6.12.96-rc1 review

Greg Kroah-Hartman linux-patches lkml stable 1 version Jul 16 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Jul 16349 patches 14 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/349	bpf, arm64: Reject out-of-range B.cond targets`arch/arm64/lib/insn.c`	+2 -0	0 replies
2/349	nfsd: fix file change detection in CB_GETATTR`fs/nfsd/nfs4state.c`	+8 -5	0 replies
3/349	nfsd: release layout stid on setlease failure`fs/nfsd/nfs4layouts.c`	+1 -3	0 replies
4/349	userfaultfd: gate must_wait writability check on pte_present()`fs/userfaultfd.c`	+12 -2	0 replies
5/349	perf: Fix dangling cgroup pointer in cpuctx backport`kernel/events/core.c`	+2 -3	0 replies
6/349	bcachefs: avoid truncating fiemap extent length`fs/bcachefs/fs.c`	+5 -3	0 replies
7/349	drm/amd: Fix set but not used warnings`drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c` `drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h` `drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c`	+8 ~~-11~~	0 replies
8/349	gpio: rockchip: change the GPIO version judgment logic`drivers/gpio/gpio-rockchip.c`	+9 -3	0 replies
9/349	gpio: rockchip: teardown bugs and resource leaks`drivers/gpio/gpio-rockchip.c`	+16 -1	0 replies
10/349	gpio: rockchip: fix generic IRQ chip leak on remove`drivers/gpio/gpio-rockchip.c`	+3 -1	0 replies
11/349	mm/vmalloc: take vmap_purge_lock in shrinker`mm/vmalloc.c`	+1 -0	0 replies
12/349	device property: initialize the remaining fields of fwnode_handle in fwnode_init()`include/linux/fwnode.h`	+2 -0	0 replies
13/349	f2fs: validate orphan inode entry count`fs/f2fs/checkpoint.c` `include/linux/f2fs_fs.h`	+14 -1	0 replies
14/349	f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode`fs/f2fs/gc.c` `fs/f2fs/inode.c`	+50 ~~-11~~	0 replies
15/349	f2fs: bound i_inline_xattr_size for non-inline-xattr inodes`fs/f2fs/inode.c`	+10 -9	0 replies
16/349	f2fs: fix potential deadlock in f2fs_balance_fs()`fs/f2fs/data.c` `fs/f2fs/f2fs.h` `fs/f2fs/segment.c`	+38 -0	0 replies
17/349	f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()`fs/f2fs/segment.c`	+7 -7	0 replies
18/349	f2fs: fix listxattr handling of corrupted xattr entries`fs/f2fs/xattr.c`	+3 -3	0 replies
19/349	fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()`drivers/video/fbdev/core/fbcon.c`	+7 -0	0 replies
20/349	nfsd: add nfsd_file_{get,put} to nfs_to nfsd_localio_operations`fs/nfsd/localio.c` `include/linux/nfslocalio.h`	+4 -0	0 replies
21/349	nfs_common: rename functions that invalidate LOCALIO nfs_clients`fs/nfs/localio.c` `fs/nfs_common/nfslocalio.c` `fs/nfsd/nfsctl.c` +1 more	+10 -9	0 replies
22/349	NFSv4/flexfiles: Remove cred local variable dependency`fs/nfs/flexfilelayout/flexfilelayout.c`	+2 -2	0 replies
23/349	NFSv4/flexfiles: Add data structure support for striped layouts`fs/nfs/flexfilelayout/flexfilelayout.c` `fs/nfs/flexfilelayout/flexfilelayout.h` `fs/nfs/flexfilelayout/flexfilelayoutdev.c`	+128 ~~-102~~	0 replies
24/349	NFSv4/flexfiles: reject zero filehandle version count`fs/nfs/flexfilelayout/flexfilelayout.c`	+4 -0	0 replies
25/349	locking/rtmutex: Make sure we wake anything on the wake_q when we release the lock->wait_lock`kernel/locking/rtmutex.c` `kernel/locking/rtmutex_api.c`	+17 -3	0 replies
26/349	apparmor: advertise the tcp fast open fix is applied`security/apparmor/net.c`	+1 -0	0 replies
27/349	nfsd: move name lookup out of nfsd4_list_rec_dir()`fs/nfsd/nfs4recover.c`	+26 ~~-27~~	0 replies
28/349	nfsd: change nfs4_client_to_reclaim() to allocate data`fs/nfsd/nfs4recover.c` `fs/nfsd/nfs4state.c`	+42 ~~-47~~	0 replies
29/349	bonding: fix xfrm offload feature setup on active-backup mode`drivers/net/bonding/bond_main.c` `drivers/net/bonding/bond_netlink.c` `include/net/bonding.h`	+11 -8	0 replies
30/349	block: add a store_limit operations for sysfs entries`block/blk-sysfs.c`	+54 ~~-54~~	0 replies
31/349	block: fix queue freeze vs limits lock order in sysfs store methods`block/blk-sysfs.c`	+10 -8	0 replies
32/349	mm/khugepaged: write all dirty file folios when collapsing`mm/khugepaged.c`	+25 ~~-14~~	0 replies
33/349	perf trace beauty fcntl: Fix build with older kernel headers`tools/perf/trace/beauty/fcntl.c`	+16 -0	0 replies
34/349	ACPI: CPPC: Suppress UBSAN warning caused by field misuse`drivers/acpi/cppc_acpi.c`	+7 -4	0 replies
35/349	ACPI: NFIT: core: Fix possible NULL pointer dereference`drivers/acpi/nfit/core.c`	+3 -0	0 replies
36/349	platform/x86: intel-hid: Protect ACPI notify handler against recursion`drivers/platform/x86/intel/hid.c`	+9 -0	0 replies
37/349	LoongArch: Add PIO for early access before ACPI PCI root register`arch/loongarch/include/asm/acpi.h` `arch/loongarch/kernel/acpi.c` `arch/loongarch/kernel/setup.c` +1 more	+34 -0	0 replies
38/349	rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER`Makefile`	+3 -0	1 reply
39/349	perf/core: Detach event groups during remove_on_exec`kernel/events/core.c`	+8 -6	0 replies
40/349	rust: kasan: KASAN+RUST requires clang`init/Kconfig`	+1 -0	0 replies
41/349	drm/i915: ensure segment offset never exceeds allowed max`drivers/gpu/drm/i915/i915_mm.c`	+2 -2	0 replies
42/349	usb: gadget: function: rndis: add length check to response query`drivers/usb/gadget/function/rndis.c`	+10 -4	0 replies
43/349	usb: gadget: function: rndis: add length check for header`drivers/usb/gadget/function/rndis.c`	+6 -0	0 replies
44/349	iio: accel: bmc150: clamp the device-reported FIFO frame count`drivers/iio/accel/bmc150-accel-core.c`	+2 -0	0 replies
45/349	iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error`drivers/iio/accel/kxsd9.c`	+3 -2	0 replies
46/349	iio: adc: lpc32xx: Initialize completion before requesting IRQ`drivers/iio/adc/lpc32xx_adc.c`	+2 -2	0 replies
47/349	iio: adc: spear: Initialize completion before requesting IRQ`drivers/iio/adc/spear_adc.c`	+1 -2	0 replies
48/349	iio: adc: ti-ads1119: fix PM reference leak in buffer preenable`drivers/iio/adc/ti-ads1119.c`	+5 -1	0 replies
49/349	iio: adc: ti-ads124s08: Return reset GPIO lookup errors`drivers/iio/adc/ti-ads124s08.c`	+2 -1	0 replies
50/349	iio: backend: fix uninitialized data in debugfs`drivers/iio/industrialio-backend.c`	+1 -1	0 replies
51/349	iio: chemical: scd30: Cleanup initializations and fix sign-extension bug`drivers/iio/chemical/scd30_core.c`	+15 -4	0 replies
52/349	iio: common: st_sensors: honour channel endianness in read_axis_data`drivers/iio/common/st_sensors/st_sensors_core.c`	+17 -6	0 replies
53/349	iio: event: Fix event FIFO reset race`drivers/iio/industrialio-event.c`	+2 -3	0 replies
54/349	iio: gyro: bmg160: bail out when bandwidth/filter is not in table`drivers/iio/gyro/bmg160_core.c`	+6 -0	0 replies
55/349	iio: gyro: bmg160: wait full startup time after mode change at probe`drivers/iio/gyro/bmg160_core.c`	+8 -2	0 replies
56/349	iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ`drivers/iio/imu/adis_trigger.c`	+1 -1	0 replies
57/349	iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ`drivers/iio/imu/bmi160/bmi160_core.c`	+2 -1	0 replies
58/349	iio: imu: inv_icm42600: fix timestamp clock period by using lower value`drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c`	+4 -4	0 replies
59/349	iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading`drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h`	+6 -4	0 replies
60/349	iio: imu: st_lsm6dsx: deselect shub page before reading whoami`drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c`	+20 -1	0 replies
61/349	iio: light: al3010: fix incorrect scale for the highest gain range`drivers/iio/light/al3010.c`	+1 -1	0 replies
62/349	iio: light: gp2ap002: fix runtime PM leak on read error`drivers/iio/light/gp2ap002.c`	+1 -1	0 replies
63/349	iio: light: opt3001: fix missing state reset on timeout`drivers/iio/light/opt3001.c`	+4 -2	0 replies
64/349	iio: light: tsl2591: return actual error from probe IRQ failure`drivers/iio/light/tsl2591.c`	+2 -4	0 replies
65/349	iio: light: veml6030: fix channel type when pushing events`drivers/iio/light/veml6030.c`	+5 -3	0 replies
66/349	iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call`drivers/iio/magnetometer/ak8975.c`	+1 -0	0 replies
67/349	iio: resolver: ad2s1210: notify trigger and clear state on fault read error`drivers/iio/resolver/ad2s1210.c`	+1 -1	0 replies
68/349	iio: temperature: Build mlx90635 with CONFIG_MLX90635`drivers/iio/temperature/Makefile`	+1 -1	0 replies
69/349	iio: temperature: ltc2983: Fix n_wires default bypassing rotation check`drivers/iio/temperature/ltc2983.c`	+1 -1	0 replies
70/349	iio: temperature: ltc2983: Fix reinit_completion() called after conversion start`drivers/iio/temperature/ltc2983.c`	+1 -2	0 replies
71/349	ALSA: virtio: Add missing 384 kHz PCM rate mapping`sound/virtio/virtio_pcm.c` `sound/virtio/virtio_pcm_ops.c`	+4 -2	0 replies
72/349	ALSA: virtio: Validate control metadata from the device`sound/virtio/virtio_kctl.c`	+50 -0	0 replies
73/349	ALSA: ymfpci: check snd_ctl_new1() return value`sound/pci/ymfpci/ymfpci_main.c`	+6 -0	0 replies
74/349	ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser`sound/usb/caiaq/input.c`	+1 -1	0 replies
75/349	ALSA: cmipci: check snd_ctl_new1() return value`sound/pci/cmipci.c`	+6 -0	0 replies
76/349	ALSA: es1938: check snd_ctl_new1() return value`sound/pci/es1938.c`	+2 -0	0 replies
77/349	ALSA: firewire: isight: bound the sample count to the packet payload`sound/firewire/isight.c`	+2 -1	0 replies
78/349	ALSA: gus: check snd_ctl_new1() return value`sound/isa/gus/gus_pcm.c`	+2 -0	0 replies
79/349	ALSA: ice1712: check snd_ctl_new1() return value`sound/pci/ice1712/aureon.c` `sound/pci/ice1712/ice1712.c` `sound/pci/ice1712/ice1724.c`	+16 -0	0 replies
80/349	ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()`sound/core/seq/seq_memory.c`	+1 -1	0 replies
81/349	ALSA: usb-audio: avoid kobject path lookup in DualSense match`sound/usb/mixer_quirks.c`	+12 ~~-28~~	0 replies
82/349	ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()`sound/usb/mixer_scarlett.c`	+3 -1	0 replies
83/349	ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks`sound/usb/mixer_us16x08.c`	+24 ~~-25~~	0 replies
84/349	ALSA: usb-audio: Roll back quirk control caches on write errors`sound/usb/mixer_quirks.c`	+37 -8	0 replies
85/349	ALSA: usb-audio: Update Babyface Pro control caches only after successful writes`sound/usb/mixer_quirks.c`	+10 -6	0 replies
86/349	ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes`sound/usb/mixer_us16x08.c`	+52 ~~-26~~	0 replies
87/349	vfio/pci: Use a private flag to prevent power state change with VFs`drivers/vfio/pci/vfio_pci_core.c` `include/linux/vfio_pci_core.h`	+15 -3	0 replies
88/349	vfio/pci: Latch disable_idle_d3 per device`drivers/vfio/pci/vfio_pci_core.c` `include/linux/vfio_pci_core.h`	+11 -9	0 replies
89/349	vfio/pci: Release the VGA arbiter client on register_device() failure`drivers/vfio/pci/vfio_pci_core.c`	+1 -0	0 replies
90/349	vfio/pci: Fix racy bitfields and tighten struct layout`include/linux/vfio_pci_core.h`	+8 -5	0 replies
91/349	vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc`drivers/vfio/vfio_main.c`	+2 -1	0 replies
92/349	vfio: Remove device debugfs before releasing devres`drivers/vfio/debugfs.c` `drivers/vfio/vfio_main.c`	+8 -1	0 replies
93/349	Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB`drivers/bluetooth/btusb.c`	+2 -0	0 replies
94/349	Bluetooth: btusb: fix use-after-free on registration failure`drivers/bluetooth/btusb.c`	+10 -1	0 replies
95/349	Bluetooth: btusb: fix use-after-free on marvell probe failure`drivers/bluetooth/btusb.c`	+5 -3	0 replies
96/349	Bluetooth: btusb: fix wakeup source leak on probe failure`drivers/bluetooth/btusb.c`	+15 -3	0 replies
97/349	binder: fix UAF in binder_thread_release()`drivers/android/binder.c`	+5 -1	0 replies
98/349	binder: fix UAF in binder_free_transaction()`drivers/android/binder.c`	+13 -0	0 replies
99/349	usb: xhci: Fix sleep in atomic context in xhci_free_streams()`drivers/usb/host/xhci.c`	+10 -1	0 replies
100/349	usb: typec: tcpci_rt1711h: unregister TCPCI port with devres`drivers/usb/typec/tcpm/tcpci_rt1711h.c`	+8 -5	0 replies
101/349	PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series`drivers/pci/controller/pci-loongson.c`	+36 -0	0 replies
102/349	PCI: altera: Do not dispose parent IRQ mapping`drivers/pci/controller/pcie-altera.c`	+0 -1	0 replies
103/349	PCI: host-common: Request bus reassignment when not probe-only`drivers/pci/controller/pci-host-common.c`	+4 -0	0 replies
104/349	PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling`drivers/pci/controller/dwc/pci-imx6.c`	+3 -9	0 replies
105/349	mm/damon/ops-common: handle extreme intervals in damon_hot_score()`include/linux/damon.h` `mm/damon/ops-common.c`	+7 -2	0 replies
106/349	netfilter: ipset: fix race between dump and ip_set_list resize`net/netfilter/ipset/ip_set_core.c`	+7 -1	0 replies
107/349	virtio_pci: fix vq info pointer lookup via wrong index`drivers/virtio/virtio_pci_common.c`	+6 -4	0 replies
108/349	virtio-mmio: fix device release warning on module unload`drivers/virtio/virtio_mmio.c`	+13 ~~-13~~	0 replies
109/349	hwrng: virtio: clamp device-reported used.len at copy_data()`drivers/char/hw_random/virtio-rng.c`	+21 -2	0 replies
110/349	USB: chaoskey: Fix slab-use-after-free in chaoskey_release()`drivers/usb/misc/chaoskey.c`	+0 -1	0 replies
111/349	usb: dwc3: run gadget disconnect from sleepable suspend context`drivers/usb/dwc3/gadget.c`	+36 -7	0 replies
112/349	6lowpan: fix NHC entry use-after-free on error path`net/6lowpan/nhc.c`	+1 -1	0 replies
113/349	tipc: fix out-of-bounds read in broadcast Gap ACK blocks`net/tipc/bcast.c` `net/tipc/bcast.h` `net/tipc/node.c`	+27 ~~-12~~	0 replies
114/349	staging: vme_user: bound slave read/write to the kern_buf size`drivers/staging/vme_user/vme_user.c`	+22 -0	0 replies
115/349	smb: client: restrict implied bcc[0] exemption to responses without data area`fs/smb/client/smb2misc.c`	+26 -6	0 replies
116/349	staging: vme_user: fix location monitor leak in fake bridge`drivers/staging/vme_user/vme_fake.c`	+8 -0	0 replies
117/349	staging: vme_user: fix location monitor leak in tsi148 bridge`drivers/staging/vme_user/vme_tsi148.c`	+8 -0	0 replies
118/349	media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe`drivers/staging/media/ipu3/ipu3-css-params.c`	+6 -2	0 replies
119/349	staging: media: atomisp: reduce load_primary_binaries() stack usage`drivers/staging/media/atomisp/pci/sh_css.c`	+3 -3	0 replies
120/349	staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()`drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c`	+8 -0	0 replies
121/349	staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+7 -1	0 replies
122/349	staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+4 -0	0 replies
123/349	staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop`drivers/staging/rtl8723bs/core/rtw_wlan_util.c`	+5 -1	0 replies
124/349	staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+8 -0	0 replies
125/349	staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop`drivers/staging/rtl8723bs/core/rtw_wlan_util.c`	+11 -3	0 replies
126/349	staging: rtl8723bs: fix OOB write in HT_caps_handler()`drivers/staging/rtl8723bs/core/rtw_wlan_util.c`	+2 -1	0 replies
127/349	crypto: amlogic - avoid double cleanup in meson_crypto_probe()`drivers/crypto/amlogic/amlogic-gxl-core.c`	+1 -1	0 replies
128/349	ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL`fs/smb/server/smb2pdu.c`	+7 -7	0 replies
129/349	net: af_key: initialize alg_key_len for IPComp states`net/key/af_key.c`	+1 -0	0 replies
130/349	audit: Fix data races of skb_queue_len() readers on audit_queue`kernel/audit.c`	+5 -5	0 replies
131/349	Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete`net/bluetooth/mgmt.c`	+3 -0	0 replies
132/349	coresight: etb10: restore atomic_t for shared reading state`drivers/hwtracing/coresight/coresight-etb10.c`	+3 -3	0 replies
133/349	debugobjects: Plug race against a concurrent OOM disable`lib/debugobjects.c`	+17 -0	0 replies
134/349	fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns`fs/ntfs3/fslog.c`	+15 -5	0 replies
135/349	NTB: epf: Avoid calling pci_irq_vector() from hardirq context`drivers/ntb/hw/epf/ntb_hw_epf.c`	+3 -1	0 replies
136/349	gpio: eic-sprd: use raw_spinlock_t in the irq startup path`drivers/gpio/gpio-eic-sprd.c`	+4 -4	0 replies
137/349	io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item`io_uring/io-wq.c`	+1 -1	0 replies
138/349	netpoll: fix a use-after-free on shutdown path`net/core/netpoll.c`	+1 -8	0 replies
139/349	ipv4: igmp: remove multicast group from hash table on device destruction`net/ipv4/igmp.c`	+1 -0	0 replies
140/349	net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes`net/ipv4/sysctl_net_ipv4.c` `net/ipv4/tcp_output.c`	+10 -4	0 replies
141/349	mfd: cros_ec: Delay dev_set_drvdata() until probe success`drivers/mfd/cros_ec_dev.c`	+2 -1	0 replies
142/349	mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()`mm/shrinker_debug.c`	+0 -4	0 replies
143/349	mm: shrinker: fix shrinker_info teardown race with expansion`mm/shrinker.c`	+11 -2	0 replies
144/349	mm: shrinker: fix NULL pointer dereference in debugfs`mm/shrinker_debug.c`	+6 -4	0 replies
145/349	mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup`mm/swapfile.c`	+1 -0	0 replies
146/349	netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump`net/netfilter/nf_conntrack_netlink.c`	+1 -1	0 replies
147/349	netfilter: handle unreadable frags`net/ipv6/netfilter/nf_conntrack_reasm.c` `net/netfilter/nfnetlink_log.c` `net/netfilter/nfnetlink_queue.c` +1 more	+41 ~~-19~~	0 replies
148/349	netfilter: ebtables: module names must be null-terminated`net/bridge/netfilter/ebtables.c`	+3 -0	0 replies
149/349	netfilter: ebtables: terminate table name before find_table_lock()`net/bridge/netfilter/ebtables.c`	+6 -0	0 replies
150/349	Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()`drivers/bluetooth/btmtksdio.c`	+1 -1	0 replies
151/349	Bluetooth: bnep: pin L2CAP connection during netdev registration`net/bluetooth/bnep/core.c`	+21 -6	0 replies
152/349	Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()`drivers/bluetooth/btnxpuart.c`	+6 -0	0 replies
153/349	Bluetooth: fix UAF in bt_accept_dequeue()`net/bluetooth/af_bluetooth.c` `net/bluetooth/l2cap_sock.c`	+5 ~~-16~~	0 replies
154/349	Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled`drivers/bluetooth/hci_ldisc.c`	+10 -4	0 replies
155/349	Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()`net/bluetooth/iso.c`	+12 -1	0 replies
156/349	Bluetooth: L2CAP: validate option length before reading conf opt value`net/bluetooth/l2cap_core.c`	+28 -8	0 replies
157/349	fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr`fs/ntfs3/frecord.c` `fs/ntfs3/inode.c` `fs/ntfs3/ntfs_fs.h`	+6 -6	0 replies
158/349	fs/ntfs3: fsync files by syncing parent inodes`fs/ntfs3/dir.c` `fs/ntfs3/file.c` `fs/ntfs3/frecord.c` +1 more	+81 -4	0 replies
159/349	fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()`fs/ntfs3/inode.c`	+8 -0	2 replies
160/349	fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()`fs/ntfs3/attrib.c`	+14 -0	0 replies
161/349	coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()`drivers/hwtracing/coresight/ultrasoc-smb.c`	+1 -0	0 replies
162/349	smb/client: Fix error code in smb2_aead_req_alloc()`fs/smb/client/smb2ops.c`	+5 -3	0 replies
163/349	ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE`fs/smb/server/smb2pdu.c`	+11 -0	0 replies
164/349	ksmbd: add a permission check for FSCTL_SET_ZERO_DATA`fs/smb/server/smb2pdu.c`	+6 -0	0 replies
165/349	ksmbd: serialize QUERY_DIRECTORY requests per file`fs/smb/server/smb2pdu.c` `fs/smb/server/vfs_cache.c` `fs/smb/server/vfs_cache.h`	+7 -0	0 replies
166/349	ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation`fs/smb/server/smb2pdu.c`	+16 ~~-18~~	0 replies
167/349	ksmbd: require source read access for duplicate extents`fs/smb/server/smb2pdu.c`	+4 -0	0 replies
168/349	ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY`fs/smb/server/smb2pdu.c`	+3 -0	0 replies
169/349	ksmbd: run set info with opener credentials`fs/smb/server/smb2pdu.c`	+3 -5	0 replies
170/349	ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION`fs/smb/server/smb2pdu.c`	+6 -0	0 replies
171/349	ksmbd: add per-handle permission check to FILE_LINK_INFORMATION`fs/smb/server/smb2pdu.c`	+5 -0	0 replies
172/349	ksmbd: use opener credentials for delete-on-close`fs/smb/server/vfs.c` `fs/smb/server/vfs_cache.c`	+9 -2	0 replies
173/349	ksmbd: use opener credentials for ADS I/O`fs/smb/server/vfs.c`	+9 -2	0 replies
174/349	smb: client: fix query directory replay double-free`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
175/349	smb: client: fix query_info() replay double-free`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
176/349	smb: client: fix double-free in SMB2_ioctl() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
177/349	smb: client: fix change notify replay double-free`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
178/349	smb: client: fix double-free in SMB2_flush() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
179/349	smb: client: fix double-free in SMB2_open() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
180/349	smb: client: fix double-free in SMB2_close() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
181/349	smb: client: Fix next buffer leak in receive_encrypted_standard()`fs/smb/client/smb2ops.c`	+6 -4	0 replies
182/349	smb: client: use unaligned reads in parse_posix_ctxt()`fs/smb/client/smb2pdu.c`	+3 -3	0 replies
183/349	smb: client: harden POSIX SID length parsing`fs/smb/client/smb2pdu.c`	+1 -1	0 replies
184/349	smb: client: fix atime clamp check in read completion`fs/smb/client/file.c`	+1 -1	0 replies
185/349	smb: client: mask server-provided mode to 07777 in modefromsid`fs/smb/client/cifsacl.c`	+1 -1	0 replies
186/349	writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()`fs/fs-writeback.c`	+29 -2	0 replies
187/349	OPP: of: Fix potential memory leak in opp_parse_supplies()`drivers/opp/of.c`	+2 -1	0 replies
188/349	cpufreq: qcom-cpufreq-hw: Fix possible double free`drivers/cpufreq/qcom-cpufreq-hw.c`	+0 -1	0 replies
189/349	firmware_loader: fix device reference leak in firmware_upload_register()`drivers/base/firmware_loader/sysfs_upload.c`	+3 -5	0 replies
190/349	cpufreq: intel_pstate: Sync policy->cur during CPU offline`drivers/cpufreq/intel_pstate.c`	+4 -2	0 replies
191/349	sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT`kernel/sched/features.h`	+8 -0	0 replies
192/349	cpufreq: Fix hotplug-suspend race during reboot`drivers/cpufreq/cpufreq.c`	+2 -0	0 replies
193/349	cpufreq: pcc: fix use-after-free and double free in _OSC evaluation`drivers/cpufreq/pcc-cpufreq.c`	+2 -0	0 replies
194/349	posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path`kernel/time/posix-cpu-timers.c`	+1 -0	0 replies
195/349	time/jiffies: Register jiffies clocksource before usage`kernel/time/jiffies.c`	+5 -6	0 replies
196/349	clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances`drivers/clocksource/timer-tegra186.c`	+2 -1	0 replies
197/349	perf/arm-cmn: Fix DVM node events`drivers/perf/arm-cmn.c`	+12 ~~-11~~	0 replies
198/349	X.509: Fix validation of ASN.1 certificate header`crypto/asymmetric_keys/x509_loader.c`	+1 -1	0 replies
199/349	mm/slab: do not limit zeroing to orig_size when only red zoning is enabled`mm/slub.c`	+10 -8	0 replies
200/349	tools/mm/slabinfo: Fix trace disable logic inversion`tools/mm/slabinfo.c`	+1 -1	0 replies
201/349	tools/mm/slabinfo: fix total_objects attribute name`tools/mm/slabinfo.c`	+2 -2	0 replies
202/349	HID: hid-goodix-spi: validate report size to prevent stack buffer overflow`drivers/hid/hid-goodix-spi.c`	+3 -0	0 replies
203/349	HID: wacom: stop hardware after post-start probe failures`drivers/hid/wacom_sys.c`	+6 -6	0 replies
204/349	HID: letsketch: fix UAF on inrange_timer at driver unbind`drivers/hid/hid-letsketch.c`	+33 -3	0 replies
205/349	HID: lg-g15: cancel pending work on remove to fix a use-after-free`drivers/hid/hid-lg-g15.c`	+16 -0	0 replies
206/349	HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads`drivers/hid/hid-sensor-hub.c` `include/linux/hid-sensor-hub.h`	+96 -6	0 replies
207/349	hfs/hfsplus: zero-initialize buffer in hfs_bnode_read`fs/hfs/bnode.c` `fs/hfsplus/bnode.c`	+4 -0	0 replies
208/349	nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers`fs/nilfs2/segment.c`	+22 -0	0 replies
209/349	media: mtk-jpeg: cancel workqueue on release for supported platforms only`drivers/media/platform/mediatek/jpeg/mtk_jpeg_core.c`	+2 -1	0 replies
210/349	serial: 8250_mid: Disable DMA for selected platforms`drivers/tty/serial/8250/8250_mid.c`	+11 -2	0 replies
211/349	xfs: use null daddr for unset first bad log block`fs/xfs/xfs_log_recover.c`	+3 -3	0 replies
212/349	xfs: release dquot buffer after dqflush failure`fs/xfs/xfs_qm.c`	+2 -3	0 replies
213/349	xfs: fix unreachable BIGTIME check in dquot flush validation`fs/xfs/xfs_dquot.c`	+8 -8	0 replies
214/349	xfs: fix pointer arithmetic error on 32-bit systems`fs/xfs/libxfs/xfs_bmap_btree.h`	+1 -1	0 replies
215/349	xfs: fix exchmaps reservation limit check`fs/xfs/libxfs/xfs_exchmaps.c`	+1 -1	0 replies
216/349	bpf: Reject fragmented frames in devmap`kernel/bpf/devmap.c`	+7 -0	0 replies
217/349	bpf: Restore sysctl new-value from 1 to 0`kernel/bpf/cgroup.c`	+1 -1	0 replies
218/349	bpf: Validate BTF repeated field counts before expansion`kernel/bpf/btf.c`	+4 -5	0 replies
219/349	net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()`drivers/net/usb/kalmia.c`	+8 -0	0 replies
220/349	usb: cdc_acm: Add quirk for Uniden BC125AT scanner`drivers/usb/class/cdc-acm.c`	+3 -0	0 replies
221/349	usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()`drivers/usb/cdns3/cdnsp-mem.c`	+2 -0	0 replies
222/349	USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub`drivers/usb/core/quirks.c`	+3 -0	0 replies
223/349	usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()`drivers/usb/dwc3/dwc3-meson-g12a.c`	+9 -5	0 replies
224/349	usb: free iso schedules on failed submit`drivers/usb/fotg210/fotg210-hcd.c` `drivers/usb/host/ehci-sched.c`	+13 -4	0 replies
225/349	usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler`drivers/usb/gadget/composite.c`	+3 -2	0 replies
226/349	usb: gadget: udc: Fix use-after-free in gadget_match_driver`drivers/usb/gadget/udc/core.c`	+28 -1	0 replies
227/349	usb: gadget: f_printer: take kref only for successful open`drivers/usb/gadget/function/f_printer.c`	+1 -2	0 replies
228/349	USB: idmouse: fix use-after-free on disconnect race`drivers/usb/misc/idmouse.c`	+22 ~~-23~~	0 replies
229/349	USB: ldusb: fix use-after-free on disconnect race`drivers/usb/misc/ldusb.c`	+18 ~~-20~~	0 replies
230/349	USB: iowarrior: fix use-after-free on disconnect`drivers/usb/misc/iowarrior.c`	+3 -1	0 replies
231/349	USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD`drivers/usb/core/quirks.c`	+3 -0	0 replies
232/349	USB: legousbtower: fix use-after-free on disconnect race`drivers/usb/misc/legousbtower.c`	+19 ~~-18~~	0 replies
233/349	usb: sl811-hcd: disable controller wakeup on remove`drivers/usb/host/sl811-hcd.c`	+1 -0	0 replies
234/349	USB: storage: include US_FL_NO_SAME in quirks mask`drivers/usb/storage/usb.c`	+1 -1	0 replies
235/349	USB: misc: uss720: unregister parport on probe failure`drivers/usb/misc/uss720.c`	+4 -1	0 replies
236/349	usb: mtu3: unmap request DMA on queue failure`drivers/usb/mtu3/mtu3_gadget.c`	+1 -0	0 replies
237/349	USB: serial: keyspan_pda: fix information leak`drivers/usb/serial/keyspan_pda.c`	+1 -1	0 replies
238/349	USB: serial: option: add Telit Cinterion FE990D50 compositions`drivers/usb/serial/option.c`	+16 -0	0 replies
239/349	USB: serial: digi_acceleport: fix broken rx after throttle`drivers/usb/serial/digi_acceleport.c`	+16 -0	0 replies
240/349	USB: serial: digi_acceleport: fix hard lockup on disconnect`drivers/usb/serial/digi_acceleport.c`	+7 -5	0 replies
241/349	USB: serial: digi_acceleport: fix write buffer corruption`drivers/usb/serial/digi_acceleport.c`	+10 -5	0 replies
242/349	USB: ulpi: fix memory leak on registration failure`drivers/usb/common/ulpi.c`	+10 ~~-13~~	0 replies
243/349	USB: usb-storage: ene_ub6250: restore media-ready check`drivers/usb/storage/ene_ub6250.c`	+2 -1	0 replies
244/349	usbip: tools: support SuperSpeedPlus devices`tools/usb/usbip/libsrc/usbip_common.c` `tools/usb/usbip/libsrc/usbip_device_driver.c` `tools/usb/usbip/libsrc/vhci_driver.c`	+7 -0	0 replies
245/349	usbip: vudc: fix NULL deref in vep_dequeue()`drivers/usb/usbip/vudc.h` `drivers/usb/usbip/vudc_dev.c`	+1 -4	0 replies
246/349	usb: typec: anx7411: use devm_pm_runtime_enable()`drivers/usb/typec/anx7411.c`	+3 -1	0 replies
247/349	usb: typec: class: drop PD lookup reference`drivers/usb/typec/class.c`	+1 -0	0 replies
248/349	usb: typec: tcpm: Fix VDM type for Enter Mode commands`drivers/usb/typec/tcpm/tcpm.c`	+2 -2	0 replies
249/349	usb: typec: tcpm: Validate SVID index in svdm_consume_modes()`drivers/usb/typec/tcpm/tcpm.c`	+5 -0	0 replies
250/349	usb: typec: ucsi: Invert DisplayPort role assignment`drivers/usb/typec/ucsi/displayport.c`	+2 -2	0 replies
251/349	usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode`drivers/usb/typec/ucsi/displayport.c`	+1 -2	0 replies
252/349	usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove`drivers/usb/typec/ucsi/ucsi_ccg.c`	+1 -1	0 replies
253/349	usb: typec: ucsi: cancel pending work on system suspend`drivers/usb/typec/ucsi/ucsi.c` `drivers/usb/typec/ucsi/ucsi.h` `drivers/usb/typec/ucsi/ucsi_acpi.c`	+30 -1	0 replies
254/349	usb: gadget: f_fs: Fix DMA fence leak`drivers/usb/gadget/function/f_fs.c`	+1 -0	0 replies
255/349	block: skip sync_blockdev() on surprise removal in bdev_mark_dead()`block/bdev.c`	+7 -1	0 replies
256/349	x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled`arch/x86/kernel/cpu/resctrl/monitor.c`	+29 ~~-18~~	0 replies
257/349	PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining`drivers/pci/quirks.c`	+20 ~~-31~~	0 replies
258/349	udf: validate free block extents against the partition length`fs/udf/balloc.c`	+3 -2	0 replies
259/349	udf: validate VAT header length against the VAT inode size`fs/udf/super.c`	+8 -0	0 replies
260/349	udf: validate sparing table length as an entry count, not a byte count`fs/udf/super.c`	+2 -1	0 replies
261/349	hwrng: jh7110 - fix refcount leak in starfive_trng_read()`drivers/char/hw_random/jh7110-trng.c`	+8 -5	0 replies
262/349	nvme: target: rdma: fix ndev refcount leak on queue connect`drivers/nvme/target/rdma.c`	+4 -2	0 replies
263/349	dm-ioctl: report an error if a device has no table`drivers/md/dm-ioctl.c`	+4 -1	0 replies
264/349	nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks`drivers/nvme/host/multipath.c`	+6 -0	0 replies
265/349	nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page`drivers/nvme/target/discovery.c`	+22 -1	0 replies
266/349	nvmet-auth: validate reply message payload bounds against transfer length`drivers/nvme/target/fabrics-cmd-auth.c`	+12 -3	0 replies
267/349	btrfs: do not trim a device which is not writeable`fs/btrfs/extent-tree.c`	+8 -4	0 replies
268/349	partitions: aix: bound the pp_count scan to the ppe array`block/partitions/aix.c`	+9 -0	0 replies
269/349	isofs: bound Rock Ridge symlink components to the SL record`fs/isofs/rock.c`	+11 -0	0 replies
270/349	crypto: af_alg - Remove zero-copy support from skcipher and aead`Documentation/crypto/userspace-if.rst` `crypto/af_alg.c` `crypto/algif_aead.c`	+32 ~~-78~~	0 replies
271/349	crypto: caam - use print_hex_dump_devel to guard key hex dumps`drivers/crypto/caam/caamalg.c` `drivers/crypto/caam/caamalg_qi.c` `drivers/crypto/caam/caamhash.c` +1 more	+16 ~~-16~~	0 replies
272/349	crypto: caam - use print_hex_dump_devel to guard key hex dumps again`drivers/crypto/caam/caamalg_qi2.c`	+6 -6	0 replies
273/349	crypto: ecc - Fix carry overflow in vli multiplication`crypto/ecc.c`	+20 ~~-11~~	0 replies
274/349	crypto: pcrypt - restore callback for non-parallel fallback`crypto/pcrypt.c`	+4 -0	0 replies
275/349	crypto: tegra - fix refcount leak in tegra_se_host1x_submit()`drivers/crypto/tegra/tegra-se-main.c`	+1 -1	0 replies
276/349	crypto: ccp - Do not initialize SNP for SEV ioctls`drivers/crypto/ccp/sev-dev.c`	+2 -5	0 replies
277/349	crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)`drivers/crypto/ccp/sev-dev.c`	+1 ~~-12~~	0 replies
278/349	crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)`drivers/crypto/ccp/sev-dev.c`	+4 ~~-13~~	0 replies
279/349	crypto: drbg - Fix returning success on failure in CTR_DRBG`crypto/drbg.c`	+1 -1	0 replies
280/349	crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels`include/crypto/drbg.h`	+7 ~~-11~~	0 replies
281/349	crypto: drbg - Fix the fips_enabled priority boost`crypto/drbg.c`	+1 -1	0 replies
282/349	crypto: qat - keep VFs enabled during reset`drivers/crypto/intel/qat/qat_common/adf_sriov.c`	+11 -1	0 replies
283/349	crypto: qat - notify fatal error before AER reset preparation`drivers/crypto/intel/qat/qat_common/adf_aer.c`	+2 -2	0 replies
284/349	crypto: qat - protect service table iterations with service_lock`drivers/crypto/intel/qat/qat_common/adf_init.c`	+16 -0	0 replies
285/349	crypto: qat - validate RSA CRT component lengths`drivers/crypto/intel/qat/qat_common/qat_asym_algs.c`	+5 -5	0 replies
286/349	crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header`drivers/crypto/talitos.c`	+20 -8	0 replies
287/349	crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1`drivers/crypto/talitos.c` `drivers/crypto/talitos.h`	+124 ~~-58~~	0 replies
288/349	crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function`drivers/crypto/talitos.c`	+22 ~~-17~~	0 replies
289/349	crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function`drivers/crypto/talitos.c`	+41 ~~-34~~	0 replies
290/349	crypto: talitos - move code in current_desc_hdr() into a standalone function`drivers/crypto/talitos.c`	+19 ~~-16~~	0 replies
291/349	crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor`drivers/crypto/talitos.c`	+6 ~~-95~~	0 replies
292/349	crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue`drivers/crypto/talitos.c` `drivers/crypto/talitos.h`	+115 ~~-63~~	0 replies
293/349	crypto: talitos/hash - drop workqueue mechanism for SEC1`drivers/crypto/talitos.c`	+7 ~~-73~~	0 replies
294/349	crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request`drivers/crypto/talitos.c`	+13 ~~-16~~	0 replies
295/349	crypto: talitos/hash - remove useless wrapper`drivers/crypto/talitos.c`	+1 -6	0 replies
296/349	crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation`drivers/crypto/talitos.c`	+40 -9	0 replies
297/349	arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()`arch/arm64/kernel/entry-fpsimd.S`	+4 -4	0 replies
298/349	spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()`drivers/spi/spi-fsl-lpspi.c`	+9 -9	0 replies
299/349	spi: fsl-lpspi: terminate the RX channel on TX prepare failure path`drivers/spi/spi-fsl-lpspi.c`	+1 -1	0 replies
300/349	EDAC/i10nm: Dont fail probing if ADXL is missing`drivers/edac/i10nm_base.c`	+11 -3	0 replies
301/349	watchdog: apple: Add "apple,t8103-wdt" compatible`drivers/watchdog/apple_wdt.c`	+1 -0	0 replies
302/349	regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()`drivers/regulator/scmi-regulator.c`	+3 -1	0 replies
303/349	i2c: core: fix hang on adapter registration failure`drivers/i2c/i2c-core-base.c`	+29 ~~-20~~	0 replies
304/349	tracing: Prevent out-of-bounds read in glob matching`include/linux/glob.h` `kernel/trace/trace_events_filter.c` `lib/glob.c`	+32 -6	0 replies
305/349	audit: fix potential integer overflow in audit_log_n_hex()`kernel/audit.c`	+9 -2	0 replies
306/349	NFSv4: include MAY_WRITE in open permission mask for O_TRUNC`fs/nfs/dir.c`	+2 -0	0 replies
307/349	module: decompress: check return value of module_extend_max_pages()`kernel/module/decompress.c`	+2 -0	0 replies
308/349	exfat: bound uniname advance in exfat_find_dir_entry()`fs/exfat/dir.c`	+8 -5	0 replies
309/349	NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()`drivers/ntb/hw/epf/ntb_hw_epf.c`	+4 -6	0 replies
310/349	riscv: mm: Define DIRECT_MAP_PHYSMEM_END`arch/riscv/include/asm/pgtable.h`	+10 -0	2 replies
311/349	riscv: mm: Unconditionally sfence.vma for spurious fault`arch/riscv/kernel/entry.S`	+5 -2	0 replies
312/349	mm: fix mmap errno value when MAP_DROPPABLE is not supported`mm/mmap.c`	+1 -1	0 replies
313/349	selftests: mm: fix and speedup "droppable" test`tools/testing/selftests/mm/droppable.c`	+26 ~~-20~~	0 replies
314/349	mm: do file ownership checks with the proper mount idmap`include/linux/fs.h` `mm/filemap.c` `mm/madvise.c` +1 more	+8 -5	0 replies
315/349	selftests/mm: pagemap_ioctl: use the correct page size for transact_test()`tools/testing/selftests/mm/pagemap_ioctl.c`	+6 -6	0 replies
316/349	iommu/amd: Dont split flush for amd_iommu_domain_flush_all()`drivers/iommu/amd/iommu.c`	+2 -1	0 replies
317/349	iommufd: Set upper bounds on cache invalidation entry_num and entry_len`drivers/iommu/iommufd/hw_pagetable.c`	+10 -1	0 replies
318/349	KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs`arch/x86/kvm/vmx/vmx.c`	+18 ~~-17~~	0 replies
319/349	KVM: x86: Ensure vendors exit handler runs before fastpath userspace exits`arch/x86/kvm/svm/svm.c` `arch/x86/kvm/vmx/vmx.c` `arch/x86/kvm/x86.c`	+6 -3	0 replies
320/349	KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode`arch/x86/kvm/vmx/vmx.c`	+1 -2	0 replies
321/349	udmabuf: fix DMA direction mismatch in release_udmabuf()`drivers/dma-buf/udmabuf.c`	+4 -1	0 replies
322/349	dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning`drivers/dma-buf/udmabuf.c`	+2 -2	0 replies
323/349	i2c: core: fix adapter probe deferral loop`drivers/i2c/i2c-core-base.c`	+4 -4	0 replies
324/349	i2c: core: fix irq domain leak on adapter registration failure`drivers/i2c/i2c-core-base.c`	+3 -1	0 replies
325/349	i2c: core: fix NULL-deref on adapter registration failure`drivers/i2c/i2c-core-base.c`	+5 -4	0 replies
326/349	i2c: core: fix adapter debugfs creation`drivers/i2c/i2c-core-base.c`	+10 -6	0 replies
327/349	i2c: core: fix adapter deregistration race`drivers/i2c/i2c-core-base.c`	+7 -2	0 replies
328/349	i2c: mpc: Fix timeout calculations`drivers/i2c/busses/i2c-mpc.c`	+1 -1	0 replies
329/349	i2c: stm32f7: truncate clock period instead of rounding it`drivers/i2c/busses/i2c-stm32f7.c`	+7 -2	0 replies
330/349	Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure`drivers/input/rmi4/rmi_bus.c`	+3 -1	0 replies
331/349	Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count`drivers/input/rmi4/rmi_f3a.c`	+1 -1	0 replies
332/349	Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count`drivers/input/rmi4/rmi_f30.c`	+1 -1	0 replies
333/349	Input: elan_i2c - prevent division by zero and arithmetic underflow`drivers/input/mouse/elan_i2c_core.c`	+30 -6	0 replies
334/349	Input: goodix - clamp the device-reported contact count`drivers/input/touchscreen/goodix.c`	+2 -1	0 replies
335/349	Input: iforce - bound the device-reported force-feedback effect index`drivers/input/joystick/iforce/iforce-packets.c`	+11 -7	0 replies
336/349	Input: mms114 - fix touch indexing for MMS134S and MMS136`drivers/input/touchscreen/mms114.c`	+12 -6	0 replies
337/349	Input: touchwin - reset the packet index on every complete packet`drivers/input/touchscreen/touchwin.c`	+9 -6	0 replies
338/349	Input: mms114 - reject an oversized device packet size`drivers/input/touchscreen/mms114.c`	+6 -0	0 replies
339/349	Input: maplemouse - fix NULL pointer dereference in open()`drivers/input/mouse/maplemouse.c`	+3 -2	0 replies
340/349	Input: mms114 - fix multi-touch slot corruption`drivers/input/touchscreen/mms114.c`	+1 -1	0 replies
341/349	Input: maple_keyb - set driver data before registering input device`drivers/input/keyboard/maple_keyb.c`	+2 -2	0 replies
342/349	Input: maplemouse - set driver data before registering input device`drivers/input/mouse/maplemouse.c`	+3 -1	0 replies
343/349	Input: maplecontrol - set driver data before registering input device`drivers/input/joystick/maplecontrol.c`	+2 -1	0 replies
344/349	RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg`drivers/infiniband/ulp/rtrs/rtrs-srv.c`	+3 -2	0 replies
345/349	RDMA/siw: bound Read Response placement to the RREAD length`drivers/infiniband/sw/siw/siw_qp_rx.c`	+9 -0	0 replies
346/349	fuse: fix device node leak in cuse_process_init_reply()`fs/fuse/cuse.c`	+3 -1	0 replies
347/349	fuse: re-lock request before returning from fuse_ref_folio()`fs/fuse/dev.c`	+1 -1	0 replies
348/349	fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req`fs/fuse/dev.c`	+9 -0	0 replies
349/349	usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks`drivers/usb/gadget/function/f_fs.c`	+1 -1	0 replies

Reviews trailers per patch

162 of 349 patches have a Reviewed-by or Acked-by.

Patch	Puranjay Mohan	Lorenzo Stoakes	Chao Yu	Thomas Zimmermann	Jeff Layton	Chuck Lever	NeilBrown	Ming Lei	Damien Le Moal	Martin K. Petersen	Nilay Shroff	Johannes Thumshirn	John Garry	Zi Yan	Lance Yang	David Hildenbrand (Arm)	Matthew Wilcox (Oracle)	Kent Overstreet	Ian Rogers	Jarred White	Easwar Hariharan	Dave Jiang	Ilpo Järvinen	Yuanzhen Gan	Gary Guo	Andi Shyti	Vladimir Zapolskiy	Sebastian Reichel	Andy Shevchenko	Baoquan He	Sakari Ailus	Rafael J. Wysocki (Intel)	Lorenzo Bianconi	Joshua Crofts	David Lechner	Crt Mori	Kevin Tian	Nuno Sá	Jason Gunthorpe	Paul Menzel	Alice Ryhl	Jozsef Kadlecsik	Yuka	Shuangpeng Bai	Johan Hovold	Thinh Nguyen	Alexander Aring	Tung Nguyen	Luka Gejak	Namjae Jeon	Sabrina Dubroca	Ricardo Robaina	James Clark	Sebastian Andrzej Siewior	Pavan Chebbi	Kuniyuki Iwashima	Ido Schimmel	Eric Dumazet	Benson Leung	Lain Fearyncess Yang	Ayden Meng	Mingcong Bai	Huacai Chen	Subhransu S. Prusty	Frank Li	Muchun Song	Neeraj Sanjay Kale	Kairui Song	Hao Peng	albinwyang	Chris Li	Henrique Carvalho	Jan Kara	Tejun Heo	Mina Almasry	Sean Wang	SeongJae Park	Qi Zheng	Zenghui Yu (Huawei)	Nhat Pham	Roman Gushchin	Ignat Korchagin	Alistair Francis	Harry Yoo (Oracle)	Hao Li	Dmitry Torokhov	Hans de Goede	Jiri Kosina	[email protected]	Viacheslav Dubeyko	[email protected]	Nicolas Dufresne	Darrick J. Wong	Allison Henderson	Christoph Hellwig	Emil Tsalapatis	Toke Høiland-Jørgensen	Yonghong Song	Jiayuan Chen	Xu Kuohai	Eduard Zingerman	Andrew Lunn	Peter Chen	Alan Stern	Zhongqiu Han	Frederic Weisbecker	Teddy Astie	Jon Hunter	Alex Henrie	Shuah Khan	Igor Kotrasinski	Heikki Krogerus	RD Babiera	Jameson Thies	Andrei Kuchynski	Sungwoo Kim	Dave Tian	Weidong Zhu	Alok Tiwari	Benjamin Marzinski	Chaitanya Kulkarni	Hannes Reinecke	Filipe Manana	Philippe De Muyter	Demi Marie Obenour	Lukas Wunner	Akhil R	Tom Lendacky	Greg Kroah-Hartman	Giovanni Cabiddu	Damian Muszynski	Qiuxu Zhuo	Neal Gompa	Masami Hiramatsu (Google)	Richard Guy Briggs	Christophe Leroy (CS GROUP)	Han Gao	Vlastimil Babka (SUSE)	Pedro Falcato	Sarthak Sharma	Dev Jain	Jason A. Donenfeld	Christian Brauner (Amutable)	Wei Wang	Samiullah Khawaja	Suravee Suthikulpanit	Vasant Hegde	Lu Baolu	Hou Wenlong	Nikunj A. Dadhania	Kai Huang	Vivek Kasireddy	Ahsan Atta	Laurent M Coquerel	Chris Packham	Florian Fuchs	Md Haris Iqbal	Alain Volmat	Pierre-Yves MORDRET	Bryam Vargas	Brett A C Sheffield	Florian Fainelli	Peter Schneider	Miguel Ojeda	Francesco Dolcini	Dominique Martinet	Ron Economos	Pavel Machek (CIP)
Series																																																																																																														T-b																																																			T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/349	R-b
2/349
3/349					R-b
4/349		R-b
5/349
6/349																		A-b
7/349
8/349																												R-b	R-b
9/349
10/349
11/349																														R-b
12/349																													R-b		R-b	R-b
13/349			R-b
14/349
15/349			R-b
16/349			R-b
17/349
18/349			R-b
19/349				R-b
20/349					R-b	A-b
21/349					R-b		R-b
22/349
23/349
24/349
25/349
26/349
27/349					R-b
28/349					R-b
29/349
30/349								R-b	R-b	R-b	R-b	R-b	R-b
31/349								R-b	R-b	R-b	R-b	R-b
32/349														T-b	T-b	A-b	R-b
33/349																			R-b
34/349																				T-b R-b	R-b
35/349																						R-b
36/349																							R-b
37/349																								T-b
38/349
39/349
40/349																									R-b
41/349																										R-b
42/349
43/349
44/349
45/349
46/349																											R-b
47/349																											R-b
48/349
49/349																													R-b					R-b
50/349
51/349
52/349																													R-b
53/349																																						R-b
54/349																													R-b
55/349
56/349
57/349
58/349
59/349
60/349																																	A-b
61/349																													R-b
62/349
63/349
64/349
65/349
66/349																																		R-b
67/349																																			R-b
68/349																													R-b							A-b
69/349
70/349
71/349
72/349
73/349
74/349
75/349
76/349
77/349
78/349
79/349
80/349
81/349
82/349
83/349
84/349
85/349
86/349
87/349
88/349																																					R-b
89/349																																					R-b
90/349																																					R-b
91/349																																					R-b		R-b
92/349																																					R-b
93/349
94/349																																								R-b
95/349
96/349
97/349																																									R-b
98/349																																									R-b
99/349
100/349
101/349																																																												T-b	T-b	T-b	R-b
102/349																																																																R-b
103/349
104/349																																																																	R-b
105/349
106/349																																										A-b
107/349																																											T-b
108/349
109/349
110/349																																												T-b	R-b
111/349																																														A-b
112/349																																															A-b
113/349																																																R-b
114/349
115/349
116/349
117/349
118/349
119/349																													R-b
120/349																																																	R-b
121/349
122/349																																																	R-b
123/349																																																	R-b
124/349																																																	R-b
125/349
126/349																																																	R-b
127/349
128/349																																																		A-b
129/349																																																			R-b
130/349																																																				R-b
131/349
132/349																																																					R-b
133/349
134/349
135/349																						R-b
136/349																																																						R-b
137/349
138/349																																																							R-b
139/349																																																								R-b	R-b
140/349																																																										R-b
141/349																																																											R-b
142/349																																																																		A-b											R-b	R-b	T-b	R-b	R-b
143/349																																																																		A-b
144/349																																																																		R-b
145/349																														R-b																																						R-b	R-b	R-b	A-b
146/349
147/349																																																																											A-b
148/349
149/349
150/349																																																																												R-b
151/349
152/349																																																																			R-b
153/349
154/349
155/349
156/349
157/349
158/349
159/349
160/349
161/349
162/349
163/349																																																		A-b
164/349																																																		A-b
165/349
166/349
167/349
168/349																																																		A-b
169/349
170/349																																																		A-b
171/349																																																		A-b
172/349
173/349
174/349
175/349
176/349
177/349
178/349																																																																								A-b
179/349
180/349
181/349
182/349
183/349
184/349
185/349
186/349																																																																									R-b	A-b
187/349
188/349																																																																																																									R-b
189/349
190/349
191/349
192/349																																																																																																									R-b
193/349																																																																																																									R-b
194/349																																																																																																										R-b
195/349																																																																																																											T-b
196/349																																																																																																												R-b
197/349
198/349																																																																																		R-b	R-b
199/349																																																																																				R-b	R-b
200/349																																																																													R-b
201/349																																																																													R-b
202/349																																																																																						R-b
203/349																																																																																						R-b
204/349
205/349																																																																																							R-b
206/349																													R-b																																																											A-b
207/349																																																																																									T-b	R-b
208/349																																																																																											T-b
209/349																																																																																												R-b
210/349
211/349																																																																																													R-b
212/349																																																																																													R-b
213/349																																																																																													R-b	R-b
214/349																																																																																															R-b
215/349																																																																																													R-b
216/349																																																																																																R-b	R-b
217/349																																																																																																		A-b	R-b	A-b
218/349																																																																																																					A-b
219/349																																																																																																						R-b
220/349
221/349																																																																																																							A-b
222/349
223/349
224/349																																																																																																								R-b
225/349
226/349																																																																																																								R-b
227/349
228/349
229/349
230/349
231/349
232/349
233/349
234/349																																																																																																								R-b
235/349																																																																																																													R-b
236/349
237/349
238/349
239/349
240/349																																																																																																																																	R-b
241/349																																																																																																																																	R-b
242/349
243/349																																																																																																								R-b
244/349																																																																																																														R-b
245/349																																																																																																															R-b
246/349																																																																																																																R-b
247/349
248/349																																																																																																																R-b
249/349																																																																																																																A-b	R-b
250/349																																																																																																																R-b
251/349																																																																																																																R-b		R-b	R-b
252/349																																																																																																																R-b
253/349																																																																																																																R-b
254/349																																						T-b R-b
255/349																																																																																															R-b																					A-b	A-b	A-b
256/349
257/349																																																																																																																							T-b
258/349
259/349
260/349
261/349
262/349																																																																																															R-b
263/349																																																																																																																								R-b
264/349																																																																																															R-b
265/349																																																																																															R-b																										R-b
266/349																																																																																																																										R-b
267/349																																																																																																																											R-b
268/349																																																																																																																												A-b
269/349
270/349																																																																																																																													R-b
271/349
272/349
273/349																																																																																																																														R-b
274/349
275/349																																																																																																																															R-b
276/349																																																																																																																																R-b
277/349																																																																																																																																R-b
278/349																																																																																																																																R-b
279/349
280/349
281/349
282/349																																																																																																																																		R-b	R-b
283/349																																																																																																																																		R-b	R-b
284/349																																																																																																																																		R-b
285/349																																																																																																																																																									R-b	R-b T-b
286/349
287/349
288/349
289/349
290/349
291/349
292/349
293/349
294/349
295/349
296/349
297/349
298/349
299/349
300/349																																																																																																																																				R-b
301/349																																																																																																																																					R-b
302/349
303/349
304/349																																																																																																																																						A-b
305/349																																																																																																																																							R-b
306/349
307/349																																																																																																																																								R-b
308/349
309/349																						R-b
310/349																																																																																																																																									T-b
311/349
312/349		R-b														A-b																																																																																																																										A-b	R-b
313/349		T-b R-b													T-b																																																														R-b																																																															T-b	R-b	R-b
314/349																A-b																																																									R-b																																																																						R-b
315/349
316/349																																							R-b																																																																																																									R-b	R-b	R-b	R-b
317/349																																																																																																																																																				R-b
318/349																																																																																																																																																					R-b
319/349																																																																																																																																																						R-b	R-b
320/349
321/349																																																																																																																																																								R-b
322/349																																																																																																																																																								A-b
323/349
324/349
325/349
326/349
327/349
328/349																																																																																																																																																											R-b
329/349																																																																																																																																																														A-b	R-b
330/349
331/349
332/349
333/349
334/349																																																																																							R-b
335/349
336/349																																																																																																																																																																R-b
337/349
338/349
339/349
340/349
341/349
342/349																																																																																																																																																												T-b
343/349																																																																																																																																																												T-b
344/349																																																																																																																																																													R-b
345/349
346/349
347/349
348/349
349/349

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 168 reviewers.

Read the v1 thread

Cover letter [PATCH 6.12 000/349] 6.12.96-rc1 review

This is the start of the stable review cycle for the 6.12.96 release. There are 349 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 18 Jul 2026 13:30:01 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.96-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.12.96-rc1

Neill Kapron <[email protected]>

    usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks

Ji'an Zhou <[email protected]>
fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req

Joanne Koong <[email protected]>
fuse: re-lock request before returning from fuse_ref_folio()

Alberto Ruiz <[email protected]>
fuse: fix device node leak in cuse_process_init_reply()

Michael Bommarito <[email protected]>
RDMA/siw: bound Read Response placement to the RREAD length

Zhenhao Wan <[email protected]>
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg

Dmitry Torokhov <[email protected]>
Input: maplecontrol - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: maplemouse - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: maple_keyb - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: mms114 - fix multi-touch slot corruption

Florian Fuchs <[email protected]>
Input: maplemouse - fix NULL pointer dereference in open()

Bryam Vargas <[email protected]>
Input: mms114 - reject an oversized device packet size

Bryam Vargas <[email protected]>
Input: touchwin - reset the packet index on every complete packet

Dmitry Torokhov <[email protected]>
Input: mms114 - fix touch indexing for MMS134S and MMS136

Bryam Vargas <[email protected]>
Input: iforce - bound the device-reported force-feedback effect index

Bryam Vargas <[email protected]>
Input: goodix - clamp the device-reported contact count

Ranjan Kumar <[email protected]>
Input: elan_i2c - prevent division by zero and arithmetic underflow

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count

Haoxiang Li <[email protected]>
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure

Guillermo Rodríguez <[email protected]>
i2c: stm32f7: truncate clock period instead of rounding it

Andy Shevchenko <[email protected]>
i2c: mpc: Fix timeout calculations

Johan Hovold <[email protected]>
i2c: core: fix adapter deregistration race

Johan Hovold <[email protected]>
i2c: core: fix adapter debugfs creation

Johan Hovold <[email protected]>
i2c: core: fix NULL-deref on adapter registration failure

Johan Hovold <[email protected]>
i2c: core: fix irq domain leak on adapter registration failure

Johan Hovold <[email protected]>
i2c: core: fix adapter probe deferral loop

Mikhail Gavrilov <[email protected]>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning

Mikhail Gavrilov <[email protected]>
udmabuf: fix DMA direction mismatch in release_udmabuf()

Sean Christopherson <[email protected]>
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode

Sean Christopherson <[email protected]>
KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits

Sean Christopherson <[email protected]>
KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs

Nicolin Chen <[email protected]>
iommufd: Set upper bounds on cache invalidation entry_num and entry_len

Weinan Liu <[email protected]>
iommu/amd: Don't split flush for amd_iommu_domain_flush_all()

Zenghui Yu <[email protected]>
selftests/mm: pagemap_ioctl: use the correct page size for transact_test()

Pedro Falcato <[email protected]>
mm: do file ownership checks with the proper mount idmap

David Hildenbrand (Arm) <[email protected]>
selftests: mm: fix and speedup "droppable" test

Anthony Yznaga <[email protected]>
mm: fix mmap errno value when MAP_DROPPABLE is not supported

Vivian Wang <[email protected]>
riscv: mm: Unconditionally sfence.vma for spurious fault

Vivian Wang <[email protected]>
riscv: mm: Define DIRECT_MAP_PHYSMEM_END

Koichiro Den <[email protected]>
NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()

Bryam Vargas <[email protected]>
exfat: bound uniname advance in exfat_find_dir_entry()

Andrii Kuchmenko <[email protected]>
module: decompress: check return value of module_extend_max_pages()

Benjamin Coddington <[email protected]>
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

Ricardo Robaina <[email protected]>
audit: fix potential integer overflow in audit_log_n_hex()

Huihui Huang <[email protected]>
tracing: Prevent out-of-bounds read in glob matching

Johan Hovold <[email protected]>
i2c: core: fix hang on adapter registration failure

Wentao Liang <[email protected]>
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()

Janne Grunau <[email protected]>
watchdog: apple: Add "apple,t8103-wdt" compatible

Vasily Khoruzhick <[email protected]>
EDAC/i10nm: Don't fail probing if ADXL is missing

Carlos Song <[email protected]>
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path

Carlos Song <[email protected]>
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()

Mark Rutland <[email protected]>
arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()

Paul Louvel <[email protected]>
crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation

Paul Louvel <[email protected]>
crypto: talitos/hash - remove useless wrapper

Paul Louvel <[email protected]>
crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request

Paul Louvel <[email protected]>
crypto: talitos/hash - drop workqueue mechanism for SEC1

Paul Louvel <[email protected]>
crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue

Paul Louvel <[email protected]>
crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor

Paul Louvel <[email protected]>
crypto: talitos - move code in current_desc_hdr() into a standalone function

Paul Louvel <[email protected]>
crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function

Paul Louvel <[email protected]>
crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function

Paul Louvel <[email protected]>
crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1

Paul Louvel <[email protected]>
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header

Giovanni Cabiddu <[email protected]>
crypto: qat - validate RSA CRT component lengths

Ahsan Atta <[email protected]>
crypto: qat - protect service table iterations with service_lock

Ahsan Atta <[email protected]>
crypto: qat - notify fatal error before AER reset preparation

Ahsan Atta <[email protected]>
crypto: qat - keep VFs enabled during reset

Eric Biggers <[email protected]>
crypto: drbg - Fix the fips_enabled priority boost

Eric Biggers <[email protected]>
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels

Eric Biggers <[email protected]>
crypto: drbg - Fix returning success on failure in CTR_DRBG

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for SEV ioctls

Wentao Liang <[email protected]>
crypto: tegra - fix refcount leak in tegra_se_host1x_submit()

Ruijie Li <[email protected]>
crypto: pcrypt - restore callback for non-parallel fallback

Anastasia Tishchenko <[email protected]>
crypto: ecc - Fix carry overflow in vli multiplication

Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps again

Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps

Eric Biggers <[email protected]>
crypto: af_alg - Remove zero-copy support from skcipher and aead

Bryam Vargas <[email protected]>
isofs: bound Rock Ridge symlink components to the SL record

Bryam Vargas <[email protected]>
partitions: aix: bound the pp_count scan to the ppe array

Qu Wenruo <[email protected]>
btrfs: do not trim a device which is not writeable

Tianchu Chen <[email protected]>
nvmet-auth: validate reply message payload bounds against transfer length

Bryam Vargas <[email protected]>
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

Achkinazi, Igor <[email protected]>
nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks

Mikulas Patocka <[email protected]>
dm-ioctl: report an error if a device has no table

Wentao Liang <[email protected]>
nvme: target: rdma: fix ndev refcount leak on queue connect

Wentao Liang <[email protected]>
hwrng: jh7110 - fix refcount leak in starfive_trng_read()

Bryam Vargas <[email protected]>
udf: validate sparing table length as an entry count, not a byte count

Bryam Vargas <[email protected]>
udf: validate VAT header length against the VAT inode size

Michael Bommarito <[email protected]>
udf: validate free block extents against the partition length

Maciej W. Rozycki <[email protected]>
PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining

Reinette Chatre <[email protected]>
x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled

Chao Shi <[email protected]>
block: skip sync_blockdev() on surprise removal in bdev_mark_dead()

Paul Cercueil <[email protected]>
usb: gadget: f_fs: Fix DMA fence leak

Paul Menzel <[email protected]>
usb: typec: ucsi: cancel pending work on system suspend

Fan Wu <[email protected]>
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove

Madhu M <[email protected]>
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode

Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Invert DisplayPort role assignment

Badhri Jagan Sridharan <[email protected]>
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()

Andy Yan <[email protected]>
usb: typec: tcpm: Fix VDM type for Enter Mode commands

Shuangpeng Bai <[email protected]>
usb: typec: class: drop PD lookup reference

Myeonghun Pak <[email protected]>
usb: typec: anx7411: use devm_pm_runtime_enable()

Sam Day <[email protected]>
usbip: vudc: fix NULL deref in vep_dequeue()

Yichong Chen <[email protected]>
usbip: tools: support SuperSpeedPlus devices

Xu Rao <[email protected]>
USB: usb-storage: ene_ub6250: restore media-ready check

Johan Hovold <[email protected]>
USB: ulpi: fix memory leak on registration failure

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix write buffer corruption

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix hard lockup on disconnect

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix broken rx after throttle

Fabio Porcedda <[email protected]>
USB: serial: option: add Telit Cinterion FE990D50 compositions

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix information leak

Haoxiang Li <[email protected]>
usb: mtu3: unmap request DMA on queue failure

Myeonghun Pak <[email protected]>
USB: misc: uss720: unregister parport on probe failure

Xu Rao <[email protected]>
USB: storage: include US_FL_NO_SAME in quirks mask

Myeonghun Pak <[email protected]>
usb: sl811-hcd: disable controller wakeup on remove

Johan Hovold <[email protected]>
USB: legousbtower: fix use-after-free on disconnect race

Erich E. Hoover <[email protected]>
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD

Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect

Johan Hovold <[email protected]>
USB: ldusb: fix use-after-free on disconnect race

Johan Hovold <[email protected]>
USB: idmouse: fix use-after-free on disconnect race

Xu Rao <[email protected]>
usb: gadget: f_printer: take kref only for successful open

Jimmy Hu <[email protected]>
usb: gadget: udc: Fix use-after-free in gadget_match_driver

Maoyi Xie <[email protected]>
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler

Dawei Feng <[email protected]>
usb: free iso schedules on failed submit

WenTao Liang <[email protected]>
usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()

Rodrigo Lugathe da Conceição Alves <[email protected]>
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub

Haoxiang Li <[email protected]>
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()

Jared Baldridge <[email protected]>
usb: cdc_acm: Add quirk for Uniden BC125AT scanner

Maoyi Xie <[email protected]>
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()

Paul Moses <[email protected]>
bpf: Validate BTF repeated field counts before expansion

Dawei Feng <[email protected]>
bpf: Restore sysctl new-value from 1 to 0

Zhao Zhang <[email protected]>
bpf: Reject fragmented frames in devmap

Yingjie Gao <[email protected]>
xfs: fix exchmaps reservation limit check

Darrick J. Wong <[email protected]>
xfs: fix pointer arithmetic error on 32-bit systems

Alexey Nepomnyashih <[email protected]>
xfs: fix unreachable BIGTIME check in dquot flush validation

Yingjie Gao <[email protected]>
xfs: release dquot buffer after dqflush failure

Yousef Alhouseen <[email protected]>
xfs: use null daddr for unset first bad log block

Andy Shevchenko <[email protected]>
serial: 8250_mid: Disable DMA for selected platforms

Louis-Alexis Eyraud <[email protected]>
media: mtk-jpeg: cancel workqueue on release for supported platforms only

Deepanshu Kartikey <[email protected]>
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers

Tristan Madani <[email protected]>
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read

Srinivas Pandruvada <[email protected]>
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads

Maoyi Xie <[email protected]>
HID: lg-g15: cancel pending work on remove to fix a use-after-free

Manish Khadka <[email protected]>
HID: letsketch: fix UAF on inrange_timer at driver unbind

Myeonghun Pak <[email protected]>
HID: wacom: stop hardware after post-start probe failures

Tianchu Chen <[email protected]>
HID: hid-goodix-spi: validate report size to prevent stack buffer overflow

Yichong Chen <[email protected]>
tools/mm/slabinfo: fix total_objects attribute name

Xuewen Wang <[email protected]>
tools/mm/slabinfo: Fix trace disable logic inversion

Vlastimil Babka (SUSE) <[email protected]>
mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

Lukas Wunner <[email protected]>
X.509: Fix validation of ASN.1 certificate header

Robin Murphy <[email protected]>
perf/arm-cmn: Fix DVM node events

Kartik Rajput <[email protected]>
clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances

Thomas Gleixner <[email protected]>
time/jiffies: Register jiffies clocksource before usage

WenTao Liang <[email protected]>
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

Yuho Choi <[email protected]>
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation

Tianxiang Chen <[email protected]>
cpufreq: Fix hotplug-suspend race during reboot

Steven Rostedt <[email protected]>
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT

Fushuai Wang <[email protected]>

    cpufreq: intel_pstate: Sync policy->cur during CPU offline

Guangshuo Li <[email protected]>
firmware_loader: fix device reference leak in firmware_upload_register()

Guangshuo Li <[email protected]>
cpufreq: qcom-cpufreq-hw: Fix possible double free

Abdun Nihaal <[email protected]>
OPP: of: Fix potential memory leak in opp_parse_supplies()

Baokun Li <[email protected]>
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()

Norbert Manthey <[email protected]>
smb: client: mask server-provided mode to 07777 in modefromsid

Xu Rao <[email protected]>
smb: client: fix atime clamp check in read completion

Zihan Xi <[email protected]>
smb: client: harden POSIX SID length parsing

Zihan Xi <[email protected]>
smb: client: use unaligned reads in parse_posix_ctxt()

Haoxiang Li <[email protected]>
smb: client: Fix next buffer leak in receive_encrypted_standard()

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_close() replay

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_open() replay

Zhao Zhang <[email protected]>
smb: client: fix double-free in SMB2_flush() replay

Henrique Carvalho <[email protected]>
smb: client: fix change notify replay double-free

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_ioctl() replay

Henrique Carvalho <[email protected]>
smb: client: fix query_info() replay double-free

Henrique Carvalho <[email protected]>
smb: client: fix query directory replay double-free

Namjae Jeon <[email protected]>
ksmbd: use opener credentials for ADS I/O

Namjae Jeon <[email protected]>
ksmbd: use opener credentials for delete-on-close

Gil Portnoy <[email protected]>
ksmbd: add per-handle permission check to FILE_LINK_INFORMATION

Gil Portnoy <[email protected]>
ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION

Namjae Jeon <[email protected]>
ksmbd: run set info with opener credentials

Gil Portnoy <[email protected]>
ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY

Namjae Jeon <[email protected]>
ksmbd: require source read access for duplicate extents

Davide Ornaghi <[email protected]>
ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation

Namjae Jeon <[email protected]>
ksmbd: serialize QUERY_DIRECTORY requests per file

Gil Portnoy <[email protected]>
ksmbd: add a permission check for FSCTL_SET_ZERO_DATA

Gil Portnoy <[email protected]>
ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE

Dan Carpenter <[email protected]>
smb/client: Fix error code in smb2_aead_req_alloc()

Junrui Luo <[email protected]>
coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()

Deepanshu Kartikey <[email protected]>
fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()

Konstantin Komarov <[email protected]>
fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()

Konstantin Komarov <[email protected]>
fs/ntfs3: fsync files by syncing parent inodes

Konstantin Komarov <[email protected]>
fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr

Muhammad Bilal <[email protected]>
Bluetooth: L2CAP: validate option length before reading conf opt value

Muhammad Bilal <[email protected]>
Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()

Pauli Virtanen <[email protected]>
Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled

Yousef Alhouseen <[email protected]>
Bluetooth: fix UAF in bt_accept_dequeue()

Maoyi Xie <[email protected]>
Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()

Yousef Alhouseen <[email protected]>
Bluetooth: bnep: pin L2CAP connection during netdev registration

Sergey Senozhatsky <[email protected]>
Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()

Xiang Mei <[email protected]>
netfilter: ebtables: terminate table name before find_table_lock()

Florian Westphal <[email protected]>
netfilter: ebtables: module names must be null-terminated

Florian Westphal <[email protected]>
netfilter: handle unreadable frags

Pratham Gupta <[email protected]>
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump

Zijiang Huang <[email protected]>
mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup

Qi Zheng <[email protected]>
mm: shrinker: fix NULL pointer dereference in debugfs

Qi Zheng <[email protected]>
mm: shrinker: fix shrinker_info teardown race with expansion

Shakeel Butt <[email protected]>
mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()

Andrei Kuchynski <[email protected]>
mfd: cros_ec: Delay dev_set_drvdata() until probe success

Wyatt Feng <[email protected]>
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Yuyang Huang <[email protected]>
ipv4: igmp: remove multicast group from hash table on device destruction

Breno Leitao <[email protected]>
netpoll: fix a use-after-free on shutdown path

Runyu Xiao <[email protected]>
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item

Runyu Xiao <[email protected]>
gpio: eic-sprd: use raw_spinlock_t in the irq startup path

Koichiro Den <[email protected]>
NTB: epf: Avoid calling pci_irq_vector() from hardirq context

Yunpeng Tian <[email protected]>
fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns

Thomas Gleixner <[email protected]>
debugobjects: Plug race against a concurrent OOM disable

Runyu Xiao <[email protected]>
coresight: etb10: restore atomic_t for shared reading state

Samuel Page <[email protected]>
Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete

Chi Wang <[email protected]>
audit: Fix data races of skb_queue_len() readers on audit_queue

Zijing Yin <[email protected]>
net: af_key: initialize alg_key_len for IPComp states

Gil Portnoy <[email protected]>
ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL

Dawei Feng <[email protected]>
crypto: amlogic - avoid double cleanup in meson_crypto_probe()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB write in HT_caps_handler()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()

Arnd Bergmann <[email protected]>
staging: media: atomisp: reduce load_primary_binaries() stack usage

Ricardo Ribalda <[email protected]>
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe

Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in tsi148 bridge

Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in fake bridge

Shoichiro Miyamoto <[email protected]>
smb: client: restrict implied bcc[0] exemption to responses without data area

Michael Tautschnig <[email protected]>
staging: vme_user: bound slave read/write to the kern_buf size

Samuel Page <[email protected]>
tipc: fix out-of-bounds read in broadcast Gap ACK blocks

Yizhou Zhao <[email protected]>
6lowpan: fix NHC entry use-after-free on error path

Runyu Xiao <[email protected]>
usb: dwc3: run gadget disconnect from sleepable suspend context

Alan Stern <[email protected]>
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()

Michael Bommarito <[email protected]>
hwrng: virtio: clamp device-reported used.len at copy_data()

Johan Hovold <[email protected]>
virtio-mmio: fix device release warning on module unload

Ammar Faizi <[email protected]>
virtio_pci: fix vq info pointer lookup via wrong index

Xiang Mei <[email protected]>
netfilter: ipset: fix race between dump and ip_set_list resize

SeongJae Park <[email protected]>
mm/damon/ops-common: handle extreme intervals in damon_hot_score()

Richard Zhu <[email protected]>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling

Ratheesh Kannoth <[email protected]>
PCI: host-common: Request bus reassignment when not probe-only

Mahesh Vaidya <[email protected]>
PCI: altera: Do not dispose parent IRQ mapping

Ziyao Li <[email protected]>
PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series

Myeonghun Pak <[email protected]>
usb: typec: tcpci_rt1711h: unregister TCPCI port with devres

胡连勤 <[email protected]>
usb: xhci: Fix sleep in atomic context in xhci_free_streams()

Carlos Llamas <[email protected]>
binder: fix UAF in binder_free_transaction()

Carlos Llamas <[email protected]>
binder: fix UAF in binder_thread_release()

Johan Hovold <[email protected]>
Bluetooth: btusb: fix wakeup source leak on probe failure

Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on marvell probe failure

Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on registration failure

Zenm Chen <[email protected]>
Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB

Alex Williamson <[email protected]>
vfio: Remove device debugfs before releasing devres

Junrui Luo <[email protected]>
vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc

Alex Williamson <[email protected]>
vfio/pci: Fix racy bitfields and tighten struct layout

Alex Williamson <[email protected]>
vfio/pci: Release the VGA arbiter client on register_device() failure

Alex Williamson <[email protected]>
vfio/pci: Latch disable_idle_d3 per device

Raghavendra Rao Ananta <[email protected]>
vfio/pci: Use a private flag to prevent power state change with VFs

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Roll back quirk control caches on write errors

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()

Darvell Long <[email protected]>
ALSA: usb-audio: avoid kobject path lookup in DualSense match

HyeongJun An <[email protected]>
ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()

Zhao Dongdong <[email protected]>
ALSA: ice1712: check snd_ctl_new1() return value

Zhao Dongdong <[email protected]>
ALSA: gus: check snd_ctl_new1() return value

Maoyi Xie <[email protected]>
ALSA: firewire: isight: bound the sample count to the packet payload

Zhao Dongdong <[email protected]>
ALSA: es1938: check snd_ctl_new1() return value

Zhao Dongdong <[email protected]>
ALSA: cmipci: check snd_ctl_new1() return value

Maoyi Xie <[email protected]>
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser

Zhao Dongdong <[email protected]>
ALSA: ymfpci: check snd_ctl_new1() return value

Cássio Gabriel <[email protected]>
ALSA: virtio: Validate control metadata from the device

Cássio Gabriel <[email protected]>
ALSA: virtio: Add missing 384 kHz PCM rate mapping

Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start

Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check

Pengpeng Hou <[email protected]>
iio: temperature: Build mlx90635 with CONFIG_MLX90635

Stepan Ionichev <[email protected]>
iio: resolver: ad2s1210: notify trigger and clear state on fault read error

Andy Shevchenko <[email protected]>
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call

Javier Carrasco <[email protected]>
iio: light: veml6030: fix channel type when pushing events

Stepan Ionichev <[email protected]>
iio: light: tsl2591: return actual error from probe IRQ failure

Joshua Crofts <[email protected]>
iio: light: opt3001: fix missing state reset on timeout

Biren Pandya <[email protected]>
iio: light: gp2ap002: fix runtime PM leak on read error

Vidhu Sarwal <[email protected]>
iio: light: al3010: fix incorrect scale for the highest gain range

Andreas Kempe <[email protected]>
iio: imu: st_lsm6dsx: deselect shub page before reading whoami

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamp clock period by using lower value

Runyu Xiao <[email protected]>
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ

Runyu Xiao <[email protected]>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ

Stepan Ionichev <[email protected]>
iio: gyro: bmg160: wait full startup time after mode change at probe

Stepan Ionichev <[email protected]>
iio: gyro: bmg160: bail out when bandwidth/filter is not in table

Lars-Peter Clausen <[email protected]>
iio: event: Fix event FIFO reset race

Herman van Hazendonk <[email protected]>
iio: common: st_sensors: honour channel endianness in read_axis_data

Maxwell Doose <[email protected]>
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug

Dan Carpenter <[email protected]>
iio: backend: fix uninitialized data in debugfs

Pengpeng Hou <[email protected]>
iio: adc: ti-ads124s08: Return reset GPIO lookup errors

Guangshuo Li <[email protected]>
iio: adc: ti-ads1119: fix PM reference leak in buffer preenable

Maxwell Doose <[email protected]>
iio: adc: spear: Initialize completion before requesting IRQ

Maxwell Doose <[email protected]>
iio: adc: lpc32xx: Initialize completion before requesting IRQ

Biren Pandya <[email protected]>
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error

Bryam Vargas <[email protected]>
iio: accel: bmc150: clamp the device-reported FIFO frame count

Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check for header

Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check to response query

Krzysztof Karas <[email protected]>
drm/i915: ensure segment offset never exceeds allowed max

Alice Ryhl <[email protected]>
rust: kasan: KASAN+RUST requires clang

Taeyang Lee <[email protected]>
perf/core: Detach event groups during remove_on_exec

Alice Ryhl <[email protected]>
rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER

Huacai Chen <[email protected]>
LoongArch: Add PIO for early access before ACPI PCI root register

HyeongJun An <[email protected]>
platform/x86: intel-hid: Protect ACPI notify handler against recursion

Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Fix possible NULL pointer dereference

Jeremy Linton <[email protected]>
ACPI: CPPC: Suppress UBSAN warning caused by field misuse

Florian Fainelli <[email protected]>
perf trace beauty fcntl: Fix build with older kernel headers

Pedro Falcato <[email protected]>
mm/khugepaged: write all dirty file folios when collapsing

Christoph Hellwig <[email protected]>
block: fix queue freeze vs limits lock order in sysfs store methods

Christoph Hellwig <[email protected]>
block: add a store_limit operations for sysfs entries

Hangbin Liu <[email protected]>
bonding: fix xfrm offload feature setup on active-backup mode

NeilBrown <[email protected]>
nfsd: change nfs4_client_to_reclaim() to allocate data

NeilBrown <[email protected]>
nfsd: move name lookup out of nfsd4_list_rec_dir()

John Johansen <[email protected]>
apparmor: advertise the tcp fast open fix is applied

John Stultz <[email protected]>

    locking/rtmutex: Make sure we wake anything on the wake_q when we release the lock->wait_lock

Michael Bommarito <[email protected]>
NFSv4/flexfiles: reject zero filehandle version count

Jonathan Curley <[email protected]>
NFSv4/flexfiles: Add data structure support for striped layouts

Jonathan Curley <[email protected]>
NFSv4/flexfiles: Remove cred local variable dependency

Mike Snitzer <[email protected]>
nfs_common: rename functions that invalidate LOCALIO nfs_clients

Mike Snitzer <[email protected]>
nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations

Mingyu Wang <[email protected]>
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()

Keshav Verma <[email protected]>
f2fs: fix listxattr handling of corrupted xattr entries

Chao Yu <[email protected]>
f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()

Ruipeng Qi <[email protected]>
f2fs: fix potential deadlock in f2fs_balance_fs()

Bryam Vargas <[email protected]>
f2fs: bound i_inline_xattr_size for non-inline-xattr inodes

Chao Yu <[email protected]>
f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode

Wenjie Qi <[email protected]>
f2fs: validate orphan inode entry count

Bartosz Golaszewski <[email protected]>
device property: initialize the remaining fields of fwnode_handle in fwnode_init()

Uladzislau Rezki (Sony) <[email protected]>
mm/vmalloc: take vmap_purge_lock in shrinker

Marco Scardovi <[email protected]>
gpio: rockchip: fix generic IRQ chip leak on remove

Marco Scardovi <[email protected]>
gpio: rockchip: teardown bugs and resource leaks

Ye Zhang <[email protected]>
gpio: rockchip: change the GPIO version judgment logic

Tiezhu Yang <[email protected]>
drm/amd: Fix set but not used warnings

Mikhail Dmitrichenko <[email protected]>
bcachefs: avoid truncating fiemap extent length

Wentao Guan <[email protected]>
perf: Fix dangling cgroup pointer in cpuctx backport

Kiryl Shutsemau <[email protected]>
userfaultfd: gate must_wait writability check on pte_present()

Chris Mason <[email protected]>
nfsd: release layout stid on setlease failure

Scott Mayhew <[email protected]>
nfsd: fix file change detection in CB_GETATTR

Daniel Borkmann <[email protected]>
bpf, arm64: Reject out-of-range B.cond targets

-------------

Diffstat:

 Documentation/crypto/userspace-if.rst              |  31 +-
 Makefile                                           |   7 +-
 arch/arm64/kernel/entry-fpsimd.S                   |   8 +-
 arch/arm64/lib/insn.c                              |   2 +
 arch/loongarch/include/asm/acpi.h                  |   2 +
 arch/loongarch/kernel/acpi.c                       |  28 +
 arch/loongarch/kernel/setup.c                      |   2 +
 arch/loongarch/pci/acpi.c                          |   2 +
 arch/riscv/include/asm/pgtable.h                   |  10 +
 arch/riscv/kernel/entry.S                          |   7 +-
 arch/x86/kernel/cpu/resctrl/monitor.c              |  45 +-
 arch/x86/kvm/svm/svm.c                             |   3 +
 arch/x86/kvm/vmx/vmx.c                             |  41 +-
 arch/x86/kvm/x86.c                                 |   3 -
 block/bdev.c                                       |   8 +-
 block/blk-sysfs.c                                  | 108 ++--
 block/partitions/aix.c                             |   9 +
 crypto/af_alg.c                                    |  69 +--
 crypto/algif_aead.c                                |   8 +-
 crypto/asymmetric_keys/x509_loader.c               |   2 +-
 crypto/drbg.c                                      |   4 +-
 crypto/ecc.c                                       |  31 +-
 crypto/pcrypt.c                                    |   4 +
 drivers/acpi/cppc_acpi.c                           |  11 +-
 drivers/acpi/nfit/core.c                           |   3 +
 drivers/android/binder.c                           |  19 +-
 drivers/base/firmware_loader/sysfs_upload.c        |   8 +-
 drivers/bluetooth/btmtksdio.c                      |   2 +-
 drivers/bluetooth/btnxpuart.c                      |   6 +
 drivers/bluetooth/btusb.c                          |  39 +-
 drivers/bluetooth/hci_ldisc.c                      |  14 +-
 drivers/char/hw_random/jh7110-trng.c               |  13 +-
 drivers/char/hw_random/virtio-rng.c                |  23 +-
 drivers/clocksource/timer-tegra186.c               |   3 +-
 drivers/cpufreq/cpufreq.c                          |   2 +
 drivers/cpufreq/intel_pstate.c                     |   6 +-
 drivers/cpufreq/pcc-cpufreq.c                      |   2 +
 drivers/cpufreq/qcom-cpufreq-hw.c                  |   1 -
 drivers/crypto/amlogic/amlogic-gxl-core.c          |   2 +-
 drivers/crypto/caam/caamalg.c                      |  12 +-
 drivers/crypto/caam/caamalg_qi.c                   |  12 +-
 drivers/crypto/caam/caamalg_qi2.c                  |  12 +-
 drivers/crypto/caam/caamhash.c                     |   4 +-
 drivers/crypto/caam/key_gen.c                      |   4 +-
 drivers/crypto/ccp/sev-dev.c                       |  37 +-
 drivers/crypto/intel/qat/qat_common/adf_aer.c      |   4 +-
 drivers/crypto/intel/qat/qat_common/adf_init.c     |  16 +
 drivers/crypto/intel/qat/qat_common/adf_sriov.c    |  12 +-
 .../crypto/intel/qat/qat_common/qat_asym_algs.c    |  10 +-
 drivers/crypto/talitos.c                           | 561 +++++++++++----------
 drivers/crypto/talitos.h                           |  12 +
 drivers/crypto/tegra/tegra-se-main.c               |   2 +-
 drivers/dma-buf/udmabuf.c                          |   9 +-
 drivers/edac/i10nm_base.c                          |  14 +-
 drivers/gpio/gpio-eic-sprd.c                       |   8 +-
 drivers/gpio/gpio-rockchip.c                       |  31 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c           |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h            |   6 +-
 drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c       |   9 +-
 drivers/gpu/drm/i915/i915_mm.c                     |   4 +-
 drivers/hid/hid-goodix-spi.c                       |   3 +
 drivers/hid/hid-letsketch.c                        |  36 +-
 drivers/hid/hid-lg-g15.c                           |  16 +
 drivers/hid/hid-sensor-hub.c                       |  77 ++-
 drivers/hid/wacom_sys.c                            |  12 +-
 drivers/hwtracing/coresight/coresight-etb10.c      |   6 +-
 drivers/hwtracing/coresight/ultrasoc-smb.c         |   1 +
 drivers/i2c/busses/i2c-mpc.c                       |   2 +-
 drivers/i2c/busses/i2c-stm32f7.c                   |   9 +-
 drivers/i2c/i2c-core-base.c                        |  81 +--
 drivers/iio/accel/bmc150-accel-core.c              |   2 +
 drivers/iio/accel/kxsd9.c                          |   5 +-
 drivers/iio/adc/lpc32xx_adc.c                      |   4 +-
 drivers/iio/adc/spear_adc.c                        |   3 +-
 drivers/iio/adc/ti-ads1119.c                       |   6 +-
 drivers/iio/adc/ti-ads124s08.c                     |   3 +-
 drivers/iio/chemical/scd30_core.c                  |  19 +-
 drivers/iio/common/st_sensors/st_sensors_core.c    |  23 +-
 drivers/iio/gyro/bmg160_core.c                     |  16 +-
 drivers/iio/imu/adis_trigger.c                     |   2 +-
 drivers/iio/imu/bmi160/bmi160_core.c               |   3 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c  |   4 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c |   9 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h |   1 +
 drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c   |   4 +-
 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c       |  21 +-
 drivers/iio/industrialio-backend.c                 |   2 +-
 drivers/iio/industrialio-event.c                   |   5 +-
 drivers/iio/light/al3010.c                         |   2 +-
 drivers/iio/light/gp2ap002.c                       |   2 +-
 drivers/iio/light/opt3001.c                        |   6 +-
 drivers/iio/light/tsl2591.c                        |   6 +-
 drivers/iio/light/veml6030.c                       |   8 +-
 drivers/iio/magnetometer/ak8975.c                  |   1 +
 drivers/iio/resolver/ad2s1210.c                    |   2 +-
 drivers/iio/temperature/Makefile                   |   2 +-
 drivers/iio/temperature/ltc2983.c                  |   5 +-
 drivers/infiniband/sw/siw/siw_qp_rx.c              |   9 +
 drivers/infiniband/ulp/rtrs/rtrs-srv.c             |   5 +-
 drivers/input/joystick/iforce/iforce-packets.c     |  18 +-
 drivers/input/joystick/maplecontrol.c              |   3 +-
 drivers/input/keyboard/maple_keyb.c                |   4 +-
 drivers/input/mouse/elan_i2c_core.c                |  36 +-
 drivers/input/mouse/maplemouse.c                   |   9 +-
 drivers/input/rmi4/rmi_bus.c                       |   4 +-
 drivers/input/rmi4/rmi_f30.c                       |   2 +-
 drivers/input/rmi4/rmi_f3a.c                       |   2 +-
 drivers/input/touchscreen/goodix.c                 |   3 +-
 drivers/input/touchscreen/mms114.c                 |  26 +-
 drivers/input/touchscreen/touchwin.c               |  15 +-
 drivers/iommu/amd/iommu.c                          |   3 +-
 drivers/iommu/iommufd/hw_pagetable.c               |  11 +-
 drivers/md/dm-ioctl.c                              |   5 +-
 .../media/platform/mediatek/jpeg/mtk_jpeg_core.c   |   3 +-
 drivers/mfd/cros_ec_dev.c                          |   3 +-
 drivers/net/bonding/bond_main.c                    |   2 +-
 drivers/net/bonding/bond_netlink.c                 |  16 +-
 drivers/net/usb/kalmia.c                           |   8 +
 drivers/ntb/hw/epf/ntb_hw_epf.c                    |  14 +-
 drivers/nvme/host/multipath.c                      |   6 +
 drivers/nvme/target/discovery.c                    |  23 +-
 drivers/nvme/target/fabrics-cmd-auth.c             |  15 +-
 drivers/nvme/target/rdma.c                         |   6 +-
 drivers/opp/of.c                                   |   3 +-
 drivers/pci/controller/dwc/pci-imx6.c              |  12 +-
 drivers/pci/controller/pci-host-common.c           |   4 +
 drivers/pci/controller/pci-loongson.c              |  36 ++
 drivers/pci/controller/pcie-altera.c               |   1 -
 drivers/pci/quirks.c                               |  51 +-
 drivers/perf/arm-cmn.c                             |  23 +-
 drivers/platform/x86/intel/hid.c                   |   9 +
 drivers/regulator/scmi-regulator.c                 |   4 +-
 drivers/spi/spi-fsl-lpspi.c                        |  18 +-
 drivers/staging/media/atomisp/pci/sh_css.c         |   6 +-
 drivers/staging/media/ipu3/ipu3-css-params.c       |   8 +-
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |  20 +-
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c     |  23 +-
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |   8 +
 drivers/staging/vme_user/vme_fake.c                |   8 +
 drivers/staging/vme_user/vme_tsi148.c              |   8 +
 drivers/staging/vme_user/vme_user.c                |  22 +
 drivers/tty/serial/8250/8250_mid.c                 |  13 +-
 drivers/usb/cdns3/cdnsp-mem.c                      |   2 +
 drivers/usb/class/cdc-acm.c                        |   3 +
 drivers/usb/common/ulpi.c                          |  23 +-
 drivers/usb/core/quirks.c                          |   6 +
 drivers/usb/dwc3/dwc3-meson-g12a.c                 |  14 +-
 drivers/usb/dwc3/gadget.c                          |  43 +-
 drivers/usb/fotg210/fotg210-hcd.c                  |   6 +-
 drivers/usb/gadget/composite.c                     |   5 +-
 drivers/usb/gadget/function/f_fs.c                 |   3 +-
 drivers/usb/gadget/function/f_printer.c            |   3 +-
 drivers/usb/gadget/function/rndis.c                |  20 +-
 drivers/usb/gadget/udc/core.c                      |  29 +-
 drivers/usb/host/ehci-sched.c                      |  11 +-
 drivers/usb/host/sl811-hcd.c                       |   1 +
 drivers/usb/host/xhci.c                            |  11 +-
 drivers/usb/misc/chaoskey.c                        |   1 -
 drivers/usb/misc/idmouse.c                         |  45 +-
 drivers/usb/misc/iowarrior.c                       |   4 +-
 drivers/usb/misc/ldusb.c                           |  38 +-
 drivers/usb/misc/legousbtower.c                    |  37 +-
 drivers/usb/misc/uss720.c                          |   5 +-
 drivers/usb/mtu3/mtu3_gadget.c                     |   1 +
 drivers/usb/serial/digi_acceleport.c               |  43 +-
 drivers/usb/serial/keyspan_pda.c                   |   2 +-
 drivers/usb/serial/option.c                        |  16 +
 drivers/usb/storage/ene_ub6250.c                   |   3 +-
 drivers/usb/storage/usb.c                          |   2 +-
 drivers/usb/typec/anx7411.c                        |   4 +-
 drivers/usb/typec/class.c                          |   1 +
 drivers/usb/typec/tcpm/tcpci_rt1711h.c             |  13 +-
 drivers/usb/typec/tcpm/tcpm.c                      |   9 +-
 drivers/usb/typec/ucsi/displayport.c               |   7 +-
 drivers/usb/typec/ucsi/ucsi.c                      |  20 +
 drivers/usb/typec/ucsi/ucsi.h                      |   1 +
 drivers/usb/typec/ucsi/ucsi_acpi.c                 |  10 +-
 drivers/usb/typec/ucsi/ucsi_ccg.c                  |   2 +-
 drivers/usb/usbip/vudc.h                           |   1 -
 drivers/usb/usbip/vudc_dev.c                       |   4 +-
 drivers/vfio/debugfs.c                             |   1 +
 drivers/vfio/pci/vfio_pci_core.c                   |  37 +-
 drivers/vfio/vfio_main.c                           |  11 +-
 drivers/video/fbdev/core/fbcon.c                   |   7 +
 drivers/virtio/virtio_mmio.c                       |  26 +-
 drivers/virtio/virtio_pci_common.c                 |  10 +-
 drivers/watchdog/apple_wdt.c                       |   1 +
 fs/bcachefs/fs.c                                   |   8 +-
 fs/btrfs/extent-tree.c                             |  12 +-
 fs/exfat/dir.c                                     |  13 +-
 fs/f2fs/checkpoint.c                               |  14 +-
 fs/f2fs/data.c                                     |  29 ++
 fs/f2fs/f2fs.h                                     |   1 +
 fs/f2fs/gc.c                                       |  50 +-
 fs/f2fs/inode.c                                    |  30 +-
 fs/f2fs/segment.c                                  |   8 +
 fs/f2fs/xattr.c                                    |   6 +-
 fs/fs-writeback.c                                  |  31 +-
 fs/fuse/cuse.c                                     |   4 +-
 fs/fuse/dev.c                                      |  11 +-
 fs/hfs/bnode.c                                     |   2 +
 fs/hfsplus/bnode.c                                 |   2 +
 fs/isofs/rock.c                                    |  11 +
 fs/nfs/dir.c                                       |   2 +
 fs/nfs/flexfilelayout/flexfilelayout.c             | 153 +++---
 fs/nfs/flexfilelayout/flexfilelayout.h             |  27 +-
 fs/nfs/flexfilelayout/flexfilelayoutdev.c          |  54 +-
 fs/nfs/localio.c                                   |   2 +-
 fs/nfs_common/nfslocalio.c                         |   8 +-
 fs/nfsd/localio.c                                  |   2 +
 fs/nfsd/nfs4layouts.c                              |   4 +-
 fs/nfsd/nfs4recover.c                              | 118 ++---
 fs/nfsd/nfs4state.c                                |  35 +-
 fs/nfsd/nfsctl.c                                   |   4 +-
 fs/nilfs2/segment.c                                |  22 +
 fs/ntfs3/attrib.c                                  |  14 +
 fs/ntfs3/dir.c                                     |   2 +-
 fs/ntfs3/file.c                                    |  30 +-
 fs/ntfs3/frecord.c                                 |  59 ++-
 fs/ntfs3/fslog.c                                   |  20 +-
 fs/ntfs3/inode.c                                   |  10 +-
 fs/ntfs3/ntfs_fs.h                                 |   4 +-
 fs/smb/client/cifsacl.c                            |   2 +-
 fs/smb/client/file.c                               |   2 +-
 fs/smb/client/smb2misc.c                           |  32 +-
 fs/smb/client/smb2ops.c                            |  18 +-
 fs/smb/client/smb2pdu.c                            |  22 +-
 fs/smb/server/smb2pdu.c                            | 101 ++--
 fs/smb/server/vfs.c                                |  18 +-
 fs/smb/server/vfs_cache.c                          |   5 +
 fs/smb/server/vfs_cache.h                          |   2 +
 fs/udf/balloc.c                                    |   5 +-
 fs/udf/super.c                                     |  11 +-
 fs/userfaultfd.c                                   |  14 +-
 fs/xfs/libxfs/xfs_bmap_btree.h                     |   2 +-
 fs/xfs/libxfs/xfs_exchmaps.c                       |   2 +-
 fs/xfs/xfs_dquot.c                                 |  16 +-
 fs/xfs/xfs_log_recover.c                           |   6 +-
 fs/xfs/xfs_qm.c                                    |   5 +-
 include/crypto/drbg.h                              |  18 +-
 include/linux/damon.h                              |   8 +-
 include/linux/f2fs_fs.h                            |   1 +
 include/linux/fs.h                                 |   5 +
 include/linux/fwnode.h                             |   2 +
 include/linux/glob.h                               |   1 +
 include/linux/hid-sensor-hub.h                     |  25 +
 include/linux/nfslocalio.h                         |   7 +-
 include/linux/vfio_pci_core.h                      |  15 +-
 include/net/bonding.h                              |   1 +
 init/Kconfig                                       |   1 +
 io_uring/io-wq.c                                   |   2 +-
 kernel/audit.c                                     |  21 +-
 kernel/bpf/btf.c                                   |   9 +-
 kernel/bpf/cgroup.c                                |   2 +-
 kernel/bpf/devmap.c                                |   7 +
 kernel/events/core.c                               |  19 +-
 kernel/locking/rtmutex.c                           |  18 +-
 kernel/locking/rtmutex_api.c                       |   2 +-
 kernel/module/decompress.c                         |   2 +
 kernel/sched/features.h                            |   8 +
 kernel/time/jiffies.c                              |  11 +-
 kernel/time/posix-cpu-timers.c                     |   1 +
 kernel/trace/trace_events_filter.c                 |   6 +-
 lib/debugobjects.c                                 |  17 +
 lib/glob.c                                         |  31 +-
 mm/damon/ops-common.c                              |   1 +
 mm/filemap.c                                       |   2 +-
 mm/khugepaged.c                                    |  41 +-
 mm/madvise.c                                       |   3 +-
 mm/mincore.c                                       |   3 +-
 mm/mmap.c                                          |   2 +-
 mm/shrinker.c                                      |  13 +-
 mm/shrinker_debug.c                                |  14 +-
 mm/slub.c                                          |  18 +-
 mm/swapfile.c                                      |   1 +
 mm/vmalloc.c                                       |   1 +
 net/6lowpan/nhc.c                                  |   2 +-
 net/bluetooth/af_bluetooth.c                       |  17 +-
 net/bluetooth/bnep/core.c                          |  27 +-
 net/bluetooth/iso.c                                |  13 +-
 net/bluetooth/l2cap_core.c                         |  36 +-
 net/bluetooth/l2cap_sock.c                         |   4 +-
 net/bluetooth/mgmt.c                               |   3 +
 net/bridge/netfilter/ebtables.c                    |   9 +
 net/core/netpoll.c                                 |   9 +-
 net/ipv4/igmp.c                                    |   1 +
 net/ipv4/sysctl_net_ipv4.c                         |  10 +-
 net/ipv4/tcp_output.c                              |   4 +-
 net/ipv6/netfilter/nf_conntrack_reasm.c            |   2 +-
 net/key/af_key.c                                   |   1 +
 net/netfilter/ipset/ip_set_core.c                  |   8 +-
 net/netfilter/nf_conntrack_netlink.c               |   2 +-
 net/netfilter/nfnetlink_log.c                      |  26 +-
 net/netfilter/nfnetlink_queue.c                    |  16 +-
 net/netfilter/xt_u32.c                             |  16 +-
 net/tipc/bcast.c                                   |  22 +-
 net/tipc/bcast.h                                   |   2 +-
 net/tipc/node.c                                    |  15 +-
 security/apparmor/net.c                            |   1 +
 sound/core/seq/seq_memory.c                        |   2 +-
 sound/firewire/isight.c                            |   3 +-
 sound/isa/gus/gus_pcm.c                            |   2 +
 sound/pci/cmipci.c                                 |   6 +
 sound/pci/es1938.c                                 |   2 +
 sound/pci/ice1712/aureon.c                         |   2 +
 sound/pci/ice1712/ice1712.c                        |   8 +
 sound/pci/ice1712/ice1724.c                        |   6 +
 sound/pci/ymfpci/ymfpci_main.c                     |   6 +
 sound/usb/caiaq/input.c                            |   2 +-
 sound/usb/mixer_quirks.c                           | 101 ++--
 sound/usb/mixer_scarlett.c                         |   4 +-
 sound/usb/mixer_us16x08.c                          | 127 +++--
 sound/virtio/virtio_kctl.c                         |  50 ++
 sound/virtio/virtio_pcm.c                          |   3 +-
 sound/virtio/virtio_pcm_ops.c                      |   3 +-
 tools/mm/slabinfo.c                                |   6 +-
 tools/perf/trace/beauty/fcntl.c                    |  16 +
 tools/testing/selftests/mm/droppable.c             |  48 +-
 tools/testing/selftests/mm/pagemap_ioctl.c         |  12 +-
 tools/usb/usbip/libsrc/usbip_common.c              |   2 +
 tools/usb/usbip/libsrc/usbip_device_driver.c       |   4 +
 tools/usb/usbip/libsrc/vhci_driver.c               |   1 +
 322 files changed, 3289 insertions(+), 1627 deletions(-)

Read the cover letter in its thread