6.1.169-rc1 review

Greg Kroah-Hartman linux-patches linux-tegra lkml regressions stable 1 version Apr 13 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Apr 1355 patches 14 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/55	lib/crypto: chacha: Zeroize permuted_state before it leaves scope`lib/crypto/chacha.c`	+4 -0	0 replies
2/55	wifi: rt2x00usb: fix devres lifetime`drivers/net/wireless/ralink/rt2x00/rt2x00usb.c`	+1 -1	0 replies
3/55	xfrm_user: fix info leak in build_report()`net/xfrm/xfrm_user.c`	+1 -0	0 replies
4/55	mptcp: fix slab-use-after-free in __inet_lookup_established`net/mptcp/protocol.c` `net/mptcp/protocol.h` `net/mptcp/subflow.c`	+12 -6	0 replies
5/55	Input: uinput - fix circular locking dependency with ff-core`drivers/input/misc/uinput.c`	+21 -7	0 replies
6/55	Input: uinput - take event lock when submitting FF request "event"`drivers/input/misc/uinput.c`	+7 -0	0 replies
7/55	MIPS: Always record SEGBITS in cpu_data.vmbits`arch/mips/include/asm/cpu-features.h` `arch/mips/include/asm/cpu-info.h` `arch/mips/include/asm/mipsregs.h` +2 more	+12 -8	0 replies
8/55	MIPS: mm: Suppress TLB uniquification on EHINV hardware`arch/mips/mm/tlb-r4k.c`	+2 -1	0 replies
9/55	MIPS: mm: Rewrite TLB uniquification for the hidden bit feature`arch/mips/mm/tlb-r4k.c`	+228 ~~-54~~	0 replies
10/55	media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID`drivers/media/usb/uvc/uvc_driver.c` `drivers/media/usb/uvc/uvcvideo.h`	+48 ~~-27~~	0 replies
11/55	media: uvcvideo: Use heuristic to find stream entity`drivers/media/usb/uvc/uvc_driver.c`	+14 -1	0 replies
12/55	apparmor: validate DFA start states are in bounds in unpack_pdb`security/apparmor/policy_unpack.c`	+19 -2	0 replies
13/55	apparmor: fix memory leak in verify_header`security/apparmor/policy_unpack.c`	+0 -1	0 replies
14/55	apparmor: replace recursive profile removal with iterative approach`security/apparmor/policy.c`	+27 -3	0 replies
15/55	apparmor: fix: limit the number of levels of policy namespaces`security/apparmor/include/policy_ns.h` `security/apparmor/policy_ns.c`	+4 -0	0 replies
16/55	apparmor: fix side-effect bug in match_char() macro usage`security/apparmor/match.c`	+20 ~~-10~~	0 replies
17/55	apparmor: fix missing bounds check on DEFAULT table in verify_dfa()`security/apparmor/match.c`	+3 -2	0 replies
18/55	apparmor: Fix double free of ns_name in aa_replace_profiles()`security/apparmor/policy.c`	+1 -0	0 replies
19/55	apparmor: fix unprivileged local user can do privileged policy management`security/apparmor/apparmorfs.c` `security/apparmor/include/policy.h` `security/apparmor/policy.c`	+52 ~~-11~~	0 replies
20/55	apparmor: fix differential encoding verification`security/apparmor/include/match.h` `security/apparmor/match.c`	+20 -4	0 replies
21/55	apparmor: fix race on rawdata dereference`security/apparmor/apparmorfs.c` `security/apparmor/include/policy_unpack.h` `security/apparmor/policy.c` +1 more	+93 ~~-57~~	0 replies
22/55	apparmor: fix race between freeing data and fs accessing it`security/apparmor/apparmorfs.c` `security/apparmor/include/label.h` `security/apparmor/include/lib.h` +4 more	+153 ~~-101~~	0 replies
23/55	usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop`drivers/usb/gadget/function/u_ether.c`	+4 -4	0 replies
24/55	Revert "ACPI: EC: Evaluate orphan _REG under EC device"`drivers/acpi/acpica/acevents.h` `drivers/acpi/acpica/evregion.c` `drivers/acpi/acpica/evxfregn.c` +2 more	+5 ~~-66~~	0 replies
25/55	ACPICA: Add a depth argument to acpi_execute_reg_methods()`drivers/acpi/acpica/acevents.h` `drivers/acpi/acpica/evregion.c` `drivers/acpi/acpica/evxfregn.c` +2 more	+14 -7	0 replies
26/55	ACPI: EC: Evaluate _REG outside the EC scope more carefully`drivers/acpi/ec.c` `drivers/acpi/internal.h` `drivers/acpi/scan.c`	+12 -2	0 replies
27/55	usb: gadget: f_hid: move list and spinlock inits from bind to alloc`drivers/usb/gadget/function/f_hid.c`	+6 -5	0 replies
28/55	rfkill: Use sysfs_emit() to instead of sprintf()`net/rfkill/core.c`	+8 -8	0 replies
29/55	rfkill: sync before userspace visibility/changes`net/rfkill/core.c`	+26 -6	0 replies
30/55	net: rfkill: reduce data->mtx scope in rfkill_fop_open`net/rfkill/core.c`	+2 -3	0 replies
31/55	net: rfkill: prevent unlimited numbers of rfkill events from being created`net/rfkill/core.c`	+24 ~~-11~~	0 replies
32/55	seg6: separate dst_cache for input and output paths in seg6 lwtunnel`net/ipv6/seg6_iptunnel.c`	+28 ~~-13~~	0 replies
33/55	Revert "mptcp: add needs_id for netlink appending addr"`net/mptcp/pm_netlink.c`	+5 ~~-19~~	0 replies
34/55	drm/scheduler: signal scheduled fence when kill job`drivers/gpu/drm/scheduler/sched_entity.c`	+1 -0	0 replies
35/55	netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR`net/netfilter/nft_set_pipapo.c`	+14 -6	0 replies
36/55	netfilter: nft_ct: fix use-after-free in timeout object destroy`include/net/netfilter/nf_conntrack_timeout.h` `net/netfilter/nft_ct.c`	+2 -1	0 replies
37/55	xfrm: clear trailing padding in build_polexpire()`net/xfrm/xfrm_user.c`	+2 -0	0 replies
38/55	tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG`net/tipc/group.c`	+5 -1	0 replies
39/55	wifi: brcmsmac: Fix dma_free_coherent() size`drivers/net/wireless/broadcom/brcm80211/brcmsmac/dma.c`	+1 -1	0 replies
40/55	arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity`arch/arm64/boot/dts/hisilicon/hi3798cv200-poplar.dts`	+1 -1	0 replies
41/55	arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges`arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi`	+1 -0	0 replies
42/55	nfc: pn533: allocate rx skb before consuming bytes`drivers/nfc/pn533/uart.c`	+8 -3	0 replies
43/55	batman-adv: reject oversized global TT response buffers`net/batman-adv/translation-table.c`	+7 -2	0 replies
44/55	EDAC/mc: Fix error path ordering in edac_mc_alloc()`drivers/edac/edac_mc.c`	+3 -3	0 replies
45/55	net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption`net/tls/tls_sw.c`	+10 -0	0 replies
46/55	net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()`drivers/net/ethernet/altera/altera_tse_main.c`	+1 -0	0 replies
47/55	batman-adv: hold claim backbone gateways by reference`net/batman-adv/bridge_loop_avoidance.c`	+18 -9	0 replies
48/55	drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat`drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c`	+18 -8	0 replies
49/55	net/mlx5: Update the list of the PCI supported devices`drivers/net/ethernet/mellanox/mlx5/core/main.c`	+1 -0	0 replies
50/55	mmc: vub300: fix NULL-deref on disconnect`drivers/mmc/host/vub300.c`	+1 -1	0 replies
51/55	net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure`drivers/net/ethernet/qualcomm/qca_uart.c`	+1 -1	0 replies
52/55	net: stmmac: fix integer underflow in chain mode`drivers/net/ethernet/stmicro/stmmac/chain_mode.c`	+6 -5	0 replies
53/55	rxrpc: fix reference count leak in rxrpc_server_keyring()`net/rxrpc/server_key.c`	+3 -0	0 replies
54/55	rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING)`net/rxrpc/af_rxrpc.c` `net/rxrpc/key.c`	+1 -7	0 replies
55/55	Revert "PCI: Enable ACS after configuring IOMMU for OF platforms"`drivers/pci/pci-driver.c` `drivers/pci/pci.c` `drivers/pci/pci.h`	+9 ~~-10~~	0 replies

Reviews trailers per patch

32 of 55 patches have a Reviewed-by or Acked-by.

Patch	Ard Biesheuvel	Laurent Pinchart	Hans de Goede	Salvatore Bonaccorso	Georgia Garcia	Cengiz Can	Stanislaw Gruszka	Greg Kroah-Hartman	Matthieu Baerts (NGI0)	Mikhail Gavrilov	Simon Horman	Nicolas Dichtel	Justin Iurman	Geliang Tang	Philipp Stanner	Stefano Brivio	Breno Leitao	Tung Nguyen	Arend van Spriel	Ren Wei	Qiuxu Zhuo	Sabrina Dubroca	Krzysztof Karas	Andi Shyti	Patrisious Haddad	Maxime Bélair	Ryan Lee	Stefan Wahren	Brett A C Sheffield	Florian Fainelli	Jon Hunter	Pavel Machek (CIP)	Peter Schneider	Ron Economos	Francesco Dolcini	Shuah Khan	Miguel Ojeda	Mark Brown	Barry K. Nathan
Series																													T-b	T-b	T-b	T-b T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/55	A-b
2/55							A-b	R-b
3/55
4/55									R-b
5/55
6/55										T-b
7/55
8/55
9/55
10/55		R-b	R-b
11/55			R-b
12/55				T-b	R-b	R-b
13/55				T-b	R-b	R-b
14/55				T-b	R-b	R-b
15/55						R-b																					R-b
16/55				T-b	R-b	R-b
17/55				T-b	R-b	R-b
18/55				T-b	R-b	R-b
19/55				T-b	R-b	R-b
20/55				T-b	R-b	R-b
21/55				T-b	R-b	R-b																				R-b
22/55					R-b	R-b																				R-b
23/55
24/55			R-b
25/55			R-b
26/55			R-b
27/55
28/55											R-b
29/55
30/55
31/55
32/55												R-b	R-b
33/55														R-b
34/55															R-b
35/55																R-b
36/55
37/55											R-b						R-b
38/55											R-b							R-b
39/55																			A-b
40/55
41/55
42/55
43/55																				T-b
44/55																					R-b
45/55																						R-b
46/55
47/55
48/55																							R-b	R-b
49/55											R-b														R-b
50/55
51/55											R-b																	R-b
52/55
53/55																				T-b
54/55
55/55

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 39 reviewers.

Read the v1 thread

Cover letter [PATCH 6.1 00/55] 6.1.169-rc1 review

This is the start of the stable review cycle for the 6.1.169 release. There are 55 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 15 Apr 2026 15:57:08 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.169-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.1.169-rc1

Manivannan Sadhasivam <[email protected]>
Revert "PCI: Enable ACS after configuring IOMMU for OF platforms"

David Howells <[email protected]>
rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING)

Luxiao Xu <[email protected]>
rxrpc: fix reference count leak in rxrpc_server_keyring()

Tyllis Xu <[email protected]>
net: stmmac: fix integer underflow in chain mode

Pengpeng Hou <[email protected]>
net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure

Johan Hovold <[email protected]>
mmc: vub300: fix NULL-deref on disconnect

Michael Guralnik <[email protected]>
net/mlx5: Update the list of the PCI supported devices

Sebastian Brzezinka <[email protected]>
drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat

Haoze Xie <[email protected]>
batman-adv: hold claim backbone gateways by reference

David Carlier <[email protected]>
net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

Muhammad Alifa Ramdhan <[email protected]>
net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption

Borislav Petkov (AMD) <[email protected]>
EDAC/mc: Fix error path ordering in edac_mc_alloc()

Ruide Cao <[email protected]>
batman-adv: reject oversized global TT response buffers

Pengpeng Hou <[email protected]>
nfc: pn533: allocate rx skb before consuming bytes

Shawn Guo <[email protected]>
arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges

Shawn Guo <[email protected]>
arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity

Thomas Fourier <[email protected]>
wifi: brcmsmac: Fix dma_free_coherent() size

Oleh Konko <[email protected]>
tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG

Yasuaki Torimaru <[email protected]>
xfrm: clear trailing padding in build_polexpire()

Tuan Do <[email protected]>
netfilter: nft_ct: fix use-after-free in timeout object destroy

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR

Lin.Cao <[email protected]>
drm/scheduler: signal scheduled fence when kill job

Matthieu Baerts (NGI0) <[email protected]>
Revert "mptcp: add needs_id for netlink appending addr"

Andrea Mayer <[email protected]>
seg6: separate dst_cache for input and output paths in seg6 lwtunnel

Greg Kroah-Hartman <[email protected]>
net: rfkill: prevent unlimited numbers of rfkill events from being created

Johannes Berg <[email protected]>

    net: rfkill: reduce data->mtx scope in rfkill_fop_open

Johannes Berg <[email protected]>
rfkill: sync before userspace visibility/changes

Bo Liu <[email protected]>
rfkill: Use sysfs_emit() to instead of sprintf()

Michael Zimmermann <[email protected]>
usb: gadget: f_hid: move list and spinlock inits from bind to alloc

Rafael J. Wysocki <[email protected]>
ACPI: EC: Evaluate _REG outside the EC scope more carefully

Rafael J. Wysocki <[email protected]>
ACPICA: Add a depth argument to acpi_execute_reg_methods()

Rafael J. Wysocki <[email protected]>
Revert "ACPI: EC: Evaluate orphan _REG under EC device"

Kuen-Han Tsai <[email protected]>
usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop

John Johansen <[email protected]>
apparmor: fix race between freeing data and fs accessing it

John Johansen <[email protected]>
apparmor: fix race on rawdata dereference

John Johansen <[email protected]>
apparmor: fix differential encoding verification

John Johansen <[email protected]>
apparmor: fix unprivileged local user can do privileged policy management

John Johansen <[email protected]>
apparmor: Fix double free of ns_name in aa_replace_profiles()

Massimiliano Pellizzer <[email protected]>
apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

Massimiliano Pellizzer <[email protected]>
apparmor: fix side-effect bug in match_char() macro usage

John Johansen <[email protected]>
apparmor: fix: limit the number of levels of policy namespaces

Massimiliano Pellizzer <[email protected]>
apparmor: replace recursive profile removal with iterative approach

Massimiliano Pellizzer <[email protected]>
apparmor: fix memory leak in verify_header

Massimiliano Pellizzer <[email protected]>
apparmor: validate DFA start states are in bounds in unpack_pdb

Ricardo Ribalda <[email protected]>
media: uvcvideo: Use heuristic to find stream entity

Thadeu Lima de Souza Cascardo <[email protected]>
media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID

Maciej W. Rozycki <[email protected]>
MIPS: mm: Rewrite TLB uniquification for the hidden bit feature

Maciej W. Rozycki <[email protected]>
MIPS: mm: Suppress TLB uniquification on EHINV hardware

Maciej W. Rozycki <[email protected]>
MIPS: Always record SEGBITS in cpu_data.vmbits

Dmitry Torokhov <[email protected]>
Input: uinput - take event lock when submitting FF request "event"

Mikhail Gavrilov <[email protected]>
Input: uinput - fix circular locking dependency with ff-core

Jiayuan Chen <[email protected]>
mptcp: fix slab-use-after-free in __inet_lookup_established

Greg Kroah-Hartman <[email protected]>
xfrm_user: fix info leak in build_report()

Johan Hovold <[email protected]>
wifi: rt2x00usb: fix devres lifetime

Eric Biggers <[email protected]>
lib/crypto: chacha: Zeroize permuted_state before it leaves scope

-------------

Diffstat:

 Makefile                                           |   4 +-
 .../boot/dts/hisilicon/hi3798cv200-poplar.dts      |   2 +-
 arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi     |   1 +
 arch/mips/include/asm/cpu-features.h               |   1 -
 arch/mips/include/asm/cpu-info.h                   |   2 -
 arch/mips/include/asm/mipsregs.h                   |   2 +
 arch/mips/kernel/cpu-probe.c                       |  13 +-
 arch/mips/kernel/cpu-r3k-probe.c                   |   2 +
 arch/mips/mm/tlb-r4k.c                             | 285 +++++++++++++++++----
 drivers/acpi/acpica/acevents.h                     |   6 +-
 drivers/acpi/acpica/evregion.c                     |  12 +-
 drivers/acpi/acpica/evxfregn.c                     |  64 +----
 drivers/acpi/ec.c                                  |  14 +-
 drivers/acpi/internal.h                            |   1 +
 drivers/acpi/scan.c                                |   2 +
 drivers/edac/edac_mc.c                             |   6 +-
 drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c   |  26 +-
 drivers/gpu/drm/scheduler/sched_entity.c           |   1 +
 drivers/input/misc/uinput.c                        |  35 ++-
 drivers/media/usb/uvc/uvc_driver.c                 |  88 +++++--
 drivers/media/usb/uvc/uvcvideo.h                   |   2 +
 drivers/mmc/host/vub300.c                          |   2 +-
 drivers/net/ethernet/altera/altera_tse_main.c      |   1 +
 drivers/net/ethernet/mellanox/mlx5/core/main.c     |   1 +
 drivers/net/ethernet/qualcomm/qca_uart.c           |   2 +-
 drivers/net/ethernet/stmicro/stmmac/chain_mode.c   |  11 +-
 .../net/wireless/broadcom/brcm80211/brcmsmac/dma.c |   2 +-
 drivers/net/wireless/ralink/rt2x00/rt2x00usb.c     |   2 +-
 drivers/nfc/pn533/uart.c                           |  11 +-
 drivers/pci/pci-driver.c                           |   8 -
 drivers/pci/pci.c                                  |  10 +-
 drivers/pci/pci.h                                  |   1 -
 drivers/usb/gadget/function/f_hid.c                |  11 +-
 drivers/usb/gadget/function/u_ether.c              |   8 +-
 include/acpi/acpixf.h                              |   5 +-
 include/net/netfilter/nf_conntrack_timeout.h       |   1 +
 lib/crypto/chacha.c                                |   4 +
 net/batman-adv/bridge_loop_avoidance.c             |  27 +-
 net/batman-adv/translation-table.c                 |   9 +-
 net/ipv6/seg6_iptunnel.c                           |  41 ++-
 net/mptcp/pm_netlink.c                             |  24 +-
 net/mptcp/protocol.c                               |   2 +
 net/mptcp/protocol.h                               |   1 +
 net/mptcp/subflow.c                                |  15 +-
 net/netfilter/nft_ct.c                             |   2 +-
 net/netfilter/nft_set_pipapo.c                     |  20 +-
 net/rfkill/core.c                                  |  84 ++++--
 net/rxrpc/af_rxrpc.c                               |   6 -
 net/rxrpc/key.c                                    |   2 +-
 net/rxrpc/server_key.c                             |   3 +
 net/tipc/group.c                                   |   6 +-
 net/tls/tls_sw.c                                   |  10 +
 net/xfrm/xfrm_user.c                               |   3 +
 security/apparmor/apparmorfs.c                     | 228 ++++++++++-------
 security/apparmor/include/label.h                  |  16 +-
 security/apparmor/include/lib.h                    |  12 +
 security/apparmor/include/match.h                  |   1 +
 security/apparmor/include/policy.h                 |  13 +-
 security/apparmor/include/policy_ns.h              |   2 +
 security/apparmor/include/policy_unpack.h          |  83 +++---
 security/apparmor/label.c                          |  12 +-
 security/apparmor/match.c                          |  58 +++--
 security/apparmor/policy.c                         |  82 +++++-
 security/apparmor/policy_ns.c                      |   2 +
 security/apparmor/policy_unpack.c                  |  74 ++++--
 65 files changed, 989 insertions(+), 498 deletions(-)

Read the cover letter in its thread