7.1.4-rc1 review

Greg Kroah-Hartman linux-mediatek linux-patches linux-wireless lkml stable 1 version Jul 16 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Jul 16518 patches 14 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/518	rust: str: use the "kernel vertical" imports style`rust/kernel/str.rs`	+19 -5	0 replies
2/518	rust: str: clean unused import for Rust >= 1.98`rust/kernel/str.rs`	+0 -1	0 replies
3/518	userfaultfd: gate must_wait writability check on pte_present()`fs/userfaultfd.c`	+20 -0	0 replies
4/518	net/sched: dualpi2: fix GSO backlog accounting`net/sched/sch_dualpi2.c`	+5 -6	0 replies
5/518	mm/khugepaged: write all dirty file folios when collapsing`mm/khugepaged.c`	+25 ~~-14~~	0 replies
6/518	slab: recognize @GFP parameter as optional in kernel-doc`include/linux/slab.h`	+3 -3	0 replies
7/518	perf trace beauty fcntl: Fix build with older kernel headers`tools/perf/trace/beauty/fcntl.c`	+16 -0	0 replies
8/518	KVM: x86: Move update_cr8_intercept() to lapic.c`arch/x86/kvm/lapic.c` `arch/x86/kvm/lapic.h` `arch/x86/kvm/x86.c`	+30 ~~-31~~	0 replies
9/518	KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode`arch/x86/kvm/vmx/vmx.c`	+1 -2	0 replies
10/518	KVM: x86: Unconditionally recompute CR8 intercept on PPR update`arch/x86/kvm/lapic.c` `arch/x86/kvm/x86.c`	+3 -4	0 replies
11/518	ACPI: CPPC: Suppress UBSAN warning caused by field misuse`drivers/acpi/cppc_acpi.c`	+7 -4	0 replies
12/518	ACPI: NFIT: core: Fix possible NULL pointer dereference`drivers/acpi/nfit/core.c`	+3 -0	0 replies
13/518	ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup`drivers/acpi/nfit/core.c`	+15 -3	0 replies
14/518	platform/x86: intel-hid: Protect ACPI notify handler against recursion`drivers/platform/x86/intel/hid.c`	+9 -0	0 replies
15/518	LoongArch: Add PIO for early access before ACPI PCI root register`arch/loongarch/include/asm/acpi.h` `arch/loongarch/kernel/acpi.c` `arch/loongarch/kernel/setup.c` +1 more	+34 -0	0 replies
16/518	rust: cpufreq: clean new `clippy::map_or_identity` lint for Rust 1.98.0`rust/kernel/cpufreq.rs`	+1 -1	0 replies
17/518	rust: kasan: KASAN+RUST requires clang`init/Kconfig`	+1 -0	0 replies
18/518	rust: pci: use static lifetime for PCI BAR resource names`rust/kernel/pci/io.rs`	+3 -3	0 replies
19/518	rust: block: fix GenDisk cleanup paths`rust/kernel/block/mq/gen_disk.rs`	+19 -1	0 replies
20/518	rust: doctest: fix incorrect pattern in replacement`scripts/rustdoc_test_builder.rs`	+10 -6	0 replies
21/518	rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER`Makefile`	+3 -0	2 replies
22/518	futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock""`kernel/futex/requeue.c`	+0 -6	0 replies
23/518	perf/core: Detach event groups during remove_on_exec`kernel/events/core.c`	+9 -8	0 replies
24/518	bpf: Support for hardening against JIT spraying`include/linux/filter.h` `kernel/bpf/core.c`	+29 -0	0 replies
25/518	x86/bugs: Enable IBPB flush on BPF JIT allocation`arch/x86/include/asm/nospec-branch.h` `arch/x86/kernel/cpu/bugs.c`	+49 -5	0 replies
26/518	bpf: Restrict JIT predictor flush to cBPF`arch/arm64/net/bpf_jit_comp.c` `arch/loongarch/net/bpf_jit.c` `arch/powerpc/net/bpf_jit_comp.c` +6 more	+25 ~~-18~~	0 replies
27/518	bpf: Skip redundant IBPB in pack allocator`kernel/bpf/core.c`	+14 -1	0 replies
28/518	bpf: Prefer packs that wont trigger an IBPB flush on allocation`kernel/bpf/core.c`	+24 -3	0 replies
29/518	bpf: Prefer dirty packs for eBPF allocations`kernel/bpf/core.c`	+3 -3	0 replies
30/518	wifi: rtw89: correct drop logic for malformed AMPDU frames`drivers/net/wireless/realtek/rtw89/core.c` `drivers/net/wireless/realtek/rtw89/mac80211.c`	+4 -2	0 replies
31/518	usb: gadget: function: rndis: add length check to response query`drivers/usb/gadget/function/rndis.c`	+10 -4	0 replies
32/518	usb: gadget: function: rndis: add length check for header`drivers/usb/gadget/function/rndis.c`	+6 -0	0 replies
33/518	iio: accel: bmc150: clamp the device-reported FIFO frame count`drivers/iio/accel/bmc150-accel-core.c`	+2 -0	0 replies
34/518	iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error`drivers/iio/accel/kxsd9.c`	+3 -2	0 replies
35/518	iio: adc: ad4062: add GPIOLIB dependency`drivers/iio/adc/Kconfig`	+1 -0	0 replies
36/518	iio: adc: ad7380: select REGMAP`drivers/iio/adc/Kconfig`	+1 -0	0 replies
37/518	iio: adc: ad7768-1: Select GPIOLIB`drivers/iio/adc/Kconfig`	+1 -0	0 replies
38/518	iio: adc: ad7779: add missing select IIO_TRIGGERED_BUFFER to Kconfig`drivers/iio/adc/Kconfig`	+1 -0	0 replies
39/518	iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices`drivers/iio/adc/ad_sigma_delta.c`	+29 -2	0 replies
40/518	iio: adc: ad_sigma_delta: fix CS held asserted and state leaks`drivers/iio/adc/ad_sigma_delta.c`	+5 -3	0 replies
41/518	iio: adc: lpc32xx: Initialize completion before requesting IRQ`drivers/iio/adc/lpc32xx_adc.c`	+2 -2	0 replies
42/518	iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for()`drivers/iio/adc/nxp-sar-adc.c`	+2 -2	0 replies
43/518	iio: adc: spear: Initialize completion before requesting IRQ`drivers/iio/adc/spear_adc.c`	+1 -2	0 replies
44/518	iio: adc: ti-ads1119: fix PM reference leak in buffer preenable`drivers/iio/adc/ti-ads1119.c`	+5 -1	0 replies
45/518	iio: adc: ti-ads124s08: Return reset GPIO lookup errors`drivers/iio/adc/ti-ads124s08.c`	+2 -1	0 replies
46/518	iio: backend: fix uninitialized data in debugfs`drivers/iio/industrialio-backend.c`	+1 -1	0 replies
47/518	iio: buffer: hw-consumer: free scan_mask on buffer release`drivers/iio/buffer/industrialio-hw-consumer.c`	+2 -0	0 replies
48/518	iio: chemical: scd30: Cleanup initializations and fix sign-extension bug`drivers/iio/chemical/scd30_core.c`	+15 -4	0 replies
49/518	iio: common: st_sensors: honour channel endianness in read_axis_data`drivers/iio/common/st_sensors/st_sensors_core.c`	+17 -6	0 replies
50/518	iio: core: fix uninitialized data in debugfs`drivers/iio/industrialio-core.c`	+1 -1	0 replies
51/518	iio: dac: ad3552r-hs: fix uninitialized data ni ad3552r_hs_write_data_source()`drivers/iio/dac/ad3552r-hs.c`	+1 -1	0 replies
52/518	iio: event: Fix event FIFO reset race`drivers/iio/industrialio-event.c`	+2 -3	0 replies
53/518	iio: gyro: bmg160: bail out when bandwidth/filter is not in table`drivers/iio/gyro/bmg160_core.c`	+6 -0	0 replies
54/518	iio: gyro: bmg160: wait full startup time after mode change at probe`drivers/iio/gyro/bmg160_core.c`	+8 -2	0 replies
55/518	iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ`drivers/iio/imu/adis_trigger.c`	+1 -1	0 replies
56/518	iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ`drivers/iio/imu/bmi160/bmi160_core.c`	+2 -1	0 replies
57/518	iio: imu: inv_icm42600: fix timestamp clock period by using lower value`drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c`	+4 -4	0 replies
58/518	iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading`drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h`	+6 -4	0 replies
59/518	iio: imu: st_lsm6dsx: deselect shub page before reading whoami`drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c`	+20 -1	0 replies
60/518	iio: light: al3000a: add missing REGMAP_I2C to Kconfig`drivers/iio/light/Kconfig`	+1 -0	0 replies
61/518	iio: light: al3010: add missing REGMAP_I2C to Kconfig`drivers/iio/light/Kconfig`	+1 -0	0 replies
62/518	iio: light: al3010: fix incorrect scale for the highest gain range`drivers/iio/light/al3010.c`	+1 -1	0 replies
63/518	iio: light: al3010: read both ALS ADC registers again`drivers/iio/light/al3010.c`	+5 -3	0 replies
64/518	iio: light: al3320a: add missing REGMAP_I2C to Kconfig`drivers/iio/light/Kconfig`	+1 -0	0 replies
65/518	iio: light: al3320a: read both ALS ADC registers again`drivers/iio/light/al3320a.c`	+5 -3	0 replies
66/518	iio: light: gp2ap002: fix runtime PM leak on read error`drivers/iio/light/gp2ap002.c`	+1 -1	0 replies
67/518	iio: light: opt3001: fix missing state reset on timeout`drivers/iio/light/opt3001.c`	+4 -2	0 replies
68/518	iio: light: tsl2591: return actual error from probe IRQ failure`drivers/iio/light/tsl2591.c`	+2 -4	0 replies
69/518	iio: light: veml6030: fix channel type when pushing events`drivers/iio/light/veml6030.c`	+5 -3	0 replies
70/518	iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call`drivers/iio/magnetometer/ak8975.c`	+1 -0	0 replies
71/518	iio: pressure: bmp280: zero-init bmp580 trigger handler buffer`drivers/iio/pressure/bmp280-core.c`	+1 -1	0 replies
72/518	iio: pressure: mpl115: fix runtime PM leak on read error`drivers/iio/pressure/mpl115.c`	+2 -2	0 replies
73/518	iio: proximity: vl53l0x: notify trigger and clear IRQ on error paths`drivers/iio/proximity/vl53l0x-i2c.c`	+3 -4	0 replies
74/518	iio: resolver: ad2s1210: notify trigger and clear state on fault read error`drivers/iio/resolver/ad2s1210.c`	+1 -1	0 replies
75/518	iio: temperature: Build mlx90635 with CONFIG_MLX90635`drivers/iio/temperature/Makefile`	+1 -1	0 replies
76/518	iio: temperature: ltc2983: Fix n_wires default bypassing rotation check`drivers/iio/temperature/ltc2983.c`	+1 -1	0 replies
77/518	iio: temperature: ltc2983: Fix reinit_completion() called after conversion start`drivers/iio/temperature/ltc2983.c`	+1 -2	0 replies
78/518	iio: temperature: tmp006: use devm_iio_trigger_register`drivers/iio/temperature/tmp006.c`	+1 -1	0 replies
79/518	ALSA: usx2y: us144mkii: fix work UAF on disconnect`sound/usb/usx2y/us144mkii.c`	+11 -6	0 replies
80/518	ALSA: virtio: Add missing 384 kHz PCM rate mapping`sound/virtio/virtio_pcm.c` `sound/virtio/virtio_pcm_ops.c`	+4 -2	0 replies
81/518	ALSA: virtio: Validate control metadata from the device`sound/virtio/virtio_kctl.c`	+50 -0	0 replies
82/518	ALSA: ymfpci: check snd_ctl_new1() return value`sound/pci/ymfpci/ymfpci_main.c`	+6 -0	0 replies
83/518	ALSA: aoa: check snd_ctl_new1() return value`sound/aoa/fabrics/layout.c`	+6 -0	0 replies
84/518	ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser`sound/usb/caiaq/input.c`	+1 -1	0 replies
85/518	ALSA: cmipci: check snd_ctl_new1() return value`sound/pci/cmipci.c`	+6 -0	0 replies
86/518	ALSA: compress: Fix task creation error unwind`sound/core/compress_offload.c`	+9 -4	0 replies
87/518	ALSA: es1938: check snd_ctl_new1() return value`sound/pci/es1938.c`	+2 -0	0 replies
88/518	ALSA: FCP: Add Focusrite ISA C8X support`sound/usb/mixer_quirks.c`	+1 -0	0 replies
89/518	ALSA: firewire: isight: bound the sample count to the packet payload`sound/firewire/isight.c`	+2 -1	0 replies
90/518	ALSA: gus: check snd_ctl_new1() return value`sound/isa/gus/gus_pcm.c`	+2 -0	0 replies
91/518	ALSA: hda/cs35l41: Fix firmware load work teardown`sound/hda/codecs/side-codecs/cs35l41_hda.c` `sound/hda/codecs/side-codecs/cs35l41_hda.h`	+60 ~~-22~~	0 replies
92/518	ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800 G5 Mini`sound/hda/codecs/hdmi/hdmi.c`	+1 -0	0 replies
93/518	ALSA: hda/hdmi: Use AC_PINSENSE_ELDV to detect pinsense for Loongson`include/sound/hda_codec.h` `sound/hda/codecs/hdmi/hdmi.c` `sound/hda/common/jack.c`	+14 -1	0 replies
94/518	ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW`sound/hda/codecs/realtek/alc269.c`	+1 -0	0 replies
95/518	ALSA: ice1712: check snd_ctl_new1() return value`sound/pci/ice1712/aureon.c` `sound/pci/ice1712/ice1712.c` `sound/pci/ice1712/ice1724.c`	+16 -0	0 replies
96/518	ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()`sound/core/seq/seq_memory.c`	+1 -1	0 replies
97/518	ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission`sound/usb/usx2y/us144mkii_capture.c`	+1 -1	0 replies
98/518	ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer Flow 8`sound/usb/endpoint.c` `sound/usb/quirks.c` `sound/usb/usbaudio.h`	+20 -1	0 replies
99/518	ALSA: usb-audio: avoid kobject path lookup in DualSense match`sound/usb/mixer_quirks.c`	+12 ~~-28~~	0 replies
100/518	ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()`sound/usb/mixer_scarlett.c`	+3 -1	0 replies
101/518	ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks`sound/usb/mixer_us16x08.c`	+24 ~~-25~~	0 replies
102/518	ALSA: usb-audio: Roll back quirk control caches on write errors`sound/usb/mixer_quirks.c`	+37 -8	0 replies
103/518	ALSA: usb-audio: Update Babyface Pro control caches only after successful writes`sound/usb/mixer_quirks.c`	+10 -6	0 replies
104/518	ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes`sound/usb/mixer_us16x08.c`	+52 ~~-26~~	0 replies
105/518	x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled`arch/x86/kernel/cpu/resctrl/monitor.c` `fs/resctrl/monitor.c`	+26 ~~-16~~	0 replies
106/518	vfio/pci: Use a private flag to prevent power state change with VFs`drivers/vfio/pci/vfio_pci_core.c` `include/linux/vfio_pci_core.h`	+15 -3	0 replies
107/518	vfio/pci: Latch disable_idle_d3 per device`drivers/vfio/pci/vfio_pci_core.c` `include/linux/vfio_pci_core.h`	+11 -9	0 replies
108/518	vfio/pci: Release the VGA arbiter client on register_device() failure`drivers/vfio/pci/vfio_pci_core.c`	+1 -0	0 replies
109/518	vfio/pci: Fix racy bitfields and tighten struct layout`include/linux/vfio_pci_core.h`	+8 -5	0 replies
110/518	vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc`drivers/vfio/vfio_main.c`	+2 -1	0 replies
111/518	vfio: Remove device debugfs before releasing devres`drivers/vfio/debugfs.c` `drivers/vfio/vfio_main.c`	+8 -1	0 replies
112/518	vfio/mlx5: Fix racy bitfields and tighten struct layout`drivers/vfio/pci/mlx5/cmd.h`	+9 -6	0 replies
113/518	Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB`drivers/bluetooth/btusb.c`	+2 -0	0 replies
114/518	Bluetooth: btusb: fix use-after-free on registration failure`drivers/bluetooth/btusb.c`	+10 -1	0 replies
115/518	Bluetooth: btusb: fix use-after-free on marvell probe failure`drivers/bluetooth/btusb.c`	+5 -3	0 replies
116/518	Bluetooth: btusb: fix wakeup source leak on probe failure`drivers/bluetooth/btusb.c`	+15 -3	0 replies
117/518	binder: fix UAF in binder_thread_release()`drivers/android/binder.c`	+5 -1	0 replies
118/518	binder: fix UAF in binder_free_transaction()`drivers/android/binder.c`	+13 -0	0 replies
119/518	rust_binder: use a u64 stride when cleaning up the offsets array`drivers/android/binder/allocation.rs`	+3 -2	0 replies
120/518	rust_binder: fix BINDER_GET_EXTENDED_ERROR`drivers/android/binder/error.rs` `drivers/android/binder/thread.rs` `drivers/android/binder/transaction.rs`	+58 ~~-35~~	0 replies
121/518	rust_binder: reject context manager self-transaction`drivers/android/binder/process.rs`	+5 -1	0 replies
122/518	rust_binder: synchronize Rust Binder stats with freeze commands`drivers/android/binder/rust_binder_events.c` `drivers/android/binder/stats.rs`	+8 -3	0 replies
123/518	rust_binder: clear freeze listener on node removal`drivers/android/binder/freeze.rs` `drivers/android/binder/node.rs` `drivers/android/binder/process.rs`	+26 -7	0 replies
124/518	usb: xhci: Fix sleep in atomic context in xhci_free_streams()`drivers/usb/host/xhci.c`	+10 -1	0 replies
125/518	xhci: sideband: fix ring sg table pages leak`drivers/usb/host/xhci-sideband.c`	+2 -0	0 replies
126/518	usb: typec: tcpci_rt1711h: unregister TCPCI port with devres`drivers/usb/typec/tcpm/tcpci_rt1711h.c`	+8 -5	0 replies
127/518	riscv: dts: sophgo: Add dma-coherent to SG2042 PCIe controllers`arch/riscv/boot/dts/sophgo/sg2042.dtsi`	+4 -0	0 replies
128/518	PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series`drivers/pci/controller/pci-loongson.c`	+36 -0	0 replies
129/518	PCI: altera: Do not dispose parent IRQ mapping`drivers/pci/controller/pcie-altera.c`	+0 -1	0 replies
130/518	PCI: altera: Fix resource leaks on probe failure`drivers/pci/controller/pcie-altera.c`	+33 -2	0 replies
131/518	PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining`drivers/pci/quirks.c`	+18 ~~-33~~	0 replies
132/518	PCI: host-common: Request bus reassignment when not probe-only`drivers/pci/controller/pci-host-common.c`	+4 -0	0 replies
133/518	PCI: imx6: Configure REF_USE_PAD before PHY reset for i.MX95`drivers/pci/controller/dwc/pci-imx6.c`	+24 -3	0 replies
134/518	PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling`drivers/pci/controller/dwc/pci-imx6.c`	+3 -9	0 replies
135/518	PCI: imx6: Assert ref_clk_en after reference clock stabilizes on i.MX95`drivers/pci/controller/dwc/pci-imx6.c`	+22 -6	0 replies
136/518	PCI: mediatek: Fix IRQ domain leak when port fails to enable`drivers/pci/controller/pcie-mediatek.c`	+40 ~~-23~~	0 replies
137/518	PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM hosts`drivers/pci/controller/dwc/pcie-qcom.c`	+6 -0	0 replies
138/518	PCI: Skip Resizable BAR restore on read error`drivers/pci/rebar.c`	+6 -0	0 replies
139/518	PCI/IOV: Skip VF Resizable BAR restore on read error`drivers/pci/iov.c`	+6 -0	0 replies
140/518	tcp: restore RCU grace period in tcp_ao_destroy_sock`include/net/tcp_ao.h` `net/ipv4/tcp_ao.c`	+4 -2	0 replies
141/518	mm/damon/ops-common: handle extreme intervals in damon_hot_score()`include/linux/damon.h` `mm/damon/ops-common.c`	+7 -2	0 replies
142/518	netfilter: ipset: fix race between dump and ip_set_list resize`net/netfilter/ipset/ip_set_core.c`	+7 -1	0 replies
143/518	virtio_pci: fix vq info pointer lookup via wrong index`drivers/virtio/virtio_pci_common.c`	+6 -4	0 replies
144/518	virtio-mmio: fix device release warning on module unload`drivers/virtio/virtio_mmio.c`	+13 ~~-13~~	0 replies
145/518	hwrng: virtio: clamp device-reported used.len at copy_data()`drivers/char/hw_random/virtio-rng.c`	+21 -2	0 replies
146/518	USB: chaoskey: Fix slab-use-after-free in chaoskey_release()`drivers/usb/misc/chaoskey.c`	+0 -1	0 replies
147/518	usb: dwc3: run gadget disconnect from sleepable suspend context`drivers/usb/dwc3/gadget.c`	+36 -7	0 replies
148/518	usb: misc: usbio: fix disconnect UAF in client teardown`drivers/usb/misc/usbio.c`	+2 -2	0 replies
149/518	6lowpan: fix NHC entry use-after-free on error path`net/6lowpan/nhc.c`	+1 -1	0 replies
150/518	tracing: Fix NULL pointer dereference in func_set_flag()`kernel/trace/trace_functions.c`	+4 -4	0 replies
151/518	tipc: fix out-of-bounds read in broadcast Gap ACK blocks`net/tipc/bcast.c` `net/tipc/bcast.h` `net/tipc/node.c`	+27 ~~-12~~	0 replies
152/518	staging: vme_user: bound slave read/write to the kern_buf size`drivers/staging/vme_user/vme_user.c`	+22 -0	0 replies
153/518	smb: client: restrict implied bcc[0] exemption to responses without data area`fs/smb/client/smb2misc.c`	+26 -6	2 replies
154/518	staging: vme_user: fix location monitor leak in fake bridge`drivers/staging/vme_user/vme_fake.c`	+8 -0	0 replies
155/518	staging: vme_user: fix location monitor leak in tsi148 bridge`drivers/staging/vme_user/vme_tsi148.c`	+8 -0	0 replies
156/518	media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe`drivers/staging/media/ipu3/ipu3-css-params.c`	+6 -2	0 replies
157/518	staging: media: atomisp: reduce load_primary_binaries() stack usage`drivers/staging/media/atomisp/pci/sh_css.c`	+3 -3	0 replies
158/518	staging: media: ipu7: fix double-free and use-after-free in error paths`drivers/staging/media/ipu7/ipu7.c`	+8 ~~-14~~	0 replies
159/518	staging: rtl8723bs: dont drop short TX frames in _rtw_pktfile_read()`drivers/staging/rtl8723bs/os_dep/xmit_linux.c`	+4 -2	0 replies
160/518	staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()`drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c`	+8 -0	0 replies
161/518	staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+7 -1	0 replies
162/518	staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+4 -0	0 replies
163/518	staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop`drivers/staging/rtl8723bs/core/rtw_wlan_util.c`	+5 -1	0 replies
164/518	staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+8 -0	0 replies
165/518	staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop`drivers/staging/rtl8723bs/core/rtw_wlan_util.c`	+11 -3	0 replies
166/518	staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()`drivers/staging/rtl8723bs/core/rtw_ieee80211.c`	+15 -0	0 replies
167/518	staging: rtl8723bs: fix OOB write in HT_caps_handler()`drivers/staging/rtl8723bs/core/rtw_wlan_util.c`	+2 -1	0 replies
168/518	crypto: amlogic - avoid double cleanup in meson_crypto_probe()`drivers/crypto/amlogic/amlogic-gxl-core.c`	+1 -1	0 replies
169/518	crypto: krb5 - filter out async aead implementations at alloc`crypto/krb5/krb5_api.c`	+1 -1	0 replies
170/518	crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()`drivers/crypto/intel/qat/qat_common/adf_accel_devices.h` `drivers/crypto/intel/qat/qat_common/adf_common_drv.h` `drivers/crypto/intel/qat/qat_common/adf_isr.c` +1 more	+61 -2	0 replies
171/518	ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL`fs/smb/server/smb2pdu.c`	+7 -7	0 replies
172/518	net: af_key: initialize alg_key_len for IPComp states`net/key/af_key.c`	+1 -0	0 replies
173/518	audit: Fix data races of skb_queue_len() readers on audit_queue`kernel/audit.c`	+5 -5	0 replies
174/518	Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref`include/net/bluetooth/l2cap.h` `net/bluetooth/l2cap_core.c`	+21 ~~-14~~	0 replies
175/518	Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete`net/bluetooth/mgmt.c`	+3 -0	0 replies
176/518	coresight: etb10: restore atomic_t for shared reading state`drivers/hwtracing/coresight/coresight-etb10.c`	+3 -3	0 replies
177/518	debugobjects: Plug race against a concurrent OOM disable`lib/debugobjects.c`	+17 -0	0 replies
178/518	fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns`fs/ntfs3/fslog.c`	+15 -5	0 replies
179/518	ntfs: avoid calling post_write_mst_fixup() for invalid index_block`fs/ntfs/index.c`	+4 -1	0 replies
180/518	NTB: epf: Avoid calling pci_irq_vector() from hardirq context`drivers/ntb/hw/epf/ntb_hw_epf.c`	+3 -1	0 replies
181/518	gpio: eic-sprd: use raw_spinlock_t in the irq startup path`drivers/gpio/gpio-eic-sprd.c`	+4 -4	0 replies
182/518	gpio: sch: use raw_spinlock_t in the irq startup path`drivers/gpio/gpio-sch.c`	+16 ~~-16~~	0 replies
183/518	HID: logitech-dj: Fix maxfield check in DJ short report validation`drivers/hid/hid-logitech-dj.c`	+7 -2	0 replies
184/518	io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE`io_uring/nop.c`	+4 -4	0 replies
185/518	io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item`io_uring/io-wq.c`	+1 -1	0 replies
186/518	io_uring/rw: preserve partial result for iopoll`io_uring/rw.c`	+6 -6	0 replies
187/518	netpoll: fix a use-after-free on shutdown path`net/core/netpoll.c`	+1 -8	0 replies
188/518	ipv4: igmp: remove multicast group from hash table on device destruction`net/ipv4/igmp.c`	+1 -0	0 replies
189/518	net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes`net/ipv4/sysctl_net_ipv4.c` `net/ipv4/tcp_output.c`	+10 -4	0 replies
190/518	media: nxp: imx8-isi: Fix use-after-free on remove`drivers/media/platform/nxp/imx8-isi/imx8-isi-core.c`	+1 -1	0 replies
191/518	mfd: cros_ec: Delay dev_set_drvdata() until probe success`drivers/mfd/cros_ec_dev.c`	+2 -1	0 replies
192/518	mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()`mm/shrinker_debug.c`	+0 -4	0 replies
193/518	mm: shrinker: fix shrinker_info teardown race with expansion`mm/shrinker.c`	+11 -2	0 replies
194/518	mm: shrinker: fix NULL pointer dereference in debugfs`mm/shrinker_debug.c`	+6 -4	0 replies
195/518	mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host`mm/swap_cgroup.c`	+2 -0	0 replies
196/518	mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup`mm/swapfile.c`	+1 -0	0 replies
197/518	netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump`net/netfilter/nf_conntrack_netlink.c`	+1 -1	0 replies
198/518	netfilter: handle unreadable frags`net/ipv6/netfilter/nf_conntrack_reasm.c` `net/netfilter/nfnetlink_log.c` `net/netfilter/nfnetlink_queue.c` +1 more	+41 ~~-19~~	0 replies
199/518	netfilter: ebtables: zero chainstack array`net/bridge/netfilter/ebtables.c`	+1 -2	0 replies
200/518	netfilter: ebtables: module names must be null-terminated`net/bridge/netfilter/ebtables.c`	+3 -0	0 replies
201/518	netfilter: ebtables: terminate table name before find_table_lock()`net/bridge/netfilter/ebtables.c`	+6 -0	0 replies
202/518	netfilter: flowtable: fix offloaded ct timeout never being extended`net/netfilter/nf_flow_table_core.c`	+9 -4	0 replies
203/518	netfilter: flowtable: IPIP tunnel hardware offload is not yet support`include/net/netfilter/nf_flow_table.h` `net/netfilter/nf_flow_table_core.c` `net/netfilter/nf_flow_table_offload.c`	+25 -6	0 replies
204/518	Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()`drivers/bluetooth/btmtksdio.c`	+1 -1	0 replies
205/518	Bluetooth: bnep: pin L2CAP connection during netdev registration`net/bluetooth/bnep/core.c`	+21 -6	0 replies
206/518	Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()`drivers/bluetooth/btnxpuart.c`	+6 -0	0 replies
207/518	Bluetooth: fix UAF in bt_accept_dequeue()`net/bluetooth/af_bluetooth.c` `net/bluetooth/l2cap_sock.c`	+5 ~~-16~~	0 replies
208/518	Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()`include/net/bluetooth/hci_core.h` `net/bluetooth/hci_conn.c` `net/bluetooth/hci_sync.c`	+123 ~~-32~~	0 replies
209/518	Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled`drivers/bluetooth/hci_ldisc.c`	+10 -4	0 replies
210/518	Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()`net/bluetooth/iso.c`	+12 -1	0 replies
211/518	Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock`net/bluetooth/l2cap_core.c`	+2 -8	0 replies
212/518	Bluetooth: L2CAP: validate option length before reading conf opt value`net/bluetooth/l2cap_core.c`	+28 -8	0 replies
213/518	coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()`drivers/hwtracing/coresight/ultrasoc-smb.c`	+1 -0	0 replies
214/518	smb: client: resolve SWN tcon from live registrations`fs/smb/client/cifs_swn.c` `fs/smb/client/trace.h`	+262 ~~-54~~	0 replies
215/518	smb/client: Fix error code in smb2_aead_req_alloc()`fs/smb/client/smb2ops.c`	+5 -3	0 replies
216/518	ksmbd: prevent path traversal bypass by restricting caseless retry`fs/smb/server/vfs.c`	+1 -1	0 replies
217/518	ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE`fs/smb/server/smb2pdu.c`	+11 -0	0 replies
218/518	ksmbd: add a permission check for FSCTL_SET_ZERO_DATA`fs/smb/server/smb2pdu.c`	+6 -0	0 replies
219/518	ksmbd: serialize QUERY_DIRECTORY requests per file`fs/smb/server/smb2pdu.c` `fs/smb/server/vfs_cache.c` `fs/smb/server/vfs_cache.h`	+7 -0	0 replies
220/518	ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation`fs/smb/server/smb2pdu.c`	+16 ~~-18~~	0 replies
221/518	ksmbd: require source read access for duplicate extents`fs/smb/server/smb2pdu.c`	+4 -0	0 replies
222/518	ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY`fs/smb/server/smb2pdu.c`	+3 -0	0 replies
223/518	ksmbd: run set info with opener credentials`fs/smb/server/smb2pdu.c`	+3 -5	0 replies
224/518	ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION`fs/smb/server/smb2pdu.c`	+6 -0	0 replies
225/518	ksmbd: add per-handle permission check to FILE_LINK_INFORMATION`fs/smb/server/smb2pdu.c`	+5 -0	0 replies
226/518	ksmbd: use opener credentials for delete-on-close`fs/smb/server/vfs.c` `fs/smb/server/vfs_cache.c`	+9 -2	0 replies
227/518	ksmbd: use opener credentials for ADS I/O`fs/smb/server/vfs.c`	+9 -2	0 replies
228/518	ksmbd: track the connection owning a byte-range lock`fs/smb/server/smb2pdu.c` `fs/smb/server/vfs_cache.c` `fs/smb/server/vfs_cache.h`	+26 -8	0 replies
229/518	ksmbd: validate NTLMv2 response before updating session key`fs/smb/server/auth.c`	+16 -4	0 replies
230/518	smb/client: fix chown/chgrp with SMB3 POSIX Extensions`fs/smb/client/inode.c`	+2 -1	0 replies
231/518	smb: client: fix query directory replay double-free`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
232/518	smb: client: fix query_info() replay double-free`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
233/518	smb: client: fix double-free in SMB2_ioctl() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
234/518	smb: client: fix change notify replay double-free`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
235/518	smb: client: fix double-free in SMB2_flush() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
236/518	smb: client: fix double-free in SMB2_open() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
237/518	smb: client: fix double-free in SMB2_close() replay`fs/smb/client/smb2pdu.c`	+2 -0	0 replies
238/518	smb: client: Fix next buffer leak in receive_encrypted_standard()`fs/smb/client/smb2ops.c`	+6 -4	0 replies
239/518	smb: client: use unaligned reads in parse_posix_ctxt()`fs/smb/client/smb2pdu.c`	+3 -3	0 replies
240/518	smb: client: harden POSIX SID length parsing`fs/smb/client/smb2pdu.c`	+1 -1	0 replies
241/518	smb: client: fix atime clamp check in read completion`fs/smb/client/file.c`	+1 -1	0 replies
242/518	smb: client: mask server-provided mode to 07777 in modefromsid`fs/smb/client/cifsacl.c`	+1 -1	0 replies
243/518	smb/server: do not require delete access for non-replacing links`fs/smb/server/smb2pdu.c`	+8 -6	0 replies
244/518	writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()`fs/fs-writeback.c`	+29 -2	0 replies
245/518	OPP: of: Fix potential memory leak in opp_parse_supplies()`drivers/opp/of.c`	+2 -1	0 replies
246/518	cpufreq: qcom-cpufreq-hw: Fix possible double free`drivers/cpufreq/qcom-cpufreq-hw.c`	+0 -1	0 replies
247/518	firmware_loader: fix device reference leak in firmware_upload_register()`drivers/base/firmware_loader/sysfs_upload.c`	+3 -5	0 replies
248/518	libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()`fs/libfs.c`	+1 -0	0 replies
249/518	proc: protect ptrace_may_access() with exec_update_lock (FD links)`fs/proc/base.c` `fs/proc/fd.c` `fs/proc/internal.h`	+58 ~~-88~~	0 replies
250/518	perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()`arch/x86/events/intel/uncore_snb.c`	+0 -7	0 replies
251/518	cpufreq: intel_pstate: Sync policy->cur during CPU offline`drivers/cpufreq/intel_pstate.c`	+4 -2	0 replies
252/518	sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT`kernel/sched/features.h`	+8 -0	0 replies
253/518	cpufreq: Fix hotplug-suspend race during reboot`drivers/cpufreq/cpufreq.c`	+2 -0	0 replies
254/518	cpufreq: pcc: fix use-after-free and double free in _OSC evaluation`drivers/cpufreq/pcc-cpufreq.c`	+2 -0	0 replies
255/518	proc: protect ptrace_may_access() with exec_update_lock (part 1)`fs/proc/array.c` `fs/proc/base.c` `fs/proc/namespaces.c`	+40 ~~-19~~	0 replies
256/518	posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path`kernel/time/posix-cpu-timers.c`	+1 -0	0 replies
257/518	time/jiffies: Register jiffies clocksource before usage`kernel/time/jiffies.c`	+5 -6	0 replies
258/518	clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances`drivers/clocksource/timer-tegra186.c`	+2 -1	0 replies
259/518	s390: Revert support for DCACHE_WORD_ACCESS`arch/s390/Kconfig` `arch/s390/include/asm/asm-extable.h` `arch/s390/include/asm/word-at-a-time.h` +1 more	+0 ~~-45~~	0 replies
260/518	perf/arm-cmn: Fix DVM node events`drivers/perf/arm-cmn.c`	+12 ~~-11~~	0 replies
261/518	X.509: Fix validation of ASN.1 certificate header`crypto/asymmetric_keys/x509_loader.c`	+1 -1	0 replies
262/518	mm/slab: do not limit zeroing to orig_size when only red zoning is enabled`mm/slub.c`	+10 -8	0 replies
263/518	tools/mm/slabinfo: Fix trace disable logic inversion`tools/mm/slabinfo.c`	+1 -1	0 replies
264/518	tools/mm/slabinfo: fix total_objects attribute name`tools/mm/slabinfo.c`	+2 -2	0 replies
265/518	HID: hid-goodix-spi: validate report size to prevent stack buffer overflow`drivers/hid/hid-goodix-spi.c`	+3 -0	0 replies
266/518	HID: uhid: convert to hid_safe_input_report()`drivers/hid/uhid.c`	+4 -4	0 replies
267/518	HID: wacom: stop hardware after post-start probe failures`drivers/hid/wacom_sys.c`	+6 -6	0 replies
268/518	HID: pidff: Use correct effect type in effect update`drivers/hid/usbhid/hid-pidff.c`	+1 -1	0 replies
269/518	HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove()`drivers/hid/hid-lenovo-go.c`	+9 -0	0 replies
270/518	HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert`drivers/hid/wacom_sys.c`	+4 -2	0 replies
271/518	HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()`drivers/hid/wacom_sys.c`	+1 -1	0 replies
272/518	HID: letsketch: fix UAF on inrange_timer at driver unbind`drivers/hid/hid-letsketch.c`	+33 -3	0 replies
273/518	HID: multitouch: fix out-of-bounds bit access on mt_io_flags`drivers/hid/hid-multitouch.c`	+20 ~~-12~~	0 replies
274/518	HID: appleir: fix UAF on pending key_up_timer in remove()`drivers/hid/hid-appleir.c`	+35 ~~-10~~	0 replies
275/518	HID: lg-g15: cancel pending work on remove to fix a use-after-free`drivers/hid/hid-lg-g15.c`	+16 -0	0 replies
276/518	HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads`drivers/hid/hid-sensor-hub.c` `include/linux/hid-sensor-hub.h`	+96 -6	0 replies
277/518	hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length`fs/hfs/bnode.c` `fs/hfsplus/hfsplus_fs.h`	+2 -2	0 replies
278/518	hfs/hfsplus: zero-initialize buffer in hfs_bnode_read`fs/hfs/bnode.c` `fs/hfsplus/bnode.c`	+4 -0	0 replies
279/518	nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers`fs/nilfs2/segment.c`	+22 -0	0 replies
280/518	media: mtk-jpeg: cancel workqueue on release for supported platforms only`drivers/media/platform/mediatek/jpeg/mtk_jpeg_core.c`	+2 -1	0 replies
281/518	serial: 8250_mid: Disable DMA for selected platforms`drivers/tty/serial/8250/8250_mid.c`	+11 -2	0 replies
282/518	xfs: use null daddr for unset first bad log block`fs/xfs/xfs_log_recover.c`	+3 -3	0 replies
283/518	xfs: release dquot buffer after dqflush failure`fs/xfs/xfs_qm.c`	+2 -3	0 replies
284/518	xfs: pass back updated nb from xfs_growfs_compute_deltas`fs/xfs/libxfs/xfs_ag.c` `fs/xfs/libxfs/xfs_ag.h` `fs/xfs/xfs_fsops.c`	+7 -7	0 replies
285/518	xfs: only log freed extents for the current RTG in zoned growfs`fs/xfs/xfs_rtalloc.c`	+4 -4	0 replies
286/518	xfs: initialize iomap->flags earlier in xfs_bmbt_to_iomap`fs/xfs/xfs_iomap.c`	+1 -1	0 replies
287/518	xfs: fix unreachable BIGTIME check in dquot flush validation`fs/xfs/xfs_dquot.c`	+8 -8	0 replies
288/518	xfs: fix pointer arithmetic error on 32-bit systems`fs/xfs/libxfs/xfs_bmap_btree.h`	+1 -1	0 replies
289/518	xfs: fix exchmaps reservation limit check`fs/xfs/libxfs/xfs_exchmaps.c`	+1 -1	0 replies
290/518	xfs: fix memory leak in xfs_dqinode_metadir_create()`fs/xfs/libxfs/xfs_dquot_buf.c`	+12 -2	0 replies
291/518	bpf: Reject fragmented frames in devmap`kernel/bpf/devmap.c`	+7 -0	0 replies
292/518	bpf: Restore sysctl new-value from 1 to 0`kernel/bpf/cgroup.c`	+1 -1	0 replies
293/518	bpf: Validate BTF repeated field counts before expansion`kernel/bpf/btf.c`	+4 -5	0 replies
294/518	bpf: Keep dynamic inner array lookups nullable`kernel/bpf/verifier.c`	+9 -6	0 replies
295/518	bpf: Allow LPM map access from sleepable BPF programs`kernel/bpf/lpm_trie.c`	+4 -4	0 replies
296/518	net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()`drivers/net/usb/kalmia.c`	+8 -0	0 replies
297/518	Revert "usb: typec: mux: avoid duplicated mux switches"`drivers/usb/typec/mux.c`	+1 ~~-12~~	0 replies
298/518	usb: cdc_acm: Add quirk for Uniden BC125AT scanner`drivers/usb/class/cdc-acm.c`	+3 -0	0 replies
299/518	usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()`drivers/usb/cdns3/cdnsp-mem.c`	+2 -0	0 replies
300/518	USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub`drivers/usb/core/quirks.c`	+3 -0	0 replies
301/518	usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()`drivers/usb/dwc3/core.c`	+2 -2	0 replies
302/518	usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()`drivers/usb/dwc3/dwc3-meson-g12a.c`	+9 -5	0 replies
303/518	usb: free iso schedules on failed submit`drivers/usb/fotg210/fotg210-hcd.c` `drivers/usb/host/ehci-sched.c`	+13 -4	0 replies
304/518	usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler`drivers/usb/gadget/composite.c`	+3 -2	0 replies
305/518	usb: gadget: udc: Fix use-after-free in gadget_match_driver`drivers/usb/gadget/udc/core.c`	+28 -1	0 replies
306/518	usb: gadget: f_printer: take kref only for successful open`drivers/usb/gadget/function/f_printer.c`	+1 -2	0 replies
307/518	USB: idmouse: fix use-after-free on disconnect race`drivers/usb/misc/idmouse.c`	+22 ~~-23~~	0 replies
308/518	USB: ldusb: fix use-after-free on disconnect race`drivers/usb/misc/ldusb.c`	+18 ~~-20~~	0 replies
309/518	USB: iowarrior: fix use-after-free on disconnect`drivers/usb/misc/iowarrior.c`	+3 -1	0 replies
310/518	USB: iowarrior: fix use-after-free on disconnect race`drivers/usb/misc/iowarrior.c`	+24 ~~-33~~	0 replies
311/518	USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD`drivers/usb/core/quirks.c`	+3 -0	0 replies
312/518	USB: legousbtower: fix use-after-free on disconnect race`drivers/usb/misc/legousbtower.c`	+19 ~~-18~~	0 replies
313/518	usb: sl811-hcd: disable controller wakeup on remove`drivers/usb/host/sl811-hcd.c`	+1 -0	0 replies
314/518	USB: storage: include US_FL_NO_SAME in quirks mask`drivers/usb/storage/usb.c`	+1 -1	0 replies
315/518	usb: misc: usbio: bound bulk IN response length to the received transfer`drivers/usb/misc/usbio.c`	+4 -0	0 replies
316/518	USB: misc: uss720: unregister parport on probe failure`drivers/usb/misc/uss720.c`	+4 -1	0 replies
317/518	usb: mtu3: unmap request DMA on queue failure`drivers/usb/mtu3/mtu3_gadget.c`	+1 -0	0 replies
318/518	USB: serial: keyspan_pda: fix information leak`drivers/usb/serial/keyspan_pda.c`	+1 -1	0 replies
319/518	USB: serial: option: add Telit Cinterion FE990D50 compositions`drivers/usb/serial/option.c`	+16 -0	0 replies
320/518	USB: serial: digi_acceleport: fix broken rx after throttle`drivers/usb/serial/digi_acceleport.c`	+16 -0	0 replies
321/518	USB: serial: digi_acceleport: fix hard lockup on disconnect`drivers/usb/serial/digi_acceleport.c`	+7 -5	0 replies
322/518	USB: serial: digi_acceleport: fix write buffer corruption`drivers/usb/serial/digi_acceleport.c`	+10 -5	0 replies
323/518	USB: ulpi: fix memory leak on registration failure`drivers/usb/common/ulpi.c`	+10 ~~-13~~	0 replies
324/518	USB: usb-storage: ene_ub6250: restore media-ready check`drivers/usb/storage/ene_ub6250.c`	+2 -1	0 replies
325/518	usbip: tools: support SuperSpeedPlus devices`tools/usb/usbip/libsrc/usbip_common.c` `tools/usb/usbip/libsrc/usbip_device_driver.c` `tools/usb/usbip/libsrc/vhci_driver.c`	+7 -0	0 replies
326/518	usbip: vudc: fix NULL deref in vep_dequeue()`drivers/usb/usbip/vudc.h` `drivers/usb/usbip/vudc_dev.c`	+1 -4	0 replies
327/518	usb: typec: anx7411: use devm_pm_runtime_enable()`drivers/usb/typec/anx7411.c`	+3 -1	0 replies
328/518	usb: typec: class: drop PD lookup reference`drivers/usb/typec/class.c`	+1 -0	0 replies
329/518	usb: typec: ps883x: Fix DP+USB3 configuration`drivers/usb/typec/mux/ps883x.c`	+3 -3	0 replies
330/518	usb: typec: tcpm: Fix VDM type for Enter Mode commands`drivers/usb/typec/tcpm/tcpm.c`	+2 -2	0 replies
331/518	usb: typec: tcpm: Validate SVID index in svdm_consume_modes()`drivers/usb/typec/tcpm/tcpm.c`	+5 -0	0 replies
332/518	usb: typec: ucsi: Invert DisplayPort role assignment`drivers/usb/typec/ucsi/displayport.c`	+2 -2	0 replies
333/518	usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode`drivers/usb/typec/ucsi/displayport.c`	+1 -2	0 replies
334/518	usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove`drivers/usb/typec/ucsi/ucsi_ccg.c`	+1 -1	0 replies
335/518	usb: typec: ucsi: cancel pending work on system suspend`drivers/usb/typec/ucsi/ucsi.c` `drivers/usb/typec/ucsi/ucsi.h` `drivers/usb/typec/ucsi/ucsi_acpi.c`	+30 -1	0 replies
336/518	usb: gadget: f_fs: initialize reset_work at allocation time`drivers/usb/gadget/function/f_fs.c`	+2 -2	0 replies
337/518	usb: gadget: f_fs: Fix DMA fence leak`drivers/usb/gadget/function/f_fs.c`	+1 -0	0 replies
338/518	usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks`drivers/usb/gadget/function/f_fs.c`	+1 -1	0 replies
339/518	usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile`drivers/usb/gadget/function/f_fs.c`	+1 -1	0 replies
340/518	block: skip sync_blockdev() on surprise removal in bdev_mark_dead()`block/bdev.c`	+7 -1	0 replies
341/518	wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon`drivers/net/wireless/mediatek/mt76/mt7921/main.c` `drivers/net/wireless/mediatek/mt76/mt7925/main.c`	+6 -0	0 replies
342/518	udf: validate free block extents against the partition length`fs/udf/balloc.c`	+3 -2	0 replies
343/518	udf: validate VAT header length against the VAT inode size`fs/udf/super.c`	+8 -0	0 replies
344/518	udf: validate sparing table length as an entry count, not a byte count`fs/udf/super.c`	+2 -1	0 replies
345/518	hwrng: jh7110 - fix refcount leak in starfive_trng_read()`drivers/char/hw_random/jh7110-trng.c`	+8 -5	0 replies
346/518	crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A`drivers/crypto/atmel-sha204a.c`	+12 -7	0 replies
347/518	crypto: atmel-sha204a - fail on hwrng registration error in probe path`drivers/crypto/atmel-sha204a.c`	+5 -3	0 replies
348/518	nvme: target: rdma: fix ndev refcount leak on queue connect`drivers/nvme/target/rdma.c`	+4 -2	0 replies
349/518	block: partitions: fix of_node refcount leak in of_partition()`block/partitions/of.c`	+4 -1	0 replies
350/518	dm-ioctl: report an error if a device has no table`drivers/md/dm-ioctl.c`	+4 -1	0 replies
351/518	nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks`drivers/nvme/host/multipath.c`	+6 -0	0 replies
352/518	nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page`drivers/nvme/target/discovery.c`	+22 -1	0 replies
353/518	btrfs: fix false IO failure after falling back to buffered write`fs/btrfs/direct-io.c` `fs/btrfs/inode.c` `fs/btrfs/ordered-data.c` +1 more	+29 -8	0 replies
354/518	nvmet-auth: validate reply message payload bounds against transfer length`drivers/nvme/target/fabrics-cmd-auth.c`	+12 -3	0 replies
355/518	btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC`fs/btrfs/btrfs_inode.h` `fs/btrfs/file.c` `fs/btrfs/inode.c` +1 more	+60 ~~-32~~	0 replies
356/518	btrfs: do not trim a device which is not writeable`fs/btrfs/extent-tree.c`	+8 -4	0 replies
357/518	partitions: aix: bound the pp_count scan to the ppe array`block/partitions/aix.c`	+9 -0	0 replies
358/518	btrfs: fix incorrect buffered IO fallback for append direct writes`fs/btrfs/direct-io.c`	+42 -1	0 replies
359/518	isofs: bound Rock Ridge symlink components to the SL record`fs/isofs/rock.c`	+11 -0	0 replies
360/518	crypto: af_alg - Remove zero-copy support from skcipher and aead`Documentation/crypto/userspace-if.rst` `crypto/af_alg.c` `crypto/algif_aead.c`	+32 ~~-78~~	0 replies
361/518	crypto: caam - use print_hex_dump_devel to guard key hex dumps`drivers/crypto/caam/caamalg.c` `drivers/crypto/caam/caamalg_qi.c` `drivers/crypto/caam/caamhash.c` +1 more	+16 ~~-16~~	0 replies
362/518	crypto: caam - use print_hex_dump_devel to guard key hex dumps again`drivers/crypto/caam/caamalg_qi2.c`	+6 -6	0 replies
363/518	crypto: chacha20poly1305 - validate poly1305 template argument`crypto/chacha20poly1305.c`	+9 -2	0 replies
364/518	crypto: crypto4xx - Remove insecure and unused rng_alg`drivers/crypto/Kconfig` `drivers/crypto/amcc/crypto4xx_core.c` `drivers/crypto/amcc/crypto4xx_core.h` +1 more	+0 ~~-104~~	0 replies
365/518	crypto: ecc - Fix carry overflow in vli multiplication`crypto/ecc.c`	+20 ~~-11~~	0 replies
366/518	crypto: hisi-trng - Remove crypto_rng interface`drivers/crypto/hisilicon/Kconfig` `drivers/crypto/hisilicon/trng/trng.c`	+2 ~~-295~~	0 replies
367/518	crypto: pcrypt - restore callback for non-parallel fallback`crypto/pcrypt.c`	+4 -0	0 replies
368/518	crypto: tegra - fix refcount leak in tegra_se_host1x_submit()`drivers/crypto/tegra/tegra-se-main.c`	+1 -1	0 replies
369/518	crypto: loongson - Select CRYPTO_RNG`drivers/crypto/loongson/Kconfig`	+1 -0	0 replies
370/518	crypto: loongson - Remove broken and unused loongson-rng`MAINTAINERS` `arch/loongarch/configs/loongson32_defconfig` `arch/loongarch/configs/loongson64_defconfig` +5 more	+0 ~~-221~~	0 replies
371/518	crypto: ccp - Do not initialize SNP for SEV ioctls`drivers/crypto/ccp/sev-dev.c`	+2 -5	0 replies
372/518	crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)`drivers/crypto/ccp/sev-dev.c`	+1 ~~-12~~	0 replies
373/518	crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)`drivers/crypto/ccp/sev-dev.c`	+4 ~~-13~~	0 replies
374/518	crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)`drivers/crypto/ccp/sev-dev.c`	+4 ~~-29~~	0 replies
375/518	crypto: drbg - Fix returning success on failure in CTR_DRBG`crypto/drbg.c`	+1 -1	0 replies
376/518	crypto: drbg - Fix misaligned writes in CTR_DRBG and HASH_DRBG`crypto/df_sp80090a.c` `crypto/drbg.c` `include/crypto/internal/drbg.h`	+6 ~~-22~~	0 replies
377/518	crypto: drbg - Fix ineffective sanity check`crypto/drbg.c`	+4 -5	0 replies
378/518	crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels`include/crypto/drbg.h`	+7 ~~-11~~	0 replies
379/518	crypto: drbg - Fix the fips_enabled priority boost`crypto/drbg.c`	+1 -1	0 replies
380/518	crypto: qat - centralize bus master enable`drivers/crypto/intel/qat/qat_420xx/adf_drv.c` `drivers/crypto/intel/qat/qat_4xxx/adf_drv.c` `drivers/crypto/intel/qat/qat_6xxx/adf_drv.c` +9 more	+10 ~~-15~~	0 replies
381/518	crypto: qat - fix restarting state leak on allocation failure`drivers/crypto/intel/qat/qat_common/adf_aer.c`	+4 -3	0 replies
382/518	crypto: qat - handle sysfs-triggered reset callbacks`drivers/crypto/intel/qat/qat_common/adf_aer.c`	+12 -0	0 replies
383/518	crypto: qat - keep VFs enabled during reset`drivers/crypto/intel/qat/qat_common/adf_sriov.c`	+11 -1	0 replies
384/518	crypto: qat - notify fatal error before AER reset preparation`drivers/crypto/intel/qat/qat_common/adf_aer.c`	+2 -2	0 replies
385/518	crypto: qat - protect service table iterations with service_lock`drivers/crypto/intel/qat/qat_common/adf_init.c`	+16 -0	0 replies
386/518	crypto: qat - skip restart for down devices`drivers/crypto/intel/qat/qat_common/adf_aer.c`	+8 -0	0 replies
387/518	crypto: qat - validate RSA CRT component lengths`drivers/crypto/intel/qat/qat_common/qat_asym_algs.c`	+5 -5	0 replies
388/518	crypto: qat - factor out AER reset helpers`drivers/crypto/intel/qat/qat_common/adf_aer.c`	+53 ~~-33~~	0 replies
389/518	crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header`drivers/crypto/talitos.c`	+20 -8	0 replies
390/518	crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1`drivers/crypto/talitos.c` `drivers/crypto/talitos.h`	+124 ~~-58~~	0 replies
391/518	crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function`drivers/crypto/talitos.c`	+22 ~~-17~~	0 replies
392/518	crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function`drivers/crypto/talitos.c`	+41 ~~-34~~	0 replies
393/518	crypto: talitos - move code in current_desc_hdr() into a standalone function`drivers/crypto/talitos.c`	+19 ~~-16~~	0 replies
394/518	crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor`drivers/crypto/talitos.c`	+6 ~~-95~~	0 replies
395/518	crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue`drivers/crypto/talitos.c` `drivers/crypto/talitos.h`	+115 ~~-63~~	0 replies
396/518	crypto: talitos/hash - drop workqueue mechanism for SEC1`drivers/crypto/talitos.c`	+7 ~~-73~~	0 replies
397/518	crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request`drivers/crypto/talitos.c`	+13 ~~-16~~	0 replies
398/518	crypto: talitos/hash - remove useless wrapper`drivers/crypto/talitos.c`	+1 -6	0 replies
399/518	crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation`drivers/crypto/talitos.c`	+40 -9	0 replies
400/518	arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()`arch/arm64/kernel/entry-fpsimd.S`	+4 -4	0 replies
401/518	spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()`drivers/spi/spi-fsl-lpspi.c`	+9 -9	0 replies
402/518	spi: fsl-lpspi: terminate the RX channel on TX prepare failure path`drivers/spi/spi-fsl-lpspi.c`	+1 -1	0 replies
403/518	x86/mm: Fix freeing of PMD-sized vmemmap pages`arch/x86/mm/init_64.c`	+26 ~~-14~~	0 replies
404/518	EDAC/i10nm: Dont fail probing if ADXL is missing`drivers/edac/i10nm_base.c`	+11 -3	0 replies
405/518	watchdog: apple: Add "apple,t8103-wdt" compatible`drivers/watchdog/apple_wdt.c`	+1 -0	0 replies
406/518	regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()`drivers/regulator/scmi-regulator.c`	+3 -1	0 replies
407/518	i2c: core: fix hang on adapter registration failure`drivers/i2c/i2c-core-base.c`	+29 ~~-20~~	0 replies
408/518	perf/aux: Fix page UAF in map_range()`kernel/events/core.c`	+2 -0	0 replies
409/518	liveupdate: reject LIVEUPDATE_IOCTL_CREATE_SESSION with invalid name length`kernel/liveupdate/luo_session.c`	+4 -0	0 replies
410/518	selftests/liveupdate: add test cases for LIVEUPDATE_IOCTL_CREATE_SESSION calls with invalid length`tools/testing/selftests/liveupdate/liveupdate.c`	+42 -0	0 replies
411/518	tracing: Prevent out-of-bounds read in glob matching`include/linux/glob.h` `kernel/trace/trace_events_filter.c` `lib/glob.c`	+32 -6	0 replies
412/518	audit: fix potential integer overflow in audit_log_n_hex()`kernel/audit.c`	+9 -2	0 replies
413/518	NFSv4: include MAY_WRITE in open permission mask for O_TRUNC`fs/nfs/dir.c`	+2 -0	0 replies
414/518	rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow schedule`include/asm-generic/rqspinlock.h`	+11 -3	0 replies
415/518	module: decompress: check return value of module_extend_max_pages()`kernel/module/decompress.c`	+2 -0	0 replies
416/518	vt: fix spurious modifier in CSI/cursor key sequences`drivers/tty/vt/keyboard.c`	+9 -3	0 replies
417/518	exfat: preserve benign secondary entries during rename and move`fs/exfat/dir.c` `fs/exfat/exfat_fs.h` `fs/exfat/namei.c`	+116 ~~-28~~	0 replies
418/518	exfat: bound uniname advance in exfat_find_dir_entry()`fs/exfat/dir.c`	+8 -5	0 replies
419/518	NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()`drivers/ntb/hw/epf/ntb_hw_epf.c`	+4 -6	0 replies
420/518	riscv: mm: Define DIRECT_MAP_PHYSMEM_END`arch/riscv/include/asm/pgtable.h`	+10 -0	0 replies
421/518	riscv: mm: Unconditionally sfence.vma for spurious fault`arch/riscv/kernel/entry.S`	+5 -2	0 replies
422/518	lib/test_hmm: use kvfree() to free kvcalloc() allocations`lib/test_hmm.c`	+2 -2	0 replies
423/518	mm: fix mmap errno value when MAP_DROPPABLE is not supported`mm/mmap.c`	+1 -1	0 replies
424/518	selftests: mm: fix and speedup "droppable" test`tools/testing/selftests/mm/droppable.c`	+26 ~~-20~~	0 replies
425/518	mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access`include/linux/page_ext.h`	+13 -6	0 replies
426/518	mm: do file ownership checks with the proper mount idmap`include/linux/fs.h` `mm/filemap.c` `mm/madvise.c` +1 more	+8 -5	0 replies
427/518	selftests/mm: pagemap_ioctl: use the correct page size for transact_test()`tools/testing/selftests/mm/pagemap_ioctl.c`	+6 -6	0 replies
428/518	selftests/mm: fix ksft_process_madv.sh test category`tools/testing/selftests/mm/ksft_process_madv.sh`	+1 -1	0 replies
429/518	nouveau/vmm: fix another SPT/LPT race`drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.c`	+14 ~~-17~~	0 replies
430/518	bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized`include/linux/bpf_lsm.h` `kernel/bpf/bpf_inode_storage.c` `security/bpf/hooks.c`	+16 -0	0 replies
431/518	iommu/vt-d: Avoid WARNING in sva unbind path`drivers/iommu/intel/iommu.h` `drivers/iommu/intel/svm.c`	+15 -8	0 replies
432/518	iommu/amd: Dont split flush for amd_iommu_domain_flush_all()`drivers/iommu/amd/iommu.c`	+2 -1	0 replies
433/518	iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read`drivers/iommu/iommufd/eventq.c`	+1 -1	0 replies
434/518	iommufd: Fix data_len byte-count vs element-count mismatch`drivers/iommu/iommufd/iommufd_private.h`	+1 -1	0 replies
435/518	iommufd: Move vevent memory allocation outside spinlock`drivers/iommu/iommufd/driver.c`	+8 -5	0 replies
436/518	iommufd: Set veventq_depth upper bound`drivers/iommu/iommufd/eventq.c`	+4 -1	0 replies
437/518	iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails`drivers/iommu/iommufd/eventq.c`	+1 -0	0 replies
438/518	iommufd: Reject invalid read count in iommufd_veventq_fops_read()`drivers/iommu/iommufd/eventq.c`	+6 -0	0 replies
439/518	iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch()`drivers/iommu/iommufd/eventq.c`	+9 -1	0 replies
440/518	iommufd: Reject invalid read count in iommufd_fault_fops_read()`drivers/iommu/iommufd/eventq.c`	+3 -0	0 replies
441/518	iommufd: Break the loop on failure in iommufd_fault_fops_read()`drivers/iommu/iommufd/eventq.c`	+2 -0	0 replies
442/518	iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read()`drivers/iommu/iommufd/eventq.c`	+5 -2	0 replies
443/518	iommufd: Set upper bounds on cache invalidation entry_num and entry_len`drivers/iommu/iommufd/hw_pagetable.c`	+10 -1	0 replies
444/518	audit: fix removal of dangling executable rules`kernel/audit_fsnotify.c`	+0 -4	0 replies
445/518	landlock: Set audit_net.sk for socket access checks`security/landlock/net.c` `tools/testing/selftests/landlock/net_test.c`	+63 -0	0 replies
446/518	selftests/landlock: Explicitly disable audit in teardowns`tools/testing/selftests/landlock/audit.h` `tools/testing/selftests/landlock/audit_test.c`	+9 ~~-16~~	0 replies
447/518	landlock: Account all audit data allocations to user space`security/landlock/domain.c` `security/landlock/domain.h`	+6 -8	0 replies
448/518	selftests/landlock: Filter dealloc records in audit_count_records()`tools/testing/selftests/landlock/audit.h` `tools/testing/selftests/landlock/audit_test.c` `tools/testing/selftests/landlock/ptrace_test.c` +1 more	+30 ~~-13~~	0 replies
449/518	selftests/landlock: Increase default audit socket timeout`tools/testing/selftests/landlock/audit.h`	+63 ~~-17~~	0 replies
450/518	KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB`arch/arm64/kvm/nested.c`	+15 ~~-21~~	0 replies
451/518	LoongArch: KVM: Add missing slots_lock for device register/unregister`arch/loongarch/kvm/intc/eiointc.c` `arch/loongarch/kvm/intc/ipi.c` `arch/loongarch/kvm/intc/pch_pic.c`	+10 -0	0 replies
452/518	KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU`arch/arm64/include/asm/kvm_hyp.h` `arch/arm64/kvm/arm.c` `arch/arm64/kvm/hyp/nvhe/hyp-main.c`	+12 -0	0 replies
453/518	KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU`arch/arm64/kvm/hyp/nvhe/hyp-main.c`	+3 -0	0 replies
454/518	KVM: SEV: Pin source page for write when adding CPUID data for SNP guest`arch/x86/kvm/svm/sev.c` `arch/x86/kvm/vmx/tdx.c` `include/linux/kvm_host.h` +1 more	+8 -4	0 replies
455/518	KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM actually supports`arch/x86/kvm/svm/avic.c`	+11 -2	0 replies
456/518	KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that are accelerated`arch/x86/kvm/svm/avic.c`	+4 ~~-36~~	0 replies
457/518	KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs`arch/x86/kvm/vmx/vmx.c`	+18 ~~-17~~	0 replies
458/518	KVM: SEV: Dont terminate SNP VMs on #VMGEXIT without a registered GHCB`arch/x86/kvm/svm/sev.c`	+6 -3	0 replies
459/518	KVM: VMX: Handle bad values on proxied writes to LBR MSRs`arch/x86/kvm/vmx/pmu_intel.c`	+4 -2	0 replies
460/518	KVM: TDX: Account all non-transient page allocations for per-TD structures`arch/x86/kvm/vmx/tdx.c`	+7 -7	0 replies
461/518	KVM: x86: Ensure vendors exit handler runs before fastpath userspace exits`arch/x86/kvm/svm/svm.c` `arch/x86/kvm/vmx/vmx.c` `arch/x86/kvm/x86.c`	+6 -3	0 replies
462/518	KVM: guest_memfd: Treat memslot binding offset+size as unsigned values`virt/kvm/guest_memfd.c` `virt/kvm/kvm_mm.h`	+9 -6	0 replies
463/518	KVM: x86: Add dedicated API for getting mask of accelerated x2APIC MSRs`arch/x86/kvm/lapic.c` `arch/x86/kvm/lapic.h` `arch/x86/kvm/vmx/vmx.c`	+21 -5	0 replies
464/518	KVM: arm64: Dont leak PFN when kvm_translate_vncr() races MMU notifier`arch/arm64/kvm/nested.c`	+3 -1	0 replies
465/518	udmabuf: fix DMA direction mismatch in release_udmabuf()`drivers/dma-buf/udmabuf.c`	+4 -1	0 replies
466/518	dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning`drivers/dma-buf/udmabuf.c`	+2 -2	0 replies
467/518	svcrdma: wake sq waiters when the transport closes`include/linux/sunrpc/svc_rdma.h` `net/sunrpc/xprtrdma/svc_rdma_recvfrom.c` `net/sunrpc/xprtrdma/svc_rdma_rw.c` +2 more	+37 ~~-10~~	0 replies
468/518	Revert "svcrdma: Use contiguous pages for RDMA Read sink buffers"`net/sunrpc/xprtrdma/svc_rdma_rw.c`	+0 ~~-223~~	0 replies
469/518	fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()`drivers/fpga/dfl-afu-main.c`	+3 -0	0 replies
470/518	i2c: core: fix adapter probe deferral loop`drivers/i2c/i2c-core-base.c`	+4 -4	0 replies
471/518	i2c: core: fix irq domain leak on adapter registration failure`drivers/i2c/i2c-core-base.c`	+3 -1	0 replies
472/518	i2c: core: fix NULL-deref on adapter registration failure`drivers/i2c/i2c-core-base.c`	+5 -4	0 replies
473/518	i2c: core: fix adapter debugfs creation`drivers/i2c/i2c-core-base.c`	+10 -6	0 replies
474/518	i2c: core: fix adapter deregistration race`drivers/i2c/i2c-core-base.c`	+7 -2	0 replies
475/518	i2c: mpc: Fix timeout calculations`drivers/i2c/busses/i2c-mpc.c`	+1 -1	0 replies
476/518	i2c: davinci: Unregister cpufreq notifier on probe failure`drivers/i2c/busses/i2c-davinci.c`	+3 -1	0 replies
477/518	i2c: stm32f7: truncate clock period instead of rounding it`drivers/i2c/busses/i2c-stm32f7.c`	+7 -2	0 replies
478/518	i2c: imx-lpi2c: mark I2C adapter when hardware is powered down`drivers/i2c/busses/i2c-imx-lpi2c.c`	+14 -1	0 replies
479/518	i2c: i801: fix hardware state machine corruption in error path`drivers/i2c/busses/i2c-i801.c`	+1 -1	0 replies
480/518	Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure`drivers/input/rmi4/rmi_bus.c`	+3 -1	0 replies
481/518	Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count`drivers/input/rmi4/rmi_f3a.c`	+1 -1	0 replies
482/518	Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count`drivers/input/rmi4/rmi_f30.c`	+1 -1	0 replies
483/518	Input: elan_i2c - prevent division by zero and arithmetic underflow`drivers/input/mouse/elan_i2c_core.c`	+30 -6	0 replies
484/518	Input: goodix - clamp the device-reported contact count`drivers/input/touchscreen/goodix.c`	+2 -1	0 replies
485/518	Input: iforce - bound the device-reported force-feedback effect index`drivers/input/joystick/iforce/iforce-packets.c`	+11 -7	0 replies
486/518	Input: mms114 - fix touch indexing for MMS134S and MMS136`drivers/input/touchscreen/mms114.c`	+12 -6	0 replies
487/518	Input: ads7846 - dont use scratch for tx_buf when clearing register`drivers/input/touchscreen/ads7846.c`	+2 -3	0 replies
488/518	Input: touchwin - reset the packet index on every complete packet`drivers/input/touchscreen/touchwin.c`	+9 -6	0 replies
489/518	Input: mms114 - reject an oversized device packet size`drivers/input/touchscreen/mms114.c`	+6 -0	0 replies
490/518	Input: gscps2 - advance receive buffer write index`drivers/input/serio/gscps2.c`	+1 -0	0 replies
491/518	Input: maplemouse - fix NULL pointer dereference in open()`drivers/input/mouse/maplemouse.c`	+3 -2	0 replies
492/518	Input: mms114 - fix multi-touch slot corruption`drivers/input/touchscreen/mms114.c`	+1 -1	0 replies
493/518	Input: maple_keyb - set driver data before registering input device`drivers/input/keyboard/maple_keyb.c`	+2 -2	0 replies
494/518	Input: maplemouse - set driver data before registering input device`drivers/input/mouse/maplemouse.c`	+3 -1	0 replies
495/518	Input: maplecontrol - set driver data before registering input device`drivers/input/joystick/maplecontrol.c`	+2 -1	0 replies
496/518	RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg`drivers/infiniband/ulp/rtrs/rtrs-srv.c`	+3 -2	0 replies
497/518	RDMA/core: Fix broadcast address falsely detected as local`drivers/infiniband/core/addr.c`	+1 -1	0 replies
498/518	RDMA/siw: bound Read Response placement to the RREAD length`drivers/infiniband/sw/siw/siw_qp_rx.c`	+9 -0	0 replies
499/518	fuse: back uncached readdir buffers with pages`fs/fuse/readdir.c`	+67 ~~-18~~	0 replies
500/518	fuse: avoid 32-bit prune notification count wrap`fs/fuse/dev.c` `fs/fuse/notify.c`	+435 -1	0 replies
501/518	Revert "fuse: fix conversion of fuse_reverse_inval_entry() to start_removing()"`fs/fuse/dir.c`	+7 ~~-16~~	0 replies
502/518	fuse: fix device node leak in cuse_process_init_reply()`fs/fuse/cuse.c`	+3 -1	0 replies
503/518	fuse: do not use start_removing_noperm()`fs/fuse/dir.c`	+11 -8	0 replies
504/518	fuse: re-lock request before returning from fuse_ref_folio()`fs/fuse/dev.c`	+1 -1	0 replies
505/518	fuse: fix io-uring background queue dispatch on request completion`fs/fuse/dev.c` `fs/fuse/dev_uring.c` `fs/fuse/fuse_dev_i.h`	+26 ~~-17~~	0 replies
506/518	fuse: dont block in fuse_get_dev() for non-sync_init case`fs/fuse/dev.c`	+9 -3	0 replies
507/518	fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req`fs/fuse/dev.c`	+9 -0	0 replies
508/518	fuse-uring: fix EFAULT clobber in fuse_uring_commit`fs/fuse/dev_uring.c`	+3 -6	0 replies
509/518	fuse-uring: fix data races on ring->ready`fs/fuse/dev_uring.c` `fs/fuse/dev_uring_i.h`	+5 -3	0 replies
510/518	fuse-uring: fix moving cancelled entry to ent_in_userspace list`fs/fuse/dev_uring.c` `fs/fuse/dev_uring_i.h`	+7 -5	0 replies
511/518	fuse-uring: end fuse_req on io-uring cancel task work`fs/fuse/dev_uring.c`	+12 -2	0 replies
512/518	fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues`fs/fuse/dev_uring.c`	+2 -0	0 replies
513/518	fuse-uring: Avoid queue->stopped races and set/read that value under lock`fs/fuse/dev_uring.c`	+9 -5	0 replies
514/518	fuse-uring: make a fuse_req on SQE commit only findable after memcpy`fs/fuse/dev_uring.c`	+19 ~~-14~~	0 replies
515/518	fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref`fs/fuse/dev_uring.c`	+12 -2	0 replies
516/518	ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_IFB_SILENCE_ON_EMPTY`Documentation/sound/alsa-configuration.rst`	+6 -0	0 replies
517/518	timekeeping: Register default clocksource before taking tk_core.lock`kernel/time/timekeeping.c`	+4 -3	0 replies
518/518	Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev`net/bluetooth/6lowpan.c`	+3 ~~-15~~	0 replies

Reviews trailers per patch

260 of 518 patches have a Reviewed-by or Acked-by.

Patch	Gary Guo	Stefano Garzarella	Jarred White	Easwar Hariharan	Dave Jiang	Ilpo Järvinen	Yuanzhen Gan	Zhongqiu Han	Alexandre Courbot	Viresh Kumar	Eliot Courtney	Andreas Hindborg	Alice Ryhl	Daniel Borkmann	Lorenzo Stoakes	Jamal Hadi Salim	Victor Nogueira	Zi Yan	Lance Yang	David Hildenbrand (Arm)	Matthew Wilcox (Oracle)	Harry Yoo (Oracle)	Ian Rogers	Kai Huang	Yosry Ahmed	Andy Shevchenko	Nuno Sá	Vladimir Zapolskiy	Stepan Ionichev	Daniel Lezcano	Joshua Crofts	Maxwell Doose	Angelo Dureghello	Lorenzo Bianconi	David Heidelberg	Dave Hansen	Stefan Binding	David Lechner	Crt Mori	Kevin Tian	Jason Gunthorpe	Paul Menzel	Carlos Llamas	Lain Fearyncess Yang	Ayden Meng	Mingcong Bai	Huacai Chen	Subhransu S. Prusty	Alok Tiwari	Frank Li	Dmitry Safonov	Eric Dumazet	Jozsef Kadlecsik	Yuka	Shuangpeng Bai	Johan Hovold	Thinh Nguyen	Hans de Goede	Sakari Ailus	Alexander Aring	Tung Nguyen	Dan Carpenter	Christopher Mackle	Luka Gejak	James Clark	Hyunchul Lee	Sebastian Andrzej Siewior	Pavan Chebbi	Kuniyuki Iwashima	Ido Schimmel	Laurent Pinchart	Benson Leung	SeongJae Park	Qi Zheng	Zenghui Yu (Huawei)	Nhat Pham	Muchun Song	Roman Gushchin	Kairui Song	Hao Peng	albinwyang	Baoquan He	Chris Li	Mina Almasry	Sean Wang	Neeraj Sanjay Kale	Ahsan Atta	Namjae Jeon	Sabrina Dubroca	Ricardo Robaina	ChenXiaoSong	Henrique Carvalho	Jan Kara	Tejun Heo	Dapeng Mi	Frederic Weisbecker	Jon Hunter	Dmitry Torokhov	Oliver Roundtree	Jiri Kosina	[email protected]	[email protected]	Viacheslav Dubeyko	Christian Borntraeger	[email protected]	[email protected]	Nicolas Dufresne	Darrick J. Wong	Damien Le Moal	Carlos Maiolino	Christoph Hellwig	Allison Henderson	Emil Tsalapatis	Toke Høiland-Jørgensen	Yonghong Song	Jiayuan Chen	Xu Kuohai	Eduard Zingerman	Jiri Olsa	Andrew Lunn	Ignat Korchagin	Alistair Francis	Heikki Krogerus	Peter Chen	Alan Stern	Hao Li	Lee Jones	Teddy Astie	Alex Henrie	Greg Kroah-Hartman	Shuah Khan	Igor Kotrasinski	Jens Glathe	Konrad Dybcio	RD Babiera	Jameson Thies	Andrei Kuchynski	Loic Poulain	Michał Nazarewicz	Sungwoo Kim	Dave Tian	Weidong Zhu	Ard Biesheuvel	Md Haris Iqbal	Demi Marie Obenour	Christian Lamparter	Lukas Wunner	Akhil R	Chaitanya Kulkarni	Tom Lendacky	Boris Burkov	Giovanni Cabiddu	Damian Muszynski	Laurent M Coquerel	Hannes Reinecke	Filipe Manana	Philippe De Muyter	Benjamin Marzinski	Pasha Tatashin	Pratyush Yadav	Mike Rapoport (Microsoft)	Masami Hiramatsu (Google)	Richard Guy Briggs	Arnd Bergmann	Waiman Long	Kumar Kartikeya Dwivedi	Christophe Leroy (CS GROUP)	Yuezhang Mo	Han Gao	Balbir Singh	Vlastimil Babka (SUSE)	Pedro Falcato	Sarthak Sharma	Dev Jain	Jason A. Donenfeld	Christian Brauner (Amutable)	Mark Brown	Amery Hung	Wei Wang	Samiullah Khawaja	Suravee Suthikulpanit	Vasant Hegde	Nicolin Chen	Lu Baolu	Pranjal Shrivastava	Qiuxu Zhuo	Neal Gompa	Fuad Tabba	Naveen N Rao (AMD)	Hou Wenlong	Michael Roth	Rick Edgecombe	Nikunj A. Dadhania	Ackerley Tng	Vivek Kasireddy	Jonathan Flynn	Xu Yilun	Chris Packham	Bartosz Golaszewski	Alain Volmat	Pierre-Yves MORDRET	Mukesh Savaliya	Bryam Vargas	Günther Noack	Oliver Upton	Bibo Mao	Joanne Koong	Bernd Schubert	Heechan Kang	Breno Leitao	Florian Fuchs	Vlad Dumitrescu	Parav Pandit	Ronald Warsow	Brett A C Sheffield	Florian Fainelli	Justin M. Forbes	Peter Schneider	Miguel Ojeda	Takeshi Ogasawara	Ron Economos	Pavel Machek (CIP)
Series																																																																																																																																			T-b																																																																																			T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/518	R-b
2/518	R-b												R-b
3/518															R-b
4/518																A-b	R-b
5/518																		T-b	T-b	A-b	R-b
6/518																						A-b
7/518																							R-b
8/518																								R-b	R-b
9/518
10/518		T-b
11/518			T-b R-b	R-b
12/518					R-b
13/518					R-b
14/518						R-b
15/518							T-b
16/518	R-b							R-b	R-b	A-b
17/518	R-b
18/518	R-b								R-b		R-b
19/518												R-b
20/518
21/518
22/518
23/518
24/518														A-b
25/518														A-b																						A-b
26/518														A-b
27/518														A-b
28/518														A-b
29/518														A-b
30/518
31/518
32/518
33/518
34/518
35/518
36/518																										R-b	R-b
37/518
38/518																										T-b R-b
39/518
40/518
41/518																												R-b
42/518																													R-b	A-b
43/518																												R-b
44/518
45/518																										R-b					R-b
46/518
47/518																										R-b	R-b
48/518
49/518																										R-b
50/518																																R-b
51/518																																	R-b
52/518																											R-b
53/518																										R-b
54/518
55/518
56/518
57/518
58/518
59/518																																		A-b
60/518																										R-b									R-b
61/518																										R-b									R-b
62/518																										R-b
63/518
64/518																										R-b									R-b
65/518
66/518
67/518
68/518
69/518
70/518																															R-b
71/518
72/518
73/518
74/518																																						R-b
75/518																										R-b													A-b
76/518
77/518
78/518
79/518
80/518
81/518
82/518
83/518
84/518
85/518
86/518
87/518
88/518
89/518
90/518
91/518																																					R-b
92/518
93/518
94/518
95/518
96/518
97/518
98/518
99/518
100/518
101/518
102/518
103/518
104/518
105/518
106/518
107/518																																								R-b
108/518																																								R-b
109/518																																								R-b
110/518																																								R-b	R-b
111/518																																								R-b
112/518																																								R-b
113/518
114/518																																										R-b
115/518
116/518
117/518													R-b
118/518													R-b
119/518													R-b																														A-b
120/518																																											A-b
121/518													R-b
122/518													R-b																														A-b
123/518
124/518
125/518
126/518
127/518
128/518																																												T-b	T-b	T-b	R-b
129/518																																																R-b
130/518																																																R-b
131/518																																																	T-b
132/518
133/518
134/518																																																		R-b
135/518																																																		R-b
136/518
137/518
138/518
139/518
140/518																																																			R-b	R-b
141/518
142/518																																																					A-b
143/518																																																						T-b
144/518
145/518
146/518																																																							T-b	R-b
147/518																																																									A-b
148/518																																																										R-b	A-b
149/518																																																												A-b
150/518
151/518																																																													R-b
152/518
153/518
154/518
155/518
156/518
157/518																										R-b
158/518																																																														R-b
159/518																																																															T-b
160/518																																																																R-b
161/518
162/518																																																																R-b
163/518																																																																R-b
164/518																																																																R-b
165/518
166/518
167/518																																																																R-b
168/518
169/518
170/518																																																																																							R-b
171/518																																																																																								A-b
172/518																																																																																									R-b
173/518																																																																																										R-b
174/518
175/518
176/518																																																																	R-b
177/518
178/518
179/518																																																																		R-b
180/518					R-b
181/518																																																																			R-b
182/518																										R-b																																									R-b
183/518
184/518
185/518
186/518
187/518																																																																				R-b
188/518																																																																					R-b	R-b
189/518																																																				R-b
190/518																																																		R-b																					R-b
191/518																																																																								R-b
192/518																																																																									R-b	R-b	T-b	R-b	A-b	R-b
193/518																																																																													A-b
194/518																																																																													R-b
195/518
196/518																																																																															R-b	R-b	R-b	R-b	A-b
197/518
198/518																																																																																				A-b
199/518
200/518
201/518
202/518
203/518																																		A-b
204/518																																																																																					R-b
205/518
206/518																																																																																						R-b
207/518
208/518
209/518
210/518
211/518
212/518
213/518
214/518
215/518
216/518
217/518																																																																																								A-b
218/518																																																																																								A-b
219/518
220/518
221/518
222/518																																																																																								A-b
223/518
224/518																																																																																								A-b
225/518																																																																																								A-b
226/518
227/518
228/518
229/518																																																																																								A-b			R-b
230/518
231/518
232/518
233/518
234/518
235/518																																																																																												A-b
236/518
237/518
238/518
239/518
240/518
241/518
242/518
243/518																																																																																								A-b
244/518																																																																																													R-b	A-b
245/518
246/518								R-b
247/518
248/518
249/518
250/518																																																																																															R-b
251/518
252/518
253/518								R-b
254/518								R-b
255/518
256/518																																																																																																R-b
257/518																																																																																																																																T-b
258/518																																																																																																	R-b
259/518																																																																																																								A-b
260/518
261/518																																																																																																																									R-b	R-b
262/518																						R-b																																																																																																								R-b
263/518																																																																									R-b
264/518																																																																									R-b
265/518																																																																																																		R-b
266/518																																																																																																																															R-b
267/518																																																																																																		R-b
268/518																																																																																																			T-b
269/518
270/518																																																																																																		R-b
271/518																																																																																																		R-b
272/518
273/518
274/518
275/518																																																										R-b
276/518																										R-b																																																																										A-b
277/518																																																																																																					T-b	T-b	R-b
278/518																																																																																																							R-b		T-b
279/518																																																																																																										T-b
280/518																																																																																																											R-b
281/518
282/518																																																																																																												R-b
283/518																																																																																																												R-b
284/518																																																																																																												R-b		R-b
285/518																																																																																																												R-b	R-b
286/518																																																																																																												R-b
287/518																																																																																																												R-b				R-b
288/518																																																																																																															R-b
289/518																																																																																																												R-b
290/518																																																																																																												R-b
291/518																																																																																																																	R-b	R-b
292/518																																																																																																																			A-b	R-b	A-b
293/518																																																																																																																						A-b
294/518																																																																																																																						A-b	A-b
295/518																																																																																																																	R-b
296/518																																																																																																																								R-b
297/518																																																																																																																											R-b
298/518
299/518																																																																																																																												A-b
300/518
301/518																																																									A-b
302/518
303/518																																																																																																																													R-b
304/518
305/518																																																																																																																													R-b
306/518
307/518
308/518
309/518
310/518
311/518
312/518
313/518
314/518																																																																																																																													R-b
315/518
316/518																																																																																																																																	R-b
317/518
318/518
319/518
320/518
321/518																																																																																																																																		R-b
322/518																																																																																																																																		R-b
323/518
324/518																																																																																																																													R-b
325/518																																																																																																																																			R-b
326/518																																																																																																																																				R-b
327/518																																																																																																																											R-b
328/518
329/518																																																																																																																											R-b										T-b	R-b
330/518																																																																																																																											R-b
331/518																																																																																																																											A-b												R-b
332/518																																																																																																																											R-b
333/518																																																																																																																											R-b													R-b	R-b
334/518																																																																																																																											R-b
335/518																																																																																																																											R-b
336/518																																																																																																																												R-b														T-b	A-b
337/518																											T-b R-b
338/518
339/518
340/518																																																																																																															R-b																													A-b	A-b	A-b
341/518
342/518
343/518
344/518
345/518
346/518																																																																																																																																															R-b
347/518
348/518																																																																																																															R-b
349/518																																																																																																																																																R-b
350/518																																																																																																																																																														R-b
351/518																																																																																																															R-b
352/518																																																																																																															R-b																																						R-b
353/518																																																																																																																																																							R-b
354/518																																																																																																																																																											R-b
355/518																																																																																																																																																												R-b
356/518																																																																																																																																																												R-b
357/518																																																																																																																																																													A-b
358/518																																																																																																																																																							R-b
359/518
360/518																																																																																																																																																	R-b
361/518
362/518
363/518
364/518																																																																																																																																																		A-b
365/518																																																																																																																																																			R-b
366/518
367/518
368/518																																																																																																																																																				R-b
369/518																																															R-b
370/518
371/518																																																																																																																																																						R-b
372/518																																																																																																																																																						R-b
373/518																																																																																																																																																						R-b
374/518																																																																																																																																																						R-b
375/518
376/518
377/518
378/518
379/518
380/518																										R-b																																																																																																																														R-b
381/518																																																																																																																																																								R-b
382/518																																																																																																																																																								R-b	R-b
383/518																																																																																																																																																								R-b	R-b
384/518																																																																																																																																																								R-b	R-b
385/518																																																																																																																																																								R-b
386/518																																																																																																																																																								R-b
387/518																																																																																							R-b																																																																			R-b T-b
388/518																																																																																																																																																								R-b	R-b
389/518
390/518
391/518
392/518
393/518
394/518
395/518
396/518
397/518
398/518
399/518
400/518
401/518
402/518
403/518																			T-b																																																																																																																																														A-b
404/518																																																																																																																																																																																										R-b
405/518																																																																																																																																																																																											R-b
406/518
407/518
408/518
409/518																																																																																																																																																															R-b	R-b	A-b
410/518																																																																																																																																																															R-b	R-b
411/518																																																																																																																																																																		A-b
412/518																																																																																																																																																																			R-b
413/518
414/518																																																																																																																																																																				A-b	A-b	A-b
415/518																																																																																																																																																																							R-b
416/518
417/518																																																																																																																																																																								R-b
418/518
419/518					R-b
420/518																																																																																																																																																																									T-b
421/518
422/518																																																																																																																																																																										A-b
423/518															R-b					A-b																																																																																																																																																							A-b	R-b
424/518															T-b R-b				T-b																																																						R-b																																																																																																				T-b	R-b	R-b
425/518																		A-b		A-b
426/518																				A-b																																																																									R-b																																																																																			R-b
427/518
428/518																				A-b																																																																																																																																																										R-b			R-b
429/518
430/518																																																																																																																	R-b																																																																	R-b
431/518																																								R-b
432/518																																									R-b																																																																																																																																										R-b	R-b	R-b	R-b
433/518																																								R-b																																																																																																																																															R-b	R-b
434/518																																								R-b	R-b
435/518																																								R-b	R-b
436/518																																								R-b	R-b
437/518																																								R-b																																																																																																																																																	R-b
438/518																																								R-b																																																																																																																																																	R-b
439/518																																								R-b																																																																																																																																																	R-b
440/518																																								R-b																																																																																																																																																	R-b
441/518																																								R-b																																																																																																																																																	R-b
442/518																																								R-b																																																																																																																																																	R-b
443/518																																																																																																																																																																																								R-b
444/518																																																																																																																																																																			A-b		A-b
445/518
446/518
447/518
448/518																																																																																																																																																																																																												T-b
449/518																																																																																																																																																																																																												T-b
450/518																																																																																																																																																																																																													R-b
451/518																																																																																																																																																																																																														R-b
452/518																																																																																																																																																																																												R-b T-b
453/518																																																																																																																																																																																												R-b T-b
454/518
455/518																																																																																																																																																																																													R-b
456/518																																																																																																																																																																																													R-b
457/518																																																																																																																																																																																														R-b
458/518																																																																																																																																																						R-b																																									R-b
459/518
460/518																								R-b																																																																																																																																																																								R-b
461/518																								R-b																																																																																																																																																																									R-b
462/518																																																																																																																																																																																															R-b			R-b
463/518																																																																																																																																																																																													R-b
464/518
465/518																																																																																																																																																																																																			R-b
466/518																																																																																																																																																																																																			A-b
467/518
468/518																																																																																																																																																																																																				T-b
469/518																																																																																																																																																																																																					R-b
470/518
471/518
472/518
473/518
474/518
475/518																																																																																																																																																																																																						R-b
476/518																																																																																																																																																																																																							R-b
477/518																																																																																																																																																																																																								A-b	R-b
478/518																																																		R-b																																																																																																																																																								A-b
479/518
480/518
481/518
482/518
483/518
484/518																																																										R-b
485/518
486/518																																																																																																																																																																																																											R-b
487/518
488/518
489/518
490/518
491/518
492/518
493/518
494/518																																																																																																																																																																																																																			T-b
495/518																																																																																																																																																																																																																			T-b
496/518																																																																																																																																																R-b
497/518																																																																																																																																																																																																																				R-b	R-b
498/518
499/518
500/518																																																																																																																																																																																																															R-b
501/518
502/518
503/518
504/518
505/518																																																																																																																																																																																																																R-b
506/518																																																																																																																																																																																	T-b
507/518
508/518																																																																																																																																																																																																															R-b	R-b
509/518																																																																																																																																																																																																															R-b	R-b
510/518																																																																																																																																																																																																																R-b	T-b
511/518																																																																																																																																																																																																															R-b
512/518																																																																																																																																																																																																															R-b
513/518																																																																																																																																																																																																															R-b
514/518																																																																																																																																																																																																															R-b
515/518
516/518
517/518																																																																																																																																																																																																																		R-b
518/518

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 222 reviewers.

Read the v1 thread

Cover letter [PATCH 7.1 000/518] 7.1.4-rc1 review

This is the start of the stable review cycle for the 7.1.4 release. There are 518 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 18 Jul 2026 13:30:01 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.4-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 7.1.4-rc1

Luiz Augusto von Dentz <[email protected]>

    Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev

Mikhail Gavrilov <[email protected]>
timekeeping: Register default clocksource before taking tk_core.lock

Rong Zhang <[email protected]>
ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_IFB_SILENCE_ON_EMPTY

Joanne Koong <[email protected]>
fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref

Bernd Schubert <[email protected]>
fuse-uring: make a fuse_req on SQE commit only findable after memcpy

Bernd Schubert <[email protected]>

    fuse-uring: Avoid queue->stopped races and set/read that value under lock

Bernd Schubert <[email protected]>
fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues

Chris Mason <[email protected]>
fuse-uring: end fuse_req on io-uring cancel task work

Joanne Koong <[email protected]>
fuse-uring: fix moving cancelled entry to ent_in_userspace list

Chris Mason <[email protected]>

    fuse-uring: fix data races on ring->ready

Chris Mason <[email protected]>
fuse-uring: fix EFAULT clobber in fuse_uring_commit

Ji'an Zhou <[email protected]>
fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req

Joanne Koong <[email protected]>
fuse: don't block in fuse_get_dev() for non-sync_init case

Joanne Koong <[email protected]>
fuse: fix io-uring background queue dispatch on request completion

Joanne Koong <[email protected]>
fuse: re-lock request before returning from fuse_ref_folio()

Miklos Szeredi <[email protected]>
fuse: do not use start_removing_noperm()

Alberto Ruiz <[email protected]>
fuse: fix device node leak in cuse_process_init_reply()

Miklos Szeredi <[email protected]>
Revert "fuse: fix conversion of fuse_reverse_inval_entry() to start_removing()"

Samuel Moelius <[email protected]>
fuse: avoid 32-bit prune notification count wrap

Matthew R. Ochs <[email protected]>
fuse: back uncached readdir buffers with pages

Michael Bommarito <[email protected]>
RDMA/siw: bound Read Response placement to the RREAD length

Maher Sanalla <[email protected]>
RDMA/core: Fix broadcast address falsely detected as local

Zhenhao Wan <[email protected]>
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg

Dmitry Torokhov <[email protected]>
Input: maplecontrol - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: maplemouse - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: maple_keyb - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: mms114 - fix multi-touch slot corruption

Florian Fuchs <[email protected]>
Input: maplemouse - fix NULL pointer dereference in open()

Xu Rao <[email protected]>
Input: gscps2 - advance receive buffer write index

Bryam Vargas <[email protected]>
Input: mms114 - reject an oversized device packet size

Bryam Vargas <[email protected]>
Input: touchwin - reset the packet index on every complete packet

Kris Bahnsen <[email protected]>
Input: ads7846 - don't use scratch for tx_buf when clearing register

Dmitry Torokhov <[email protected]>
Input: mms114 - fix touch indexing for MMS134S and MMS136

Bryam Vargas <[email protected]>
Input: iforce - bound the device-reported force-feedback effect index

Bryam Vargas <[email protected]>
Input: goodix - clamp the device-reported contact count

Ranjan Kumar <[email protected]>
Input: elan_i2c - prevent division by zero and arithmetic underflow

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count

Haoxiang Li <[email protected]>
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure

Mingyu Wang <[email protected]>
i2c: i801: fix hardware state machine corruption in error path

Carlos Song <[email protected]>
i2c: imx-lpi2c: mark I2C adapter when hardware is powered down

Guillermo Rodríguez <[email protected]>
i2c: stm32f7: truncate clock period instead of rounding it

Haoxiang Li <[email protected]>
i2c: davinci: Unregister cpufreq notifier on probe failure

Andy Shevchenko <[email protected]>
i2c: mpc: Fix timeout calculations

Johan Hovold <[email protected]>
i2c: core: fix adapter deregistration race

Johan Hovold <[email protected]>
i2c: core: fix adapter debugfs creation

Johan Hovold <[email protected]>
i2c: core: fix NULL-deref on adapter registration failure

Johan Hovold <[email protected]>
i2c: core: fix irq domain leak on adapter registration failure

Johan Hovold <[email protected]>
i2c: core: fix adapter probe deferral loop

Sebastian Alba Vives <[email protected]>
fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()

Chuck Lever <[email protected]>
Revert "svcrdma: Use contiguous pages for RDMA Read sink buffers"

Chuck Lever <[email protected]>
svcrdma: wake sq waiters when the transport closes

Mikhail Gavrilov <[email protected]>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning

Mikhail Gavrilov <[email protected]>
udmabuf: fix DMA direction mismatch in release_udmabuf()

Oliver Upton <[email protected]>
KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier

Sean Christopherson <[email protected]>
KVM: x86: Add dedicated API for getting mask of accelerated x2APIC MSRs

Sean Christopherson <[email protected]>
KVM: guest_memfd: Treat memslot binding offset+size as unsigned values

Sean Christopherson <[email protected]>
KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits

Sean Christopherson <[email protected]>
KVM: TDX: Account all non-transient page allocations for per-TD structures

Xuanqing Shi <[email protected]>
KVM: VMX: Handle bad values on proxied writes to LBR MSRs

Sean Christopherson <[email protected]>
KVM: SEV: Don't terminate SNP VMs on #VMGEXIT without a registered GHCB

Sean Christopherson <[email protected]>
KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs

Sean Christopherson <[email protected]>
KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that are accelerated

Sean Christopherson <[email protected]>
KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM actually supports

Sean Christopherson <[email protected]>
KVM: SEV: Pin source page for write when adding CPUID data for SNP guest

Hyunwoo Kim <[email protected]>
KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU

Hyunwoo Kim <[email protected]>
KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU

Zeng Chi <[email protected]>
LoongArch: KVM: Add missing slots_lock for device register/unregister

Marc Zyngier <[email protected]>
KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB

Mickaël Salaün <[email protected]>
selftests/landlock: Increase default audit socket timeout

Mickaël Salaün <[email protected]>
selftests/landlock: Filter dealloc records in audit_count_records()

Mickaël Salaün <[email protected]>
landlock: Account all audit data allocations to user space

Maximilian Heyne <[email protected]>
selftests/landlock: Explicitly disable audit in teardowns

Mickaël Salaün <[email protected]>
landlock: Set audit_net.sk for socket access checks

Ricardo Robaina <[email protected]>
audit: fix removal of dangling executable rules

Nicolin Chen <[email protected]>
iommufd: Set upper bounds on cache invalidation entry_num and entry_len

Nicolin Chen <[email protected]>
iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read()

Nicolin Chen <[email protected]>
iommufd: Break the loop on failure in iommufd_fault_fops_read()

Nicolin Chen <[email protected]>
iommufd: Reject invalid read count in iommufd_fault_fops_read()

Nicolin Chen <[email protected]>
iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch()

Nicolin Chen <[email protected]>
iommufd: Reject invalid read count in iommufd_veventq_fops_read()

Nicolin Chen <[email protected]>
iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails

Nicolin Chen <[email protected]>
iommufd: Set veventq_depth upper bound

Nicolin Chen <[email protected]>
iommufd: Move vevent memory allocation outside spinlock

Nicolin Chen <[email protected]>
iommufd: Fix data_len byte-count vs element-count mismatch

Kai Aizen <[email protected]>
iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read

Weinan Liu <[email protected]>
iommu/amd: Don't split flush for amd_iommu_domain_flush_all()

Lu Baolu <[email protected]>
iommu/vt-d: Avoid WARNING in sva unbind path

Matt Bobrowski <[email protected]>
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

Dave Airlie <[email protected]>
nouveau/vmm: fix another SPT/LPT race

Sarthak Sharma <[email protected]>
selftests/mm: fix ksft_process_madv.sh test category

Zenghui Yu <[email protected]>
selftests/mm: pagemap_ioctl: use the correct page size for transact_test()

Pedro Falcato <[email protected]>
mm: do file ownership checks with the proper mount idmap

Ketan <[email protected]>
mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access

David Hildenbrand (Arm) <[email protected]>
selftests: mm: fix and speedup "droppable" test

Anthony Yznaga <[email protected]>
mm: fix mmap errno value when MAP_DROPPABLE is not supported

Hao Ge <[email protected]>
lib/test_hmm: use kvfree() to free kvcalloc() allocations

Vivian Wang <[email protected]>
riscv: mm: Unconditionally sfence.vma for spurious fault

Vivian Wang <[email protected]>
riscv: mm: Define DIRECT_MAP_PHYSMEM_END

Koichiro Den <[email protected]>
NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()

Bryam Vargas <[email protected]>
exfat: bound uniname advance in exfat_find_dir_entry()

Rochan Avlur <[email protected]>
exfat: preserve benign secondary entries during rename and move

Nicolas Pitre <[email protected]>
vt: fix spurious modifier in CSI/cursor key sequences

Andrii Kuchmenko <[email protected]>
module: decompress: check return value of module_extend_max_pages()

Gabriele Monaco <[email protected]>
rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow schedule

Benjamin Coddington <[email protected]>
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

Ricardo Robaina <[email protected]>
audit: fix potential integer overflow in audit_log_n_hex()

Huihui Huang <[email protected]>
tracing: Prevent out-of-bounds read in glob matching

Luca Boccassi <[email protected]>
selftests/liveupdate: add test cases for LIVEUPDATE_IOCTL_CREATE_SESSION calls with invalid length

Luca Boccassi <[email protected]>
liveupdate: reject LIVEUPDATE_IOCTL_CREATE_SESSION with invalid name length

Lee Jia Jie <[email protected]>
perf/aux: Fix page UAF in map_range()

Johan Hovold <[email protected]>
i2c: core: fix hang on adapter registration failure

Wentao Liang <[email protected]>
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()

Janne Grunau <[email protected]>
watchdog: apple: Add "apple,t8103-wdt" compatible

Vasily Khoruzhick <[email protected]>
EDAC/i10nm: Don't fail probing if ADXL is missing

David Hildenbrand (Arm) <[email protected]>
x86/mm: Fix freeing of PMD-sized vmemmap pages

Carlos Song <[email protected]>
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path

Carlos Song <[email protected]>
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()

Mark Rutland <[email protected]>
arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()

Paul Louvel <[email protected]>
crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation

Paul Louvel <[email protected]>
crypto: talitos/hash - remove useless wrapper

Paul Louvel <[email protected]>
crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request

Paul Louvel <[email protected]>
crypto: talitos/hash - drop workqueue mechanism for SEC1

Paul Louvel <[email protected]>
crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue

Paul Louvel <[email protected]>
crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor

Paul Louvel <[email protected]>
crypto: talitos - move code in current_desc_hdr() into a standalone function

Paul Louvel <[email protected]>
crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function

Paul Louvel <[email protected]>
crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function

Paul Louvel <[email protected]>
crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1

Paul Louvel <[email protected]>
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header

Ahsan Atta <[email protected]>
crypto: qat - factor out AER reset helpers

Giovanni Cabiddu <[email protected]>
crypto: qat - validate RSA CRT component lengths

Ahsan Atta <[email protected]>
crypto: qat - skip restart for down devices

Ahsan Atta <[email protected]>
crypto: qat - protect service table iterations with service_lock

Ahsan Atta <[email protected]>
crypto: qat - notify fatal error before AER reset preparation

Ahsan Atta <[email protected]>
crypto: qat - keep VFs enabled during reset

Ahsan Atta <[email protected]>
crypto: qat - handle sysfs-triggered reset callbacks

Ahsan Atta <[email protected]>
crypto: qat - fix restarting state leak on allocation failure

Ahsan Atta <[email protected]>
crypto: qat - centralize bus master enable

Eric Biggers <[email protected]>
crypto: drbg - Fix the fips_enabled priority boost

Eric Biggers <[email protected]>
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels

Eric Biggers <[email protected]>
crypto: drbg - Fix ineffective sanity check

Eric Biggers <[email protected]>
crypto: drbg - Fix misaligned writes in CTR_DRBG and HASH_DRBG

Eric Biggers <[email protected]>
crypto: drbg - Fix returning success on failure in CTR_DRBG

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)

Tycho Andersen (AMD) <[email protected]>
crypto: ccp - Do not initialize SNP for SEV ioctls

Eric Biggers <[email protected]>
crypto: loongson - Remove broken and unused loongson-rng

Eric Biggers <[email protected]>
crypto: loongson - Select CRYPTO_RNG

Wentao Liang <[email protected]>
crypto: tegra - fix refcount leak in tegra_se_host1x_submit()

Ruijie Li <[email protected]>
crypto: pcrypt - restore callback for non-parallel fallback

Eric Biggers <[email protected]>
crypto: hisi-trng - Remove crypto_rng interface

Anastasia Tishchenko <[email protected]>
crypto: ecc - Fix carry overflow in vli multiplication

Eric Biggers <[email protected]>
crypto: crypto4xx - Remove insecure and unused rng_alg

Xiaonan Zhao <[email protected]>
crypto: chacha20poly1305 - validate poly1305 template argument

Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps again

Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps

Eric Biggers <[email protected]>
crypto: af_alg - Remove zero-copy support from skcipher and aead

Bryam Vargas <[email protected]>
isofs: bound Rock Ridge symlink components to the SL record

Qu Wenruo <[email protected]>
btrfs: fix incorrect buffered IO fallback for append direct writes

Bryam Vargas <[email protected]>
partitions: aix: bound the pp_count scan to the ppe array

Qu Wenruo <[email protected]>
btrfs: do not trim a device which is not writeable

Qu Wenruo <[email protected]>
btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC

Tianchu Chen <[email protected]>
nvmet-auth: validate reply message payload bounds against transfer length

Qu Wenruo <[email protected]>
btrfs: fix false IO failure after falling back to buffered write

Bryam Vargas <[email protected]>
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

Achkinazi, Igor <[email protected]>
nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks

Mikulas Patocka <[email protected]>
dm-ioctl: report an error if a device has no table

Wentao Liang <[email protected]>
block: partitions: fix of_node refcount leak in of_partition()

Wentao Liang <[email protected]>
nvme: target: rdma: fix ndev refcount leak on queue connect

Thorsten Blum <[email protected]>
crypto: atmel-sha204a - fail on hwrng registration error in probe path

Thorsten Blum <[email protected]>
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A

Wentao Liang <[email protected]>
hwrng: jh7110 - fix refcount leak in starfive_trng_read()

Bryam Vargas <[email protected]>
udf: validate sparing table length as an entry count, not a byte count

Bryam Vargas <[email protected]>
udf: validate VAT header length against the VAT inode size

Michael Bommarito <[email protected]>
udf: validate free block extents against the partition length

Arjan van de Ven <[email protected]>
wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon

Chao Shi <[email protected]>
block: skip sync_blockdev() on surprise removal in bdev_mark_dead()

Neill Kapron <[email protected]>
usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile

Neill Kapron <[email protected]>

    usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks

Paul Cercueil <[email protected]>
usb: gadget: f_fs: Fix DMA fence leak

Tyler Baker <[email protected]>
usb: gadget: f_fs: initialize reset_work at allocation time

Paul Menzel <[email protected]>
usb: typec: ucsi: cancel pending work on system suspend

Fan Wu <[email protected]>
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove

Madhu M <[email protected]>
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode

Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Invert DisplayPort role assignment

Badhri Jagan Sridharan <[email protected]>
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()

Andy Yan <[email protected]>
usb: typec: tcpm: Fix VDM type for Enter Mode commands

Stephan Gerhold <[email protected]>
usb: typec: ps883x: Fix DP+USB3 configuration

Shuangpeng Bai <[email protected]>
usb: typec: class: drop PD lookup reference

Myeonghun Pak <[email protected]>
usb: typec: anx7411: use devm_pm_runtime_enable()

Sam Day <[email protected]>
usbip: vudc: fix NULL deref in vep_dequeue()

Yichong Chen <[email protected]>
usbip: tools: support SuperSpeedPlus devices

Xu Rao <[email protected]>
USB: usb-storage: ene_ub6250: restore media-ready check

Johan Hovold <[email protected]>
USB: ulpi: fix memory leak on registration failure

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix write buffer corruption

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix hard lockup on disconnect

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix broken rx after throttle

Fabio Porcedda <[email protected]>
USB: serial: option: add Telit Cinterion FE990D50 compositions

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix information leak

Haoxiang Li <[email protected]>
usb: mtu3: unmap request DMA on queue failure

Myeonghun Pak <[email protected]>
USB: misc: uss720: unregister parport on probe failure

HE WEI (ギカク) <[email protected]>
usb: misc: usbio: bound bulk IN response length to the received transfer

Xu Rao <[email protected]>
USB: storage: include US_FL_NO_SAME in quirks mask

Myeonghun Pak <[email protected]>
usb: sl811-hcd: disable controller wakeup on remove

Johan Hovold <[email protected]>
USB: legousbtower: fix use-after-free on disconnect race

Erich E. Hoover <[email protected]>
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD

Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect race

Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect

Johan Hovold <[email protected]>
USB: ldusb: fix use-after-free on disconnect race

Johan Hovold <[email protected]>
USB: idmouse: fix use-after-free on disconnect race

Xu Rao <[email protected]>
usb: gadget: f_printer: take kref only for successful open

Jimmy Hu <[email protected]>
usb: gadget: udc: Fix use-after-free in gadget_match_driver

Maoyi Xie <[email protected]>
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler

Dawei Feng <[email protected]>
usb: free iso schedules on failed submit

WenTao Liang <[email protected]>
usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()

Ben Dooks <[email protected]>
usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()

Rodrigo Lugathe da Conceição Alves <[email protected]>
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub

Haoxiang Li <[email protected]>
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()

Jared Baldridge <[email protected]>
usb: cdc_acm: Add quirk for Uniden BC125AT scanner

Jens Glathe <[email protected]>
Revert "usb: typec: mux: avoid duplicated mux switches"

Maoyi Xie <[email protected]>
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()

Vlad Poenaru <[email protected]>
bpf: Allow LPM map access from sleepable BPF programs

Nuoqi Gui <[email protected]>
bpf: Keep dynamic inner array lookups nullable

Paul Moses <[email protected]>
bpf: Validate BTF repeated field counts before expansion

Dawei Feng <[email protected]>
bpf: Restore sysctl new-value from 1 to 0

Zhao Zhang <[email protected]>
bpf: Reject fragmented frames in devmap

Dawei Feng <[email protected]>
xfs: fix memory leak in xfs_dqinode_metadir_create()

Yingjie Gao <[email protected]>
xfs: fix exchmaps reservation limit check

Darrick J. Wong <[email protected]>
xfs: fix pointer arithmetic error on 32-bit systems

Alexey Nepomnyashih <[email protected]>
xfs: fix unreachable BIGTIME check in dquot flush validation

Christoph Hellwig <[email protected]>

    xfs: initialize iomap->flags earlier in xfs_bmbt_to_iomap

Christoph Hellwig <[email protected]>
xfs: only log freed extents for the current RTG in zoned growfs

Christoph Hellwig <[email protected]>
xfs: pass back updated nb from xfs_growfs_compute_deltas

Yingjie Gao <[email protected]>
xfs: release dquot buffer after dqflush failure

Yousef Alhouseen <[email protected]>
xfs: use null daddr for unset first bad log block

Andy Shevchenko <[email protected]>
serial: 8250_mid: Disable DMA for selected platforms

Louis-Alexis Eyraud <[email protected]>
media: mtk-jpeg: cancel workqueue on release for supported platforms only

Deepanshu Kartikey <[email protected]>
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers

Tristan Madani <[email protected]>
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read

Tristan Madani <[email protected]>
hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length

Srinivas Pandruvada <[email protected]>
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads

Maoyi Xie <[email protected]>
HID: lg-g15: cancel pending work on remove to fix a use-after-free

Manish Khadka <[email protected]>
HID: appleir: fix UAF on pending key_up_timer in remove()

Trung Nguyen <[email protected]>
HID: multitouch: fix out-of-bounds bit access on mt_io_flags

Manish Khadka <[email protected]>
HID: letsketch: fix UAF on inrange_timer at driver unbind

Jinmo Yang <[email protected]>
HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()

Jinmo Yang <[email protected]>
HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert

Manish Khadka <[email protected]>
HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove()

Oleg Makarenko <[email protected]>
HID: pidff: Use correct effect type in effect update

Myeonghun Pak <[email protected]>
HID: wacom: stop hardware after post-start probe failures

Carlos Llamas <[email protected]>
HID: uhid: convert to hid_safe_input_report()

Tianchu Chen <[email protected]>
HID: hid-goodix-spi: validate report size to prevent stack buffer overflow

Yichong Chen <[email protected]>
tools/mm/slabinfo: fix total_objects attribute name

Xuewen Wang <[email protected]>
tools/mm/slabinfo: Fix trace disable logic inversion

Vlastimil Babka (SUSE) <[email protected]>
mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

Lukas Wunner <[email protected]>
X.509: Fix validation of ASN.1 certificate header

Robin Murphy <[email protected]>
perf/arm-cmn: Fix DVM node events

Heiko Carstens <[email protected]>
s390: Revert support for DCACHE_WORD_ACCESS

Kartik Rajput <[email protected]>
clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances

Thomas Gleixner <[email protected]>
time/jiffies: Register jiffies clocksource before usage

WenTao Liang <[email protected]>
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

Jann Horn <[email protected]>
proc: protect ptrace_may_access() with exec_update_lock (part 1)

Yuho Choi <[email protected]>
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation

Tianxiang Chen <[email protected]>
cpufreq: Fix hotplug-suspend race during reboot

Steven Rostedt <[email protected]>
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT

Fushuai Wang <[email protected]>

    cpufreq: intel_pstate: Sync policy->cur during CPU offline

Zide Chen <[email protected]>
perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()

Jann Horn <[email protected]>
proc: protect ptrace_may_access() with exec_update_lock (FD links)

John Hubbard <[email protected]>
libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()

Guangshuo Li <[email protected]>
firmware_loader: fix device reference leak in firmware_upload_register()

Guangshuo Li <[email protected]>
cpufreq: qcom-cpufreq-hw: Fix possible double free

Abdun Nihaal <[email protected]>
OPP: of: Fix potential memory leak in opp_parse_supplies()

Baokun Li <[email protected]>
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()

ChenXiaoSong <[email protected]>
smb/server: do not require delete access for non-replacing links

Norbert Manthey <[email protected]>
smb: client: mask server-provided mode to 07777 in modefromsid

Xu Rao <[email protected]>
smb: client: fix atime clamp check in read completion

Zihan Xi <[email protected]>
smb: client: harden POSIX SID length parsing

Zihan Xi <[email protected]>
smb: client: use unaligned reads in parse_posix_ctxt()

Haoxiang Li <[email protected]>
smb: client: Fix next buffer leak in receive_encrypted_standard()

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_close() replay

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_open() replay

Zhao Zhang <[email protected]>
smb: client: fix double-free in SMB2_flush() replay

Henrique Carvalho <[email protected]>
smb: client: fix change notify replay double-free

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_ioctl() replay

Henrique Carvalho <[email protected]>
smb: client: fix query_info() replay double-free

Henrique Carvalho <[email protected]>
smb: client: fix query directory replay double-free

Ralph Boehme <[email protected]>
smb/client: fix chown/chgrp with SMB3 POSIX Extensions

Haofeng Li <[email protected]>
ksmbd: validate NTLMv2 response before updating session key

Namjae Jeon <[email protected]>
ksmbd: track the connection owning a byte-range lock

Namjae Jeon <[email protected]>
ksmbd: use opener credentials for ADS I/O

Namjae Jeon <[email protected]>
ksmbd: use opener credentials for delete-on-close

Gil Portnoy <[email protected]>
ksmbd: add per-handle permission check to FILE_LINK_INFORMATION

Gil Portnoy <[email protected]>
ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION

Namjae Jeon <[email protected]>
ksmbd: run set info with opener credentials

Gil Portnoy <[email protected]>
ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY

Namjae Jeon <[email protected]>
ksmbd: require source read access for duplicate extents

Davide Ornaghi <[email protected]>
ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation

Namjae Jeon <[email protected]>
ksmbd: serialize QUERY_DIRECTORY requests per file

Gil Portnoy <[email protected]>
ksmbd: add a permission check for FSCTL_SET_ZERO_DATA

Gil Portnoy <[email protected]>
ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE

Namjae Jeon <[email protected]>
ksmbd: prevent path traversal bypass by restricting caseless retry

Dan Carpenter <[email protected]>
smb/client: Fix error code in smb2_aead_req_alloc()

Michael Bommarito <[email protected]>
smb: client: resolve SWN tcon from live registrations

Junrui Luo <[email protected]>
coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()

Muhammad Bilal <[email protected]>
Bluetooth: L2CAP: validate option length before reading conf opt value

Runyu Xiao <[email protected]>

    Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock

Muhammad Bilal <[email protected]>
Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()

Pauli Virtanen <[email protected]>
Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled

Siwei Zhang <[email protected]>
Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()

Yousef Alhouseen <[email protected]>
Bluetooth: fix UAF in bt_accept_dequeue()

Maoyi Xie <[email protected]>
Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()

Yousef Alhouseen <[email protected]>
Bluetooth: bnep: pin L2CAP connection during netdev registration

Sergey Senozhatsky <[email protected]>
Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()

Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: IPIP tunnel hardware offload is not yet support

Adrian Bente <[email protected]>
netfilter: flowtable: fix offloaded ct timeout never being extended

Xiang Mei <[email protected]>
netfilter: ebtables: terminate table name before find_table_lock()

Florian Westphal <[email protected]>
netfilter: ebtables: module names must be null-terminated

Florian Westphal <[email protected]>
netfilter: ebtables: zero chainstack array

Florian Westphal <[email protected]>
netfilter: handle unreadable frags

Pratham Gupta <[email protected]>
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump

Zijiang Huang <[email protected]>
mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup

Jose Fernandez (Anthropic) <[email protected]>
mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host

Qi Zheng <[email protected]>
mm: shrinker: fix NULL pointer dereference in debugfs

Qi Zheng <[email protected]>
mm: shrinker: fix shrinker_info teardown race with expansion

Shakeel Butt <[email protected]>
mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()

Andrei Kuchynski <[email protected]>
mfd: cros_ec: Delay dev_set_drvdata() until probe success

Xiaolei Wang <[email protected]>
media: nxp: imx8-isi: Fix use-after-free on remove

Wyatt Feng <[email protected]>
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Yuyang Huang <[email protected]>
ipv4: igmp: remove multicast group from hash table on device destruction

Breno Leitao <[email protected]>
netpoll: fix a use-after-free on shutdown path

Michael Wigham <[email protected]>
io_uring/rw: preserve partial result for iopoll

Runyu Xiao <[email protected]>
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item

Vasileios Almpanis <[email protected]>
io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE

HyeongJun An <[email protected]>
HID: logitech-dj: Fix maxfield check in DJ short report validation

Runyu Xiao <[email protected]>
gpio: sch: use raw_spinlock_t in the irq startup path

Runyu Xiao <[email protected]>
gpio: eic-sprd: use raw_spinlock_t in the irq startup path

Koichiro Den <[email protected]>
NTB: epf: Avoid calling pci_irq_vector() from hardirq context

Valeriy Yashnikov <[email protected]>
ntfs: avoid calling post_write_mst_fixup() for invalid index_block

Yunpeng Tian <[email protected]>
fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns

Thomas Gleixner <[email protected]>
debugobjects: Plug race against a concurrent OOM disable

Runyu Xiao <[email protected]>
coresight: etb10: restore atomic_t for shared reading state

Samuel Page <[email protected]>
Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete

Marco Elver <[email protected]>
Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref

Chi Wang <[email protected]>
audit: Fix data races of skb_queue_len() readers on audit_queue

Zijing Yin <[email protected]>
net: af_key: initialize alg_key_len for IPComp states

Gil Portnoy <[email protected]>
ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL

Giovanni Cabiddu <[email protected]>
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()

Michael Bommarito <[email protected]>
crypto: krb5 - filter out async aead implementations at alloc

Dawei Feng <[email protected]>
crypto: amlogic - avoid double cleanup in meson_crypto_probe()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB write in HT_caps_handler()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()

Christopher Mackle <[email protected]>
staging: rtl8723bs: don't drop short TX frames in _rtw_pktfile_read()

Alexandru Hossu <[email protected]>
staging: media: ipu7: fix double-free and use-after-free in error paths

Arnd Bergmann <[email protected]>
staging: media: atomisp: reduce load_primary_binaries() stack usage

Ricardo Ribalda <[email protected]>
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe

Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in tsi148 bridge

Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in fake bridge

Shoichiro Miyamoto <[email protected]>
smb: client: restrict implied bcc[0] exemption to responses without data area

Michael Tautschnig <[email protected]>
staging: vme_user: bound slave read/write to the kern_buf size

Samuel Page <[email protected]>
tipc: fix out-of-bounds read in broadcast Gap ACK blocks

Yuanhe Shu <[email protected]>
tracing: Fix NULL pointer dereference in func_set_flag()

Yizhou Zhao <[email protected]>
6lowpan: fix NHC entry use-after-free on error path

Cen Zhang <[email protected]>
usb: misc: usbio: fix disconnect UAF in client teardown

Runyu Xiao <[email protected]>
usb: dwc3: run gadget disconnect from sleepable suspend context

Alan Stern <[email protected]>
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()

Michael Bommarito <[email protected]>
hwrng: virtio: clamp device-reported used.len at copy_data()

Johan Hovold <[email protected]>
virtio-mmio: fix device release warning on module unload

Ammar Faizi <[email protected]>
virtio_pci: fix vq info pointer lookup via wrong index

Xiang Mei <[email protected]>
netfilter: ipset: fix race between dump and ip_set_list resize

SeongJae Park <[email protected]>
mm/damon/ops-common: handle extreme intervals in damon_hot_score()

Michael Bommarito <[email protected]>
tcp: restore RCU grace period in tcp_ao_destroy_sock

Marco Nenciarini <[email protected]>
PCI/IOV: Skip VF Resizable BAR restore on read error

Marco Nenciarini <[email protected]>
PCI: Skip Resizable BAR restore on read error

Yadu M G <[email protected]>
PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM hosts

Manivannan Sadhasivam <[email protected]>
PCI: mediatek: Fix IRQ domain leak when port fails to enable

Richard Zhu <[email protected]>
PCI: imx6: Assert ref_clk_en after reference clock stabilizes on i.MX95

Richard Zhu <[email protected]>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling

Richard Zhu <[email protected]>
PCI: imx6: Configure REF_USE_PAD before PHY reset for i.MX95

Ratheesh Kannoth <[email protected]>
PCI: host-common: Request bus reassignment when not probe-only

Maciej W. Rozycki <[email protected]>
PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining

Mahesh Vaidya <[email protected]>
PCI: altera: Fix resource leaks on probe failure

Mahesh Vaidya <[email protected]>
PCI: altera: Do not dispose parent IRQ mapping

Ziyao Li <[email protected]>
PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series

Han Gao <[email protected]>
riscv: dts: sophgo: Add dma-coherent to SG2042 PCIe controllers

Myeonghun Pak <[email protected]>
usb: typec: tcpci_rt1711h: unregister TCPCI port with devres

Xu Rao <[email protected]>
xhci: sideband: fix ring sg table pages leak

胡连勤 <[email protected]>
usb: xhci: Fix sleep in atomic context in xhci_free_streams()

Alice Ryhl <[email protected]>
rust_binder: clear freeze listener on node removal

Keshav Verma <[email protected]>
rust_binder: synchronize Rust Binder stats with freeze commands

Keshav Verma <[email protected]>
rust_binder: reject context manager self-transaction

Alice Ryhl <[email protected]>
rust_binder: fix BINDER_GET_EXTENDED_ERROR

Hyunwoo Kim <[email protected]>
rust_binder: use a u64 stride when cleaning up the offsets array

Carlos Llamas <[email protected]>
binder: fix UAF in binder_free_transaction()

Carlos Llamas <[email protected]>
binder: fix UAF in binder_thread_release()

Johan Hovold <[email protected]>
Bluetooth: btusb: fix wakeup source leak on probe failure

Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on marvell probe failure

Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on registration failure

Zenm Chen <[email protected]>
Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB

Alex Williamson <[email protected]>
vfio/mlx5: Fix racy bitfields and tighten struct layout

Alex Williamson <[email protected]>
vfio: Remove device debugfs before releasing devres

Junrui Luo <[email protected]>
vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc

Alex Williamson <[email protected]>
vfio/pci: Fix racy bitfields and tighten struct layout

Alex Williamson <[email protected]>
vfio/pci: Release the VGA arbiter client on register_device() failure

Alex Williamson <[email protected]>
vfio/pci: Latch disable_idle_d3 per device

Raghavendra Rao Ananta <[email protected]>
vfio/pci: Use a private flag to prevent power state change with VFs

Reinette Chatre <[email protected]>
x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Roll back quirk control caches on write errors

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()

Darvell Long <[email protected]>
ALSA: usb-audio: avoid kobject path lookup in DualSense match

Gordon Chen <[email protected]>
ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer Flow 8

WenTao Liang <[email protected]>
ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission

HyeongJun An <[email protected]>
ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()

Zhao Dongdong <[email protected]>
ALSA: ice1712: check snd_ctl_new1() return value

Aaron Erhardt <[email protected]>
ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW

Huacai Chen <[email protected]>
ALSA: hda/hdmi: Use 'AC_PINSENSE_ELDV' to detect pinsense for Loongson

Cameron Graham <[email protected]>
ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800 G5 Mini

Cássio Gabriel <[email protected]>
ALSA: hda/cs35l41: Fix firmware load work teardown

Zhao Dongdong <[email protected]>
ALSA: gus: check snd_ctl_new1() return value

Maoyi Xie <[email protected]>
ALSA: firewire: isight: bound the sample count to the packet payload

Geoffrey D. Bennett <[email protected]>
ALSA: FCP: Add Focusrite ISA C8X support

Zhao Dongdong <[email protected]>
ALSA: es1938: check snd_ctl_new1() return value

Cássio Gabriel <[email protected]>
ALSA: compress: Fix task creation error unwind

Zhao Dongdong <[email protected]>
ALSA: cmipci: check snd_ctl_new1() return value

Maoyi Xie <[email protected]>
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser

Zhao Dongdong <[email protected]>
ALSA: aoa: check snd_ctl_new1() return value

Zhao Dongdong <[email protected]>
ALSA: ymfpci: check snd_ctl_new1() return value

Cássio Gabriel <[email protected]>
ALSA: virtio: Validate control metadata from the device

Cássio Gabriel <[email protected]>
ALSA: virtio: Add missing 384 kHz PCM rate mapping

HyeongJun An <[email protected]>
ALSA: usx2y: us144mkii: fix work UAF on disconnect

Stepan Ionichev <[email protected]>
iio: temperature: tmp006: use devm_iio_trigger_register

Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start

Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check

Pengpeng Hou <[email protected]>
iio: temperature: Build mlx90635 with CONFIG_MLX90635

Stepan Ionichev <[email protected]>
iio: resolver: ad2s1210: notify trigger and clear state on fault read error

Stepan Ionichev <[email protected]>

    iio: proximity: vl53l0x: notify trigger and clear IRQ on error paths

Biren Pandya <[email protected]>
iio: pressure: mpl115: fix runtime PM leak on read error

David Carlier <[email protected]>
iio: pressure: bmp280: zero-init bmp580 trigger handler buffer

Andy Shevchenko <[email protected]>
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call

Javier Carrasco <[email protected]>
iio: light: veml6030: fix channel type when pushing events

Stepan Ionichev <[email protected]>
iio: light: tsl2591: return actual error from probe IRQ failure

Joshua Crofts <[email protected]>
iio: light: opt3001: fix missing state reset on timeout

Biren Pandya <[email protected]>
iio: light: gp2ap002: fix runtime PM leak on read error

Alexander A. Klimov <[email protected]>
iio: light: al3320a: read both ALS ADC registers again

Joshua Crofts <[email protected]>
iio: light: al3320a: add missing REGMAP_I2C to Kconfig

Alexander A. Klimov <[email protected]>
iio: light: al3010: read both ALS ADC registers again

Vidhu Sarwal <[email protected]>
iio: light: al3010: fix incorrect scale for the highest gain range

Joshua Crofts <[email protected]>
iio: light: al3010: add missing REGMAP_I2C to Kconfig

Joshua Crofts <[email protected]>
iio: light: al3000a: add missing REGMAP_I2C to Kconfig

Andreas Kempe <[email protected]>
iio: imu: st_lsm6dsx: deselect shub page before reading whoami

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamp clock period by using lower value

Runyu Xiao <[email protected]>
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ

Runyu Xiao <[email protected]>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ

Stepan Ionichev <[email protected]>
iio: gyro: bmg160: wait full startup time after mode change at probe

Stepan Ionichev <[email protected]>
iio: gyro: bmg160: bail out when bandwidth/filter is not in table

Lars-Peter Clausen <[email protected]>
iio: event: Fix event FIFO reset race

Dan Carpenter <[email protected]>
iio: dac: ad3552r-hs: fix uninitialized data ni ad3552r_hs_write_data_source()

Dan Carpenter <[email protected]>
iio: core: fix uninitialized data in debugfs

Herman van Hazendonk <[email protected]>
iio: common: st_sensors: honour channel endianness in read_axis_data

Maxwell Doose <[email protected]>
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug

Felix Gu <[email protected]>
iio: buffer: hw-consumer: free scan_mask on buffer release

Dan Carpenter <[email protected]>
iio: backend: fix uninitialized data in debugfs

Pengpeng Hou <[email protected]>
iio: adc: ti-ads124s08: Return reset GPIO lookup errors

Guangshuo Li <[email protected]>
iio: adc: ti-ads1119: fix PM reference leak in buffer preenable

Maxwell Doose <[email protected]>
iio: adc: spear: Initialize completion before requesting IRQ

Andy Shevchenko <[email protected]>
iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for()

Maxwell Doose <[email protected]>
iio: adc: lpc32xx: Initialize completion before requesting IRQ

Radu Sabau <[email protected]>
iio: adc: ad_sigma_delta: fix CS held asserted and state leaks

Radu Sabau <[email protected]>
iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices

Joshua Crofts <[email protected]>
iio: adc: ad7779: add missing 'select IIO_TRIGGERED_BUFFER' to Kconfig

Jonathan Cameron <[email protected]>

    iio: adc: ad7768-1: Select GPIOLIB

Samuel Moelius <[email protected]>
iio: adc: ad7380: select REGMAP

Arnd Bergmann <[email protected]>
iio: adc: ad4062: add GPIOLIB dependency

Biren Pandya <[email protected]>
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error

Bryam Vargas <[email protected]>
iio: accel: bmc150: clamp the device-reported FIFO frame count

Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check for header

Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check to response query

Po-Hao Huang <[email protected]>
wifi: rtw89: correct drop logic for malformed AMPDU frames

Pawan Gupta <[email protected]>
bpf: Prefer dirty packs for eBPF allocations

Pawan Gupta <[email protected]>
bpf: Prefer packs that won't trigger an IBPB flush on allocation

Pawan Gupta <[email protected]>
bpf: Skip redundant IBPB in pack allocator

Pawan Gupta <[email protected]>
bpf: Restrict JIT predictor flush to cBPF

Pawan Gupta <[email protected]>
x86/bugs: Enable IBPB flush on BPF JIT allocation

Pawan Gupta <[email protected]>
bpf: Support for hardening against JIT spraying

Taeyang Lee <[email protected]>
perf/core: Detach event groups during remove_on_exec

Sebastian Andrzej Siewior <[email protected]>
futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock""

Alice Ryhl <[email protected]>
rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER

Gary Guo <[email protected]>
rust: doctest: fix incorrect pattern in replacement

Haoze Xie <[email protected]>
rust: block: fix GenDisk cleanup paths

Danilo Krummrich <[email protected]>
rust: pci: use 'static lifetime for PCI BAR resource names

Alice Ryhl <[email protected]>
rust: kasan: KASAN+RUST requires clang

Miguel Ojeda <[email protected]>
rust: cpufreq: clean new clippy::map_or_identity lint for Rust 1.98.0

Huacai Chen <[email protected]>
LoongArch: Add PIO for early access before ACPI PCI root register

HyeongJun An <[email protected]>
platform/x86: intel-hid: Protect ACPI notify handler against recursion

Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup

Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Fix possible NULL pointer dereference

Jeremy Linton <[email protected]>
ACPI: CPPC: Suppress UBSAN warning caused by field misuse

Carlos López <[email protected]>
KVM: x86: Unconditionally recompute CR8 intercept on PPR update

Sean Christopherson <[email protected]>
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode

Sean Christopherson <[email protected]>
KVM: x86: Move update_cr8_intercept() to lapic.c

Florian Fainelli <[email protected]>
perf trace beauty fcntl: Fix build with older kernel headers

Randy Dunlap <[email protected]>
slab: recognize @GFP parameter as optional in kernel-doc

Pedro Falcato <[email protected]>
mm/khugepaged: write all dirty file folios when collapsing

Xingquan Liu <[email protected]>
net/sched: dualpi2: fix GSO backlog accounting

Kiryl Shutsemau <[email protected]>
userfaultfd: gate must_wait writability check on pte_present()

Miguel Ojeda <[email protected]>
rust: str: clean unused import for Rust >= 1.98

Miguel Ojeda <[email protected]>
rust: str: use the "kernel vertical" imports style

-------------

Diffstat:

 Documentation/crypto/userspace-if.rst              |  31 +-
 Documentation/sound/alsa-configuration.rst         |   6 +
 MAINTAINERS                                        |   1 -
 Makefile                                           |   7 +-
 arch/arm64/include/asm/kvm_hyp.h                   |   1 +
 arch/arm64/kernel/entry-fpsimd.S                   |   8 +-
 arch/arm64/kvm/arm.c                               |   2 +
 arch/arm64/kvm/hyp/nvhe/hyp-main.c                 |  12 +
 arch/arm64/kvm/nested.c                            |  40 +-
 arch/arm64/net/bpf_jit_comp.c                      |   4 +-
 arch/loongarch/configs/loongson32_defconfig        |   1 -
 arch/loongarch/configs/loongson64_defconfig        |   1 -
 arch/loongarch/include/asm/acpi.h                  |   2 +
 arch/loongarch/kernel/acpi.c                       |  28 +
 arch/loongarch/kernel/setup.c                      |   2 +
 arch/loongarch/kvm/intc/eiointc.c                  |   6 +
 arch/loongarch/kvm/intc/ipi.c                      |   2 +
 arch/loongarch/kvm/intc/pch_pic.c                  |   2 +
 arch/loongarch/net/bpf_jit.c                       |   5 +-
 arch/loongarch/pci/acpi.c                          |   2 +
 arch/powerpc/net/bpf_jit_comp.c                    |   4 +-
 arch/riscv/boot/dts/sophgo/sg2042.dtsi             |   4 +
 arch/riscv/include/asm/pgtable.h                   |  10 +
 arch/riscv/kernel/entry.S                          |   7 +-
 arch/riscv/net/bpf_jit_comp64.c                    |   2 +-
 arch/riscv/net/bpf_jit_core.c                      |   3 +-
 arch/s390/Kconfig                                  |   1 -
 arch/s390/include/asm/asm-extable.h                |   4 -
 arch/s390/include/asm/word-at-a-time.h             |  22 -
 arch/s390/mm/extable.c                             |  18 -
 arch/x86/events/intel/uncore_snb.c                 |   7 -
 arch/x86/include/asm/nospec-branch.h               |   4 +
 arch/x86/kernel/cpu/bugs.c                         |  50 +-
 arch/x86/kernel/cpu/resctrl/monitor.c              |   5 +
 arch/x86/kvm/lapic.c                               |  49 +-
 arch/x86/kvm/lapic.h                               |   3 +-
 arch/x86/kvm/svm/avic.c                            |  47 +-
 arch/x86/kvm/svm/sev.c                             |  10 +-
 arch/x86/kvm/svm/svm.c                             |   3 +
 arch/x86/kvm/vmx/pmu_intel.c                       |   6 +-
 arch/x86/kvm/vmx/tdx.c                             |  16 +-
 arch/x86/kvm/vmx/vmx.c                             |  44 +-
 arch/x86/kvm/x86.c                                 |  38 +-
 arch/x86/mm/init_64.c                              |  40 +-
 arch/x86/net/bpf_jit_comp.c                        |   5 +-
 block/bdev.c                                       |   8 +-
 block/partitions/aix.c                             |   9 +
 block/partitions/of.c                              |   5 +-
 crypto/af_alg.c                                    |  69 +--
 crypto/algif_aead.c                                |   8 +-
 crypto/asymmetric_keys/x509_loader.c               |   2 +-
 crypto/chacha20poly1305.c                          |  11 +-
 crypto/df_sp80090a.c                               |   7 +-
 crypto/drbg.c                                      |  16 +-
 crypto/ecc.c                                       |  31 +-
 crypto/krb5/krb5_api.c                             |   2 +-
 crypto/pcrypt.c                                    |   4 +
 drivers/acpi/cppc_acpi.c                           |  11 +-
 drivers/acpi/nfit/core.c                           |  21 +-
 drivers/android/binder.c                           |  19 +-
 drivers/android/binder/allocation.rs               |   5 +-
 drivers/android/binder/error.rs                    |  13 +-
 drivers/android/binder/freeze.rs                   |  11 +-
 drivers/android/binder/node.rs                     |  10 +-
 drivers/android/binder/process.rs                  |  18 +-
 drivers/android/binder/rust_binder_events.c        |   7 +-
 drivers/android/binder/stats.rs                    |   4 +-
 drivers/android/binder/thread.rs                   |  65 ++-
 drivers/android/binder/transaction.rs              |  15 +-
 drivers/base/firmware_loader/sysfs_upload.c        |   8 +-
 drivers/bluetooth/btmtksdio.c                      |   2 +-
 drivers/bluetooth/btnxpuart.c                      |   6 +
 drivers/bluetooth/btusb.c                          |  39 +-
 drivers/bluetooth/hci_ldisc.c                      |  14 +-
 drivers/char/hw_random/jh7110-trng.c               |  13 +-
 drivers/char/hw_random/virtio-rng.c                |  23 +-
 drivers/clocksource/timer-tegra186.c               |   3 +-
 drivers/cpufreq/cpufreq.c                          |   2 +
 drivers/cpufreq/intel_pstate.c                     |   6 +-
 drivers/cpufreq/pcc-cpufreq.c                      |   2 +
 drivers/cpufreq/qcom-cpufreq-hw.c                  |   1 -
 drivers/crypto/Kconfig                             |   2 -
 drivers/crypto/Makefile                            |   1 -
 drivers/crypto/amcc/crypto4xx_core.c               |  88 ----
 drivers/crypto/amcc/crypto4xx_core.h               |   4 -
 drivers/crypto/amcc/crypto4xx_reg_def.h            |  11 -
 drivers/crypto/amlogic/amlogic-gxl-core.c          |   2 +-
 drivers/crypto/atmel-sha204a.c                     |  27 +-
 drivers/crypto/caam/caamalg.c                      |  12 +-
 drivers/crypto/caam/caamalg_qi.c                   |  12 +-
 drivers/crypto/caam/caamalg_qi2.c                  |  12 +-
 drivers/crypto/caam/caamhash.c                     |   4 +-
 drivers/crypto/caam/key_gen.c                      |   4 +-
 drivers/crypto/ccp/sev-dev.c                       |  70 +--
 drivers/crypto/hisilicon/Kconfig                   |   1 -
 drivers/crypto/hisilicon/trng/trng.c               | 296 +----------
 drivers/crypto/intel/qat/qat_420xx/adf_drv.c       |   2 -
 drivers/crypto/intel/qat/qat_4xxx/adf_drv.c        |   2 -
 drivers/crypto/intel/qat/qat_6xxx/adf_drv.c        |   2 -
 drivers/crypto/intel/qat/qat_c3xxx/adf_drv.c       |   1 -
 drivers/crypto/intel/qat/qat_c3xxxvf/adf_drv.c     |   1 -
 drivers/crypto/intel/qat/qat_c62x/adf_drv.c        |   1 -
 drivers/crypto/intel/qat/qat_c62xvf/adf_drv.c      |   1 -
 .../intel/qat/qat_common/adf_accel_devices.h       |   2 +
 drivers/crypto/intel/qat/qat_common/adf_aer.c      | 109 ++--
 .../crypto/intel/qat/qat_common/adf_common_drv.h   |   3 +
 drivers/crypto/intel/qat/qat_common/adf_init.c     |  18 +
 drivers/crypto/intel/qat/qat_common/adf_isr.c      |  39 ++
 drivers/crypto/intel/qat/qat_common/adf_sriov.c    |  32 +-
 .../crypto/intel/qat/qat_common/qat_asym_algs.c    |  10 +-
 drivers/crypto/intel/qat/qat_dh895xcc/adf_drv.c    |   1 -
 drivers/crypto/intel/qat/qat_dh895xccvf/adf_drv.c  |   1 -
 drivers/crypto/loongson/Kconfig                    |   5 -
 drivers/crypto/loongson/Makefile                   |   1 -
 drivers/crypto/loongson/loongson-rng.c             | 209 --------
 drivers/crypto/talitos.c                           | 561 +++++++++++----------
 drivers/crypto/talitos.h                           |  12 +
 drivers/crypto/tegra/tegra-se-main.c               |   2 +-
 drivers/dma-buf/udmabuf.c                          |   9 +-
 drivers/edac/i10nm_base.c                          |  14 +-
 drivers/fpga/dfl-afu-main.c                        |   3 +
 drivers/gpio/gpio-eic-sprd.c                       |   8 +-
 drivers/gpio/gpio-sch.c                            |  32 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.c      |  31 +-
 drivers/hid/hid-appleir.c                          |  45 +-
 drivers/hid/hid-goodix-spi.c                       |   3 +
 drivers/hid/hid-lenovo-go.c                        |   9 +
 drivers/hid/hid-letsketch.c                        |  36 +-
 drivers/hid/hid-lg-g15.c                           |  16 +
 drivers/hid/hid-logitech-dj.c                      |   9 +-
 drivers/hid/hid-multitouch.c                       |  32 +-
 drivers/hid/hid-sensor-hub.c                       |  77 ++-
 drivers/hid/uhid.c                                 |   8 +-
 drivers/hid/usbhid/hid-pidff.c                     |   2 +-
 drivers/hid/wacom_sys.c                            |  20 +-
 drivers/hwtracing/coresight/coresight-etb10.c      |   6 +-
 drivers/hwtracing/coresight/ultrasoc-smb.c         |   1 +
 drivers/i2c/busses/i2c-davinci.c                   |   4 +-
 drivers/i2c/busses/i2c-i801.c                      |   2 +-
 drivers/i2c/busses/i2c-imx-lpi2c.c                 |  15 +-
 drivers/i2c/busses/i2c-mpc.c                       |   2 +-
 drivers/i2c/busses/i2c-stm32f7.c                   |   9 +-
 drivers/i2c/i2c-core-base.c                        |  81 +--
 drivers/iio/accel/bmc150-accel-core.c              |   2 +
 drivers/iio/accel/kxsd9.c                          |   5 +-
 drivers/iio/adc/Kconfig                            |   4 +
 drivers/iio/adc/ad_sigma_delta.c                   |  39 +-
 drivers/iio/adc/lpc32xx_adc.c                      |   4 +-
 drivers/iio/adc/nxp-sar-adc.c                      |   4 +-
 drivers/iio/adc/spear_adc.c                        |   3 +-
 drivers/iio/adc/ti-ads1119.c                       |   6 +-
 drivers/iio/adc/ti-ads124s08.c                     |   3 +-
 drivers/iio/buffer/industrialio-hw-consumer.c      |   2 +
 drivers/iio/chemical/scd30_core.c                  |  19 +-
 drivers/iio/common/st_sensors/st_sensors_core.c    |  23 +-
 drivers/iio/dac/ad3552r-hs.c                       |   2 +-
 drivers/iio/gyro/bmg160_core.c                     |  16 +-
 drivers/iio/imu/adis_trigger.c                     |   2 +-
 drivers/iio/imu/bmi160/bmi160_core.c               |   3 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c  |   4 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c |   9 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h |   1 +
 drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c   |   4 +-
 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c       |  21 +-
 drivers/iio/industrialio-backend.c                 |   2 +-
 drivers/iio/industrialio-core.c                    |   2 +-
 drivers/iio/industrialio-event.c                   |   5 +-
 drivers/iio/light/Kconfig                          |   3 +
 drivers/iio/light/al3010.c                         |  10 +-
 drivers/iio/light/al3320a.c                        |   8 +-
 drivers/iio/light/gp2ap002.c                       |   2 +-
 drivers/iio/light/opt3001.c                        |   6 +-
 drivers/iio/light/tsl2591.c                        |   6 +-
 drivers/iio/light/veml6030.c                       |   8 +-
 drivers/iio/magnetometer/ak8975.c                  |   1 +
 drivers/iio/pressure/bmp280-core.c                 |   2 +-
 drivers/iio/pressure/mpl115.c                      |   4 +-
 drivers/iio/proximity/vl53l0x-i2c.c                |   7 +-
 drivers/iio/resolver/ad2s1210.c                    |   2 +-
 drivers/iio/temperature/Makefile                   |   2 +-
 drivers/iio/temperature/ltc2983.c                  |   5 +-
 drivers/iio/temperature/tmp006.c                   |   2 +-
 drivers/infiniband/core/addr.c                     |   2 +-
 drivers/infiniband/sw/siw/siw_qp_rx.c              |   9 +
 drivers/infiniband/ulp/rtrs/rtrs-srv.c             |   5 +-
 drivers/input/joystick/iforce/iforce-packets.c     |  18 +-
 drivers/input/joystick/maplecontrol.c              |   3 +-
 drivers/input/keyboard/maple_keyb.c                |   4 +-
 drivers/input/mouse/elan_i2c_core.c                |  36 +-
 drivers/input/mouse/maplemouse.c                   |   9 +-
 drivers/input/rmi4/rmi_bus.c                       |   4 +-
 drivers/input/rmi4/rmi_f30.c                       |   2 +-
 drivers/input/rmi4/rmi_f3a.c                       |   2 +-
 drivers/input/serio/gscps2.c                       |   1 +
 drivers/input/touchscreen/ads7846.c                |   5 +-
 drivers/input/touchscreen/goodix.c                 |   3 +-
 drivers/input/touchscreen/mms114.c                 |  26 +-
 drivers/input/touchscreen/touchwin.c               |  15 +-
 drivers/iommu/amd/iommu.c                          |   3 +-
 drivers/iommu/intel/iommu.h                        |  11 +
 drivers/iommu/intel/svm.c                          |  12 +-
 drivers/iommu/iommufd/driver.c                     |  13 +-
 drivers/iommu/iommufd/eventq.c                     |  36 +-
 drivers/iommu/iommufd/hw_pagetable.c               |  11 +-
 drivers/iommu/iommufd/iommufd_private.h            |   2 +-
 drivers/md/dm-ioctl.c                              |   5 +-
 .../media/platform/mediatek/jpeg/mtk_jpeg_core.c   |   3 +-
 .../media/platform/nxp/imx8-isi/imx8-isi-core.c    |   2 +-
 drivers/mfd/cros_ec_dev.c                          |   3 +-
 drivers/net/usb/kalmia.c                           |   8 +
 drivers/net/wireless/mediatek/mt76/mt7921/main.c   |   3 +
 drivers/net/wireless/mediatek/mt76/mt7925/main.c   |   3 +
 drivers/net/wireless/realtek/rtw89/core.c          |   3 +-
 drivers/net/wireless/realtek/rtw89/mac80211.c      |   3 +-
 drivers/ntb/hw/epf/ntb_hw_epf.c                    |  14 +-
 drivers/nvme/host/multipath.c                      |   6 +
 drivers/nvme/target/discovery.c                    |  23 +-
 drivers/nvme/target/fabrics-cmd-auth.c             |  15 +-
 drivers/nvme/target/rdma.c                         |   6 +-
 drivers/opp/of.c                                   |   3 +-
 drivers/pci/controller/dwc/pci-imx6.c              |  65 ++-
 drivers/pci/controller/dwc/pcie-qcom.c             |   6 +
 drivers/pci/controller/pci-host-common.c           |   4 +
 drivers/pci/controller/pci-loongson.c              |  36 ++
 drivers/pci/controller/pcie-altera.c               |  36 +-
 drivers/pci/controller/pcie-mediatek.c             |  65 ++-
 drivers/pci/iov.c                                  |   6 +
 drivers/pci/quirks.c                               |  51 +-
 drivers/pci/rebar.c                                |   6 +
 drivers/perf/arm-cmn.c                             |  23 +-
 drivers/platform/x86/intel/hid.c                   |   9 +
 drivers/regulator/scmi-regulator.c                 |   4 +-
 drivers/spi/spi-fsl-lpspi.c                        |  18 +-
 drivers/staging/media/atomisp/pci/sh_css.c         |   6 +-
 drivers/staging/media/ipu3/ipu3-css-params.c       |   8 +-
 drivers/staging/media/ipu7/ipu7.c                  |  22 +-
 drivers/staging/rtl8723bs/core/rtw_ieee80211.c     |  15 +
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |  20 +-
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c     |  23 +-
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |   8 +
 drivers/staging/rtl8723bs/os_dep/xmit_linux.c      |   6 +-
 drivers/staging/vme_user/vme_fake.c                |   8 +
 drivers/staging/vme_user/vme_tsi148.c              |   8 +
 drivers/staging/vme_user/vme_user.c                |  22 +
 drivers/tty/serial/8250/8250_mid.c                 |  13 +-
 drivers/tty/vt/keyboard.c                          |  12 +-
 drivers/usb/cdns3/cdnsp-mem.c                      |   2 +
 drivers/usb/class/cdc-acm.c                        |   3 +
 drivers/usb/common/ulpi.c                          |  23 +-
 drivers/usb/core/quirks.c                          |   6 +
 drivers/usb/dwc3/core.c                            |   4 +-
 drivers/usb/dwc3/dwc3-meson-g12a.c                 |  14 +-
 drivers/usb/dwc3/gadget.c                          |  43 +-
 drivers/usb/fotg210/fotg210-hcd.c                  |   6 +-
 drivers/usb/gadget/composite.c                     |   5 +-
 drivers/usb/gadget/function/f_fs.c                 |   9 +-
 drivers/usb/gadget/function/f_printer.c            |   3 +-
 drivers/usb/gadget/function/rndis.c                |  20 +-
 drivers/usb/gadget/udc/core.c                      |  29 +-
 drivers/usb/host/ehci-sched.c                      |  11 +-
 drivers/usb/host/sl811-hcd.c                       |   1 +
 drivers/usb/host/xhci-sideband.c                   |   2 +
 drivers/usb/host/xhci.c                            |  11 +-
 drivers/usb/misc/chaoskey.c                        |   1 -
 drivers/usb/misc/idmouse.c                         |  45 +-
 drivers/usb/misc/iowarrior.c                       |  61 +--
 drivers/usb/misc/ldusb.c                           |  38 +-
 drivers/usb/misc/legousbtower.c                    |  37 +-
 drivers/usb/misc/usbio.c                           |   8 +-
 drivers/usb/misc/uss720.c                          |   5 +-
 drivers/usb/mtu3/mtu3_gadget.c                     |   1 +
 drivers/usb/serial/digi_acceleport.c               |  43 +-
 drivers/usb/serial/keyspan_pda.c                   |   2 +-
 drivers/usb/serial/option.c                        |  16 +
 drivers/usb/storage/ene_ub6250.c                   |   3 +-
 drivers/usb/storage/usb.c                          |   2 +-
 drivers/usb/typec/anx7411.c                        |   4 +-
 drivers/usb/typec/class.c                          |   1 +
 drivers/usb/typec/mux.c                            |  13 +-
 drivers/usb/typec/mux/ps883x.c                     |   6 +-
 drivers/usb/typec/tcpm/tcpci_rt1711h.c             |  13 +-
 drivers/usb/typec/tcpm/tcpm.c                      |   9 +-
 drivers/usb/typec/ucsi/displayport.c               |   7 +-
 drivers/usb/typec/ucsi/ucsi.c                      |  20 +
 drivers/usb/typec/ucsi/ucsi.h                      |   1 +
 drivers/usb/typec/ucsi/ucsi_acpi.c                 |  10 +-
 drivers/usb/typec/ucsi/ucsi_ccg.c                  |   2 +-
 drivers/usb/usbip/vudc.h                           |   1 -
 drivers/usb/usbip/vudc_dev.c                       |   4 +-
 drivers/vfio/debugfs.c                             |   1 +
 drivers/vfio/pci/mlx5/cmd.h                        |  15 +-
 drivers/vfio/pci/vfio_pci_core.c                   |  37 +-
 drivers/vfio/vfio_main.c                           |  11 +-
 drivers/virtio/virtio_mmio.c                       |  26 +-
 drivers/virtio/virtio_pci_common.c                 |  10 +-
 drivers/watchdog/apple_wdt.c                       |   1 +
 fs/btrfs/btrfs_inode.h                             |   2 +
 fs/btrfs/direct-io.c                               |  60 ++-
 fs/btrfs/extent-tree.c                             |  12 +-
 fs/btrfs/file.c                                    |  25 +-
 fs/btrfs/inode.c                                   |  67 ++-
 fs/btrfs/ordered-data.c                            |  12 +
 fs/btrfs/ordered-data.h                            |   2 +
 fs/btrfs/reflink.c                                 |   4 +-
 fs/exfat/dir.c                                     |  63 ++-
 fs/exfat/exfat_fs.h                                |   5 +-
 fs/exfat/namei.c                                   |  89 +++-
 fs/fs-writeback.c                                  |  31 +-
 fs/fuse/cuse.c                                     |   4 +-
 fs/fuse/dev.c                                      |  66 ++-
 fs/fuse/dev_uring.c                                |  93 ++--
 fs/fuse/dev_uring_i.h                              |  10 +-
 fs/fuse/dir.c                                      |  36 +-
 fs/fuse/fuse_dev_i.h                               |   1 +
 fs/fuse/notify.c                                   | 434 ++++++++++++++++
 fs/fuse/readdir.c                                  |  85 +++-
 fs/hfs/bnode.c                                     |   4 +-
 fs/hfsplus/bnode.c                                 |   2 +
 fs/hfsplus/hfsplus_fs.h                            |   2 +-
 fs/isofs/rock.c                                    |  11 +
 fs/libfs.c                                         |   1 +
 fs/nfs/dir.c                                       |   2 +
 fs/nilfs2/segment.c                                |  22 +
 fs/ntfs/index.c                                    |   5 +-
 fs/ntfs3/fslog.c                                   |  20 +-
 fs/proc/array.c                                    |   6 +
 fs/proc/base.c                                     | 162 +++---
 fs/proc/fd.c                                       |  25 +-
 fs/proc/internal.h                                 |   2 +-
 fs/proc/namespaces.c                               |  12 +
 fs/resctrl/monitor.c                               |  37 +-
 fs/smb/client/cifs_swn.c                           | 316 ++++++++++--
 fs/smb/client/cifsacl.c                            |   2 +-
 fs/smb/client/file.c                               |   2 +-
 fs/smb/client/inode.c                              |   3 +-
 fs/smb/client/smb2misc.c                           |  32 +-
 fs/smb/client/smb2ops.c                            |  18 +-
 fs/smb/client/smb2pdu.c                            |  22 +-
 fs/smb/client/trace.h                              |   2 +
 fs/smb/server/auth.c                               |  20 +-
 fs/smb/server/smb2pdu.c                            | 117 +++--
 fs/smb/server/vfs.c                                |  20 +-
 fs/smb/server/vfs_cache.c                          |  28 +-
 fs/smb/server/vfs_cache.h                          |   3 +
 fs/udf/balloc.c                                    |   5 +-
 fs/udf/super.c                                     |  11 +-
 fs/userfaultfd.c                                   |  20 +
 fs/xfs/libxfs/xfs_ag.c                             |  10 +-
 fs/xfs/libxfs/xfs_ag.h                             |   2 +-
 fs/xfs/libxfs/xfs_bmap_btree.h                     |   2 +-
 fs/xfs/libxfs/xfs_dquot_buf.c                      |  14 +-
 fs/xfs/libxfs/xfs_exchmaps.c                       |   2 +-
 fs/xfs/xfs_dquot.c                                 |  16 +-
 fs/xfs/xfs_fsops.c                                 |   2 +-
 fs/xfs/xfs_iomap.c                                 |   2 +-
 fs/xfs/xfs_log_recover.c                           |   6 +-
 fs/xfs/xfs_qm.c                                    |   5 +-
 fs/xfs/xfs_rtalloc.c                               |   8 +-
 include/asm-generic/rqspinlock.h                   |  14 +-
 include/crypto/drbg.h                              |  18 +-
 include/crypto/internal/drbg.h                     |  18 -
 include/linux/bpf_lsm.h                            |   4 +
 include/linux/damon.h                              |   8 +-
 include/linux/filter.h                             |  15 +-
 include/linux/fs.h                                 |   5 +
 include/linux/glob.h                               |   1 +
 include/linux/hid-sensor-hub.h                     |  25 +
 include/linux/kvm_host.h                           |   3 +-
 include/linux/page_ext.h                           |  19 +-
 include/linux/slab.h                               |   6 +-
 include/linux/sunrpc/svc_rdma.h                    |   1 +
 include/linux/vfio_pci_core.h                      |  15 +-
 include/net/bluetooth/hci_core.h                   |   1 +
 include/net/bluetooth/l2cap.h                      |   1 +
 include/net/netfilter/nf_flow_table.h              |   2 +
 include/net/tcp_ao.h                               |   1 +
 include/sound/hda_codec.h                          |   1 +
 init/Kconfig                                       |   1 +
 io_uring/io-wq.c                                   |   2 +-
 io_uring/nop.c                                     |   8 +-
 io_uring/rw.c                                      |  12 +-
 kernel/audit.c                                     |  21 +-
 kernel/audit_fsnotify.c                            |   4 -
 kernel/bpf/bpf_inode_storage.c                     |   9 +
 kernel/bpf/btf.c                                   |   9 +-
 kernel/bpf/cgroup.c                                |   2 +-
 kernel/bpf/core.c                                  |  68 ++-
 kernel/bpf/devmap.c                                |   7 +
 kernel/bpf/dispatcher.c                            |   2 +-
 kernel/bpf/lpm_trie.c                              |   8 +-
 kernel/bpf/verifier.c                              |  15 +-
 kernel/events/core.c                               |  19 +-
 kernel/futex/requeue.c                             |   6 -
 kernel/liveupdate/luo_session.c                    |   4 +
 kernel/module/decompress.c                         |   2 +
 kernel/sched/features.h                            |   8 +
 kernel/time/jiffies.c                              |  11 +-
 kernel/time/posix-cpu-timers.c                     |   1 +
 kernel/time/timekeeping.c                          |   7 +-
 kernel/trace/trace_events_filter.c                 |   6 +-
 kernel/trace/trace_functions.c                     |   8 +-
 lib/debugobjects.c                                 |  17 +
 lib/glob.c                                         |  31 +-
 lib/test_hmm.c                                     |   4 +-
 mm/damon/ops-common.c                              |   1 +
 mm/filemap.c                                       |   2 +-
 mm/khugepaged.c                                    |  41 +-
 mm/madvise.c                                       |   3 +-
 mm/mincore.c                                       |   3 +-
 mm/mmap.c                                          |   2 +-
 mm/shrinker.c                                      |  13 +-
 mm/shrinker_debug.c                                |  14 +-
 mm/slub.c                                          |  18 +-
 mm/swap_cgroup.c                                   |   2 +
 mm/swapfile.c                                      |   1 +
 net/6lowpan/nhc.c                                  |   2 +-
 net/bluetooth/6lowpan.c                            |  18 +-
 net/bluetooth/af_bluetooth.c                       |  17 +-
 net/bluetooth/bnep/core.c                          |  27 +-
 net/bluetooth/hci_conn.c                           |  21 +-
 net/bluetooth/hci_sync.c                           | 137 ++++-
 net/bluetooth/iso.c                                |  13 +-
 net/bluetooth/l2cap_core.c                         |  80 +--
 net/bluetooth/l2cap_sock.c                         |   4 +-
 net/bluetooth/mgmt.c                               |   3 +
 net/bridge/netfilter/ebtables.c                    |  12 +-
 net/core/netpoll.c                                 |   9 +-
 net/ipv4/igmp.c                                    |   1 +
 net/ipv4/sysctl_net_ipv4.c                         |  10 +-
 net/ipv4/tcp_ao.c                                  |   5 +-
 net/ipv4/tcp_output.c                              |   4 +-
 net/ipv6/netfilter/nf_conntrack_reasm.c            |   2 +-
 net/key/af_key.c                                   |   1 +
 net/netfilter/ipset/ip_set_core.c                  |   8 +-
 net/netfilter/nf_conntrack_netlink.c               |   2 +-
 net/netfilter/nf_flow_table_core.c                 |  20 +-
 net/netfilter/nf_flow_table_offload.c              |  22 +-
 net/netfilter/nfnetlink_log.c                      |  26 +-
 net/netfilter/nfnetlink_queue.c                    |  16 +-
 net/netfilter/xt_u32.c                             |  16 +-
 net/sched/sch_dualpi2.c                            |  11 +-
 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c            |   4 +-
 net/sunrpc/xprtrdma/svc_rdma_rw.c                  | 229 +--------
 net/sunrpc/xprtrdma/svc_rdma_sendto.c              |   6 +-
 net/sunrpc/xprtrdma/svc_rdma_transport.c           |  30 +-
 net/tipc/bcast.c                                   |  22 +-
 net/tipc/bcast.h                                   |   2 +-
 net/tipc/node.c                                    |  15 +-
 rust/kernel/block/mq/gen_disk.rs                   |  20 +-
 rust/kernel/cpufreq.rs                             |   2 +-
 rust/kernel/pci/io.rs                              |   6 +-
 rust/kernel/str.rs                                 |  23 +-
 scripts/rustdoc_test_builder.rs                    |  16 +-
 security/bpf/hooks.c                               |   3 +
 security/landlock/domain.c                         |   9 +-
 security/landlock/domain.h                         |   5 +-
 security/landlock/net.c                            |   1 +
 sound/aoa/fabrics/layout.c                         |   6 +
 sound/core/compress_offload.c                      |  13 +-
 sound/core/seq/seq_memory.c                        |   2 +-
 sound/firewire/isight.c                            |   3 +-
 sound/hda/codecs/hdmi/hdmi.c                       |   9 +-
 sound/hda/codecs/realtek/alc269.c                  |   1 +
 sound/hda/codecs/side-codecs/cs35l41_hda.c         |  77 ++-
 sound/hda/codecs/side-codecs/cs35l41_hda.h         |   5 +
 sound/hda/common/jack.c                            |   6 +
 sound/isa/gus/gus_pcm.c                            |   2 +
 sound/pci/cmipci.c                                 |   6 +
 sound/pci/es1938.c                                 |   2 +
 sound/pci/ice1712/aureon.c                         |   2 +
 sound/pci/ice1712/ice1712.c                        |   8 +
 sound/pci/ice1712/ice1724.c                        |   6 +
 sound/pci/ymfpci/ymfpci_main.c                     |   6 +
 sound/usb/caiaq/input.c                            |   2 +-
 sound/usb/endpoint.c                               |  10 +-
 sound/usb/mixer_quirks.c                           | 102 ++--
 sound/usb/mixer_scarlett.c                         |   4 +-
 sound/usb/mixer_us16x08.c                          | 127 +++--
 sound/usb/quirks.c                                 |   3 +
 sound/usb/usbaudio.h                               |   8 +
 sound/usb/usx2y/us144mkii.c                        |  17 +-
 sound/usb/usx2y/us144mkii_capture.c                |   2 +-
 sound/virtio/virtio_kctl.c                         |  50 ++
 sound/virtio/virtio_pcm.c                          |   3 +-
 sound/virtio/virtio_pcm_ops.c                      |   3 +-
 tools/mm/slabinfo.c                                |   6 +-
 tools/perf/trace/beauty/fcntl.c                    |  16 +
 tools/testing/selftests/landlock/audit.h           | 140 +++--
 tools/testing/selftests/landlock/audit_test.c      |   6 +-
 tools/testing/selftests/landlock/net_test.c        |  62 +++
 tools/testing/selftests/landlock/ptrace_test.c     |   1 +
 .../selftests/landlock/scoped_abstract_unix_test.c |   1 +
 tools/testing/selftests/liveupdate/liveupdate.c    |  42 ++
 tools/testing/selftests/mm/droppable.c             |  48 +-
 tools/testing/selftests/mm/ksft_process_madv.sh    |   2 +-
 tools/testing/selftests/mm/pagemap_ioctl.c         |  12 +-
 tools/usb/usbip/libsrc/usbip_common.c              |   2 +
 tools/usb/usbip/libsrc/usbip_device_driver.c       |   4 +
 tools/usb/usbip/libsrc/vhci_driver.c               |   1 +
 virt/kvm/guest_memfd.c                             |  14 +-
 virt/kvm/kvm_mm.h                                  |   7 +-
 501 files changed, 5826 insertions(+), 3378 deletions(-)

Read the cover letter in its thread