Skip to content

6.16.11-rc1 review

Greg Kroah-Hartman linux-patches linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest14 patches 10 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/14blk-mq: fix blk_mq_tags double free while nr_requests grownblock/blk-mq-tag.c+1 -00 replies
2/14gcc-plugins: Remove TODO_verify_il for GCC >= 16scripts/gcc-plugins/gcc-common.h+7 -00 replies
3/14scsi: target: target_core_configfs: Add length check to avoid buffer overflowdrivers/target/target_core_configfs.c+1 -10 replies
4/14ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_freesound/usb/midi.c+4 -50 replies
5/14media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_removedrivers/media/pci/b2c2/flexcop-pci.c+1 -10 replies
6/14media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probedrivers/media/i2c/tc358743.c+2 -20 replies
7/14media: tuner: xc5000: Fix use-after-free in xc5000_releasedrivers/media/tuners/xc5000.c+1 -10 replies
8/14media: rc: fix races with imon_disconnect()drivers/media/rc/imon.c+20 -70 replies
9/14media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_IDdrivers/media/usb/uvc/uvc_driver.c drivers/media/usb/uvc/uvcvideo.h+48 -270 replies
10/14mm: swap: check for stable address space before operating on the VMAmm/swapfile.c+3 -00 replies
11/14wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()drivers/net/wireless/ath/ath11k/qmi.c+1 -10 replies
12/14media: iris: Fix memory leak by freeing untracked persist bufferdrivers/media/platform/qcom/iris/iris_buffer.c+10 -00 replies
13/14media: stm32-csi: Fix dereference before NULL checkdrivers/media/platform/st/stm32/stm32-csi.c+2 -20 replies
14/14ASoC: qcom: audioreach: fix potential null pointer dereferencesound/soc/qcom/qdsp6/topology.c+2 -20 replies

Reviews trailers per patch

4 of 14 patches have a Reviewed-by or Acked-by.

PatchMing LeiNilay ShroffHannes ReineckeLi NanBaochen QiangVasanthakumar ThiagarajanVikash GarodiaNeil ArmstrongBryan O'DonoghueLaurent PinchartHans de GoedeFlorian FainelliJustin M. ForbesMarkus ReicheltBrett A C SheffieldLinux Kernel Functional TestingJon HunterShuah KhanRon EconomosPeter SchneiderMark Brown
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
1/14R-b R-b R-b R-b
2/14
3/14
4/14
5/14
6/14
7/14
8/14
9/14R-b R-b
10/14
11/14R-b R-b
12/14R-b T-b T-b T-b T-b
13/14
14/14

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 21 reviewers.

Read the v1 thread

Cover letter [PATCH 6.16 00/14] 6.16.11-rc1 review

This is the start of the stable review cycle for the 6.16.11 release. There are 14 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sun, 05 Oct 2025 16:02:25 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.16.11-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.16.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.16.11-rc1

Srinivas Kandagatla <[email protected]>
ASoC: qcom: audioreach: fix potential null pointer dereference

Chandra Mohan Sundar <[email protected]>
media: stm32-csi: Fix dereference before NULL check

Dikshita Agarwal <[email protected]>
media: iris: Fix memory leak by freeing untracked persist buffer

Matvey Kovalev <[email protected]>
wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()

Charan Teja Kalla <[email protected]>
mm: swap: check for stable address space before operating on the VMA

Thadeu Lima de Souza Cascardo <[email protected]>
media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID

Larshin Sergey <[email protected]>
media: rc: fix races with imon_disconnect()

Duoming Zhou <[email protected]>
media: tuner: xc5000: Fix use-after-free in xc5000_release

Duoming Zhou <[email protected]>
media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

Duoming Zhou <[email protected]>
media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove

Jeongjun Park <[email protected]>
ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free

Wang Haoran <[email protected]>
scsi: target: target_core_configfs: Add length check to avoid buffer overflow

Kees Cook <[email protected]>
gcc-plugins: Remove TODO_verify_il for GCC >= 16

Yu Kuai <[email protected]>
blk-mq: fix blk_mq_tags double free while nr_requests grown

-------------

Diffstat:

 Makefile                                       |  4 +-
 block/blk-mq-tag.c                             |  1 +
 drivers/media/i2c/tc358743.c                   |  4 +-
 drivers/media/pci/b2c2/flexcop-pci.c           |  2 +-
 drivers/media/platform/qcom/iris/iris_buffer.c | 10 ++++
 drivers/media/platform/st/stm32/stm32-csi.c    |  4 +-
 drivers/media/rc/imon.c                        | 27 +++++++---
 drivers/media/tuners/xc5000.c                  |  2 +-
 drivers/media/usb/uvc/uvc_driver.c             | 73 ++++++++++++++++----------
 drivers/media/usb/uvc/uvcvideo.h               |  2 +
 drivers/net/wireless/ath/ath11k/qmi.c          |  2 +-
 drivers/target/target_core_configfs.c          |  2 +-
 mm/swapfile.c                                  |  3 ++
 scripts/gcc-plugins/gcc-common.h               |  7 +++
 sound/soc/qcom/qdsp6/topology.c                |  4 +-
 sound/usb/midi.c                               |  9 ++--
 16 files changed, 105 insertions(+), 51 deletions(-)