6.19.12-rc1 review
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest311 patches 17 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/311 | drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13drivers/ drivers/ | +64 | 3 replies | |
| 2/311 | net: correctly handle tunneled traffic on IPV6_CSUM GSO fallbacknet/ | +17 | 0 replies | |
| 3/311 | net: mana: fix use-after-free in add_adev() error pathdrivers/ | +4 | 0 replies | |
| 4/311 | scsi: target: file: Use kzalloc_flex for aio_cmddrivers/ | +1 | 0 replies | |
| 5/311 | scsi: target: tcm_loop: Drain commands in target_reset handlerdrivers/ | +46 | 0 replies | |
| 6/311 | xfs: factor out xfs_attr3_node_entry_removefs/ fs/ | +44 | 0 replies | |
| 7/311 | xfs: factor out xfs_attr3_leaf_initfs/ fs/ | +25 | 0 replies | |
| 8/311 | xfs: close crash window in attr dabtree inactivationfs/ | +57 | 2 replies | |
| 9/311 | arm64/scs: Fix handling of advance_loc4arch/ | +8 | 0 replies | |
| 10/311 | HID: logitech-hidpp: Enable MX Master 4 over bluetoothdrivers/ | +2 | 0 replies | |
| 11/311 | wifi: mac80211: check tdls flag in ieee80211_tdls_opernet/ | +1 | 0 replies | |
| 12/311 | HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irqdrivers/ | +10 | 0 replies | |
| 13/311 | atm: lec: fix use-after-free in sock_def_readable()net/ net/ | +48 | 0 replies | |
| 14/311 | btrfs: dont take device_list_mutex when querying zone infofs/ | +4 | 0 replies | |
| 15/311 | tg3: replace placeholder MAC address with device propertydrivers/ | +11 | 0 replies | |
| 16/311 | objtool: Fix Clang jump table detectiontools/ | +2 | 0 replies | |
| 17/311 | HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failuredrivers/ | +3 | 0 replies | |
| 18/311 | HID: core: Mitigate potential OOB by removing bogus memset()drivers/ | +4 | 0 replies | |
| 19/311 | objtool/klp: fix mkstemp() failure with long pathstools/ | +3 | 0 replies | |
| 20/311 | HID: multitouch: Check to ensure report responses match the requestdrivers/ | +7 | 0 replies | |
| 21/311 | btrfs: reserve enough transaction items for qgroup ioctlsfs/ | +9 | 0 replies | |
| 22/311 | i2c: tegra: Dont mark devices with pins as IRQ safedrivers/ drivers/ | +6 | 0 replies | |
| 23/311 | btrfs: reject root items with drop_progress and zero drop_levelfs/ | +17 | 0 replies | |
| 24/311 | drm/amd/display: Fix gamma 2.2 colorop TFsdrivers/ | +3 | 0 replies | |
| 25/311 | smb: client: fix generic/694 due to wrong ->i_blocksfs/ fs/ fs/ +1 more | +16 | 0 replies | |
| 26/311 | spi: geni-qcom: Check DMA interrupts early in ISRdrivers/ | +5 | 0 replies | |
| 27/311 | mshv: Fix error handling in mshv_region_pindrivers/ | +4 | 0 replies | |
| 28/311 | dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warningDocumentation/ | +1 | 0 replies | |
| 29/311 | wifi: iwlwifi: mld: Fix MLO scan timingdrivers/ drivers/ drivers/ +4 more | +56 | 0 replies | |
| 30/311 | wifi: iwlwifi: mvm: dont send a 6E related command when not supporteddrivers/ | +2 | 0 replies | |
| 31/311 | wifi: iwlwifi: mld: correctly set wifi generation datadrivers/ drivers/ | +88 | 0 replies | |
| 32/311 | wifi: ath11k: Pass the correct value of each TID during a stop AMPDU sessiondrivers/ | +7 | 0 replies | |
| 33/311 | cgroup: Wait for dying tasks to leave on rmdirinclude/ kernel/ | +86 | 0 replies | |
| 34/311 | selftests/cgroup: Dont require synchronous populated update on task exittools/ tools/ tools/ +1 more | +23 | 0 replies | |
| 35/311 | cgroup: Fix cgroup_drain_dying() testing the wrong conditionkernel/ | +22 | 0 replies | |
| 36/311 | crypto: caam - fix DMA corruption on long hmac keysdrivers/ | +2 | 0 replies | |
| 37/311 | crypto: caam - fix overflow on long hmac keysdrivers/ | +2 | 0 replies | |
| 38/311 | crypto: deflate - fix spurious -ENOSPCcrypto/ | +7 | 0 replies | |
| 39/311 | crypto: af-alg - fix NULL pointer dereference in scatterwalkcrypto/ | +3 | 0 replies | |
| 40/311 | mpls: add seqcount to protect the platform_label{,s} pairinclude/ net/ | +26 | 0 replies | |
| 41/311 | net: mana: Fix RX skb truesize accountingdrivers/ | +7 | 0 replies | |
| 42/311 | netdevsim: fix build if SKB_EXTENSIONS=ninclude/ | +1 | 0 replies | |
| 43/311 | net: fec: fix the PTP periodic output sysfs interfacedrivers/ | +0 | 0 replies | |
| 44/311 | net: enetc: reset PIR and CIR if they are not equal when initializing TX ringdrivers/ | +12 | 0 replies | |
| 45/311 | net: enetc: add graceful stop to safely reinitialize the TX Ringdrivers/ drivers/ | +108 | 0 replies | |
| 46/311 | net: enetc: do not access non-existent registers on pseudo MACdrivers/ | +7 | 0 replies | |
| 47/311 | net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leaknet/ | +13 | 0 replies | |
| 48/311 | net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leaknet/ | +3 | 0 replies | |
| 49/311 | iommupt/amdv1: mark amdv1pt_install_leaf_entry as __always_inlinedrivers/ | +1 | 0 replies | |
| 50/311 | net/ipv6: ioam6: prevent schema length wraparound in trace fillnet/ | +2 | 0 replies | |
| 51/311 | tg3: Fix race for querying speed/duplexdrivers/ | +1 | 0 replies | |
| 52/311 | net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatchdrivers/ | +1 | 0 replies | |
| 53/311 | ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()net/ | +3 | 0 replies | |
| 54/311 | ip6_tunnel: clear skb2->cb[] in ip4ip6_err()net/ | +5 | 0 replies | |
| 55/311 | eth: fbnic: Account for page fragments when updating BDQ taildrivers/ | +3 | 0 replies | |
| 56/311 | bridge: br_nd_send: linearize skb before parsing ND optionsnet/ | +7 | 0 replies | |
| 57/311 | net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()net/ | +2 | 0 replies | |
| 58/311 | net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvnetadrivers/ | +6 | 0 replies | |
| 59/311 | net: enetc: check whether the RSS algorithm is Toeplitzdrivers/ | +4 | 0 replies | |
| 60/311 | net: enetc: do not allow VF to configure the RSS keydrivers/ | +5 | 0 replies | |
| 61/311 | ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUPsound/ | +1 | 0 replies | |
| 62/311 | ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failuresound/ | +24 | 0 replies | |
| 63/311 | ipv6: prevent possible UaF in addrconf_permanent_addr()net/ | +3 | 0 replies | |
| 64/311 | net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue()drivers/ | +17 | 0 replies | |
| 65/311 | net: introduce mangleid_featuresinclude/ net/ | +7 | 0 replies | |
| 66/311 | net: use skb_header_pointer() for TCPv4 GSO frag_off checknet/ | +8 | 0 replies | |
| 67/311 | net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leaknet/ | +1 | 0 replies | |
| 68/311 | bnxt_en: set backing store type from query typedrivers/ | +4 | 0 replies | |
| 69/311 | crypto: algif_aead - Revert to operating out-of-placecrypto/ crypto/ crypto/ +1 more | +34 | 0 replies | |
| 70/311 | crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryptioncrypto/ | +29 | 0 replies | |
| 71/311 | net: bonding: fix use-after-free in bond_xmit_broadcast()drivers/ | +1 | 0 replies | |
| 72/311 | NFC: pn533: bound the UART receive bufferdrivers/ | +3 | 0 replies | |
| 73/311 | net: xilinx: axienet: Correct BD length masks to match AXIDMA IP specdrivers/ | +2 | 0 replies | |
| 74/311 | net: xilinx: axienet: Fix BQL accounting for multi-BD TX packetsdrivers/ | +4 | 0 replies | |
| 75/311 | ASoC: Intel: boards: fix unmet dependency on PINCTRLsound/ | +0 | 0 replies | |
| 76/311 | bridge: mrp: reject zero test interval to avoid OOM panicnet/ | +2 | 0 replies | |
| 77/311 | bpf: Fix regsafe() for pointers to packetkernel/ | +6 | 0 replies | |
| 78/311 | net: ipv6: flowlabel: defer exclusive option free until RCU teardownnet/ | +0 | 0 replies | |
| 79/311 | mptcp: add eat_recv_skb helpernet/ | +12 | 0 replies | |
| 80/311 | mptcp: fix soft lockup in mptcp_recvmsg()net/ | +8 | 0 replies | |
| 81/311 | net: stmmac: skip VLAN restore when VLAN hash ops are missingdrivers/ | +4 | 0 replies | |
| 82/311 | ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUPsound/ | +1 | 0 replies | |
| 83/311 | netfilter: flowtable: strictly check for maximum number of actionsnet/ | +130 | 0 replies | |
| 84/311 | netfilter: nfnetlink_log: account for netlink header sizenet/ | +1 | 0 replies | |
| 85/311 | netfilter: x_tables: ensure names are nul-terminatednet/ net/ | +11 | 0 replies | |
| 86/311 | netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attrinclude/ net/ net/ | +5 | 0 replies | |
| 87/311 | netfilter: nf_conntrack_helper: pass helper to expect cleanupnet/ | +1 | 0 replies | |
| 88/311 | netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absentnet/ | +6 | 0 replies | |
| 89/311 | netfilter: nf_conntrack_expect: honor expectation helper fieldinclude/ net/ net/ +4 more | +29 | 0 replies | |
| 90/311 | netfilter: nf_conntrack_expect: use expect->helpernet/ net/ net/ +1 more | +13 | 0 replies | |
| 91/311 | netfilter: nf_conntrack_expect: store netns and zone in expectationinclude/ net/ net/ +1 more | +34 | 0 replies | |
| 92/311 | netfilter: ctnetlink: ignore explicit helper on new expectationsnet/ | +9 | 0 replies | |
| 93/311 | netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARPnet/ | +23 | 0 replies | |
| 94/311 | netfilter: nf_tables: reject immediate NF_QUEUE verdictnet/ | +5 | 0 replies | |
| 95/311 | Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediatenet/ | +9 | 0 replies | |
| 96/311 | Bluetooth: SCO: fix race conditions in sco_sock_connect()net/ | +21 | 0 replies | |
| 97/311 | Bluetooth: L2CAP: Add support for setting BT_PHYinclude/ include/ include/ +5 more | +259 | 0 replies | |
| 98/311 | Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if existsnet/ | +36 | 0 replies | |
| 99/311 | Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once failsnet/ | +11 | 0 replies | |
| 100/311 | Bluetooth: hci_sync: Fix UAF in le_read_features_completenet/ | +5 | 0 replies | |
| 101/311 | Bluetooth: hci_h4: Fix race during initializationdrivers/ | +0 | 0 replies | |
| 102/311 | Bluetooth: MGMT: validate LTK enc_size on loadnet/ | +3 | 0 replies | |
| 103/311 | Bluetooth: hci_conn: fix potential UAF in set_cig_params_syncnet/ | +7 | 0 replies | |
| 104/311 | Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evtnet/ | +20 | 0 replies | |
| 105/311 | Bluetooth: MGMT: validate mesh send advertising payload lengthnet/ | +11 | 0 replies | |
| 106/311 | rds: ib: reject FRMR registration before IB connection is establishednet/ | +6 | 0 replies | |
| 107/311 | bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().net/ | +8 | 0 replies | |
| 108/311 | net/sched: sch_netem: fix out-of-bounds access in packet corruptionnet/ | +3 | 0 replies | |
| 109/311 | net: macb: fix clk handling on PCI glue driver removaldrivers/ | +4 | 0 replies | |
| 110/311 | net: macb: properly unregister fixed rate clocksdrivers/ | +4 | 0 replies | |
| 111/311 | net/mlx5: lag: Check for LAG device before creating debugfsdrivers/ | +3 | 0 replies | |
| 112/311 | net/mlx5: Avoid "No data available" when FW version queries faildrivers/ drivers/ drivers/ | +37 | 0 replies | |
| 113/311 | net/mlx5: Fix switchdev mode rollback in case of failuredrivers/ | +2 | 0 replies | |
| 114/311 | bnxt_en: Refactor some basic ring setup and adjustment logicdrivers/ drivers/ drivers/ +1 more | +41 | 0 replies | |
| 115/311 | bnxt_en: Dont assume XDP is never enabled in bnxt_init_dflt_ring_mode()drivers/ | +9 | 0 replies | |
| 116/311 | bnxt_en: Restore default stat ctxs for ULP when resource is availabledrivers/ | +2 | 0 replies | |
| 117/311 | net/x25: Fix potential double free of skbnet/ | +2 | 0 replies | |
| 118/311 | net/x25: Fix overflow when accumulating packetsnet/ net/ | +5 | 0 replies | |
| 119/311 | net/sched: cls_fw: fix NULL pointer dereference on shared blocksnet/ | +12 | 0 replies | |
| 120/311 | net/sched: cls_flow: fix NULL pointer dereference on shared blocksnet/ | +9 | 0 replies | |
| 121/311 | net: hsr: fix VLAN add unwind on slave errorsnet/ | +17 | 0 replies | |
| 122/311 | ipv6: avoid overflows in ip6_datagram_send_ctl()net/ | +10 | 0 replies | |
| 123/311 | eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64drivers/ | +1 | 0 replies | |
| 124/311 | bpf: reject direct access to nullable PTR_TO_BUF pointerskernel/ | +2 | 0 replies | |
| 125/311 | bpf: Reject sleepable kprobe_multi programs at attach timekernel/ | +4 | 0 replies | |
| 126/311 | bpf: Fix incorrect pruning due to atomic fetch precision trackingkernel/ | +24 | 0 replies | |
| 127/311 | Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"drivers/ drivers/ | +4 | 0 replies | |
| 128/311 | iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by onedrivers/ | +1 | 0 replies | |
| 129/311 | gpiolib: clear requested flag if line is invaliddrivers/ | +4 | 0 replies | |
| 130/311 | interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()drivers/ | +2 | 0 replies | |
| 131/311 | gpio: shared: call gpio_chip::of_xlate() if setdrivers/ drivers/ drivers/ | +29 | 0 replies | |
| 132/311 | gpio: shared: handle pins shared by child nodes of devicesdrivers/ drivers/ drivers/ | +10 | 0 replies | |
| 133/311 | gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio()drivers/ | +2 | 0 replies | |
| 134/311 | drm/bridge: Fix refcount shown via debugfs for encoder_bridges_show()drivers/ | +11 | 0 replies | |
| 135/311 | accel/qaic: Handle DBC deactivation if the owner went awaydrivers/ | +45 | 0 replies | |
| 136/311 | io_uring/rsrc: reject zero-length fixed buffer importio_uring/ | +4 | 0 replies | |
| 137/311 | hwmon: (tps53679) Fix array access with zero-length block readdrivers/ | +3 | 0 replies | |
| 138/311 | hwmon: (pxe1610) Check return value of page-select write in probedrivers/ | +4 | 0 replies | |
| 139/311 | hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")drivers/ | +1 | 0 replies | |
| 140/311 | gpio: shared: shorten the critical section in gpiochip_setup_shared()drivers/ | +28 | 0 replies | |
| 141/311 | dt-bindings: gpio: fix microchip #interrupt-cellsDocumentation/ | +2 | 0 replies | |
| 142/311 | spi: stm32-ospi: Fix resource leak in remove() callbackdrivers/ | +1 | 0 replies | |
| 143/311 | spi: stm32-ospi: Fix reset control leak on probe errordrivers/ | +3 | 0 replies | |
| 144/311 | drm/xe/xe_pagefault: Disallow writes to read-only VMAsdrivers/ | +6 | 0 replies | |
| 145/311 | drm/xe/pxp: Clean up termination status on failuredrivers/ | +1 | 0 replies | |
| 146/311 | drm/xe/pxp: Remove incorrect handling of impossible state during suspenddrivers/ | +0 | 0 replies | |
| 147/311 | drm/xe/pxp: Clear restart flag in pxp_start after jumping backdrivers/ | +3 | 0 replies | |
| 148/311 | hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()drivers/ | +2 | 0 replies | |
| 149/311 | spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callbackdrivers/ | +12 | 0 replies | |
| 150/311 | hwmon: (occ) Fix missing newline in occ_show_extended()drivers/ | +1 | 0 replies | |
| 151/311 | irqchip/riscv-aplic: Restrict genpd notifier to device tree onlydrivers/ | +2 | 0 replies | |
| 152/311 | drm/sysfb: Fix efidrm error handling and memory type mismatchdrivers/ | +31 | 0 replies | |
| 153/311 | hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFIdrivers/ | +6 | 0 replies | |
| 154/311 | mips: ralink: update CPU clock indexarch/ | +4 | 0 replies | |
| 155/311 | sched/fair: Fix zero_vruntime tracking fixkernel/ | +3 | 0 replies | |
| 156/311 | sched/debug: Fix avg_vruntime() usagekernel/ | +3 | 0 replies | |
| 157/311 | perf/x86: Fix potential bad container_of in intel_pmu_hw_configarch/ | +4 | 0 replies | |
| 158/311 | riscv: kgdb: fix several debug register assignment bugsarch/ | +4 | 0 replies | |
| 159/311 | riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not setarch/ | +3 | 0 replies | |
| 160/311 | ACPI: RIMT: Add dependency between iommu and devicesdrivers/ | +7 | 0 replies | |
| 161/311 | drm/ioc32: stop speculation on the drm_compat_ioctl pathdrivers/ | +2 | 0 replies | |
| 162/311 | rust_binder: use AssertSync for BINDER_VM_OPSdrivers/ drivers/ | +6 | 0 replies | |
| 163/311 | wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculationdrivers/ | +1 | 0 replies | |
| 164/311 | wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()drivers/ | +1 | 0 replies | |
| 165/311 | USB: serial: option: add MeiG Smart SRM825WNdrivers/ | +3 | 0 replies | |
| 166/311 | drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()drivers/ | +11 | 0 replies | |
| 167/311 | sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl()kernel/ | +1 | 0 replies | |
| 168/311 | lib/crypto: chacha: Zeroize permuted_state before it leaves scopelib/ | +4 | 0 replies | |
| 169/311 | sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callbackkernel/ kernel/ | +73 | 0 replies | |
| 170/311 | ALSA: caiaq: fix stack out-of-bounds read in init_cardsound/ | +1 | 0 replies | |
| 171/311 | ALSA: ctxfi: Check the error for index mappingsound/ | +50 | 0 replies | |
| 172/311 | ALSA: ctxfi: Fix missing SPDIFI1 index handlingsound/ | +1 | 0 replies | |
| 173/311 | ALSA: ctxfi: Dont enumerate SPDIF1 at DAIO initializationsound/ | +7 | 0 replies | |
| 174/311 | ALSA: hda/realtek: add quirk for Acer Swift SFG14-73sound/ | +1 | 0 replies | |
| 175/311 | ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15sound/ | +1 | 0 replies | |
| 176/311 | ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxxsound/ | +1 | 0 replies | |
| 177/311 | ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxxsound/ | +8 | 0 replies | |
| 178/311 | io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()io_uring/ | +4 | 0 replies | |
| 179/311 | Bluetooth: SMP: derive legacy responder STK authentication from MITM statenet/ | +1 | 0 replies | |
| 180/311 | Bluetooth: SMP: force responder MITM requirements before building the pairing responsenet/ | +5 | 0 replies | |
| 181/311 | Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_syncnet/ | +2 | 0 replies | |
| 182/311 | Bluetooth: hci_event: move wake reason storage into validated event handlersnet/ | +35 | 0 replies | |
| 183/311 | ksmbd: fix OOB write in QUERY_INFO for compound requestsfs/ fs/ fs/ | +134 | 0 replies | |
| 184/311 | MIPS: SiByte: Bring back cache initialisationarch/ | +2 | 0 replies | |
| 185/311 | MIPS: Fix the GCC version check for `__multi3 workaroundarch/ | +3 | 0 replies | |
| 186/311 | hwmon: (occ) Fix division by zero in occ_show_power_1()drivers/ | +8 | 0 replies | |
| 187/311 | mips: mm: Allocate tlb_vpn array atomicallyarch/ | +1 | 0 replies | |
| 188/311 | x86/kexec: Disable KCOV instrumentation after load_segments()arch/ arch/ | +16 | 0 replies | |
| 189/311 | drm/amdgpu: fix the idr allocation flagsdrivers/ | +4 | 0 replies | |
| 190/311 | gpib: fix use-after-free in IO ioctl handlersdrivers/ drivers/ | +81 | 0 replies | |
| 191/311 | iio: add IIO_DECLARE_QUATERNION() macroinclude/ | +12 | 0 replies | |
| 192/311 | iio: orientation: hid-sensor-rotation: fix quaternion alignmentdrivers/ | +1 | 0 replies | |
| 193/311 | iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspacedrivers/ | +19 | 0 replies | |
| 194/311 | iio: adc: ti-adc161s626: fix buffer read on big-endiandrivers/ | +12 | 0 replies | |
| 195/311 | iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()drivers/ | +8 | 0 replies | |
| 196/311 | iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion()drivers/ | +1 | 0 replies | |
| 197/311 | iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout()drivers/ | +3 | 0 replies | |
| 198/311 | iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREADdrivers/ | +2 | 0 replies | |
| 199/311 | drm/ast: dp501: Fix initialization of SCU2Cdrivers/ | +1 | 0 replies | |
| 200/311 | drm/i915/dsi: Dont do DSC horizontal timing adjustments in command modedrivers/ | +2 | 0 replies | |
| 201/311 | drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDPdrivers/ | +1 | 0 replies | |
| 202/311 | drm/i915/cdclk: Do the full CDCLK dance for min_voltage_level changesdrivers/ | +54 | 0 replies | |
| 203/311 | drm/amdgpu: Fix wait after reset sequence in S4drivers/ drivers/ | +8 | 0 replies | |
| 204/311 | drm/amdgpu: validate doorbell_offset in user queue creationdrivers/ | +7 | 0 replies | |
| 205/311 | drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KBdrivers/ drivers/ | +3 | 0 replies | |
| 206/311 | drm/amdgpu/pm: drop SMU driver if version not matched messagesdrivers/ drivers/ drivers/ | +0 | 0 replies | |
| 207/311 | USB: serial: io_edgeport: add support for Blackbox IC135Adrivers/ drivers/ | +4 | 0 replies | |
| 208/311 | USB: serial: option: add support for Rolling Wireless RW135R-GLdrivers/ | +1 | 0 replies | |
| 209/311 | USB: core: add NO_LPM quirk for Razer Kiyo Pro webcamdrivers/ | +2 | 0 replies | |
| 210/311 | Input: synaptics-rmi4 - fix a locking bug in an error pathdrivers/ | +2 | 0 replies | |
| 211/311 | Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk tabledrivers/ | +7 | 0 replies | |
| 212/311 | Input: bcm5974 - recover from failed mode switchdrivers/ | +41 | 0 replies | |
| 213/311 | Input: xpad - add support for BETOP BTP-KP50B/C controllers wireless modedrivers/ | +3 | 0 replies | |
| 214/311 | Input: xpad - add support for Razer Wolverine V3 Prodrivers/ | +2 | 0 replies | |
| 215/311 | iio: adc: ti-ads7950: normalize return value of gpio_getdrivers/ | +1 | 0 replies | |
| 216/311 | iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get()drivers/ | +5 | 0 replies | |
| 217/311 | iio: adc: ade9000: fix wrong return type in streaming pushdrivers/ | +1 | 0 replies | |
| 218/311 | iio: adc: ade9000: fix wrong register in CALIBBIAS case for active powerdrivers/ | +1 | 0 replies | |
| 219/311 | iio: adc: ade9000: move mutex init before IRQ registrationdrivers/ | +4 | 0 replies | |
| 220/311 | iio: adc: aspeed: clear reference voltage bits before configuring vrefdrivers/ | +1 | 0 replies | |
| 221/311 | iio: accel: fix ADXL355 temperature signature valuedrivers/ | +1 | 0 replies | |
| 222/311 | iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0drivers/ | +1 | 0 replies | |
| 223/311 | iio: accel: adxl313: add missing error check in predisabledrivers/ | +2 | 0 replies | |
| 224/311 | iio: dac: ad5770r: fix error return in ad5770r_read_raw()drivers/ | +1 | 0 replies | |
| 225/311 | iio: imu: adis16550: fix swapped gyro/accel filter functionsdrivers/ | +4 | 0 replies | |
| 226/311 | iio: light: vcnl4035: fix scan buffer on big-endiandrivers/ | +12 | 0 replies | |
| 227/311 | iio: light: veml6070: fix veml6070_read() return valuedrivers/ | +1 | 0 replies | |
| 228/311 | iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()drivers/ | +5 | 0 replies | |
| 229/311 | iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope onlydrivers/ | +4 | 0 replies | |
| 230/311 | iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer onlydrivers/ | +10 | 0 replies | |
| 231/311 | iio: gyro: mpu3050: Fix incorrect free_irq() variabledrivers/ | +1 | 0 replies | |
| 232/311 | iio: gyro: mpu3050: Fix irq resource leakdrivers/ | +6 | 0 replies | |
| 233/311 | iio: gyro: mpu3050: Move iio_device_register() to correct locationdrivers/ | +13 | 0 replies | |
| 234/311 | iio: gyro: mpu3050: Fix out-of-sequence free_irq()drivers/ | +1 | 0 replies | |
| 235/311 | mei: me: reduce the scope on unexpected resetdrivers/ | +4 | 0 replies | |
| 236/311 | gpib: lpvo_usb: fix memory leak on disconnectdrivers/ | +2 | 0 replies | |
| 237/311 | usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drivedrivers/ | +1 | 0 replies | |
| 238/311 | usb: ulpi: fix double free in ulpi_register_interface() error pathdrivers/ | +2 | 0 replies | |
| 239/311 | usb: usbtmc: Flush anchored URBs in usbtmc_releasedrivers/ | +3 | 0 replies | |
| 240/311 | usb: misc: usbio: Fix URB memory leak on submit failuredrivers/ | +5 | 0 replies | |
| 241/311 | usb: host: xhci-sideband: delegate offload_usage tracking to class driversdrivers/ sound/ | +10 | 0 replies | |
| 242/311 | usb: ehci-brcm: fix sleep during atomicdrivers/ | +2 | 0 replies | |
| 243/311 | usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()drivers/ | +2 | 0 replies | |
| 244/311 | usb: core: phy: avoid double use of usb3-phydrivers/ | +11 | 0 replies | |
| 245/311 | usb: cdns3: gadget: fix NULL pointer dereference in ep_queuedrivers/ | +3 | 0 replies | |
| 246/311 | usb: cdns3: gadget: fix state inconsistency on gadget init failuredrivers/ | +1 | 0 replies | |
| 247/311 | usb: core: use dedicated spinlock for offload statedrivers/ drivers/ drivers/ +2 more | +84 | 0 replies | |
| 248/311 | x86/platform/geode: Fix on-stack property data use-after-return bugarch/ | +18 | 4 replies | |
| 249/311 | io_uring: protect remaining lockless ctx->rings accesses with RCUio_uring/ io_uring/ | +69 | 0 replies | |
| 250/311 | auxdisplay: line-display: fix NULL dereference in linedisp_releasedrivers/ | +1 | 0 replies | |
| 251/311 | bridge: br_nd_send: validate ND option lengthsnet/ | +4 | 0 replies | |
| 252/311 | cdc-acm: new quirk for EPSON HMDdrivers/ drivers/ | +10 | 0 replies | |
| 253/311 | comedi: dt2815: add hardware detection to prevent crashdrivers/ | +12 | 0 replies | |
| 254/311 | comedi: runflags cannot determine whether to reclaim chanlistdrivers/ | +5 | 0 replies | |
| 255/311 | comedi: Reinit dev->spinlock between attachments to low-level driversdrivers/ | +8 | 0 replies | |
| 256/311 | comedi: ni_atmio16d: Fix invalid clean-up after failed attachdrivers/ | +2 | 0 replies | |
| 257/311 | comedi: me_daq: Fix potential overrun of firmware bufferdrivers/ | +19 | 0 replies | |
| 258/311 | comedi: me4000: Fix potential overrun of firmware bufferdrivers/ | +12 | 0 replies | |
| 259/311 | firmware: microchip: fail auto-update probe if no flash founddrivers/ | +6 | 0 replies | |
| 260/311 | dt-bindings: connector: add pd-disable dependencyDocumentation/ | +1 | 0 replies | |
| 261/311 | spi: cadence-qspi: Fix exec_mem_op error handlingdrivers/ | +9 | 0 replies | |
| 262/311 | s390/zcrypt: Fix memory leak with CCA cards used as acceleratordrivers/ | +14 | 0 replies | |
| 263/311 | s390/cpum_sf: Cap sampling rate to prevent lsctl exceptionarch/ | +5 | 0 replies | |
| 264/311 | reset: gpio: fix double free in reset_add_gpio_aux_device() error pathdrivers/ | +0 | 0 replies | |
| 265/311 | PM: EM: Fix NULL pointer dereference when perf domain ID is not foundkernel/ | +2 | 0 replies | |
| 266/311 | nvmem: imx: assign nvmem_cell_info::raw_lendrivers/ drivers/ | +2 | 0 replies | |
| 267/311 | nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpydrivers/ | +4 | 0 replies | |
| 268/311 | netfilter: ipset: drop logically empty buckets in mtype_delnet/ | +1 | 0 replies | |
| 269/311 | gpib: Fix fluke driver s390 compile issuedrivers/ | +1 | 0 replies | |
| 270/311 | vt: discard stale unicode buffer on alt screen exit after resizedrivers/ | +13 | 0 replies | |
| 271/311 | vt: resize saved unicode buffer on alt screen exit after resizedrivers/ | +15 | 0 replies | |
| 272/311 | counter: rz-mtu3-cnt: prevent counter from being toggled multiple timesdrivers/ | +8 | 0 replies | |
| 273/311 | counter: rz-mtu3-cnt: do not use struct rz_mtu3_channels dev memberdrivers/ | +27 | 0 replies | |
| 274/311 | crypto: tegra - Add missing CRYPTO_ALG_ASYNCdrivers/ drivers/ | +24 | 0 replies | |
| 275/311 | vxlan: validate ND option lengths in vxlan_na_createdrivers/ | +4 | 0 replies | |
| 276/311 | net: ftgmac100: fix ring allocation unwind on open failuredrivers/ | +24 | 0 replies | |
| 277/311 | net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disableddrivers/ | +20 | 0 replies | |
| 278/311 | iommupt: Fix short gather if the unmap goes into a large mappingdrivers/ | +1 | 0 replies | |
| 279/311 | virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LENdrivers/ | +9 | 0 replies | |
| 280/311 | cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error pathdrivers/ | +3 | 0 replies | |
| 281/311 | sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCUkernel/ | +19 | 0 replies | |
| 282/311 | sched_ext: Fix stale direct dispatch state in ddsp_dsq_idkernel/ | +35 | 0 replies | |
| 283/311 | gpio: mxc: map Both Edge pad wakeup to Rising Edgedrivers/ | +9 | 0 replies | |
| 284/311 | gpio: Fix resource leaks on errors in gpiochip_add_data_with_key()drivers/ | +48 | 0 replies | |
| 285/311 | thermal: core: Address thermal zone removal races with resumedrivers/ | +26 | 0 replies | |
| 286/311 | thermal: core: Fix thermal zone device registration error pathdrivers/ | +1 | 0 replies | |
| 287/311 | misc: fastrpc: possible double-free of cctx->remote_heapdrivers/ | +1 | 0 replies | |
| 288/311 | misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probedrivers/ | +3 | 0 replies | |
| 289/311 | usb: typec: thunderbolt: Set enter_vdo during initializationdrivers/ | +22 | 0 replies | |
| 290/311 | thunderbolt: Fix property read in nhi_wake_supported()drivers/ | +1 | 0 replies | |
| 291/311 | USB: dummy-hcd: Fix locking/synchronization errordrivers/ | +6 | 0 replies | |
| 292/311 | USB: dummy-hcd: Fix interrupt synchronization errordrivers/ | +14 | 0 replies | |
| 293/311 | usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transferdrivers/ | +6 | 0 replies | |
| 294/311 | usb: typec: ucsi: validate connector number in ucsi_notify_common()drivers/ | +7 | 0 replies | |
| 295/311 | HID: appletb-kbd: add .resume method in PMdrivers/ | +3 | 0 replies | |
| 296/311 | usb: gadget: u_ether: Fix race between gether_disconnect and eth_stopdrivers/ | +5 | 0 replies | |
| 297/311 | usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfodrivers/ | +4 | 0 replies | |
| 298/311 | usb: gadget: uvc: fix NULL pointer dereference during unbind racedrivers/ drivers/ drivers/ | +43 | 0 replies | |
| 299/311 | usb: gadget: f_subset: Fix unbalanced refcnt in geth_freedrivers/ | +6 | 0 replies | |
| 300/311 | usb: gadget: f_rndis: Protect RNDIS options with mutexdrivers/ | +6 | 0 replies | |
| 301/311 | usb: gadget: f_ecm: Fix net_device lifecycle with device_movedrivers/ drivers/ | +39 | 0 replies | |
| 302/311 | usb: gadget: f_eem: Fix net_device lifecycle with device_movedrivers/ drivers/ | +46 | 0 replies | |
| 303/311 | usb: gadget: f_subset: Fix net_device lifecycle with device_movedrivers/ drivers/ | +44 | 0 replies | |
| 304/311 | usb: gadget: f_rndis: Fix net_device lifecycle with device_movedrivers/ drivers/ | +48 | 0 replies | |
| 305/311 | usb: gadget: f_hid: move list and spinlock inits from bind to allocdrivers/ | +10 | 0 replies | |
| 306/311 | usb: gadget: f_uac1_legacy: validate control request sizedrivers/ | +37 | 0 replies | |
| 307/311 | kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid()kernel/ | +6 | 0 replies | |
| 308/311 | kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid()kernel/ | +8 | 0 replies | |
| 309/311 | kallsyms: cleanup code for appending the module buildidkernel/ | +33 | 0 replies | |
| 310/311 | kallsyms: prevent module removal when printing module name and buildidkernel/ | +3 | 0 replies | |
| 311/311 | wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-freedrivers/ | +0 | 0 replies |
Reviews trailers per patch
155 of 311 patches have a Reviewed-by or Acked-by.
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 153 reviewers.
Cover letter [PATCH 6.19 000/311] 6.19.12-rc1 review
This is the start of the stable review cycle for the 6.19.12 release. There are 311 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Fri, 10 Apr 2026 17:58:42 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.12-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <[email protected]>
Linux 6.19.12-rc1
Alexander Popov <[email protected]>
wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
Petr Mladek <[email protected]>
kallsyms: prevent module removal when printing module name and buildid
Petr Mladek <[email protected]>
kallsyms: cleanup code for appending the module buildid
Petr Mladek <[email protected]>
kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid()
Petr Mladek <[email protected]>
kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid()
Taegu Ha <[email protected]>
usb: gadget: f_uac1_legacy: validate control request size
Michael Zimmermann <[email protected]>
usb: gadget: f_hid: move list and spinlock inits from bind to alloc
Kuen-Han Tsai <[email protected]>
usb: gadget: f_rndis: Fix net_device lifecycle with device_move
Kuen-Han Tsai <[email protected]>
usb: gadget: f_subset: Fix net_device lifecycle with device_move
Kuen-Han Tsai <[email protected]>
usb: gadget: f_eem: Fix net_device lifecycle with device_move
Kuen-Han Tsai <[email protected]>
usb: gadget: f_ecm: Fix net_device lifecycle with device_move
Kuen-Han Tsai <[email protected]>
usb: gadget: f_rndis: Protect RNDIS options with mutex
Kuen-Han Tsai <[email protected]>
usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
Jimmy Hu <[email protected]>
usb: gadget: uvc: fix NULL pointer dereference during unbind race
Kuen-Han Tsai <[email protected]>
usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
Kuen-Han Tsai <[email protected]>
usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
Aditya Garg <[email protected]>
HID: appletb-kbd: add .resume method in PM
Nathan Rebello <[email protected]>
usb: typec: ucsi: validate connector number in ucsi_notify_common()
Sebastian Urban <[email protected]>
usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer
Alan Stern <[email protected]>
USB: dummy-hcd: Fix interrupt synchronization error
Alan Stern <[email protected]>
USB: dummy-hcd: Fix locking/synchronization error
Konrad Dybcio <[email protected]>
thunderbolt: Fix property read in nhi_wake_supported()
Andrei Kuchynski <[email protected]>
usb: typec: thunderbolt: Set enter_vdo during initialization
Xingjing Deng <[email protected]>
misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe
Xingjing Deng <[email protected]>
misc: fastrpc: possible double-free of cctx->remote_heap
Rafael J. Wysocki <[email protected]>
thermal: core: Fix thermal zone device registration error path
Rafael J. Wysocki <[email protected]>
thermal: core: Address thermal zone removal races with resume
Tzung-Bi Shih <[email protected]>
gpio: Fix resource leaks on errors in gpiochip_add_data_with_key()
Shenwei Wang <[email protected]>
gpio: mxc: map Both Edge pad wakeup to Rising Edge
Andrea Righi <[email protected]>
sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
Changwoo Min <[email protected]>
sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU
Guangshuo Li <[email protected]>
cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
Srujana Challa <[email protected]>
virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN
Jason Gunthorpe <[email protected]>
iommupt: Fix short gather if the unmap goes into a large mapping
Sven Eckelmann (Plasma Cloud) <[email protected]>
net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
Yufan Chen <[email protected]>
net: ftgmac100: fix ring allocation unwind on open failure
Yang Yang <[email protected]>
vxlan: validate ND option lengths in vxlan_na_create
Eric Biggers <[email protected]>
crypto: tegra - Add missing CRYPTO_ALG_ASYNC
Cosmin Tanislav <[email protected]>
counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member
Cosmin Tanislav <[email protected]>
counter: rz-mtu3-cnt: prevent counter from being toggled multiple times
Nicolas Pitre <[email protected]>
vt: resize saved unicode buffer on alt screen exit after resize
Liav Mordouch <[email protected]>
vt: discard stale unicode buffer on alt screen exit after resize
Dave Penkler <[email protected]>
gpib: Fix fluke driver s390 compile issue
Yifan Wu <[email protected]>
netfilter: ipset: drop logically empty buckets in mtype_del
Ivan Vera <[email protected]>
nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy
Christian Eggers <[email protected]>
nvmem: imx: assign nvmem_cell_info::raw_len
Changwoo Min <[email protected]>
PM: EM: Fix NULL pointer dereference when perf domain ID is not found
Guangshuo Li <[email protected]>
reset: gpio: fix double free in reset_add_gpio_aux_device() error path
Thomas Richter <[email protected]>
s390/cpum_sf: Cap sampling rate to prevent lsctl exception
Harald Freudenberger <[email protected]>
s390/zcrypt: Fix memory leak with CCA cards used as accelerator
Emanuele Ghidoli <[email protected]>
spi: cadence-qspi: Fix exec_mem_op error handling
Xu Yang <[email protected]>
dt-bindings: connector: add pd-disable dependency
Conor Dooley <[email protected]>
firmware: microchip: fail auto-update probe if no flash found
Ian Abbott <[email protected]>
comedi: me4000: Fix potential overrun of firmware buffer
Ian Abbott <[email protected]>
comedi: me_daq: Fix potential overrun of firmware buffer
Ian Abbott <[email protected]>
comedi: ni_atmio16d: Fix invalid clean-up after failed attach
Ian Abbott <[email protected]>
comedi: Reinit dev->spinlock between attachments to low-level drivers
Edward Adam Davis <[email protected]>
comedi: runflags cannot determine whether to reclaim chanlist
Deepanshu Kartikey <[email protected]>
comedi: dt2815: add hardware detection to prevent crash
Oliver Neukum <[email protected]>
cdc-acm: new quirk for EPSON HMD
Yang Yang <[email protected]>
bridge: br_nd_send: validate ND option lengths
Guangshuo Li <[email protected]>
auxdisplay: line-display: fix NULL dereference in linedisp_release
Jens Axboe <[email protected]>
io_uring: protect remaining lockless ctx->rings accesses with RCU
Dmitry Torokhov <[email protected]>
x86/platform/geode: Fix on-stack property data use-after-return bug
Guan-Yu Lin <[email protected]>
usb: core: use dedicated spinlock for offload state
Yongchao Wu <[email protected]>
usb: cdns3: gadget: fix state inconsistency on gadget init failure
Yongchao Wu <[email protected]>
usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
Gabor Juhos <[email protected]>
usb: core: phy: avoid double use of 'usb3-phy'
Juno Choi <[email protected]>
usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()
Justin Chen <[email protected]>
usb: ehci-brcm: fix sleep during atomic
Guan-Yu Lin <[email protected]>
usb: host: xhci-sideband: delegate offload_usage tracking to class drivers
Felix Gu <[email protected]>
usb: misc: usbio: Fix URB memory leak on submit failure
Heitor Alves de Siqueira <[email protected]>
usb: usbtmc: Flush anchored URBs in usbtmc_release
Guangshuo Li <[email protected]>
usb: ulpi: fix double free in ulpi_register_interface() error path
Miao Li <[email protected]>
usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive
Johan Hovold <[email protected]>
gpib: lpvo_usb: fix memory leak on disconnect
Alexander Usyskin <[email protected]>
mei: me: reduce the scope on unexpected reset
Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix out-of-sequence free_irq()
Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Move iio_device_register() to correct location
Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix irq resource leak
Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix incorrect free_irq() variable
Francesco Lavra <[email protected]>
iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only
Francesco Lavra <[email protected]>
iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only
Josh Poimboeuf <[email protected]>
iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()
Aldo Conte <[email protected]>
iio: light: veml6070: fix veml6070_read() return value
David Lechner <[email protected]>
iio: light: vcnl4035: fix scan buffer on big-endian
Antoniu Miclaus <[email protected]>
iio: imu: adis16550: fix swapped gyro/accel filter functions
Antoniu Miclaus <[email protected]>
iio: dac: ad5770r: fix error return in ad5770r_read_raw()
Antoniu Miclaus <[email protected]>
iio: accel: adxl313: add missing error check in predisable
Antoniu Miclaus <[email protected]>
iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0
Valek Andrej <[email protected]>
iio: accel: fix ADXL355 temperature signature value
Billy Tsai <[email protected]>
iio: adc: aspeed: clear reference voltage bits before configuring vref
Antoniu Miclaus <[email protected]>
iio: adc: ade9000: move mutex init before IRQ registration
Giorgi Tchankvetadze <[email protected]>
iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power
Giorgi Tchankvetadze <[email protected]>
iio: adc: ade9000: fix wrong return type in streaming push
Dmitry Torokhov <[email protected]>
iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get()
Dmitry Torokhov <[email protected]>
iio: adc: ti-ads7950: normalize return value of gpio_get
Zoltan Illes <[email protected]>
Input: xpad - add support for Razer Wolverine V3 Pro
Shengyu Qu <[email protected]>
Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode
Liam Mitchell <[email protected]>
Input: bcm5974 - recover from failed mode switch
Christoffer Sandberg <[email protected]>
Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table
Bart Van Assche <[email protected]>
Input: synaptics-rmi4 - fix a locking bug in an error path
JP Hein <[email protected]>
USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam
Wanquan Zhong <[email protected]>
USB: serial: option: add support for Rolling Wireless RW135R-GL
Frej Drejhammar <[email protected]>
USB: serial: io_edgeport: add support for Blackbox IC135A
Alex Deucher <[email protected]>
drm/amdgpu/pm: drop SMU driver if version not matched messages
Donet Tom <[email protected]>
drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
Junrui Luo <[email protected]>
drm/amdgpu: validate doorbell_offset in user queue creation
Lijo Lazar <[email protected]>
drm/amdgpu: Fix wait after reset sequence in S4
Ville Syrjälä <[email protected]>
drm/i915/cdclk: Do the full CDCLK dance for min_voltage_level changes
Ville Syrjälä <[email protected]>
drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP
Ville Syrjälä <[email protected]>
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
Thomas Zimmermann <[email protected]>
drm/ast: dp501: Fix initialization of SCU2C
Felix Gu <[email protected]>
iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD
Felix Gu <[email protected]>
iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout()
Felix Gu <[email protected]>
iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion()
David Lechner <[email protected]>
iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
David Lechner <[email protected]>
iio: adc: ti-adc161s626: fix buffer read on big-endian
David Lechner <[email protected]>
iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace
David Lechner <[email protected]>
iio: orientation: hid-sensor-rotation: fix quaternion alignment
David Lechner <[email protected]>
iio: add IIO_DECLARE_QUATERNION() macro
Adam Crosser <[email protected]>
gpib: fix use-after-free in IO ioctl handlers
Prike Liang <[email protected]>
drm/amdgpu: fix the idr allocation flags
Aleksandr Nogikh <[email protected]>
x86/kexec: Disable KCOV instrumentation after load_segments()
Stefan Wiehler <[email protected]>
mips: mm: Allocate tlb_vpn array atomically
Sanman Pradhan <[email protected]>
hwmon: (occ) Fix division by zero in occ_show_power_1()
Maciej W. Rozycki <[email protected]>
MIPS: Fix the GCC version check for `__multi3' workaround
Maciej W. Rozycki <[email protected]>
MIPS: SiByte: Bring back cache initialisation
Asim Viladi Oglu Manizada <[email protected]>
ksmbd: fix OOB write in QUERY_INFO for compound requests
Oleh Konko <[email protected]>
Bluetooth: hci_event: move wake reason storage into validated event handlers
hkbinbin <[email protected]>
Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync
Oleh Konko <[email protected]>
Bluetooth: SMP: force responder MITM requirements before building the pairing response
Oleh Konko <[email protected]>
Bluetooth: SMP: derive legacy responder STK authentication from MITM state
Junxi Qian <[email protected]>
io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()
Zhang Heng <[email protected]>
ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxx
Sourav Nayak <[email protected]>
ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx
Zhang Heng <[email protected]>
ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15
Zhang Heng <[email protected]>
ALSA: hda/realtek: add quirk for Acer Swift SFG14-73
Takashi Iwai <[email protected]>
ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization
Takashi Iwai <[email protected]>
ALSA: ctxfi: Fix missing SPDIFI1 index handling
Takashi Iwai <[email protected]>
ALSA: ctxfi: Check the error for index mapping
Berk Cem Goksel <[email protected]>
ALSA: caiaq: fix stack out-of-bounds read in init_card
Tejun Heo <[email protected]>
sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback
Eric Biggers <[email protected]>
lib/crypto: chacha: Zeroize permuted_state before it leaves scope
Cheng-Yang Chou <[email protected]>
sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl()
Srinivasan Shanmugam <[email protected]>
drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()
Ernestas Kulik <[email protected]>
USB: serial: option: add MeiG Smart SRM825WN
Alexey Velichayshiy <[email protected]>
wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
Yasuaki Torimaru <[email protected]>
wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
Alice Ryhl <[email protected]>
rust_binder: use AssertSync for BINDER_VM_OPS
Greg Kroah-Hartman <[email protected]>
drm/ioc32: stop speculation on the drm_compat_ioctl path
Sunil V L <[email protected]>
ACPI: RIMT: Add dependency between iommu and devices
Zishun Yi <[email protected]>
riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set
Paul Walmsley <[email protected]>
riscv: kgdb: fix several debug register assignment bugs
Ian Rogers <[email protected]>
perf/x86: Fix potential bad container_of in intel_pmu_hw_config
Peter Zijlstra <[email protected]>
sched/debug: Fix avg_vruntime() usage
Peter Zijlstra <[email protected]>
sched/fair: Fix zero_vruntime tracking fix
Shiji Yang <[email protected]>
mips: ralink: update CPU clock index
Corey Hickey <[email protected]>
hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI
Chen Ni <[email protected]>
drm/sysfb: Fix efidrm error handling and memory type mismatch
Jessica Liu <[email protected]>
irqchip/riscv-aplic: Restrict genpd notifier to device tree only
Sanman Pradhan <[email protected]>
hwmon: (occ) Fix missing newline in occ_show_extended()
Felix Gu <[email protected]>
spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback
Sanman Pradhan <[email protected]>
hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()
Daniele Ceraolo Spurio <[email protected]>
drm/xe/pxp: Clear restart flag in pxp_start after jumping back
Daniele Ceraolo Spurio <[email protected]>
drm/xe/pxp: Remove incorrect handling of impossible state during suspend
Daniele Ceraolo Spurio <[email protected]>
drm/xe/pxp: Clean up termination status on failure
Jonathan Cavitt <[email protected]>
drm/xe/xe_pagefault: Disallow writes to read-only VMAs
Felix Gu <[email protected]>
spi: stm32-ospi: Fix reset control leak on probe error
Felix Gu <[email protected]>
spi: stm32-ospi: Fix resource leak in remove() callback
Jamie Gibbons <[email protected]>
dt-bindings: gpio: fix microchip #interrupt-cells
Bartosz Golaszewski <[email protected]>
gpio: shared: shorten the critical section in gpiochip_setup_shared()
Sanman Pradhan <[email protected]>
hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")
Sanman Pradhan <[email protected]>
hwmon: (pxe1610) Check return value of page-select write in probe
Sanman Pradhan <[email protected]>
hwmon: (tps53679) Fix array access with zero-length block read
Qi Tang <[email protected]>
io_uring/rsrc: reject zero-length fixed buffer import
Youssef Samir <[email protected]>
accel/qaic: Handle DBC deactivation if the owner went away
Liu Ying <[email protected]>
drm/bridge: Fix refcount shown via debugfs for encoder_bridges_show()
Felix Gu <[email protected]>
gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio()
Bartosz Golaszewski <[email protected]>
gpio: shared: handle pins shared by child nodes of devices
Bartosz Golaszewski <[email protected]>
gpio: shared: call gpio_chip::of_xlate() if set
Vladimir Zapolskiy <[email protected]>
interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()
Barnabás Pőcze <[email protected]>
gpiolib: clear requested flag if line is invalid
David Lechner <[email protected]>
iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
Maarten Lankhorst <[email protected]>
Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"
Daniel Borkmann <[email protected]>
bpf: Fix incorrect pruning due to atomic fetch precision tracking
Varun R Mallya <[email protected]>
bpf: Reject sleepable kprobe_multi programs at attach time
Qi Tang <[email protected]>
bpf: reject direct access to nullable PTR_TO_BUF pointers
Dimitri Daskalakis <[email protected]>
eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64
Eric Dumazet <[email protected]>
ipv6: avoid overflows in ip6_datagram_send_ctl()
Luka Gejak <[email protected]>
net: hsr: fix VLAN add unwind on slave errors
Xiang Mei <[email protected]>
net/sched: cls_flow: fix NULL pointer dereference on shared blocks
Xiang Mei <[email protected]>
net/sched: cls_fw: fix NULL pointer dereference on shared blocks
Martin Schiller <[email protected]>
net/x25: Fix overflow when accumulating packets
Martin Schiller <[email protected]>
net/x25: Fix potential double free of skb
Pavan Chebbi <[email protected]>
bnxt_en: Restore default stat ctxs for ULP when resource is available
Michael Chan <[email protected]>
bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode()
Michael Chan <[email protected]>
bnxt_en: Refactor some basic ring setup and adjustment logic
Saeed Mahameed <[email protected]>
net/mlx5: Fix switchdev mode rollback in case of failure
Saeed Mahameed <[email protected]>
net/mlx5: Avoid "No data available" when FW version queries fail
Shay Drory <[email protected]>
net/mlx5: lag: Check for LAG device before creating debugfs
Fedor Pchelkin <[email protected]>
net: macb: properly unregister fixed rate clocks
Fedor Pchelkin <[email protected]>
net: macb: fix clk handling on PCI glue driver removal
Yucheng Lu <[email protected]>
net/sched: sch_netem: fix out-of-bounds access in packet corruption
Kuniyuki Iwashima <[email protected]>
bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
Weiming Shi <[email protected]>
rds: ib: reject FRMR registration before IB connection is established
Keenan Dong <[email protected]>
Bluetooth: MGMT: validate mesh send advertising payload length
Pauli Virtanen <[email protected]>
Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
Pauli Virtanen <[email protected]>
Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
Keenan Dong <[email protected]>
Bluetooth: MGMT: validate LTK enc_size on load
Jonathan Rissanen <[email protected]>
Bluetooth: hci_h4: Fix race during initialization
Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix UAF in le_read_features_complete
Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails
Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
Luiz Augusto von Dentz <[email protected]>
Bluetooth: L2CAP: Add support for setting BT_PHY
Cen Zhang <[email protected]>
Bluetooth: SCO: fix race conditions in sco_sock_connect()
Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate
Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: reject immediate NF_QUEUE verdict
Pablo Neira Ayuso <[email protected]>
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
Pablo Neira Ayuso <[email protected]>
netfilter: ctnetlink: ignore explicit helper on new expectations
Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: store netns and zone in expectation
Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: use expect->helper
Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: honor expectation helper field
Qi Tang <[email protected]>
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
Qi Tang <[email protected]>
netfilter: nf_conntrack_helper: pass helper to expect cleanup
Florian Westphal <[email protected]>
netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr
Florian Westphal <[email protected]>
netfilter: x_tables: ensure names are nul-terminated
Florian Westphal <[email protected]>
netfilter: nfnetlink_log: account for netlink header size
Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: strictly check for maximum number of actions
Geoffrey D. Bennett <[email protected]>
ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP
Michal Piekos <[email protected]>
net: stmmac: skip VLAN restore when VLAN hash ops are missing
Li Xiasong <[email protected]>
mptcp: fix soft lockup in mptcp_recvmsg()
Geliang Tang <[email protected]>
mptcp: add eat_recv_skb helper
Zhengchuan Liang <[email protected]>
net: ipv6: flowlabel: defer exclusive option free until RCU teardown
Alexei Starovoitov <[email protected]>
bpf: Fix regsafe() for pointers to packet
Xiang Mei <[email protected]>
bridge: mrp: reject zero test interval to avoid OOM panic
Julian Braha <[email protected]>
ASoC: Intel: boards: fix unmet dependency on PINCTRL
Suraj Gupta <[email protected]>
net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets
Suraj Gupta <[email protected]>
net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec
Pengpeng Hou <[email protected]>
NFC: pn533: bound the UART receive buffer
Xiang Mei <[email protected]>
net: bonding: fix use-after-free in bond_xmit_broadcast()
Herbert Xu <[email protected]>
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
Herbert Xu <[email protected]>
crypto: algif_aead - Revert to operating out-of-place
Pengpeng Hou <[email protected]>
bnxt_en: set backing store type from query type
Yochai Eisenrich <[email protected]>
net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
Guoyu Su <[email protected]>
net: use skb_header_pointer() for TCPv4 GSO frag_off check
Paolo Abeni <[email protected]>
net: introduce mangleid_features
Lorenzo Bianconi <[email protected]>
net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue()
Paolo Abeni <[email protected]>
ipv6: prevent possible UaF in addrconf_permanent_addr()
Jihed Chaibi <[email protected]>
ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure
Dag Smedberg <[email protected]>
ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP
Wei Fang <[email protected]>
net: enetc: do not allow VF to configure the RSS key
Wei Fang <[email protected]>
net: enetc: check whether the RSS algorithm is Toeplitz
Marek Behún <[email protected]>
net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta
Xiang Mei <[email protected]>
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
Yang Yang <[email protected]>
bridge: br_nd_send: linearize skb before parsing ND options
Dimitri Daskalakis <[email protected]>
eth: fbnic: Account for page fragments when updating BDQ tail
Eric Dumazet <[email protected]>
ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
Eric Dumazet <[email protected]>
ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
David Carlier <[email protected]>
net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch
Thomas Bogendoerfer <[email protected]>
tg3: Fix race for querying speed/duplex
Pengpeng Hou <[email protected]>
net/ipv6: ioam6: prevent schema length wraparound in trace fill
Sherry Yang <[email protected]>
iommupt/amdv1: mark amdv1pt_install_leaf_entry as __always_inline
Yochai Eisenrich <[email protected]>
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
Jiayuan Chen <[email protected]>
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
Wei Fang <[email protected]>
net: enetc: do not access non-existent registers on pseudo MAC
Wei Fang <[email protected]>
net: enetc: add graceful stop to safely reinitialize the TX Ring
Wei Fang <[email protected]>
net: enetc: reset PIR and CIR if they are not equal when initializing TX ring
Buday Csaba <[email protected]>
net: fec: fix the PTP periodic output sysfs interface
Qingfang Deng <[email protected]>
netdevsim: fix build if SKB_EXTENSIONS=n
Dipayaan Roy <[email protected]>
net: mana: Fix RX skb truesize accounting
Sabrina Dubroca <[email protected]>
mpls: add seqcount to protect the platform_label{,s} pair
Norbert Szetei <[email protected]>
crypto: af-alg - fix NULL pointer dereference in scatterwalk
Mikulas Patocka <[email protected]>
crypto: deflate - fix spurious -ENOSPC
Horia Geantă <[email protected]>
crypto: caam - fix overflow on long hmac keys
Horia Geantă <[email protected]>
crypto: caam - fix DMA corruption on long hmac keys
Tejun Heo <[email protected]>
cgroup: Fix cgroup_drain_dying() testing the wrong condition
Tejun Heo <[email protected]>
selftests/cgroup: Don't require synchronous populated update on task exit
Tejun Heo <[email protected]>
cgroup: Wait for dying tasks to leave on rmdir
Reshma Immaculate Rajkumar <[email protected]>
wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session
Johannes Berg <[email protected]>
wifi: iwlwifi: mld: correctly set wifi generation data
Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: mvm: don't send a 6E related command when not supported
Pagadala Yesu Anjaneyulu <[email protected]>
wifi: iwlwifi: mld: Fix MLO scan timing
Frank Li <[email protected]>
dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning
Stanislav Kinsburskii <[email protected]>
mshv: Fix error handling in mshv_region_pin
Praveen Talari <[email protected]>
spi: geni-qcom: Check DMA interrupts early in ISR
Paulo Alcantara <[email protected]>
smb: client: fix generic/694 due to wrong ->i_blocks
Alex Hung <[email protected]>
drm/amd/display: Fix gamma 2.2 colorop TFs
ZhengYuan Huang <[email protected]>
btrfs: reject root items with drop_progress and zero drop_level
Mikko Perttunen <[email protected]>
i2c: tegra: Don't mark devices with pins as IRQ safe
Filipe Manana <[email protected]>
btrfs: reserve enough transaction items for qgroup ioctls
Lee Jones <[email protected]>
HID: multitouch: Check to ensure report responses match the request
Joe Lawrence <[email protected]>
objtool/klp: fix mkstemp() failure with long paths
Lee Jones <[email protected]>
HID: core: Mitigate potential OOB by removing bogus memset()
Lee Jones <[email protected]>
HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
Josh Poimboeuf <[email protected]>
objtool: Fix Clang jump table detection
Paul SAGE <[email protected]>
tg3: replace placeholder MAC address with device property
Johannes Thumshirn <[email protected]>
btrfs: don't take device_list_mutex when querying zone info
Deepanshu Kartikey <[email protected]>
atm: lec: fix use-after-free in sock_def_readable()
Benoît Sevens <[email protected]>
HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
Deepanshu Kartikey <[email protected]>
wifi: mac80211: check tdls flag in ieee80211_tdls_oper
Adrian Freund <[email protected]>
HID: logitech-hidpp: Enable MX Master 4 over bluetooth
Pepper Gray <[email protected]>
arm64/scs: Fix handling of advance_loc4
Long Li <[email protected]>
xfs: close crash window in attr dabtree inactivation
Long Li <[email protected]>
xfs: factor out xfs_attr3_leaf_init
Long Li <[email protected]>
xfs: factor out xfs_attr3_node_entry_remove
Josef Bacik <[email protected]>
scsi: target: tcm_loop: Drain commands in target_reset handler
Thinh Nguyen <[email protected]>
scsi: target: file: Use kzalloc_flex for aio_cmd
Guangshuo Li <[email protected]>
net: mana: fix use-after-free in add_adev() error path
Willem de Bruijn <[email protected]>
net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
Yang Wang <[email protected]>
drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13
-------------
Diffstat:
.../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +- .../bindings/connector/usb-connector.yaml | 1 + .../bindings/gpio/microchip,mpfs-gpio.yaml | 4 +- Makefile | 4 +- arch/arm64/kernel/pi/patch-scs.c | 8 + arch/mips/lib/multi3.c | 6 +- arch/mips/mm/cache.c | 3 +- arch/mips/mm/tlb-r4k.c | 2 +- arch/mips/ralink/clk.c | 8 +- arch/riscv/kernel/kgdb.c | 7 +- arch/riscv/kernel/process.c | 4 +- arch/s390/kernel/perf_cpum_sf.c | 6 +- arch/x86/events/intel/core.c | 6 +- arch/x86/kernel/Makefile | 14 ++ arch/x86/mm/Makefile | 2 + arch/x86/platform/geode/geode-common.c | 24 ++- crypto/af_alg.c | 53 ++---- crypto/algif_aead.c | 100 ++--------- crypto/algif_skcipher.c | 6 +- crypto/authencesn.c | 50 +++--- crypto/deflate.c | 11 +- drivers/accel/qaic/qaic_control.c | 47 ++++- drivers/acpi/riscv/rimt.c | 7 + drivers/android/binder/page_range.rs | 8 +- drivers/android/binder/rust_binder_main.rs | 2 +- drivers/auxdisplay/line-display.c | 2 +- drivers/bluetooth/hci_h4.c | 3 - drivers/comedi/comedi_fops.c | 8 +- drivers/comedi/drivers.c | 8 + drivers/comedi/drivers/dt2815.c | 12 ++ drivers/comedi/drivers/me4000.c | 16 +- drivers/comedi/drivers/me_daq.c | 35 ++-- drivers/comedi/drivers/ni_atmio16d.c | 3 +- drivers/counter/rz-mtu3-cnt.c | 67 +++---- drivers/cpufreq/cpufreq_governor.c | 6 +- drivers/crypto/caam/caamalg_qi2.c | 3 +- drivers/crypto/caam/caamhash.c | 3 +- drivers/crypto/tegra/tegra-se-aes.c | 11 +- drivers/crypto/tegra/tegra-se-hash.c | 30 ++-- drivers/firmware/microchip/mpfs-auto-update.c | 10 +- drivers/gpib/Kconfig | 1 + drivers/gpib/common/gpib_os.c | 96 +++++++--- drivers/gpib/include/gpib_types.h | 8 + drivers/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c | 4 +- drivers/gpio/gpio-mxc.c | 10 +- drivers/gpio/gpio-qixis-fpga.c | 4 +- drivers/gpio/gpiolib-shared.c | 57 ++++-- drivers/gpio/gpiolib-shared.h | 11 +- drivers/gpio/gpiolib.c | 135 +++++++------- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 +- drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_colorop.c | 6 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 17 +- drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 1 - drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c | 1 - .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 33 +++- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 33 +++- drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1 - drivers/gpu/drm/ast/ast_dp501.c | 2 +- drivers/gpu/drm/drm_bridge.c | 16 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_ioc32.c | 2 + drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/g4x_dp.c | 2 +- drivers/gpu/drm/i915/display/icl_dsi.c | 4 +- drivers/gpu/drm/i915/display/intel_cdclk.c | 54 ++++++ drivers/gpu/drm/sysfb/efidrm.c | 46 +++-- drivers/gpu/drm/xe/xe_pagefault.c | 6 + drivers/gpu/drm/xe/xe_pxp.c | 11 +- drivers/hid/hid-appletb-kbd.c | 5 +- drivers/hid/hid-core.c | 7 +- drivers/hid/hid-logitech-hidpp.c | 6 +- drivers/hid/hid-multitouch.c | 7 + drivers/hid/wacom_wac.c | 10 ++ drivers/hv/mshv_regions.c | 6 +- drivers/hwmon/asus-ec-sensors.c | 7 +- drivers/hwmon/occ/common.c | 19 +- drivers/hwmon/pmbus/ltc4286.c | 1 + drivers/hwmon/pmbus/pxe1610.c | 5 +- drivers/hwmon/pmbus/tps53679.c | 10 +- drivers/i2c/busses/Kconfig | 2 + drivers/i2c/busses/i2c-tegra.c | 5 +- drivers/iio/accel/adxl313_core.c | 2 + drivers/iio/accel/adxl355_core.c | 2 +- drivers/iio/accel/adxl380.c | 2 +- drivers/iio/adc/ade9000.c | 12 +- drivers/iio/adc/aspeed_adc.c | 1 + drivers/iio/adc/ti-adc161s626.c | 41 +++-- drivers/iio/adc/ti-ads1119.c | 11 +- drivers/iio/adc/ti-ads7950.c | 8 +- drivers/iio/dac/ad5770r.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 32 ++-- drivers/iio/imu/adis16550.c | 8 +- drivers/iio/imu/bmi160/bmi160_core.c | 15 +- drivers/iio/imu/bno055/bno055.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 15 +- drivers/iio/light/vcnl4035.c | 18 +- drivers/iio/light/veml6070.c | 4 +- drivers/iio/orientation/hid-sensor-rotation.c | 24 ++- drivers/input/joystick/xpad.c | 5 + drivers/input/mouse/bcm5974.c | 42 ++++- drivers/input/rmi4/rmi_f54.c | 4 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/interconnect/qcom/sm8450.c | 4 +- drivers/iommu/generic_pt/fmt/amdv1.h | 2 +- drivers/iommu/generic_pt/iommu_pt.h | 2 +- drivers/irqchip/irq-riscv-aplic-main.c | 4 +- drivers/misc/fastrpc.c | 5 +- drivers/misc/mei/hw-me.c | 14 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 18 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 76 +++++--- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 5 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 5 +- drivers/net/ethernet/broadcom/tg3.c | 13 +- drivers/net/ethernet/cadence/macb_pci.c | 10 +- drivers/net/ethernet/faraday/ftgmac100.c | 28 ++- drivers/net/ethernet/freescale/enetc/enetc.c | 13 +- drivers/net/ethernet/freescale/enetc/enetc4_hw.h | 11 ++ drivers/net/ethernet/freescale/enetc/enetc4_pf.c | 118 +++++++++++-- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 10 +- drivers/net/ethernet/freescale/fec_ptp.c | 3 - drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 21 ++- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++++-- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 + .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 6 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.h | 2 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 13 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 14 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 2 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 9 +- drivers/net/phy/sfp.c | 7 +- drivers/net/virtio_net.c | 20 +-- drivers/net/vxlan/vxlan_core.c | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 15 +- .../net/wireless/intel/iwlwifi/fw/api/commands.h | 5 + drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 10 ++ drivers/net/wireless/intel/iwlwifi/mld/iface.c | 101 +++++++---- drivers/net/wireless/intel/iwlwifi/mld/mac80211.c | 19 ++ drivers/net/wireless/intel/iwlwifi/mld/mld.c | 1 + drivers/net/wireless/intel/iwlwifi/mld/mlo.c | 4 +- drivers/net/wireless/intel/iwlwifi/mld/notif.c | 5 + drivers/net/wireless/intel/iwlwifi/mld/scan.c | 30 +++- drivers/net/wireless/intel/iwlwifi/mld/scan.h | 9 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 3 +- drivers/net/wireless/microchip/wilc1000/hif.c | 2 +- drivers/net/wireless/virtual/virt_wifi.c | 1 - drivers/nfc/pn533/uart.c | 3 + drivers/nvmem/imx-ocotp-ele.c | 1 + drivers/nvmem/imx-ocotp.c | 1 + drivers/nvmem/zynqmp_nvmem.c | 8 +- drivers/reset/core.c | 1 - drivers/s390/crypto/zcrypt_msgtype6.c | 32 ++-- drivers/spi/spi-amlogic-spifc-a4.c | 12 ++ drivers/spi/spi-cadence-quadspi.c | 17 +- drivers/spi/spi-geni-qcom.c | 9 +- drivers/spi/spi-stm32-ospi.c | 9 +- drivers/target/loopback/tcm_loop.c | 52 +++++- drivers/target/target_core_file.c | 2 +- drivers/thermal/thermal_core.c | 32 +++- drivers/thunderbolt/nhi.c | 2 +- drivers/tty/vt/vt.c | 18 ++ drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/class/cdc-acm.c | 9 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/usbtmc.c | 3 + drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/driver.c | 23 ++- drivers/usb/core/offload.c | 102 ++++++----- drivers/usb/core/phy.c | 12 +- drivers/usb/core/quirks.c | 3 + drivers/usb/core/usb.c | 1 + drivers/usb/dwc2/gadget.c | 2 + drivers/usb/gadget/function/f_ecm.c | 35 ++-- drivers/usb/gadget/function/f_eem.c | 59 ++++--- drivers/usb/gadget/function/f_hid.c | 19 +- drivers/usb/gadget/function/f_rndis.c | 49 ++++-- drivers/usb/gadget/function/f_subset.c | 63 ++++--- drivers/usb/gadget/function/f_uac1_legacy.c | 47 +++-- drivers/usb/gadget/function/f_uvc.c | 39 +++- drivers/usb/gadget/function/u_ecm.h | 21 ++- drivers/usb/gadget/function/u_eem.h | 21 ++- drivers/usb/gadget/function/u_ether.c | 16 +- drivers/usb/gadget/function/u_gether.h | 22 ++- drivers/usb/gadget/function/u_rndis.h | 31 +++- drivers/usb/gadget/function/uvc.h | 3 + drivers/usb/gadget/function/uvc_v4l2.c | 5 +- drivers/usb/gadget/udc/dummy_hcd.c | 42 +++-- drivers/usb/host/ehci-brcm.c | 4 +- drivers/usb/host/xhci-sideband.c | 18 +- drivers/usb/misc/usbio.c | 7 +- drivers/usb/serial/io_edgeport.c | 3 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 4 + drivers/usb/typec/altmodes/thunderbolt.c | 44 ++--- drivers/usb/typec/ucsi/ucsi.c | 9 +- fs/btrfs/ioctl.c | 12 +- fs/btrfs/tree-checker.c | 17 ++ fs/btrfs/zoned.c | 6 +- fs/smb/client/cifsglob.h | 6 + fs/smb/client/file.c | 1 - fs/smb/client/inode.c | 21 +-- fs/smb/client/smb2ops.c | 20 +-- fs/smb/server/smb2pdu.c | 121 +++++++++---- fs/smb/server/smbacl.c | 43 +++++ fs/smb/server/smbacl.h | 2 + fs/xfs/libxfs/xfs_attr_leaf.c | 22 +++ fs/xfs/libxfs/xfs_attr_leaf.h | 3 + fs/xfs/libxfs/xfs_da_btree.c | 53 ++++-- fs/xfs/libxfs/xfs_da_btree.h | 2 + fs/xfs/xfs_attr_inactive.c | 99 ++++++----- include/crypto/if_alg.h | 5 +- include/linux/cgroup-defs.h | 3 + include/linux/iio/iio.h | 12 ++ include/linux/netdevice.h | 3 + include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/skbuff.h | 1 + include/linux/usb.h | 10 +- include/net/bluetooth/bluetooth.h | 39 ++-- include/net/bluetooth/hci.h | 9 + include/net/bluetooth/hci_core.h | 1 + include/net/bluetooth/hci_sync.h | 3 + include/net/netfilter/nf_conntrack_expect.h | 20 ++- include/net/netns/mpls.h | 1 + io_uring/io_uring.c | 62 ++++--- io_uring/io_uring.h | 34 +++- io_uring/net.c | 4 + io_uring/rsrc.c | 4 + kernel/bpf/verifier.c | 37 +++- kernel/cgroup/cgroup.c | 88 ++++++++- kernel/kallsyms.c | 64 +++++-- kernel/power/em_netlink.c | 2 + kernel/sched/debug.c | 4 +- kernel/sched/ext.c | 144 +++++++++++---- kernel/sched/ext_idle.c | 33 ++-- kernel/sched/fair.c | 10 +- kernel/sched/sched.h | 3 + kernel/trace/bpf_trace.c | 4 + lib/crypto/chacha-block-generic.c | 4 + net/atm/lec.c | 72 +++++--- net/atm/lec.h | 2 +- net/bluetooth/hci_conn.c | 113 +++++++++++- net/bluetooth/hci_event.c | 153 ++++++++-------- net/bluetooth/hci_sync.c | 152 +++++++++++++--- net/bluetooth/l2cap_sock.c | 20 ++- net/bluetooth/mgmt.c | 17 +- net/bluetooth/sco.c | 30 +++- net/bluetooth/smp.c | 11 +- net/bridge/br_arp_nd_proxy.c | 18 +- net/bridge/br_mrp_netlink.c | 4 +- net/core/dev.c | 38 +++- net/core/skmsg.c | 13 +- net/hsr/hsr_device.c | 32 ++-- net/ipv6/addrconf.c | 6 +- net/ipv6/datagram.c | 10 ++ net/ipv6/icmp.c | 3 + net/ipv6/ioam6.c | 4 +- net/ipv6/ip6_flowlabel.c | 5 - net/ipv6/ip6_tunnel.c | 5 + net/ipv6/ndisc.c | 3 + net/mac80211/tdls.c | 2 +- net/mpls/af_mpls.c | 29 ++- net/mptcp/protocol.c | 30 ++-- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/nf_conntrack_broadcast.c | 8 +- net/netfilter/nf_conntrack_expect.c | 25 ++- net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 13 +- net/netfilter/nf_conntrack_netlink.c | 87 +++------ net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_flow_table_offload.c | 196 ++++++++++++++------- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_log.c | 2 +- net/netfilter/x_tables.c | 23 +++ net/netfilter/xt_cgroup.c | 6 + net/netfilter/xt_rateest.c | 5 + net/qrtr/af_qrtr.c | 31 ++-- net/rds/ib_rdma.c | 7 +- net/sched/cls_api.c | 1 + net/sched/cls_flow.c | 10 +- net/sched/cls_fw.c | 14 +- net/sched/sch_hfsc.c | 4 +- net/sched/sch_netem.c | 5 +- net/x25/x25_in.c | 9 +- net/x25/x25_subr.c | 1 + sound/hda/codecs/realtek/alc269.c | 12 +- sound/pci/ctxfi/ctatc.c | 10 +- sound/pci/ctxfi/ctdaio.c | 82 +++++---- sound/soc/cirrus/ep93xx-i2s.c | 34 ++-- sound/soc/intel/boards/Kconfig | 2 - sound/usb/caiaq/device.c | 2 +- sound/usb/qcom/qc_audio_offload.c | 10 +- sound/usb/quirks.c | 2 + tools/objtool/check.c | 5 +- tools/objtool/elf.c | 23 +-- tools/testing/selftests/cgroup/lib/cgroup_util.c | 15 ++ .../selftests/cgroup/lib/include/cgroup_util.h | 2 + tools/testing/selftests/cgroup/test_core.c | 3 +- tools/testing/selftests/cgroup/test_kill.c | 7 +- 311 files changed, 3926 insertions(+), 1765 deletions(-)