Skip to content

6.12.49-rc1 review

Greg Kroah-Hartman linux-cifs linux-patches linux-rtc linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest105 patches 13 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/105wifi: wilc1000: avoid buffer overflow in WID string configurationdrivers/net/wireless/microchip/wilc1000/wlan_cfg.c drivers/net/wireless/microchip/wilc1000/wlan_cfg.h+30 -120 replies
2/105nvme: fix PI insert on writedrivers/nvme/host/core.c+11 -70 replies
3/105ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supportedsound/firewire/motu/motu-hwdep.c+1 -10 replies
4/105wifi: mac80211: increase scan_ies_len for S1Gnet/mac80211/main.c+6 -10 replies
5/105wifi: mac80211: fix incorrect type for retnet/mac80211/driver-ops.h+1 -10 replies
6/105pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatchdrivers/pcmcia/omap_cf.c+7 -10 replies
7/105cgroup: split cgroup_destroy_wq into 3 workqueueskernel/cgroup/cgroup.c+36 -70 replies
8/105btrfs: fix invalid extref key setup when replaying dentryfs/btrfs/tree-log.c+1 -10 replies
9/105um: virtio_uml: Fix use-after-free after put_device in probearch/um/drivers/virtio_uml.c+4 -20 replies
10/105um: Fix FD copy size in os_rcv_fd_msg()arch/um/os-Linux/file.c+1 -10 replies
11/105dpaa2-switch: fix buffer pool seeding for control trafficdrivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c+1 -10 replies
12/105net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIRnet/ipv4/tcp_ao.c+3 -10 replies
13/105qed: Dont collect too many protection override GRC elementsdrivers/net/ethernet/qlogic/qed/qed_debug.c+4 -30 replies
14/105bonding: set random address only when slaves already existdrivers/net/bonding/bond_main.c+1 -00 replies
15/105mptcp: set remote_deny_join_id0 on SYN recvnet/mptcp/subflow.c+4 -00 replies
16/105selftests: mptcp: userspace pm: validate deny-join-id0 flagtools/testing/selftests/net/mptcp/pm_nl_ctl.c tools/testing/selftests/net/mptcp/userspace_pm.sh+18 -30 replies
17/105mptcp: tfo: record deny join id0 infonet/mptcp/options.c+3 -30 replies
18/105selftests: mptcp: sockopt: fix error messagestools/testing/selftests/net/mptcp/mptcp_sockopt.c+10 -60 replies
19/105net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failuredrivers/net/ethernet/natsemi/ns83820.c+6 -70 replies
20/105ice: store max_frame and rx_buf_len only in ice_rx_ringdrivers/net/ethernet/intel/ice/ice.h drivers/net/ethernet/intel/ice/ice_base.c drivers/net/ethernet/intel/ice/ice_txrx.h +1 more+23 -240 replies
21/105ice: fix Rx page leak on multi-buffer framesdrivers/net/ethernet/intel/ice/ice_txrx.c drivers/net/ethernet/intel/ice/ice_txrx.h+34 -470 replies
22/105i40e: remove redundant memory barrier when cleaning Tx descsdrivers/net/ethernet/intel/i40e/i40e_txrx.c+0 -30 replies
23/105igc: dont fail igc_probe() on LED setup errordrivers/net/ethernet/intel/igc/igc.h drivers/net/ethernet/intel/igc/igc_main.c+10 -30 replies
24/105net/mlx5e: Harden uplink netdev access against device unbinddrivers/net/ethernet/mellanox/mlx5/core/en_rep.c drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c drivers/net/ethernet/mellanox/mlx5/core/lib/mlx5.h +1 more+38 -60 replies
25/105bonding: dont set oif to bond dev when getting NS target destinationdrivers/net/bonding/bond_main.c+0 -10 replies
26/105octeon_ep: fix VF MAC address lifecycle handlingdrivers/net/ethernet/marvell/octeon_ep/octep_pfvf_mbox.c+3 -00 replies
27/105tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().net/ipv4/tcp.c+5 -00 replies
28/105tls: make sure to abort the stream if headers are bogusnet/tls/tls.h net/tls/tls_strp.c net/tls/tls_sw.c+11 -70 replies
29/105Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"drivers/net/ethernet/mellanox/mlx5/core/en_main.c+0 -20 replies
30/105net: liquidio: fix overflow in octeon_init_instr_queue()drivers/net/ethernet/cavium/liquidio/request_manager.c+1 -10 replies
31/105cnic: Fix use-after-free bugs in cnic_delete_taskdrivers/net/ethernet/broadcom/cnic.c+1 -20 replies
32/105octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()drivers/net/ethernet/marvell/octeontx2/nic/otx2_ptp.c+1 -10 replies
33/105perf/x86/intel: Fix crash in icl_update_topdown_event()arch/x86/events/intel/core.c+1 -10 replies
34/105ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transferfs/smb/server/transport_rdma.c+9 -80 replies
35/105ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_sizefs/smb/server/transport_rdma.c+10 -10 replies
36/105nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*fs/nilfs2/sysfs.c fs/nilfs2/sysfs.h+6 -60 replies
37/105crypto: af_alg - Disallow concurrent writes in af_alg_sendmsgcrypto/af_alg.c include/crypto/if_alg.h+13 -40 replies
38/105power: supply: bq27xxx: fix error return in case of no bq27000 hdq batterydrivers/power/supply/bq27xxx_battery.c+1 -10 replies
39/105power: supply: bq27xxx: restrict no-battery detection to bq27000drivers/power/supply/bq27xxx_battery.c+2 -20 replies
40/105dm-raid: dont set io_min and io_opt for raid1drivers/md/dm-raid.c+4 -20 replies
41/105dm-stripe: fix a possible integer overflowdrivers/md/dm-stripe.c+7 -30 replies
42/105gup: optimize longterm pin_user_pages() for large foliomm/gup.c+30 -80 replies
43/105mm: revert "mm: vmscan.c: fix OOM on swap stress test"mm/vmscan.c+1 -10 replies
44/105LoongArch: Update help info of ARCH_STRICT_ALIGNarch/loongarch/Kconfig+6 -20 replies
45/105objtool/LoongArch: Mark types based on break immediate codetools/objtool/arch/loongarch/decode.c+9 -30 replies
46/105objtool/LoongArch: Mark special atomic instruction as INSN_BUG typetools/arch/loongarch/include/asm/inst.h tools/objtool/arch/loongarch/decode.c+33 -00 replies
47/105LoongArch: Fix unreliable stack for live patchingarch/loongarch/kernel/stacktrace.c+2 -10 replies
48/105LoongArch: vDSO: Check kcalloc() result in init_vdso()arch/loongarch/kernel/vdso.c+3 -00 replies
49/105LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabledarch/loongarch/include/asm/acenv.h+3 -40 replies
50/105LoongArch: Check the return value when creating kobjarch/loongarch/kernel/env.c+2 -00 replies
51/105iommu/vt-d: Fix __domain_mapping()s usage of switch_to_super_page()drivers/iommu/intel/iommu.c+6 -10 replies
52/105iommu/amd/pgtbl: Fix possible race while increase page table leveldrivers/iommu/amd/amd_iommu_types.h drivers/iommu/amd/io_pgtable.c+22 -40 replies
53/105btrfs: tree-checker: fix the incorrect inode ref size checkfs/btrfs/tree-checker.c+2 -20 replies
54/105ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interfacesound/soc/qcom/qdsp6/audioreach.c+1 -00 replies
55/105ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failedsound/soc/qcom/qdsp6/q6apm-lpass-dais.c+4 -20 replies
56/105ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2Ssound/soc/qcom/qdsp6/q6apm-lpass-dais.c+1 -00 replies
57/105mmc: mvsdio: Fix dma_unmap_sg() nents valuedrivers/mmc/host/mvsdio.c+1 -10 replies
58/105KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is activearch/x86/kvm/svm/svm.c+1 -20 replies
59/105drm/amd/display: Allow RX6xxx & RX7700 to invoke amdgpu_irq_get/putdrivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c+38 -10 replies
60/105net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointernet/rfkill/rfkill-gpio.c+2 -20 replies
61/105rds: ib: Increment i_fastreg_wrs before bailing outnet/rds/ib_frmr.c+12 -80 replies
62/105mptcp: propagate shutdown to subflows when possiblenet/mptcp/protocol.c+16 -00 replies
63/105selftests: mptcp: connect: catch IO errors on listen sidetools/testing/selftests/net/mptcp/mptcp_connect.c+4 -30 replies
64/105selftests: mptcp: avoid spurious errors on TCP disconnecttools/testing/selftests/net/mptcp/mptcp_connect.c+2 -20 replies
65/105ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xxsound/pci/hda/patch_realtek.c+1 -00 replies
66/105io_uring/cmd: let cmds to know about dying taskinclude/linux/io_uring_types.h io_uring/uring_cmd.c+6 -10 replies
67/105io_uring: backport io_should_terminate_tw()io_uring/io_uring.c io_uring/io_uring.h io_uring/poll.c +2 more+17 -60 replies
68/105io_uring: include dying ring in task_work "should cancel" stateio_uring/io_uring.c io_uring/io_uring.h io_uring/poll.c +2 more+9 -70 replies
69/105io_uring/msg_ring: kill alloc_cache for io_kiocb allocationsinclude/linux/io_uring_types.h io_uring/io_uring.c io_uring/msg_ring.c+2 -300 replies
70/105io_uring/kbuf: drop WARN_ON_ONCE() from incremental length checkio_uring/kbuf.h+1 -10 replies
71/105ASoC: wm8940: Correct PLL rate roundingsound/soc/codecs/wm8940.c+6 -10 replies
72/105ASoC: wm8940: Correct typo in control namesound/soc/codecs/wm8940.c+1 -10 replies
73/105ASoC: wm8974: Correct PLL rate roundingsound/soc/codecs/wm8974.c+6 -20 replies
74/105ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error messagesound/soc/sof/intel/hda-stream.c+1 -10 replies
75/105ASoC: Intel: catpt: Expose correct bit depth to userspacesound/soc/intel/catpt/pcm.c+17 -60 replies
76/105drm/xe/tile: Release kobject for the failure pathdrivers/gpu/drm/xe/xe_tile_sysfs.c+7 -50 replies
77/105drm: bridge: anx7625: Fix NULL pointer dereference with early IRQdrivers/gpu/drm/bridge/analogix/anx7625.c+4 -20 replies
78/105drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error pathdrivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c+4 -20 replies
79/105drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue()drivers/gpu/drm/xe/xe_vm.c+2 -20 replies
80/105smb: client: fix filename matching of deferred filesfs/smb/client/cifsproto.h fs/smb/client/inode.c fs/smb/client/misc.c+21 -270 replies
81/105smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)fs/smb/client/smbdirect.c+3 -00 replies
82/105crypto: af_alg - Set merge to zero early in af_alg_sendmsgcrypto/af_alg.c+2 -10 replies
83/105smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error pathfs/smb/client/smbdirect.c+3 -10 replies
84/105io_uring: fix incorrect io_kiocb reference in io_link_skbio_uring/notif.c+1 -10 replies
85/105platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13drivers/platform/x86/asus-nb-wmi.c drivers/platform/x86/asus-wmi.h+21 -50 replies
86/105platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirkdrivers/platform/x86/asus-nb-wmi.c+2 -00 replies
87/105x86/bugs: Add SRSO_USER_KERNEL_NO supportarch/x86/include/asm/cpufeatures.h arch/x86/kernel/cpu/bugs.c+5 -00 replies
88/105x86/bugs: KVM: Add support for SRSO_MSR_FIXDocumentation/admin-guide/hw-vuln/srso.rst arch/x86/include/asm/cpufeatures.h arch/x86/include/asm/msr-index.h +3 more+46 -40 replies
89/105KVM: SVM: Set/clear SRSOs BP_SPEC_REDUCE on 0 <=> 1 VM count transitionsarch/x86/kvm/svm/svm.c arch/x86/kvm/svm/svm.h+67 -60 replies
90/105vmxnet3: unregister xdp rxq info in the reset pathdrivers/net/vmxnet3/vmxnet3_drv.c+5 -50 replies
91/105mm: add folio_expected_ref_count() for reference count calculationinclude/linux/mm.h mm/migrate.c+59 -180 replies
92/105mm/gup: check ref_count instead of lru before migrationmm/gup.c+2 -10 replies
93/105mptcp: pm: nl: announce deny-join-id0 flagDocumentation/netlink/specs/mptcp_pm.yaml include/uapi/linux/mptcp.h include/uapi/linux/mptcp_pm.h +1 more+13 -40 replies
94/105usb: xhci: introduce macro for ring segment list iterationdrivers/usb/host/xhci-debugfs.c drivers/usb/host/xhci-mem.c drivers/usb/host/xhci.c +1 more+19 -330 replies
95/105usb: xhci: remove option to change a default rings TRB cycle bitdrivers/usb/host/xhci-dbgcap.c drivers/usb/host/xhci-mem.c drivers/usb/host/xhci.c +1 more+27 -330 replies
96/105xhci: dbc: decouple endpoint allocation from initializationdrivers/usb/host/xhci-dbgcap.c+46 -250 replies
97/105xhci: dbc: Fix full DbC transfer ring after several reconnectsdrivers/usb/host/xhci-dbgcap.c+21 -20 replies
98/105rtc: pcf2127: fix SPI command byte for PCF2131 backportdrivers/rtc/rtc-pcf2127.c+5 -50 replies
99/105minmax.h: add whitespace around operators and after commasinclude/linux/minmax.h+17 -170 replies
100/105minmax.h: update some commentsinclude/linux/minmax.h+28 -330 replies
101/105minmax.h: reduce the #define expansion of min(), max() and clamp()include/linux/minmax.h+12 -120 replies
102/105minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()include/linux/minmax.h+1 -20 replies
103/105minmax.h: move all the clamp() definitions after the min/max() onesinclude/linux/minmax.h+51 -580 replies
104/105minmax.h: simplify the variants of clamp()include/linux/minmax.h+12 -120 replies
105/105minmax.h: remove some #defines that are only expanded onceinclude/linux/minmax.h+6 -80 replies

Reviews trailers per patch

50 of 105 patches have a Reviewed-by or Acked-by.

PatchMartin K. PetersenAaro KoskinenUwe Kleine-KönigMatthieu Baerts (NGI0)Simon HormanRafal RomanowskiDmitry SafonovEric DumazetMat MartineauDavid SterbaAleksandr LoktionovRinitha SVadim FedorenkoVince WeaverPaul MenzelVitaly LifshitsKurt KanzenbachMor Bar-GabayCosmin RatiuJiri PirkoDragos TatuleaDavid WilderJay VosburghSabrina DubrocaMichal KubiakJesper Dangaard BrouerPriya SinghNamjae JeonJohn GarryDavid HildenbrandStefan MetzmacherLinus WalleijNaveen N Rao (AMD)Sun peng LiDaniel WheelerNicolas Saenz JulienneDavid WoodhouseJohannes ThumshirnFilipe MananaSrinivas KandagatlaAllison HendersonAnkur TyagiGeliang TangJens AxboeMing LeiHeikki KrogerusAndy ShevchenkoCezary RojewskiPavel BegunkovIlpo JärvinenNikolay BorisovMatthew BrostDmitry BaryshkovLuca CeresoliEnzo MatsumiyaPeter UjfalusiKiryl ShutsemauBorislav Petkov (AMD)Florian FainelliLinux Kernel Functional TestingBrett A C SheffieldHarshit MogalapalliMark BrownJon HunterBrett MastbergenPeter SchneiderRon EconomosMiguel OjedaShuah KhanHardik Garg
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
1/105
2/105R-b
3/105
4/105
5/105
6/105A-b R-b
7/105
8/105R-b
9/105
10/105
11/105
12/105R-b R-b
13/105
14/105
15/105R-b
16/105R-b
17/105R-b
18/105R-b
19/105R-b
20/105T-b
21/105T-b T-b A-b T-b
22/105R-b T-b
23/105R-b R-b R-b R-b T-b
24/105R-b R-b R-b
25/105T-b A-b
26/105R-b
27/105
28/105R-b
29/105
30/105
31/105
32/105R-b
33/105T-b
34/105R-b
35/105A-b
36/105
37/105
38/105
39/105
40/105R-b
41/105R-b
42/105
43/105A-b
44/105
45/105
46/105
47/105
48/105
49/105
50/105
51/105R-b R-b
52/105
53/105R-b R-b R-b
54/105R-b
55/105R-b
56/105R-b
57/105R-b
58/105R-b
59/105R-b T-b
60/105R-b
61/105R-b
62/105R-b R-b
63/105R-b R-b
64/105R-b R-b
65/105
66/105R-b R-b
67/105
68/105
69/105
70/105
71/105T-b
72/105T-b
73/105
74/105A-b
75/105T-b R-b
76/105R-b
77/105R-b
78/105R-b R-b
79/105R-b
80/105R-b
81/105
82/105
83/105
84/105R-b
85/105R-b
86/105R-b
87/105R-b
88/105
89/105T-b
90/105
91/105
92/105A-b A-b
93/105R-b
94/105R-b
95/105
96/105
97/105
98/105
99/105
100/105
101/105
102/105
103/105
104/105
105/105

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 70 reviewers.

Read the v1 thread

Cover letter [PATCH 6.12 000/105] 6.12.49-rc1 review

This is the start of the stable review cycle for the 6.12.49 release. There are 105 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 24 Sep 2025 19:23:52 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.49-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.12.49-rc1

David Laight <[email protected]>
minmax.h: remove some #defines that are only expanded once

David Laight <[email protected]>
minmax.h: simplify the variants of clamp()

David Laight <[email protected]>
minmax.h: move all the clamp() definitions after the min/max() ones

David Laight <[email protected]>
minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()

David Laight <[email protected]>
minmax.h: reduce the #define expansion of min(), max() and clamp()

David Laight <[email protected]>
minmax.h: update some comments

David Laight <[email protected]>
minmax.h: add whitespace around operators and after commas

Bruno Thomsen <[email protected]>
rtc: pcf2127: fix SPI command byte for PCF2131 backport

Mathias Nyman <[email protected]>
xhci: dbc: Fix full DbC transfer ring after several reconnects

Mathias Nyman <[email protected]>
xhci: dbc: decouple endpoint allocation from initialization

Niklas Neronin <[email protected]>
usb: xhci: remove option to change a default ring's TRB cycle bit

Niklas Neronin <[email protected]>
usb: xhci: introduce macro for ring segment list iteration

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: nl: announce deny-join-id0 flag

Hugh Dickins <[email protected]>
mm/gup: check ref_count instead of lru before migration

Shivank Garg <[email protected]>
mm: add folio_expected_ref_count() for reference count calculation

Sankararaman Jayaraman <[email protected]>
vmxnet3: unregister xdp rxq info in the reset path

Sean Christopherson <[email protected]>
KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions

Borislav Petkov <[email protected]>
x86/bugs: KVM: Add support for SRSO_MSR_FIX

Borislav Petkov (AMD) <[email protected]>
x86/bugs: Add SRSO_USER_KERNEL_NO support

Antheas Kapenekakis <[email protected]>
platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk

Antheas Kapenekakis <[email protected]>
platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13

Yang Xiuwei <[email protected]>
io_uring: fix incorrect io_kiocb reference in io_link_skb

Stefan Metzmacher <[email protected]>
smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

Herbert Xu <[email protected]>
crypto: af_alg - Set merge to zero early in af_alg_sendmsg

Stefan Metzmacher <[email protected]>

    smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)

Paulo Alcantara <[email protected]>
smb: client: fix filename matching of deferred files

Dan Carpenter <[email protected]>
drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue()

Qi Xi <[email protected]>
drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path

Loic Poulain <[email protected]>
drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

Shuicheng Lin <[email protected]>
drm/xe/tile: Release kobject for the failure path

Amadeusz Sławiński <[email protected]>
ASoC: Intel: catpt: Expose correct bit depth to userspace

Colin Ian King <[email protected]>
ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message

Charles Keepax <[email protected]>
ASoC: wm8974: Correct PLL rate rounding

Charles Keepax <[email protected]>
ASoC: wm8940: Correct typo in control name

Charles Keepax <[email protected]>
ASoC: wm8940: Correct PLL rate rounding

Jens Axboe <[email protected]>
io_uring/kbuf: drop WARN_ON_ONCE() from incremental length check

Jens Axboe <[email protected]>
io_uring/msg_ring: kill alloc_cache for io_kiocb allocations

Jens Axboe <[email protected]>
io_uring: include dying ring in task_work "should cancel" state

Jens Axboe <[email protected]>
io_uring: backport io_should_terminate_tw()

Pavel Begunkov <[email protected]>
io_uring/cmd: let cmds to know about dying task

Praful Adiga <[email protected]>
ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx

Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: avoid spurious errors on TCP disconnect

Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: connect: catch IO errors on listen side

Matthieu Baerts (NGI0) <[email protected]>
mptcp: propagate shutdown to subflows when possible

Håkon Bugge <[email protected]>
rds: ib: Increment i_fastreg_wrs before bailing out

Hans de Goede <[email protected]>
net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer

Ivan Lipski <[email protected]>
drm/amd/display: Allow RX6xxx & RX7700 to invoke amdgpu_irq_get/put

Maciej S. Szmigiero <[email protected]>
KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active

Thomas Fourier <[email protected]>
mmc: mvsdio: Fix dma_unmap_sg() nents value

Mohammad Rafi Shaik <[email protected]>
ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S

Krzysztof Kozlowski <[email protected]>
ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed

Mohammad Rafi Shaik <[email protected]>
ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface

Qu Wenruo <[email protected]>
btrfs: tree-checker: fix the incorrect inode ref size check

Vasant Hegde <[email protected]>
iommu/amd/pgtbl: Fix possible race while increase page table level

Eugene Koira <[email protected]>
iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()

Tao Cui <[email protected]>
LoongArch: Check the return value when creating kobj

Huacai Chen <[email protected]>
LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled

Guangshuo Li <[email protected]>
LoongArch: vDSO: Check kcalloc() result in init_vdso()

Tiezhu Yang <[email protected]>
LoongArch: Fix unreliable stack for live patching

Tiezhu Yang <[email protected]>
objtool/LoongArch: Mark special atomic instruction as INSN_BUG type

Tiezhu Yang <[email protected]>
objtool/LoongArch: Mark types based on break immediate code

Tiezhu Yang <[email protected]>
LoongArch: Update help info of ARCH_STRICT_ALIGN

Hugh Dickins <[email protected]>
mm: revert "mm: vmscan.c: fix OOM on swap stress test"

Li Zhe <[email protected]>
gup: optimize longterm pin_user_pages() for large folio

Mikulas Patocka <[email protected]>
dm-stripe: fix a possible integer overflow

Mikulas Patocka <[email protected]>
dm-raid: don't set io_min and io_opt for raid1

H. Nikolaus Schaller <[email protected]>
power: supply: bq27xxx: restrict no-battery detection to bq27000

H. Nikolaus Schaller <[email protected]>
power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery

Herbert Xu <[email protected]>
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

Nathan Chancellor <[email protected]>
nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*

Stefan Metzmacher <[email protected]>
ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

Namjae Jeon <[email protected]>
ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

Kan Liang <[email protected]>
perf/x86/intel: Fix crash in icl_update_topdown_event()

Duoming Zhou <[email protected]>
octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()

Duoming Zhou <[email protected]>
cnic: Fix use-after-free bugs in cnic_delete_task

Alexey Nepomnyashih <[email protected]>
net: liquidio: fix overflow in octeon_init_instr_queue()

Tariq Toukan <[email protected]>
Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"

Jakub Kicinski <[email protected]>
tls: make sure to abort the stream if headers are bogus

Kuniyuki Iwashima <[email protected]>

    tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

Sathesh B Edara <[email protected]>
octeon_ep: fix VF MAC address lifecycle handling

Hangbin Liu <[email protected]>
bonding: don't set oif to bond dev when getting NS target destination

Jianbo Liu <[email protected]>
net/mlx5e: Harden uplink netdev access against device unbind

Kohei Enju <[email protected]>
igc: don't fail igc_probe() on LED setup error

Maciej Fijalkowski <[email protected]>
i40e: remove redundant memory barrier when cleaning Tx descs

Jacob Keller <[email protected]>
ice: fix Rx page leak on multi-buffer frames

Jacob Keller <[email protected]>
ice: store max_frame and rx_buf_len only in ice_rx_ring

Yeounsu Moon <[email protected]>
net: natsemi: fix rx_dropped double accounting on netif_rx() failure

Geliang Tang <[email protected]>
selftests: mptcp: sockopt: fix error messages

Matthieu Baerts (NGI0) <[email protected]>
mptcp: tfo: record 'deny join id0' info

Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: userspace pm: validate deny-join-id0 flag

Matthieu Baerts (NGI0) <[email protected]>
mptcp: set remote_deny_join_id0 on SYN recv

Hangbin Liu <[email protected]>
bonding: set random address only when slaves already exist

Jamie Bainbridge <[email protected]>
qed: Don't collect too many protection override GRC elements

Anderson Nascimento <[email protected]>
net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR

Ioana Ciornei <[email protected]>
dpaa2-switch: fix buffer pool seeding for control traffic

Tiwei Bie <[email protected]>
um: Fix FD copy size in os_rcv_fd_msg()

Miaoqian Lin <[email protected]>
um: virtio_uml: Fix use-after-free after put_device in probe

Filipe Manana <[email protected]>
btrfs: fix invalid extref key setup when replaying dentry

Chen Ridong <[email protected]>
cgroup: split cgroup_destroy_wq into 3 workqueues

Geert Uytterhoeven <[email protected]>
pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch

Liao Yuanhong <[email protected]>
wifi: mac80211: fix incorrect type for ret

Lachlan Hodges <[email protected]>
wifi: mac80211: increase scan_ies_len for S1G

Takashi Sakamoto <[email protected]>
ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported

Christoph Hellwig <[email protected]>
nvme: fix PI insert on write

[email protected] <[email protected]>
wifi: wilc1000: avoid buffer overflow in WID string configuration

-------------

Diffstat:

 Documentation/admin-guide/hw-vuln/srso.rst         |  13 ++
 Documentation/netlink/specs/mptcp_pm.yaml          |   4 +-
 Makefile                                           |   4 +-
 arch/loongarch/Kconfig                             |   8 +-
 arch/loongarch/include/asm/acenv.h                 |   7 +-
 arch/loongarch/kernel/env.c                        |   2 +
 arch/loongarch/kernel/stacktrace.c                 |   3 +-
 arch/loongarch/kernel/vdso.c                       |   3 +
 arch/um/drivers/virtio_uml.c                       |   6 +-
 arch/um/os-Linux/file.c                            |   2 +-
 arch/x86/events/intel/core.c                       |   2 +-
 arch/x86/include/asm/cpufeatures.h                 |   5 +
 arch/x86/include/asm/msr-index.h                   |   1 +
 arch/x86/kernel/cpu/bugs.c                         |  28 ++-
 arch/x86/kvm/svm/svm.c                             |  68 ++++++-
 arch/x86/kvm/svm/svm.h                             |   2 +
 arch/x86/lib/msr.c                                 |   2 +
 crypto/af_alg.c                                    |  10 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |  39 +++-
 drivers/gpu/drm/bridge/analogix/anx7625.c          |   6 +-
 .../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c    |   6 +-
 drivers/gpu/drm/xe/xe_tile_sysfs.c                 |  12 +-
 drivers/gpu/drm/xe/xe_vm.c                         |   4 +-
 drivers/iommu/amd/amd_iommu_types.h                |   1 +
 drivers/iommu/amd/io_pgtable.c                     |  25 ++-
 drivers/iommu/intel/iommu.c                        |   7 +-
 drivers/md/dm-raid.c                               |   6 +-
 drivers/md/dm-stripe.c                             |  10 +-
 drivers/mmc/host/mvsdio.c                          |   2 +-
 drivers/net/bonding/bond_main.c                    |   2 +-
 drivers/net/ethernet/broadcom/cnic.c               |   3 +-
 .../net/ethernet/cavium/liquidio/request_manager.c |   2 +-
 .../net/ethernet/freescale/dpaa2/dpaa2-switch.c    |   2 +-
 drivers/net/ethernet/intel/i40e/i40e_txrx.c        |   3 -
 drivers/net/ethernet/intel/ice/ice.h               |   3 -
 drivers/net/ethernet/intel/ice/ice_base.c          |  34 ++--
 drivers/net/ethernet/intel/ice/ice_txrx.c          |  80 ++++----
 drivers/net/ethernet/intel/ice/ice_txrx.h          |   4 +-
 drivers/net/ethernet/intel/ice/ice_virtchnl.c      |   7 +-
 drivers/net/ethernet/intel/igc/igc.h               |   1 +
 drivers/net/ethernet/intel/igc/igc_main.c          |  12 +-
 .../ethernet/marvell/octeon_ep/octep_pfvf_mbox.c   |   3 +
 .../net/ethernet/marvell/octeontx2/nic/otx2_ptp.c  |   2 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |   2 -
 drivers/net/ethernet/mellanox/mlx5/core/en_rep.c   |  27 ++-
 drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c  |   1 +
 drivers/net/ethernet/mellanox/mlx5/core/lib/mlx5.h |  15 +-
 drivers/net/ethernet/natsemi/ns83820.c             |  13 +-
 drivers/net/ethernet/qlogic/qed/qed_debug.c        |   7 +-
 drivers/net/vmxnet3/vmxnet3_drv.c                  |  10 +-
 drivers/net/wireless/microchip/wilc1000/wlan_cfg.c |  39 ++--
 drivers/net/wireless/microchip/wilc1000/wlan_cfg.h |   5 +-
 drivers/nvme/host/core.c                           |  18 +-
 drivers/pcmcia/omap_cf.c                           |   8 +-
 drivers/platform/x86/asus-nb-wmi.c                 |  25 ++-
 drivers/platform/x86/asus-wmi.h                    |   3 +-
 drivers/power/supply/bq27xxx_battery.c             |   4 +-
 drivers/rtc/rtc-pcf2127.c                          |  10 +-
 drivers/usb/host/xhci-dbgcap.c                     |  94 ++++++---
 drivers/usb/host/xhci-debugfs.c                    |   5 +-
 drivers/usb/host/xhci-mem.c                        |  74 +++----
 drivers/usb/host/xhci.c                            |  22 +--
 drivers/usb/host/xhci.h                            |   9 +-
 fs/btrfs/tree-checker.c                            |   4 +-
 fs/btrfs/tree-log.c                                |   2 +-
 fs/nilfs2/sysfs.c                                  |   4 +-
 fs/nilfs2/sysfs.h                                  |   8 +-
 fs/smb/client/cifsproto.h                          |   4 +-
 fs/smb/client/inode.c                              |   6 +-
 fs/smb/client/misc.c                               |  36 ++--
 fs/smb/client/smbdirect.c                          |   7 +-
 fs/smb/server/transport_rdma.c                     |  26 ++-
 include/crypto/if_alg.h                            |  10 +-
 include/linux/io_uring_types.h                     |   4 +-
 include/linux/minmax.h                             | 219 ++++++++++-----------
 include/linux/mlx5/driver.h                        |   1 +
 include/linux/mm.h                                 |  55 ++++++
 include/uapi/linux/mptcp.h                         |   2 +
 include/uapi/linux/mptcp_pm.h                      |   4 +-
 io_uring/io_uring.c                                |  12 +-
 io_uring/io_uring.h                                |  13 ++
 io_uring/kbuf.h                                    |   2 +-
 io_uring/msg_ring.c                                |  24 +--
 io_uring/notif.c                                   |   2 +-
 io_uring/poll.c                                    |   3 +-
 io_uring/timeout.c                                 |   2 +-
 io_uring/uring_cmd.c                               |   6 +-
 kernel/cgroup/cgroup.c                             |  43 +++-
 mm/gup.c                                           |  41 +++-
 mm/migrate.c                                       |  22 +--
 mm/vmscan.c                                        |   2 +-
 net/ipv4/tcp.c                                     |   5 +
 net/ipv4/tcp_ao.c                                  |   4 +-
 net/mac80211/driver-ops.h                          |   2 +-
 net/mac80211/main.c                                |   7 +-
 net/mptcp/options.c                                |   6 +-
 net/mptcp/pm_netlink.c                             |   7 +
 net/mptcp/protocol.c                               |  16 ++
 net/mptcp/subflow.c                                |   4 +
 net/rds/ib_frmr.c                                  |  20 +-
 net/rfkill/rfkill-gpio.c                           |   4 +-
 net/tls/tls.h                                      |   1 +
 net/tls/tls_strp.c                                 |  14 +-
 net/tls/tls_sw.c                                   |   3 +-
 sound/firewire/motu/motu-hwdep.c                   |   2 +-
 sound/pci/hda/patch_realtek.c                      |   1 +
 sound/soc/codecs/wm8940.c                          |   9 +-
 sound/soc/codecs/wm8974.c                          |   8 +-
 sound/soc/intel/catpt/pcm.c                        |  23 ++-
 sound/soc/qcom/qdsp6/audioreach.c                  |   1 +
 sound/soc/qcom/qdsp6/q6apm-lpass-dais.c            |   7 +-
 sound/soc/sof/intel/hda-stream.c                   |   2 +-
 tools/arch/loongarch/include/asm/inst.h            |  12 ++
 tools/objtool/arch/loongarch/decode.c              |  33 +++-
 tools/testing/selftests/net/mptcp/mptcp_connect.c  |  11 +-
 tools/testing/selftests/net/mptcp/mptcp_sockopt.c  |  16 +-
 tools/testing/selftests/net/mptcp/pm_nl_ctl.c      |   7 +
 tools/testing/selftests/net/mptcp/userspace_pm.sh  |  14 +-
 118 files changed, 1069 insertions(+), 571 deletions(-)

Read the cover letter in its thread