5.10.259-rc1 review
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest342 patches 11 repliesIn review
Patches in v1 No applies recorded yet
Reviews trailers per patch
156 of 342 patches have a Reviewed-by or Acked-by.
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 133 reviewers.
Cover letter [PATCH 5.10 000/342] 5.10.259-rc1 review
This is the start of the stable review cycle for the 5.10.259 release. There are 342 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Thu, 18 Jun 2026 14:49:57 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.259-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <[email protected]>
Linux 5.10.259-rc1
Borislav Petkov (AMD) <[email protected]>
x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function
Ben Hutchings <[email protected]>
apparmor: validate default DFA states are in bounds
Ben Hutchings <[email protected]>
fbdev: vt8500lcdfb: Fix dma_free_coherent() cpu_addr parameter
Will Deacon <[email protected]>
arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU
Shanker Donthineni <[email protected]>
arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
Mark Rutland <[email protected]>
arm64: errata: Mitigate TLBI errata on various Arm CPUs
Mark Rutland <[email protected]>
arm64: cputype: Add C1-Premium definitions
Mark Rutland <[email protected]>
arm64: cputype: Add C1-Ultra definitions
Shanker Donthineni <[email protected]>
arm64: cputype: Add NVIDIA Olympus definitions
Easwar Hariharan <[email protected]>
arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata
Lukas Wunner <[email protected]>
lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
Guangshuo Li <[email protected]>
usb: gadget: f_hid: fix device reference leak in hidg_alloc()
John Keeping <[email protected]>
usb: gadget: f_hid: tidy error handling in hidg_alloc
Tudor Ambarus <[email protected]>
tty: serial: samsung: Remove redundant port lock acquisition in rx helpers
Tudor Ambarus <[email protected]>
tty: serial: samsung: use u32 for register interactions
Thomas Gleixner <[email protected]>
serial: samsung_tty: Use port lock wrappers
Minh Nguyen <[email protected]>
net: skbuff: fix missing zerocopy reference in pskb_carve helpers
Zhengchuan Liang <[email protected]>
xfrm: input: hold netns during deferred transport reinjection
Rodrigo Alencar <[email protected]>
iio: dac: ad5686: fix ref bit initialization for single-channel parts
Antoniu Miclaus <[email protected]>
iio: gyro: adis16260: fix division by zero in write_raw
Antoniu Miclaus <[email protected]>
iio: chemical: scd30: fix division by zero in write_raw
Jonathan Cameron <[email protected]>
iio: chemical: scd30: Use guard(mutex) to allow early returns
Yongchao Wu <[email protected]>
usb: cdns3: gadget: fix request skipping after clearing halt
David Carlier <[email protected]>
iio: adc: npcm: fix unbalanced clk_disable_unprepare()
Aaron Erhardt <[email protected]>
ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6
Siwei Zhang <[email protected]>
Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()
Jason Gunthorpe <[email protected]>
RDMA/umem: Fix truncation for block sizes >= 4G
Leon Romanovsky <[email protected]>
RDMA: Move DMA block iterator logic into dedicated files
Randy Dunlap <[email protected]>
RDMA/umem: fix kernel-doc warnings
Yin Tirui <[email protected]>
mm/huge_memory: update file PMD counter before folio_put()
Anton Leontev <[email protected]>
hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf
Davide Ornaghi <[email protected]>
netfilter: nft_fib: fix stale stack leak via the OIFNAME register
Myrrh Periwinkle <[email protected]>
usb: typec: ucsi: Don't update power_supply on power role change if not connected
Michael Bommarito <[email protected]>
scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
Myeonghun Pak <[email protected]>
serial: altera_jtaguart: handle uart_add_one_port() failures
Lad Prabhakar <[email protected]>
serial: altera_jtaguart: Use platform_get_irq_optional() to get the interrupt
Prasanna S <[email protected]>
serial: qcom-geni: fix UART_RX_PAR_EN bit position
Bartosz Golaszewski <[email protected]>
tty: serial: qcom-geni-serial: align #define values
Bartosz Golaszewski <[email protected]>
tty: serial: qcom-geni-serial: remove unused symbols
Michael Bommarito <[email protected]>
thunderbolt: property: Cap recursion depth in __tb_property_parse_dir()
Myrrh Periwinkle <[email protected]>
usb: typec: ucsi: Check if power role change actually happened before handling
Michael Bommarito <[email protected]>
scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
Wayne Chang <[email protected]>
phy: tegra: xusb: Fix per-pad high-speed termination calibration
Wayne Chang <[email protected]>
phy: tegra: xusb: Disable trk clk when not in use
Zeng Heng <[email protected]>
arm64: tlb: Flush walk cache when unsharing PMD tables
Johan Hovold <[email protected]>
spi: qup: fix error pointer deref after DMA setup failure
Yang Yingliang <[email protected]>
spi: qup: switch to use modern name
Sam Daly <[email protected]>
octeontx2-af: CGX: add bounds check to cgx_speed_mbps index
Justin Stitt <[email protected]>
octeontx2-af: replace deprecated strncpy with strscpy
Hariprasad Kelam <[email protected]>
octeontx2-af: Add validation for lmac type
Dawei Feng <[email protected]>
octeontx2-pf: avoid double free of pool->stack on AQ init failure
Shardul Bankar <[email protected]>
mptcp: do not drop partial packets
Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: drop nanoseconds width specifier
Al Viro <[email protected]>
use less confusing names for iov_iter direction initializers
Jose Ignacio Tornos Martinez <[email protected]>
ice: fix VF queue configuration with low MTU values
Michael Bommarito <[email protected]>
net: hsr: defer node table free until after RCU readers
Jiexun Wang <[email protected]>
Bluetooth: serialize accept_q access
Luiz Augusto von Dentz <[email protected]>
Bluetooth: Init sk_peer_* on bt_sock_alloc
Luiz Augusto von Dentz <[email protected]>
Bluetooth: Consolidate code around sk_alloc into a helper function
Haoze Xie <[email protected]>
netfilter: nf_queue: hold bridge skb->dev while queued
Yajun Deng <[email protected]>
net: Remove redundant if statements
Dawei Feng <[email protected]>
qed: fix double free in qed_cxt_tables_alloc()
Christophe JAILLET <[email protected]>
qed: Use the bitmap API to simplify some functions
Shuai Zhang <[email protected]>
Bluetooth: hci_qca: Convert timeout from jiffies to ms
Safa Karakuş <[email protected]>
Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
Johan Hovold <[email protected]>
spi: lantiq-ssc: fix controller deregistration
Johan Hovold <[email protected]>
spi: st-ssc4: fix controller deregistration
Yongpeng Yang <[email protected]>
f2fs: fix incorrect file address mapping when inline inode is unwritten
Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: ADD_ADDR rtx: fix potential data-race
Piyush Sachdeva <[email protected]>
smb: client: Use FullSessionKey for AES-256 encryption key derivation
Filipe Manana <[email protected]>
btrfs: fix missing last_unlink_trans update when removing a directory
Mikulas Patocka <[email protected]>
dm-thin: fix metadata refcount underflow
Joe Thornber <[email protected]>
dm btree: improve btree residency
Ulf Hansson <[email protected]>
pmdomain: core: Fix detach procedure for virtual devices in genpd
Steven Rostedt <[email protected]>
tracing/probes: Limit size of event probe to 3K
Yochai Eisenrich <[email protected]>
btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
Johan Hovold <[email protected]>
spi: topcliff-pch: fix controller deregistration
Thomas Zimmermann <[email protected]>
fbcon: Avoid OOB font access if console rotation fails
Sang-Heon Jeon <[email protected]>
mm/hugetlb_cma: round up per_node before logging it
Johan Hovold <[email protected]>
spi: uniphier: fix controller deregistration
Johan Hovold <[email protected]>
spi: tegra114: fix controller deregistration
Johan Hovold <[email protected]>
spi: tegra20-sflash: fix controller deregistration
Johan Hovold <[email protected]>
spi: sun6i: fix controller deregistration
Johan Hovold <[email protected]>
spi: zynq-qspi: fix controller deregistration
Johan Hovold <[email protected]>
spi: ti-qspi: fix controller deregistration
Johan Hovold <[email protected]>
spi: sun4i: fix controller deregistration
Johan Hovold <[email protected]>
spi: syncuacer: fix controller deregistration
Selvarasu Ganesan <[email protected]>
usb: dwc3: Move GUID programming after PHY initialization
Marek Szyprowski <[email protected]>
wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
David Carlier <[email protected]>
tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
Guangshuo Li <[email protected]>
ACPI: scan: Use acpi_dev_put() in object add error paths
Thorsten Blum <[email protected]>
crypto: caam - guard HMAC key hex dumps in hash_digest_key
Thorsten Blum <[email protected]>
printk: add print_hex_dump_devel()
Cássio Gabriel <[email protected]>
ALSA: aloop: Fix peer runtime UAF during format-change stop
Max Kellermann <[email protected]>
ceph: only d_add() negative dentries when they are unhashed
Steven Rostedt <[email protected]>
ktest: Fix the month in the name of the failure directory
John 'Warthog9' Hawley (VMware) <[email protected]>
ktest: Fixing indentation to match expected pattern
Johan Hovold <[email protected]>
can: ucan: fix devres lifetime
Julia Lawall <[email protected]>
can: ucan: fix typos in comments
Shuvam Pandey <[email protected]>
Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
Zilin Guan <[email protected]>
hfsplus: fix held lock freed on hfsplus_fill_super()
Deepanshu Kartikey <[email protected]>
hfsplus: fix uninit-value by validating catalog record size
Seohyeon Maeng <[email protected]>
udf: fix partition descriptor append bookkeeping
Sanjaikumar V S <[email protected]>
mtd: spi-nor: sst: Fix write enable before AAI sequence
Zhengchuan Liang <[email protected]>
net: bridge: use a stable FDB dst snapshot in RCU readers
Manivannan Sadhasivam <[email protected]>
net: qrtr: ns: Limit the total number of nodes
Manivannan Sadhasivam <[email protected]>
net: qrtr: ns: Free the node during ctrl_cmd_bye()
Vignesh Viswanathan <[email protected]>
net: qrtr: ns: Change servers radix tree to xarray
Manivannan Sadhasivam <[email protected]>
net: qrtr: ns: Limit the maximum number of lookups
Takashi Iwai <[email protected]>
ALSA: core: Fix potential data race at fasync handling
Joseph Salisbury <[email protected]>
sched: Use u64 for bandwidth ratio calculations
Oliver Neukum <[email protected]>
media: rc: igorplugusb: heed coherency rules
Gao Xiang <[email protected]>
erofs: fix the out-of-bounds nameoff handling for trailing dirents
Thorsten Blum <[email protected]>
ALSA: aoa: Skip devices with no codecs in i2sbus_resume()
Oliver Neukum <[email protected]>
media: rc: ttusbir: respect DMA coherency rules
Cássio Gabriel <[email protected]>
ALSA: aoa: i2sbus: clear stale prepared state
Takashi Iwai <[email protected]>
ALSA: aoa: Use guard() for mutex locks
Daniel Hodges <[email protected]>
wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
Rafael J. Wysocki <[email protected]>
thermal: core: Fix thermal zone governor cleanup issues
Anshuman Khandual <[email protected]>
arm64/mm: Enable batched TLB flush in unmap_hotplug_range()
Greg Kroah-Hartman <[email protected]>
drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
Bingquan Chen <[email protected]>
net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
Michael Bommarito <[email protected]>
smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
Michael Bommarito <[email protected]>
smb: client: require a full NFS mode SID before reading mode bits
Yongpeng Yang <[email protected]>
f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
Sven Eckelmann <[email protected]>
batman-adv: tp_meter: fix tp_num leak on kmalloc failure
Jiexun Wang <[email protected]>
batman-adv: stop tp_meter sessions during mesh teardown
Julian Anastasov <[email protected]>
ipvs: skip ipv6 extension headers for csum checks
Longxuan Yu <[email protected]>
io_uring/poll: fix signed comparison in io_poll_get_ownership()
Mingyu Wang <[email protected]>
fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
Harry Wentland <[email protected]>
drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
Harry Wentland <[email protected]>
drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
Michael Bommarito <[email protected]>
thunderbolt: Limit XDomain response copy to actual frame size
Michael Bommarito <[email protected]>
thunderbolt: Clamp XDomain response data copy to allocation size
Michael Bommarito <[email protected]>
thunderbolt: Bound root directory content to block size
Michael Bommarito <[email protected]>
thunderbolt: Reject zero-length property entries in validator
Wyatt Feng <[email protected]>
sctp: stream: fully roll back denied add-stream state
Zhao Zhang <[email protected]>
sctp: diag: reject stale associations in dump_one path
Jisheng Zhang <[email protected]>
mmc: sdhci: add signal voltage switch in sdhci_resume_host
Kamal Dasu <[email protected]>
mmc: core: Fix host controller programming for fixed driver type
Yuqi Xu <[email protected]>
net: rds: clear i_sends on setup unwind
Bartosz Golaszewski <[email protected]>
net: mv643xx: fix OF node refcount
ZhaoJinming <[email protected]>
net: bonding: fix NULL pointer dereference in bond_do_ioctl()
Anandu Krishnan E <[email protected]>
misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context
Yilin Zhu <[email protected]>
ipc/shm: serialize orphan cleanup with shm_nattch updates
Cryolitia PukNgae <[email protected]>
Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard
Zeyu WANG <[email protected]>
Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK)
Akhil R <[email protected]>
i2c: tegra: Fix NOIRQ suspend/resume
Vladimir Zapolskiy <[email protected]>
i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()
Jann Horn <[email protected]>
fuse: reject fuse_notify() pagecache ops on directories
Christian Brauner <[email protected]>
pidfd: refuse access to tasks that have started exiting harder
Michael Bommarito <[email protected]>
IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
Raf Dickson <[email protected]>
vsock/vmci: fix sk_ack_backlog leak on failed handshake
Yuho Choi <[email protected]>
ARM: socfpga: Fix OF node refcount leak in SMP setup
Michael Bommarito <[email protected]>
RDMA/srp: bound SRP_RSP sense copy by the received length
Harry Wentland <[email protected]>
drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info()
Takashi Iwai <[email protected]>
ALSA: timer: Fix UAF at snd_timer_user_params()
HyeongJun An <[email protected]>
USB: serial: kl5kusb105: fix bulk-out buffer overflow
Jack Wu <[email protected]>
USB: serial: option: add usb-id for Dell Wireless DW5826e-m
Adrian Korwel <[email protected]>
USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()
Adrian Korwel <[email protected]>
USB: serial: io_ti: fix heap overflow in get_manuf_info()
Wyatt Feng <[email protected]>
xfrm: espintcp: do not reuse an in-progress partial send
Joonas Lahtinen <[email protected]>
drm/i915/gem: Fix phys BO pread/pwrite with offset
Michael Bommarito <[email protected]>
Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
Tristan Madani <[email protected]>
netfilter: nft_tunnel: fix use-after-free on object destroy
Til Kaiser <[email protected]>
net: mvpp2: sync RX data at the hardware packet offset
Florian Westphal <[email protected]>
netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
Kyle Zeng <[email protected]>
netfilter: x_tables: avoid leaking percpu counter pointers
Breno Leitao <[email protected]>
rds: mark snapshot pages dirty in rds_info_getsockopt()
Eric Dumazet <[email protected]>
ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
Weiming Shi <[email protected]>
net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion
Kyle Zeng <[email protected]>
net: guard timestamp cmsgs to real error queue skbs
Michael Bommarito <[email protected]>
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
Adrian Moreno <[email protected]>
net: openvswitch: fix possible kfree_skb of ERR_PTR
Kyle Zeng <[email protected]>
ipv6: sit: reload inner IPv6 header after GSO offloads
Mingyu Wang <[email protected]>
net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
Chenguang Zhao <[email protected]>
netlabel: validate unlabeled address and mask attribute lengths
Sanghyun Park <[email protected]>
xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
Mark Rutland <[email protected]>
arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI
Mark Rutland <[email protected]>
arm64: tlb: Allow XZR argument to TLBI ops
Marc Zyngier <[email protected]>
KVM: arm64: Remove VPIPT I-cache handling
Weiming Shi <[email protected]>
tun: free page on build_skb failure in tun_xdp_one()
Weiming Shi <[email protected]>
tap: free page on error paths in tap_get_user_xdp()
Pavel Begunkov <[email protected]>
io_uring: prevent opcode speculation
Felix Gu <[email protected]>
spi: meson-spicc: Fix double-put in remove path
Deepanshu Kartikey <[email protected]>
wifi: mac80211: check tdls flag in ieee80211_tdls_oper
Jeff Layton <[email protected]>
nfsd: don't ignore the return code of svc_proc_register()
Zqiang <[email protected]>
usbnet: Fix using smp_processor_id() in preemptible code warnings
Eric Dumazet <[email protected]>
bonding: limit BOND_MODE_8023AD to Ethernet devices
Tejas Bharambe <[email protected]>
ext4: validate p_idx bounds in ext4_ext_correct_indexes
Ji'an Zhou <[email protected]>
ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
Naveen Kumar Chaudhary <[email protected]>
time: Fix off-by-one in settimeofday() usec validation
Aleksandr Nogikh <[email protected]>
signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
Xin Long <[email protected]>
sctp: purge outqueue on stale COOKIE-ECHO handling
Yizhou Zhao <[email protected]>
net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
Eric Dumazet <[email protected]>
ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
Eric Dumazet <[email protected]>
ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
Zhang Cen <[email protected]>
Bluetooth: MGMT: validate advertising TLV before type checks
Zhang Cen <[email protected]>
Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
David Thompson <[email protected]>
net: lan743x: permit VLAN-tagged packets up to configured MTU
Yizhou Zhao <[email protected]>
net: garp: fix unsigned integer underflow in garp_pdu_parse_attr
Oscar Maes <[email protected]>
pcnet32: stop holding device spin lock during napi_complete_done
Yicong Hui <[email protected]>
drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
Yizhou Zhao <[email protected]>
6lowpan: fix off-by-one in multicast context address compression
Jamal Hadi Salim <[email protected]>
net/sched: act_api: use RCU with deferred freeing for action lifecycle
Guangshuo Li <[email protected]>
dm cache policy smq: check allocation under invalidate lock
Yiming Qian <[email protected]>
netfilter: bridge: make ebt_snat ARP rewrite writable
Florian Westphal <[email protected]>
netfilter: conntrack_irc: fix possible out-of-bounds read
Fernando Fernandez Mancera <[email protected]>
netfilter: synproxy: add mutex to guard hook reference counting
Julian Anastasov <[email protected]>
ipvs: clear the svc scheduler ptr early on edit
Fernando Fernandez Mancera <[email protected]>
netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
Amirreza Zarrabi <[email protected]>
tee: optee: prevent use-after-free when the client exits before the supplicant
Mingyu Wang <[email protected]>
i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
Nathan Chancellor <[email protected]>
Disable -Wattribute-alias for clang-23 and newer
Nathan Chancellor <[email protected]>
compiler-clang.h: Add __diag infrastructure for clang
Johan Hovold <[email protected]>
USB: serial: mct_u232: fix memory corruption with small endpoint
Nathan Chancellor <[email protected]>
HID: core: Fix size_t specifier in hid_report_raw_event()
Benjamin Tissoires <[email protected]>
HID: pass the buffer size to hid_report_raw_event
Vicki Pfau <[email protected]>
HID: core: Add printk_ratelimited variants to hid_warn() etc
Kuniyuki Iwashima <[email protected]>
bpf: Free reuseport cBPF prog after RCU grace period.
Michal Pecio <[email protected]>
usb: core: Fix SuperSpeed root hub wMaxPacketSize
Nikola Z. Ivanov <[email protected]>
team: Move team device type change at the end of team_port_add
Dong Chenchen <[email protected]>
page_pool: Fix use-after-free in page_pool_recycle_in_ring
Maciej W. Rozycki <[email protected]>
serial: dz: Fix bootconsole handover lockup
Wei-Cheng Chen <[email protected]>
xhci: tegra: Fix ghost USB device on dual-role port unplug
Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix memory corruption with small endpoints
Johan Hovold <[email protected]>
USB: serial: cypress_m8: fix memory corruption with small endpoint
Kuniyuki Iwashima <[email protected]>
Bluetooth: hci_core: Fix use-after-free in vhci_flush()
Maciej W. Rozycki <[email protected]>
serial: zs: Switch to using channel reset
Maciej W. Rozycki <[email protected]>
serial: zs: Fix bootconsole handover lockup
Maciej W. Rozycki <[email protected]>
serial: dz: Fix bootconsole message clobbering at chip reset
Shitalkumar Gandhi <[email protected]>
serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma
Maciej W. Rozycki <[email protected]>
serial: zs: Fix swapped RI/DSR modem line transition counting
Hongling Zeng <[email protected]>
serial: sh-sci: fix memory region release in error path
Michael Bommarito <[email protected]>
scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker
Michael Bommarito <[email protected]>
thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
Michael Bommarito <[email protected]>
thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()
Seungjin Bae <[email protected]>
usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports
Guangshuo Li <[email protected]>
usb: gadget: net2280: Fix double free in probe error path
Johan Hovold <[email protected]>
USB: serial: mct_u232: fix missing interrupt-in transfer sanity check
Johan Hovold <[email protected]>
USB: serial: mxuport: fix memory corruption with small endpoint
Johan Hovold <[email protected]>
USB: serial: keyspan: fix missing indat transfer sanity check
Zhang Cen <[email protected]>
USB: serial: cypress_m8: validate interrupt packet headers
Zhang Cen <[email protected]>
USB: serial: belkin_sa: validate interrupt status length
Wanquan Zhong <[email protected]>
USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL
Jan Volckaert <[email protected]>
USB: serial: option: add MeiG SRM813Q
Heitor Alves de Siqueira <[email protected]>
usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize
Heitor Alves de Siqueira <[email protected]>
usb: usbtmc: check URB actual_length for interrupt-IN notifications
Michael Bommarito <[email protected]>
usbip: vudc: Fix use after free bug in vudc_remove due to race condition
Sam Burkels <[email protected]>
usb: storage: Add quirks for PNY Elite Portable SSD
Stephen J. Fuhry <[email protected]>
USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers
Michal Pecio <[email protected]>
usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval
Xu Yang <[email protected]>
usb: chipidea: core: convert ci_role_switch to local variable
Zhaoyang Yu <[email protected]>
tty: serial: pch_uart: add check for dma_alloc_coherent()
Ian Abbott <[email protected]>
comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest()
Ian Abbott <[email protected]>
comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest()
Nicolás Bazaes <[email protected]>
Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490
Dmitry Torokhov <[email protected]>
Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
Jingguo Tan <[email protected]>
xfrm: esp: restore combined single-frag length gate
Srinivas Kandagatla <[email protected]>
ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks
Srinivas Kandagatla <[email protected]>
ASoC: qcom: q6asm-dai: close stream only when running
Hamza Mahfooz <[email protected]>
netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
Michael Bommarito <[email protected]>
xfrm: ah: use skb_to_full_sk in async output callbacks
Maoyi Xie <[email protected]>
xfrm: route MIGRATE notifications to caller's netns
Ashutosh Desai <[email protected]>
nfc: hci: fix out-of-bounds read in HCP header parsing
Arnd Bergmann <[email protected]>
iommu, debugobjects: avoid gcc-16.1 section mismatch warnings
Lee Jones <[email protected]>
HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
Kuniyuki Iwashima <[email protected]>
ip6: vti: Use ip6_tnl.net in vti6_changelink().
Qi Tang <[email protected]>
ipv6: validate extension header length before copying to cmsg
Maoyi Xie <[email protected]>
ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().
Srinivas Kandagatla <[email protected]>
ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params
Justin Iurman <[email protected]>
ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
Junrui Luo <[email protected]>
macsec: fix replay protection at XPN lower-PN wrap
Yuqi Xu <[email protected]>
bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
Jason A. Donenfeld <[email protected]>
wireguard: send: append trailer after expanding head
Dmitry Torokhov <[email protected]>
Input: elan_i2c - validate firmware size before use
Dan Carpenter <[email protected]>
usb: dwc2: Fix use after free in debug code
Johan Hovold <[email protected]>
USB: serial: omninet: fix memory corruption with small endpoint
Felix Gu <[email protected]>
iio: buffer: hw-consumer: fix use-after-free in error path
Aldo Conte <[email protected]>
iio: light: cm3323: fix reg_conf not being initialized correctly
Salah Triki <[email protected]>
iio: temperature: tsys01: fix broken PROM checksum validation
Sanjay Chitroda <[email protected]>
iio: ssp_sensors: cancel delayed work_refresh on remove
David Carlier <[email protected]>
iio: gyro: itg3200: fix i2c read into the wrong stack location
Salah Triki <[email protected]>
iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
Rodrigo Alencar <[email protected]>
iio: dac: ad5686: fix input raw value check
Salah Triki <[email protected]>
iio: dac: max5821: fix return value check in powerdown sync
Christofer Jonason <[email protected]>
iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux
Ben Hutchings <[email protected]>
parport: Fix race between port and client registration
Siwei Zhang <[email protected]>
Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn
Linpu Yu <[email protected]>
ipc: limit next_id allocation to the valid ID range
Mikulas Patocka <[email protected]>
hpfs: fix a crash if hpfs_map_dnode_bitmap fails
Shuai Zhang <[email protected]>
Bluetooth: btusb: Allow firmware re-download when version matches
Thomas Fourier <[email protected]>
Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free()
Johan Hovold <[email protected]>
USB: serial: safe_serial: fix memory corruption with small endpoint
Greg Kroah-Hartman <[email protected]>
usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()
Greg Kroah-Hartman <[email protected]>
usb: typec: altmodes/displayport: validate count before reading Status Update VDO
Greg Kroah-Hartman <[email protected]>
usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO
Greg Kroah-Hartman <[email protected]>
usb: typec: ucsi: ccg: reject firmware images without a ':' record header
Greg Kroah-Hartman <[email protected]>
iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
Stefan Metzmacher <[email protected]>
smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
Jiasheng Jiang <[email protected]>
RDMA/rxe: Fix double free in rxe_srq_from_init
Ben Hutchings <[email protected]>
Revert "RDMA/rxe: Fix double free in rxe_srq_from_init"
Sven Eckelmann <[email protected]>
batman-adv: bla: avoid double decrement of bla.num_requests
Sven Eckelmann <[email protected]>
batman-adv: tt: avoid empty VLAN responses
Sven Eckelmann <[email protected]>
batman-adv: tt: fix TOCTOU race for reported vlans
Petr Machata <[email protected]>
selftests: forwarding: lib: Add helpers for checksum handling
Sven Eckelmann <[email protected]>
batman-adv: tp_meter: avoid role confusion in tp_list
Sven Eckelmann <[email protected]>
batman-adv: tp_meter: fix race condition in send error reporting
Sven Eckelmann <[email protected]>
batman-adv: iv: recover OGM scheduling after forward packet error
Sven Eckelmann <[email protected]>
batman-adv: tvlv: reject oversized TVLV packets
Sven Eckelmann <[email protected]>
batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface
Sven Eckelmann <[email protected]>
batman-adv: tvlv: abort OGM send on tvlv append failure
Sven Eckelmann <[email protected]>
batman-adv: v: stop OGMv2 on disabled interface
Zhenghang Xiao <[email protected]>
sctp: fix race between sctp_wait_for_connect and peeloff
Luiz Augusto von Dentz <[email protected]>
Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
Zhenghang Xiao <[email protected]>
Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success
Jamal Hadi Salim <[email protected]>
net/sched: Revert "net/sched: Restrict conditions for adding duplicating netems to qdisc tree"
Rahul Chandelkar <[email protected]>
ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
Zhao Dongdong <[email protected]>
Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()
Eric Dumazet <[email protected]>
tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()
Eric Dumazet <[email protected]>
vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()
Eric Dumazet <[email protected]>
tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()
Cássio Gabriel <[email protected]>
ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors
Eric Dumazet <[email protected]>
ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()
Breno Leitao <[email protected]>
net/iucv: fix locking in .getsockopt
Alexandra Winter <[email protected]>
net/smc: Do not re-initialize smc hashtables
Ilya Maximets <[email protected]>
net: netlink: don't set nsid on local notifications
Ilya Maximets <[email protected]>
net: netlink: fix sending unassigned nsid after assigned one
Weiming Shi <[email protected]>
tun: free page on short-frame rejection in tun_xdp_one()
Florian Westphal <[email protected]>
netfilter: ebtables: fix OOB read in compat_mtw_from_user
Florian Westphal <[email protected]>
netfilter: xt_cpu: prefer raw_smp_processor_id
Chris Mason <[email protected]>
netfilter: synproxy: refresh tcphdr after skb_ensure_writable
Carl Lee <[email protected]>
nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems
David Ahern <[email protected]>
xfrm: Check for underflow in xfrm_state_mtu
Lee Jones <[email protected]>
nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()
Lee Jones <[email protected]>
nfc: llcp: Fix use-after-free in llcp_sock_release()
Krzysztof Kozlowski <[email protected]>
nfc: llcp: protect nfc_llcp_sock_unlink() calls
Victor Nogueria <[email protected]>
net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked
Nobuhiro Iwamatsu <[email protected]>
phy: renesas: rcar-gen3-usb2: Fix the use of msleep during spinlock
Davide Caratti <[email protected]>
net/sched: cls_fw: fix NULL dereference of "old" filters before change()
Chengfeng Ye <[email protected]>
ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
Greg Kroah-Hartman <[email protected]>
Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size
-------------
Diffstat:
Documentation/arm64/silicon-errata.rst | 48 +++ Makefile | 4 +- arch/arm/mach-socfpga/platsmp.c | 1 + arch/arm64/Kconfig | 50 +++ arch/arm64/include/asm/cputype.h | 10 + arch/arm64/include/asm/kvm_mmu.h | 4 +- arch/arm64/include/asm/tlb.h | 2 +- arch/arm64/include/asm/tlbflush.h | 55 ++- arch/arm64/kernel/cpu_errata.c | 34 +- arch/arm64/kernel/sys_compat.c | 2 +- arch/arm64/kvm/hyp/nvhe/tlb.c | 41 +- arch/arm64/kvm/hyp/vhe/tlb.c | 19 +- arch/arm64/mm/mmu.c | 36 +- arch/x86/kernel/cpu/amd.c | 18 +- arch/x86/kernel/cpu/microcode/intel.c | 2 +- crypto/testmgr.c | 4 +- drivers/acpi/power.c | 2 +- drivers/acpi/scan.c | 2 +- drivers/base/power/domain.c | 10 +- drivers/block/drbd/drbd_main.c | 2 +- drivers/block/drbd/drbd_receiver.c | 2 +- drivers/block/loop.c | 14 +- drivers/block/nbd.c | 10 +- drivers/bluetooth/btusb.c | 8 +- drivers/bluetooth/hci_qca.c | 33 +- drivers/char/random.c | 4 +- drivers/crypto/caam/caamalg_qi2.c | 4 +- drivers/crypto/caam/caamhash.c | 4 +- drivers/fsi/fsi-sbefifo.c | 6 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 5 + drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 6 +- .../gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c | 3 +- drivers/gpu/drm/i915/gem/i915_gem_phys.c | 19 +- drivers/gpu/drm/imx/dcss/dcss-scaler.c | 3 + drivers/gpu/drm/nouveau/nouveau_gem.c | 2 +- drivers/hid/hid-core.c | 29 +- drivers/hid/hid-gfrm.c | 4 +- drivers/hid/hid-logitech-hidpp.c | 2 +- drivers/hid/hid-multitouch.c | 2 +- drivers/hid/hid-primax.c | 2 +- drivers/hid/hid-vivaldi.c | 2 +- drivers/hid/wacom_sys.c | 19 +- drivers/hid/wacom_wac.h | 1 + drivers/i2c/busses/i2c-qcom-cci.c | 2 +- drivers/i2c/busses/i2c-tegra.c | 53 +-- drivers/i2c/i2c-dev.c | 9 +- drivers/iio/adc/npcm_adc.c | 26 +- drivers/iio/adc/viperboard_adc.c | 4 +- drivers/iio/adc/xilinx-xadc-core.c | 11 +- drivers/iio/buffer/industrialio-hw-consumer.c | 4 +- drivers/iio/chemical/scd30_core.c | 65 ++- drivers/iio/common/ssp_sensors/ssp_dev.c | 1 + drivers/iio/dac/ad5686.c | 8 +- drivers/iio/dac/ad5686.h | 1 + drivers/iio/dac/max5821.c | 9 +- drivers/iio/gyro/adis16260.c | 3 + drivers/iio/gyro/itg3200_buffer.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 2 +- drivers/iio/light/cm3323.c | 5 +- drivers/iio/temperature/tsys01.c | 2 +- drivers/infiniband/core/Makefile | 2 +- drivers/infiniband/core/iter.c | 43 ++ drivers/infiniband/core/verbs.c | 37 -- drivers/infiniband/hw/bnxt_re/qplib_res.c | 2 +- drivers/infiniband/hw/cxgb4/mem.c | 2 +- drivers/infiniband/hw/efa/efa_verbs.c | 2 +- drivers/infiniband/hw/hns/hns_roce_alloc.c | 2 +- drivers/infiniband/hw/i40iw/i40iw_verbs.c | 1 + drivers/infiniband/hw/mlx4/mr.c | 1 + drivers/infiniband/hw/mlx5/mem.c | 1 + drivers/infiniband/hw/mthca/mthca_provider.c | 2 +- drivers/infiniband/hw/ocrdma/ocrdma_verbs.c | 2 +- drivers/infiniband/hw/qedr/verbs.c | 2 +- drivers/infiniband/hw/vmw_pvrdma/pvrdma.h | 2 +- drivers/infiniband/sw/rxe/rxe_srq.c | 3 - drivers/infiniband/ulp/isert/ib_isert.c | 6 + drivers/infiniband/ulp/rtrs/rtrs-clt.c | 2 +- drivers/infiniband/ulp/srp/ib_srp.c | 30 +- drivers/input/keyboard/atkbd.c | 15 + drivers/input/misc/ims-pcu.c | 2 +- drivers/input/mouse/elan_i2c_core.c | 5 + drivers/input/mouse/synaptics.c | 1 + drivers/input/touchscreen/atmel_mxt_ts.c | 2 +- drivers/input/touchscreen/usbtouchscreen.c | 5 + drivers/iommu/io-pgtable-arm-v7s.c | 18 +- drivers/isdn/mISDN/l1oip_core.c | 2 +- drivers/md/dm-cache-policy-smq.c | 12 +- drivers/md/persistent-data/dm-btree-remove.c | 8 + drivers/md/persistent-data/dm-btree.c | 451 +++++++++++++++++++-- .../md/persistent-data/dm-transaction-manager.c | 9 + .../md/persistent-data/dm-transaction-manager.h | 10 +- drivers/media/rc/igorplugusb.c | 17 +- drivers/media/rc/ttusbir.c | 13 +- drivers/misc/fastrpc.c | 75 ++-- drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +- drivers/mmc/core/mmc.c | 4 +- drivers/mmc/host/sdhci.c | 1 + drivers/mtd/spi-nor/sst.c | 13 + drivers/net/bonding/bond_main.c | 11 +- drivers/net/can/usb/ucan.c | 6 +- drivers/net/ethernet/amd/pcnet32.c | 4 +- drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 2 +- drivers/net/ethernet/marvell/mv643xx_eth.c | 2 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 7 +- drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 20 +- drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 1 + .../ethernet/marvell/octeontx2/nic/otx2_common.c | 2 + drivers/net/ethernet/microchip/lan743x_main.c | 32 ++ drivers/net/ethernet/microchip/lan743x_main.h | 1 + drivers/net/ethernet/qlogic/qed/qed_cxt.c | 26 +- drivers/net/hyperv/netvsc.c | 19 +- drivers/net/macsec.c | 3 +- drivers/net/ppp/ppp_generic.c | 2 +- drivers/net/tap.c | 2 + drivers/net/team/team.c | 23 +- drivers/net/tun.c | 5 +- drivers/net/usb/usbnet.c | 2 + drivers/net/vxlan/vxlan_core.c | 4 +- drivers/net/wireguard/send.c | 20 +- .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 4 + drivers/net/wireless/marvell/mwifiex/init.c | 2 +- drivers/nfc/nxp-nci/i2c.c | 21 +- drivers/nvme/host/tcp.c | 4 +- drivers/nvme/target/io-cmd-file.c | 4 +- drivers/nvme/target/tcp.c | 2 +- drivers/parport/share.c | 11 +- drivers/phy/renesas/phy-rcar-gen3-usb2.c | 2 +- drivers/phy/tegra/xusb-tegra186.c | 38 +- drivers/phy/tegra/xusb.h | 1 + drivers/scsi/fcoe/fcoe_ctlr.c | 2 +- drivers/scsi/sg.c | 2 +- drivers/spi/spi-lantiq-ssc.c | 8 +- drivers/spi/spi-meson-spicc.c | 2 - drivers/spi/spi-qup.c | 165 ++++---- drivers/spi/spi-st-ssc4.c | 8 +- drivers/spi/spi-sun4i.c | 10 +- drivers/spi/spi-sun6i.c | 10 +- drivers/spi/spi-synquacer.c | 8 +- drivers/spi/spi-tegra114.c | 8 +- drivers/spi/spi-tegra20-sflash.c | 8 +- drivers/spi/spi-ti-qspi.c | 11 +- drivers/spi/spi-topcliff-pch.c | 7 +- drivers/spi/spi-uniphier.c | 8 +- drivers/spi/spi-zynq-qspi.c | 15 +- drivers/staging/comedi/drivers/comedi_test.c | 5 +- drivers/staging/greybus/hid.c | 2 +- drivers/target/iscsi/iscsi_target.c | 6 +- drivers/target/iscsi/iscsi_target_nego.c | 7 +- drivers/target/iscsi/iscsi_target_parameters.c | 62 ++- drivers/target/iscsi/iscsi_target_parameters.h | 2 +- drivers/target/iscsi/iscsi_target_util.c | 4 +- drivers/target/target_core_file.c | 2 +- drivers/tee/optee/supp.c | 107 +++-- drivers/thermal/thermal_core.c | 7 +- drivers/thunderbolt/property.c | 38 +- drivers/thunderbolt/xdomain.c | 6 +- drivers/tty/serial/altera_jtaguart.c | 18 +- drivers/tty/serial/dz.c | 58 +-- drivers/tty/serial/fsl_lpuart.c | 15 +- drivers/tty/serial/pch_uart.c | 19 +- drivers/tty/serial/qcom_geni_serial.c | 75 ++-- drivers/tty/serial/samsung_tty.c | 103 +++-- drivers/tty/serial/sh-sci.c | 2 +- drivers/tty/serial/zs.c | 40 +- drivers/tty/serial/zs.h | 2 +- drivers/usb/cdns3/gadget.c | 12 +- drivers/usb/chipidea/core.c | 16 +- drivers/usb/class/usbtmc.c | 14 + drivers/usb/core/config.c | 9 +- drivers/usb/core/hcd.c | 4 +- drivers/usb/core/quirks.c | 4 + drivers/usb/dwc2/hcd.c | 4 +- drivers/usb/dwc3/core.c | 12 +- drivers/usb/gadget/function/f_hid.c | 20 +- drivers/usb/gadget/udc/dummy_hcd.c | 4 + drivers/usb/gadget/udc/net2280.c | 4 +- drivers/usb/host/xhci-tegra.c | 76 ++-- drivers/usb/serial/belkin_sa.c | 3 + drivers/usb/serial/cypress_m8.c | 20 +- drivers/usb/serial/digi_acceleport.c | 23 +- drivers/usb/serial/io_ti.c | 11 + drivers/usb/serial/keyspan.c | 4 + drivers/usb/serial/kl5kusb105.c | 4 +- drivers/usb/serial/mct_u232.c | 26 +- drivers/usb/serial/mxuport.c | 8 + drivers/usb/serial/omninet.c | 9 +- drivers/usb/serial/option.c | 12 +- drivers/usb/serial/safe_serial.c | 11 + drivers/usb/storage/unusual_uas.h | 7 + drivers/usb/typec/altmodes/displayport.c | 2 + drivers/usb/typec/tcpm/wcove.c | 13 +- drivers/usb/typec/ucsi/displayport.c | 4 + drivers/usb/typec/ucsi/ucsi.c | 13 +- drivers/usb/typec/ucsi/ucsi_ccg.c | 5 + drivers/usb/usbip/usbip_common.c | 2 +- drivers/usb/usbip/vudc_dev.c | 1 + drivers/usb/usbip/vudc_transfer.c | 3 +- drivers/vhost/net.c | 6 +- drivers/vhost/scsi.c | 10 +- drivers/vhost/vhost.c | 6 +- drivers/vhost/vringh.c | 4 +- drivers/vhost/vsock.c | 4 +- drivers/video/fbdev/core/fbcon_rotate.c | 5 +- drivers/video/fbdev/vt8500lcdfb.c | 2 +- drivers/xen/pvcalls-back.c | 8 +- fs/9p/vfs_addr.c | 4 +- fs/9p/vfs_dir.c | 2 +- fs/9p/xattr.c | 4 +- fs/afs/cmservice.c | 2 +- fs/afs/internal.h | 4 +- fs/afs/rxrpc.c | 12 +- fs/aio.c | 4 +- fs/btrfs/inode.c | 2 + fs/btrfs/ioctl.c | 5 +- fs/ceph/dir.c | 6 +- fs/ceph/file.c | 4 +- fs/cifs/cifsacl.c | 1 + fs/cifs/connect.c | 6 +- fs/cifs/file.c | 4 +- fs/cifs/smb2ops.c | 10 +- fs/cifs/smb2transport.c | 36 +- fs/cifs/smbdirect.c | 4 +- fs/cifs/transport.c | 6 +- fs/erofs/dir.c | 30 +- fs/ext4/extents.c | 15 + fs/f2fs/data.c | 4 +- fs/f2fs/inline.c | 13 +- fs/fcntl.c | 8 +- fs/fuse/dev.c | 9 +- fs/hfsplus/bfind.c | 51 +++ fs/hfsplus/catalog.c | 4 +- fs/hfsplus/dir.c | 2 +- fs/hfsplus/hfsplus_fs.h | 9 + fs/hfsplus/super.c | 6 +- fs/hpfs/alloc.c | 2 +- fs/nfsd/nfsctl.c | 9 +- fs/nfsd/stats.c | 4 +- fs/nfsd/stats.h | 2 +- fs/nfsd/vfs.c | 4 +- fs/ocfs2/cluster/tcp.c | 2 +- fs/orangefs/inode.c | 6 +- fs/read_write.c | 12 +- fs/seq_file.c | 2 +- fs/splice.c | 10 +- fs/udf/super.c | 4 +- include/linux/compat.h | 4 + include/linux/compiler-clang.h | 28 ++ include/linux/compiler_attributes.h | 11 + include/linux/compiler_types.h | 4 + include/linux/hid.h | 15 +- include/linux/parport.h | 1 + include/linux/printk.h | 13 + include/linux/syscalls.h | 4 + include/linux/uio.h | 3 + include/net/act_api.h | 1 + include/net/bluetooth/bluetooth.h | 3 + include/net/bluetooth/hci_core.h | 2 + include/net/bluetooth/l2cap.h | 1 + include/net/ip_vs.h | 3 +- include/net/netfilter/nf_queue.h | 1 + include/net/sock.h | 1 + include/net/xfrm.h | 3 +- include/rdma/ib_umem.h | 23 -- include/rdma/ib_verbs.h | 47 --- include/rdma/iter.h | 80 ++++ io_uring/io_uring.c | 4 +- ipc/shm.c | 10 +- ipc/util.c | 2 +- kernel/pid.c | 8 +- kernel/sched/core.c | 2 +- kernel/sched/rt.c | 2 +- kernel/sched/sched.h | 2 +- kernel/signal.c | 1 + kernel/time/time.c | 2 +- kernel/trace/trace_probe.c | 5 + kernel/trace/trace_probe.h | 4 +- kernel/tracepoint.c | 2 + lib/debugobjects.c | 2 +- lib/mpi/mpicoder.c | 2 +- mm/huge_memory.c | 2 + mm/hugetlb.c | 1 + mm/madvise.c | 2 +- mm/page_io.c | 2 +- mm/process_vm_access.c | 2 +- net/6lowpan/iphc.c | 4 +- net/802/garp.c | 2 +- net/802/mrp.c | 9 + net/9p/client.c | 2 +- net/batman-adv/bat_iv_ogm.c | 82 +++- net/batman-adv/bat_v_ogm.c | 59 +-- net/batman-adv/bridge_loop_avoidance.c | 63 ++- net/batman-adv/distributed-arp-table.c | 3 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 1 + net/batman-adv/multicast.c | 9 +- net/batman-adv/originator.c | 12 +- net/batman-adv/soft-interface.c | 1 + net/batman-adv/tp_meter.c | 198 ++++++--- net/batman-adv/tp_meter.h | 1 + net/batman-adv/translation-table.c | 44 +- net/batman-adv/tvlv.c | 28 +- net/batman-adv/tvlv.h | 2 +- net/batman-adv/types.h | 56 ++- net/bluetooth/6lowpan.c | 4 +- net/bluetooth/a2mp.c | 2 +- net/bluetooth/af_bluetooth.c | 144 +++++-- net/bluetooth/bnep/sock.c | 10 +- net/bluetooth/hci_core.c | 34 +- net/bluetooth/hci_event.c | 18 +- net/bluetooth/hci_sock.c | 10 +- net/bluetooth/hidp/sock.c | 10 +- net/bluetooth/l2cap_core.c | 87 +++- net/bluetooth/l2cap_sock.c | 86 ++-- net/bluetooth/mgmt.c | 12 +- net/bluetooth/rfcomm/sock.c | 48 ++- net/bluetooth/sco.c | 19 +- net/bluetooth/smp.c | 2 +- net/bridge/br_arp_nd_proxy.c | 8 +- net/bridge/br_fdb.c | 28 +- net/bridge/netfilter/ebt_snat.c | 3 + net/bridge/netfilter/ebtables.c | 30 ++ net/can/raw.c | 8 +- net/core/dev.c | 6 +- net/core/drop_monitor.c | 6 +- net/core/dst.c | 6 +- net/core/filter.c | 17 +- net/core/neighbour.c | 15 +- net/core/page_pool.c | 41 +- net/core/skbuff.c | 10 +- net/ethtool/netlink.c | 6 +- net/hsr/hsr_framereg.c | 6 +- net/ieee802154/6lowpan/tx.c | 5 + net/ieee802154/nl-phy.c | 3 +- net/ieee802154/nl802154.c | 3 +- net/ieee802154/socket.c | 3 +- net/ipv4/ah4.c | 2 +- net/ipv4/esp4.c | 4 +- net/ipv4/fib_semantics.c | 4 +- net/ipv4/ip_options.c | 4 + net/ipv4/ip_tunnel_core.c | 22 +- net/ipv4/netfilter/arp_tables.c | 15 +- net/ipv4/netfilter/ip_tables.c | 15 +- net/ipv4/netfilter/nft_fib_ipv4.c | 2 +- net/ipv4/route.c | 3 +- net/ipv4/sysctl_net_ipv4.c | 2 +- net/ipv4/tcp.c | 2 +- net/ipv6/addrconf.c | 6 +- net/ipv6/ah6.c | 2 +- net/ipv6/datagram.c | 54 ++- net/ipv6/esp6.c | 4 +- net/ipv6/exthdrs.c | 4 +- net/ipv6/ip6_vti.c | 25 +- net/ipv6/ip6mr.c | 3 +- net/ipv6/netfilter/ip6_tables.c | 15 +- net/ipv6/netfilter/nft_fib_ipv6.c | 2 +- net/ipv6/route.c | 3 +- net/ipv6/sit.c | 1 + net/iucv/af_iucv.c | 20 +- net/key/af_key.c | 6 +- net/mac80211/tdls.c | 2 +- net/mptcp/pm_netlink.c | 8 + net/mptcp/protocol.c | 22 +- net/netfilter/ipvs/ip_vs_ctl.c | 13 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 21 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 20 +- net/netfilter/ipvs/ip_vs_sched.c | 14 +- net/netfilter/ipvs/ip_vs_sync.c | 2 +- net/netfilter/nf_conntrack_irc.c | 4 +- net/netfilter/nf_conntrack_proto_tcp.c | 3 +- net/netfilter/nf_queue.c | 28 +- net/netfilter/nf_synproxy_core.c | 26 +- net/netfilter/nfnetlink_queue.c | 2 + net/netfilter/nft_exthdr.c | 3 + net/netfilter/nft_fib.c | 6 + net/netfilter/nft_tunnel.c | 2 +- net/netfilter/xt_NFQUEUE.c | 2 +- net/netfilter/xt_cpu.c | 2 +- net/netlabel/netlabel_unlabeled.c | 36 +- net/netlink/af_netlink.c | 11 +- net/netrom/nr_loopback.c | 3 +- net/netrom/nr_route.c | 3 +- net/nfc/hci/core.c | 10 + net/nfc/llcp_core.c | 11 + net/nfc/llcp_sock.c | 12 +- net/nfc/nci/hci.c | 10 + net/openvswitch/datapath.c | 1 + net/packet/af_packet.c | 40 +- net/phonet/af_phonet.c | 3 +- net/phonet/pn_dev.c | 6 +- net/phonet/socket.c | 3 +- net/qrtr/af_qrtr.c | 4 +- net/qrtr/ns.c | 180 ++++---- net/rds/ib_cm.c | 1 + net/rds/ib_send.c | 2 + net/rds/info.c | 2 +- net/sched/act_api.c | 7 +- net/sched/act_mirred.c | 6 +- net/sched/cls_fw.c | 6 +- net/sched/sch_netem.c | 40 -- net/sched/sch_sfb.c | 2 +- net/sctp/diag.c | 17 +- net/sctp/input.c | 8 + net/sctp/sm_statefuns.c | 6 +- net/sctp/socket.c | 2 + net/sctp/stream.c | 6 +- net/smc/af_smc.c | 4 +- net/smc/smc_clc.c | 6 +- net/smc/smc_pnet.c | 3 +- net/socket.c | 23 +- net/sunrpc/socklib.c | 6 +- net/sunrpc/svcsock.c | 4 +- net/sunrpc/xprtsock.c | 6 +- net/tipc/topsrv.c | 2 +- net/tls/tls_device.c | 4 +- net/vmw_vsock/vmci_transport.c | 4 +- net/wireless/nl80211.c | 16 +- net/wireless/scan.c | 3 +- net/xfrm/espintcp.c | 6 +- net/xfrm/xfrm_input.c | 16 +- net/xfrm/xfrm_policy.c | 15 +- net/xfrm/xfrm_state.c | 23 +- net/xfrm/xfrm_user.c | 5 +- security/apparmor/policy_unpack.c | 27 +- security/keys/keyctl.c | 4 +- sound/aoa/codecs/onyx.c | 104 ++--- sound/aoa/codecs/tas.c | 113 ++---- sound/aoa/core/gpio-feature.c | 20 +- sound/aoa/core/gpio-pmf.c | 26 +- sound/aoa/soundbus/i2sbus/core.c | 3 + sound/aoa/soundbus/i2sbus/pcm.c | 143 +++---- sound/core/misc.c | 14 +- sound/core/pcm_native.c | 7 +- sound/core/timer.c | 1 + sound/drivers/aloop.c | 40 +- sound/pci/hda/patch_hdmi.c | 1 + sound/soc/intel/boards/bytcht_es8316.c | 29 +- sound/soc/qcom/qdsp6/q6asm-dai.c | 43 +- sound/usb/clock.c | 6 + tools/testing/ktest/ktest.pl | 196 +++++---- tools/testing/selftests/net/forwarding/lib.sh | 56 +++ tools/testing/selftests/net/mptcp/mptcp_connect.sh | 6 +- 442 files changed, 4423 insertions(+), 2404 deletions(-)