Linux 6.1.189
Greg Kroah-Hartman
maintainerI'm announcing the release of the 6.1.189 kernel.
All users of the 6.1 kernel series must upgrade.
The updated 6.1.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/ABI/testing/sysfs-devices-platform-trackpoint | 2 Documentation/networking/ip-sysctl.rst | 2 Documentation/s390/pci.rst | 152 Documentation/s390/vfio-ccw.rst | 2 Makefile | 2 arch/alpha/include/uapi/asm/fpu.h | 8 arch/alpha/kernel/traps.c | 6 arch/alpha/math-emu/math.c | 88 arch/arm/mach-socfpga/Kconfig | 2 arch/arm/mach-ux500/cpu-db8500.c | 6 arch/arm/mm/cache-feroceon-l2.c | 2 arch/arm/mm/cache-tauros2.c | 2 arch/arm/mm/fault.c | 12 arch/arm64/boot/dts/qcom/sdm845.dtsi | 64 arch/arm64/boot/dts/qcom/sm8150.dtsi | 8 arch/arm64/boot/dts/qcom/sm8250.dtsi | 12 arch/arm64/boot/dts/qcom/sm8350.dtsi | 8 arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 arch/arm64/boot/dts/qcom/sm8550.dtsi | 8 arch/arm64/boot/dts/renesas/r8a779f0.dtsi | 1 arch/arm64/include/asm/daifflags.h | 10 arch/arm64/include/asm/fixmap.h | 6 arch/arm64/include/asm/kprobes.h | 6 arch/arm64/include/asm/percpu.h | 16 arch/arm64/kernel/hibernate-asm.S | 2 arch/arm64/kernel/probes/kprobes.c | 23 arch/mips/cavium-octeon/octeon-platform.c | 4 arch/mips/kernel/cps-vec.S | 6 arch/mips/net/bpf_jit_comp32.c | 2 arch/mips/net/bpf_jit_comp64.c | 3 arch/powerpc/kernel/eeh_driver.c | 2 arch/powerpc/kernel/iommu.c | 2 arch/powerpc/kernel/smp.c | 1 arch/powerpc/kexec/file_load_64.c | 2 arch/powerpc/kvm/book3s_hv.c | 4 arch/powerpc/kvm/book3s_hv_nested.c | 2 arch/powerpc/kvm/book3s_hv_uvmem.c | 5 arch/powerpc/platforms/pseries/kexec.c | 13 arch/riscv/kvm/vcpu_timer.c | 5 arch/s390/crypto/aes_s390.c | 16 arch/s390/include/asm/debug.h | 8 arch/s390/kernel/debug.c | 15 arch/sh/drivers/push-switch.c | 2 arch/sparc/Kconfig | 1 arch/sparc/kernel/uprobes.c | 1 arch/x86/events/intel/core.c | 55 arch/x86/pci/fixup.c | 99 block/blk-cgroup.c | 13 block/blk-mq.c | 8 crypto/Makefile | 5 drivers/acpi/acpica/dsmethod.c | 43 drivers/acpi/acpica/evhandler.c | 11 drivers/acpi/acpica/exconfig.c | 26 drivers/acpi/acpica/exoparg3.c | 2 drivers/acpi/acpica/nsnames.c | 6 drivers/acpi/acpica/nsprepkg.c | 7 drivers/acpi/acpica/nsxfname.c | 4 drivers/acpi/acpica/psargs.c | 134 drivers/acpi/acpica/psloop.c | 30 drivers/acpi/acpica/psparse.c | 14 drivers/acpi/acpica/utcopy.c | 10 drivers/acpi/acpica/utresrc.c | 30 drivers/acpi/pci_root.c | 4 drivers/ata/ahci.c | 22 drivers/ata/libahci.c | 15 drivers/ata/libata-pmp.c | 7 drivers/base/core.c | 119 drivers/block/sunvdc.c | 26 drivers/bluetooth/btmtksdio.c | 4 drivers/bluetooth/btusb.c | 41 drivers/bluetooth/hci_mrvl.c | 3 drivers/bus/fsl-mc/fsl-mc-bus.c | 46 drivers/char/ipmi/ipmi_si_platform.c | 5 drivers/char/nvram.c | 16 drivers/char/virtio_console.c | 22 drivers/clk/at91/pmc.h | 2 drivers/clk/clk-scpi.c | 2 drivers/clk/keystone/sci-clk.c | 8 drivers/clk/renesas/renesas-cpg-mssr.c | 3 drivers/clk/samsung/clk-exynos850.c | 5 drivers/clk/socfpga/clk-agilex.c | 2 drivers/clk/ux500/clk-prcmu.c | 20 drivers/clk/ux500/u8500_of_clk.c | 2 drivers/clocksource/timer-orion.c | 2 drivers/cpufreq/cpufreq.c | 6 drivers/cpuidle/cpuidle-ux500.c | 6 drivers/crypto/allwinner/Kconfig | 16 drivers/crypto/allwinner/sun8i-ce/Makefile | 1 drivers/crypto/allwinner/sun8i-ce/sun8i-ce-core.c | 55 drivers/crypto/allwinner/sun8i-ce/sun8i-ce-prng.c | 160 drivers/crypto/allwinner/sun8i-ce/sun8i-ce.h | 29 drivers/crypto/allwinner/sun8i-ss/Makefile | 1 drivers/crypto/allwinner/sun8i-ss/sun8i-ss-core.c | 39 drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c | 170 drivers/crypto/allwinner/sun8i-ss/sun8i-ss.h | 23 drivers/crypto/atmel-ecc.c | 3 drivers/crypto/ixp4xx_crypto.c | 25 drivers/dma/dmaengine.c | 10 drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 11 drivers/dma/mmp_pdma.c | 2 drivers/dma/sprd-dma.c | 3 drivers/dma/sun6i-dma.c | 9 drivers/dma/ti/k3-udma-glue.c | 5 drivers/dma/xilinx/xilinx_dma.c | 26 drivers/edac/edac_device_sysfs.c | 11 drivers/edac/igen6_edac.c | 27 drivers/firmware/arm_scmi/base.c | 15 drivers/firmware/arm_scmi/sensors.c | 10 drivers/firmware/arm_scpi.c | 4 drivers/firmware/stratix10-svc.c | 4 drivers/gpio/gpio-arizona.c | 8 drivers/gpio/gpio-dwapb.c | 17 drivers/gpio/gpio-pisosr.c | 4 drivers/gpio/gpio-zynq.c | 10 drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 4 drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 drivers/gpu/drm/amd/amdgpu/atom.c | 9 drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 9 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c | 7 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 20 drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 31 drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 3 drivers/gpu/drm/arm/display/komeda/komeda_dev.c | 6 drivers/gpu/drm/arm/display/komeda/komeda_drv.c | 14 drivers/gpu/drm/arm/malidp_drv.c | 22 drivers/gpu/drm/ast/ast_drv.h | 52 drivers/gpu/drm/bridge/tc358768.c | 2 drivers/gpu/drm/drm_atomic_helper.c | 20 drivers/gpu/drm/drm_atomic_uapi.c | 13 drivers/gpu/drm/drm_gem.c | 10 drivers/gpu/drm/gma500/oaktrail_hdmi_i2c.c | 21 drivers/gpu/drm/gud/gud_drv.c | 1 drivers/gpu/drm/gud/gud_pipe.c | 4 drivers/gpu/drm/i915/gem/i915_gem_object.c | 2 drivers/gpu/drm/i915/i915_query.c | 4 drivers/gpu/drm/logicvc/Kconfig | 1 drivers/gpu/drm/msm/adreno/adreno_gpu.c | 2 drivers/gpu/drm/msm/dp/dp_display.c | 14 drivers/gpu/drm/msm/dsi/dsi.h | 1 drivers/gpu/drm/msm/dsi/dsi_host.c | 38 drivers/gpu/drm/msm/dsi/phy/dsi_phy.c | 4 drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 8 drivers/gpu/drm/nouveau/nouveau_bo.c | 3 drivers/gpu/drm/nouveau/nouveau_drm.c | 5 drivers/gpu/drm/nouveau/nouveau_gem.c | 2 drivers/gpu/drm/nouveau/nvif/vmm.c | 1 drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c | 23 drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c | 2 drivers/gpu/drm/panel/panel-simple.c | 28 drivers/gpu/drm/virtio/virtgpu_display.c | 2 drivers/gpu/drm/virtio/virtgpu_gem.c | 2 drivers/gpu/drm/virtio/virtgpu_ioctl.c | 6 drivers/gpu/drm/virtio/virtgpu_vram.c | 17 drivers/gpu/host1x/bus.c | 4 drivers/hid/amd-sfh-hid/amd_sfh_common.h | 4 drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 10 drivers/hid/bpf/progs/Huion__Inspiroy-Frego-M.bpf.c | 87 drivers/hid/hid-alps.c | 6 drivers/hid/hid-hyperv.c | 58 drivers/hid/hid-ids.h | 3 drivers/hid/hid-logitech-hidpp.c | 11 drivers/hid/hid-quirks.c | 3 drivers/hid/wacom_sys.c | 5 drivers/hwmon/adt7462.c | 8 drivers/hwmon/applesmc.c | 7 drivers/hwmon/aspeed-pwm-tacho.c | 4 drivers/hwmon/gpio-fan.c | 13 drivers/hwmon/pmbus/lm25066.c | 54 drivers/hwmon/pmbus/pmbus.h | 3 drivers/hwmon/pmbus/pmbus_core.c | 4 drivers/hwmon/pmbus/tps53679.c | 11 drivers/hwmon/w83791d.c | 1 drivers/hwmon/w83793.c | 4 drivers/i2c/busses/i2c-at91-core.c | 3 drivers/i2c/busses/i2c-at91-master.c | 12 drivers/i2c/busses/i2c-at91.h | 1 drivers/i2c/busses/i2c-imx.c | 2 drivers/i2c/i2c-core-smbus.c | 12 drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 4 drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 4 drivers/iio/accel/mma8452.c | 19 drivers/iio/adc/qcom-spmi-iadc.c | 18 drivers/iio/light/stk3310.c | 76 drivers/infiniband/core/iwpm_util.c | 9 drivers/infiniband/core/mad.c | 3 drivers/infiniband/core/ucma.c | 7 drivers/infiniband/core/umem.c | 18 drivers/infiniband/core/verbs.c | 12 drivers/infiniband/hw/efa/efa_com.c | 7 drivers/infiniband/hw/efa/efa_com.h | 1 drivers/infiniband/hw/efa/efa_main.c | 33 drivers/infiniband/hw/irdma/utils.c | 2 drivers/infiniband/hw/irdma/verbs.c | 2 drivers/infiniband/hw/mlx4/sysfs.c | 4 drivers/infiniband/hw/mlx5/cq.c | 3 drivers/infiniband/hw/mlx5/main.c | 11 drivers/infiniband/sw/rxe/rxe_mcast.c | 50 drivers/infiniband/sw/siw/siw_cm.c | 75 drivers/infiniband/sw/siw/siw_qp_rx.c | 2 drivers/infiniband/ulp/ipoib/ipoib.h | 7 drivers/infiniband/ulp/ipoib/ipoib_ib.c | 12 drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 16 drivers/infiniband/ulp/iser/iser_initiator.c | 16 drivers/infiniband/ulp/isert/ib_isert.c | 22 drivers/infiniband/ulp/isert/ib_isert.h | 2 drivers/infiniband/ulp/rtrs/rtrs-clt.c | 8 drivers/infiniband/ulp/rtrs/rtrs-clt.h | 2 drivers/infiniband/ulp/rtrs/rtrs-srv.c | 12 drivers/input/evdev.c | 2 drivers/input/input-compat.c | 2 drivers/input/joystick/xpad.c | 10 drivers/input/keyboard/adp5588-keys.c | 12 drivers/input/keyboard/atkbd.c | 8 drivers/input/misc/soc_button_array.c | 16 drivers/input/mouse/synaptics.c | 8 drivers/input/rmi4/rmi_driver.c | 13 drivers/input/rmi4/rmi_smbus.c | 10 drivers/input/serio/i8042-acpipnpio.h | 7 drivers/iommu/rockchip-iommu.c | 8 drivers/irqchip/irq-gic-v3-its.c | 1 drivers/leds/leds-pca9532.c | 8 drivers/leds/uleds.c | 11 drivers/mailbox/mailbox.c | 6 drivers/md/raid5.c | 35 drivers/media/i2c/video-i2c.c | 7 drivers/media/pci/dm1105/dm1105.c | 7 drivers/media/pci/intel/ipu3/cio2-bridge.c | 5 drivers/media/platform/verisilicon/hantro_g2_hevc_dec.c | 6 drivers/media/rc/imon.c | 4 drivers/media/rc/mceusb.c | 2 drivers/media/usb/as102/as102_usb_drv.c | 73 drivers/media/usb/em28xx/em28xx-video.c | 4 drivers/media/v4l2-core/v4l2-ctrls-core.c | 12 drivers/media/v4l2-core/v4l2-h264.c | 3 drivers/memstick/core/ms_block.c | 2 drivers/mfd/ab8500-core.c | 2 drivers/mfd/db8500-prcmu.c | 6 drivers/mfd/rsmu_i2c.c | 2 drivers/mfd/rsmu_spi.c | 2 drivers/misc/habanalabs/common/device.c | 9 drivers/misc/habanalabs/common/habanalabs.h | 1 drivers/misc/habanalabs/common/habanalabs_drv.c | 1 drivers/misc/habanalabs/common/memory_mgr.c | 13 drivers/mmc/core/bus.c | 2 drivers/mmc/core/host.c | 1 drivers/mmc/core/queue.c | 8 drivers/mmc/core/sdio_uart.c | 3 drivers/mmc/host/davinci_mmc.c | 16 drivers/mmc/host/mmc_spi.c | 1 drivers/mmc/host/mxcmmc.c | 4 drivers/mmc/host/renesas_sdhi_internal_dmac.c | 2 drivers/mmc/host/rtsx_pci_sdmmc.c | 5 drivers/mmc/host/sdhci-of-aspeed.c | 5 drivers/mmc/host/sdhci_am654.c | 4 drivers/mmc/host/sh_mmcif.c | 3 drivers/net/bonding/bond_alb.c | 32 drivers/net/bonding/bond_main.c | 4 drivers/net/dsa/bcm_sf2_cfp.c | 2 drivers/net/dsa/mv88e6xxx/chip.c | 23 drivers/net/dsa/realtek/rtl8365mb.c | 14 drivers/net/dsa/sja1105/sja1105_flower.c | 4 drivers/net/ethernet/allwinner/sun4i-emac.c | 2 drivers/net/ethernet/amd/au1000_eth.c | 3 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 3 drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 3 drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 3 drivers/net/ethernet/atheros/atlx/atl1.c | 3 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 19 drivers/net/ethernet/broadcom/genet/bcmgenet.c | 63 drivers/net/ethernet/broadcom/genet/bcmgenet.h | 5 drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 20 drivers/net/ethernet/broadcom/tg3.c | 15 drivers/net/ethernet/cadence/macb.h | 2 drivers/net/ethernet/cadence/macb_main.c | 39 drivers/net/ethernet/cadence/macb_ptp.c | 9 drivers/net/ethernet/cavium/thunder/nicvf_main.c | 8 drivers/net/ethernet/cortina/gemini.c | 79 drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 69 drivers/net/ethernet/freescale/fman/fman.c | 1 drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c | 3 drivers/net/ethernet/huawei/hinic/hinic_hw_mbox.c | 4 drivers/net/ethernet/ibm/emac/core.c | 3 drivers/net/ethernet/ibm/emac/mal.c | 6 drivers/net/ethernet/intel/e1000e/ethtool.c | 19 drivers/net/ethernet/intel/ice/ice_common.c | 9 drivers/net/ethernet/intel/ice/ice_sched.c | 4 drivers/net/ethernet/intel/ice/ice_txrx.c | 20 drivers/net/ethernet/intel/ice/ice_type.h | 2 drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 3 drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 10 drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c | 10 drivers/net/ethernet/mellanox/mlx5/core/Kconfig | 2 drivers/net/ethernet/mellanox/mlx5/core/en/port.c | 15 drivers/net/ethernet/mellanox/mlx5/core/en/rep/bridge.c | 9 drivers/net/ethernet/mellanox/mlx5/core/en/tc/sample.c | 7 drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 3 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 11 drivers/net/ethernet/mellanox/mlx5/core/esw/bridge.c | 44 drivers/net/ethernet/mellanox/mlx5/core/esw/bridge.h | 10 drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 8 drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads_termtbl.c | 7 drivers/net/ethernet/micrel/ks8842.c | 4 drivers/net/ethernet/micrel/ks8851_common.c | 10 drivers/net/ethernet/micrel/ks8851_spi.c | 4 drivers/net/ethernet/micrel/ksz884x.c | 4 drivers/net/ethernet/microchip/lan743x_main.c | 2 drivers/net/ethernet/socionext/netsec.c | 2 drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c | 5 drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c | 4 drivers/net/ethernet/stmicro/stmmac/dwxgmac2.h | 4 drivers/net/ethernet/stmicro/stmmac/hwif.h | 2 drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 4 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 9 drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c | 1 drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c | 106 drivers/net/ethernet/ti/cpsw_new.c | 4 drivers/net/ethernet/ti/netcp_core.c | 2 drivers/net/fddi/skfp/skfddi.c | 3 drivers/net/ppp/ppp_async.c | 89 drivers/net/ppp/ppp_synctty.c | 14 drivers/net/usb/catc.c | 15 drivers/net/usb/cdc_mbim.c | 5 drivers/net/usb/cx82310_eth.c | 1 drivers/net/usb/hso.c | 2 drivers/net/usb/lan78xx.c | 9 drivers/net/usb/pegasus.c | 54 drivers/net/usb/pegasus.h | 3 drivers/net/usb/qmi_wwan.c | 2 drivers/net/usb/sr9700.c | 3 drivers/net/veth.c | 2 drivers/net/vrf.c | 2 drivers/net/vxlan/vxlan_core.c | 11 drivers/net/wireless/ath/ath11k/dp_rx.c | 50 drivers/net/wireless/ath/ath9k/hif_usb.c | 12 drivers/net/wireless/ath/ath9k/hif_usb.h | 2 drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c | 2 drivers/net/wireless/broadcom/brcm80211/brcmsmac/mac80211_if.c | 4 drivers/net/wireless/intel/ipw2x00/libipw_rx.c | 10 drivers/net/wireless/intel/iwlegacy/common.c | 2 drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 5 drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 13 drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 6 drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 4 drivers/net/wireless/intersil/p54/eeprom.c | 22 drivers/net/wireless/mac80211_hwsim.c | 45 drivers/net/wireless/marvell/libertas/tx.c | 7 drivers/net/wireless/marvell/libertas_tf/main.c | 2 drivers/net/wireless/marvell/mwifiex/cfg80211.c | 8 drivers/net/wireless/marvell/mwifiex/fw.h | 18 drivers/net/wireless/marvell/mwifiex/join.c | 8 drivers/net/wireless/marvell/mwifiex/pcie.c | 2 drivers/net/wireless/marvell/mwifiex/scan.c | 54 drivers/net/wireless/marvell/mwifiex/sta_cmd.c | 2 drivers/net/wireless/marvell/mwifiex/util.c | 10 drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 33 drivers/net/wireless/mediatek/mt76/pci.c | 8 drivers/net/wireless/microchip/wilc1000/cfg80211.c | 14 drivers/net/wireless/microchip/wilc1000/wlan.c | 9 drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 2 drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 2 drivers/net/wireless/ralink/rt2x00/rt2800pci.c | 2 drivers/net/wireless/ralink/rt2x00/rt61pci.c | 2 drivers/net/wireless/realtek/rtw88/fw.c | 3 drivers/net/wireless/realtek/rtw88/main.c | 4 drivers/net/wireless/realtek/rtw89/pci.c | 16 drivers/net/wireless/rsi/rsi_91x_hal.c | 8 drivers/net/wireless/rsi/rsi_91x_mgmt.c | 8 drivers/net/wireless/ti/wlcore/main.c | 4 drivers/net/wireless/virt_wifi.c | 4 drivers/net/wwan/mhi_wwan_mbim.c | 28 drivers/net/wwan/t7xx/t7xx_netdev.c | 4 drivers/net/wwan/t7xx/t7xx_pci.c | 3 drivers/nfc/microread/microread.c | 6 drivers/nfc/nfcmrvl/fw_dnld.c | 11 drivers/nfc/pn533/pn533.c | 14 drivers/nfc/pn533/pn533.h | 4 drivers/nfc/pn533/usb.c | 4 drivers/nfc/pn544/pn544.c | 7 drivers/nfc/port100.c | 7 drivers/nfc/st21nfca/core.c | 12 drivers/nfc/st21nfca/i2c.c | 29 drivers/nfc/virtual_ncidev.c | 3 drivers/nvme/host/apple.c | 182 - drivers/nvme/host/core.c | 6 drivers/nvme/host/rdma.c | 18 drivers/opp/of.c | 2 drivers/pci/controller/dwc/pcie-intel-gw.c | 19 drivers/pci/controller/pcie-altera.c | 2 drivers/pci/controller/pcie-iproc.c | 2 drivers/pci/controller/pcie-mediatek.c | 2 drivers/pci/controller/pcie-rockchip-host.c | 2 drivers/pci/pci-driver.c | 10 drivers/pci/pci-sysfs.c | 11 drivers/pci/pci.c | 24 drivers/pci/proc.c | 79 drivers/pci/quirks.c | 3 drivers/pci/switch/switchtec.c | 16 drivers/perf/arm-cmn.c | 10 drivers/pinctrl/meson/pinctrl-meson-s4.c | 2 drivers/pinctrl/pinctrl-single.c | 3 drivers/pinctrl/renesas/pinctrl-rzv2m.c | 4 drivers/platform/x86/dell/dell-laptop.c | 9 drivers/platform/x86/intel/hid.c | 7 drivers/ptp/ptp_ocp.c | 1 drivers/regulator/core.c | 163 drivers/regulator/da9121-regulator.c | 18 drivers/regulator/db8500-prcmu.c | 12 drivers/rtc/rtc-aspeed.c | 1 drivers/rtc/rtc-bq32k.c | 9 drivers/s390/char/zcore.c | 8 drivers/s390/cio/cio.c | 11 drivers/s390/cio/device.c | 2 drivers/s390/cio/device_ops.c | 14 drivers/s390/net/qeth_l2.h | 3 drivers/s390/net/qeth_l2_main.c | 26 drivers/s390/net/qeth_l2_sys.c | 7 drivers/scsi/bfa/bfa_fcs_lport.c | 2 drivers/scsi/hisi_sas/hisi_sas.h | 3 drivers/scsi/hisi_sas/hisi_sas_main.c | 23 drivers/scsi/hisi_sas/hisi_sas_v1_hw.c | 2 drivers/scsi/hisi_sas/hisi_sas_v2_hw.c | 2 drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 4 drivers/scsi/libiscsi_tcp.c | 3 drivers/scsi/megaraid/megaraid_sas_base.c | 4 drivers/scsi/mpi3mr/mpi3mr_transport.c | 8 drivers/scsi/mpt3sas/mpt3sas_base.c | 5 drivers/scsi/pm8001/pm8001_ctl.c | 8 drivers/scsi/pm8001/pm80xx_hwi.c | 7 drivers/scsi/qla2xxx/qla_os.c | 2 drivers/scsi/scsi_error.c | 2 drivers/soc/ti/pm33xx.c | 2 drivers/soundwire/bus.c | 4 drivers/soundwire/cadence_master.c | 7 drivers/soundwire/dmi-quirks.c | 35 drivers/soundwire/slave.c | 4 drivers/spi/spi-dw-dma.c | 3 drivers/spi/spi-dw.h | 1 drivers/spi/spi-xilinx.c | 6 drivers/spi/spi-zynqmp-gqspi.c | 52 drivers/spi/spi.c | 9 drivers/staging/fbtft/fbtft-core.c | 9 drivers/target/iscsi/iscsi_target.c | 15 drivers/tee/optee/call.c | 3 drivers/thermal/db8500_thermal.c | 10 drivers/thermal/tegra/soctherm.c | 6 drivers/thunderbolt/icm.c | 10 drivers/thunderbolt/tb.c | 6 drivers/thunderbolt/xdomain.c | 41 drivers/tty/serial/8250/8250_port.c | 7 drivers/usb/atm/xusbatm.c | 6 drivers/usb/class/cdc-acm.c | 6 drivers/usb/class/usbtmc.c | 2 drivers/usb/core/hcd.c | 14 drivers/usb/gadget/udc/aspeed_udc.c | 7 drivers/usb/gadget/udc/core.c | 7 drivers/usb/gadget/udc/goku_udc.c | 3 drivers/usb/host/Kconfig | 2 drivers/usb/host/xhci-ring.c | 6 drivers/usb/host/xhci.c | 4 drivers/usb/usbip/vhci_sysfs.c | 52 drivers/vdpa/ifcvf/ifcvf_main.c | 11 drivers/vdpa/vdpa_sim/vdpa_sim_blk.c | 3 drivers/vhost/scsi.c | 3 drivers/vhost/vdpa.c | 12 drivers/video/fbdev/pm2fb.c | 1 drivers/video/fbdev/vfb.c | 11 drivers/virtio/virtio_input.c | 9 drivers/virtio/virtio_pci_common.c | 4 drivers/watchdog/da9063_wdt.c | 4 drivers/watchdog/db8500_wdt.c | 22 drivers/watchdog/digicolor_wdt.c | 13 drivers/watchdog/msc313e_wdt.c | 88 drivers/watchdog/sp5100_tco.c | 6 drivers/watchdog/sunxi_wdt.c | 45 drivers/watchdog/watchdog_hrtimer_pretimeout.c | 1 drivers/xen/gntalloc.c | 13 drivers/xen/xen-front-pgdir-shbuf.c | 12 fs/9p/vfs_dir.c | 14 fs/affs/affs.h | 5 fs/affs/super.c | 6 fs/autofs/inode.c | 4 fs/befs/linuxvfs.c | 3 fs/bfs/inode.c | 3 fs/btrfs/ctree.c | 10 fs/btrfs/extent_io.c | 33 fs/btrfs/inode.c | 3 fs/btrfs/ioctl.c | 11 fs/btrfs/relocation.c | 47 fs/btrfs/transaction.c | 13 fs/btrfs/tree-checker.c | 43 fs/btrfs/tree-mod-log.c | 73 fs/btrfs/volumes.c | 10 fs/btrfs/zoned.c | 2 fs/cachefiles/namei.c | 1 fs/configfs/dir.c | 12 fs/erofs/zdata.c | 13 fs/exec.c | 22 fs/f2fs/inline.c | 7 fs/freevxfs/vxfs_bmap.c | 3 fs/fs-writeback.c | 25 fs/fuse/file.c | 3 fs/hfs/catalog.c | 9 fs/hfs/dir.c | 28 fs/hfs/hfs.h | 3 fs/hfs/hfs_fs.h | 2 fs/hfs/inode.c | 4 fs/hfsplus/catalog.c | 11 fs/hfsplus/dir.c | 28 fs/hfsplus/hfsplus_fs.h | 5 fs/hfsplus/inode.c | 40 fs/hfsplus/super.c | 2 fs/hpfs/super.c | 3 fs/isofs/inode.c | 3 fs/jfs/super.c | 3 fs/minix/inode.c | 3 fs/nfs/nfs42proc.c | 15 fs/ntfs3/dir.c | 4 fs/ntfs3/fslog.c | 26 fs/ntfs3/index.c | 41 fs/ntfs3/xattr.c | 4 fs/ocfs2/namei.c | 9 fs/ocfs2/xattr.c | 13 fs/ocfs2/xattr.h | 8 fs/omfs/inode.c | 6 fs/qnx4/inode.c | 3 fs/smb/client/cifsacl.c | 18 fs/smb/client/connect.c | 1 fs/smb/client/file.c | 5 fs/smb/client/misc.c | 19 fs/smb/client/readdir.c | 9 fs/smb/client/smb2ops.c | 31 fs/smb/client/smb2pdu.c | 7 fs/smb/client/transport.c | 11 fs/smb/server/ksmbd_work.h | 7 fs/smb/server/mgmt/share_config.c | 38 fs/smb/server/mgmt/user_session.c | 25 fs/smb/server/misc.c | 14 fs/smb/server/oplock.c | 16 fs/smb/server/oplock.h | 2 fs/smb/server/server.c | 20 fs/smb/server/smb2misc.c | 18 fs/smb/server/smb2pdu.c | 144 fs/smb/server/smbacl.c | 38 fs/smb/server/transport_ipc.c | 24 fs/smb/server/vfs.c | 14 fs/smb/server/vfs_cache.c | 3 fs/smb/server/vfs_cache.h | 7 fs/squashfs/xz_wrapper.c | 6 fs/ufs/cylinder.c | 10 fs/ufs/super.c | 17 fs/xfs/xfs_icache.c | 2 include/drm/drm_atomic_helper.h | 26 include/drm/drm_modeset_helper_vtables.h | 29 include/keys/request_key_auth-type.h | 2 include/linux/bitfield.h | 2 include/linux/bpf.h | 1 include/linux/compiler_attributes.h | 12 include/linux/dev_printk.h | 1 include/linux/firmware/intel/stratix10-smc.h | 18 include/linux/kcsan-checks.h | 6 include/linux/lockdep.h | 16 include/linux/lockdep_types.h | 8 include/linux/mailbox_controller.h | 2 include/linux/mfd/db8500-prcmu.h | 252 + include/linux/mfd/dbx500-prcmu.h | 596 --- include/linux/netdevice.h | 23 include/linux/platform_data/asoc-ux500-msp.h | 20 include/linux/rculist.h | 29 include/linux/rtnetlink.h | 7 include/linux/switchtec.h | 1 include/linux/thunderbolt.h | 2 include/linux/workqueue.h | 3 include/media/v4l2-hevc.h | 41 include/net/cfg80211.h | 9 include/net/devlink.h | 13 include/net/dst.h | 34 include/net/gue.h | 19 include/net/inet_hashtables.h | 2 include/net/ip.h | 14 include/net/ip6_route.h | 2 include/net/ip_fib.h | 5 include/net/mac80211.h | 9 include/net/netfilter/nf_conntrack.h | 5 include/net/netns/xfrm.h | 2 include/net/nfc/hci.h | 2 include/net/nfc/nfc.h | 3 include/net/route.h | 2 include/net/sch_generic.h | 2 include/rdma/ib_umem.h | 4 include/sound/hda_codec.h | 30 include/sound/hdaudio_ext.h | 2 include/trace/events/icmp.h | 13 init/main.c | 3 io_uring/io-wq.c | 1 kernel/bpf/bpf_local_storage.c | 49 kernel/bpf/bpf_lsm.c | 6 kernel/bpf/btf.c | 30 kernel/bpf/cgroup.c | 1 kernel/bpf/disasm.c | 5 kernel/bpf/hashtab.c | 24 kernel/bpf/helpers.c | 2 kernel/bpf/syscall.c | 5 kernel/bpf/verifier.c | 14 kernel/dma/coherent.c | 13 kernel/events/ring_buffer.c | 9 kernel/locking/lockdep.c | 230 + kernel/sched/fair.c | 45 kernel/time/clockevents.c | 33 kernel/time/tick-broadcast.c | 36 kernel/time/tick-internal.h | 2 kernel/trace/Makefile | 5 kernel/trace/bpf_trace.c | 4 kernel/trace/ring_buffer.c | 13 kernel/trace/trace_event_perf.c | 12 kernel/trace/trace_events_hist.c | 41 kernel/trace/trace_probe.c | 48 kernel/trace/trace_probe.h | 2 kernel/workqueue.c | 2 mm/backing-dev.c | 5 mm/damon/core.c | 13 net/8021q/vlan_dev.c | 5 net/9p/client.c | 2 net/appletalk/aarp.c | 5 net/atm/pppoatm.c | 42 net/bluetooth/bnep/core.c | 17 net/bluetooth/bnep/netdev.c | 8 net/bluetooth/eir.c | 10 net/bluetooth/hci_codec.c | 36 net/bluetooth/hci_sock.c | 20 net/bluetooth/hci_sync.c | 60 net/bluetooth/iso.c | 31 net/bluetooth/l2cap_core.c | 28 net/bluetooth/mgmt.c | 45 net/bluetooth/rfcomm/core.c | 6 net/bluetooth/rfcomm/sock.c | 19 net/bluetooth/smp.c | 17 net/bridge/br_arp_nd_proxy.c | 16 net/bridge/br_mst.c | 20 net/bridge/br_multicast.c | 2 net/bridge/br_stp_bpdu.c | 5 net/core/dev.c | 12 net/core/drop_monitor.c | 22 net/core/dst.c | 4 net/core/filter.c | 33 net/core/skbuff.c | 16 net/core/skmsg.c | 4 net/core/sock.c | 15 net/core/sock_map.c | 1 net/devlink/leftover.c | 99 net/hsr/hsr_forward.c | 2 net/hsr/hsr_netlink.c | 9 net/ieee802154/6lowpan/core.c | 2 net/ipv4/arp.c | 1 net/ipv4/esp4.c | 6 net/ipv4/fib_rules.c | 4 net/ipv4/fib_trie.c | 4 net/ipv4/fou_core.c | 6 net/ipv4/icmp.c | 45 net/ipv4/igmp.c | 2 net/ipv4/ip_fragment.c | 9 net/ipv4/ip_gre.c | 12 net/ipv4/ip_output.c | 4 net/ipv4/ip_tunnel_core.c | 6 net/ipv4/ip_vti.c | 4 net/ipv4/ipmr.c | 2 net/ipv4/netfilter.c | 4 net/ipv4/nexthop.c | 2 net/ipv4/route.c | 10 net/ipv4/sysctl_net_ipv4.c | 4 net/ipv4/tcp_fastopen.c | 4 net/ipv4/tcp_input.c | 3 net/ipv4/tcp_ipv4.c | 3 net/ipv4/tcp_metrics.c | 8 net/ipv4/tcp_output.c | 3 net/ipv4/udp.c | 4 net/ipv4/xfrm4_output.c | 2 net/ipv6/addrconf.c | 10 net/ipv6/esp6.c | 6 net/ipv6/exthdrs.c | 4 net/ipv6/exthdrs_core.c | 3 net/ipv6/ip6_fib.c | 4 net/ipv6/ip6_gre.c | 19 net/ipv6/ip6_tunnel.c | 26 net/ipv6/ip6_vti.c | 16 net/ipv6/ip6mr.c | 10 net/ipv6/mcast.c | 32 net/ipv6/netfilter/ip6_tables.c | 5 net/ipv6/netfilter/ip6t_rpfilter.c | 2 net/ipv6/netfilter/ip6t_rt.c | 11 net/ipv6/route.c | 22 net/ipv6/seg6.c | 4 net/ipv6/seg6_local.c | 3 net/ipv6/tcp_ipv6.c | 3 net/ipv6/xfrm6_output.c | 10 net/llc/llc_c_ac.c | 2 net/llc/llc_s_ac.c | 4 net/llc/llc_sap.c | 8 net/mac80211/cfg.c | 14 net/mac80211/debugfs.c | 2 net/mac80211/debugfs_netdev.c | 9 net/mac80211/ieee80211_i.h | 15 net/mac80211/iface.c | 28 net/mac80211/main.c | 4 net/mac80211/mesh.c | 1 net/mac80211/mlme.c | 6 net/mac80211/pm.c | 8 net/mac80211/status.c | 4 net/mac80211/tdls.c | 192 - net/mac80211/tx.c | 46 net/mac80211/util.c | 6 net/mptcp/options.c | 3 net/mptcp/protocol.c | 12 net/mptcp/protocol.h | 3 net/mptcp/subflow.c | 47 net/mptcp/syncookies.c | 5 net/netfilter/ipset/ip_set_hash_gen.h | 13 net/netfilter/ipvs/ip_vs_core.c | 6 net/netfilter/ipvs/ip_vs_sync.c | 20 net/netfilter/nf_conntrack_expect.c | 3 net/netfilter/nf_conntrack_netlink.c | 16 net/netfilter/nf_conntrack_proto_tcp.c | 10 net/netfilter/nf_conntrack_sip.c | 2 net/netfilter/nf_flow_table_core.c | 12 net/netfilter/nf_flow_table_offload.c | 7 net/netfilter/nf_log_syslog.c | 6 net/netfilter/nf_tables_api.c | 4 net/netfilter/nfnetlink_log.c | 28 net/netfilter/nfnetlink_queue.c | 77 net/netfilter/nft_nat.c | 2 net/netfilter/nft_set_pipapo_avx2.c | 1 net/netfilter/nft_synproxy.c | 3 net/netlabel/netlabel_unlabeled.c | 2 net/nfc/core.c | 15 net/nfc/digital_dep.c | 8 net/nfc/llcp.h | 1 net/nfc/llcp_commands.c | 2 net/nfc/llcp_core.c | 175 - net/nfc/llcp_sock.c | 65 net/nfc/nci/core.c | 10 net/nfc/netlink.c | 7 net/nfc/nfc.h | 3 net/openvswitch/conntrack.c | 14 net/openvswitch/flow.c | 4 net/openvswitch/flow_table.c | 4 net/packet/af_packet.c | 11 net/packet/internal.h | 2 net/phonet/pn_dev.c | 30 net/qrtr/af_qrtr.c | 4 net/rds/af_rds.c | 63 net/rds/connection.c | 102 net/rds/ib_cm.c | 27 net/rds/ib_frmr.c | 11 net/rds/ib_recv.c | 9 net/rds/message.c | 4 net/rds/send.c | 16 net/rds/tcp.c | 164 net/rds/tcp_listen.c | 6 net/sched/act_api.c | 136 net/sched/act_csum.c | 8 net/sched/act_ct.c | 5 net/sched/act_gate.c | 30 net/sched/cls_api.c | 2 net/sched/cls_route.c | 45 net/sched/cls_u32.c | 44 net/sched/sch_api.c | 2 net/sched/sch_drr.c | 13 net/sched/sch_ets.c | 12 net/sched/sch_fq_pie.c | 62 net/sched/sch_generic.c | 20 net/sched/sch_hfsc.c | 22 net/sched/sch_hhf.c | 15 net/sched/sch_pie.c | 2 net/sched/sch_sfq.c | 7 net/sched/sch_teql.c | 7 net/sctp/associola.c | 15 net/sctp/input.c | 7 net/sctp/ipv6.c | 10 net/sctp/protocol.c | 11 net/sctp/sm_make_chunk.c | 14 net/sctp/sm_sideeffect.c | 48 net/sctp/sm_statefuns.c | 7 net/smc/af_smc.c | 3 net/smc/smc_clc.c | 8 net/smc/smc_clc.h | 8 net/smc/smc_core.c | 2 net/smc/smc_ib.c | 10 net/sunrpc/xprtrdma/verbs.c | 21 net/tipc/group.c | 4 net/tipc/monitor.c | 3 net/tipc/name_table.c | 30 net/tipc/socket.c | 4 net/tls/tls_main.c | 11 net/tls/tls_sw.c | 6 net/unix/af_unix.c | 42 net/unix/garbage.c | 1 net/vmw_vsock/hyperv_transport.c | 2 net/vmw_vsock/vmci_transport.c | 2 net/wireless/mlme.c | 101 net/wireless/nl80211.c | 15 net/wireless/rdev-ops.h | 15 net/wireless/scan.c | 12 net/wireless/trace.h | 255 - net/wireless/util.c | 26 net/wireless/wext-sme.c | 9 net/xdp/xskmap.c | 2 net/xfrm/espintcp.c | 6 net/xfrm/xfrm_input.c | 11 net/xfrm/xfrm_user.c | 37 scripts/mod/modpost.c | 11 security/integrity/digsig_asymmetric.c | 4 security/integrity/ima/ima_appraise.c | 5 security/keys/gc.c | 4 security/keys/request_key_auth.c | 12 security/keys/trusted-keys/trusted_tpm2.c | 12 security/landlock/errata/abi-1.h | 15 security/landlock/fs.c | 40 security/selinux/avc.c | 5 sound/core/pcm_native.c | 35 sound/core/pcm_timer.c | 7 sound/core/seq/oss/seq_oss_rw.c | 3 sound/hda/ext/hdac_ext_controller.c | 6 sound/isa/es18xx.c | 4 sound/pci/ctxfi/cthw20k2.c | 1 sound/pci/hda/hda_codec.c | 119 sound/pci/hda/hda_controller.c | 26 sound/pci/hda/hda_proc.c | 4 sound/pci/hda/hda_sysfs.c | 77 sound/pci/hda/patch_conexant.c | 12 sound/pci/hda/patch_realtek.c | 19 sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 sound/soc/amd/yc/acp6x-mach.c | 7 sound/soc/amd/yc/acp6x-pdm-dma.c | 2 sound/soc/bcm/bcm63xx-i2s-whistler.c | 1 sound/soc/codecs/ab8500-codec.c | 537 +-- sound/soc/codecs/hdmi-codec.c | 6 sound/soc/codecs/mt6351.c | 1 sound/soc/codecs/pcm3168a.c | 20 sound/soc/codecs/rk3328_codec.c | 54 sound/soc/codecs/rt5645.c | 4 sound/soc/intel/atom/sst/sst_pci.c | 1 sound/soc/intel/avs/core.c | 13 sound/soc/intel/catpt/ipc.c | 8 sound/soc/intel/catpt/loader.c | 3 sound/soc/intel/catpt/registers.h | 12 sound/soc/intel/skylake/skl.c | 2 sound/soc/meson/aiu-acodec-ctrl.c | 3 sound/soc/meson/aiu-codec-ctrl.c | 3 sound/soc/qcom/qdsp6/q6apm.c | 10 sound/soc/rockchip/rockchip_pdm.c | 16 sound/soc/rockchip/rockchip_spdif.c | 1 sound/soc/sof/intel/hda.c | 2 sound/soc/sof/ipc4-topology.c | 10 sound/soc/sprd/sprd-pcm-compress.c | 15 sound/soc/sti/uniperif_reader.c | 4 sound/soc/ti/omap3pandora.c | 5 sound/soc/ux500/mop500.c | 8 sound/soc/ux500/ux500_msp_dai.c | 169 sound/soc/ux500/ux500_msp_dai.h | 11 sound/soc/ux500/ux500_msp_i2s.c | 330 + sound/soc/ux500/ux500_msp_i2s.h | 30 sound/soc/ux500/ux500_pcm.c | 83 sound/usb/6fire/chip.c | 40 sound/usb/6fire/comm.c | 42 sound/usb/6fire/comm.h | 2 sound/usb/6fire/midi.c | 64 sound/usb/6fire/midi.h | 2 sound/usb/6fire/pcm.c | 221 - sound/usb/6fire/pcm.h | 5 sound/usb/bcd2000/bcd2000.c | 33 sound/usb/caiaq/audio.c | 10 sound/usb/caiaq/device.c | 53 sound/usb/caiaq/device.h | 4 sound/usb/caiaq/input.c | 6 sound/usb/caiaq/midi.c | 6 sound/usb/mixer.c | 17 sound/usb/mixer_maps.c | 25 sound/usb/quirks-table.h | 22 sound/usb/quirks.c | 4 sound/usb/usx2y/us122l.c | 9 sound/usb/usx2y/usbusx2y.c | 45 sound/usb/usx2y/usbusx2y.h | 4 sound/virtio/virtio_card.c | 4 tools/bpf/bpftool/map.c | 5 tools/build/feature/test-bpf.c | 2 tools/lib/bpf/bpf.c | 2 tools/lib/bpf/gen_loader.c | 2 tools/lib/bpf/libbpf.c | 7 tools/lib/bpf/relo_core.c | 58 tools/perf/tests/shell/stat_bpf_counters.sh | 30 tools/perf/util/cs-etm.c | 81 tools/testing/selftests/alsa/mixer-test.c | 4 tools/testing/selftests/arm64/mte/check_gcr_el1_cswitch.c | 2 tools/testing/selftests/bpf/config | 1 tools/testing/selftests/bpf/prog_tests/bpf_nf.c | 7 tools/testing/selftests/bpf/progs/test_bpf_nf.c | 112 tools/testing/selftests/cgroup/test_kmem.c | 2 tools/testing/selftests/ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 2 tools/testing/selftests/landlock/fs_test.c | 1746 +++++++++- tools/testing/selftests/nci/nci_dev.c | 45 tools/testing/selftests/net/fib_nexthops.sh | 28 tools/testing/selftests/net/mptcp/mptcp_connect.c | 4 tools/testing/selftests/net/pmtu.sh | 2 tools/testing/selftests/powerpc/tm/tm.h | 8 tools/thermal/tmon/tui.c | 2 907 files changed, 11671 insertions(+), 6121 deletions(-)
Aamir Ahmed (4):
net: hinic: fix mailbox segment buffer overflow
Bluetooth: eir: validate service data length before reading UUID
net: usb: catc: bound the RX packet length in catc_rx_done()
nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()
Adrian Hunter (1):
i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA
Adrian Ng Ho Yin (1):
clk: socfpga: agilex: implement l3_main_free_clk
Adrian Wowk (1):
usbip: vhci_hcd: fix NULL deref in status_show_vhci
Adriana Stancu (1):
rtc: bq32000: add delay between RTC reads
Agalakov Daniil (1):
e1000e: limit endianness conversion to boundary words
Ai Chao (1):
ALSA: usb-audio: Add quirk flags for SC13A
Al Viro (1):
configfs_depend_prep(): pass configfs_dirent instead of dentry
Alan Borzeszkowski (1):
thunderbolt: Don't create multiple DMA tunnels on firmware connection manager
Aldo Ariel Panzardo (4):
nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()
Bluetooth: hci_sock: validate event length before filtering
Bluetooth: hci_sock: reject out-of-range OCF values
Bluetooth: L2CAP: validate frame length before control and FCS access
Alessandro Baldi (1):
media: imon: Add iMON VFD HID OEM v1.2 key mappings
Alessandro Schino (1):
ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()
Alex Bereza (2):
dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order
dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA
Alexander Chesnokov (1):
dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()
Alexandre Courbot (1):
scripts: modpost: detect and report truncated buf_printf() output
Alexei Turtanov (1):
Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026
Alexey Klimov (1):
clk: samsung: exynos850: mark APM I3C clocks as critical
Ali Ahmet Memis (3):
ufs: create the root dentry after loading cylinder metadata
ufs: validate cylinder group metadata before caching it
wifi: wilc1000: fix out-of-bounds read in P2P public action frames
Alice Mikityanska (2):
net/sched: act_csum: don't mangle UDP tunnel GSO packets
net: ipv6: Clamp to IP6_MAX_MTU in ip6_dst_mtu_maybe_forward
Allen Pais (1):
workqueue: Introduce from_work() helper for cleaner callback declarations
Allison Henderson (6):
net/rds: Don't sleep inside rds_ib_conn_path_shutdown net/rds: use wq_has_sleeper() in release_in_xmit() net/rds: use clear_bit_unlock() in release_refill() net/rds: clear cp_flags bits individually in rds_conn_path_reset() net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() net/rds: don't let rds_conn_shutdown() consume a concurrent drop
Alvin Šipraga (1):
Input: adp5588-keys - cache GPIO state before registering the gpiochip
Amit Machhiwal (2):
KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure
Andrea Mayer (1):
seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation
Andrea Righi (1):
sched/fair: Reject misfit pulls onto busy SMT siblings on asym-capacity
Andrei Faleichyk (1):
ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP
Andrew Stellman (1):
virtio-pci: return IRQ_HANDLED after non-zero ISR
Andy Shevchenko (1):
smb: client: transport: Fix debug printing in __release_mid()
Aohan Mei (3):
smb: client: reject userspace cifs.idmap descriptions
rds: ib: use rds_conn_drop() on protocol version mismatch
sctp: discard the rest of the packet on a stale-cookie error
Arash Golgol (2):
media: video-i2c: use vb2_video_unregister_device on driver removal
media: video-i2c: fix buffer queue ordering
Arnd Bergmann (4):
scsi: bfa: Reduce kernel stack usage in bfa_fcs_lport_fdmi_build_portattr_block()
eth: mlx5: fix macsec dependency
ASoC: ux500: remove platform_data support
ASoC: ux500: remove stedma40 references
Asad Kamal (1):
drm/amd/pm: bound pp_dpm_set_pp_table() memcpy
Aurelien DESBRIERES (1):
RDMA/rtrs-srv: Fix integer underflow in process_read and process_write
Baineng Shou (1):
dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()
Bard Liao (2):
soundwire: only handle alert events when the peripheral is attached
soundwire: cadence_master: wait and cancel cdns->work before clock stop
Bart Van Assche (1):
scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume()
Ben Reed (1):
PCI: switchtec: Add Gen6 Device IDs
Benoît Sevens (1):
HID: logitech-hidpp: fix race condition when accessing stale stack pointer
Bernardo Soares (1):
net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports
Bjoern Doebel (2):
smb: client: avoid leaking refcount in cifs_queue_oplock_break()
smb: client: avoid leaking refcount when cifs_sb_tlink() fails
Bjorn Andersson (1):
drm/msm/dp: Drop aux devices together with DP controller
Bjorn Helgaas (1):
PCI: Wait for device readiness after D3hot -> D0uninitialized transition
Boqun Feng (2):
locking/lockdep: Introduce lock_sync()
locking/lockdep: Improve the deadlock scenario print for sync and read lock
Boris Brezillon (1):
drm/gem: Consider GEM object reclaimable if shrinking fails
Boris Burkov (1):
btrfs: insert tree mod log move in push_node_left
Brad Cowie (1):
selftests/bpf: Update tests for new ct zone opts for nf_conntrack kfuncs
Bradley Morgan (1):
arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc
Carolina Jubran (3):
net/mlx5e: Fix ETS zero BW reporting when one TC holds 100% net/mlx5e: Fix use-after-free race in sample_restore_put() IB/IPoIB: Avoid restoring OPER_UP after multicast flush
Cen Zhang (Microsoft) (1):
tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()
Cezary Rojewski (3):
ASoC: Intel: catpt: Complete coredump handling
ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive
ASoC: Intel: avs: Clean up the bus when fetching ML caps fails
Chaithanya Lagisetty (1):
selftests: nci: Fix uninitialized family ID on missing attribute
Charles Keepax (1):
soundwire: dmi-quirks: Disable ghost Realtek devices
Chen Bowen (1):
ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series
Chen Changcheng (1):
HID: alps: fix use-after-free on input2 registration failure
Chen Cheng (1):
md/raid5: let stripe batch bm_seq comparison wrap-safe
Chen Pei (1):
ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach
Chen Xiaokun (1):
io_uring/io-wq: Fix memory leak in io_wq_create() on success path
Chen-Yu Tsai (1):
dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask
Chengfeng Ye (2):
netfilter: nf_log: unregister loggers before per-net teardown
Bluetooth: hci_sync: Serialize local codec list cleanup
Chengming Zhou (2):
blk-mq: fix tags leak when shrink nr_hw_queues
blk-mq: fix tags UAF when shrinking q->nr_hw_queues
Chenguang Zhao (2):
RDMA/mlx5: Use QP port when decoding responder CQEs
netlabel: fix IPv6 unlabeled address add error handling
Chris Gellermann (2):
selftests/nci: Fix out-of-bounds store on thread join
nfc: virtual_ncidev: Add missing ioctl compat handler
Chris Sommers (1):
Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P
Christian Göttsche (1):
selinux: always fill AVC decision in avc_has_perm_noaudit()
Christian König (1):
drm/i915: fix incorrect RCU teardown order
Christian Lugnberg (2):
dmaengine: sun6i: fix non-atomic read of DMA position registers
dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status
Christian Marangi (1):
usb: host: add ARCH_AIROHA in XHCI MTK dependency
Christiano Amora (1):
Bluetooth: SMP: reject Security Request over BR/EDR
Christoph Hellwig (10):
befs: handle set_blocksize failures
affs: handle set_blocksize failures
bfs: handle set_blocksize failures
minix: handle set_blocksize failures
qnx4: handle set_blocksize failures
jfs: handle set_blocksize failures
hpfs: handle set_blocksize failures
omfs: handle set_blocksize failures
isofs: handle set_blocksize failures
btrfs: don't check PageError in __extent_writepage
Christophe JAILLET (1):
tracing/histograms: Simplify last_cmd_set()
Chuck Lever (1):
xprtrdma: Add request-pool slack for delayed recycling
Claudiu Beznea (1):
pinctrl: renesas: rzv2m: Use -ENOTSUPP instead of -EOPNOTSUPP
Coia Prant (1):
net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails
Colin Ian King (1):
OPP: of: Fix potential multiplication overflow when calculating freq
Cong Nguyen (3):
hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown()
hwmon: (applesmc) fix key backlight workqueue leak on register failure
nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure
Corentin Labbe (1):
wifi: ralink: RT2X00: init EEPROM properly
Cris (1):
Bluetooth: btusb: Add support for TP-Link TL-UB250
Cyrill Gorcunov (1):
RDMA/irdma: Fix typo in SQ completions generation
Cássio Gabriel (4):
ALSA: usb-audio: Propagate write errors in generic mixer put callbacks
ALSA: usx2y: Drain pending US-428 pipe-4 output commands
ASoC: codecs: rk3328: Use managed GPIO and clock helpers
ALSA: seq: oss: Reject reads that cannot fit the next event
Dai Ngo (1):
NFS: fix eof updates after NFSv4.2 fallocate/zero-range
Dairui Zhang (1):
af_packet: fix integer overflow in prb_calc_retire_blk_tmo()
Dan Carpenter (2):
drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update
Daniel Borkmann (2):
libbpf: Also reset {insn,data}_cur on realloc failure
bpf: Fix bpf_skb_change_tail wrt csum partial skbs
Daniel C. Ribeiro (1):
ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless
Daniel Lezcano (1):
thermal/drivers/tegra/soctherma: Switch to devm cooling device registration
Danielle Ratson (1):
bridge: Do not suppress ARP probes and DAD NS unconditionally
Dario Binacchi (1):
drm/panel: simple: Add AM-1280800W8TZQW-T00H
Darrick J. Wong (1):
xfs: fix blockgc group quota scanning when usrquota isn't enforced
Dave Carey (1):
USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set
Dave Chen (1):
btrfs: only account delalloc bytes for regular file inodes in btrfs_getattr()
David Arcari (1):
watchdog: fix hrtimer start when pretimeout is zero
David Francis (2):
drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id drm/amdkfd: Check bounds on allocate_doorbell
David Howells (1):
cachefiles: Fix double fput
David Yang (1):
net: dsa: sja1105: flower: reject cross-chip redirect
Dawei Feng (1):
bpf: NUL-terminate replaced sysctl value
Deepanshu Kartikey (2):
wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()Denis Arefev (1):
ALSA: hda: Fix missing pointer check in hda_component_manager_init function
Dian-Syuan Yang (1):
wifi: rtw89: pci: enable LTR based on pcie control register
Diogo Ivo (Schneider Electric) (1):
mmc: sdhci_am654: Reset command and data lines on failed tuning
Dmitriy Okunev (1):
net: mvpp2: prevent buffer overflow in page_pool allocation
Dmitry Antipov (1):
wifi: rtw88: delete timer and free skb queue when unloading
Dmitry Baryshkov (2):
drm/msm/dsi: correct byte intf clock rate for 14nm DSI PHY drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL
Dmitry Bogdanov (1):
scsi: target: iscsi: Handle abort for WRITE_PENDING cmds
Dmitry Torokhov (2):
Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()
Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound
Dong Chenchen (1):
ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup
Donggeun Yoo (6):
tracing: Free histogram the var ref when its initialization fails
tracing: Free histogram var refs regardless of how often they are referenced
tracing: Free histogram the field rejected for a bad modifier
tracing: Let histogram values keep the percent and graph modifiers
tracing: Keep the entry count when the histogram stats allocation fails
dma-coherent: report a failed reserved memory assignment
Dongliang Qin (1):
rds: ib: Clear the sg list when mapping an MR fails
Doruk Tan Ozturk (2):
wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
nfc: port100: reject frames whose declared length exceeds the received data
Doug Berger (2):
net: bcmgenet: move bcmgenet_power_up into resume_noirq
net: bcmgenet: allow return of power up status
Dragan Simic (1):
driver core: Add device probe log helper dev_warn_probe()
Duoming Zhou (1):
sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
Eduard Zingerman (1):
bpf: reject BPF_PSEUDO_FUNC reference to the main program
Edward Adam Davis (1):
ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev
Eelco Chaudron (1):
openvswitch: fix wrong flag value in get_ipv6_ext_hdrs()
Emil Tsalapatis (1):
bpf: Fix bpf_sock context code generation
Emmanuel Grumbach (4):
wifi: iwlwifi: mvm: fix an off-by-1 boundary check
wifi: iwlwifi: mvm: fix sched scan IE sizing
wifi: iwlwifi: bound aligned TLV advance in FW parser
wifi: iwlwifi: acpi: validate WGDS table revision index
Eric Biggers (3):
crypto: sun8i-ce - Remove crypto_rng interface
crypto: sun8i-ss - Remove crypto_rng interface
netfilter: nft_set_pipapo_avx2: add missing vzeroupper
Eric Dumazet (30):
net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() net/sched: sch_drr: make cl->quantum lockless
drop_monitor: perform u64_stats updates under IRQ-disabled section
drop_monitor: fix size calculations for 64-bit attributes
net: icmp: avoid invalid transport header access in icmp_send tracepoint
ipv6: tunnels: use DEV_STATS_INC()
ip6_gre: check tunnel info before xmit in ip6gre_tunnel_xmit
ipv6: sr: restore network header before routing and forwarding
bonding: alb: fix uninitialized transport header access in alb_determine_nd() locking/lockdep: Invalidate stale class_cache entries for zapped classes
bonding: do not clear curr_active_slave prematurely when releasing all slaves
bonding: use skb_cow_head() in bond_do_alb_xmit() and rlb_arp_xmit()
net_sched: sch_fq_pie: implement lockless fq_pie_dump()
net: dst: add four helpers to annotate data-races around dst->dev
ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
net: dst: introduce dst->dev_rcu
ipv4: start using dst_dev_rcu()
ipv6: mcast: extend RCU protection in igmp6_send()
xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()
net: convert dev->reg_state to u8
tcp: do not let tcp_rmem be set below 4096
pppoatm: ensure a writable skb header and linear data
drop_monitor: synchronize tracepoint unregistration on error path
drop_monitor: fix out-of-bounds write in reset_per_cpu_data()
net: lock the socket in sock_gettstamp()
llc: fix skb UAF and leaks on llc_mac_hdr_init() failure
bridge: check llc_mac_hdr_init() return value in br_send_bpdu()
net/sched: sch_teql: fix shadowed err in __teql_resolve()
vlan: ensure sufficient headroom in vlan_dev_hard_header()
tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
Erich Sartison (1):
Input: xpad - add support for Victrix Pro BFG Controller
Ethan Nelson-Moore (1):
ASoC: ti: omap3pandora: update board check to use DT compatible
Evgenii Burenchev (1):
vdpa/ifcvf: handle dev_set_name() failure in ifcvf_vdpa_dev_add()
Fan Wu (3):
hwmon: (gpio-fan) Fix use-after-free in alarm work
mmc: core: Cancel SDIO IRQ work before freeing host
mmc: mxcmmc: cancel data work and watchdog on remove
Farhad Alemi (1):
freevxfs: don't BUG() on unknown typed-extent type
Felix Gu (1):
mmc: sdio_uart: fix xmit_fifo leak when the port table is full
Feng Zhou (1):
bpf: support access variable length array of integer type
Fernando Fernandez Mancera (1):
ipv6: addrconf: fix temp address generation after prefix deprecation
Filipe Manana (3):
btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()
btrfs: fix reloc root cleanup in merge_reloc_roots()
btrfs: tree-checker: print dev extent offset in error message
Florian Eckert (2):
PCI: intel-gw: Enable clock before PHY init tools/thermal/tmon: Fix compilation warning for wrong format
Florian Fainelli (5):
net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems
net: bcmgenet: initialize u64 stats seq counter for all queues
net: bcmgenet: do not skip WoL power up on GENET V1
net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr
net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT
Florian Maillard (1):
mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260
Florian Westphal (5):
netfilter: nf_conntrack_expect: zero at allocation time
netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
netfilter: nfnetlink_log: cope with concurrent instance destruction
netfilter: ip6_tables: set F_PROTO when proto value is nonzero
netfilter: nfnetlink_queue: hold nfnl mutex in event notifier
Fourie Zhang (1):
net: mpls: clear inner_protocol when the last label is popped
Francesco Magazzu (1):
drm/nouveau/clk: don't clobber reclock status when restoring volt/fan
Frank Sorenson (5):
smb: client: reject short Next offsets in parse_server_interfaces()
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
smb: client: fix potential OOB read in smb3_enum_snapshots()
smb: client: fix server->total_read for compound encrypted PDUs
smb: client: fix missing lower-bound check on DFS referral string offsets
Furst Blumier (1):
ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC
Gajdos Tamás (3):
net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read
net: atl1c: fix soft lockup on out-of-range tpd_cons read
net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
Galen Hassen (1):
ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10
Gang Yan (1):
selftests: mptcp: fix an UAF in mptcp_connect.c
Gary Guo (5):
usb: xusbatm: don't rely on id table pointer arithmetic
wifi: ath9k_htc: don't store usb_device_id
usb: usbtmc: don't store usb_device_id
media: as102: do not rely on id table address comparison
net: usb: pegasus: don't rely on id table pointer arithmetic
Geert Uytterhoeven (2):
clk: renesas: cpg-mssr: Add number of clock cells check
clk: at91: pmc: #undef field_{get,prep}() before definition
Geliang Tang (1):
bpf, sockmap: Fix self-redirect copied_seq double-counting
Genevieve Chan (1):
firmware: stratix10-svc: fix FCS SMC call kernel-doc
Georgi Valkov (1):
wifi: mwifiex: replace one-element arrays with flexible array members
Gerd Rausch (1):
net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown
Gil Portnoy (1):
ksmbd: remove stale channels from all sessions on teardown
Ginger Li (1):
tipc: Fix a data race on mon->peer_cnt in mon_timeout()
Gleb Sonichev (1):
platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table
Goldwyn Rodrigues (1):
ima: return error early if file xattr cannot be changed
Gongwei Li (1):
Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout()
Greg Kroah-Hartman (1):
Linux 6.1.189
Greg Marsden (1):
net/rds: fix tcp stream corruption with large pages
Guangguan Wang (1):
net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
Guanghui Yang (2):
btrfs: detach failed sprout device from transaction update list
btrfs: restore active device pointers after failed sprout
Guanglei Zhu (3):
net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain
net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value
net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()
Guangshuo Li (7):
net: cpsw_new: unregister devlink on port registration failure
hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
hwmon: (w83793) release probe data through kref
drm/msm/adreno: fix autosuspend cleanup during teardown drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure drm/nouveau: fix autosuspend cleanup during teardown
drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
Guennadi Liakhovetski (1):
ASoC: SOF: avoid a NULL dereference with unsupported widgets
Guoqing Jiang (3):
RDMA/siw: Introduce siw_cep_set_free_and_put
RDMA/siw: Cleanup siw_accept
RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept
Gustavo Kenji Mendonça Kaneko (2):
drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend drm/arm/komeda: fix error handling for clk_prepare_enable() and callers
Günther Noack (1):
selftests/landlock: Add tests for whiteout object creation
Hans Zhang (4):
PCI: iproc: Protect root bus removal with rescan lock
PCI: altera: Protect root bus removal with rescan lock
PCI: rockchip: Protect root bus removal with rescan lock
PCI: mediatek: Protect root bus removal with rescan lock
Hans de Goede (3):
Input: soc_button_array - fix MS Surface Pro 11 probe failure
Input: soc_button_array - check btns_desc->package.count
media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings
Haotian Zhang (1):
media: v4l2-h264: Fix memcmp() size in B1 reference list comparison
Haoxiang Li (3):
media: em28xx-video: fix missing res_free() on init_usb_xfer failure
net: thunderx: fix PTP device ref leak in nicvf_probe()
fbdev: pm2fb: unwind WC setup on probe failure
Harald Freudenberger (1):
s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm
Harry Wentland (1):
dm/amdgpu: fix malformed link_settings debugfs output
Heiko Carstens (1):
s390/zcore: Removed unused variables
Henry Martin (2):
sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration tracing/probes: Fix use-after-free on field name/type of events with multiple probes
Hirokazu Honda (1):
tee: optee: Allow MT_NORMAL_TAGGED shared memory
Hohyun Sim (1):
net: fddi: skfp: fix NULL deref when setting the MAC address while down
Hongfu Li (1):
selftests/cgroup: Fix cg_run_in_subcgroups ignoring arg parameter
Hrvoje Nuic (1):
Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV
Hui Peng (6):
Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough
Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()
autofs: fix sbi->pipe file reference leak in autofs_kill_sb()
fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT
ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST
Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO
Hui Su (1):
staging: fbtft: make dirty_lock IRQ-safe
Huiwen He (1):
smb/client: mark file sparse before emulating insert range
HyeongJun An (4):
ASoC: meson: aiu: Validate written enum values selftests/alsa: Fix the step check for INTEGER controls
ALSA: hda: Report a change when only the channel status bytes move
ASoC: hdmi-codec: Report a change when the channel status moves
Håkon Bugge (1):
net/rds: acquire the fastpath locks in rds_conn_shutdown()
Ibrahim Hashimov (1):
wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO
Ido Schimmel (5):
nexthop: Initialize extack in remove_nh_grp_entry()
tunnels: Drop stale dst when building an ICMP error for PMTUD
ipv6: Select best matching nexthop object in fib6_table_lookup()
ipv6: Honor oif when choosing nexthop for locally generated traffic
vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets
Ilya Maximets (2):
netfilter: report NLM_F_DUMP_FILTERED when all is filtered out
net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry
Inbal Schussheim (1):
tcp: exclude old ACKs from tcp fast path
Ioana Ciornei (4):
bus: fsl-mc: wait for the MC firmware to complete its boot
dpaa2-switch: rework FDB management on the bridge leave path
dpaa2-switch: fix the error path in dpaa2_switch_rx()
dpaa2-switch: fix handling of NAPI on the remove path
Itai Handler (1):
spi: spi-zynqmp-gqspi: stop the controller on shutdown
Ivan Delalande (1):
tg3: use random MAC address when tg3_get_device_address fails
Ivy Lopez (1):
scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues()
Iván Ezequiel Rodriguez (2):
Input: evdev - zero absinfo before partial copy in EVIOCSABS
Input: zero ff_effect before compat copy in input_ff_effect_from_user
Jacob Keller (1):
ice: add missing xa_destroy for sched_node_ids
Jacob Moroni (1):
RDMA/irdma: Enforce local fence for IB_WR_REG_MR
Jad Keskes (1):
EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation
Jakub Kicinski (5):
tls: reject the combination of TLS and sockmap
net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size
net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size
veth: manage XDP program pointers during channel resize
net: tls: fix silent data drop under pipe back-pressure
Jamal Hadi Salim (11):
net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted
net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations net/sched: fq_pie: clamp quantum in change path
net/sched: sfq: clamp quantum in change path
net/sched: hhf: clamp quantum in change and init paths net/sched: pie: clamp psched_mtu in pie_drop_early
net/sched: drr: clamp quantum in change class
net/sched: ets: clamp quantum in parse and fallback paths net/sched: hhf: cap hh_flows_limit at change time
net/sched: cls_u32: fix manual hash table handle IDR aliasing net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget
James Clark (2):
net: macb: fix ordering around PTP timestamp read perf test: Change all remaining #!/bin/sh to #!/bin/bash
James Hilliard (1):
watchdog: sunxi_wdt: preserve boot-enabled watchdog
James Nugraha (1):
net: amd-xgbe: discard rx packets with bad FCS
Jan Volckaert (1):
net: usb: qmi_wwan: add MeiG SRM813Q
Jann Horn (1):
exec: do_close_on_exec() before taking exec_update_lock
Jarkko Sakkinen (1):
KEYS: trusted: Fix tpm2_load_cmd() boundary check
Jason Gunthorpe (1):
RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()
Jason Winter (1):
net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow
Jay Vadayath (1):
smb: client: bound dirent name against end of SMB response in cifs_filldir
Jean-Louis Colaco (1):
ALSA: usb-audio: Add quirk for YAMAHA CDS3000
Jeffin Philip (1):
RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
Jens Axboe (1):
sunvdc: fix -EIO issue due to lack of retries
Jeremy Klarenbeek (1):
drm/amd/pm/si: Fix updating clock limits from power states
Jeremy Nyberg (1):
Input: xpad - fix PDP Marvel Xbox 360 controller
Jetha Chan (1):
ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table
Jia Jia (2):
vhost-scsi: flush backend after device ioctls
virtio_console: do not free control-out buffers on remove
Jiajia Liu (1):
wifi: mt76: transform aspm_conf for pci_disable_link_state
Jiale Yao (1):
Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame
Jianbo Liu (1):
net/mlx5e: TC, Fix internal port memory leak
Jiangshan Yi (2):
wifi: brcmsmac: fix UAF in brcms_free_timer()
wifi: libertas_tf: fix UAF in lbtf_free_adapter()
Jiayuan Chen (6):
rds: annotate data-race around rs_seen_congestion
bpf: Fix NULL-ptr-deref when showing a void BTF type
bpf: Fix NULL-ptr-deref in btf_var_show() selftests/bpf: Fix flaky bpf_nf test when random NAT port is 0
bpf: Fix divide-by-zero in btf_struct_walk()
bpf: Fix out-of-bounds read of rtt_min in sock_ops
Jinjie Ruan (1):
spi: zynqmp-gqspi: Use devm_spi_alloc_host()
Jiri Kosina (1):
HID: hidpp: fix potential UAF in hidpp_connect_event()
Jiri Pirko (4):
net: devlink: convert devlink port type-specific pointers to union
net: devlink: move port_type_warn_schedule() call to __devlink_port_type_set()
net: devlink: move port_type_netdev_checks() call to __devlink_port_type_set()
net: devlink: take RTNL in port_fill() function only if it is not held
Jisheng Zhang (1):
spi: dw: fix wrong RX_SAMPLE_DLY setting after resume
Joas Antonio dos Santos (1):
netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
Joe Damato (3):
bnxt_en: Only restore LRO if the device supports TPA
bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()
bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
Johan Almbladh (2):
bpf: Fix immediate JMP JEQ/JNE on MIPS32
bpf: Fix BSWAP 32 and 16 on MIPS64
Johan Hovold (1):
net: hso: fix TIOCMIWAIT race
Johannes Berg (18):
wifi: nl80211: reject beacons with bad HE operation
wifi: mac80211: always allow transmitting null-data on TXQs
wifi: cfg80211: check IP header size in cfg80211_classify8021d()
wifi: cfg80211: only group hidden BSSes with beacon entries
wifi: cfg80211: don't filter by BSS type when removing stale entries
wifi: mac80211: suppress chanctx warning for debugfs reset
wifi: mac80211: unlist vifs when their netdev is unregistered
wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown
wifi: cfg80211: trace: remove MAC_PR_{FMT,ARG}
wifi: mac80211: require a peer station for TDLS setup confirm
wifi: mac80211: don't allow link changes when iface is down
wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set
wifi: mac80211: don't access the TSF of a down interface
wifi: mac80211: add HE 6 GHz capability in the scan elems len
wifi: mac80211: mesh: release the channel if start fails
wifi: mac80211: rework ack_frame_id handling a bit
wifi: mac80211: set up the TX info early to fix failure paths
Joonwon Kang (1):
mailbox: Make mbox_send_message() return error code when tx fails
Jose Fernandez (Anthropic) (1):
bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()
Jose Ignacio Tornos Martinez (2):
net: wwan: t7xx: Add delay between MD and SAP suspend
PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems
Josef Bacik (1):
writeback: report a Tasks-RCU quiescent state per cgwb drain pass
Joseph Qi (1):
ocfs2: make ocfs2_calc_xattr_init() return void
Jozsef Kadlecsik (1):
netfilter: ipset: mark the rcu locked areas properly
Juan Perdomo (1):
Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup
Julian Anastasov (1):
ipvs: revalidate ihl before icmp_send
Junjie Cao (1):
HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard
Junli Liu (1):
erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC
Junrui Luo (4):
drm/virtio: fix object leak when drm_gem_handle_create() fails drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() drm/virtio: release the GEM object on virtio_gpu_vram_create() errors
Jérémy Jean (3):
RDMA/siw: Bound fragmented header copies by the remaining length
netfilter: flowtable: publish HW_DEAD after worker is done
net: gue: reject invalid REMCSUM offsets
Kamal Wadhwa (1):
regulator: core: clamp voltage constraints before applying apply_uV
KangNing Liao (1):
btrfs: protect sb_write_pointer() with invalidate lock
Karl Mehltretter (9):
tracing: Disable KCOV instrumentation for trace_irqsoff.o
virtio_input: stop callbacks before unregistering input device drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER
scsi: qla2xxx: Fix the ql2xfc2target parameter description
keys: fix lost wakeup when reaping a dead key type
Input: trackpoint - fix the inertia attribute name in the ABI document
wifi: brcmfmac: fix lost 802.1x TX completion wakeup s390/pci/docs: Fix sriov_numvfs attribute name
netfilter: nft_synproxy: use the family-aware checksum helper
Kazuki Hanai (1):
ALSA: us122l: Prevent write upgrades for read mappings
Kees Cook (1):
arm: Handle KCOV __init vs inline mismatches
Kent Overstreet (1):
lockdep: Add lock_set_cmp_fn() annotation
Koichiro Den (1):
arm64: dts: renesas: r8a779f0: Set UFS lane count
Kory Maincent (1):
hwmon: (adt7462) Add of_match_table to support devicetree
Krystian Kaniewski (1):
RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
Krzysztof Wilczyński (2):
PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() PCI/sysfs: Use kstrtobool() to parse the ROM attribute input
Kumar Kartikeya Dwivedi (3):
bpf: Mark bpf_btf_find_by_name_kind() as sleepable
bpf: Restrict CO-RE poisoning to relocatable instructions
libbpf: Reject truncated ldimm64 CO-RE relocations
Kumar Meiyappan (2):
scsi: pm8001: Reject firmware update in fatal error state
scsi: pm8001: Reject non-fatal dump when controller is crashed
Kuniyuki Iwashima (7):
ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().
af_unix: Unlink scc_entry in unix_del_edge().
af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain().
tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().
ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink().
af_unix: Drop all SCM attributes for SOCKMAP.
Kyle Zeng (3):
ipvs: fix reversed sequence option serialization
ipvs: reject invalid states in connection template sync records
xfrm: fix compat ALLOCSPI request use-after-free
Lad Prabhakar (2):
mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC
mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC
Lama Kayal (1):
net/mlx5: E-Switch, prevent mc_list repopulation during vport disable
Laxman Acharya Padhya (3):
wifi: mt76: mt7921: validate CLC firmware records
wifi: mt76: mt7921: skip unknown CLC firmware records
Bluetooth: hci_codec: validate vendor codec count length
Lee Jones (2):
Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel
nfc: llcp: Fix race condition in accept_queue lifecycle
Lei Zhu (1):
selftests: nci: Correct pthread_create return value check
Leo Yan (1):
perf/core: Skip empty AUX records with only format flags
Leon Romanovsky (2):
RDMA/efa: Keep admin queues alive while IRQ is registered RDMA/efa: Keep EQ resources alive while IRQ is registered
Leonardo Bras (1):
arm64/daifflags: Make local_daif_*() helpers __always_inline
Li Jun (1):
watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog
Li Qiang (1):
cifs: validate idmap key payload length
Li RongQing (2):
RDMA/mlx5: Fix state and counter desync on loopback enable failure RDMA/mad: Fix receive buffer leak when PKey enforcement fails
Li Youhong (1):
net: sun4i-emac: fix missing of_node_put() for phy_node
Liang Hao (1):
gpio: dwapb: Mask interrupts at hardware initialization
Linfeng Sun (1):
vdpa_sim_blk: reject out-of-range sector starts
Linus Walleij (18):
ASoC: ab8500: Reset the audio block before configuring it
ASoC: ab8500: Repair the DAPM capture graph
ASoC: ab8500: Correct digital interface format setup
ASoC: ab8500: Validate and program TDM slots correctly
ASoC: ux500: Fix MSP stream lifecycle handling
ASoC: ux500: Propagate MSP setup errors
ASoC: ux500: Correct MSP frame and bit clock setup
ASoC: ux500: Validate MSP DAI configuration
mfd: db8500-prcmu: Fold dbx500 header into db8500
ASoC: ux500: Request the MSP MMIO resource
ASoC: ux500: Program the MSP FIFO watermarks
net: ethernet: cortina: Fix budget accounting
net: ethernet: cortina: Finish RX updates before NAPI completion
net: ethernet: cortina: Count dropped frames as NAPI work
net: ethernet: cortina: No mapping is a dropped rx
net: ethernet: cortina: Count RX drops once per frame
net: ethernet: cortina: Count RX descriptors for freeq refill
net: ethernet: cortina: Ack RX overrun interrupt correctly
Lorenzo Bianconi (2):
net: stmmac: reconfigure RX packet parser table in stmmac_hw_setup() after reset
net: stmmac: initialize ptp_lock at probe time
Luiz Augusto von Dentz (2):
Bluetooth: btusb: Fix UAF of btusb_data by rx_work
Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync
Luka Gejak (1):
net: hsr: require valid EOT supervision TLV
Lukas Wunner (2):
PCI: Stop setting cached power state to 'unknown' on unbind
crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y
Luxiao Xu (2):
netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
nfc: fix use-after-free in nfc_get_local_general_bytes
Madhavender Singh (1):
ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx
Maher Azzouzi (1):
esp: downgrade zerocopy managed frags before mutating skb frags
Maoyi Xie (4):
usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue
rds: filter RDS_INFO_* getsockopt by caller's netns
hsr: broadcast netlink notifications in the device's net namespace
keys: translate request_key_auth pid for the reading procfs instance
Marcel Kłos (1):
ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs
Marco Elver (1):
kcsan: Silence -Wmaybe-uninitialized when calling __kcsan_check_access()
Marco Felsch (1):
serial: 8250: fix possible ISR soft lockup
Marek Behún (3):
net: dsa: mv88e6xxx: fix number of g1 interrupts for 6320 family
net: dsa: mv88e6xxx: define .pot_clear() for 6321
net: dsa: mv88e6xxx: enable .rmu_disable() for 6320 family
Marek Vasut (1):
net: ks8851: Fix receiver error in 100BASE-TX mode following software power-down
Mariano Baragiola (1):
wifi: virt_wifi: free skb when disconnected
Mario Limonciello (1):
x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11
Mark Amirkan (4):
net: lan743x: fix RX checksum use-after-free net/packet: clear RX owner on VNET header error net/packet: avoid truncating TPACKET_V3 private size
mptcp: return sk_wait_data() errors from recvmsg()
Mark Rutland (2):
arm64: percpu: Fix this_cpu_write() casting
arm64: percpu: Fix this_cpu_and() mask generation
Markus Lindner (1):
ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4
Martin KaFai Lau (2):
bpf: bpf_sk_storage: Fix invalid wait context lockdep report
bpf: bpf_sk_storage: Fix the missing uncharge in sk_omem_alloc
Mathias Nyman (1):
xhci: Prevent queuing new commands if xhci is inaccessible
Matthew Bystrin (1):
mfd: rsmu: Add 8a34002 support
Matthieu Baerts (NGI0) (3):
mptcp: options: handle MPC data + csum reqd + no csum
mptcp: subflow: no need to copy thmac during ulp_clone
mptcp: syncookies: remember the request backup flag
Maurizio Lombardi (2):
nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl
scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands
Maxime Chevallier (4):
net: stmmac: selftests: Support running selftests on DSA conduits
net: stmmac: selftests: Check the dev->features for S-TAG offload testing
net: stmmac: selftests: Capture all packets for vlan checks
net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K
Miao Li (1):
iio: light: stk3310: Deal with the ps interrupt issue in PM
Miaoqing Pan (1):
wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi
Michael Bommarito (4):
media: hevc: add bounded tile-count helpers
media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
media: v4l2-ctrls: validate HEVC tile counts
RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds
Michael Walle (1):
clk: keystone: don't cache clock rate
Michal Swiatkowski (1):
ice: pass the return value of skb_checksum_help()
Mickaël Salaün (3):
landlock: Fix handling of disconnected directories selftests/landlock: Add disconnected leafs and branch test suites selftests/landlock: Add layout1.refer_mount_root
Mieczyslaw Nalewaj (1):
net: dsa: realtek: rtl8365mb: add support for RTL8367SB
Mika Westerberg (4):
thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()
thunderbolt: Keep XDomain reference during the lifetime of a service
thunderbolt: Keep the domain reference while processing hotplug
thunderbolt: Set tb->root_switch to NULL when domain is stopped
Mikhail Zaslonko (2):
s390/debug: Do not register views for failed static debug areas s390/debug: Fix NULL pointer dereference in debug_info_copy()
Milan P. Gandhi (2):
scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()
scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()
Ming Wang (1):
net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist
Minhong He (1):
phonet: check register_netdevice_notifier() error in phonet_device_init()
Miri Korenblit (1):
wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed
Mostafa Saleh (1):
irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed
Mukesh Sisodiya (2):
wifi: cfg80211: make TDLS management link-aware
wifi: mac80211: handle TDLS negotiation with MLO
Myeonghun Pak (4):
mmc: sdhci-of-aspeed: Remove children before releasing SDC resources
tg3: clean up PHYLIB resources on probe failure
pinctrl: single: free the IRQ on domain creation failure
RISC-V: KVM: Synchronize hrtimer callback during teardown
Nagamani PV (1):
s390/qeth: allow bridgeport queries despite OS_MISMATCH
Naman Gulati (1):
netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name
Namjae Jeon (15):
ksmbd: align SMB2 oplock break ack handling
ksmbd: use connection ClientGUID for lease lookup
ksmbd: treat unnamed DATA stream as base file
ksmbd: apply create security descriptor first
ksmbd: start file id allocation at 1
ksmbd: break RH leases before delete-on-close
ksmbd: fix outstanding credit leak on abort and error paths
ksmbd: fix credit charge calculation for SMB2 QUERY_INFO
ksmbd: find bound sessions during reauthentication
ksmbd: mark invalid session responses as signed
ksmbd: validate SID namespace before mapping IDs
ksmbd: validate ACE size against SID sub-authorities
ksmbd: use memcmp() to compare ClientGUIDs
ksmbd: rate limit unmapped SID errors
ksmbd: prevent out-of-bounds reads in share config responses
Nazim Amirul (1):
net: stmmac: xgmac2: disable RBUE in default RX interrupt mask
Nguyen Ngoc Thang (2):
ALSA: pcm: set timer->private_data before registering the PCM timer net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure
Nicolai Buchwitz (1):
net: macb: destroy the phylink instance on the probe error path
Nicolas Thibert (1):
Bluetooth: btusb: fix NXP IW610 composite device handling
Nikhil Chatterjee (1):
HID: bpf: Add Huion Inspiroy Frego M button quirk
Niklas Cassel (1):
ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY
Niklas Schnelle (1):
docs: s390/pci: Improve and update PCI documentation
Nikolay Aleksandrov (1):
net: bridge: mst: move switchdev call outside rcu
Nikolay Metchev (1):
platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table
Norbert Szetei (3):
net: openvswitch: fix use-after-free of the flow table mask array
net: xps: reject an out of range traffic class
ipv6: do not let ipv6_find_hdr() return an offset past the packet end
Nuno Sá (1):
hwmon: (pmbus/core) increase number of phases and add new mask
Nuoqi Gui (1):
bpf: Mask pseudo pointer values in verifier logs
Oliver Neukum (1):
usb: core: hcd: fix possible deadlock in rh control transfers
Orgad Shaneh (1):
MIPS: Octeon: apply USB FDT fixups also when USB is modular
Osama Abdelkader (1):
mmc: davinci: fix mmc_add_host order in probe
Oscar Priego Verdugo (1):
HID: elecom: fix bus type for M-XGL20DLBK
Pablo Neira Ayuso (3):
netfilter: flowtable: hold reference on ct until flow is released
rculist: add list_splice_rcu() for private lists
netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase
Panagiotis Petrakopoulos (1):
wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result()
Paolo Abeni (3):
mptcp: consolidate subflow cleanup
mptcp: avoid unneeded actions on subflow reset
mptcp: close race between scheduler and state change
Parth Pancholi (1):
drm/bridge: tc358768: Set pre_enable_prev_first for reverse order
Patrick Lu (Anthropic) (1):
writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes
Pauli Virtanen (5):
Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds
Bluetooth: ISO: fix malformed ISO_END/CONT handling
Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan
Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM
Bluetooth: hci_sync: always check if connection is alive before deleting
Paulo Alcantara (1):
smb: client: fix smbd_connection leak on cifs_get_tcp_session() error
Pavankumar Kondeti (1):
workqueue: Fix NULL current_pwq deref in flush dependency check
Pedro Tammela (3):
rtnl: add helper to send if skb is not null net/sched: act_api: don't open code max() net/sched: act_api: conditional notification of events
Peiyang He (2):
drm/nouveau: fix double-free in nvif_vmm_dtor
drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()
Peng Hao (1):
wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
Pengpeng Hou (15):
soundwire: validate DT compatible before parsing it
regulator: da9121: Use subvariant ids in the I2C table
ALSA: usb-audio: caiaq: validate EP1 reply lengths
wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers
wifi: libertas: reject short monitor TX frames
wifi: libipw: fix key index receive bound checks
wifi: rsi: validate beacon length before fixed buffer copy drm/gma500: return errors from Oaktrail HDMI I2C reads
hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors
ARM: socfpga: select the PL310 erratum 753970 workaround
wifi: mwifiex: validate scan response extents
net: usb: sr9700: include receive overhead in the length check
nfc: nfcmrvl: validate helper command length before pull
nfc: st21nfca: validate received frame size
nfc: st21nfca: validate ISO15693 inventory length
Peter Ujfalusi (1):
ASoC: SOF: ipc4-topology: Clarify bind failure caused by missing fw_module
Pierre Barre (2):
9p: invalidate readdir buffer on seek
9p: use kvzalloc for readdir buffer
Pierre-Louis Bossart (1):
ALSA/ASoC: hda: ext: add 'ext' prefix to snd_hdac_link_free_all
Potin Lai (1):
hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i
Praveen Talari (1):
spi: core: Abort active target transfer on controller suspend
Pu Hu (1):
arm64: kprobes: Allow reentering kprobes while single-stepping
Qiang Liu (3):
ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr
ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr
ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling
Qingfang Deng (2):
ppp: ppp_async: simplify tty disc_data access
ppp_synctty: ensure a writeable skb header
Qiuxu Zhuo (3):
EDAC/igen6: Fix interleave boundary condition EDAC/igen6: Fix channel selection hash EDAC/igen6: Fix channel address decode for non-hash mode
Qu Wenruo (1):
btrfs: do not force reloc root creation during qgroup_account_snapshot()
Quanye Yang (2):
RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted RDMA/ucma: Serialize join and leave on copy_to_user failure
Raf Dickson (1):
vsock: use sk_acceptq_is_full() helper in all transports
Ran Hongyun (1):
squashfs: Add dictionary size range check to prevent shift-out-of-bounds
Randy Dunlap (1):
Documentation: s390: correct spelling
Raphaël Larocque (1):
Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722)
Ratheesh Kannoth (1):
octeontx2-af: fix PF/CGX debugfs PCI bus lookup
Rengarajan S (2):
lan78xx: Enable 125 MHz CLK configuration for LAN7801 if NO EEPROM is detected
lan78xx: Enable Auto Speed and Auto Duplex configuration for LAN7801 if NO EEPROM is detected
Ricardo Neri (1):
sched/fair: Move is_core_idle() out of CONFIG_NUMA
Riccardo Boninsegna (1):
media: rc: mceusb: Add support for 04eb:e033
Ridham Khurana (1):
gpio: zynq: fix runtime PM leak on request error path
Rik van Riel (2):
perf/ftrace: Fix WARNING in __unregister_ftrace_function
wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver
Rob Herring (Arm) (1):
gpio: pisosr: Read "ngpios" as u32
Robert Abrahamse (1):
ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision)
Roberts Kursitis (1):
Input: xpad - add support for Azeron devices
Roman Prucha (1):
ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough
Rosen Penev (7):
mips: cps: Assemble jr.hb with an R2 ISA level
net: ibm: emac: Reserve VLAN header in MJS limit
ipmi: si: Use platform_get_irq_optional() to retrieve interrupt
netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()
net: ibm: emac: mal: fix potential system hang in mal_remove()
sparc64: uprobes: add missing break
sparc: Disable compat support with LLD
Rudi Heitbaum (1):
ASoC: rt5645: Perform the initial jack detect at probe
Runyu Xiao (5):
net: au1000: move free_irq out of the close-time spinlocked section
ASoC: sti: initialize IRQ lock before requesting IRQ
cpufreq: initialize policy rwsem before sysfs publication
mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt
wifi: wlcore: release runtime PM ref on regdomain config failure
Ruoyu Wang (3):
crypto: ixp4xx - fix buffer chain unwind on allocation failure
ALSA: es18xx: check control allocation before private data setup
dmaengine: sprd: Fix runtime PM reference leak in probe
Russell King (Oracle) (1):
ARM: ensure interrupts are enabled in __do_user_fault()
SJ Park (1):
mm/damon/core: avoid infinite kdamond_merge_regions() internal loop
Sabrina Dubroca (1):
xfrm: avoid RCU warnings around the per-netns netlink socket
Sajal Gupta (1):
drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
Samuel Moelius (2):
Bluetooth: L2CAP: validate connectionless PSM length
f2fs: validate inline dentry name lengths before conversion
Sandeep Dhavale (1):
erofs: Fix detection of atomic context
Sanjay Chitroda (1):
iio: accel: mma8452: switch to non-devm request_threaded_irq()
Sanman Pradhan (2):
hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding
hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676
Sasha Levin (18):
Revert "Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU" Revert "Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU" Revert "arm64: dts: qcom: sm8550: Fix the PCIe iommu-map entries" Revert "arm64: dts: qcom: sm8450: Fix the PCIe iommu-map entries" Revert "arm64: dts: qcom: sm8350: Fix the PCIe iommu-map entries" Revert "arm64: dts: qcom: sm8250: Fix the PCIe iommu-map entries" Revert "arm64: dts: qcom: sm8150: Fix the PCIe iommu-map entries" Revert "arm64: dts: qcom: sdm845: Fix the PCIe iommu-map entries" Revert "nvme-apple: Reset q->sq_tail during queue init"
Revert "nvme-apple: Prevent shared tags across queues on Apple A11" Revert "nvme-apple: Drop the PRP null check chicken bit"
Revert "nvme: apple: Add Apple A11 support"
Revert "perf tests: Fix flakiness in BPF counters test on hybrid systems" Revert "alpha: don't leak hardware-fabricated FP exception bits to user space" Revert "alpha: fix ieee_swcr_to_fpcr setting FPCR_DNOD unconditionally" Revert "perf cs-etm: Avoid truncating AUX buffer sizes to int" Revert "perf cs-etm: Flush thread stacks after decoder reset"
ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments
Scott Mitchell (1):
netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation
Sean Anderson (1):
pinctrl: meson: Fix typo in s4 group name
Sean Christopherson (2):
perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED
Sebastian Andrzej Siewior (1):
ring-buffer: Acquire the lock with irqsave in rb_wake_up_waiters()
Seungwon Bae (1):
vxlan: reject dynamic fdb entries that reference a nexthop id
Shahar Shitrit (1):
net/mlx5e: Fix setting RS FEC after remapping
Shawn Lin (1):
mmc: core: Add validation for host-provided max_segs
Shengzhuo Wei (4):
i2c: at91: release DMA channels on remove and probe error
i2c: imx: release DMA channels on probe error
wifi: p54: validate curve data length in the calibration curve converters
wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST
Shihuang Liu (1):
net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()
Shivank Garg (3):
dmaengine: Fix device kref underflow in dma_chan_put()
dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()
dmaengine: wait for RCU readers before releasing dma_device
Shivaprasad G Bhat (2):
powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
Shmulik Cohen (2):
wifi: libipw: reject too-short beacon and probe responses
wifi: libipw: reject too-short association responses
Shouping Wang (1):
perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations
Shuangpeng Bai (1):
IB/mlx4: Fix use-after-free on pkey sysfs registration failure
Sidraya Jayagond (1):
net/smc: fix UAF on lgr list traversal in smcr_port_err()
Siew Chin Lim (1):
firmware: stratix10-svc: change get provision data to async SMC call
Simon Xue (1):
iommu/rockchip: disable fetch dte time limit
Slavin Liu (1):
ALSA: hda: trace PCM open only after assigning a stream
Slawomir Stepien (1):
HID: amd_sfh: Validate PCI BAR size before mapping
Sophie D (1):
drm/gud: Add RCade Display Adapter VID/PID pair
Srinivas Kandagatla (1):
ASoC: qcom: q6apm: return error code to consumers on failures
Stanislaw Gruszka (1):
wifi: iwlegacy: fix broadcast stations deallocation
Stefan Berger (1):
integrity: Check for NULL returned by asymmetric_key_public_key
Stepan Ionichev (3):
mmc: davinci: avoid NULL deref of host->data in IRQ handler
usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log
iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbindStian Halseth (1):
sunvdc: unmap LDC cookies when the descriptor send fails
Sudeep Holla (2):
firmware: arm_scmi: Validate SENSOR_UPDATE payload size
firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size
Suraj Jitindar Singh (1):
bpftool: remove duplicate free_btf_vmlinux() definition
Sven Schnelle (1):
selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc
Takashi Iwai (7):
ALSA: caiaq: Fix potential double-free at error path
ALSA: hda: Introduce auto cleanup macros for PM
ALSA: hda/common: Use cleanup macros for PM controls
ALSA: hda/common: Use guard() for mutex locks
ALSA: bcd2000: Fix race between rawmidi and disconnect
ALSA: 6fire: Clean ups with guard()
ALSA: usb: 6fire: Avoid embedded URBs
Tao Cui (1):
blk-cgroup: fix leaks and online flag on radix_tree_insert failure
Thadeu Lima de Souza Cascardo (1):
drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr
Theodor Arsenij Larionov Trichkine (1):
netfilter: nft_nat: fully initialise new_addr in netmap setup
Thibault Ferrante (1):
selftests/powerpc/tm: Fix tcheck() reading uninitialised CR value
Thiyagarajan Pandiyan (1):
wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications
Thomas Gleixner (1):
tick/broadcast: Plug clockevents replacement race
Thomas Huth (1):
kselftest/arm64: Fix size of thread_data values for pthread_join()
Thomas Zimmermann (3):
drm/atomic-helper: Add atomic_enable plane-helper callback drm/ast: Remove little-endianism from I/O helpers drm/ast: Rework definition of I/O read and write helpers
Thorsten Blum (3):
crypto: atmel-ecc - add support for atecc608b powerpc/kexec_file: Use inclusive range checks in add_usable_mem() drm/i915: Fix memory leak in query_perf_config_list()
Théo Lebrun (1):
net: macb: rename bp->sgmii_phy field to bp->phy
Tianchu Chen (3):
ASoC: sprd: validate compress buffer sizes against fixed allocations
wifi: rsi: fix heap OOB write on key removal
wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()
Tiezhu Yang (1):
libbpf: Add __NR_bpf definition for LoongArch
Timur Kristóf (1):
drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized
Tingmao Wang (1):
selftests/landlock: Add tests for access through disconnected paths
Tobias Deiminger (1):
leds: pca9532: Don't stop blinking for non-zero brightness
Tom Chung (1):
drm/amd/display: Fix CRC open failure during active rendering
Tomer Tayar (1):
accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()
Tommy Huang (1):
rtc: aspeed: add AST2700 compatible
Tristan Madani (1):
ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf
Tung Nguyen (1):
tipc: fix NULL deref in tipc_named_node_up() on empty publication list
Tze Yee Ng (1):
dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc
Tzung-Bi Shih (11):
watchdog: msc313e: Fix NULL pointer dereference in PM callbacks
watchdog: msc313e: Avoid division by zero
watchdog: msc313e: Fix clock leak and spurious timer in settimeout()
watchdog: msc313e: Enable clock before accessing hardware registers
watchdog: msc313e: Fix spurious reset on suspend
watchdog: msc313e: Fix undefined behavior
watchdog: msc313e: Sync timeout value if WDT was running at boot
Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown
watchdog: digicolor: Avoid division by zero
watchdog: msc313e: Fix premature reset during timeout update
watchdog: msc313e: Propagate error code in resume()
Uwe Kleine-König (2):
driver core: Better advertise dev_err_probe() driver core: Make dev_err_probe() silent for -ENOMEM
Uwe Küchler (1):
ALSA: usb-audio: Add quirk for Novation Mininova
Vadim Fedorenko (2):
spi: xilinx: let transfers timeout in case of no IRQ
ptp: ocp: add shutdown callback
Vaibhav Jain (1):
powerpc/pseries: Ensure vpa,slb_shadow & dtl are unregistered during crash
Venkat Rao Bagalkote (1):
char/nvram: Remove redundant nvram_mutex
Viacheslav Dubeyko (3):
hfsplus: fix issue of direct writes beyond end-of-file
hfsplus: rework hfsplus_readdir() logic
hfs: rework hfsplus_readdir() logic
Victor Nogueira (5):
net/sched: act_api: budget all shared attributes in notify skbs net/sched: act_api: size the RTM_GETACTION reply from the actions net/sched: act_api: fix skb sizing and action leak on reoffload delete net/sched: cls_route: free emptied bucket on filter move net/sched: act_gate: budget the per-entry list in get_fill_size
Viktor Menshin (1):
ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT
Vineeth Karumanchi (1):
net: macb: fix NULL pointer dereference on unbind with fixed-link
Vineeth Vijayan (4):
s390/cio: Purge based on the cdev's online status s390/cio: Fix cio_update_schib() to not cache invalid schib s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()
Vishnu Razdan (1):
hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS
Viswajith Murali (1):
octeontx2-af: mcs: Clear stale X2P calibration state before calibration
Vitaly Kuznetsov (1):
HID: hyperv: streamline driver probe to avoid devres issues
Vlad Buslov (1):
net/mlx5: Bridge, pass net device when linking vport to bridge
Vlatko Kosturjak (1):
ppp_async: drop the errored frame instead of resetting its headroom
Wang YuWei (1):
spi: dw-dma: Wait for controller idle before completing Tx
Wei Jie LAW (1):
HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()
Weiming Shi (10):
ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()
btrfs: tree-checker: validate INODE_REF's namelen net/sched: defer qdisc freeing after failed creation
fbdev: vfb: defer cleanup until the last reference
i2c: smbus: reject oversized block transfers in the common path
net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL
bpf: Skip unsettled links in link iterator
net/sched: reject IDR error pointers when deleting actions
netfilter: ip6t_rpfilter: reject routes without inet6_dev
WenTao Liang (1):
drm/amd/display: set new_stream to NULL after release
Wentao Liang (12):
net: qrtr: fix node refcount leak on ctrl packet alloc failure
watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() fsl/fman: Fix clk reference leak in read_dts_node()
gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() drm/nouveau: Fix bridge reference leak in nv1a_ram_new() drm/nouveau: Fix gem reference leak in validate_init() net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()
net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy()
net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs()
Wyatt Feng (1):
net: xfrm: reject unrepresentable espintcp transport headers
Xiang Mei (1):
ALSA: 6fire: fix OOB write from device-reported iso length
Xianting Tian (1):
virtio-console: call scheduler when we free unused buffs
Xie Yuanbin (1):
ARM: 9484/1: enable interrupts when unhandled user faults are triggered
Xin Long (3):
sctp: fix err_chunk memory leaks in INIT handling
sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START
sctp: hold asoc or transport before mod_timer() in timer handlers
Xingui Yang (1):
scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list
Xiong Weimin (1):
virtio_input: reset device if input_register_device() fails
Xixin Liu (3):
nvme-rdma: fix -EIO cleanup order in queue_rq
firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS
clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate
Xu Rao (2):
ata: libata-pmp: add JMicron JMS562 quirk
mmc: spi: reset bytes_xfered before retrying CRC failures
Xu Yang (1):
usb: gadget: udc: skip pullup() if already connected
Xuanqiang Luo (3):
raw: annotate disconnect-side IPv4 match writers
fou: Fix use-after-free in fou_create()
ip_gre: Reject enabling collect metadata through changelinkYael Chemla (1):
net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put
Yehyeong Lee (4):
net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD
IB/iser: reject a remote invalidation of an unregistered direction IB/isert: wait for deferred control PDU completions before releasing the connection
scsi: libiscsi_tcp: Check the data direction of a Data-In PDU
Yicong Hui (1):
net/micrel: Fix typos in micrel driver code comments
Yifei Gao (1):
memstick: ms_block: destroy io_queue workqueue on removal
Yige Jiang (1):
net: netsec: fix device_node reference leak on phy_np
Yilin Zhang (2):
ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF
tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()
Yiqi Sun (1):
sctp: avoid livelock while updating retransmit path
Yonghong Song (1):
bpf: Introduce might_sleep field in bpf_func_proto
Yousef Alhouseen (3):
leds: uleds: Return -EFAULT on copy_to_user() failure xen/front-pgdir-shbuf: free grant reference head on errors xen/gntalloc: validate grant count before allocation
Yu Kuai (2):
md/raid5: account discard IO
blk-cgroup: protect iterating blkgs with blkcg->lock in blkcg_print_stat()
Yu Peng (1):
arm64: fixmap: Allow 256K early_ioremap() at any offset
Yu Zhang (1):
vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx
YueHaibing (1):
mfd: db8500-prcmu: Remove unused inline functions
Yuho Choi (2):
sctp: Unwind address notifier registration on failure
ALSA: virtio: reset device before deleting virtqueues
Yury Norov (1):
bitfield: wire __bf_shf to __builtin_ctzll
Zhang Cen (1):
btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF
Zhang Tianci (1):
fuse: set ff->flock only on success
Zhao Gongyi (1):
bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc
Zhao Li (4):
wifi: mac80211: validate deauth frame length before reason access
wifi: cfg80211: validate assoc response length before status and IE access
wifi: cfg80211: validate rx/tx MLME callback frame lengths before access
wifi: mwifiex: validate action frame fixed fields
Zhaoyang Yu (1):
media: dm1105: fix missing error check for dma_alloc_coherent
ZhengYuan Huang (3):
fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib fs/ntfs3: validate index entry key bounds
btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()
Zhiling Zou (5):
sctp: close UDP tunnel sockets during netns teardown
ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink
openvswitch: avoid reallocating confirmed conntrack labels
ipv6: xfrm: use full sockets in local error paths
xsk: Use a 32-bit compare in xsk_map_gen_lookup
Zhongqiu Han (1):
cpufreq: zero-initialize policy cpumask before sysfs publication
Zhu Ling (1):
mmc: core: Fix OF node reference leak on card add failure
Zihan Xi (4):
ipv6: fix fib6 walker UAF on seq stop
ipv4: fib: bound automatic table ID allocation
wifi: virt_wifi: don't transfer operstate before register
smb: client: validate POSIX create context length
Zijie Huang (1):
net: arp: terminate device name before lookup
Zijun Hu (1):
mfd: db8500-prcmu: Remove needless return in three void APIs
Zixuan Chai (1):
llc: reserve device headroom for allocated frames
Zizhi Wo (1):
scsi: core: Do not block on tag allocation in scsi_eh_lock_door()
bui duc phuc (4):
ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt
ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence
ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure
net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error
guoqi0226 (1):
spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()
hpp.iscas (3):
ASoC: bcm: bcm63xx: Publish the OF module aliases
ASoC: Intel: SST: Publish the PCI module aliases
ASoC: mt6351: Publish the OF module alias
ikaros (13):
ACPICA: Fix condition check in acpi_ps_parse_loop()
ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()
ACPICA: add boundary checks in acpi_ps_get_next_field()
ACPICA: validate byte_count in acpi_ps_get_next_package_length()
ACPICA: Prevent adding invalid references
ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)
ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg()
ACPICA: validate handler object type in two places
ACPICA: Add package limit checks in parser functions
ACPICA: Add validation for node in acpi_ns_build_normalized_path()
ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op()
ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()
ACPICA: add boundary checks in two places
leixiang (1):
KVM: PPC: Book3S HV: Set irqfd->producer only on success
liyouhong (1):
ata: ahci: fail probe if BAR too small for claimed ports
[email protected] (1):
start_kernel: Add __no_stack_protector function attribute
shayderrr (1):
host1x: bus: Fix missing ops null check in error teardown
wangdicheng (2):
ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits
ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()
Ömer Mete Kaya (3):
nfc: llcp: fix -ENOMEM on connect with zero-length service name
nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()
nfc: llcp: fix slab-out-of-bounds reads when logging service names
Greg Kroah-Hartman
maintainerDocumentation/ABI/testing/sysfs-devices-platform-trackpoint +1 -1
@@ -5,7 +5,7 @@ Contact: [email protected] Description: (RW) Trackpoint sensitivity. -What: /sys/devices/platform/i8042/.../intertia +What: /sys/devices/platform/i8042/.../inertia Date: Aug, 2005 KernelVersion: 2.6.14 Contact: [email protected]
Documentation/networking/ip-sysctl.rst +2 -0
@@ -717,6 +717,8 @@ tcp_rmem - vector of 3 INTEGERs: min, default, max case this value is ignored. Default: between 131072 and 6MB, depending on RAM size. + Each of the three values cannot be set below 4096. + tcp_sack - BOOLEAN Enable select acknowledgments (SACKS).
Documentation/s390/pci.rst +101 -51
208 lines not on this page · raw message
Documentation/s390/vfio-ccw.rst +1 -1
@@ -176,7 +176,7 @@ The process of how these work together. Use the 'mdev_create' sysfs file, we need to manually create one (and only one for our case) mediated device. 3. vfio_mdev.ko drives the mediated ccw device. - vfio_mdev is also the vfio device drvier. It will probe the mdev and + vfio_mdev is also the vfio device driver. It will probe the mdev and add it to an iommu_group and a vfio_group. Then we could pass through the mdev to a guest.
Makefile +1 -1
@@ -1,7 +1,7 @@ # SPDX-License-Identifier: GPL-2.0 VERSION = 6 PATCHLEVEL = 1 -SUBLEVEL = 188 +SUBLEVEL = 189 EXTRAVERSION = NAME = Curry Ramen
arch/alpha/include/uapi/asm/fpu.h +2 -6
@@ -101,12 +101,7 @@ ieee_swcr_to_fpcr(unsigned long sw) | IEEE_TRAP_ENABLE_OVF)) << 48; fp |= (~sw & (IEEE_TRAP_ENABLE_UNF |IEEE_TRAP_ENABLE_INE )) <<57 ; fp |= (sw &IEEE_MAP_UMZ ?FPCR_UNDZ |FPCR_UNFD :0 ); -/* -* Disable denormal operand traps only when denormal inputs are to be -* flushed to zero. Otherwise they must keep trapping, so that /S -* instructions reach the kernel emulation handler. -*/ - fp |= (sw &IEEE_MAP_DMZ ?FPCR_DNOD :0 ); + fp |= (~sw &IEEE_TRAP_ENABLE_DNO ) <<41 ;return fp; }
@@ -121,6 +116,7 @@ ieee_fpcr_to_swcr(unsigned long fp) | IEEE_TRAP_ENABLE_OVF); sw |= (~fp >>57 ) & (IEEE_TRAP_ENABLE_UNF |IEEE_TRAP_ENABLE_INE ); sw |= (fp >>47 ) &IEEE_MAP_UMZ ; + sw |= (~fp >>41 ) &IEEE_TRAP_ENABLE_DNO ;return sw; }
arch/alpha/kernel/traps.c +3 -3
@@ -198,12 +198,12 @@ static long dummy_emul(void) { return 0; }long (*alpha_fp_emul_imprecise)(struct pt_regs *regs,unsigned long writemask) = (void *)dummy_emul;EXPORT_SYMBOL_GPL (alpha_fp_emul_imprecise); -long (*alpha_fp_emul) (unsigned long pc,unsigned long summary) +long (*alpha_fp_emul) (unsigned long pc) = (void *)dummy_emul;EXPORT_SYMBOL_GPL (alpha_fp_emul);#else long alpha_fp_emul_imprecise (struct pt_regs *regs,unsigned long writemask); -long alpha_fp_emul (unsigned long pc,unsigned long summary); +long alpha_fp_emul (unsigned long pc);#endif asmlinkage void
@@ -217,7 +217,7 @@ do_entArith(unsigned long summary, unsigned long write_mask,emulate the instruction. If the processor supports precise exceptions, we don't have to search. */ if (!amask (AMASK_PRECISE_TRAP )) - si_code =alpha_fp_emul (regs->pc -4 , summary); + si_code =alpha_fp_emul (regs->pc -4 );else si_code =alpha_fp_emul_imprecise (regs, write_mask);if (si_code ==0 )
arch/alpha/math-emu/math.c +11 -77
125 lines not on this page · raw message
arch/arm/mach-socfpga/Kconfig +1 -1
@@ -16,7 +16,7 @@ menuconfig ARCH_INTEL_SOCFPGA select ARM_ERRATA_775420 select PL310_ERRATA_588369 select PL310_ERRATA_727915 - select PL310_ERRATA_753970 if PL310 + select PL310_ERRATA_753970 select PL310_ERRATA_769419 select RESET_CONTROLLER
arch/arm/mach-ux500/cpu-db8500.c +3 -3
@@ -12,7 +12,7 @@#include <linux/irq.h> #include <linux/irqchip.h> #include <linux/irqchip/arm-gic.h> -#include <linux/mfd/dbx500-prcmu.h> +#include <linux/mfd/db8500-prcmu.h> #include <linux/platform_data/arm-ux500-pm.h> #include <linux/platform_device.h> #include <linux/io.h>
@@ -84,7 +84,7 @@ static void __init ux500_init_irq(void)struct resource r;irqchip_init (); -prcmu_early_init (); +db8500_prcmu_early_init (); np =of_find_compatible_node (NULL ,NULL ,"stericsson,db8500-prcmu" );of_address_to_resource (np,0 , &r);of_node_put (np);
@@ -104,7 +104,7 @@ static void ux500_restart(enum reboot_mode mode, const char *cmd)local_irq_disable ();local_fiq_disable (); -prcmu_system_reset (0 ); +db8500_prcmu_system_reset (0 ); }static const struct of_device_id u8500_local_bus_nodes[] = {
arch/arm/mm/cache-feroceon-l2.c +1 -1
@@ -295,7 +295,7 @@ static inline u32 read_extra_features(void)return u; } -static inline void write_extra_features (u32 u) +static inline void __init write_extra_features (u32 u) { __asm__("mcr p15, 1, %0, c15, c1, 0" : :"r" (u)); }
arch/arm/mm/cache-tauros2.c +1 -1
@@ -177,7 +177,7 @@ static inline void __init write_actlr(u32 actlr) __asm__("mcr p15, 0, %0, c1, c0, 1\n" : :"r" (actlr)); } -static void enable_extra_feature (unsigned int features) +static void __init enable_extra_feature (unsigned int features) {u32 u;
arch/arm/mm/fault.c +11 -1
@@ -187,7 +187,8 @@ __do_kernel_fault(struct mm_struct *mm, unsigned long addr, unsigned int fsr,/* * Something tried to access memory that isn't in our memory map.. -* User mode accesses just cause a SIGSEGV +* User mode accesses just cause a SIGSEGV. Ensure interrupts are enabled +* for preempt RT. */ static void __do_user_fault(unsigned long addr, unsigned int fsr, unsigned int sig,
@@ -195,6 +196,8 @@ __do_user_fault(unsigned long addr, unsigned int fsr, unsigned int sig, {struct task_struct *tsk = current; +local_irq_enable (); +#ifdef CONFIG_DEBUG_USER if (((user_debug &UDBG_SEGV ) && (sig ==SIGSEGV )) || ((user_debug &UDBG_BUS ) && (sig ==SIGBUS ))) {
@@ -251,6 +254,7 @@ do_kernel_address_page_fault(struct mm_struct *mm, unsigned long addr,* should not be faulting in kernel space, which includes the * vector/khelper page. Handle the branch predictor hardening * while interrupts are still disabled, then send a SIGSEGV. +* Note that __do_user_fault() will enable interrupts. */ harden_branch_predictor ();__do_user_fault (addr, fsr,SIGSEGV ,SEGV_MAPERR , regs);
@@ -583,6 +587,9 @@ do_DataAbort(unsigned long addr, unsigned int fsr, struct pt_regs *regs)if (!inf->fn (addr, fsr & ~FSR_LNX_PF , regs))return ; +if (likely (user_mode (regs))) +local_irq_enable (); +pr_alert ("8<--- cut here ---\n" );pr_alert ("Unhandled fault: %s (0x%03x) at 0x%08lx\n" , inf->name, fsr, addr);
@@ -621,6 +628,9 @@ do_PrefetchAbort(unsigned long addr, unsigned int ifsr, struct pt_regs *regs)if (!inf->fn (addr, ifsr |FSR_LNX_PF , regs))return ; +if (likely (user_mode (regs))) +local_irq_enable (); +pr_alert ("8<--- cut here ---\n" );pr_alert ("Unhandled prefetch abort: %s (0x%03x) at 0x%08lx\n" , inf->name, ifsr, addr);
arch/arm64/boot/dts/qcom/sdm845.dtsi +32 -32
76 lines not on this page · raw message
arch/arm64/boot/dts/qcom/sm8150.dtsi +4 -4
@@ -1810,8 +1810,8 @@ pcie0: pci@1c00000 { "slave_q2a", "tbu"; - iommu-map = <0x0 &apps_smmu 0x1d80 0x0 0x1>, - <0x100 &apps_smmu 0x1d81 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1d80 0x1>, + <0x100 &apps_smmu 0x1d81 0x1>; resets = <&gcc GCC_PCIE_0_BCR>; reset-names = "pci";
@@ -1912,8 +1912,8 @@ pcie1: pci@1c08000 { assigned-clocks = <&gcc GCC_PCIE_1_AUX_CLK>; assigned-clock-rates = <19200000>; - iommu-map = <0x0 &apps_smmu 0x1e00 0x0 0x1>, - <0x100 &apps_smmu 0x1e01 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1e00 0x1>, + <0x100 &apps_smmu 0x1e01 0x1>; resets = <&gcc GCC_PCIE_1_BCR>; reset-names = "pci";
arch/arm64/boot/dts/qcom/sm8250.dtsi +6 -6
@@ -1850,8 +1850,8 @@ pcie0: pci@1c00000 { "tbu", "ddrss_sf_tbu"; - iommu-map = <0x0 &apps_smmu 0x1c00 0x0 0x1>, - <0x100 &apps_smmu 0x1c01 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1c00 0x1>, + <0x100 &apps_smmu 0x1c01 0x1>; resets = <&gcc GCC_PCIE_0_BCR>; reset-names = "pci";
@@ -1956,8 +1956,8 @@ pcie1: pci@1c08000 { assigned-clocks = <&gcc GCC_PCIE_1_AUX_CLK>; assigned-clock-rates = <19200000>; - iommu-map = <0x0 &apps_smmu 0x1c80 0x0 0x1>, - <0x100 &apps_smmu 0x1c81 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1c80 0x1>, + <0x100 &apps_smmu 0x1c81 0x1>; resets = <&gcc GCC_PCIE_1_BCR>; reset-names = "pci";
@@ -2064,8 +2064,8 @@ pcie2: pci@1c10000 { assigned-clocks = <&gcc GCC_PCIE_2_AUX_CLK>; assigned-clock-rates = <19200000>; - iommu-map = <0x0 &apps_smmu 0x1d00 0x0 0x1>, - <0x100 &apps_smmu 0x1d01 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1d00 0x1>, + <0x100 &apps_smmu 0x1d01 0x1>; resets = <&gcc GCC_PCIE_2_BCR>; reset-names = "pci";
arch/arm64/boot/dts/qcom/sm8350.dtsi +4 -4
@@ -1635,8 +1635,8 @@ pcie0: pci@1c00000 { "aggre1", "aggre0"; - iommu-map = <0x0 &apps_smmu 0x1c00 0x0 0x1>, - <0x100 &apps_smmu 0x1c01 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1c00 0x1>, + <0x100 &apps_smmu 0x1c01 0x1>; resets = <&gcc GCC_PCIE_0_BCR>; reset-names = "pci";
@@ -1718,8 +1718,8 @@ pcie1: pci@1c08000 { "ddrss_sf_tbu", "aggre1"; - iommu-map = <0x0 &apps_smmu 0x1c80 0x0 0x1>, - <0x100 &apps_smmu 0x1c81 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1c80 0x1>, + <0x100 &apps_smmu 0x1c81 0x1>; resets = <&gcc GCC_PCIE_1_BCR>; reset-names = "pci";
arch/arm64/boot/dts/qcom/sm8450.dtsi +4 -4
@@ -1759,8 +1759,8 @@ pcie0: pci@1c00000 { "aggre0", "aggre1"; - iommu-map = <0x0 &apps_smmu 0x1c00 0x0 0x1>, - <0x100 &apps_smmu 0x1c01 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1c00 0x1>, + <0x100 &apps_smmu 0x1c01 0x1>; resets = <&gcc GCC_PCIE_0_BCR>; reset-names = "pci";
@@ -1865,8 +1865,8 @@ pcie1: pci@1c08000 { "ddrss_sf_tbu", "aggre1"; - iommu-map = <0x0 &apps_smmu 0x1c80 0x0 0x1>, - <0x100 &apps_smmu 0x1c81 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1c80 0x1>, + <0x100 &apps_smmu 0x1c81 0x1>; resets = <&gcc GCC_PCIE_1_BCR>; reset-names = "pci";
arch/arm64/boot/dts/qcom/sm8550.dtsi +4 -4
@@ -1432,8 +1432,8 @@ pcie0: pci@1c00000 { msi-map = <0x0 &gic_its 0x1400 0x1>, <0x100 &gic_its 0x1401 0x1>; - iommu-map = <0x0 &apps_smmu 0x1400 0x0 0x1>, - <0x100 &apps_smmu 0x1401 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1400 0x1>, + <0x100 &apps_smmu 0x1401 0x1>; resets = <&gcc GCC_PCIE_0_BCR>; reset-names = "pci";
@@ -1537,8 +1537,8 @@ pcie1: pci@1c08000 { msi-map = <0x0 &gic_its 0x1480 0x1>, <0x100 &gic_its 0x1481 0x1>; - iommu-map = <0x0 &apps_smmu 0x1480 0x0 0x1>, - <0x100 &apps_smmu 0x1481 0x0 0x1>; + iommu-map = <0x0 &apps_smmu 0x1480 0x1>, + <0x100 &apps_smmu 0x1481 0x1>; resets = <&gcc GCC_PCIE_1_BCR>, <&gcc GCC_PCIE_1_LINK_DOWN_BCR>;
arch/arm64/boot/dts/renesas/r8a779f0.dtsi +1 -0
@@ -646,6 +646,7 @@ ufs: ufs@e6860000 { clocks = <&cpg CPG_MOD 1514>, <&ufs30_clk>; clock-names = "fck", "ref_clk"; freq-table-hz = <200000000 200000000>, <38400000 38400000>; + lanes-per-direction = <1>; power-domains = <&sysc R8A779F0_PD_ALWAYS_ON>; resets = <&cpg 1514>; status = "disabled";
arch/arm64/include/asm/daifflags.h +5 -5
@@ -19,7 +19,7 @@/* mask/save/unmask/restore all exceptions, including interrupts. */ -static inline void local_daif_mask (void ) +static __always_inline void local_daif_mask(void) { WARN_ON(system_has_prio_mask_debugging() && (read_sysreg_s(SYS_ICC_PMR_EL1) == (GIC_PRIO_IRQOFF |
@@ -38,7 +38,7 @@ static inline void local_daif_mask(void)trace_hardirqs_off (); } -static inline unsigned long local_daif_save_flags (void ) +static __always_inline unsigned long local_daif_save_flags (void ) {unsigned long flags;
@@ -53,7 +53,7 @@ static inline unsigned long local_daif_save_flags(void)return flags; } -static inline unsigned long local_daif_save (void ) +static __always_inline unsigned long local_daif_save (void ) {unsigned long flags;
@@ -64,7 +64,7 @@ static inline unsigned long local_daif_save(void)return flags; } -static inline void local_daif_restore (unsigned long flags) +static __always_inline void local_daif_restore(unsigned long flags) {bool irq_disabled = flags &PSR_I_BIT ;
@@ -124,7 +124,7 @@ static inline void local_daif_restore(unsigned long flags)* Called by synchronous exception handlers to restore the DAIF bits that were * modified by taking an exception. */ -static inline void local_daif_inherit (struct pt_regs *regs) +static __always_inline void local_daif_inherit(struct pt_regs *regs) {unsigned long flags = regs->pstate &DAIF_MASK ;
arch/arm64/include/asm/fixmap.h +5 -1
@@ -75,8 +75,12 @@ enum fixed_addresses {/* * Temporary boot-time mappings, used by early_ioremap(), * before ioremap() is functional. +* +* Reserve one extra page so a 256K mapping may start at any +* offset within a page. early_ioremap() maps the page-aligned +* physical range, so the initial offset can consume an extra page. */ -#define NR_FIX_BTMAPS (SZ_256K / PAGE_SIZE) +#define NR_FIX_BTMAPS ((SZ_256K / PAGE_SIZE) + 1)#define FIX_BTMAPS_SLOTS 7#define TOTAL_FIX_BTMAPS (NR_FIX_BTMAPS * FIX_BTMAPS_SLOTS)
arch/arm64/include/asm/kprobes.h +6 -0
@@ -26,6 +26,12 @@struct prev_kprobe {struct kprobe *kp;unsigned int status; + +/* +* The original DAIF state of the outer kprobe, saved here before +* a nested kprobe overwrites kcb->saved_irqflag during reentry. +*/ +unsigned long saved_irqflag; };/* per-cpu kprobe control block */
arch/arm64/include/asm/percpu.h +8 -8
@@ -178,13 +178,13 @@ PERCPU_RET_OP(add, add, ldadd) _pcp_protect_return(__percpu_read_64, pcp)#define this_cpu_write_1 (pcp, val) \ - _pcp_protect(__percpu_write_8, pcp, (unsigned long)val) + _pcp_protect(__percpu_write_8, pcp, (unsigned long)(val))#define this_cpu_write_2 (pcp, val) \ - _pcp_protect(__percpu_write_16, pcp, (unsigned long)val) + _pcp_protect(__percpu_write_16, pcp, (unsigned long)(val))#define this_cpu_write_4 (pcp, val) \ - _pcp_protect(__percpu_write_32, pcp, (unsigned long)val) + _pcp_protect(__percpu_write_32, pcp, (unsigned long)(val))#define this_cpu_write_8 (pcp, val) \ - _pcp_protect(__percpu_write_64, pcp, (unsigned long)val) + _pcp_protect(__percpu_write_64, pcp, (unsigned long)(val))#define this_cpu_add_1 (pcp, val) \ _pcp_protect(__percpu_add_case_8, pcp, val)
@@ -205,13 +205,13 @@ PERCPU_RET_OP(add, add, ldadd) _pcp_protect_return(__percpu_add_return_case_64, pcp, val)#define this_cpu_and_1 (pcp, val) \ - _pcp_protect(__percpu_andnot_case_8, pcp, ~val) + _pcp_protect(__percpu_andnot_case_8, pcp, ~(u8)(val))#define this_cpu_and_2 (pcp, val) \ - _pcp_protect(__percpu_andnot_case_16, pcp, ~val) + _pcp_protect(__percpu_andnot_case_16, pcp, ~(u16)(val))#define this_cpu_and_4 (pcp, val) \ - _pcp_protect(__percpu_andnot_case_32, pcp, ~val) + _pcp_protect(__percpu_andnot_case_32, pcp, ~(u32)(val))#define this_cpu_and_8 (pcp, val) \ - _pcp_protect(__percpu_andnot_case_64, pcp, ~val) + _pcp_protect(__percpu_andnot_case_64, pcp, ~(u64)(val))#define this_cpu_or_1 (pcp, val) \ _pcp_protect(__percpu_or_case_8, pcp, val)
arch/arm64/kernel/hibernate-asm.S +2 -0
@@ -89,6 +89,8 @@ alternative_insn "dc cvau, x4", "dc civac, x4", ARM64_WORKAROUND_CLEAN_CACHE isb cbz x24, 3f /* Do we need to re-initialise EL2? */ + mov x1, x24 + mov x0, #HVC_SET_VECTORS hvc #0 3: ret SYM_CODE_END(swsusp_arch_suspend_exit)
arch/arm64/kernel/probes/kprobes.c +22 -1
@@ -165,12 +165,27 @@ static void __kprobes save_previous_kprobe(struct kprobe_ctlblk *kcb) { kcb->prev_kprobe.kp =kprobe_running (); kcb->prev_kprobe.status = kcb->kprobe_status; + +/* +* Save the outer kprobe's original DAIF flags before the nested +* kprobe calls kprobes_save_local_irqflag() and overwrites +* kcb->saved_irqflag. Without this, the outer kprobe will restore +* the wrong DAIF state and leave interrupts permanently masked. +*/ + kcb->prev_kprobe.saved_irqflag = kcb->saved_irqflag; }static void __kprobes restore_previous_kprobe (struct kprobe_ctlblk *kcb) {__this_cpu_write (current_kprobe, kcb->prev_kprobe.kp); kcb->kprobe_status = kcb->prev_kprobe.status; + +/* +* Restore the outer kprobe's saved_irqflag so that when its +* single-step completes, kprobes_restore_local_irqflag() uses +* the correct original DAIF value. +*/ + kcb->saved_irqflag = kcb->prev_kprobe.saved_irqflag; }static void __kprobes set_current_kprobe (struct kprobe *p)
@@ -231,10 +246,16 @@ static int __kprobes reenter_kprobe(struct kprobe *p,switch (kcb->kprobe_status) {case KPROBE_HIT_SSDONE :case KPROBE_HIT_ACTIVE : +case KPROBE_HIT_SS : +/* +* A probe can be hit while another kprobe is preparing or +* executing its XOL single-step instruction. This is still a +* recoverable one-level reentry, so handle it in the same way as +* reentry from KPROBE_HIT_ACTIVE or KPROBE_HIT_SSDONE. +*/ kprobes_inc_nmissed_count (p);setup_singlestep (p, regs, kcb,1 );break ; -case KPROBE_HIT_SS :case KPROBE_REENTER :pr_warn ("Failed to recover from reentered kprobes.\n" );dump_kprobe (p);
arch/mips/cavium-octeon/octeon-platform.c +2 -2
@@ -15,7 +15,7 @@#include <asm/octeon/octeon.h> #include <asm/octeon/cvmx-helper-board.h> -#ifdef CONFIG_USB +#if IS_ENABLED (CONFIG_USB )#include <linux/usb/ehci_def.h> #include <linux/usb/ehci_pdriver.h> #include <linux/usb/ohci_pdriver.h>
@@ -1079,7 +1079,7 @@ int __init octeon_prune_device_tree(void) ; } -#ifdef CONFIG_USB +#if IS_ENABLED (CONFIG_USB )/* OHCI/UHCI USB */ alias_prop =fdt_getprop (initial_boot_params, aliases,"uctl" ,NULL );
arch/mips/kernel/cps-vec.S +6 -0
@@ -394,8 +394,11 @@ LEAF(mips_cps_boot_vpes) .set pop PTR_LA t1, 1f + .set push + .set MIPS_ISA_LEVEL_RAW jr.hb t1 nop + .set pop 1: mfc0 t1, CP0_MVPCONTROL ori t1, t1, MVPCONTROL_VPC mtc0 t1, CP0_MVPCONTROL
@@ -508,8 +511,11 @@ LEAF(mips_cps_boot_vpes) li t0, TCHALT_H mtc0 t0, CP0_TCHALT PTR_LA t0, 1f + .set push + .set MIPS_ISA_LEVEL_RAW 1: jr.hb t0 nop + .set pop 2:
arch/mips/net/bpf_jit_comp32.c +1 -1
@@ -1111,7 +1111,7 @@ static void emit_jmp_i64(struct jit_context *ctx,emit (ctx, xor, tmp,lo (dst), tmp); }if (imm <0 ) {/* Compare sign extension */ -emit (ctx, addu,MIPS_R_T9 ,hi (dst),1 ); +emit (ctx, addiu,MIPS_R_T9 ,hi (dst),1 );emit (ctx, or, tmp, tmp,MIPS_R_T9 ); }else {/* Compare zero extension */ emit (ctx, or, tmp, tmp,hi (dst));
arch/mips/net/bpf_jit_comp64.c +1 -2
@@ -302,8 +302,7 @@ static void emit_bswap_r64(struct jit_context *ctx, u8 dst, u32 width)case 16 :emit_sext (ctx, dst, dst);emit_bswap_r (ctx, dst, width); -if (cpu_has_mips64r2 || cpu_has_mips64r6) -emit_zext (ctx, dst); +emit_zext (ctx, dst);break ; }clobber_reg (ctx, dst);
arch/powerpc/kernel/eeh_driver.c +0 -2
@@ -533,9 +533,7 @@ static void eeh_rmv_device(struct eeh_dev *edev, void *userdata)if (rmv_data)list_add (&edev->rmv_entry, &rmv_data->removed_vf_list); }else { -pci_lock_rescan_remove ();pci_stop_and_remove_bus_device (dev); -pci_unlock_rescan_remove (); } }
arch/powerpc/kernel/iommu.c +1 -1
@@ -1055,7 +1055,7 @@ int iommu_tce_check_ioba(unsigned long page_shift,if (ioba < offset)return -EINVAL ; -if ((ioba +1 ) > (offset + size)) +if ((ioba + npages < ioba) || (ioba - offset + npages > size))return -EINVAL ;return 0 ;
arch/powerpc/kernel/smp.c +1 -0
@@ -1608,6 +1608,7 @@ static void add_cpu_to_masks(int cpu) }/* Activate a secondary processor. */ +__no_stack_protector void start_secondary(void *unused) {unsigned int cpu =raw_smp_processor_id ();
arch/powerpc/kexec/file_load_64.c +1 -1
@@ -479,7 +479,7 @@ static int add_usable_mem(struct umem_info *um_info, u64 base, u64 end) loc_end = um_info->ranges[i].end;if (loc_base >= base && loc_end <= end) add = true; -else if (base < loc_end && end > loc_base) { +else if (base <= loc_end && end >= loc_base) {if (loc_base < base) loc_base = base;if (loc_end > end)
arch/powerpc/kvm/book3s_hv.c +2 -2
@@ -5756,12 +5756,12 @@ static int kvmppc_irq_bypass_add_producer_hv(struct irq_bypass_consumer *cons,struct kvm_kernel_irqfd *irqfd = container_of(cons, struct kvm_kernel_irqfd, consumer); - irqfd->producer = prod; - ret =kvmppc_set_passthru_irq (irqfd->kvm, prod->irq, irqfd->gsi);if (ret)pr_info ("kvmppc_set_passthru_irq (irq %d, gsi %d) fails: %d\n" , prod->irq, irqfd->gsi, ret); +else + irqfd->producer = prod;return ret; }
arch/powerpc/kvm/book3s_hv_nested.c +2 -0
@@ -1172,8 +1172,10 @@ static void kvmhv_emulate_tlbie_all_lpid(struct kvm_vcpu *vcpu, int ric)spin_lock (&kvm->mmu_lock);idr_for_each_entry (&kvm->arch.kvm_nested_guest_idr, gp, lpid) { + ++gp->refcnt;spin_unlock (&kvm->mmu_lock);kvmhv_emulate_tlbie_lpid (vcpu, gp, ric); +kvmhv_put_nested (gp);spin_lock (&kvm->mmu_lock); }spin_unlock (&kvm->mmu_lock);
arch/powerpc/kvm/book3s_hv_uvmem.c +4 -1
@@ -774,8 +774,11 @@ static int kvmppc_svm_page_in(struct vm_area_struct *vma,if (spage) { ret =uv_page_in (kvm->arch.lpid, pfn << page_shift, gpa,0 , page_shift); -if (ret) +if (ret) { +unlock_page (dpage); +put_page (dpage); goto out_finalize; + } } }
arch/powerpc/platforms/pseries/kexec.c +8 -5
@@ -20,12 +20,15 @@void pseries_kexec_cpu_down (int crash_shutdown,int secondary) {/* -* Don't risk a hypervisor call if we're crashing -* XXX: Why? The hypervisor is not crashing. It might be better -* to at least attempt unregister to avoid the hypervisor stepping -* on our memory. +* Ensure vpa/slb_shadow/dtl cleanup even while we are crashing. +* Why? The hypervisor is not crashing so at least attempt unregister to +* avoid the hypervisor stepping on our memory. If hypervisor or kexec +* kernel steps on the old memory allocated to these areas before the +* new kexec-kernel happens to allocate and register new areas, +* the hypervisor will see invalid content which may cause +* unexpected behavior. */ -if (firmware_has_feature (FW_FEATURE_SPLPAR ) && !crash_shutdown) { +if (firmware_has_feature (FW_FEATURE_SPLPAR )) {int ret;int cpu =smp_processor_id ();int hwcpu =hard_smp_processor_id ();
arch/riscv/kvm/vcpu_timer.c +4 -1
@@ -60,10 +60,13 @@ static enum hrtimer_restart kvm_riscv_vcpu_hrtimer_expired(struct hrtimer *h)static int kvm_riscv_vcpu_timer_cancel (struct kvm_vcpu_timer *t) { -if (!t->init_done || !t->next_set) +if (!t->init_done)return -EINVAL ;hrtimer_cancel (&t->hrt); + +if (!t->next_set) +return -EINVAL ; t->next_set = false;return 0 ;
arch/s390/crypto/aes_s390.c +12 -4
@@ -608,6 +608,7 @@ static int ctr_aes_crypt(struct skcipher_request *req)memcpy (walk.dst.virt.addr, buf, nbytes);crypto_inc (walk.iv,AES_BLOCK_SIZE ); ret =skcipher_walk_done (&walk,0 ); +memzero_explicit (buf,sizeof (buf)); }return ret;
@@ -909,10 +910,14 @@ static int gcm_aes_crypt(struct aead_request *req, unsigned int flags) gw_in.ptr, aad_bytes); n = aad_bytes + pc_bytes; -if (gcm_in_walk_done (&gw_in, n) != n) -return -ENOMEM ; -if (gcm_out_walk_done (&gw_out, n) != n) -return -ENOMEM ; +if (gcm_in_walk_done (&gw_in, n) != n) { + ret = -ENOMEM ; + goto out; + } +if (gcm_out_walk_done (&gw_out, n) != n) { + ret = -ENOMEM ; + goto out; + } aadlen -= aad_bytes; pclen -= pc_bytes; }while (aadlen + pclen >0 );
@@ -924,7 +929,10 @@ static int gcm_aes_crypt(struct aead_request *req, unsigned int flags) }else scatterwalk_map_and_copy (param.t, req->dst, len, taglen,1 ); +out:memzero_explicit (¶m,sizeof (param)); +memzero_explicit (gw_in.buf,sizeof (gw_in.buf)); +memzero_explicit (gw_out.buf,sizeof (gw_out.buf));return ret; }
arch/s390/include/asm/debug.h +6 -2
@@ -451,7 +451,11 @@ static int VNAME(var, active_entries)[EARLY_AREAS] __initdata#define __REGISTER_STATIC_DEBUG_INFO (var, name, pages, areas, view) \ static int __init VNAME(var, reg)(void) \ { \ - debug_register_static(&var, (pages), (areas)); \ + int rc; \ + \ + rc = debug_register_static(&var, (pages), (areas)); \ + if (rc) \ + return rc; \ debug_register_view(&var, (view)); \ return 0; \ } \
@@ -483,7 +487,7 @@ static debug_info_t __refdata var = \__DEBUG_INFO_INIT (var, (name), (buf_size)); \ __REGISTER_STATIC_DEBUG_INFO(var, name, pages, nr_areas, view) -void debug_register_static (debug_info_t *id,int pages_per_area,int nr_areas); +int debug_register_static (debug_info_t *id,int pages_per_area,int nr_areas);#endif /* MODULE */
arch/s390/kernel/debug.c +11 -4
@@ -345,7 +345,8 @@ static debug_info_t *debug_info_copy(debug_info_t *in, int mode)debug_info_free (rc); }while (1 ); -if (mode ==NO_AREAS ) +/* debug_register_static() failure leaves areas NULL, bounds intact */ +if (mode ==NO_AREAS || !in->areas) goto out;for (i =0 ; i < in->nr_areas; i++) {
@@ -703,8 +704,12 @@ EXPORT_SYMBOL(debug_register);* * Note: This function is called automatically via an initcall generated by * DEFINE_STATIC_DEBUG_INFO. +* +* Return: +* - 0 on success +* - negative error code on failure */ -void debug_register_static (debug_info_t *id,int pages_per_area,int nr_areas) +int debug_register_static (debug_info_t *id,int pages_per_area,int nr_areas) {unsigned long flags;debug_info_t *copy;
@@ -712,7 +717,7 @@ void debug_register_static(debug_info_t *id, int pages_per_area, int nr_areas)if (!initialized) {pr_err ("Tried to register debug feature %s too early\n" , id->name); -return ; +return -EINVAL ; } copy = debug_info_alloc("", pages_per_area, nr_areas, id->buf_size,
@@ -727,7 +732,7 @@ void debug_register_static(debug_info_t *id, int pages_per_area, int nr_areas) id->active_entries =NULL ;spin_unlock_irqrestore (&id->lock, flags); -return ; +return -ENOMEM ; }/* Replace static trace area with dynamic copy. */
@@ -745,6 +750,8 @@ void debug_register_static(debug_info_t *id, int pages_per_area, int nr_areas)mutex_lock (&debug_mutex);_debug_register (id);mutex_unlock (&debug_mutex); + +return 0 ; }/* Remove debugfs entries. */
arch/sh/drivers/push-switch.c +1 -1
@@ -101,8 +101,8 @@ static int switch_drv_remove(struct platform_device *pdev)device_remove_file (&pdev->dev, &dev_attr_switch);platform_set_drvdata (pdev,NULL ); +timer_shutdown_sync (&psw->debounce);flush_work (&psw->work); -del_timer_sync (&psw->debounce);free_irq (irq, pdev);kfree (psw);
arch/sparc/Kconfig +1 -0
@@ -487,6 +487,7 @@ endmenu config COMPAT bool depends on SPARC64 + depends on !LD_IS_LLD default y select HAVE_UID16 select ARCH_WANT_OLD_COMPAT_IPC
arch/sparc/kernel/uprobes.c +1 -0
@@ -278,6 +278,7 @@ int arch_uprobe_exception_notify(struct notifier_block *self,case DIE_SSTEP :if (uprobe_post_sstep_notifier (args->regs)) ret =NOTIFY_STOP ; +break ;default :break ;
arch/x86/events/intel/core.c +37 -18
73 lines not on this page · raw message
arch/x86/pci/fixup.c +99 -0
103 lines not on this page · raw message
block/blk-cgroup.c +5 -8
@@ -334,15 +334,15 @@ static struct blkcg_gq *blkg_create(struct blkcg *blkcg, struct gendisk *disk, blkg->pd[i]->online = true; } } + blkg->online = true; } - blkg->online = true;spin_unlock (&blkcg->lock);if (!ret)return blkg;/* @blkg failed fully initialized, use the usual release path */ -blkg_put (blkg); +percpu_ref_kill (&blkg->refcnt);return ERR_PTR (ret); err_put_css:
@@ -1003,13 +1003,10 @@ static int blkcg_print_stat(struct seq_file *sf, void *v)else cgroup_rstat_flush (blkcg->css.cgroup); -rcu_read_lock (); -hlist_for_each_entry_rcu (blkg, &blkcg->blkg_list, blkcg_node) { -spin_lock_irq (&blkg->q->queue_lock); +guard (spinlock_irq)(&blkcg->lock); +hlist_for_each_entry (blkg, &blkcg->blkg_list, blkcg_node)blkcg_print_one_stat (blkg, sf); -spin_unlock_irq (&blkg->q->queue_lock); - } -rcu_read_unlock (); +return 0 ; }
block/blk-mq.c +6 -2
@@ -4800,7 +4800,8 @@ static void __blk_mq_update_nr_hw_queues(struct blk_mq_tag_set *set, {struct request_queue *q;LIST_HEAD (head); -int prev_nr_hw_queues; +int prev_nr_hw_queues = set->nr_hw_queues; +int i;lockdep_assert_held (&set->tag_list_lock);
@@ -4827,7 +4828,6 @@ static void __blk_mq_update_nr_hw_queues(struct blk_mq_tag_set *set,blk_mq_sysfs_unregister_hctxs (q); } - prev_nr_hw_queues = set->nr_hw_queues;if (blk_mq_realloc_tag_set_tags (set, set->nr_hw_queues, nr_hw_queues) <0 ) goto reregister;
@@ -4865,6 +4865,10 @@ static void __blk_mq_update_nr_hw_queues(struct blk_mq_tag_set *set,list_for_each_entry (q, &set->tag_list, tag_set_list)blk_mq_unfreeze_queue (q); + +/* Free the excess tags when nr_hw_queues shrink. */ +for (i = set->nr_hw_queues; i < prev_nr_hw_queues; i++) +__blk_mq_free_map_and_rqs (set, i); }void blk_mq_update_nr_hw_queues (struct blk_mq_tag_set *set,int nr_hw_queues)
crypto/Makefile +5 -0
@@ -186,6 +186,11 @@ obj-$(CONFIG_CRYPTO_ECC) += ecc.o obj-$(CONFIG_CRYPTO_ESSIV) += essiv.o obj-$(CONFIG_CRYPTO_CURVE25519) += curve25519-generic.o +# https://gcc.gnu.org/bugzilla/show_bug.cgi?id=124949 +ifeq ($(CONFIG_ARM)$(CONFIG_KASAN_STACK)$(CONFIG_CC_IS_GCC),yyy) +CFLAGS_ecc.o += $(call cc-option,-Wframe-larger-than=1536) +endif + ecdh_generic-y += ecdh.o ecdh_generic-y += ecdh_helper.o obj-$(CONFIG_CRYPTO_ECDH) += ecdh_generic.o
drivers/acpi/acpica/dsmethod.c +43 -0
55 lines not on this page · raw message
drivers/acpi/acpica/evhandler.c +11 -0
@@ -130,6 +130,14 @@ acpi_ev_has_default_handler(struct acpi_namespace_node *node,/* Walk the linked list of handlers for this object */ while (handler_obj) { + +/* Validate handler object type before accessing fields */ + +if (handler_obj->common.type != +ACPI_TYPE_LOCAL_ADDRESS_HANDLER ) { +break ; + } +if (handler_obj->address_space.space_id == space_id) {if (handler_obj->address_space.handler_flags &ACPI_ADDR_HANDLER_DEFAULT_INSTALLED ) {
@@ -292,6 +300,9 @@ union acpi_operand_object *acpi_ev_find_region_handler(acpi_adr_space_type/* Walk the handler list for this device */ while (handler_obj) { +if (handler_obj->common.type !=ACPI_TYPE_LOCAL_ADDRESS_HANDLER ) { +break ; + }/* Same space_id indicates a handler is installed */
drivers/acpi/acpica/exconfig.c +24 -2
@@ -90,6 +90,8 @@ acpi_ex_load_table_op(struct acpi_walk_state *walk_state,union acpi_operand_object *return_obj;union acpi_operand_object *ddb_handle;u32 table_index; +char oem_id[ACPI_OEM_ID_SIZE +1 ]; +char oem_table_id[ACPI_OEM_TABLE_ID_SIZE +1 ];ACPI_FUNCTION_TRACE (ex_load_table_op);
@@ -102,12 +104,32 @@ acpi_ex_load_table_op(struct acpi_walk_state *walk_state, *return_desc = return_obj; +/* +* Validate OEM ID and OEM Table ID string lengths. +* acpi_tb_find_table expects strings that can safely read +* ACPI_OEM_ID_SIZE and ACPI_OEM_TABLE_ID_SIZE bytes. +*/ +if ((operand[1 ]->string.length >ACPI_OEM_ID_SIZE ) || + (operand[2 ]->string.length >ACPI_OEM_TABLE_ID_SIZE )) { +return_ACPI_STATUS (AE_AML_STRING_LIMIT ); + } + +/* +* Copy OEM strings to local buffers with guaranteed null-termination. +* This prevents heap-buffer-overflow when acpi_tb_find_table reads +* ACPI_OEM_ID_SIZE/ACPI_OEM_TABLE_ID_SIZE bytes. +*/ +memcpy (oem_id, operand[1 ]->string.pointer, operand[1 ]->string.length); + oem_id[operand[1 ]->string.length] =0 ; +memcpy (oem_table_id, operand[2 ]->string.pointer, + operand[2 ]->string.length); + oem_table_id[operand[2 ]->string.length] =0 ; +/* Find the ACPI table in the RSDT/XSDT */ acpi_ex_exit_interpreter (); status =acpi_tb_find_table (operand[0 ]->string.pointer, - operand[1 ]->string.pointer, - operand[2 ]->string.pointer, &table_index); + oem_id, oem_table_id, &table_index);acpi_ex_enter_interpreter ();if (ACPI_FAILURE (status)) {if (status !=AE_NOT_FOUND ) {
drivers/acpi/acpica/exoparg3.c +1 -1
@@ -152,7 +152,7 @@ acpi_status acpi_ex_opcode_3A_1T_1R(struct acpi_walk_state *walk_state)/* Truncate request if larger than the actual String/Buffer */ - else if ((index + length) > operand[0]->string.length) { + else if ((index + length) > operand[0]->string.length || (index + length) < index) { /* Check for overflow */ length = (acpi_size )operand[0 ]->string.length - (acpi_size )index;
drivers/acpi/acpica/nsnames.c +6 -0
@@ -222,6 +222,12 @@ acpi_ns_build_normalized_path(struct acpi_namespace_node *node, goto build_trailing_null; } +/* Validate the Node to avoid use-after-free vulnerabilities */ + +if (ACPI_GET_DESCRIPTOR_TYPE (node) !=ACPI_DESC_TYPE_NAMED ) { + goto build_trailing_null; + } + next_node = node;while (next_node && next_node != acpi_gbl_root_node) {if (next_node != node) {
drivers/acpi/acpica/nsprepkg.c +7 -0
@@ -631,6 +631,13 @@ acpi_ns_custom_package(struct acpi_evaluate_info *info,/* Get version number, must be Integer */ +if (!(*elements)) { +ACPI_WARN_PREDEFINED ((AE_INFO , info->full_pathname, + info->node_flags, +"Return Package has a NULL version element" )); +return_ACPI_STATUS (AE_AML_OPERAND_TYPE ); + } +if ((*elements)->common.type !=ACPI_TYPE_INTEGER ) { ACPI_WARN_PREDEFINED((AE_INFO, info->full_pathname, info->node_flags,
drivers/acpi/acpica/nsxfname.c +4 -0
@@ -512,6 +512,10 @@ acpi_status acpi_install_method(u8 *buffer) parser_state.aml +=acpi_ps_get_opcode_size (opcode); parser_state.pkg_end =acpi_ps_get_next_package_end (&parser_state); +if ((parser_state.pkg_end > parser_state.aml_end) || + (parser_state.pkg_end < parser_state.aml)) { +return (AE_AML_PACKAGE_LIMIT ); + } path =acpi_ps_get_next_namestring (&parser_state); method_flags = *parser_state.aml++;
drivers/acpi/acpica/psargs.c +123 -11
236 lines not on this page · raw message
drivers/acpi/acpica/psloop.c +29 -1
@@ -361,6 +361,13 @@ acpi_status acpi_ps_parse_loop(struct acpi_walk_state *walk_state) walk_state->parser_state.aml =acpi_ps_get_next_package_end (&walk_state->parser_state); +if ((walk_state->parser_state.aml > + walk_state->parser_state.aml_end) + || (walk_state->parser_state.aml < + walk_state->aml)) { +return_ACPI_STATUS + (AE_AML_PACKAGE_LIMIT ); + } walk_state->aml = walk_state->parser_state.aml; }
@@ -421,11 +428,22 @@ acpi_status acpi_ps_parse_loop(struct acpi_walk_state *walk_state) parser_state->aml =acpi_ps_get_next_package_end (parser_state); +if ((parser_state->aml > + parser_state->aml_end) + || (parser_state->aml < + walk_state->control_state-> + control.aml_predicate_start)) { +return_ACPI_STATUS + (AE_AML_PACKAGE_LIMIT ); + } walk_state->aml = parser_state->aml;ACPI_ERROR ((AE_INFO ,"Skipping While/If block" )); -if (*walk_state->aml ==AML_ELSE_OP ) { +if ((walk_state->aml < + parser_state->aml_end) + && (*walk_state->aml == +AML_ELSE_OP )) {ACPI_ERROR ((AE_INFO ,"Skipping Else block" )); walk_state->parser_state.aml =
@@ -433,6 +451,16 @@ acpi_status acpi_ps_parse_loop(struct acpi_walk_state *walk_state) walk_state->parser_state.aml =acpi_ps_get_next_package_end (parser_state); +if ((walk_state->parser_state. + aml > + walk_state->parser_state. + aml_end) + || (walk_state-> + parser_state.aml < + walk_state->aml)) { +return_ACPI_STATUS + (AE_AML_PACKAGE_LIMIT ); + } walk_state->aml = parser_state->aml; }
drivers/acpi/acpica/psparse.c +14 -0
@@ -70,6 +70,9 @@ u16 acpi_ps_peek_opcode(struct acpi_parse_state * parser_state)u16 opcode; aml = parser_state->aml; +if (aml >= parser_state->aml_end) { +return (0xFFFF ); + } opcode = (u16 )ACPI_GET8 (aml);if (opcode ==AML_EXTENDED_PREFIX ) {
@@ -77,6 +80,9 @@ u16 acpi_ps_peek_opcode(struct acpi_parse_state * parser_state)/* Extended opcode, get the second opcode byte */ aml++; +if (aml >= parser_state->aml_end) { +return (0xFFFF ); + } opcode = (u16) ((opcode <<8 ) |ACPI_GET8 (aml)); }
@@ -300,6 +306,7 @@ acpi_ps_next_parse_state(struct acpi_walk_state *walk_state, {struct acpi_parse_state *parser_state = &walk_state->parser_state;acpi_status status =AE_CTRL_PENDING ; +u8 *aml;ACPI_FUNCTION_TRACE_PTR (ps_next_parse_state, op);
@@ -344,7 +351,14 @@ acpi_ps_next_parse_state(struct acpi_walk_state *walk_state,* Predicate of an IF was true, and we are at the matching ELSE. * Just close out this package */ + aml = parser_state->aml; + parser_state->aml =acpi_ps_get_next_package_end (parser_state); +if ((parser_state->aml > parser_state->aml_end) || + (parser_state->aml < aml)) { + status =AE_AML_PACKAGE_LIMIT ; +break ; + } status =AE_CTRL_PENDING ;break ;
drivers/acpi/acpica/utcopy.c +9 -1
@@ -731,7 +731,15 @@ acpi_ut_copy_simple_object(union acpi_operand_object *source_desc,break ; } -acpi_ut_add_reference (source_desc->reference.object); +/* +* Local/Arg/Debug references do not have a valid Object pointer +* that can be referenced +*/ +if ((source_desc->reference.class !=ACPI_REFCLASS_LOCAL ) && + (source_desc->reference.class !=ACPI_REFCLASS_ARG ) && + (source_desc->reference.class !=ACPI_REFCLASS_DEBUG )) { +acpi_ut_add_reference (source_desc->reference.object); + }break ;case ACPI_TYPE_REGION :
drivers/acpi/acpica/utresrc.c +30 -0
@@ -162,6 +162,28 @@ acpi_ut_walk_aml_resources(struct acpi_walk_state *walk_state,/* Walk the byte list, abort on any invalid descriptor type or length */ while (aml < end_aml) { +/* +* Validate that the remaining buffer space can hold enough +* bytes to safely access fields during validation. +* For large resource descriptors (bit 7 set), we need enough +* bytes to access the Type field in serial_bus resources. +* Small resource descriptors only need sizeof(struct aml_resource_end_tag). +*/ +if ((acpi_size)(end_aml - aml) < +sizeof (struct aml_resource_end_tag )) { +return_ACPI_STATUS (AE_AML_BUFFER_LENGTH ); + } + +/* +* For large resource descriptors, ensure enough space for +* the header plus serial_bus Type field access. +*/ +if ((ACPI_GET8 (aml) &ACPI_RESOURCE_NAME_LARGE ) && + ((acpi_size)(end_aml - aml) < + ACPI_OFFSET(struct aml_resource_common_serialbus, + type) +1 )) { +return_ACPI_STATUS (AE_AML_BUFFER_LENGTH ); + }/* Validate the Resource Type and Resource Length */
@@ -179,6 +201,14 @@ acpi_ut_walk_aml_resources(struct acpi_walk_state *walk_state, length =acpi_ut_get_descriptor_length (aml); +/* +* Validate that the descriptor length doesn't exceed the +* remaining buffer size to prevent reading beyond the end. +*/ +if (length > (acpi_size)(end_aml - aml)) { +return_ACPI_STATUS (AE_AML_BUFFER_LENGTH ); + } +/* Invoke the user function */ if (user_function) {
drivers/acpi/pci_root.c +4 -0
@@ -763,6 +763,10 @@ static int acpi_pci_root_add(struct acpi_device *device,pci_lock_rescan_remove ();pci_bus_add_devices (root->bus);pci_unlock_rescan_remove (); + +/* Clear _DEP dependencies to allow consumers to enumerate */ +acpi_dev_clear_dependencies (device); +return 1 ; remove_dmar:
drivers/ata/ahci.c +22 -0
@@ -1768,6 +1768,24 @@ static ssize_t remapped_nvme_show(struct device *dev,static DEVICE_ATTR_RO (remapped_nvme); +static int ahci_validate_bar_size (struct pci_dev *pdev,int bar, +struct ahci_host_priv *hpriv) +{ +u32 cap =readl (hpriv->mmio +HOST_CAP ); +unsigned int max_ports =ahci_nr_ports (cap); +u32 last_port_end =0x100 + (max_ports *0x80 ); +resource_size_t bar_size =pci_resource_len (pdev, bar); + +if (last_port_end > bar_size) { +dev_warn (&pdev->dev, +"BAR%d too small for %u ports (last port ends at %#x, BAR %pa)\n" , + bar, max_ports, last_port_end, &bar_size); +return -ENODEV ; + } + +return 0 ; +} +static int ahci_init_one (struct pci_dev *pdev,const struct pci_device_id *ent) {unsigned int board_id = ent->driver_data;
@@ -1870,6 +1888,10 @@ static int ahci_init_one(struct pci_dev *pdev, const struct pci_device_id *ent) hpriv->mmio =pcim_iomap_table (pdev)[ahci_pci_bar]; + rc =ahci_validate_bar_size (pdev, ahci_pci_bar, hpriv); +if (rc) +return rc; +/* detect remapped nvme devices */ ahci_remap_check (pdev, ahci_pci_bar, hpriv);
drivers/ata/libahci.c +14 -1
@@ -745,15 +745,28 @@ void ahci_start_fis_rx(struct ata_port *ap)struct ahci_port_priv *pp = ap->private_data;u32 tmp; -/* set FIS registers */ +/* +* On HBAs that only support 32-bit addressing PxCLBU is read only '0'. +* When applying the AHCI_HFLAG_32BIT_ONLY quirk, PxCLBU is RW, and the +* reset value is Implementation Specific, so we need to clear it to 0. +*/ if (hpriv->cap &HOST_CAP_64 )writel ((pp->cmd_slot_dma >>16 ) >>16 , port_mmio +PORT_LST_ADDR_HI ); +else if (hpriv->flags &AHCI_HFLAG_32BIT_ONLY ) +writel (0 , port_mmio +PORT_LST_ADDR_HI );writel (pp->cmd_slot_dma &0xffffffff , port_mmio +PORT_LST_ADDR ); +/* +* On HBAs that only support 32-bit addressing PxFBU is read only '0'. +* When applying the AHCI_HFLAG_32BIT_ONLY quirk, PxFBU is RW, and the +* reset value is Implementation Specific, so we need to clear it to 0. +*/ if (hpriv->cap &HOST_CAP_64 )writel ((pp->rx_fis_dma >>16 ) >>16 , port_mmio +PORT_FIS_ADDR_HI ); +else if (hpriv->flags &AHCI_HFLAG_32BIT_ONLY ) +writel (0 , port_mmio +PORT_FIS_ADDR_HI );writel (pp->rx_fis_dma &0xffffffff , port_mmio +PORT_FIS_ADDR );/* enable FIS reception */
drivers/ata/libata-pmp.c +6 -1
@@ -446,8 +446,13 @@ static void sata_pmp_quirks(struct ata_port *ap)* otherwise. Don't try hard to recover it. */ ap->pmp_link[ap->nr_pmp_links -1 ].flags |=ATA_LFLAG_NO_RETRY ; - }else if (vendor ==0x197b && (devid ==0x2352 || devid ==0x0325 )) { + }else if (vendor ==0x197b && + (devid ==0x0562 || devid ==0x2352 || devid ==0x0325 )) {/* +* 0x0562: JMicron JMS562, as used in QNAP QDA-A2AR RAID1 +* adapters. The exported device may stay not ready +* while the array is rebuilding, and SRST/classify can +* time out before the RAID volume is exported. * 0x2352: found in Thermaltake BlackX Duet, jmicron JMB350? * 0x0325: jmicron JMB394. */
drivers/base/core.c +102 -17
151 lines not on this page · raw message
drivers/block/sunvdc.c +25 -1
@@ -526,6 +526,23 @@ static int __send_request(struct request *req) err =__vdc_tx_trigger (port);if (err <0 ) { printk(KERN_ERR PFX "vdc_tx_trigger() failure, err=%d\n", err); +/* +* If the port was reset (-ENOTCONN), the dring and the +* LDC channel including all of its mappings are already +* torn down and reallocated - there is nothing to undo +* and @desc must not be touched. +* +* For any other failure the descriptor was never handed +* to the peer: unmap the cookies and free the descriptor +* again, so that a later retry of the request does not +* leak LDC map table entries. +*/ +if (err != -ENOTCONN ) { +ldc_unmap (port->vio.lp, desc->cookies, + desc->ncookies); + desc->hdr.state =VIO_DESC_FREE ; + rqe->req =NULL ; + } }else { port->req_id++; dr->prod =vio_dring_next (dr, dr->prod);
@@ -540,6 +557,7 @@ static blk_status_t vdc_queue_rq(struct blk_mq_hw_ctx *hctx,struct vdc_port *port = hctx->queue->queuedata;struct vio_dring_state *dr;unsigned long flags; +int ret; dr = &port->vio.drings[VIO_DRIVER_TX_RING ];
@@ -561,7 +579,13 @@ static blk_status_t vdc_queue_rq(struct blk_mq_hw_ctx *hctx,return BLK_STS_DEV_RESOURCE ; } -if (__send_request (bd->rq) <0 ) { + ret =__send_request (bd->rq); +if (ret == -EAGAIN ) { +spin_unlock_irqrestore (&port->vio.lock, flags); +/* already spun for 10msec, defer 10msec and retry */ +blk_mq_delay_kick_requeue_list (hctx->queue,10 ); +return BLK_STS_DEV_RESOURCE ; + }else if (ret <0 ) {spin_unlock_irqrestore (&port->vio.lock, flags);return BLK_STS_IOERR ; }
drivers/bluetooth/btmtksdio.c +1 -3
@@ -1216,10 +1216,8 @@ static int btmtksdio_shutdown(struct hci_dev *hdev) wmt_params.status =NULL ; err =mtk_hci_wmt_sync (hdev, &wmt_params); -if (err <0 ) { +if (err <0 )bt_dev_err (hdev,"Failed to send wmt func ctrl (%d)" , err); -return err; - } ignore_wmt_cmd:pm_runtime_put_noidle (bdev->dev);
drivers/bluetooth/btusb.c +31 -10
88 lines not on this page · raw message
drivers/bluetooth/hci_mrvl.c +1 -2
@@ -297,9 +297,8 @@ static int mrvl_load_firmware(struct hci_dev *hdev, const char *name) err =wait_on_bit_timeout (&mrvl->flags,STATE_FW_REQ_PENDING ,TASK_INTERRUPTIBLE ,msecs_to_jiffies (2000 )); -if (err ==1 ) { +if (err == -EINTR ) {bt_dev_err (hdev,"Firmware load interrupted" ); - err = -EINTR ;break ; }else if (err) {bt_dev_err (hdev,"Firmware request timeout" );
drivers/bus/fsl-mc/fsl-mc-bus.c +46 -0
64 lines not on this page · raw message
drivers/char/ipmi/ipmi_si_platform.c +4 -1
@@ -279,7 +279,10 @@ static int of_ipmi_probe(struct platform_device *pdev) io.regspacing = regspacing ?be32_to_cpup (regspacing) :DEFAULT_REGSPACING ; io.regshift = regshift ?be32_to_cpup (regshift) :0 ; - io.irq =irq_of_parse_and_map (pdev->dev.of_node,0 ); + io.irq =platform_get_irq_optional (pdev,0 ); +if (io.irq <0 ) + io.irq =0 ; + io.dev = &pdev->dev; dev_dbg(&pdev->dev, "addr 0x%lx regsize %d spacing %d irq %d\n",
drivers/char/nvram.c +3 -13
@@ -53,7 +53,6 @@#include <asm/nvram.h> #endif -static DEFINE_MUTEX (nvram_mutex);static DEFINE_SPINLOCK (nvram_state_lock);static int nvram_open_cnt;/* #times opened */ static int nvram_open_mode;/* special open modes */
@@ -310,11 +309,8 @@ static long nvram_misc_ioctl(struct file *file, unsigned int cmd,break ;#ifdef CONFIG_PPC32 case IOC_NVRAM_SYNC : -if (ppc_md.nvram_sync !=NULL ) { -mutex_lock (&nvram_mutex); +if (ppc_md.nvram_sync) ppc_md.nvram_sync (); -mutex_unlock (&nvram_mutex); - } ret =0 ;break ;#endif
@@ -324,11 +320,8 @@ static long nvram_misc_ioctl(struct file *file, unsigned int cmd,if (!capable (CAP_SYS_ADMIN ))return -EACCES ; -if (arch_nvram_ops.initialize !=NULL ) { -mutex_lock (&nvram_mutex); +if (arch_nvram_ops.initialize) ret = arch_nvram_ops.initialize (); -mutex_unlock (&nvram_mutex); - }break ;case NVRAM_SETCKS :/* just set checksum, contents unchanged (maybe useful after
@@ -336,11 +329,8 @@ static long nvram_misc_ioctl(struct file *file, unsigned int cmd,if (!capable (CAP_SYS_ADMIN ))return -EACCES ; -if (arch_nvram_ops.set_checksum !=NULL ) { -mutex_lock (&nvram_mutex); +if (arch_nvram_ops.set_checksum) ret = arch_nvram_ops.set_checksum (); -mutex_unlock (&nvram_mutex); - }break ;#endif /* CONFIG_X86 || CONFIG_M68K */ }
drivers/char/virtio_console.c +19 -3
@@ -1934,13 +1934,29 @@ static const struct file_operations portdev_fops = {static void remove_vqs (struct ports_device *portdev) {struct virtqueue *vq; +bool multiport =use_multiport (portdev);virtio_device_for_each_vq (portdev->vdev, vq) {struct port_buffer *buf; +unsigned int len; -flush_bufs (vq, true); -while ((buf =virtqueue_detach_unused_buf (vq))) -free_buf (buf, true); +/* +* c_ovq cookies are &portdev->cpkt, not port_buffer. +* Detach them but do not free_buf(). +*/ +if (multiport && vq == portdev->c_ovq) { +spin_lock (&portdev->c_ovq_lock); +while (virtqueue_get_buf (vq, &len)) + ; +while (virtqueue_detach_unused_buf (vq)) + ; +spin_unlock (&portdev->c_ovq_lock); + }else { +flush_bufs (vq, true); +while ((buf =virtqueue_detach_unused_buf (vq))) +free_buf (buf, true); + } +cond_resched (); } portdev->vdev->config->del_vqs (portdev->vdev);kfree (portdev->in_vqs);
drivers/clk/at91/pmc.h +2 -0
@@ -114,7 +114,9 @@ struct at91_clk_pms {unsigned int parent; }; +#undef field_get#define field_get (_mask, _reg) (((_reg) & (_mask)) >> (ffs(_mask) - 1)) +#undef field_prep#define field_prep (_mask, _val) (((_val) << (ffs(_mask) - 1)) & (_mask))#define ndck (a, s) (a[s - 1].id + 1)
drivers/clk/clk-scpi.c +1 -1
@@ -86,7 +86,7 @@ static unsigned long scpi_dvfs_recalc_rate(struct clk_hw *hw,int idx = clk->scpi_ops->dvfs_get_idx (clk->id);const struct scpi_opp *opp; -if (idx <0 ) +if (idx <0 || idx >= clk->info->count)return 0 ; opp = clk->info->opps + idx;
drivers/clk/keystone/sci-clk.c +8 -0
@@ -334,6 +334,14 @@ static int _sci_clk_build(struct sci_clk_provider *provider, init.ops = &sci_clk_ops; init.num_parents = sci_clk->num_parents; + +/* +* A clock rate query to the SCI firmware will return 0 if either the +* clock itself is disabled or the attached device/consumer is disabled. +* This makes it inherently unsuitable for the caching of the clk +* framework. +*/ + init.flags =CLK_GET_RATE_NOCACHE ; sci_clk->hw.init = &init; ret =devm_clk_hw_register (provider->dev, &sci_clk->hw);
drivers/clk/renesas/renesas-cpg-mssr.c +3 -0
@@ -285,6 +285,9 @@ struct clk *cpg_mssr_clk_src_twocell_get(struct of_phandle_args *clkspec,struct clk *clk;int range_check; +if (clkspec->args_count !=2 ) +return ERR_PTR (-EINVAL ); +switch (clkspec->args[0 ]) {case CPG_CORE : type ="core" ;
drivers/clk/samsung/clk-exynos850.c +3 -2
@@ -580,10 +580,11 @@ static const struct samsung_gate_clock apm_gate_clks[] __initconst = { CLK_CON_GAT_GOUT_APM_APBIF_RTC_PCLK, 21, 0, 0),GATE (CLK_GOUT_TOP_RTC_PCLK ,"gout_top_rtc_pclk" ,"dout_apm_bus" ,CLK_CON_GAT_GOUT_APM_APBIF_TOP_RTC_PCLK ,21 ,0 ,0 ), +/* TODO: Should be dealt with or enabled in PMIC ACPM driver */ GATE (CLK_GOUT_I3C_PCLK ,"gout_i3c_pclk" ,"dout_apm_bus" , -CLK_CON_GAT_GOUT_APM_I3C_APM_PMIC_I_PCLK ,21 ,0 ,0 ), +CLK_CON_GAT_GOUT_APM_I3C_APM_PMIC_I_PCLK ,21 ,CLK_IS_CRITICAL ,0 ),GATE (CLK_GOUT_I3C_SCLK ,"gout_i3c_sclk" ,"mout_apm_i3c" , -CLK_CON_GAT_GOUT_APM_I3C_APM_PMIC_I_SCLK ,21 ,0 ,0 ), +CLK_CON_GAT_GOUT_APM_I3C_APM_PMIC_I_SCLK ,21 ,CLK_IS_CRITICAL ,0 ),GATE (CLK_GOUT_SPEEDY_PCLK ,"gout_speedy_pclk" ,"dout_apm_bus" , CLK_CON_GAT_GOUT_APM_SPEEDY_APM_PCLK, 21, 0, 0),/* TODO: Should be enabled in GPIO driver (or made CLK_IS_CRITICAL) */
drivers/clk/socfpga/clk-agilex.c +2 -0
@@ -260,6 +260,8 @@ static const struct stratix10_perip_cnt_clock agilex_main_perip_cnt_clks[] = { 0, 0x3C, 0, 0, 0}, {AGILEX_NOC_FREE_CLK ,"noc_free_clk" ,NULL , noc_free_mux,ARRAY_SIZE (noc_free_mux), 0, 0x40, 0, 0, 0}, + { AGILEX_L3_MAIN_FREE_CLK, "l3_main_free_clk", "noc_free_clk", NULL, + 1, 0, 0, 1, 0, 0}, { AGILEX_L4_SYS_FREE_CLK, "l4_sys_free_clk", NULL, noc_mux, ARRAY_SIZE(noc_mux), 0, 0, 4, 0x30, 1}, { AGILEX_EMAC_A_FREE_CLK, "emaca_free_clk", NULL, emaca_free_mux, ARRAY_SIZE(emaca_free_mux),
drivers/clk/ux500/clk-prcmu.c +10 -10
@@ -7,7 +7,7 @@*/ #include <linux/clk-provider.h> -#include <linux/mfd/dbx500-prcmu.h> +#include <linux/mfd/db8500-prcmu.h> #include <linux/slab.h> #include <linux/io.h> #include <linux/err.h>
@@ -35,13 +35,13 @@ static int clk_prcmu_prepare(struct clk_hw *hw) {struct clk_prcmu *clk =to_clk_prcmu (hw); -return prcmu_request_clock (clk->cg_sel, true); +return db8500_prcmu_request_clock (clk->cg_sel, true); }static void clk_prcmu_unprepare (struct clk_hw *hw) {struct clk_prcmu *clk =to_clk_prcmu (hw); -if (prcmu_request_clock (clk->cg_sel, false)) +if (db8500_prcmu_request_clock (clk->cg_sel, false))pr_err ("clk_prcmu: %s failed to disable %s.\n" , __func__,clk_hw_get_name (hw)); }
@@ -84,7 +84,7 @@ static int clk_prcmu_opp_prepare(struct clk_hw *hw) clk->opp_requested =1 ; } - err =prcmu_request_clock (clk->cg_sel, true); + err =db8500_prcmu_request_clock (clk->cg_sel, true);if (err) {prcmu_qos_remove_requirement (PRCMU_QOS_APE_OPP , (char *)clk_hw_get_name (hw));
@@ -99,7 +99,7 @@ static void clk_prcmu_opp_unprepare(struct clk_hw *hw) {struct clk_prcmu *clk =to_clk_prcmu (hw); -if (prcmu_request_clock (clk->cg_sel, false)) { +if (db8500_prcmu_request_clock (clk->cg_sel, false)) {pr_err ("clk_prcmu: %s failed to disable %s.\n" , __func__,clk_hw_get_name (hw));return ;
@@ -118,7 +118,7 @@ static int clk_prcmu_opp_volt_prepare(struct clk_hw *hw)struct clk_prcmu *clk =to_clk_prcmu (hw);if (!clk->opp_requested) { - err =prcmu_request_ape_opp_100_voltage (true); + err =db8500_prcmu_request_ape_opp_100_voltage (true);if (err) {pr_err ("clk_prcmu: %s fail req APE OPP VOLT for %s.\n" , __func__,clk_hw_get_name (hw));
@@ -127,9 +127,9 @@ static int clk_prcmu_opp_volt_prepare(struct clk_hw *hw) clk->opp_requested =1 ; } - err =prcmu_request_clock (clk->cg_sel, true); + err =db8500_prcmu_request_clock (clk->cg_sel, true);if (err) { -prcmu_request_ape_opp_100_voltage (false); +db8500_prcmu_request_ape_opp_100_voltage (false); clk->opp_requested =0 ;return err; }
@@ -141,14 +141,14 @@ static void clk_prcmu_opp_volt_unprepare(struct clk_hw *hw) {struct clk_prcmu *clk =to_clk_prcmu (hw); -if (prcmu_request_clock (clk->cg_sel, false)) { +if (db8500_prcmu_request_clock (clk->cg_sel, false)) {pr_err ("clk_prcmu: %s failed to disable %s.\n" , __func__,clk_hw_get_name (hw));return ; }if (clk->opp_requested) { -prcmu_request_ape_opp_100_voltage (false); +db8500_prcmu_request_ape_opp_100_voltage (false); clk->opp_requested =0 ; } }
drivers/clk/ux500/u8500_of_clk.c +1 -1
@@ -9,7 +9,7 @@#include <linux/of.h> #include <linux/of_address.h> #include <linux/clk-provider.h> -#include <linux/mfd/dbx500-prcmu.h> +#include <linux/mfd/db8500-prcmu.h> #include "clk.h" #include "prcc.h"
drivers/clocksource/timer-orion.c +1 -1
@@ -43,7 +43,7 @@ static struct delay_timer orion_delay_timer = { .read_current_timer = orion_read_timer, }; -static void orion_delay_timer_init (unsigned long rate) +static void __init orion_delay_timer_init (unsigned long rate) { orion_delay_timer.freq = rate;register_current_timer_delay (&orion_delay_timer);
drivers/cpufreq/cpufreq.c +3 -3
@@ -1216,7 +1216,7 @@ static struct cpufreq_policy *cpufreq_policy_alloc(unsigned int cpu)if (!policy)return NULL ; -if (!alloc_cpumask_var (&policy->cpus,GFP_KERNEL )) +if (!zalloc_cpumask_var (&policy->cpus,GFP_KERNEL )) goto err_free_policy;if (!zalloc_cpumask_var (&policy->related_cpus,GFP_KERNEL ))
@@ -1225,6 +1225,8 @@ static struct cpufreq_policy *cpufreq_policy_alloc(unsigned int cpu)if (!zalloc_cpumask_var (&policy->real_cpus,GFP_KERNEL )) goto err_free_rcpumask; +init_rwsem (&policy->rwsem); +init_completion (&policy->kobj_unregister); ret =kobject_init_and_add (&policy->kobj, &ktype_cpufreq, cpufreq_global_kobject,"policy%u" , cpu);
@@ -1239,8 +1241,6 @@ static struct cpufreq_policy *cpufreq_policy_alloc(unsigned int cpu) goto err_free_real_cpus; } -init_rwsem (&policy->rwsem); -freq_constraints_init (&policy->constraints); policy->nb_min.notifier_call = cpufreq_notifier_min;
drivers/cpuidle/cpuidle-ux500.c +3 -3
@@ -11,7 +11,7 @@#include <linux/spinlock.h> #include <linux/atomic.h> #include <linux/smp.h> -#include <linux/mfd/dbx500-prcmu.h> +#include <linux/mfd/db8500-prcmu.h> #include <linux/platform_data/arm-ux500-pm.h> #include <linux/platform_device.h>
@@ -66,7 +66,7 @@ static inline int ux500_enter_idle(struct cpuidle_device *dev,/* Go to the retention state, the prcmu will wait for the * cpu to go WFI and this is what happens after exiting this * 'master' critical section */ -if (prcmu_set_power_state (PRCMU_AP_IDLE , true, true)) +if (db8500_prcmu_set_power_state (PRCMU_AP_IDLE , true, true)) goto out;/* When we switch to retention, the prcmu is in charge
@@ -109,7 +109,7 @@ static struct cpuidle_driver ux500_idle_driver = {static int dbx500_cpuidle_probe (struct platform_device *pdev) {/* Configure wake up reasons */ -prcmu_enable_wakeups (PRCMU_WAKEUP (ARM ) |PRCMU_WAKEUP (RTC ) | +db8500_prcmu_enable_wakeups (PRCMU_WAKEUP (ARM ) |PRCMU_WAKEUP (RTC ) |PRCMU_WAKEUP (ABB ));return cpuidle_register (&ux500_idle_driver,NULL );
drivers/crypto/allwinner/Kconfig +0 -16
@@ -70,14 +70,6 @@ config CRYPTO_DEV_SUN8I_CE_HASH help Say y to enable support for hash algorithms. -config CRYPTO_DEV_SUN8I_CE_PRNG - bool "Support for Allwinner Crypto Engine PRNG" - depends on CRYPTO_DEV_SUN8I_CE - select CRYPTO_RNG - help - Select this option if you want to provide kernel-side support for - the Pseudo-Random Number Generator found in the Crypto Engine. - config CRYPTO_DEV_SUN8I_CE_TRNG bool "Support for Allwinner Crypto Engine TRNG" depends on CRYPTO_DEV_SUN8I_CE
@@ -113,14 +105,6 @@ config CRYPTO_DEV_SUN8I_SS_DEBUG This will create /sys/kernel/debug/sun8i-ss/stats for displaying the number of requests per flow and per algorithm. -config CRYPTO_DEV_SUN8I_SS_PRNG - bool "Support for Allwinner Security System PRNG" - depends on CRYPTO_DEV_SUN8I_SS - select CRYPTO_RNG - help - Select this option if you want to provide kernel-side support for - the Pseudo-Random Number Generator found in the Security System. - config CRYPTO_DEV_SUN8I_SS_HASH bool "Enable support for hash on sun8i-ss" depends on CRYPTO_DEV_SUN8I_SS
drivers/crypto/allwinner/sun8i-ce/Makefile +0 -1
@@ -1,5 +1,4 @@ obj-$(CONFIG_CRYPTO_DEV_SUN8I_CE) += sun8i-ce.o sun8i-ce-y += sun8i-ce-core.o sun8i-ce-cipher.o sun8i-ce-$(CONFIG_CRYPTO_DEV_SUN8I_CE_HASH) += sun8i-ce-hash.o -sun8i-ce-$(CONFIG_CRYPTO_DEV_SUN8I_CE_PRNG) += sun8i-ce-prng.o sun8i-ce-$(CONFIG_CRYPTO_DEV_SUN8I_CE_TRNG) += sun8i-ce-trng.o
drivers/crypto/allwinner/sun8i-ce/sun8i-ce-core.c +0 -55
127 lines not on this page · raw message
drivers/crypto/allwinner/sun8i-ce/sun8i-ce-prng.c deleted +0 -160
160 lines not on this page · raw message
drivers/crypto/allwinner/sun8i-ce/sun8i-ce.h +0 -29
@@ -15,7 +15,6 @@#include <linux/hw_random.h> #include <crypto/internal/hash.h> #include <crypto/md5.h> -#include <crypto/rng.h> #include <crypto/sha1.h> #include <crypto/sha2.h>
@@ -58,9 +57,7 @@#define CE_ALG_SHA384 20#define CE_ALG_SHA512 21#define CE_ALG_TRNG 48 -#define CE_ALG_PRNG 49#define CE_ALG_TRNG_V2 0x1c -#define CE_ALG_PRNG_V2 0x1d/* Used in ce_variant */ #define CE_ID_NOTSUPP 0xFF
@@ -96,10 +93,6 @@#define ESR_H6 4#define ESR_D1 5 -#define PRNG_DATA_SIZE (160 / 8) -#define PRNG_SEED_SIZE DIV_ROUND_UP(175, 8) -#define PRNG_LD BIT(17) -#define CE_DIE_ID_SHIFT 16
Lines of this file are not shown. View the raw message.
drivers/crypto/allwinner/sun8i-ss/Makefile +0 -1
Lines of this file are not shown. View the raw message.
drivers/crypto/allwinner/sun8i-ss/sun8i-ss-core.c +0 -39
Lines of this file are not shown. View the raw message.
drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c deleted +0 -170
170 lines not on this page · raw message
drivers/crypto/allwinner/sun8i-ss/sun8i-ss.h +0 -23
Lines of this file are not shown. View the raw message.
drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c +9 -2
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c +3 -1
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c +9 -0
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c +1 -0
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c +6 -1
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c +8 -12
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c +25 -6
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c +3 -0
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/arm/display/komeda/komeda_dev.c +5 -1
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/arm/display/komeda/komeda_drv.c +9 -5
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/ast/ast_drv.h +17 -35
52 lines not on this page · raw message
drivers/gpu/drm/gma500/oaktrail_hdmi_i2c.c +16 -5
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/i915/gem/i915_gem_object.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/msm/adreno/adreno_gpu.c +2 -0
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c +14 -9
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c +2 -0
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/virtio/virtgpu_display.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/hid/amd-sfh-hid/amd_sfh_common.h +4 -0
Lines of this file are not shown. View the raw message.
drivers/hid/amd-sfh-hid/amd_sfh_pcie.c +10 -0
Lines of this file are not shown. View the raw message.
drivers/hid/bpf/progs/Huion__Inspiroy-Frego-M.bpf.c new file +87 -0
87 lines not on this page · raw message
drivers/hid/hid-hyperv.c +41 -17
58 lines not on this page · raw message
drivers/hwmon/pmbus/lm25066.c +28 -26
54 lines not on this page · raw message
drivers/i3c/master/mipi-i3c-hci/cmd_v1.c +1 -3
Lines of this file are not shown. View the raw message.
drivers/i3c/master/mipi-i3c-hci/cmd_v2.c +1 -3
Lines of this file are not shown. View the raw message.
drivers/iio/light/stk3310.c +69 -7
76 lines not on this page · raw message
drivers/infiniband/sw/rxe/rxe_mcast.c +36 -14
50 lines not on this page · raw message
drivers/infiniband/sw/siw/siw_cm.c +31 -44
75 lines not on this page · raw message
drivers/infiniband/ulp/ipoib/ipoib_ib.c +7 -5
Lines of this file are not shown. View the raw message.
drivers/infiniband/ulp/ipoib/ipoib_multicast.c +8 -8
Lines of this file are not shown. View the raw message.
drivers/infiniband/ulp/iser/iser_initiator.c +11 -5
Lines of this file are not shown. View the raw message.
drivers/infiniband/ulp/isert/ib_isert.c +22 -0
Lines of this file are not shown. View the raw message.
drivers/infiniband/ulp/isert/ib_isert.h +2 -0
Lines of this file are not shown. View the raw message.
drivers/infiniband/ulp/rtrs/rtrs-srv.c +10 -2
Lines of this file are not shown. View the raw message.
drivers/media/pci/intel/ipu3/cio2-bridge.c +5 -0
Lines of this file are not shown. View the raw message.
drivers/media/platform/verisilicon/hantro_g2_hevc_dec.c +4 -2
Lines of this file are not shown. View the raw message.
drivers/media/usb/as102/as102_usb_drv.c +30 -43
73 lines not on this page · raw message
drivers/media/usb/em28xx/em28xx-video.c +3 -1
Lines of this file are not shown. View the raw message.
drivers/media/v4l2-core/v4l2-ctrls-core.c +12 -0
Lines of this file are not shown. View the raw message.
drivers/misc/habanalabs/common/device.c +9 -0
Lines of this file are not shown. View the raw message.
drivers/misc/habanalabs/common/habanalabs.h +1 -0
Lines of this file are not shown. View the raw message.
drivers/misc/habanalabs/common/habanalabs_drv.c +1 -0
Lines of this file are not shown. View the raw message.
drivers/misc/habanalabs/common/memory_mgr.c +12 -1
Lines of this file are not shown. View the raw message.
drivers/mmc/host/renesas_sdhi_internal_dmac.c +2 -0
Lines of this file are not shown. View the raw message.
drivers/net/dsa/sja1105/sja1105_flower.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/allwinner/sun4i-emac.c +2 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/amd/xgbe/xgbe-dev.c +1 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/atheros/atl1c/atl1c_main.c +3 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/atheros/atl1e/atl1e_main.c +3 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/atheros/atlx/atl1.c +3 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/broadcom/bnxt/bnxt.c +16 -3
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/broadcom/genet/bcmgenet.c +36 -27
63 lines not on this page · raw message
drivers/net/ethernet/broadcom/genet/bcmgenet.h +2 -3
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c +10 -10
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/cadence/macb_main.c +22 -17
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/cadence/macb_ptp.c +9 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/cavium/thunder/nicvf_main.c +6 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/cortina/gemini.c +48 -31
79 lines not on this page · raw message
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c +46 -23
69 lines not on this page · raw message
drivers/net/ethernet/freescale/fman/fman.c +1 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c +3 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/huawei/hinic/hinic_hw_mbox.c +3 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/intel/e1000e/ethtool.c +12 -7
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/intel/ice/ice_common.c +6 -3
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/intel/ice/ice_sched.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/intel/ice/ice_txrx.c +9 -11
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/intel/ice/ice_type.h +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c +2 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/marvell/octeontx2/af/mcs.c +10 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c +8 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/Kconfig +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/en/port.c +9 -6
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/en/rep/bridge.c +4 -5
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/en/tc/sample.c +5 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c +3 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c +11 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/esw/bridge.c +24 -20
44 lines not on this page · raw message
drivers/net/ethernet/mellanox/mlx5/core/esw/bridge.h +6 -4
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/eswitch.c +7 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads_termtbl.c +5 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/micrel/ks8851_common.c +2 -8
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/micrel/ks8851_spi.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microchip/lan743x_main.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/socionext/netsec.c +2 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c +4 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/stmicro/stmmac/dwxgmac2.h +2 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/stmicro/stmmac/hwif.h +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/stmicro/stmmac/ring_mode.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c +9 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c +0 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c +83 -23
106 lines not on this page · raw message
drivers/net/ppp/ppp_async.c +9 -80
89 lines not on this page · raw message
drivers/net/usb/pegasus.c +22 -32
54 lines not on this page · raw message
drivers/net/wireless/ath/ath11k/dp_rx.c +47 -3
50 lines not on this page · raw message
drivers/net/wireless/ath/ath9k/hif_usb.c +6 -6
Lines of this file are not shown. View the raw message.
drivers/net/wireless/ath/ath9k/hif_usb.h +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c +2 -0
Lines of this file are not shown. View the raw message.
drivers/net/wireless/broadcom/brcm80211/brcmsmac/mac80211_if.c +4 -0
Lines of this file are not shown. View the raw message.
drivers/net/wireless/intel/ipw2x00/libipw_rx.c +8 -2
Lines of this file are not shown. View the raw message.
drivers/net/wireless/intel/iwlegacy/common.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/intel/iwlwifi/fw/acpi.c +5 -0
Lines of this file are not shown. View the raw message.
drivers/net/wireless/intel/iwlwifi/iwl-drv.c +11 -2
Lines of this file are not shown. View the raw message.
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c +2 -4
Lines of this file are not shown. View the raw message.
drivers/net/wireless/intel/iwlwifi/mvm/scan.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/net/wireless/intersil/p54/eeprom.c +17 -5
Lines of this file are not shown. View the raw message.
drivers/net/wireless/mac80211_hwsim.c +27 -18
45 lines not on this page · raw message
drivers/net/wireless/marvell/libertas/tx.c +7 -0
Lines of this file are not shown. View the raw message.
drivers/net/wireless/marvell/libertas_tf/main.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/marvell/mwifiex/cfg80211.c +4 -4
Lines of this file are not shown. View the raw message.
drivers/net/wireless/marvell/mwifiex/fw.h +9 -9
Lines of this file are not shown. View the raw message.
drivers/net/wireless/marvell/mwifiex/join.c +4 -4
Lines of this file are not shown. View the raw message.
drivers/net/wireless/marvell/mwifiex/pcie.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/marvell/mwifiex/scan.c +41 -13
54 lines not on this page · raw message
drivers/net/wireless/marvell/mwifiex/sta_cmd.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/marvell/mwifiex/util.c +8 -2
Lines of this file are not shown. View the raw message.
drivers/net/wireless/mediatek/mt76/mt7921/mcu.c +29 -4
Lines of this file are not shown. View the raw message.
drivers/net/wireless/mediatek/mt76/pci.c +7 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/microchip/wilc1000/cfg80211.c +14 -0
Lines of this file are not shown. View the raw message.
drivers/net/wireless/microchip/wilc1000/wlan.c +9 -0
Lines of this file are not shown. View the raw message.
drivers/net/wireless/ralink/rt2x00/rt2400pci.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/ralink/rt2x00/rt2500pci.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/ralink/rt2x00/rt2800pci.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/ralink/rt2x00/rt61pci.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/realtek/rtw88/fw.c +3 -0
Lines of this file are not shown. View the raw message.
drivers/net/wireless/realtek/rtw88/main.c +3 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/realtek/rtw89/pci.c +15 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/rsi/rsi_91x_mgmt.c +4 -4
Lines of this file are not shown. View the raw message.
drivers/nvme/host/apple.c +61 -121
182 lines not on this page · raw message
drivers/pci/controller/dwc/pcie-intel-gw.c +10 -9
Lines of this file are not shown. View the raw message.
drivers/pci/controller/pcie-rockchip-host.c +2 -0
Lines of this file are not shown. View the raw message.
drivers/pci/proc.c +56 -23
79 lines not on this page · raw message
drivers/pinctrl/meson/pinctrl-meson-s4.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/pinctrl/renesas/pinctrl-rzv2m.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/platform/x86/dell/dell-laptop.c +9 -0
Lines of this file are not shown. View the raw message.
drivers/regulator/core.c +90 -73
163 lines not on this page · raw message
drivers/scsi/megaraid/megaraid_sas_base.c +3 -1
Lines of this file are not shown. View the raw message.
drivers/spi/spi-zynqmp-gqspi.c +40 -12
52 lines not on this page · raw message
drivers/thunderbolt/xdomain.c +32 -9
41 lines not on this page · raw message
drivers/usb/usbip/vhci_sysfs.c +29 -23
52 lines not on this page · raw message
drivers/watchdog/msc313e_wdt.c +72 -16
88 lines not on this page · raw message
drivers/watchdog/sunxi_wdt.c +44 -1
45 lines not on this page · raw message
drivers/watchdog/watchdog_hrtimer_pretimeout.c +1 -0
Lines of this file are not shown. View the raw message.
fs/btrfs/relocation.c +35 -12
47 lines not on this page · raw message
fs/btrfs/tree-checker.c +42 -1
43 lines not on this page · raw message
fs/btrfs/tree-mod-log.c +64 -9
73 lines not on this page · raw message
fs/ntfs3/index.c +40 -1
41 lines not on this page · raw message
fs/smb/server/smb2pdu.c +73 -71
144 lines not on this page · raw message
include/drm/drm_modeset_helper_vtables.h +28 -1
Lines of this file are not shown. View the raw message.
include/linux/firmware/intel/stratix10-smc.h +8 -10
Lines of this file are not shown. View the raw message.
include/linux/mfd/db8500-prcmu.h +250 -2
252 lines not on this page · raw message
include/linux/mfd/dbx500-prcmu.h deleted +0 -596
596 lines not on this page · raw message
include/linux/platform_data/asoc-ux500-msp.h deleted +0 -20
Lines of this file are not shown. View the raw message.
include/media/v4l2-hevc.h new file +41 -0
41 lines not on this page · raw message
kernel/bpf/bpf_local_storage.c +15 -34
49 lines not on this page · raw message
kernel/locking/lockdep.c +185 -45
230 lines not on this page · raw message
kernel/sched/fair.c +27 -18
45 lines not on this page · raw message
kernel/trace/trace_events_hist.c +11 -30
41 lines not on this page · raw message
kernel/trace/trace_probe.c +47 -1
48 lines not on this page · raw message
net/atm/pppoatm.c +17 -25
42 lines not on this page · raw message
net/bluetooth/hci_sync.c +39 -21
60 lines not on this page · raw message
net/bluetooth/mgmt.c +37 -8
45 lines not on this page · raw message
net/devlink/leftover.c +65 -34
99 lines not on this page · raw message
net/ipv4/icmp.c +25 -20
45 lines not on this page · raw message
net/mac80211/tdls.c +114 -78
192 lines not on this page · raw message
net/mac80211/tx.c +27 -19
46 lines not on this page · raw message
net/mptcp/subflow.c +29 -18
47 lines not on this page · raw message
net/netfilter/nfnetlink_queue.c +36 -41
77 lines not on this page · raw message
net/nfc/llcp_core.c +122 -53
175 lines not on this page · raw message
net/nfc/llcp_sock.c +47 -18
65 lines not on this page · raw message
net/rds/af_rds.c +52 -11
63 lines not on this page · raw message
net/rds/connection.c +84 -18
102 lines not on this page · raw message
net/rds/tcp.c +115 -49
164 lines not on this page · raw message
net/sched/act_api.c +100 -36
136 lines not on this page · raw message
net/sched/cls_route.c +22 -23
45 lines not on this page · raw message
net/sched/cls_u32.c +36 -8
44 lines not on this page · raw message
net/sched/sch_fq_pie.c +35 -27
62 lines not on this page · raw message
net/sctp/sm_sideeffect.c +23 -25
48 lines not on this page · raw message
net/unix/af_unix.c +32 -10
42 lines not on this page · raw message
net/wireless/mlme.c +72 -29
101 lines not on this page · raw message
net/wireless/trace.h +127 -128
255 lines not on this page · raw message
security/keys/trusted-keys/trusted_tpm2.c +7 -5
Lines of this file are not shown. View the raw message.
sound/pci/hda/hda_codec.c +57 -62
119 lines not on this page · raw message
sound/pci/hda/hda_sysfs.c +29 -48
77 lines not on this page · raw message
sound/soc/codecs/ab8500-codec.c +256 -281
537 lines not on this page · raw message
sound/soc/codecs/rk3328_codec.c +13 -41
54 lines not on this page · raw message
sound/soc/ux500/ux500_msp_dai.c +57 -112
169 lines not on this page · raw message
sound/soc/ux500/ux500_msp_i2s.c +183 -147
330 lines not on this page · raw message
sound/soc/ux500/ux500_pcm.c +4 -79
83 lines not on this page · raw message
sound/usb/6fire/comm.c +28 -14
42 lines not on this page · raw message
sound/usb/6fire/midi.c +35 -29
64 lines not on this page · raw message
sound/usb/6fire/pcm.c +119 -102
221 lines not on this page · raw message
sound/usb/caiaq/device.c +38 -15
53 lines not on this page · raw message
sound/usb/usx2y/usbusx2y.c +26 -19
45 lines not on this page · raw message
tools/lib/bpf/relo_core.c +31 -27
58 lines not on this page · raw message
tools/perf/tests/shell/stat_bpf_counters.sh +11 -19
Lines of this file are not shown. View the raw message.
tools/perf/util/cs-etm.c +15 -66
81 lines not on this page · raw message
tools/testing/selftests/alsa/mixer-test.c +2 -2
Lines of this file are not shown. View the raw message.
tools/testing/selftests/arm64/mte/check_gcr_el1_cswitch.c +1 -1
Lines of this file are not shown. View the raw message.
tools/testing/selftests/bpf/prog_tests/bpf_nf.c +7 -0
Lines of this file are not shown. View the raw message.
tools/testing/selftests/bpf/progs/test_bpf_nf.c +110 -2
112 lines not on this page · raw message
tools/testing/selftests/cgroup/test_kmem.c +1 -1
Lines of this file are not shown. View the raw message.
tools/testing/selftests/ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc +1 -1
Lines of this file are not shown. View the raw message.
tools/testing/selftests/landlock/fs_test.c +1736 -10
1,746 lines not on this page · raw message
tools/testing/selftests/nci/nci_dev.c +28 -17
45 lines not on this page · raw message
tools/testing/selftests/net/fib_nexthops.sh +28 -0
Lines of this file are not shown. View the raw message.
tools/testing/selftests/net/mptcp/mptcp_connect.c +3 -1
Lines of this file are not shown. View the raw message.
tools/testing/selftests/powerpc/tm/tm.h +6 -2
Lines of this file are not shown. View the raw message.
The rest of this diff is not shown. View the raw message.
Part of the diff is not shown here. View the raw message.