Skip to content

6.6.51-rc1 review

Greg Kroah-Hartman linux-cifs linux-erofs linux-fsdevel linux-mm linux-patches linux-tegra linux-wireless lkml netfs stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest269 patches 11 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/269sch/netem: fix use after free in netem_dequeuenet/sched/sch_netem.c+4 -50 replies
2/269net: microchip: vcap: Fix use-after-free error in kunit testdrivers/net/ethernet/microchip/vcap/vcap_api_kunit.c+2 -120 replies
3/269ASoC: dapm: Fix UAF for snd_soc_pcm_runtime objectsound/soc/soc-dapm.c+1 -00 replies
4/269KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTSarch/x86/kvm/x86.c+2 -00 replies
5/269KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASEarch/x86/kvm/svm/svm.c+12 -00 replies
6/269KVM: SVM: Dont advertise Bus Lock Detect to guest if SVM support is missingarch/x86/kvm/svm/svm.c+3 -00 replies
7/269ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devicessound/pci/hda/patch_conexant.c+11 -00 replies
8/269ALSA: hda/realtek: add patch for internal mic in Lenovo V145sound/pci/hda/patch_realtek.c+9 -00 replies
9/269ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxxsound/pci/hda/patch_realtek.c+1 -00 replies
10/269powerpc/qspinlock: Fix deadlock in MCS queuearch/powerpc/lib/qspinlock.c+9 -10 replies
11/269smb: client: fix double put of @cfile in smb2_set_path_size()fs/smb/client/smb2inode.c+1 -00 replies
12/269ksmbd: unset the binding mark of a reused connectionfs/smb/server/smb2pdu.c+4 -00 replies
13/269ksmbd: Unlock on in ksmbd_tcp_set_interfaces()fs/smb/server/transport_tcp.c+3 -10 replies
14/269ata: libata: Fix memory leak for error path in ata_host_alloc()drivers/ata/libata-core.c+3 -10 replies
15/269x86/tdx: Fix data leak in mmio_read()arch/x86/coco/tdx/tdx.c+0 -10 replies
16/269perf/x86/intel: Limit the period on Haswellarch/x86/events/intel/core.c+21 -20 replies
17/269irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()drivers/irqchip/irq-gic-v2m.c+3 -30 replies
18/269x86/kaslr: Expose and use the end of the physical memory address spacearch/x86/include/asm/page_64.h arch/x86/include/asm/pgtable_64_types.h arch/x86/mm/init_64.c +5 more+43 -120 replies
19/269rtmutex: Drop rt_mutex::wait_lock before schedulingkernel/locking/rtmutex.c+5 -40 replies
20/269nvme-pci: Add sleep quirk for Samsung 990 Evodrivers/nvme/host/pci.c+11 -00 replies
21/269rust: types: Make Opaque::get construst/kernel/types.rs+1 -10 replies
22/269rust: macros: provide correct provenance when constructing THIS_MODULErust/macros/module.rs+5 -10 replies
23/269Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"include/net/bluetooth/hci_core.h net/bluetooth/mgmt.c net/bluetooth/smp.c+7 -300 replies
24/269Bluetooth: MGMT: Ignore keys being loaded with invalid typenet/bluetooth/mgmt.c+19 -180 replies
25/269mmc: core: apply SD quirks earlier during probedrivers/mmc/core/quirks.h drivers/mmc/core/sd.c+17 -90 replies
26/269mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4Kdrivers/mmc/host/dw_mmc.c+2 -20 replies
27/269mmc: sdhci-of-aspeed: fix module autoloadingdrivers/mmc/host/sdhci-of-aspeed.c+1 -00 replies
28/269mmc: cqhci: Fix checking of CQHCI_HALT statedrivers/mmc/host/cqhci-core.c+1 -10 replies
29/269fuse: update stats for pages in dropped aux writeback listfs/fuse/file.c+7 -10 replies
30/269fuse: use unsigned type for getxattr/listxattr size truncationfs/fuse/xattr.c+2 -20 replies
31/269fuse: fix memory leak in fuse_create_openfs/fuse/dir.c+1 -10 replies
32/269clk: starfive: jh7110-sys: Add notifier for PLL0 clockdrivers/clk/starfive/clk-starfive-jh7110-sys.c drivers/clk/starfive/clk-starfive-jh71x0.h+32 -10 replies
33/269clk: qcom: clk-alpha-pll: Fix the pll post div maskdrivers/clk/qcom/clk-alpha-pll.c+1 -10 replies
34/269clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate APIdrivers/clk/qcom/clk-alpha-pll.c+2 -20 replies
35/269clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disableddrivers/clk/qcom/clk-alpha-pll.c+3 -00 replies
36/269clk: qcom: clk-alpha-pll: Update set_rate for Zonda PLLdrivers/clk/qcom/clk-alpha-pll.c+16 -00 replies
37/269can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_opendrivers/net/can/spi/mcp251x.c+1 -10 replies
38/269kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=ykernel/kexec_file.c+1 -10 replies
39/269mm: vmalloc: ensure vmap_block is initialised before adding to queuemm/vmalloc.c+1 -10 replies
40/269spi: rockchip: Resolve unbalanced runtime PM / system PM handlingdrivers/spi/spi-rockchip.c+7 -160 replies
41/269tracing/osnoise: Use a cpumask to know what threads are kthreadskernel/trace/trace_osnoise.c+15 -30 replies
42/269tracing/timerlat: Only clear timer if a kthread existskernel/trace/trace_osnoise.c+13 -60 replies
43/269tracing: Avoid possible softlockup in tracing_iter_reset()kernel/trace/trace.c+2 -00 replies
44/269tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()kernel/trace/trace_osnoise.c+6 -70 replies
45/269userfaultfd: dont BUG_ON() if khugepaged yanks our page tablemm/userfaultfd.c+4 -30 replies
46/269userfaultfd: fix checks for huge PMDsmm/userfaultfd.c+12 -100 replies
47/269fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAFfs/fscache/main.c+1 -00 replies
48/269eventfs: Use list_del_rcu() for SRCU protected list variablefs/tracefs/event_inode.c+1 -10 replies
49/269net: mana: Fix error handling in mana_create_txq/rxqs NAPI cleanupdrivers/net/ethernet/microsoft/mana/mana_en.c include/net/mana/mana.h+15 -90 replies
50/269net: mctp-serial: Fix missing escapes on transmitdrivers/net/mctp/mctp-serial.c+2 -20 replies
51/269x86/fpu: Avoid writing LBR bit to IA32_XSS unless supportedarch/x86/include/asm/fpu/types.h arch/x86/kernel/fpu/xstate.c arch/x86/kernel/fpu/xstate.h+12 -20 replies
52/269x86/apic: Make x2apic_disable() work correctlyarch/x86/kernel/apic/apic.c+6 -50 replies
53/269Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c+4 -20 replies
54/269tcp_bpf: fix return value of tcp_bpf_sendmsg()net/ipv4/tcp_bpf.c+1 -10 replies
55/269ila: call nf_unregister_net_hooks() soonernet/ipv6/ila/ila.h net/ipv6/ila/ila_main.c net/ipv6/ila/ila_xlat.c+16 -40 replies
56/269sched: sch_cake: fix bulk flow accounting logic for host fairnessnet/sched/sch_cake.c+7 -40 replies
57/269nilfs2: fix missing cleanup on rollforward recovery errorfs/nilfs2/recovery.c+33 -20 replies
58/269nilfs2: protect references to superblock parameters exposed in sysfsfs/nilfs2/sysfs.c+33 -100 replies
59/269nilfs2: fix state management in error path of log writing functionfs/nilfs2/segment.c+6 -40 replies
60/269drm/i915: Do not attempt to load the GSC multiple timesdrivers/gpu/drm/i915/gt/uc/intel_gsc_uc.c drivers/gpu/drm/i915/gt/uc/intel_uc_fw.h+6 -10 replies
61/269ALSA: control: Apply sanity check of input values for user elementssound/core/control.c+5 -10 replies
62/269ALSA: hda: Add input value sanity checks to HDMI channel map controlssound/hda/hdmi_chmap.c+18 -00 replies
63/269wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()drivers/net/wireless/ath/ath12k/mac.c+3 -10 replies
64/269wifi: ath12k: fix firmware crash due to invalid peer nssdrivers/net/wireless/ath/ath12k/mac.c+5 -00 replies
65/269smack: unix sockets: fix accept()ed socket labelsecurity/smack/smack_lsm.c+9 -30 replies
66/269bpf, verifier: Correct tail_call_reachable for bpf progkernel/bpf/verifier.c+3 -10 replies
67/269ELF: fix kernel.randomize_va_space double readfs/binfmt_elf.c+3 -20 replies
68/269accel/habanalabs/gaudi2: unsecure edma max outstanding registerdrivers/accel/habanalabs/gaudi2/gaudi2_security.c+1 -00 replies
69/269irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1drivers/irqchip/irq-armada-370-xp.c+4 -00 replies
70/269af_unix: Remove put_pid()/put_cred() in copy_peercred().net/unix/af_unix.c+1 -80 replies
71/269x86/kmsan: Fix hook for unaligned accessesarch/x86/lib/iomem.c+4 -10 replies
72/269iommu: sun50i: clear bypass registerdrivers/iommu/sun50i-iommu.c+1 -00 replies
73/269netfilter: nf_conncount: fix wrong variable typenet/netfilter/nf_conncount.c+3 -50 replies
74/269wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID checkdrivers/net/wireless/intel/iwlwifi/mvm/mvm.h+2 -10 replies
75/269udf: Avoid excessive partition lengthsfs/udf/super.c+15 -00 replies
76/269fs/ntfs3: One more reason to mark inode badfs/ntfs3/frecord.c+3 -10 replies
77/269riscv: kprobes: Use patch_text_nosync() for insn slotsarch/riscv/kernel/probes/kprobes.c+2 -30 replies
78/269media: vivid: fix wrong sizeimage value for mplanedrivers/media/test-drivers/vivid/vivid-vid-cap.c drivers/media/test-drivers/vivid/vivid-vid-out.c+12 -90 replies
79/269leds: spi-byte: Call of_node_put() on error pathdrivers/leds/leds-spi-byte.c+5 -10 replies
80/269wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3drivers/net/wireless/broadcom/brcm80211/brcmsmac/mac80211_if.c+1 -00 replies
81/269usb: uas: set host status byte on data completion errordrivers/usb/storage/uas.c+1 -00 replies
82/269usb: gadget: aspeed_udc: validate endpoint index for ast udcdrivers/usb/gadget/udc/aspeed_udc.c+2 -00 replies
83/269drm/amd/display: Run DC_LOG_DC after checking link->link_encdrivers/gpu/drm/amd/display/dc/link/link_factory.c+3 -30 replies
84/269drm/amd/display: Check HDCP returned statusdrivers/gpu/drm/amd/display/modules/hdcp/hdcp1_execution.c+9 -60 replies
85/269drm/amdgpu: Fix smatch static checker warningdrivers/gpu/drm/amd/amdgpu/gfx_v11_0.c+4 -40 replies
86/269drm/amdgpu: clear RB_OVERFLOW bit when enabling interruptsdrivers/gpu/drm/amd/amdgpu/ih_v6_0.c+28 -00 replies
87/269media: vivid: dont set HDMI TX controls if there are no HDMI outputsdrivers/media/test-drivers/vivid/vivid-vid-cap.c+8 -40 replies
88/269vfio/spapr: Always clear TCEs before unsetting the windowdrivers/vfio/vfio_iommu_spapr_tce.c+9 -40 replies
89/269ice: Check all ice_vsi_rebuild() errors in functiondrivers/net/ethernet/intel/ice/ice_main.c+11 -20 replies
90/269PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)drivers/pci/controller/dwc/pci-keystone.c+43 -10 replies
91/269Input: ili210x - use kvmalloc() to allocate buffer for firmware updatedrivers/input/touchscreen/ili210x.c+3 -30 replies
92/269media: qcom: camss: Add check for v4l2_fwnode_endpoint_parsedrivers/media/platform/qcom/camss/camss.c+4 -10 replies
93/269pcmcia: Use resource_size function on resource objectdrivers/pcmcia/yenta_socket.c+3 -30 replies
94/269drm/amd/display: Check denominator pbn_div before useddrivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c+1 -10 replies
95/269drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6drivers/gpu/drm/amd/amdgpu/amdgpu_display.c+1 -20 replies
96/269can: bcm: Remove proc entry when dev is unregistered.net/can/bcm.c+4 -00 replies
97/269can: m_can: Release irq on error in m_can_opendrivers/net/can/m_can/m_can.c+4 -10 replies
98/269can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD modedrivers/net/can/spi/mcp251xfd/mcp251xfd-ram.c drivers/net/can/spi/mcp251xfd/mcp251xfd-ring.c+27 -40 replies
99/269rust: Use awk instead of recent xargsrust/Makefile+1 -30 replies
100/269rust: kbuild: fix export of bss symbolsrust/Makefile+1 -10 replies
101/269cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target regionfs/smb/client/smb2ops.c+14 -20 replies
102/269igb: Fix not clearing TimeSync interrupts for 82580drivers/net/ethernet/intel/igb/igb_main.c+10 -00 replies
103/269ice: Add netif_device_attach/detach into PF reset flowdrivers/net/ethernet/intel/ice/ice_main.c+7 -00 replies
104/269platform/x86: dell-smbios: Fix error path in dell_smbios_init()drivers/platform/x86/dell/dell-smbios-base.c+4 -10 replies
105/269regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATORinclude/linux/regulator/consumer.h+8 -00 replies
106/269can: kvaser_pciefd: Skip redundant NULL pointer check in ISRdrivers/net/can/kvaser_pciefd.c+0 -60 replies
107/269can: kvaser_pciefd: Remove unnecessary commentdrivers/net/can/kvaser_pciefd.c+0 -10 replies
108/269can: kvaser_pciefd: Rename board_irq to pci_irqdrivers/net/can/kvaser_pciefd.c+4 -40 replies
109/269can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISRdrivers/net/can/kvaser_pciefd.c+18 -120 replies
110/269can: kvaser_pciefd: Use a single write when releasing RX buffersdrivers/net/can/kvaser_pciefd.c+8 -100 replies
111/269Bluetooth: qca: If memdump doesnt work, re-enable IBSdrivers/bluetooth/hci_qca.c+1 -00 replies
112/269Bluetooth: hci_event: Use HCI error defines instead of magic valuesinclude/net/bluetooth/hci.h net/bluetooth/hci_event.c+6 -40 replies
113/269Bluetooth: hci_conn: Only do ACL connections sequentiallyinclude/net/bluetooth/hci.h include/net/bluetooth/hci_sync.h net/bluetooth/hci_conn.c +1 more+83 -600 replies
114/269Bluetooth: Remove pending ACL connection attemptsinclude/net/bluetooth/hci_core.h net/bluetooth/hci_conn.c net/bluetooth/hci_event.c+4 -340 replies
115/269Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_syncinclude/net/bluetooth/hci_sync.h net/bluetooth/hci_conn.c net/bluetooth/hci_sync.c+13 -90 replies
116/269Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queueinclude/net/bluetooth/hci_sync.h net/bluetooth/hci_sync.c+136 -80 replies
117/269Bluetooth: hci_sync: Attempt to dequeue connection attemptinclude/net/bluetooth/hci_core.h include/net/bluetooth/hci_sync.h net/bluetooth/hci_conn.c +1 more+102 -710 replies
118/269Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_onceinclude/net/bluetooth/hci_sync.h net/bluetooth/hci_sync.c+44 -20 replies
119/269Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECTnet/bluetooth/hci_conn.c net/bluetooth/mgmt.c+47 -430 replies
120/269igc: Unlock on error in igc_io_resume()drivers/net/ethernet/intel/igc/igc_main.c+1 -00 replies
121/269hwmon: (hp-wmi-sensors) Check if WMI event data existsdrivers/hwmon/hp-wmi-sensors.c+2 -00 replies
122/269net: phy: Fix missing of_node_put() for ledsdrivers/net/phy/phy_device.c+2 -00 replies
123/269ice: protect XDP configuration with a mutexdrivers/net/ethernet/intel/ice/ice.h drivers/net/ethernet/intel/ice/ice_lib.c drivers/net/ethernet/intel/ice/ice_main.c +1 more+39 -190 replies
124/269ice: do not bring the VSI up, if it was down before the XDP setupdrivers/net/ethernet/intel/ice/ice_main.c+5 -20 replies
125/269usbnet: modern method to get random MACdrivers/net/usb/usbnet.c+3 -80 replies
126/269bpf: Add sockptr support for getsockoptinclude/linux/bpf-cgroup.h kernel/bpf/cgroup.c net/socket.c+17 -130 replies
127/269bpf: Add sockptr support for setsockoptinclude/linux/bpf-cgroup.h kernel/bpf/cgroup.c net/socket.c+5 -40 replies
128/269net/socket: Break down __sys_setsockoptinclude/net/sock.h net/socket.c+27 -140 replies
129/269net/socket: Break down __sys_getsockoptinclude/linux/bpf-cgroup.h include/net/sock.h net/core/sock.c +1 more+44 -340 replies
130/269bpf, net: Fix a potential race in do_sock_getsockopt()include/linux/bpf-cgroup.h net/socket.c+2 -110 replies
131/269bareudp: Fix device stats updates.drivers/net/bareudp.c+11 -110 replies
132/269fou: Fix null-ptr-deref in GRO.net/ipv4/fou_core.c+24 -50 replies
133/269r8152: fix the firmware doesnt workdrivers/net/usb/r8152.c+13 -40 replies
134/269net: bridge: br_fdb_external_learn_add(): always set EXT_LEARNnet/bridge/br_fdb.c+2 -40 replies
135/269net: dsa: vsc73xx: fix possible subblocks range of CAPT blockdrivers/net/dsa/vitesse-vsc73xx-core.c+8 -20 replies
136/269selftests: net: enable bind teststools/testing/selftests/net/Makefile+2 -10 replies
137/269xen: privcmd: Fix possible access to a freed kirqfd instancedrivers/xen/privcmd.c+9 -10 replies
138/269firmware: cs_dsp: Dont allow writes to read-only controlsdrivers/firmware/cirrus/cs_dsp.c+3 -00 replies
139/269phy: zynqmp: Take the phy mutex in xlatedrivers/phy/xilinx/phy-zynqmp.c+1 -00 replies
140/269ASoC: topology: Properly initialize soc_enum valuessound/soc/soc-topology.c+2 -00 replies
141/269dm init: Handle minors larger than 255drivers/md/dm-init.c+3 -10 replies
142/269iommu/vt-d: Handle volatile descriptor status readdrivers/iommu/intel/dmar.c+1 -10 replies
143/269cgroup: Protect css->cgroup write under css_set_lockkernel/cgroup/cgroup.c+1 -10 replies
144/269um: line: always fill *error_out in setup_one_line()arch/um/drivers/line.c+2 -00 replies
145/269devres: Initialize an uninitialized struct memberdrivers/base/devres.c+1 -00 replies
146/269pci/hotplug/pnv_php: Fix hotplug driver crash on Powernvdrivers/pci/hotplug/pnv_php.c+1 -20 replies
147/269virtio_ring: fix KMSAN error for premapped modedrivers/virtio/virtio_ring.c+3 -10 replies
148/269wifi: rtw88: usb: schedule rx work after everything is set updrivers/net/wireless/realtek/rtw88/usb.c+10 -30 replies
149/269scsi: ufs: core: Remove SCSI host only if addeddrivers/ufs/core/ufshcd.c+5 -20 replies
150/269scsi: pm80xx: Set phy->enable_completion only when we wait for itdrivers/scsi/pm8001/pm8001_sas.c+3 -10 replies
151/269crypto: qat - fix unintentional re-enabling of error interruptsdrivers/crypto/intel/qat/qat_common/adf_gen2_pfvf.c drivers/crypto/intel/qat/qat_dh895xcc/adf_dh895xcc_hw_data.c+9 -30 replies
152/269hwmon: (adc128d818) Fix underflows seen when writing limit attributesdrivers/hwmon/adc128d818.c+2 -20 replies
153/269hwmon: (lm95234) Fix underflows seen when writing limit attributesdrivers/hwmon/lm95234.c+5 -40 replies
154/269hwmon: (nct6775-core) Fix underflows seen when writing limit attributesdrivers/hwmon/nct6775-core.c+1 -10 replies
155/269hwmon: (w83627ehf) Fix underflows seen when writing limit attributesdrivers/hwmon/w83627ehf.c+2 -20 replies
156/269ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignmentsound/soc/codecs/tas2781-fmwlib.c+35 -360 replies
157/269libbpf: Add NULL checks to bpf_object__{prev_map,next_map}tools/lib/bpf/libbpf.c+2 -20 replies
158/269drm/amdgpu: Set no_hw_access when VF request full GPU failsdrivers/gpu/drm/amd/amdgpu/amdgpu_virt.c+3 -10 replies
159/269ext4: fix possible tid_t sequence overflowsfs/ext4/fast_commit.c+4 -40 replies
160/269jbd2: avoid mount failed when commit block is partial submittedfs/jbd2/recovery.c+30 -00 replies
161/269dma-mapping: benchmark: Dont starve others when doing the testkernel/dma/map_benchmark.c+16 -00 replies
162/269wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()drivers/net/wireless/marvell/mwifiex/main.h+3 -00 replies
163/269drm/amdgpu: reject gang submit on reserved VMIDsdrivers/gpu/drm/amd/amdgpu/amdgpu_cs.c drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c drivers/gpu/drm/amd/amdgpu/amdgpu_ids.h+30 -10 replies
164/269smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()kernel/smp.c+1 -00 replies
165/269fs/ntfs3: Check more cases when directory is corruptedfs/ntfs3/dir.c+32 -200 replies
166/269btrfs: replace BUG_ON with ASSERT in walk_down_proc()fs/btrfs/extent-tree.c+2 -20 replies
167/269btrfs: clean up our handling of refs == 0 in snapshot deletefs/btrfs/extent-tree.c+23 -50 replies
168/269btrfs: replace BUG_ON() with error handling at update_ref_for_cow()fs/btrfs/ctree.c+10 -20 replies
169/269cxl/region: Verify target positions using the ordered target listdrivers/cxl/core/region.c+4 -10 replies
170/269riscv: set trap vector earlierarch/riscv/kernel/head.S+3 -00 replies
171/269PCI: Add missing bridge lock to pci_bus_lock()drivers/pci/pci.c+21 -140 replies
172/269tcp: Dont drop SYN+ACK for simultaneous connect().net/ipv4/tcp_input.c+9 -00 replies
173/269Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()drivers/bluetooth/btnxpuart.c+8 -40 replies
174/269net: dpaa: avoid on-stack arrays of NR_CPUS elementsdrivers/net/ethernet/freescale/dpaa/dpaa_eth.c drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c+24 -60 replies
175/269LoongArch: Use correct API to map cmdline in relocate_kernel()arch/loongarch/kernel/relocate.c+3 -10 replies
176/269regmap: maple: work around gcc-14.1 false-positive warningdrivers/base/regmap/regcache-maple.c+2 -10 replies
177/269vfs: Fix potential circular locking through setxattr() and removexattr()fs/xattr.c+48 -430 replies
178/269i3c: master: svc: resend target address when get NACKdrivers/i3c/master/svc-i3c-master.c+44 -140 replies
179/269i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setupdrivers/i3c/master/mipi-i3c-hci/dma.c+4 -10 replies
180/269kselftests: dmabuf-heaps: Ensure the driver name is null-terminatedtools/testing/selftests/dmabuf-heaps/dmabuf-heap.c+3 -10 replies
181/269spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmwaredrivers/spi/spi-hisi-kunpeng.c+3 -00 replies
182/269btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()fs/btrfs/inode.c+1 -10 replies
183/269s390/vmlinux.lds.S: Move ro_after_init section behind rodata sectionarch/s390/kernel/vmlinux.lds.S+9 -00 replies
184/269HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixupdrivers/hid/hid-cougar.c+1 -10 replies
185/269HID: amd_sfh: free driver_data after destroying hid devicedrivers/hid/amd-sfh-hid/amd_sfh_hid.c+3 -10 replies
186/269Input: uinput - reject requests with unreasonable number of slotsdrivers/input/misc/uinput.c+14 -00 replies
187/269usbnet: ipheth: race between ipheth_close and error handlingdrivers/net/usb/ipheth.c+1 -10 replies
188/269Squashfs: sanity check symbolic link sizefs/squashfs/inode.c+6 -10 replies
189/269of/irq: Prevent device address out-of-bounds read in interrupt map walkdrivers/of/irq.c+11 -40 replies
190/269lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()lib/generic-radix-tree.c+2 -00 replies
191/269MIPS: cevt-r4k: Dont call get_c0_compare_int if timer irq is installedarch/mips/kernel/cevt-r4k.c+7 -80 replies
192/269spi: spi-fsl-lpspi: limit PRESCALE bit in TCR registerdrivers/spi/spi-fsl-lpspi.c+29 -20 replies
193/269ata: pata_macio: Use WARN instead of BUGdrivers/ata/pata_macio.c+5 -20 replies
194/269smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()fs/smb/server/oplock.c fs/smb/server/smb2pdu.c+6 -60 replies
195/269NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegationsfs/nfs/super.c+2 -00 replies
196/269riscv: Use WRITE_ONCE() when setting page table entriesarch/riscv/include/asm/pgtable-64.h arch/riscv/include/asm/pgtable.h+5 -50 replies
197/269mm: Introduce pudp/p4dp/pgdp_get() functionsarch/arm/include/asm/pgtable.h include/linux/pgtable.h+23 -00 replies
198/269riscv: mm: Only compile pgtable.c if MMUarch/riscv/mm/Makefile+1 -20 replies
199/269riscv: Use accessors to page table entries instead of direct dereferencearch/riscv/include/asm/kfence.h arch/riscv/include/asm/pgtable-64.h arch/riscv/include/asm/pgtable.h +7 more+128 -1130 replies
200/269ACPI: CPPC: Add helper to get the highest performance valuedrivers/acpi/cppc_acpi.c include/acpi/cppc_acpi.h+18 -00 replies
201/269cpufreq: amd-pstate: Enable amd-pstate preferred core supportdrivers/cpufreq/amd-pstate.c include/linux/amd-pstate.h+127 -80 replies
202/269cpufreq: amd-pstate: fix the highest frequency issue which limits performancedrivers/cpufreq/amd-pstate.c+19 -30 replies
203/269tcp: process the 3rd ACK with sk_socket for TFO/MPTCPnet/ipv4/tcp_input.c+0 -30 replies
204/269intel: legacy: Partial revert of field get conversiondrivers/net/ethernet/intel/e1000e/ich8lan.c+1 -10 replies
205/269staging: iio: frequency: ad9834: Validate frequency parameter valuedrivers/staging/iio/frequency/ad9834.c+1 -10 replies
206/269iio: buffer-dmaengine: fix releasing dma channel on errordrivers/iio/buffer/industrialio-buffer-dmaengine.c+3 -10 replies
207/269iio: fix scale application in iio_convert_raw_to_processed_unlockeddrivers/iio/inkern.c+4 -40 replies
208/269iio: adc: ad7124: fix config comparisondrivers/iio/adc/ad7124.c+15 -110 replies
209/269iio: adc: ad7606: remove frstdata check for serial modedrivers/iio/adc/ad7606.c drivers/iio/adc/ad7606.h drivers/iio/adc/ad7606_par.c+49 -290 replies
210/269iio: adc: ad7124: fix chip ID mismatchdrivers/iio/adc/ad7124.c+1 -00 replies
211/269usb: dwc3: core: update LC timer as per USB Spec V3.2drivers/usb/dwc3/core.c drivers/usb/dwc3/core.h+17 -00 replies
212/269usb: cdns2: Fix controller reset issuedrivers/usb/gadget/udc/cdns2/cdns2-gadget.c drivers/usb/gadget/udc/cdns2/cdns2-gadget.h+12 -90 replies
213/269usb: dwc3: Avoid waking up gadget during startxferdrivers/usb/dwc3/gadget.c+17 -240 replies
214/269misc: fastrpc: Fix double free of buf in error pathdrivers/misc/fastrpc.c+2 -30 replies
215/269binder: fix UAF caused by offsets overwritedrivers/android/binder.c+1 -00 replies
216/269nvmem: Fix return type of devm_nvmem_device_get() in kerneldocdrivers/nvmem/core.c+3 -30 replies
217/269uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescinddrivers/uio/uio_hv_generic.c+2 -10 replies
218/269Drivers: hv: vmbus: Fix rescind handling in uio_hv_genericdrivers/hv/vmbus_drv.c drivers/uio/uio_hv_generic.c+9 -00 replies
219/269VMCI: Fix use-after-free when removing resource in vmci_resource_remove()drivers/misc/vmw_vmci/vmci_resource.c+2 -10 replies
220/269clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAXdrivers/clocksource/timer-imx-tpm.c+4 -40 replies
221/269clocksource/drivers/imx-tpm: Fix next event not taking effect sometimedrivers/clocksource/timer-imx-tpm.c+8 -00 replies
222/269clocksource/drivers/timer-of: Remove percpu irq related codedrivers/clocksource/timer-of.c drivers/clocksource/timer-of.h+4 -140 replies
223/269uprobes: Use kzalloc to allocate xol areakernel/events/uprobes.c+1 -20 replies
224/269perf/aux: Fix AUX buffer serializationkernel/events/core.c kernel/events/internal.h kernel/events/ring_buffer.c+15 -60 replies
225/269mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()mm/vmscan.c+1 -10 replies
226/269Revert "mm: skip CMA pages when they are not available"mm/vmscan.c+2 -220 replies
227/269workqueue: wq_watchdog_touch is always called with valid CPUkernel/workqueue.c+2 -00 replies
228/269workqueue: Improve scalability of workqueue watchdog touchkernel/workqueue.c+8 -20 replies
229/269ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()drivers/acpi/acpi_processor.c+1 -10 replies
230/269ACPI: processor: Fix memory leaks in error paths of processor_add()drivers/acpi/acpi_processor.c+8 -70 replies
231/269arm64: acpi: Move get_cpu_for_acpi_id() to a headerarch/arm64/include/asm/acpi.h arch/arm64/kernel/acpi_numa.c+11 -110 replies
232/269arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entryarch/arm64/include/asm/acpi.h+2 -10 replies
233/269can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate functiondrivers/net/can/spi/mcp251xfd/mcp251xfd-rx.c+32 -160 replies
234/269can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratumdrivers/net/can/spi/mcp251xfd/mcp251xfd-ring.c drivers/net/can/spi/mcp251xfd/mcp251xfd-rx.c drivers/net/can/spi/mcp251xfd/mcp251xfd.h+56 -470 replies
235/269can: mcp251xfd: clarify the meaning of timestampdrivers/net/can/spi/mcp251xfd/mcp251xfd-core.c drivers/net/can/spi/mcp251xfd/mcp251xfd-rx.c drivers/net/can/spi/mcp251xfd/mcp251xfd-tef.c +2 more+43 -380 replies
236/269can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fddrivers/net/can/spi/mcp251xfd/mcp251xfd-ring.c drivers/net/can/spi/mcp251xfd/mcp251xfd-rx.c drivers/net/can/spi/mcp251xfd/mcp251xfd.h+33 -30 replies
237/269drm/amd: Add gfx12 swizzle mode defsinclude/uapi/drm/drm_fourcc.h+16 -00 replies
238/269drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizesdrivers/gpu/drm/amd/amdgpu/amdgpu_display.c include/uapi/drm/drm_fourcc.h+28 -10 replies
239/269ata: libata-scsi: Remove redundant sense_buffer memsetsdrivers/ata/libata-scsi.c+0 -50 replies
240/269ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tfdrivers/ata/libata-scsi.c+21 -00 replies
241/269crypto: starfive - Align rsa input data to 32-bitdrivers/crypto/starfive/jh7110-cryp.h drivers/crypto/starfive/jh7110-rsa.c+10 -50 replies
242/269crypto: starfive - Fix nent assignment in rsa decdrivers/crypto/starfive/jh7110-cryp.h drivers/crypto/starfive/jh7110-rsa.c+1 -30 replies
243/269clk: qcom: ipq9574: Update the alpha PLL type for GPLLsdrivers/clk/qcom/gcc-ipq9574.c+6 -60 replies
244/269powerpc/64e: remove unused IBM HTW codearch/powerpc/include/asm/nohash/mmu-e500.h arch/powerpc/mm/nohash/tlb.c arch/powerpc/mm/nohash/tlb_low_64e.S+2 -2530 replies
245/269powerpc/64e: split out nohash Book3E 64-bit codearch/powerpc/mm/nohash/Makefile arch/powerpc/mm/nohash/tlb.c arch/powerpc/mm/nohash/tlb_64e.c+363 -3430 replies
246/269powerpc/64e: Define mmu_pte_psize staticarch/powerpc/mm/nohash/tlb_64e.c+1 -10 replies
247/269powerpc/vdso: Dont discard rela sectionsarch/powerpc/kernel/vdso/vdso32.lds.S arch/powerpc/kernel/vdso/vdso64.lds.S+5 -30 replies
248/269ASoC: tegra: Fix CBB error during probe()sound/soc/tegra/tegra210_ahub.c+6 -40 replies
249/269nvmet-tcp: fix kernel crash if commands allocation failsdrivers/nvme/target/tcp.c+3 -10 replies
250/269nvme-pci: allocate tagset on reset if necessarydrivers/nvme/host/pci.c+6 -00 replies
251/269ASoc: SOF: topology: Clear SOF link platform name upon unloadsound/soc/sof/topology.c+2 -00 replies
252/269ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s modesound/soc/sunxi/sun4i-i2s.c+73 -700 replies
253/269clk: qcom: gcc-sm8550: Dont use parking clk_ops for QUPsdrivers/clk/qcom/gcc-sm8550.c+26 -260 replies
254/269clk: qcom: gcc-sm8550: Dont park the USB RCG at registration timedrivers/clk/qcom/clk-rcg.h drivers/clk/qcom/clk-rcg2.c drivers/clk/qcom/gcc-sm8550.c+32 -10 replies
255/269drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unuseddrivers/gpu/drm/i915/i915_sw_fence.c+2 -20 replies
256/269drm/i915/fence: Mark debug_fence_free() with __maybe_unuseddrivers/gpu/drm/i915/i915_sw_fence.c+2 -20 replies
257/269gpio: rockchip: fix OF node leak in probe()drivers/gpio/gpio-rockchip.c+1 -00 replies
258/269gpio: modepin: Enable module autoloadingdrivers/gpio/gpio-zynqmp-modepin.c+1 -00 replies
259/269smb: client: fix double put of @cfile in smb2_rename_path()fs/smb/client/smb2inode.c+2 -00 replies
260/269riscv: Fix toolchain vector detectionarch/riscv/Kconfig+2 -20 replies
261/269riscv: Do not restrict memory size because of linear mapping on nommuarch/riscv/mm/init.c+1 -10 replies
262/269ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()drivers/block/ublk_drv.c+2 -00 replies
263/269membarrier: riscv: Add full memory barrier in switch_mm()MAINTAINERS arch/riscv/Kconfig arch/riscv/include/asm/membarrier.h +2 more+38 -30 replies
264/269x86/mm: Fix PTI for i386 some morearch/x86/mm/pti.c+29 -160 replies
265/269btrfs: fix race between direct IO write and fsync when using same fdfs/btrfs/ctree.h fs/btrfs/file.c fs/btrfs/transaction.h+16 -160 replies
266/269spi: spi-fsl-lpspi: Fix off-by-one in prescale maxdrivers/spi/spi-fsl-lpspi.c+2 -20 replies
267/269Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_syncnet/bluetooth/hci_sync.c+3 -00 replies
268/269Bluetooth: hci_sync: Fix UAF on create_le_conn_completenet/bluetooth/hci_sync.c+3 -00 replies
269/269Bluetooth: hci_sync: Fix UAF on hci_abort_conn_syncnet/bluetooth/hci_sync.c+4 -90 replies

Reviews trailers per patch

137 of 269 patches have a Reviewed-by or Acked-by.

PatchNicholas PigginNamjae JeonYu KuaiMarc ZyngierMax RamanouskiAlistair PoppleDan WilliamsKees CookAlice RyhlWedson Almeida FilhoBenno LossinTrevor GrossGary GuoDragan SimicAvri AltmanJim MattsonTom LendackyRitesh HarjaniAdrian HunterPrzemek KitszelBaoquan HeUladzislau Rezki (Sony)Qi ZhengDavid HildenbrandJosef BacikDavid HowellsChi ZhilingHaiyang ZhangShradha GuptaJohn FastabendMartin KaFai LauFlorian WestphalEmil Renner BerthingHal FengMichael JeansonKonrad DybcioDmitry BaryshkovAndrew JefferyRyusuke KonishiOfir BittonAndrew LunnAlexander PotapenkoChen-Yu TsaiBjörn TöpelReijer BoekhoffOliver NeukumRodrigo SiqueiraDaniel WheelerLikun GaoJonathan CavittJaroslav KyselaMark BrownTakashi SakamotoJeff JohnsonSimon HormanMarc Kleine-BuddeMartin Rodriguez ReboredoDaiwei LiVinicius Costa GomesKurt KanzenbachPucha Himasekhar ReddyIgor BagnuckiMichal SchmidtIlpo JärvinenVincent MailholGuenter RoeckStephen BoydMichal SwiatkowskiSiddharth VadapalliHarry WentlandAlex DeucherChristian KönigWillem de BruijnJakub KicinskiStanislav FomichevAlexei StarovoitovNikolay AleksandrovIdo SchimmelFlorian FainelliEric DumazetKuniyuki IwashimaJuergen GrossKevin TianYi LiuAnton IvanovGerhard EnglederJonathan CameronWojciech DrewekJacob KellerChandan Kumar RoutMaciej FijalkowskiIlya LeoshkevichJason WangJan KaraHarshad ShirwadkarBarry SongBrian NorrisFrancesco DolciniPaul E. McKenneyDavid SterbaQu WenruoAlexandre GhitiHans de GoedeKalle ValoDave JiangGuillaume LegoupilBreno LeitaoMadalin BucurBart Van AsscheJack WangDamian MuszynskiBjorn HelgaasShawn AnastasioBasavaraj NatikarGeorgi ValkovPhilippe Mathieu-DaudéSerge SeminJeff LaytonAnup PatelOleksandr NatalenkoMario LimoncielloWyes KarnyPerry YuanHuang RuiGaha BanaNaama MeirMiquel RaynalJay FangGeert UytterhoevenAlexander GordeevSilvan JegenJiaxun YangSaurabh SengarPeng FanYe LiJason LiuUros BizjakOleg NesterovJohannes WeinerRafael J. WysockiGavin ShanMiguel LuisVishnu PajjuriJianyong WuHanjun GuoLorenzo PieralisiStefan AlthöferThomas KoppNuno SaThinh NguyenShuah KhanDan CarpenterSrinivas KandagatlaChristoph HellwigSagi GrimbergAmit PundirNeil ArmstrongJani NikulaHeiko StuebnerShawn LinMichal SimekChanghui ZhongMing LeiMathieu DesnoyersHannes ReineckeDamien Le MoalNiklas CasselHarshit MogalapalliTakeshi OgasawaraLinux Kernel Functional TestingRon EconomosKexy Biscuit
SeriesT-b T-b T-b T-b T-b T-b T-b T-b
1/269
2/269
3/269
4/269
5/269
6/269R-b R-b
7/269
8/269
9/269
10/269R-b
11/269
12/269
13/269A-b
14/269R-b
15/269
16/269
17/269R-b
18/269T-b T-b R-b R-b R-b
19/269
20/269
21/269R-b R-b R-b
22/269R-b R-b R-b R-b
23/269
24/269
25/269R-b R-b
26/269
27/269A-b
28/269R-b A-b
29/269R-b
30/269
31/269
32/269R-b R-b T-b
33/269R-b
34/269R-b
35/269R-b
36/269R-b
37/269R-b
38/269A-b
39/269R-b R-b
40/269
41/269
42/269
43/269
44/269
45/269R-b A-b
46/269A-b
47/269A-b
48/269T-b
49/269R-b R-b
50/269
51/269
52/269
53/269
54/269R-b A-b
55/269R-b
56/269
57/269T-b
58/269
59/269T-b
60/269R-b
61/269R-b R-b R-b
62/269R-b
63/269A-b
64/269A-b
65/269
66/269
67/269
68/269R-b
69/269R-b
70/269
71/269R-b
72/269R-b
73/269
74/269
75/269
76/269
77/269R-b
78/269
79/269
80/269T-b
81/269A-b
82/269R-b A-b
83/269R-b T-b
84/269R-b T-b
85/269R-b
86/269R-b
87/269
88/269
89/269R-b T-b R-b
90/269R-b
91/269
92/269
93/269
94/269T-b R-b
95/269A-b
96/269R-b
97/269A-b
98/269
99/269R-b T-b R-b
100/269R-b T-b R-b
101/269
102/269T-b A-b R-b T-b
103/269T-b R-b R-b
104/269R-b
105/269
106/269
107/269
108/269
109/269
110/269R-b
111/269R-b R-b
112/269
113/269
114/269
115/269
116/269
117/269
118/269
119/269
120/269R-b
121/269R-b
122/269R-b R-b
123/269R-b R-b T-b R-b
124/269R-b R-b T-b A-b
125/269R-b
126/269A-b
127/269A-b
128/269A-b R-b A-b
129/269A-b A-b
130/269A-b A-b
131/269R-b
132/269
133/269
134/269A-b R-b
135/269R-b
136/269R-b R-b
137/269R-b
138/269
139/269
140/269
141/269
142/269R-b R-b
143/269
144/269A-b
145/269
146/269A-b T-b
147/269T-b T-b A-b
148/269
149/269R-b
150/269A-b
151/269R-b
152/269
153/269
154/269
155/269
156/269
157/269
158/269A-b
159/269R-b R-b
160/269R-b
161/269A-b
162/269A-b R-b
163/269R-b
164/269T-b
165/269
166/269R-b
167/269R-b
168/269R-b R-b
169/269R-b R-b
170/269R-b
171/269T-b T-b R-b
172/269R-b
173/269T-b
174/269R-b A-b
175/269R-b
176/269
177/269
178/269R-b
179/269
180/269
181/269R-b
182/269R-b T-b
183/269R-b
184/269R-b
185/269A-b
186/269
187/269T-b
188/269
189/269
190/269
191/269R-b R-b T-b
192/269
193/269
194/269
195/269R-b
196/269
197/269
198/269
199/269A-b
200/269T-b R-b R-b R-b A-b
201/269T-b R-b R-b R-b
202/269T-b
203/269R-b
204/269T-b
205/269R-b
206/269
207/269
208/269R-b
209/269R-b
210/269R-b
211/269A-b
212/269
213/269A-b
214/269R-b R-b R-b
215/269
216/269
217/269
218/269R-b
219/269
220/269R-b R-b R-b
221/269R-b R-b R-b
222/269T-b
223/269A-b
224/269
225/269R-b
226/269A-b
227/269R-b
228/269R-b
229/269A-b R-b
230/269A-b R-b
231/269R-b R-b T-b T-b T-b A-b R-b
232/269R-b
233/269T-b T-b
234/269T-b T-b
235/269T-b T-b
236/269T-b T-b
237/269A-b
238/269A-b
239/269R-b R-b R-b
240/269R-b R-b R-b
241/269
242/269
243/269
244/269
245/269
246/269
247/269
248/269
249/269R-b
250/269R-b R-b
251/269
252/269
253/269T-b T-b
254/269T-b
255/269R-b
256/269R-b
257/269R-b R-b
258/269R-b
259/269
260/269
261/269T-b
262/269Reported-and-tested-by R-b
263/269R-b
264/269T-b
265/269R-b R-b
266/269
267/269
268/269
269/269

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 172 reviewers.

Read the v1 thread

Cover letter [PATCH 6.6 000/269] 6.6.51-rc1 review

This is the start of the stable review cycle for the 6.6.51 release. There are 269 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 12 Sep 2024 09:25:22 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.51-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.51-rc1

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix UAF on create_le_conn_complete

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync

Stefan Wahren <[email protected]>
spi: spi-fsl-lpspi: Fix off-by-one in prescale max

Filipe Manana <[email protected]>
btrfs: fix race between direct IO write and fsync when using same fd

Thomas Gleixner <[email protected]>
x86/mm: Fix PTI for i386 some more

Andrea Parri <[email protected]>
membarrier: riscv: Add full memory barrier in switch_mm()

Li Nan <[email protected]>
ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()

Alexandre Ghiti <[email protected]>
riscv: Do not restrict memory size because of linear mapping on nommu

Anton Blanchard <[email protected]>
riscv: Fix toolchain vector detection

Paulo Alcantara <[email protected]>
smb: client: fix double put of @cfile in smb2_rename_path()

Liao Chen <[email protected]>
gpio: modepin: Enable module autoloading

Krzysztof Kozlowski <[email protected]>
gpio: rockchip: fix OF node leak in probe()

Andy Shevchenko <[email protected]>
drm/i915/fence: Mark debug_fence_free() with __maybe_unused

Andy Shevchenko <[email protected]>
drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused

Stephen Boyd <[email protected]>
clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time

Stephen Boyd <[email protected]>
clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs

Matteo Martelli <[email protected]>
ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode

Chen-Yu Tsai <[email protected]>
ASoc: SOF: topology: Clear SOF link platform name upon unload

Keith Busch <[email protected]>
nvme-pci: allocate tagset on reset if necessary

Maurizio Lombardi <[email protected]>
nvmet-tcp: fix kernel crash if commands allocation fails

Mohan Kumar <[email protected]>
ASoC: tegra: Fix CBB error during probe()

Christophe Leroy <[email protected]>
powerpc/vdso: Don't discard rela sections

Christophe Leroy <[email protected]>
powerpc/64e: Define mmu_pte_psize static

Michael Ellerman <[email protected]>
powerpc/64e: split out nohash Book3E 64-bit code

Michael Ellerman <[email protected]>
powerpc/64e: remove unused IBM HTW code

devi priya <[email protected]>
clk: qcom: ipq9574: Update the alpha PLL type for GPLLs

Jia Jie Ho <[email protected]>
crypto: starfive - Fix nent assignment in rsa dec

Jia Jie Ho <[email protected]>
crypto: starfive - Align rsa input data to 32-bit

Igor Pylypiv <[email protected]>
ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf

Igor Pylypiv <[email protected]>
ata: libata-scsi: Remove redundant sense_buffer memsets

Marek Olšák <[email protected]>
drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes

Aurabindo Pillai <[email protected]>
drm/amd: Add gfx12 swizzle mode defs

Marc Kleine-Budde <[email protected]>

    can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd

Marc Kleine-Budde <[email protected]>
can: mcp251xfd: clarify the meaning of timestamp

Marc Kleine-Budde <[email protected]>
can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum

Marc Kleine-Budde <[email protected]>
can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function

Jonathan Cameron <[email protected]>
arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry

James Morse <[email protected]>
arm64: acpi: Move get_cpu_for_acpi_id() to a header

Jonathan Cameron <[email protected]>
ACPI: processor: Fix memory leaks in error paths of processor_add()

Jonathan Cameron <[email protected]>
ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()

Nicholas Piggin <[email protected]>
workqueue: Improve scalability of workqueue watchdog touch

Nicholas Piggin <[email protected]>
workqueue: wq_watchdog_touch is always called with valid CPU

Usama Arif <[email protected]>
Revert "mm: skip CMA pages when they are not available"

Vern Hao <[email protected]>
mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()

Peter Zijlstra <[email protected]>
perf/aux: Fix AUX buffer serialization

Sven Schnelle <[email protected]>
uprobes: Use kzalloc to allocate xol area

Daniel Lezcano <[email protected]>
clocksource/drivers/timer-of: Remove percpu irq related code

Jacky Bai <[email protected]>
clocksource/drivers/imx-tpm: Fix next event not taking effect sometime

Jacky Bai <[email protected]>
clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX

David Fernandez Gonzalez <[email protected]>
VMCI: Fix use-after-free when removing resource in vmci_resource_remove()

Naman Jain <[email protected]>
Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic

Saurabh Sengar <[email protected]>
uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

Geert Uytterhoeven <[email protected]>
nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc

Carlos Llamas <[email protected]>
binder: fix UAF caused by offsets overwrite

Sukrut Bellary <[email protected]>
misc: fastrpc: Fix double free of 'buf' in error path

Prashanth K <[email protected]>
usb: dwc3: Avoid waking up gadget during startxfer

Pawel Laszczak <[email protected]>
usb: cdns2: Fix controller reset issue

Faisal Hassan <[email protected]>
usb: dwc3: core: update LC timer as per USB Spec V3.2

Dumitru Ceclan <[email protected]>
iio: adc: ad7124: fix chip ID mismatch

Guillaume Stols <[email protected]>
iio: adc: ad7606: remove frstdata check for serial mode

Dumitru Ceclan <[email protected]>
iio: adc: ad7124: fix config comparison

Matteo Martelli <[email protected]>
iio: fix scale application in iio_convert_raw_to_processed_unlocked

David Lechner <[email protected]>
iio: buffer-dmaengine: fix releasing dma channel on error

Aleksandr Mishin <[email protected]>
staging: iio: frequency: ad9834: Validate frequency parameter value

Sasha Neftin <[email protected]>
intel: legacy: Partial revert of field get conversion

Matthieu Baerts (NGI0) <[email protected]>
tcp: process the 3rd ACK with sk_socket for TFO/MPTCP

Perry Yuan <[email protected]>
cpufreq: amd-pstate: fix the highest frequency issue which limits performance

Meng Li <[email protected]>
cpufreq: amd-pstate: Enable amd-pstate preferred core support

Meng Li <[email protected]>
ACPI: CPPC: Add helper to get the highest performance value

Alexandre Ghiti <[email protected]>
riscv: Use accessors to page table entries instead of direct dereference

Alexandre Ghiti <[email protected]>
riscv: mm: Only compile pgtable.c if MMU

Alexandre Ghiti <[email protected]>
mm: Introduce pudp/p4dp/pgdp_get() functions

Alexandre Ghiti <[email protected]>
riscv: Use WRITE_ONCE() when setting page table entries

Trond Myklebust <[email protected]>
NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations

ChenXiaoSong <[email protected]>
smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

Michael Ellerman <[email protected]>
ata: pata_macio: Use WARN instead of BUG

Carlos Song <[email protected]>
spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register

Jiaxun Yang <[email protected]>
MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed

Kent Overstreet <[email protected]>
lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

Stefan Wiehler <[email protected]>
of/irq: Prevent device address out-of-bounds read in interrupt map walk

Phillip Lougher <[email protected]>
Squashfs: sanity check symbolic link size

Oliver Neukum <[email protected]>
usbnet: ipheth: race between ipheth_close and error handling

Dmitry Torokhov <[email protected]>
Input: uinput - reject requests with unreasonable number of slots

Olivier Sobrie <[email protected]>
HID: amd_sfh: free driver_data after destroying hid device

Camila Alvarez <[email protected]>
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup

Heiko Carstens <[email protected]>
s390/vmlinux.lds.S: Move ro_after_init section behind rodata section

David Sterba <[email protected]>
btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()

Devyn Liu <[email protected]>
spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware

Zenghui Yu <[email protected]>
kselftests: dmabuf-heaps: Ensure the driver name is null-terminated

Jarkko Nikula <[email protected]>
i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup

Frank Li <[email protected]>
i3c: master: svc: resend target address when get NACK

David Howells <[email protected]>
vfs: Fix potential circular locking through setxattr() and removexattr()

Arnd Bergmann <[email protected]>
regmap: maple: work around gcc-14.1 false-positive warning

Huacai Chen <[email protected]>
LoongArch: Use correct API to map cmdline in relocate_kernel()

Vladimir Oltean <[email protected]>
net: dpaa: avoid on-stack arrays of NR_CPUS elements

Neeraj Sanjay Kale <[email protected]>
Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()

Kuniyuki Iwashima <[email protected]>
tcp: Don't drop SYN+ACK for simultaneous connect().

Dan Williams <[email protected]>
PCI: Add missing bridge lock to pci_bus_lock()

yang.zhang <[email protected]>
riscv: set trap vector earlier

Alison Schofield <[email protected]>
cxl/region: Verify target positions using the ordered target list

Filipe Manana <[email protected]>
btrfs: replace BUG_ON() with error handling at update_ref_for_cow()

Josef Bacik <[email protected]>

    btrfs: clean up our handling of refs == 0 in snapshot delete

Josef Bacik <[email protected]>
btrfs: replace BUG_ON with ASSERT in walk_down_proc()

Konstantin Komarov <[email protected]>
fs/ntfs3: Check more cases when directory is corrupted

Zqiang <[email protected]>
smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()

Christian König <[email protected]>
drm/amdgpu: reject gang submit on reserved VMIDs

Sascha Hauer <[email protected]>
wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()

Yicong Yang <[email protected]>
dma-mapping: benchmark: Don't starve others when doing the test

Ye Bin <[email protected]>
jbd2: avoid mount failed when commit block is partial submitted

Luis Henriques (SUSE) <[email protected]>
ext4: fix possible tid_t sequence overflows

Yifan Zha <[email protected]>
drm/amdgpu: Set no_hw_access when VF request full GPU fails

Andreas Ziegler <[email protected]>

    libbpf: Add NULL checks to bpf_object__{prev_map,next_map}

Shenghao Ding <[email protected]>
ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment

Guenter Roeck <[email protected]>
hwmon: (w83627ehf) Fix underflows seen when writing limit attributes

Guenter Roeck <[email protected]>
hwmon: (nct6775-core) Fix underflows seen when writing limit attributes

Guenter Roeck <[email protected]>
hwmon: (lm95234) Fix underflows seen when writing limit attributes

Guenter Roeck <[email protected]>
hwmon: (adc128d818) Fix underflows seen when writing limit attributes

Hareshx Sankar Raj <[email protected]>
crypto: qat - fix unintentional re-enabling of error interrupts

Igor Pylypiv <[email protected]>

    scsi: pm80xx: Set phy->enable_completion only when we wait for it

Kyoungrul Kim <[email protected]>
scsi: ufs: core: Remove SCSI host only if added

Marcin Ślusarz <[email protected]>
wifi: rtw88: usb: schedule rx work after everything is set up

Xuan Zhuo <[email protected]>
virtio_ring: fix KMSAN error for premapped mode

Krishna Kumar <[email protected]>
pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv

Zijun Hu <[email protected]>
devres: Initialize an uninitialized struct member

Johannes Berg <[email protected]>
um: line: always fill *error_out in setup_one_line()

Waiman Long <[email protected]>

    cgroup: Protect css->cgroup write under css_set_lock

Jacob Pan <[email protected]>
iommu/vt-d: Handle volatile descriptor status read

Benjamin Marzinski <[email protected]>
dm init: Handle minors larger than 255

Amadeusz Sławiński <[email protected]>
ASoC: topology: Properly initialize soc_enum values

Sean Anderson <[email protected]>
phy: zynqmp: Take the phy mutex in xlate

Richard Fitzgerald <[email protected]>
firmware: cs_dsp: Don't allow writes to read-only controls

Viresh Kumar <[email protected]>
xen: privcmd: Fix possible access to a freed kirqfd instance

Jamie Bainbridge <[email protected]>
selftests: net: enable bind tests

Pawel Dembicki <[email protected]>
net: dsa: vsc73xx: fix possible subblocks range of CAPT block

Jonas Gorski <[email protected]>
net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN

Hayes Wang <[email protected]>
r8152: fix the firmware doesn't work

Kuniyuki Iwashima <[email protected]>
fou: Fix null-ptr-deref in GRO.

Guillaume Nault <[email protected]>
bareudp: Fix device stats updates.

Tze-nan Wu <[email protected]>
bpf, net: Fix a potential race in do_sock_getsockopt()

Breno Leitao <[email protected]>
net/socket: Break down __sys_getsockopt

Breno Leitao <[email protected]>
net/socket: Break down __sys_setsockopt

Breno Leitao <[email protected]>
bpf: Add sockptr support for setsockopt

Breno Leitao <[email protected]>
bpf: Add sockptr support for getsockopt

Oliver Neukum <[email protected]>
usbnet: modern method to get random MAC

Larysa Zaremba <[email protected]>
ice: do not bring the VSI up, if it was down before the XDP setup

Larysa Zaremba <[email protected]>
ice: protect XDP configuration with a mutex

Jinjie Ruan <[email protected]>
net: phy: Fix missing of_node_put() for leds

Armin Wolf <[email protected]>
hwmon: (hp-wmi-sensors) Check if WMI event data exists

Dan Carpenter <[email protected]>
igc: Unlock on error in igc_io_resume()

Luiz Augusto von Dentz <[email protected]>
Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Attempt to dequeue connection attempt

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync

Jonas Dreßler <[email protected]>
Bluetooth: Remove pending ACL connection attempts

Jonas Dreßler <[email protected]>
Bluetooth: hci_conn: Only do ACL connections sequentially

Jonas Dreßler <[email protected]>
Bluetooth: hci_event: Use HCI error defines instead of magic values

Douglas Anderson <[email protected]>
Bluetooth: qca: If memdump doesn't work, re-enable IBS

Martin Jocic <[email protected]>
can: kvaser_pciefd: Use a single write when releasing RX buffers

Martin Jocic <[email protected]>
can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR

Martin Jocic <[email protected]>
can: kvaser_pciefd: Rename board_irq to pci_irq

Martin Jocic <[email protected]>
can: kvaser_pciefd: Remove unnecessary comment

Martin Jocic <[email protected]>
can: kvaser_pciefd: Skip redundant NULL pointer check in ISR

Douglas Anderson <[email protected]>
regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR

Aleksandr Mishin <[email protected]>
platform/x86: dell-smbios: Fix error path in dell_smbios_init()

Dawid Osuchowski <[email protected]>
ice: Add netif_device_attach/detach into PF reset flow

Daiwei Li <[email protected]>
igb: Fix not clearing TimeSync interrupts for 82580

David Howells <[email protected]>
cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region

Andreas Hindborg <[email protected]>
rust: kbuild: fix export of bss symbols

Matthew Maurer <[email protected]>
rust: Use awk instead of recent xargs

Marc Kleine-Budde <[email protected]>
can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode

Simon Horman <[email protected]>
can: m_can: Release irq on error in m_can_open

Kuniyuki Iwashima <[email protected]>
can: bcm: Remove proc entry when dev is unregistered.

Marek Olšák <[email protected]>
drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6

Alex Hung <[email protected]>
drm/amd/display: Check denominator pbn_div before used

Jules Irenge <[email protected]>
pcmcia: Use resource_size function on resource object

Chen Ni <[email protected]>
media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse

Dmitry Torokhov <[email protected]>

    Input: ili210x - use kvmalloc() to allocate buffer for firmware update

Kishon Vijay Abraham I <[email protected]>
PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)

Eric Joyner <[email protected]>
ice: Check all ice_vsi_rebuild() errors in function

Shivaprasad G Bhat <[email protected]>
vfio/spapr: Always clear TCEs before unsetting the window

Hans Verkuil <[email protected]>
media: vivid: don't set HDMI TX controls if there are no HDMI outputs

Danijel Slivka <[email protected]>
drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts

Hawking Zhang <[email protected]>
drm/amdgpu: Fix smatch static checker warning

Alex Hung <[email protected]>
drm/amd/display: Check HDCP returned status

Alex Hung <[email protected]>

    drm/amd/display: Run DC_LOG_DC after checking link->link_enc

Ma Ke <[email protected]>
usb: gadget: aspeed_udc: validate endpoint index for ast udc

Shantanu Goel <[email protected]>
usb: uas: set host status byte on data completion error

Arend van Spriel <[email protected]>
wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3

Andy Shevchenko <[email protected]>
leds: spi-byte: Call of_node_put() on error path

Hans Verkuil <[email protected]>
media: vivid: fix wrong sizeimage value for mplane

Samuel Holland <[email protected]>
riscv: kprobes: Use patch_text_nosync() for insn slots

Konstantin Komarov <[email protected]>
fs/ntfs3: One more reason to mark inode bad

Jan Kara <[email protected]>
udf: Avoid excessive partition lengths

Johannes Berg <[email protected]>
wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check

Yunjian Wang <[email protected]>
netfilter: nf_conncount: fix wrong variable type

Jernej Skrabec <[email protected]>
iommu: sun50i: clear bypass register

Brian Johannesmeyer <[email protected]>
x86/kmsan: Fix hook for unaligned accesses

Kuniyuki Iwashima <[email protected]>
af_unix: Remove put_pid()/put_cred() in copy_peercred().

Pali Rohár <[email protected]>
irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1

Rakesh Ughreja <[email protected]>
accel/habanalabs/gaudi2: unsecure edma max outstanding register

Alexey Dobriyan <[email protected]>
ELF: fix kernel.randomize_va_space double read

Leon Hwang <[email protected]>
bpf, verifier: Correct tail_call_reachable for bpf prog

Konstantin Andreev <[email protected]>
smack: unix sockets: fix accept()ed socket label

Ajith C <[email protected]>
wifi: ath12k: fix firmware crash due to invalid peer nss

Aaradhana Sahu <[email protected]>
wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()

Takashi Iwai <[email protected]>
ALSA: hda: Add input value sanity checks to HDMI channel map controls

Takashi Iwai <[email protected]>
ALSA: control: Apply sanity check of input values for user elements

Daniele Ceraolo Spurio <[email protected]>
drm/i915: Do not attempt to load the GSC multiple times

Ryusuke Konishi <[email protected]>
nilfs2: fix state management in error path of log writing function

Ryusuke Konishi <[email protected]>
nilfs2: protect references to superblock parameters exposed in sysfs

Ryusuke Konishi <[email protected]>
nilfs2: fix missing cleanup on rollforward recovery error

Toke Høiland-Jørgensen <[email protected]>
sched: sch_cake: fix bulk flow accounting logic for host fairness

Eric Dumazet <[email protected]>
ila: call nf_unregister_net_hooks() sooner

Cong Wang <[email protected]>
tcp_bpf: fix return value of tcp_bpf_sendmsg()

Alex Deucher <[email protected]>
Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"

Yuntao Wang <[email protected]>
x86/apic: Make x2apic_disable() work correctly

Mitchell Levy <[email protected]>
x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported

Matt Johnston <[email protected]>
net: mctp-serial: Fix missing escapes on transmit

Souradeep Chakrabarti <[email protected]>
net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup

Steven Rostedt <[email protected]>
eventfs: Use list_del_rcu() for SRCU protected list variable

Baokun Li <[email protected]>
fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF

Jann Horn <[email protected]>
userfaultfd: fix checks for huge PMDs

Jann Horn <[email protected]>
userfaultfd: don't BUG_ON() if khugepaged yanks our page table

Steven Rostedt <[email protected]>
tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()

Zheng Yejian <[email protected]>
tracing: Avoid possible softlockup in tracing_iter_reset()

Steven Rostedt <[email protected]>
tracing/timerlat: Only clear timer if a kthread exists

Steven Rostedt <[email protected]>
tracing/osnoise: Use a cpumask to know what threads are kthreads

Brian Norris <[email protected]>
spi: rockchip: Resolve unbalanced runtime PM / system PM handling

Will Deacon <[email protected]>
mm: vmalloc: ensure vmap_block is initialised before adding to queue

Petr Tesarik <[email protected]>
kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y

Simon Arlott <[email protected]>
can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open

Satya Priya Kakitapalli <[email protected]>
clk: qcom: clk-alpha-pll: Update set_rate for Zonda PLL

Satya Priya Kakitapalli <[email protected]>
clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disabled

Satya Priya Kakitapalli <[email protected]>
clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API

Satya Priya Kakitapalli <[email protected]>
clk: qcom: clk-alpha-pll: Fix the pll post div mask

Xingyu Wu <[email protected]>
clk: starfive: jh7110-sys: Add notifier for PLL0 clock

yangyun <[email protected]>
fuse: fix memory leak in fuse_create_open

Jann Horn <[email protected]>
fuse: use unsigned type for getxattr/listxattr size truncation

Joanne Koong <[email protected]>
fuse: update stats for pages in dropped aux writeback list

Seunghwan Baek <[email protected]>
mmc: cqhci: Fix checking of CQHCI_HALT state

Liao Chen <[email protected]>
mmc: sdhci-of-aspeed: fix module autoloading

Sam Protsenko <[email protected]>
mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K

Jonathan Bell <[email protected]>
mmc: core: apply SD quirks earlier during probe

Luiz Augusto von Dentz <[email protected]>
Bluetooth: MGMT: Ignore keys being loaded with invalid type

Luiz Augusto von Dentz <[email protected]>
Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"

Boqun Feng <[email protected]>
rust: macros: provide correct provenance when constructing THIS_MODULE

Boqun Feng <[email protected]>
rust: types: Make Opaque::get const

Georg Gottleuber <[email protected]>
nvme-pci: Add sleep quirk for Samsung 990 Evo

Roland Xu <[email protected]>
rtmutex: Drop rt_mutex::wait_lock before scheduling

Thomas Gleixner <[email protected]>
x86/kaslr: Expose and use the end of the physical memory address space

Ma Ke <[email protected]>
irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()

Kan Liang <[email protected]>
perf/x86/intel: Limit the period on Haswell

Kirill A. Shutemov <[email protected]>
x86/tdx: Fix data leak in mmio_read()

Zheng Qixing <[email protected]>
ata: libata: Fix memory leak for error path in ata_host_alloc()

Dan Carpenter <[email protected]>
ksmbd: Unlock on in ksmbd_tcp_set_interfaces()

Namjae Jeon <[email protected]>
ksmbd: unset the binding mark of a reused connection

Paulo Alcantara <[email protected]>
smb: client: fix double put of @cfile in smb2_set_path_size()

Nysal Jan K.A. <[email protected]>
powerpc/qspinlock: Fix deadlock in MCS queue

Maximilien Perreault <[email protected]>
ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx

Terry Cheong <[email protected]>
ALSA: hda/realtek: add patch for internal mic in Lenovo V145

Christoffer Sandberg <[email protected]>
ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices

Ravi Bangoria <[email protected]>
KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing

Maxim Levitsky <[email protected]>
KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE

Sean Christopherson <[email protected]>

    KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS

robelin <[email protected]>
ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object

Jens Emil Schulz Østergaard <[email protected]>
net: microchip: vcap: Fix use-after-free error in kunit test

Stephen Hemminger <[email protected]>
sch/netem: fix use after free in netem_dequeue

-------------

Diffstat:

 MAINTAINERS                                        |   2 +-
 Makefile                                           |   4 +-
 arch/arm/include/asm/pgtable.h                     |   2 +
 arch/arm64/include/asm/acpi.h                      |  12 +
 arch/arm64/kernel/acpi_numa.c                      |  11 -
 arch/loongarch/kernel/relocate.c                   |   4 +-
 arch/mips/kernel/cevt-r4k.c                        |  15 +-
 arch/powerpc/include/asm/nohash/mmu-e500.h         |   3 +-
 arch/powerpc/kernel/vdso/vdso32.lds.S              |   4 +-
 arch/powerpc/kernel/vdso/vdso64.lds.S              |   4 +-
 arch/powerpc/lib/qspinlock.c                       |  10 +-
 arch/powerpc/mm/nohash/Makefile                    |   2 +-
 arch/powerpc/mm/nohash/tlb.c                       | 398 +--------------------
 arch/powerpc/mm/nohash/tlb_64e.c                   | 361 +++++++++++++++++++
 arch/powerpc/mm/nohash/tlb_low_64e.S               | 195 ----------
 arch/riscv/Kconfig                                 |   5 +-
 arch/riscv/include/asm/kfence.h                    |   4 +-
 arch/riscv/include/asm/membarrier.h                |  31 ++
 arch/riscv/include/asm/pgtable-64.h                |  22 +-
 arch/riscv/include/asm/pgtable.h                   |  33 +-
 arch/riscv/kernel/efi.c                            |   2 +-
 arch/riscv/kernel/head.S                           |   3 +
 arch/riscv/kernel/probes/kprobes.c                 |   5 +-
 arch/riscv/kvm/mmu.c                               |  22 +-
 arch/riscv/mm/Makefile                             |   3 +-
 arch/riscv/mm/context.c                            |   2 +
 arch/riscv/mm/fault.c                              |  16 +-
 arch/riscv/mm/hugetlbpage.c                        |  12 +-
 arch/riscv/mm/init.c                               |   2 +-
 arch/riscv/mm/kasan_init.c                         |  45 +--
 arch/riscv/mm/pageattr.c                           |  44 +--
 arch/riscv/mm/pgtable.c                            |  51 ++-
 arch/s390/kernel/vmlinux.lds.S                     |   9 +
 arch/um/drivers/line.c                             |   2 +
 arch/x86/coco/tdx/tdx.c                            |   1 -
 arch/x86/events/intel/core.c                       |  23 +-
 arch/x86/include/asm/fpu/types.h                   |   7 +
 arch/x86/include/asm/page_64.h                     |   1 +
 arch/x86/include/asm/pgtable_64_types.h            |   4 +
 arch/x86/kernel/apic/apic.c                        |  11 +-
 arch/x86/kernel/fpu/xstate.c                       |   3 +
 arch/x86/kernel/fpu/xstate.h                       |   4 +-
 arch/x86/kvm/svm/svm.c                             |  15 +
 arch/x86/kvm/x86.c                                 |   2 +
 arch/x86/lib/iomem.c                               |   5 +-
 arch/x86/mm/init_64.c                              |   4 +
 arch/x86/mm/kaslr.c                                |  34 +-
 arch/x86/mm/pti.c                                  |  45 ++-
 drivers/accel/habanalabs/gaudi2/gaudi2_security.c  |   1 +
 drivers/acpi/acpi_processor.c                      |  15 +-
 drivers/acpi/cppc_acpi.c                           |  13 +
 drivers/android/binder.c                           |   1 +
 drivers/ata/libata-core.c                          |   4 +-
 drivers/ata/libata-scsi.c                          |  24 +-
 drivers/ata/pata_macio.c                           |   7 +-
 drivers/base/devres.c                              |   1 +
 drivers/base/regmap/regcache-maple.c               |   3 +-
 drivers/block/ublk_drv.c                           |   2 +
 drivers/bluetooth/btnxpuart.c                      |  12 +-
 drivers/bluetooth/hci_qca.c                        |   1 +
 drivers/clk/qcom/clk-alpha-pll.c                   |  25 +-
 drivers/clk/qcom/clk-rcg.h                         |   1 +
 drivers/clk/qcom/clk-rcg2.c                        |  30 ++
 drivers/clk/qcom/gcc-ipq9574.c                     |  12 +-
 drivers/clk/qcom/gcc-sm8550.c                      |  54 +--
 drivers/clk/starfive/clk-starfive-jh7110-sys.c     |  31 +-
 drivers/clk/starfive/clk-starfive-jh71x0.h         |   2 +
 drivers/clocksource/timer-imx-tpm.c                |  16 +-
 drivers/clocksource/timer-of.c                     |  17 +-
 drivers/clocksource/timer-of.h                     |   1 -
 drivers/cpufreq/amd-pstate.c                       | 147 +++++++-
 .../crypto/intel/qat/qat_common/adf_gen2_pfvf.c    |   4 +-
 .../intel/qat/qat_dh895xcc/adf_dh895xcc_hw_data.c  |   8 +-
 drivers/crypto/starfive/jh7110-cryp.h              |   4 +-
 drivers/crypto/starfive/jh7110-rsa.c               |  15 +-
 drivers/cxl/core/region.c                          |   5 +-
 drivers/firmware/cirrus/cs_dsp.c                   |   3 +
 drivers/gpio/gpio-rockchip.c                       |   1 +
 drivers/gpio/gpio-zynqmp-modepin.c                 |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c             |  15 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_display.c        |  30 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c            |  15 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ids.h            |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c           |   4 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c             |   8 +-
 drivers/gpu/drm/amd/amdgpu/ih_v6_0.c               |  28 ++
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   2 +-
 drivers/gpu/drm/amd/display/dc/link/link_factory.c |   6 +-
 .../drm/amd/display/modules/hdcp/hdcp1_execution.c |  15 +-
 drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c          |   6 +-
 drivers/gpu/drm/i915/gt/uc/intel_gsc_uc.c          |   2 +-
 drivers/gpu/drm/i915/gt/uc/intel_uc_fw.h           |   5 +
 drivers/gpu/drm/i915/i915_sw_fence.c               |   8 +-
 drivers/hid/amd-sfh-hid/amd_sfh_hid.c              |   4 +-
 drivers/hid/hid-cougar.c                           |   2 +-
 drivers/hv/vmbus_drv.c                             |   1 +
 drivers/hwmon/adc128d818.c                         |   4 +-
 drivers/hwmon/hp-wmi-sensors.c                     |   2 +
 drivers/hwmon/lm95234.c                            |   9 +-
 drivers/hwmon/nct6775-core.c                       |   2 +-
 drivers/hwmon/w83627ehf.c                          |   4 +-
 drivers/i3c/master/mipi-i3c-hci/dma.c              |   5 +-
 drivers/i3c/master/svc-i3c-master.c                |  58 ++-
 drivers/iio/adc/ad7124.c                           |  27 +-
 drivers/iio/adc/ad7606.c                           |  28 +-
 drivers/iio/adc/ad7606.h                           |   2 +
 drivers/iio/adc/ad7606_par.c                       |  46 ++-
 drivers/iio/buffer/industrialio-buffer-dmaengine.c |   4 +-
 drivers/iio/inkern.c                               |   8 +-
 drivers/input/misc/uinput.c                        |  14 +
 drivers/input/touchscreen/ili210x.c                |   6 +-
 drivers/iommu/intel/dmar.c                         |   2 +-
 drivers/iommu/sun50i-iommu.c                       |   1 +
 drivers/irqchip/irq-armada-370-xp.c                |   4 +
 drivers/irqchip/irq-gic-v2m.c                      |   6 +-
 drivers/leds/leds-spi-byte.c                       |   6 +-
 drivers/md/dm-init.c                               |   4 +-
 drivers/media/platform/qcom/camss/camss.c          |   5 +-
 drivers/media/test-drivers/vivid/vivid-vid-cap.c   |  17 +-
 drivers/media/test-drivers/vivid/vivid-vid-out.c   |  16 +-
 drivers/misc/fastrpc.c                             |   5 +-
 drivers/misc/vmw_vmci/vmci_resource.c              |   3 +-
 drivers/mmc/core/quirks.h                          |  22 +-
 drivers/mmc/core/sd.c                              |   4 +
 drivers/mmc/host/cqhci-core.c                      |   2 +-
 drivers/mmc/host/dw_mmc.c                          |   4 +-
 drivers/mmc/host/sdhci-of-aspeed.c                 |   1 +
 drivers/net/bareudp.c                              |  22 +-
 drivers/net/can/kvaser_pciefd.c                    |  43 ++-
 drivers/net/can/m_can/m_can.c                      |   5 +-
 drivers/net/can/spi/mcp251x.c                      |   2 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c     |  28 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd-ram.c      |  11 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd-ring.c     |  23 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd-rx.c       | 165 ++++++---
 drivers/net/can/spi/mcp251xfd/mcp251xfd-tef.c      |   2 +-
 .../net/can/spi/mcp251xfd/mcp251xfd-timestamp.c    |  22 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd.h          |  42 ++-
 drivers/net/dsa/vitesse-vsc73xx-core.c             |  10 +-
 drivers/net/ethernet/freescale/dpaa/dpaa_eth.c     |  20 +-
 drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c |  10 +-
 drivers/net/ethernet/intel/e1000e/ich8lan.c        |   2 +-
 drivers/net/ethernet/intel/ice/ice.h               |   2 +
 drivers/net/ethernet/intel/ice/ice_lib.c           |  34 +-
 drivers/net/ethernet/intel/ice/ice_main.c          |  46 ++-
 drivers/net/ethernet/intel/ice/ice_xsk.c           |   3 +-
 drivers/net/ethernet/intel/igb/igb_main.c          |  10 +
 drivers/net/ethernet/intel/igc/igc_main.c          |   1 +
 .../net/ethernet/microchip/vcap/vcap_api_kunit.c   |  14 +-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |  22 +-
 drivers/net/mctp/mctp-serial.c                     |   4 +-
 drivers/net/phy/phy_device.c                       |   2 +
 drivers/net/usb/ipheth.c                           |   2 +-
 drivers/net/usb/r8152.c                            |  17 +-
 drivers/net/usb/usbnet.c                           |  11 +-
 drivers/net/wireless/ath/ath12k/mac.c              |   9 +-
 .../broadcom/brcm80211/brcmsmac/mac80211_if.c      |   1 +
 drivers/net/wireless/intel/iwlwifi/mvm/mvm.h       |   3 +-
 drivers/net/wireless/marvell/mwifiex/main.h        |   3 +
 drivers/net/wireless/realtek/rtw88/usb.c           |  13 +-
 drivers/nvme/host/pci.c                            |  17 +
 drivers/nvme/target/tcp.c                          |   4 +-
 drivers/nvmem/core.c                               |   6 +-
 drivers/of/irq.c                                   |  15 +-
 drivers/pci/controller/dwc/pci-keystone.c          |  44 ++-
 drivers/pci/hotplug/pnv_php.c                      |   3 +-
 drivers/pci/pci.c                                  |  35 +-
 drivers/pcmcia/yenta_socket.c                      |   6 +-
 drivers/phy/xilinx/phy-zynqmp.c                    |   1 +
 drivers/platform/x86/dell/dell-smbios-base.c       |   5 +-
 drivers/scsi/pm8001/pm8001_sas.c                   |   4 +-
 drivers/spi/spi-fsl-lpspi.c                        |  31 +-
 drivers/spi/spi-hisi-kunpeng.c                     |   3 +
 drivers/spi/spi-rockchip.c                         |  23 +-
 drivers/staging/iio/frequency/ad9834.c             |   2 +-
 drivers/ufs/core/ufshcd.c                          |   7 +-
 drivers/uio/uio_hv_generic.c                       |  11 +-
 drivers/usb/dwc3/core.c                            |  15 +
 drivers/usb/dwc3/core.h                            |   2 +
 drivers/usb/dwc3/gadget.c                          |  41 +--
 drivers/usb/gadget/udc/aspeed_udc.c                |   2 +
 drivers/usb/gadget/udc/cdns2/cdns2-gadget.c        |  12 +-
 drivers/usb/gadget/udc/cdns2/cdns2-gadget.h        |   9 +
 drivers/usb/storage/uas.c                          |   1 +
 drivers/vfio/vfio_iommu_spapr_tce.c                |  13 +-
 drivers/virtio/virtio_ring.c                       |   4 +-
 drivers/xen/privcmd.c                              |  10 +-
 fs/binfmt_elf.c                                    |   5 +-
 fs/btrfs/ctree.c                                   |  12 +-
 fs/btrfs/ctree.h                                   |   1 -
 fs/btrfs/extent-tree.c                             |  32 +-
 fs/btrfs/file.c                                    |  25 +-
 fs/btrfs/inode.c                                   |   2 +-
 fs/btrfs/transaction.h                             |   6 +
 fs/ext4/fast_commit.c                              |   8 +-
 fs/fscache/main.c                                  |   1 +
 fs/fuse/dir.c                                      |   2 +-
 fs/fuse/file.c                                     |   8 +-
 fs/fuse/xattr.c                                    |   4 +-
 fs/jbd2/recovery.c                                 |  30 ++
 fs/nfs/super.c                                     |   2 +
 fs/nilfs2/recovery.c                               |  35 +-
 fs/nilfs2/segment.c                                |  10 +-
 fs/nilfs2/sysfs.c                                  |  43 ++-
 fs/ntfs3/dir.c                                     |  52 +--
 fs/ntfs3/frecord.c                                 |   4 +-
 fs/smb/client/smb2inode.c                          |   3 +
 fs/smb/client/smb2ops.c                            |  16 +-
 fs/smb/server/oplock.c                             |   2 +-
 fs/smb/server/smb2pdu.c                            |  14 +-
 fs/smb/server/transport_tcp.c                      |   4 +-
 fs/squashfs/inode.c                                |   7 +-
 fs/tracefs/event_inode.c                           |   2 +-
 fs/udf/super.c                                     |  15 +
 fs/xattr.c                                         |  91 ++---
 include/acpi/cppc_acpi.h                           |   5 +
 include/linux/amd-pstate.h                         |   4 +
 include/linux/bpf-cgroup.h                         |  16 +-
 include/linux/mm.h                                 |   4 +
 include/linux/pgtable.h                            |  21 ++
 include/linux/regulator/consumer.h                 |   8 +
 include/net/bluetooth/hci.h                        |   3 +
 include/net/bluetooth/hci_core.h                   |  25 +-
 include/net/bluetooth/hci_sync.h                   |  24 +-
 include/net/mana/mana.h                            |   2 +
 include/net/sock.h                                 |   6 +-
 include/uapi/drm/drm_fourcc.h                      |  18 +
 kernel/bpf/cgroup.c                                |  25 +-
 kernel/bpf/verifier.c                              |   4 +-
 kernel/cgroup/cgroup.c                             |   2 +-
 kernel/dma/map_benchmark.c                         |  16 +
 kernel/events/core.c                               |  18 +-
 kernel/events/internal.h                           |   1 +
 kernel/events/ring_buffer.c                        |   2 +
 kernel/events/uprobes.c                            |   3 +-
 kernel/kexec_file.c                                |   2 +-
 kernel/locking/rtmutex.c                           |   9 +-
 kernel/resource.c                                  |   6 +-
 kernel/sched/core.c                                |   5 +-
 kernel/smp.c                                       |   1 +
 kernel/trace/trace.c                               |   2 +
 kernel/trace/trace_osnoise.c                       |  50 ++-
 kernel/workqueue.c                                 |  14 +-
 lib/generic-radix-tree.c                           |   2 +
 mm/memory_hotplug.c                                |   2 +-
 mm/sparse.c                                        |   2 +-
 mm/userfaultfd.c                                   |  29 +-
 mm/vmalloc.c                                       |   2 +-
 mm/vmscan.c                                        |  24 +-
 net/bluetooth/hci_conn.c                           | 158 ++------
 net/bluetooth/hci_event.c                          |  27 +-
 net/bluetooth/hci_sync.c                           | 307 +++++++++++++++-
 net/bluetooth/mgmt.c                               | 144 ++++----
 net/bluetooth/smp.c                                |   7 -
 net/bridge/br_fdb.c                                |   6 +-
 net/can/bcm.c                                      |   4 +
 net/core/sock.c                                    |   8 -
 net/ipv4/fou_core.c                                |  29 +-
 net/ipv4/tcp_bpf.c                                 |   2 +-
 net/ipv4/tcp_input.c                               |   6 +
 net/ipv6/ila/ila.h                                 |   1 +
 net/ipv6/ila/ila_main.c                            |   6 +
 net/ipv6/ila/ila_xlat.c                            |  13 +-
 net/netfilter/nf_conncount.c                       |   8 +-
 net/sched/sch_cake.c                               |  11 +-
 net/sched/sch_netem.c                              |   9 +-
 net/socket.c                                       | 104 ++++--
 net/unix/af_unix.c                                 |   9 +-
 rust/Makefile                                      |   4 +-
 rust/kernel/types.rs                               |   2 +-
 rust/macros/module.rs                              |   6 +-
 security/smack/smack_lsm.c                         |  12 +-
 sound/core/control.c                               |   6 +-
 sound/hda/hdmi_chmap.c                             |  18 +
 sound/pci/hda/patch_conexant.c                     |  11 +
 sound/pci/hda/patch_realtek.c                      |  10 +
 sound/soc/codecs/tas2781-fmwlib.c                  |  71 ++--
 sound/soc/soc-dapm.c                               |   1 +
 sound/soc/soc-topology.c                           |   2 +
 sound/soc/sof/topology.c                           |   2 +
 sound/soc/sunxi/sun4i-i2s.c                        | 143 ++++----
 sound/soc/tegra/tegra210_ahub.c                    |  12 +-
 tools/lib/bpf/libbpf.c                             |   4 +-
 tools/testing/selftests/dmabuf-heaps/dmabuf-heap.c |   4 +-
 tools/testing/selftests/net/Makefile               |   3 +-
 285 files changed, 3319 insertions(+), 2007 deletions(-)