HE WEI (ギカク) <skyexpoc(a)gmail.com>
wifi: mwifiex: bound uAP association event IEs to the event buffer
Ruoyu Wang <ruoyuw560(a)gmail.com>
wan: wanxl: Only reset hardware after BAR mapping
Ruoyu Wang <ruoyuw560(a)gmail.com>
nfp: Check resource mutex allocation
Guangshuo Li <lgs201920130244(a)gmail.com>
dpaa2-eth: put MAC endpoint device on disconnect
Vladimir Oltean <vladimir.oltean(a)nxp.com>
net: dpaa2-eth: assign priv->mac after dpaa2_mac_connect() call
Guangshuo Li <lgs201920130244(a)gmail.com>
dpaa2-switch: put MAC endpoint device on disconnect
Aldo Ariel Panzardo <qwe.aldo(a)gmail.com>
rds: drop incoming messages that cross network namespace boundaries
Zhaolong Zhang <zhangzl68(a)chinatelecom.cn>
bonding: fix devconf_all NULL dereference when IPv6 is disabled
David Lee <david.lee(a)trailofbits.com>
net/packet: avoid fanout hook re-registration after unregister
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
hwmon: occ: validate poll response sensor blocks
Yichong Chen <chenyichong(a)uniontech.com>
smb: client: validate DFS referral PathConsumed
Eugene Shalygin <eugene.shalygin(a)gmail.com>
hwmon: (asus-ec-sensors) add missed handle for ENOMEM
Eugene Shalygin <eugene.shalygin(a)gmail.com>
hwmon: (asus-ec-sensors) fix EC read intervals
Eugene Shalygin <eugene.shalygin(a)gmail.com>
hwmon: (asus-ec-sensors) fix looping over banks while reading from EC
Diego Fernando Mancera Gomez <diegomancera.dev(a)gmail.com>
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
Shahar Tzarfati <shahar.tzarfati(a)intel.com>
wifi: iwlwifi: mvm: fix read in wake packet notification handler
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
Guanghui Yang <3497809730(a)qq.com>
btrfs: free mapping node on duplicate reloc root insert
You-Kai Zheng <ykzheng(a)synology.com>
btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8
Tristan Madani <tristan(a)talencesecurity.com>
wifi: carl9170: fix buffer overflow in rx_stream failover path
Tristan Madani <tristan(a)talencesecurity.com>
wifi: carl9170: fix OOB read from off-by-two in TX status handler
Tristan Madani <tristan(a)talencesecurity.com>
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
Tristan Madani <tristan(a)talencesecurity.com>
wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
Tristan Madani <tristan(a)talencesecurity.com>
wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
Ruoyu Wang <ruoyuw560(a)gmail.com>
firewire: net: Fix fragmented datagram reassembly
Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com>
wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
Dmitry Morgun <d.morgun(a)ispras.ru>
wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
Tzung-Bi Shih <tzungbi(a)kernel.org>
watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
Edward Adam Davis <eadavis(a)qq.com>
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
Gaole Zhang <gaole.zhang(a)oss.qualcomm.com>
wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
Cheng Yongkang <teel4res(a)gmail.com>
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
Xincheng Zhang <zhangxincheng(a)ultrarisc.com>
usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: Fix ld_{abs,ind} failure path analysis in subprogs
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
bpf: Prefer dirty packs for eBPF allocations
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
bpf: Prefer packs that won't trigger an IBPB flush on allocation
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
bpf: Skip redundant IBPB in pack allocator
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
bpf: Restrict JIT predictor flush to cBPF
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/bugs: Enable IBPB flush on BPF JIT allocation
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
bpf: Support for hardening against JIT spraying
Sasha Levin <sashal(a)kernel.org>
Revert "drm/amd/display: Add missing kdoc for ALLM parameters"
Doruk Tan Ozturk <doruk(a)0sec.ai>
crypto: rsa-pkcs1pad: Don't WARN on an empty digest
Chukun Pan <amadeus(a)jmu.edu.cn>
USB: serial: option: add TDTECH MT5710-CN
Johan Hovold <johan(a)kernel.org>
USB: serial: keyspan_pda: fix data loss on receive throttling
Sunho Park <shpark061104(a)gmail.com>
USB: serial: io_edgeport: cap received transmit credits
Tim Pambor <timpambor(a)gmail.com>
USB: serial: ftdi_sio: add support for E+H FXA291
Muhammad Bilal <meatuni001(a)gmail.com>
usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
Fan Wu <fanwu01(a)zju.edu.cn>
usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
Sonali Pradhan <sonalipradhan(a)google.com>
usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
Johan Hovold <johan(a)kernel.org>
USB: gadget: fsl-udc: fix device name leak on probe failure
Johan Hovold <johan(a)kernel.org>
USB: gadget: snps-udc: fix device name leak on probe failure
Melbin K Mathew <mlbnkm1(a)gmail.com>
usb: gadget: printer: fix infinite loop in printer_read()
Fan Wu <fanwu01(a)zju.edu.cn>
usb: gadget: f_midi: cancel pending IN work before freeing the midi object
Jinchao Wang <wangjinchao600(a)gmail.com>
usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
Xu Yang <xu.yang_2(a)nxp.com>
usb: chipidea: fix usage_count leak when autosuspend_delay is negative
Huang Wei <huangwei(a)kylinos.cn>
USB: storage: add NO_ATA_1X quirk for Longmai USB Key
Huihui Huang <hhhuang(a)smu.edu.sg>
wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
Weiming Shi <bestswngs(a)gmail.com>
mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
Xin Long <lucien.xin(a)gmail.com>
sctp: fix auth_hmacs array size in struct sctp_cookie
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: act_tunnel_key: Defer dst_release to RCU callback
Emre Cecanpunar <emreleno(a)gmail.com>
drm/i915/selftests: Fix GT PM sort comparators
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
ksmbd: validate compound request size before reading StructureSize2
Shuhao Fu <sfual(a)cse.ust.hk>
can: j1939: fix lockless local-destination check
Michal Luczaj <mhal(a)rbox.co>
bpf, sockmap: Reject unhashed UDP sockets on sockmap update
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
drm/i915/gt: use correct selftest config symbol
Huiwen He <hehuiwen(a)kylinos.cn>
smb/client: handle overlapping allocated ranges in fallocate
Xiang Mei <xmei5(a)asu.edu>
Bluetooth: qca: fix NVM tag length underflow in TLV parser
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC
Rosen Penev <rosenp(a)gmail.com>
ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts
Rosen Penev <rosenp(a)gmail.com>
ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
Bryam Vargas <hexlabsecurity(a)proton.me>
net/iucv: take a reference on the socket found in afiucv_hs_rcv()
Weiming Shi <bestswngs(a)gmail.com>
ipv4: fib: free fib_alias with kfree_rcu() on insert error path
Norbert Szetei <norbert(a)doyensec.com>
ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
Pushpendra Singh <pushpendra.singh(a)oss.qualcomm.com>
firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context
Uday Khare <udaykhare77(a)gmail.com>
ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup
Vijendar Mukunda <Vijendar.Mukunda(a)amd.com>
ASoC: amd: ps: fix wrong ACP version string in pci_request_regions()
Christian Hewitt <christianshewitt(a)gmail.com>
ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop
HE WEI (ギカク) <skyexpoc(a)gmail.com>
wifi: cfg80211: bound element ID read when checking non-inheritance
Runyu Xiao <runyu.xiao(a)seu.edu.cn>
wifi: brcmfmac: initialize SDIO data work before cleanup
Cen Zhang <zzzccc427(a)gmail.com>
wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
Zhao Li <enderaoelyther(a)gmail.com>
wifi: cfg80211: reject unsupported PMSR FTM location requests
Zhao Li <enderaoelyther(a)gmail.com>
wifi: cfg80211: validate PMSR FTM preamble range
Zhao Li <enderaoelyther(a)gmail.com>
wifi: cfg80211: validate PMSR measurement type data
Zhao Li <enderaoelyther(a)gmail.com>
wifi: nl80211: validate nested MBSSID IE blobs
Zhao Li <enderaoelyther(a)gmail.com>
wifi: nl80211: free RNR data on MBSSID mismatch
Xiang Mei <xmei5(a)asu.edu>
wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
Dawei Feng <dawei.feng(a)seu.edu.cn>
wifi: libertas: fix memory leak in helper_firmware_cb()
Bryam Vargas <hexlabsecurity(a)proton.me>
wifi: mac80211_hwsim: clamp virtio RX length before skb_put
Abdun Nihaal <nihaal(a)cse.iitm.ac.in>
wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
Cen Zhang <zzzccc427(a)gmail.com>
wifi: cfg80211: cancel sched scan results work on unregister
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()
Aleksandrova Alyona <aga(a)itb.spb.ru>
RDMA/irdma: Prevent overflows in memory contiguity checks
Malaya Kumar Rout <malayarout91(a)gmail.com>
selftests/alsa: Fix memory leak in find_controls error path
Ruoyu Wang <ruoyuw560(a)gmail.com>
RDMA/siw: publish QP after initialization
Guoqing Jiang <guoqing.jiang(a)linux.dev>
RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp
Danila Chernetsov <listdansp(a)mail.ru>
RDMA/hns: Fix potential integer overflow in mhop hem cleanup
Ruoyu Wang <ruoyuw560(a)gmail.com>
RDMA/erdma: initialize ret for empty receive WR lists
Or Gerlitz <ogerlitz(a)ddn.com>
RDMA/cma: Fix hardware address comparison length in netevent callback
Unnathi Chalicheemala <unnathi.chalicheemala(a)oss.qualcomm.com>
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
Xiang Mei <xmei5(a)asu.edu>
btrfs: reject free space cache with more entries than pages
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
mtd: nand: mtk-ecc: stop on ECC idle timeouts
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
mtd: mtdswap: remove debugfs stats file on teardown
Michael Bommarito <michael.bommarito(a)gmail.com>
IB/mad: Drop unmatched RMPP responses before reassembly
Sumit Gupta <sumitg(a)nvidia.com>
arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: ims-pcu - fix logic error in packet reset
Seungjin Bae <eeodqql09(a)gmail.com>
Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
Chuck Lever <chuck.lever(a)oracle.com>
xprtrdma: Clear receive-side ownership pointers on release
Mikko Perttunen <mperttunen(a)nvidia.com>
gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: isotp: serialize TX state transitions under so->rx_lock
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: track a single source interface for ANYDEV timeout/throttle ops
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: fix stale rx/tx ops after device removal
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: add missing device refcount for CAN filter removal
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: validate frame length in bcm_rx_setup() for RTR replies
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: extend bcm_tx_lock usage for data and timer updates
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: fix CAN frame rx/tx statistics
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: add locking when updating filter and timer values
Phil Rosenthal <phil(a)phil.gs>
KVM: x86/mmu: Fix use-after-free on vendor module reload
Hyunwoo Kim <imv4bel(a)gmail.com>
KVM: nVMX: Hide shadow VMCS right after VMCLEAR
Heiko Carstens <hca(a)linux.ibm.com>
seqlock: Allow UBSAN_ALIGNMENT to fail optimizing
Peter Zijlstra <peterz(a)infradead.org>
seqlock: Allow KASAN to fail optimizing
Peter Zijlstra <peterz(a)infradead.org>
seqlock: Cure some more scoped_seqlock() optimization fails
Sandipan Das <sandipan.das(a)amd.com>
perf/x86/amd/brs: Fix kernel address leakage
Kuniyuki Iwashima <kuniyu(a)google.com>
af_unix: Set gc_in_progress to true in unix_gc().
Guixiong Wei <weiguixiong(a)bytedance.com>
platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug
-------------
Diffstat:
Documentation/driver-api/driver-model/devres.rst | 1 +
Makefile | 4 +-
arch/arm/mach-npcm/platsmp.c | 2 +
arch/arm64/boot/dts/nvidia/tegra234.dtsi | 24 +-
arch/powerpc/boot/simpleboot.c | 2 +-
arch/powerpc/boot/treeboot-akebono.c | 2 +-
arch/powerpc/boot/treeboot-currituck.c | 2 +-
arch/powerpc/platforms/ps3/mm.c | 1 +
arch/riscv/include/asm/kvm_host.h | 10 +-
arch/riscv/kvm/vcpu.c | 78 ++-
arch/s390/kvm/pci.c | 28 +-
arch/um/drivers/vector_kern.c | 3 +
arch/x86/boot/compressed/Makefile | 1 +
arch/x86/events/amd/brs.c | 10 +-
arch/x86/include/asm/nospec-branch.h | 4 +
arch/x86/kernel/cpu/bugs.c | 50 +-
arch/x86/kvm/mmu/mmu.c | 73 +--
arch/x86/kvm/mmu/mmu_internal.h | 3 +-
arch/x86/kvm/mmu/paging_tmpl.h | 14 +-
arch/x86/kvm/svm/avic.c | 8 -
arch/x86/kvm/svm/svm.c | 7 +-
arch/x86/kvm/vmx/nested.c | 11 +-
arch/x86/net/bpf_jit_comp.c | 3 +-
crypto/rsa-pkcs1pad.c | 2 +-
drivers/ata/ahci.h | 17 +-
drivers/ata/ahci_brcm.c | 3 +
drivers/ata/ahci_ceva.c | 24 +-
drivers/ata/libahci.c | 1 +
drivers/ata/libahci_platform.c | 38 +-
drivers/ata/pata_sl82c105.c | 4 +-
drivers/ata/sata_dwc_460ex.c | 8 +-
drivers/ata/sata_mv.c | 2 +-
drivers/block/rbd.c | 7 +-
drivers/block/ublk_drv.c | 9 +
drivers/bluetooth/btqca.c | 2 +-
drivers/cdrom/cdrom.c | 1 +
drivers/comedi/drivers/comedi_parport.c | 13 +-
drivers/counter/microchip-tcb-capture.c | 4 +-
drivers/cpufreq/powernow-k8.c | 1 +
drivers/dma/sh/rz-dmac.c | 96 ++--
drivers/dma/sun6i-dma.c | 11 +-
drivers/firewire/net.c | 37 +-
drivers/firmware/arm_ffa/driver.c | 2 +-
drivers/firmware/arm_scmi/notify.c | 6 +-
drivers/firmware/stratix10-svc.c | 10 +-
drivers/gpio/gpio-pca953x.c | 15 +-
drivers/gpio/gpio-pch.c | 28 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 45 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 15 +
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 13 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 30 ++
drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 8 +
drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 17 +-
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 13 +-
drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 13 +-
drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 3 -
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 10 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 4 +-
drivers/gpu/drm/amd/amdgpu/sdma_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdkfd/kfd_events.c | 26 +-
.../amd/display/modules/info_packet/info_packet.c | 2 -
drivers/gpu/drm/amd/pm/amdgpu_pm.c | 5 +
drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 7 +-
drivers/gpu/drm/display/drm_dp_helper.c | 12 +
drivers/gpu/drm/display/drm_dp_mst_topology.c | 32 +-
drivers/gpu/drm/i915/gem/i915_gem_context.c | 25 +-
drivers/gpu/drm/i915/gt/intel_engine_user.c | 2 +-
drivers/gpu/drm/i915/gt/selftest_gt_pm.c | 8 +-
drivers/gpu/drm/i915/i915_active.c | 7 +-
drivers/gpu/drm/mediatek/mtk_drm_crtc.c | 6 +-
drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c | 1 +
drivers/gpu/drm/radeon/r100.c | 13 +-
drivers/gpu/drm/rockchip/cdn-dp-reg.c | 2 +
drivers/gpu/drm/vc4/vc4_irq.c | 2 +-
drivers/gpu/drm/vc4/vc4_validate.c | 29 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 3 +-
drivers/gpu/drm/vmwgfx/ttm_object.c | 7 +-
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 14 +-
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 22 +-
drivers/gpu/host1x/bus.c | 4 +-
drivers/hid/hid-logitech-dj.c | 28 +-
drivers/hwmon/ads7828.c | 11 +-
drivers/hwmon/adt7470.c | 131 +++--
drivers/hwmon/asus-ec-sensors.c | 18 +-
drivers/hwmon/corsair-cpro.c | 1 +
drivers/hwmon/corsair-psu.c | 5 +-
drivers/hwmon/lm90.c | 4 +-
drivers/hwmon/nct6775-core.c | 435 ++++++++++++-----
drivers/hwmon/nct6775-i2c.c | 2 +
drivers/hwmon/nct6775-platform.c | 41 +-
drivers/hwmon/nct6775.h | 33 +-
drivers/hwmon/npcm750-pwm-fan.c | 11 +
drivers/hwmon/nzxt-smart2.c | 10 +-
drivers/hwmon/occ/common.c | 38 +-
drivers/hwmon/pmbus/lm25066.c | 19 +-
drivers/hwmon/pmbus/pmbus_core.c | 2 +-
drivers/hwtracing/intel_th/core.c | 10 -
drivers/hwtracing/intel_th/msu.c | 2 +
drivers/i2c/busses/i2c-amd-mp2-plat.c | 4 +-
drivers/i2c/busses/i2c-imx.c | 9 +-
drivers/i2c/busses/i2c-jz4780.c | 5 +-
drivers/infiniband/core/addr.c | 6 +-
drivers/infiniband/core/cma.c | 2 +-
drivers/infiniband/core/mad.c | 30 ++
drivers/infiniband/hw/erdma/erdma_qp.c | 2 +-
drivers/infiniband/hw/hns/hns_roce_hem.c | 2 +-
drivers/infiniband/hw/irdma/verbs.c | 4 +-
drivers/infiniband/sw/rxe/rxe_mmap.c | 19 +-
drivers/infiniband/sw/siw/siw_verbs.c | 62 ++-
drivers/input/evdev.c | 27 +-
drivers/input/misc/ims-pcu.c | 32 +-
drivers/iommu/amd/init.c | 6 +
drivers/iommu/intel/perf.c | 2 +-
drivers/iommu/intel/svm.c | 2 +-
drivers/media/cec/platform/seco/seco-cec.c | 6 +-
drivers/media/common/videobuf2/videobuf2-core.c | 12 +-
drivers/media/dvb-frontends/rtl2832.c | 4 +-
drivers/media/dvb-frontends/rtl2832_sdr.c | 19 +-
drivers/media/pci/cx23885/cx23885-core.c | 14 +-
drivers/media/pci/dm1105/dm1105.c | 1 +
drivers/media/pci/saa7134/saa7134-video.c | 25 +-
drivers/media/platform/aspeed/aspeed-video.c | 1 +
drivers/media/platform/marvell/cafe-driver.c | 1 +
drivers/media/platform/st/stm32/stm32-dcmi.c | 1 +
drivers/media/platform/sunxi/sun4i-csi/sun4i_dma.c | 6 +-
drivers/media/platform/ti/davinci/vpif_capture.c | 2 +-
drivers/media/platform/ti/vpe/vpe.c | 3 +-
drivers/media/radio/radio-si476x.c | 1 +
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +-
drivers/media/test-drivers/vimc/vimc-core.c | 1 +
drivers/media/test-drivers/vivid/vivid-ctrls.c | 15 +-
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 38 +-
drivers/media/test-drivers/vivid/vivid-vid-cap.h | 1 +
drivers/media/test-drivers/vivid/vivid-vid-out.c | 6 +
drivers/media/usb/airspy/airspy.c | 8 +-
drivers/media/usb/cx231xx/cx231xx-cards.c | 16 +-
drivers/media/usb/msi2500/msi2500.c | 32 +-
drivers/media/usb/pwc/pwc-if.c | 13 +-
drivers/media/usb/uvc/uvc_video.c | 76 ++-
drivers/media/usb/uvc/uvcvideo.h | 4 +
drivers/media/v4l2-core/v4l2-ctrls-core.c | 13 +
drivers/media/v4l2-core/v4l2-ctrls-request.c | 14 +-
drivers/misc/fastrpc.c | 3 +-
drivers/mtd/mtdswap.c | 5 +-
drivers/mtd/nand/ecc-mtk.c | 16 +-
drivers/net/amt.c | 87 +++-
drivers/net/bonding/bond_alb.c | 10 +-
drivers/net/bonding/bond_main.c | 3 +-
drivers/net/can/c_can/c_can_main.c | 8 +-
drivers/net/can/ctucanfd/ctucanfd_base.c | 14 +-
drivers/net/can/ctucanfd/ctucanfd_pci.c | 3 +-
drivers/net/can/softing/softing_fw.c | 46 +-
drivers/net/can/usb/ems_usb.c | 43 ++
drivers/net/can/usb/etas_es58x/es58x_core.c | 1 -
drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c | 1 +
drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 13 +-
drivers/net/can/usb/peak_usb/pcan_usb_core.c | 1 -
drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 40 +-
drivers/net/can/usb/peak_usb/pcan_usb_pro.c | 20 +-
drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 11 +-
drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 51 +-
drivers/net/ethernet/aquantia/atlantic/aq_ring.h | 1 +
drivers/net/ethernet/aquantia/atlantic/aq_vec.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 12 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 +
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 7 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 22 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 1 +
drivers/net/ethernet/google/gve/gve.h | 3 +
drivers/net/ethernet/google/gve/gve_main.c | 3 +
drivers/net/ethernet/google/gve/gve_rx_dqo.c | 33 ++
drivers/net/ethernet/hisilicon/hip04_eth.c | 11 +-
drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 1 -
drivers/net/ethernet/huawei/hinic/hinic_dev.h | 2 -
drivers/net/ethernet/huawei/hinic/hinic_ethtool.c | 21 -
drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
drivers/net/ethernet/intel/i40e/i40e_debugfs.c | 121 +----
drivers/net/ethernet/intel/ice/ice_main.c | 10 +
drivers/net/ethernet/intel/ice/ice_ptp.c | 2 +-
drivers/net/ethernet/intel/igbvf/netdev.c | 2 -
.../ethernet/marvell/octeontx2/nic/otx2_flows.c | 1 +
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 2 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 6 +-
.../net/ethernet/marvell/prestera/prestera_pci.c | 3 +
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 16 +-
drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 15 +
.../ethernet/mellanox/mlx5/core/esw/acl/helper.c | 2 +-
.../net/ethernet/mellanox/mlxsw/spectrum_span.c | 2 +-
.../ethernet/netronome/nfp/nfpcore/nfp_resource.c | 3 +
drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 44 +-
drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 14 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 35 ++
drivers/net/geneve.c | 3 +
drivers/net/gtp.c | 5 +-
drivers/net/mctp/mctp-serial.c | 2 +-
drivers/net/phy/phylink.c | 29 +-
drivers/net/ppp/ppp_generic.c | 154 +++---
drivers/net/ppp/pppoe.c | 2 +
drivers/net/ppp/pptp.c | 1 +
drivers/net/slip/slip.c | 4 +
drivers/net/thunderbolt.c | 33 +-
drivers/net/usb/ax88179_178a.c | 4 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 22 +-
drivers/net/vrf.c | 2 +-
drivers/net/vxlan/vxlan_core.c | 22 +-
drivers/net/wan/wanxl.c | 3 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +
drivers/net/wireless/ath/ath11k/pci.c | 4 +
drivers/net/wireless/ath/ath11k/qmi.c | 11 +-
drivers/net/wireless/ath/ath6kl/txrx.c | 10 +-
drivers/net/wireless/ath/ath6kl/wmi.c | 20 +
drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +-
drivers/net/wireless/ath/carl9170/rx.c | 7 +-
drivers/net/wireless/ath/carl9170/tx.c | 2 +-
drivers/net/wireless/atmel/at76c50x-usb.c | 7 +-
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 2 +-
.../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 8 +-
.../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 2 +-
drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 3 +-
drivers/net/wireless/intersil/p54/txrx.c | 8 +
drivers/net/wireless/mac80211_hwsim.c | 1 +
drivers/net/wireless/marvell/libertas/firmware.c | 1 +
.../net/wireless/marvell/mwifiex/11n_rxreorder.c | 2 +-
drivers/net/wireless/marvell/mwifiex/tdls.c | 2 +-
drivers/net/wireless/marvell/mwifiex/uap_event.c | 24 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 6 +
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 2 +
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 18 +-
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 10 +-
drivers/net/wireless/microchip/wilc1000/hif.c | 5 +
drivers/phy/xilinx/phy-zynqmp.c | 127 +++--
drivers/pinctrl/Kconfig | 2 +
drivers/pinctrl/devicetree.c | 4 +
drivers/pinctrl/pinctrl-amd.c | 3 +-
drivers/pinctrl/qcom/pinctrl-sc8280xp.c | 21 +-
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 4 +-
drivers/platform/loongarch/loongson-laptop.c | 1 +
.../uncore-frequency/uncore-frequency-common.c | 11 +-
drivers/power/supply/bq25890_charger.c | 2 +-
drivers/ptp/ptp_ocp.c | 4 +-
drivers/regulator/devres.c | 59 +++
drivers/s390/block/dasd_ioctl.c | 2 +-
drivers/s390/crypto/zcrypt_api.c | 2 +-
drivers/s390/crypto/zcrypt_ccamisc.c | 26 +-
drivers/s390/net/qeth_core.h | 4 +-
drivers/s390/net/qeth_core_main.c | 3 +
drivers/s390/scsi/zfcp_aux.c | 1 +
drivers/scsi/aic94xx/aic94xx_hwi.c | 2 +-
drivers/scsi/aic94xx/aic94xx_init.c | 6 +-
drivers/scsi/hisi_sas/hisi_sas_main.c | 6 +-
drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 16 +-
drivers/scsi/isci/host.h | 2 +-
drivers/scsi/isci/init.c | 4 +-
drivers/scsi/libiscsi.c | 2 +-
drivers/scsi/libiscsi_tcp.c | 8 +-
drivers/scsi/libsas/sas_ata.c | 8 +-
drivers/scsi/libsas/sas_discover.c | 35 +-
drivers/scsi/libsas/sas_expander.c | 2 +-
drivers/scsi/libsas/sas_host_smp.c | 4 +-
drivers/scsi/libsas/sas_init.c | 51 +-
drivers/scsi/libsas/sas_phy.c | 8 +-
drivers/scsi/libsas/sas_port.c | 6 +-
drivers/scsi/libsas/sas_scsi_host.c | 14 +-
drivers/scsi/mvsas/mv_init.c | 4 +-
drivers/scsi/pm8001/pm8001_init.c | 2 +-
drivers/scsi/scsi_debug.c | 12 +-
drivers/spi/spi-fsl-dspi.c | 13 +-
drivers/staging/media/meson/vdec/vdec.c | 4 +-
drivers/staging/media/sunxi/cedrus/cedrus.c | 6 +-
drivers/staging/media/sunxi/cedrus/cedrus_h264.c | 3 +
drivers/staging/media/tegra-video/vi.c | 4 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 12 +-
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 2 +-
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 +
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 6 +-
drivers/target/target_core_transport.c | 12 +-
drivers/thermal/thermal_hwmon.c | 3 +-
drivers/thunderbolt/eeprom.c | 9 +-
drivers/thunderbolt/icm.c | 2 +-
drivers/tty/serial/8250/8250_dma.c | 12 +-
drivers/tty/serial/8250/8250_mid.c | 14 +-
drivers/tty/serial/sc16is7xx.c | 12 +
drivers/tty/vt/keyboard.c | 5 +-
drivers/tty/vt/vt_ioctl.c | 2 +
drivers/usb/atm/cxacru.c | 2 +
drivers/usb/atm/ueagle-atm.c | 17 +
drivers/usb/cdns3/cdnsp-gadget.c | 4 +-
drivers/usb/chipidea/core.c | 1 +
drivers/usb/gadget/function/f_midi.c | 1 +
drivers/usb/gadget/function/f_ncm.c | 19 +-
drivers/usb/gadget/function/f_printer.c | 23 +-
drivers/usb/gadget/function/uvc_v4l2.c | 2 +
drivers/usb/gadget/udc/bdc/bdc_core.c | 20 +
drivers/usb/gadget/udc/bdc/bdc_udc.c | 7 +-
drivers/usb/gadget/udc/dummy_hcd.c | 40 +-
drivers/usb/gadget/udc/fsl_udc_core.c | 1 -
drivers/usb/gadget/udc/snps_udc_core.c | 1 -
drivers/usb/host/xhci-pci.c | 1 +
drivers/usb/host/xhci.c | 15 +-
drivers/usb/host/xhci.h | 1 +
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 5 +
drivers/usb/serial/io_edgeport.c | 3 +-
drivers/usb/serial/keyspan_pda.c | 44 +-
drivers/usb/serial/option.c | 1 +
drivers/usb/storage/unusual_devs.h | 7 +
drivers/vhost/vdpa.c | 9 +-
drivers/vhost/vhost.c | 8 +
drivers/video/fbdev/core/bitblit.c | 9 +-
drivers/watchdog/watchdog_pretimeout.c | 2 +
fs/binfmt_elf_fdpic.c | 4 +
fs/binfmt_misc.c | 9 +-
fs/btrfs/free-space-cache.c | 3 +
fs/btrfs/inode.c | 1 +
fs/btrfs/relocation.c | 2 +
fs/ceph/caps.c | 1 +
fs/crypto/fscrypt_private.h | 32 +-
fs/crypto/inline_crypt.c | 57 +--
fs/crypto/keyring.c | 212 ++++-----
fs/crypto/keysetup_v1.c | 8 +-
fs/exec.c | 2 +-
fs/exfat/balloc.c | 54 ++-
fs/f2fs/super.c | 25 +-
fs/namespace.c | 5 +
fs/nfs/nfs4proc.c | 5 +
fs/proc/namespaces.c | 4 +-
fs/smb/client/cifssmb.c | 12 +-
fs/smb/client/misc.c | 34 +-
fs/smb/client/sess.c | 2 +-
fs/smb/client/smb2ops.c | 25 +-
fs/smb/server/smb2misc.c | 5 +
fs/smb/server/smb2pdu.c | 9 +-
fs/smb/server/vfs_cache.c | 6 +-
include/linux/dma/qcom_bam_dma.h | 21 +-
include/linux/filter.h | 15 +-
include/linux/fscrypt.h | 18 +-
include/linux/netdevice.h | 5 -
include/linux/netfilter/ipset/ip_set.h | 2 +-
include/linux/netfilter/nf_conntrack_sip.h | 2 +-
include/linux/ppp_channel.h | 3 +-
include/linux/regulator/consumer.h | 7 +
include/linux/seqlock.h | 10 +-
include/media/videobuf2-core.h | 8 +-
include/net/act_api.h | 19 +
include/net/addrconf.h | 4 +-
include/net/af_unix.h | 1 +
include/net/bluetooth/hci_core.h | 18 +
include/net/bluetooth/l2cap.h | 1 +
include/net/bluetooth/rfcomm.h | 3 +
include/net/ip6_fib.h | 6 +-
include/net/ip6_route.h | 11 +-
include/net/ip_vs.h | 56 ++-
include/net/neighbour.h | 8 +-
include/net/netfilter/nf_conntrack_expect.h | 5 +-
include/net/route.h | 2 +
include/net/sch_generic.h | 1 +
include/net/sctp/structs.h | 3 +-
include/scsi/libsas.h | 8 +-
include/uapi/linux/btrfs.h | 2 +-
io_uring/rw.c | 28 +-
kernel/audit.c | 11 +-
kernel/auditfilter.c | 6 +-
kernel/bpf/bpf_lsm.c | 1 -
kernel/bpf/core.c | 68 ++-
kernel/bpf/dispatcher.c | 2 +-
kernel/bpf/verifier.c | 32 +-
kernel/futex/core.c | 82 +++-
kernel/sched/psi.c | 6 +
kernel/trace/ftrace.c | 13 +
kernel/trace/ring_buffer.c | 10 +-
kernel/trace/trace_eprobe.c | 3 +-
kernel/trace/trace_events.c | 6 +-
kernel/trace/trace_events_filter.c | 3 +
kernel/trace/trace_mmiotrace.c | 5 +-
kernel/trace/trace_probe.c | 13 +-
lib/.gitignore | 2 -
lib/Makefile | 34 +-
lib/assoc_array.c | 3 +-
lib/rhashtable.c | 1 +
lib/test_fortify/.gitignore | 2 +
lib/test_fortify/Makefile | 29 ++
mm/damon/core.c | 13 +
mm/huge_memory.c | 16 +-
mm/hugetlb.c | 20 +-
mm/page_reporting.c | 6 +-
mm/percpu-km.c | 2 +-
net/atm/common.c | 14 +-
net/bluetooth/6lowpan.c | 20 +-
net/bluetooth/hci_conn.c | 19 +-
net/bluetooth/hci_sync.c | 13 +-
net/bluetooth/hidp/core.c | 30 +-
net/bluetooth/l2cap_core.c | 38 +-
net/bluetooth/rfcomm/core.c | 17 +
net/bluetooth/rfcomm/tty.c | 7 +-
net/bridge/br_mrp.c | 8 +-
net/bridge/br_multicast.c | 1 +
net/bridge/br_netfilter_hooks.c | 6 +-
net/bridge/br_netlink_tunnel.c | 3 +-
net/bridge/br_private.h | 6 +-
net/bridge/br_vlan.c | 10 +-
net/bridge/br_vlan_options.c | 3 +-
net/bridge/netfilter/ebt_nflog.c | 17 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 1 +
net/can/bcm.c | 528 +++++++++++++++------
net/can/isotp.c | 295 +++++++++---
net/can/j1939/bus.c | 2 +
net/can/j1939/j1939-priv.h | 3 +
net/can/j1939/main.c | 8 +-
net/can/j1939/transport.c | 22 +-
net/ceph/auth_x.c | 9 +-
net/ceph/ceph_common.c | 4 +-
net/ceph/mon_client.c | 4 +-
net/ceph/osdmap.c | 12 +-
net/core/dst_cache.c | 2 +-
net/core/filter.c | 2 +-
net/core/lwt_bpf.c | 4 +-
net/core/sock.c | 1 -
net/core/sock_map.c | 2 +
net/core/xdp.c | 2 +-
net/hsr/hsr_slave.c | 2 +
net/ipv4/fib_semantics.c | 101 ++--
net/ipv4/fib_trie.c | 2 +-
net/ipv4/icmp.c | 18 +-
net/ipv4/inet_connection_sock.c | 20 +-
net/ipv4/ip_tunnel.c | 2 +-
net/ipv4/nexthop.c | 2 +-
net/ipv4/route.c | 31 +-
net/ipv4/tcp_bpf.c | 4 +-
net/ipv4/tcp_ipv4.c | 296 +++++++++---
net/ipv4/udp_offload.c | 4 +-
net/ipv6/fib6_rules.c | 1 +
net/ipv6/icmp.c | 8 +-
net/ipv6/ila/ila_common.c | 12 +
net/ipv6/ila/ila_lwt.c | 4 +-
net/ipv6/ip6_fib.c | 17 +-
net/ipv6/ip6_output.c | 20 +-
net/ipv6/ip6_tunnel.c | 3 +
net/ipv6/ip6mr.c | 2 +-
net/ipv6/ndisc.c | 12 +-
net/ipv6/ping.c | 2 +-
net/ipv6/raw.c | 6 +-
net/ipv6/route.c | 36 +-
net/ipv6/tcp_ipv6.c | 4 +-
net/ipv6/udp.c | 11 +-
net/ipv6/xfrm6_policy.c | 3 +-
net/iucv/af_iucv.c | 21 +-
net/l2tp/l2tp_ip6.c | 2 +-
net/l2tp/l2tp_ppp.c | 1 +
net/mac80211/iface.c | 8 +-
net/mac80211/rx.c | 2 +
net/mac80211/s1g.c | 4 +
net/mac802154/llsec.c | 5 +
net/mpls/af_mpls.c | 4 +
net/mpls/mpls_iptunnel.c | 2 +-
net/mptcp/options.c | 12 +-
net/mptcp/protocol.c | 1 +
net/ncsi/ncsi-netlink.c | 4 +
net/netfilter/ipset/ip_set_bitmap_gen.h | 4 +-
net/netfilter/ipset/ip_set_core.c | 6 +-
net/netfilter/ipset/ip_set_hash_gen.h | 4 +-
net/netfilter/ipset/ip_set_list_set.c | 4 +-
net/netfilter/ipvs/ip_vs_app.c | 4 +-
net/netfilter/ipvs/ip_vs_conn.c | 44 +-
net/netfilter/ipvs/ip_vs_core.c | 232 +++++----
net/netfilter/ipvs/ip_vs_ctl.c | 77 ++-
net/netfilter/ipvs/ip_vs_lc.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 21 +-
net/netfilter/ipvs/ip_vs_proto_tcp.c | 50 +-
net/netfilter/ipvs/ip_vs_proto_udp.c | 54 +--
net/netfilter/ipvs/ip_vs_sync.c | 7 +-
net/netfilter/ipvs/ip_vs_xmit.c | 56 ++-
net/netfilter/nf_conntrack_broadcast.c | 1 +
net/netfilter/nf_conntrack_core.c | 7 +-
net/netfilter/nf_conntrack_expect.c | 1 +
net/netfilter/nf_conntrack_h323_main.c | 12 +-
net/netfilter/nf_conntrack_helper.c | 5 +
net/netfilter/nf_conntrack_netlink.c | 18 +-
net/netfilter/nf_conntrack_sip.c | 4 +-
net/netfilter/nf_flow_table_core.c | 8 +-
net/netfilter/nf_flow_table_ip.c | 4 +-
net/netfilter/nf_nat_sip.c | 2 +-
net/netfilter/nft_payload.c | 12 +-
net/netfilter/nft_rt.c | 2 +-
net/netfilter/xt_hashlimit.c | 16 +-
net/openvswitch/actions.c | 26 +-
net/openvswitch/datapath.c | 54 ++-
net/openvswitch/datapath.h | 2 +-
net/openvswitch/flow.c | 11 +-
net/openvswitch/meter.c | 33 +-
net/openvswitch/vport.c | 2 +-
net/packet/af_packet.c | 13 +-
net/phonet/pep.c | 2 +
net/qrtr/af_qrtr.c | 8 +
net/qrtr/ns.c | 33 +-
net/rds/ib.c | 4 +
net/rds/ib_cm.c | 4 +
net/rds/recv.c | 15 +
net/rds/tcp.c | 14 +-
net/sched/act_gact.c | 5 +
net/sched/act_police.c | 6 +
net/sched/act_tunnel_key.c | 14 +-
net/sched/cls_route.c | 35 +-
net/sched/sch_api.c | 9 +
net/sched/sch_cake.c | 1 -
net/sctp/associola.c | 14 +-
net/sctp/auth.c | 2 +-
net/sctp/ipv6.c | 2 +-
net/sctp/outqueue.c | 1 +
net/sctp/sm_make_chunk.c | 26 +-
net/sctp/sm_statefuns.c | 8 +-
net/sctp/stream.c | 6 +-
net/smc/af_smc.c | 3 +-
net/smc/smc_core.c | 2 +-
net/smc/smc_llc.c | 3 +-
net/smc/smc_rx.c | 19 +-
net/sunrpc/xprtrdma/rpc_rdma.c | 4 +
net/sunrpc/xprtrdma/verbs.c | 12 +-
net/tipc/core.c | 5 +
net/tipc/discover.c | 14 +-
net/tipc/netlink.c | 6 +-
net/tipc/netlink_compat.c | 4 +
net/tipc/node.c | 15 +-
net/tipc/socket.c | 3 +-
net/tls/tls_sw.c | 2 +-
net/unix/af_unix.c | 2 +
net/unix/garbage.c | 81 ++--
net/vmw_vsock/virtio_transport.c | 14 +-
net/wireless/core.c | 1 +
net/wireless/nl80211.c | 20 +-
net/wireless/pmsr.c | 21 +-
net/wireless/scan.c | 2 +-
net/x25/af_x25.c | 8 +-
net/xfrm/xfrm_policy.c | 7 +-
scripts/remove-stale-files | 2 +
security/integrity/ima/ima_appraise.c | 9 +-
security/keys/keyring.c | 14 +-
sound/core/pcm_native.c | 7 +
sound/core/seq/seq_timer.c | 13 +-
sound/pci/lx6464es/lx6464es.c | 5 +-
sound/pci/lx6464es/lx_core.c | 5 +-
sound/soc/amd/ps/pci-ps.c | 2 +-
sound/soc/codecs/bt-sco.c | 10 +-
sound/soc/codecs/max98090.c | 5 +-
sound/soc/codecs/max98095.c | 5 +-
sound/soc/codecs/tas2562.c | 35 +-
sound/soc/meson/aiu-fifo-spdif.c | 5 +
sound/usb/6fire/chip.c | 4 +
sound/usb/endpoint.c | 20 +-
sound/usb/midi.c | 2 +
sound/usb/quirks.c | 2 +
sound/usb/usx2y/usX2Yhwdep.c | 2 +
sound/usb/usx2y/usx2yhwdeppcm.c | 2 +
tools/testing/selftests/alsa/mixer-test.c | 1 +
.../selftests/bpf/prog_tests/sockmap_listen.c | 21 +-
tools/testing/selftests/bpf/test_maps.c | 13 +-
tools/testing/selftests/clone3/clone3_set_tid.c | 2 +-
.../ftrace/test.d/dynevent/add_remove_eprobe.tc | 16 +-
tools/testing/selftests/net/af_unix/config | 4 +
tools/testing/selftests/net/openvswitch/config | 16 +
563 files changed, 6112 insertions(+), 2862 deletions(-)
5 days, 21 hours
- 10
- 9
[PATCH 5.15 000/456] 5.15.216-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.15.216 release.
There are 456 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.216-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.15.216-rc1
Bryam Vargas <hexlabsecurity(a)proton.me>
thunderbolt: Bound the DROM dual link port number before indexing sw->ports
Qing Ming <a0yami(a)mailbox.org>
sctp: clear new_transport when removing a peer
Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn>
sctp: fix use-after-free of cached ASCONF chunk
Baul Lee <baul.lee(a)xbow.com>
sctp: keep chunk->transport in step with the list it is queued on
Xu Rao <raoxu(a)uniontech.com>
scsi: scsi_debug: Negate wrapped memcmp() result
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf, sockmap: Fix sk_redir use-after-free in send verdict
Zhiling Zou <zhilinz(a)nebusec.ai>
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
Yuejie Shi <syjcnss(a)gmail.com>
ipv6: fix Route Information option length validation
Tengda Wu <wutengda(a)huaweicloud.com>
ring-buffer: Use current_context for safe per-CPU buffer swap
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
Jun Yang <junvyyang(a)tencent.com>
tipc: read le->link under the node lock in tipc_node_link_down()
Jun Yang <junvyyang(a)tencent.com>
vhost: reset the vring metadata cache on vring reconfiguration
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: avoid refilling the RX queue after teardown
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: read virtqueues under worker locks
Baul Lee <baul.lee(a)xbow.com>
vxlan: do not arm the ageing timer on a device that is down
Zhiling Zou <zhilinz(a)nebusec.ai>
xdp: reject clones that overrun skb_shared_info tailroom
Hyunjung Ko <hj351016(a)gmail.com>
net/sched: act_gact, act_police: range check the fallback control action
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free RX pages of consumed but not refilled buffers
Zhiling Zou <zhilinz(a)nebusec.ai>
netfilter: bridge: release template ct on non-IP path
Kyle Zeng <kylebot(a)openai.com>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev
Rik van Riel <riel(a)surriel.com>
fbdev: bitblit: bound-check glyph index in bit_cursor()
Michael Wu <michael(a)allwinnertech.com>
tracing: Fix race between update_event_fields and, event_define_fields
Baul Lee <baul.lee(a)xbow.com>
ALSA: usx2y: bound the hwdep mmap fault offset
Eddie Lin <eddie.lin(a)oss.qualcomm.com>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free
Anandu Krishnan E <anandu.e(a)oss.qualcomm.com>
misc: fastrpc: fix channel ctx ref leak when session alloc fails
Mariano Baragiola <mbaragiola(a)linux.com>
staging: rtl8723bs: validate monitor transmit frame lengths
Panagiotis Petrakopoulos <npetrakopoulos2003(a)gmail.com>
staging: rtl8723bs: fix missing shared-key auth challenge length check
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in WMM_param_handler()
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
Cunhao Lu <1579567540(a)qq.com>
serial: 8250_dma: Clear stale RX state on shutdown
Chengfeng Ye <nicoyip.dev(a)gmail.com>
ipv4: fix use-after-free in fib_nhc_update_mtu()
Zihan Xi <zihanx(a)nebusec.ai>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops
Eric Biggers <ebiggers(a)kernel.org>
fscrypt: Replace mk_users keyring with simple list
Zhu Yanjun <yanjun.zhu(a)linux.dev>
RDMA/rxe: Fix a use-after-free problem in rxe_mmap
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP
Keno Fischer <keno(a)juliacomputing.com>
futex: Prevent robust futex exit race some more
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
Marco Elver <elver(a)google.com>
Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - fix information leak in evdev_pass_values()
Joshua Rogers <linux(a)joshua.hu>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
Joshua Rogers <linux(a)joshua.hu>
vt: add permission check for KDSKBMETA ioctl
Baul Lee <baul.lee(a)xbow.com>
net: bridge: mrp: fix uninitialised bytes on the wire
Chengfeng Ye <nicoyip.dev(a)gmail.com>
netfilter: ebt_nflog: pin the NFLOG backend
Qihang Tang <q.h.hack.winter(a)gmail.com>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
Sergey V. Frolov <Sergey.V.Frolov(a)kaspersky.com>
net: octeontx2-pf: Fix UB in shift operation
Zhiling Zou <zhilinz(a)nebusec.ai>
net: openvswitch: reallocate update replies for mismatched IDs
Doruk Tan Ozturk <doruk(a)0sec.ai>
net/packet: reset the MAC header on the packet-socket transmit path
Kyle Zeng <kylebot(a)openai.com>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
Julian Anastasov <ja(a)ssi.bg>
ipvs: properly update the overload flag on dest edit
Julian Anastasov <ja(a)ssi.bg>
ipvs: add totalconns for dest
Lincoln Wallace <locnnil0(a)gmail.com>
ima: fix out-of-bounds read in xattr_verify()
Sonali Pradhan <sonalipradhan(a)google.com>
usb: gadget: f_ncm: Use unsigned int for ndp_index
Pawel Laszczak <pawell(a)cadence.com>
usb: cdnsp: fix incorrect endian conversions for APB timeout register
Xu Rao <raoxu(a)uniontech.com>
thunderbolt: icm: Preserve USB4 proxy data-valid bit
Aleksandr Nogikh <nogikh(a)google.com>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
Baul Lee <baul.lee(a)xbow.com>
ALSA: usb-audio: fix OOB write on Type II inbound URBs
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - sanitize event type index when fetching event masks
Larisa Grigore <larisa.grigore(a)nxp.com>
spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers
Wilken Gottwalt <wilken.gottwalt(a)posteo.net>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination
Maximilian Immanuel Brandtner <maxbr(a)linux.ibm.com>
tls: don't abort the connection on signal-interrupted sends
Xin Long <lucien.xin(a)gmail.com>
sctp: clear control chunk transport if it is being removed
Hongyan Xu <getshell(a)seu.edu.cn>
ata: pata_sl82c105: fix bridge revision use-after-free
Fan XinRan <shinjiangjiang(a)gmail.com>
net: thunderbolt: Tear down DMA paths before stopping the rings
Łukasz Patron <priv.luk(a)gmail.com>
net: qrtr: ns: Raise lookup limit to 128
Sidraya Jayagond <sidraya(a)linux.ibm.com>
net/smc: fix TOCTOU race between smc_listen_out() and listener close
Eric Dumazet <edumazet(a)google.com>
net: remove WARN_ON_ONCE() from sk_mc_loop()
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
net: prestera: validate firmware header length
Henry Martin <bsdhenrymartin(a)gmail.com>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: fix TFO max_qlen accounting across reuseport migration
Qing Luo <luoqing(a)kylinos.cn>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure
Keegan Freyhof <keegan.freyhof(a)broadcom.com>
bnxt_en: Fix PTP PPS setting bug
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips
Martin Kaiser <martin(a)kaiser.cx>
selftests/ftrace: refactor eprobes test to fix argument checks
Linyu Yuan <quic_linyyuan(a)quicinc.com>
selftests/ftrace: Add test case for GRP/ only input
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
net/openvswitch: check Ethernet header length in key_extract()
Toke Høiland-Jørgensen <toke(a)toke.dk>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
udp: fix potential use-after-free in tunnel segmentation
Yousef Alhouseen <alhouseenyousef(a)gmail.com>
vhost/vdpa: reject overflowing PA map page counts on 32-bit
Babanpreet Singh <bbnpreetsingh(a)gmail.com>
counter: microchip-tcb-capture: Fix DT channel validation
Michael Guralnik <michaelgur(a)nvidia.com>
net/mlx5: fw_tracer, return NULL on create error
Jiawen Liu <1298662399(a)qq.com>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_route: fix fastmap use-after-free on filter
Mahanta Jambigi <mjambigi(a)linux.ibm.com>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn>
bpf: Preserve pointer state for commuted arithmetic
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
Yuho Choi <dbgh9129(a)gmail.com>
ARM: npcm: Fix OF node refcount leaks in SMP setup
Anna Schumaker <anna.schumaker(a)hammerspace.com>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
Scott Mayhew <smayhew(a)redhat.com>
nfs4: take a reference on the nfs_client when running FREE_STATEID
Harald Freudenberger <freude(a)linux.ibm.com>
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
Al Viro <viro(a)zeniv.linux.org.uk>
mount: honour SB_NOUSER in the new mount API
Junjie Cao <junjie.cao(a)intel.com>
gpio: pch: use raw_spinlock_t for the register lock
Tze Yee Ng <tze.yee.ng(a)altera.com>
firmware: stratix10-svc: fix memory leaks and list corruption bugs
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix skb leak on flow key update failure during recirculation
Kiryl Shutsemau (Meta) <kas(a)kernel.org>
mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios
HyeongJun An <sammiee5311(a)gmail.com>
HID: logitech-dj: Fix maxfield check in DJ short report validation
Zack Rusin <zack.rusin(a)broadcom.com>
drm/vmwgfx: bound DMA command body size against suffix pointer
Zack Rusin <zack.rusin(a)broadcom.com>
drm/vmwgfx: validate DRAW_PRIMITIVES header size before division
Harkirat Gill <harkirat.gill(a)amd.com>
drm/amdgpu: cap GTT size to physical RAM on APUs
Candice Li <candice.li(a)amd.com>
drm/amdgpu: restore UMD profile pstate after runtime resume
Maíra Canal <mcanal(a)igalia.com>
drm/vc4: Zero the tile state data array before each BIN job
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: peak_usb: validate uCAN receive record lengths
Maoyi Xie <maoyixie.tju(a)gmail.com>
can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error
James Gao <jamesgao5(a)outlook.com>
can: peak_usb: add bounds check for USB channel index
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: softing: fw_parse(): validate firmware record spans
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents
Abdun Nihaal <nihaal(a)cse.iitm.ac.in>
can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams()
Oleksij Rempel <linux(a)rempel-privat.de>
can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
Guangshuo Li <lgs201920130244(a)gmail.com>
can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: ems_usb: validate CPC message lengths
Lucas Martins Alves <lucas.alves(a)lumal21.com.br>
can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured
Liem <liem16213(a)gmail.com>
i2c: imx: Cancel hrtimer before clearing slave pointer
H. Nikolaus Schaller <hns(a)goldelico.com>
i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix skb leak on flow key update failure during ct
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix potential UAF on meter attach failure
Nava kishore Manne <nava.kishore.manne(a)amd.com>
phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB
Nava kishore Manne <nava.kishore.manne(a)amd.com>
phy: zynqmp: use read-modify-write for SERDES scrambler bypass
Nava kishore Manne <nava.kishore.manne(a)amd.com>
phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask
Holger Dengler <dengler(a)linux.ibm.com>
s390/zcrypt: Validate length for CCA ECC private key requests
Holger Dengler <dengler(a)linux.ibm.com>
s390/zcrypt: Validate length for CCA AES cipher key requests
Jan Höppner <hoeppner(a)linux.ibm.com>
s390/dasd: Fix potential NULL pointer dereference
Aswin Karuvally <aswin(a)linux.ibm.com>
s390/qeth: Check CAP_NET_ADMIN for private ioctls
Abdun Nihaal <nihaal(a)cse.iitm.ac.in>
cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init()
Myeonghun Pak <mhun512(a)gmail.com>
i2c: amd-mp2: Unregister callback on adapter add failure
Hongyan Xu <getshell(a)seu.edu.cn>
hwmon: (npcm750-pwm-fan): stop fan timer on device detach
Asim Viladi Oglu Manizada <manizada(a)pm.me>
sctp: prevent peer transport count overflow
Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn>
sctp: reject stale cookies with mismatched verification tags
Chris Gellermann <christian.gellermann(a)codasip.com>
selftests/clone3: fix wild pointer access of getline due to missing init
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/filters: Fix false positive match in regex_match_full()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing: Check return value of __register_event() in trace_module_add_events()
Eric Dumazet <edumazet(a)google.com>
vxlan: use pskb_network_may_pull() in route_shortcircuit()
Eric Dumazet <edumazet(a)google.com>
vxlan: use neigh_ha_snapshot() in route_shortcircuit()
Eric Dumazet <edumazet(a)google.com>
vxlan: unclone skb head before modifying eth header in route_shortcircuit()
Eric Dumazet <edumazet(a)google.com>
vxlan: re-fetch eth header after route_shortcircuit()
Michael Bommarito <michael.bommarito(a)gmail.com>
um: vector: fix use-after-free in vector_mmsg_rx()
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/ps3: Fix map failure path in dma_ioc0_map_pages()
Zhiling Zou <zhilinz(a)nebusec.ai>
net: ipv6: clear suppressed fib6 rule result
Zhiling Zou <zhilinz(a)nebusec.ai>
net: bridge: stop fast-leave after deleting a port group
Link Lin <linkl(a)google.com>
mm/page_reporting: use system_freezable_wq to fix UAF during suspend
Christian Brauner <brauner(a)kernel.org>
binfmt_misc: reject a flag character as the field delimiter
Zhao Li <enderaoelyther(a)gmail.com>
wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames
Zihan Xi <zihanx(a)nebusec.ai>
tipc: avoid use-after-free in poll trace queue dumps
David Lee <david.lee(a)trailofbits.com>
netfilter: ipset: do not update comments from kernel-side hash adds
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
net/smc: fix socket use-after-free during link group termination
Zhiling Zou <roxy520tt(a)gmail.com>
ipvs: do not propagate one-packet flag to synced conns
Matt Vollrath <tactii(a)gmail.com>
igbvf: Fix leak in TX DMA error cleanup
Dawei Feng <dawei.feng(a)seu.edu.cn>
e1000: fix memory leak in e1000_probe()
Md Sadre Alam <md.alam(a)oss.qualcomm.com>
dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+
Sonali Pradhan <sonalipradhan(a)google.com>
ALSA: usb-audio: Clamp frame size in implicit-feedback mode
Sonali Pradhan <sonalipradhan(a)google.com>
ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set
Baul Lee <baul.lee(a)xbow.com>
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()
Haidar Lee <haidar.lee(a)adlinktech.com>
ASoC: tas2562: fix broken entries in the volume lookup table
Haidar Lee <haidar.lee(a)adlinktech.com>
ASoC: tas2562: fix DVC coefficient write order
Norbert Szetei <norbert(a)doyensec.com>
ALSA: pcm: wake linked drain waiters on unlink
Xu Rao <raoxu(a)uniontech.com>
ALSA: lx6464es: fix period byte count for 16-bit streams
Takashi Iwai <tiwai(a)suse.de>
ALSA: 6fire: Fix UAF at error handling during probe
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
bpf: lwt: Fix dst reference leak on reroute failure
Sangho Lee <kudo3228(a)gmail.com>
Bluetooth: HIDP: validate numbered report payloads
Sangho Lee <kudo3228(a)gmail.com>
Bluetooth: HIDP: reject frames without a transaction header
Luxiao Xu <rakukuip(a)gmail.com>
audit: fix potential use-after-free in audit_del_rule()
Zhan Xusheng <zhanxusheng1024(a)gmail.com>
audit: fix potential integer overflow in audit_log_n_string()
Charles Vosburgh <trilobyte777(a)gmail.com>
sctp: validate Adaptation Indication parameter length
Xiangfeng Cai <caixiangfeng(a)bytedance.com>
mm/hugetlb: fix list corruption in allocate_file_region_entries()
Zi Yan <ziy(a)nvidia.com>
mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
Benjamin Boortz <bennib(a)mailbox.org>
pinctrl: bm1880: add missing select GENERIC_PINCONF
Karl Mehltretter <kmehltretter(a)gmail.com>
pinctrl: devicetree: don't free uninitialized dev_name on error path
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
rhashtable: clear stale iter->p on table restart
Denis V. Lunev <den(a)openvz.org>
qede: sync udp_tunnel ports outside qede_lock in the recovery path
Suman Ghosh <sumang(a)marvell.com>
octeontx2-pf: Set correct sequence for carrier off and tx queue stop
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/mmiotrace: Reset dropped_count in mmio_reset_data()
Minhong He <heminhong(a)kylinos.cn>
can: isotp: check register_netdevice_notifier() error in module init
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
net: sxgbe: check descriptor ring allocation failures
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
net: sxgbe: free TX rings on RX allocation failure
Benjamin Block <bblock(a)linux.ibm.com>
scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req
Christian Marangi <ansuelsmth(a)gmail.com>
net: phylink: put link_gpio if phylink_create fails
Jiale Yao <yaojiale02(a)163.com>
Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus) Fix return value from pmbus_update_byte_data()
Zhao Li <enderaoelyther(a)gmail.com>
wifi: mac80211: validate individual TWT params before driver setup
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/boot: Fix treeboot-akebono CPU node lookup check
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/boot: Fix treeboot-currituck CPU node lookup check
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/boot: Fix simpleboot CPU node lookup check
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix PWM auto temp state array and bounds check
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Use cached PWM frequency value
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read()
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix cache updated before hardware write on I2C error
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
forcedeth: fix UAF of txrx_stats in nv_remove
David Corvaglia <david(a)corvaglia.dev>
net: bridge: mrp: fix Option TLV length in MRP_Test frames
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (nct6775-core) Prevent access to unsupported weight registers
Dawei Feng <dawei.feng(a)seu.edu.cn>
smb: client: fix buffer leaks in SMB1 read and write
HyeongJun An <sammiee5311(a)gmail.com>
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer
HyeongJun An <sammiee5311(a)gmail.com>
scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer
Xiang Mei <xmei5(a)asu.edu>
rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()
Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru>
rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
netfilter: nft_payload: fix mask build for partial field offload
Pablo Neira Ayuso <pablo(a)netfilter.org>
netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
Michael Bommarito <michael.bommarito(a)gmail.com>
assoc_array: trim the final shortcut word using the current chunk end
Michael Bommarito <michael.bommarito(a)gmail.com>
keys: make keyring key-chunk byte order agree with keyring_diff_objects()
Michael Bommarito <michael.bommarito(a)gmail.com>
keys: fix out-of-bounds read in keyring_get_key_chunk()
Ruoyu Wang <ruoyuw560(a)gmail.com>
drm/mediatek: Check CRTC state before freeing
Xiang Mei <xmei5(a)asu.edu>
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com>
phy: zynqmp: fix runtime PM leak on probe allocation failure
Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com>
phy: zynqmp: fix clock error handling in xpsgtr_phy_init()
Mike Looijmans <mike.looijmans(a)topic.nl>
phy-zynqmp: Postpone getting clock rate until actually needed
Sean Anderson <sean.anderson(a)seco.com>
phy: zynqmp: Allow variation in refclk rate
Uday Khare <udaykhare77(a)gmail.com>
ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup
Uday Khare <udaykhare77(a)gmail.com>
ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup
Hongling Zeng <zenghongling(a)kylinos.cn>
dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
Sabrina Dubroca <sd(a)queasysnail.net>
tls: separate no-async decryption request handling from async
Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com>
net: qrtr: ns: Raise node count limit to 512
Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com>
net: qrtr: ns: Limit the maximum server registration per node
Benjamin Tissoires <bentiss(a)kernel.org>
HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report
Lee Jones <lee(a)kernel.org>
HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write
Lee Jones <lee(a)kernel.org>
HID: logitech-dj: Standardise hid_report_enum variable nomenclature
Eddie Phillips <eddiephillips(a)google.com>
gve: fix Rx queue stall on alloc failure
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Fix sequence number when no EOF
Isaac Scott <isaac.scott(a)ideasonboard.com>
media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
Yehyeong Lee <yhlee(a)isslab.korea.ac.kr>
net: mpls: initialize rtm_tos in mpls_getroute()
Eric Dumazet <edumazet(a)google.com>
raw: fix a typo in raw_icmp_error()
Eric Dumazet <edumazet(a)google.com>
raw: remove unused variables from raw6_icmp_error()
Kyle Zeng <kylebot(a)openai.com>
openvswitch: fix GSO userspace truncation underflow
Devin Wittmayer <lucid_duck(a)justthetip.ca>
wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
Weiming Shi <bestswngs(a)gmail.com>
tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
Ce Sun <cesun102(a)amd.com>
drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
Boyuan Zhang <boyuan.zhang(a)amd.com>
drm/amdgpu: fix division by zero with invalid uvd dimensions
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx8: drop unecessary BUG_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()
Daehyeon Ko <4ncienth(a)gmail.com>
tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
Asim Viladi Oglu Manizada <manizada(a)pm.me>
pppoe: reload header pointer after dev_hard_header()
Doruk Tan Ozturk <doruk(a)0sec.ai>
mac802154: llsec: reject frames shorter than the authentication tag
Michael Bommarito <michael.bommarito(a)gmail.com>
ila: reload IPv6 header after pskb_may_pull in checksum adjust
Sergey Temerkhanov <sergey.temerkhanov(a)intel.com>
ice: use READ_ONCE() to access cached PHC time
Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de>
rbd: Reset positive result codes to zero in object map update path
Jann Horn <jannh(a)google.com>
proc: Fix broken error paths for namespace links
Fan Wu <fanwu01(a)zju.edu.cn>
net: hip04: fix RX buffer leak on build_skb failure
David Lee <david.lee(a)trailofbits.com>
net/x25: fix use-after-free in x25_kill_by_neigh()
Bryam Vargas <hexlabsecurity(a)proton.me>
net/iucv: fix use-after-free of a severed iucv_path
Hidayath Khan <hidayath(a)linux.ibm.com>
net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
Doruk Tan Ozturk <doruk(a)0sec.ai>
geneve: require CAP_NET_ADMIN in the device netns for changelink
Sungmin Kang <726ksm(a)gmail.com>
net: slip: serialize receive against buffer reallocation
Doruk Tan Ozturk <doruk(a)0sec.ai>
vxlan: require CAP_NET_ADMIN in the device netns for changelink
Breno Leitao <leitao(a)debian.org>
phonet: pep: fix use-after-free in pep_get_sb()
Lu Baolu <baolu.lu(a)linux.intel.com>
iommu/vt-d: Disallow SVA if page walk is not coherent
Christian Brauner <brauner(a)kernel.org>
binfmt_elf_fdpic: only honour the first PT_INTERP
Douya Le <ldy3087146292(a)gmail.com>
libceph: remove debugfs files before client teardown
Douya Le <ldy3087146292(a)gmail.com>
libceph: reject zero bucket types in crush_decode
Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de>
libceph: Reject monmaps advertising zero monitors
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
libceph: refresh auth->authorizer_buf{,_len} after authorizer update
Zhao Zhang <zzhan461(a)ucr.edu>
libceph: guard missing CRUSH type name lookup
Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de>
libceph: Fix multiplication overflow in decode_new_up_state_weight()
Douya Le <ldy3087146292(a)gmail.com>
libceph: bound get_version reply decode to front len
Bryam Vargas <hexlabsecurity(a)proton.me>
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
Jun Yang <junvyyang(a)tencent.com>
sctp: don't free the ASCONF's own transport in DEL-IP processing
Michael Bommarito <michael.bommarito(a)gmail.com>
mptcp: only set DATA_FIN when a mapping is present
Will Deacon <will(a)kernel.org>
Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"
Will Deacon <will(a)kernel.org>
arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()
deepakraog <gaikwad.dcg(a)gmail.com>
tracing: Fix resource leak on mmiotrace trace_pipe close
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
Guangshuo Li <lgs201920130244(a)gmail.com>
intel_th: fix MSC output device reference leak
Ian Abbott <abbotti(a)mev.co.uk>
comedi: comedi_parport: deal with premature interrupt
Nathan Chancellor <nathan(a)kernel.org>
x86/boot/compressed: Disable jump tables
Xu Rao <raoxu(a)uniontech.com>
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
Christian Brauner <brauner(a)kernel.org>
binfmt_misc: set have_execfd only once the interpreter is opened
Christian Brauner <brauner(a)kernel.org>
exec: fix unsigned loop counter wrap in transfer_args_to_stack()
Chengfeng Ye <nicoyip.dev(a)gmail.com>
Bluetooth: RFCOMM: Fix session UAF in set_termios
MinJea Kim <qndkdrnl(a)gmail.com>
staging: rtl8723bs: fix inverted HT40 secondary channel offset
Moksh Panicker <mokshpanicker.7(a)gmail.com>
staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
Fan Wu <fanwu01(a)zju.edu.cn>
wifi: brcmfmac: make release_scratchbuffers idempotent
Huihui Huang <hhhuang(a)smu.edu.sg>
wifi: wilc1000: validate assoc response length before subtracting header
Doruk Tan Ozturk <doruk(a)0sec.ai>
wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
Tristan Madani <tristan(a)talencesecurity.com>
wifi: ath6kl: fix OOB access from firmware ADDBA window size
Hans Verkuil <hverkuil+cisco(a)kernel.org>
media: vivid: check for vb2_is_busy() when toggling caps
Guangshuo Li <lgs201920130244(a)gmail.com>
media: vimc: fix reference leak on failed device registration
Guangshuo Li <lgs201920130244(a)gmail.com>
media: vidtv: fix reference leak on failed device registration
Zile Xiong <xiongzile99(a)gmail.com>
media: vb2: use ssize_t for vb2_read/vb2_write
Sergey Shtylyov <s.shtylyov(a)auroraos.dev>
media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete()
Hungyu Lin <dennylin0707(a)gmail.com>
media: tegra-video: vi: fix invalid u32 return value in format lookup
Valery Borovsky <vebohr(a)gmail.com>
media: sun4i-csi: Return queued buffers on start_streaming() failure
Ma Ke <make24(a)iscas.ac.cn>
media: saa7134: Fix a possible memory leak in saa7134_video_init1
Valery Borovsky <vebohr(a)gmail.com>
media: rtl2832_sdr: Return queued buffers on start_streaming() failure
Deepanshu Kartikey <kartikey406(a)gmail.com>
media: rtl2832: fix use-after-free in rtl2832_remove()
Myeonghun Pak <mhun512(a)gmail.com>
media: radio-si476x: Unregister v4l2_device on probe failure
Valery Borovsky <vebohr(a)gmail.com>
media: pwc: Return queued buffers on start_streaming() failure
Valery Borovsky <vebohr(a)gmail.com>
media: pwc: Drain fill_buf on start_streaming() failure
Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com>
media: pci: dm1105: Free allocated workqueue
Valery Borovsky <vebohr(a)gmail.com>
media: msi2500: Return queued buffers on start_streaming() failure
Anand Moon <linux.amoon(a)gmail.com>
media: meson: vdec: Fix memory leak in error path of vdec_open
Wang Jun <1742789905(a)qq.com>
media: cx23885: add ioremap return check and cleanup
Johan Hovold <johan(a)kernel.org>
media: cx231xx: fix devres lifetime
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
media: cedrus: skip invalid H.264 reference list entries
Samuel Holland <samuel(a)sholland.org>
media: cedrus: Fix missing cleanup in error path
Myeonghun Pak <mhun512(a)gmail.com>
media: cedrus: clean up media device on probe failure
Myeonghun Pak <mhun512(a)gmail.com>
media: cec: seco: unregister adapter on IR probe failure
Valery Borovsky <vebohr(a)gmail.com>
media: airspy: Return queued buffers on start_streaming() failure
Ian Forbes <ian.forbes(a)broadcom.com>
drm/vmwgfx: Validate vmw_surface_metadata::array_size
Zhu Lingshan <lingshan.zhu(a)amd.com>
drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X)
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amdgpu: Fix VFCT bus number matching with soft filter
Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com>
drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com>
drm/i915/gem: Do not leak siblings[] on proto context error
Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com>
drm/i915: Return NULL on error in active_instance
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
Pavel Ondračka <pavel.ondracka(a)gmail.com>
drm/radeon: fix r100_copy_blit for large BOs
Wentao Liang <vulab(a)iscas.ac.cn>
drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()
Sergey Shtylyov <s.shtylyov(a)auroraos.dev>
drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: track a single source interface for ANYDEV timeout/throttle ops
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: fix stale rx/tx ops after device removal
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: add missing device refcount for CAN filter removal
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: validate frame length in bcm_rx_setup() for RTR replies
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: extend bcm_tx_lock usage for data and timer updates
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: fix CAN frame rx/tx statistics
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: add locking when updating filter and timer values
Lee Jones <lee(a)kernel.org>
can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
Li RongQing <lirongqing(a)baidu.com>
net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
Eric Dumazet <edumazet(a)google.com>
raw: use more conventional iterators
Alexei Lazar <alazar(a)nvidia.com>
net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
Alexei Lazar <alazar(a)nvidia.com>
net/mlx5e: Report zero bandwidth for non-ETS traffic classes
Yael Chemla <ychemla(a)nvidia.com>
net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule
Aldo Ariel Panzardo <qwe.aldo(a)gmail.com>
net: qrtr: restrict socket creation to the initial network namespace
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
hinic: remove unused ethtool RSS user configuration buffers
Eric Dumazet <edumazet(a)google.com>
ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup
Suman Ghosh <sumang(a)marvell.com>
octeontx2-vf: set TC flower flag on MCAM entry allocation
Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com>
net: stmmac: reset residual action in L3L4 filters on delete
Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com>
net: stmmac: fix l3l4 filter rejecting unsupported offload requests
Ong Boon Leong <boon.leong.ong(a)intel.com>
net: stmmac: add tc flower filter for EtherType matching
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
tipc: fix u16 MTU truncation in media and bearer MTU validation
Harshaka Narayana <harshaka.narayana(a)broadcom.com>
vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
Qing Luo <luoqing(a)kylinos.cn>
sctp: auth: verify auth requirement when auth_chunk is NULL
Eric Dumazet <edumazet(a)google.com>
net: hsr: fix memory leak on slave unregistration by removing synced VLANs
Nikolay Aleksandrov <razor(a)blackwall.org>
net: bridge: vlan: fix vlan range dumps starting with pvid
Shelley Yang <shelley.yang(a)infineon.com>
wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()
Helen Koike <koike(a)igalia.com>
tipc: fix infinite loop in __tipc_nl_compat_dumpit
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
nexthop: initialize extack in nh_res_bucket_migrate()
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
sctp: validate stream count in sctp_process_strreset_inreq()
HanQuan <eilaimemedsnaimel(a)gmail.com>
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid
Prashanth Kumar KR <PrashanthKumar.K.R(a)amd.com>
amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN
Andrew Pope <andrew.pope(a)morsemicro.com>
wifi: mac80211: recalculate TIM when a station enters power save
Li RongQing <lirongqing(a)baidu.com>
iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
iommu/amd: Bound the early ACPI HID map
HE WEI (ギカク) <skyexpoc(a)gmail.com>
wifi: mwifiex: bound uAP association event IEs to the event buffer
Ruoyu Wang <ruoyuw560(a)gmail.com>
wan: wanxl: Only reset hardware after BAR mapping
Ruoyu Wang <ruoyuw560(a)gmail.com>
nfp: Check resource mutex allocation
Guangshuo Li <lgs201920130244(a)gmail.com>
dpaa2-eth: put MAC endpoint device on disconnect
Vladimir Oltean <vladimir.oltean(a)nxp.com>
net: dpaa2-eth: assign priv->mac after dpaa2_mac_connect() call
Guangshuo Li <lgs201920130244(a)gmail.com>
dpaa2-switch: put MAC endpoint device on disconnect
Aldo Ariel Panzardo <qwe.aldo(a)gmail.com>
rds: drop incoming messages that cross network namespace boundaries
David Lee <david.lee(a)trailofbits.com>
net/packet: avoid fanout hook re-registration after unregister
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
hwmon: occ: validate poll response sensor blocks
Eddie James <eajames(a)linux.ibm.com>
hwmon: (occ) Delay hwmon registration until user request
Eddie James <eajames(a)linux.ibm.com>
hwmon: (occ) Add sysfs entries for additional extended status bits
Eddie James <eajames(a)linux.ibm.com>
hwmon: (occ) Add sysfs entry for OCC mode
Eddie James <eajames(a)linux.ibm.com>
hwmon: (occ) Add sysfs entry for IPS (Idle Power Saver) status
Diego Fernando Mancera Gomez <diegomancera.dev(a)gmail.com>
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
Jiaxin Yu <jiaxin.yu(a)mediatek.com>
ASoC: bt-sco: fix bt-sco-pcm-wb dai widget don't connect to the endpoint
Guanghui Yang <3497809730(a)qq.com>
btrfs: free mapping node on duplicate reloc root insert
Tristan Madani <tristan(a)talencesecurity.com>
wifi: carl9170: fix buffer overflow in rx_stream failover path
Tristan Madani <tristan(a)talencesecurity.com>
wifi: carl9170: fix OOB read from off-by-two in TX status handler
Tristan Madani <tristan(a)talencesecurity.com>
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
Tristan Madani <tristan(a)talencesecurity.com>
wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
Tristan Madani <tristan(a)talencesecurity.com>
wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
Ruoyu Wang <ruoyuw560(a)gmail.com>
firewire: net: Fix fragmented datagram reassembly
Dmitry Morgun <d.morgun(a)ispras.ru>
wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
Tzung-Bi Shih <tzungbi(a)kernel.org>
watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
Edward Adam Davis <eadavis(a)qq.com>
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
Cheng Yongkang <teel4res(a)gmail.com>
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
Xincheng Zhang <zhangxincheng(a)ultrarisc.com>
usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: Fix ld_{abs,ind} failure path analysis in subprogs
Sasha Levin <sashal(a)kernel.org>
Revert "drm/amd/display: Add missing kdoc for ALLM parameters"
Doruk Tan Ozturk <doruk(a)0sec.ai>
crypto: rsa-pkcs1pad: Don't WARN on an empty digest
Chukun Pan <amadeus(a)jmu.edu.cn>
USB: serial: option: add TDTECH MT5710-CN
Johan Hovold <johan(a)kernel.org>
USB: serial: keyspan_pda: fix data loss on receive throttling
Sunho Park <shpark061104(a)gmail.com>
USB: serial: io_edgeport: cap received transmit credits
Tim Pambor <timpambor(a)gmail.com>
USB: serial: ftdi_sio: add support for E+H FXA291
Muhammad Bilal <meatuni001(a)gmail.com>
usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
Fan Wu <fanwu01(a)zju.edu.cn>
usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
Sonali Pradhan <sonalipradhan(a)google.com>
usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
Johan Hovold <johan(a)kernel.org>
USB: gadget: fsl-udc: fix device name leak on probe failure
Johan Hovold <johan(a)kernel.org>
USB: gadget: snps-udc: fix device name leak on probe failure
Melbin K Mathew <mlbnkm1(a)gmail.com>
usb: gadget: printer: fix infinite loop in printer_read()
Fan Wu <fanwu01(a)zju.edu.cn>
usb: gadget: f_midi: cancel pending IN work before freeing the midi object
Jinchao Wang <wangjinchao600(a)gmail.com>
usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
Xu Yang <xu.yang_2(a)nxp.com>
usb: chipidea: fix usage_count leak when autosuspend_delay is negative
Huang Wei <huangwei(a)kylinos.cn>
USB: storage: add NO_ATA_1X quirk for Longmai USB Key
Huihui Huang <hhhuang(a)smu.edu.sg>
wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
Weiming Shi <bestswngs(a)gmail.com>
mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
Xin Long <lucien.xin(a)gmail.com>
sctp: fix auth_hmacs array size in struct sctp_cookie
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: act_tunnel_key: Defer dst_release to RCU callback
Emre Cecanpunar <emreleno(a)gmail.com>
drm/i915/selftests: Fix GT PM sort comparators
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
ksmbd: validate compound request size before reading StructureSize2
Shuhao Fu <sfual(a)cse.ust.hk>
can: j1939: fix lockless local-destination check
Shrikanth Hegde <sshegde(a)linux.ibm.com>
powerpc/vtime: Initialize starttime at boot for native accounting
Frederic Weisbecker <frederic(a)kernel.org>
powerpc/time: Prepare to stop elapsing in dynticks-idle
Alexander Gordeev <agordeev(a)linux.ibm.com>
sched/vtime: Get rid of generic vtime_task_switch() implementation
Nicholas Piggin <npiggin(a)gmail.com>
powerpc: remove the last remnants of cputime_t
He Ying <heying24(a)huawei.com>
powerpc/time: Fix sparse warnings
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
drm/i915/gt: use correct selftest config symbol
Huiwen He <hehuiwen(a)kylinos.cn>
smb/client: handle overlapping allocated ranges in fallocate
Xiang Mei <xmei5(a)asu.edu>
Bluetooth: qca: fix NVM tag length underflow in TLV parser
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC
Rosen Penev <rosenp(a)gmail.com>
ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning
Colin Ian King <colin.i.king(a)gmail.com>
ata: sata_dwc_460ex: remove variable num_processed
Rosen Penev <rosenp(a)gmail.com>
ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts
Rosen Penev <rosenp(a)gmail.com>
ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
Bryam Vargas <hexlabsecurity(a)proton.me>
net/iucv: take a reference on the socket found in afiucv_hs_rcv()
Weiming Shi <bestswngs(a)gmail.com>
ipv4: fib: free fib_alias with kfree_rcu() on insert error path
Norbert Szetei <norbert(a)doyensec.com>
ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
Pushpendra Singh <pushpendra.singh(a)oss.qualcomm.com>
firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context
Uday Khare <udaykhare77(a)gmail.com>
ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup
Christian Hewitt <christianshewitt(a)gmail.com>
ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop
HE WEI (ギカク) <skyexpoc(a)gmail.com>
wifi: cfg80211: bound element ID read when checking non-inheritance
Runyu Xiao <runyu.xiao(a)seu.edu.cn>
wifi: brcmfmac: initialize SDIO data work before cleanup
Cen Zhang <zzzccc427(a)gmail.com>
wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
Zhao Li <enderaoelyther(a)gmail.com>
wifi: cfg80211: reject unsupported PMSR FTM location requests
Zhao Li <enderaoelyther(a)gmail.com>
wifi: cfg80211: validate PMSR FTM preamble range
Zhao Li <enderaoelyther(a)gmail.com>
wifi: cfg80211: validate PMSR measurement type data
Xiang Mei <xmei5(a)asu.edu>
wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
Dawei Feng <dawei.feng(a)seu.edu.cn>
wifi: libertas: fix memory leak in helper_firmware_cb()
Bryam Vargas <hexlabsecurity(a)proton.me>
wifi: mac80211_hwsim: clamp virtio RX length before skb_put
Abdun Nihaal <nihaal(a)cse.iitm.ac.in>
wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
Cen Zhang <zzzccc427(a)gmail.com>
wifi: cfg80211: cancel sched scan results work on unregister
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
Aleksandrova Alyona <aga(a)itb.spb.ru>
RDMA/irdma: Prevent overflows in memory contiguity checks
Ruoyu Wang <ruoyuw560(a)gmail.com>
RDMA/siw: publish QP after initialization
Guoqing Jiang <guoqing.jiang(a)linux.dev>
RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp
Danila Chernetsov <listdansp(a)mail.ru>
RDMA/hns: Fix potential integer overflow in mhop hem cleanup
Unnathi Chalicheemala <unnathi.chalicheemala(a)oss.qualcomm.com>
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
Xiang Mei <xmei5(a)asu.edu>
btrfs: reject free space cache with more entries than pages
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
mtd: nand: mtk-ecc: stop on ECC idle timeouts
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
mtd: mtdswap: remove debugfs stats file on teardown
Michael Bommarito <michael.bommarito(a)gmail.com>
IB/mad: Drop unmatched RMPP responses before reassembly
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Make vmread_error_trampoline() uncallable from C code
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: ims-pcu - fix logic error in packet reset
Seungjin Bae <eeodqql09(a)gmail.com>
Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: isotp: serialize TX state transitions under so->rx_lock
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
Phil Rosenthal <phil(a)phil.gs>
KVM: x86/mmu: Fix use-after-free on vendor module reload
Hyunwoo Kim <imv4bel(a)gmail.com>
KVM: nVMX: Hide shadow VMCS right after VMCLEAR
Daehyeon Ko <4ncienth(a)gmail.com>
macsec: don't read an unset MAC header in macsec_encrypt()
Sebastian Andrzej Siewior <bigeasy(a)linutronix.de>
futex: Prevent lockup in requeue-PI during signal/ timeout wakeup
Sagi Grimberg <sagi(a)grimberg.me>
nvmet-tcp: Fix potential UAF when ddgst mismatch
-------------
Diffstat:
Makefile | 4 +-
arch/arm/mach-npcm/platsmp.c | 2 +
arch/powerpc/boot/simpleboot.c | 2 +-
arch/powerpc/boot/treeboot-akebono.c | 2 +-
arch/powerpc/boot/treeboot-currituck.c | 2 +-
arch/powerpc/include/asm/cputime.h | 30 +-
arch/powerpc/include/asm/time.h | 1 +
arch/powerpc/kernel/time.c | 93 +++-
arch/powerpc/platforms/chrp/time.c | 2 -
arch/powerpc/platforms/ps3/mm.c | 1 +
arch/um/drivers/vector_kern.c | 3 +
arch/x86/boot/compressed/Makefile | 1 +
arch/x86/kvm/mmu/mmu.c | 2 +
arch/x86/kvm/vmx/nested.c | 11 +-
arch/x86/kvm/vmx/vmx_ops.h | 16 +-
crypto/rsa-pkcs1pad.c | 2 +-
drivers/ata/pata_sl82c105.c | 4 +-
drivers/ata/sata_dwc_460ex.c | 21 +-
drivers/block/rbd.c | 7 +-
drivers/bluetooth/btqca.c | 2 +-
drivers/cdrom/cdrom.c | 1 +
drivers/comedi/drivers/comedi_parport.c | 13 +-
drivers/counter/microchip-tcb-capture.c | 4 +-
drivers/cpufreq/powernow-k8.c | 1 +
drivers/dma/sh/rz-dmac.c | 96 ++--
drivers/dma/sun6i-dma.c | 11 +-
drivers/firewire/net.c | 37 +-
drivers/firmware/arm_ffa/driver.c | 2 +-
drivers/firmware/arm_scmi/notify.c | 6 +-
drivers/firmware/stratix10-svc.c | 9 +-
drivers/gpio/gpio-pch.c | 28 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 45 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 15 +
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 13 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 12 +
drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 8 +
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 13 +-
drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 3 -
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 10 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 4 +-
.../amd/display/modules/info_packet/info_packet.c | 2 -
drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 7 +-
drivers/gpu/drm/i915/gem/i915_gem_context.c | 24 +-
drivers/gpu/drm/i915/gt/intel_engine_user.c | 2 +-
drivers/gpu/drm/i915/gt/selftest_gt_pm.c | 8 +-
drivers/gpu/drm/i915/i915_active.c | 7 +-
drivers/gpu/drm/mediatek/mtk_drm_crtc.c | 6 +-
drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c | 1 +
drivers/gpu/drm/radeon/r100.c | 13 +-
drivers/gpu/drm/rockchip/cdn-dp-reg.c | 2 +
drivers/gpu/drm/vc4/vc4_validate.c | 29 +-
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 14 +-
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 22 +-
drivers/hid/hid-logitech-dj.c | 28 +-
drivers/hwmon/adt7470.c | 131 +++--
drivers/hwmon/corsair-cpro.c | 1 +
drivers/hwmon/corsair-psu.c | 5 +-
drivers/hwmon/nct6775.c | 12 +-
drivers/hwmon/npcm750-pwm-fan.c | 11 +
drivers/hwmon/occ/common.c | 138 +++--
drivers/hwmon/occ/common.h | 7 +-
drivers/hwmon/occ/p8_i2c.c | 2 +-
drivers/hwmon/occ/p9_sbe.c | 2 +-
drivers/hwmon/occ/sysfs.c | 157 ++++--
drivers/hwmon/pmbus/pmbus_core.c | 2 +-
drivers/hwtracing/intel_th/core.c | 10 -
drivers/hwtracing/intel_th/msu.c | 2 +
drivers/i2c/busses/i2c-amd-mp2-plat.c | 4 +-
drivers/i2c/busses/i2c-imx.c | 1 +
drivers/i2c/busses/i2c-jz4780.c | 5 +-
drivers/infiniband/core/mad.c | 30 ++
drivers/infiniband/hw/hns/hns_roce_hem.c | 2 +-
drivers/infiniband/hw/irdma/verbs.c | 4 +-
drivers/infiniband/sw/rxe/rxe_mmap.c | 19 +-
drivers/infiniband/sw/siw/siw_verbs.c | 62 ++-
drivers/input/evdev.c | 27 +-
drivers/input/misc/ims-pcu.c | 32 +-
drivers/iommu/amd/init.c | 6 +
drivers/iommu/intel/perf.c | 2 +-
drivers/iommu/intel/svm.c | 2 +-
drivers/media/cec/platform/seco/seco-cec.c | 6 +-
drivers/media/common/videobuf2/videobuf2-core.c | 12 +-
drivers/media/dvb-frontends/rtl2832.c | 4 +-
drivers/media/dvb-frontends/rtl2832_sdr.c | 19 +-
drivers/media/pci/cx23885/cx23885-core.c | 14 +-
drivers/media/pci/dm1105/dm1105.c | 1 +
drivers/media/pci/saa7134/saa7134-video.c | 25 +-
drivers/media/platform/sunxi/sun4i-csi/sun4i_dma.c | 6 +-
drivers/media/radio/radio-si476x.c | 1 +
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +-
drivers/media/test-drivers/vimc/vimc-core.c | 1 +
drivers/media/test-drivers/vivid/vivid-ctrls.c | 12 +
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 6 +
drivers/media/test-drivers/vivid/vivid-vid-out.c | 6 +
drivers/media/usb/airspy/airspy.c | 8 +-
drivers/media/usb/cx231xx/cx231xx-cards.c | 16 +-
drivers/media/usb/msi2500/msi2500.c | 32 +-
drivers/media/usb/pwc/pwc-if.c | 13 +-
drivers/media/usb/uvc/uvc_video.c | 78 ++-
drivers/media/usb/uvc/uvcvideo.h | 4 +
drivers/media/v4l2-core/v4l2-ctrls-request.c | 14 +-
drivers/misc/fastrpc.c | 3 +-
drivers/mtd/mtdswap.c | 5 +-
drivers/mtd/nand/raw/mtk_ecc.c | 16 +-
drivers/net/bonding/bond_alb.c | 10 +-
drivers/net/can/c_can/c_can_main.c | 8 +-
drivers/net/can/softing/softing_fw.c | 46 +-
drivers/net/can/usb/ems_usb.c | 43 ++
drivers/net/can/usb/etas_es58x/es58x_core.c | 1 -
drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c | 1 +
drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 13 +-
drivers/net/can/usb/peak_usb/pcan_usb_core.c | 1 -
drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 40 +-
drivers/net/can/usb/peak_usb/pcan_usb_pro.c | 20 +-
drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 11 +-
drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 22 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 12 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 +
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 7 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 22 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 1 +
drivers/net/ethernet/google/gve/gve.h | 3 +
drivers/net/ethernet/google/gve/gve_main.c | 3 +
drivers/net/ethernet/google/gve/gve_rx_dqo.c | 33 ++
drivers/net/ethernet/hisilicon/hip04_eth.c | 11 +-
drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 1 -
drivers/net/ethernet/huawei/hinic/hinic_dev.h | 2 -
drivers/net/ethernet/huawei/hinic/hinic_ethtool.c | 21 -
drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
drivers/net/ethernet/intel/ice/ice_ptp.c | 2 +-
drivers/net/ethernet/intel/igbvf/netdev.c | 2 -
.../ethernet/marvell/octeontx2/nic/otx2_flows.c | 1 +
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 2 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 6 +-
.../net/ethernet/marvell/prestera/prestera_pci.c | 3 +
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 16 +-
drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 15 +
.../ethernet/mellanox/mlx5/core/esw/acl/helper.c | 2 +-
.../ethernet/netronome/nfp/nfpcore/nfp_resource.c | 3 +
drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 44 +-
drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 14 +-
drivers/net/ethernet/stmicro/stmmac/stmmac.h | 3 +
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 156 ++++++
drivers/net/geneve.c | 3 +
drivers/net/macsec.c | 2 +-
drivers/net/phy/phylink.c | 29 +-
drivers/net/ppp/ppp_generic.c | 18 +-
drivers/net/ppp/pppoe.c | 1 +
drivers/net/slip/slip.c | 4 +
drivers/net/thunderbolt.c | 20 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 22 +-
drivers/net/vxlan/vxlan_core.c | 20 +-
drivers/net/wan/wanxl.c | 3 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +
drivers/net/wireless/ath/ath6kl/txrx.c | 10 +-
drivers/net/wireless/ath/ath6kl/wmi.c | 20 +
drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +-
drivers/net/wireless/ath/carl9170/rx.c | 7 +-
drivers/net/wireless/ath/carl9170/tx.c | 2 +-
drivers/net/wireless/atmel/at76c50x-usb.c | 7 +-
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 2 +-
.../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 8 +-
.../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 2 +-
drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
drivers/net/wireless/intersil/p54/txrx.c | 8 +
drivers/net/wireless/mac80211_hwsim.c | 1 +
drivers/net/wireless/marvell/libertas/firmware.c | 1 +
.../net/wireless/marvell/mwifiex/11n_rxreorder.c | 2 +-
drivers/net/wireless/marvell/mwifiex/tdls.c | 2 +-
drivers/net/wireless/marvell/mwifiex/uap_event.c | 24 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 4 +
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 2 +
drivers/net/wireless/microchip/wilc1000/hif.c | 5 +
drivers/nvme/target/tcp.c | 4 +-
drivers/phy/xilinx/phy-zynqmp.c | 127 +++--
drivers/pinctrl/Kconfig | 1 +
drivers/pinctrl/devicetree.c | 4 +
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 4 +-
drivers/s390/block/dasd_ioctl.c | 2 +-
drivers/s390/crypto/zcrypt_ccamisc.c | 26 +-
drivers/s390/net/qeth_core_main.c | 3 +
drivers/s390/scsi/zfcp_aux.c | 1 +
drivers/scsi/libiscsi.c | 2 +-
drivers/scsi/libiscsi_tcp.c | 8 +-
drivers/scsi/scsi_debug.c | 4 +-
drivers/spi/spi-fsl-dspi.c | 13 +-
drivers/staging/media/meson/vdec/vdec.c | 4 +-
drivers/staging/media/sunxi/cedrus/cedrus.c | 6 +-
drivers/staging/media/sunxi/cedrus/cedrus_h264.c | 3 +
drivers/staging/media/tegra-video/vi.c | 4 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 12 +-
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 2 +-
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 +
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 6 +-
drivers/thermal/thermal_hwmon.c | 3 +-
drivers/thunderbolt/eeprom.c | 9 +-
drivers/thunderbolt/icm.c | 2 +-
drivers/tty/serial/8250/8250_dma.c | 12 +-
drivers/tty/vt/keyboard.c | 5 +-
drivers/tty/vt/vt_ioctl.c | 2 +
drivers/usb/atm/cxacru.c | 2 +
drivers/usb/atm/ueagle-atm.c | 17 +
drivers/usb/cdns3/cdnsp-gadget.c | 4 +-
drivers/usb/chipidea/core.c | 1 +
drivers/usb/gadget/function/f_midi.c | 1 +
drivers/usb/gadget/function/f_ncm.c | 19 +-
drivers/usb/gadget/function/f_printer.c | 23 +-
drivers/usb/gadget/function/uvc_v4l2.c | 2 +
drivers/usb/gadget/udc/bdc/bdc_core.c | 20 +
drivers/usb/gadget/udc/bdc/bdc_udc.c | 7 +-
drivers/usb/gadget/udc/dummy_hcd.c | 40 +-
drivers/usb/gadget/udc/fsl_udc_core.c | 1 -
drivers/usb/gadget/udc/snps_udc_core.c | 1 -
drivers/usb/host/xhci-pci.c | 1 +
drivers/usb/host/xhci.c | 15 +-
drivers/usb/host/xhci.h | 1 +
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 5 +
drivers/usb/serial/io_edgeport.c | 3 +-
drivers/usb/serial/keyspan_pda.c | 44 +-
drivers/usb/serial/option.c | 1 +
drivers/usb/storage/unusual_devs.h | 7 +
drivers/vhost/vdpa.c | 9 +-
drivers/vhost/vhost.c | 8 +
drivers/video/fbdev/core/bitblit.c | 9 +-
drivers/watchdog/watchdog_pretimeout.c | 2 +
fs/binfmt_elf_fdpic.c | 4 +
fs/binfmt_misc.c | 9 +-
fs/btrfs/free-space-cache.c | 3 +
fs/btrfs/relocation.c | 2 +
fs/ceph/caps.c | 1 +
fs/cifs/cifssmb.c | 12 +-
fs/cifs/smb2ops.c | 25 +-
fs/crypto/fscrypt_private.h | 32 +-
fs/crypto/keyring.c | 212 ++++----
fs/exec.c | 2 +-
fs/ksmbd/smb2misc.c | 5 +
fs/namespace.c | 5 +
fs/nfs/nfs4proc.c | 13 +
fs/proc/namespaces.c | 4 +-
include/linux/dma/qcom_bam_dma.h | 21 +-
include/linux/netdevice.h | 5 -
include/linux/netfilter/nf_conntrack_sip.h | 2 +-
include/linux/vtime.h | 6 +
include/media/videobuf2-core.h | 8 +-
include/net/act_api.h | 19 +
include/net/addrconf.h | 4 +-
include/net/bluetooth/l2cap.h | 1 +
include/net/bluetooth/rfcomm.h | 3 +
include/net/ip_vs.h | 20 +-
include/net/raw.h | 5 +-
include/net/rawv6.h | 6 +-
include/net/route.h | 2 +
include/net/sctp/structs.h | 3 +-
kernel/audit.c | 11 +-
kernel/auditfilter.c | 6 +-
kernel/bpf/verifier.c | 31 +-
kernel/futex/core.c | 95 ++--
kernel/sched/cputime.c | 13 -
kernel/trace/ring_buffer.c | 8 +-
kernel/trace/trace_eprobe.c | 3 +-
kernel/trace/trace_events.c | 6 +-
kernel/trace/trace_events_filter.c | 3 +
kernel/trace/trace_mmiotrace.c | 5 +-
kernel/trace/trace_probe.c | 13 +-
lib/assoc_array.c | 3 +-
lib/rhashtable.c | 1 +
mm/huge_memory.c | 16 +-
mm/hugetlb.c | 2 +-
mm/page_reporting.c | 6 +-
mm/percpu-km.c | 2 +-
net/bluetooth/6lowpan.c | 18 +-
net/bluetooth/hidp/core.c | 30 +-
net/bluetooth/l2cap_core.c | 41 +-
net/bluetooth/rfcomm/core.c | 17 +
net/bluetooth/rfcomm/tty.c | 7 +-
net/bridge/br_mrp.c | 8 +-
net/bridge/br_multicast.c | 1 +
net/bridge/br_netlink_tunnel.c | 3 +-
net/bridge/br_private.h | 6 +-
net/bridge/br_vlan.c | 10 +-
net/bridge/br_vlan_options.c | 3 +-
net/bridge/netfilter/ebt_nflog.c | 17 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 1 +
net/can/bcm.c | 564 ++++++++++++++++-----
net/can/isotp.c | 295 ++++++++---
net/can/j1939/transport.c | 20 +-
net/ceph/auth_x.c | 9 +-
net/ceph/ceph_common.c | 4 +-
net/ceph/mon_client.c | 4 +-
net/ceph/osdmap.c | 12 +-
net/core/lwt_bpf.c | 4 +-
net/core/sock.c | 1 -
net/core/xdp.c | 2 +-
net/hsr/hsr_slave.c | 2 +
net/ipv4/fib_semantics.c | 101 ++--
net/ipv4/fib_trie.c | 2 +-
net/ipv4/icmp.c | 18 +-
net/ipv4/inet_connection_sock.c | 20 +-
net/ipv4/nexthop.c | 2 +-
net/ipv4/raw.c | 91 ++--
net/ipv4/raw_diag.c | 33 +-
net/ipv4/route.c | 29 ++
net/ipv4/tcp_bpf.c | 4 +-
net/ipv4/udp_offload.c | 4 +-
net/ipv6/fib6_rules.c | 1 +
net/ipv6/ila/ila_common.c | 12 +
net/ipv6/ip6_tunnel.c | 3 +
net/ipv6/raw.c | 102 ++--
net/ipv6/route.c | 8 +-
net/iucv/af_iucv.c | 21 +-
net/mac80211/iface.c | 8 +-
net/mac80211/rx.c | 2 +
net/mac80211/s1g.c | 4 +
net/mac802154/llsec.c | 5 +
net/mpls/af_mpls.c | 4 +
net/mptcp/options.c | 12 +-
net/ncsi/ncsi-netlink.c | 4 +
net/netfilter/ipset/ip_set_hash_gen.h | 2 +-
net/netfilter/ipvs/ip_vs_conn.c | 44 +-
net/netfilter/ipvs/ip_vs_core.c | 1 +
net/netfilter/ipvs/ip_vs_ctl.c | 77 ++-
net/netfilter/ipvs/ip_vs_lc.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 2 -
net/netfilter/ipvs/ip_vs_proto_tcp.c | 2 -
net/netfilter/ipvs/ip_vs_sync.c | 7 +-
net/netfilter/nf_conntrack_sip.c | 2 +-
net/netfilter/nf_nat_sip.c | 2 +-
net/netfilter/nft_payload.c | 12 +-
net/netfilter/xt_hashlimit.c | 16 +-
net/openvswitch/actions.c | 26 +-
net/openvswitch/datapath.c | 54 +-
net/openvswitch/datapath.h | 2 +-
net/openvswitch/flow.c | 11 +-
net/openvswitch/meter.c | 33 +-
net/openvswitch/vport.c | 2 +-
net/packet/af_packet.c | 13 +-
net/phonet/pep.c | 2 +
net/qrtr/af_qrtr.c | 8 +
net/qrtr/ns.c | 33 +-
net/rds/ib.c | 4 +
net/rds/ib_cm.c | 4 +
net/rds/recv.c | 15 +
net/rds/tcp.c | 14 +-
net/sched/act_gact.c | 5 +
net/sched/act_police.c | 6 +
net/sched/act_tunnel_key.c | 14 +-
net/sched/cls_route.c | 35 +-
net/sched/sch_cake.c | 1 -
net/sctp/associola.c | 14 +-
net/sctp/auth.c | 2 +-
net/sctp/outqueue.c | 1 +
net/sctp/sm_make_chunk.c | 26 +-
net/sctp/sm_statefuns.c | 8 +-
net/sctp/stream.c | 6 +-
net/smc/af_smc.c | 3 +-
net/smc/smc_core.c | 2 +-
net/smc/smc_llc.c | 3 +-
net/tipc/core.c | 5 +
net/tipc/discover.c | 14 +-
net/tipc/netlink.c | 6 +-
net/tipc/netlink_compat.c | 4 +
net/tipc/node.c | 15 +-
net/tipc/socket.c | 3 +-
net/tls/tls_sw.c | 15 +-
net/vmw_vsock/virtio_transport.c | 14 +-
net/wireless/core.c | 1 +
net/wireless/nl80211.c | 4 +-
net/wireless/pmsr.c | 21 +-
net/wireless/scan.c | 2 +-
net/x25/af_x25.c | 8 +-
net/xfrm/xfrm_policy.c | 4 +-
security/integrity/ima/ima_appraise.c | 9 +-
security/keys/keyring.c | 14 +-
sound/core/pcm_native.c | 7 +
sound/pci/lx6464es/lx6464es.c | 5 +-
sound/pci/lx6464es/lx_core.c | 5 +-
sound/soc/codecs/bt-sco.c | 18 +-
sound/soc/codecs/max98090.c | 5 +-
sound/soc/codecs/max98095.c | 5 +-
sound/soc/codecs/tas2562.c | 35 +-
sound/soc/meson/aiu-fifo-spdif.c | 5 +
sound/usb/6fire/chip.c | 4 +
sound/usb/endpoint.c | 20 +-
sound/usb/midi.c | 2 +
sound/usb/quirks.c | 2 +
sound/usb/usx2y/usX2Yhwdep.c | 2 +
sound/usb/usx2y/usx2yhwdeppcm.c | 2 +
tools/testing/selftests/clone3/clone3_set_tid.c | 2 +-
.../ftrace/test.d/dynevent/add_remove_eprobe.tc | 23 +-
.../ftrace/test.d/dynevent/add_remove_kprobe.tc | 7 +
394 files changed, 4235 insertions(+), 1862 deletions(-)
6 days, 3 hours
- 8
- 7
[PATCH 5.10 000/389] 5.10.265-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.10.265 release.
There are 389 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.265-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.10.265-rc1
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors
Javier Carrasco <javier.carrasco.cruz(a)gmail.com>
hwmon: (adt7470) Add missing dependency on REGMAP_I2C
Jonas Gorski <jonas.gorski(a)bisdn.de>
prestera: fix fallback to previous version on same major version
Bryam Vargas <hexlabsecurity(a)proton.me>
thunderbolt: Bound the DROM dual link port number before indexing sw->ports
Qing Ming <a0yami(a)mailbox.org>
sctp: clear new_transport when removing a peer
Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn>
sctp: fix use-after-free of cached ASCONF chunk
Baul Lee <baul.lee(a)xbow.com>
sctp: keep chunk->transport in step with the list it is queued on
Xu Rao <raoxu(a)uniontech.com>
scsi: scsi_debug: Negate wrapped memcmp() result
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf, sockmap: Fix sk_redir use-after-free in send verdict
Zhiling Zou <zhilinz(a)nebusec.ai>
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
Yuejie Shi <syjcnss(a)gmail.com>
ipv6: fix Route Information option length validation
Tengda Wu <wutengda(a)huaweicloud.com>
ring-buffer: Use current_context for safe per-CPU buffer swap
Jun Yang <junvyyang(a)tencent.com>
tipc: read le->link under the node lock in tipc_node_link_down()
Jun Yang <junvyyang(a)tencent.com>
vhost: reset the vring metadata cache on vring reconfiguration
Weiming Shi <bestswngs(a)gmail.com>
vsock/virtio: avoid refilling the RX queue after teardown
Baul Lee <baul.lee(a)xbow.com>
vxlan: do not arm the ageing timer on a device that is down
Yangyu Chen <cyy(a)cyyself.name>
net: atlantic: free RX pages of consumed but not refilled buffers
Zhiling Zou <zhilinz(a)nebusec.ai>
netfilter: bridge: release template ct on non-IP path
Kyle Zeng <kylebot(a)openai.com>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev
Rik van Riel <riel(a)surriel.com>
fbdev: bitblit: bound-check glyph index in bit_cursor()
Eddie Lin <eddie.lin(a)oss.qualcomm.com>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free
Anandu Krishnan E <anandu.e(a)oss.qualcomm.com>
misc: fastrpc: fix channel ctx ref leak when session alloc fails
Mariano Baragiola <mbaragiola(a)linux.com>
staging: rtl8723bs: validate monitor transmit frame lengths
Muhammad Bilal <meatuni001(a)gmail.com>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
Cunhao Lu <1579567540(a)qq.com>
serial: 8250_dma: Clear stale RX state on shutdown
Chengfeng Ye <nicoyip.dev(a)gmail.com>
ipv4: fix use-after-free in fib_nhc_update_mtu()
Eric Biggers <ebiggers(a)kernel.org>
fscrypt: Replace mk_users keyring with simple list
Aaron Tomlin <atomlin(a)atomlin.com>
mips: sched: Fix CPUMASK_OFFSTACK memory corruption
Zhu Yanjun <yanjun.zhu(a)linux.dev>
RDMA/rxe: Fix a use-after-free problem in rxe_mmap
Keno Fischer <keno(a)juliacomputing.com>
futex: Prevent robust futex exit race some more
Lincoln Wallace <locnnil0(a)gmail.com>
ima: fix out-of-bounds read in xattr_verify()
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
Marco Elver <elver(a)google.com>
Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - fix information leak in evdev_pass_values()
Joshua Rogers <linux(a)joshua.hu>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
Joshua Rogers <linux(a)joshua.hu>
vt: add permission check for KDSKBMETA ioctl
Chengfeng Ye <nicoyip.dev(a)gmail.com>
netfilter: ebt_nflog: pin the NFLOG backend
Qihang Tang <q.h.hack.winter(a)gmail.com>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
Zhiling Zou <zhilinz(a)nebusec.ai>
net: openvswitch: reallocate update replies for mismatched IDs
Doruk Tan Ozturk <doruk(a)0sec.ai>
net/packet: reset the MAC header on the packet-socket transmit path
Kyle Zeng <kylebot(a)openai.com>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
Julian Anastasov <ja(a)ssi.bg>
ipvs: properly update the overload flag on dest edit
Julian Anastasov <ja(a)ssi.bg>
ipvs: add totalconns for dest
Sonali Pradhan <sonalipradhan(a)google.com>
usb: gadget: f_ncm: Use unsigned int for ndp_index
Aleksandr Nogikh <nogikh(a)google.com>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
Baul Lee <baul.lee(a)xbow.com>
ALSA: usb-audio: fix OOB write on Type II inbound URBs
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: evdev - sanitize event type index when fetching event masks
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Evaluate packsize caps at the right place
Larisa Grigore <larisa.grigore(a)nxp.com>
spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers
Maximilian Immanuel Brandtner <maxbr(a)linux.ibm.com>
tls: don't abort the connection on signal-interrupted sends
Xin Long <lucien.xin(a)gmail.com>
sctp: extract sctp_v4_err_handle function from sctp_v4_err
Xin Long <lucien.xin(a)gmail.com>
sctp: extract sctp_v6_err_handle function from sctp_v6_err
Xin Long <lucien.xin(a)gmail.com>
sctp: remove the unessessary hold for idev in sctp_v6_err
Xin Long <lucien.xin(a)gmail.com>
sctp: clear control chunk transport if it is being removed
Hongyan Xu <getshell(a)seu.edu.cn>
ata: pata_sl82c105: fix bridge revision use-after-free
Łukasz Patron <priv.luk(a)gmail.com>
net: qrtr: ns: Raise lookup limit to 128
Eric Dumazet <edumazet(a)google.com>
net: remove WARN_ON_ONCE() from sk_mc_loop()
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
net: prestera: validate firmware header length
Vadym Kochan <vkochan(a)marvell.com>
net: marvell: prestera: try to load previous fw version
Henry Martin <bsdhenrymartin(a)gmail.com>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
Qing Luo <luoqing(a)kylinos.cn>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
net/openvswitch: check Ethernet header length in key_extract()
Randy Dunlap <rdunlap(a)infradead.org>
net: openvswitch: fix kernel-doc warnings in flow.c
Andrew Lunn <andrew(a)lunn.ch>
net: openvswitch: Fix kerneldoc warnings
Toke Høiland-Jørgensen <toke(a)toke.dk>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
udp: fix potential use-after-free in tunnel segmentation
Babanpreet Singh <bbnpreetsingh(a)gmail.com>
counter: microchip-tcb-capture: Fix DT channel validation
Michael Guralnik <michaelgur(a)nvidia.com>
net/mlx5: fw_tracer, return NULL on create error
Leon Romanovsky <leon(a)kernel.org>
net/mlx5: Remove second FW tracer check
Jiawen Liu <1298662399(a)qq.com>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: cls_route: fix fastmap use-after-free on filter
Mahanta Jambigi <mjambigi(a)linux.ibm.com>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn>
bpf: Preserve pointer state for commuted arithmetic
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
Yuho Choi <dbgh9129(a)gmail.com>
ARM: npcm: Fix OF node refcount leaks in SMP setup
Anna Schumaker <anna.schumaker(a)hammerspace.com>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
Scott Mayhew <smayhew(a)redhat.com>
nfs4: take a reference on the nfs_client when running FREE_STATEID
Harald Freudenberger <freude(a)linux.ibm.com>
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
Al Viro <viro(a)zeniv.linux.org.uk>
mount: honour SB_NOUSER in the new mount API
Junjie Cao <junjie.cao(a)intel.com>
gpio: pch: use raw_spinlock_t for the register lock
Tze Yee Ng <tze.yee.ng(a)altera.com>
firmware: stratix10-svc: fix memory leaks and list corruption bugs
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix skb leak on flow key update failure during recirculation
Hyunwoo Kim <imv4bel(a)gmail.com>
Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SCO: Fix UAF on sco_sock_timeout
Kiryl Shutsemau (Meta) <kas(a)kernel.org>
mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios
HyeongJun An <sammiee5311(a)gmail.com>
HID: logitech-dj: Fix maxfield check in DJ short report validation
Zack Rusin <zack.rusin(a)broadcom.com>
drm/vmwgfx: bound DMA command body size against suffix pointer
Zack Rusin <zack.rusin(a)broadcom.com>
drm/vmwgfx: validate DRAW_PRIMITIVES header size before division
Harkirat Gill <harkirat.gill(a)amd.com>
drm/amdgpu: cap GTT size to physical RAM on APUs
Maíra Canal <mcanal(a)igalia.com>
drm/vc4: Zero the tile state data array before each BIN job
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: peak_usb: validate uCAN receive record lengths
Maoyi Xie <maoyixie.tju(a)gmail.com>
can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error
James Gao <jamesgao5(a)outlook.com>
can: peak_usb: add bounds check for USB channel index
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: softing: fw_parse(): validate firmware record spans
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents
Abdun Nihaal <nihaal(a)cse.iitm.ac.in>
can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams()
Oleksij Rempel <linux(a)rempel-privat.de>
can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
H. Nikolaus Schaller <hns(a)goldelico.com>
i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix skb leak on flow key update failure during ct
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix potential UAF on meter attach failure
Nava kishore Manne <nava.kishore.manne(a)amd.com>
phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB
Nava kishore Manne <nava.kishore.manne(a)amd.com>
phy: zynqmp: use read-modify-write for SERDES scrambler bypass
Nava kishore Manne <nava.kishore.manne(a)amd.com>
phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask
Holger Dengler <dengler(a)linux.ibm.com>
s390/zcrypt: Validate length for CCA ECC private key requests
Holger Dengler <dengler(a)linux.ibm.com>
s390/zcrypt: Validate length for CCA AES cipher key requests
Jan Höppner <hoeppner(a)linux.ibm.com>
s390/dasd: Fix potential NULL pointer dereference
Abdun Nihaal <nihaal(a)cse.iitm.ac.in>
cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init()
Myeonghun Pak <mhun512(a)gmail.com>
i2c: amd-mp2: Unregister callback on adapter add failure
Asim Viladi Oglu Manizada <manizada(a)pm.me>
sctp: prevent peer transport count overflow
Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn>
sctp: reject stale cookies with mismatched verification tags
Chris Gellermann <christian.gellermann(a)codasip.com>
selftests/clone3: fix wild pointer access of getline due to missing init
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/filters: Fix false positive match in regex_match_full()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing: Check return value of __register_event() in trace_module_add_events()
Eric Dumazet <edumazet(a)google.com>
vxlan: use pskb_network_may_pull() in route_shortcircuit()
Eric Dumazet <edumazet(a)google.com>
vxlan: use neigh_ha_snapshot() in route_shortcircuit()
Eric Dumazet <edumazet(a)google.com>
vxlan: unclone skb head before modifying eth header in route_shortcircuit()
Eric Dumazet <edumazet(a)google.com>
vxlan: re-fetch eth header after route_shortcircuit()
Michael Bommarito <michael.bommarito(a)gmail.com>
um: vector: fix use-after-free in vector_mmsg_rx()
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/ps3: Fix map failure path in dma_ioc0_map_pages()
Zhiling Zou <zhilinz(a)nebusec.ai>
net: ipv6: clear suppressed fib6 rule result
Zhiling Zou <zhilinz(a)nebusec.ai>
net: bridge: stop fast-leave after deleting a port group
Link Lin <linkl(a)google.com>
mm/page_reporting: use system_freezable_wq to fix UAF during suspend
Christian Brauner <brauner(a)kernel.org>
binfmt_misc: reject a flag character as the field delimiter
Zhao Li <enderaoelyther(a)gmail.com>
wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames
Zihan Xi <zihanx(a)nebusec.ai>
tipc: avoid use-after-free in poll trace queue dumps
David Lee <david.lee(a)trailofbits.com>
netfilter: ipset: do not update comments from kernel-side hash adds
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
net/smc: fix socket use-after-free during link group termination
Zhiling Zou <roxy520tt(a)gmail.com>
ipvs: do not propagate one-packet flag to synced conns
Matt Vollrath <tactii(a)gmail.com>
igbvf: Fix leak in TX DMA error cleanup
Dawei Feng <dawei.feng(a)seu.edu.cn>
e1000: fix memory leak in e1000_probe()
Md Sadre Alam <md.alam(a)oss.qualcomm.com>
dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+
Sonali Pradhan <sonalipradhan(a)google.com>
ALSA: usb-audio: Clamp frame size in implicit-feedback mode
Sonali Pradhan <sonalipradhan(a)google.com>
ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set
Baul Lee <baul.lee(a)xbow.com>
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()
Haidar Lee <haidar.lee(a)adlinktech.com>
ASoC: tas2562: fix broken entries in the volume lookup table
Haidar Lee <haidar.lee(a)adlinktech.com>
ASoC: tas2562: fix DVC coefficient write order
Norbert Szetei <norbert(a)doyensec.com>
ALSA: pcm: wake linked drain waiters on unlink
Xu Rao <raoxu(a)uniontech.com>
ALSA: lx6464es: fix period byte count for 16-bit streams
Takashi Iwai <tiwai(a)suse.de>
ALSA: 6fire: Fix UAF at error handling during probe
Xuanqiang Luo <luoxuanqiang(a)kylinos.cn>
bpf: lwt: Fix dst reference leak on reroute failure
Sangho Lee <kudo3228(a)gmail.com>
Bluetooth: HIDP: validate numbered report payloads
Luxiao Xu <rakukuip(a)gmail.com>
audit: fix potential use-after-free in audit_del_rule()
Zhan Xusheng <zhanxusheng1024(a)gmail.com>
audit: fix potential integer overflow in audit_log_n_string()
Charles Vosburgh <trilobyte777(a)gmail.com>
sctp: validate Adaptation Indication parameter length
Xiangfeng Cai <caixiangfeng(a)bytedance.com>
mm/hugetlb: fix list corruption in allocate_file_region_entries()
Zi Yan <ziy(a)nvidia.com>
mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
Benjamin Boortz <bennib(a)mailbox.org>
pinctrl: bm1880: add missing select GENERIC_PINCONF
Karl Mehltretter <kmehltretter(a)gmail.com>
pinctrl: devicetree: don't free uninitialized dev_name on error path
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
rhashtable: clear stale iter->p on table restart
Pengfei Zhang <zhangfeionline(a)gmail.com>
ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
Denis V. Lunev <den(a)openvz.org>
qede: sync udp_tunnel ports outside qede_lock in the recovery path
Suman Ghosh <sumang(a)marvell.com>
octeontx2-pf: Set correct sequence for carrier off and tx queue stop
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/mmiotrace: Reset dropped_count in mmio_reset_data()
Minhong He <heminhong(a)kylinos.cn>
can: isotp: check register_netdevice_notifier() error in module init
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
net: sxgbe: check descriptor ring allocation failures
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
net: sxgbe: free TX rings on RX allocation failure
Benjamin Block <bblock(a)linux.ibm.com>
scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req
Christian Marangi <ansuelsmth(a)gmail.com>
net: phylink: put link_gpio if phylink_create fails
Jiale Yao <yaojiale02(a)163.com>
Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (pmbus) Fix return value from pmbus_update_byte_data()
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/boot: Fix treeboot-akebono CPU node lookup check
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/boot: Fix treeboot-currituck CPU node lookup check
Thorsten Blum <thorsten.blum(a)linux.dev>
powerpc/boot: Fix simpleboot CPU node lookup check
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix PWM auto temp state array and bounds check
Chris Packham <chris.packham(a)alliedtelesis.co.nz>
hwmon: (adt7470) Convert to use regmap
Chris Packham <chris.packham(a)alliedtelesis.co.nz>
hwmon: (adt7470) Fix some style issues
Chris Packham <chris.packham(a)alliedtelesis.co.nz>
hwmon: (adt7470) Create functions for updating readings and limits
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks
Luiz Angelo Daros de Luca <luizluca(a)gmail.com>
hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
forcedeth: fix UAF of txrx_stats in nv_remove
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (nct6775-core) Prevent access to unsupported weight registers
Dawei Feng <dawei.feng(a)seu.edu.cn>
smb: client: fix buffer leaks in SMB1 read and write
HyeongJun An <sammiee5311(a)gmail.com>
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer
HyeongJun An <sammiee5311(a)gmail.com>
scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer
Xiang Mei <xmei5(a)asu.edu>
rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()
Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru>
rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
netfilter: nft_payload: fix mask build for partial field offload
Pablo Neira Ayuso <pablo(a)netfilter.org>
netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
Michael Bommarito <michael.bommarito(a)gmail.com>
assoc_array: trim the final shortcut word using the current chunk end
Michael Bommarito <michael.bommarito(a)gmail.com>
keys: make keyring key-chunk byte order agree with keyring_diff_objects()
Michael Bommarito <michael.bommarito(a)gmail.com>
keys: fix out-of-bounds read in keyring_get_key_chunk()
Xiang Mei <xmei5(a)asu.edu>
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
Uday Khare <udaykhare77(a)gmail.com>
ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup
Uday Khare <udaykhare77(a)gmail.com>
ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup
Hongling Zeng <zenghongling(a)kylinos.cn>
dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
Sabrina Dubroca <sd(a)queasysnail.net>
tls: separate no-async decryption request handling from async
Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com>
net: qrtr: ns: Raise node count limit to 512
Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com>
net: qrtr: ns: Limit the maximum server registration per node
Benjamin Tissoires <bentiss(a)kernel.org>
HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report
Lee Jones <lee(a)kernel.org>
HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write
Lee Jones <lee(a)kernel.org>
HID: logitech-dj: Standardise hid_report_enum variable nomenclature
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Fix sequence number when no EOF
Isaac Scott <isaac.scott(a)ideasonboard.com>
media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
Yehyeong Lee <yhlee(a)isslab.korea.ac.kr>
net: mpls: initialize rtm_tos in mpls_getroute()
Nikolay Aleksandrov <nikolay(a)nvidia.com>
net: bridge: vlan: fix global vlan option range dumping
Eric Dumazet <edumazet(a)google.com>
raw: fix a typo in raw_icmp_error()
Eric Dumazet <edumazet(a)google.com>
raw: remove unused variables from raw6_icmp_error()
Kyle Zeng <kylebot(a)openai.com>
openvswitch: fix GSO userspace truncation underflow
Devin Wittmayer <lucid_duck(a)justthetip.ca>
wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
Weiming Shi <bestswngs(a)gmail.com>
tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
Ce Sun <cesun102(a)amd.com>
drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
Boyuan Zhang <boyuan.zhang(a)amd.com>
drm/amdgpu: fix division by zero with invalid uvd dimensions
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx8: drop unecessary BUG_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()
Daehyeon Ko <4ncienth(a)gmail.com>
tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
Asim Viladi Oglu Manizada <manizada(a)pm.me>
pppoe: reload header pointer after dev_hard_header()
Doruk Tan Ozturk <doruk(a)0sec.ai>
mac802154: llsec: reject frames shorter than the authentication tag
Michael Bommarito <michael.bommarito(a)gmail.com>
ila: reload IPv6 header after pskb_may_pull in checksum adjust
Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de>
rbd: Reset positive result codes to zero in object map update path
Jann Horn <jannh(a)google.com>
proc: Fix broken error paths for namespace links
Fan Wu <fanwu01(a)zju.edu.cn>
net: hip04: fix RX buffer leak on build_skb failure
David Lee <david.lee(a)trailofbits.com>
net/x25: fix use-after-free in x25_kill_by_neigh()
Bryam Vargas <hexlabsecurity(a)proton.me>
net/iucv: fix use-after-free of a severed iucv_path
Hidayath Khan <hidayath(a)linux.ibm.com>
net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
Doruk Tan Ozturk <doruk(a)0sec.ai>
geneve: require CAP_NET_ADMIN in the device netns for changelink
Sungmin Kang <726ksm(a)gmail.com>
net: slip: serialize receive against buffer reallocation
Doruk Tan Ozturk <doruk(a)0sec.ai>
vxlan: require CAP_NET_ADMIN in the device netns for changelink
Breno Leitao <leitao(a)debian.org>
phonet: pep: fix use-after-free in pep_get_sb()
Lu Baolu <baolu.lu(a)linux.intel.com>
iommu/vt-d: Disallow SVA if page walk is not coherent
Christian Brauner <brauner(a)kernel.org>
binfmt_elf_fdpic: only honour the first PT_INTERP
Douya Le <ldy3087146292(a)gmail.com>
libceph: remove debugfs files before client teardown
Douya Le <ldy3087146292(a)gmail.com>
libceph: reject zero bucket types in crush_decode
Shuangpeng Bai <shuangpeng.kernel(a)gmail.com>
libceph: refresh auth->authorizer_buf{,_len} after authorizer update
Zhao Zhang <zzhan461(a)ucr.edu>
libceph: guard missing CRUSH type name lookup
Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de>
libceph: Fix multiplication overflow in decode_new_up_state_weight()
Douya Le <ldy3087146292(a)gmail.com>
libceph: bound get_version reply decode to front len
Bryam Vargas <hexlabsecurity(a)proton.me>
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
Jun Yang <junvyyang(a)tencent.com>
sctp: don't free the ASCONF's own transport in DEL-IP processing
Will Deacon <will(a)kernel.org>
Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"
Will Deacon <will(a)kernel.org>
arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()
deepakraog <gaikwad.dcg(a)gmail.com>
tracing: Fix resource leak on mmiotrace trace_pipe close
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
Guangshuo Li <lgs201920130244(a)gmail.com>
intel_th: fix MSC output device reference leak
Ian Abbott <abbotti(a)mev.co.uk>
comedi: comedi_parport: deal with premature interrupt
Xu Rao <raoxu(a)uniontech.com>
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
Christian Brauner <brauner(a)kernel.org>
binfmt_misc: set have_execfd only once the interpreter is opened
Christian Brauner <brauner(a)kernel.org>
exec: fix unsigned loop counter wrap in transfer_args_to_stack()
Chengfeng Ye <nicoyip.dev(a)gmail.com>
Bluetooth: RFCOMM: Fix session UAF in set_termios
Fan Wu <fanwu01(a)zju.edu.cn>
wifi: brcmfmac: make release_scratchbuffers idempotent
Huihui Huang <hhhuang(a)smu.edu.sg>
wifi: wilc1000: validate assoc response length before subtracting header
Doruk Tan Ozturk <doruk(a)0sec.ai>
wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
Tristan Madani <tristan(a)talencesecurity.com>
wifi: ath6kl: fix OOB access from firmware ADDBA window size
Hans Verkuil <hverkuil+cisco(a)kernel.org>
media: vivid: check for vb2_is_busy() when toggling caps
Guangshuo Li <lgs201920130244(a)gmail.com>
media: vimc: fix reference leak on failed device registration
Guangshuo Li <lgs201920130244(a)gmail.com>
media: vidtv: fix reference leak on failed device registration
Zile Xiong <xiongzile99(a)gmail.com>
media: vb2: use ssize_t for vb2_read/vb2_write
Hungyu Lin <dennylin0707(a)gmail.com>
media: tegra-video: vi: fix invalid u32 return value in format lookup
Valery Borovsky <vebohr(a)gmail.com>
media: sun4i-csi: Return queued buffers on start_streaming() failure
Ma Ke <make24(a)iscas.ac.cn>
media: saa7134: Fix a possible memory leak in saa7134_video_init1
Valery Borovsky <vebohr(a)gmail.com>
media: rtl2832_sdr: Return queued buffers on start_streaming() failure
Deepanshu Kartikey <kartikey406(a)gmail.com>
media: rtl2832: fix use-after-free in rtl2832_remove()
Myeonghun Pak <mhun512(a)gmail.com>
media: radio-si476x: Unregister v4l2_device on probe failure
Valery Borovsky <vebohr(a)gmail.com>
media: pwc: Return queued buffers on start_streaming() failure
Valery Borovsky <vebohr(a)gmail.com>
media: pwc: Drain fill_buf on start_streaming() failure
Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com>
media: pci: dm1105: Free allocated workqueue
Valery Borovsky <vebohr(a)gmail.com>
media: msi2500: Return queued buffers on start_streaming() failure
Anand Moon <linux.amoon(a)gmail.com>
media: meson: vdec: Fix memory leak in error path of vdec_open
Wang Jun <1742789905(a)qq.com>
media: cx23885: add ioremap return check and cleanup
Johan Hovold <johan(a)kernel.org>
media: cx231xx: fix devres lifetime
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
media: cedrus: skip invalid H.264 reference list entries
Samuel Holland <samuel(a)sholland.org>
media: cedrus: Fix missing cleanup in error path
Myeonghun Pak <mhun512(a)gmail.com>
media: cedrus: clean up media device on probe failure
Myeonghun Pak <mhun512(a)gmail.com>
media: cec: seco: unregister adapter on IR probe failure
Valery Borovsky <vebohr(a)gmail.com>
media: airspy: Return queued buffers on start_streaming() failure
Ian Forbes <ian.forbes(a)broadcom.com>
drm/vmwgfx: Validate vmw_surface_metadata::array_size
Zhu Lingshan <lingshan.zhu(a)amd.com>
drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X)
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amdgpu: Fix VFCT bus number matching with soft filter
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: track a single source interface for ANYDEV timeout/throttle ops
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: fix stale rx/tx ops after device removal
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: add missing device refcount for CAN filter removal
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: validate frame length in bcm_rx_setup() for RTR replies
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: extend bcm_tx_lock usage for data and timer updates
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: fix CAN frame rx/tx statistics
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: bcm: add locking when updating filter and timer values
Lee Jones <lee(a)kernel.org>
can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF
Chengfeng Ye <nicoyip.dev(a)gmail.com>
bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
Li RongQing <lirongqing(a)baidu.com>
net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
Pavel Ondračka <pavel.ondracka(a)gmail.com>
drm/radeon: fix r100_copy_blit for large BOs
Wentao Liang <vulab(a)iscas.ac.cn>
drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()
Sergey Shtylyov <s.shtylyov(a)auroraos.dev>
drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
Eric Dumazet <edumazet(a)google.com>
raw: use more conventional iterators
Alexei Lazar <alazar(a)nvidia.com>
net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
Alexei Lazar <alazar(a)nvidia.com>
net/mlx5e: Report zero bandwidth for non-ETS traffic classes
Yael Chemla <ychemla(a)nvidia.com>
net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule
Aldo Ariel Panzardo <qwe.aldo(a)gmail.com>
net: qrtr: restrict socket creation to the initial network namespace
Chenguang Zhao <zhaochenguang(a)kylinos.cn>
hinic: remove unused ethtool RSS user configuration buffers
Eric Dumazet <edumazet(a)google.com>
ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup
Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com>
net: stmmac: reset residual action in L3L4 filters on delete
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
tipc: fix u16 MTU truncation in media and bearer MTU validation
Harshaka Narayana <harshaka.narayana(a)broadcom.com>
vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
Qing Luo <luoqing(a)kylinos.cn>
sctp: auth: verify auth requirement when auth_chunk is NULL
Nikolay Aleksandrov <razor(a)blackwall.org>
net: bridge: vlan: fix vlan range dumps starting with pvid
Nikolay Aleksandrov <nikolay(a)nvidia.com>
net: bridge: vlan: add support for dumping global vlan options
Nikolay Aleksandrov <nikolay(a)nvidia.com>
net: bridge: vlan: add support for global options
Shelley Yang <shelley.yang(a)infineon.com>
wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
Helen Koike <koike(a)igalia.com>
tipc: fix infinite loop in __tipc_nl_compat_dumpit
Cen Zhang (Microsoft) <blbllhy(a)gmail.com>
sctp: validate stream count in sctp_process_strreset_inreq()
HanQuan <eilaimemedsnaimel(a)gmail.com>
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid
Prashanth Kumar KR <PrashanthKumar.K.R(a)amd.com>
amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN
Andrew Pope <andrew.pope(a)morsemicro.com>
wifi: mac80211: recalculate TIM when a station enters power save
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
iommu/amd: Bound the early ACPI HID map
HE WEI (ギカク) <skyexpoc(a)gmail.com>
wifi: mwifiex: bound uAP association event IEs to the event buffer
Ruoyu Wang <ruoyuw560(a)gmail.com>
wan: wanxl: Only reset hardware after BAR mapping
Ruoyu Wang <ruoyuw560(a)gmail.com>
nfp: Check resource mutex allocation
Aldo Ariel Panzardo <qwe.aldo(a)gmail.com>
rds: drop incoming messages that cross network namespace boundaries
David Lee <david.lee(a)trailofbits.com>
net/packet: avoid fanout hook re-registration after unregister
Diego Fernando Mancera Gomez <diegomancera.dev(a)gmail.com>
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
Jiaxin Yu <jiaxin.yu(a)mediatek.com>
ASoC: bt-sco: fix bt-sco-pcm-wb dai widget don't connect to the endpoint
Tristan Madani <tristan(a)talencesecurity.com>
wifi: carl9170: fix buffer overflow in rx_stream failover path
Tristan Madani <tristan(a)talencesecurity.com>
wifi: carl9170: fix OOB read from off-by-two in TX status handler
Tristan Madani <tristan(a)talencesecurity.com>
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
Tristan Madani <tristan(a)talencesecurity.com>
wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
Tristan Madani <tristan(a)talencesecurity.com>
wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
Ruoyu Wang <ruoyuw560(a)gmail.com>
firewire: net: Fix fragmented datagram reassembly
Dmitry Morgun <d.morgun(a)ispras.ru>
wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
Tzung-Bi Shih <tzungbi(a)kernel.org>
watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
Guenter Roeck <linux(a)roeck-us.net>
hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
Cheng Yongkang <teel4res(a)gmail.com>
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
Xincheng Zhang <zhangxincheng(a)ultrarisc.com>
usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: Fix ld_{abs,ind} failure path analysis in subprogs
Doruk Tan Ozturk <doruk(a)0sec.ai>
crypto: rsa-pkcs1pad: Don't WARN on an empty digest
Chukun Pan <amadeus(a)jmu.edu.cn>
USB: serial: option: add TDTECH MT5710-CN
Sunho Park <shpark061104(a)gmail.com>
USB: serial: io_edgeport: cap received transmit credits
Tim Pambor <timpambor(a)gmail.com>
USB: serial: ftdi_sio: add support for E+H FXA291
Muhammad Bilal <meatuni001(a)gmail.com>
usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
Sonali Pradhan <sonalipradhan(a)google.com>
usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
Johan Hovold <johan(a)kernel.org>
USB: gadget: fsl-udc: fix device name leak on probe failure
Johan Hovold <johan(a)kernel.org>
USB: gadget: snps-udc: fix device name leak on probe failure
Melbin K Mathew <mlbnkm1(a)gmail.com>
usb: gadget: printer: fix infinite loop in printer_read()
Fan Wu <fanwu01(a)zju.edu.cn>
usb: gadget: f_midi: cancel pending IN work before freeing the midi object
Jinchao Wang <wangjinchao600(a)gmail.com>
usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
Xu Yang <xu.yang_2(a)nxp.com>
usb: chipidea: fix usage_count leak when autosuspend_delay is negative
Huang Wei <huangwei(a)kylinos.cn>
USB: storage: add NO_ATA_1X quirk for Longmai USB Key
Huihui Huang <hhhuang(a)smu.edu.sg>
wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
Weiming Shi <bestswngs(a)gmail.com>
mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
Xin Long <lucien.xin(a)gmail.com>
sctp: fix auth_hmacs array size in struct sctp_cookie
Jamal Hadi Salim <jhs(a)mojatatu.com>
net/sched: act_tunnel_key: Defer dst_release to RCU callback
Emre Cecanpunar <emreleno(a)gmail.com>
drm/i915/selftests: Fix GT PM sort comparators
Shuhao Fu <sfual(a)cse.ust.hk>
can: j1939: fix lockless local-destination check
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
drm/i915/gt: use correct selftest config symbol
Huiwen He <hehuiwen(a)kylinos.cn>
smb/client: handle overlapping allocated ranges in fallocate
Rosen Penev <rosenp(a)gmail.com>
ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning
Colin Ian King <colin.i.king(a)gmail.com>
ata: sata_dwc_460ex: remove variable num_processed
Rosen Penev <rosenp(a)gmail.com>
ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts
Rosen Penev <rosenp(a)gmail.com>
ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
Bryam Vargas <hexlabsecurity(a)proton.me>
net/iucv: take a reference on the socket found in afiucv_hs_rcv()
Weiming Shi <bestswngs(a)gmail.com>
ipv4: fib: free fib_alias with kfree_rcu() on insert error path
Pushpendra Singh <pushpendra.singh(a)oss.qualcomm.com>
firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context
Uday Khare <udaykhare77(a)gmail.com>
ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup
Christian Hewitt <christianshewitt(a)gmail.com>
ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop
HE WEI (ギカク) <skyexpoc(a)gmail.com>
wifi: cfg80211: bound element ID read when checking non-inheritance
Runyu Xiao <runyu.xiao(a)seu.edu.cn>
wifi: brcmfmac: initialize SDIO data work before cleanup
Cen Zhang <zzzccc427(a)gmail.com>
wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
Zhao Li <enderaoelyther(a)gmail.com>
wifi: cfg80211: reject unsupported PMSR FTM location requests
Zhao Li <enderaoelyther(a)gmail.com>
wifi: cfg80211: validate PMSR FTM preamble range
Zhao Li <enderaoelyther(a)gmail.com>
wifi: cfg80211: validate PMSR measurement type data
Xiang Mei <xmei5(a)asu.edu>
wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
Dawei Feng <dawei.feng(a)seu.edu.cn>
wifi: libertas: fix memory leak in helper_firmware_cb()
Bryam Vargas <hexlabsecurity(a)proton.me>
wifi: mac80211_hwsim: clamp virtio RX length before skb_put
Ramon Fontes <ramonreisfontes(a)gmail.com>
mac80211_hwsim: add 6GHz channels
Abdun Nihaal <nihaal(a)cse.iitm.ac.in>
wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
Xiang Mei (Microsoft) <xmei5(a)asu.edu>
xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
Danila Chernetsov <listdansp(a)mail.ru>
RDMA/hns: Fix potential integer overflow in mhop hem cleanup
Xiang Mei <xmei5(a)asu.edu>
btrfs: reject free space cache with more entries than pages
Nikolay Borisov <nborisov(a)suse.com>
btrfs: remove crc_check logic from free space
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
mtd: nand: mtk-ecc: stop on ECC idle timeouts
Pengpeng Hou <pengpeng(a)iscas.ac.cn>
mtd: mtdswap: remove debugfs stats file on teardown
Michael Bommarito <michael.bommarito(a)gmail.com>
IB/mad: Drop unmatched RMPP responses before reassembly
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Make vmread_error_trampoline() uncallable from C code
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: ims-pcu - fix logic error in packet reset
Seungjin Bae <eeodqql09(a)gmail.com>
Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: isotp: serialize TX state transitions under so->rx_lock
Oliver Hartkopp <socketcan(a)hartkopp.net>
can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
Phil Rosenthal <phil(a)phil.gs>
KVM: x86/mmu: Fix use-after-free on vendor module reload
Hyunwoo Kim <imv4bel(a)gmail.com>
KVM: nVMX: Hide shadow VMCS right after VMCLEAR
Daehyeon Ko <4ncienth(a)gmail.com>
macsec: don't read an unset MAC header in macsec_encrypt()
Bradley Morgan <include(a)grrlz.net>
cpu: hotplug: Bound hotplug states sysfs output
Sagi Grimberg <sagi(a)grimberg.me>
nvmet-tcp: Fix potential UAF when ddgst mismatch
-------------
Diffstat:
Makefile | 4 +-
arch/arm/mach-npcm/platsmp.c | 2 +
arch/mips/kernel/mips-mt-fpaff.c | 28 +-
arch/powerpc/boot/simpleboot.c | 2 +-
arch/powerpc/boot/treeboot-akebono.c | 2 +-
arch/powerpc/boot/treeboot-currituck.c | 2 +-
arch/powerpc/platforms/ps3/mm.c | 1 +
arch/um/drivers/vector_kern.c | 3 +
arch/x86/kvm/mmu/mmu.c | 2 +
arch/x86/kvm/vmx/nested.c | 11 +-
arch/x86/kvm/vmx/vmx_ops.h | 16 +-
crypto/rsa-pkcs1pad.c | 2 +-
drivers/ata/pata_sl82c105.c | 4 +-
drivers/ata/sata_dwc_460ex.c | 21 +-
drivers/block/rbd.c | 7 +-
drivers/cdrom/cdrom.c | 1 +
drivers/counter/microchip-tcb-capture.c | 4 +-
drivers/cpufreq/powernow-k8.c | 1 +
drivers/dma/sun6i-dma.c | 11 +-
drivers/firewire/net.c | 37 +-
drivers/firmware/arm_scmi/notify.c | 6 +-
drivers/firmware/stratix10-svc.c | 9 +-
drivers/gpio/gpio-pch.c | 28 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 45 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 13 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 12 +
drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 8 +
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 13 +-
drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 3 -
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 10 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 4 +-
drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 7 +-
drivers/gpu/drm/i915/gt/intel_engine_user.c | 2 +-
drivers/gpu/drm/i915/gt/selftest_gt_pm.c | 8 +-
drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c | 1 +
drivers/gpu/drm/radeon/r100.c | 13 +-
drivers/gpu/drm/rockchip/cdn-dp-reg.c | 2 +
drivers/gpu/drm/vc4/vc4_validate.c | 29 +-
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 14 +-
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 22 +-
drivers/hid/hid-logitech-dj.c | 28 +-
drivers/hwmon/Kconfig | 1 +
drivers/hwmon/adt7470.c | 605 +++++++++++++--------
drivers/hwmon/corsair-cpro.c | 1 +
drivers/hwmon/nct6775.c | 12 +-
drivers/hwmon/pmbus/pmbus_core.c | 2 +-
drivers/hwtracing/intel_th/core.c | 10 -
drivers/hwtracing/intel_th/msu.c | 2 +
drivers/i2c/busses/i2c-amd-mp2-plat.c | 4 +-
drivers/i2c/busses/i2c-jz4780.c | 5 +-
drivers/infiniband/core/mad.c | 30 +
drivers/infiniband/hw/hns/hns_roce_hem.c | 2 +-
drivers/infiniband/sw/rxe/rxe_mmap.c | 19 +-
drivers/input/evdev.c | 27 +-
drivers/input/misc/ims-pcu.c | 32 +-
drivers/iommu/amd/init.c | 6 +
drivers/iommu/intel/svm.c | 2 +-
drivers/media/cec/platform/seco/seco-cec.c | 6 +-
drivers/media/common/videobuf2/videobuf2-core.c | 12 +-
drivers/media/dvb-frontends/rtl2832.c | 4 +-
drivers/media/dvb-frontends/rtl2832_sdr.c | 19 +-
drivers/media/pci/cx23885/cx23885-core.c | 14 +-
drivers/media/pci/dm1105/dm1105.c | 1 +
drivers/media/pci/saa7134/saa7134-video.c | 25 +-
drivers/media/platform/sunxi/sun4i-csi/sun4i_dma.c | 6 +-
drivers/media/radio/radio-si476x.c | 1 +
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +-
drivers/media/test-drivers/vimc/vimc-core.c | 1 +
drivers/media/test-drivers/vivid/vivid-ctrls.c | 12 +
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 6 +
drivers/media/test-drivers/vivid/vivid-vid-out.c | 6 +
drivers/media/usb/airspy/airspy.c | 8 +-
drivers/media/usb/cx231xx/cx231xx-cards.c | 16 +-
drivers/media/usb/msi2500/msi2500.c | 32 +-
drivers/media/usb/pwc/pwc-if.c | 13 +-
drivers/media/usb/uvc/uvc_video.c | 78 ++-
drivers/media/usb/uvc/uvcvideo.h | 4 +
drivers/misc/fastrpc.c | 3 +-
drivers/mtd/mtdswap.c | 5 +-
drivers/mtd/nand/raw/mtk_ecc.c | 16 +-
drivers/net/bonding/bond_alb.c | 10 +-
drivers/net/can/softing/softing_fw.c | 46 +-
drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c | 1 +
drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 13 +-
drivers/net/can/usb/peak_usb/pcan_usb_core.c | 1 -
drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 40 +-
drivers/net/can/usb/peak_usb/pcan_usb_pro.c | 20 +-
drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 11 +-
drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 22 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 12 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 +
drivers/net/ethernet/hisilicon/hip04_eth.c | 11 +-
drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 1 -
drivers/net/ethernet/huawei/hinic/hinic_dev.h | 2 -
drivers/net/ethernet/huawei/hinic/hinic_ethtool.c | 21 -
drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
drivers/net/ethernet/intel/igbvf/netdev.c | 2 -
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 2 +-
.../net/ethernet/marvell/prestera/prestera_pci.c | 87 ++-
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 15 +
.../ethernet/mellanox/mlx5/core/esw/acl/helper.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c | 7 +-
.../ethernet/netronome/nfp/nfpcore/nfp_resource.c | 3 +
drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 44 +-
drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 14 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 1 +
drivers/net/geneve.c | 3 +
drivers/net/macsec.c | 2 +-
drivers/net/phy/phylink.c | 29 +-
drivers/net/ppp/pppoe.c | 1 +
drivers/net/slip/slip.c | 4 +
drivers/net/vmxnet3/vmxnet3_drv.c | 22 +-
drivers/net/vxlan/vxlan_core.c | 20 +-
drivers/net/wan/wanxl.c | 3 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +
drivers/net/wireless/ath/ath6kl/txrx.c | 10 +-
drivers/net/wireless/ath/ath6kl/wmi.c | 20 +
drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +-
drivers/net/wireless/ath/carl9170/rx.c | 7 +-
drivers/net/wireless/ath/carl9170/tx.c | 2 +-
drivers/net/wireless/atmel/at76c50x-usb.c | 7 +-
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 2 +-
.../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 8 +-
.../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 2 +-
drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
drivers/net/wireless/intersil/p54/txrx.c | 8 +
drivers/net/wireless/mac80211_hwsim.c | 75 ++-
drivers/net/wireless/marvell/libertas/firmware.c | 1 +
.../net/wireless/marvell/mwifiex/11n_rxreorder.c | 2 +-
drivers/net/wireless/marvell/mwifiex/tdls.c | 2 +-
drivers/net/wireless/marvell/mwifiex/uap_event.c | 24 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 4 +
drivers/net/wireless/microchip/wilc1000/hif.c | 5 +
drivers/nvme/target/tcp.c | 4 +-
drivers/phy/xilinx/phy-zynqmp.c | 37 +-
drivers/pinctrl/Kconfig | 1 +
drivers/pinctrl/devicetree.c | 4 +
drivers/s390/block/dasd_ioctl.c | 2 +-
drivers/s390/crypto/zcrypt_ccamisc.c | 26 +-
drivers/s390/scsi/zfcp_aux.c | 1 +
drivers/scsi/libiscsi.c | 2 +-
drivers/scsi/libiscsi_tcp.c | 8 +-
drivers/scsi/scsi_debug.c | 4 +-
drivers/spi/spi-fsl-dspi.c | 13 +-
drivers/staging/comedi/drivers/comedi_parport.c | 13 +-
drivers/staging/media/meson/vdec/vdec.c | 4 +-
drivers/staging/media/sunxi/cedrus/cedrus.c | 6 +-
drivers/staging/media/sunxi/cedrus/cedrus_h264.c | 3 +
drivers/staging/media/tegra-video/vi.c | 4 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 3 +
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 4 +
drivers/thunderbolt/eeprom.c | 9 +-
drivers/tty/serial/8250/8250_dma.c | 12 +-
drivers/tty/vt/keyboard.c | 5 +-
drivers/tty/vt/vt_ioctl.c | 2 +
drivers/usb/atm/cxacru.c | 2 +
drivers/usb/atm/ueagle-atm.c | 17 +
drivers/usb/chipidea/core.c | 1 +
drivers/usb/gadget/function/f_midi.c | 1 +
drivers/usb/gadget/function/f_ncm.c | 19 +-
drivers/usb/gadget/function/f_printer.c | 23 +-
drivers/usb/gadget/function/uvc_v4l2.c | 2 +
drivers/usb/gadget/udc/dummy_hcd.c | 40 +-
drivers/usb/gadget/udc/fsl_udc_core.c | 1 -
drivers/usb/gadget/udc/snps_udc_core.c | 1 -
drivers/usb/host/xhci-pci.c | 1 +
drivers/usb/host/xhci.c | 15 +-
drivers/usb/host/xhci.h | 1 +
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 5 +
drivers/usb/serial/io_edgeport.c | 3 +-
drivers/usb/serial/option.c | 1 +
drivers/usb/storage/unusual_devs.h | 7 +
drivers/vhost/vhost.c | 8 +
drivers/video/fbdev/core/bitblit.c | 9 +-
drivers/watchdog/watchdog_pretimeout.c | 2 +
fs/binfmt_elf_fdpic.c | 4 +
fs/binfmt_misc.c | 9 +-
fs/btrfs/free-space-cache.c | 38 +-
fs/btrfs/free-space-cache.h | 1 -
fs/ceph/caps.c | 1 +
fs/cifs/cifssmb.c | 12 +-
fs/cifs/smb2ops.c | 25 +-
fs/crypto/fscrypt_private.h | 32 +-
fs/crypto/keyring.c | 212 ++++----
fs/exec.c | 2 +-
fs/namespace.c | 5 +
fs/nfs/nfs4proc.c | 13 +
fs/proc/namespaces.c | 4 +-
include/linux/dma/qcom_bam_dma.h | 21 +-
include/linux/netdevice.h | 5 -
include/linux/netfilter/nf_conntrack_sip.h | 2 +-
include/media/videobuf2-core.h | 8 +-
include/net/addrconf.h | 4 +-
include/net/bluetooth/bluetooth.h | 1 +
include/net/bluetooth/l2cap.h | 1 +
include/net/bluetooth/rfcomm.h | 3 +
include/net/ip_vs.h | 20 +-
include/net/raw.h | 5 +-
include/net/rawv6.h | 6 +-
include/net/route.h | 2 +
include/net/sctp/structs.h | 3 +-
include/uapi/linux/if_bridge.h | 14 +
kernel/audit.c | 11 +-
kernel/auditfilter.c | 6 +-
kernel/bpf/verifier.c | 31 +-
kernel/cpu.c | 9 +-
kernel/futex/core.c | 82 ++-
kernel/trace/ring_buffer.c | 8 +-
kernel/trace/trace_events.c | 4 +-
kernel/trace/trace_events_filter.c | 3 +
kernel/trace/trace_mmiotrace.c | 5 +-
kernel/trace/trace_probe.c | 13 +-
lib/assoc_array.c | 3 +-
lib/rhashtable.c | 1 +
mm/huge_memory.c | 16 +-
mm/hugetlb.c | 2 +-
mm/page_reporting.c | 6 +-
mm/percpu-km.c | 2 +-
net/bluetooth/6lowpan.c | 18 +-
net/bluetooth/af_bluetooth.c | 22 +
net/bluetooth/hidp/core.c | 5 +-
net/bluetooth/l2cap_core.c | 41 +-
net/bluetooth/rfcomm/core.c | 17 +
net/bluetooth/rfcomm/tty.c | 7 +-
net/bluetooth/sco.c | 27 +-
net/bridge/br_multicast.c | 1 +
net/bridge/br_netlink_tunnel.c | 3 +-
net/bridge/br_private.h | 14 +-
net/bridge/br_vlan.c | 64 ++-
net/bridge/br_vlan_options.c | 119 +++-
net/bridge/netfilter/ebt_nflog.c | 17 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 1 +
net/can/bcm.c | 564 ++++++++++++++-----
net/can/isotp.c | 295 +++++++---
net/can/j1939/transport.c | 20 +-
net/ceph/auth_x.c | 9 +-
net/ceph/ceph_common.c | 4 +-
net/ceph/mon_client.c | 2 +-
net/ceph/osdmap.c | 12 +-
net/core/lwt_bpf.c | 4 +-
net/core/sock.c | 1 -
net/ipv4/fib_semantics.c | 34 +-
net/ipv4/fib_trie.c | 2 +-
net/ipv4/icmp.c | 18 +-
net/ipv4/raw.c | 91 ++--
net/ipv4/raw_diag.c | 33 +-
net/ipv4/route.c | 29 +
net/ipv4/tcp_bpf.c | 4 +-
net/ipv4/udp_offload.c | 4 +-
net/ipv6/fib6_rules.c | 1 +
net/ipv6/ila/ila_common.c | 12 +
net/ipv6/ip6_fib.c | 17 +-
net/ipv6/ip6_tunnel.c | 3 +
net/ipv6/raw.c | 102 ++--
net/ipv6/route.c | 8 +-
net/iucv/af_iucv.c | 21 +-
net/mac80211/iface.c | 8 +-
net/mac80211/rx.c | 2 +
net/mac802154/llsec.c | 5 +
net/mpls/af_mpls.c | 4 +
net/ncsi/ncsi-netlink.c | 4 +
net/netfilter/ipset/ip_set_hash_gen.h | 2 +-
net/netfilter/ipvs/ip_vs_conn.c | 44 +-
net/netfilter/ipvs/ip_vs_core.c | 1 +
net/netfilter/ipvs/ip_vs_ctl.c | 77 ++-
net/netfilter/ipvs/ip_vs_lc.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 2 -
net/netfilter/ipvs/ip_vs_proto_tcp.c | 2 -
net/netfilter/ipvs/ip_vs_sync.c | 7 +-
net/netfilter/nf_conntrack_sip.c | 2 +-
net/netfilter/nf_nat_sip.c | 2 +-
net/netfilter/nft_payload.c | 12 +-
net/netfilter/xt_hashlimit.c | 16 +-
net/openvswitch/actions.c | 26 +-
net/openvswitch/datapath.c | 54 +-
net/openvswitch/datapath.h | 2 +-
net/openvswitch/flow.c | 28 +-
net/openvswitch/meter.c | 33 +-
net/openvswitch/vport.c | 6 +-
net/packet/af_packet.c | 13 +-
net/phonet/pep.c | 2 +
net/qrtr/af_qrtr.c | 8 +
net/qrtr/ns.c | 33 +-
net/rds/ib.c | 4 +
net/rds/ib_cm.c | 4 +
net/rds/recv.c | 15 +
net/rds/tcp.c | 14 +-
net/sched/act_tunnel_key.c | 14 +-
net/sched/cls_route.c | 35 +-
net/sched/sch_cake.c | 1 -
net/sctp/associola.c | 14 +-
net/sctp/auth.c | 2 +-
net/sctp/input.c | 108 ++--
net/sctp/ipv6.c | 94 ++--
net/sctp/outqueue.c | 1 +
net/sctp/sm_make_chunk.c | 26 +-
net/sctp/sm_statefuns.c | 8 +-
net/sctp/stream.c | 6 +-
net/smc/smc_core.c | 2 +-
net/smc/smc_llc.c | 3 +-
net/tipc/core.c | 5 +
net/tipc/discover.c | 14 +-
net/tipc/netlink.c | 6 +-
net/tipc/netlink_compat.c | 4 +
net/tipc/node.c | 15 +-
net/tipc/socket.c | 3 +-
net/tls/tls_sw.c | 19 +-
net/vmw_vsock/virtio_transport.c | 3 +-
net/wireless/nl80211.c | 4 +-
net/wireless/pmsr.c | 21 +-
net/wireless/scan.c | 2 +-
net/x25/af_x25.c | 8 +-
net/xfrm/xfrm_policy.c | 4 +-
security/integrity/ima/ima_appraise.c | 9 +-
security/keys/keyring.c | 14 +-
sound/core/pcm_native.c | 7 +
sound/pci/lx6464es/lx6464es.c | 5 +-
sound/pci/lx6464es/lx_core.c | 5 +-
sound/soc/codecs/bt-sco.c | 18 +-
sound/soc/codecs/max98090.c | 5 +-
sound/soc/codecs/max98095.c | 5 +-
sound/soc/codecs/tas2562.c | 35 +-
sound/soc/meson/aiu-fifo-spdif.c | 5 +
sound/usb/6fire/chip.c | 4 +
sound/usb/endpoint.c | 23 +-
sound/usb/midi.c | 2 +
sound/usb/pcm.c | 7 +
tools/testing/selftests/clone3/clone3_set_tid.c | 2 +-
333 files changed, 3984 insertions(+), 1839 deletions(-)
6 days, 4 hours
- 8
- 7
AIに奪われない！集客いらずの新ビジネス
by 鈴木 彩 _ イーアシスト
4,300以上の福祉施設から、依頼が集まり続け
既存の全国100拠点だけではとても供給が追いつかない・・・。
この需給ギャップを埋めるため、
現在「訪問型理美容サービス事業」のフランチャイズ加盟店・オーナー様を
新たに募集しております。
<説明会の日程>
8月19日（水）13:00〜14:00
※いずれも内容は同じです
<オンライン視聴はこちら>
https://eassist-corp.work/beauty3/
◆…─…─…─…─…─…─…─…─…─…─…─…─…─…─…─…─…─◇
いわゆる“2025年問題”を背景に、
訪問理美容へのニーズは年々高まり、メディアからも注目が集まっています。
堀江貴文さんのYouTubeチャンネル（ホリエモンチャンネル）でも
本事業が取り上げられ、大きな反響を呼んでいます。
（動画リンク）
https://www.youtube.com/watch?v=FpCmymNWXcw
◆…─…─…─…─…─…─…─…─…─…─…─…─…─…─…─…─…─◇
いつもお世話になっております。
イーアシスト セミナー事務局です。
この度、全国で急拡大を続ける「訪問型理美容サービス」の
フランチャイズ説明会をご案内いたします。
訪問型理美容サービスとは？
高齢・疾病・ケガ・障がいなどにより、外出が難しい方の
ご自宅や介護施設を訪問し、
カットを中心とした理美容サービスを提供する事業です。
すでに 4,300以上の福祉施設と提携しており、
安定した需要に支えられた成長マーケットです。
現在は、全国100拠点超で対応していますが、
施設側からの依頼増加に対して供給が追いつかず、
新店の開設が急務となっています。
この事業を開業するにあたって、
オーナー様に理美容等の専門資格は不要です。
本部が理美容師の採用を全面サポートいたしますので、
オーナー様は マネジメントと事業運営に専念いただけます。
さらに、開業後の軌道化を後押しする仕組みとして、
「既存の提携施設の案件をご紹介」
「本部が新規で提携施設の営業を実施」
新規開拓の支援を本部側で行います。
■セミナー内
──────────────────────────────
・初期投資の内訳
・モデル収支と回収期間
・施設紹介制度を含むサポート体制
・事業の将来性と市場データ
・成功オーナーの取組み事例 など
事業としての安定性・社会貢献性・スケール性を
総合的に判断いただける内容となっております。
＞＞ オンライン視聴はこちら ＜＜
https://eassist-corp.work/beauty3/
***********************************************************************
メールでのご連絡、大変失礼しました。
こちらのメールが不要な方は、お手数ですが下記よりお手続きをお願いします。
https://eassist-corp.work/mail/
***********************************************************************
イーアシスト セミナー運営事務局
大阪市中央区日本橋1-17-17-604
TEL：06-6253-0875
***********************************************************************
6 days, 20 hours
- 1
- 0