Skip to content

6.1.146-rc1 review

Greg Kroah-Hartman linux-cifs linux-patches linux-usb lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest88 patches 4 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/88drm/exynos: exynos7_drm_decon: add vblank check in IRQ handlingdrivers/gpu/drm/exynos/exynos7_drm_decon.c+4 -00 replies
2/88platform/x86: ideapad-laptop: use usleep_range() for EC pollingdrivers/platform/x86/ideapad-laptop.c+17 -20 replies
3/88ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio modesound/soc/fsl/fsl_asrc.c+2 -10 replies
4/88perf: Revert to requiring CAP_SYS_ADMIN for uprobeskernel/events/core.c+1 -10 replies
5/88Bluetooth: hci_sync: Fix not disabling advertising instancenet/bluetooth/hci_sync.c+1 -10 replies
6/88fix proc_sys_compare() handling of in-lookup dentriesfs/proc/inode.c fs/proc/proc_sysctl.c+12 -80 replies
7/88netlink: Fix wraparounds of sk->sk_rmem_alloc.net/netlink/af_netlink.c+49 -320 replies
8/88tipc: Fix use-after-free in tipc_conn_close().net/tipc/topsrv.c+2 -00 replies
9/88vsock: Fix transport_{g2h,h2g} TOCTOUnet/vmw_vsock/af_vsock.c+21 -60 replies
10/88vsock: Fix transport_* TOCTOUnet/vmw_vsock/af_vsock.c+23 -50 replies
11/88vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`net/vmw_vsock/af_vsock.c+2 -00 replies
12/88net: phy: smsc: Fix Auto-MDIX configuration when disabled by strapdrivers/net/phy/smsc.c+2 -10 replies
13/88net: phy: smsc: Fix link failure in forced mode with Auto-MDIXdrivers/net/phy/smsc.c+22 -30 replies
14/88atm: clip: Fix potential null-ptr-deref in to_atmarpd().net/atm/clip.c+29 -150 replies
15/88atm: clip: Fix memory leak of struct clip_vcc.net/atm/clip.c+8 -00 replies
16/88atm: clip: Fix infinite recursive call of clip_push().net/atm/clip.c+2 -00 replies
17/88atm: clip: Fix NULL pointer dereference in vcc_sendmsg()net/atm/clip.c+9 -10 replies
18/88net/sched: Abort __tc_modify_qdisc if parent class does not existnet/sched/sch_api.c+16 -70 replies
19/88maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()lib/maple_tree.c+4 -20 replies
20/88rxrpc: Fix oops due to non-existence of prealloc backlog structnet/rxrpc/call_accept.c+3 -00 replies
21/88x86/boot: Compile boot code with -std=gnu11 tooarch/x86/Makefile+1 -10 replies
22/88ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()drivers/char/ipmi/ipmi_msghandler.c+2 -10 replies
23/88x86/mce/amd: Fix threshold limit resetarch/x86/kernel/cpu/mce/amd.c+7 -80 replies
24/88x86/mce: Dont remove sysfs if thresholding sysfs init failsarch/x86/kernel/cpu/mce/core.c+1 -70 replies
25/88x86/mce: Make sure CMCI banks are cleared during shutdown on Intelarch/x86/kernel/cpu/mce/intel.c+1 -00 replies
26/88KVM: x86/xen: Allow out of range event channel ports in IRQ routing table.arch/x86/kvm/xen.c+13 -20 replies
27/88KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flightarch/x86/kvm/svm/sev.c+4 -00 replies
28/88gre: Fix IPv6 multicast route creation.net/ipv6/addrconf.c+2 -70 replies
29/88md/md-bitmap: fix GPF in bitmap_get_stats()drivers/md/md-bitmap.c+1 -20 replies
30/88pinctrl: qcom: msm: mark certain pins as invalid for interruptsdrivers/pinctrl/qcom/pinctrl-msm.c+20 -00 replies
31/88wifi: prevent A-MSDU attacks in mesh networksnet/wireless/util.c+50 -20 replies
32/88drm/sched: Increment job count before swapping tail spsc queueinclude/drm/spsc_queue.h+3 -10 replies
33/88drm/ttm: fix error handling in ttm_buffer_object_transferdrivers/gpu/drm/ttm/ttm_bo_util.c+7 -60 replies
34/88drm/gem: Fix race in drm_gem_handle_create_tail()drivers/gpu/drm/drm_gem.c include/drm/drm_file.h+12 -10 replies
35/88usb: gadget: u_serial: Fix race condition in TTY wakeupdrivers/usb/gadget/function/u_serial.c+3 -30 replies
36/88Revert "ACPI: battery: negate current when discharging"drivers/acpi/battery.c+3 -160 replies
37/88kallsyms: fix build without execinfotools/include/linux/kallsyms.h+4 -00 replies
38/88maple_tree: fix mt_destroy_walk() on root leaf nodelib/maple_tree.c+1 -00 replies
39/88pwm: mediatek: Ensure to disable clocks in error pathdrivers/pwm/pwm-mediatek.c+8 -50 replies
40/88smb: server: make use of rdma_destroy_qp()fs/smb/server/transport_rdma.c+3 -20 replies
41/88ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()fs/smb/server/vfs.c+1 -00 replies
42/88netlink: Fix rmem check in netlink_broadcast_deliver().net/netlink/af_netlink.c+1 -10 replies
43/88netlink: make sure we allow at least one dump skbnet/netlink/af_netlink.c+3 -20 replies
44/88fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypassfs/anon_inodes.c include/linux/fs.h mm/secretmem.c+21 -150 replies
45/88btrfs: propagate last_unlink_trans earlier when doing a rmdirfs/btrfs/inode.c+17 -110 replies
46/88xhci: Allow RPM on the USB controller (1022:43f7) by defaultdrivers/usb/host/xhci-pci.c+4 -10 replies
47/88usb: xhci: quirk for data loss in ISOC transfersdrivers/usb/host/xhci-mem.c drivers/usb/host/xhci-pci.c drivers/usb/host/xhci.h+30 -00 replies
48/88Input: xpad - support Acer NGR 200 Controllerdrivers/input/joystick/xpad.c+2 -00 replies
49/88usb:cdnsp: remove TRB_FLUSH_ENDPOINT commanddrivers/usb/cdns3/cdnsp-debug.h drivers/usb/cdns3/cdnsp-gadget.c drivers/usb/cdns3/cdnsp-gadget.h +1 more+1 -370 replies
50/88usb: cdnsp: Replace snprintf() with the safer scnprintf() variantdrivers/usb/cdns3/cdnsp-debug.h+177 -1770 replies
51/88usb: cdnsp: Fix issue with CV Bad Descriptor testdrivers/usb/cdns3/cdnsp-debug.h drivers/usb/cdns3/cdnsp-ep0.c drivers/usb/cdns3/cdnsp-gadget.h +1 more+26 -60 replies
52/88usb: dwc3: Abort suspend on soft disconnect failuredrivers/usb/dwc3/core.c drivers/usb/dwc3/gadget.c+16 -150 replies
53/88platform/x86: think-lmi: Fix sysfs group cleanupdrivers/powercap/intel_rapl_common.c+20 -22 replies
54/88wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()drivers/net/wireless/zydas/zd1211rw/zd_mac.c+5 -10 replies
55/88drm/tegra: nvdec: Fix dma_alloc_coherent error checkdrivers/gpu/drm/tegra/nvdec.c+2 -40 replies
56/88md/raid1: Fix stack memory use after return in raid1_reshapedrivers/md/raid1.c+1 -00 replies
57/88raid10: cleanup memleak at raid10_make_requestdrivers/md/raid10.c+8 -20 replies
58/88nbd: fix uaf in nbd_genl_connect() error pathdrivers/block/nbd.c+3 -30 replies
59/88erofs: remove the member readahead from struct z_erofs_decompress_frontendfs/erofs/zdata.c+8 -100 replies
60/88erofs: clean up z_erofs_pcluster_readmore()fs/erofs/zdata.c+12 -150 replies
61/88erofs: allocate extra bvec pages directly instead of retryingfs/erofs/zdata.c+12 -200 replies
62/88erofs: avoid on-stack pagepool directly passed by argumentsfs/erofs/zdata.c+30 -340 replies
63/88erofs: adapt folios for z_erofs_read_folio()fs/erofs/zdata.c include/trace/events/erofs.h+12 -130 replies
64/88erofs: fix to add missing tracepoint in erofs_read_folio()fs/erofs/data.c+2 -00 replies
65/88netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()include/net/netfilter/nf_flow_table.h+1 -10 replies
66/88net: appletalk: Fix device refcount leak in atrtr_create()net/appletalk/ddp.c+1 -00 replies
67/88ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeofdrivers/net/ethernet/ibm/ibmvnic.h+6 -20 replies
68/88net: phy: microchip: limit 100M workaround to link-down events on LAN88xxdrivers/net/phy/microchip.c+1 -10 replies
69/88can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug leveldrivers/net/can/m_can/m_can.c+1 -10 replies
70/88net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()drivers/net/ethernet/xilinx/ll_temac_main.c+1 -10 replies
71/88bnxt_en: Fix DCB ETS validationdrivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c+2 -00 replies
72/88bnxt_en: Set DMA unmap len correctly for XDP_REDIRECTdrivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c+1 -10 replies
73/88atm: idt77252: Add missing `dma_map_error()`drivers/atm/idt77252.c+5 -00 replies
74/88um: vector: Reduce stack usage in vector_eth_configure()arch/um/drivers/vector_kern.c+13 -290 replies
75/88ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal micsound/soc/amd/yc/acp6x-mach.c+7 -00 replies
76/88ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100sound/pci/hda/patch_realtek.c+1 -00 replies
77/88net: usb: qmi_wwan: add SIMCom 8230C compositiondrivers/net/usb/qmi_wwan.c+1 -00 replies
78/88HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2drivers/hid/hid-ids.h drivers/hid/hid-lenovo.c drivers/hid/hid-multitouch.c+16 -10 replies
79/88btrfs: fix assertion when building free space treefs/btrfs/free-space-tree.c+12 -40 replies
80/88vt: add missing notification when switching back to text modedrivers/tty/vt/vt.c+1 -00 replies
81/88HID: Add IGNORE quirk for SMARTLINKTECHNOLOGYdrivers/hid/hid-ids.h drivers/hid/hid-quirks.c+4 -00 replies
82/88HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Camerasdrivers/hid/hid-ids.h drivers/hid/hid-quirks.c+4 -00 replies
83/88Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETIDdrivers/input/keyboard/atkbd.c+2 -10 replies
84/88vhost-scsi: protect vq->log_used with vq->mutexdrivers/vhost/scsi.c+6 -10 replies
85/88x86/mm: Disable hugetlb page table sharing on 32-bitarch/x86/Kconfig+1 -10 replies
86/88x86: Fix X86_FEATURE_VERW_CLEAR definitionarch/x86/include/asm/cpufeatures.h+1 -10 replies
87/88kasan: remove kasan_find_vm_area() to prevent possible deadlockmm/kasan/report.c+2 -110 replies
88/88ksmbd: fix potential use-after-free in oplock/lease break ackfs/smb/server/smb2pdu.c+9 -200 replies

Reviews trailers per patch

56 of 88 patches have a Reviewed-by or Acked-by.

PatchFelix YanEric LongJianfei ZhangMingcong BaiMinh LeSicheng ZhuIlpo JärvinenAndrew LunnSimon HormanKuniyuki IwashimaJamal Hadi SalimCong WangH. Peter Anvin (Intel)Qiuxu ZhuoTony LuckPaul DurrantAlexander PotapenkoLiam MerwickJames HoughtonGary GuoIdo SchimmelBjorn AnderssonJonathan CavittChristian BraunerNeilBrownMatthew BrostJacek LawrynowiczThomas ZimmermannPrashanth KTung NguyenStefano GarzarellaMaxime ChevallierDaniel BalutaOleksandr NatalenkoMathias NymanPeter ChenThinh NguyenMark PearsonDev JainYu KuaiGao XiangYue HuChao YuPablo Neira AyusoDave MarquardtHaren MyneniVincent MailholTom TalpeyNamjae JeonMarek SzyprowskiMike Rapoport (Microsoft)Johannes ThumshirnSreekanth ReddyPaul MenzelJason WangMike ChristieOscar SalvadorDavid HildenbrandVitaly ChikunovBorislav Petkov (AMD)Andrey RyabininBjørn MorkQu WenruoDavid SterbaShuah Khan
SeriesT-b
1/88
2/88T-b T-b T-b T-b T-b T-b R-b
3/88R-b
4/88
5/88
6/88R-b R-b
7/88
8/88R-b
9/88R-b
10/88R-b
11/88R-b
12/88R-b
13/88R-b
14/88R-b
15/88R-b
16/88R-b
17/88R-b
18/88A-b R-b
19/88
20/88
21/88A-b
22/88
23/88
24/88R-b R-b T-b
25/88R-b R-b
26/88R-b
27/88T-b R-b T-b R-b
28/88R-b T-b R-b
29/88
30/88R-b
31/88
32/88R-b
33/88R-b
34/88T-b R-b
35/88R-b
36/88
37/88
38/88R-b
39/88
40/88R-b A-b
41/88A-b
42/88
43/88R-b T-b
44/88A-b
45/88R-b
46/88T-b A-b
47/88
48/88
49/88A-b
50/88
51/88A-b
52/88A-b
53/88R-b R-b
54/88
55/88
56/88R-b
57/88
58/88R-b
59/88R-b
60/88R-b
61/88R-b
62/88R-b
63/88R-b
64/88R-b
65/88R-b
66/88
67/88R-b R-b R-b
68/88R-b
69/88R-b
70/88
71/88R-b
72/88
73/88R-b
74/88
75/88
76/88
77/88A-b
78/88
79/88R-b R-b
80/88
81/88
82/88
83/88T-b
84/88A-b R-b
85/88A-b A-b T-b
86/88A-b
87/88R-b
88/88

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 65 reviewers.

Read the v1 thread

Cover letter [PATCH 6.1 00/88] 6.1.146-rc1 review

This is the start of the stable review cycle for the 6.1.146 release. There are 88 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 17 Jul 2025 13:07:32 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.146-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.1.146-rc1

Namjae Jeon <[email protected]>
ksmbd: fix potential use-after-free in oplock/lease break ack

Yeoreum Yun <[email protected]>
kasan: remove kasan_find_vm_area() to prevent possible deadlock

Jack Wang <[email protected]>
x86: Fix X86_FEATURE_VERW_CLEAR definition

Jann Horn <[email protected]>
x86/mm: Disable hugetlb page table sharing on 32-bit

Dongli Zhang <[email protected]>

    vhost-scsi: protect vq->log_used with vq->mutex

Hans de Goede <[email protected]>
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID

Chia-Lin Kao (AceLan) <[email protected]>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

Zhang Heng <[email protected]>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY

Nicolas Pitre <[email protected]>
vt: add missing notification when switching back to text mode

Filipe Manana <[email protected]>
btrfs: fix assertion when building free space tree

Akira Inoue <[email protected]>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2

Xiaowei Li <[email protected]>
net: usb: qmi_wwan: add SIMCom 8230C composition

Yasmin Fitzgerald <[email protected]>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100

Yuzuru10 <[email protected]>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic

Tiwei Bie <[email protected]>
um: vector: Reduce stack usage in vector_eth_configure()

Thomas Fourier <[email protected]>

    atm: idt77252: Add missing `dma_map_error()`

Somnath Kotur <[email protected]>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT

Shravya KN <[email protected]>
bnxt_en: Fix DCB ETS validation

Alok Tiwari <[email protected]>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()

Sean Nyekjaer <[email protected]>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level

Oleksij Rempel <[email protected]>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx

Mingming Cao <[email protected]>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof

Kito Xu <[email protected]>
net: appletalk: Fix device refcount leak in atrtr_create()

Eric Dumazet <[email protected]>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()

Chao Yu <[email protected]>
erofs: fix to add missing tracepoint in erofs_read_folio()

Gao Xiang <[email protected]>
erofs: adapt folios for z_erofs_read_folio()

Gao Xiang <[email protected]>
erofs: avoid on-stack pagepool directly passed by arguments

Gao Xiang <[email protected]>
erofs: allocate extra bvec pages directly instead of retrying

Yue Hu <[email protected]>
erofs: clean up z_erofs_pcluster_readmore()

Yue Hu <[email protected]>
erofs: remove the member readahead from struct z_erofs_decompress_frontend

Zheng Qixing <[email protected]>
nbd: fix uaf in nbd_genl_connect() error path

Nigel Croxon <[email protected]>
raid10: cleanup memleak at raid10_make_request

Wang Jinchao <[email protected]>
md/raid1: Fix stack memory use after return in raid1_reshape

Mikko Perttunen <[email protected]>
drm/tegra: nvdec: Fix dma_alloc_coherent error check

Daniil Dulov <[email protected]>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()

Zhang Rui <[email protected]>
platform/x86: think-lmi: Fix sysfs group cleanup

Kuen-Han Tsai <[email protected]>
usb: dwc3: Abort suspend on soft disconnect failure

Pawel Laszczak <[email protected]>
usb: cdnsp: Fix issue with CV Bad Descriptor test

Lee Jones <[email protected]>
usb: cdnsp: Replace snprintf() with the safer scnprintf() variant

Pawel Laszczak <[email protected]>
usb:cdnsp: remove TRB_FLUSH_ENDPOINT command

Nilton Perim Neto <[email protected]>
Input: xpad - support Acer NGR 200 Controller

Raju Rangoju <[email protected]>
usb: xhci: quirk for data loss in ISOC transfers

Basavaraj Natikar <[email protected]>
xhci: Allow RPM on the USB controller (1022:43f7) by default

Filipe Manana <[email protected]>
btrfs: propagate last_unlink_trans earlier when doing a rmdir

Shivank Garg <[email protected]>
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass

Jakub Kicinski <[email protected]>
netlink: make sure we allow at least one dump skb

Kuniyuki Iwashima <[email protected]>
netlink: Fix rmem check in netlink_broadcast_deliver().

Al Viro <[email protected]>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()

Stefan Metzmacher <[email protected]>
smb: server: make use of rdma_destroy_qp()

Uwe Kleine-König <[email protected]>
pwm: mediatek: Ensure to disable clocks in error path

Wei Yang <[email protected]>
maple_tree: fix mt_destroy_walk() on root leaf node

Achill Gilgenast <[email protected]>
kallsyms: fix build without execinfo

Rafael J. Wysocki <[email protected]>
Revert "ACPI: battery: negate current when discharging"

Kuen-Han Tsai <[email protected]>
usb: gadget: u_serial: Fix race condition in TTY wakeup

Simona Vetter <[email protected]>
drm/gem: Fix race in drm_gem_handle_create_tail()

Christian König <[email protected]>
drm/ttm: fix error handling in ttm_buffer_object_transfer

Matthew Brost <[email protected]>
drm/sched: Increment job count before swapping tail spsc queue

Mathy Vanhoef <[email protected]>
wifi: prevent A-MSDU attacks in mesh networks

Bartosz Golaszewski <[email protected]>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts

Håkon Bugge <[email protected]>
md/md-bitmap: fix GPF in bitmap_get_stats()

Guillaume Nault <[email protected]>
gre: Fix IPv6 multicast route creation.

Sean Christopherson <[email protected]>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight

David Woodhouse <[email protected]>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.

JP Kobryn <[email protected]>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel

Yazen Ghannam <[email protected]>
x86/mce: Don't remove sysfs if thresholding sysfs init fails

Yazen Ghannam <[email protected]>
x86/mce/amd: Fix threshold limit reset

Dan Carpenter <[email protected]>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()

Alexey Dobriyan <[email protected]>
x86/boot: Compile boot code with -std=gnu11 too

David Howells <[email protected]>
rxrpc: Fix oops due to non-existence of prealloc backlog struct

Liam R. Howlett <[email protected]>
maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()

Victor Nogueira <[email protected]>
net/sched: Abort __tc_modify_qdisc if parent class does not exist

Yue Haibing <[email protected]>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix infinite recursive call of clip_push().

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix memory leak of struct clip_vcc.

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().

Oleksij Rempel <[email protected]>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX

Oleksij Rempel <[email protected]>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap

Michal Luczaj <[email protected]>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also transport_local

Michal Luczaj <[email protected]>
vsock: Fix transport_* TOCTOU

Michal Luczaj <[email protected]>
vsock: Fix transport_{g2h,h2g} TOCTOU

Kuniyuki Iwashima <[email protected]>
tipc: Fix use-after-free in tipc_conn_close().

Kuniyuki Iwashima <[email protected]>

    netlink: Fix wraparounds of sk->sk_rmem_alloc.

Al Viro <[email protected]>
fix proc_sys_compare() handling of in-lookup dentries

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix not disabling advertising instance

Peter Zijlstra <[email protected]>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes

Shengjiu Wang <[email protected]>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode

Rong Zhang <[email protected]>
platform/x86: ideapad-laptop: use usleep_range() for EC polling

Kaustabh Chakraborty <[email protected]>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling

-------------

Diffstat:

 Makefile                                      |   4 +-
 arch/um/drivers/vector_kern.c                 |  42 +--
 arch/x86/Kconfig                              |   2 +-
 arch/x86/Makefile                             |   2 +-
 arch/x86/include/asm/cpufeatures.h            |   2 +-
 arch/x86/kernel/cpu/mce/amd.c                 |  15 +-
 arch/x86/kernel/cpu/mce/core.c                |   8 +-
 arch/x86/kernel/cpu/mce/intel.c               |   1 +
 arch/x86/kvm/svm/sev.c                        |   4 +
 arch/x86/kvm/xen.c                            |  15 +-
 drivers/acpi/battery.c                        |  19 +-
 drivers/atm/idt77252.c                        |   5 +
 drivers/block/nbd.c                           |   6 +-
 drivers/char/ipmi/ipmi_msghandler.c           |   3 +-
 drivers/gpu/drm/drm_gem.c                     |  10 +-
 drivers/gpu/drm/exynos/exynos7_drm_decon.c    |   4 +
 drivers/gpu/drm/tegra/nvdec.c                 |   6 +-
 drivers/gpu/drm/ttm/ttm_bo_util.c             |  13 +-
 drivers/hid/hid-ids.h                         |   6 +
 drivers/hid/hid-lenovo.c                      |   8 +
 drivers/hid/hid-multitouch.c                  |   8 +-
 drivers/hid/hid-quirks.c                      |   3 +
 drivers/input/joystick/xpad.c                 |   2 +
 drivers/input/keyboard/atkbd.c                |   3 +-
 drivers/md/md-bitmap.c                        |   3 +-
 drivers/md/raid1.c                            |   1 +
 drivers/md/raid10.c                           |  10 +-
 drivers/net/can/m_can/m_can.c                 |   2 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c |   2 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c |   2 +-
 drivers/net/ethernet/ibm/ibmvnic.h            |   8 +-
 drivers/net/ethernet/xilinx/ll_temac_main.c   |   2 +-
 drivers/net/phy/microchip.c                   |   2 +-
 drivers/net/phy/smsc.c                        |  28 +-
 drivers/net/usb/qmi_wwan.c                    |   1 +
 drivers/net/wireless/zydas/zd1211rw/zd_mac.c  |   6 +-
 drivers/pinctrl/qcom/pinctrl-msm.c            |  20 ++
 drivers/platform/x86/ideapad-laptop.c         |  19 +-
 drivers/powercap/intel_rapl_common.c          |  22 +-
 drivers/pwm/pwm-mediatek.c                    |  13 +-
 drivers/tty/vt/vt.c                           |   1 +
 drivers/usb/cdns3/cdnsp-debug.h               | 358 +++++++++++++-------------
 drivers/usb/cdns3/cdnsp-ep0.c                 |  18 +-
 drivers/usb/cdns3/cdnsp-gadget.c              |   6 +-
 drivers/usb/cdns3/cdnsp-gadget.h              |  11 +-
 drivers/usb/cdns3/cdnsp-ring.c                |  27 +-
 drivers/usb/dwc3/core.c                       |   9 +-
 drivers/usb/dwc3/gadget.c                     |  22 +-
 drivers/usb/gadget/function/u_serial.c        |   6 +-
 drivers/usb/host/xhci-mem.c                   |   4 +
 drivers/usb/host/xhci-pci.c                   |  30 ++-
 drivers/usb/host/xhci.h                       |   1 +
 drivers/vhost/scsi.c                          |   7 +-
 fs/anon_inodes.c                              |  23 +-
 fs/btrfs/free-space-tree.c                    |  16 +-
 fs/btrfs/inode.c                              |  28 +-
 fs/erofs/data.c                               |   2 +
 fs/erofs/zdata.c                              | 124 ++++-----
 fs/proc/inode.c                               |   2 +-
 fs/proc/proc_sysctl.c                         |  18 +-
 fs/smb/server/smb2pdu.c                       |  29 +--
 fs/smb/server/transport_rdma.c                |   5 +-
 fs/smb/server/vfs.c                           |   1 +
 include/drm/drm_file.h                        |   3 +
 include/drm/spsc_queue.h                      |   4 +-
 include/linux/fs.h                            |   2 +
 include/net/netfilter/nf_flow_table.h         |   2 +-
 include/trace/events/erofs.h                  |  16 +-
 kernel/events/core.c                          |   2 +-
 lib/maple_tree.c                              |   7 +-
 mm/kasan/report.c                             |  13 +-
 mm/secretmem.c                                |  11 +-
 net/appletalk/ddp.c                           |   1 +
 net/atm/clip.c                                |  64 +++--
 net/bluetooth/hci_sync.c                      |   2 +-
 net/ipv6/addrconf.c                           |   9 +-
 net/netlink/af_netlink.c                      |  90 ++++---
 net/rxrpc/call_accept.c                       |   3 +
 net/sched/sch_api.c                           |  23 +-
 net/tipc/topsrv.c                             |   2 +
 net/vmw_vsock/af_vsock.c                      |  57 +++-
 net/wireless/util.c                           |  52 +++-
 sound/pci/hda/patch_realtek.c                 |   1 +
 sound/soc/amd/yc/acp6x-mach.c                 |   7 +
 sound/soc/fsl/fsl_asrc.c                      |   3 +-
 tools/include/linux/kallsyms.h                |   4 +
 86 files changed, 876 insertions(+), 582 deletions(-)