6.18.23-rc1 review

Greg Kroah-Hartman linux-patches linux-tegra lkml stable 1 version Apr 13 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Apr 1383 patches 13 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/83	usb: typec: ucsi: skip connector validation before init`drivers/usb/typec/ucsi/ucsi.c`	+2 -1	0 replies
2/83	wifi: rt2x00usb: fix devres lifetime`drivers/net/wireless/ralink/rt2x00/rt2x00usb.c`	+1 -1	0 replies
3/83	xfrm_user: fix info leak in build_report()`net/xfrm/xfrm_user.c`	+1 -0	0 replies
4/83	net: rfkill: prevent unlimited numbers of rfkill events from being created`net/rfkill/core.c`	+24 ~~-11~~	0 replies
5/83	Revert "ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone"`sound/hda/codecs/realtek/alc662.c`	+0 -9	0 replies
6/83	Revert "mptcp: add needs_id for netlink appending addr"`net/mptcp/pm_kernel.c`	+5 ~~-19~~	0 replies
7/83	mptcp: fix slab-use-after-free in __inet_lookup_established`net/mptcp/protocol.c` `net/mptcp/protocol.h` `net/mptcp/subflow.c`	+12 -6	0 replies
8/83	seg6: separate dst_cache for input and output paths in seg6 lwtunnel`net/ipv6/seg6_iptunnel.c`	+23 ~~-11~~	0 replies
9/83	Input: uinput - fix circular locking dependency with ff-core`drivers/input/misc/uinput.c`	+21 -7	0 replies
10/83	Input: uinput - take event lock when submitting FF request "event"`drivers/input/misc/uinput.c`	+7 -0	0 replies
11/83	MIPS: Always record SEGBITS in cpu_data.vmbits`arch/mips/include/asm/cpu-features.h` `arch/mips/include/asm/cpu-info.h` `arch/mips/include/asm/mipsregs.h` +2 more	+12 -8	0 replies
12/83	MIPS: mm: Suppress TLB uniquification on EHINV hardware`arch/mips/mm/tlb-r4k.c`	+2 -1	0 replies
13/83	MIPS: mm: Rewrite TLB uniquification for the hidden bit feature`arch/mips/mm/tlb-r4k.c`	+228 ~~-54~~	0 replies
14/83	btrfs: remove pointless out labels from extent-tree.c`fs/btrfs/extent-tree.c`	+10 ~~-14~~	0 replies
15/83	btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref()`fs/btrfs/extent-tree.c`	+1 -1	0 replies
16/83	af_unix: Count cyclic SCC.`net/unix/garbage.c`	+21 ~~-10~~	0 replies
17/83	af_unix: Simplify GC state.`net/unix/garbage.c`	+12 -9	0 replies
18/83	af_unix: Give up GC if MSG_PEEK intervened.`net/unix/af_unix.c` `net/unix/af_unix.h` `net/unix/garbage.c`	+54 ~~-28~~	0 replies
19/83	i2c: imx: zero-initialize dma_slave_config for eDMA`drivers/i2c/busses/i2c-imx.c`	+1 -1	0 replies
20/83	netfilter: nft_ct: fix use-after-free in timeout object destroy`include/net/netfilter/nf_conntrack_timeout.h` `net/netfilter/nft_ct.c`	+2 -1	0 replies
21/83	firmware: thead: Fix buffer overflow and use standard endian macros`drivers/firmware/thead,th1520-aon.c` `include/linux/firmware/thead/thead,th1520-aon.h`	+3 ~~-78~~	0 replies
22/83	workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works`kernel/workqueue.c`	+13 -1	0 replies
23/83	modpost: Declare extra_warn with unused attribute`scripts/mod/modpost.c`	+1 -1	0 replies
24/83	xfrm: clear trailing padding in build_polexpire()`net/xfrm/xfrm_user.c`	+2 -0	0 replies
25/83	xfrm: hold dev ref until after transport_finish NF_HOOK`net/ipv4/xfrm4_input.c` `net/ipv6/xfrm6_input.c` `net/xfrm/xfrm_input.c`	+22 -6	0 replies
26/83	tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG`net/tipc/group.c`	+5 -1	0 replies
27/83	wifi: brcmsmac: Fix dma_free_coherent() size`drivers/net/wireless/broadcom/brcm80211/brcmsmac/dma.c`	+1 -1	0 replies
28/83	platform/x86: ISST: Reset core count to 0`drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c`	+2 -0	0 replies
29/83	platform/x86/intel-uncore-freq: Handle autonomous UFS status bit`drivers/platform/x86/intel/uncore-frequency/uncore-frequency-tpmi.c`	+7 -1	0 replies
30/83	Revert "arm64: dts: rockchip: Further describe the WiFi for the Pinebook Pro"`arch/arm64/boot/dts/rockchip/rk3399-pinebook-pro.dts`	+0 ~~-18~~	0 replies
31/83	Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower"`arch/arm64/boot/dts/freescale/imx8mq-librem5-r3.dts` `arch/arm64/boot/dts/freescale/imx8mq-librem5.dtsi`	+7 ~~-17~~	0 replies
32/83	arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V`arch/arm64/boot/dts/freescale/imx8mq-librem5.dtsi`	+1 -1	0 replies
33/83	arm64: dts: renesas: sparrow-hawk: Reserve first 128 MiB of DRAM`arch/arm64/boot/dts/renesas/r8a779g3-sparrow-hawk.dts`	+11 -0	0 replies
34/83	arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity`arch/arm64/boot/dts/hisilicon/hi3798cv200-poplar.dts`	+1 -1	0 replies
35/83	arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges`arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi`	+1 -0	0 replies
36/83	nfc: pn533: allocate rx skb before consuming bytes`drivers/nfc/pn533/uart.c`	+8 -3	0 replies
37/83	batman-adv: reject oversized global TT response buffers`net/batman-adv/translation-table.c`	+7 -2	0 replies
38/83	X.509: Fix out-of-bounds access when parsing extensions`crypto/asymmetric_keys/x509_cert_parser.c`	+4 -4	0 replies
39/83	EDAC/mc: Fix error path ordering in edac_mc_alloc()`drivers/edac/edac_mc.c`	+3 -3	0 replies
40/83	net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption`net/tls/tls_sw.c`	+10 -0	0 replies
41/83	net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()`drivers/net/ethernet/altera/altera_tse_main.c`	+1 -0	0 replies
42/83	batman-adv: hold claim backbone gateways by reference`net/batman-adv/bridge_loop_avoidance.c`	+18 -9	0 replies
43/83	drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat`drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c`	+18 -8	0 replies
44/83	drm/i915/psr: Do not use pipe_src as borders for SU area`drivers/gpu/drm/i915/display/intel_psr.c`	+19 ~~-11~~	0 replies
45/83	net/mlx5: Update the list of the PCI supported devices`drivers/net/ethernet/mellanox/mlx5/core/main.c`	+1 -0	0 replies
46/83	pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled`drivers/pmdomain/imx/imx8mp-blk-ctrl.c`	+1 -7	0 replies
47/83	igb: remove napi_synchronize() in igb_down()`drivers/net/ethernet/intel/igb/igb_main.c`	+1 -2	0 replies
48/83	mm/memory_hotplug: maintain N_NORMAL_MEMORY during hotplug`mm/memory_hotplug.c`	+20 -0	0 replies
49/83	mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails`mm/damon/sysfs.c`	+2 -1	0 replies
50/83	mm/damon/stat: deallocate damon_call() failure leaking damon_ctx`mm/damon/stat.c`	+7 -0	0 replies
51/83	mmc: vub300: fix NULL-deref on disconnect`drivers/mmc/host/vub300.c`	+1 -1	0 replies
52/83	mmc: vub300: fix use-after-free on disconnect`drivers/mmc/host/vub300.c`	+11 -6	0 replies
53/83	net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure`drivers/net/ethernet/qualcomm/qca_uart.c`	+1 -1	0 replies
54/83	net: stmmac: fix integer underflow in chain mode`drivers/net/ethernet/stmicro/stmmac/chain_mode.c`	+6 -5	0 replies
55/83	mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()`mm/filemap.c`	+8 -3	0 replies
56/83	idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling`drivers/net/ethernet/intel/idpf/idpf_virtchnl.c` `drivers/net/ethernet/intel/idpf/idpf_virtchnl.h`	+8 ~~-11~~	0 replies
57/83	idpf: improve locking around idpf_vc_xn_push_free()`drivers/net/ethernet/intel/idpf/idpf_virtchnl.c`	+2 -0	0 replies
58/83	idpf: set the payload size before calling the async handler`drivers/net/ethernet/intel/idpf/idpf_virtchnl.c`	+4 -0	0 replies
59/83	net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()`drivers/net/ethernet/microchip/lan966x/lan966x_fdma.c`	+2 -0	0 replies
60/83	net: lan966x: fix page pool leak in error paths`drivers/net/ethernet/microchip/lan966x/lan966x_fdma.c`	+4 -1	0 replies
61/83	net: lan966x: fix use-after-free and leak in lan966x_fdma_reload()`drivers/net/ethernet/microchip/lan966x/lan966x_fdma.c`	+18 -3	0 replies
62/83	rxrpc: Fix key quota calculation for multitoken keys`net/rxrpc/key.c`	+4 -3	0 replies
63/83	rxrpc: Fix key parsing memleak`net/rxrpc/key.c`	+1 -0	0 replies
64/83	rxrpc: Fix anonymous key handling`net/rxrpc/sendmsg.c`	+1 -1	0 replies
65/83	rxrpc: Fix call removal to use RCU safe deletion`include/trace/events/rxrpc.h` `net/rxrpc/call_object.c`	+10 ~~-16~~	0 replies
66/83	rxrpc: Fix RxGK token loading to check bounds`net/rxrpc/key.c`	+17 ~~-13~~	0 replies
67/83	rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial`include/trace/events/rxrpc.h` `net/rxrpc/conn_event.c`	+4 -2	0 replies
68/83	rxrpc: Fix rack timer warning to report unexpected mode`net/rxrpc/input_rack.c`	+1 -1	0 replies
69/83	rxrpc: Fix key reference count leak from call->key`net/rxrpc/call_object.c`	+1 -0	0 replies
70/83	rxrpc: Fix to request an ack if window is limited`include/trace/events/rxrpc.h` `net/rxrpc/ar-internal.h` `net/rxrpc/output.c` +1 more	+7 -3	0 replies
71/83	rxrpc: Only put the call ref if one was acquired`net/rxrpc/io_thread.c`	+2 -1	0 replies
72/83	rxrpc: reject undecryptable rxkad response tickets`net/rxrpc/rxkad.c`	+5 -1	0 replies
73/83	rxrpc: fix RESPONSE authenticator parser OOB read`net/rxrpc/rxgk.c`	+2 -1	0 replies
74/83	rxrpc: fix oversized RESPONSE authenticator length check`net/rxrpc/rxgk.c`	+1 -1	0 replies
75/83	rxrpc: fix reference count leak in rxrpc_server_keyring()`net/rxrpc/server_key.c`	+3 -0	0 replies
76/83	rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING)`net/rxrpc/af_rxrpc.c` `net/rxrpc/key.c`	+1 -7	0 replies
77/83	rxrpc: Fix missing error checks for rxkad encryption/decryption failure`net/rxrpc/rxkad.c`	+38 ~~-19~~	0 replies
78/83	rxrpc: Fix integer overflow in rxgk_verify_response()`net/rxrpc/rxgk.c`	+2 -1	0 replies
79/83	rxrpc: Fix leak of rxgk context in rxgk_verify_response()`net/rxrpc/rxgk.c`	+4 -2	0 replies
80/83	rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()`net/rxrpc/rxgk.c`	+4 -1	0 replies
81/83	rxrpc: only handle RESPONSE during service challenge`net/rxrpc/conn_event.c`	+12 -2	0 replies
82/83	rxrpc: proc: size address buffers for %pISpc output`net/rxrpc/proc.c`	+18 ~~-14~~	0 replies
83/83	net: skb: fix cross-cache free of KFENCE-allocated skb head`net/core/skbuff.c`	+1 -4	0 replies

Reviews trailers per patch

34 of 83 patches have a Reviewed-by or Acked-by.

Patch	Takashi Iwai	Stanislaw Gruszka	Greg Kroah-Hartman	Matthieu Baerts (NGI0)	Dan Carpenter	Drew Fustini	Waiman Long	Nicolas Schier	Simon Horman	Breno Leitao	Nicolas Dichtel	Justin Iurman	Tung Nguyen	Arend van Spriel	Ilpo Järvinen	Jan Palus	Dragan Simic	Geert Uytterhoeven	Ren Wei	Ignat Korchagin	Qiuxu Zhuo	Sabrina Dubroca	Mikhail Gavrilov	Johannes Thumshirn	David Sterba	Filipe Manana	Geliang Tang	Stefan Wahren	Yuanhe Shu	Kiryl Shutsemau (Meta)	David Hildenbrand (Arm)	Aleksandr Loktionov	Sebastian Andrzej Siewior	Samuel Salin	Li Li	Krzysztof Karas	Andi Shyti	Jeffrey Altman	Mika Kahola	Patrisious Haddad	Maciej Fijalkowski	Patryk Holda	Harry Yoo (Oracle)	Vlastimil Babka (SUSE)	Joshua Hahn	Eric Dumazet	Brett A C Sheffield	Florian Fainelli	Wentao Guan	Jon Hunter	Pavel Machek (CIP)	Ron Economos	Shuah Khan	Miguel Ojeda	Peter Schneider	Barry K. Nathan	Shung-Hsi Yu	Mark Brown	Dileep Malepu
Series																																															T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/83	T-b
2/83		A-b	R-b
3/83
4/83
5/83
6/83																											R-b
7/83				R-b
8/83											R-b	R-b
9/83
10/83																							T-b
11/83
12/83
13/83
14/83																								R-b	R-b
15/83																									R-b	R-b
16/83
17/83
18/83
19/83
20/83
21/83					R-b	A-b
22/83							A-b
23/83								R-b
24/83									R-b	R-b
25/83
26/83									R-b				R-b
27/83														A-b
28/83															R-b
29/83															R-b
30/83																T-b	R-b
31/83
32/83
33/83																		R-b
34/83
35/83
36/83
37/83																			T-b
38/83																				R-b
39/83																					R-b
40/83																						R-b
41/83
42/83
43/83																																				R-b	R-b
44/83																																							R-b
45/83									R-b																															R-b
46/83
47/83																																R-b									R-b	T-b
48/83																															A-b												R-b	A-b	R-b
49/83
50/83
51/83
52/83
53/83									R-b																			R-b
54/83
55/83																													T-b	A-b	A-b
56/83																																R-b	A-b	T-b
57/83																																R-b	A-b	T-b
58/83																																R-b	A-b	T-b	R-b
59/83
60/83
61/83
62/83
63/83
64/83
65/83
66/83																																						R-b
67/83																																						R-b
68/83									R-b																													R-b
69/83																																						R-b
70/83
71/83
72/83																			T-b
73/83
74/83
75/83																			T-b
76/83
77/83
78/83
79/83
80/83
81/83
82/83
83/83																																														R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 59 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 00/83] 6.18.23-rc1 review

This is the start of the stable review cycle for the 6.18.23 release. There are 83 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 15 Apr 2026 15:57:08 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.23-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.23-rc1

Jiayuan Chen <[email protected]>
net: skb: fix cross-cache free of KFENCE-allocated skb head

Pengpeng Hou <[email protected]>
rxrpc: proc: size address buffers for %pISpc output

Wang Jie <[email protected]>
rxrpc: only handle RESPONSE during service challenge

David Howells <[email protected]>
rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()

David Howells <[email protected]>
rxrpc: Fix leak of rxgk context in rxgk_verify_response()

David Howells <[email protected]>
rxrpc: Fix integer overflow in rxgk_verify_response()

David Howells <[email protected]>
rxrpc: Fix missing error checks for rxkad encryption/decryption failure

David Howells <[email protected]>
rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING)

Luxiao Xu <[email protected]>
rxrpc: fix reference count leak in rxrpc_server_keyring()

Keenan Dong <[email protected]>
rxrpc: fix oversized RESPONSE authenticator length check

Keenan Dong <[email protected]>
rxrpc: fix RESPONSE authenticator parser OOB read

Yuqi Xu <[email protected]>
rxrpc: reject undecryptable rxkad response tickets

Douya Le <[email protected]>
rxrpc: Only put the call ref if one was acquired

Marc Dionne <[email protected]>
rxrpc: Fix to request an ack if window is limited

Anderson Nascimento <[email protected]>

    rxrpc: Fix key reference count leak from call->key

Alok Tiwari <[email protected]>
rxrpc: Fix rack timer warning to report unexpected mode

Alok Tiwari <[email protected]>
rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial

Oleh Konko <[email protected]>
rxrpc: Fix RxGK token loading to check bounds

David Howells <[email protected]>
rxrpc: Fix call removal to use RCU safe deletion

David Howells <[email protected]>
rxrpc: Fix anonymous key handling

David Howells <[email protected]>
rxrpc: Fix key parsing memleak

David Howells <[email protected]>
rxrpc: Fix key quota calculation for multitoken keys

David Carlier <[email protected]>
net: lan966x: fix use-after-free and leak in lan966x_fdma_reload()

David Carlier <[email protected]>
net: lan966x: fix page pool leak in error paths

David Carlier <[email protected]>
net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()

Emil Tantilov <[email protected]>
idpf: set the payload size before calling the async handler

Emil Tantilov <[email protected]>
idpf: improve locking around idpf_vc_xn_push_free()

Emil Tantilov <[email protected]>
idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling

Baolin Wang <[email protected]>
mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()

Tyllis Xu <[email protected]>
net: stmmac: fix integer underflow in chain mode

Pengpeng Hou <[email protected]>
net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure

Johan Hovold <[email protected]>
mmc: vub300: fix use-after-free on disconnect

Johan Hovold <[email protected]>
mmc: vub300: fix NULL-deref on disconnect

SeongJae Park <[email protected]>
mm/damon/stat: deallocate damon_call() failure leaking damon_ctx

SeongJae Park <[email protected]>
mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails

Hao Li <[email protected]>
mm/memory_hotplug: maintain N_NORMAL_MEMORY during hotplug

Alex Dvoretsky <[email protected]>
igb: remove napi_synchronize() in igb_down()

Jacky Bai <[email protected]>
pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled

Michael Guralnik <[email protected]>
net/mlx5: Update the list of the PCI supported devices

Jouni Högander <[email protected]>
drm/i915/psr: Do not use pipe_src as borders for SU area

Sebastian Brzezinka <[email protected]>
drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat

Haoze Xie <[email protected]>
batman-adv: hold claim backbone gateways by reference

David Carlier <[email protected]>
net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

Muhammad Alifa Ramdhan <[email protected]>
net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption

Borislav Petkov (AMD) <[email protected]>
EDAC/mc: Fix error path ordering in edac_mc_alloc()

Lukas Wunner <[email protected]>
X.509: Fix out-of-bounds access when parsing extensions

Ruide Cao <[email protected]>
batman-adv: reject oversized global TT response buffers

Pengpeng Hou <[email protected]>
nfc: pn533: allocate rx skb before consuming bytes

Shawn Guo <[email protected]>
arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges

Shawn Guo <[email protected]>
arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity

Marek Vasut <[email protected]>
arm64: dts: renesas: sparrow-hawk: Reserve first 128 MiB of DRAM

Sebastian Krzyszkowiak <[email protected]>
arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V

Sebastian Krzyszkowiak <[email protected]>
Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower"

Heiko Stuebner <[email protected]>
Revert "arm64: dts: rockchip: Further describe the WiFi for the Pinebook Pro"

Srinivas Pandruvada <[email protected]>
platform/x86/intel-uncore-freq: Handle autonomous UFS status bit

Srinivas Pandruvada <[email protected]>
platform/x86: ISST: Reset core count to 0

Thomas Fourier <[email protected]>
wifi: brcmsmac: Fix dma_free_coherent() size

Oleh Konko <[email protected]>
tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG

Qi Tang <[email protected]>
xfrm: hold dev ref until after transport_finish NF_HOOK

Yasuaki Torimaru <[email protected]>
xfrm: clear trailing padding in build_polexpire()

Nathan Chancellor <[email protected]>
modpost: Declare extra_warn with unused attribute

Matthew Brost <[email protected]>
workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works

Michal Wilczynski <[email protected]>
firmware: thead: Fix buffer overflow and use standard endian macros

Tuan Do <[email protected]>
netfilter: nft_ct: fix use-after-free in timeout object destroy

Anthony Pighin <[email protected]>
i2c: imx: zero-initialize dma_slave_config for eDMA

Kuniyuki Iwashima <[email protected]>
af_unix: Give up GC if MSG_PEEK intervened.

Kuniyuki Iwashima <[email protected]>
af_unix: Simplify GC state.

Kuniyuki Iwashima <[email protected]>
af_unix: Count cyclic SCC.

robbieko <[email protected]>
btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref()

Filipe Manana <[email protected]>
btrfs: remove pointless out labels from extent-tree.c

Maciej W. Rozycki <[email protected]>
MIPS: mm: Rewrite TLB uniquification for the hidden bit feature

Maciej W. Rozycki <[email protected]>
MIPS: mm: Suppress TLB uniquification on EHINV hardware

Maciej W. Rozycki <[email protected]>
MIPS: Always record SEGBITS in cpu_data.vmbits

Dmitry Torokhov <[email protected]>
Input: uinput - take event lock when submitting FF request "event"

Mikhail Gavrilov <[email protected]>
Input: uinput - fix circular locking dependency with ff-core

Andrea Mayer <[email protected]>
seg6: separate dst_cache for input and output paths in seg6 lwtunnel

Jiayuan Chen <[email protected]>
mptcp: fix slab-use-after-free in __inet_lookup_established

Matthieu Baerts (NGI0) <[email protected]>
Revert "mptcp: add needs_id for netlink appending addr"

Takashi Iwai <[email protected]>
Revert "ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone"

Greg Kroah-Hartman <[email protected]>
net: rfkill: prevent unlimited numbers of rfkill events from being created

Greg Kroah-Hartman <[email protected]>
xfrm_user: fix info leak in build_report()

Johan Hovold <[email protected]>
wifi: rt2x00usb: fix devres lifetime

Nathan Rebello <[email protected]>
usb: typec: ucsi: skip connector validation before init

-------------

Diffstat:

 Makefile                                           |   4 +-
 .../arm64/boot/dts/freescale/imx8mq-librem5-r3.dts |   2 +-
 arch/arm64/boot/dts/freescale/imx8mq-librem5.dtsi  |  24 +-
 .../boot/dts/hisilicon/hi3798cv200-poplar.dts      |   2 +-
 arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi     |   1 +
 .../boot/dts/renesas/r8a779g3-sparrow-hawk.dts     |  11 +
 .../boot/dts/rockchip/rk3399-pinebook-pro.dts      |  18 --
 arch/mips/include/asm/cpu-features.h               |   1 -
 arch/mips/include/asm/cpu-info.h                   |   2 -
 arch/mips/include/asm/mipsregs.h                   |   2 +
 arch/mips/kernel/cpu-probe.c                       |  13 +-
 arch/mips/kernel/cpu-r3k-probe.c                   |   2 +
 arch/mips/mm/tlb-r4k.c                             | 285 +++++++++++++++++----
 crypto/asymmetric_keys/x509_cert_parser.c          |   8 +-
 drivers/edac/edac_mc.c                             |   6 +-
 drivers/firmware/thead,th1520-aon.c                |   7 +-
 drivers/gpu/drm/i915/display/intel_psr.c           |  30 ++-
 drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c   |  26 +-
 drivers/i2c/busses/i2c-imx.c                       |   2 +-
 drivers/input/misc/uinput.c                        |  35 ++-
 drivers/mmc/host/vub300.c                          |  19 +-
 drivers/net/ethernet/altera/altera_tse_main.c      |   1 +
 drivers/net/ethernet/intel/idpf/idpf_virtchnl.c    |  20 +-
 drivers/net/ethernet/intel/idpf/idpf_virtchnl.h    |   5 +-
 drivers/net/ethernet/intel/igb/igb_main.c          |   3 +-
 drivers/net/ethernet/mellanox/mlx5/core/main.c     |   1 +
 .../net/ethernet/microchip/lan966x/lan966x_fdma.c  |  28 +-
 drivers/net/ethernet/qualcomm/qca_uart.c           |   2 +-
 drivers/net/ethernet/stmicro/stmmac/chain_mode.c   |  11 +-
 .../net/wireless/broadcom/brcm80211/brcmsmac/dma.c |   2 +-
 drivers/net/wireless/ralink/rt2x00/rt2x00usb.c     |   2 +-
 drivers/nfc/pn533/uart.c                           |  11 +-
 .../x86/intel/speed_select_if/isst_tpmi_core.c     |   2 +
 .../intel/uncore-frequency/uncore-frequency-tpmi.c |   8 +-
 drivers/pmdomain/imx/imx8mp-blk-ctrl.c             |   8 +-
 drivers/usb/typec/ucsi/ucsi.c                      |   3 +-
 fs/btrfs/extent-tree.c                             |  24 +-
 include/linux/firmware/thead/thead,th1520-aon.h    |  74 ------
 include/net/netfilter/nf_conntrack_timeout.h       |   1 +
 include/trace/events/rxrpc.h                       |   4 +-
 kernel/workqueue.c                                 |  14 +-
 mm/damon/stat.c                                    |   7 +
 mm/damon/sysfs.c                                   |   3 +-
 mm/filemap.c                                       |  11 +-
 mm/memory_hotplug.c                                |  20 ++
 net/batman-adv/bridge_loop_avoidance.c             |  27 +-
 net/batman-adv/translation-table.c                 |   9 +-
 net/core/skbuff.c                                  |   5 +-
 net/ipv4/xfrm4_input.c                             |   5 +-
 net/ipv6/seg6_iptunnel.c                           |  34 ++-
 net/ipv6/xfrm6_input.c                             |   5 +-
 net/mptcp/pm_kernel.c                              |  24 +-
 net/mptcp/protocol.c                               |   2 +
 net/mptcp/protocol.h                               |   1 +
 net/mptcp/subflow.c                                |  15 +-
 net/netfilter/nft_ct.c                             |   2 +-
 net/rfkill/core.c                                  |  35 ++-
 net/rxrpc/af_rxrpc.c                               |   6 -
 net/rxrpc/ar-internal.h                            |   2 +-
 net/rxrpc/call_object.c                            |  25 +-
 net/rxrpc/conn_event.c                             |  19 +-
 net/rxrpc/input_rack.c                             |   2 +-
 net/rxrpc/io_thread.c                              |   3 +-
 net/rxrpc/key.c                                    |  40 +--
 net/rxrpc/output.c                                 |   2 +
 net/rxrpc/proc.c                                   |  37 +--
 net/rxrpc/rxgk.c                                   |  19 +-
 net/rxrpc/rxkad.c                                  |  63 +++--
 net/rxrpc/sendmsg.c                                |   2 +-
 net/rxrpc/server_key.c                             |   3 +
 net/tipc/group.c                                   |   6 +-
 net/tls/tls_sw.c                                   |  10 +
 net/unix/af_unix.c                                 |   2 +
 net/unix/af_unix.h                                 |   1 +
 net/unix/garbage.c                                 | 125 +++++----
 net/xfrm/xfrm_input.c                              |  18 +-
 net/xfrm/xfrm_user.c                               |   3 +
 scripts/mod/modpost.c                              |   2 +-
 sound/hda/codecs/realtek/alc662.c                  |   9 -
 79 files changed, 838 insertions(+), 490 deletions(-)

Read the cover letter in its thread