Skip to content

6.6.67-rc1 review

Greg Kroah-Hartman linux-patches linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest109 patches 10 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/109bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavorskernel/trace/bpf_trace.c+7 -00 replies
2/109perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFGarch/x86/events/intel/ds.c+1 -10 replies
3/109ksmbd: fix racy issue from session lookup and expirefs/smb/server/auth.c fs/smb/server/mgmt/user_session.c fs/smb/server/server.c +1 more+23 -160 replies
4/109splice: do not checksum AF_UNIX socketsnet/unix/af_unix.c+1 -00 replies
5/109tcp: check space before adding MPTCP SYN optionsnet/ipv4/tcp_output.c+4 -20 replies
6/109riscv: Fix wrong usage of __pa() on a fixmap addressarch/riscv/kernel/setup.c+1 -10 replies
7/109blk-cgroup: Fix UAF in blkcg_unpin_online()block/blk-cgroup.c+5 -10 replies
8/109ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5sound/usb/quirks.c+2 -00 replies
9/109riscv: Fix IPIs usage in kfence_protect_page()arch/riscv/include/asm/kfence.h+3 -10 replies
10/109usb: host: max3421-hcd: Correctly abort a USB request.drivers/usb/host/max3421-hcd.c+11 -50 replies
11/109ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()drivers/ata/sata_highbank.c+1 -00 replies
12/109usb: dwc2: Fix HCD resumedrivers/usb/dwc2/hcd.c+1 -00 replies
13/109usb: dwc2: hcd: Fix GetPortStatus & SetPortFeaturedrivers/usb/dwc2/hcd.c+6 -100 replies
14/109usb: dwc2: Fix HCD port connection racedrivers/usb/dwc2/hcd.c+1 -10 replies
15/109scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqedrivers/ufs/core/ufshcd.c+1 -00 replies
16/109usb: gadget: midi2: Fix interpretation of is_midi1 bitsdrivers/usb/gadget/function/f_midi2.c+5 -10 replies
17/109usb: ehci-hcd: fix call balance of clocks handling routinesdrivers/usb/host/ehci-sh.c+7 -20 replies
18/109usb: typec: anx7411: fix fwnode_handle reference leakdrivers/usb/typec/anx7411.c+29 -180 replies
19/109usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe()drivers/usb/typec/anx7411.c+12 -70 replies
20/109usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointerdrivers/usb/gadget/function/u_serial.c+6 -30 replies
21/109usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only modedrivers/usb/dwc3/dwc3-xilinx.c+4 -10 replies
22/109drm/i915: Fix memory leak by correcting cache object name in error handlerdrivers/gpu/drm/i915/i915_scheduler.c+1 -10 replies
23/109drm/i915: Fix NULL pointer dereference in capture_enginedrivers/gpu/drm/i915/i915_gpu_error.c+15 -30 replies
24/109xfs: update btree keys correctly when _insrec splits an inode root blockfs/xfs/libxfs/xfs_btree.c+23 -60 replies
25/109xfs: dont drop errno values when we fail to ficlone the entire rangefs/xfs/xfs_file.c+8 -00 replies
26/109xfs: return from xfs_symlink_verify early on V4 filesystemsfs/xfs/libxfs/xfs_symlink_remote.c+3 -10 replies
27/109xfs: fix scrub tracepoints when inode-rooted btrees are involvedfs/xfs/scrub/trace.h+1 -10 replies
28/109xfs: only run precommits once per transaction objectfs/xfs/xfs_trans.c+4 -120 replies
29/109bpf: Check size for BTF-based ctx access of pointer memberskernel/bpf/btf.c tools/testing/selftests/bpf/progs/verifier_btf_ctx_access.c tools/testing/selftests/bpf/progs/verifier_d_path.c+10 -40 replies
30/109bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()include/linux/bpf.h kernel/trace/trace_uprobe.c+10 -90 replies
31/109bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_progkernel/trace/bpf_trace.c+4 -00 replies
32/109bpf, sockmap: Fix race between element replace and close()net/core/sock_map.c+2 -30 replies
33/109bpf, sockmap: Fix update element with samenet/core/sock_map.c+1 -00 replies
34/109rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long longtools/tracing/rtla/src/timerlat_hist.c+6 -60 replies
35/109wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-onenet/wireless/nl80211.c+1 -10 replies
36/109wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beaconnet/mac80211/cfg.c+1 -10 replies
37/109wifi: mac80211: clean up ret in sta_link_apply_parameters()net/mac80211/cfg.c+3 -20 replies
38/109wifi: mac80211: fix station NSS capability initialization ordernet/mac80211/cfg.c+2 -20 replies
39/109acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctldrivers/acpi/nfit/core.c+6 -10 replies
40/109amdgpu/uvd: get ring reference from rq schedulerdrivers/gpu/drm/amd/amdgpu/uvd_v7_0.c+1 -10 replies
41/109batman-adv: Do not send uninitialized TT changesnet/batman-adv/translation-table.c+7 -00 replies
42/109batman-adv: Remove uninitialized data in full table TT responsenet/batman-adv/translation-table.c+22 -150 replies
43/109batman-adv: Do not let TT changes list grows indefinitelynet/batman-adv/translation-table.c+11 -30 replies
44/109tipc: fix NULL deref in cleanup_bearer()net/tipc/udp_media.c+6 -10 replies
45/109net/mlx5: DR, prevent potential error pointer dereferencedrivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c+3 -10 replies
46/109wifi: cfg80211: sme: init n_channels before channels[] accessnet/wireless/sme.c+1 -00 replies
47/109selftests: mlxsw: sharedbuffer: Remove h1 ingress test casetools/testing/selftests/drivers/net/mlxsw/sharedbuffer.sh+0 -50 replies
48/109selftests: mlxsw: sharedbuffer: Remove duplicate test casestools/testing/selftests/drivers/net/mlxsw/sharedbuffer.sh+0 -100 replies
49/109selftests: mlxsw: sharedbuffer: Ensure no extra packets are countedtools/testing/selftests/drivers/net/mlxsw/sharedbuffer.sh+40 -00 replies
50/109ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()drivers/ptp/ptp_kvm_x86.c+3 -30 replies
51/109net: lapb: increase LAPB_HEADER_LENinclude/net/lapb.h+1 -10 replies
52/109net: defer final struct net free in netns dismantleinclude/net/net_namespace.h net/core/net_namespace.c+20 -10 replies
53/109net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()drivers/net/ethernet/mscc/ocelot_ptp.c+3 -10 replies
54/109net: mscc: ocelot: improve handling of TX timestamp for unknown skbdrivers/net/ethernet/mscc/ocelot_ptp.c+2 -20 replies
55/109net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safedrivers/net/ethernet/mscc/ocelot_ptp.c+6 -80 replies
56/109net: mscc: ocelot: be resilient to loss of PTP packets during transmissiondrivers/net/ethernet/mscc/ocelot_ptp.c include/linux/dsa/ocelot.h include/soc/mscc/ocelot.h+80 -570 replies
57/109net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()drivers/net/ethernet/mscc/ocelot_ptp.c+42 -170 replies
58/109spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()drivers/spi/spi-aspeed-smc.c+6 -40 replies
59/109net: sparx5: fix FDMA performance issuedrivers/net/ethernet/microchip/sparx5/sparx5_main.c+5 -60 replies
60/109net: sparx5: fix the maximum frame length registerdrivers/net/ethernet/microchip/sparx5/sparx5_port.c+1 -10 replies
61/109ACPI: resource: Fix memory resource type union accessdrivers/acpi/resource.c+3 -30 replies
62/109cxgb4: use port number to set mac addrdrivers/net/ethernet/chelsio/cxgb4/cxgb4.h drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c drivers/net/ethernet/chelsio/cxgb4/t4_hw.c+5 -40 replies
63/109qca_spi: Fix clock speed for multiple QCA7000drivers/net/ethernet/qualcomm/qca_spi.c drivers/net/ethernet/qualcomm/qca_spi.h+10 -150 replies
64/109qca_spi: Make driver probing reliabledrivers/net/ethernet/qualcomm/qca_spi.c+1 -10 replies
65/109ALSA: control: Avoid WARN() for symlink errorssound/core/control_led.c+10 -40 replies
66/109ASoC: amd: yc: Fix the wrong return valuesound/soc/amd/yc/acp6x-mach.c+9 -40 replies
67/109Documentation: PM: Clarify pm_runtime_resume_and_get() return valueDocumentation/power/runtime_pm.rst+3 -10 replies
68/109net: rswitch: Drop unused argument/return valuedrivers/net/ethernet/renesas/rswitch.c+3 -70 replies
69/109net: rswitch: Use unsigned int for desc related array indexdrivers/net/ethernet/renesas/rswitch.c drivers/net/ethernet/renesas/rswitch.h+56 -460 replies
70/109net: rswitch: Use build_skb() for RXdrivers/net/ethernet/renesas/rswitch.c drivers/net/ethernet/renesas/rswitch.h+59 -330 replies
71/109net: rswitch: Add unmap_addrs instead of dma address in each descdrivers/net/ethernet/renesas/rswitch.c drivers/net/ethernet/renesas/rswitch.h+12 -80 replies
72/109net: rswitch: Add a setting ext descriptor functiondrivers/net/ethernet/renesas/rswitch.c+47 -260 replies
73/109net: rswitch: Add jumbo frames handling for TXdrivers/net/ethernet/renesas/rswitch.c+46 -100 replies
74/109net: renesas: rswitch: fix race window between tx start and completedrivers/net/ethernet/renesas/rswitch.c+8 -80 replies
75/109net: renesas: rswitch: fix leaked pointer on error pathdrivers/net/ethernet/renesas/rswitch.c+1 -00 replies
76/109net: renesas: rswitch: avoid use-after-put for a device tree nodedrivers/net/ethernet/renesas/rswitch.c+2 -10 replies
77/109net: renesas: rswitch: handle stop vs interrupt racedrivers/net/ethernet/renesas/rswitch.c+18 -150 replies
78/109libperf: evlist: Fix --cpu argument on hybrid platformtools/lib/perf/evlist.c+16 -20 replies
79/109netfilter: IDLETIMER: Fix for possible ABBA deadlocknet/netfilter/xt_IDLETIMER.c+28 -240 replies
80/109netfilter: nf_tables: do not defer rule destruction via call_rcuinclude/net/netfilter/nf_tables.h net/netfilter/nf_tables_api.c+15 -210 replies
81/109net: dsa: felix: fix stuck CPU-injected packets with short taprio windowsdrivers/net/dsa/ocelot/felix_vsc9959.c+11 -60 replies
82/109net/sched: netem: account for backlog updates from child qdiscnet/sched/sch_netem.c+16 -60 replies
83/109bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALLdrivers/net/bonding/bond_main.c+1 -00 replies
84/109team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALLdrivers/net/team/team.c+2 -10 replies
85/109ACPICA: events/evxfregn: dont release the ContextMutex that was never acquireddrivers/acpi/acpica/evxfregn.c+0 -20 replies
86/109Bluetooth: ISO: Reassociate a socket with an active BISinclude/net/bluetooth/hci_core.h net/bluetooth/hci_conn.c net/bluetooth/iso.c+131 -40 replies
87/109Bluetooth: hci_event: Fix using rcu_read_(un)lock while iteratingnet/bluetooth/hci_event.c+11 -220 replies
88/109Bluetooth: iso: Fix recursive locking warningnet/bluetooth/iso.c+6 -20 replies
89/109Bluetooth: SCO: Add support for 16 bits transparent voice settinginclude/net/bluetooth/bluetooth.h net/bluetooth/sco.c+16 -140 replies
90/109Bluetooth: btmtk: avoid UAF in btmtk_process_coredumpdrivers/bluetooth/btmtk.c+12 -80 replies
91/109net: renesas: rswitch: fix initial MPIC register settingdrivers/net/ethernet/renesas/rswitch.c drivers/net/ethernet/renesas/rswitch.h+28 -130 replies
92/109net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundariesdrivers/net/dsa/microchip/ksz_common.c+18 -240 replies
93/109blk-iocost: Avoid using clamp() on inuse in __propagate_weights()block/blk-iocost.c+8 -10 replies
94/109kselftest/arm64: abi: fix SVCR detectiontools/testing/selftests/arm64/abi/syscall-abi-asm.S+15 -170 replies
95/109KVM: arm64: Disable MPAM visibility by default and ignore VMM writesarch/arm64/kvm/sys_regs.c+50 -20 replies
96/109bpf: sync_linked_regs() must preserve subreg_defkernel/bpf/verifier.c+4 -10 replies
97/109tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()kernel/trace/trace_kprobe.c+1 -10 replies
98/109selftests/bpf: Add netlink helper librarytools/testing/selftests/bpf/Makefile tools/testing/selftests/bpf/netlink_helpers.c tools/testing/selftests/bpf/netlink_helpers.h+418 -50 replies
99/109selftests/bpf: remove use of __xlated()tools/testing/selftests/bpf/progs/verifier_scalar_ids.c+0 -160 replies
100/109net: rswitch: Avoid use-after-free in rswitch_poll()drivers/net/ethernet/renesas/rswitch.c+2 -20 replies
101/109xen/netfront: fix crash when removing devicedrivers/net/xen-netfront.c+4 -10 replies
102/109x86: make get_cpu_vendor() accessible from Xen codearch/x86/include/asm/processor.h arch/x86/kernel/cpu/common.c+23 -150 replies
103/109objtool/x86: allow syscall instructiontools/objtool/check.c+6 -30 replies
104/109x86/static-call: provide a way to do very early static-call updatesarch/x86/include/asm/static_call.h arch/x86/include/asm/sync_core.h arch/x86/kernel/static_call.c +3 more+55 -150 replies
105/109x86/xen: dont do PV iret hypercall through hypercall pagearch/x86/xen/xen-asm.S+18 -90 replies
106/109x86/xen: add central hypercall functionsarch/x86/include/asm/xen/hypercall.h arch/x86/xen/enlighten.c arch/x86/xen/enlighten_hvm.c +4 more+190 -10 replies
107/109x86/xen: use new hypercall functions instead of hypercall pagearch/x86/include/asm/xen/hypercall.h+20 -130 replies
108/109x86/xen: remove hypercall pagearch/x86/include/asm/xen/hypercall.h arch/x86/kernel/callthunks.c arch/x86/xen/enlighten.c +3 more+1 -470 replies
109/109ALSA: usb-audio: Fix a DMA to stack memory bugsound/usb/quirks.c+27 -150 replies

Reviews trailers per patch

47 of 109 patches have a Reviewed-by or Acked-by.

PatchBean HuoPeter WangAvri AltmanAlan SternHeikki KrogerusPrashanth KPeter KorsgaardNirmoy DasAndi ShytiChristoph HellwigKuniyuki IwashimaEric DumazetJoe DamatoMatthieu Baerts (NGI0)Christian KönigAntonio QuartulliTariq ToukanIdo SchimmelJohn FastabendSimon HormanPaolo Abeni[email protected]Alison SchofieldDave JiangYoshihiro ShimodaIan RogersThomas FalconArnaldo Carvalho de MeloMichael WalleJamal Hadi SalimNikolay AleksandrovHangbin LiuMichal SwiatkowskiTejun HeoMark BrownGeert UytterhoevenDaniel BorkmannJan BeulichAndrew CooperMartin KaFai LauNiklas SöderlundGavin ShanShameer KolothumMarc ZyngierShuah KhanRon EconomosPeter SchneiderJon Hunter
SeriesT-b T-b T-b T-b T-b
1/109
2/109
3/109
4/109R-b R-b R-b
5/109R-b A-b
6/109
7/109
8/109
9/109
10/109
11/109
12/109
13/109
14/109
15/109R-b R-b R-b
16/109
17/109R-b
18/109R-b
19/109R-b
20/109A-b
21/109A-b
22/109R-b R-b
23/109R-b
24/109R-b
25/109R-b
26/109R-b
27/109R-b
28/109R-b
29/109
30/109
31/109
32/109R-b
33/109R-b
34/109
35/109
36/109
37/109
38/109
39/109T-b R-b R-b
40/109R-b
41/109
42/109
43/109A-b
44/109R-b
45/109R-b
46/109
47/109R-b
48/109R-b
49/109R-b
50/109
51/109R-b
52/109R-b A-b
53/109
54/109
55/109
56/109
57/109
58/109
59/109
60/109
61/109
62/109R-b
63/109
64/109
65/109
66/109
67/109
68/109R-b
69/109
70/109
71/109
72/109
73/109
74/109R-b
75/109R-b
76/109R-b
77/109R-b
78/109R-b T-b T-b
79/109
80/109
81/109R-b
82/109A-b
83/109R-b R-b
84/109R-b R-b
85/109
86/109
87/109
88/109
89/109
90/109
91/109R-b
92/109
93/109A-b
94/109R-b
95/109R-b T-b R-b A-b
96/109A-b
97/109
98/109A-b
99/109
100/109R-b R-b
101/109
102/109
103/109
104/109
105/109R-b
106/109
107/109
108/109R-b R-b
109/109

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 48 reviewers.

Read the v1 thread

Cover letter [PATCH 6.6 000/109] 6.6.67-rc1 review

This is the start of the stable review cycle for the 6.6.67 release. There are 109 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 19 Dec 2024 17:05:03 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.67-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.67-rc1

Dan Carpenter <[email protected]>
ALSA: usb-audio: Fix a DMA to stack memory bug

Juergen Gross <[email protected]>
x86/xen: remove hypercall page

Juergen Gross <[email protected]>
x86/xen: use new hypercall functions instead of hypercall page

Juergen Gross <[email protected]>
x86/xen: add central hypercall functions

Juergen Gross <[email protected]>
x86/xen: don't do PV iret hypercall through hypercall page

Juergen Gross <[email protected]>
x86/static-call: provide a way to do very early static-call updates

Juergen Gross <[email protected]>
objtool/x86: allow syscall instruction

Juergen Gross <[email protected]>
x86: make get_cpu_vendor() accessible from Xen code

Juergen Gross <[email protected]>
xen/netfront: fix crash when removing device

Radu Rendec <[email protected]>
net: rswitch: Avoid use-after-free in rswitch_poll()

Shung-Hsi Yu <[email protected]>
selftests/bpf: remove use of __xlated()

Daniel Borkmann <[email protected]>
selftests/bpf: Add netlink helper library

Nikolay Kuratov <[email protected]>
tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()

Eduard Zingerman <[email protected]>
bpf: sync_linked_regs() must preserve subreg_def

James Morse <[email protected]>
KVM: arm64: Disable MPAM visibility by default and ignore VMM writes

Weizhao Ouyang <[email protected]>
kselftest/arm64: abi: fix SVCR detection

Nathan Chancellor <[email protected]>
blk-iocost: Avoid using clamp() on inuse in __propagate_weights()

Jesse Van Gavere <[email protected]>
net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries

Nikita Yushchenko <[email protected]>
net: renesas: rswitch: fix initial MPIC register setting

Thadeu Lima de Souza Cascardo <[email protected]>
Bluetooth: btmtk: avoid UAF in btmtk_process_coredump

Frédéric Danis <[email protected]>
Bluetooth: SCO: Add support for 16 bits transparent voice setting

Iulia Tanasescu <[email protected]>
Bluetooth: iso: Fix recursive locking warning

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating

Iulia Tanasescu <[email protected]>
Bluetooth: ISO: Reassociate a socket with an active BIS

Daniil Tatianin <[email protected]>
ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired

Daniel Borkmann <[email protected]>
team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL

Daniel Borkmann <[email protected]>
bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL

Martin Ottens <[email protected]>
net/sched: netem: account for backlog updates from child qdisc

Vladimir Oltean <[email protected]>
net: dsa: felix: fix stuck CPU-injected packets with short taprio windows

Florian Westphal <[email protected]>
netfilter: nf_tables: do not defer rule destruction via call_rcu

Phil Sutter <[email protected]>
netfilter: IDLETIMER: Fix for possible ABBA deadlock

James Clark <[email protected]>
libperf: evlist: Fix --cpu argument on hybrid platform

Nikita Yushchenko <[email protected]>
net: renesas: rswitch: handle stop vs interrupt race

Nikita Yushchenko <[email protected]>
net: renesas: rswitch: avoid use-after-put for a device tree node

Nikita Yushchenko <[email protected]>
net: renesas: rswitch: fix leaked pointer on error path

Nikita Yushchenko <[email protected]>
net: renesas: rswitch: fix race window between tx start and complete

Yoshihiro Shimoda <[email protected]>
net: rswitch: Add jumbo frames handling for TX

Yoshihiro Shimoda <[email protected]>
net: rswitch: Add a setting ext descriptor function

Yoshihiro Shimoda <[email protected]>
net: rswitch: Add unmap_addrs instead of dma address in each desc

Yoshihiro Shimoda <[email protected]>
net: rswitch: Use build_skb() for RX

Yoshihiro Shimoda <[email protected]>
net: rswitch: Use unsigned int for desc related array index

Yoshihiro Shimoda <[email protected]>
net: rswitch: Drop unused argument/return value

Paul Barker <[email protected]>
Documentation: PM: Clarify pm_runtime_resume_and_get() return value

Venkata Prasad Potturu <[email protected]>
ASoC: amd: yc: Fix the wrong return value

Takashi Iwai <[email protected]>
ALSA: control: Avoid WARN() for symlink errors

Stefan Wahren <[email protected]>
qca_spi: Make driver probing reliable

Stefan Wahren <[email protected]>
qca_spi: Fix clock speed for multiple QCA7000

Anumula Murali Mohan Reddy <[email protected]>
cxgb4: use port number to set mac addr

Ilpo Järvinen <[email protected]>
ACPI: resource: Fix memory resource type union access

Daniel Machon <[email protected]>
net: sparx5: fix the maximum frame length register

Daniel Machon <[email protected]>
net: sparx5: fix FDMA performance issue

Christophe JAILLET <[email protected]>
spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()

Vladimir Oltean <[email protected]>
net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()

Vladimir Oltean <[email protected]>
net: mscc: ocelot: be resilient to loss of PTP packets during transmission

Vladimir Oltean <[email protected]>

    net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe

Vladimir Oltean <[email protected]>
net: mscc: ocelot: improve handling of TX timestamp for unknown skb

Vladimir Oltean <[email protected]>
net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()

Eric Dumazet <[email protected]>
net: defer final 'struct net' free in netns dismantle

Eric Dumazet <[email protected]>
net: lapb: increase LAPB_HEADER_LEN

Thomas Weißschuh <[email protected]>
ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()

Danielle Ratson <[email protected]>
selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted

Danielle Ratson <[email protected]>
selftests: mlxsw: sharedbuffer: Remove duplicate test cases

Danielle Ratson <[email protected]>
selftests: mlxsw: sharedbuffer: Remove h1 ingress test case

Haoyu Li <[email protected]>

    wifi: cfg80211: sme: init n_channels before channels[] access

Dan Carpenter <[email protected]>
net/mlx5: DR, prevent potential error pointer dereference

Eric Dumazet <[email protected]>
tipc: fix NULL deref in cleanup_bearer()

Remi Pommarel <[email protected]>
batman-adv: Do not let TT changes list grows indefinitely

Remi Pommarel <[email protected]>
batman-adv: Remove uninitialized data in full table TT response

Remi Pommarel <[email protected]>
batman-adv: Do not send uninitialized TT changes

David (Ming Qiang) Wu <[email protected]>
amdgpu/uvd: get ring reference from rq scheduler

Suraj Sonawane <[email protected]>
acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl

Benjamin Lin <[email protected]>
wifi: mac80211: fix station NSS capability initialization order

Johannes Berg <[email protected]>
wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()

Haoyu Li <[email protected]>
wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon

Lin Ma <[email protected]>

    wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one

Tomas Glozar <[email protected]>

    rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long

Michal Luczaj <[email protected]>
bpf, sockmap: Fix update element with same

Michal Luczaj <[email protected]>
bpf, sockmap: Fix race between element replace and close()

Jiri Olsa <[email protected]>
bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog

Jann Horn <[email protected]>
bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Check size for BTF-based ctx access of pointer members

Darrick J. Wong <[email protected]>
xfs: only run precommits once per transaction object

Darrick J. Wong <[email protected]>
xfs: fix scrub tracepoints when inode-rooted btrees are involved

Darrick J. Wong <[email protected]>
xfs: return from xfs_symlink_verify early on V4 filesystems

Darrick J. Wong <[email protected]>
xfs: don't drop errno values when we fail to ficlone the entire range

Darrick J. Wong <[email protected]>
xfs: update btree keys correctly when _insrec splits an inode root block

Eugene Kobyak <[email protected]>
drm/i915: Fix NULL pointer dereference in capture_engine

Jiasheng Jiang <[email protected]>
drm/i915: Fix memory leak by correcting cache object name in error handler

Neal Frager <[email protected]>
usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode

Lianqin Hu <[email protected]>
usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer

Joe Hattori <[email protected]>
usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe()

Joe Hattori <[email protected]>
usb: typec: anx7411: fix fwnode_handle reference leak

Vitalii Mordan <[email protected]>
usb: ehci-hcd: fix call balance of clocks handling routines

Takashi Iwai <[email protected]>
usb: gadget: midi2: Fix interpretation of is_midi1 bits

liuderong <[email protected]>
scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe

Stefan Wahren <[email protected]>
usb: dwc2: Fix HCD port connection race

Stefan Wahren <[email protected]>
usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature

Stefan Wahren <[email protected]>
usb: dwc2: Fix HCD resume

Joe Hattori <[email protected]>
ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()

Mark Tomlinson <[email protected]>
usb: host: max3421-hcd: Correctly abort a USB request.

Alexandre Ghiti <[email protected]>
riscv: Fix IPIs usage in kfence_protect_page()

Jaakko Salo <[email protected]>
ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5

Tejun Heo <[email protected]>
blk-cgroup: Fix UAF in blkcg_unpin_online()

Alexandre Ghiti <[email protected]>
riscv: Fix wrong usage of __pa() on a fixmap address

MoYuanhao <[email protected]>
tcp: check space before adding MPTCP SYN options

Frederik Deweerdt <[email protected]>
splice: do not checksum AF_UNIX sockets

Namjae Jeon <[email protected]>
ksmbd: fix racy issue from session lookup and expire

Kan Liang <[email protected]>
perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG

Jann Horn <[email protected]>
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors

-------------

Diffstat:

 Documentation/power/runtime_pm.rst                 |   4 +-
 Makefile                                           |   4 +-
 arch/arm64/kvm/sys_regs.c                          |  52 ++-
 arch/riscv/include/asm/kfence.h                    |   4 +-
 arch/riscv/kernel/setup.c                          |   2 +-
 arch/x86/events/intel/ds.c                         |   2 +-
 arch/x86/include/asm/processor.h                   |   2 +
 arch/x86/include/asm/static_call.h                 |  15 +
 arch/x86/include/asm/sync_core.h                   |   6 +-
 arch/x86/include/asm/xen/hypercall.h               |  36 +-
 arch/x86/kernel/callthunks.c                       |   5 -
 arch/x86/kernel/cpu/common.c                       |  38 +-
 arch/x86/kernel/static_call.c                      |   9 +
 arch/x86/xen/enlighten.c                           |  65 +++-
 arch/x86/xen/enlighten_hvm.c                       |  13 +-
 arch/x86/xen/enlighten_pv.c                        |   4 +-
 arch/x86/xen/enlighten_pvh.c                       |   7 -
 arch/x86/xen/xen-asm.S                             |  50 ++-
 arch/x86/xen/xen-head.S                            | 106 ++++--
 arch/x86/xen/xen-ops.h                             |   9 +
 block/blk-cgroup.c                                 |   6 +-
 block/blk-iocost.c                                 |   9 +-
 drivers/acpi/acpica/evxfregn.c                     |   2 -
 drivers/acpi/nfit/core.c                           |   7 +-
 drivers/acpi/resource.c                            |   6 +-
 drivers/ata/sata_highbank.c                        |   1 +
 drivers/bluetooth/btmtk.c                          |  20 +-
 drivers/gpu/drm/amd/amdgpu/uvd_v7_0.c              |   2 +-
 drivers/gpu/drm/i915/i915_gpu_error.c              |  18 +-
 drivers/gpu/drm/i915/i915_scheduler.c              |   2 +-
 drivers/net/bonding/bond_main.c                    |   1 +
 drivers/net/dsa/microchip/ksz_common.c             |  42 +--
 drivers/net/dsa/ocelot/felix_vsc9959.c             |  17 +-
 drivers/net/ethernet/chelsio/cxgb4/cxgb4.h         |   2 +-
 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c    |   2 +-
 drivers/net/ethernet/chelsio/cxgb4/t4_hw.c         |   5 +-
 .../mellanox/mlx5/core/steering/dr_domain.c        |   4 +-
 .../net/ethernet/microchip/sparx5/sparx5_main.c    |  11 +-
 .../net/ethernet/microchip/sparx5/sparx5_port.c    |   2 +-
 drivers/net/ethernet/mscc/ocelot_ptp.c             | 207 ++++++-----
 drivers/net/ethernet/qualcomm/qca_spi.c            |  26 +-
 drivers/net/ethernet/qualcomm/qca_spi.h            |   1 -
 drivers/net/ethernet/renesas/rswitch.c             | 385 +++++++++++++--------
 drivers/net/ethernet/renesas/rswitch.h             |  48 ++-
 drivers/net/team/team.c                            |   3 +-
 drivers/net/xen-netfront.c                         |   5 +-
 drivers/ptp/ptp_kvm_x86.c                          |   6 +-
 drivers/spi/spi-aspeed-smc.c                       |  10 +-
 drivers/ufs/core/ufshcd.c                          |   1 +
 drivers/usb/dwc2/hcd.c                             |  19 +-
 drivers/usb/dwc3/dwc3-xilinx.c                     |   5 +-
 drivers/usb/gadget/function/f_midi2.c              |   6 +-
 drivers/usb/gadget/function/u_serial.c             |   9 +-
 drivers/usb/host/ehci-sh.c                         |   9 +-
 drivers/usb/host/max3421-hcd.c                     |  16 +-
 drivers/usb/typec/anx7411.c                        |  66 ++--
 fs/smb/server/auth.c                               |   2 +
 fs/smb/server/mgmt/user_session.c                  |   6 +-
 fs/smb/server/server.c                             |   4 +-
 fs/smb/server/smb2pdu.c                            |  27 +-
 fs/xfs/libxfs/xfs_btree.c                          |  29 +-
 fs/xfs/libxfs/xfs_symlink_remote.c                 |   4 +-
 fs/xfs/scrub/trace.h                               |   2 +-
 fs/xfs/xfs_file.c                                  |   8 +
 fs/xfs/xfs_trans.c                                 |  16 +-
 include/linux/bpf.h                                |  13 +-
 include/linux/compiler.h                           |  39 ++-
 include/linux/dsa/ocelot.h                         |   1 +
 include/linux/static_call.h                        |   1 +
 include/net/bluetooth/bluetooth.h                  |   1 +
 include/net/bluetooth/hci_core.h                   |  24 ++
 include/net/lapb.h                                 |   2 +-
 include/net/net_namespace.h                        |   1 +
 include/net/netfilter/nf_tables.h                  |   4 -
 include/soc/mscc/ocelot.h                          |   2 -
 kernel/bpf/btf.c                                   |   6 +
 kernel/bpf/verifier.c                              |   5 +-
 kernel/static_call_inline.c                        |   2 +-
 kernel/trace/bpf_trace.c                           |  11 +
 kernel/trace/trace_kprobe.c                        |   2 +-
 kernel/trace/trace_uprobe.c                        |   6 +-
 net/batman-adv/translation-table.c                 |  58 +++-
 net/bluetooth/hci_conn.c                           |  32 +-
 net/bluetooth/hci_event.c                          |  33 +-
 net/bluetooth/iso.c                                |  87 ++++-
 net/bluetooth/sco.c                                |  29 +-
 net/core/net_namespace.c                           |  20 +-
 net/core/sock_map.c                                |   6 +-
 net/ipv4/tcp_output.c                              |   6 +-
 net/mac80211/cfg.c                                 |  11 +-
 net/netfilter/nf_tables_api.c                      |  32 +-
 net/netfilter/xt_IDLETIMER.c                       |  52 +--
 net/sched/sch_netem.c                              |  22 +-
 net/tipc/udp_media.c                               |   7 +-
 net/unix/af_unix.c                                 |   1 +
 net/wireless/nl80211.c                             |   2 +-
 net/wireless/sme.c                                 |   1 +
 sound/core/control_led.c                           |  14 +-
 sound/soc/amd/yc/acp6x-mach.c                      |  13 +-
 sound/usb/quirks.c                                 |  44 ++-
 tools/lib/perf/evlist.c                            |  18 +-
 tools/objtool/check.c                              |   9 +-
 .../testing/selftests/arm64/abi/syscall-abi-asm.S  |  32 +-
 tools/testing/selftests/bpf/Makefile               |  19 +-
 tools/testing/selftests/bpf/netlink_helpers.c      | 358 +++++++++++++++++++
 tools/testing/selftests/bpf/netlink_helpers.h      |  46 +++
 .../selftests/bpf/progs/verifier_btf_ctx_access.c  |   4 +-
 .../testing/selftests/bpf/progs/verifier_d_path.c  |   4 +-
 .../selftests/bpf/progs/verifier_scalar_ids.c      |  16 -
 .../selftests/drivers/net/mlxsw/sharedbuffer.sh    |  55 ++-
 tools/tracing/rtla/src/timerlat_hist.c             |  12 +-
 111 files changed, 1927 insertions(+), 748 deletions(-)

Read the cover letter in its thread