6.12.96-rc2 review
Greg Kroah-Hartman
maintainercover 6.12.96-rc2 review
This is the start of the stable review cycle for the 6.12.96 release. There are 357 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Sun, 19 Jul 2026 10:17:43 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.96-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <[email protected]>
Linux 6.12.96-rc2
Darrick J. Wong <[email protected]>
xfs: don't zap bmbt forks if they are MAXLEVELS tall
Darrick J. Wong <[email protected]>
xfs: fully check the parent handle when it points to the rootdir
Darrick J. Wong <[email protected]>
xfs: clamp timestamp nanoseconds correctly
Darrick J. Wong <[email protected]>
xfs: set xfarray killable sort correctly
Darrick J. Wong <[email protected]>
xfs: don't wrap around quota ids in dqiterate
Darrick J. Wong <[email protected]>
xfs: resample the data fork mapping after cycling ILOCK
Weiming Shi <[email protected]>
xfs: fail recovery on a committed log item with no regions
Andrey Albershteyn <[email protected]>
xfs: fix null pointer dereference in tracepoint
Shoichiro Miyamoto <[email protected]>
smb: client: reject overlapping data areas in SMB2 responses
Neill Kapron <[email protected]>
usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
Ji'an Zhou <[email protected]>
fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
Joanne Koong <[email protected]>
fuse: re-lock request before returning from fuse_ref_folio()
Alberto Ruiz <[email protected]>
fuse: fix device node leak in cuse_process_init_reply()
Michael Bommarito <[email protected]>
RDMA/siw: bound Read Response placement to the RREAD length
Zhenhao Wan <[email protected]>
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
Dmitry Torokhov <[email protected]>
Input: maplecontrol - set driver data before registering input device
Dmitry Torokhov <[email protected]>
Input: maplemouse - set driver data before registering input device
Dmitry Torokhov <[email protected]>
Input: maple_keyb - set driver data before registering input device
Dmitry Torokhov <[email protected]>
Input: mms114 - fix multi-touch slot corruption
Florian Fuchs <[email protected]>
Input: maplemouse - fix NULL pointer dereference in open()
Bryam Vargas <[email protected]>
Input: mms114 - reject an oversized device packet size
Bryam Vargas <[email protected]>
Input: touchwin - reset the packet index on every complete packet
Dmitry Torokhov <[email protected]>
Input: mms114 - fix touch indexing for MMS134S and MMS136
Bryam Vargas <[email protected]>
Input: iforce - bound the device-reported force-feedback effect index
Bryam Vargas <[email protected]>
Input: goodix - clamp the device-reported contact count
Ranjan Kumar <[email protected]>
Input: elan_i2c - prevent division by zero and arithmetic underflow
Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
Haoxiang Li <[email protected]>
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
Guillermo Rodríguez <[email protected]>
i2c: stm32f7: truncate clock period instead of rounding it
Andy Shevchenko <[email protected]>
i2c: mpc: Fix timeout calculations
Johan Hovold <[email protected]>
i2c: core: fix adapter deregistration race
Johan Hovold <[email protected]>
i2c: core: fix adapter debugfs creation
Johan Hovold <[email protected]>
i2c: core: fix NULL-deref on adapter registration failure
Johan Hovold <[email protected]>
i2c: core: fix irq domain leak on adapter registration failure
Johan Hovold <[email protected]>
i2c: core: fix adapter probe deferral loop
Mikhail Gavrilov <[email protected]>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
Mikhail Gavrilov <[email protected]>
udmabuf: fix DMA direction mismatch in release_udmabuf()
Sean Christopherson <[email protected]>
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
Sean Christopherson <[email protected]>
KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
Sean Christopherson <[email protected]>
KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
Nicolin Chen <[email protected]>
iommufd: Set upper bounds on cache invalidation entry_num and entry_len
Weinan Liu <[email protected]>
iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
Zenghui Yu <[email protected]>
selftests/mm: pagemap_ioctl: use the correct page size for transact_test()
Pedro Falcato <[email protected]>
mm: do file ownership checks with the proper mount idmap
David Hildenbrand (Arm) <[email protected]>
selftests: mm: fix and speedup "droppable" test
Anthony Yznaga <[email protected]>
mm: fix mmap errno value when MAP_DROPPABLE is not supported
Vivian Wang <[email protected]>
riscv: mm: Unconditionally sfence.vma for spurious fault
Koichiro Den <[email protected]>
NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
Bryam Vargas <[email protected]>
exfat: bound uniname advance in exfat_find_dir_entry()
Andrii Kuchmenko <[email protected]>
module: decompress: check return value of module_extend_max_pages()
Benjamin Coddington <[email protected]>
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
Ricardo Robaina <[email protected]>
audit: fix potential integer overflow in audit_log_n_hex()
Huihui Huang <[email protected]>
tracing: Prevent out-of-bounds read in glob matching
Johan Hovold <[email protected]>
i2c: core: fix hang on adapter registration failure
Wentao Liang <[email protected]>
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
Janne Grunau <[email protected]>
watchdog: apple: Add "apple,t8103-wdt" compatible
Vasily Khoruzhick <[email protected]>
EDAC/i10nm: Don't fail probing if ADXL is missing
Carlos Song <[email protected]>
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
Carlos Song <[email protected]>
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
Mark Rutland <[email protected]>
arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
Paul Louvel <[email protected]>
crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
Paul Louvel <[email protected]>
crypto: talitos/hash - remove useless wrapper
Paul Louvel <[email protected]>
crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
Paul Louvel <[email protected]>
crypto: talitos/hash - drop workqueue mechanism for SEC1
Paul Louvel <[email protected]>
crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
Paul Louvel <[email protected]>
crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
Paul Louvel <[email protected]>
crypto: talitos - move code in current_desc_hdr() into a standalone function
Paul Louvel <[email protected]>
crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
Paul Louvel <[email protected]>
crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
Paul Louvel <[email protected]>
crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
Paul Louvel <[email protected]>
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
Giovanni Cabiddu <[email protected]>
crypto: qat - validate RSA CRT component lengths
Ahsan Atta <[email protected]>
crypto: qat - protect service table iterations with service_lock
Ahsan Atta <[email protected]>
crypto: qat - notify fatal error before AER reset preparation
Ahsan Atta <[email protected]>
crypto: qat - keep VFs enabled during reset
Eric Biggers <[email protected]>
crypto: drbg - Fix the fips_enabled priority boost
Eric Biggers <[email protected]>
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
Eric Biggers <[email protected]>
crypto: drbg - Fix returning success on failure in CTR_DRBG
Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for SEV ioctls
Wentao Liang <[email protected]>
crypto: tegra - fix refcount leak in tegra_se_host1x_submit()
Ruijie Li <[email protected]>
crypto: pcrypt - restore callback for non-parallel fallback
Anastasia Tishchenko <[email protected]>
crypto: ecc - Fix carry overflow in vli multiplication
Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps again
Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps
Eric Biggers <[email protected]>
crypto: af_alg - Remove zero-copy support from skcipher and aead
Bryam Vargas <[email protected]>
isofs: bound Rock Ridge symlink components to the SL record
Bryam Vargas <[email protected]>
partitions: aix: bound the pp_count scan to the ppe array
Qu Wenruo <[email protected]>
btrfs: do not trim a device which is not writeable
Tianchu Chen <[email protected]>
nvmet-auth: validate reply message payload bounds against transfer length
Bryam Vargas <[email protected]>
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
Achkinazi, Igor <[email protected]>
nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
Mikulas Patocka <[email protected]>
dm-ioctl: report an error if a device has no table
Wentao Liang <[email protected]>
nvme: target: rdma: fix ndev refcount leak on queue connect
Wentao Liang <[email protected]>
hwrng: jh7110 - fix refcount leak in starfive_trng_read()
Bryam Vargas <[email protected]>
udf: validate sparing table length as an entry count, not a byte count
Bryam Vargas <[email protected]>
udf: validate VAT header length against the VAT inode size
Michael Bommarito <[email protected]>
udf: validate free block extents against the partition length
Maciej W. Rozycki <[email protected]>
PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
Reinette Chatre <[email protected]>
x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
Chao Shi <[email protected]>
block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
Paul Cercueil <[email protected]>
usb: gadget: f_fs: Fix DMA fence leak
Paul Menzel <[email protected]>
usb: typec: ucsi: cancel pending work on system suspend
Fan Wu <[email protected]>
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
Madhu M <[email protected]>
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Invert DisplayPort role assignment
Badhri Jagan Sridharan <[email protected]>
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
Andy Yan <[email protected]>
usb: typec: tcpm: Fix VDM type for Enter Mode commands
Shuangpeng Bai <[email protected]>
usb: typec: class: drop PD lookup reference
Myeonghun Pak <[email protected]>
usb: typec: anx7411: use devm_pm_runtime_enable()
Sam Day <[email protected]>
usbip: vudc: fix NULL deref in vep_dequeue()
Yichong Chen <[email protected]>
usbip: tools: support SuperSpeedPlus devices
Xu Rao <[email protected]>
USB: usb-storage: ene_ub6250: restore media-ready check
Johan Hovold <[email protected]>
USB: ulpi: fix memory leak on registration failure
Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix write buffer corruption
Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix hard lockup on disconnect
Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix broken rx after throttle
Fabio Porcedda <[email protected]>
USB: serial: option: add Telit Cinterion FE990D50 compositions
Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix information leak
Haoxiang Li <[email protected]>
usb: mtu3: unmap request DMA on queue failure
Myeonghun Pak <[email protected]>
USB: misc: uss720: unregister parport on probe failure
Xu Rao <[email protected]>
USB: storage: include US_FL_NO_SAME in quirks mask
Myeonghun Pak <[email protected]>
usb: sl811-hcd: disable controller wakeup on remove
Johan Hovold <[email protected]>
USB: legousbtower: fix use-after-free on disconnect race
Erich E. Hoover <[email protected]>
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect
Johan Hovold <[email protected]>
USB: ldusb: fix use-after-free on disconnect race
Johan Hovold <[email protected]>
USB: idmouse: fix use-after-free on disconnect race
Xu Rao <[email protected]>
usb: gadget: f_printer: take kref only for successful open
Jimmy Hu <[email protected]>
usb: gadget: udc: Fix use-after-free in gadget_match_driver
Maoyi Xie <[email protected]>
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
Dawei Feng <[email protected]>
usb: free iso schedules on failed submit
WenTao Liang <[email protected]>
usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
Rodrigo Lugathe da Conceição Alves <[email protected]>
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
Haoxiang Li <[email protected]>
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
Jared Baldridge <[email protected]>
usb: cdc_acm: Add quirk for Uniden BC125AT scanner
Maoyi Xie <[email protected]>
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
Paul Moses <[email protected]>
bpf: Validate BTF repeated field counts before expansion
Dawei Feng <[email protected]>
bpf: Restore sysctl new-value from 1 to 0
Zhao Zhang <[email protected]>
bpf: Reject fragmented frames in devmap
Yingjie Gao <[email protected]>
xfs: fix exchmaps reservation limit check
Darrick J. Wong <[email protected]>
xfs: fix pointer arithmetic error on 32-bit systems
Alexey Nepomnyashih <[email protected]>
xfs: fix unreachable BIGTIME check in dquot flush validation
Yingjie Gao <[email protected]>
xfs: release dquot buffer after dqflush failure
Yousef Alhouseen <[email protected]>
xfs: use null daddr for unset first bad log block
Andy Shevchenko <[email protected]>
serial: 8250_mid: Disable DMA for selected platforms
Louis-Alexis Eyraud <[email protected]>
media: mtk-jpeg: cancel workqueue on release for supported platforms only
Deepanshu Kartikey <[email protected]>
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
Tristan Madani <[email protected]>
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
Srinivas Pandruvada <[email protected]>
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
Maoyi Xie <[email protected]>
HID: lg-g15: cancel pending work on remove to fix a use-after-free
Manish Khadka <[email protected]>
HID: letsketch: fix UAF on inrange_timer at driver unbind
Myeonghun Pak <[email protected]>
HID: wacom: stop hardware after post-start probe failures
Tianchu Chen <[email protected]>
HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
Yichong Chen <[email protected]>
tools/mm/slabinfo: fix total_objects attribute name
Xuewen Wang <[email protected]>
tools/mm/slabinfo: Fix trace disable logic inversion
Vlastimil Babka (SUSE) <[email protected]>
mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
Lukas Wunner <[email protected]>
X.509: Fix validation of ASN.1 certificate header
Robin Murphy <[email protected]>
perf/arm-cmn: Fix DVM node events
Kartik Rajput <[email protected]>
clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
Thomas Gleixner <[email protected]>
time/jiffies: Register jiffies clocksource before usage
WenTao Liang <[email protected]>
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
Yuho Choi <[email protected]>
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
Tianxiang Chen <[email protected]>
cpufreq: Fix hotplug-suspend race during reboot
Steven Rostedt <[email protected]>
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
Fushuai Wang <[email protected]>
cpufreq: intel_pstate: Sync policy->cur during CPU offline
Guangshuo Li <[email protected]>
firmware_loader: fix device reference leak in firmware_upload_register()
Guangshuo Li <[email protected]>
cpufreq: qcom-cpufreq-hw: Fix possible double free
Abdun Nihaal <[email protected]>
OPP: of: Fix potential memory leak in opp_parse_supplies()
Baokun Li <[email protected]>
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
Norbert Manthey <[email protected]>
smb: client: mask server-provided mode to 07777 in modefromsid
Xu Rao <[email protected]>
smb: client: fix atime clamp check in read completion
Zihan Xi <[email protected]>
smb: client: harden POSIX SID length parsing
Zihan Xi <[email protected]>
smb: client: use unaligned reads in parse_posix_ctxt()
Haoxiang Li <[email protected]>
smb: client: Fix next buffer leak in receive_encrypted_standard()
Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_close() replay
Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_open() replay
Zhao Zhang <[email protected]>
smb: client: fix double-free in SMB2_flush() replay
Henrique Carvalho <[email protected]>
smb: client: fix change notify replay double-free
Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_ioctl() replay
Henrique Carvalho <[email protected]>
smb: client: fix query_info() replay double-free
Henrique Carvalho <[email protected]>
smb: client: fix query directory replay double-free
Namjae Jeon <[email protected]>
ksmbd: use opener credentials for ADS I/O
Namjae Jeon <[email protected]>
ksmbd: use opener credentials for delete-on-close
Gil Portnoy <[email protected]>
ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
Gil Portnoy <[email protected]>
ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
Namjae Jeon <[email protected]>
ksmbd: run set info with opener credentials
Gil Portnoy <[email protected]>
ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
Namjae Jeon <[email protected]>
ksmbd: require source read access for duplicate extents
Davide Ornaghi <[email protected]>
ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
Namjae Jeon <[email protected]>
ksmbd: serialize QUERY_DIRECTORY requests per file
Gil Portnoy <[email protected]>
ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
Gil Portnoy <[email protected]>
ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
Dan Carpenter <[email protected]>
smb/client: Fix error code in smb2_aead_req_alloc()
Junrui Luo <[email protected]>
coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
Deepanshu Kartikey <[email protected]>
fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
Konstantin Komarov <[email protected]>
fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
Konstantin Komarov <[email protected]>
fs/ntfs3: fsync files by syncing parent inodes
Konstantin Komarov <[email protected]>
fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
Muhammad Bilal <[email protected]>
Bluetooth: L2CAP: validate option length before reading conf opt value
Muhammad Bilal <[email protected]>
Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
Pauli Virtanen <[email protected]>
Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
Yousef Alhouseen <[email protected]>
Bluetooth: fix UAF in bt_accept_dequeue()
Maoyi Xie <[email protected]>
Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
Yousef Alhouseen <[email protected]>
Bluetooth: bnep: pin L2CAP connection during netdev registration
Sergey Senozhatsky <[email protected]>
Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
Xiang Mei <[email protected]>
netfilter: ebtables: terminate table name before find_table_lock()
Florian Westphal <[email protected]>
netfilter: ebtables: module names must be null-terminated
Florian Westphal <[email protected]>
netfilter: handle unreadable frags
Pratham Gupta <[email protected]>
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
Zijiang Huang <[email protected]>
mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup
Qi Zheng <[email protected]>
mm: shrinker: fix NULL pointer dereference in debugfs
Qi Zheng <[email protected]>
mm: shrinker: fix shrinker_info teardown race with expansion
Shakeel Butt <[email protected]>
mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
Andrei Kuchynski <[email protected]>
mfd: cros_ec: Delay dev_set_drvdata() until probe success
Wyatt Feng <[email protected]>
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
Yuyang Huang <[email protected]>
ipv4: igmp: remove multicast group from hash table on device destruction
Breno Leitao <[email protected]>
netpoll: fix a use-after-free on shutdown path
Runyu Xiao <[email protected]>
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
Runyu Xiao <[email protected]>
gpio: eic-sprd: use raw_spinlock_t in the irq startup path
Koichiro Den <[email protected]>
NTB: epf: Avoid calling pci_irq_vector() from hardirq context
Yunpeng Tian <[email protected]>
fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
Thomas Gleixner <[email protected]>
debugobjects: Plug race against a concurrent OOM disable
Runyu Xiao <[email protected]>
coresight: etb10: restore atomic_t for shared reading state
Samuel Page <[email protected]>
Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
Chi Wang <[email protected]>
audit: Fix data races of skb_queue_len() readers on audit_queue
Zijing Yin <[email protected]>
net: af_key: initialize alg_key_len for IPComp states
Gil Portnoy <[email protected]>
ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
Dawei Feng <[email protected]>
crypto: amlogic - avoid double cleanup in meson_crypto_probe()
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB write in HT_caps_handler()
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
Arnd Bergmann <[email protected]>
staging: media: atomisp: reduce load_primary_binaries() stack usage
Ricardo Ribalda <[email protected]>
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in tsi148 bridge
Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in fake bridge
Shoichiro Miyamoto <[email protected]>
smb: client: restrict implied bcc[0] exemption to responses without data area
Michael Tautschnig <[email protected]>
staging: vme_user: bound slave read/write to the kern_buf size
Samuel Page <[email protected]>
tipc: fix out-of-bounds read in broadcast Gap ACK blocks
Yizhou Zhao <[email protected]>
6lowpan: fix NHC entry use-after-free on error path
Runyu Xiao <[email protected]>
usb: dwc3: run gadget disconnect from sleepable suspend context
Alan Stern <[email protected]>
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
Michael Bommarito <[email protected]>
hwrng: virtio: clamp device-reported used.len at copy_data()
Johan Hovold <[email protected]>
virtio-mmio: fix device release warning on module unload
Ammar Faizi <[email protected]>
virtio_pci: fix vq info pointer lookup via wrong index
Xiang Mei <[email protected]>
netfilter: ipset: fix race between dump and ip_set_list resize
SeongJae Park <[email protected]>
mm/damon/ops-common: handle extreme intervals in damon_hot_score()
Richard Zhu <[email protected]>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
Ratheesh Kannoth <[email protected]>
PCI: host-common: Request bus reassignment when not probe-only
Mahesh Vaidya <[email protected]>
PCI: altera: Do not dispose parent IRQ mapping
Ziyao Li <[email protected]>
PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series
Myeonghun Pak <[email protected]>
usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
胡连勤 <[email protected]>
usb: xhci: Fix sleep in atomic context in xhci_free_streams()
Carlos Llamas <[email protected]>
binder: fix UAF in binder_free_transaction()
Carlos Llamas <[email protected]>
binder: fix UAF in binder_thread_release()
Johan Hovold <[email protected]>
Bluetooth: btusb: fix wakeup source leak on probe failure
Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on marvell probe failure
Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on registration failure
Zenm Chen <[email protected]>
Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
Alex Williamson <[email protected]>
vfio: Remove device debugfs before releasing devres
Junrui Luo <[email protected]>
vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
Alex Williamson <[email protected]>
vfio/pci: Fix racy bitfields and tighten struct layout
Alex Williamson <[email protected]>
vfio/pci: Release the VGA arbiter client on register_device() failure
Alex Williamson <[email protected]>
vfio/pci: Latch disable_idle_d3 per device
Raghavendra Rao Ananta <[email protected]>
vfio/pci: Use a private flag to prevent power state change with VFs
Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
Cássio Gabriel <[email protected]>
ALSA: usb-audio: Roll back quirk control caches on write errors
Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
Darvell Long <[email protected]>
ALSA: usb-audio: avoid kobject path lookup in DualSense match
HyeongJun An <[email protected]>
ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
Zhao Dongdong <[email protected]>
ALSA: ice1712: check snd_ctl_new1() return value
Zhao Dongdong <[email protected]>
ALSA: gus: check snd_ctl_new1() return value
Maoyi Xie <[email protected]>
ALSA: firewire: isight: bound the sample count to the packet payload
Zhao Dongdong <[email protected]>
ALSA: es1938: check snd_ctl_new1() return value
Zhao Dongdong <[email protected]>
ALSA: cmipci: check snd_ctl_new1() return value
Maoyi Xie <[email protected]>
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
Zhao Dongdong <[email protected]>
ALSA: ymfpci: check snd_ctl_new1() return value
Cássio Gabriel <[email protected]>
ALSA: virtio: Validate control metadata from the device
Cássio Gabriel <[email protected]>
ALSA: virtio: Add missing 384 kHz PCM rate mapping
Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
Pengpeng Hou <[email protected]>
iio: temperature: Build mlx90635 with CONFIG_MLX90635
Stepan Ionichev <[email protected]>
iio: resolver: ad2s1210: notify trigger and clear state on fault read error
Andy Shevchenko <[email protected]>
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
Javier Carrasco <[email protected]>
iio: light: veml6030: fix channel type when pushing events
Stepan Ionichev <[email protected]>
iio: light: tsl2591: return actual error from probe IRQ failure
Joshua Crofts <[email protected]>
iio: light: opt3001: fix missing state reset on timeout
Biren Pandya <[email protected]>
iio: light: gp2ap002: fix runtime PM leak on read error
Vidhu Sarwal <[email protected]>
iio: light: al3010: fix incorrect scale for the highest gain range
Andreas Kempe <[email protected]>
iio: imu: st_lsm6dsx: deselect shub page before reading whoami
Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamp clock period by using lower value
Runyu Xiao <[email protected]>
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
Runyu Xiao <[email protected]>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
Stepan Ionichev <[email protected]>
iio: gyro: bmg160: wait full startup time after mode change at probe
Stepan Ionichev <[email protected]>
iio: gyro: bmg160: bail out when bandwidth/filter is not in table
Lars-Peter Clausen <[email protected]>
iio: event: Fix event FIFO reset race
Herman van Hazendonk <[email protected]>
iio: common: st_sensors: honour channel endianness in read_axis_data
Maxwell Doose <[email protected]>
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
Dan Carpenter <[email protected]>
iio: backend: fix uninitialized data in debugfs
Pengpeng Hou <[email protected]>
iio: adc: ti-ads124s08: Return reset GPIO lookup errors
Guangshuo Li <[email protected]>
iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
Maxwell Doose <[email protected]>
iio: adc: spear: Initialize completion before requesting IRQ
Maxwell Doose <[email protected]>
iio: adc: lpc32xx: Initialize completion before requesting IRQ
Biren Pandya <[email protected]>
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
Bryam Vargas <[email protected]>
iio: accel: bmc150: clamp the device-reported FIFO frame count
Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check for header
Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check to response query
Krzysztof Karas <[email protected]>
drm/i915: ensure segment offset never exceeds allowed max
Alice Ryhl <[email protected]>
rust: kasan: KASAN+RUST requires clang
Taeyang Lee <[email protected]>
perf/core: Detach event groups during remove_on_exec
Alice Ryhl <[email protected]>
rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER
Huacai Chen <[email protected]>
LoongArch: Add PIO for early access before ACPI PCI root register
HyeongJun An <[email protected]>
platform/x86: intel-hid: Protect ACPI notify handler against recursion
Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Fix possible NULL pointer dereference
Jeremy Linton <[email protected]>
ACPI: CPPC: Suppress UBSAN warning caused by field misuse
Florian Fainelli <[email protected]>
perf trace beauty fcntl: Fix build with older kernel headers
Pedro Falcato <[email protected]>
mm/khugepaged: write all dirty file folios when collapsing
Christoph Hellwig <[email protected]>
block: fix queue freeze vs limits lock order in sysfs store methods
Christoph Hellwig <[email protected]>
block: add a store_limit operations for sysfs entries
Hangbin Liu <[email protected]>
bonding: fix xfrm offload feature setup on active-backup mode
NeilBrown <[email protected]>
nfsd: change nfs4_client_to_reclaim() to allocate data
NeilBrown <[email protected]>
nfsd: move name lookup out of nfsd4_list_rec_dir()
John Johansen <[email protected]>
apparmor: advertise the tcp fast open fix is applied
John Stultz <[email protected]>
locking/rtmutex: Make sure we wake anything on the wake_q when we release the lock->wait_lock
Michael Bommarito <[email protected]>
NFSv4/flexfiles: reject zero filehandle version count
Jonathan Curley <[email protected]>
NFSv4/flexfiles: Add data structure support for striped layouts
Jonathan Curley <[email protected]>
NFSv4/flexfiles: Remove cred local variable dependency
Mike Snitzer <[email protected]>
nfs_common: rename functions that invalidate LOCALIO nfs_clients
Mike Snitzer <[email protected]>
nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations
Mingyu Wang <[email protected]>
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
Keshav Verma <[email protected]>
f2fs: fix listxattr handling of corrupted xattr entries
Chao Yu <[email protected]>
f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
Ruipeng Qi <[email protected]>
f2fs: fix potential deadlock in f2fs_balance_fs()
Bryam Vargas <[email protected]>
f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
Chao Yu <[email protected]>
f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
Wenjie Qi <[email protected]>
f2fs: validate orphan inode entry count
Bartosz Golaszewski <[email protected]>
device property: initialize the remaining fields of fwnode_handle in fwnode_init()
Uladzislau Rezki (Sony) <[email protected]>
mm/vmalloc: take vmap_purge_lock in shrinker
Marco Scardovi <[email protected]>
gpio: rockchip: fix generic IRQ chip leak on remove
Marco Scardovi <[email protected]>
gpio: rockchip: teardown bugs and resource leaks
Ye Zhang <[email protected]>
gpio: rockchip: change the GPIO version judgment logic
Tiezhu Yang <[email protected]>
drm/amd: Fix set but not used warnings
Mikhail Dmitrichenko <[email protected]>
bcachefs: avoid truncating fiemap extent length
Wentao Guan <[email protected]>
perf: Fix dangling cgroup pointer in cpuctx backport
Kiryl Shutsemau <[email protected]>
userfaultfd: gate must_wait writability check on pte_present()
Chris Mason <[email protected]>
nfsd: release layout stid on setlease failure
Scott Mayhew <[email protected]>
nfsd: fix file change detection in CB_GETATTR
Daniel Borkmann <[email protected]>
bpf, arm64: Reject out-of-range B.cond targets
-------------
Diffstat:
Documentation/crypto/userspace-if.rst | 31 +- Makefile | 7 +- arch/arm64/kernel/entry-fpsimd.S | 8 +- arch/arm64/lib/insn.c | 2 + arch/loongarch/include/asm/acpi.h | 2 + arch/loongarch/kernel/acpi.c | 28 + arch/loongarch/kernel/setup.c | 2 + arch/loongarch/pci/acpi.c | 2 + arch/riscv/kernel/entry.S | 7 +- arch/x86/kernel/cpu/resctrl/monitor.c | 45 +- arch/x86/kvm/svm/svm.c | 3 + arch/x86/kvm/vmx/vmx.c | 41 +- arch/x86/kvm/x86.c | 3 - block/bdev.c | 8 +- block/blk-sysfs.c | 108 ++-- block/partitions/aix.c | 9 + crypto/af_alg.c | 69 +-- crypto/algif_aead.c | 8 +- crypto/asymmetric_keys/x509_loader.c | 2 +- crypto/drbg.c | 4 +- crypto/ecc.c | 31 +- crypto/pcrypt.c | 4 + drivers/acpi/cppc_acpi.c | 11 +- drivers/acpi/nfit/core.c | 3 + drivers/android/binder.c | 19 +- drivers/base/firmware_loader/sysfs_upload.c | 8 +- drivers/bluetooth/btmtksdio.c | 2 +- drivers/bluetooth/btnxpuart.c | 6 + drivers/bluetooth/btusb.c | 39 +- drivers/bluetooth/hci_ldisc.c | 14 +- drivers/char/hw_random/jh7110-trng.c | 13 +- drivers/char/hw_random/virtio-rng.c | 23 +- drivers/clocksource/timer-tegra186.c | 3 +- drivers/cpufreq/cpufreq.c | 2 + drivers/cpufreq/intel_pstate.c | 6 +- drivers/cpufreq/pcc-cpufreq.c | 2 + drivers/cpufreq/qcom-cpufreq-hw.c | 1 - drivers/crypto/amlogic/amlogic-gxl-core.c | 2 +- drivers/crypto/caam/caamalg.c | 12 +- drivers/crypto/caam/caamalg_qi.c | 12 +- drivers/crypto/caam/caamalg_qi2.c | 12 +- drivers/crypto/caam/caamhash.c | 4 +- drivers/crypto/caam/key_gen.c | 4 +- drivers/crypto/ccp/sev-dev.c | 37 +- drivers/crypto/intel/qat/qat_common/adf_aer.c | 4 +- drivers/crypto/intel/qat/qat_common/adf_init.c | 16 + drivers/crypto/intel/qat/qat_common/adf_sriov.c | 12 +- .../crypto/intel/qat/qat_common/qat_asym_algs.c | 10 +- drivers/crypto/talitos.c | 561 +++++++++++---------- drivers/crypto/talitos.h | 12 + drivers/crypto/tegra/tegra-se-main.c | 2 +- drivers/dma-buf/udmabuf.c | 9 +- drivers/edac/i10nm_base.c | 14 +- drivers/gpio/gpio-eic-sprd.c | 8 +- drivers/gpio/gpio-rockchip.c | 31 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h | 6 +- drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c | 9 +- drivers/gpu/drm/i915/i915_mm.c | 4 +- drivers/hid/hid-goodix-spi.c | 3 + drivers/hid/hid-letsketch.c | 36 +- drivers/hid/hid-lg-g15.c | 16 + drivers/hid/hid-sensor-hub.c | 77 ++- drivers/hid/wacom_sys.c | 12 +- drivers/hwtracing/coresight/coresight-etb10.c | 6 +- drivers/hwtracing/coresight/ultrasoc-smb.c | 1 + drivers/i2c/busses/i2c-mpc.c | 2 +- drivers/i2c/busses/i2c-stm32f7.c | 9 +- drivers/i2c/i2c-core-base.c | 81 +-- drivers/iio/accel/bmc150-accel-core.c | 2 + drivers/iio/accel/kxsd9.c | 5 +- drivers/iio/adc/lpc32xx_adc.c | 4 +- drivers/iio/adc/spear_adc.c | 3 +- drivers/iio/adc/ti-ads1119.c | 6 +- drivers/iio/adc/ti-ads124s08.c | 3 +- drivers/iio/chemical/scd30_core.c | 19 +- drivers/iio/common/st_sensors/st_sensors_core.c | 23 +- drivers/iio/gyro/bmg160_core.c | 16 +- drivers/iio/imu/adis_trigger.c | 2 +- drivers/iio/imu/bmi160/bmi160_core.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 4 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 9 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 1 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 4 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 +- drivers/iio/industrialio-backend.c | 2 +- drivers/iio/industrialio-event.c | 5 +- drivers/iio/light/al3010.c | 2 +- drivers/iio/light/gp2ap002.c | 2 +- drivers/iio/light/opt3001.c | 6 +- drivers/iio/light/tsl2591.c | 6 +- drivers/iio/light/veml6030.c | 8 +- drivers/iio/magnetometer/ak8975.c | 1 + drivers/iio/resolver/ad2s1210.c | 2 +- drivers/iio/temperature/Makefile | 2 +- drivers/iio/temperature/ltc2983.c | 5 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 9 + drivers/infiniband/ulp/rtrs/rtrs-srv.c | 5 +- drivers/input/joystick/iforce/iforce-packets.c | 18 +- drivers/input/joystick/maplecontrol.c | 3 +- drivers/input/keyboard/maple_keyb.c | 4 +- drivers/input/mouse/elan_i2c_core.c | 36 +- drivers/input/mouse/maplemouse.c | 9 +- drivers/input/rmi4/rmi_bus.c | 4 +- drivers/input/rmi4/rmi_f30.c | 2 +- drivers/input/rmi4/rmi_f3a.c | 2 +- drivers/input/touchscreen/goodix.c | 3 +- drivers/input/touchscreen/mms114.c | 26 +- drivers/input/touchscreen/touchwin.c | 15 +- drivers/iommu/amd/iommu.c | 3 +- drivers/iommu/iommufd/hw_pagetable.c | 11 +- drivers/md/dm-ioctl.c | 5 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 3 +- drivers/mfd/cros_ec_dev.c | 3 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/bonding/bond_netlink.c | 16 +- drivers/net/usb/kalmia.c | 8 + drivers/ntb/hw/epf/ntb_hw_epf.c | 14 +- drivers/nvme/host/multipath.c | 6 + drivers/nvme/target/discovery.c | 23 +- drivers/nvme/target/fabrics-cmd-auth.c | 15 +- drivers/nvme/target/rdma.c | 6 +- drivers/opp/of.c | 3 +- drivers/pci/controller/dwc/pci-imx6.c | 12 +- drivers/pci/controller/pci-host-common.c | 4 + drivers/pci/controller/pci-loongson.c | 36 ++ drivers/pci/controller/pcie-altera.c | 1 - drivers/pci/quirks.c | 51 +- drivers/perf/arm-cmn.c | 23 +- drivers/platform/x86/intel/hid.c | 9 + drivers/regulator/scmi-regulator.c | 4 +- drivers/spi/spi-fsl-lpspi.c | 18 +- drivers/staging/media/atomisp/pci/sh_css.c | 6 +- drivers/staging/media/ipu3/ipu3-css-params.c | 8 +- drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 20 +- drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 23 +- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 8 + drivers/staging/vme_user/vme_fake.c | 8 + drivers/staging/vme_user/vme_tsi148.c | 8 + drivers/staging/vme_user/vme_user.c | 22 + drivers/tty/serial/8250/8250_mid.c | 13 +- drivers/usb/cdns3/cdnsp-mem.c | 2 + drivers/usb/class/cdc-acm.c | 3 + drivers/usb/common/ulpi.c | 23 +- drivers/usb/core/quirks.c | 6 + drivers/usb/dwc3/dwc3-meson-g12a.c | 14 +- drivers/usb/dwc3/gadget.c | 43 +- drivers/usb/fotg210/fotg210-hcd.c | 6 +- drivers/usb/gadget/composite.c | 5 +- drivers/usb/gadget/function/f_fs.c | 3 +- drivers/usb/gadget/function/f_printer.c | 3 +- drivers/usb/gadget/function/rndis.c | 20 +- drivers/usb/gadget/udc/core.c | 29 +- drivers/usb/host/ehci-sched.c | 11 +- drivers/usb/host/sl811-hcd.c | 1 + drivers/usb/host/xhci.c | 11 +- drivers/usb/misc/chaoskey.c | 1 - drivers/usb/misc/idmouse.c | 45 +- drivers/usb/misc/iowarrior.c | 4 +- drivers/usb/misc/ldusb.c | 38 +- drivers/usb/misc/legousbtower.c | 37 +- drivers/usb/misc/uss720.c | 5 +- drivers/usb/mtu3/mtu3_gadget.c | 1 + drivers/usb/serial/digi_acceleport.c | 43 +- drivers/usb/serial/keyspan_pda.c | 2 +- drivers/usb/serial/option.c | 16 + drivers/usb/storage/ene_ub6250.c | 3 +- drivers/usb/storage/usb.c | 2 +- drivers/usb/typec/anx7411.c | 4 +- drivers/usb/typec/class.c | 1 + drivers/usb/typec/tcpm/tcpci_rt1711h.c | 13 +- drivers/usb/typec/tcpm/tcpm.c | 9 +- drivers/usb/typec/ucsi/displayport.c | 7 +- drivers/usb/typec/ucsi/ucsi.c | 20 + drivers/usb/typec/ucsi/ucsi.h | 1 + drivers/usb/typec/ucsi/ucsi_acpi.c | 10 +- drivers/usb/typec/ucsi/ucsi_ccg.c | 2 +- drivers/usb/usbip/vudc.h | 1 - drivers/usb/usbip/vudc_dev.c | 4 +- drivers/vfio/debugfs.c | 1 + drivers/vfio/pci/vfio_pci_core.c | 37 +- drivers/vfio/vfio_main.c | 11 +- drivers/video/fbdev/core/fbcon.c | 7 + drivers/virtio/virtio_mmio.c | 26 +- drivers/virtio/virtio_pci_common.c | 10 +- drivers/watchdog/apple_wdt.c | 1 + fs/bcachefs/fs.c | 8 +- fs/btrfs/extent-tree.c | 12 +- fs/exfat/dir.c | 13 +- fs/f2fs/checkpoint.c | 14 +- fs/f2fs/data.c | 29 ++ fs/f2fs/f2fs.h | 1 + fs/f2fs/gc.c | 50 +- fs/f2fs/inode.c | 30 +- fs/f2fs/segment.c | 8 + fs/f2fs/xattr.c | 6 +- fs/fs-writeback.c | 31 +- fs/fuse/cuse.c | 4 +- fs/fuse/dev.c | 11 +- fs/hfs/bnode.c | 2 + fs/hfsplus/bnode.c | 2 + fs/isofs/rock.c | 11 + fs/nfs/dir.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 153 +++--- fs/nfs/flexfilelayout/flexfilelayout.h | 27 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 54 +- fs/nfs/localio.c | 2 +- fs/nfs_common/nfslocalio.c | 8 +- fs/nfsd/localio.c | 2 + fs/nfsd/nfs4layouts.c | 4 +- fs/nfsd/nfs4recover.c | 118 ++--- fs/nfsd/nfs4state.c | 35 +- fs/nfsd/nfsctl.c | 4 +- fs/nilfs2/segment.c | 22 + fs/ntfs3/attrib.c | 14 + fs/ntfs3/dir.c | 2 +- fs/ntfs3/file.c | 30 +- fs/ntfs3/frecord.c | 59 ++- fs/ntfs3/fslog.c | 20 +- fs/ntfs3/inode.c | 10 +- fs/ntfs3/ntfs_fs.h | 4 +- fs/smb/client/cifsacl.c | 2 +- fs/smb/client/file.c | 2 +- fs/smb/client/smb2misc.c | 52 +- fs/smb/client/smb2ops.c | 18 +- fs/smb/client/smb2pdu.c | 22 +- fs/smb/server/smb2pdu.c | 101 ++-- fs/smb/server/vfs.c | 18 +- fs/smb/server/vfs_cache.c | 5 + fs/smb/server/vfs_cache.h | 2 + fs/udf/balloc.c | 5 +- fs/udf/super.c | 11 +- fs/userfaultfd.c | 14 +- fs/xfs/libxfs/xfs_bmap_btree.h | 2 +- fs/xfs/libxfs/xfs_defer.c | 2 +- fs/xfs/libxfs/xfs_exchmaps.c | 2 +- fs/xfs/scrub/dirtree.c | 16 +- fs/xfs/scrub/dqiterate.c | 2 +- fs/xfs/scrub/inode_repair.c | 4 +- fs/xfs/scrub/scrub.h | 6 +- fs/xfs/scrub/xfarray.c | 3 +- fs/xfs/xfs_dquot.c | 16 +- fs/xfs/xfs_log_recover.c | 15 +- fs/xfs/xfs_qm.c | 5 +- fs/xfs/xfs_reflink.c | 36 ++ include/crypto/drbg.h | 18 +- include/linux/damon.h | 8 +- include/linux/f2fs_fs.h | 1 + include/linux/fs.h | 5 + include/linux/fwnode.h | 2 + include/linux/glob.h | 1 + include/linux/hid-sensor-hub.h | 25 + include/linux/nfslocalio.h | 7 +- include/linux/vfio_pci_core.h | 15 +- include/net/bonding.h | 1 + init/Kconfig | 1 + io_uring/io-wq.c | 2 +- kernel/audit.c | 21 +- kernel/bpf/btf.c | 9 +- kernel/bpf/cgroup.c | 2 +- kernel/bpf/devmap.c | 7 + kernel/events/core.c | 19 +- kernel/locking/rtmutex.c | 18 +- kernel/locking/rtmutex_api.c | 2 +- kernel/module/decompress.c | 2 + kernel/sched/features.h | 8 + kernel/time/jiffies.c | 11 +- kernel/time/posix-cpu-timers.c | 1 + kernel/trace/trace_events_filter.c | 6 +- lib/debugobjects.c | 17 + lib/glob.c | 31 +- mm/damon/ops-common.c | 1 + mm/filemap.c | 2 +- mm/khugepaged.c | 41 +- mm/madvise.c | 3 +- mm/mincore.c | 3 +- mm/mmap.c | 2 +- mm/shrinker.c | 13 +- mm/shrinker_debug.c | 14 +- mm/slub.c | 18 +- mm/swapfile.c | 1 + mm/vmalloc.c | 1 + net/6lowpan/nhc.c | 2 +- net/bluetooth/af_bluetooth.c | 17 +- net/bluetooth/bnep/core.c | 27 +- net/bluetooth/iso.c | 13 +- net/bluetooth/l2cap_core.c | 36 +- net/bluetooth/l2cap_sock.c | 4 +- net/bluetooth/mgmt.c | 3 + net/bridge/netfilter/ebtables.c | 9 + net/core/netpoll.c | 9 +- net/ipv4/igmp.c | 1 + net/ipv4/sysctl_net_ipv4.c | 10 +- net/ipv4/tcp_output.c | 4 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 2 +- net/key/af_key.c | 1 + net/netfilter/ipset/ip_set_core.c | 8 +- net/netfilter/nf_conntrack_netlink.c | 2 +- net/netfilter/nfnetlink_log.c | 26 +- net/netfilter/nfnetlink_queue.c | 16 +- net/netfilter/xt_u32.c | 16 +- net/tipc/bcast.c | 22 +- net/tipc/bcast.h | 2 +- net/tipc/node.c | 15 +- security/apparmor/net.c | 1 + sound/core/seq/seq_memory.c | 2 +- sound/firewire/isight.c | 3 +- sound/isa/gus/gus_pcm.c | 2 + sound/pci/cmipci.c | 6 + sound/pci/es1938.c | 2 + sound/pci/ice1712/aureon.c | 2 + sound/pci/ice1712/ice1712.c | 8 + sound/pci/ice1712/ice1724.c | 6 + sound/pci/ymfpci/ymfpci_main.c | 6 + sound/usb/caiaq/input.c | 2 +- sound/usb/mixer_quirks.c | 101 ++-- sound/usb/mixer_scarlett.c | 4 +- sound/usb/mixer_us16x08.c | 127 +++-- sound/virtio/virtio_kctl.c | 50 ++ sound/virtio/virtio_pcm.c | 3 +- sound/virtio/virtio_pcm_ops.c | 3 +- tools/mm/slabinfo.c | 6 +- tools/perf/trace/beauty/fcntl.c | 16 + tools/testing/selftests/mm/droppable.c | 48 +- tools/testing/selftests/mm/pagemap_ioctl.c | 12 +- tools/usb/usbip/libsrc/usbip_common.c | 2 + tools/usb/usbip/libsrc/usbip_device_driver.c | 4 + tools/usb/usbip/libsrc/vhci_driver.c | 1 + 328 files changed, 3358 insertions(+), 1646 deletions(-)
# Librecast Test Results
020/020 [ OK ] liblcrq
010/010 [ OK ] libmld
120/120 [ OK ] liblibrecast
CPU/kernel: Linux auntie 6.12.96-rc2-g6c7577041b6a #1 SMP PREEMPT_DYNAMIC Fri Jul 17 10:46:59 -00 2026 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux
Quoted 9 lines · Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.12.96 release. There are 357 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Sun, 19 Jul 2026 10:17:43 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at:
Quoted 8 lines
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.96-rc2.gzor in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.gitlinux-6.12.y
and the diffstat can be found below.thanks,
greg k-h
On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on BMIPS_GENERIC:
Signature · 1 line
Florian
Hi!
Quoted 4 lines
This is the start of the stable review cycle for the 6.12.96 release. There are 357 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
CIP testing did not find any problems here:
https://gitlab.com/cip-project/cip-testing/linux-stable-rc-ci/-/tree/linux-6.12.y
Best regards,
Pavel
Am 17.07.2026 um 12:41 schrieb Greg Kroah-Hartman:
Quoted 4 lines
This is the start of the stable review cycle for the 6.12.96 release. There are 357 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Just like rc1, rc2 builds, boots and works fine on my 2-socket Ivy Bridge Xeon E5-2697 v2 server. No dmesg oddities or regressions found.
Beste Grüße,
Peter Schneider
Signature · 8 lines
Climb the mountain not to plant your flag, but to embrace the challenge, enjoy the air and behold the view. Climb it so you can see the world, not so the world can see you. -- David McCullough Jr. OpenPGP: 0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244 Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc https://keys.mailvelope.com/pks/lookup?op=get&[email protected] https://keys.mailvelope.com/pks/lookup?op=get&[email protected]
Quoted 4 lines · Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.12.96 release. There are 357 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Quoted 8 lines · On Fri, 17 Jul 2026 12:41:28 +0200 Greg Kroah-Hartman…
This is the start of the stable review cycle for the 6.12.96 release. There are 357 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Sun, 19 Jul 2026 10:17:43 +0000. Anything received after that time might be too late.
Boot-tested under QEMU for Rust x86_64, arm64 and riscv64; built-tested for loongarch64:
Thanks!
Cheers,
Miguel