Skip to content

6.18.11-rc1 review

Greg Kroah-Hartman linux-cifs linux-patches linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest49 patches 13 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/49io_uring/io-wq: add exit-on-idle stateio_uring/io-wq.c io_uring/io-wq.h+26 -20 replies
2/49io_uring: allow io-wq workers to exit when unusedio_uring/tctx.c+11 -00 replies
3/49smb: client: split cached_fid bitfields to avoid shared-byte RMW racesfs/smb/client/cached_dir.h+4 -40 replies
4/49ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error pathsfs/smb/server/server.c+3 -30 replies
5/49ksmbd: add chann_lock to protect ksmbd_chann_list xarrayfs/smb/server/mgmt/user_session.c fs/smb/server/mgmt/user_session.h fs/smb/server/smb2pdu.c+17 -10 replies
6/49smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()fs/smb/server/transport_tcp.c+2 -10 replies
7/49smb: smbdirect: introduce smbdirect_socket.recv_io.credits.availablefs/smb/common/smbdirect/smbdirect_socket.h+2 -00 replies
8/49smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.*fs/smb/common/smbdirect/smbdirect_socket.h+16 -00 replies
9/49smb: server: make use of smbdirect_socket.recv_io.credits.availablefs/smb/server/transport_rdma.c+25 -50 replies
10/49smb: server: let recv_done() queue a refill when the peer is low on creditsfs/smb/server/transport_rdma.c+4 -20 replies
11/49smb: server: make use of smbdirect_socket.send_io.bcreditsfs/smb/server/transport_rdma.c+51 -20 replies
12/49smb: server: fix last send credit problem causing disconnectsfs/smb/server/transport_rdma.c+30 -20 replies
13/49smb: server: let send_done handle a completion without IB_SEND_SIGNALEDfs/smb/server/transport_rdma.c+26 -00 replies
14/49smb: client: make use of smbdirect_socket.recv_io.credits.availablefs/smb/client/smbdirect.c+28 -60 replies
15/49smb: client: let recv_done() queue a refill when the peer is low on creditsfs/smb/client/smbdirect.c+5 -20 replies
16/49smb: client: let smbd_post_send() make use of request->wrfs/smb/client/smbdirect.c+7 -80 replies
17/49smb: client: remove pointless sc->recv_io.credits.count rollbackfs/smb/client/smbdirect.c+0 -30 replies
18/49smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter()fs/smb/client/smbdirect.c+0 -50 replies
19/49smb: client: port and use the wait_for_credits logic used by serverfs/smb/client/smbdirect.c+43 -270 replies
20/49smb: client: split out smbd_ib_post_send()fs/smb/client/smbdirect.c+17 -160 replies
21/49smb: client: introduce and use smbd_{alloc, free}_send_io()fs/smb/client/smbdirect.c+58 -290 replies
22/49smb: client: use smbdirect_send_batch processingfs/smb/client/smbdirect.c+135 -140 replies
23/49smb: client: make use of smbdirect_socket.send_io.bcreditsfs/smb/client/smbdirect.c+55 -30 replies
24/49smb: client: fix last send credit problem causing disconnectsfs/smb/client/smbdirect.c+29 -20 replies
25/49smb: client: let smbd_post_send_negotiate_req() use smbd_post_send()fs/smb/client/smbdirect.c+7 -250 replies
26/49smb: client: let send_done handle a completion without IB_SEND_SIGNALEDfs/smb/client/smbdirect.c+27 -00 replies
27/49driver core: enforce device_lock for driver_match_device()drivers/base/base.h drivers/base/bus.c drivers/base/dd.c+11 -20 replies
28/49Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXBdrivers/bluetooth/btusb.c+2 -00 replies
29/49ALSA: hda/conexant: Add quirk for HP ZBook Studio G4sound/hda/codecs/conexant.c+1 -00 replies
30/49crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_modedrivers/crypto/intel/iaa/iaa_crypto_main.c+5 -70 replies
31/49crypto: octeontx - Fix length check to avoid truncation in ucode_load_storedrivers/crypto/marvell/octeontx/otx_cptpf_ucode.c+1 -10 replies
32/49crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctlydrivers/crypto/omap-crypto.c+1 -10 replies
33/49crypto: virtio - Add spinlock protection with virtqueue notificationdrivers/crypto/virtio/virtio_crypto_core.c+5 -00 replies
34/49crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_reqdrivers/crypto/virtio/virtio_crypto_skcipher_algs.c+0 -20 replies
35/49nilfs2: Fix potential block overflow that cause system hangfs/nilfs2/sufile.c+4 -00 replies
36/49hfs: ensure sb->s_fs_info is always cleaned upfs/hfs/mdb.c fs/hfs/super.c+23 -220 replies
37/49wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()drivers/net/wireless/realtek/rtw88/main.c+2 -20 replies
38/49scsi: qla2xxx: Validate sp before freeing associated memorydrivers/scsi/qla2xxx/qla_gs.c+18 -160 replies
39/49scsi: qla2xxx: Allow recovery for tape devicesdrivers/scsi/qla2xxx/qla_gs.c drivers/scsi/qla2xxx/qla_init.c+0 -120 replies
40/49scsi: qla2xxx: Delay module unload while fabric scan in progressdrivers/scsi/qla2xxx/qla_os.c+2 -10 replies
41/49scsi: qla2xxx: Free sp in error path to fix system crashdrivers/scsi/qla2xxx/qla_gs.c+2 -20 replies
42/49scsi: qla2xxx: Query FW again before proceeding with logindrivers/scsi/qla2xxx/qla_init.c drivers/scsi/qla2xxx/qla_isr.c+34 -40 replies
43/49bus: fsl-mc: fix use-after-free in driver_override_show()drivers/bus/fsl-mc/fsl-mc-bus.c+5 -10 replies
44/49erofs: fix UAF issue for file-backed mounts w/ directio optionfs/erofs/fileio.c+6 -10 replies
45/49xfs: fix UAF in xchk_btree_check_block_ownerfs/xfs/scrub/btree.c+5 -20 replies
46/49drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/freedrivers/gpu/drm/exynos/exynos_drm_vidi.c+32 -60 replies
47/49PCI: endpoint: Avoid creating sub-groups asynchronouslydrivers/pci/endpoint/pci-ep-cfs.c+5 -100 replies
48/49wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_adddrivers/net/wireless/realtek/rtl8xxxu/core.c+1 -00 replies
49/49gpio: omap: do not register driver in probe()drivers/gpio/gpio-omap.c+18 -40 replies

Reviews trailers per patch

26 of 49 patches have a Reviewed-by or Acked-by.

PatchNamjae JeonDanilo KrummrichGreg Kroah-HartmanRafael J. Wysocki (Intel)Paul MenzelKanchana P SridharHerbert XuJason WangMichael S. TsirkinGao XiangChristoph HellwigJiaming ZhangPing-Ke ShihViacheslav DubeykoHimanshu MadhaniIoana CiorneiPeter SchneiderJustin M. ForbesRonald WarsowJon HunterFlorian FainelliBrett MastbergenLuna JernbergRon EconomosBrett A C SheffieldBarry K. NathanMiguel OjedaDileep Malepu
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
1/49
2/49
3/49
4/49
5/49
6/49A-b
7/49A-b
8/49A-b
9/49A-b
10/49A-b
11/49A-b
12/49A-b
13/49A-b
14/49
15/49
16/49
17/49
18/49
19/49
20/49
21/49
22/49
23/49
24/49
25/49
26/49
27/49R-b R-b R-b
28/49R-b
29/49
30/49A-b
31/49
32/49A-b
33/49A-b A-b
34/49A-b A-b
35/49
36/49T-b R-b
37/49A-b
38/49R-b
39/49R-b
40/49R-b
41/49R-b
42/49R-b
43/49R-b
44/49R-b
45/49R-b T-b
46/49
47/49
48/49R-b
49/49R-b R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 28 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 00/49] 6.18.11-rc1 review

This is the start of the stable review cycle for the 6.18.11 release. There are 49 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sun, 15 Feb 2026 13:46:52 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.11-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.11-rc1

Danilo Krummrich <[email protected]>
gpio: omap: do not register driver in probe()

Ali Tariq <[email protected]>
wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add

Liu Song <[email protected]>
PCI: endpoint: Avoid creating sub-groups asynchronously

Jeongjun Park <[email protected]>

    drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free

Darrick J. Wong <[email protected]>
xfs: fix UAF in xchk_btree_check_block_owner

Chao Yu <[email protected]>
erofs: fix UAF issue for file-backed mounts w/ directio option

Gui-Dong Han <[email protected]>
bus: fsl-mc: fix use-after-free in driver_override_show()

Anil Gurumurthy <[email protected]>
scsi: qla2xxx: Query FW again before proceeding with login

Anil Gurumurthy <[email protected]>
scsi: qla2xxx: Free sp in error path to fix system crash

Anil Gurumurthy <[email protected]>
scsi: qla2xxx: Delay module unload while fabric scan in progress

Shreyas Deodhar <[email protected]>
scsi: qla2xxx: Allow recovery for tape devices

Anil Gurumurthy <[email protected]>
scsi: qla2xxx: Validate sp before freeing associated memory

Bitterblue Smith <[email protected]>
wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()

Mehdi Ben Hadj Khelifa <[email protected]>

    hfs: ensure sb->s_fs_info is always cleaned up

Edward Adam Davis <[email protected]>
nilfs2: Fix potential block overflow that cause system hang

Bibo Mao <[email protected]>
crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req

Bibo Mao <[email protected]>
crypto: virtio - Add spinlock protection with virtqueue notification

Kees Cook <[email protected]>
crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly

Thorsten Blum <[email protected]>
crypto: octeontx - Fix length check to avoid truncation in ucode_load_store

Thorsten Blum <[email protected]>
crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

Takashi Iwai <[email protected]>
ALSA: hda/conexant: Add quirk for HP ZBook Studio G4

Zenm Chen <[email protected]>
Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB

Gui-Dong Han <[email protected]>
driver core: enforce device_lock for driver_match_device()

Stefan Metzmacher <[email protected]>
smb: client: let send_done handle a completion without IB_SEND_SIGNALED

Stefan Metzmacher <[email protected]>
smb: client: let smbd_post_send_negotiate_req() use smbd_post_send()

Stefan Metzmacher <[email protected]>
smb: client: fix last send credit problem causing disconnects

Stefan Metzmacher <[email protected]>
smb: client: make use of smbdirect_socket.send_io.bcredits

Stefan Metzmacher <[email protected]>
smb: client: use smbdirect_send_batch processing

Stefan Metzmacher <[email protected]>
smb: client: introduce and use smbd_{alloc, free}_send_io()

Stefan Metzmacher <[email protected]>
smb: client: split out smbd_ib_post_send()

Stefan Metzmacher <[email protected]>
smb: client: port and use the wait_for_credits logic used by server

Stefan Metzmacher <[email protected]>

    smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter()

Stefan Metzmacher <[email protected]>

    smb: client: remove pointless sc->recv_io.credits.count rollback

Stefan Metzmacher <[email protected]>

    smb: client: let smbd_post_send() make use of request->wr

Stefan Metzmacher <[email protected]>
smb: client: let recv_done() queue a refill when the peer is low on credits

Stefan Metzmacher <[email protected]>
smb: client: make use of smbdirect_socket.recv_io.credits.available

Stefan Metzmacher <[email protected]>
smb: server: let send_done handle a completion without IB_SEND_SIGNALED

Stefan Metzmacher <[email protected]>
smb: server: fix last send credit problem causing disconnects

Stefan Metzmacher <[email protected]>
smb: server: make use of smbdirect_socket.send_io.bcredits

Stefan Metzmacher <[email protected]>
smb: server: let recv_done() queue a refill when the peer is low on credits

Stefan Metzmacher <[email protected]>
smb: server: make use of smbdirect_socket.recv_io.credits.available

Stefan Metzmacher <[email protected]>
smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.*

Stefan Metzmacher <[email protected]>
smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available

Henrique Carvalho <[email protected]>
smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

Namjae Jeon <[email protected]>
ksmbd: add chann_lock to protect ksmbd_chann_list xarray

Namjae Jeon <[email protected]>
ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths

Henrique Carvalho <[email protected]>
smb: client: split cached_fid bitfields to avoid shared-byte RMW races

Li Chen <[email protected]>
io_uring: allow io-wq workers to exit when unused

Li Chen <[email protected]>
io_uring/io-wq: add exit-on-idle state

-------------

Diffstat:

 Makefile                                           |   4 +-
 drivers/base/base.h                                |   9 +
 drivers/base/bus.c                                 |   2 +-
 drivers/base/dd.c                                  |   2 +-
 drivers/bluetooth/btusb.c                          |   2 +
 drivers/bus/fsl-mc/fsl-mc-bus.c                    |   6 +-
 drivers/crypto/intel/iaa/iaa_crypto_main.c         |  12 +-
 drivers/crypto/marvell/octeontx/otx_cptpf_ucode.c  |   2 +-
 drivers/crypto/omap-crypto.c                       |   2 +-
 drivers/crypto/virtio/virtio_crypto_core.c         |   5 +
 .../crypto/virtio/virtio_crypto_skcipher_algs.c    |   2 -
 drivers/gpio/gpio-omap.c                           |  22 +-
 drivers/gpu/drm/exynos/exynos_drm_vidi.c           |  38 +-
 drivers/net/wireless/realtek/rtl8xxxu/core.c       |   1 +
 drivers/net/wireless/realtek/rtw88/main.c          |   4 +-
 drivers/pci/endpoint/pci-ep-cfs.c                  |  15 +-
 drivers/scsi/qla2xxx/qla_gs.c                      |  41 +-
 drivers/scsi/qla2xxx/qla_init.c                    |  28 +-
 drivers/scsi/qla2xxx/qla_isr.c                     |  19 +-
 drivers/scsi/qla2xxx/qla_os.c                      |   3 +-
 fs/erofs/fileio.c                                  |   7 +-
 fs/hfs/mdb.c                                       |  35 +-
 fs/hfs/super.c                                     |  10 +-
 fs/nilfs2/sufile.c                                 |   4 +
 fs/smb/client/cached_dir.h                         |   8 +-
 fs/smb/client/smbdirect.c                          | 523 ++++++++++++++++-----
 fs/smb/common/smbdirect/smbdirect_socket.h         |  18 +
 fs/smb/server/mgmt/user_session.c                  |   5 +
 fs/smb/server/mgmt/user_session.h                  |   1 +
 fs/smb/server/server.c                             |   6 +-
 fs/smb/server/smb2pdu.c                            |  12 +-
 fs/smb/server/transport_rdma.c                     | 147 +++++-
 fs/smb/server/transport_tcp.c                      |   3 +-
 fs/xfs/scrub/btree.c                               |   7 +-
 io_uring/io-wq.c                                   |  27 +-
 io_uring/io-wq.h                                   |   1 +
 io_uring/tctx.c                                    |  11 +
 sound/hda/codecs/conexant.c                        |   1 +
 38 files changed, 799 insertions(+), 246 deletions(-)