6.18.39-rc2 review
Greg Kroah-Hartman
maintainercover 6.18.39-rc2 review
This is the start of the stable review cycle for the 6.18.39 release. There are 495 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Sun, 19 Jul 2026 10:18:22 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.39-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <[email protected]>
Linux 6.18.39-rc2
Darrick J. Wong <[email protected]>
xfs: use rtrefcount btree cursor in xchk_xref_is_rt_cow_staging
Darrick J. Wong <[email protected]>
xfs: write the rg superblock when fixing it
Darrick J. Wong <[email protected]>
xfs: fix off-by-one error when calling xchk_xref_has_rt_owner
Darrick J. Wong <[email protected]>
xfs: don't zap bmbt forks if they are MAXLEVELS tall
Darrick J. Wong <[email protected]>
xfs: fully check the parent handle when it points to the rootdir
Darrick J. Wong <[email protected]>
xfs: clamp timestamp nanoseconds correctly
Darrick J. Wong <[email protected]>
xfs: handle non-inode owners for rtrmap record checking
Darrick J. Wong <[email protected]>
xfs: set xfarray killable sort correctly
Darrick J. Wong <[email protected]>
xfs: use the rt version of the cow staging checker
Darrick J. Wong <[email protected]>
xfs: grab rtrmap btree when checking rgsuper
Darrick J. Wong <[email protected]>
xfs: don't wrap around quota ids in dqiterate
Darrick J. Wong <[email protected]>
xfs: resample the data fork mapping after cycling ILOCK
Weiming Shi <[email protected]>
xfs: fail recovery on a committed log item with no regions
Andrey Albershteyn <[email protected]>
xfs: fix null pointer dereference in tracepoint
Shoichiro Miyamoto <[email protected]>
smb: client: reject overlapping data areas in SMB2 responses
Zhaoyang Huang <[email protected]>
Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block"
Luiz Augusto von Dentz <[email protected]>
Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
Mikhail Gavrilov <[email protected]>
timekeeping: Register default clocksource before taking tk_core.lock
Neill Kapron <[email protected]>
usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
Adam Li <[email protected]>
sched/fair: Only update stats for allowed CPUs when looking for dst group
Joanne Koong <[email protected]>
fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref
Bernd Schubert <[email protected]>
fuse-uring: make a fuse_req on SQE commit only findable after memcpy
Bernd Schubert <[email protected]>
fuse-uring: Avoid queue->stopped races and set/read that value under lock
Bernd Schubert <[email protected]>
fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues
Chris Mason <[email protected]>
fuse-uring: end fuse_req on io-uring cancel task work
Joanne Koong <[email protected]>
fuse-uring: fix moving cancelled entry to ent_in_userspace list
Chris Mason <[email protected]>
fuse-uring: fix data races on ring->ready
Chris Mason <[email protected]>
fuse-uring: fix EFAULT clobber in fuse_uring_commit
Ji'an Zhou <[email protected]>
fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
Joanne Koong <[email protected]>
fuse: fix io-uring background queue dispatch on request completion
Joanne Koong <[email protected]>
fuse: re-lock request before returning from fuse_ref_folio()
Alberto Ruiz <[email protected]>
fuse: fix device node leak in cuse_process_init_reply()
Samuel Moelius <[email protected]>
fuse: avoid 32-bit prune notification count wrap
Matthew R. Ochs <[email protected]>
fuse: back uncached readdir buffers with pages
Michael Bommarito <[email protected]>
RDMA/siw: bound Read Response placement to the RREAD length
Maher Sanalla <[email protected]>
RDMA/core: Fix broadcast address falsely detected as local
Zhenhao Wan <[email protected]>
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
Dmitry Torokhov <[email protected]>
Input: maplecontrol - set driver data before registering input device
Dmitry Torokhov <[email protected]>
Input: maplemouse - set driver data before registering input device
Dmitry Torokhov <[email protected]>
Input: maple_keyb - set driver data before registering input device
Dmitry Torokhov <[email protected]>
Input: mms114 - fix multi-touch slot corruption
Florian Fuchs <[email protected]>
Input: maplemouse - fix NULL pointer dereference in open()
Xu Rao <[email protected]>
Input: gscps2 - advance receive buffer write index
Bryam Vargas <[email protected]>
Input: mms114 - reject an oversized device packet size
Bryam Vargas <[email protected]>
Input: touchwin - reset the packet index on every complete packet
Kris Bahnsen <[email protected]>
Input: ads7846 - don't use scratch for tx_buf when clearing register
Dmitry Torokhov <[email protected]>
Input: mms114 - fix touch indexing for MMS134S and MMS136
Bryam Vargas <[email protected]>
Input: iforce - bound the device-reported force-feedback effect index
Bryam Vargas <[email protected]>
Input: goodix - clamp the device-reported contact count
Ranjan Kumar <[email protected]>
Input: elan_i2c - prevent division by zero and arithmetic underflow
Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
Haoxiang Li <[email protected]>
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
Mingyu Wang <[email protected]>
i2c: i801: fix hardware state machine corruption in error path
Carlos Song <[email protected]>
i2c: imx-lpi2c: mark I2C adapter when hardware is powered down
Guillermo Rodríguez <[email protected]>
i2c: stm32f7: truncate clock period instead of rounding it
Haoxiang Li <[email protected]>
i2c: davinci: Unregister cpufreq notifier on probe failure
Andy Shevchenko <[email protected]>
i2c: mpc: Fix timeout calculations
Johan Hovold <[email protected]>
i2c: core: fix adapter deregistration race
Johan Hovold <[email protected]>
i2c: core: fix adapter debugfs creation
Johan Hovold <[email protected]>
i2c: core: fix NULL-deref on adapter registration failure
Johan Hovold <[email protected]>
i2c: core: fix irq domain leak on adapter registration failure
Johan Hovold <[email protected]>
i2c: core: fix adapter probe deferral loop
Sebastian Alba Vives <[email protected]>
fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
Mikhail Gavrilov <[email protected]>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
Mikhail Gavrilov <[email protected]>
udmabuf: fix DMA direction mismatch in release_udmabuf()
Oliver Upton <[email protected]>
KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier
Sean Christopherson <[email protected]>
KVM: x86: Add dedicated API for getting mask of accelerated x2APIC MSRs
Sean Christopherson <[email protected]>
KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
Xuanqing Shi <[email protected]>
KVM: VMX: Handle bad values on proxied writes to LBR MSRs
Sean Christopherson <[email protected]>
KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
Sean Christopherson <[email protected]>
KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that are accelerated
Sean Christopherson <[email protected]>
KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM actually supports
Hyunwoo Kim <[email protected]>
KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
Zeng Chi <[email protected]>
LoongArch: KVM: Add missing slots_lock for device register/unregister
Marc Zyngier <[email protected]>
KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
Mickaël Salaün <[email protected]>
selftests/landlock: Filter dealloc records in audit_count_records()
Mickaël Salaün <[email protected]>
landlock: Set audit_net.sk for socket access checks
Ricardo Robaina <[email protected]>
audit: fix removal of dangling executable rules
Nicolin Chen <[email protected]>
iommufd: Set upper bounds on cache invalidation entry_num and entry_len
Nicolin Chen <[email protected]>
iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read()
Nicolin Chen <[email protected]>
iommufd: Break the loop on failure in iommufd_fault_fops_read()
Nicolin Chen <[email protected]>
iommufd: Reject invalid read count in iommufd_fault_fops_read()
Nicolin Chen <[email protected]>
iommufd: Reject invalid read count in iommufd_veventq_fops_read()
Nicolin Chen <[email protected]>
iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails
Nicolin Chen <[email protected]>
iommufd: Set veventq_depth upper bound
Nicolin Chen <[email protected]>
iommufd: Fix data_len byte-count vs element-count mismatch
Kai Aizen <[email protected]>
iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read
Weinan Liu <[email protected]>
iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
Lu Baolu <[email protected]>
iommu/vt-d: Avoid WARNING in sva unbind path
Eric Biggers <[email protected]>
crypto: loongson - Remove broken and unused loongson-rng
Zenghui Yu <[email protected]>
selftests/mm: pagemap_ioctl: use the correct page size for transact_test()
Pedro Falcato <[email protected]>
mm: do file ownership checks with the proper mount idmap
Ketan <[email protected]>
mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access
David Hildenbrand (Arm) <[email protected]>
selftests: mm: fix and speedup "droppable" test
Anthony Yznaga <[email protected]>
mm: fix mmap errno value when MAP_DROPPABLE is not supported
Vivian Wang <[email protected]>
riscv: mm: Unconditionally sfence.vma for spurious fault
Vivian Wang <[email protected]>
riscv: mm: Define DIRECT_MAP_PHYSMEM_END
Koichiro Den <[email protected]>
NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
Bryam Vargas <[email protected]>
exfat: bound uniname advance in exfat_find_dir_entry()
Andrii Kuchmenko <[email protected]>
module: decompress: check return value of module_extend_max_pages()
Gabriele Monaco <[email protected]>
rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow schedule
Benjamin Coddington <[email protected]>
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
Ricardo Robaina <[email protected]>
audit: fix potential integer overflow in audit_log_n_hex()
Huihui Huang <[email protected]>
tracing: Prevent out-of-bounds read in glob matching
Lee Jia Jie <[email protected]>
perf/aux: Fix page UAF in map_range()
Johan Hovold <[email protected]>
i2c: core: fix hang on adapter registration failure
Wentao Liang <[email protected]>
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
Janne Grunau <[email protected]>
watchdog: apple: Add "apple,t8103-wdt" compatible
Vasily Khoruzhick <[email protected]>
EDAC/i10nm: Don't fail probing if ADXL is missing
David Hildenbrand (Arm) <[email protected]>
x86/mm: Fix freeing of PMD-sized vmemmap pages
Carlos Song <[email protected]>
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
Carlos Song <[email protected]>
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
Mark Rutland <[email protected]>
arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
Paul Louvel <[email protected]>
crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
Paul Louvel <[email protected]>
crypto: talitos/hash - remove useless wrapper
Paul Louvel <[email protected]>
crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
Paul Louvel <[email protected]>
crypto: talitos/hash - drop workqueue mechanism for SEC1
Paul Louvel <[email protected]>
crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
Paul Louvel <[email protected]>
crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
Paul Louvel <[email protected]>
crypto: talitos - move code in current_desc_hdr() into a standalone function
Paul Louvel <[email protected]>
crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
Paul Louvel <[email protected]>
crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
Paul Louvel <[email protected]>
crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
Paul Louvel <[email protected]>
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
Ahsan Atta <[email protected]>
crypto: qat - factor out AER reset helpers
Giovanni Cabiddu <[email protected]>
crypto: qat - validate RSA CRT component lengths
Ahsan Atta <[email protected]>
crypto: qat - skip restart for down devices
Ahsan Atta <[email protected]>
crypto: qat - protect service table iterations with service_lock
Ahsan Atta <[email protected]>
crypto: qat - notify fatal error before AER reset preparation
Ahsan Atta <[email protected]>
crypto: qat - keep VFs enabled during reset
Ahsan Atta <[email protected]>
crypto: qat - handle sysfs-triggered reset callbacks
Ahsan Atta <[email protected]>
crypto: qat - centralize bus master enable
Eric Biggers <[email protected]>
crypto: drbg - Fix the fips_enabled priority boost
Eric Biggers <[email protected]>
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
Eric Biggers <[email protected]>
crypto: drbg - Fix returning success on failure in CTR_DRBG
Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for SEV ioctls
Eric Biggers <[email protected]>
crypto: loongson - Select CRYPTO_RNG
Wentao Liang <[email protected]>
crypto: tegra - fix refcount leak in tegra_se_host1x_submit()
Ruijie Li <[email protected]>
crypto: pcrypt - restore callback for non-parallel fallback
Eric Biggers <[email protected]>
crypto: hisi-trng - Remove crypto_rng interface
Anastasia Tishchenko <[email protected]>
crypto: ecc - Fix carry overflow in vli multiplication
Eric Biggers <[email protected]>
crypto: crypto4xx - Remove insecure and unused rng_alg
Xiaonan Zhao <[email protected]>
crypto: chacha20poly1305 - validate poly1305 template argument
Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps again
Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps
Eric Biggers <[email protected]>
crypto: af_alg - Remove zero-copy support from skcipher and aead
Bryam Vargas <[email protected]>
isofs: bound Rock Ridge symlink components to the SL record
Bryam Vargas <[email protected]>
partitions: aix: bound the pp_count scan to the ppe array
Qu Wenruo <[email protected]>
btrfs: do not trim a device which is not writeable
Qu Wenruo <[email protected]>
btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
Tianchu Chen <[email protected]>
nvmet-auth: validate reply message payload bounds against transfer length
Bryam Vargas <[email protected]>
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
Achkinazi, Igor <[email protected]>
nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
Mikulas Patocka <[email protected]>
dm-ioctl: report an error if a device has no table
Wentao Liang <[email protected]>
block: partitions: fix of_node refcount leak in of_partition()
Wentao Liang <[email protected]>
nvme: target: rdma: fix ndev refcount leak on queue connect
Thorsten Blum <[email protected]>
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
Wentao Liang <[email protected]>
hwrng: jh7110 - fix refcount leak in starfive_trng_read()
Bryam Vargas <[email protected]>
udf: validate sparing table length as an entry count, not a byte count
Bryam Vargas <[email protected]>
udf: validate VAT header length against the VAT inode size
Michael Bommarito <[email protected]>
udf: validate free block extents against the partition length
Pawan Gupta <[email protected]>
bpf: Prefer dirty packs for eBPF allocations
Pawan Gupta <[email protected]>
bpf: Prefer packs that won't trigger an IBPB flush on allocation
Pawan Gupta <[email protected]>
bpf: Skip redundant IBPB in pack allocator
Pawan Gupta <[email protected]>
bpf: Restrict JIT predictor flush to cBPF
Pawan Gupta <[email protected]>
x86/bugs: Enable IBPB flush on BPF JIT allocation
Pawan Gupta <[email protected]>
bpf: Support for hardening against JIT spraying
Alice Ryhl <[email protected]>
rust_binder: fix BINDER_GET_EXTENDED_ERROR
Alice Ryhl <[email protected]>
rust_binder: introduce TransactionInfo
Reinette Chatre <[email protected]>
x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
Baolin Wang <[email protected]>
mm: shmem: fix potential livelock issue for shmem direct swapin
Chao Shi <[email protected]>
block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
Paul Cercueil <[email protected]>
usb: gadget: f_fs: Fix DMA fence leak
Paul Menzel <[email protected]>
usb: typec: ucsi: cancel pending work on system suspend
Fan Wu <[email protected]>
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
Madhu M <[email protected]>
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Invert DisplayPort role assignment
Badhri Jagan Sridharan <[email protected]>
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
Andy Yan <[email protected]>
usb: typec: tcpm: Fix VDM type for Enter Mode commands
Shuangpeng Bai <[email protected]>
usb: typec: class: drop PD lookup reference
Myeonghun Pak <[email protected]>
usb: typec: anx7411: use devm_pm_runtime_enable()
Sam Day <[email protected]>
usbip: vudc: fix NULL deref in vep_dequeue()
Yichong Chen <[email protected]>
usbip: tools: support SuperSpeedPlus devices
Xu Rao <[email protected]>
USB: usb-storage: ene_ub6250: restore media-ready check
Johan Hovold <[email protected]>
USB: ulpi: fix memory leak on registration failure
Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix write buffer corruption
Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix hard lockup on disconnect
Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix broken rx after throttle
Fabio Porcedda <[email protected]>
USB: serial: option: add Telit Cinterion FE990D50 compositions
Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix information leak
Haoxiang Li <[email protected]>
usb: mtu3: unmap request DMA on queue failure
Myeonghun Pak <[email protected]>
USB: misc: uss720: unregister parport on probe failure
HE WEI (ギカク) <[email protected]>
usb: misc: usbio: bound bulk IN response length to the received transfer
Xu Rao <[email protected]>
USB: storage: include US_FL_NO_SAME in quirks mask
Myeonghun Pak <[email protected]>
usb: sl811-hcd: disable controller wakeup on remove
Johan Hovold <[email protected]>
USB: legousbtower: fix use-after-free on disconnect race
Erich E. Hoover <[email protected]>
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect
Johan Hovold <[email protected]>
USB: ldusb: fix use-after-free on disconnect race
Johan Hovold <[email protected]>
USB: idmouse: fix use-after-free on disconnect race
Xu Rao <[email protected]>
usb: gadget: f_printer: take kref only for successful open
Jimmy Hu <[email protected]>
usb: gadget: udc: Fix use-after-free in gadget_match_driver
Maoyi Xie <[email protected]>
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
Dawei Feng <[email protected]>
usb: free iso schedules on failed submit
WenTao Liang <[email protected]>
usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
Rodrigo Lugathe da Conceição Alves <[email protected]>
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
Haoxiang Li <[email protected]>
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
Jared Baldridge <[email protected]>
usb: cdc_acm: Add quirk for Uniden BC125AT scanner
Maoyi Xie <[email protected]>
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
Paul Moses <[email protected]>
bpf: Validate BTF repeated field counts before expansion
Dawei Feng <[email protected]>
bpf: Restore sysctl new-value from 1 to 0
Zhao Zhang <[email protected]>
bpf: Reject fragmented frames in devmap
Dawei Feng <[email protected]>
xfs: fix memory leak in xfs_dqinode_metadir_create()
Yingjie Gao <[email protected]>
xfs: fix exchmaps reservation limit check
Darrick J. Wong <[email protected]>
xfs: fix pointer arithmetic error on 32-bit systems
Alexey Nepomnyashih <[email protected]>
xfs: fix unreachable BIGTIME check in dquot flush validation
Yingjie Gao <[email protected]>
xfs: release dquot buffer after dqflush failure
Yousef Alhouseen <[email protected]>
xfs: use null daddr for unset first bad log block
Andy Shevchenko <[email protected]>
serial: 8250_mid: Disable DMA for selected platforms
Louis-Alexis Eyraud <[email protected]>
media: mtk-jpeg: cancel workqueue on release for supported platforms only
Deepanshu Kartikey <[email protected]>
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
Tristan Madani <[email protected]>
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
Srinivas Pandruvada <[email protected]>
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
Maoyi Xie <[email protected]>
HID: lg-g15: cancel pending work on remove to fix a use-after-free
Manish Khadka <[email protected]>
HID: appleir: fix UAF on pending key_up_timer in remove()
Trung Nguyen <[email protected]>
HID: multitouch: fix out-of-bounds bit access on mt_io_flags
Manish Khadka <[email protected]>
HID: letsketch: fix UAF on inrange_timer at driver unbind
Jinmo Yang <[email protected]>
HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()
Jinmo Yang <[email protected]>
HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert
Oleg Makarenko <[email protected]>
HID: pidff: Use correct effect type in effect update
Myeonghun Pak <[email protected]>
HID: wacom: stop hardware after post-start probe failures
Carlos Llamas <[email protected]>
HID: uhid: convert to hid_safe_input_report()
Tianchu Chen <[email protected]>
HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
Yichong Chen <[email protected]>
tools/mm/slabinfo: fix total_objects attribute name
Xuewen Wang <[email protected]>
tools/mm/slabinfo: Fix trace disable logic inversion
Vlastimil Babka (SUSE) <[email protected]>
mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
Lukas Wunner <[email protected]>
X.509: Fix validation of ASN.1 certificate header
Robin Murphy <[email protected]>
perf/arm-cmn: Fix DVM node events
Heiko Carstens <[email protected]>
s390: Revert support for DCACHE_WORD_ACCESS
Kartik Rajput <[email protected]>
clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
Thomas Gleixner <[email protected]>
time/jiffies: Register jiffies clocksource before usage
WenTao Liang <[email protected]>
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
Yuho Choi <[email protected]>
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
Tianxiang Chen <[email protected]>
cpufreq: Fix hotplug-suspend race during reboot
Steven Rostedt <[email protected]>
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
Fushuai Wang <[email protected]>
cpufreq: intel_pstate: Sync policy->cur during CPU offline
Zide Chen <[email protected]>
perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
John Hubbard <[email protected]>
libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()
Guangshuo Li <[email protected]>
firmware_loader: fix device reference leak in firmware_upload_register()
Guangshuo Li <[email protected]>
cpufreq: qcom-cpufreq-hw: Fix possible double free
Abdun Nihaal <[email protected]>
OPP: of: Fix potential memory leak in opp_parse_supplies()
Baokun Li <[email protected]>
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
Norbert Manthey <[email protected]>
smb: client: mask server-provided mode to 07777 in modefromsid
Xu Rao <[email protected]>
smb: client: fix atime clamp check in read completion
Zihan Xi <[email protected]>
smb: client: harden POSIX SID length parsing
Zihan Xi <[email protected]>
smb: client: use unaligned reads in parse_posix_ctxt()
Haoxiang Li <[email protected]>
smb: client: Fix next buffer leak in receive_encrypted_standard()
Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_close() replay
Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_open() replay
Zhao Zhang <[email protected]>
smb: client: fix double-free in SMB2_flush() replay
Henrique Carvalho <[email protected]>
smb: client: fix change notify replay double-free
Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_ioctl() replay
Henrique Carvalho <[email protected]>
smb: client: fix query_info() replay double-free
Henrique Carvalho <[email protected]>
smb: client: fix query directory replay double-free
Namjae Jeon <[email protected]>
ksmbd: use opener credentials for ADS I/O
Namjae Jeon <[email protected]>
ksmbd: use opener credentials for delete-on-close
Gil Portnoy <[email protected]>
ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
Gil Portnoy <[email protected]>
ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
Namjae Jeon <[email protected]>
ksmbd: run set info with opener credentials
Gil Portnoy <[email protected]>
ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
Namjae Jeon <[email protected]>
ksmbd: require source read access for duplicate extents
Davide Ornaghi <[email protected]>
ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
Namjae Jeon <[email protected]>
ksmbd: serialize QUERY_DIRECTORY requests per file
Gil Portnoy <[email protected]>
ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
Gil Portnoy <[email protected]>
ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
Dan Carpenter <[email protected]>
smb/client: Fix error code in smb2_aead_req_alloc()
Michael Bommarito <[email protected]>
smb: client: resolve SWN tcon from live registrations
Junrui Luo <[email protected]>
coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
Deepanshu Kartikey <[email protected]>
fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
Konstantin Komarov <[email protected]>
fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
Konstantin Komarov <[email protected]>
fs/ntfs3: fsync files by syncing parent inodes
Konstantin Komarov <[email protected]>
fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
Lu Baolu <[email protected]>
iommu/vt-d: Fix race condition during PASID entry replacement
Muhammad Bilal <[email protected]>
Bluetooth: L2CAP: validate option length before reading conf opt value
Runyu Xiao <[email protected]>
Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
Muhammad Bilal <[email protected]>
Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
Pauli Virtanen <[email protected]>
Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
Siwei Zhang <[email protected]>
Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
Yousef Alhouseen <[email protected]>
Bluetooth: fix UAF in bt_accept_dequeue()
Maoyi Xie <[email protected]>
Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
Yousef Alhouseen <[email protected]>
Bluetooth: bnep: pin L2CAP connection during netdev registration
Sergey Senozhatsky <[email protected]>
Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
Adrian Bente <[email protected]>
netfilter: flowtable: fix offloaded ct timeout never being extended
Xiang Mei <[email protected]>
netfilter: ebtables: terminate table name before find_table_lock()
Florian Westphal <[email protected]>
netfilter: ebtables: module names must be null-terminated
Florian Westphal <[email protected]>
netfilter: ebtables: zero chainstack array
Florian Westphal <[email protected]>
netfilter: handle unreadable frags
Pratham Gupta <[email protected]>
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
Zijiang Huang <[email protected]>
mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup
Jose Fernandez (Anthropic) <[email protected]>
mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host
Qi Zheng <[email protected]>
mm: shrinker: fix NULL pointer dereference in debugfs
Qi Zheng <[email protected]>
mm: shrinker: fix shrinker_info teardown race with expansion
Shakeel Butt <[email protected]>
mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
Andrei Kuchynski <[email protected]>
mfd: cros_ec: Delay dev_set_drvdata() until probe success
Wyatt Feng <[email protected]>
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
Yuyang Huang <[email protected]>
ipv4: igmp: remove multicast group from hash table on device destruction
Breno Leitao <[email protected]>
netpoll: fix a use-after-free on shutdown path
Michael Wigham <[email protected]>
io_uring/rw: preserve partial result for iopoll
Runyu Xiao <[email protected]>
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
Vasileios Almpanis <[email protected]>
io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
Runyu Xiao <[email protected]>
gpio: sch: use raw_spinlock_t in the irq startup path
Runyu Xiao <[email protected]>
gpio: eic-sprd: use raw_spinlock_t in the irq startup path
Koichiro Den <[email protected]>
NTB: epf: Avoid calling pci_irq_vector() from hardirq context
Yunpeng Tian <[email protected]>
fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
Thomas Gleixner <[email protected]>
debugobjects: Plug race against a concurrent OOM disable
Runyu Xiao <[email protected]>
coresight: etb10: restore atomic_t for shared reading state
Samuel Page <[email protected]>
Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
Marco Elver <[email protected]>
Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
Chi Wang <[email protected]>
audit: Fix data races of skb_queue_len() readers on audit_queue
Zijing Yin <[email protected]>
net: af_key: initialize alg_key_len for IPComp states
Gil Portnoy <[email protected]>
ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
Michael Bommarito <[email protected]>
crypto: krb5 - filter out async aead implementations at alloc
Dawei Feng <[email protected]>
crypto: amlogic - avoid double cleanup in meson_crypto_probe()
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB write in HT_caps_handler()
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
Alexandru Hossu <[email protected]>
staging: media: ipu7: fix double-free and use-after-free in error paths
Arnd Bergmann <[email protected]>
staging: media: atomisp: reduce load_primary_binaries() stack usage
Ricardo Ribalda <[email protected]>
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in tsi148 bridge
Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in fake bridge
Shoichiro Miyamoto <[email protected]>
smb: client: restrict implied bcc[0] exemption to responses without data area
Michael Tautschnig <[email protected]>
staging: vme_user: bound slave read/write to the kern_buf size
Samuel Page <[email protected]>
tipc: fix out-of-bounds read in broadcast Gap ACK blocks
Yizhou Zhao <[email protected]>
6lowpan: fix NHC entry use-after-free on error path
Cen Zhang <[email protected]>
usb: misc: usbio: fix disconnect UAF in client teardown
Runyu Xiao <[email protected]>
usb: dwc3: run gadget disconnect from sleepable suspend context
Alan Stern <[email protected]>
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
Michael Bommarito <[email protected]>
hwrng: virtio: clamp device-reported used.len at copy_data()
Johan Hovold <[email protected]>
virtio-mmio: fix device release warning on module unload
Ammar Faizi <[email protected]>
virtio_pci: fix vq info pointer lookup via wrong index
Xiang Mei <[email protected]>
netfilter: ipset: fix race between dump and ip_set_list resize
SeongJae Park <[email protected]>
mm/damon/ops-common: handle extreme intervals in damon_hot_score()
Michael Bommarito <[email protected]>
tcp: restore RCU grace period in tcp_ao_destroy_sock
Marco Nenciarini <[email protected]>
PCI/IOV: Skip VF Resizable BAR restore on read error
Yadu M G <[email protected]>
PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM hosts
Manivannan Sadhasivam <[email protected]>
PCI: mediatek: Fix IRQ domain leak when port fails to enable
Richard Zhu <[email protected]>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
Ratheesh Kannoth <[email protected]>
PCI: host-common: Request bus reassignment when not probe-only
Maciej W. Rozycki <[email protected]>
PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
Mahesh Vaidya <[email protected]>
PCI: altera: Fix resource leaks on probe failure
Mahesh Vaidya <[email protected]>
PCI: altera: Do not dispose parent IRQ mapping
Ziyao Li <[email protected]>
PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series
Myeonghun Pak <[email protected]>
usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
Xu Rao <[email protected]>
xhci: sideband: fix ring sg table pages leak
胡连勤 <[email protected]>
usb: xhci: Fix sleep in atomic context in xhci_free_streams()
Alice Ryhl <[email protected]>
rust_binder: clear freeze listener on node removal
Keshav Verma <[email protected]>
rust_binder: synchronize Rust Binder stats with freeze commands
Keshav Verma <[email protected]>
rust_binder: reject context manager self-transaction
Hyunwoo Kim <[email protected]>
rust_binder: use a u64 stride when cleaning up the offsets array
Carlos Llamas <[email protected]>
binder: fix UAF in binder_free_transaction()
Carlos Llamas <[email protected]>
binder: fix UAF in binder_thread_release()
Johan Hovold <[email protected]>
Bluetooth: btusb: fix wakeup source leak on probe failure
Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on marvell probe failure
Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on registration failure
Zenm Chen <[email protected]>
Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
Alex Williamson <[email protected]>
vfio: Remove device debugfs before releasing devres
Junrui Luo <[email protected]>
vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
Alex Williamson <[email protected]>
vfio/pci: Fix racy bitfields and tighten struct layout
Alex Williamson <[email protected]>
vfio/pci: Release the VGA arbiter client on register_device() failure
Alex Williamson <[email protected]>
vfio/pci: Latch disable_idle_d3 per device
Raghavendra Rao Ananta <[email protected]>
vfio/pci: Use a private flag to prevent power state change with VFs
Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
Cássio Gabriel <[email protected]>
ALSA: usb-audio: Roll back quirk control caches on write errors
Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
Darvell Long <[email protected]>
ALSA: usb-audio: avoid kobject path lookup in DualSense match
WenTao Liang <[email protected]>
ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission
HyeongJun An <[email protected]>
ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
Zhao Dongdong <[email protected]>
ALSA: ice1712: check snd_ctl_new1() return value
Aaron Erhardt <[email protected]>
ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW
Huacai Chen <[email protected]>
ALSA: hda/hdmi: Use 'AC_PINSENSE_ELDV' to detect pinsense for Loongson
Cameron Graham <[email protected]>
ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800 G5 Mini
Cássio Gabriel <[email protected]>
ALSA: hda/cs35l41: Fix firmware load work teardown
Zhao Dongdong <[email protected]>
ALSA: gus: check snd_ctl_new1() return value
Maoyi Xie <[email protected]>
ALSA: firewire: isight: bound the sample count to the packet payload
Geoffrey D. Bennett <[email protected]>
ALSA: FCP: Add Focusrite ISA C8X support
Zhao Dongdong <[email protected]>
ALSA: es1938: check snd_ctl_new1() return value
Cássio Gabriel <[email protected]>
ALSA: compress: Fix task creation error unwind
Zhao Dongdong <[email protected]>
ALSA: cmipci: check snd_ctl_new1() return value
Maoyi Xie <[email protected]>
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
Zhao Dongdong <[email protected]>
ALSA: aoa: check snd_ctl_new1() return value
Zhao Dongdong <[email protected]>
ALSA: ymfpci: check snd_ctl_new1() return value
Cássio Gabriel <[email protected]>
ALSA: virtio: Validate control metadata from the device
Cássio Gabriel <[email protected]>
ALSA: virtio: Add missing 384 kHz PCM rate mapping
HyeongJun An <[email protected]>
ALSA: usx2y: us144mkii: fix work UAF on disconnect
Stepan Ionichev <[email protected]>
iio: temperature: tmp006: use devm_iio_trigger_register
Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
Pengpeng Hou <[email protected]>
iio: temperature: Build mlx90635 with CONFIG_MLX90635
Stepan Ionichev <[email protected]>
iio: resolver: ad2s1210: notify trigger and clear state on fault read error
Stepan Ionichev <[email protected]>
iio: proximity: vl53l0x: notify trigger and clear IRQ on error paths
Biren Pandya <[email protected]>
iio: pressure: mpl115: fix runtime PM leak on read error
David Carlier <[email protected]>
iio: pressure: bmp280: zero-init bmp580 trigger handler buffer
Andy Shevchenko <[email protected]>
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
Javier Carrasco <[email protected]>
iio: light: veml6030: fix channel type when pushing events
Stepan Ionichev <[email protected]>
iio: light: tsl2591: return actual error from probe IRQ failure
Joshua Crofts <[email protected]>
iio: light: opt3001: fix missing state reset on timeout
Biren Pandya <[email protected]>
iio: light: gp2ap002: fix runtime PM leak on read error
Alexander A. Klimov <[email protected]>
iio: light: al3320a: read both ALS ADC registers again
Joshua Crofts <[email protected]>
iio: light: al3320a: add missing REGMAP_I2C to Kconfig
Alexander A. Klimov <[email protected]>
iio: light: al3010: read both ALS ADC registers again
Vidhu Sarwal <[email protected]>
iio: light: al3010: fix incorrect scale for the highest gain range
Joshua Crofts <[email protected]>
iio: light: al3010: add missing REGMAP_I2C to Kconfig
Joshua Crofts <[email protected]>
iio: light: al3000a: add missing REGMAP_I2C to Kconfig
Andreas Kempe <[email protected]>
iio: imu: st_lsm6dsx: deselect shub page before reading whoami
Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamp clock period by using lower value
Runyu Xiao <[email protected]>
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
Runyu Xiao <[email protected]>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
Stepan Ionichev <[email protected]>
iio: gyro: bmg160: wait full startup time after mode change at probe
Stepan Ionichev <[email protected]>
iio: gyro: bmg160: bail out when bandwidth/filter is not in table
Lars-Peter Clausen <[email protected]>
iio: event: Fix event FIFO reset race
Dan Carpenter <[email protected]>
iio: dac: ad3552r-hs: fix uninitialized data ni ad3552r_hs_write_data_source()
Dan Carpenter <[email protected]>
iio: core: fix uninitialized data in debugfs
Herman van Hazendonk <[email protected]>
iio: common: st_sensors: honour channel endianness in read_axis_data
Maxwell Doose <[email protected]>
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
Dan Carpenter <[email protected]>
iio: backend: fix uninitialized data in debugfs
Pengpeng Hou <[email protected]>
iio: adc: ti-ads124s08: Return reset GPIO lookup errors
Guangshuo Li <[email protected]>
iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
Maxwell Doose <[email protected]>
iio: adc: spear: Initialize completion before requesting IRQ
Maxwell Doose <[email protected]>
iio: adc: lpc32xx: Initialize completion before requesting IRQ
Radu Sabau <[email protected]>
iio: adc: ad_sigma_delta: fix CS held asserted and state leaks
Radu Sabau <[email protected]>
iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices
Joshua Crofts <[email protected]>
iio: adc: ad7779: add missing 'select IIO_TRIGGERED_BUFFER' to Kconfig
Jonathan Cameron <[email protected]>
iio: adc: ad7768-1: Select GPIOLIB
Samuel Moelius <[email protected]>
iio: adc: ad7380: select REGMAP
Biren Pandya <[email protected]>
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
Bryam Vargas <[email protected]>
iio: accel: bmc150: clamp the device-reported FIFO frame count
Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check for header
Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check to response query
Eric Biggers <[email protected]>
fscrypt: Replace mk_users keyring with simple list
Eric Biggers <[email protected]>
fscrypt: Fix key setup in edge case with multiple data unit sizes
Alice Ryhl <[email protected]>
rust: kasan: KASAN+RUST requires clang
Taeyang Lee <[email protected]>
perf/core: Detach event groups during remove_on_exec
Sebastian Andrzej Siewior <[email protected]>
futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock""
Alice Ryhl <[email protected]>
rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER
Gary Guo <[email protected]>
rust: doctest: fix incorrect pattern in replacement
Haoze Xie <[email protected]>
rust: block: fix GenDisk cleanup paths
Miguel Ojeda <[email protected]>
rust: cpufreq: clean new clippy::map_or_identity lint for Rust 1.98.0
Huacai Chen <[email protected]>
LoongArch: Add PIO for early access before ACPI PCI root register
HyeongJun An <[email protected]>
platform/x86: intel-hid: Protect ACPI notify handler against recursion
Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Fix possible NULL pointer dereference
Jeremy Linton <[email protected]>
ACPI: CPPC: Suppress UBSAN warning caused by field misuse
Carlos López <[email protected]>
KVM: x86: Unconditionally recompute CR8 intercept on PPR update
Sean Christopherson <[email protected]>
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
Sean Christopherson <[email protected]>
KVM: x86: Move update_cr8_intercept() to lapic.c
Florian Fainelli <[email protected]>
perf trace beauty fcntl: Fix build with older kernel headers
Randy Dunlap <[email protected]>
slab: recognize @GFP parameter as optional in kernel-doc
Linus Torvalds <[email protected]>
default_gfp(): avoid using the "newfangled" __VA_OPT__ trick
Linus Torvalds <[email protected]>
add default_gfp() helper macro and use it in the new *alloc_obj() helpers
Kees Cook <[email protected]>
slab: Introduce kmalloc_flex() and family
Pedro Falcato <[email protected]>
mm/khugepaged: write all dirty file folios when collapsing
NeilBrown <[email protected]>
nfsd: change nfs4_client_to_reclaim() to allocate data
NeilBrown <[email protected]>
nfsd: move name lookup out of nfsd4_list_rec_dir()
Xingquan Liu <[email protected]>
net/sched: dualpi2: fix GSO backlog accounting
Mingyu Wang <[email protected]>
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
Chao Yu <[email protected]>
f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
Chao Yu <[email protected]>
f2fs: detect more inconsistent cases in sanity_check_node_footer()
YH Lin <[email protected]>
f2fs: optimize trace_f2fs_write_checkpoint with enums
Chao Yu <[email protected]>
f2fs: introduce f2fs_schedule_timeout()
Chao Yu <[email protected]>
f2fs: use memalloc_retry_wait() as much as possible
Keshav Verma <[email protected]>
f2fs: fix listxattr handling of corrupted xattr entries
Chao Yu <[email protected]>
f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
Ruipeng Qi <[email protected]>
f2fs: fix potential deadlock in f2fs_balance_fs()
Bryam Vargas <[email protected]>
f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
Chao Yu <[email protected]>
f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
Yongpeng Yang <[email protected]>
f2fs: remove non-uptodate folio from the page cache in move_data_block
Bartosz Golaszewski <[email protected]>
device property: initialize the remaining fields of fwnode_handle in fwnode_init()
Kiryl Shutsemau <[email protected]>
userfaultfd: gate must_wait writability check on pte_present()
Miguel Ojeda <[email protected]>
rust: str: clean unused import for Rust >= 1.98
Miguel Ojeda <[email protected]>
rust: str: use the "kernel vertical" imports style
Chris Mason <[email protected]>
nfsd: release layout stid on setlease failure
Olga Kornievskaia <[email protected]>
nfsd: update mtime/ctime on COPY in presence of delegated attributes
Olga Kornievskaia <[email protected]>
nfsd: update mtime/ctime on CLONE in presense of delegated attributes
Daniel Borkmann <[email protected]>
bpf, arm64: Reject out-of-range B.cond targets
-------------
Diffstat:
Documentation/crypto/userspace-if.rst | 31 +- Documentation/process/deprecated.rst | 7 + MAINTAINERS | 1 - Makefile | 7 +- arch/arm64/kernel/entry-fpsimd.S | 8 +- arch/arm64/kvm/hyp/nvhe/hyp-main.c | 3 + arch/arm64/kvm/nested.c | 40 +- arch/arm64/lib/insn.c | 2 + arch/arm64/net/bpf_jit_comp.c | 4 +- arch/loongarch/include/asm/acpi.h | 2 + arch/loongarch/kernel/acpi.c | 28 + arch/loongarch/kernel/setup.c | 2 + arch/loongarch/kvm/intc/eiointc.c | 6 + arch/loongarch/kvm/intc/ipi.c | 2 + arch/loongarch/kvm/intc/pch_pic.c | 2 + arch/loongarch/net/bpf_jit.c | 2 +- arch/loongarch/pci/acpi.c | 2 + arch/powerpc/net/bpf_jit_comp.c | 4 +- arch/riscv/include/asm/pgtable.h | 10 + arch/riscv/kernel/entry.S | 7 +- arch/riscv/net/bpf_jit_comp64.c | 2 +- arch/riscv/net/bpf_jit_core.c | 3 +- arch/s390/Kconfig | 1 - arch/s390/include/asm/asm-extable.h | 4 - arch/s390/include/asm/word-at-a-time.h | 22 - arch/s390/mm/extable.c | 18 - arch/x86/events/intel/uncore_snb.c | 7 - arch/x86/include/asm/nospec-branch.h | 4 + arch/x86/kernel/cpu/bugs.c | 50 +- arch/x86/kernel/cpu/resctrl/monitor.c | 8 +- arch/x86/kvm/lapic.c | 49 +- arch/x86/kvm/lapic.h | 3 +- arch/x86/kvm/svm/avic.c | 47 +- arch/x86/kvm/svm/svm.c | 3 + arch/x86/kvm/vmx/pmu_intel.c | 6 +- arch/x86/kvm/vmx/vmx.c | 44 +- arch/x86/kvm/x86.c | 38 +- arch/x86/mm/init_64.c | 40 +- arch/x86/net/bpf_jit_comp.c | 5 +- block/bdev.c | 8 +- block/partitions/aix.c | 9 + block/partitions/of.c | 5 +- crypto/af_alg.c | 69 +-- crypto/algif_aead.c | 8 +- crypto/asymmetric_keys/x509_loader.c | 2 +- crypto/chacha20poly1305.c | 11 +- crypto/drbg.c | 4 +- crypto/ecc.c | 31 +- crypto/krb5/krb5_api.c | 2 +- crypto/pcrypt.c | 4 + drivers/acpi/cppc_acpi.c | 11 +- drivers/acpi/nfit/core.c | 3 + drivers/android/binder.c | 19 +- drivers/android/binder/allocation.rs | 8 +- drivers/android/binder/error.rs | 23 +- drivers/android/binder/freeze.rs | 11 +- drivers/android/binder/node.rs | 10 +- drivers/android/binder/process.rs | 33 +- drivers/android/binder/rust_binder_events.c | 7 +- drivers/android/binder/stats.rs | 4 +- drivers/android/binder/thread.rs | 237 +++++---- drivers/android/binder/transaction.rs | 96 ++-- drivers/base/firmware_loader/sysfs_upload.c | 8 +- drivers/bluetooth/btmtksdio.c | 2 +- drivers/bluetooth/btnxpuart.c | 6 + drivers/bluetooth/btusb.c | 39 +- drivers/bluetooth/hci_ldisc.c | 14 +- drivers/char/hw_random/jh7110-trng.c | 13 +- drivers/char/hw_random/virtio-rng.c | 23 +- drivers/clocksource/timer-tegra186.c | 3 +- drivers/cpufreq/cpufreq.c | 2 + drivers/cpufreq/intel_pstate.c | 6 +- drivers/cpufreq/pcc-cpufreq.c | 2 + drivers/cpufreq/qcom-cpufreq-hw.c | 1 - drivers/crypto/Kconfig | 1 - drivers/crypto/Makefile | 1 - drivers/crypto/amcc/crypto4xx_core.c | 88 ---- drivers/crypto/amcc/crypto4xx_core.h | 4 - drivers/crypto/amcc/crypto4xx_reg_def.h | 11 - drivers/crypto/amlogic/amlogic-gxl-core.c | 2 +- drivers/crypto/atmel-sha204a.c | 19 +- drivers/crypto/caam/caamalg.c | 12 +- drivers/crypto/caam/caamalg_qi.c | 12 +- drivers/crypto/caam/caamalg_qi2.c | 12 +- drivers/crypto/caam/caamhash.c | 4 +- drivers/crypto/caam/key_gen.c | 4 +- drivers/crypto/ccp/sev-dev.c | 70 +-- drivers/crypto/hisilicon/Kconfig | 1 - drivers/crypto/hisilicon/trng/trng.c | 296 +---------- drivers/crypto/intel/qat/qat_420xx/adf_drv.c | 2 - drivers/crypto/intel/qat/qat_4xxx/adf_drv.c | 2 - drivers/crypto/intel/qat/qat_6xxx/adf_drv.c | 2 - drivers/crypto/intel/qat/qat_c3xxx/adf_drv.c | 1 - drivers/crypto/intel/qat/qat_c3xxxvf/adf_drv.c | 1 - drivers/crypto/intel/qat/qat_c62x/adf_drv.c | 1 - drivers/crypto/intel/qat/qat_c62xvf/adf_drv.c | 1 - drivers/crypto/intel/qat/qat_common/adf_aer.c | 102 ++-- .../crypto/intel/qat/qat_common/adf_common_drv.h | 1 + drivers/crypto/intel/qat/qat_common/adf_init.c | 18 + drivers/crypto/intel/qat/qat_common/adf_sriov.c | 12 +- .../crypto/intel/qat/qat_common/qat_asym_algs.c | 10 +- drivers/crypto/intel/qat/qat_dh895xcc/adf_drv.c | 1 - drivers/crypto/intel/qat/qat_dh895xccvf/adf_drv.c | 1 - drivers/crypto/loongson/Kconfig | 5 - drivers/crypto/loongson/Makefile | 1 - drivers/crypto/loongson/loongson-rng.c | 209 -------- drivers/crypto/talitos.c | 561 +++++++++++---------- drivers/crypto/talitos.h | 12 + drivers/crypto/tegra/tegra-se-main.c | 2 +- drivers/dma-buf/udmabuf.c | 9 +- drivers/edac/i10nm_base.c | 14 +- drivers/fpga/dfl-afu-main.c | 3 + drivers/gpio/gpio-eic-sprd.c | 8 +- drivers/gpio/gpio-sch.c | 32 +- drivers/hid/hid-appleir.c | 45 +- drivers/hid/hid-goodix-spi.c | 3 + drivers/hid/hid-letsketch.c | 36 +- drivers/hid/hid-lg-g15.c | 16 + drivers/hid/hid-multitouch.c | 32 +- drivers/hid/hid-sensor-hub.c | 77 ++- drivers/hid/uhid.c | 8 +- drivers/hid/usbhid/hid-pidff.c | 2 +- drivers/hid/wacom_sys.c | 20 +- drivers/hwtracing/coresight/coresight-etb10.c | 6 +- drivers/hwtracing/coresight/ultrasoc-smb.c | 1 + drivers/i2c/busses/i2c-davinci.c | 4 +- drivers/i2c/busses/i2c-i801.c | 2 +- drivers/i2c/busses/i2c-imx-lpi2c.c | 15 +- drivers/i2c/busses/i2c-mpc.c | 2 +- drivers/i2c/busses/i2c-stm32f7.c | 9 +- drivers/i2c/i2c-core-base.c | 81 +-- drivers/iio/accel/bmc150-accel-core.c | 2 + drivers/iio/accel/kxsd9.c | 5 +- drivers/iio/adc/Kconfig | 3 + drivers/iio/adc/ad_sigma_delta.c | 39 +- drivers/iio/adc/lpc32xx_adc.c | 4 +- drivers/iio/adc/spear_adc.c | 3 +- drivers/iio/adc/ti-ads1119.c | 6 +- drivers/iio/adc/ti-ads124s08.c | 3 +- drivers/iio/chemical/scd30_core.c | 19 +- drivers/iio/common/st_sensors/st_sensors_core.c | 23 +- drivers/iio/dac/ad3552r-hs.c | 2 +- drivers/iio/gyro/bmg160_core.c | 16 +- drivers/iio/imu/adis_trigger.c | 2 +- drivers/iio/imu/bmi160/bmi160_core.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 4 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 9 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 1 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 4 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 +- drivers/iio/industrialio-backend.c | 2 +- drivers/iio/industrialio-core.c | 2 +- drivers/iio/industrialio-event.c | 5 +- drivers/iio/light/Kconfig | 3 + drivers/iio/light/al3010.c | 10 +- drivers/iio/light/al3320a.c | 8 +- drivers/iio/light/gp2ap002.c | 2 +- drivers/iio/light/opt3001.c | 6 +- drivers/iio/light/tsl2591.c | 6 +- drivers/iio/light/veml6030.c | 8 +- drivers/iio/magnetometer/ak8975.c | 1 + drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/pressure/mpl115.c | 4 +- drivers/iio/proximity/vl53l0x-i2c.c | 7 +- drivers/iio/resolver/ad2s1210.c | 2 +- drivers/iio/temperature/Makefile | 2 +- drivers/iio/temperature/ltc2983.c | 5 +- drivers/iio/temperature/tmp006.c | 2 +- drivers/infiniband/core/addr.c | 2 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 9 + drivers/infiniband/ulp/rtrs/rtrs-srv.c | 5 +- drivers/input/joystick/iforce/iforce-packets.c | 18 +- drivers/input/joystick/maplecontrol.c | 3 +- drivers/input/keyboard/maple_keyb.c | 4 +- drivers/input/mouse/elan_i2c_core.c | 36 +- drivers/input/mouse/maplemouse.c | 9 +- drivers/input/rmi4/rmi_bus.c | 4 +- drivers/input/rmi4/rmi_f30.c | 2 +- drivers/input/rmi4/rmi_f3a.c | 2 +- drivers/input/serio/gscps2.c | 1 + drivers/input/touchscreen/ads7846.c | 5 +- drivers/input/touchscreen/goodix.c | 3 +- drivers/input/touchscreen/mms114.c | 26 +- drivers/input/touchscreen/touchwin.c | 15 +- drivers/iommu/amd/iommu.c | 3 +- drivers/iommu/intel/iommu.c | 29 +- drivers/iommu/intel/iommu.h | 11 + drivers/iommu/intel/nested.c | 9 +- drivers/iommu/intel/pasid.c | 190 ------- drivers/iommu/intel/pasid.h | 14 - drivers/iommu/intel/svm.c | 12 +- drivers/iommu/iommufd/eventq.c | 26 +- drivers/iommu/iommufd/hw_pagetable.c | 11 +- drivers/iommu/iommufd/iommufd_private.h | 2 +- drivers/md/dm-ioctl.c | 5 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 3 +- drivers/mfd/cros_ec_dev.c | 3 +- drivers/net/usb/kalmia.c | 8 + drivers/ntb/hw/epf/ntb_hw_epf.c | 14 +- drivers/nvme/host/multipath.c | 6 + drivers/nvme/target/discovery.c | 23 +- drivers/nvme/target/fabrics-cmd-auth.c | 15 +- drivers/nvme/target/rdma.c | 6 +- drivers/opp/of.c | 3 +- drivers/pci/controller/dwc/pci-imx6.c | 12 +- drivers/pci/controller/dwc/pcie-qcom.c | 6 + drivers/pci/controller/pci-host-common.c | 4 + drivers/pci/controller/pci-loongson.c | 36 ++ drivers/pci/controller/pcie-altera.c | 36 +- drivers/pci/controller/pcie-mediatek.c | 65 ++- drivers/pci/iov.c | 6 + drivers/pci/quirks.c | 51 +- drivers/perf/arm-cmn.c | 23 +- drivers/platform/x86/intel/hid.c | 9 + drivers/regulator/scmi-regulator.c | 4 +- drivers/spi/spi-fsl-lpspi.c | 18 +- drivers/staging/media/atomisp/pci/sh_css.c | 6 +- drivers/staging/media/ipu3/ipu3-css-params.c | 8 +- drivers/staging/media/ipu7/ipu7.c | 22 +- drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 20 +- drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 23 +- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 8 + drivers/staging/vme_user/vme_fake.c | 8 + drivers/staging/vme_user/vme_tsi148.c | 8 + drivers/staging/vme_user/vme_user.c | 22 + drivers/tty/serial/8250/8250_mid.c | 13 +- drivers/usb/cdns3/cdnsp-mem.c | 2 + drivers/usb/class/cdc-acm.c | 3 + drivers/usb/common/ulpi.c | 23 +- drivers/usb/core/quirks.c | 6 + drivers/usb/dwc3/dwc3-meson-g12a.c | 14 +- drivers/usb/dwc3/gadget.c | 43 +- drivers/usb/fotg210/fotg210-hcd.c | 6 +- drivers/usb/gadget/composite.c | 5 +- drivers/usb/gadget/function/f_fs.c | 3 +- drivers/usb/gadget/function/f_printer.c | 3 +- drivers/usb/gadget/function/rndis.c | 20 +- drivers/usb/gadget/udc/core.c | 29 +- drivers/usb/host/ehci-sched.c | 11 +- drivers/usb/host/sl811-hcd.c | 1 + drivers/usb/host/xhci-sideband.c | 2 + drivers/usb/host/xhci.c | 11 +- drivers/usb/misc/chaoskey.c | 1 - drivers/usb/misc/idmouse.c | 45 +- drivers/usb/misc/iowarrior.c | 4 +- drivers/usb/misc/ldusb.c | 38 +- drivers/usb/misc/legousbtower.c | 37 +- drivers/usb/misc/usbio.c | 8 +- drivers/usb/misc/uss720.c | 5 +- drivers/usb/mtu3/mtu3_gadget.c | 1 + drivers/usb/serial/digi_acceleport.c | 43 +- drivers/usb/serial/keyspan_pda.c | 2 +- drivers/usb/serial/option.c | 16 + drivers/usb/storage/ene_ub6250.c | 3 +- drivers/usb/storage/usb.c | 2 +- drivers/usb/typec/anx7411.c | 4 +- drivers/usb/typec/class.c | 1 + drivers/usb/typec/tcpm/tcpci_rt1711h.c | 13 +- drivers/usb/typec/tcpm/tcpm.c | 9 +- drivers/usb/typec/ucsi/displayport.c | 7 +- drivers/usb/typec/ucsi/ucsi.c | 20 + drivers/usb/typec/ucsi/ucsi.h | 1 + drivers/usb/typec/ucsi/ucsi_acpi.c | 10 +- drivers/usb/typec/ucsi/ucsi_ccg.c | 2 +- drivers/usb/usbip/vudc.h | 1 - drivers/usb/usbip/vudc_dev.c | 4 +- drivers/vfio/debugfs.c | 1 + drivers/vfio/pci/vfio_pci_core.c | 37 +- drivers/vfio/vfio_main.c | 11 +- drivers/video/fbdev/core/fbcon.c | 7 + drivers/virtio/virtio_mmio.c | 26 +- drivers/virtio/virtio_pci_common.c | 10 +- drivers/watchdog/apple_wdt.c | 1 + fs/btrfs/btrfs_inode.h | 2 + fs/btrfs/extent-tree.c | 12 +- fs/btrfs/file.c | 25 +- fs/btrfs/inode.c | 61 ++- fs/btrfs/reflink.c | 4 +- fs/crypto/fscrypt_private.h | 84 +-- fs/crypto/inline_crypt.c | 8 +- fs/crypto/keyring.c | 239 ++++----- fs/crypto/keysetup.c | 118 +++-- fs/exfat/dir.c | 13 +- fs/f2fs/checkpoint.c | 10 +- fs/f2fs/compress.c | 4 +- fs/f2fs/data.c | 33 +- fs/f2fs/f2fs.h | 30 +- fs/f2fs/gc.c | 50 +- fs/f2fs/inode.c | 17 +- fs/f2fs/node.c | 21 +- fs/f2fs/segment.c | 14 +- fs/f2fs/super.c | 4 +- fs/f2fs/xattr.c | 6 +- fs/fs-writeback.c | 31 +- fs/fuse/cuse.c | 4 +- fs/fuse/dev.c | 54 +- fs/fuse/dev_uring.c | 93 ++-- fs/fuse/dev_uring_i.h | 10 +- fs/fuse/fuse_dev_i.h | 1 + fs/fuse/notify.c | 434 ++++++++++++++++ fs/fuse/readdir.c | 85 +++- fs/hfs/bnode.c | 2 + fs/hfsplus/bnode.c | 2 + fs/isofs/rock.c | 11 + fs/libfs.c | 1 + fs/nfs/dir.c | 2 + fs/nfsd/nfs4layouts.c | 4 +- fs/nfsd/nfs4proc.c | 14 +- fs/nfsd/nfs4recover.c | 119 ++--- fs/nfsd/nfs4state.c | 66 ++- fs/nfsd/state.h | 1 + fs/nfsd/xdr4.h | 1 + fs/nilfs2/segment.c | 22 + fs/ntfs3/attrib.c | 14 + fs/ntfs3/dir.c | 2 +- fs/ntfs3/file.c | 30 +- fs/ntfs3/frecord.c | 59 ++- fs/ntfs3/fslog.c | 20 +- fs/ntfs3/inode.c | 15 +- fs/ntfs3/ntfs_fs.h | 4 +- fs/resctrl/monitor.c | 37 +- fs/smb/client/cifs_swn.c | 316 ++++++++++-- fs/smb/client/cifsacl.c | 2 +- fs/smb/client/file.c | 2 +- fs/smb/client/smb2misc.c | 52 +- fs/smb/client/smb2ops.c | 18 +- fs/smb/client/smb2pdu.c | 22 +- fs/smb/client/trace.h | 2 + fs/smb/server/smb2pdu.c | 101 ++-- fs/smb/server/vfs.c | 18 +- fs/smb/server/vfs_cache.c | 5 + fs/smb/server/vfs_cache.h | 2 + fs/udf/balloc.c | 5 +- fs/udf/super.c | 11 +- fs/userfaultfd.c | 14 +- fs/xfs/libxfs/xfs_bmap_btree.h | 2 +- fs/xfs/libxfs/xfs_defer.c | 2 +- fs/xfs/libxfs/xfs_dquot_buf.c | 14 +- fs/xfs/libxfs/xfs_exchmaps.c | 2 +- fs/xfs/scrub/dirtree.c | 16 +- fs/xfs/scrub/dqiterate.c | 2 +- fs/xfs/scrub/inode_repair.c | 4 +- fs/xfs/scrub/rgsuper.c | 14 +- fs/xfs/scrub/rtbitmap.c | 2 +- fs/xfs/scrub/rtrefcount.c | 2 +- fs/xfs/scrub/rtrmap.c | 8 +- fs/xfs/scrub/scrub.h | 6 +- fs/xfs/scrub/xfarray.c | 3 +- fs/xfs/xfs_dquot.c | 16 +- fs/xfs/xfs_log_recover.c | 15 +- fs/xfs/xfs_qm.c | 5 +- fs/xfs/xfs_reflink.c | 36 ++ include/asm-generic/rqspinlock.h | 14 +- include/crypto/drbg.h | 18 +- include/linux/damon.h | 8 +- include/linux/filter.h | 15 +- include/linux/fs.h | 5 + include/linux/fwnode.h | 2 + include/linux/gfp.h | 4 + include/linux/glob.h | 1 + include/linux/hid-sensor-hub.h | 25 + include/linux/page_ext.h | 19 +- include/linux/slab.h | 78 ++- include/linux/vfio_pci_core.h | 15 +- include/net/bluetooth/hci_core.h | 1 + include/net/bluetooth/l2cap.h | 1 + include/net/tcp_ao.h | 1 + include/sound/hda_codec.h | 1 + include/trace/events/f2fs.h | 19 +- init/Kconfig | 1 + io_uring/io-wq.c | 2 +- io_uring/nop.c | 8 +- io_uring/rw.c | 12 +- kernel/audit.c | 21 +- kernel/audit_fsnotify.c | 4 - kernel/bpf/btf.c | 9 +- kernel/bpf/cgroup.c | 2 +- kernel/bpf/core.c | 68 ++- kernel/bpf/devmap.c | 7 + kernel/bpf/dispatcher.c | 2 +- kernel/events/core.c | 19 +- kernel/futex/requeue.c | 6 - kernel/module/decompress.c | 2 + kernel/sched/fair.c | 2 +- kernel/sched/features.h | 8 + kernel/time/jiffies.c | 11 +- kernel/time/posix-cpu-timers.c | 1 + kernel/time/timekeeping.c | 7 +- kernel/trace/trace_events_filter.c | 6 +- lib/debugobjects.c | 17 + lib/glob.c | 31 +- mm/damon/ops-common.c | 1 + mm/filemap.c | 2 +- mm/khugepaged.c | 41 +- mm/madvise.c | 3 +- mm/mincore.c | 3 +- mm/mmap.c | 2 +- mm/shmem.c | 14 +- mm/shrinker.c | 13 +- mm/shrinker_debug.c | 14 +- mm/slub.c | 18 +- mm/swap_cgroup.c | 2 + mm/swapfile.c | 1 + net/6lowpan/nhc.c | 2 +- net/bluetooth/6lowpan.c | 18 +- net/bluetooth/af_bluetooth.c | 17 +- net/bluetooth/bnep/core.c | 27 +- net/bluetooth/hci_conn.c | 21 +- net/bluetooth/hci_sync.c | 137 ++++- net/bluetooth/iso.c | 13 +- net/bluetooth/l2cap_core.c | 80 +-- net/bluetooth/l2cap_sock.c | 4 +- net/bluetooth/mgmt.c | 3 + net/bridge/netfilter/ebtables.c | 12 +- net/core/netpoll.c | 9 +- net/ipv4/igmp.c | 1 + net/ipv4/sysctl_net_ipv4.c | 10 +- net/ipv4/tcp_ao.c | 5 +- net/ipv4/tcp_output.c | 4 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 2 +- net/key/af_key.c | 1 + net/netfilter/ipset/ip_set_core.c | 8 +- net/netfilter/nf_conntrack_netlink.c | 2 +- net/netfilter/nf_flow_table_core.c | 13 +- net/netfilter/nfnetlink_log.c | 26 +- net/netfilter/nfnetlink_queue.c | 16 +- net/netfilter/xt_u32.c | 16 +- net/sched/sch_dualpi2.c | 11 +- net/tipc/bcast.c | 22 +- net/tipc/bcast.h | 2 +- net/tipc/node.c | 15 +- rust/kernel/block/mq/gen_disk.rs | 20 +- rust/kernel/cpufreq.rs | 2 +- rust/kernel/str.rs | 24 +- rust/kernel/uaccess.rs | 3 + scripts/rustdoc_test_builder.rs | 16 +- security/landlock/net.c | 1 + sound/aoa/fabrics/layout.c | 6 + sound/core/compress_offload.c | 13 +- sound/core/seq/seq_memory.c | 2 +- sound/firewire/isight.c | 3 +- sound/hda/codecs/hdmi/hdmi.c | 9 +- sound/hda/codecs/realtek/alc269.c | 1 + sound/hda/codecs/side-codecs/cs35l41_hda.c | 77 ++- sound/hda/codecs/side-codecs/cs35l41_hda.h | 5 + sound/hda/common/jack.c | 6 + sound/isa/gus/gus_pcm.c | 2 + sound/pci/cmipci.c | 6 + sound/pci/es1938.c | 2 + sound/pci/ice1712/aureon.c | 2 + sound/pci/ice1712/ice1712.c | 8 + sound/pci/ice1712/ice1724.c | 6 + sound/pci/ymfpci/ymfpci_main.c | 6 + sound/usb/caiaq/input.c | 2 +- sound/usb/mixer_quirks.c | 102 ++-- sound/usb/mixer_scarlett.c | 4 +- sound/usb/mixer_us16x08.c | 127 +++-- sound/usb/usx2y/us144mkii.c | 17 +- sound/usb/usx2y/us144mkii_capture.c | 2 +- sound/virtio/virtio_kctl.c | 50 ++ sound/virtio/virtio_pcm.c | 3 +- sound/virtio/virtio_pcm_ops.c | 3 +- tools/mm/slabinfo.c | 6 +- tools/perf/trace/beauty/fcntl.c | 16 + tools/testing/selftests/landlock/audit.h | 39 +- tools/testing/selftests/landlock/audit_test.c | 2 + tools/testing/selftests/landlock/net_test.c | 62 +++ tools/testing/selftests/landlock/ptrace_test.c | 1 + .../selftests/landlock/scoped_abstract_unix_test.c | 1 + tools/testing/selftests/mm/droppable.c | 48 +- tools/testing/selftests/mm/pagemap_ioctl.c | 12 +- tools/usb/usbip/libsrc/usbip_common.c | 2 + tools/usb/usbip/libsrc/usbip_device_driver.c | 4 + tools/usb/usbip/libsrc/vhci_driver.c | 1 + 474 files changed, 5856 insertions(+), 3472 deletions(-)
# Librecast Test Results
020/020 [ OK ] liblcrq
010/010 [ OK ] libmld
120/120 [ OK ] liblibrecast
CPU/kernel: Linux auntie 6.18.39-rc2-g67e26b110082 #1 SMP PREEMPT_DYNAMIC Fri Jul 17 10:50:08 -00 2026 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux
Quoted 9 lines · Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.18.39 release. There are 495 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Sun, 19 Jul 2026 10:18:22 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at:
Quoted 8 lines
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.39-rc2.gzor in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.gitlinux-6.18.y
and the diffstat can be found below.thanks,
greg k-h
On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on BMIPS_GENERIC:
Signature · 1 line
Florian
Hi!
Quoted 4 lines
This is the start of the stable review cycle for the 6.18.39 release. There are 495 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
CIP testing did not find any problems here:
https://gitlab.com/cip-project/cip-testing/linux-stable-rc-ci/-/tree/linux-6.18.y
Best regards,
Pavel
Am 17.07.2026 um 12:41 schrieb Greg Kroah-Hartman:
Quoted 4 lines
This is the start of the stable review cycle for the 6.18.39 release. There are 495 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Just like rc1, rc2 builds, boots and works fine on my 2-socket Ivy Bridge Xeon E5-2697 v2 server. No dmesg oddities or regressions found.
Beste Grüße,
Peter Schneider
Signature · 8 lines
Climb the mountain not to plant your flag, but to embrace the challenge, enjoy the air and behold the view. Climb it so you can see the world, not so the world can see you. -- David McCullough Jr. OpenPGP: 0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244 Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc https://keys.mailvelope.com/pks/lookup?op=get&[email protected] https://keys.mailvelope.com/pks/lookup?op=get&[email protected]
Quoted 4 lines · Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.18.39 release. There are 495 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Quoted 8 lines · On Fri, 17 Jul 2026 12:41:38 +0200 Greg Kroah-Hartman…
This is the start of the stable review cycle for the 6.18.39 release. There are 495 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Sun, 19 Jul 2026 10:18:22 +0000. Anything received after that time might be too late.
Boot-tested under QEMU for Rust x86_64, arm64 and riscv64; built-tested for loongarch64 and arm32:
Thanks!
Cheers,
Miguel