6.18.39-rc1 review

Greg Kroah-Hartman linux-patches lkml stable 1 version Jul 16 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Jul 16480 patches 9 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/480	bpf, arm64: Reject out-of-range B.cond targets`arch/arm64/lib/insn.c`	+2 -0	0 replies
2/480	nfsd: update mtime/ctime on CLONE in presense of delegated attributes`fs/nfsd/nfs4proc.c` `fs/nfsd/nfs4state.c` `fs/nfsd/state.h`	+33 ~~-15~~	0 replies
3/480	nfsd: update mtime/ctime on COPY in presence of delegated attributes`fs/nfsd/nfs4proc.c` `fs/nfsd/xdr4.h`	+11 -1	0 replies
4/480	nfsd: release layout stid on setlease failure`fs/nfsd/nfs4layouts.c`	+1 -3	0 replies
5/480	rust: str: use the "kernel vertical" imports style`rust/kernel/str.rs`	+20 -5	0 replies
6/480	rust: str: clean unused import for Rust >= 1.98`rust/kernel/str.rs`	+0 -1	0 replies
7/480	userfaultfd: gate must_wait writability check on pte_present()`fs/userfaultfd.c`	+12 -2	0 replies
8/480	device property: initialize the remaining fields of fwnode_handle in fwnode_init()`include/linux/fwnode.h`	+2 -0	0 replies
9/480	f2fs: remove non-uptodate folio from the page cache in move_data_block`fs/f2fs/gc.c`	+5 -1	0 replies
10/480	f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode`fs/f2fs/gc.c` `fs/f2fs/inode.c`	+50 ~~-11~~	0 replies
11/480	f2fs: bound i_inline_xattr_size for non-inline-xattr inodes`fs/f2fs/inode.c`	+3 -3	0 replies
12/480	f2fs: fix potential deadlock in f2fs_balance_fs()`fs/f2fs/data.c` `fs/f2fs/f2fs.h` `fs/f2fs/segment.c`	+38 -0	0 replies
13/480	f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()`fs/f2fs/segment.c`	+7 -7	0 replies
14/480	f2fs: fix listxattr handling of corrupted xattr entries`fs/f2fs/xattr.c`	+3 -3	0 replies
15/480	f2fs: use memalloc_retry_wait() as much as possible`fs/f2fs/segment.c` `fs/f2fs/super.c`	+2 -2	0 replies
16/480	f2fs: introduce f2fs_schedule_timeout()`fs/f2fs/checkpoint.c` `fs/f2fs/compress.c` `fs/f2fs/data.c` +3 more	+24 ~~-16~~	0 replies
17/480	f2fs: optimize trace_f2fs_write_checkpoint with enums`fs/f2fs/checkpoint.c` `fs/f2fs/f2fs.h` `include/trace/events/f2fs.h`	+23 -8	0 replies
18/480	f2fs: detect more inconsistent cases in sanity_check_node_footer()`fs/f2fs/node.c`	+12 -3	0 replies
19/480	f2fs: fix to do sanity check on f2fs_get_node_folio_ra()`fs/f2fs/f2fs.h` `fs/f2fs/node.c`	+6 -1	0 replies
20/480	fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()`drivers/video/fbdev/core/fbcon.c`	+7 -0	0 replies
21/480	net/sched: dualpi2: fix GSO backlog accounting`net/sched/sch_dualpi2.c`	+5 -6	0 replies
22/480	nfsd: move name lookup out of nfsd4_list_rec_dir()`fs/nfsd/nfs4recover.c`	+26 ~~-28~~	0 replies
23/480	nfsd: change nfs4_client_to_reclaim() to allocate data`fs/nfsd/nfs4recover.c` `fs/nfsd/nfs4state.c`	+42 ~~-47~~	0 replies
24/480	mm/khugepaged: write all dirty file folios when collapsing`mm/khugepaged.c`	+25 ~~-14~~	0 replies
25/480	slab: Introduce kmalloc_flex() and family`Documentation/process/deprecated.rst` `include/linux/slab.h`	+49 -0	0 replies
26/480	add default_gfp() helper macro and use it in the new *alloc_obj() helpers`include/linux/gfp.h` `include/linux/slab.h`	+28 ~~-24~~	0 replies
27/480	default_gfp(): avoid using the "newfangled" __VA_OPT__ trick`include/linux/gfp.h`	+2 -2	0 replies
28/480	slab: recognize @GFP parameter as optional in kernel-doc`include/linux/slab.h`	+3 -3	0 replies
29/480	perf trace beauty fcntl: Fix build with older kernel headers`tools/perf/trace/beauty/fcntl.c`	+16 -0	0 replies
30/480	KVM: x86: Move update_cr8_intercept() to lapic.c`arch/x86/kvm/lapic.c` `arch/x86/kvm/lapic.h` `arch/x86/kvm/x86.c`	+30 ~~-31~~	0 replies
31/480	KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode`arch/x86/kvm/vmx/vmx.c`	+1 -2	0 replies
32/480	KVM: x86: Unconditionally recompute CR8 intercept on PPR update`arch/x86/kvm/lapic.c` `arch/x86/kvm/x86.c`	+3 -4	0 replies
33/480	ACPI: CPPC: Suppress UBSAN warning caused by field misuse`drivers/acpi/cppc_acpi.c`	+7 -4	0 replies
34/480	ACPI: NFIT: core: Fix possible NULL pointer dereference`drivers/acpi/nfit/core.c`	+3 -0	0 replies
35/480	platform/x86: intel-hid: Protect ACPI notify handler against recursion`drivers/platform/x86/intel/hid.c`	+9 -0	0 replies
36/480	LoongArch: Add PIO for early access before ACPI PCI root register`arch/loongarch/include/asm/acpi.h` `arch/loongarch/kernel/acpi.c` `arch/loongarch/kernel/setup.c` +1 more	+34 -0	0 replies
37/480	rust: cpufreq: clean new `clippy::map_or_identity` lint for Rust 1.98.0`rust/kernel/cpufreq.rs`	+1 -1	0 replies
38/480	rust: block: fix GenDisk cleanup paths`rust/kernel/block/mq/gen_disk.rs`	+19 -1	0 replies
39/480	rust: doctest: fix incorrect pattern in replacement`scripts/rustdoc_test_builder.rs`	+10 -6	0 replies
40/480	rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER`Makefile`	+3 -0	1 reply
41/480	futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock""`kernel/futex/requeue.c`	+0 -6	0 replies
42/480	perf/core: Detach event groups during remove_on_exec`kernel/events/core.c`	+9 -8	0 replies
43/480	rust: kasan: KASAN+RUST requires clang`init/Kconfig`	+1 -0	0 replies
44/480	fscrypt: Fix key setup in edge case with multiple data unit sizes`fs/crypto/fscrypt_private.h` `fs/crypto/inline_crypt.c` `fs/crypto/keyring.c` +1 more	+120 ~~-81~~	0 replies
45/480	fscrypt: Replace mk_users keyring with simple list`fs/crypto/fscrypt_private.h` `fs/crypto/keyring.c`	+113 ~~-135~~	0 replies
46/480	usb: gadget: function: rndis: add length check to response query`drivers/usb/gadget/function/rndis.c`	+10 -4	0 replies
47/480	usb: gadget: function: rndis: add length check for header`drivers/usb/gadget/function/rndis.c`	+6 -0	0 replies
48/480	iio: accel: bmc150: clamp the device-reported FIFO frame count`drivers/iio/accel/bmc150-accel-core.c`	+2 -0	0 replies
49/480	iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error`drivers/iio/accel/kxsd9.c`	+3 -2	0 replies
50/480	iio: adc: ad7380: select REGMAP`drivers/iio/adc/Kconfig`	+1 -0	0 replies
51/480	iio: adc: ad7768-1: Select GPIOLIB`drivers/iio/adc/Kconfig`	+1 -0	0 replies
52/480	iio: adc: ad7779: add missing select IIO_TRIGGERED_BUFFER to Kconfig`drivers/iio/adc/Kconfig`	+1 -0	0 replies
53/480	iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices`drivers/iio/adc/ad_sigma_delta.c`	+29 -2	0 replies
54/480	iio: adc: ad_sigma_delta: fix CS held asserted and state leaks`drivers/iio/adc/ad_sigma_delta.c`	+5 -3	0 replies
55/480	iio: adc: lpc32xx: Initialize completion before requesting IRQ`drivers/iio/adc/lpc32xx_adc.c`	+2 -2	0 replies
56/480	iio: adc: spear: Initialize completion before requesting IRQ`drivers/iio/adc/spear_adc.c`	+1 -2	0 replies
57/480	iio: adc: ti-ads1119: fix PM reference leak in buffer preenable`drivers/iio/adc/ti-ads1119.c`	+5 -1	0 replies
58/480	iio: adc: ti-ads124s08: Return reset GPIO lookup errors`drivers/iio/adc/ti-ads124s08.c`	+2 -1	0 replies
59/480	iio: backend: fix uninitialized data in debugfs`drivers/iio/industrialio-backend.c`	+1 -1	0 replies
60/480	iio: chemical: scd30: Cleanup initializations and fix sign-extension bug`drivers/iio/chemical/scd30_core.c`	+15 -4	0 replies
61/480	iio: common: st_sensors: honour channel endianness in read_axis_data`drivers/iio/common/st_sensors/st_sensors_core.c`	+17 -6	0 replies
62/480	iio: core: fix uninitialized data in debugfs`drivers/iio/industrialio-core.c`	+1 -1	0 replies
63/480	iio: dac: ad3552r-hs: fix uninitialized data ni ad3552r_hs_write_data_source()`drivers/iio/dac/ad3552r-hs.c`	+1 -1	0 replies
64/480	iio: event: Fix event FIFO reset race`drivers/iio/industrialio-event.c`	+2 -3	0 replies
65/480	iio: gyro: bmg160: bail out when bandwidth/filter is not in table`drivers/iio/gyro/bmg160_core.c`	+6 -0	0 replies
66/480	iio: gyro: bmg160: wait full startup time after mode change at probe`drivers/iio/gyro/bmg160_core.c`	+8 -2	0 replies
67/480	iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ`drivers/iio/imu/adis_trigger.c`	+1 -1	0 replies
68/480	iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ`drivers/iio/imu/bmi160/bmi160_core.c`	+2 -1	0 replies
69/480	iio: imu: inv_icm42600: fix timestamp clock period by using lower value`drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c`	+4 -4	0 replies
70/480	iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading`drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h`	+6 -4	0 replies
71/480	iio: imu: st_lsm6dsx: deselect shub page before reading whoami`drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c`	+20 -1	0 replies
72/480	iio: light: al3000a: add missing REGMAP_I2C to Kconfig`drivers/iio/light/Kconfig`	+1 -0	0 replies
73/480	iio: light: al3010: add missing REGMAP_I2C to Kconfig`drivers/iio/light/Kconfig`	+1 -0	0 replies
74/480	iio: light: al3010: fix incorrect scale for the highest gain range`drivers/iio/light/al3010.c`	+1 -1	0 replies
75/480	iio: light: al3010: read both ALS ADC registers again`drivers/iio/light/al3010.c`	+5 -3	0 replies
76/480	iio: light: al3320a: add missing REGMAP_I2C to Kconfig`drivers/iio/light/Kconfig`	+1 -0	0 replies
77/480	iio: light: al3320a: read both ALS ADC registers again`drivers/iio/light/al3320a.c`	+5 -3	0 replies
78/480	iio: light: gp2ap002: fix runtime PM leak on read error`drivers/iio/light/gp2ap002.c`	+1 -1	0 replies
79/480	iio: light: opt3001: fix missing state reset on timeout`drivers/iio/light/opt3001.c`	+4 -2	0 replies
80/480	iio: light: tsl2591: return actual error from probe IRQ failure`drivers/iio/light/tsl2591.c`	+2 -4	0 replies
81/480	iio: light: veml6030: fix channel type when pushing events`drivers/iio/light/veml6030.c`	+5 -3	0 replies
82/480	iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call`drivers/iio/magnetometer/ak8975.c`	+1 -0	0 replies
83/480	iio: pressure: bmp280: zero-init bmp580 trigger handler buffer`drivers/iio/pressure/bmp280-core.c`	+1 -1	0 replies
84/480	iio: pressure: mpl115: fix runtime PM leak on read error`drivers/iio/pressure/mpl115.c`	+2 -2	0 replies
85/480	iio: proximity: vl53l0x: notify trigger and clear IRQ on error paths`drivers/iio/proximity/vl53l0x-i2c.c`	+3 -4	0 replies
86/480	iio: resolver: ad2s1210: notify trigger and clear state on fault read error`drivers/iio/resolver/ad2s1210.c`	+1 -1	0 replies
87/480	iio: temperature: Build mlx90635 with CONFIG_MLX90635`drivers/iio/temperature/Makefile`	+1 -1	0 replies
88/480	iio: temperature: ltc2983: Fix n_wires default bypassing rotation check`drivers/iio/temperature/ltc2983.c`	+1 -1	0 replies
89/480	iio: temperature: ltc2983: Fix reinit_completion() called after conversion start`drivers/iio/temperature/ltc2983.c`	+1 -2	0 replies
90/480	iio: temperature: tmp006: use devm_iio_trigger_register`drivers/iio/temperature/tmp006.c`	+1 -1	0 replies
91/480	ALSA: usx2y: us144mkii: fix work UAF on disconnect`sound/usb/usx2y/us144mkii.c`	+11 -6	0 replies
92/480	ALSA: virtio: Add missing 384 kHz PCM rate mapping`sound/virtio/virtio_pcm.c` `sound/virtio/virtio_pcm_ops.c`	+4 -2	0 replies
93/480	ALSA: virtio: Validate control metadata from the device`sound/virtio/virtio_kctl.c`	+50 -0	0 replies
94/480	ALSA: ymfpci: check snd_ctl_new1() return value`sound/pci/ymfpci/ymfpci_main.c`	+6 -0	0 replies
95/480	ALSA: aoa: check snd_ctl_new1() return value`sound/aoa/fabrics/layout.c`	+6 -0	0 replies
96/480	ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser`sound/usb/caiaq/input.c`	+1 -1	0 replies
97/480	ALSA: cmipci: check snd_ctl_new1() return value`sound/pci/cmipci.c`	+6 -0	0 replies
98/480	ALSA: compress: Fix task creation error unwind`sound/core/compress_offload.c`	+9 -4	0 replies
99/480	ALSA: es1938: check snd_ctl_new1() return value`sound/pci/es1938.c`	+2 -0	0 replies
100/480	ALSA: FCP: Add Focusrite ISA C8X support`sound/usb/mixer_quirks.c`	+1 -0	0 replies
101/480	ALSA: firewire: isight: bound the sample count to the packet payload`sound/firewire/isight.c`	+2 -1	0 replies
102/480	ALSA: gus: check snd_ctl_new1() return value`sound/isa/gus/gus_pcm.c`	+2 -0	0 replies
103/480	ALSA: hda/cs35l41: Fix firmware load work teardown`sound/hda/codecs/side-codecs/cs35l41_hda.c` `sound/hda/codecs/side-codecs/cs35l41_hda.h`	+60 ~~-22~~	0 replies
104/480	ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800 G5 Mini`sound/hda/codecs/hdmi/hdmi.c`	+1 -0	0 replies
105/480	ALSA: hda/hdmi: Use AC_PINSENSE_ELDV to detect pinsense for Loongson`include/sound/hda_codec.h` `sound/hda/codecs/hdmi/hdmi.c` `sound/hda/common/jack.c`	+14 -1	0 replies
106/480	ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW`sound/hda/codecs/realtek/alc269.c`	+1 -0	0 replies
107/480	ALSA: ice1712: check snd_ctl_new1() return value`sound/pci/ice1712/aureon.c` `sound/pci/ice1712/ice1712.c` `sound/pci/ice1712/ice1724.c`	+16 -0	0 replies
108/480	ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()`sound/core/seq/seq_memory.c`	+1 -1	0 replies
109/480	ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission`sound/usb/usx2y/us144mkii_capture.c`	+1 -1	0 replies
110/480	ALSA: usb-audio: avoid kobject path lookup in DualSense match`sound/usb/mixer_quirks.c`	+12 ~~-28~~	0 replies
111/480	ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()`sound/usb/mixer_scarlett.c`	+3 -1	0 replies
112/480	ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks`sound/usb/mixer_us16x08.c`	+24 ~~-25~~	0 replies
113/480	ALSA: usb-audio: Roll back quirk control caches on write errors`sound/usb/mixer_quirks.c`	+37 -8	0 replies
114/480	ALSA: usb-audio: Update Babyface Pro control caches only after successful writes`sound/usb/mixer_quirks.c`	+10 -6	0 replies
115/480	ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes`sound/usb/mixer_us16x08.c`	+52 ~~-26~~	0 replies
116/480	vfio/pci: Use a private flag to prevent power state change with VFs`drivers/vfio/pci/vfio_pci_core.c` `include/linux/vfio_pci_core.h`	+15 -3	0 replies
117/480	vfio/pci: Latch disable_idle_d3 per device`drivers/vfio/pci/vfio_pci_core.c` `include/linux/vfio_pci_core.h`	+11 -9	0 replies
118/480	vfio/pci: Release the VGA arbiter client on register_device() failure`drivers/vfio/pci/vfio_pci_core.c`	+1 -0	0 replies
119/480	vfio/pci: Fix racy bitfields and tighten struct layout`include/linux/vfio_pci_core.h`	+8 -5	0 replies
120/480	vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc`drivers/vfio/vfio_main.c`	+2 -1	0 replies
121/480	vfio: Remove device debugfs before releasing devres`drivers/vfio/debugfs.c` `drivers/vfio/vfio_main.c`	+8 -1	0 replies
122/480	Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB`drivers/bluetooth/btusb.c`	+2 -0	0 replies
123/480	Bluetooth: btusb: fix use-after-free on registration failure`drivers/bluetooth/btusb.c`	+10 -1	0 replies
124/480	Bluetooth: btusb: fix use-after-free on marvell probe failure`drivers/bluetooth/btusb.c`	+5 -3	0 replies
125/480	Bluetooth: btusb: fix wakeup source leak on probe failure`drivers/bluetooth/btusb.c`	+15 -3	0 replies
126/480	binder: fix UAF in binder_thread_release()`drivers/android/binder.c`	+5 -1	0 replies
127/480	binder: fix UAF in binder_free_transaction()`drivers/android/binder.c`	+13 -0	0 replies
128/480	rust_binder: use a u64 stride when cleaning up the offsets array`drivers/android/binder/allocation.rs`	+3 -2	0 replies
129/480	rust_binder: reject context manager self-transaction`drivers/android/binder/process.rs`	+5 -1	0 replies
130/480	rust_binder: synchronize Rust Binder stats with freeze commands`drivers/android/binder/rust_binder_events.c` `drivers/android/binder/stats.rs`	+8 -3	0 replies
131/480	rust_binder: clear freeze listener on node removal`drivers/android/binder/freeze.rs` `drivers/android/binder/node.rs` `drivers/android/binder/process.rs`	+26 -7	0 replies
132/480	usb: xhci: Fix sleep in atomic context in xhci_free_streams()`drivers/usb/host/xhci.c`	+10 -1	0 replies
133/480	xhci: sideband: fix ring sg table pages leak`drivers/usb/host/xhci-sideband.c`	+2 -0	0 replies
134/480	usb: typec: tcpci_rt1711h: unregister TCPCI port with devres`drivers/usb/typec/tcpm/tcpci_rt1711h.c`	+8 -5	0 replies
135/480	PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series`drivers/pci/controller/pci-loongson.c`	+36 -0	0 replies
136/480	PCI: altera: Do not dispose parent IRQ mapping`drivers/pci/controller/pcie-altera.c`	+0 -1	0 replies
137/480	PCI: altera: Fix resource leaks on probe failure`drivers/pci/controller/pcie-altera.c`	+33 -2	0 replies
138/480	PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining`drivers/pci/quirks.c`	+18 ~~-33~~	0 replies
139/480	PCI: host-common: Request bus reassignment when not probe-only`drivers/pci/controller/pci-host-common.c`	+4 -0	0 replies
140/480	PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling`drivers/pci/controller/dwc/pci-imx6.c`	+3 -9	0 replies
141/480	PCI: mediatek: Fix IRQ domain leak when port fails to enable`drivers/pci/controller/pcie-mediatek.c`	+40 ~~-23~~	0 replies
142/480	PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM hosts`drivers/pci/controller/dwc/pcie-qcom.c`	+6 -0	0 replies
143/480	PCI/IOV: Skip VF Resizable BAR restore on read error`drivers/pci/iov.c`	+6 -0	0 replies
144/480	tcp: restore RCU grace period in tcp_ao_destroy_sock`include/net/tcp_ao.h` `net/ipv4/tcp_ao.c`	+4 -2	0 replies
145/480	mm/damon/ops-common: handle extreme intervals in damon_hot_score()`include/linux/damon.h` `mm/damon/ops-common.c`	+7 -2	0 replies
146/480	netfilter: ipset: fix race between dump and ip_set_list resize`net/netfilter/ipset/ip_set_core.c`	+7 -1	0 replies
147/480	virtio_pci: fix vq info pointer lookup via wrong index`drivers/virtio/virtio_pci_common.c`	+6 -4	0 replies
148/480	virtio-mmio: fix device release warning on module unload`drivers/virtio/virtio_mmio.c`	+13 ~~-13~~	0 replies
149/480	hwrng: virtio: clamp device-reported used.len at copy_data()`drivers/char/hw_random/virtio-rng.c`	+21 -2	0 replies
150/480	USB: chaoskey: Fix slab-use-after-free in chaoskey_release()`drivers/usb/misc/chaoskey.c`	+0 -1	0 replies
151/480	usb: dwc3: run gadget disconnect from sleepable suspend context`drivers/usb/dwc3/gadget.c`	+36 -7	0 replies
152/480	usb: misc: usbio: fix disconnect UAF in client teardown`drivers/usb/misc/usbio.c`	+2 -2	0 replies
153/480	6lowpan: fix NHC entry use-after-free on error path`net/6lowpan/nhc.c`	+1 -1	0 replies
154/480	tipc: fix out-of-bounds read in broadcast Gap ACK blocks`net/tipc/bcast.c` `net/tipc/bcast.h` `net/tipc/node.c`	+27 ~~-12~~	0 replies
155/480	staging: vme_user: bound slave read/write to the kern_buf size`drivers/staging/vme_user/vme_user.c`	+22 -0	0 replies
156/480	smb: client: restrict implied bcc[0] exemption to responses without data area`fs/smb/client/smb2misc.c`	+26 -6	0 replies
157/480	staging: vme_user: fix location monitor leak in fake bridge`drivers/staging/vme_user/vme_fake.c`	+8 -0	0 replies
158/480	staging: vme_user: fix location monitor leak in tsi148 bridge`drivers/staging/vme_user/vme_tsi148.c`	+8 -0	0 replies
159/480	media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe`drivers/staging/media/ipu3/ipu3-css-params.c`	+6 -2	0 replies
160/480	staging: media: atomisp: reduce load_primary_binaries() stack usage`drivers/staging/media/atomisp/pci/sh_css.c`	+3 -3	0 replies
161/480	staging: media: ipu7: fix double-free and use-after-free in error paths`drivers/staging/media/ipu7/ipu7.c`	+8 ~~-14~~	0 replies
162/480	staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()`drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c`	+8 -0	0 replies
163/480	staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+7 -1	0 replies
164/480	staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+4 -0	0 replies
165/480	staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop`drivers/staging/rtl8723bs/core/rtw_wlan_util.c`	+5 -1	0 replies
166/480	staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+8 -0	0 replies
167/480	staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop`drivers/staging/rtl8723bs/core/rtw_wlan_util.c`	+11 -3	0 replies
168/480	staging: rtl8723bs: fix OOB write in HT_caps_handler()`drivers/staging/rtl8723bs/core/rtw_wlan_util.c`	+2 -1	0 replies
169/480	crypto: amlogic - avoid double cleanup in meson_crypto_probe()`drivers/crypto/amlogic/amlogic-gxl-core.c`	+1 -1	0 replies
170/480	crypto: krb5 - filter out async aead implementations at alloc`crypto/krb5/krb5_api.c`	+1 -1	0 replies
171/480	ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL`fs/smb/server/smb2pdu.c`	+7 -7	0 replies
172/480	net: af_key: initialize alg_key_len for IPComp states`net/key/af_key.c`	+1 -0	0 replies
173/480	audit: Fix data races of skb_queue_len() readers on audit_queue`kernel/audit.c`	+5 -5	0 replies
174/480	Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref`include/net/bluetooth/l2cap.h` `net/bluetooth/l2cap_core.c`	+21 ~~-14~~	0 replies
175/480	Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete`net/bluetooth/mgmt.c`	+3 -0	0 replies
176/480	coresight: etb10: restore atomic_t for shared reading state`drivers/hwtracing/coresight/coresight-etb10.c`	+3 -3	0 replies
177/480	debugobjects: Plug race against a concurrent OOM disable`lib/debugobjects.c`	+17 -0	0 replies
178/480	fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns`fs/ntfs3/fslog.c`	+15 -5	0 replies
179/480	NTB: epf: Avoid calling pci_irq_vector() from hardirq context`drivers/ntb/hw/epf/ntb_hw_epf.c`	+3 -1	0 replies
180/480	gpio: eic-sprd: use raw_spinlock_t in the irq startup path`drivers/gpio/gpio-eic-sprd.c`	+4 -4	0 replies
181/480	gpio: sch: use raw_spinlock_t in the irq startup path`drivers/gpio/gpio-sch.c`	+16 ~~-16~~	0 replies
182/480	io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE`io_uring/nop.c`	+4 -4	0 replies
183/480	io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item`io_uring/io-wq.c`	+1 -1	0 replies
184/480	io_uring/rw: preserve partial result for iopoll`io_uring/rw.c`	+6 -6	0 replies
185/480	netpoll: fix a use-after-free on shutdown path`net/core/netpoll.c`	+1 -8	0 replies
186/480	ipv4: igmp: remove multicast group from hash table on device destruction`net/ipv4/igmp.c`	+1 -0	0 replies
187/480	net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes`net/ipv4/sysctl_net_ipv4.c` `net/ipv4/tcp_output.c`	+10 -4	0 replies
188/480	mfd: cros_ec: Delay dev_set_drvdata() until probe success`drivers/mfd/cros_ec_dev.c`	+2 -1	0 replies
189/480	mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()`mm/shrinker_debug.c`	+0 -4	0 replies
190/480	mm: shrinker: fix shrinker_info teardown race with expansion`mm/shrinker.c`	+11 -2	0 replies
191/480	mm: shrinker: fix NULL pointer dereference in debugfs`mm/shrinker_debug.c`	+6 -4	0 replies
192/480	mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host`mm/swap_cgroup.c`	+2 -0	0 replies
193/480	mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup`mm/swapfile.c`	+1 -0	0 replies
194/480	netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump`net/netfilter/nf_conntrack_netlink.c`	+1 -1	0 replies
195/480	netfilter: handle unreadable frags`net/ipv6/netfilter/nf_conntrack_reasm.c` `net/netfilter/nfnetlink_log.c` `net/netfilter/nfnetlink_queue.c` +1 more	+41 ~~-19~~	0 replies
196/480	netfilter: ebtables: zero chainstack array`net/bridge/netfilter/ebtables.c`	+1 -2	0 replies
197/480	netfilter: ebtables: module names must be null-terminated`net/bridge/netfilter/ebtables.c`	+3 -0	0 replies
198/480	netfilter: ebtables: terminate table name before find_table_lock()`net/bridge/netfilter/ebtables.c`	+6 -0	0 replies
199/480	netfilter: flowtable: fix offloaded ct timeout never being extended`net/netfilter/nf_flow_table_core.c`	+9 -4	0 replies
200/480	Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()`drivers/bluetooth/btmtksdio.c`	+1 -1	0 replies
201/480	Bluetooth: bnep: pin L2CAP connection during netdev registration`net/bluetooth/bnep/core.c`	+21 -6	0 replies
202/480	Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()`drivers/bluetooth/btnxpuart.c`	+6 -0	0 replies
203/480	Bluetooth: fix UAF in bt_accept_dequeue()`net/bluetooth/af_bluetooth.c` `net/bluetooth/l2cap_sock.c`	+5 ~~-16~~	0 replies
204/480	Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()`include/net/bluetooth/hci_core.h` `net/bluetooth/hci_conn.c` `net/bluetooth/hci_sync.c`	+123 ~~-32~~	0 replies
205/480	Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled`drivers/bluetooth/hci_ldisc.c`	+10 -4	0 replies
206/480	Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()`net/bluetooth/iso.c`	+12 -1	0 replies
207/480	Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock`net/bluetooth/l2cap_core.c`	+2 -8	0 replies
208/480	Bluetooth: L2CAP: validate option length before reading conf opt value`net/bluetooth/l2cap_core.c`	+28 -8	0 replies
209/480	iommu/vt-d: Fix race condition during PASID entry replacement`drivers/iommu/intel/iommu.c` `drivers/iommu/intel/nested.c` `drivers/iommu/intel/pasid.c` +1 more	+16 ~~-226~~	0 replies
210/480	fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr`fs/ntfs3/frecord.c` `fs/ntfs3/inode.c` `fs/ntfs3/ntfs_fs.h`	+6 -6	0 replies
211/480	fs/ntfs3: fsync files by syncing parent inodes`fs/ntfs3/dir.c` `fs/ntfs3/file.c` `fs/ntfs3/frecord.c` +1 more	+81 -4	0 replies
212/480	fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()`fs/ntfs3/inode.c`	+13 -0	0 replies
213/480	fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()`fs/ntfs3/attrib.c`	+14 -0	0 replies
214/480	coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()`drivers/hwtracing/coresight/ultrasoc-smb.c`	+1 -0	0 replies
215/480	smb: client: resolve SWN tcon from live registrations`fs/smb/client/cifs_swn.c` `fs/smb/client/trace.h`	+262 ~~-54~~	0 replies
216/480	smb/client: Fix error code in smb2_aead_req_alloc()`fs/smb/client/smb2ops.c`	+5 -3	0 replies
217/480	ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE`fs/smb/server/smb2pdu.c`	+11 -0	0 replies
218/480	ksmbd: add a permission check for FSCTL_SET_ZERO_DATA`fs/smb/server/smb2pdu.c`	+6 -0	0 replies
219/480	ksmbd: serialize QUERY_DIRECTORY requests per file`fs/smb/server/smb2pdu.c` `fs/smb/server/vfs_cache.c` `fs/smb/server/vfs_cache.h`	+7 -0	0 replies
220/480	ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation`fs/smb/server/smb2pdu.c`	+16 ~~-18~~	0 replies
221/480	ksmbd: require source read access for duplicate extents`fs/smb/server/smb2pdu.c`	+4 -0	0 replies
222/480	ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY`fs/smb/server/smb2pdu.c`	+3 -0	0 replies
223/480	ksmbd: run set info with opener credentials`fs/smb/server/smb2pdu.c`	+3 -5	0 replies
224/480	ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION`fs/smb/server/smb2pdu.c`	+6 -0	0 replies
225/480	ksmbd: add per-handle permission check to FILE_LINK_INFORMATION`fs/smb/server/smb2pdu.c`	+5 -0	0 replies
226/480	ksmbd: use opener credentials for delete-on-close`fs/smb/server/vfs.c` `fs/smb/server/vfs_cache.c`	+9 -2	0 replies
227/480	ksmbd: use opener credentials for ADS I/O`fs/smb/server/vfs.c`	+9 -2	0 replies
228/480	smb: client: fix query directory replay double-free`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
229/480	smb: client: fix query_info() replay double-free`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
230/480	smb: client: fix double-free in SMB2_ioctl() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
231/480	smb: client: fix change notify replay double-free`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
232/480	smb: client: fix double-free in SMB2_flush() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
233/480	smb: client: fix double-free in SMB2_open() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
234/480	smb: client: fix double-free in SMB2_close() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
235/480	smb: client: Fix next buffer leak in receive_encrypted_standard()`fs/smb/client/smb2ops.c`	+6 -4	0 replies
236/480	smb: client: use unaligned reads in parse_posix_ctxt()`fs/smb/client/smb2pdu.c`	+3 -3	0 replies
237/480	smb: client: harden POSIX SID length parsing`fs/smb/client/smb2pdu.c`	+1 -1	0 replies
238/480	smb: client: fix atime clamp check in read completion`fs/smb/client/file.c`	+1 -1	0 replies
239/480	smb: client: mask server-provided mode to 07777 in modefromsid`fs/smb/client/cifsacl.c`	+1 -1	0 replies
240/480	writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()`fs/fs-writeback.c`	+29 -2	0 replies
241/480	OPP: of: Fix potential memory leak in opp_parse_supplies()`drivers/opp/of.c`	+2 -1	0 replies
242/480	cpufreq: qcom-cpufreq-hw: Fix possible double free`drivers/cpufreq/qcom-cpufreq-hw.c`	+0 -1	0 replies
243/480	firmware_loader: fix device reference leak in firmware_upload_register()`drivers/base/firmware_loader/sysfs_upload.c`	+3 -5	0 replies
244/480	libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()`fs/libfs.c`	+1 -0	0 replies
245/480	perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()`arch/x86/events/intel/uncore_snb.c`	+0 -7	0 replies
246/480	cpufreq: intel_pstate: Sync policy->cur during CPU offline`drivers/cpufreq/intel_pstate.c`	+4 -2	0 replies
247/480	sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT`kernel/sched/features.h`	+8 -0	0 replies
248/480	cpufreq: Fix hotplug-suspend race during reboot`drivers/cpufreq/cpufreq.c`	+2 -0	0 replies
249/480	cpufreq: pcc: fix use-after-free and double free in _OSC evaluation`drivers/cpufreq/pcc-cpufreq.c`	+2 -0	0 replies
250/480	posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path`kernel/time/posix-cpu-timers.c`	+1 -0	0 replies
251/480	time/jiffies: Register jiffies clocksource before usage`kernel/time/jiffies.c`	+5 -6	0 replies
252/480	clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances`drivers/clocksource/timer-tegra186.c`	+2 -1	0 replies
253/480	s390: Revert support for DCACHE_WORD_ACCESS`arch/s390/Kconfig` `arch/s390/include/asm/asm-extable.h` `arch/s390/include/asm/word-at-a-time.h` +1 more	+0 ~~-45~~	0 replies
254/480	perf/arm-cmn: Fix DVM node events`drivers/perf/arm-cmn.c`	+12 ~~-11~~	0 replies
255/480	X.509: Fix validation of ASN.1 certificate header`crypto/asymmetric_keys/x509_loader.c`	+1 -1	0 replies
256/480	mm/slab: do not limit zeroing to orig_size when only red zoning is enabled`mm/slub.c`	+10 -8	0 replies
257/480	tools/mm/slabinfo: Fix trace disable logic inversion`tools/mm/slabinfo.c`	+1 -1	0 replies
258/480	tools/mm/slabinfo: fix total_objects attribute name`tools/mm/slabinfo.c`	+2 -2	0 replies
259/480	HID: hid-goodix-spi: validate report size to prevent stack buffer overflow`drivers/hid/hid-goodix-spi.c`	+3 -0	0 replies
260/480	HID: uhid: convert to hid_safe_input_report()`drivers/hid/uhid.c`	+4 -4	0 replies
261/480	HID: wacom: stop hardware after post-start probe failures`drivers/hid/wacom_sys.c`	+6 -6	0 replies
262/480	HID: pidff: Use correct effect type in effect update`drivers/hid/usbhid/hid-pidff.c`	+1 -1	0 replies
263/480	HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert`drivers/hid/wacom_sys.c`	+4 -2	0 replies
264/480	HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()`drivers/hid/wacom_sys.c`	+1 -1	0 replies
265/480	HID: letsketch: fix UAF on inrange_timer at driver unbind`drivers/hid/hid-letsketch.c`	+33 -3	0 replies
266/480	HID: multitouch: fix out-of-bounds bit access on mt_io_flags`drivers/hid/hid-multitouch.c`	+20 ~~-12~~	0 replies
267/480	HID: appleir: fix UAF on pending key_up_timer in remove()`drivers/hid/hid-appleir.c`	+35 ~~-10~~	0 replies
268/480	HID: lg-g15: cancel pending work on remove to fix a use-after-free`drivers/hid/hid-lg-g15.c`	+16 -0	0 replies
269/480	HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads`drivers/hid/hid-sensor-hub.c` `include/linux/hid-sensor-hub.h`	+96 -6	0 replies
270/480	hfs/hfsplus: zero-initialize buffer in hfs_bnode_read`fs/hfs/bnode.c` `fs/hfsplus/bnode.c`	+4 -0	0 replies
271/480	nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers`fs/nilfs2/segment.c`	+22 -0	0 replies
272/480	media: mtk-jpeg: cancel workqueue on release for supported platforms only`drivers/media/platform/mediatek/jpeg/mtk_jpeg_core.c`	+2 -1	0 replies
273/480	serial: 8250_mid: Disable DMA for selected platforms`drivers/tty/serial/8250/8250_mid.c`	+11 -2	0 replies
274/480	xfs: use null daddr for unset first bad log block`fs/xfs/xfs_log_recover.c`	+3 -3	0 replies
275/480	xfs: release dquot buffer after dqflush failure`fs/xfs/xfs_qm.c`	+2 -3	0 replies
276/480	xfs: fix unreachable BIGTIME check in dquot flush validation`fs/xfs/xfs_dquot.c`	+8 -8	0 replies
277/480	xfs: fix pointer arithmetic error on 32-bit systems`fs/xfs/libxfs/xfs_bmap_btree.h`	+1 -1	0 replies
278/480	xfs: fix exchmaps reservation limit check`fs/xfs/libxfs/xfs_exchmaps.c`	+1 -1	0 replies
279/480	xfs: fix memory leak in xfs_dqinode_metadir_create()`fs/xfs/libxfs/xfs_dquot_buf.c`	+12 -2	0 replies
280/480	bpf: Reject fragmented frames in devmap`kernel/bpf/devmap.c`	+7 -0	0 replies
281/480	bpf: Restore sysctl new-value from 1 to 0`kernel/bpf/cgroup.c`	+1 -1	0 replies
282/480	bpf: Validate BTF repeated field counts before expansion`kernel/bpf/btf.c`	+4 -5	0 replies
283/480	net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()`drivers/net/usb/kalmia.c`	+8 -0	0 replies
284/480	usb: cdc_acm: Add quirk for Uniden BC125AT scanner`drivers/usb/class/cdc-acm.c`	+3 -0	0 replies
285/480	usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()`drivers/usb/cdns3/cdnsp-mem.c`	+2 -0	0 replies
286/480	USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub`drivers/usb/core/quirks.c`	+3 -0	0 replies
287/480	usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()`drivers/usb/dwc3/dwc3-meson-g12a.c`	+9 -5	0 replies
288/480	usb: free iso schedules on failed submit`drivers/usb/fotg210/fotg210-hcd.c` `drivers/usb/host/ehci-sched.c`	+13 -4	0 replies
289/480	usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler`drivers/usb/gadget/composite.c`	+3 -2	0 replies
290/480	usb: gadget: udc: Fix use-after-free in gadget_match_driver`drivers/usb/gadget/udc/core.c`	+28 -1	0 replies
291/480	usb: gadget: f_printer: take kref only for successful open`drivers/usb/gadget/function/f_printer.c`	+1 -2	0 replies
292/480	USB: idmouse: fix use-after-free on disconnect race`drivers/usb/misc/idmouse.c`	+22 ~~-23~~	0 replies
293/480	USB: ldusb: fix use-after-free on disconnect race`drivers/usb/misc/ldusb.c`	+18 ~~-20~~	0 replies
294/480	USB: iowarrior: fix use-after-free on disconnect`drivers/usb/misc/iowarrior.c`	+3 -1	0 replies
295/480	USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD`drivers/usb/core/quirks.c`	+3 -0	0 replies
296/480	USB: legousbtower: fix use-after-free on disconnect race`drivers/usb/misc/legousbtower.c`	+19 ~~-18~~	0 replies
297/480	usb: sl811-hcd: disable controller wakeup on remove`drivers/usb/host/sl811-hcd.c`	+1 -0	0 replies
298/480	USB: storage: include US_FL_NO_SAME in quirks mask`drivers/usb/storage/usb.c`	+1 -1	0 replies
299/480	usb: misc: usbio: bound bulk IN response length to the received transfer`drivers/usb/misc/usbio.c`	+4 -0	0 replies
300/480	USB: misc: uss720: unregister parport on probe failure`drivers/usb/misc/uss720.c`	+4 -1	0 replies
301/480	usb: mtu3: unmap request DMA on queue failure`drivers/usb/mtu3/mtu3_gadget.c`	+1 -0	0 replies
302/480	USB: serial: keyspan_pda: fix information leak`drivers/usb/serial/keyspan_pda.c`	+1 -1	0 replies
303/480	USB: serial: option: add Telit Cinterion FE990D50 compositions`drivers/usb/serial/option.c`	+16 -0	0 replies
304/480	USB: serial: digi_acceleport: fix broken rx after throttle`drivers/usb/serial/digi_acceleport.c`	+16 -0	0 replies
305/480	USB: serial: digi_acceleport: fix hard lockup on disconnect`drivers/usb/serial/digi_acceleport.c`	+7 -5	0 replies
306/480	USB: serial: digi_acceleport: fix write buffer corruption`drivers/usb/serial/digi_acceleport.c`	+10 -5	0 replies
307/480	USB: ulpi: fix memory leak on registration failure`drivers/usb/common/ulpi.c`	+10 ~~-13~~	0 replies
308/480	USB: usb-storage: ene_ub6250: restore media-ready check`drivers/usb/storage/ene_ub6250.c`	+2 -1	0 replies
309/480	usbip: tools: support SuperSpeedPlus devices`tools/usb/usbip/libsrc/usbip_common.c` `tools/usb/usbip/libsrc/usbip_device_driver.c` `tools/usb/usbip/libsrc/vhci_driver.c`	+7 -0	0 replies
310/480	usbip: vudc: fix NULL deref in vep_dequeue()`drivers/usb/usbip/vudc.h` `drivers/usb/usbip/vudc_dev.c`	+1 -4	0 replies
311/480	usb: typec: anx7411: use devm_pm_runtime_enable()`drivers/usb/typec/anx7411.c`	+3 -1	0 replies
312/480	usb: typec: class: drop PD lookup reference`drivers/usb/typec/class.c`	+1 -0	0 replies
313/480	usb: typec: tcpm: Fix VDM type for Enter Mode commands`drivers/usb/typec/tcpm/tcpm.c`	+2 -2	0 replies
314/480	usb: typec: tcpm: Validate SVID index in svdm_consume_modes()`drivers/usb/typec/tcpm/tcpm.c`	+5 -0	0 replies
315/480	usb: typec: ucsi: Invert DisplayPort role assignment`drivers/usb/typec/ucsi/displayport.c`	+2 -2	0 replies
316/480	usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode`drivers/usb/typec/ucsi/displayport.c`	+1 -2	0 replies
317/480	usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove`drivers/usb/typec/ucsi/ucsi_ccg.c`	+1 -1	0 replies
318/480	usb: typec: ucsi: cancel pending work on system suspend`drivers/usb/typec/ucsi/ucsi.c` `drivers/usb/typec/ucsi/ucsi.h` `drivers/usb/typec/ucsi/ucsi_acpi.c`	+30 -1	0 replies
319/480	usb: gadget: f_fs: Fix DMA fence leak`drivers/usb/gadget/function/f_fs.c`	+1 -0	0 replies
320/480	block: skip sync_blockdev() on surprise removal in bdev_mark_dead()`block/bdev.c`	+7 -1	0 replies
321/480	mm: shmem: fix potential livelock issue for shmem direct swapin`mm/shmem.c`	+13 -1	0 replies
322/480	x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled`arch/x86/kernel/cpu/resctrl/monitor.c` `fs/resctrl/monitor.c`	+29 ~~-18~~	0 replies
323/480	rust_binder: introduce TransactionInfo`drivers/android/binder/allocation.rs` `drivers/android/binder/error.rs` `drivers/android/binder/process.rs` +3 more	+170 ~~-134~~	0 replies
324/480	rust_binder: fix BINDER_GET_EXTENDED_ERROR`drivers/android/binder/error.rs` `drivers/android/binder/thread.rs` `drivers/android/binder/transaction.rs`	+58 ~~-35~~	0 replies
325/480	bpf: Support for hardening against JIT spraying`include/linux/filter.h` `kernel/bpf/core.c`	+29 -0	0 replies
326/480	x86/bugs: Enable IBPB flush on BPF JIT allocation`arch/x86/include/asm/nospec-branch.h` `arch/x86/kernel/cpu/bugs.c`	+49 -5	0 replies
327/480	bpf: Restrict JIT predictor flush to cBPF`arch/arm64/net/bpf_jit_comp.c` `arch/loongarch/net/bpf_jit.c` `arch/powerpc/net/bpf_jit_comp.c` +6 more	+23 ~~-17~~	0 replies
328/480	bpf: Skip redundant IBPB in pack allocator`kernel/bpf/core.c`	+14 -1	0 replies
329/480	bpf: Prefer packs that wont trigger an IBPB flush on allocation`kernel/bpf/core.c`	+24 -3	0 replies
330/480	bpf: Prefer dirty packs for eBPF allocations`kernel/bpf/core.c`	+3 -3	0 replies
331/480	udf: validate free block extents against the partition length`fs/udf/balloc.c`	+3 -2	0 replies
332/480	udf: validate VAT header length against the VAT inode size`fs/udf/super.c`	+8 -0	0 replies
333/480	udf: validate sparing table length as an entry count, not a byte count`fs/udf/super.c`	+2 -1	0 replies
334/480	hwrng: jh7110 - fix refcount leak in starfive_trng_read()`drivers/char/hw_random/jh7110-trng.c`	+8 -5	0 replies
335/480	crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A`drivers/crypto/atmel-sha204a.c`	+12 -7	0 replies
336/480	nvme: target: rdma: fix ndev refcount leak on queue connect`drivers/nvme/target/rdma.c`	+4 -2	0 replies
337/480	block: partitions: fix of_node refcount leak in of_partition()`block/partitions/of.c`	+4 -1	0 replies
338/480	dm-ioctl: report an error if a device has no table`drivers/md/dm-ioctl.c`	+4 -1	0 replies
339/480	nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks`drivers/nvme/host/multipath.c`	+6 -0	0 replies
340/480	nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page`drivers/nvme/target/discovery.c`	+22 -1	0 replies
341/480	nvmet-auth: validate reply message payload bounds against transfer length`drivers/nvme/target/fabrics-cmd-auth.c`	+12 -3	0 replies
342/480	btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC`fs/btrfs/btrfs_inode.h` `fs/btrfs/file.c` `fs/btrfs/inode.c` +1 more	+60 ~~-32~~	0 replies
343/480	btrfs: do not trim a device which is not writeable`fs/btrfs/extent-tree.c`	+8 -4	0 replies
344/480	partitions: aix: bound the pp_count scan to the ppe array`block/partitions/aix.c`	+9 -0	0 replies
345/480	isofs: bound Rock Ridge symlink components to the SL record`fs/isofs/rock.c`	+11 -0	0 replies
346/480	crypto: af_alg - Remove zero-copy support from skcipher and aead`Documentation/crypto/userspace-if.rst` `crypto/af_alg.c` `crypto/algif_aead.c`	+32 ~~-78~~	0 replies
347/480	crypto: caam - use print_hex_dump_devel to guard key hex dumps`drivers/crypto/caam/caamalg.c` `drivers/crypto/caam/caamalg_qi.c` `drivers/crypto/caam/caamhash.c` +1 more	+16 ~~-16~~	0 replies
348/480	crypto: caam - use print_hex_dump_devel to guard key hex dumps again`drivers/crypto/caam/caamalg_qi2.c`	+6 -6	0 replies
349/480	crypto: chacha20poly1305 - validate poly1305 template argument`crypto/chacha20poly1305.c`	+9 -2	0 replies
350/480	crypto: crypto4xx - Remove insecure and unused rng_alg`drivers/crypto/amcc/crypto4xx_core.c` `drivers/crypto/amcc/crypto4xx_core.h` `drivers/crypto/amcc/crypto4xx_reg_def.h`	+0 ~~-103~~	0 replies
351/480	crypto: ecc - Fix carry overflow in vli multiplication`crypto/ecc.c`	+20 ~~-11~~	0 replies
352/480	crypto: hisi-trng - Remove crypto_rng interface`drivers/crypto/hisilicon/Kconfig` `drivers/crypto/hisilicon/trng/trng.c`	+2 ~~-295~~	0 replies
353/480	crypto: pcrypt - restore callback for non-parallel fallback`crypto/pcrypt.c`	+4 -0	0 replies
354/480	crypto: tegra - fix refcount leak in tegra_se_host1x_submit()`drivers/crypto/tegra/tegra-se-main.c`	+1 -1	0 replies
355/480	crypto: loongson - Select CRYPTO_RNG`drivers/crypto/loongson/Kconfig`	+1 -0	0 replies
356/480	crypto: ccp - Do not initialize SNP for SEV ioctls`drivers/crypto/ccp/sev-dev.c`	+2 -5	0 replies
357/480	crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)`drivers/crypto/ccp/sev-dev.c`	+1 ~~-12~~	0 replies
358/480	crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)`drivers/crypto/ccp/sev-dev.c`	+4 ~~-13~~	0 replies
359/480	crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)`drivers/crypto/ccp/sev-dev.c`	+4 ~~-29~~	0 replies
360/480	crypto: drbg - Fix returning success on failure in CTR_DRBG`crypto/drbg.c`	+1 -1	0 replies
361/480	crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels`include/crypto/drbg.h`	+7 ~~-11~~	0 replies
362/480	crypto: drbg - Fix the fips_enabled priority boost`crypto/drbg.c`	+1 -1	0 replies
363/480	crypto: qat - centralize bus master enable`drivers/crypto/intel/qat/qat_420xx/adf_drv.c` `drivers/crypto/intel/qat/qat_4xxx/adf_drv.c` `drivers/crypto/intel/qat/qat_6xxx/adf_drv.c` +9 more	+10 ~~-15~~	0 replies
364/480	crypto: qat - handle sysfs-triggered reset callbacks`drivers/crypto/intel/qat/qat_common/adf_aer.c`	+12 -0	0 replies
365/480	crypto: qat - keep VFs enabled during reset`drivers/crypto/intel/qat/qat_common/adf_sriov.c`	+11 -1	0 replies
366/480	crypto: qat - notify fatal error before AER reset preparation`drivers/crypto/intel/qat/qat_common/adf_aer.c`	+2 -2	0 replies
367/480	crypto: qat - protect service table iterations with service_lock`drivers/crypto/intel/qat/qat_common/adf_init.c`	+16 -0	0 replies
368/480	crypto: qat - skip restart for down devices`drivers/crypto/intel/qat/qat_common/adf_aer.c`	+8 -0	0 replies
369/480	crypto: qat - validate RSA CRT component lengths`drivers/crypto/intel/qat/qat_common/qat_asym_algs.c`	+5 -5	0 replies
370/480	crypto: qat - factor out AER reset helpers`drivers/crypto/intel/qat/qat_common/adf_aer.c`	+53 ~~-33~~	0 replies
371/480	crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header`drivers/crypto/talitos.c`	+20 -8	0 replies
372/480	crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1`drivers/crypto/talitos.c` `drivers/crypto/talitos.h`	+124 ~~-58~~	0 replies
373/480	crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function`drivers/crypto/talitos.c`	+22 ~~-17~~	0 replies
374/480	crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function`drivers/crypto/talitos.c`	+41 ~~-34~~	0 replies
375/480	crypto: talitos - move code in current_desc_hdr() into a standalone function`drivers/crypto/talitos.c`	+19 ~~-16~~	0 replies
376/480	crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor`drivers/crypto/talitos.c`	+6 ~~-95~~	0 replies
377/480	crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue`drivers/crypto/talitos.c` `drivers/crypto/talitos.h`	+115 ~~-63~~	0 replies
378/480	crypto: talitos/hash - drop workqueue mechanism for SEC1`drivers/crypto/talitos.c`	+7 ~~-73~~	0 replies
379/480	crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request`drivers/crypto/talitos.c`	+13 ~~-16~~	0 replies
380/480	crypto: talitos/hash - remove useless wrapper`drivers/crypto/talitos.c`	+1 -6	0 replies
381/480	crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation`drivers/crypto/talitos.c`	+40 -9	0 replies
382/480	arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()`arch/arm64/kernel/entry-fpsimd.S`	+4 -4	0 replies
383/480	spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()`drivers/spi/spi-fsl-lpspi.c`	+9 -9	0 replies
384/480	spi: fsl-lpspi: terminate the RX channel on TX prepare failure path`drivers/spi/spi-fsl-lpspi.c`	+1 -1	0 replies
385/480	x86/mm: Fix freeing of PMD-sized vmemmap pages`arch/x86/mm/init_64.c`	+26 ~~-14~~	0 replies
386/480	EDAC/i10nm: Dont fail probing if ADXL is missing`drivers/edac/i10nm_base.c`	+11 -3	0 replies
387/480	watchdog: apple: Add "apple,t8103-wdt" compatible`drivers/watchdog/apple_wdt.c`	+1 -0	0 replies
388/480	regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()`drivers/regulator/scmi-regulator.c`	+3 -1	0 replies
389/480	i2c: core: fix hang on adapter registration failure`drivers/i2c/i2c-core-base.c`	+29 ~~-20~~	0 replies
390/480	perf/aux: Fix page UAF in map_range()`kernel/events/core.c`	+2 -0	0 replies
391/480	tracing: Prevent out-of-bounds read in glob matching`include/linux/glob.h` `kernel/trace/trace_events_filter.c` `lib/glob.c`	+32 -6	0 replies
392/480	audit: fix potential integer overflow in audit_log_n_hex()`kernel/audit.c`	+9 -2	0 replies
393/480	NFSv4: include MAY_WRITE in open permission mask for O_TRUNC`fs/nfs/dir.c`	+2 -0	0 replies
394/480	rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow schedule`include/asm-generic/rqspinlock.h`	+11 -3	0 replies
395/480	module: decompress: check return value of module_extend_max_pages()`kernel/module/decompress.c`	+2 -0	0 replies
396/480	exfat: bound uniname advance in exfat_find_dir_entry()`fs/exfat/dir.c`	+8 -5	0 replies
397/480	NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()`drivers/ntb/hw/epf/ntb_hw_epf.c`	+4 -6	0 replies
398/480	riscv: mm: Define DIRECT_MAP_PHYSMEM_END`arch/riscv/include/asm/pgtable.h`	+10 -0	0 replies
399/480	riscv: mm: Unconditionally sfence.vma for spurious fault`arch/riscv/kernel/entry.S`	+5 -2	0 replies
400/480	mm: fix mmap errno value when MAP_DROPPABLE is not supported`mm/mmap.c`	+1 -1	0 replies
401/480	selftests: mm: fix and speedup "droppable" test`tools/testing/selftests/mm/droppable.c`	+26 ~~-20~~	0 replies
402/480	mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access`include/linux/page_ext.h`	+13 -6	0 replies
403/480	mm: do file ownership checks with the proper mount idmap`include/linux/fs.h` `mm/filemap.c` `mm/madvise.c` +1 more	+8 -5	0 replies
404/480	selftests/mm: pagemap_ioctl: use the correct page size for transact_test()`tools/testing/selftests/mm/pagemap_ioctl.c`	+6 -6	0 replies
405/480	crypto: loongson - Remove broken and unused loongson-rng`MAINTAINERS` `drivers/crypto/Kconfig` `drivers/crypto/Makefile` +3 more	+0 ~~-219~~	0 replies
406/480	iommu/vt-d: Avoid WARNING in sva unbind path`drivers/iommu/intel/iommu.h` `drivers/iommu/intel/svm.c`	+15 -8	0 replies
407/480	iommu/amd: Dont split flush for amd_iommu_domain_flush_all()`drivers/iommu/amd/iommu.c`	+2 -1	0 replies
408/480	iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read`drivers/iommu/iommufd/eventq.c`	+1 -1	0 replies
409/480	iommufd: Fix data_len byte-count vs element-count mismatch`drivers/iommu/iommufd/iommufd_private.h`	+1 -1	0 replies
410/480	iommufd: Set veventq_depth upper bound`drivers/iommu/iommufd/eventq.c`	+4 -1	0 replies
411/480	iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails`drivers/iommu/iommufd/eventq.c`	+1 -0	0 replies
412/480	iommufd: Reject invalid read count in iommufd_veventq_fops_read()`drivers/iommu/iommufd/eventq.c`	+6 -0	0 replies
413/480	iommufd: Reject invalid read count in iommufd_fault_fops_read()`drivers/iommu/iommufd/eventq.c`	+3 -0	0 replies
414/480	iommufd: Break the loop on failure in iommufd_fault_fops_read()`drivers/iommu/iommufd/eventq.c`	+2 -0	0 replies
415/480	iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read()`drivers/iommu/iommufd/eventq.c`	+5 -2	0 replies
416/480	iommufd: Set upper bounds on cache invalidation entry_num and entry_len`drivers/iommu/iommufd/hw_pagetable.c`	+10 -1	0 replies
417/480	audit: fix removal of dangling executable rules`kernel/audit_fsnotify.c`	+0 -4	0 replies
418/480	landlock: Set audit_net.sk for socket access checks`security/landlock/net.c` `tools/testing/selftests/landlock/net_test.c`	+63 -0	0 replies
419/480	selftests/landlock: Filter dealloc records in audit_count_records()`tools/testing/selftests/landlock/audit.h` `tools/testing/selftests/landlock/audit_test.c` `tools/testing/selftests/landlock/ptrace_test.c` +1 more	+30 ~~-13~~	0 replies
420/480	KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB`arch/arm64/kvm/nested.c`	+15 ~~-21~~	0 replies
421/480	LoongArch: KVM: Add missing slots_lock for device register/unregister`arch/loongarch/kvm/intc/eiointc.c` `arch/loongarch/kvm/intc/ipi.c` `arch/loongarch/kvm/intc/pch_pic.c`	+10 -0	0 replies
422/480	KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU`arch/arm64/kvm/hyp/nvhe/hyp-main.c`	+3 -0	0 replies
423/480	KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM actually supports`arch/x86/kvm/svm/avic.c`	+11 -2	0 replies
424/480	KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that are accelerated`arch/x86/kvm/svm/avic.c`	+4 ~~-36~~	0 replies
425/480	KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs`arch/x86/kvm/vmx/vmx.c`	+18 ~~-17~~	0 replies
426/480	KVM: VMX: Handle bad values on proxied writes to LBR MSRs`arch/x86/kvm/vmx/pmu_intel.c`	+4 -2	0 replies
427/480	KVM: x86: Ensure vendors exit handler runs before fastpath userspace exits`arch/x86/kvm/svm/svm.c` `arch/x86/kvm/vmx/vmx.c` `arch/x86/kvm/x86.c`	+6 -3	0 replies
428/480	KVM: x86: Add dedicated API for getting mask of accelerated x2APIC MSRs`arch/x86/kvm/lapic.c` `arch/x86/kvm/lapic.h` `arch/x86/kvm/vmx/vmx.c`	+21 -5	0 replies
429/480	KVM: arm64: Dont leak PFN when kvm_translate_vncr() races MMU notifier`arch/arm64/kvm/nested.c`	+3 -1	0 replies
430/480	udmabuf: fix DMA direction mismatch in release_udmabuf()`drivers/dma-buf/udmabuf.c`	+4 -1	0 replies
431/480	dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning`drivers/dma-buf/udmabuf.c`	+2 -2	0 replies
432/480	fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()`drivers/fpga/dfl-afu-main.c`	+3 -0	0 replies
433/480	i2c: core: fix adapter probe deferral loop`drivers/i2c/i2c-core-base.c`	+4 -4	0 replies
434/480	i2c: core: fix irq domain leak on adapter registration failure`drivers/i2c/i2c-core-base.c`	+3 -1	0 replies
435/480	i2c: core: fix NULL-deref on adapter registration failure`drivers/i2c/i2c-core-base.c`	+5 -4	0 replies
436/480	i2c: core: fix adapter debugfs creation`drivers/i2c/i2c-core-base.c`	+10 -6	0 replies
437/480	i2c: core: fix adapter deregistration race`drivers/i2c/i2c-core-base.c`	+7 -2	0 replies
438/480	i2c: mpc: Fix timeout calculations`drivers/i2c/busses/i2c-mpc.c`	+1 -1	0 replies
439/480	i2c: davinci: Unregister cpufreq notifier on probe failure`drivers/i2c/busses/i2c-davinci.c`	+3 -1	0 replies
440/480	i2c: stm32f7: truncate clock period instead of rounding it`drivers/i2c/busses/i2c-stm32f7.c`	+7 -2	0 replies
441/480	i2c: imx-lpi2c: mark I2C adapter when hardware is powered down`drivers/i2c/busses/i2c-imx-lpi2c.c`	+14 -1	0 replies
442/480	i2c: i801: fix hardware state machine corruption in error path`drivers/i2c/busses/i2c-i801.c`	+1 -1	0 replies
443/480	Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure`drivers/input/rmi4/rmi_bus.c`	+3 -1	0 replies
444/480	Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count`drivers/input/rmi4/rmi_f3a.c`	+1 -1	0 replies
445/480	Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count`drivers/input/rmi4/rmi_f30.c`	+1 -1	0 replies
446/480	Input: elan_i2c - prevent division by zero and arithmetic underflow`drivers/input/mouse/elan_i2c_core.c`	+30 -6	0 replies
447/480	Input: goodix - clamp the device-reported contact count`drivers/input/touchscreen/goodix.c`	+2 -1	0 replies
448/480	Input: iforce - bound the device-reported force-feedback effect index`drivers/input/joystick/iforce/iforce-packets.c`	+11 -7	0 replies
449/480	Input: mms114 - fix touch indexing for MMS134S and MMS136`drivers/input/touchscreen/mms114.c`	+12 -6	0 replies
450/480	Input: ads7846 - dont use scratch for tx_buf when clearing register`drivers/input/touchscreen/ads7846.c`	+2 -3	0 replies
451/480	Input: touchwin - reset the packet index on every complete packet`drivers/input/touchscreen/touchwin.c`	+9 -6	0 replies
452/480	Input: mms114 - reject an oversized device packet size`drivers/input/touchscreen/mms114.c`	+6 -0	0 replies
453/480	Input: gscps2 - advance receive buffer write index`drivers/input/serio/gscps2.c`	+1 -0	0 replies
454/480	Input: maplemouse - fix NULL pointer dereference in open()`drivers/input/mouse/maplemouse.c`	+3 -2	0 replies
455/480	Input: mms114 - fix multi-touch slot corruption`drivers/input/touchscreen/mms114.c`	+1 -1	0 replies
456/480	Input: maple_keyb - set driver data before registering input device`drivers/input/keyboard/maple_keyb.c`	+2 -2	0 replies
457/480	Input: maplemouse - set driver data before registering input device`drivers/input/mouse/maplemouse.c`	+3 -1	0 replies
458/480	Input: maplecontrol - set driver data before registering input device`drivers/input/joystick/maplecontrol.c`	+2 -1	0 replies
459/480	RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg`drivers/infiniband/ulp/rtrs/rtrs-srv.c`	+3 -2	0 replies
460/480	RDMA/core: Fix broadcast address falsely detected as local`drivers/infiniband/core/addr.c`	+1 -1	0 replies
461/480	RDMA/siw: bound Read Response placement to the RREAD length`drivers/infiniband/sw/siw/siw_qp_rx.c`	+9 -0	0 replies
462/480	fuse: back uncached readdir buffers with pages`fs/fuse/readdir.c`	+67 ~~-18~~	0 replies
463/480	fuse: avoid 32-bit prune notification count wrap`fs/fuse/dev.c` `fs/fuse/notify.c`	+435 -1	0 replies
464/480	fuse: fix device node leak in cuse_process_init_reply()`fs/fuse/cuse.c`	+3 -1	0 replies
465/480	fuse: re-lock request before returning from fuse_ref_folio()`fs/fuse/dev.c`	+1 -1	0 replies
466/480	fuse: fix io-uring background queue dispatch on request completion`fs/fuse/dev.c` `fs/fuse/dev_uring.c` `fs/fuse/fuse_dev_i.h`	+26 ~~-17~~	0 replies
467/480	fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req`fs/fuse/dev.c`	+9 -0	0 replies
468/480	fuse-uring: fix EFAULT clobber in fuse_uring_commit`fs/fuse/dev_uring.c`	+3 -6	0 replies
469/480	fuse-uring: fix data races on ring->ready`fs/fuse/dev_uring.c` `fs/fuse/dev_uring_i.h`	+5 -3	0 replies
470/480	fuse-uring: fix moving cancelled entry to ent_in_userspace list`fs/fuse/dev_uring.c` `fs/fuse/dev_uring_i.h`	+7 -5	0 replies
471/480	fuse-uring: end fuse_req on io-uring cancel task work`fs/fuse/dev_uring.c`	+12 -2	0 replies
472/480	fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues`fs/fuse/dev_uring.c`	+2 -0	0 replies
473/480	fuse-uring: Avoid queue->stopped races and set/read that value under lock`fs/fuse/dev_uring.c`	+9 -5	0 replies
474/480	fuse-uring: make a fuse_req on SQE commit only findable after memcpy`fs/fuse/dev_uring.c`	+19 ~~-14~~	0 replies
475/480	fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref`fs/fuse/dev_uring.c`	+12 -2	0 replies
476/480	sched/fair: Only update stats for allowed CPUs when looking for dst group`kernel/sched/fair.c`	+1 -1	0 replies
477/480	usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks`drivers/usb/gadget/function/f_fs.c`	+1 -1	0 replies
478/480	timekeeping: Register default clocksource before taking tk_core.lock`kernel/time/timekeeping.c`	+4 -3	0 replies
479/480	Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev`net/bluetooth/6lowpan.c`	+3 ~~-15~~	0 replies
480/480	Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block"`fs/f2fs/gc.c`	+1 -5	0 replies

Reviews trailers per patch

237 of 480 patches have a Reviewed-by or Acked-by.

Patch	Puranjay Mohan	Chao Yu	Thomas Zimmermann	Jamal Hadi Salim	Victor Nogueira	Jeff Layton	Zi Yan	Lance Yang	David Hildenbrand (Arm)	Matthew Wilcox (Oracle)	Vlastimil Babka	Ricardo Ribalda	Richard Fitzgerald	Harry Yoo (Oracle)	Ian Rogers	Kai Huang	Yosry Ahmed	Stefano Garzarella	Jarred White	Easwar Hariharan	Dave Jiang	Ilpo Järvinen	Yuanzhen Gan	Zhongqiu Han	Gary Guo	Alexandre Courbot	Viresh Kumar	Andreas Hindborg	Alice Ryhl	Lorenzo Stoakes	Sakari Ailus	Rafael J. Wysocki (Intel)	Andy Shevchenko	Vladimir Zapolskiy	Joshua Crofts	Maxwell Doose	Angelo Dureghello	Nuno Sá	Lorenzo Bianconi	David Heidelberg	David Lechner	Crt Mori	Stefan Binding	Kevin Tian	Jason Gunthorpe	Paul Menzel	Carlos Llamas	Lain Fearyncess Yang	Ayden Meng	Mingcong Bai	Huacai Chen	Subhransu S. Prusty	Jozsef Kadlecsik	Yuka	Shuangpeng Bai	Johan Hovold	Thinh Nguyen	Hans de Goede	Alexander Aring	Tung Nguyen	Alok Tiwari	Dan Carpenter	Luka Gejak	Namjae Jeon	Sabrina Dubroca	Ricardo Robaina	Frank Li	James Clark	Sebastian Andrzej Siewior	Dmitry Safonov	Eric Dumazet	Kairui Song	Hao Peng	albinwyang	Baoquan He	Chris Li	Mina Almasry	Sean Wang	Neeraj Sanjay Kale	Samiullah Khawaja	Pavan Chebbi	Kuniyuki Iwashima	Ido Schimmel	Benson Leung	SeongJae Park	Qi Zheng	Zenghui Yu (Huawei)	Nhat Pham	Muchun Song	Roman Gushchin	Jan Kara	Tejun Heo	Dapeng Mi	Frederic Weisbecker	Teddy Astie	Jon Hunter	Christian Borntraeger	Ignat Korchagin	Alistair Francis	Hao Li	Henrique Carvalho	Dmitry Torokhov	Lee Jones	Oliver Roundtree	Jiri Kosina	[email protected]	Viacheslav Dubeyko	[email protected]	Nicolas Dufresne	Darrick J. Wong	Christoph Hellwig	Alan Stern	Alex Henrie	Greg Kroah-Hartman	Shuah Khan	Igor Kotrasinski	Heikki Krogerus	RD Babiera	Emil Tsalapatis	Toke Høiland-Jørgensen	Jameson Thies	Andrei Kuchynski	Sungwoo Kim	Dave Tian	Weidong Zhu	Yonghong Song	Jiayuan Chen	Xu Kuohai	Eduard Zingerman	Andrew Lunn	Peter Chen	Allison Henderson	Ard Biesheuvel	Md Haris Iqbal	Benjamin Marzinski	Chaitanya Kulkarni	Hannes Reinecke	Filipe Manana	Daniel Borkmann	Philippe De Muyter	Demi Marie Obenour	Christian Lamparter	Lukas Wunner	Dave Hansen	Akhil R	Tom Lendacky	Giovanni Cabiddu	Damian Muszynski	Mike Rapoport (Microsoft)	Qiuxu Zhuo	Neal Gompa	Masami Hiramatsu (Google)	Richard Guy Briggs	Arnd Bergmann	Waiman Long	Kumar Kartikeya Dwivedi	Christophe Leroy (CS GROUP)	Han Gao	Vlastimil Babka (SUSE)	Pedro Falcato	Sarthak Sharma	Dev Jain	Jason A. Donenfeld	Christian Brauner (Amutable)	Wei Wang	Suravee Suthikulpanit	Vasant Hegde	Nicolin Chen	Lu Baolu	Pranjal Shrivastava	Ahsan Atta	Laurent M Coquerel	Hou Wenlong	Nikunj A. Dadhania	Naveen N Rao (AMD)	Vivek Kasireddy	Xu Yilun	Chris Packham	Bartosz Golaszewski	Alain Volmat	Pierre-Yves MORDRET	Mukesh Savaliya	Bryam Vargas	Günther Noack	Florian Fuchs	Vlad Dumitrescu	Parav Pandit	Oliver Upton	Bibo Mao	Fuad Tabba	Joanne Koong	Breno Leitao	Bernd Schubert	Heechan Kang	Brett A C Sheffield	Florian Fainelli	Peter Schneider	Miguel Ojeda	Ron Economos	Wentao Guan	Pavel Machek (CIP)
Series																																																																																																																			T-b																																																																																T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/480	R-b
2/480
3/480
4/480						R-b
5/480																									R-b
6/480																									R-b				R-b
7/480																														R-b
8/480																															R-b	R-b	R-b
9/480		R-b
10/480
11/480		R-b
12/480		R-b
13/480
14/480		R-b
15/480
16/480
17/480		R-b
18/480
19/480
20/480			R-b
21/480				A-b	R-b
22/480						R-b
23/480						R-b
24/480							T-b	T-b	A-b	R-b
25/480											A-b
26/480
27/480												Reported-and-tested-by	Reported-and-tested-by
28/480														A-b
29/480															R-b
30/480																R-b	R-b
31/480
32/480																		T-b
33/480																			T-b R-b	R-b
34/480																					R-b
35/480																						R-b
36/480																							T-b
37/480																								R-b	R-b	R-b	A-b
38/480																												R-b
39/480
40/480
41/480
42/480
43/480																									R-b
44/480
45/480
46/480
47/480
48/480
49/480
50/480																																	R-b					R-b
51/480
52/480																																	T-b R-b
53/480
54/480
55/480																																		R-b
56/480																																		R-b
57/480
58/480																																	R-b		R-b
59/480
60/480
61/480																																	R-b
62/480																																				R-b
63/480																																					R-b
64/480																																						R-b
65/480																																	R-b
66/480
67/480
68/480
69/480
70/480
71/480																																							A-b
72/480																																	R-b							R-b
73/480																																	R-b							R-b
74/480																																	R-b
75/480
76/480																																	R-b							R-b
77/480
78/480
79/480
80/480
81/480
82/480																																			R-b
83/480
84/480
85/480
86/480																																									R-b
87/480																																	R-b									A-b
88/480
89/480
90/480
91/480
92/480
93/480
94/480
95/480
96/480
97/480
98/480
99/480
100/480
101/480
102/480
103/480																																											R-b
104/480
105/480
106/480
107/480
108/480
109/480
110/480
111/480
112/480
113/480
114/480
115/480
116/480
117/480																																												R-b
118/480																																												R-b
119/480																																												R-b
120/480																																												R-b	R-b
121/480																																												R-b
122/480
123/480																																														R-b
124/480
125/480
126/480																													R-b
127/480																													R-b
128/480																													R-b																		A-b
129/480																													R-b
130/480																													R-b																		A-b
131/480
132/480
133/480
134/480
135/480																																																T-b	T-b	T-b	R-b
136/480																																																				R-b
137/480																																																				R-b
138/480																																																													T-b
139/480
140/480																																																																			R-b
141/480
142/480
143/480
144/480																																																																						R-b	R-b
145/480
146/480																																																					A-b
147/480																																																						T-b
148/480
149/480
150/480																																																							T-b	R-b
151/480																																																									A-b
152/480																															A-b																											R-b
153/480																																																											A-b
154/480																																																												R-b
155/480
156/480
157/480
158/480
159/480
160/480																																	R-b
161/480																																																														R-b
162/480																																																															R-b
163/480
164/480																																																															R-b
165/480																																																															R-b
166/480																																																															R-b
167/480
168/480																																																															R-b
169/480
170/480
171/480																																																																A-b
172/480																																																																	R-b
173/480																																																																		R-b
174/480
175/480
176/480																																																																				R-b
177/480
178/480
179/480																					R-b
180/480																																																																					R-b
181/480																																	R-b																																				R-b
182/480
183/480
184/480
185/480																																																																																	R-b
186/480																																																																																		R-b	R-b
187/480																																																																							R-b
188/480																																																																																				R-b
189/480																																																																																					R-b	R-b	T-b	R-b	A-b	R-b
190/480																																																																																									A-b
191/480																																																																																									R-b
192/480
193/480																																																																								R-b	R-b	R-b	R-b	A-b
194/480
195/480																																																																													A-b
196/480
197/480
198/480
199/480
200/480																																																																														R-b
201/480
202/480																																																																															R-b
203/480
204/480
205/480
206/480
207/480
208/480
209/480																																												R-b																																				R-b
210/480
211/480
212/480
213/480
214/480
215/480
216/480
217/480																																																																A-b
218/480																																																																A-b
219/480
220/480
221/480
222/480																																																																A-b
223/480
224/480																																																																A-b
225/480																																																																A-b
226/480
227/480
228/480
229/480
230/480
231/480
232/480																																																																																																					A-b
233/480
234/480
235/480
236/480
237/480
238/480
239/480
240/480																																																																																											R-b	A-b
241/480
242/480																								R-b
243/480
244/480
245/480																																																																																													R-b
246/480
247/480
248/480																								R-b
249/480																								R-b
250/480																																																																																														R-b
251/480																																																																																															T-b
252/480																																																																																																R-b
253/480																																																																																																	A-b
254/480
255/480																																																																																																		R-b	R-b
256/480														R-b																																																																																						R-b
257/480																																																																																					R-b
258/480																																																																																					R-b
259/480																																																																																																						R-b
260/480																																																																																																							R-b
261/480																																																																																																						R-b
262/480																																																																																																								T-b
263/480																																																																																																						R-b
264/480																																																																																																						R-b
265/480
266/480
267/480
268/480																																																										R-b
269/480																																	R-b																																																																								A-b
270/480																																																																																																										T-b	R-b
271/480																																																																																																												T-b
272/480																																																																																																													R-b
273/480
274/480																																																																																																														R-b
275/480																																																																																																														R-b
276/480																																																																																																														R-b																						R-b
277/480																																																																																																															R-b
278/480																																																																																																														R-b
279/480																																																																																																														R-b
280/480																																																																																																																							R-b	R-b
281/480																																																																																																																														A-b	R-b	A-b
282/480																																																																																																																																	A-b
283/480																																																																																																																																		R-b
284/480
285/480																																																																																																																																			A-b
286/480
287/480
288/480																																																																																																																R-b
289/480
290/480																																																																																																																R-b
291/480
292/480
293/480
294/480
295/480
296/480
297/480
298/480																																																																																																																R-b
299/480
300/480																																																																																																																	R-b
301/480
302/480
303/480
304/480
305/480																																																																																																																		R-b
306/480																																																																																																																		R-b
307/480
308/480																																																																																																																R-b
309/480																																																																																																																			R-b
310/480																																																																																																																				R-b
311/480																																																																																																																					R-b
312/480
313/480																																																																																																																					R-b
314/480																																																																																																																					A-b	R-b
315/480																																																																																																																					R-b
316/480																																																																																																																					R-b				R-b	R-b
317/480																																																																																																																					R-b
318/480																																																																																																																					R-b
319/480																																						T-b R-b
320/480																																																																																																															R-b												A-b	A-b	A-b
321/480
322/480
323/480
324/480																																															A-b
325/480																																																																																																																																											A-b
326/480																																																																																																																																											A-b					A-b
327/480																																																																																																																																											A-b
328/480																																																																																																																																											A-b
329/480																																																																																																																																											A-b
330/480																																																																																																																																											A-b
331/480
332/480
333/480
334/480
335/480																																																																																																																																					R-b
336/480																																																																																																															R-b
337/480																																																																																																																																						R-b
338/480																																																																																																																																							R-b
339/480																																																																																																															R-b
340/480																																																																																																															R-b																									R-b
341/480																																																																																																																																									R-b
342/480																																																																																																																																										R-b
343/480																																																																																																																																										R-b
344/480																																																																																																																																												A-b
345/480
346/480																																																																																																																																													R-b
347/480
348/480
349/480
350/480																																																																																																																																														A-b
351/480																																																																																																																																															R-b
352/480
353/480
354/480																																																																																																																																																	R-b
355/480																																																			R-b
356/480																																																																																																																																																		R-b
357/480																																																																																																																																																		R-b
358/480																																																																																																																																																		R-b
359/480																																																																																																																																																		R-b
360/480
361/480
362/480
363/480																																	R-b																																																																																																																		R-b
364/480																																																																																																																																																			R-b	R-b
365/480																																																																																																																																																			R-b	R-b
366/480																																																																																																																																																			R-b	R-b
367/480																																																																																																																																																			R-b
368/480																																																																																																																																																			R-b
369/480																																																																																																																																																																											R-b	R-b T-b
370/480																																																																																																																																																			R-b	R-b
371/480
372/480
373/480
374/480
375/480
376/480
377/480
378/480
379/480
380/480
381/480
382/480
383/480
384/480
385/480								T-b																																																																																																																																													A-b
386/480																																																																																																																																																						R-b
387/480																																																																																																																																																							R-b
388/480
389/480
390/480
391/480																																																																																																																																																								A-b
392/480																																																																																																																																																									R-b
393/480
394/480																																																																																																																																																										A-b	A-b	A-b
395/480																																																																																																																																																													R-b
396/480
397/480																					R-b
398/480																																																																																																																																																														T-b
399/480
400/480									A-b																					R-b																																																																																																																																	A-b	R-b
401/480								T-b																						T-b R-b																																																							R-b																																																																												T-b	R-b	R-b
402/480							A-b		A-b
403/480									A-b																																																																																		R-b																																																																									R-b
404/480
405/480
406/480																																												R-b
407/480																																													R-b																																			R-b																																																																																					R-b	R-b	R-b
408/480																																												R-b																																																																																																																												R-b	R-b
409/480																																												R-b	R-b
410/480																																												R-b	R-b
411/480																																												R-b																																																																																																																														R-b
412/480																																												R-b																																																																																																																														R-b
413/480																																												R-b																																																																																																																														R-b
414/480																																												R-b																																																																																																																														R-b
415/480																																												R-b																																																																																																																														R-b
416/480																																																																																																																																																																									R-b
417/480																																																																																																																																																									A-b		A-b
418/480
419/480																																																																																																																																																																																								T-b
420/480																																																																																																																																																																																												R-b
421/480																																																																																																																																																																																													R-b
422/480																																																																																																																																																																																														R-b T-b
423/480																																																																																																																																																																															R-b
424/480																																																																																																																																																																															R-b
425/480																																																																																																																																																																													R-b
426/480
427/480																R-b																																																																																																																																																														R-b
428/480																																																																																																																																																																															R-b
429/480
430/480																																																																																																																																																																																R-b
431/480																																																																																																																																																																																A-b
432/480																																																																																																																																																																																	R-b
433/480
434/480
435/480
436/480
437/480
438/480																																																																																																																																																																																		R-b
439/480																																																																																																																																																																																			R-b
440/480																																																																																																																																																																																				A-b	R-b
441/480																																																																			R-b																																																																																																																			A-b
442/480
443/480
444/480
445/480
446/480
447/480																																																										R-b
448/480
449/480																																																																																																																																																																																							R-b
450/480
451/480
452/480
453/480
454/480
455/480
456/480
457/480																																																																																																																																																																																									T-b
458/480																																																																																																																																																																																									T-b
459/480																																																																																																																																						R-b
460/480																																																																																																																																																																																										R-b	R-b
461/480
462/480
463/480																																																																																																																																																																																															R-b
464/480
465/480
466/480																																																																																																																																																																																																	R-b
467/480
468/480																																																																																																																																																																																															R-b		R-b
469/480																																																																																																																																																																																															R-b		R-b
470/480																																																																																																																																																																																																	R-b	T-b
471/480																																																																																																																																																																																															R-b
472/480																																																																																																																																																																																															R-b
473/480																																																																																																																																																																																															R-b
474/480																																																																																																																																																																																															R-b
475/480
476/480
477/480
478/480																																																																																																																																																																																																R-b
479/480
480/480		R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 201 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 000/480] 6.18.39-rc1 review

This is the start of the stable review cycle for the 6.18.39 release. There are 480 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 18 Jul 2026 13:30:01 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.39-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.39-rc1

Zhaoyang Huang <[email protected]>
Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block"

Luiz Augusto von Dentz <[email protected]>

    Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev

Mikhail Gavrilov <[email protected]>
timekeeping: Register default clocksource before taking tk_core.lock

Neill Kapron <[email protected]>

    usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks

Adam Li <[email protected]>
sched/fair: Only update stats for allowed CPUs when looking for dst group

Joanne Koong <[email protected]>
fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref

Bernd Schubert <[email protected]>
fuse-uring: make a fuse_req on SQE commit only findable after memcpy

Bernd Schubert <[email protected]>

    fuse-uring: Avoid queue->stopped races and set/read that value under lock

Bernd Schubert <[email protected]>
fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues

Chris Mason <[email protected]>
fuse-uring: end fuse_req on io-uring cancel task work

Joanne Koong <[email protected]>
fuse-uring: fix moving cancelled entry to ent_in_userspace list

Chris Mason <[email protected]>

    fuse-uring: fix data races on ring->ready

Chris Mason <[email protected]>
fuse-uring: fix EFAULT clobber in fuse_uring_commit

Ji'an Zhou <[email protected]>
fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req

Joanne Koong <[email protected]>
fuse: fix io-uring background queue dispatch on request completion

Joanne Koong <[email protected]>
fuse: re-lock request before returning from fuse_ref_folio()

Alberto Ruiz <[email protected]>
fuse: fix device node leak in cuse_process_init_reply()

Samuel Moelius <[email protected]>
fuse: avoid 32-bit prune notification count wrap

Matthew R. Ochs <[email protected]>
fuse: back uncached readdir buffers with pages

Michael Bommarito <[email protected]>
RDMA/siw: bound Read Response placement to the RREAD length

Maher Sanalla <[email protected]>
RDMA/core: Fix broadcast address falsely detected as local

Zhenhao Wan <[email protected]>
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg

Dmitry Torokhov <[email protected]>
Input: maplecontrol - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: maplemouse - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: maple_keyb - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: mms114 - fix multi-touch slot corruption

Florian Fuchs <[email protected]>
Input: maplemouse - fix NULL pointer dereference in open()

Xu Rao <[email protected]>
Input: gscps2 - advance receive buffer write index

Bryam Vargas <[email protected]>
Input: mms114 - reject an oversized device packet size

Bryam Vargas <[email protected]>
Input: touchwin - reset the packet index on every complete packet

Kris Bahnsen <[email protected]>
Input: ads7846 - don't use scratch for tx_buf when clearing register

Dmitry Torokhov <[email protected]>
Input: mms114 - fix touch indexing for MMS134S and MMS136

Bryam Vargas <[email protected]>
Input: iforce - bound the device-reported force-feedback effect index

Bryam Vargas <[email protected]>
Input: goodix - clamp the device-reported contact count

Ranjan Kumar <[email protected]>
Input: elan_i2c - prevent division by zero and arithmetic underflow

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count

Haoxiang Li <[email protected]>
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure

Mingyu Wang <[email protected]>
i2c: i801: fix hardware state machine corruption in error path

Carlos Song <[email protected]>
i2c: imx-lpi2c: mark I2C adapter when hardware is powered down

Guillermo Rodríguez <[email protected]>
i2c: stm32f7: truncate clock period instead of rounding it

Haoxiang Li <[email protected]>
i2c: davinci: Unregister cpufreq notifier on probe failure

Andy Shevchenko <[email protected]>
i2c: mpc: Fix timeout calculations

Johan Hovold <[email protected]>
i2c: core: fix adapter deregistration race

Johan Hovold <[email protected]>
i2c: core: fix adapter debugfs creation

Johan Hovold <[email protected]>
i2c: core: fix NULL-deref on adapter registration failure

Johan Hovold <[email protected]>
i2c: core: fix irq domain leak on adapter registration failure

Johan Hovold <[email protected]>
i2c: core: fix adapter probe deferral loop

Sebastian Alba Vives <[email protected]>
fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()

Mikhail Gavrilov <[email protected]>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning

Mikhail Gavrilov <[email protected]>
udmabuf: fix DMA direction mismatch in release_udmabuf()

Oliver Upton <[email protected]>
KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier

Sean Christopherson <[email protected]>
KVM: x86: Add dedicated API for getting mask of accelerated x2APIC MSRs

Sean Christopherson <[email protected]>
KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits

Xuanqing Shi <[email protected]>
KVM: VMX: Handle bad values on proxied writes to LBR MSRs

Sean Christopherson <[email protected]>
KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs

Sean Christopherson <[email protected]>
KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that are accelerated

Sean Christopherson <[email protected]>
KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM actually supports

Hyunwoo Kim <[email protected]>
KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU

Zeng Chi <[email protected]>
LoongArch: KVM: Add missing slots_lock for device register/unregister

Marc Zyngier <[email protected]>
KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB

Mickaël Salaün <[email protected]>
selftests/landlock: Filter dealloc records in audit_count_records()

Mickaël Salaün <[email protected]>
landlock: Set audit_net.sk for socket access checks

Ricardo Robaina <[email protected]>
audit: fix removal of dangling executable rules

Nicolin Chen <[email protected]>
iommufd: Set upper bounds on cache invalidation entry_num and entry_len

Nicolin Chen <[email protected]>
iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read()

Nicolin Chen <[email protected]>
iommufd: Break the loop on failure in iommufd_fault_fops_read()

Nicolin Chen <[email protected]>
iommufd: Reject invalid read count in iommufd_fault_fops_read()

Nicolin Chen <[email protected]>
iommufd: Reject invalid read count in iommufd_veventq_fops_read()

Nicolin Chen <[email protected]>
iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails

Nicolin Chen <[email protected]>
iommufd: Set veventq_depth upper bound

Nicolin Chen <[email protected]>
iommufd: Fix data_len byte-count vs element-count mismatch

Kai Aizen <[email protected]>
iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read

Weinan Liu <[email protected]>
iommu/amd: Don't split flush for amd_iommu_domain_flush_all()

Lu Baolu <[email protected]>
iommu/vt-d: Avoid WARNING in sva unbind path

Eric Biggers <[email protected]>
crypto: loongson - Remove broken and unused loongson-rng

Zenghui Yu <[email protected]>
selftests/mm: pagemap_ioctl: use the correct page size for transact_test()

Pedro Falcato <[email protected]>
mm: do file ownership checks with the proper mount idmap

Ketan <[email protected]>
mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access

David Hildenbrand (Arm) <[email protected]>
selftests: mm: fix and speedup "droppable" test

Anthony Yznaga <[email protected]>
mm: fix mmap errno value when MAP_DROPPABLE is not supported

Vivian Wang <[email protected]>
riscv: mm: Unconditionally sfence.vma for spurious fault

Vivian Wang <[email protected]>
riscv: mm: Define DIRECT_MAP_PHYSMEM_END

Koichiro Den <[email protected]>
NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()

Bryam Vargas <[email protected]>
exfat: bound uniname advance in exfat_find_dir_entry()

Andrii Kuchmenko <[email protected]>
module: decompress: check return value of module_extend_max_pages()

Gabriele Monaco <[email protected]>
rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow schedule

Benjamin Coddington <[email protected]>
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

Ricardo Robaina <[email protected]>
audit: fix potential integer overflow in audit_log_n_hex()

Huihui Huang <[email protected]>
tracing: Prevent out-of-bounds read in glob matching

Lee Jia Jie <[email protected]>
perf/aux: Fix page UAF in map_range()

Johan Hovold <[email protected]>
i2c: core: fix hang on adapter registration failure

Wentao Liang <[email protected]>
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()

Janne Grunau <[email protected]>
watchdog: apple: Add "apple,t8103-wdt" compatible

Vasily Khoruzhick <[email protected]>
EDAC/i10nm: Don't fail probing if ADXL is missing

David Hildenbrand (Arm) <[email protected]>
x86/mm: Fix freeing of PMD-sized vmemmap pages

Carlos Song <[email protected]>
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path

Carlos Song <[email protected]>
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()

Mark Rutland <[email protected]>
arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()

Paul Louvel <[email protected]>
crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation

Paul Louvel <[email protected]>
crypto: talitos/hash - remove useless wrapper

Paul Louvel <[email protected]>
crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request

Paul Louvel <[email protected]>
crypto: talitos/hash - drop workqueue mechanism for SEC1

Paul Louvel <[email protected]>
crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue

Paul Louvel <[email protected]>
crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor

Paul Louvel <[email protected]>
crypto: talitos - move code in current_desc_hdr() into a standalone function

Paul Louvel <[email protected]>
crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function

Paul Louvel <[email protected]>
crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function

Paul Louvel <[email protected]>
crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1

Paul Louvel <[email protected]>
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header

Ahsan Atta <[email protected]>
crypto: qat - factor out AER reset helpers

Giovanni Cabiddu <[email protected]>
crypto: qat - validate RSA CRT component lengths

Ahsan Atta <[email protected]>
crypto: qat - skip restart for down devices

Ahsan Atta <[email protected]>
crypto: qat - protect service table iterations with service_lock

Ahsan Atta <[email protected]>
crypto: qat - notify fatal error before AER reset preparation

Ahsan Atta <[email protected]>
crypto: qat - keep VFs enabled during reset

Ahsan Atta <[email protected]>
crypto: qat - handle sysfs-triggered reset callbacks

Ahsan Atta <[email protected]>
crypto: qat - centralize bus master enable

Eric Biggers <[email protected]>
crypto: drbg - Fix the fips_enabled priority boost

Eric Biggers <[email protected]>
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels

Eric Biggers <[email protected]>
crypto: drbg - Fix returning success on failure in CTR_DRBG

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for SEV ioctls

Eric Biggers <[email protected]>
crypto: loongson - Select CRYPTO_RNG

Wentao Liang <[email protected]>
crypto: tegra - fix refcount leak in tegra_se_host1x_submit()

Ruijie Li <[email protected]>
crypto: pcrypt - restore callback for non-parallel fallback

Eric Biggers <[email protected]>
crypto: hisi-trng - Remove crypto_rng interface

Anastasia Tishchenko <[email protected]>
crypto: ecc - Fix carry overflow in vli multiplication

Eric Biggers <[email protected]>
crypto: crypto4xx - Remove insecure and unused rng_alg

Xiaonan Zhao <[email protected]>
crypto: chacha20poly1305 - validate poly1305 template argument

Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps again

Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps

Eric Biggers <[email protected]>
crypto: af_alg - Remove zero-copy support from skcipher and aead

Bryam Vargas <[email protected]>
isofs: bound Rock Ridge symlink components to the SL record

Bryam Vargas <[email protected]>
partitions: aix: bound the pp_count scan to the ppe array

Qu Wenruo <[email protected]>
btrfs: do not trim a device which is not writeable

Qu Wenruo <[email protected]>
btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC

Tianchu Chen <[email protected]>
nvmet-auth: validate reply message payload bounds against transfer length

Bryam Vargas <[email protected]>
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

Achkinazi, Igor <[email protected]>
nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks

Mikulas Patocka <[email protected]>
dm-ioctl: report an error if a device has no table

Wentao Liang <[email protected]>
block: partitions: fix of_node refcount leak in of_partition()

Wentao Liang <[email protected]>
nvme: target: rdma: fix ndev refcount leak on queue connect

Thorsten Blum <[email protected]>
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A

Wentao Liang <[email protected]>
hwrng: jh7110 - fix refcount leak in starfive_trng_read()

Bryam Vargas <[email protected]>
udf: validate sparing table length as an entry count, not a byte count

Bryam Vargas <[email protected]>
udf: validate VAT header length against the VAT inode size

Michael Bommarito <[email protected]>
udf: validate free block extents against the partition length

Pawan Gupta <[email protected]>
bpf: Prefer dirty packs for eBPF allocations

Pawan Gupta <[email protected]>
bpf: Prefer packs that won't trigger an IBPB flush on allocation

Pawan Gupta <[email protected]>
bpf: Skip redundant IBPB in pack allocator

Pawan Gupta <[email protected]>
bpf: Restrict JIT predictor flush to cBPF

Pawan Gupta <[email protected]>
x86/bugs: Enable IBPB flush on BPF JIT allocation

Pawan Gupta <[email protected]>
bpf: Support for hardening against JIT spraying

Alice Ryhl <[email protected]>
rust_binder: fix BINDER_GET_EXTENDED_ERROR

Alice Ryhl <[email protected]>
rust_binder: introduce TransactionInfo

Reinette Chatre <[email protected]>
x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled

Baolin Wang <[email protected]>
mm: shmem: fix potential livelock issue for shmem direct swapin

Chao Shi <[email protected]>
block: skip sync_blockdev() on surprise removal in bdev_mark_dead()

Paul Cercueil <[email protected]>
usb: gadget: f_fs: Fix DMA fence leak

Paul Menzel <[email protected]>
usb: typec: ucsi: cancel pending work on system suspend

Fan Wu <[email protected]>
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove

Madhu M <[email protected]>
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode

Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Invert DisplayPort role assignment

Badhri Jagan Sridharan <[email protected]>
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()

Andy Yan <[email protected]>
usb: typec: tcpm: Fix VDM type for Enter Mode commands

Shuangpeng Bai <[email protected]>
usb: typec: class: drop PD lookup reference

Myeonghun Pak <[email protected]>
usb: typec: anx7411: use devm_pm_runtime_enable()

Sam Day <[email protected]>
usbip: vudc: fix NULL deref in vep_dequeue()

Yichong Chen <[email protected]>
usbip: tools: support SuperSpeedPlus devices

Xu Rao <[email protected]>
USB: usb-storage: ene_ub6250: restore media-ready check

Johan Hovold <[email protected]>
USB: ulpi: fix memory leak on registration failure

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix write buffer corruption

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix hard lockup on disconnect

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix broken rx after throttle

Fabio Porcedda <[email protected]>
USB: serial: option: add Telit Cinterion FE990D50 compositions

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix information leak

Haoxiang Li <[email protected]>
usb: mtu3: unmap request DMA on queue failure

Myeonghun Pak <[email protected]>
USB: misc: uss720: unregister parport on probe failure

HE WEI (ギカク) <[email protected]>
usb: misc: usbio: bound bulk IN response length to the received transfer

Xu Rao <[email protected]>
USB: storage: include US_FL_NO_SAME in quirks mask

Myeonghun Pak <[email protected]>
usb: sl811-hcd: disable controller wakeup on remove

Johan Hovold <[email protected]>
USB: legousbtower: fix use-after-free on disconnect race

Erich E. Hoover <[email protected]>
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD

Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect

Johan Hovold <[email protected]>
USB: ldusb: fix use-after-free on disconnect race

Johan Hovold <[email protected]>
USB: idmouse: fix use-after-free on disconnect race

Xu Rao <[email protected]>
usb: gadget: f_printer: take kref only for successful open

Jimmy Hu <[email protected]>
usb: gadget: udc: Fix use-after-free in gadget_match_driver

Maoyi Xie <[email protected]>
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler

Dawei Feng <[email protected]>
usb: free iso schedules on failed submit

WenTao Liang <[email protected]>
usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()

Rodrigo Lugathe da Conceição Alves <[email protected]>
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub

Haoxiang Li <[email protected]>
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()

Jared Baldridge <[email protected]>
usb: cdc_acm: Add quirk for Uniden BC125AT scanner

Maoyi Xie <[email protected]>
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()

Paul Moses <[email protected]>
bpf: Validate BTF repeated field counts before expansion

Dawei Feng <[email protected]>
bpf: Restore sysctl new-value from 1 to 0

Zhao Zhang <[email protected]>
bpf: Reject fragmented frames in devmap

Dawei Feng <[email protected]>
xfs: fix memory leak in xfs_dqinode_metadir_create()

Yingjie Gao <[email protected]>
xfs: fix exchmaps reservation limit check

Darrick J. Wong <[email protected]>
xfs: fix pointer arithmetic error on 32-bit systems

Alexey Nepomnyashih <[email protected]>
xfs: fix unreachable BIGTIME check in dquot flush validation

Yingjie Gao <[email protected]>
xfs: release dquot buffer after dqflush failure

Yousef Alhouseen <[email protected]>
xfs: use null daddr for unset first bad log block

Andy Shevchenko <[email protected]>
serial: 8250_mid: Disable DMA for selected platforms

Louis-Alexis Eyraud <[email protected]>
media: mtk-jpeg: cancel workqueue on release for supported platforms only

Deepanshu Kartikey <[email protected]>
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers

Tristan Madani <[email protected]>
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read

Srinivas Pandruvada <[email protected]>
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads

Maoyi Xie <[email protected]>
HID: lg-g15: cancel pending work on remove to fix a use-after-free

Manish Khadka <[email protected]>
HID: appleir: fix UAF on pending key_up_timer in remove()

Trung Nguyen <[email protected]>
HID: multitouch: fix out-of-bounds bit access on mt_io_flags

Manish Khadka <[email protected]>
HID: letsketch: fix UAF on inrange_timer at driver unbind

Jinmo Yang <[email protected]>
HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()

Jinmo Yang <[email protected]>
HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert

Oleg Makarenko <[email protected]>
HID: pidff: Use correct effect type in effect update

Myeonghun Pak <[email protected]>
HID: wacom: stop hardware after post-start probe failures

Carlos Llamas <[email protected]>
HID: uhid: convert to hid_safe_input_report()

Tianchu Chen <[email protected]>
HID: hid-goodix-spi: validate report size to prevent stack buffer overflow

Yichong Chen <[email protected]>
tools/mm/slabinfo: fix total_objects attribute name

Xuewen Wang <[email protected]>
tools/mm/slabinfo: Fix trace disable logic inversion

Vlastimil Babka (SUSE) <[email protected]>
mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

Lukas Wunner <[email protected]>
X.509: Fix validation of ASN.1 certificate header

Robin Murphy <[email protected]>
perf/arm-cmn: Fix DVM node events

Heiko Carstens <[email protected]>
s390: Revert support for DCACHE_WORD_ACCESS

Kartik Rajput <[email protected]>
clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances

Thomas Gleixner <[email protected]>
time/jiffies: Register jiffies clocksource before usage

WenTao Liang <[email protected]>
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

Yuho Choi <[email protected]>
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation

Tianxiang Chen <[email protected]>
cpufreq: Fix hotplug-suspend race during reboot

Steven Rostedt <[email protected]>
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT

Fushuai Wang <[email protected]>

    cpufreq: intel_pstate: Sync policy->cur during CPU offline

Zide Chen <[email protected]>
perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()

John Hubbard <[email protected]>
libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()

Guangshuo Li <[email protected]>
firmware_loader: fix device reference leak in firmware_upload_register()

Guangshuo Li <[email protected]>
cpufreq: qcom-cpufreq-hw: Fix possible double free

Abdun Nihaal <[email protected]>
OPP: of: Fix potential memory leak in opp_parse_supplies()

Baokun Li <[email protected]>
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()

Norbert Manthey <[email protected]>
smb: client: mask server-provided mode to 07777 in modefromsid

Xu Rao <[email protected]>
smb: client: fix atime clamp check in read completion

Zihan Xi <[email protected]>
smb: client: harden POSIX SID length parsing

Zihan Xi <[email protected]>
smb: client: use unaligned reads in parse_posix_ctxt()

Haoxiang Li <[email protected]>
smb: client: Fix next buffer leak in receive_encrypted_standard()

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_close() replay

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_open() replay

Zhao Zhang <[email protected]>
smb: client: fix double-free in SMB2_flush() replay

Henrique Carvalho <[email protected]>
smb: client: fix change notify replay double-free

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_ioctl() replay

Henrique Carvalho <[email protected]>
smb: client: fix query_info() replay double-free

Henrique Carvalho <[email protected]>
smb: client: fix query directory replay double-free

Namjae Jeon <[email protected]>
ksmbd: use opener credentials for ADS I/O

Namjae Jeon <[email protected]>
ksmbd: use opener credentials for delete-on-close

Gil Portnoy <[email protected]>
ksmbd: add per-handle permission check to FILE_LINK_INFORMATION

Gil Portnoy <[email protected]>
ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION

Namjae Jeon <[email protected]>
ksmbd: run set info with opener credentials

Gil Portnoy <[email protected]>
ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY

Namjae Jeon <[email protected]>
ksmbd: require source read access for duplicate extents

Davide Ornaghi <[email protected]>
ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation

Namjae Jeon <[email protected]>
ksmbd: serialize QUERY_DIRECTORY requests per file

Gil Portnoy <[email protected]>
ksmbd: add a permission check for FSCTL_SET_ZERO_DATA

Gil Portnoy <[email protected]>
ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE

Dan Carpenter <[email protected]>
smb/client: Fix error code in smb2_aead_req_alloc()

Michael Bommarito <[email protected]>
smb: client: resolve SWN tcon from live registrations

Junrui Luo <[email protected]>
coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()

Deepanshu Kartikey <[email protected]>
fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()

Konstantin Komarov <[email protected]>
fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()

Konstantin Komarov <[email protected]>
fs/ntfs3: fsync files by syncing parent inodes

Konstantin Komarov <[email protected]>
fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr

Lu Baolu <[email protected]>
iommu/vt-d: Fix race condition during PASID entry replacement

Muhammad Bilal <[email protected]>
Bluetooth: L2CAP: validate option length before reading conf opt value

Runyu Xiao <[email protected]>

    Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock

Muhammad Bilal <[email protected]>
Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()

Pauli Virtanen <[email protected]>
Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled

Siwei Zhang <[email protected]>
Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()

Yousef Alhouseen <[email protected]>
Bluetooth: fix UAF in bt_accept_dequeue()

Maoyi Xie <[email protected]>
Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()

Yousef Alhouseen <[email protected]>
Bluetooth: bnep: pin L2CAP connection during netdev registration

Sergey Senozhatsky <[email protected]>
Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()

Adrian Bente <[email protected]>
netfilter: flowtable: fix offloaded ct timeout never being extended

Xiang Mei <[email protected]>
netfilter: ebtables: terminate table name before find_table_lock()

Florian Westphal <[email protected]>
netfilter: ebtables: module names must be null-terminated

Florian Westphal <[email protected]>
netfilter: ebtables: zero chainstack array

Florian Westphal <[email protected]>
netfilter: handle unreadable frags

Pratham Gupta <[email protected]>
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump

Zijiang Huang <[email protected]>
mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup

Jose Fernandez (Anthropic) <[email protected]>
mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host

Qi Zheng <[email protected]>
mm: shrinker: fix NULL pointer dereference in debugfs

Qi Zheng <[email protected]>
mm: shrinker: fix shrinker_info teardown race with expansion

Shakeel Butt <[email protected]>
mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()

Andrei Kuchynski <[email protected]>
mfd: cros_ec: Delay dev_set_drvdata() until probe success

Wyatt Feng <[email protected]>
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Yuyang Huang <[email protected]>
ipv4: igmp: remove multicast group from hash table on device destruction

Breno Leitao <[email protected]>
netpoll: fix a use-after-free on shutdown path

Michael Wigham <[email protected]>
io_uring/rw: preserve partial result for iopoll

Runyu Xiao <[email protected]>
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item

Vasileios Almpanis <[email protected]>
io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE

Runyu Xiao <[email protected]>
gpio: sch: use raw_spinlock_t in the irq startup path

Runyu Xiao <[email protected]>
gpio: eic-sprd: use raw_spinlock_t in the irq startup path

Koichiro Den <[email protected]>
NTB: epf: Avoid calling pci_irq_vector() from hardirq context

Yunpeng Tian <[email protected]>
fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns

Thomas Gleixner <[email protected]>
debugobjects: Plug race against a concurrent OOM disable

Runyu Xiao <[email protected]>
coresight: etb10: restore atomic_t for shared reading state

Samuel Page <[email protected]>
Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete

Marco Elver <[email protected]>
Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref

Chi Wang <[email protected]>
audit: Fix data races of skb_queue_len() readers on audit_queue

Zijing Yin <[email protected]>
net: af_key: initialize alg_key_len for IPComp states

Gil Portnoy <[email protected]>
ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL

Michael Bommarito <[email protected]>
crypto: krb5 - filter out async aead implementations at alloc

Dawei Feng <[email protected]>
crypto: amlogic - avoid double cleanup in meson_crypto_probe()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB write in HT_caps_handler()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()

Alexandru Hossu <[email protected]>
staging: media: ipu7: fix double-free and use-after-free in error paths

Arnd Bergmann <[email protected]>
staging: media: atomisp: reduce load_primary_binaries() stack usage

Ricardo Ribalda <[email protected]>
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe

Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in tsi148 bridge

Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in fake bridge

Shoichiro Miyamoto <[email protected]>
smb: client: restrict implied bcc[0] exemption to responses without data area

Michael Tautschnig <[email protected]>
staging: vme_user: bound slave read/write to the kern_buf size

Samuel Page <[email protected]>
tipc: fix out-of-bounds read in broadcast Gap ACK blocks

Yizhou Zhao <[email protected]>
6lowpan: fix NHC entry use-after-free on error path

Cen Zhang <[email protected]>
usb: misc: usbio: fix disconnect UAF in client teardown

Runyu Xiao <[email protected]>
usb: dwc3: run gadget disconnect from sleepable suspend context

Alan Stern <[email protected]>
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()

Michael Bommarito <[email protected]>
hwrng: virtio: clamp device-reported used.len at copy_data()

Johan Hovold <[email protected]>
virtio-mmio: fix device release warning on module unload

Ammar Faizi <[email protected]>
virtio_pci: fix vq info pointer lookup via wrong index

Xiang Mei <[email protected]>
netfilter: ipset: fix race between dump and ip_set_list resize

SeongJae Park <[email protected]>
mm/damon/ops-common: handle extreme intervals in damon_hot_score()

Michael Bommarito <[email protected]>
tcp: restore RCU grace period in tcp_ao_destroy_sock

Marco Nenciarini <[email protected]>
PCI/IOV: Skip VF Resizable BAR restore on read error

Yadu M G <[email protected]>
PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM hosts

Manivannan Sadhasivam <[email protected]>
PCI: mediatek: Fix IRQ domain leak when port fails to enable

Richard Zhu <[email protected]>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling

Ratheesh Kannoth <[email protected]>
PCI: host-common: Request bus reassignment when not probe-only

Maciej W. Rozycki <[email protected]>
PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining

Mahesh Vaidya <[email protected]>
PCI: altera: Fix resource leaks on probe failure

Mahesh Vaidya <[email protected]>
PCI: altera: Do not dispose parent IRQ mapping

Ziyao Li <[email protected]>
PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series

Myeonghun Pak <[email protected]>
usb: typec: tcpci_rt1711h: unregister TCPCI port with devres

Xu Rao <[email protected]>
xhci: sideband: fix ring sg table pages leak

胡连勤 <[email protected]>
usb: xhci: Fix sleep in atomic context in xhci_free_streams()

Alice Ryhl <[email protected]>
rust_binder: clear freeze listener on node removal

Keshav Verma <[email protected]>
rust_binder: synchronize Rust Binder stats with freeze commands

Keshav Verma <[email protected]>
rust_binder: reject context manager self-transaction

Hyunwoo Kim <[email protected]>
rust_binder: use a u64 stride when cleaning up the offsets array

Carlos Llamas <[email protected]>
binder: fix UAF in binder_free_transaction()

Carlos Llamas <[email protected]>
binder: fix UAF in binder_thread_release()

Johan Hovold <[email protected]>
Bluetooth: btusb: fix wakeup source leak on probe failure

Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on marvell probe failure

Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on registration failure

Zenm Chen <[email protected]>
Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB

Alex Williamson <[email protected]>
vfio: Remove device debugfs before releasing devres

Junrui Luo <[email protected]>
vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc

Alex Williamson <[email protected]>
vfio/pci: Fix racy bitfields and tighten struct layout

Alex Williamson <[email protected]>
vfio/pci: Release the VGA arbiter client on register_device() failure

Alex Williamson <[email protected]>
vfio/pci: Latch disable_idle_d3 per device

Raghavendra Rao Ananta <[email protected]>
vfio/pci: Use a private flag to prevent power state change with VFs

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Roll back quirk control caches on write errors

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()

Darvell Long <[email protected]>
ALSA: usb-audio: avoid kobject path lookup in DualSense match

WenTao Liang <[email protected]>
ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission

HyeongJun An <[email protected]>
ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()

Zhao Dongdong <[email protected]>
ALSA: ice1712: check snd_ctl_new1() return value

Aaron Erhardt <[email protected]>
ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW

Huacai Chen <[email protected]>
ALSA: hda/hdmi: Use 'AC_PINSENSE_ELDV' to detect pinsense for Loongson

Cameron Graham <[email protected]>
ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800 G5 Mini

Cássio Gabriel <[email protected]>
ALSA: hda/cs35l41: Fix firmware load work teardown

Zhao Dongdong <[email protected]>
ALSA: gus: check snd_ctl_new1() return value

Maoyi Xie <[email protected]>
ALSA: firewire: isight: bound the sample count to the packet payload

Geoffrey D. Bennett <[email protected]>
ALSA: FCP: Add Focusrite ISA C8X support

Zhao Dongdong <[email protected]>
ALSA: es1938: check snd_ctl_new1() return value

Cássio Gabriel <[email protected]>
ALSA: compress: Fix task creation error unwind

Zhao Dongdong <[email protected]>
ALSA: cmipci: check snd_ctl_new1() return value

Maoyi Xie <[email protected]>
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser

Zhao Dongdong <[email protected]>
ALSA: aoa: check snd_ctl_new1() return value

Zhao Dongdong <[email protected]>
ALSA: ymfpci: check snd_ctl_new1() return value

Cássio Gabriel <[email protected]>
ALSA: virtio: Validate control metadata from the device

Cássio Gabriel <[email protected]>
ALSA: virtio: Add missing 384 kHz PCM rate mapping

HyeongJun An <[email protected]>
ALSA: usx2y: us144mkii: fix work UAF on disconnect

Stepan Ionichev <[email protected]>
iio: temperature: tmp006: use devm_iio_trigger_register

Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start

Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check

Pengpeng Hou <[email protected]>
iio: temperature: Build mlx90635 with CONFIG_MLX90635

Stepan Ionichev <[email protected]>
iio: resolver: ad2s1210: notify trigger and clear state on fault read error

Stepan Ionichev <[email protected]>

    iio: proximity: vl53l0x: notify trigger and clear IRQ on error paths

Biren Pandya <[email protected]>
iio: pressure: mpl115: fix runtime PM leak on read error

David Carlier <[email protected]>
iio: pressure: bmp280: zero-init bmp580 trigger handler buffer

Andy Shevchenko <[email protected]>
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call

Javier Carrasco <[email protected]>
iio: light: veml6030: fix channel type when pushing events

Stepan Ionichev <[email protected]>
iio: light: tsl2591: return actual error from probe IRQ failure

Joshua Crofts <[email protected]>
iio: light: opt3001: fix missing state reset on timeout

Biren Pandya <[email protected]>
iio: light: gp2ap002: fix runtime PM leak on read error

Alexander A. Klimov <[email protected]>
iio: light: al3320a: read both ALS ADC registers again

Joshua Crofts <[email protected]>
iio: light: al3320a: add missing REGMAP_I2C to Kconfig

Alexander A. Klimov <[email protected]>
iio: light: al3010: read both ALS ADC registers again

Vidhu Sarwal <[email protected]>
iio: light: al3010: fix incorrect scale for the highest gain range

Joshua Crofts <[email protected]>
iio: light: al3010: add missing REGMAP_I2C to Kconfig

Joshua Crofts <[email protected]>
iio: light: al3000a: add missing REGMAP_I2C to Kconfig

Andreas Kempe <[email protected]>
iio: imu: st_lsm6dsx: deselect shub page before reading whoami

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamp clock period by using lower value

Runyu Xiao <[email protected]>
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ

Runyu Xiao <[email protected]>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ

Stepan Ionichev <[email protected]>
iio: gyro: bmg160: wait full startup time after mode change at probe

Stepan Ionichev <[email protected]>
iio: gyro: bmg160: bail out when bandwidth/filter is not in table

Lars-Peter Clausen <[email protected]>
iio: event: Fix event FIFO reset race

Dan Carpenter <[email protected]>
iio: dac: ad3552r-hs: fix uninitialized data ni ad3552r_hs_write_data_source()

Dan Carpenter <[email protected]>
iio: core: fix uninitialized data in debugfs

Herman van Hazendonk <[email protected]>
iio: common: st_sensors: honour channel endianness in read_axis_data

Maxwell Doose <[email protected]>
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug

Dan Carpenter <[email protected]>
iio: backend: fix uninitialized data in debugfs

Pengpeng Hou <[email protected]>
iio: adc: ti-ads124s08: Return reset GPIO lookup errors

Guangshuo Li <[email protected]>
iio: adc: ti-ads1119: fix PM reference leak in buffer preenable

Maxwell Doose <[email protected]>
iio: adc: spear: Initialize completion before requesting IRQ

Maxwell Doose <[email protected]>
iio: adc: lpc32xx: Initialize completion before requesting IRQ

Radu Sabau <[email protected]>
iio: adc: ad_sigma_delta: fix CS held asserted and state leaks

Radu Sabau <[email protected]>
iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices

Joshua Crofts <[email protected]>
iio: adc: ad7779: add missing 'select IIO_TRIGGERED_BUFFER' to Kconfig

Jonathan Cameron <[email protected]>

    iio: adc: ad7768-1: Select GPIOLIB

Samuel Moelius <[email protected]>
iio: adc: ad7380: select REGMAP

Biren Pandya <[email protected]>
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error

Bryam Vargas <[email protected]>
iio: accel: bmc150: clamp the device-reported FIFO frame count

Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check for header

Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check to response query

Eric Biggers <[email protected]>
fscrypt: Replace mk_users keyring with simple list

Eric Biggers <[email protected]>
fscrypt: Fix key setup in edge case with multiple data unit sizes

Alice Ryhl <[email protected]>
rust: kasan: KASAN+RUST requires clang

Taeyang Lee <[email protected]>
perf/core: Detach event groups during remove_on_exec

Sebastian Andrzej Siewior <[email protected]>
futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock""

Alice Ryhl <[email protected]>
rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER

Gary Guo <[email protected]>
rust: doctest: fix incorrect pattern in replacement

Haoze Xie <[email protected]>
rust: block: fix GenDisk cleanup paths

Miguel Ojeda <[email protected]>
rust: cpufreq: clean new clippy::map_or_identity lint for Rust 1.98.0

Huacai Chen <[email protected]>
LoongArch: Add PIO for early access before ACPI PCI root register

HyeongJun An <[email protected]>
platform/x86: intel-hid: Protect ACPI notify handler against recursion

Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Fix possible NULL pointer dereference

Jeremy Linton <[email protected]>
ACPI: CPPC: Suppress UBSAN warning caused by field misuse

Carlos López <[email protected]>
KVM: x86: Unconditionally recompute CR8 intercept on PPR update

Sean Christopherson <[email protected]>
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode

Sean Christopherson <[email protected]>
KVM: x86: Move update_cr8_intercept() to lapic.c

Florian Fainelli <[email protected]>
perf trace beauty fcntl: Fix build with older kernel headers

Randy Dunlap <[email protected]>
slab: recognize @GFP parameter as optional in kernel-doc

Linus Torvalds <[email protected]>
default_gfp(): avoid using the "newfangled" __VA_OPT__ trick

Linus Torvalds <[email protected]>
add default_gfp() helper macro and use it in the new *alloc_obj() helpers

Kees Cook <[email protected]>
slab: Introduce kmalloc_flex() and family

Pedro Falcato <[email protected]>
mm/khugepaged: write all dirty file folios when collapsing

NeilBrown <[email protected]>
nfsd: change nfs4_client_to_reclaim() to allocate data

NeilBrown <[email protected]>
nfsd: move name lookup out of nfsd4_list_rec_dir()

Xingquan Liu <[email protected]>
net/sched: dualpi2: fix GSO backlog accounting

Mingyu Wang <[email protected]>
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()

Chao Yu <[email protected]>
f2fs: fix to do sanity check on f2fs_get_node_folio_ra()

Chao Yu <[email protected]>
f2fs: detect more inconsistent cases in sanity_check_node_footer()

YH Lin <[email protected]>
f2fs: optimize trace_f2fs_write_checkpoint with enums

Chao Yu <[email protected]>
f2fs: introduce f2fs_schedule_timeout()

Chao Yu <[email protected]>
f2fs: use memalloc_retry_wait() as much as possible

Keshav Verma <[email protected]>
f2fs: fix listxattr handling of corrupted xattr entries

Chao Yu <[email protected]>
f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()

Ruipeng Qi <[email protected]>
f2fs: fix potential deadlock in f2fs_balance_fs()

Bryam Vargas <[email protected]>
f2fs: bound i_inline_xattr_size for non-inline-xattr inodes

Chao Yu <[email protected]>
f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode

Yongpeng Yang <[email protected]>
f2fs: remove non-uptodate folio from the page cache in move_data_block

Bartosz Golaszewski <[email protected]>
device property: initialize the remaining fields of fwnode_handle in fwnode_init()

Kiryl Shutsemau <[email protected]>
userfaultfd: gate must_wait writability check on pte_present()

Miguel Ojeda <[email protected]>
rust: str: clean unused import for Rust >= 1.98

Miguel Ojeda <[email protected]>
rust: str: use the "kernel vertical" imports style

Chris Mason <[email protected]>
nfsd: release layout stid on setlease failure

Olga Kornievskaia <[email protected]>
nfsd: update mtime/ctime on COPY in presence of delegated attributes

Olga Kornievskaia <[email protected]>
nfsd: update mtime/ctime on CLONE in presense of delegated attributes

Daniel Borkmann <[email protected]>
bpf, arm64: Reject out-of-range B.cond targets

-------------

Diffstat:

 Documentation/crypto/userspace-if.rst              |  31 +-
 Documentation/process/deprecated.rst               |   7 +
 MAINTAINERS                                        |   1 -
 Makefile                                           |   7 +-
 arch/arm64/kernel/entry-fpsimd.S                   |   8 +-
 arch/arm64/kvm/hyp/nvhe/hyp-main.c                 |   3 +
 arch/arm64/kvm/nested.c                            |  40 +-
 arch/arm64/lib/insn.c                              |   2 +
 arch/arm64/net/bpf_jit_comp.c                      |   4 +-
 arch/loongarch/include/asm/acpi.h                  |   2 +
 arch/loongarch/kernel/acpi.c                       |  28 +
 arch/loongarch/kernel/setup.c                      |   2 +
 arch/loongarch/kvm/intc/eiointc.c                  |   6 +
 arch/loongarch/kvm/intc/ipi.c                      |   2 +
 arch/loongarch/kvm/intc/pch_pic.c                  |   2 +
 arch/loongarch/net/bpf_jit.c                       |   2 +-
 arch/loongarch/pci/acpi.c                          |   2 +
 arch/powerpc/net/bpf_jit_comp.c                    |   4 +-
 arch/riscv/include/asm/pgtable.h                   |  10 +
 arch/riscv/kernel/entry.S                          |   7 +-
 arch/riscv/net/bpf_jit_comp64.c                    |   2 +-
 arch/riscv/net/bpf_jit_core.c                      |   3 +-
 arch/s390/Kconfig                                  |   1 -
 arch/s390/include/asm/asm-extable.h                |   4 -
 arch/s390/include/asm/word-at-a-time.h             |  22 -
 arch/s390/mm/extable.c                             |  18 -
 arch/x86/events/intel/uncore_snb.c                 |   7 -
 arch/x86/include/asm/nospec-branch.h               |   4 +
 arch/x86/kernel/cpu/bugs.c                         |  50 +-
 arch/x86/kernel/cpu/resctrl/monitor.c              |   8 +-
 arch/x86/kvm/lapic.c                               |  49 +-
 arch/x86/kvm/lapic.h                               |   3 +-
 arch/x86/kvm/svm/avic.c                            |  47 +-
 arch/x86/kvm/svm/svm.c                             |   3 +
 arch/x86/kvm/vmx/pmu_intel.c                       |   6 +-
 arch/x86/kvm/vmx/vmx.c                             |  44 +-
 arch/x86/kvm/x86.c                                 |  38 +-
 arch/x86/mm/init_64.c                              |  40 +-
 arch/x86/net/bpf_jit_comp.c                        |   5 +-
 block/bdev.c                                       |   8 +-
 block/partitions/aix.c                             |   9 +
 block/partitions/of.c                              |   5 +-
 crypto/af_alg.c                                    |  69 +--
 crypto/algif_aead.c                                |   8 +-
 crypto/asymmetric_keys/x509_loader.c               |   2 +-
 crypto/chacha20poly1305.c                          |  11 +-
 crypto/drbg.c                                      |   4 +-
 crypto/ecc.c                                       |  31 +-
 crypto/krb5/krb5_api.c                             |   2 +-
 crypto/pcrypt.c                                    |   4 +
 drivers/acpi/cppc_acpi.c                           |  11 +-
 drivers/acpi/nfit/core.c                           |   3 +
 drivers/android/binder.c                           |  19 +-
 drivers/android/binder/allocation.rs               |   8 +-
 drivers/android/binder/error.rs                    |  23 +-
 drivers/android/binder/freeze.rs                   |  11 +-
 drivers/android/binder/node.rs                     |  10 +-
 drivers/android/binder/process.rs                  |  33 +-
 drivers/android/binder/rust_binder_events.c        |   7 +-
 drivers/android/binder/stats.rs                    |   4 +-
 drivers/android/binder/thread.rs                   | 237 +++++----
 drivers/android/binder/transaction.rs              |  96 ++--
 drivers/base/firmware_loader/sysfs_upload.c        |   8 +-
 drivers/bluetooth/btmtksdio.c                      |   2 +-
 drivers/bluetooth/btnxpuart.c                      |   6 +
 drivers/bluetooth/btusb.c                          |  39 +-
 drivers/bluetooth/hci_ldisc.c                      |  14 +-
 drivers/char/hw_random/jh7110-trng.c               |  13 +-
 drivers/char/hw_random/virtio-rng.c                |  23 +-
 drivers/clocksource/timer-tegra186.c               |   3 +-
 drivers/cpufreq/cpufreq.c                          |   2 +
 drivers/cpufreq/intel_pstate.c                     |   6 +-
 drivers/cpufreq/pcc-cpufreq.c                      |   2 +
 drivers/cpufreq/qcom-cpufreq-hw.c                  |   1 -
 drivers/crypto/Kconfig                             |   1 -
 drivers/crypto/Makefile                            |   1 -
 drivers/crypto/amcc/crypto4xx_core.c               |  88 ----
 drivers/crypto/amcc/crypto4xx_core.h               |   4 -
 drivers/crypto/amcc/crypto4xx_reg_def.h            |  11 -
 drivers/crypto/amlogic/amlogic-gxl-core.c          |   2 +-
 drivers/crypto/atmel-sha204a.c                     |  19 +-
 drivers/crypto/caam/caamalg.c                      |  12 +-
 drivers/crypto/caam/caamalg_qi.c                   |  12 +-
 drivers/crypto/caam/caamalg_qi2.c                  |  12 +-
 drivers/crypto/caam/caamhash.c                     |   4 +-
 drivers/crypto/caam/key_gen.c                      |   4 +-
 drivers/crypto/ccp/sev-dev.c                       |  70 +--
 drivers/crypto/hisilicon/Kconfig                   |   1 -
 drivers/crypto/hisilicon/trng/trng.c               | 296 +----------
 drivers/crypto/intel/qat/qat_420xx/adf_drv.c       |   2 -
 drivers/crypto/intel/qat/qat_4xxx/adf_drv.c        |   2 -
 drivers/crypto/intel/qat/qat_6xxx/adf_drv.c        |   2 -
 drivers/crypto/intel/qat/qat_c3xxx/adf_drv.c       |   1 -
 drivers/crypto/intel/qat/qat_c3xxxvf/adf_drv.c     |   1 -
 drivers/crypto/intel/qat/qat_c62x/adf_drv.c        |   1 -
 drivers/crypto/intel/qat/qat_c62xvf/adf_drv.c      |   1 -
 drivers/crypto/intel/qat/qat_common/adf_aer.c      | 102 ++--
 .../crypto/intel/qat/qat_common/adf_common_drv.h   |   1 +
 drivers/crypto/intel/qat/qat_common/adf_init.c     |  18 +
 drivers/crypto/intel/qat/qat_common/adf_sriov.c    |  12 +-
 .../crypto/intel/qat/qat_common/qat_asym_algs.c    |  10 +-
 drivers/crypto/intel/qat/qat_dh895xcc/adf_drv.c    |   1 -
 drivers/crypto/intel/qat/qat_dh895xccvf/adf_drv.c  |   1 -
 drivers/crypto/loongson/Kconfig                    |   5 -
 drivers/crypto/loongson/Makefile                   |   1 -
 drivers/crypto/loongson/loongson-rng.c             | 209 --------
 drivers/crypto/talitos.c                           | 561 +++++++++++----------
 drivers/crypto/talitos.h                           |  12 +
 drivers/crypto/tegra/tegra-se-main.c               |   2 +-
 drivers/dma-buf/udmabuf.c                          |   9 +-
 drivers/edac/i10nm_base.c                          |  14 +-
 drivers/fpga/dfl-afu-main.c                        |   3 +
 drivers/gpio/gpio-eic-sprd.c                       |   8 +-
 drivers/gpio/gpio-sch.c                            |  32 +-
 drivers/hid/hid-appleir.c                          |  45 +-
 drivers/hid/hid-goodix-spi.c                       |   3 +
 drivers/hid/hid-letsketch.c                        |  36 +-
 drivers/hid/hid-lg-g15.c                           |  16 +
 drivers/hid/hid-multitouch.c                       |  32 +-
 drivers/hid/hid-sensor-hub.c                       |  77 ++-
 drivers/hid/uhid.c                                 |   8 +-
 drivers/hid/usbhid/hid-pidff.c                     |   2 +-
 drivers/hid/wacom_sys.c                            |  20 +-
 drivers/hwtracing/coresight/coresight-etb10.c      |   6 +-
 drivers/hwtracing/coresight/ultrasoc-smb.c         |   1 +
 drivers/i2c/busses/i2c-davinci.c                   |   4 +-
 drivers/i2c/busses/i2c-i801.c                      |   2 +-
 drivers/i2c/busses/i2c-imx-lpi2c.c                 |  15 +-
 drivers/i2c/busses/i2c-mpc.c                       |   2 +-
 drivers/i2c/busses/i2c-stm32f7.c                   |   9 +-
 drivers/i2c/i2c-core-base.c                        |  81 +--
 drivers/iio/accel/bmc150-accel-core.c              |   2 +
 drivers/iio/accel/kxsd9.c                          |   5 +-
 drivers/iio/adc/Kconfig                            |   3 +
 drivers/iio/adc/ad_sigma_delta.c                   |  39 +-
 drivers/iio/adc/lpc32xx_adc.c                      |   4 +-
 drivers/iio/adc/spear_adc.c                        |   3 +-
 drivers/iio/adc/ti-ads1119.c                       |   6 +-
 drivers/iio/adc/ti-ads124s08.c                     |   3 +-
 drivers/iio/chemical/scd30_core.c                  |  19 +-
 drivers/iio/common/st_sensors/st_sensors_core.c    |  23 +-
 drivers/iio/dac/ad3552r-hs.c                       |   2 +-
 drivers/iio/gyro/bmg160_core.c                     |  16 +-
 drivers/iio/imu/adis_trigger.c                     |   2 +-
 drivers/iio/imu/bmi160/bmi160_core.c               |   3 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c  |   4 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c |   9 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h |   1 +
 drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c   |   4 +-
 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c       |  21 +-
 drivers/iio/industrialio-backend.c                 |   2 +-
 drivers/iio/industrialio-core.c                    |   2 +-
 drivers/iio/industrialio-event.c                   |   5 +-
 drivers/iio/light/Kconfig                          |   3 +
 drivers/iio/light/al3010.c                         |  10 +-
 drivers/iio/light/al3320a.c                        |   8 +-
 drivers/iio/light/gp2ap002.c                       |   2 +-
 drivers/iio/light/opt3001.c                        |   6 +-
 drivers/iio/light/tsl2591.c                        |   6 +-
 drivers/iio/light/veml6030.c                       |   8 +-
 drivers/iio/magnetometer/ak8975.c                  |   1 +
 drivers/iio/pressure/bmp280-core.c                 |   2 +-
 drivers/iio/pressure/mpl115.c                      |   4 +-
 drivers/iio/proximity/vl53l0x-i2c.c                |   7 +-
 drivers/iio/resolver/ad2s1210.c                    |   2 +-
 drivers/iio/temperature/Makefile                   |   2 +-
 drivers/iio/temperature/ltc2983.c                  |   5 +-
 drivers/iio/temperature/tmp006.c                   |   2 +-
 drivers/infiniband/core/addr.c                     |   2 +-
 drivers/infiniband/sw/siw/siw_qp_rx.c              |   9 +
 drivers/infiniband/ulp/rtrs/rtrs-srv.c             |   5 +-
 drivers/input/joystick/iforce/iforce-packets.c     |  18 +-
 drivers/input/joystick/maplecontrol.c              |   3 +-
 drivers/input/keyboard/maple_keyb.c                |   4 +-
 drivers/input/mouse/elan_i2c_core.c                |  36 +-
 drivers/input/mouse/maplemouse.c                   |   9 +-
 drivers/input/rmi4/rmi_bus.c                       |   4 +-
 drivers/input/rmi4/rmi_f30.c                       |   2 +-
 drivers/input/rmi4/rmi_f3a.c                       |   2 +-
 drivers/input/serio/gscps2.c                       |   1 +
 drivers/input/touchscreen/ads7846.c                |   5 +-
 drivers/input/touchscreen/goodix.c                 |   3 +-
 drivers/input/touchscreen/mms114.c                 |  26 +-
 drivers/input/touchscreen/touchwin.c               |  15 +-
 drivers/iommu/amd/iommu.c                          |   3 +-
 drivers/iommu/intel/iommu.c                        |  29 +-
 drivers/iommu/intel/iommu.h                        |  11 +
 drivers/iommu/intel/nested.c                       |   9 +-
 drivers/iommu/intel/pasid.c                        | 190 -------
 drivers/iommu/intel/pasid.h                        |  14 -
 drivers/iommu/intel/svm.c                          |  12 +-
 drivers/iommu/iommufd/eventq.c                     |  26 +-
 drivers/iommu/iommufd/hw_pagetable.c               |  11 +-
 drivers/iommu/iommufd/iommufd_private.h            |   2 +-
 drivers/md/dm-ioctl.c                              |   5 +-
 .../media/platform/mediatek/jpeg/mtk_jpeg_core.c   |   3 +-
 drivers/mfd/cros_ec_dev.c                          |   3 +-
 drivers/net/usb/kalmia.c                           |   8 +
 drivers/ntb/hw/epf/ntb_hw_epf.c                    |  14 +-
 drivers/nvme/host/multipath.c                      |   6 +
 drivers/nvme/target/discovery.c                    |  23 +-
 drivers/nvme/target/fabrics-cmd-auth.c             |  15 +-
 drivers/nvme/target/rdma.c                         |   6 +-
 drivers/opp/of.c                                   |   3 +-
 drivers/pci/controller/dwc/pci-imx6.c              |  12 +-
 drivers/pci/controller/dwc/pcie-qcom.c             |   6 +
 drivers/pci/controller/pci-host-common.c           |   4 +
 drivers/pci/controller/pci-loongson.c              |  36 ++
 drivers/pci/controller/pcie-altera.c               |  36 +-
 drivers/pci/controller/pcie-mediatek.c             |  65 ++-
 drivers/pci/iov.c                                  |   6 +
 drivers/pci/quirks.c                               |  51 +-
 drivers/perf/arm-cmn.c                             |  23 +-
 drivers/platform/x86/intel/hid.c                   |   9 +
 drivers/regulator/scmi-regulator.c                 |   4 +-
 drivers/spi/spi-fsl-lpspi.c                        |  18 +-
 drivers/staging/media/atomisp/pci/sh_css.c         |   6 +-
 drivers/staging/media/ipu3/ipu3-css-params.c       |   8 +-
 drivers/staging/media/ipu7/ipu7.c                  |  22 +-
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |  20 +-
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c     |  23 +-
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |   8 +
 drivers/staging/vme_user/vme_fake.c                |   8 +
 drivers/staging/vme_user/vme_tsi148.c              |   8 +
 drivers/staging/vme_user/vme_user.c                |  22 +
 drivers/tty/serial/8250/8250_mid.c                 |  13 +-
 drivers/usb/cdns3/cdnsp-mem.c                      |   2 +
 drivers/usb/class/cdc-acm.c                        |   3 +
 drivers/usb/common/ulpi.c                          |  23 +-
 drivers/usb/core/quirks.c                          |   6 +
 drivers/usb/dwc3/dwc3-meson-g12a.c                 |  14 +-
 drivers/usb/dwc3/gadget.c                          |  43 +-
 drivers/usb/fotg210/fotg210-hcd.c                  |   6 +-
 drivers/usb/gadget/composite.c                     |   5 +-
 drivers/usb/gadget/function/f_fs.c                 |   3 +-
 drivers/usb/gadget/function/f_printer.c            |   3 +-
 drivers/usb/gadget/function/rndis.c                |  20 +-
 drivers/usb/gadget/udc/core.c                      |  29 +-
 drivers/usb/host/ehci-sched.c                      |  11 +-
 drivers/usb/host/sl811-hcd.c                       |   1 +
 drivers/usb/host/xhci-sideband.c                   |   2 +
 drivers/usb/host/xhci.c                            |  11 +-
 drivers/usb/misc/chaoskey.c                        |   1 -
 drivers/usb/misc/idmouse.c                         |  45 +-
 drivers/usb/misc/iowarrior.c                       |   4 +-
 drivers/usb/misc/ldusb.c                           |  38 +-
 drivers/usb/misc/legousbtower.c                    |  37 +-
 drivers/usb/misc/usbio.c                           |   8 +-
 drivers/usb/misc/uss720.c                          |   5 +-
 drivers/usb/mtu3/mtu3_gadget.c                     |   1 +
 drivers/usb/serial/digi_acceleport.c               |  43 +-
 drivers/usb/serial/keyspan_pda.c                   |   2 +-
 drivers/usb/serial/option.c                        |  16 +
 drivers/usb/storage/ene_ub6250.c                   |   3 +-
 drivers/usb/storage/usb.c                          |   2 +-
 drivers/usb/typec/anx7411.c                        |   4 +-
 drivers/usb/typec/class.c                          |   1 +
 drivers/usb/typec/tcpm/tcpci_rt1711h.c             |  13 +-
 drivers/usb/typec/tcpm/tcpm.c                      |   9 +-
 drivers/usb/typec/ucsi/displayport.c               |   7 +-
 drivers/usb/typec/ucsi/ucsi.c                      |  20 +
 drivers/usb/typec/ucsi/ucsi.h                      |   1 +
 drivers/usb/typec/ucsi/ucsi_acpi.c                 |  10 +-
 drivers/usb/typec/ucsi/ucsi_ccg.c                  |   2 +-
 drivers/usb/usbip/vudc.h                           |   1 -
 drivers/usb/usbip/vudc_dev.c                       |   4 +-
 drivers/vfio/debugfs.c                             |   1 +
 drivers/vfio/pci/vfio_pci_core.c                   |  37 +-
 drivers/vfio/vfio_main.c                           |  11 +-
 drivers/video/fbdev/core/fbcon.c                   |   7 +
 drivers/virtio/virtio_mmio.c                       |  26 +-
 drivers/virtio/virtio_pci_common.c                 |  10 +-
 drivers/watchdog/apple_wdt.c                       |   1 +
 fs/btrfs/btrfs_inode.h                             |   2 +
 fs/btrfs/extent-tree.c                             |  12 +-
 fs/btrfs/file.c                                    |  25 +-
 fs/btrfs/inode.c                                   |  61 ++-
 fs/btrfs/reflink.c                                 |   4 +-
 fs/crypto/fscrypt_private.h                        |  84 +--
 fs/crypto/inline_crypt.c                           |   8 +-
 fs/crypto/keyring.c                                | 239 ++++-----
 fs/crypto/keysetup.c                               | 118 +++--
 fs/exfat/dir.c                                     |  13 +-
 fs/f2fs/checkpoint.c                               |  10 +-
 fs/f2fs/compress.c                                 |   4 +-
 fs/f2fs/data.c                                     |  33 +-
 fs/f2fs/f2fs.h                                     |  30 +-
 fs/f2fs/gc.c                                       |  50 +-
 fs/f2fs/inode.c                                    |  17 +-
 fs/f2fs/node.c                                     |  21 +-
 fs/f2fs/segment.c                                  |  14 +-
 fs/f2fs/super.c                                    |   4 +-
 fs/f2fs/xattr.c                                    |   6 +-
 fs/fs-writeback.c                                  |  31 +-
 fs/fuse/cuse.c                                     |   4 +-
 fs/fuse/dev.c                                      |  54 +-
 fs/fuse/dev_uring.c                                |  93 ++--
 fs/fuse/dev_uring_i.h                              |  10 +-
 fs/fuse/fuse_dev_i.h                               |   1 +
 fs/fuse/notify.c                                   | 434 ++++++++++++++++
 fs/fuse/readdir.c                                  |  85 +++-
 fs/hfs/bnode.c                                     |   2 +
 fs/hfsplus/bnode.c                                 |   2 +
 fs/isofs/rock.c                                    |  11 +
 fs/libfs.c                                         |   1 +
 fs/nfs/dir.c                                       |   2 +
 fs/nfsd/nfs4layouts.c                              |   4 +-
 fs/nfsd/nfs4proc.c                                 |  14 +-
 fs/nfsd/nfs4recover.c                              | 119 ++---
 fs/nfsd/nfs4state.c                                |  66 ++-
 fs/nfsd/state.h                                    |   1 +
 fs/nfsd/xdr4.h                                     |   1 +
 fs/nilfs2/segment.c                                |  22 +
 fs/ntfs3/attrib.c                                  |  14 +
 fs/ntfs3/dir.c                                     |   2 +-
 fs/ntfs3/file.c                                    |  30 +-
 fs/ntfs3/frecord.c                                 |  59 ++-
 fs/ntfs3/fslog.c                                   |  20 +-
 fs/ntfs3/inode.c                                   |  15 +-
 fs/ntfs3/ntfs_fs.h                                 |   4 +-
 fs/resctrl/monitor.c                               |  37 +-
 fs/smb/client/cifs_swn.c                           | 316 ++++++++++--
 fs/smb/client/cifsacl.c                            |   2 +-
 fs/smb/client/file.c                               |   2 +-
 fs/smb/client/smb2misc.c                           |  32 +-
 fs/smb/client/smb2ops.c                            |  18 +-
 fs/smb/client/smb2pdu.c                            |  22 +-
 fs/smb/client/trace.h                              |   2 +
 fs/smb/server/smb2pdu.c                            | 101 ++--
 fs/smb/server/vfs.c                                |  18 +-
 fs/smb/server/vfs_cache.c                          |   5 +
 fs/smb/server/vfs_cache.h                          |   2 +
 fs/udf/balloc.c                                    |   5 +-
 fs/udf/super.c                                     |  11 +-
 fs/userfaultfd.c                                   |  14 +-
 fs/xfs/libxfs/xfs_bmap_btree.h                     |   2 +-
 fs/xfs/libxfs/xfs_dquot_buf.c                      |  14 +-
 fs/xfs/libxfs/xfs_exchmaps.c                       |   2 +-
 fs/xfs/xfs_dquot.c                                 |  16 +-
 fs/xfs/xfs_log_recover.c                           |   6 +-
 fs/xfs/xfs_qm.c                                    |   5 +-
 include/asm-generic/rqspinlock.h                   |  14 +-
 include/crypto/drbg.h                              |  18 +-
 include/linux/damon.h                              |   8 +-
 include/linux/filter.h                             |  15 +-
 include/linux/fs.h                                 |   5 +
 include/linux/fwnode.h                             |   2 +
 include/linux/gfp.h                                |   4 +
 include/linux/glob.h                               |   1 +
 include/linux/hid-sensor-hub.h                     |  25 +
 include/linux/page_ext.h                           |  19 +-
 include/linux/slab.h                               |  78 ++-
 include/linux/vfio_pci_core.h                      |  15 +-
 include/net/bluetooth/hci_core.h                   |   1 +
 include/net/bluetooth/l2cap.h                      |   1 +
 include/net/tcp_ao.h                               |   1 +
 include/sound/hda_codec.h                          |   1 +
 include/trace/events/f2fs.h                        |  19 +-
 init/Kconfig                                       |   1 +
 io_uring/io-wq.c                                   |   2 +-
 io_uring/nop.c                                     |   8 +-
 io_uring/rw.c                                      |  12 +-
 kernel/audit.c                                     |  21 +-
 kernel/audit_fsnotify.c                            |   4 -
 kernel/bpf/btf.c                                   |   9 +-
 kernel/bpf/cgroup.c                                |   2 +-
 kernel/bpf/core.c                                  |  68 ++-
 kernel/bpf/devmap.c                                |   7 +
 kernel/bpf/dispatcher.c                            |   2 +-
 kernel/events/core.c                               |  19 +-
 kernel/futex/requeue.c                             |   6 -
 kernel/module/decompress.c                         |   2 +
 kernel/sched/fair.c                                |   2 +-
 kernel/sched/features.h                            |   8 +
 kernel/time/jiffies.c                              |  11 +-
 kernel/time/posix-cpu-timers.c                     |   1 +
 kernel/time/timekeeping.c                          |   7 +-
 kernel/trace/trace_events_filter.c                 |   6 +-
 lib/debugobjects.c                                 |  17 +
 lib/glob.c                                         |  31 +-
 mm/damon/ops-common.c                              |   1 +
 mm/filemap.c                                       |   2 +-
 mm/khugepaged.c                                    |  41 +-
 mm/madvise.c                                       |   3 +-
 mm/mincore.c                                       |   3 +-
 mm/mmap.c                                          |   2 +-
 mm/shmem.c                                         |  14 +-
 mm/shrinker.c                                      |  13 +-
 mm/shrinker_debug.c                                |  14 +-
 mm/slub.c                                          |  18 +-
 mm/swap_cgroup.c                                   |   2 +
 mm/swapfile.c                                      |   1 +
 net/6lowpan/nhc.c                                  |   2 +-
 net/bluetooth/6lowpan.c                            |  18 +-
 net/bluetooth/af_bluetooth.c                       |  17 +-
 net/bluetooth/bnep/core.c                          |  27 +-
 net/bluetooth/hci_conn.c                           |  21 +-
 net/bluetooth/hci_sync.c                           | 137 ++++-
 net/bluetooth/iso.c                                |  13 +-
 net/bluetooth/l2cap_core.c                         |  80 +--
 net/bluetooth/l2cap_sock.c                         |   4 +-
 net/bluetooth/mgmt.c                               |   3 +
 net/bridge/netfilter/ebtables.c                    |  12 +-
 net/core/netpoll.c                                 |   9 +-
 net/ipv4/igmp.c                                    |   1 +
 net/ipv4/sysctl_net_ipv4.c                         |  10 +-
 net/ipv4/tcp_ao.c                                  |   5 +-
 net/ipv4/tcp_output.c                              |   4 +-
 net/ipv6/netfilter/nf_conntrack_reasm.c            |   2 +-
 net/key/af_key.c                                   |   1 +
 net/netfilter/ipset/ip_set_core.c                  |   8 +-
 net/netfilter/nf_conntrack_netlink.c               |   2 +-
 net/netfilter/nf_flow_table_core.c                 |  13 +-
 net/netfilter/nfnetlink_log.c                      |  26 +-
 net/netfilter/nfnetlink_queue.c                    |  16 +-
 net/netfilter/xt_u32.c                             |  16 +-
 net/sched/sch_dualpi2.c                            |  11 +-
 net/tipc/bcast.c                                   |  22 +-
 net/tipc/bcast.h                                   |   2 +-
 net/tipc/node.c                                    |  15 +-
 rust/kernel/block/mq/gen_disk.rs                   |  20 +-
 rust/kernel/cpufreq.rs                             |   2 +-
 rust/kernel/str.rs                                 |  24 +-
 rust/kernel/uaccess.rs                             |   3 +
 scripts/rustdoc_test_builder.rs                    |  16 +-
 security/landlock/net.c                            |   1 +
 sound/aoa/fabrics/layout.c                         |   6 +
 sound/core/compress_offload.c                      |  13 +-
 sound/core/seq/seq_memory.c                        |   2 +-
 sound/firewire/isight.c                            |   3 +-
 sound/hda/codecs/hdmi/hdmi.c                       |   9 +-
 sound/hda/codecs/realtek/alc269.c                  |   1 +
 sound/hda/codecs/side-codecs/cs35l41_hda.c         |  77 ++-
 sound/hda/codecs/side-codecs/cs35l41_hda.h         |   5 +
 sound/hda/common/jack.c                            |   6 +
 sound/isa/gus/gus_pcm.c                            |   2 +
 sound/pci/cmipci.c                                 |   6 +
 sound/pci/es1938.c                                 |   2 +
 sound/pci/ice1712/aureon.c                         |   2 +
 sound/pci/ice1712/ice1712.c                        |   8 +
 sound/pci/ice1712/ice1724.c                        |   6 +
 sound/pci/ymfpci/ymfpci_main.c                     |   6 +
 sound/usb/caiaq/input.c                            |   2 +-
 sound/usb/mixer_quirks.c                           | 102 ++--
 sound/usb/mixer_scarlett.c                         |   4 +-
 sound/usb/mixer_us16x08.c                          | 127 +++--
 sound/usb/usx2y/us144mkii.c                        |  17 +-
 sound/usb/usx2y/us144mkii_capture.c                |   2 +-
 sound/virtio/virtio_kctl.c                         |  50 ++
 sound/virtio/virtio_pcm.c                          |   3 +-
 sound/virtio/virtio_pcm_ops.c                      |   3 +-
 tools/mm/slabinfo.c                                |   6 +-
 tools/perf/trace/beauty/fcntl.c                    |  16 +
 tools/testing/selftests/landlock/audit.h           |  39 +-
 tools/testing/selftests/landlock/audit_test.c      |   2 +
 tools/testing/selftests/landlock/net_test.c        |  62 +++
 tools/testing/selftests/landlock/ptrace_test.c     |   1 +
 .../selftests/landlock/scoped_abstract_unix_test.c |   1 +
 tools/testing/selftests/mm/droppable.c             |  48 +-
 tools/testing/selftests/mm/pagemap_ioctl.c         |  12 +-
 tools/usb/usbip/libsrc/usbip_common.c              |   2 +
 tools/usb/usbip/libsrc/usbip_device_driver.c       |   4 +
 tools/usb/usbip/libsrc/vhci_driver.c               |   1 +
 463 files changed, 5755 insertions(+), 3449 deletions(-)

Read the cover letter in its thread