Skip to content

6.19.10-rc1 review

Greg Kroah-Hartman linux-cifs linux-hardening linux-hyperv linux-patches linux-tegra lkml loongarch nouveau stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest220 patches 17 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/220NFSD: Defer sub-object cleanup in export put callbacksfs/nfsd/export.c fs/nfsd/export.h fs/nfsd/nfsctl.c+66 -120 replies
2/220NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fdfs/nfsd/nfsctl.c+12 -20 replies
3/220nfsd: fix heap overflow in NFSv4.0 LOCK replay cachefs/nfsd/nfs4xdr.c fs/nfsd/state.h+19 -70 replies
4/220selftests/hid: fix compilation when bpf_wq and hid_device are not exportedtools/testing/selftests/hid/progs/hid_bpf_helpers.h+12 -00 replies
5/220HID: bpf: prevent buffer overflow in hid_hw_requestdrivers/hid/bpf/hid_bpf_dispatch.c+2 -00 replies
6/220sunrpc: fix cache_request leak in cache_releasenet/sunrpc/cache.c+21 -50 replies
7/220nvdimm/bus: Fix potential use after free in asynchronous initializationdrivers/nvdimm/bus.c+3 -20 replies
8/220crash_dump: dont log dm-crypt key bytes in read_key_from_user_keyingkernel/crash_dump_dm_crypt.c+2 -20 replies
9/220mm/rmap: fix incorrect pte restoration for lazyfree foliosmm/rmap.c+8 -10 replies
10/220mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()mm/huge_memory.c+2 -10 replies
11/220mm/huge_memory: fix early failure try_to_migrate() when split huge pmd for shared THPmm/rmap.c+9 -30 replies
12/220LoongArch: Give more information if kmem access failedarch/loongarch/include/asm/uaccess.h+12 -20 replies
13/220LoongArch: No need to flush icache if text copy failedarch/loongarch/kernel/inst.c+4 -20 replies
14/220NFC: nxp-nci: allow GPIOs to sleepdrivers/nfc/nxp-nci/i2c.c+2 -20 replies
15/220net: macb: fix use-after-free access to PTP clockdrivers/net/ethernet/cadence/macb_ptp.c+3 -10 replies
16/220bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handlerdrivers/net/ethernet/broadcom/bnxt/bnxt.c drivers/net/ethernet/broadcom/bnxt/bnxt.h+3 -10 replies
17/220parisc: Flush correct cache in cacheflush() syscallarch/parisc/kernel/cache.c+2 -20 replies
18/220batman-adv: avoid OGM aggregation when skb tailroom is insufficientnet/batman-adv/bat_iv_ogm.c+3 -00 replies
19/220mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stationsnet/mac80211/chan.c+4 -20 replies
20/220crypto: padlock-sha - Disable for Zhaoxin processordrivers/crypto/padlock-sha.c+7 -00 replies
21/220Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()net/bluetooth/l2cap_core.c+2 -20 replies
22/220Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before accessnet/bluetooth/l2cap_core.c+4 -20 replies
23/220drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected()drivers/gpu/drm/amd/amdgpu/amdgpu_device.c+2 -20 replies
24/220smb: client: fix krb5 mount with username optionfs/smb/client/connect.c+4 -00 replies
25/220ksmbd: unset conn->binding on failed binding requestfs/smb/server/smb2pdu.c+1 -00 replies
26/220ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATIONfs/smb/server/smb2pdu.c+4 -40 replies
27/220drm/i915/dsc: Add Selective Update register definitionsdrivers/gpu/drm/i915/display/intel_vdsc_regs.h+12 -00 replies
28/220drm/i915/dsc: Add helper for writing DSC Selective Update ET parametersdrivers/gpu/drm/i915/display/intel_vdsc.c drivers/gpu/drm/i915/display/intel_vdsc.h+26 -00 replies
29/220drm/i915/psr: Write DSC parameters on Selective Update in ET modedrivers/gpu/drm/i915/display/intel_psr.c+10 -00 replies
30/220LoongArch: Check return values for set_memory_{rw,rox}arch/loongarch/kernel/inst.c+13 -20 replies
31/220net: macb: Introduce gem_init_rx_ring()drivers/net/ethernet/cadence/macb_main.c+9 -40 replies
32/220net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resumedrivers/net/ethernet/cadence/macb_main.c+10 -00 replies
33/220firmware: stratix10-svc: Delete some stray tabsdrivers/firmware/stratix10-svc.c+7 -70 replies
34/220firmware: stratix10-svc: Add Multi SVC clients supportdrivers/firmware/stratix10-svc.c include/linux/firmware/intel/stratix10-svc-client.h+130 -1060 replies
35/220netconsole: fix sysdata_release_enabled_show checking wrong flagdrivers/net/netconsole.c+1 -10 replies
36/220crypto: atmel-sha204a - Fix OOM ->tfm_count leakdrivers/crypto/atmel-sha204a.c+3 -20 replies
37/220cifs: open files should not hold ref on superblockfs/smb/client/cifsfs.c fs/smb/client/cifsproto.h fs/smb/client/file.c +2 more+50 -130 replies
38/220drm/xe: Fix memory leak in xe_vm_madvise_ioctldrivers/gpu/drm/xe/xe_vm_madvise.c+2 -10 replies
39/220ipmi: Consolidate the run to completion checking for xmit msgs lockdrivers/char/ipmi/ipmi_msghandler.c+24 -180 replies
40/220ipmi:msghandler: Handle error returns from the SMI senderdrivers/char/ipmi/ipmi_msghandler.c+68 -320 replies
41/220ata: libata-core: disable LPM on ADATA SU680 SSDdrivers/ata/libata-core.c+3 -00 replies
42/220ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in()drivers/ata/libata-scsi.c+1 -10 replies
43/220mmc: sdhci-pci-gli: fix GL9750 DMA write corruptiondrivers/mmc/host/sdhci-pci-gli.c+9 -00 replies
44/220mmc: sdhci: fix timing selection for 1-bit bus widthdrivers/mmc/host/sdhci.c+8 -10 replies
45/220pmdomain: mediatek: Fix power domain countdrivers/pmdomain/mediatek/mtk-pm-domains.c+1 -10 replies
46/220pmdomain: bcm: bcm2835-power: Increase ASB control timeoutdrivers/pmdomain/bcm/bcm2835-power.c+4 -80 replies
47/220spi: fix use-after-free on controller registration failuredrivers/spi/spi.c+4 -40 replies
48/220spi: fix statistics allocationdrivers/spi/spi.c+8 -90 replies
49/220mtd: spi-nor: Fix RDCR controller capability core checkdrivers/mtd/spi-nor/core.c+1 -10 replies
50/220mtd: rawnand: pl353: make sure optimal timings are applieddrivers/mtd/nand/raw/pl35x-nand-controller.c+3 -00 replies
51/220mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init()drivers/mtd/nand/raw/cadence-nand-controller.c+1 -10 replies
52/220mtd: Avoid boot crash in RedBoot partition table parserdrivers/mtd/parsers/redboot.c+3 -30 replies
53/220iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retrydrivers/iommu/intel/dmar.c+1 -20 replies
54/220iommu/vt-d: Only handle IOPF for SVA when PRI is supporteddrivers/iommu/intel/svm.c+8 -40 replies
55/220io_uring/poll: fix multishot recv missing EOF on wakeup raceio_uring/poll.c+7 -20 replies
56/220io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOFio_uring/kbuf.c+4 -00 replies
57/220io_uring/kbuf: propagate BUF_MORE through early buffer commit pathinclude/linux/io_uring_types.h io_uring/kbuf.c+10 -30 replies
58/220vt: save/restore unicode screen buffer for alternate screendrivers/tty/vt/vt.c include/linux/console_struct.h+9 -00 replies
59/220serial: 8250_pci: add support for the AX99100drivers/tty/serial/8250/8250_pci.c+17 -00 replies
60/220serial: 8250: Fix TX deadlock when using DMAdrivers/tty/serial/8250/8250_dma.c+15 -00 replies
61/220serial: 8250: always disable IRQ during THRE testdrivers/tty/serial/8250/8250_port.c+2 -40 replies
62/220serial: 8250: Protect LCR write in shutdowndrivers/tty/serial/8250/8250_port.c+6 -50 replies
63/220serial: 8250_dw: Avoid unnecessary LCR writesdrivers/tty/serial/8250/8250_dw.c+31 -00 replies
64/220serial: 8250: Add serial8250_handle_irq_locked()drivers/tty/serial/8250/8250_port.c include/linux/serial_8250.h+17 -80 replies
65/220serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handlingdrivers/tty/serial/8250/8250_dw.c+21 -160 replies
66/220serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt stormdrivers/tty/serial/8250/8250_dw.c+63 -40 replies
67/220serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSYdrivers/tty/serial/8250/8250_port.c+6 -00 replies
68/220serial: 8250_dw: Ensure BUSY is deasserteddrivers/tty/serial/8250/8250.h drivers/tty/serial/8250/8250_dw.c drivers/tty/serial/8250/8250_port.c+161 -550 replies
69/220serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWNdrivers/tty/serial/serial_core.c+4 -10 replies
70/220serial: uartlite: fix PM runtime usage count underflow on probedrivers/tty/serial/uartlite.c+1 -00 replies
71/220drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplugdrivers/gpu/drm/drm_file.c drivers/gpu/drm/drm_mode_config.c+10 -40 replies
72/220drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END}drivers/gpu/drm/amd/display/dc/resource/dcn32/dcn32_resource.c+3 -00 replies
73/220drm/amdgpu/gmc9.0: add bounds checking for ciddrivers/gpu/drm/amd/amdgpu/gmc_v9_0.c+14 -70 replies
74/220drm/amdgpu/mmhub2.0: add bounds checking for ciddrivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c+6 -30 replies
75/220drm/amdgpu/mmhub2.3: add bounds checking for ciddrivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c+2 -10 replies
76/220drm/amdgpu/mmhub3.0.1: add bounds checking for ciddrivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c+2 -10 replies
77/220drm/amdgpu/mmhub3.0.2: add bounds checking for ciddrivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c+2 -10 replies
78/220drm/amdgpu/mmhub3.0: add bounds checking for ciddrivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c+2 -10 replies
79/220drm/amdgpu/mmhub4.1.0: add bounds checking for ciddrivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c+2 -10 replies
80/220drm/imagination: Fix deadlock in soft reset sequencedrivers/gpu/drm/imagination/pvr_power.c+10 -10 replies
81/220drm/imagination: Synchronize interrupts before suspending the GPUdrivers/gpu/drm/imagination/pvr_device.c drivers/gpu/drm/imagination/pvr_power.c+8 -200 replies
82/220drm/radeon: apply state adjust rules to some additional HAINAN vairantsdrivers/gpu/drm/radeon/si_dpm.c+3 -10 replies
83/220drm/amdgpu: apply state adjust rules to some additional HAINAN vairantsdrivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c+3 -10 replies
84/220drm/amdgpu: Limit BO list entry count to prevent resource exhaustiondrivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c+4 -00 replies
85/220drm/amdgpu: rework how we handle TLB fencesdrivers/gpu/drm/amd/amdgpu/amdgpu_vm.c drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h+8 -10 replies
86/220drm/i915/dmc: Fix an unlikely NULL pointer deference at probedrivers/gpu/drm/i915/display/intel_display_power_well.c drivers/gpu/drm/i915/display/intel_dmc.c+2 -30 replies
87/220drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_statedrivers/gpu/drm/i915/display/intel_display_types.h drivers/gpu/drm/i915/display/intel_psr.c+4 -20 replies
88/220drm/i915/psr: Disable PSR on update_m_n and update_lrrdrivers/gpu/drm/i915/display/intel_psr.c+2 -00 replies
89/220drm/xe/guc: Ensure CT state transitions via STOP before DISABLEDdrivers/gpu/drm/xe/xe_guc_ct.c+1 -00 replies
90/220drm/xe/oa: Allow reading after disabling OA streamdrivers/gpu/drm/xe/xe_oa.c+5 -20 replies
91/220drm/xe: Always kill exec queues in xe_guc_submit_pause_abortdrivers/gpu/drm/xe/xe_guc_submit.c+1 -20 replies
92/220drm/xe: Fix missing runtime PM reference in ccs_mode_storedrivers/gpu/drm/xe/xe_gt_ccs_mode.c+2 -00 replies
93/220drm/xe: Open-code GGTT MMIO access protectiondrivers/gpu/drm/xe/xe_ggtt.c drivers/gpu/drm/xe/xe_ggtt_types.h+8 -70 replies
94/220Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQnet/bluetooth/l2cap_core.c+9 -10 replies
95/220btrfs: log new dentries when logging parent dir of a conflicting inodefs/btrfs/tree-log.c+6 -00 replies
96/220btrfs: tree-checker: fix misleading root drop_level error messagefs/btrfs/tree-checker.c+1 -10 replies
97/220soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()drivers/soc/microchip/mpfs-sys-controller.c+9 -40 replies
98/220cache: starfive: fix device node leak in starlink_cache_init()drivers/cache/starfive_starlink_cache.c+2 -20 replies
99/220cache: ax45mp: Fix device node reference leak in ax45mp_cache_init()drivers/cache/ax45mp_cache.c+2 -20 replies
100/220soc: rockchip: grf: Add missing of_node_put() when returningdrivers/soc/rockchip/grf.c+1 -00 replies
101/220soc: fsl: qbman: fix race condition in qman_destroy_fqdrivers/soc/fsl/qbman/qman.c+22 -20 replies
102/220soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources()drivers/soc/fsl/qe/qmc.c+2 -20 replies
103/220tee: shm: Remove refcounting of kernel pagesdrivers/tee/tee_shm.c+0 -270 replies
104/220wifi: mac80211: remove keys after disabling beaconingnet/mac80211/cfg.c+6 -60 replies
105/220wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive timesnet/mac80211/sta_info.c+5 -20 replies
106/220wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.net/mac80211/debugfs.c+5 -90 replies
107/220wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_downnet/wireless/pmsr.c+1 -00 replies
108/220arm64: dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0 card regulatorarch/arm64/boot/dts/renesas/rzt2h-n2h-evk-common.dtsi+1 -00 replies
109/220arm64: dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0 regulatorarch/arm64/boot/dts/renesas/rzv2-evk-cn15-sd.dtso+1 -00 replies
110/220arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodesarch/arm64/boot/dts/renesas/r9a09g057.dtsi+0 -300 replies
111/220arm64: dts: renesas: r9a09g077: Fix CPG register region sizesarch/arm64/boot/dts/renesas/r9a09g077.dtsi+2 -20 replies
112/220arm64: dts: renesas: r9a09g087: Fix CPG register region sizesarch/arm64/boot/dts/renesas/r9a09g087.dtsi+2 -20 replies
113/220arm64: dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2arch/arm64/boot/dts/renesas/rzg3s-smarc-som.dtsi+1 -10 replies
114/220arm64: dts: renesas: r8a78000: Fix out-of-range SPI interrupt numbersarch/arm64/boot/dts/renesas/r8a78000.dtsi+8 -80 replies
115/220firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap()drivers/firmware/arm_ffa/driver.c+4 -40 replies
116/220firmware: arm_scpi: Fix device_node reference leak in probe pathdrivers/firmware/arm_scpi.c+3 -20 replies
117/220firmware: arm_scmi: Fix NULL dereference on notify error pathdrivers/firmware/arm_scmi/notify.c+2 -20 replies
118/220Bluetooth: LE L2CAP: Disconnect if received packets SDU exceeds IMTUnet/bluetooth/l2cap_core.c+7 -30 replies
119/220Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDUnet/bluetooth/l2cap_core.c+1 -00 replies
120/220Bluetooth: SMP: make SM/PER/KDU/BI-04-C happynet/bluetooth/smp.c+1 -10 replies
121/220Bluetooth: ISO: Fix defer tests being unstablenet/bluetooth/hci_conn.c+2 -20 replies
122/220Bluetooth: hci_sync: Fix hci_le_create_conn_syncnet/bluetooth/hci_sync.c+1 -10 replies
123/220Bluetooth: MGMT: Fix list corruption and UAF in command complete handlersnet/bluetooth/mgmt.c+2 -50 replies
124/220Bluetooth: HIDP: Fix possible UAFnet/bluetooth/hidp/core.c+14 -20 replies
125/220Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_usernet/bluetooth/l2cap_core.c+8 -120 replies
126/220Bluetooth: qca: fix ROM version reading on WCN3998 chipsdrivers/bluetooth/btqca.c+2 -00 replies
127/220af_unix: Give up GC if MSG_PEEK intervened.net/unix/af_unix.c net/unix/af_unix.h net/unix/garbage.c+54 -280 replies
128/220bridge: cfm: Fix race condition in peer_mep deletionnet/bridge/br_cfm.c+2 -20 replies
129/220net/rose: fix NULL pointer dereference in rose_transmit_link on reconnectnet/rose/af_rose.c+5 -00 replies
130/220ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATSinclude/linux/netdevice.h include/net/ip_tunnels.h+24 -90 replies
131/220mpls: add missing unregister_netdevice_notifier to mpls_initnet/mpls/af_mpls.c+1 -00 replies
132/220netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()net/netfilter/nf_conntrack_netlink.c+25 -10 replies
133/220netfilter: conntrack: add missing netlink policy validationsnet/netfilter/nf_conntrack_netlink.c net/netfilter/nf_conntrack_proto_sctp.c+3 -20 replies
134/220netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()net/netfilter/nf_conntrack_sip.c+5 -10 replies
135/220netfilter: nf_flow_table_ip: reset mac header before vlan pushnet/netfilter/nf_flow_table_ip.c+1 -00 replies
136/220netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS casenet/netfilter/nf_conntrack_h323_asn1.c+2 -00 replies
137/220nf_tables: nft_dynset: fix possible stateful expression memleak in error pathinclude/net/netfilter/nf_tables.h net/netfilter/nf_tables_api.c net/netfilter/nft_dynset.c+13 -30 replies
138/220netfilter: nft_ct: drop pending enqueued packets on removalnet/netfilter/nft_ct.c+4 -00 replies
139/220netfilter: xt_CT: drop pending enqueued packets on template removalnet/netfilter/xt_CT.c+4 -00 replies
140/220netfilter: xt_time: use unsigned int for monthday bit shiftnet/netfilter/xt_time.c+2 -20 replies
141/220netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()net/netfilter/nf_conntrack_h323_asn1.c+2 -00 replies
142/220crypto: ccp - Fix leaking the same page twicedrivers/crypto/ccp/sev-dev.c+1 -30 replies
143/220net: bcmgenet: increase WoL poll timeoutdrivers/net/ethernet/broadcom/genet/bcmgenet_wol.c+1 -10 replies
144/220net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardowndrivers/net/ethernet/microsoft/mana/hw_channel.c+3 -30 replies
145/220net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy modedrivers/net/ethernet/ti/icssg/icssg_common.c+5 -00 replies
146/220sched: idle: Consolidate the handling of two special caseskernel/sched/idle.c+21 -90 replies
147/220PM: runtime: Fix a race condition related to device removaldrivers/base/power/runtime.c+1 -00 replies
148/220bonding: prevent potential infinite loop in bond_header_parse()drivers/firewire/net.c drivers/net/bonding/bond_main.c include/linux/etherdevice.h +6 more+28 -180 replies
149/220net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()net/smc/af_smc.c net/smc/smc.h net/smc/smc_close.c+23 -70 replies
150/220net/sched: teql: Fix double-free in teql_master_xmitinclude/net/sch_generic.h net/sched/sch_generic.c net/sched/sch_teql.c+30 -320 replies
151/220net: airoha: Remove airoha_dev_stop() in airoha_remove()drivers/net/ethernet/airoha/airoha_eth.c+0 -10 replies
152/220net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds checkdrivers/net/usb/cdc_ncm.c+3 -20 replies
153/220net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds checkdrivers/net/usb/cdc_ncm.c+3 -20 replies
154/220clsact: Fix use-after-free in init/destroy rollback asymmetryinclude/net/sch_generic.h net/sched/sch_ingress.c+13 -60 replies
155/220net: usb: aqc111: Do not perform PM inside suspend callbackdrivers/net/usb/aqc111.c+6 -60 replies
156/220ACPICA: Update the format of Arg3 of _DSMdrivers/acpi/acpica/acpredef.h+1 -10 replies
157/220igc: fix missing update of skb->tail in igc_xmit_frame()drivers/net/ethernet/intel/igc/igc_main.c+2 -50 replies
158/220igc: fix page fault in XDP TX timestamps handlingdrivers/net/ethernet/intel/igc/igc.h drivers/net/ethernet/intel/igc/igc_main.c drivers/net/ethernet/intel/igc/igc_ptp.c+42 -00 replies
159/220iavf: fix VLAN filter lost on add/delete racedrivers/net/ethernet/intel/iavf/iavf_main.c+6 -30 replies
160/220libie: prevent memleak in fwlog codedrivers/net/ethernet/intel/libie/fwlog.c+36 -130 replies
161/220wifi: mac80211: fix NULL deref in mesh_matches_local()net/mac80211/mesh.c+3 -00 replies
162/220wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroomdrivers/net/wireless/ti/wlcore/tx.c+1 -10 replies
163/220wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failuredrivers/net/wireless/ath/ath9k/channel.c drivers/net/wireless/mediatek/mt76/scan.c drivers/net/wireless/virtual/mac80211_hwsim.c +2 more+9 -100 replies
164/220ACPI: processor: Fix previous acpi_processor_errata_piix4() fixdrivers/acpi/acpi_processor.c+8 -70 replies
165/220netdevsim: drop PSP ext ref on forward failuredrivers/net/netdevsim/netdev.c+4 -10 replies
166/220net: macb: fix uninitialized rx_fs_lockdrivers/net/ethernet/cadence/macb_main.c+3 -00 replies
167/220ipv6: add NULL checks for idev in SRv6 pathsnet/ipv6/exthdrs.c net/ipv6/seg6_hmac.c+6 -00 replies
168/220net/mlx5: qos: Restrict RTNL area to avoid a lock cycledrivers/net/ethernet/mellanox/mlx5/core/esw/qos.c+9 -140 replies
169/220net/mlx5e: Prevent concurrent access to IPSec ASO contextdrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_offload.c+9 -90 replies
170/220net/mlx5e: Fix race condition during IPSec ESN updatedrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_offload.c+14 -190 replies
171/220udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=ninclude/net/udp_tunnel.h+1 -10 replies
172/220net: bonding: fix NULL deref in bond_debug_rlb_hash_showdrivers/net/bonding/bond_debugfs.c+11 -50 replies
173/220netfilter: bpf: defer hook memory release until rcu readers are donenet/netfilter/nf_bpf_link.c+1 -10 replies
174/220netfilter: nf_tables: release flowtable after rcu grace period on errornet/netfilter/nf_tables_api.c+1 -00 replies
175/220nfnetlink_osf: validate individual option lengths in fingerprintsnet/netfilter/nfnetlink_osf.c+13 -00 replies
176/220net: mvpp2: guard flow control update with global_tx_fc in buffer switchingdrivers/net/ethernet/marvell/mvpp2/mvpp2_main.c+2 -20 replies
177/220net: shaper: protect late read accesses to the hierarchynet/shaper/shaper.c+22 -40 replies
178/220net: shaper: protect from late creation of hierarchyDocumentation/netlink/specs/net_shaper.yaml net/shaper/shaper.c net/shaper/shaper_nl_gen.c +1 more+89 -740 replies
179/220net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error pathsdrivers/net/dsa/bcm_sf2.c+6 -20 replies
180/220icmp: fix NULL pointer dereference in icmp_tag_validation()net/ipv4/icmp.c+3 -10 replies
181/220MPTCP: fix lock class name family in pm_nl_create_listen_socketnet/mptcp/pm_kernel.c+1 -10 replies
182/220hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data() return valuedrivers/hwmon/pmbus/ina233.c+2 -00 replies
183/220hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return valuedrivers/hwmon/pmbus/mp2975.c+2 -00 replies
184/220hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before using its return valuedrivers/hwmon/pmbus/mp2869.c+21 -140 replies
185/220hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()drivers/hwmon/pmbus/isl68137.c+5 -20 replies
186/220i2c: cp2615: fix serial string NULL-deref at probedrivers/i2c/busses/i2c-cp2615.c+3 -00 replies
187/220i2c: fsi: Fix a potential leak in fsi_i2c_probe()drivers/i2c/busses/i2c-fsi.c+1 -00 replies
188/220i2c: pxa: defer reset on Armada 3700 when recovery is useddrivers/i2c/busses/i2c-pxa.c+16 -10 replies
189/220irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in rpmi_sysmsi_probe()drivers/irqchip/irq-riscv-rpmi-sysmsi.c+1 -00 replies
190/220perf/x86/intel: Add missing branch counters constraint applyarch/x86/events/intel/core.c+21 -100 replies
191/220perf/x86: Move event pointer setup earlier in x86_pmu_enable()arch/x86/events/core.c+2 -10 replies
192/220ring-buffer: Fix to update per-subbuf entries of persistent ring bufferkernel/trace/ring_buffer.c+1 -10 replies
193/220tracing: Fix failure to read user space from system call trace eventskernel/trace/trace.c+17 -00 replies
194/220tracing: Fix trace_marker copy link list updateskernel/trace/trace.c+10 -90 replies
195/220x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRsarch/x86/kernel/cpu/mce/amd.c+11 -60 replies
196/220x86/platform/uv: Handle deconfigured socketsarch/x86/kernel/apic/x2apic_uv_x.c+16 -20 replies
197/220binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3 and ELF_HWCAP4fs/binfmt_elf_fdpic.c include/linux/auxvec.h+7 -10 replies
198/220mtd: rawnand: serialize lock/unlock against other NAND operationsdrivers/mtd/nand/raw/nand_base.c+12 -20 replies
199/220mtd: rawnand: brcmnand: skip DMA during panic writedrivers/mtd/nand/raw/brcmnand/brcmnand.c+2 -40 replies
200/220x86/hyperv: Use __naked attribute to fix stackless C functionarch/x86/hyperv/hv_crash.c+43 -390 replies
201/220arm_mpam: Fix null pointer dereference when restoring bandwidth countersdrivers/resctrl/mpam_devices.c+2 -00 replies
202/220mshv: Fix use-after-free in mshv_map_user_memory error pathdrivers/hv/mshv_root_main.c+1 -10 replies
203/220spi: amlogic: spifc-a4: Remove redundant clock cleanupdrivers/spi/spi-amlogic-spifc-a4.c+7 -390 replies
204/220spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()drivers/spi/spi-amlogic-spisg.c+4 -80 replies
205/220drm/vmwgfx: Dont overwrite KMS surface dirty trackerdrivers/gpu/drm/vmwgfx/vmwgfx_kms.c+2 -10 replies
206/220iommu: Fix mapping check for 0x0 to avoid re-mapping itdrivers/iommu/iommu.c+5 -10 replies
207/220iommu/sva: Fix crash in iommu_sva_unbind_device()drivers/iommu/iommu-sva.c+6 -60 replies
208/220iommu/amd: Block identity domain when SNP enableddrivers/iommu/amd/iommu.c+14 -10 replies
209/220drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr()drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c+2 -20 replies
210/220drm/amd: fix dcn 2.01 checkdrivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c+4 -40 replies
211/220drm/bridge: dw-hdmi-qp: fix multi-channel audio outputdrivers/gpu/drm/bridge/synopsys/dw-hdmi-qp.c+1 -10 replies
212/220ksmbd: fix use-after-free of share_conf in compound requestfs/smb/server/smb2pdu.c+2 -00 replies
213/220ksmbd: fix use-after-free in durable v2 replay of active file handlesfs/smb/server/smb2pdu.c+5 -10 replies
214/220drm/i915/gt: Check set_default_submission() before deferencingdrivers/gpu/drm/i915/gt/intel_engine_cs.c+2 -10 replies
215/220fs/tests: exec: Remove bad test vectorfs/tests/exec_kunit.c+0 -30 replies
216/220lib/bootconfig: check xbc_init_node() return in override pathlib/bootconfig.c+2 -10 replies
217/220tools/bootconfig: fix fd leak in load_xbc_file() on fstat failuretools/bootconfig/main.c+5 -20 replies
218/220arm64: realm: Fix PTE_NS_SHARED for 52bit PA supportarch/arm64/kernel/rsi.c+2 -10 replies
219/220drm/xe/guc: Fail immediately on GuC load errordrivers/gpu/drm/xe/xe_guc.c+3 -30 replies
220/220hwmon: (max6639) Fix pulses-per-revolution implementationdrivers/hwmon/max6639.c+5 -50 replies

Reviews trailers per patch

115 of 220 patches have a Reviewed-by or Acked-by.

PatchJeff LaytonNeilBrownOlga KornievskaiaLorenzo StoakesDavid Hildenbrand (Arm)Baolin WangZi YanLance YangGavin GuoLorenzo Stoakes (Oracle)Michael ChanAlex DeucherNicholas CarliniJiri KosinaThomas WeißschuhDave JiangBarry SongWei YangAnkit NautiyalShuicheng LinMatthew BrostBreno LeitaoRafael J. Wysocki (Intel)Mohammad-Khaled BayanMartin K. PetersenAdrian HunterBen ChuangAngeloGioacchino Del RegnoStefan WahrenTudor AmbarusTakahiro KuwanoPratyush YadavAlok TiwariShuai XueSamiullah KhawajaKevin TianMuchun SongMaximilian LueerBandal, ShankarMurthy, ShanthAndy ShevchenkoSimon HormanThomas HellströmAlex HungBenjamin ChengQuanyang WangChristian KönigPrike LiangTao LiuJani NikulaSuraj KandpalUmesh Nerlige RamappaStuart SummersMatthew AuldZhanjun DongBoris BurkovQu WenruoDavid SterbaJonathan CameronCHAMPSEIX ThomasHerve CodinaSven PüschelMiriam Rachel KorenblitGeert UytterhoevenDan CarpenterMatt CosterEric DumazetGuillaume NaultPablo Neira AyusoJenny Guanni QuTom LendackyTycho Andersen (AMD)Florian FainelliHaiyang ZhangChristian LoehleFrederic WeisbeckerQais YousefAboorva DevarajanJiayuan ChenXianrui DongMartin KaFai LauPaul MenzelAvigail DahanFlorian BezdekaRafal RomanowskiAleksandr LoktionovRinitha SGuenter RoeckDaniel Zahkasoufiane el hachmiBartosz GolaszewskiIdo SchimmelDragos TatuleaJonas GorskiMatthieu Baerts (NGI0)Bence CsókásLeon RomanovskyRobert MarkoLinus WalleijRahul PathakYazen GhannamSteve WahlMichal KoutnýMark BrownCyrill GorcunovAlexander MikhalitsynWilliam ZhangAndrew CooperMukesh RathorUros BizjakJames MorseMaaz MombasawalaVasant HegdeJason GunthorpeYi LiuLu BaoluTom ChungCristian CiocalteaNamjae JeonGunnar KudrjavetsAndrea MayerSteven PriceCatalin MarinasBrett A C SheffieldRonald WarsowPavel Machek (CIP)Peter SchneiderShuah KhanRon EconomosJon HunterTakeshi OgasawaraJustin M. ForbesDileep MalepuMiguel OjedaBarry K. NathanShung-Hsi Yu
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
1/220Reviwed-by R-b T-b
2/220R-b R-b T-b
3/220T-b
4/220A-b R-b
5/220A-b
6/220
7/220R-b
8/220
9/220R-b A-b T-b R-b R-b
10/220R-b T-b A-b
11/220A-b R-b R-b T-b R-b R-b R-b
12/220
13/220
14/220
15/220
16/220R-b
17/220
18/220
19/220
20/220
21/220
22/220
23/220A-b
24/220
25/220
26/220
27/220R-b
28/220R-b
29/220R-b
30/220
31/220R-b
32/220R-b T-b
33/220
34/220
35/220
36/220
37/220
38/220R-b R-b
39/220R-b
40/220R-b
41/220T-b R-b
42/220
43/220A-b R-b
44/220A-b
45/220R-b
46/220R-b
47/220
48/220
49/220A-b A-b R-b
50/220
51/220R-b
52/220
53/220T-b R-b R-b
54/220R-b
55/220
56/220
57/220
58/220
59/220
60/220
61/220R-b T-b
62/220T-b T-b R-b
63/220T-b T-b R-b
64/220T-b T-b R-b
65/220T-b T-b R-b
66/220T-b T-b R-b
67/220T-b T-b R-b
68/220T-b T-b R-b
69/220
70/220
71/220R-b
72/220R-b
73/220R-b
74/220R-b
75/220R-b
76/220R-b
77/220R-b
78/220R-b
79/220R-b
80/220R-b
81/220R-b
82/220
83/220
84/220R-b
85/220R-b
86/220T-b R-b
87/220R-b
88/220R-b
89/220R-b
90/220R-b
91/220R-b
92/220R-b R-b
93/220R-b
94/220
95/220R-b
96/220R-b R-b
97/220
98/220R-b
99/220
100/220
101/220T-b
102/220A-b
103/220T-b
104/220R-b
105/220
106/220
107/220
108/220R-b
109/220R-b
110/220R-b
111/220R-b
112/220R-b
113/220R-b
114/220
115/220
116/220
117/220R-b
118/220
119/220
120/220
121/220
122/220
123/220
124/220T-b
125/220
126/220R-b
127/220
128/220R-b
129/220R-b
130/220R-b
131/220
132/220
133/220
134/220
135/220A-b
136/220
137/220
138/220
139/220
140/220T-b
141/220T-b
142/220R-b R-b
143/220R-b
144/220R-b R-b
145/220R-b
146/220R-b R-b R-b R-b
147/220
148/220R-b T-b
149/220R-b
150/220T-b
151/220R-b
152/220
153/220
154/220A-b
155/220
156/220
157/220R-b R-b T-b
158/220R-b T-b R-b
159/220T-b
160/220R-b R-b T-b
161/220
162/220
163/220
164/220R-b
165/220R-b
166/220
167/220R-b
168/220R-b
169/220R-b
170/220R-b
171/220
172/220
173/220
174/220
175/220
176/220R-b
177/220
178/220
179/220R-b R-b
180/220
181/220R-b
182/220
183/220
184/220
185/220
186/220R-b
187/220
188/220T-b R-b
189/220R-b
190/220
191/220
192/220
193/220
194/220
195/220R-b
196/220R-b
197/220R-b R-b R-b R-b
198/220R-b
199/220R-b R-b
200/220R-b R-b A-b
201/220R-b
202/220
203/220
204/220
205/220R-b
206/220R-b R-b
207/220R-b R-b R-b R-b
208/220R-b R-b
209/220R-b
210/220
211/220R-b
212/220A-b
213/220A-b
214/220R-b
215/220
216/220
217/220
218/220R-b R-b
219/220R-b
220/220

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 136 reviewers.

Read the v1 thread

Cover letter [PATCH 6.19 000/220] 6.19.10-rc1 review

This is the start of the stable review cycle for the 6.19.10 release. There are 220 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 25 Mar 2026 13:44:33 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.10-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.19.10-rc1

Guenter Roeck <[email protected]>
hwmon: (max6639) Fix pulses-per-revolution implementation

Daniele Ceraolo Spurio <[email protected]>
drm/xe/guc: Fail immediately on GuC load error

Suzuki K Poulose <[email protected]>
arm64: realm: Fix PTE_NS_SHARED for 52bit PA support

Josh Law <[email protected]>
tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure

Josh Law <[email protected]>
lib/bootconfig: check xbc_init_node() return in override path

Kees Cook <[email protected]>
fs/tests: exec: Remove bad test vector

Rahul Bukte <[email protected]>
drm/i915/gt: Check set_default_submission() before deferencing

Hyunwoo Kim <[email protected]>
ksmbd: fix use-after-free in durable v2 replay of active file handles

Hyunwoo Kim <[email protected]>
ksmbd: fix use-after-free of share_conf in compound request

Jonas Karlman <[email protected]>
drm/bridge: dw-hdmi-qp: fix multi-channel audio output

Andy Nguyen <[email protected]>
drm/amd: fix dcn 2.01 check

Srinivasan Shanmugam <[email protected]>
drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr()

Joe Damato <[email protected]>
iommu/amd: Block identity domain when SNP enabled

Lizhi Hou <[email protected]>
iommu/sva: Fix crash in iommu_sva_unbind_device()

Antheas Kapenekakis <[email protected]>

    iommu: Fix mapping check for 0x0 to avoid re-mapping it

Ian Forbes <[email protected]>
drm/vmwgfx: Don't overwrite KMS surface dirty tracker

Felix Gu <[email protected]>
spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()

Felix Gu <[email protected]>
spi: amlogic: spifc-a4: Remove redundant clock cleanup

Stanislav Kinsburskii <[email protected]>
mshv: Fix use-after-free in mshv_map_user_memory error path

Ben Horgan <[email protected]>
arm_mpam: Fix null pointer dereference when restoring bandwidth counters

Ard Biesheuvel <[email protected]>
x86/hyperv: Use __naked attribute to fix stackless C function

Kamal Dasu <[email protected]>
mtd: rawnand: brcmnand: skip DMA during panic write

Kamal Dasu <[email protected]>
mtd: rawnand: serialize lock/unlock against other NAND operations

Andrei Vagin <[email protected]>
binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3 and ELF_HWCAP4

Kyle Meyer <[email protected]>
x86/platform/uv: Handle deconfigured sockets

William Roche <[email protected]>
x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs

Steven Rostedt <[email protected]>
tracing: Fix trace_marker copy link list updates

Steven Rostedt <[email protected]>
tracing: Fix failure to read user space from system call trace events

Masami Hiramatsu (Google) <[email protected]>
ring-buffer: Fix to update per-subbuf entries of persistent ring buffer

Breno Leitao <[email protected]>
perf/x86: Move event pointer setup earlier in x86_pmu_enable()

Dapeng Mi <[email protected]>
perf/x86/intel: Add missing branch counters constraint apply

Felix Gu <[email protected]>
irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in rpmi_sysmsi_probe()

Gabor Juhos <[email protected]>
i2c: pxa: defer reset on Armada 3700 when recovery is used

Christophe JAILLET <[email protected]>
i2c: fsi: Fix a potential leak in fsi_i2c_probe()

Johan Hovold <[email protected]>
i2c: cp2615: fix serial string NULL-deref at probe

Sanman Pradhan <[email protected]>
hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()

Sanman Pradhan <[email protected]>
hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before using its return value

Sanman Pradhan <[email protected]>
hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value

Sanman Pradhan <[email protected]>
hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data() return value

Li Xiasong <[email protected]>
MPTCP: fix lock class name family in pm_nl_create_listen_socket

Weiming Shi <[email protected]>
icmp: fix NULL pointer dereference in icmp_tag_validation()

Anas Iqbal <[email protected]>
net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths

Jakub Kicinski <[email protected]>
net: shaper: protect from late creation of hierarchy

Jakub Kicinski <[email protected]>
net: shaper: protect late read accesses to the hierarchy

Muhammad Hammad Ijaz <[email protected]>
net: mvpp2: guard flow control update with global_tx_fc in buffer switching

Weiming Shi <[email protected]>
nfnetlink_osf: validate individual option lengths in fingerprints

Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: release flowtable after rcu grace period on error

Florian Westphal <[email protected]>
netfilter: bpf: defer hook memory release until rcu readers are done

Xiang Mei <[email protected]>
net: bonding: fix NULL deref in bond_debug_rlb_hash_show

Xiang Mei <[email protected]>
udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n

Jianbo Liu <[email protected]>
net/mlx5e: Fix race condition during IPSec ESN update

Jianbo Liu <[email protected]>
net/mlx5e: Prevent concurrent access to IPSec ASO context

Cosmin Ratiu <[email protected]>
net/mlx5: qos: Restrict RTNL area to avoid a lock cycle

Minhong He <[email protected]>
ipv6: add NULL checks for idev in SRv6 paths

Fedor Pchelkin <[email protected]>
net: macb: fix uninitialized rx_fs_lock

Wesley Atwell <[email protected]>
netdevsim: drop PSP ext ref on forward failure

Rafael J. Wysocki <[email protected]>
ACPI: processor: Fix previous acpi_processor_errata_piix4() fix

Felix Fietkau <[email protected]>
wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

Guenter Roeck <[email protected]>
wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom

Xiang Mei <[email protected]>
wifi: mac80211: fix NULL deref in mesh_matches_local()

Michal Swiatkowski <[email protected]>
libie: prevent memleak in fwlog code

Petr Oros <[email protected]>
iavf: fix VLAN filter lost on add/delete race

Zdenek Bouska <[email protected]>
igc: fix page fault in XDP TX timestamps handling

Kohei Enju <[email protected]>

    igc: fix missing update of skb->tail in igc_xmit_frame()

Saket Dumbre <[email protected]>
ACPICA: Update the format of Arg3 of _DSM

Nikola Z. Ivanov <[email protected]>
net: usb: aqc111: Do not perform PM inside suspend callback

Daniel Borkmann <[email protected]>
clsact: Fix use-after-free in init/destroy rollback asymmetry

Tobi Gaertner <[email protected]>
net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check

Tobi Gaertner <[email protected]>
net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check

Lorenzo Bianconi <[email protected]>
net: airoha: Remove airoha_dev_stop() in airoha_remove()

Jamal Hadi Salim <[email protected]>
net/sched: teql: Fix double-free in teql_master_xmit

Jiayuan Chen <[email protected]>
net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()

Eric Dumazet <[email protected]>
bonding: prevent potential infinite loop in bond_header_parse()

Bart Van Assche <[email protected]>
PM: runtime: Fix a race condition related to device removal

Rafael J. Wysocki <[email protected]>
sched: idle: Consolidate the handling of two special cases

Meghana Malladi <[email protected]>
net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode

Dipayaan Roy <[email protected]>
net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown

Justin Chen <[email protected]>
net: bcmgenet: increase WoL poll timeout

Guenter Roeck <[email protected]>
crypto: ccp - Fix leaking the same page twice

Jenny Guanni Qu <[email protected]>
netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()

Jenny Guanni Qu <[email protected]>
netfilter: xt_time: use unsigned int for monthday bit shift

Pablo Neira Ayuso <[email protected]>
netfilter: xt_CT: drop pending enqueued packets on template removal

Pablo Neira Ayuso <[email protected]>
netfilter: nft_ct: drop pending enqueued packets on removal

Pablo Neira Ayuso <[email protected]>
nf_tables: nft_dynset: fix possible stateful expression memleak in error path

Jenny Guanni Qu <[email protected]>
netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case

Eric Woudstra <[email protected]>
netfilter: nf_flow_table_ip: reset mac header before vlan push

Lukas Johannes Möller <[email protected]>
netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()

Florian Westphal <[email protected]>
netfilter: conntrack: add missing netlink policy validations

Hyunwoo Kim <[email protected]>
netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()

Sabrina Dubroca <[email protected]>
mpls: add missing unregister_netdevice_notifier to mpls_init

Eric Dumazet <[email protected]>
ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS

Jiayuan Chen <[email protected]>
net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect

Hyunwoo Kim <[email protected]>
bridge: cfm: Fix race condition in peer_mep deletion

Kuniyuki Iwashima <[email protected]>
af_unix: Give up GC if MSG_PEEK intervened.

Dmitry Baryshkov <[email protected]>
Bluetooth: qca: fix ROM version reading on WCN3998 chips

Shaurya Rane <[email protected]>
Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user

Luiz Augusto von Dentz <[email protected]>
Bluetooth: HIDP: Fix possible UAF

Wang Tao <[email protected]>
Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers

Michael Grzeschik <[email protected]>
Bluetooth: hci_sync: Fix hci_le_create_conn_sync

Luiz Augusto von Dentz <[email protected]>
Bluetooth: ISO: Fix defer tests being unstable

Christian Eggers <[email protected]>
Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy

Christian Eggers <[email protected]>
Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU

Christian Eggers <[email protected]>
Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU

Cristian Marussi <[email protected]>
firmware: arm_scmi: Fix NULL dereference on notify error path

Felix Gu <[email protected]>
firmware: arm_scpi: Fix device_node reference leak in probe path

Yeoreum Yun <[email protected]>
firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap()

Geert Uytterhoeven <[email protected]>
arm64: dts: renesas: r8a78000: Fix out-of-range SPI interrupt numbers

Claudiu Beznea <[email protected]>
arm64: dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2

Lad Prabhakar <[email protected]>
arm64: dts: renesas: r9a09g087: Fix CPG register region sizes

Lad Prabhakar <[email protected]>
arm64: dts: renesas: r9a09g077: Fix CPG register region sizes

Fabrizio Castro <[email protected]>

    arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes

Lad Prabhakar <[email protected]>
arm64: dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0 regulator

Lad Prabhakar <[email protected]>
arm64: dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0 card regulator

Peddolla Harshavardhan Reddy <[email protected]>

    wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down

Kuniyuki Iwashima <[email protected]>
wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.

Nicolas Cavallari <[email protected]>
wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times

Johannes Berg <[email protected]>
wifi: mac80211: remove keys after disabling beaconing

Matthew Wilcox <[email protected]>
tee: shm: Remove refcounting of kernel pages

Chen Ni <[email protected]>
soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources()

Richard Genoud <[email protected]>
soc: fsl: qbman: fix race condition in qman_destroy_fq

Shawn Lin <[email protected]>
soc: rockchip: grf: Add missing of_node_put() when returning

Felix Gu <[email protected]>
cache: ax45mp: Fix device node reference leak in ax45mp_cache_init()

Felix Gu <[email protected]>
cache: starfive: fix device node leak in starlink_cache_init()

Zilin Guan <[email protected]>
soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()

ZhengYuan Huang <[email protected]>
btrfs: tree-checker: fix misleading root drop_level error message

Filipe Manana <[email protected]>
btrfs: log new dentries when logging parent dir of a conflicting inode

Luiz Augusto von Dentz <[email protected]>
Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ

Matthew Brost <[email protected]>
drm/xe: Open-code GGTT MMIO access protection

Sanjay Yadav <[email protected]>
drm/xe: Fix missing runtime PM reference in ccs_mode_store

Matthew Brost <[email protected]>
drm/xe: Always kill exec queues in xe_guc_submit_pause_abort

Ashutosh Dixit <[email protected]>
drm/xe/oa: Allow reading after disabling OA stream

Zhanjun Dong <[email protected]>
drm/xe/guc: Ensure CT state transitions via STOP before DISABLED

Jouni Högander <[email protected]>
drm/i915/psr: Disable PSR on update_m_n and update_lrr

Jouni Högander <[email protected]>
drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state

Imre Deak <[email protected]>
drm/i915/dmc: Fix an unlikely NULL pointer deference at probe

Alex Deucher <[email protected]>
drm/amdgpu: rework how we handle TLB fences

Jesse.Zhang <[email protected]>
drm/amdgpu: Limit BO list entry count to prevent resource exhaustion

Alex Deucher <[email protected]>
drm/amdgpu: apply state adjust rules to some additional HAINAN vairants

Alex Deucher <[email protected]>
drm/radeon: apply state adjust rules to some additional HAINAN vairants

Alessio Belle <[email protected]>
drm/imagination: Synchronize interrupts before suspending the GPU

Alessio Belle <[email protected]>
drm/imagination: Fix deadlock in soft reset sequence

Alex Deucher <[email protected]>
drm/amdgpu/mmhub4.1.0: add bounds checking for cid

Alex Deucher <[email protected]>
drm/amdgpu/mmhub3.0: add bounds checking for cid

Alex Deucher <[email protected]>
drm/amdgpu/mmhub3.0.2: add bounds checking for cid

Alex Deucher <[email protected]>
drm/amdgpu/mmhub3.0.1: add bounds checking for cid

Alex Deucher <[email protected]>
drm/amdgpu/mmhub2.3: add bounds checking for cid

Alex Deucher <[email protected]>
drm/amdgpu/mmhub2.0: add bounds checking for cid

Alex Deucher <[email protected]>
drm/amdgpu/gmc9.0: add bounds checking for cid

Xi Ruoyao <[email protected]>

    drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END}

Maarten Lankhorst <[email protected]>
drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug

Maciej Andrzejewski ICEYE <[email protected]>
serial: uartlite: fix PM runtime usage count underflow on probe

Jiayuan Chen <[email protected]>
serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN

Ilpo Järvinen <[email protected]>
serial: 8250_dw: Ensure BUSY is deasserted

Ilpo Järvinen <[email protected]>
serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY

Ilpo Järvinen <[email protected]>
serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm

Ilpo Järvinen <[email protected]>
serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling

Ilpo Järvinen <[email protected]>

    serial: 8250: Add serial8250_handle_irq_locked()

Ilpo Järvinen <[email protected]>
serial: 8250_dw: Avoid unnecessary LCR writes

Ilpo Järvinen <[email protected]>
serial: 8250: Protect LCR write in shutdown

Peng Zhang <[email protected]>
serial: 8250: always disable IRQ during THRE test

Raul E Rangel <[email protected]>
serial: 8250: Fix TX deadlock when using DMA

Martin Roukala (né Peres) <[email protected]>

    serial: 8250_pci: add support for the AX99100

Nicolas Pitre <[email protected]>
vt: save/restore unicode screen buffer for alternate screen

Jens Axboe <[email protected]>
io_uring/kbuf: propagate BUF_MORE through early buffer commit path

Jens Axboe <[email protected]>
io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF

Jens Axboe <[email protected]>
io_uring/poll: fix multishot recv missing EOF on wakeup race

Lu Baolu <[email protected]>
iommu/vt-d: Only handle IOPF for SVA when PRI is supported

Guanghui Feng <[email protected]>
iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry

Finn Thain <[email protected]>
mtd: Avoid boot crash in RedBoot partition table parser

Chen Ni <[email protected]>
mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init()

Olivier Sobrie <[email protected]>
mtd: rawnand: pl353: make sure optimal timings are applied

Miquel Raynal <[email protected]>
mtd: spi-nor: Fix RDCR controller capability core check

Johan Hovold <[email protected]>
spi: fix statistics allocation

Johan Hovold <[email protected]>
spi: fix use-after-free on controller registration failure

Maíra Canal <[email protected]>
pmdomain: bcm: bcm2835-power: Increase ASB control timeout

Adam Ford <[email protected]>
pmdomain: mediatek: Fix power domain count

Luke Wang <[email protected]>
mmc: sdhci: fix timing selection for 1-bit bus width

Matthew Schwartz <[email protected]>
mmc: sdhci-pci-gli: fix GL9750 DMA write corruption

Damien Le Moal <[email protected]>
ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in()

Damien Le Moal <[email protected]>
ata: libata-core: disable LPM on ADATA SU680 SSD

Corey Minyard <[email protected]>
ipmi:msghandler: Handle error returns from the SMI sender

Corey Minyard <[email protected]>
ipmi: Consolidate the run to completion checking for xmit msgs lock

Varun Gupta <[email protected]>
drm/xe: Fix memory leak in xe_vm_madvise_ioctl

Shyam Prasad N <[email protected]>
cifs: open files should not hold ref on superblock

Thorsten Blum <[email protected]>

    crypto: atmel-sha204a - Fix OOM ->tfm_count leak

Breno Leitao <[email protected]>
netconsole: fix sysdata_release_enabled_show checking wrong flag

Muhammad Amirul Asyraf Mohamad Jamian <[email protected]>
firmware: stratix10-svc: Add Multi SVC clients support

Dan Carpenter <[email protected]>
firmware: stratix10-svc: Delete some stray tabs

Kevin Hao <[email protected]>
net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume

Kevin Hao <[email protected]>
net: macb: Introduce gem_init_rx_ring()

Tiezhu Yang <[email protected]>

    LoongArch: Check return values for set_memory_{rw,rox}

Jouni Högander <[email protected]>
drm/i915/psr: Write DSC parameters on Selective Update in ET mode

Jouni Högander <[email protected]>
drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters

Jouni Högander <[email protected]>
drm/i915/dsc: Add Selective Update register definitions

Namjae Jeon <[email protected]>
ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION

Namjae Jeon <[email protected]>

    ksmbd: unset conn->binding on failed binding request

Paulo Alcantara <[email protected]>
smb: client: fix krb5 mount with username option

Mario Limonciello <[email protected]>
drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected()

Lukas Johannes Möller <[email protected]>
Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access

Lukas Johannes Möller <[email protected]>
Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()

AlanSong-oc <[email protected]>
crypto: padlock-sha - Disable for Zhaoxin processor

Felix Fietkau <[email protected]>
mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations

Yang Yang <[email protected]>
batman-adv: avoid OGM aggregation when skb tailroom is insufficient

Helge Deller <[email protected]>
parisc: Flush correct cache in cacheflush() syscall

Junrui Luo <[email protected]>
bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler

Fedor Pchelkin <[email protected]>
net: macb: fix use-after-free access to PTP clock

Ian Ray <[email protected]>
NFC: nxp-nci: allow GPIOs to sleep

Tiezhu Yang <[email protected]>
LoongArch: No need to flush icache if text copy failed

Tiezhu Yang <[email protected]>
LoongArch: Give more information if kmem access failed

Wei Yang <[email protected]>
mm/huge_memory: fix early failure try_to_migrate() when split huge pmd for shared THP

Chris Down <[email protected]>
mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()

Dev Jain <[email protected]>
mm/rmap: fix incorrect pte restoration for lazyfree folios

Thorsten Blum <[email protected]>
crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying

Ira Weiny <[email protected]>
nvdimm/bus: Fix potential use after free in asynchronous initialization

Jeff Layton <[email protected]>
sunrpc: fix cache_request leak in cache_release

Benjamin Tissoires <[email protected]>
HID: bpf: prevent buffer overflow in hid_hw_request

Benjamin Tissoires <[email protected]>
selftests/hid: fix compilation when bpf_wq and hid_device are not exported

Jeff Layton <[email protected]>
nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

Chuck Lever <[email protected]>
NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd

Chuck Lever <[email protected]>
NFSD: Defer sub-object cleanup in export put callbacks

-------------

Diffstat:

 Documentation/netlink/specs/net_shaper.yaml        |  12 +-
 Makefile                                           |   4 +-
 arch/arm64/boot/dts/renesas/r8a78000.dtsi          |  16 +-
 arch/arm64/boot/dts/renesas/r9a09g057.dtsi         |  30 --
 arch/arm64/boot/dts/renesas/r9a09g077.dtsi         |   4 +-
 arch/arm64/boot/dts/renesas/r9a09g087.dtsi         |   4 +-
 arch/arm64/boot/dts/renesas/rzg3s-smarc-som.dtsi   |   2 +-
 .../boot/dts/renesas/rzt2h-n2h-evk-common.dtsi     |   1 +
 arch/arm64/boot/dts/renesas/rzv2-evk-cn15-sd.dtso  |   1 +
 arch/arm64/kernel/rsi.c                            |   3 +-
 arch/loongarch/include/asm/uaccess.h               |  14 +-
 arch/loongarch/kernel/inst.c                       |  21 +-
 arch/parisc/kernel/cache.c                         |   4 +-
 arch/x86/events/core.c                             |   3 +-
 arch/x86/events/intel/core.c                       |  31 ++-
 arch/x86/hyperv/hv_crash.c                         | 100 +++----
 arch/x86/kernel/apic/x2apic_uv_x.c                 |  18 +-
 arch/x86/kernel/cpu/mce/amd.c                      |  17 +-
 drivers/acpi/acpi_processor.c                      |  15 +-
 drivers/acpi/acpica/acpredef.h                     |   2 +-
 drivers/ata/libata-core.c                          |   3 +
 drivers/ata/libata-scsi.c                          |   2 +-
 drivers/base/power/runtime.c                       |   1 +
 drivers/bluetooth/btqca.c                          |   2 +
 drivers/cache/ax45mp_cache.c                       |   4 +-
 drivers/cache/starfive_starlink_cache.c            |   4 +-
 drivers/char/ipmi/ipmi_msghandler.c                | 144 ++++++----
 drivers/crypto/atmel-sha204a.c                     |   5 +-
 drivers/crypto/ccp/sev-dev.c                       |   4 +-
 drivers/crypto/padlock-sha.c                       |   7 +
 drivers/firewire/net.c                             |   5 +-
 drivers/firmware/arm_ffa/driver.c                  |   8 +-
 drivers/firmware/arm_scmi/notify.c                 |   4 +-
 drivers/firmware/arm_scpi.c                        |   5 +-
 drivers/firmware/stratix10-svc.c                   | 240 ++++++++--------
 drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c        |   4 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c             |   7 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h             |   2 +
 drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c              |  21 +-
 drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c            |   9 +-
 drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c            |   3 +-
 drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c            |   3 +-
 drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c          |   3 +-
 drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c          |   3 +-
 drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c          |   3 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   4 +-
 drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c   |   8 +-
 .../amd/display/dc/resource/dcn32/dcn32_resource.c |   3 +
 drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c         |   4 +-
 drivers/gpu/drm/bridge/synopsys/dw-hdmi-qp.c       |   2 +-
 drivers/gpu/drm/drm_file.c                         |   5 +-
 drivers/gpu/drm/drm_mode_config.c                  |   9 +-
 .../drm/i915/display/intel_display_power_well.c    |   2 +-
 drivers/gpu/drm/i915/display/intel_display_types.h |   1 +
 drivers/gpu/drm/i915/display/intel_dmc.c           |   3 +-
 drivers/gpu/drm/i915/display/intel_psr.c           |  17 +-
 drivers/gpu/drm/i915/display/intel_vdsc.c          |  23 ++
 drivers/gpu/drm/i915/display/intel_vdsc.h          |   3 +
 drivers/gpu/drm/i915/display/intel_vdsc_regs.h     |  12 +
 drivers/gpu/drm/i915/gt/intel_engine_cs.c          |   3 +-
 drivers/gpu/drm/imagination/pvr_device.c           |  17 --
 drivers/gpu/drm/imagination/pvr_power.c            |  22 +-
 drivers/gpu/drm/radeon/si_dpm.c                    |   4 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_kms.c                |   3 +-
 drivers/gpu/drm/xe/xe_ggtt.c                       |  10 +-
 drivers/gpu/drm/xe/xe_ggtt_types.h                 |   5 +-
 drivers/gpu/drm/xe/xe_gt_ccs_mode.c                |   2 +
 drivers/gpu/drm/xe/xe_guc.c                        |   6 +-
 drivers/gpu/drm/xe/xe_guc_ct.c                     |   1 +
 drivers/gpu/drm/xe/xe_guc_submit.c                 |   3 +-
 drivers/gpu/drm/xe/xe_oa.c                         |   7 +-
 drivers/gpu/drm/xe/xe_vm_madvise.c                 |   3 +-
 drivers/hid/bpf/hid_bpf_dispatch.c                 |   2 +
 drivers/hv/mshv_root_main.c                        |   2 +-
 drivers/hwmon/max6639.c                            |  10 +-
 drivers/hwmon/pmbus/ina233.c                       |   2 +
 drivers/hwmon/pmbus/isl68137.c                     |   7 +-
 drivers/hwmon/pmbus/mp2869.c                       |  35 ++-
 drivers/hwmon/pmbus/mp2975.c                       |   2 +
 drivers/i2c/busses/i2c-cp2615.c                    |   3 +
 drivers/i2c/busses/i2c-fsi.c                       |   1 +
 drivers/i2c/busses/i2c-pxa.c                       |  17 +-
 drivers/iommu/amd/iommu.c                          |  15 +-
 drivers/iommu/intel/dmar.c                         |   3 +-
 drivers/iommu/intel/svm.c                          |  12 +-
 drivers/iommu/iommu-sva.c                          |  12 +-
 drivers/iommu/iommu.c                              |   6 +-
 drivers/irqchip/irq-riscv-rpmi-sysmsi.c            |   1 +
 drivers/mmc/host/sdhci-pci-gli.c                   |   9 +
 drivers/mmc/host/sdhci.c                           |   9 +-
 drivers/mtd/nand/raw/brcmnand/brcmnand.c           |   6 +-
 drivers/mtd/nand/raw/cadence-nand-controller.c     |   2 +-
 drivers/mtd/nand/raw/nand_base.c                   |  14 +-
 drivers/mtd/nand/raw/pl35x-nand-controller.c       |   3 +
 drivers/mtd/parsers/redboot.c                      |   6 +-
 drivers/mtd/spi-nor/core.c                         |   2 +-
 drivers/net/bonding/bond_debugfs.c                 |  16 +-
 drivers/net/bonding/bond_main.c                    |   8 +-
 drivers/net/dsa/bcm_sf2.c                          |   8 +-
 drivers/net/ethernet/airoha/airoha_eth.c           |   1 -
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |   2 +
 drivers/net/ethernet/broadcom/bnxt/bnxt.h          |   2 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c |   2 +-
 drivers/net/ethernet/cadence/macb_main.c           |  26 +-
 drivers/net/ethernet/cadence/macb_ptp.c            |   4 +-
 drivers/net/ethernet/intel/iavf/iavf_main.c        |   9 +-
 drivers/net/ethernet/intel/igc/igc.h               |   2 +
 drivers/net/ethernet/intel/igc/igc_main.c          |  14 +-
 drivers/net/ethernet/intel/igc/igc_ptp.c           |  33 +++
 drivers/net/ethernet/intel/libie/fwlog.c           |  49 +++-
 drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c    |   4 +-
 .../ethernet/mellanox/mlx5/core/en_accel/ipsec.h   |   1 +
 .../mellanox/mlx5/core/en_accel/ipsec_offload.c    |  52 ++--
 drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c  |  23 +-
 drivers/net/ethernet/microsoft/mana/hw_channel.c   |   6 +-
 drivers/net/ethernet/ti/icssg/icssg_common.c       |   5 +
 drivers/net/netconsole.c                           |   2 +-
 drivers/net/netdevsim/netdev.c                     |   5 +-
 drivers/net/usb/aqc111.c                           |  12 +-
 drivers/net/usb/cdc_ncm.c                          |  10 +-
 drivers/net/wireless/ath/ath9k/channel.c           |   6 +-
 drivers/net/wireless/mediatek/mt76/scan.c          |   4 +-
 drivers/net/wireless/ti/wlcore/tx.c                |   2 +-
 drivers/net/wireless/virtual/mac80211_hwsim.c      |   1 -
 drivers/nfc/nxp-nci/i2c.c                          |   4 +-
 drivers/nvdimm/bus.c                               |   5 +-
 drivers/pmdomain/bcm/bcm2835-power.c               |  12 +-
 drivers/pmdomain/mediatek/mtk-pm-domains.c         |   2 +-
 drivers/resctrl/mpam_devices.c                     |   2 +
 drivers/soc/fsl/qbman/qman.c                       |  24 +-
 drivers/soc/fsl/qe/qmc.c                           |   4 +-
 drivers/soc/microchip/mpfs-sys-controller.c        |  13 +-
 drivers/soc/rockchip/grf.c                         |   1 +
 drivers/spi/spi-amlogic-spifc-a4.c                 |  46 +---
 drivers/spi/spi-amlogic-spisg.c                    |  12 +-
 drivers/spi/spi.c                                  |  25 +-
 drivers/tee/tee_shm.c                              |  27 --
 drivers/tty/serial/8250/8250.h                     |  25 ++
 drivers/tty/serial/8250/8250_dma.c                 |  15 +
 drivers/tty/serial/8250/8250_dw.c                  | 304 ++++++++++++++++-----
 drivers/tty/serial/8250/8250_pci.c                 |  17 ++
 drivers/tty/serial/8250/8250_port.c                |  75 +++--
 drivers/tty/serial/serial_core.c                   |   5 +-
 drivers/tty/serial/uartlite.c                      |   1 +
 drivers/tty/vt/vt.c                                |   8 +
 fs/binfmt_elf_fdpic.c                              |   6 +
 fs/btrfs/tree-checker.c                            |   2 +-
 fs/btrfs/tree-log.c                                |   6 +
 fs/nfsd/export.c                                   |  63 ++++-
 fs/nfsd/export.h                                   |   7 +-
 fs/nfsd/nfs4xdr.c                                  |   9 +-
 fs/nfsd/nfsctl.c                                   |  22 +-
 fs/nfsd/state.h                                    |  17 +-
 fs/smb/client/cifsfs.c                             |   7 +-
 fs/smb/client/cifsproto.h                          |   1 +
 fs/smb/client/connect.c                            |   4 +
 fs/smb/client/file.c                               |  11 -
 fs/smb/client/misc.c                               |  42 +++
 fs/smb/client/trace.h                              |   2 +
 fs/smb/server/smb2pdu.c                            |  17 +-
 fs/tests/exec_kunit.c                              |   3 -
 include/linux/auxvec.h                             |   2 +-
 include/linux/console_struct.h                     |   1 +
 include/linux/etherdevice.h                        |   3 +-
 .../linux/firmware/intel/stratix10-svc-client.h    |   8 +-
 include/linux/if_ether.h                           |   3 +-
 include/linux/io_uring_types.h                     |   3 +
 include/linux/netdevice.h                          |   9 +-
 include/linux/serial_8250.h                        |   1 +
 include/net/ip_tunnels.h                           |  28 +-
 include/net/mac80211.h                             |   4 +-
 include/net/netfilter/nf_tables.h                  |   2 +
 include/net/sch_generic.h                          |  33 +++
 include/net/udp_tunnel.h                           |   2 +-
 io_uring/kbuf.c                                    |  14 +-
 io_uring/poll.c                                    |   9 +-
 kernel/crash_dump_dm_crypt.c                       |   4 +-
 kernel/sched/idle.c                                |  30 +-
 kernel/trace/ring_buffer.c                         |   2 +-
 kernel/trace/trace.c                               |  36 ++-
 lib/bootconfig.c                                   |   3 +-
 mm/huge_memory.c                                   |   3 +-
 mm/rmap.c                                          |  21 +-
 net/batman-adv/bat_iv_ogm.c                        |   3 +
 net/bluetooth/hci_conn.c                           |   4 +-
 net/bluetooth/hci_sync.c                           |   2 +-
 net/bluetooth/hidp/core.c                          |  16 +-
 net/bluetooth/l2cap_core.c                         |  51 ++--
 net/bluetooth/mgmt.c                               |   7 +-
 net/bluetooth/smp.c                                |   2 +-
 net/bridge/br_cfm.c                                |   4 +-
 net/ethernet/eth.c                                 |   9 +-
 net/ipv4/icmp.c                                    |   4 +-
 net/ipv4/ip_gre.c                                  |   3 +-
 net/ipv6/exthdrs.c                                 |   4 +
 net/ipv6/seg6_hmac.c                               |   2 +
 net/mac80211/cfg.c                                 |  12 +-
 net/mac80211/chan.c                                |   6 +-
 net/mac80211/debugfs.c                             |  14 +-
 net/mac80211/mesh.c                                |   3 +
 net/mac80211/sta_info.c                            |   7 +-
 net/mac80211/tx.c                                  |   4 +-
 net/mac802154/iface.c                              |   4 +-
 net/mpls/af_mpls.c                                 |   1 +
 net/mptcp/pm_kernel.c                              |   2 +-
 net/netfilter/nf_bpf_link.c                        |   2 +-
 net/netfilter/nf_conntrack_h323_asn1.c             |   4 +
 net/netfilter/nf_conntrack_netlink.c               |  28 +-
 net/netfilter/nf_conntrack_proto_sctp.c            |   3 +-
 net/netfilter/nf_conntrack_sip.c                   |   6 +-
 net/netfilter/nf_flow_table_ip.c                   |   1 +
 net/netfilter/nf_tables_api.c                      |   5 +-
 net/netfilter/nfnetlink_osf.c                      |  13 +
 net/netfilter/nft_ct.c                             |   4 +
 net/netfilter/nft_dynset.c                         |  10 +-
 net/netfilter/xt_CT.c                              |   4 +
 net/netfilter/xt_time.c                            |   4 +-
 net/phonet/af_phonet.c                             |   5 +-
 net/rose/af_rose.c                                 |   5 +
 net/sched/sch_generic.c                            |  27 --
 net/sched/sch_ingress.c                            |  14 +-
 net/sched/sch_teql.c                               |   7 +-
 net/shaper/shaper.c                                | 160 ++++++-----
 net/shaper/shaper_nl_gen.c                         |  12 +-
 net/shaper/shaper_nl_gen.h                         |   5 +
 net/smc/af_smc.c                                   |  23 +-
 net/smc/smc.h                                      |   5 +
 net/smc/smc_close.c                                |   2 +-
 net/sunrpc/cache.c                                 |  26 +-
 net/unix/af_unix.c                                 |   2 +
 net/unix/af_unix.h                                 |   1 +
 net/unix/garbage.c                                 |  79 ++++--
 net/wireless/pmsr.c                                |   1 +
 tools/bootconfig/main.c                            |   7 +-
 .../testing/selftests/hid/progs/hid_bpf_helpers.h  |  12 +
 236 files changed, 2113 insertions(+), 1069 deletions(-)