5.10.261-rc1 review

Greg Kroah-Hartman linux-clk linux-fsdevel linux-patches linux-rtc lkml sashiko-reviews stable 1 version Jul 21 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Jul 21699 patches 13 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/699	nvmet-tcp: fix race between ICReq handling and queue teardown`drivers/nvme/target/tcp.c`	+28 -1	0 replies
2/699	nfsd: release layout stid on setlease failure`fs/nfsd/nfs4layouts.c`	+1 -3	0 replies
3/699	nfsd: reset write verifier on deferred writeback errors`fs/nfsd/vfs.c`	+8 -1	0 replies
4/699	userfaultfd: gate must_wait writability check on pte_present()`fs/userfaultfd.c`	+12 -2	0 replies
5/699	clk: imx: Add check for kcalloc`drivers/clk/imx/clk.c`	+2 -0	0 replies
6/699	nfsd: move name lookup out of nfsd4_list_rec_dir()`fs/nfsd/nfs4recover.c`	+28 ~~-27~~	0 replies
7/699	nfsd: change nfs4_client_to_reclaim() to allocate data`fs/nfsd/nfs4recover.c` `fs/nfsd/nfs4state.c`	+42 ~~-47~~	0 replies
8/699	mmc: renesas_sdhi: Add quirk entry for RZ/G2H SoC`drivers/mmc/host/renesas_sdhi_core.c`	+1 -0	0 replies
9/699	KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()`virt/kvm/eventfd.c`	+5 -7	0 replies
10/699	perf trace beauty fcntl: Fix build with older kernel headers`tools/perf/trace/beauty/fcntl.c`	+16 -0	0 replies
11/699	bus: mhi: host: Add alignment check for event ring read pointer`drivers/bus/mhi/host/main.c`	+2 -1	0 replies
12/699	netfilter: nf_log: validate MAC header was set before dumping it`net/ipv4/netfilter/nf_log_ipv4.c` `net/ipv6/netfilter/nf_log_ipv6.c`	+4 -4	0 replies
13/699	skmsg: convert struct sk_msg_sg::copy to a bitmap`include/linux/skmsg.h` `net/core/filter.c`	+7 -8	0 replies
14/699	net: skmsg: preserve sg.copy across SG transforms`include/linux/skmsg.h` `net/core/filter.c` `net/core/skmsg.c` +1 more	+44 -4	0 replies
15/699	apparmor: fix use-after-free in rawdata dedup loop`security/apparmor/include/policy_unpack.h` `security/apparmor/policy.c`	+25 -2	0 replies
16/699	net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink`include/net/rtnetlink.h` `net/core/rtnetlink.c` `net/ipv4/ip_gre.c`	+16 -0	0 replies
17/699	apparmor: mediate the implicit connect of TCP fast open sendmsg`security/apparmor/lsm.c`	+17 -1	0 replies
18/699	f2fs: adjust zone capacity when considering valid block count`fs/f2fs/debug.c` `fs/f2fs/file.c` `fs/f2fs/gc.c` +2 more	+13 ~~-14~~	0 replies
19/699	f2fs: fix to round down start offset of fallocate for pin file`fs/f2fs/file.c`	+8 -1	0 replies
20/699	f2fs: validate orphan inode entry count`fs/f2fs/checkpoint.c`	+12 -1	0 replies
21/699	f2fs: bound i_inline_xattr_size for non-inline-xattr inodes`fs/f2fs/inode.c`	+7 -6	0 replies
22/699	f2fs: fix potential deadlock in f2fs_balance_fs()`fs/f2fs/data.c` `fs/f2fs/f2fs.h` `fs/f2fs/segment.c`	+37 -0	0 replies
23/699	f2fs: fix listxattr handling of corrupted xattr entries`fs/f2fs/xattr.c`	+2 -2	0 replies
24/699	NFSv4/flexfiles: reject zero filehandle version count`fs/nfs/flexfilelayout/flexfilelayout.c`	+4 -0	0 replies
25/699	fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()`drivers/video/fbdev/core/fbcon.c`	+7 -0	0 replies
26/699	i2c: core: fix irq domain leak on adapter registration failure`drivers/i2c/i2c-core-base.c`	+3 -1	0 replies
27/699	i2c: core: fix hang on adapter registration failure`drivers/i2c/i2c-core-base.c`	+29 ~~-20~~	0 replies
28/699	i2c: core: fix NULL-deref on adapter registration failure`drivers/i2c/i2c-core-base.c`	+5 -3	0 replies
29/699	i2c: core: fix adapter debugfs creation`drivers/i2c/i2c-core-base.c`	+12 -7	0 replies
30/699	i2c: core: fix adapter registration race`drivers/i2c/i2c-core-base.c`	+6 -2	0 replies
31/699	hdlc_ppp: sync per-proto timers before freeing hdlc state`drivers/net/wan/hdlc_ppp.c`	+13 -2	0 replies
32/699	xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete`net/xfrm/xfrm_state.c`	+5 -4	0 replies
33/699	usb: gadget: function: rndis: add length check to response query`drivers/usb/gadget/function/rndis.c`	+10 -4	0 replies
34/699	usb: gadget: function: rndis: add length check for header`drivers/usb/gadget/function/rndis.c`	+6 -0	0 replies
35/699	iio: accel: bmc150: clamp the device-reported FIFO frame count`drivers/iio/accel/bmc150-accel-core.c`	+2 -0	0 replies
36/699	iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error`drivers/iio/accel/kxsd9.c`	+3 -2	0 replies
37/699	iio: adc: lpc32xx: Initialize completion before requesting IRQ`drivers/iio/adc/lpc32xx_adc.c`	+2 -2	0 replies
38/699	iio: adc: ti-ads124s08: Return reset GPIO lookup errors`drivers/iio/adc/ti-ads124s08.c`	+2 -1	0 replies
39/699	iio: chemical: scd30: Cleanup initializations and fix sign-extension bug`drivers/iio/chemical/scd30_core.c`	+15 -4	0 replies
40/699	iio: event: Fix event FIFO reset race`drivers/iio/industrialio-event.c`	+2 -3	0 replies
41/699	iio: gyro: bmg160: bail out when bandwidth/filter is not in table`drivers/iio/gyro/bmg160_core.c`	+6 -0	0 replies
42/699	iio: gyro: bmg160: wait full startup time after mode change at probe`drivers/iio/gyro/bmg160_core.c`	+8 -2	0 replies
43/699	iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ`drivers/iio/imu/bmi160/bmi160_core.c`	+2 -1	0 replies
44/699	iio: imu: st_lsm6dsx: deselect shub page before reading whoami`drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c`	+20 -1	0 replies
45/699	iio: light: al3010: fix incorrect scale for the highest gain range`drivers/iio/light/al3010.c`	+1 -1	0 replies
46/699	iio: light: gp2ap002: fix runtime PM leak on read error`drivers/iio/light/gp2ap002.c`	+1 -1	0 replies
47/699	iio: light: opt3001: fix missing state reset on timeout`drivers/iio/light/opt3001.c`	+4 -2	0 replies
48/699	iio: light: veml6030: fix channel type when pushing events`drivers/iio/light/veml6030.c`	+5 -3	0 replies
49/699	iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call`drivers/iio/magnetometer/ak8975.c`	+1 -0	0 replies
50/699	iio: temperature: ltc2983: Fix reinit_completion() called after conversion start`drivers/iio/temperature/ltc2983.c`	+1 -2	0 replies
51/699	ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser`sound/usb/caiaq/input.c`	+1 -1	0 replies
52/699	ALSA: es1938: check snd_ctl_new1() return value`sound/pci/es1938.c`	+2 -0	0 replies
53/699	ALSA: firewire: isight: bound the sample count to the packet payload`sound/firewire/isight.c`	+2 -1	0 replies
54/699	ALSA: usb-audio: avoid kobject path lookup in DualSense match`sound/usb/mixer_quirks.c`	+12 ~~-28~~	0 replies
55/699	ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()`sound/usb/mixer_scarlett.c`	+3 -1	0 replies
56/699	ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks`sound/usb/mixer_us16x08.c`	+24 ~~-25~~	0 replies
57/699	ALSA: usb-audio: Roll back quirk control caches on write errors`sound/usb/mixer_quirks.c`	+37 -8	0 replies
58/699	ALSA: usb-audio: Update Babyface Pro control caches only after successful writes`sound/usb/mixer_quirks.c`	+10 -6	0 replies
59/699	ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes`sound/usb/mixer_us16x08.c`	+52 ~~-26~~	0 replies
60/699	Bluetooth: btusb: fix use-after-free on registration failure`drivers/bluetooth/btusb.c`	+10 -1	0 replies
61/699	binder: fix UAF in binder_thread_release()`drivers/android/binder.c`	+5 -1	0 replies
62/699	usb: xhci: Fix sleep in atomic context in xhci_free_streams()`drivers/usb/host/xhci.c`	+10 -1	0 replies
63/699	PCI: altera: Do not dispose parent IRQ mapping`drivers/pci/controller/pcie-altera.c`	+0 -1	0 replies
64/699	PCI: host-common: Request bus reassignment when not probe-only`drivers/pci/controller/pci-host-common.c`	+4 -0	0 replies
65/699	netfilter: ipset: fix race between dump and ip_set_list resize`net/netfilter/ipset/ip_set_core.c`	+7 -1	0 replies
66/699	virtio-mmio: fix device release warning on module unload`drivers/virtio/virtio_mmio.c`	+13 ~~-13~~	0 replies
67/699	hwrng: virtio: clamp device-reported used.len at copy_data()`drivers/char/hw_random/virtio-rng.c`	+21 -2	0 replies
68/699	USB: chaoskey: Fix slab-use-after-free in chaoskey_release()`drivers/usb/misc/chaoskey.c`	+0 -1	0 replies
69/699	6lowpan: fix NHC entry use-after-free on error path`net/6lowpan/nhc.c`	+1 -1	0 replies
70/699	tipc: fix out-of-bounds read in broadcast Gap ACK blocks`net/tipc/bcast.c` `net/tipc/bcast.h` `net/tipc/node.c`	+27 ~~-12~~	0 replies
71/699	media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe`drivers/staging/media/ipu3/ipu3-css-params.c`	+6 -2	0 replies
72/699	crypto: amlogic - avoid double cleanup in meson_crypto_probe()`drivers/crypto/amlogic/amlogic-gxl-core.c`	+1 -1	0 replies
73/699	net: af_key: initialize alg_key_len for IPComp states`net/key/af_key.c`	+1 -0	0 replies
74/699	audit: Fix data races of skb_queue_len() readers on audit_queue`kernel/audit.c`	+5 -5	0 replies
75/699	debugobjects: Plug race against a concurrent OOM disable`lib/debugobjects.c`	+17 -0	0 replies
76/699	gpio: eic-sprd: use raw_spinlock_t in the irq startup path`drivers/gpio/gpio-eic-sprd.c`	+4 -4	0 replies
77/699	io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item`io_uring/io-wq.c`	+1 -1	0 replies
78/699	ipv4: igmp: remove multicast group from hash table on device destruction`net/ipv4/igmp.c`	+1 -0	0 replies
79/699	net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes`net/ipv4/sysctl_net_ipv4.c` `net/ipv4/tcp_output.c`	+10 -4	0 replies
80/699	mfd: cros_ec: Delay dev_set_drvdata() until probe success`drivers/mfd/cros_ec_dev.c`	+2 -1	0 replies
81/699	netfilter: ebtables: module names must be null-terminated`net/bridge/netfilter/ebtables.c`	+3 -0	0 replies
82/699	netfilter: ebtables: terminate table name before find_table_lock()`net/bridge/netfilter/ebtables.c`	+6 -0	0 replies
83/699	Bluetooth: bnep: pin L2CAP connection during netdev registration`net/bluetooth/bnep/core.c`	+21 -6	0 replies
84/699	Bluetooth: fix UAF in bt_accept_dequeue()`net/bluetooth/af_bluetooth.c` `net/bluetooth/l2cap_sock.c`	+5 ~~-16~~	0 replies
85/699	Bluetooth: L2CAP: validate option length before reading conf opt value`net/bluetooth/l2cap_core.c`	+28 -8	0 replies
86/699	net: Drop the lock in skb_may_tx_timestamp()`include/net/sock.h` `net/core/skbuff.c` `net/socket.c`	+20 -7	0 replies
87/699	sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT`kernel/sched/features.h`	+8 -0	0 replies
88/699	cpufreq: Fix hotplug-suspend race during reboot`drivers/cpufreq/cpufreq.c`	+2 -0	0 replies
89/699	cpufreq: pcc: fix use-after-free and double free in _OSC evaluation`drivers/cpufreq/pcc-cpufreq.c`	+2 -0	0 replies
90/699	posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path`kernel/time/posix-cpu-timers.c`	+1 -0	0 replies
91/699	HID: wacom: stop hardware after post-start probe failures`drivers/hid/wacom_sys.c`	+6 -6	0 replies
92/699	HID: lg-g15: cancel pending work on remove to fix a use-after-free`drivers/hid/hid-lg-g15.c`	+16 -0	0 replies
93/699	HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads`drivers/hid/hid-sensor-hub.c` `include/linux/hid-sensor-hub.h`	+96 -6	0 replies
94/699	hfs/hfsplus: zero-initialize buffer in hfs_bnode_read`fs/hfs/bnode.c` `fs/hfsplus/bnode.c`	+4 -0	0 replies
95/699	nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers`fs/nilfs2/segment.c`	+22 -0	0 replies
96/699	net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()`drivers/net/usb/kalmia.c`	+8 -0	0 replies
97/699	usb: cdc_acm: Add quirk for Uniden BC125AT scanner`drivers/usb/class/cdc-acm.c`	+3 -0	0 replies
98/699	USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub`drivers/usb/core/quirks.c`	+3 -0	0 replies
99/699	usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler`drivers/usb/gadget/composite.c`	+3 -2	0 replies
100/699	USB: idmouse: fix use-after-free on disconnect race`drivers/usb/misc/idmouse.c`	+22 ~~-23~~	0 replies
101/699	USB: ldusb: fix use-after-free on disconnect race`drivers/usb/misc/ldusb.c`	+18 ~~-20~~	0 replies
102/699	USB: iowarrior: fix use-after-free on disconnect`drivers/usb/misc/iowarrior.c`	+3 -1	0 replies
103/699	USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD`drivers/usb/core/quirks.c`	+3 -0	0 replies
104/699	USB: legousbtower: fix use-after-free on disconnect race`drivers/usb/misc/legousbtower.c`	+19 ~~-18~~	0 replies
105/699	usb: sl811-hcd: disable controller wakeup on remove`drivers/usb/host/sl811-hcd.c`	+1 -0	0 replies
106/699	USB: storage: include US_FL_NO_SAME in quirks mask`drivers/usb/storage/usb.c`	+1 -1	0 replies
107/699	USB: misc: uss720: unregister parport on probe failure`drivers/usb/misc/uss720.c`	+4 -1	0 replies
108/699	usb: mtu3: unmap request DMA on queue failure`drivers/usb/mtu3/mtu3_gadget.c`	+1 -0	0 replies
109/699	USB: serial: option: add Telit Cinterion FE990D50 compositions`drivers/usb/serial/option.c`	+16 -0	0 replies
110/699	USB: serial: digi_acceleport: fix broken rx after throttle`drivers/usb/serial/digi_acceleport.c`	+16 -0	0 replies
111/699	USB: serial: digi_acceleport: fix hard lockup on disconnect`drivers/usb/serial/digi_acceleport.c`	+7 -5	0 replies
112/699	USB: ulpi: fix memory leak on registration failure`drivers/usb/common/ulpi.c`	+10 ~~-13~~	0 replies
113/699	USB: usb-storage: ene_ub6250: restore media-ready check`drivers/usb/storage/ene_ub6250.c`	+2 -1	0 replies
114/699	usbip: tools: support SuperSpeedPlus devices`tools/usb/usbip/libsrc/usbip_common.c` `tools/usb/usbip/libsrc/usbip_device_driver.c` `tools/usb/usbip/libsrc/vhci_driver.c`	+7 -0	0 replies
115/699	usbip: vudc: fix NULL deref in vep_dequeue()`drivers/usb/usbip/vudc.h` `drivers/usb/usbip/vudc_dev.c`	+1 -4	0 replies
116/699	usb: typec: tcpm: Validate SVID index in svdm_consume_modes()`drivers/usb/typec/tcpm/tcpm.c`	+5 -0	0 replies
117/699	usb: typec: ucsi: Invert DisplayPort role assignment`drivers/usb/typec/ucsi/displayport.c`	+2 -2	0 replies
118/699	usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode`drivers/usb/typec/ucsi/displayport.c`	+1 -2	0 replies
119/699	iio: adc: spear: Initialize completion before requesting IRQ`drivers/iio/adc/spear_adc.c`	+2 -2	0 replies
120/699	iio: temperature: ltc2983: Fix n_wires default bypassing rotation check`drivers/iio/temperature/ltc2983.c`	+1 -1	0 replies
121/699	udf: validate free block extents against the partition length`fs/udf/balloc.c`	+3 -2	0 replies
122/699	udf: validate VAT header length against the VAT inode size`fs/udf/super.c`	+8 -0	0 replies
123/699	udf: validate sparing table length as an entry count, not a byte count`fs/udf/super.c`	+2 -1	0 replies
124/699	dm-ioctl: report an error if a device has no table`drivers/md/dm-ioctl.c`	+4 -1	0 replies
125/699	partitions: aix: bound the pp_count scan to the ppe array`block/partitions/aix.c`	+9 -0	0 replies
126/699	isofs: bound Rock Ridge symlink components to the SL record`fs/isofs/rock.c`	+11 -0	0 replies
127/699	crypto: caam - use print_hex_dump_devel to guard key hex dumps`drivers/crypto/caam/caamalg.c` `drivers/crypto/caam/caamalg_qi.c` `drivers/crypto/caam/caamhash.c` +1 more	+16 ~~-16~~	0 replies
128/699	crypto: caam - use print_hex_dump_devel to guard key hex dumps again`drivers/crypto/caam/caamalg_qi2.c`	+6 -6	0 replies
129/699	crypto: ecc - Fix carry overflow in vli multiplication`crypto/ecc.c`	+20 ~~-11~~	0 replies
130/699	crypto: pcrypt - restore callback for non-parallel fallback`crypto/pcrypt.c`	+4 -0	0 replies
131/699	crypto: drbg - Fix returning success on failure in CTR_DRBG`crypto/drbg.c`	+1 -1	0 replies
132/699	crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels`include/crypto/drbg.h`	+7 ~~-11~~	0 replies
133/699	crypto: drbg - Fix the fips_enabled priority boost`crypto/drbg.c`	+1 -1	0 replies
134/699	crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header`drivers/crypto/talitos.c`	+20 -8	0 replies
135/699	spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()`drivers/spi/spi-fsl-lpspi.c`	+9 -9	0 replies
136/699	spi: fsl-lpspi: terminate the RX channel on TX prepare failure path`drivers/spi/spi-fsl-lpspi.c`	+1 -1	0 replies
137/699	tracing: Prevent out-of-bounds read in glob matching`include/linux/glob.h` `kernel/trace/trace_events_filter.c` `lib/glob.c`	+32 -6	9 replies
138/699	NFSv4: include MAY_WRITE in open permission mask for O_TRUNC`fs/nfs/dir.c`	+2 -0	0 replies
139/699	exfat: bound uniname advance in exfat_find_dir_entry()`fs/exfat/dir.c`	+8 -5	0 replies
140/699	KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode`arch/x86/kvm/vmx/vmx.c`	+1 -2	0 replies
141/699	udmabuf: fix DMA direction mismatch in release_udmabuf()`drivers/dma-buf/udmabuf.c`	+4 -1	0 replies
142/699	i2c: stm32f7: truncate clock period instead of rounding it`drivers/i2c/busses/i2c-stm32f7.c`	+7 -2	0 replies
143/699	Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure`drivers/input/rmi4/rmi_bus.c`	+3 -1	0 replies
144/699	Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count`drivers/input/rmi4/rmi_f3a.c`	+1 -1	0 replies
145/699	Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count`drivers/input/rmi4/rmi_f30.c`	+1 -1	0 replies
146/699	Input: elan_i2c - prevent division by zero and arithmetic underflow`drivers/input/mouse/elan_i2c_core.c`	+30 -6	0 replies
147/699	Input: goodix - clamp the device-reported contact count`drivers/input/touchscreen/goodix.c`	+2 -1	0 replies
148/699	Input: iforce - bound the device-reported force-feedback effect index`drivers/input/joystick/iforce/iforce-packets.c`	+11 -7	0 replies
149/699	Input: touchwin - reset the packet index on every complete packet`drivers/input/touchscreen/touchwin.c`	+9 -6	0 replies
150/699	Input: maplemouse - fix NULL pointer dereference in open()`drivers/input/mouse/maplemouse.c`	+3 -2	0 replies
151/699	Input: mms114 - fix multi-touch slot corruption`drivers/input/touchscreen/mms114.c`	+1 -1	0 replies
152/699	Input: maple_keyb - set driver data before registering input device`drivers/input/keyboard/maple_keyb.c`	+2 -2	0 replies
153/699	Input: maplemouse - set driver data before registering input device`drivers/input/mouse/maplemouse.c`	+3 -1	0 replies
154/699	Input: maplecontrol - set driver data before registering input device`drivers/input/joystick/maplecontrol.c`	+2 -1	0 replies
155/699	RDMA/siw: bound Read Response placement to the RREAD length`drivers/infiniband/sw/siw/siw_qp_rx.c`	+9 -0	0 replies
156/699	fuse: fix device node leak in cuse_process_init_reply()`fs/fuse/cuse.c`	+3 -1	0 replies
157/699	fuse: re-lock request before returning from fuse_ref_folio()`fs/fuse/dev.c`	+1 -1	0 replies
158/699	sched/fair: Only update stats for allowed CPUs when looking for dst group`kernel/sched/fair.c`	+1 -1	0 replies
159/699	crypto: algif_skcipher - force synchronous processing on trees without ctx->state`crypto/algif_skcipher.c`	+18 ~~-31~~	0 replies
160/699	tools/mm/slabinfo: fix total_objects attribute name`tools/vm/slabinfo.c`	+2 -2	0 replies
161/699	crypto: af_alg - Remove zero-copy support from skcipher and aead`Documentation/crypto/userspace-if.rst` `crypto/af_alg.c`	+14 ~~-71~~	0 replies
162/699	media: uvcvideo: Avoid partial metadata buffers`drivers/media/usb/uvc/uvc_video.c`	+9 -4	0 replies
163/699	media: uvcvideo: Fix buffer sequence in frame gaps`drivers/media/usb/uvc/uvc_video.c`	+13 -4	0 replies
164/699	serial: msm: Disable DMA for kernel console UART`drivers/tty/serial/msm_serial.c`	+2 -1	0 replies
165/699	serial: 8250_omap: clear rx_running on zero-length DMA completes`drivers/tty/serial/8250/8250_omap.c`	+2 -1	0 replies
166/699	afs: Fix netns teardown to cancel the preallocation charger`fs/afs/rxrpc.c`	+4 -2	0 replies
167/699	afs: fix NULL pointer dereference in afs_get_tree()`fs/afs/super.c`	+2 -1	0 replies
168/699	afs: Fix further netns teardown to cancel the preallocation charger`fs/afs/rxrpc.c`	+5 -0	0 replies
169/699	drm/tidss: Drop extra drm_mode_config_reset() call`drivers/gpu/drm/tidss/tidss_kms.c`	+0 -2	0 replies
170/699	drm/radeon: fix memory leak in radeon_ring_restore() on lock failure`drivers/gpu/drm/radeon/radeon_ring.c`	+3 -1	0 replies
171/699	driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()`include/linux/device.h`	+4 -1	0 replies
172/699	wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer`drivers/net/wireless/realtek/rtw88/pci.c`	+5 -0	0 replies
173/699	kconfig: fix potential NULL pointer dereference in conf_askvalue`scripts/kconfig/conf.c`	+2 -4	0 replies
174/699	wifi: ath9k: fix OOB access from firmware tx status queue ID`drivers/net/wireless/ath/ath9k/xmit.c`	+5 -0	0 replies
175/699	ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint`arch/arm/boot/dts/am335x-sl50.dts`	+2 -2	0 replies
176/699	watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure`drivers/watchdog/sprd_wdt.c`	+2 -3	0 replies
177/699	media: cedrus: Fix failure to clean up hardware on probe failure`drivers/staging/media/sunxi/cedrus/cedrus.c`	+3 -1	0 replies
178/699	pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path`drivers/pinctrl/sunxi/pinctrl-sunxi.c`	+1 -1	0 replies
179/699	crypto: atmel-sha204a - fix blocking and non-blocking rng logic`drivers/crypto/atmel-sha204a.c`	+4 -4	0 replies
180/699	crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve`crypto/ecrdsa.c`	+1 -1	0 replies
181/699	crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents`crypto/asymmetric_keys/verify_pefile.c`	+2 -0	0 replies
182/699	iommu/amd: Fix a stale comment about which legacy mode is user visible`drivers/iommu/amd/amd_iommu_types.h`	+6 -5	0 replies
183/699	clk: scmi: Fix clock rate rounding`drivers/clk/clk-scmi.c`	+2 -2	0 replies
184/699	thermal: hwmon: Fix critical temperature attribute removal`drivers/thermal/thermal_hwmon.c`	+4 -1	0 replies
185/699	net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()`net/sched/sch_hfsc.c`	+11 ~~-11~~	0 replies
186/699	crypto: ccp - Treat zero-length cert chain as query for blob lengths`drivers/crypto/ccp/sev-dev.c`	+2 -1	0 replies
187/699	net/sched: sch_htb: annotate data-races (I)`net/sched/sch_htb.c`	+4 -4	0 replies
188/699	ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD`net/ipv6/addrconf.c`	+10 -3	0 replies
189/699	RDMA/hns: Fix arithmetic overflow in calc_hem_config()`drivers/infiniband/hw/hns/hns_roce_hem.c`	+4 -4	0 replies
190/699	RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference`drivers/infiniband/hw/mlx5/devx.c`	+23 -7	0 replies
191/699	RDMA/srpt: fix integer overflow in immediate data length check`drivers/infiniband/ulp/srpt/ib_srpt.c`	+3 -2	0 replies
192/699	media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()`drivers/staging/media/atomisp/pci/atomisp_cmd.c`	+2 -4	0 replies
193/699	sysfs: clamp show() return value in sysfs_kf_read()`fs/sysfs/file.c`	+4 -0	0 replies
194/699	net/sched: sch_drr: annotate data-races around cl->deficit`net/sched/sch_drr.c`	+4 -4	0 replies
195/699	media: rockchip: rga: fix too small buffer size`drivers/media/platform/rockchip/rga/rga-hw.c` `drivers/media/platform/rockchip/rga/rga-hw.h`	+2 -2	0 replies
196/699	device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()`drivers/base/property.c`	+3 -1	0 replies
197/699	cpufreq: Documentation: fix sampling_down_factor range`Documentation/admin-guide/pm/cpufreq.rst`	+1 -1	0 replies
198/699	cpufreq: conservative: Simplify frequency limit handling`drivers/cpufreq/cpufreq_conservative.c`	+1 ~~-11~~	0 replies
199/699	pwm: imx27: Fix variable truncation in .apply()`drivers/pwm/pwm-imx27.c`	+7 -1	0 replies
200/699	bus: sunxi-rsb: Always check register address validity`drivers/bus/sunxi-rsb.c`	+3 -0	0 replies
201/699	IB/mlx4: Fix refcount leak in add_port() error path`drivers/infiniband/hw/mlx4/sysfs.c`	+27 ~~-18~~	0 replies
202/699	RDMA/hns: Fix warning in poll cq direct mode`drivers/infiniband/hw/hns/hns_roce_main.c`	+1 -1	0 replies
203/699	PM: sleep: Use complete() in device_pm_sleep_init()`drivers/base/power/main.c`	+5 -1	0 replies
204/699	MIPS: Fix big-endian stack argument fetching in o32 wrapper`arch/mips/fw/lib/call_o32.S`	+1 -1	0 replies
205/699	MIPS: DEC: Remove do_IRQ() call indirection`arch/mips/dec/int-handler.S` `arch/mips/dec/setup.c`	+1 -7	0 replies
206/699	mtd: spi-nor: Drop duplicate Kconfig dependency`drivers/mtd/spi-nor/Kconfig`	+0 -1	0 replies
207/699	nvme-multipath: fix flex array size in struct nvme_ns_head`drivers/nvme/host/core.c`	+1 -1	0 replies
208/699	workqueue: drop spurious * from print_worker_info() fn declaration`kernel/workqueue.c`	+1 -1	0 replies
209/699	ipv6: guard against possible NULL deref in __in6_dev_stats_get()`include/net/addrconf.h`	+4 -1	0 replies
210/699	net/sched: cls_bpf: prevent unbounded recursion in offload rollback`net/sched/cls_bpf.c`	+6 -4	0 replies
211/699	drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()`drivers/gpu/drm/tegra/dc.c`	+3 -1	0 replies
212/699	rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()`drivers/rapidio/devices/tsi721.c`	+2 -1	0 replies
213/699	ocfs2: dont BUG_ON an invalid journal dinode`fs/ocfs2/journal.c`	+2 -5	0 replies
214/699	ocfs2: kill osb->system_file_mutex lock`fs/ocfs2/ocfs2.h` `fs/ocfs2/super.c` `fs/ocfs2/sysfile.c`	+3 ~~-10~~	0 replies
215/699	drm/msm/dp: fix HPD state status bit shift value`drivers/gpu/drm/msm/dp/dp_reg.h`	+2 -2	0 replies
216/699	drm/msm/dp: Fix the ISR_* enum values`drivers/gpu/drm/msm/dp/dp_display.c`	+2 -2	0 replies
217/699	media: qcom: venus: drop extra padding in NV12 raw size calculation`drivers/media/platform/qcom/venus/helpers.c`	+2 -2	0 replies
218/699	ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback`fs/ext4/ioctl.c`	+9 -3	0 replies
219/699	ARM: imx3: Fix CCM node reference leak`arch/arm/mach-imx/mm-imx3.c`	+2 -0	0 replies
220/699	ARM: imx31: Fix IIM mapping leak in revision check`arch/arm/mach-imx/cpu-imx31.c`	+7 -2	0 replies
221/699	scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"`drivers/scsi/scsi_scan.c` `drivers/scsi/scsi_transport_sas.c`	+13 ~~-49~~	0 replies
222/699	scsi: pm8001: Fix error code in non_fatal_log_show()`drivers/scsi/pm8001/pm8001_ctl.c`	+1 -4	0 replies
223/699	mm/fake-numa: fix under-allocation detection in uniform split`arch/x86/mm/numa_emulation.c`	+13 -4	0 replies
224/699	lib/test_meminit: use && for bools`lib/test_meminit.c`	+1 -1	0 replies
225/699	bpftool: Use libbpf error code for flow dissector query`tools/bpf/bpftool/net.c`	+2 -2	0 replies
226/699	perf/x86/amd/core: Always use the NMI latency mitigation`arch/x86/events/amd/core.c`	+3 -3	0 replies
227/699	ocfs2: rebase copied fsdlm LVB pointers in locking_state`fs/ocfs2/dlmglue.c`	+17 -0	0 replies
228/699	ocfs2: fix buffer head management in ocfs2_read_blocks()`fs/ocfs2/buffer_head_io.c`	+4 -3	0 replies
229/699	ocfs2: reject FITRIM ranges shorter than a cluster`fs/ocfs2/alloc.c`	+1 -1	0 replies
230/699	ocfs2/dlm: require a ref for locking_state debugfs open`fs/ocfs2/dlm/dlmdebug.c`	+12 -4	0 replies
231/699	ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()`fs/ocfs2/stack_user.c`	+3 -7	0 replies
232/699	netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures`net/netfilter/nfnetlink_osf.c`	+1 -5	0 replies
233/699	netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock`net/netfilter/nf_conntrack_seqadj.c`	+2 -0	0 replies
234/699	netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp`net/netfilter/nf_conntrack_core.c`	+16 -2	0 replies
235/699	bpf: Update transport_header when encapsulating UDP tunnel in lwt`net/core/lwt_bpf.c`	+12 -0	0 replies
236/699	wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication`drivers/net/wireless/ath/wcn36xx/smd.c`	+6 -0	0 replies
237/699	riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe`arch/riscv/kernel/stacktrace.c`	+1 -1	0 replies
238/699	ACPI: IPMI: Fix message kref handling on dead device`drivers/acpi/acpi_ipmi.c`	+1 -1	0 replies
239/699	cpufreq: Documentation: fix conservative governor freq_step description`Documentation/admin-guide/pm/cpufreq.rst`	+2 -2	0 replies
240/699	spi: ep93xx: fix double-free of zeropage on DMA setup failure`drivers/spi/spi-ep93xx.c`	+1 -0	0 replies
241/699	firmware_loader: Fix recursive lock in device_cache_fw_images()`drivers/base/firmware_loader/main.c`	+2 -1	0 replies
242/699	configfs: fix lockless traversals of ->s_children`fs/configfs/dir.c`	+41 ~~-13~~	0 replies
243/699	pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39`drivers/pinctrl/mediatek/pinctrl-mt8516.c`	+1 -1	0 replies
244/699	pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39`drivers/pinctrl/mediatek/pinctrl-mt8167.c`	+1 -1	0 replies
245/699	hwspinlock: qcom: avoid uninitialized struct members`drivers/hwspinlock/qcom_hwspinlock.c`	+1 -4	0 replies
246/699	btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()`fs/btrfs/extent-tree.c`	+3 -2	0 replies
247/699	fbdev: sm501fb: Fix buffer errors in OF binding code`drivers/video/fbdev/sm501fb.c`	+12 -4	0 replies
248/699	IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified`drivers/infiniband/hw/mlx4/mlx4_ib.h` `drivers/infiniband/hw/mlx4/mr.c`	+8 -2	0 replies
249/699	vhost/vdpa: validate virtqueue index in mmap and fault paths`drivers/vhost/vdpa.c`	+22 -7	0 replies
250/699	tools/virtio: check mmap return value in vringh_test`tools/virtio/vringh_test.c`	+5 -0	0 replies
251/699	bonding: 3ad: fix mux port state on oper down`drivers/net/bonding/bond_3ad.c`	+1 -0	0 replies
252/699	fs: efs: remove unneeded debug prints`fs/efs/file.c`	+3 ~~-18~~	0 replies
253/699	RDMA/mlx5: Fix undefined shift of user RQ WQE size`drivers/infiniband/hw/mlx5/qp.c`	+4 -7	0 replies
254/699	ASoC: fsl: fsl_audmix: Validate written enum values`sound/soc/fsl/fsl_audmix.c`	+6 -0	0 replies
255/699	ASoC: tegra: tegra210_ahub: Validate written enum value`sound/soc/tegra/tegra210_ahub.c`	+3 -1	0 replies
256/699	net: fib_rules: Dont dump dying fib_rule in fib_rules_dump().`include/net/fib_rules.h` `net/core/fib_rules.c`	+10 -1	0 replies
257/699	sctp: validate embedded address parameter length`net/sctp/sm_make_chunk.c`	+8 -2	0 replies
258/699	net/sched: sch_hfsc: Dont make class passive twice`net/sched/sch_hfsc.c`	+1 -1	0 replies
259/699	tipc: require net admin for TIPCv2 netlink mutators`net/tipc/netlink.c`	+12 -0	0 replies
260/699	tipc: prevent snt_unacked underflow on CONN_ACK`net/tipc/socket.c`	+3 -0	0 replies
261/699	crypto: marvell/octeontx - fix DMA cleanup using wrong loop index`drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c`	+2 -2	0 replies
262/699	crypto: cavium/cpt - fix DMA cleanup using wrong loop index`drivers/crypto/cavium/cpt/cptvf_reqmanager.c`	+2 -2	0 replies
263/699	crypto: rng - Free default RNG on module exit`crypto/rng.c`	+11 -0	0 replies
264/699	spi: xilinx: use FIFO occupancy register to determine buffer size`drivers/spi/spi-xilinx.c`	+9 -2	0 replies
265/699	net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen`net/sched/sch_fq_codel.c`	+39 -2	0 replies
266/699	net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen`net/sched/sch_codel.c`	+43 -5	0 replies
267/699	kcm: use WRITE_ONCE() when changing lower socket callbacks`net/kcm/kcmsock.c`	+4 -4	0 replies
268/699	netfilter: nf_conncount: callers must hold rcu read lock`net/netfilter/nf_conncount.c` `net/openvswitch/conntrack.c`	+4 -4	0 replies
269/699	bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()`net/core/filter.c`	+3 -0	0 replies
270/699	bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check`net/core/filter.c`	+2 -2	0 replies
271/699	MIPS: mm: Fix out-of-bounds write in maar_res_walk()`arch/mips/mm/init.c`	+8 -4	0 replies
272/699	powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del`arch/powerpc/perf/core-fsl-emb.c`	+2 -1	0 replies
273/699	powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down`arch/powerpc/platforms/powernv/setup.c`	+2 -1	0 replies
274/699	powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus`arch/powerpc/kexec/core_64.c`	+1 -3	0 replies
275/699	KEYS: Use acquire when reading state in keyring search`security/keys/keyring.c`	+1 -1	0 replies
276/699	tipc: fix UAF in tipc_l2_send_msg()`net/tipc/bearer.c`	+1 -0	0 replies
277/699	tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)`net/ipv6/route.c`	+3 -3	0 replies
278/699	ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write`fs/ocfs2/aops.c`	+9 -4	0 replies
279/699	net/9p: fix race condition on rdma->state in trans_rdma.c`net/9p/trans_rdma.c`	+17 -2	0 replies
280/699	staging: nvec: fix use-after-free in nvec_rx_completed()`drivers/staging/nvec/nvec.c`	+3 -1	0 replies
281/699	coresight: cti: Fix DT filter signals silently ignored`drivers/hwtracing/coresight/coresight-cti-platform.c`	+1 -0	0 replies
282/699	x86/platform/olpc: xo15: Drop wakeup source on driver removal`arch/x86/platform/olpc/olpc-xo15-sci.c`	+1 -0	0 replies
283/699	platform/x86: xo15-ebook: Fix wakeup source and GPE handling`drivers/platform/x86/xo15-ebook.c`	+6 -1	0 replies
284/699	perf sched: Add missing mmap2 handler in timehist`tools/perf/builtin-sched.c`	+1 -0	0 replies
285/699	staging: most: video: avoid double free on video register failure`drivers/staging/most/video/video.c`	+6 -1	0 replies
286/699	usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()`drivers/usb/host/max3421-hcd.c`	+4 -0	0 replies
287/699	usb: host: max3421: Reject hub port requests for non-existent ports`drivers/usb/host/max3421-hcd.c`	+4 -0	0 replies
288/699	char: tlclk: fix use-after-free in tlclk_cleanup()`drivers/char/tlclk.c`	+4 -0	0 replies
289/699	iio: light: si1133: reset counter to prevent race condition`drivers/iio/light/si1133.c`	+5 -0	0 replies
290/699	iio: light: si1133: prevent race condition on timeout`drivers/iio/light/si1133.c`	+8 -1	0 replies
291/699	iio: magnetometer: ak8975: fix potential kernel stack memory leak`drivers/iio/magnetometer/ak8975.c`	+14 -0	0 replies
292/699	iio: accel: mma8452: handle I2C read error(s) in mma8452_read()`drivers/iio/accel/mma8452.c`	+2 -0	0 replies
293/699	HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter`drivers/hid/hid-logitech-hidpp.c`	+0 -1	0 replies
294/699	perf: Fix off-by-one stack buffer overflow in kallsyms__parse()`tools/lib/symbol/kallsyms.c`	+4 -1	0 replies
295/699	perf sched: Clean up idle_threads entry on init failure`tools/perf/builtin-sched.c`	+4 -1	0 replies
296/699	perf sched: Replace BUG_ON and add NULL checks in replay event helpers`tools/perf/builtin-sched.c`	+25 -3	0 replies
297/699	perf mmap: Fix NULL deref in aio cleanup on alloc failure`tools/perf/util/mmap.c`	+6 -4	0 replies
298/699	perf c2c: Fix use-after-free in he__get_c2c_hists() error path`tools/perf/builtin-c2c.c`	+1 -0	0 replies
299/699	dmaengine: Fix possible use after free`drivers/dma/dmaengine.c`	+2 -1	0 replies
300/699	clk: qcom: a53: Corrected frequency multiplier for 1152MHz`drivers/clk/qcom/a53-pll.c`	+1 -1	0 replies
301/699	pNFS/filelayout: fix cheking if a layout is striped`fs/nfs/filelayout/filelayout.c`	+2 -0	0 replies
302/699	NFSv4/pnfs: defer return_range callbacks until after inode unlock`fs/nfs/callback_proc.c` `fs/nfs/pnfs.c`	+7 -6	0 replies
303/699	NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors`fs/nfs/flexfilelayout/flexfilelayout.c`	+16 -0	0 replies
304/699	NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write`fs/nfs/flexfilelayout/flexfilelayout.c` `fs/nfs/flexfilelayout/flexfilelayout.h`	+29 -0	0 replies
305/699	PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro`drivers/pci/controller/pcie-mediatek.c`	+2 -1	0 replies
306/699	perf tools: Fix get_max_num() size_t underflow on empty sysfs file`tools/perf/util/cpumap.c`	+6 -0	0 replies
307/699	perf tools: Use perf_env__get_cpu_topology() in machine__resolve()`tools/perf/util/event.c`	+13 -2	0 replies
308/699	PCI: rcar-host: Remove unused LIST_HEAD(res)`drivers/pci/controller/pcie-rcar-host.c`	+0 -1	0 replies
309/699	perf sched: Fix idle-hist callchain display using wrong rb_first variant`tools/perf/builtin-sched.c`	+2 -1	0 replies
310/699	perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name()`tools/perf/util/bpf-event.c`	+6 -5	0 replies
311/699	perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path`tools/perf/util/hist.c`	+4 -3	0 replies
312/699	perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file`tools/perf/util/pmu.c`	+2 -2	0 replies
313/699	tools lib api: Fix missing null termination in filename__read_int/ull()`tools/lib/api/fs/fs.c`	+8 -2	0 replies
314/699	perf symbols: Fix signed overflow in sysfs__read_build_id() size check`tools/perf/util/symbol-elf.c`	+6 -3	0 replies
315/699	perf symbols: Bounds-check .gnu_debuglink section data`tools/perf/util/symbol-elf.c`	+8 -1	0 replies
316/699	perf tools: Fix thread__set_comm_from_proc() on empty comm file`tools/perf/util/thread.c`	+5 -0	0 replies
317/699	perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback`tools/perf/util/symbol-elf.c`	+7 -2	0 replies
318/699	tools lib api: Fix filename__write_int() writing uninitialized stack data`tools/lib/api/fs/fs.c`	+3 -2	0 replies
319/699	tools lib api: Fix mount_overload() snprintf truncation and toupper range`tools/lib/api/fs/fs.c`	+2 -2	0 replies
320/699	perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name()`tools/perf/util/bpf-event.c`	+2 -1	0 replies
321/699	perf symbols: Add bounds checks to elf_read_build_id() note iteration`tools/perf/util/symbol-elf.c`	+16 -2	0 replies
322/699	perf symbols: Add bounds checks to read_build_id() note iteration in minimal build`tools/perf/util/symbol-minimal.c`	+10 -1	0 replies
323/699	PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()`drivers/pci/controller/pcie-mediatek.c`	+1 -1	0 replies
324/699	PCI: mediatek: Use actual physical address instead of virt_to_phys()`drivers/pci/controller/pcie-mediatek.c`	+13 -3	0 replies
325/699	apparmor: check label build before no_new_privs test`security/apparmor/domain.c`	+15 ~~-10~~	0 replies
326/699	apparmor: aa_label_alloc use aa_label_free on alloc failure`security/apparmor/label.c`	+1 -1	0 replies
327/699	apparmor: grab ns lock and refresh when looking up changehat child profiles`security/apparmor/domain.c`	+31 -2	0 replies
328/699	apparmor: fix potential UAF in aa_replace_profiles`security/apparmor/policy.c`	+4 -1	0 replies
329/699	apparmor: aa_getprocattr free procattr leak on format failure`security/apparmor/procattr.c`	+2 -0	0 replies
330/699	apparmor: put secmark label after secid lookup`security/apparmor/net.c`	+1 -0	0 replies
331/699	i3c: master: Prevent reuse of dynamic address on device add failure`drivers/i3c/master.c`	+14 -5	0 replies
332/699	apparmor: fix label can not be immediately before a declaration`security/apparmor/policy.c`	+2 -1	0 replies
333/699	sparc: led: avoid trimming a newline from empty writes`arch/sparc/kernel/led.c`	+1 -1	0 replies
334/699	perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id()`tools/perf/util/symbol-elf.c`	+3 -0	0 replies
335/699	perf tools: Use snprintf() for root_dir path construction`tools/perf/util/machine.c` `tools/perf/util/symbol.c`	+2 -2	0 replies
336/699	perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name()`tools/perf/util/bpf-event.c`	+3 -1	0 replies
337/699	xfrm: validate selector family and prefixlen during match`include/net/xfrm.h` `net/xfrm/xfrm_policy.c`	+10 -0	0 replies
338/699	perf machine: Use snprintf() for guestmount path construction`tools/perf/util/machine.c`	+4 -4	0 replies
339/699	octeontx2-pf: Fix leak of SQ timestamp buffer on teardown`drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`	+1 -0	0 replies
340/699	net: psample: fix info leak in PSAMPLE_ATTR_DATA`net/psample/psample.c`	+4 -2	0 replies
341/699	sctp: hold socket lock when dumping endpoints in sctp_diag`include/net/sctp/sctp.h` `net/sctp/diag.c` `net/sctp/socket.c`	+56 ~~-43~~	0 replies
342/699	arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS`arch/arm64/kernel/hw_breakpoint.c`	+9 -0	0 replies
343/699	thermal: intel: Fix dangling resources on thermal_throttle_online() failure`arch/x86/kernel/cpu/mce/therm_throt.c`	+6 -1	0 replies
344/699	ACPI: resource: Amend kernel-doc style`drivers/acpi/resource.c`	+3 -3	0 replies
345/699	ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()`net/ieee802154/core.c`	+1 -1	0 replies
346/699	ieee802154: fix kernel-infoleak in dgram_recvmsg()`net/ieee802154/header_ops.c`	+6 -3	0 replies
347/699	netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()`net/netfilter/ipset/ip_set_core.c`	+2 -2	0 replies
348/699	netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak`net/bridge/netfilter/nft_meta_bridge.c`	+3 -1	0 replies
349/699	irqchip/crossbar: Fix parent domain resource leak`drivers/irqchip/irq-crossbar.c`	+1 -0	0 replies
350/699	selftests/mm: clarify alternate unmapping in compaction_test`tools/testing/selftests/vm/compaction_test.c`	+3 -0	0 replies
351/699	selftests/mm: allow PUD-level entries in compound testcase of hmm tests`tools/testing/selftests/vm/hmm-tests.c`	+24 -8	0 replies
352/699	rtc: abx80x: fix the RTC_VL_CLR clearing all status flags`drivers/rtc/rtc-abx80x.c`	+2 -1	0 replies
353/699	rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231`drivers/rtc/rtc-ds1307.c`	+17 ~~-11~~	0 replies
354/699	bpf: Fix stack slot index in nospec checks`kernel/bpf/verifier.c`	+2 -1	0 replies
355/699	drm/edid: fix OOB read in drm_parse_tiled_block()`drivers/gpu/drm/drm_edid.c`	+8 -0	0 replies
356/699	ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().`net/ipv6/route.c`	+3 -0	0 replies
357/699	ipv4: fib: Dont ignore error route in local/main tables.`include/net/ip_fib.h`	+3 -4	0 replies
358/699	netfilter: nf_conncount: prevent connlimit drops for early confirmed ct`net/netfilter/nf_conncount.c`	+5 -6	0 replies
359/699	netfilter: nft_synproxy: stop bypassing the priv->info snapshot`net/netfilter/nft_synproxy.c`	+4 -5	0 replies
360/699	alpha/PCI: Add security_locked_down() check to pci_mmap_resource()`arch/alpha/kernel/pci-sysfs.c`	+6 -1	0 replies
361/699	alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs`arch/alpha/kernel/pci-sysfs.c`	+5 -1	0 replies
362/699	net: dsa: sja1105: round up PTP perout pin duration`drivers/net/dsa/sja1105/sja1105_ptp.c`	+1 -1	0 replies
363/699	ipv6: fix error handling in disable_ipv6 sysctl`net/ipv6/addrconf.c`	+2 -0	0 replies
364/699	ipv6: fix error handling in ignore_routes_with_linkdown sysctl`net/ipv6/addrconf.c`	+2 -0	0 replies
365/699	ipv6: fix error handling in forwarding sysctl`net/ipv6/addrconf.c`	+3 -1	0 replies
366/699	ipv6: fix error handling in disable_policy sysctl`net/ipv6/addrconf.c`	+2 -0	0 replies
367/699	smb/client: preserve errors from smb2_set_sparse()`fs/cifs/smb2ops.c`	+15 ~~-15~~	0 replies
368/699	rtc: ds1307: Fix off-by-one issue with wday for rx8130`drivers/rtc/rtc-ds1307.c`	+1 -1	0 replies
369/699	rtc: cmos: unregister HPET IRQ handler on probe failure`drivers/rtc/rtc-cmos.c`	+6 -0	0 replies
370/699	net: mvneta: re-enable percpu interrupt on resume`drivers/net/ethernet/marvell/mvneta.c`	+3 -0	0 replies
371/699	net: sungem: fix probe error cleanup`drivers/net/ethernet/sun/sungem.c`	+9 -4	0 replies
372/699	tracing: probes: fix typo in a log message`kernel/trace/trace_probe.h`	+1 -1	0 replies
373/699	spi: sh-msiof: abort transfers when reset times out`drivers/spi/spi-sh-msiof.c`	+6 -4	0 replies
374/699	gpio: mvebu: fail probe if gpiochip registration fails`drivers/gpio/gpio-mvebu.c`	+4 -1	0 replies
375/699	gpio: htc-egpio: use managed gpiochip registration`drivers/gpio/gpio-htc-egpio.c`	+5 -1	0 replies
376/699	seg6: validate SRH length before reading fixed fields`net/ipv6/seg6.c`	+3 -0	0 replies
377/699	hwmon: adm1275: Prevent reading uninitialized stack`drivers/hwmon/pmbus/adm1275.c`	+1 -1	0 replies
378/699	usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()`drivers/net/usb/gl620a.c`	+3 -3	0 replies
379/699	tracing/events: Fix to check the simple_tsk_fn creation`samples/trace_events/trace-events-sample.c`	+4 -0	0 replies
380/699	virtio_net: disable cb when NAPI is busy-polled`drivers/net/virtio_net.c`	+3 -0	0 replies
381/699	cxgb4: Fix decode strings dump for T6 adapters`drivers/net/ethernet/chelsio/cxgb4/t4_hw.c`	+0 -8	0 replies
382/699	gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe`drivers/gpio/gpio-timberdale.c`	+1 -1	0 replies
383/699	net/sched: hhf: clear heavy-hitter state on reset`net/sched/sch_hhf.c`	+27 -0	0 replies
384/699	afs: Fix error code in afs_extract_vl_addrs()`fs/afs/vl_list.c`	+3 -1	0 replies
385/699	afs: Fix callback service message parsers to pass through -EAGAIN`fs/afs/cmservice.c`	+0 -2	0 replies
386/699	afs: Fix vllist leak`fs/afs/cell.c`	+2 -0	0 replies
387/699	afs: Fix unchecked-length string display in debug statement`fs/afs/vl_list.c`	+5 -1	0 replies
388/699	ata: sata_gemini: unwind clocks on IDE pinctrl errors`drivers/ata/sata_gemini.c`	+1 -1	0 replies
389/699	HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()`drivers/hid/hid-picolcd_core.c`	+2 -1	0 replies
390/699	HID: core: Fix OOB read in hid_get_report for numbered reports`drivers/hid/hid-core.c`	+7 -0	0 replies
391/699	net: usb: net1080: validate packet_len before pad-byte access in rx_fixup`drivers/net/usb/net1080.c`	+1 -1	0 replies
392/699	gue: validate REMCSUM private option length`include/net/gue.h`	+1 -1	0 replies
393/699	netfilter: xt_u32: reject invalid shift counts`net/netfilter/xt_u32.c`	+11 -1	0 replies
394/699	netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()`net/netfilter/xt_rateest.c`	+1 -1	0 replies
395/699	netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop`net/ipv6/netfilter/ip6t_ah.c` `net/ipv6/netfilter/ip6t_hbh.c` `net/ipv6/netfilter/ip6t_rt.c`	+8 -1	0 replies
396/699	qede: fix off-by-one in BD ring consumption on build_skb failure`drivers/net/ethernet/qlogic/qede/qede_fp.c`	+5 -0	0 replies
397/699	net: qualcomm: rmnet: simplify some byte order logic`drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c`	+6 ~~-10~~	0 replies
398/699	net: qualcomm: rmnet: kill RMNET_MAP_GET_*() accessor macros`drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c` `drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h` `drivers/net/ethernet/qualcomm/rmnet/rmnet_map_command.c` +1 more	+16 ~~-21~~	0 replies
399/699	net: qualcomm: rmnet: use masks instead of C bit-fields`drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c` `drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c` `include/linux/if_rmnet.h`	+15 ~~-16~~	0 replies
400/699	net: qualcomm: rmnet: dont use C bit-fields in rmnet checksum header`drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c` `include/linux/if_rmnet.h`	+23 ~~-36~~	0 replies
401/699	net: ethernet: rmnet: Support for ingress MAPv5 checksum offload`drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c` `drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h` `drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c` +2 more	+96 ~~-12~~	0 replies
402/699	net: qualcomm: rmnet: add tx packets aggregation`drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c` `drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h` `drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c` +4 more	+246 -4	0 replies
403/699	net: qualcomm: rmnet: validate MAP frame length before ingress parsing`drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c` `drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h` `drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c`	+45 ~~-33~~	0 replies
404/699	net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket`net/smc/smc_cdc.c`	+10 -5	0 replies
405/699	Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length`include/net/bluetooth/hci.h`	+3 -2	0 replies
406/699	Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()`drivers/bluetooth/bpa10x.c`	+6 -2	0 replies
407/699	ring-buffer: Fix event length with forced 8-byte alignment`kernel/trace/ring_buffer.c`	+2 -1	0 replies
408/699	net: usb: lan78xx: disable VLAN filter in promiscuous mode`drivers/net/usb/lan78xx.c`	+14 -4	0 replies
409/699	net/sched: cake: reject overhead values that underflow length`net/sched/sch_cake.c`	+1 -4	0 replies
410/699	mld: convert from timer to delayed work`include/net/if_inet6.h` `net/ipv6/mcast.c`	+83 ~~-65~~	0 replies
411/699	mld: get rid of inet6_dev->mc_lock`include/net/if_inet6.h` `net/ipv6/mcast.c`	+0 ~~-10~~	0 replies
412/699	mld: convert ipv6_mc_socklist->sflist to RCU`include/net/if_inet6.h` `net/ipv6/mcast.c`	+24 ~~-32~~	0 replies
413/699	mld: convert ip6_sf_list to RCU`include/net/if_inet6.h` `net/ipv6/mcast.c`	+130 ~~-77~~	0 replies
414/699	mld: convert ifmcaddr6 to RCU`drivers/s390/net/qeth_l3_main.c` `include/net/if_inet6.h` `net/batman-adv/multicast.c` +4 more	+140 ~~-188~~	0 replies
415/699	mld: add new workqueues for process mld events`include/net/if_inet6.h` `include/net/mld.h` `net/ipv6/icmp.c` +1 more	+210 ~~-86~~	0 replies
416/699	mld: add mc_lock for protecting per-interface mld data`include/net/if_inet6.h` `net/ipv6/mcast.c`	+194 ~~-116~~	0 replies
417/699	ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()`include/net/ndisc.h` `net/ipv6/mcast.c`	+14 ~~-22~~	0 replies
418/699	ipv6: mcast: Replace locking comments with lockdep annotations.`net/ipv6/mcast.c`	+71 ~~-54~~	0 replies
419/699	ipv6: mcast: Fix potential UAF in MLD delayed work`include/net/addrconf.h` `net/ipv6/mcast.c`	+33 ~~-12~~	0 replies
420/699	ipvs: pass parsed transport offset to state handlers`include/net/ip_vs.h` `net/netfilter/ipvs/ip_vs_core.c` `net/netfilter/ipvs/ip_vs_proto_sctp.c` +2 more	+13 -9	0 replies
421/699	ipvs: use parsed transport offset in TCP state lookup`net/netfilter/ipvs/ip_vs_proto_tcp.c`	+1 -7	0 replies
422/699	ipvs: fix PMTU for GUE/GRE tunnel ICMP errors`net/netfilter/ipvs/ip_vs_core.c`	+3 -3	0 replies
423/699	ipvs: ensure inner headers in ICMP errors are in headroom`net/netfilter/ipvs/ip_vs_core.c`	+15 -6	0 replies
424/699	dm era: fix NULL pointer dereference in metadata_open()`drivers/md/dm-era-target.c`	+4 -2	0 replies
425/699	regulator: core: Make regulator_lock_two() logic easier to follow`drivers/regulator/core.c`	+12 ~~-19~~	0 replies
426/699	regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK`drivers/regulator/core.c`	+2 -2	0 replies
427/699	net/mlx5: Fix L3 tunnel entropy refcount leak`drivers/net/ethernet/mellanox/mlx5/core/lib/port_tun.c`	+2 -1	0 replies
428/699	smb: client: fix overflow in passthrough ioctl bounds check`fs/cifs/smb2ops.c`	+2 -2	0 replies
429/699	mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()`drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c`	+1 -0	0 replies
430/699	net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()`net/qrtr/af_qrtr.c`	+1 -1	0 replies
431/699	net: atm: reject out-of-range traffic classes in QoS validation`net/atm/common.c`	+2 -0	0 replies
432/699	net: ife: require ETH_HLEN to be pullable in ife_decode()`net/ife/ife.c`	+1 -1	0 replies
433/699	arm64: dts: qcom: sdm630: describe adsp_mem region properly`arch/arm64/boot/dts/qcom/sdm630.dtsi`	+6 -3	0 replies
434/699	KVM: arm64: vgic: Check the interrupt is still ours before migrating it`arch/arm64/kvm/vgic/vgic.c`	+6 -5	0 replies
435/699	fbdev: sm712: Fix operator precedence in big_swap macro`drivers/video/fbdev/sm712.h`	+1 -1	0 replies
436/699	fbdev: radeon: fix potential memory leak in radeonfb_pci_register()`drivers/video/fbdev/aty/radeon_base.c`	+1 -0	0 replies
437/699	fbdev: i740fb: fix potential memory leak in i740fb_probe()`drivers/video/fbdev/i740fb.c`	+1 -0	0 replies
438/699	fbdev: s3fb: fix potential memory leak in s3_pci_probe()`drivers/video/fbdev/s3fb.c`	+1 -0	0 replies
439/699	fbdev: uvesafb: fix potential memory leak in uvesafb_probe()`drivers/video/fbdev/uvesafb.c`	+2 -2	0 replies
440/699	fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()`drivers/video/fbdev/tdfxfb.c`	+1 -0	0 replies
441/699	fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()`drivers/video/fbdev/carminefb.c`	+1 -0	0 replies
442/699	fbdev: nvidia: fix potential memory leak in nvidiafb_probe()`drivers/video/fbdev/nvidia/nvidia.c`	+1 -0	0 replies
443/699	fbdev: tridentfb: fix potential memory leak in trident_pci_probe()`drivers/video/fbdev/tridentfb.c`	+1 -0	0 replies
444/699	netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read`net/netfilter/nf_conntrack_irc.c`	+3 -3	0 replies
445/699	netfilter: nfnl_cthelper: apply per-class values when updating policies`net/netfilter/nfnetlink_cthelper.c`	+2 -2	0 replies
446/699	netfilter: xt_cluster: reject template conntracks in hash match`net/netfilter/xt_cluster.c`	+1 -1	0 replies
447/699	netfilter: nf_nat_sip: reload possible stale data pointer`net/netfilter/nf_nat_sip.c`	+9 -0	0 replies
448/699	netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag`net/ipv6/netfilter/nf_conntrack_reasm.c`	+2 -1	0 replies
449/699	netfilter: nf_conncount: fix zone comparison in tuple dedup`net/netfilter/nf_conncount.c`	+3 -3	0 replies
450/699	netfilter: xt_nat: reject unsupported target families`net/netfilter/xt_nat.c`	+9 -0	0 replies
451/699	netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()`net/ipv6/netfilter.c`	+3 -1	0 replies
452/699	gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path`drivers/gpu/host1x/bus.c`	+1 -1	0 replies
453/699	soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy`drivers/soc/ti/k3-ringacc.c`	+2 -2	0 replies
454/699	soc: fsl: qe: panic on ioremap() failure in qe_reset()`drivers/soc/fsl/qe/qe.c`	+3 -0	0 replies
455/699	leds: uleds: Fix potential buffer overread`drivers/leds/uleds.c`	+2 -1	0 replies
456/699	mfd: sm501: Fix reference leak on failed device registration`drivers/mfd/sm501.c`	+3 -1	0 replies
457/699	x86/boot: Validate console=uart8250 baud rate to fix early boot hang`arch/x86/boot/early_serial_console.c`	+7 -4	0 replies
458/699	x86/boot: Reject too long acpi_rsdp= values`arch/x86/boot/compressed/acpi.c`	+6 -1	0 replies
459/699	batman-adv: gw: acquire ethernet header only after skb realloc`net/batman-adv/gateway_client.c`	+2 -1	0 replies
460/699	batman-adv: access unicast_ttvn skb->data only after skb realloc`net/batman-adv/routing.c`	+1 -1	0 replies
461/699	batman-adv: dat: acquire ARP hw source only after skb realloc`net/batman-adv/distributed-arp-table.c`	+4 -1	0 replies
462/699	batman-adv: bla: reacquire gw address after skb realloc`net/batman-adv/routing.c`	+1 -0	0 replies
463/699	batman-adv: dat: ensure accessible eth_hdr proto field`net/batman-adv/distributed-arp-table.c` `net/batman-adv/main.c`	+26 -0	0 replies
464/699	batman-adv: dat: fix tie-break for candidate selection`net/batman-adv/distributed-arp-table.c`	+1 -1	0 replies
465/699	batman-adv: tt: avoid request storms during pending request`net/batman-adv/translation-table.c`	+1 -1	0 replies
466/699	batman-adv: fix VLAN priority offset`net/batman-adv/main.c`	+1 -1	0 replies
467/699	batman-adv: frag: free unfragmentable packet`net/batman-adv/fragmentation.c`	+4 -2	0 replies
468/699	batman-adv: frag: fix primary_if leak on failed linearization`net/batman-adv/fragmentation.c`	+1 -1	0 replies
469/699	batman-adv: tt: prevent TVLV OOB check overflow`net/batman-adv/translation-table.c`	+2 -1	0 replies
470/699	mfd: tps6586x: Fix OF node refcount`drivers/mfd/tps6586x.c`	+1 -1	0 replies
471/699	nvdimm/btt: Free arenas on btt_init() error paths`drivers/nvdimm/btt.c`	+7 -4	0 replies
472/699	nvdimm/btt: Free arena sub-allocations on discover_arenas() error path`drivers/nvdimm/btt.c`	+3 -0	0 replies
473/699	lockd: Plug nlm_file leak when nlm_do_fopen() fails`fs/lockd/svcsubs.c`	+1 -1	0 replies
474/699	lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure`fs/lockd/svcsubs.c`	+2 -0	0 replies
475/699	MIPS: ip22-gio: fix gio device memory leak`arch/mips/sgi-ip22/ip22-gio.c`	+2 -0	0 replies
476/699	MIPS: ip22-gio: fix kfree() of static object`arch/mips/sgi-ip22/ip22-gio.c`	+0 -1	0 replies
477/699	MIPS: ip22-gio: fix device reference leak in probe`arch/mips/sgi-ip22/ip22-gio.c`	+0 -4	0 replies
478/699	MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()`arch/mips/dec/prom/init.c` `arch/mips/include/asm/dec/prom.h`	+18 -3	0 replies
479/699	power: supply: charger-manager: fix refcount leak in is_full_charged()`drivers/power/supply/charger-manager.c`	+4 -2	0 replies
480/699	proc: only bump parent nlink when registering directories`fs/proc/generic.c`	+4 -5	0 replies
481/699	mtd: slram: remove failed entries from the device list`drivers/mtd/devices/slram.c`	+16 -6	0 replies
482/699	scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()`drivers/scsi/smartpqi/smartpqi_init.c`	+1 -1	0 replies
483/699	ocfs2: use kzalloc for quota recovery bitmap allocation`fs/ocfs2/quota_local.c`	+1 -1	0 replies
484/699	mtd: rawnand: fix condition in nand_select_target()`drivers/mtd/nand/raw/nand_base.c`	+1 -1	0 replies
485/699	ocfs2: avoid moving extents to occupied clusters`fs/ocfs2/move_extents.c`	+3 -1	0 replies
486/699	ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits`fs/ocfs2/journal.c`	+5 -1	0 replies
487/699	ocfs2: reject dinodes with non-canonical i_mode type`fs/ocfs2/inode.c`	+33 -2	0 replies
488/699	ocfs2: reject dinodes whose i_rdev disagrees with the file type`fs/ocfs2/inode.c`	+55 -0	0 replies
489/699	ocfs2: reject non-inline dinodes with i_size and zero i_clusters`fs/ocfs2/inode.c`	+60 -0	0 replies
490/699	mtd: maps: vmu-flash: fix NULL pointer dereference in initialization`drivers/mtd/maps/vmu-flash.c`	+1 -0	0 replies
491/699	irqchip/crossbar: Use correct index in crossbar_domain_free()`drivers/irqchip/irq-crossbar.c`	+7 -2	0 replies
492/699	i2c: mediatek: fix WRRD for SoCs without auto_restart option`drivers/i2c/busses/i2c-mt65xx.c`	+1 -1	0 replies
493/699	i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()`drivers/i2c/busses/i2c-mlxbf.c`	+3 -1	0 replies
494/699	xen/gntdev: fix error handling in ioctl`drivers/xen/gntdev.c`	+6 -2	0 replies
495/699	xfrm: use compat translator only for u64 alignment mismatch`net/xfrm/xfrm_state.c` `net/xfrm/xfrm_user.c`	+2 -2	0 replies
496/699	xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink`net/xfrm/xfrm_interface_core.c`	+3 -0	0 replies
497/699	tpm: fix event_size output in tpm1_binary_bios_measurements_show`drivers/char/tpm/eventlog/tpm1.c`	+2 -2	0 replies
498/699	tpm: Make the TPM character devices non-seekable`drivers/char/tpm/tpm-dev.c` `drivers/char/tpm/tpmrm-dev.c`	+2 -2	0 replies
499/699	time: Fix off-by-one in compat settimeofday() usec validation`kernel/time/time.c`	+1 -1	0 replies
500/699	spi: uniphier: Fix completion initialization order before devm_request_irq()`drivers/spi/spi-uniphier.c`	+2 -2	0 replies
501/699	sctp: validate STALE_COOKIE cause length before reading staleness`net/sctp/sm_statefuns.c`	+14 -9	0 replies
502/699	nvmet-rdma: handle inline data with a nonzero offset`drivers/nvme/target/rdma.c`	+10 -8	0 replies
503/699	can: isotp: use unconditional synchronize_rcu() in isotp_release()`net/can/isotp.c`	+8 -1	0 replies
504/699	can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure`net/can/bcm.c`	+51 ~~-14~~	0 replies
505/699	can: bcm: add missing rcu list annotations and operations`net/can/bcm.c`	+16 -9	0 replies
506/699	dm thin metadata: fix superblock refcount leak on snapshot shadow failure`drivers/md/dm-thin-metadata.c`	+3 -1	0 replies
507/699	dm thin metadata: fix metadata snapshot consistency on commit failure`drivers/md/dm-thin-metadata.c`	+18 ~~-45~~	0 replies
508/699	dm era: fix out-of-bounds memory access for non-zero start sector`drivers/md/dm-era-target.c`	+3 -1	0 replies
509/699	dm-bufio: fix wrong count calculation in dm_bufio_issue_discard`drivers/md/dm-bufio.c`	+3 -1	0 replies
510/699	dm-log: fix a bitset_size overflow on 32bit machines`drivers/md/dm-log.c`	+3 -0	0 replies
511/699	dm-stats: fix dm_jiffies_to_msec64`drivers/md/dm-stats.c`	+2 -2	0 replies
512/699	dm-stats: fix merge accounting`drivers/md/dm-stats.c`	+2 -4	0 replies
513/699	dm_early_create: fix freeing used table on dm_resume failure`drivers/md/dm-ioctl.c`	+1 -1	0 replies
514/699	dm-verity: increase sprintf buffer size`drivers/md/dm-verity-target.c`	+1 -1	0 replies
515/699	scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path`drivers/scsi/hpsa.c`	+4 -0	0 replies
516/699	scsi: sg: Report request-table problems when any status is set`drivers/scsi/sg.c`	+3 -4	0 replies
517/699	scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE`drivers/target/target_core_pr.c`	+5 -3	0 replies
518/699	Input: ims-pcu - fix use-after-free and double-free in disconnect`drivers/input/misc/ims-pcu.c`	+1 -2	0 replies
519/699	Input: ims-pcu - release data interface on disconnect`drivers/input/misc/ims-pcu.c`	+1 -0	0 replies
520/699	Input: ims-pcu - validate control endpoint type`drivers/input/misc/ims-pcu.c`	+6 -0	0 replies
521/699	Input: ims-pcu - add response length checks`drivers/input/misc/ims-pcu.c`	+81 -6	0 replies
522/699	Input: ims-pcu - fix DMA mapping violation in line setup`drivers/input/misc/ims-pcu.c`	+7 -2	0 replies
523/699	Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging`drivers/input/misc/ims-pcu.c`	+1 -1	0 replies
524/699	Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing`drivers/input/misc/ims-pcu.c`	+3 -2	0 replies
525/699	Input: ims-pcu - fix type confusion in CDC union descriptor parsing`drivers/input/misc/ims-pcu.c`	+1 -1	0 replies
526/699	cpu: hotplug: Preserve per instance callback errors`kernel/cpu.c`	+4 -4	0 replies
527/699	gpios: palmas: add .get_direction() op`drivers/gpio/gpio-palmas.c`	+19 -0	0 replies
528/699	net: sit: require CAP_NET_ADMIN in the device netns for changelink`net/ipv6/sit.c`	+3 -0	0 replies
529/699	net: ena: clean up XDP TX queues when regular TX setup fails`drivers/net/ethernet/amazon/ena/ena_netdev.c`	+21 -2	0 replies
530/699	net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink`net/ipv6/ip6_vti.c`	+3 -0	0 replies
531/699	net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink`net/ipv4/ip_vti.c`	+3 -0	0 replies
532/699	net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink`net/ipv6/ip6_gre.c`	+6 -0	0 replies
533/699	ieee802154: admin-gate legacy LLSEC dump operations`net/ieee802154/ieee802154.h` `net/ieee802154/netlink.c`	+16 -8	0 replies
534/699	ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation`net/ieee802154/ieee802154.h` `net/ieee802154/netlink.c`	+19 ~~-10~~	0 replies
535/699	ieee802154: ca8210: fix cas_ctl leak on spi_async failure`drivers/net/ieee802154/ca8210.c`	+2 -1	0 replies
536/699	ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit`drivers/net/ieee802154/ca8210.c`	+4 -2	0 replies
537/699	nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path`drivers/nvme/target/tcp.c`	+3 -1	0 replies
538/699	batman-adv: retrieve ethhdr after potential skb realloc on RX`net/batman-adv/soft-interface.c`	+1 -0	0 replies
539/699	batman-adv: ensure minimal ethernet header on TX`net/batman-adv/soft-interface.c`	+3 -0	0 replies
540/699	rtmutex: Use waiter::task instead of current in remove_waiter()`kernel/locking/rtmutex.c`	+7 -4	0 replies
541/699	locking/rtmutex: Skip remove_waiter() when waiter is not enqueued`kernel/locking/rtmutex.c`	+4 -1	0 replies
542/699	bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()`drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c`	+1 -2	0 replies
543/699	hwmon: (w83627hf) remove VID sysfs files on error and remove`drivers/hwmon/w83627hf.c`	+4 -0	0 replies
544/699	hwmon: (w83793) remove vrm sysfs file on probe failure`drivers/hwmon/w83793.c`	+1 -0	0 replies
545/699	net: liquidio: fix BAR resource leak on PF number failure`drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c`	+10 -8	0 replies
546/699	fsl/fman: Free init resources on KeyGen failure in fman_init()`drivers/net/ethernet/freescale/fman/fman.c`	+3 -1	0 replies
547/699	net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked`net/sched/sch_multiq.c`	+1 -1	0 replies
548/699	tracing/probes: Fix double addition of offset for @+FOFFSET`kernel/trace/trace_probe.c`	+1 -0	0 replies
549/699	orangefs: keep the readdir entry size 64-bit in fill_from_part()`fs/orangefs/dir.c`	+4 -3	0 replies
550/699	ata: pata_pxa: Fix DMA channel leak on probe error`drivers/ata/pata_pxa.c`	+1 -0	0 replies
551/699	hwmon: (asus_atk0110) Check package count before accessing element`drivers/hwmon/asus_atk0110.c`	+3 -0	0 replies
552/699	s390/monwriter: Reject buffer reuse with different data length`drivers/s390/char/monwriter.c`	+3 -0	0 replies
553/699	mac802154: remove interfaces with RCU list deletion`net/mac802154/iface.c`	+1 -1	0 replies
554/699	llc: fix SAP refcount leak in llc_ui_autobind()`net/llc/af_llc.c`	+1 -0	0 replies
555/699	ipvs: use parsed transport offset in SCTP state lookup`net/netfilter/ipvs/ip_vs_proto_sctp.c`	+5 ~~-10~~	0 replies
556/699	ipvs: reset full ip_vs_seq structs in ip_vs_conn_new`net/netfilter/ipvs/ip_vs_conn.c`	+2 -2	0 replies
557/699	drbd: reject data replies with an out-of-range payload size`drivers/block/drbd/drbd_receiver.c`	+5 -0	0 replies
558/699	cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed`kernel/cgroup/cpuset.c`	+6 -1	0 replies
559/699	wifi: rt2x00: avoid full teardown before work setup in probe`drivers/net/wireless/ralink/rt2x00/rt2x00dev.c`	+10 -2	0 replies
560/699	wifi: mac80211: fix memory leak in ieee80211_register_hw()`net/mac80211/main.c`	+2 -1	0 replies
561/699	regulator: ltc3676: Fix incorrect IRQSTAT bit offsets`drivers/regulator/ltc3676.c`	+5 -5	0 replies
562/699	Bluetooth: btrtl: validate firmware patch bounds`drivers/bluetooth/btrtl.c`	+3 -2	0 replies
563/699	llc: fix SAP refcount leak when creating incoming sockets`net/llc/llc_conn.c`	+0 -1	0 replies
564/699	macsec: fix promiscuity refcount leak in macsec_dev_open()`drivers/net/macsec.c`	+5 -2	0 replies
565/699	memstick: ms_block: reject a card that reports too many blocks`drivers/memstick/core/ms_block.c`	+4 -0	0 replies
566/699	ipvs: fix more places with wrong ipv6 transport offsets`net/netfilter/ipvs/ip_vs_app.c` `net/netfilter/ipvs/ip_vs_core.c`	+5 -8	0 replies
567/699	reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ`drivers/reset/reset-imx7.c`	+6 -0	0 replies
568/699	reset: sunxi: fix memory region leak on ioremap failure`drivers/reset/reset-sunxi.c`	+3 -1	0 replies
569/699	powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()`arch/powerpc/platforms/cell/spufs/file.c`	+4 -2	0 replies
570/699	wifi: mac80211: free ack status frame on TX header build failure`net/mac80211/tx.c`	+16 -1	0 replies
571/699	wifi: mwifiex: fix permanently busy scans after multiple roam iterations`drivers/net/wireless/marvell/mwifiex/join.c`	+0 -1	0 replies
572/699	mtd: onenand: samsung: report DMA completion timeouts`drivers/mtd/nand/onenand/onenand_samsung.c`	+6 -1	0 replies
573/699	mmc: vub300: defer reset until cmd_mutex is unlocked`drivers/mmc/host/vub300.c`	+17 -9	0 replies
574/699	mtd: rawnand: fsl_ifc: return errors for failed page reads`drivers/mtd/nand/raw/fsl_ifc_nand.c`	+8 -1	0 replies
575/699	mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout`drivers/mtd/nand/raw/lpc32xx_mlc.c`	+10 -2	0 replies
576/699	mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout`drivers/mtd/nand/raw/lpc32xx_slc.c`	+10 -2	0 replies
577/699	crypto: amcc - fix incorrect kernel-doc comment syntax in files`drivers/crypto/amcc/crypto4xx_alg.c` `drivers/crypto/amcc/crypto4xx_core.c` `drivers/crypto/amcc/crypto4xx_core.h` +3 more	+31 ~~-31~~	0 replies
578/699	crypto: crypto4xx - Remove ahash-related code`drivers/crypto/amcc/crypto4xx_alg.c` `drivers/crypto/amcc/crypto4xx_core.c` `drivers/crypto/amcc/crypto4xx_core.h`	+1 ~~-155~~	0 replies
579/699	crypto: crypto4xx - Remove insecure and unused rng_alg`drivers/crypto/amcc/crypto4xx_core.c` `drivers/crypto/amcc/crypto4xx_core.h` `drivers/crypto/amcc/crypto4xx_reg_def.h`	+0 ~~-102~~	0 replies
580/699	batman-adv: clean untagged VLAN on netdev registration failure`net/batman-adv/main.c` `net/batman-adv/soft-interface.c` `net/batman-adv/soft-interface.h` +1 more	+31 -2	0 replies
581/699	ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup`drivers/acpi/nfit/core.c`	+11 -4	0 replies
582/699	iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ`drivers/iio/imu/adis_trigger.c`	+1 -1	0 replies
583/699	iio: hid-sensor-rotation: Fix stale or zero output when reading raw values`drivers/iio/orientation/hid-sensor-rotation.c`	+38 -2	0 replies
584/699	iio: imu: inv_icm42600: make timestamp module chip independent`drivers/iio/imu/inv_icm42600/inv_icm42600_core.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_timestamp.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_timestamp.h`	+12 ~~-19~~	0 replies
585/699	iio: move inv_icm42600 timestamp module in common`drivers/iio/common/Kconfig` `drivers/iio/common/Makefile` `drivers/iio/common/inv_sensors/Kconfig` +11 more	+299 ~~-270~~	0 replies
586/699	iio: make invensense timestamp module generic`drivers/iio/common/inv_sensors/Makefile` `drivers/iio/common/inv_sensors/inv_icm42600_timestamp.c` `drivers/iio/common/inv_sensors/inv_sensors_timestamp.c` +6 more	+349 ~~-318~~	0 replies
587/699	iio: imu: inv_mpu6050: use the common inv_sensors timestamp module`drivers/iio/imu/inv_mpu6050/Kconfig` `drivers/iio/imu/inv_mpu6050/inv_mpu_core.c` `drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h` +2 more	+45 ~~-93~~	0 replies
588/699	iio: invensense: remove redundant initialization of variable period`drivers/iio/common/inv_sensors/inv_sensors_timestamp.c`	+1 -1	0 replies
589/699	iio: invensense: fix timestamp glitches when switching frequency`drivers/iio/common/inv_sensors/inv_sensors_timestamp.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c` `drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c` +1 more	+23 ~~-32~~	0 replies
590/699	iio: imu: inv_icm42600: stabilized timestamp in interrupt`drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h` `drivers/iio/imu/inv_icm42600/inv_icm42600_core.c`	+20 -2	0 replies
591/699	iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading`drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h`	+6 -4	0 replies
592/699	bitops: make BYTES_TO_BITS() treewide-available`include/linux/bitops.h` `kernel/trace/trace_probe.c` `tools/include/linux/bitops.h` +1 more	+5 -5	0 replies
593/699	iio: common: st_sensors: honour channel endianness in read_axis_data`drivers/iio/common/st_sensors/st_sensors_core.c`	+17 -6	0 replies
594/699	ALSA: aoa: check snd_ctl_new1() return value`sound/aoa/fabrics/layout.c`	+6 -0	0 replies
595/699	Bluetooth: btintel: Fix offset calculation boot address parameter`drivers/bluetooth/btintel.c`	+2 -1	0 replies
596/699	Bluetooth: btintel: Check firmware version before download`drivers/bluetooth/btintel.c` `drivers/bluetooth/btintel.h` `drivers/bluetooth/btusb.c` +1 more	+101 ~~-26~~	0 replies
597/699	Bluetooth: btusb: fix use-after-free on marvell probe failure`drivers/bluetooth/btusb.c`	+4 -2	0 replies
598/699	Bluetooth: btusb: fix wakeup source leak on probe failure`drivers/bluetooth/btusb.c`	+15 -3	0 replies
599/699	vfio/pci: Release the VGA arbiter client on register_device() failure`drivers/vfio/pci/vfio_pci.c`	+1 -0	0 replies
600/699	binder: fix UAF in binder_free_transaction()`drivers/android/binder.c`	+13 -0	0 replies
601/699	PCI: altera: Fix resource leaks on probe failure`drivers/pci/controller/pcie-altera.c`	+26 -2	0 replies
602/699	media: atomisp: replace boolean comparison of values with bool variables`drivers/staging/media/atomisp/pci/atomisp_compat_css20.c` `drivers/staging/media/atomisp/pci/runtime/isys/src/virtual_isys.c` `drivers/staging/media/atomisp/pci/sh_css.c`	+13 ~~-13~~	0 replies
603/699	media: staging: media: atomisp: Fix sh_css.c brace coding style issues`drivers/staging/media/atomisp/pci/sh_css.c`	+90 ~~-134~~	0 replies
604/699	media: staging: media: atomisp: Fix the rest of sh_css.c brace issues`drivers/staging/media/atomisp/pci/sh_css.c`	+498 ~~-636~~	0 replies
605/699	media: staging: media: atomisp: Replace if else clause with a ternary`drivers/staging/media/atomisp/pci/sh_css.c`	+2 -5	0 replies
606/699	media: staging: media: atomisp: Fix alignment and line length issues`drivers/staging/media/atomisp/pci/sh_css.c`	+333 ~~-286~~	0 replies
607/699	staging: media: atomisp: reduce load_primary_binaries() stack usage`drivers/staging/media/atomisp/pci/sh_css.c`	+3 -3	0 replies
608/699	cifs: Create a new shared file holding smb2 pdu definitions`fs/cifs/cifsfs.c` `fs/cifs/cifsglob.h` `fs/cifs/connect.c` +9 more	+491 ~~-466~~	0 replies
609/699	cifs: remove check of list iterator against head past the loop body`fs/cifs/smb2misc.c`	+6 -7	0 replies
610/699	smb2: small refactor in smb2_check_message()`fs/cifs/connect.c` `fs/cifs/smb2misc.c`	+34 ~~-26~~	0 replies
611/699	cifs: remove unused server parameter from calc_smb_size()`fs/cifs/cifs_debug.c` `fs/cifs/cifsglob.h` `fs/cifs/cifsproto.h` +6 more	+11 ~~-13~~	0 replies
612/699	smb: client: restrict implied bcc[0] exemption to responses without data area`fs/cifs/smb2misc.c`	+26 -6	0 replies
613/699	PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling`drivers/pci/controller/dwc/pci-imx6.c`	+2 -3	0 replies
614/699	staging: rtl8723bs: split too long line`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+2 -1	0 replies
615/699	staging: rtl8723bs: remove commented out RT_ASSERT occurrences`drivers/staging/rtl8723bs/core/rtw_recv.c` `drivers/staging/rtl8723bs/hal/rtl8723b_hal_init.c` `drivers/staging/rtl8723bs/hal/sdio_halinit.c`	+0 -8	0 replies
616/699	staging: rtl8723bs: remove all 5Ghz network types`drivers/staging/rtl8723bs/core/rtw_ap.c` `drivers/staging/rtl8723bs/core/rtw_ieee80211.c` `drivers/staging/rtl8723bs/core/rtw_mlme.c` +10 more	+14 ~~-168~~	0 replies
617/699	staging: rtl8723bs: remove 5Ghz code related to channel plan definition`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c` `drivers/staging/rtl8723bs/hal/hal_com_phycfg.c` `drivers/staging/rtl8723bs/include/rtw_mlme_ext.h` +2 more	+94 ~~-159~~	0 replies
618/699	staging: rtl8723bs: remove 5Ghz code blocks`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c` `drivers/staging/rtl8723bs/os_dep/ioctl_linux.c`	+5 ~~-22~~	0 replies
619/699	staging: rtl8723bs: remove commented out condition`drivers/staging/rtl8723bs/os_dep/ioctl_linux.c`	+1 -1	0 replies
620/699	staging: rtl8723bs: clean up comparsions to NULL`drivers/staging/rtl8723bs/core/rtw_ap.c` `drivers/staging/rtl8723bs/core/rtw_cmd.c` `drivers/staging/rtl8723bs/core/rtw_ioctl_set.c` +6 more	+117 ~~-117~~	0 replies
621/699	staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+7 -1	0 replies
622/699	staging: rtl8723bs: Fix space issues`drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c`	+40 ~~-44~~	0 replies
623/699	staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()`drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c`	+8 -0	0 replies
624/699	staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+8 -0	0 replies
625/699	PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()`drivers/pci/controller/dwc/pcie-designware-host.c` `drivers/pci/controller/mobiveil/pcie-mobiveil-host.c` `drivers/pci/controller/pcie-altera-msi.c` +3 more	+8 ~~-11~~	0 replies
626/699	PCI: mediatek: Convert bool to single quirks entry and bitmap`drivers/pci/controller/pcie-mediatek.c`	+16 -9	0 replies
627/699	PCI: mediatek: Fix IRQ domain leak when port fails to enable`drivers/pci/controller/pcie-mediatek.c`	+42 ~~-25~~	0 replies
628/699	staging: rtl8723bs: remove DBG_871X log argument`drivers/staging/rtl8723bs/core/rtw_recv.c`	+1 -1	0 replies
629/699	crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()`drivers/crypto/qat/qat_common/adf_accel_devices.h` `drivers/crypto/qat/qat_common/adf_common_drv.h` `drivers/crypto/qat/qat_common/adf_isr.c` +2 more	+76 -8	0 replies
630/699	PCI: Prevent resource tree corruption when BAR resize fails`drivers/pci/setup-bus.c`	+5 -0	0 replies
631/699	PCI: Free saved list without holding pci_bus_sem`drivers/pci/setup-bus.c`	+1 -1	0 replies
632/699	PCI: Fix restoring BARs on BAR resize rollback path`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c` `drivers/pci/pci.h` `drivers/pci/setup-bus.c` +2 more	+79 ~~-48~~	0 replies
633/699	PCI: Add kerneldoc for pci_resize_resource()`drivers/pci/setup-res.c`	+20 -0	0 replies
634/699	PCI: Move Resizable BAR code to rebar.c`Documentation/driver-api/pci/pci.rst` `drivers/pci/Makefile` `drivers/pci/pci.c` +3 more	+216 ~~-200~~	0 replies
635/699	PCI: Skip Resizable BAR restore on read error`drivers/pci/rebar.c`	+6 -0	0 replies
636/699	coresight: etb10: restore atomic_t for shared reading state`drivers/hwtracing/coresight/coresight-etb10.c`	+3 -3	0 replies
637/699	netfilter: ebtables: Use vmalloc_array() to improve code`net/bridge/netfilter/ebtables.c`	+7 -7	0 replies
638/699	netfilter: ebtables: zero chainstack array`net/bridge/netfilter/ebtables.c`	+1 -2	0 replies
639/699	Bluetooth: L2CAP: Fix not tracking outstanding TX ident`include/net/bluetooth/l2cap.h` `net/bluetooth/l2cap_core.c`	+40 ~~-16~~	0 replies
640/699	Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()`net/bluetooth/l2cap_core.c`	+3 -6	0 replies
641/699	Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock`net/bluetooth/l2cap_core.c`	+2 -8	0 replies
642/699	smb: client: Fix next buffer leak in receive_encrypted_standard()`fs/cifs/smb2ops.c`	+6 -4	0 replies
643/699	smb: client: mask server-provided mode to 07777 in modefromsid`fs/cifs/cifsacl.c`	+1 -1	0 replies
644/699	smb: client: use unaligned reads in parse_posix_ctxt()`fs/cifs/smb2pdu.c`	+3 -3	0 replies
645/699	smb: client: harden POSIX SID length parsing`fs/cifs/smb2pdu.c`	+1 -1	0 replies
646/699	writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()`fs/fs-writeback.c`	+18 -2	0 replies
647/699	X.509: Fix validation of ASN.1 certificate header`certs/common.c`	+1 -1	0 replies
648/699	proc: use generic setattr() for /proc/$PID/net`fs/proc/proc_net.c`	+1 -0	0 replies
649/699	proc: rename proc_setattr to proc_nochmod_setattr`fs/proc/base.c` `fs/proc/fd.c` `fs/proc/internal.h` +2 more	+17 ~~-17~~	0 replies
650/699	proc: protect ptrace_may_access() with exec_update_lock (FD links)`fs/proc/base.c` `fs/proc/fd.c` `fs/proc/internal.h`	+58 ~~-88~~	0 replies
651/699	HID: add haptics page defines`include/linux/hid.h`	+29 -0	0 replies
652/699	HID: multitouch: fix out-of-bounds bit access on mt_io_flags`drivers/hid/hid-multitouch.c`	+20 ~~-12~~	0 replies
653/699	cpufreq: intel_pstate: Sync policy->cur during CPU offline`drivers/cpufreq/intel_pstate.c`	+4 -2	0 replies
654/699	proc: protect ptrace_may_access() with exec_update_lock (part 1)`fs/proc/array.c` `fs/proc/base.c` `fs/proc/namespaces.c`	+42 ~~-17~~	0 replies
655/699	HID: appleir: fix UAF on pending key_up_timer in remove()`drivers/hid/hid-appleir.c`	+35 ~~-10~~	0 replies
656/699	serial: 8250_mid: Remove 8250_pci usage`drivers/tty/serial/8250/8250_mid.c`	+7 ~~-11~~	0 replies
657/699	serial: 8250_mid: Disable DMA for selected platforms`drivers/tty/serial/8250/8250_mid.c`	+11 -2	0 replies
658/699	xfs: reflect sb features in xfs_mount`fs/xfs/libxfs/xfs_format.h` `fs/xfs/libxfs/xfs_sb.c` `fs/xfs/libxfs/xfs_sb.h` +5 more	+147 -2	0 replies
659/699	xfs: fix unreachable BIGTIME check in dquot flush validation`fs/xfs/xfs_dquot.c`	+8 -8	0 replies
660/699	xfs: use null daddr for unset first bad log block`fs/xfs/xfs_log_recover.c`	+3 -2	0 replies
661/699	hfs/hfsplus: prevent getting negative values of offset/length`fs/hfs/bfind.c` `fs/hfs/bnode.c` `fs/hfs/brec.c` +9 more	+167 ~~-151~~	0 replies
662/699	hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length`fs/hfs/bnode.c` `fs/hfsplus/hfsplus_fs.h`	+2 -2	0 replies
663/699	usb: gadget: function: Simplify diagnostic messaging in printer`drivers/usb/gadget/function/f_printer.c`	+1 -8	0 replies
664/699	usb: gadget: f_printer: take kref only for successful open`drivers/usb/gadget/function/f_printer.c`	+1 -2	0 replies
665/699	usb: free iso schedules on failed submit`drivers/usb/host/ehci-sched.c` `drivers/usb/host/fotg210-hcd.c`	+13 -4	0 replies
666/699	usb: iowarrior: remove inherent race with minor number`drivers/usb/misc/iowarrior.c`	+3 ~~-14~~	0 replies
667/699	USB: serial: digi_acceleport: fix write buffer corruption`drivers/usb/serial/digi_acceleport.c`	+10 -5	0 replies
668/699	drm/i2c/sil164: Drop no-op remove function`drivers/gpu/drm/i2c/sil164_drv.c`	+0 -7	0 replies
669/699	leds: lm3697: Remove duplicated error reporting in .remove()`drivers/leds/leds-lm3697.c`	+1 -3	0 replies
670/699	leds: lm3601x: Improve error reporting for problems during .remove()`drivers/leds/leds-lm3601x.c`	+8 -3	0 replies
671/699	gpio: pca953x: Make platform teardown callback return void`arch/arm/mach-davinci/board-da850-evm.c` `drivers/gpio/gpio-pca953x.c` `include/linux/platform_data/pca953x.h`	+8 ~~-17~~	0 replies
672/699	usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove`drivers/usb/typec/ucsi/ucsi_ccg.c`	+1 -1	0 replies
673/699	usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()`drivers/usb/atm/ueagle-atm.c`	+31 -5	0 replies
674/699	usb: typec: tcpm: Fix VDM type for Enter Mode commands`drivers/usb/typec/tcpm/tcpm.c`	+1 -1	0 replies
675/699	usb: gadget: f_fs: initialize reset_work at allocation time`drivers/usb/gadget/function/f_fs.c`	+2 -1	0 replies
676/699	crypto: atmel-sha204a - Mark OF related data as maybe unused`drivers/crypto/atmel-sha204a.c`	+4 -2	0 replies
677/699	crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0`drivers/crypto/atmel-ecc.c`	+1 -1	0 replies
678/699	crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A`drivers/crypto/atmel-sha204a.c`	+12 -7	0 replies
679/699	usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile`drivers/usb/gadget/function/f_fs.c`	+1 -1	0 replies
680/699	btrfs: do not trim a device which is not writeable`fs/btrfs/extent-tree.c`	+8 -4	0 replies
681/699	crypto: qat - fix restarting state leak on allocation failure`drivers/crypto/qat/qat_common/adf_aer.c`	+4 -3	0 replies
682/699	crypto: qat - validate RSA CRT component lengths`drivers/crypto/qat/qat_common/qat_asym_algs.c`	+5 -5	0 replies
683/699	audit: add audit_log_nf_skb helper function`include/linux/audit.h` `kernel/audit.c` `net/netfilter/nft_log.c` +1 more	+74 ~~-114~~	0 replies
684/699	audit: fix potential integer overflow in audit_log_n_hex()`kernel/audit.c`	+9 -2	0 replies
685/699	posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()`kernel/time/posix-cpu-timers.c`	+1 -1	0 replies
686/699	KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers`arch/arm64/kvm/vgic/vgic-its.c` `virt/kvm/kvm_main.c`	+16 ~~-15~~	0 replies
687/699	Bluetooth: L2CAP: Fix regressions caused by reusing ident`include/net/bluetooth/l2cap.h` `net/bluetooth/l2cap_core.c`	+27 -3	0 replies
688/699	iio: imu: inv_mpu6050: fix frequency setting when chip is off`drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c`	+5 -0	0 replies
689/699	iio: invensense: fix odr switching to same value`drivers/iio/common/inv_sensors/inv_sensors_timestamp.c`	+5 -1	0 replies
690/699	iio: imu: inv_icm42600: fix timestamp clock period by using lower value`drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c` `drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c`	+4 -4	0 replies
691/699	mld: change lockdep annotation for ip6_sf_socklist and ipv6_mc_socklist`net/ipv6/mcast.c` `net/tipc/udp_media.c`	+25 ~~-25~~	0 replies
692/699	ipv6: mcast: Delay put pmc->idev in mld_del_delrec()`net/ipv6/mcast.c`	+1 -1	0 replies
693/699	net: ethernet: rmnet: Always subtract MAP header`drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c`	+3 -2	0 replies
694/699	ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()`include/net/addrconf.h` `net/ipv6/addrconf.c` `net/ipv6/mcast.c`	+3 -5	0 replies
695/699	ipv6: fix lockdep splat in in6_dump_addrs()`net/ipv6/addrconf.c`	+2 -2	0 replies
696/699	net: mld: fix reference count leak in mld_{query \| report}_work()`net/ipv6/mcast.c`	+8 -6	0 replies
697/699	ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work`net/ipv6/mcast.c`	+4 -0	0 replies
698/699	ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()`net/ipv6/mcast.c`	+0 -1	0 replies
699/699	mld: fix suspicious RCU usage in __ipv6_dev_mc_dec()`net/ipv6/addrconf.c`	+2 -0	0 replies

Reviews trailers per patch

297 of 699 patches have a Reviewed-by or Acked-by.

Patch	Shivam Kumar	Jeff Layton	Woody Suwalski	Brett A C Sheffield	Abel Vesa	Kuniyuki Iwashima	Chao Yu	Yunji Kang	Yeongjin Gil	Sungjong Seo	Thomas Zimmermann	Michal Kosiorek	Ian Rogers	Jeffrey Hugo	Manivannan Sadhasivam	Lorenzo Stoakes	Lorenzo Bianconi	Andy Shevchenko	Joshua Crofts	Paul Menzel	Alice Ryhl	Subhransu S. Prusty	Jozsef Kadlecsik	Shuangpeng Bai	Johan Hovold	Alexander Aring	Tung Nguyen	Vladimir Zapolskiy	Sabrina Dubroca	Ricardo Robaina	Sebastian Andrzej Siewior	Ido Schimmel	Eric Dumazet	Nuno Sá	Frederic Weisbecker	Dmitry Torokhov	Hans de Goede	Jiri Kosina	[email protected]	Viacheslav Dubeyko	[email protected]	Andrew Lunn	Alan Stern	Alex Henrie	Greg Kroah-Hartman	Shuah Khan	Igor Kotrasinski	RD Babiera	Heikki Krogerus	Jameson Thies	Andrei Kuchynski	Benjamin Marzinski	Philippe De Muyter	Willem de Bruijn	Jason Xing	Zhongqiu Han	Benson Leung	Masami Hiramatsu (Google)	Vivek Kasireddy	Alain Volmat	Pierre-Yves MORDRET	Florian Fuchs	Lukas Wunner	SeongJae Park	Demi Marie Obenour	Konrad Dybcio	Moteen Shah	Maxime Ripard	Rafael J. Wysocki (Intel)	Saravana Kannan	Nathan Chancellor	Vasant Hegde	Wei Wang	Florian Fainelli	Geert Uytterhoeven	Brian Masney	Toke Høiland-Jørgensen	Tom Lendacky	Yishai Hadas	Carlos Bilbao (Lambda)	Bart Van Assche	Danilo Krummrich	Nicolas Dufresne	Frank Li	Chen-Yu Tsai	Jernej Skrabec	Michael Walle	Mukesh Kumar Chaurasiya (IBM)	Hannes Reinecke	John Garry	Christoph Hellwig	Jakub Kicinski	Mikko Perttunen	Guenter Roeck	Baolin Wang	Joseph Qi	Heming Zhao	Val Packett	Yongxing Mou	Dikshita Agarwal	Baokun Li	Jan Kara	Paul Kocialkowski	Andre Przywara	Thorsten Blum	Vitaly Chikunov	Loic Poulain	Boris Burkov	Qu Wenruo	Jack Wang	Eugenio Pérez	Michael S. Tsirkin	Jay Vosburgh	David Ahern	Anirudh Gupta	Jamal Hadi Salim	Michal Simek	Andrew Morton	Leon Hwang	Yonghong Song	Quentin Monnet	Jarkko Sakkinen	Dan Carpenter	Leo Yan	Ilpo Järvinen	Namhyung Kim	Dmitry Baryshkov	Xiang Mei	Xinyu Ma	Jiayuan Chen	Emil Tsalapatis	Krzysztof Wilczyński	Marek Vasut	Shrikanth Hegde	Caleb James DeLisle	Georgia Garcia	Tyler Hicks	Ryan Lee	Simon Horman	Jiri Pirko	Miquel Raynal	Venkat Rao Bagalkote	Meagan Lloyd	Luis Gerhorst	Jani Nikula	Fernando Fernandez Mancera	ChenXiaoSong	Nobuhiro Iwamatsu	Andrea Mayer	Potnuri Bharat Teja	Magnus Lindholm	Shivaprasad G Bhat	Niklas Cassel	Linus Walleij	Jamie Bainbridge	Bjorn Andersson	Alexander Duyck	Subash Abhinov Kasiviswanathan	Nicolas Dichtel	Julian Anastasov	Su Yue	Ming-Hung Tsai	Tariq Toukan	Ekansh Gupta	Nicolai Buchwitz	Alison Schofield	Don Brace	Hari Prasath Gujulan Elango	AngeloGioacchino Del Regno	Juergen Gross	David Disseldorp	Arthur Kiyanovski	Arnd Bergmann	Xin Long	Christian Borntraeger	Christoph Böhmwalder	Waiman Long	Zilin Guan	Philipp Zabel	Guoniu Zhou	Jeff Chen	Randy Dunlap	Christian Lamparter	Larysa Zaremba	Dave Jiang	Pavan Chebbi	Breno Leitao	Victor Nogueira	Jean-Baptiste Maneyrol	Kevin Tian	Namjae Jeon	Paulo Alcantara (SUSE)	Luka Gejak	Ahsan Atta	Alex Bennée	Przemek Kitszel	Yury Norov	Tedd Ho-Jeong An	Tejun Heo	Ignat Korchagin	Alistair Francis	Zhangjin Wu	Christian König	Darrick J. Wong	Allison Henderson	[email protected]	[email protected]	Pavel Machek	Bartosz Golaszewski	James Clark	Andrey Tsygunka	Stanislaw Gruszka	Peter Chen	Michał Nazarewicz	Hangbin Liu	Taehee Yoo	Filipe Manana	Giovanni Cabiddu	Laurent M Coquerel	Florian Westphal	Richard Guy Briggs	Oliver Upton	Christian Eggers	Ard Biesheuvel	Dominique Martinet
Series			T-b	T-b																																																																																																																																																																																																																													T-b
1/699	T-b
2/699		R-b
3/699
4/699																R-b
5/699					R-b
6/699		R-b
7/699		R-b
8/699
9/699
10/699													R-b
11/699														R-b	R-b
12/699
13/699
14/699
15/699
16/699						R-b
17/699
18/699							R-b
19/699							R-b	R-b	R-b	R-b
20/699							R-b
21/699							R-b
22/699							R-b
23/699							R-b
24/699
25/699											R-b
26/699
27/699
28/699
29/699
30/699
31/699
32/699												T-b
33/699
34/699
35/699
36/699
37/699																												R-b
38/699																		R-b	R-b
39/699
40/699																																		R-b
41/699																		R-b
42/699
43/699
44/699																	A-b
45/699																		R-b
46/699
47/699
48/699
49/699																			R-b
50/699
51/699
52/699
53/699
54/699
55/699
56/699
57/699
58/699
59/699
60/699																				R-b
61/699																					R-b
62/699
63/699																						R-b
64/699
65/699																							A-b
66/699
67/699
68/699																								T-b	R-b
69/699																										A-b
70/699																											R-b
71/699
72/699
73/699																													R-b
74/699																														R-b
75/699
76/699																															R-b
77/699
78/699						R-b																										R-b
79/699																																	R-b
80/699																																																									R-b
81/699
82/699
83/699
84/699
85/699
86/699																																	R-b																					R-b	R-b
87/699
88/699																																																								R-b
89/699																																																								R-b
90/699																																			R-b
91/699																																				R-b
92/699																																					R-b
93/699																		R-b																				A-b
94/699																																							T-b	R-b
95/699																																									T-b
96/699																																										R-b
97/699
98/699
99/699
100/699
101/699
102/699
103/699
104/699
105/699
106/699																																											R-b
107/699																																												R-b
108/699
109/699
110/699
111/699																																													R-b
112/699
113/699																																											R-b
114/699																																														R-b
115/699																																															R-b
116/699																																																R-b	A-b
117/699																																																	R-b
118/699																																																	R-b	R-b	R-b
119/699																												R-b
120/699
121/699
122/699
123/699
124/699																																																				R-b
125/699																																																					A-b
126/699
127/699
128/699
129/699																																																															R-b
130/699
131/699
132/699
133/699
134/699
135/699
136/699
137/699																																																										A-b
138/699
139/699
140/699
141/699																																																											R-b
142/699																																																												A-b	R-b
143/699
144/699
145/699
146/699
147/699																																					R-b
148/699
149/699
150/699
151/699
152/699
153/699																																																														T-b
154/699																																																														T-b
155/699
156/699
157/699
158/699
159/699
160/699																																																																R-b
161/699																																																																	R-b
162/699																																					R-b
163/699																																					R-b
164/699																																																																		A-b
165/699																																																																			R-b
166/699
167/699
168/699
169/699																																																																				A-b
170/699
171/699																																													A-b																								R-b	R-b
172/699
173/699																																																																							R-b
174/699																																																																													A-b
175/699
176/699																																																																																														R-b	R-b
177/699																																																																																																							A-b
178/699																																																																																																								R-b
179/699																																																																																																									T-b
180/699																																																															R-b																																											R-b
181/699
182/699																																																																								R-b	R-b
183/699																																																																										T-b	T-b	R-b
184/699
185/699																																																																													R-b
186/699																																																																														R-b
187/699
188/699																																R-b
189/699
190/699																																																																															R-b
191/699																																																																																R-b	R-b
192/699																		R-b
193/699																																																																					R-b													R-b
194/699
195/699																																																																																			R-b
196/699
197/699																																																								R-b
198/699																																																								R-b
199/699																																																																																				R-b
200/699																																																																																					R-b	R-b
201/699
202/699
203/699
204/699
205/699
206/699																																																																																							R-b
207/699																																																																																								T-b R-b	R-b	R-b	R-b
208/699
209/699																																R-b
210/699																																																																																												R-b
211/699																																																																																													A-b
212/699
213/699																																																																																																R-b
214/699																																																																																																A-b	R-b
215/699																																																																		R-b																																T-b	T-b
216/699																																																																		R-b																																T-b	T-b
217/699																																																																																																				R-b
218/699																																																																																																					R-b	R-b
219/699
220/699
221/699																																																																																											R-b
222/699																																																																																																														A-b
223/699
224/699																																																																																																																						R-b
225/699																																																																																																																							A-b	A-b	A-b
226/699
227/699																																																																																																R-b
228/699																																																																																																R-b
229/699																																																																																																R-b
230/699																																																																																																R-b
231/699
232/699
233/699
234/699
235/699
236/699																																																																																																											R-b
237/699
238/699
239/699																																																								R-b
240/699
241/699
242/699																																																																																																						R-b
243/699
244/699
245/699																																																																		R-b
246/699																																																																																																												R-b	R-b
247/699
248/699
249/699																																																																																																															A-b	A-b
250/699
251/699																																																																																																																	A-b
252/699
253/699
254/699
255/699
256/699																																R-b																																																																																		R-b
257/699
258/699																																																																																																																			T-b	A-b
259/699																											R-b
260/699																											R-b
261/699
262/699
263/699
264/699																																																																																																																					R-b
265/699																																																																																																																			T-b	A-b
266/699																																																																																																																				A-b
267/699
268/699
269/699						R-b																																																																																																																										T-b	T-b	R-b	R-b
270/699						R-b																																																																																																																												R-b	R-b
271/699
272/699																																																																																																																																						R-b
273/699
274/699																																																																																																																																						R-b
275/699																																																																																																																										R-b
276/699																											R-b
277/699						R-b
278/699																																																																																																	R-b
279/699
280/699																																																																																																																											R-b
281/699																																																																																																																												R-b
282/699																																																																																																																													R-b
283/699																																																																																																																													R-b
284/699
285/699
286/699
287/699																																											R-b
288/699
289/699
290/699
291/699
292/699
293/699
294/699																																																																																																																														A-b
295/699
296/699
297/699
298/699
299/699																																																																																				R-b
300/699																																																																		R-b																																																													R-b
301/699
302/699
303/699
304/699
305/699																																																																																																																																				R-b
306/699													R-b
307/699													R-b
308/699																																																																											R-b																																																										R-b
309/699													A-b
310/699													R-b
311/699													R-b
312/699
313/699
314/699
315/699
316/699
317/699
318/699
319/699
320/699
321/699
322/699
323/699
324/699																																																																																																																																							T-b
325/699
326/699
327/699																																																																																																																																								R-b
328/699																																																																																																																																								R-b
329/699																																																																																																																																									R-b	R-b
330/699
331/699																																																																																				R-b
332/699
333/699
334/699													R-b
335/699
336/699
337/699
338/699
339/699																																																																																																																																											R-b
340/699																																																																																																																																												R-b
341/699
342/699
343/699
344/699
345/699																																																																																																																																													R-b
346/699																																																																																																																																													R-b
347/699
348/699
349/699
350/699																																																																																																																																														T-b
351/699
352/699
353/699																																																																																																																																									R-b						R-b
354/699																																																																																																																																		R-b	R-b													A-b
355/699																																																																																																																																																	R-b
356/699																																R-b																																																																																																																		R-b
357/699																																R-b
358/699
359/699																																																																																																																																																		R-b
360/699																																																																																																																													R-b																										T-b A-b	T-b
361/699																																																																																																																													R-b																										T-b A-b	T-b
362/699
363/699																																R-b																																																																																																																															R-b
364/699																																R-b																																																																																																																															R-b
365/699																																R-b																																																																																																																															R-b
366/699																																R-b																																																																																																																															R-b
367/699																																																																																																																																																			R-b
368/699																																																																																																																																																				R-b
369/699
370/699																															R-b
371/699																																																																																																																																											R-b
372/699
373/699
374/699
375/699
376/699																																																																																																																																																					R-b
377/699
378/699
379/699
380/699																																																																																																																A-b
381/699																																																																																																																																																						R-b
382/699
383/699
384/699
385/699
386/699
387/699
388/699																																																																																																																																																									R-b	R-b
389/699
390/699
391/699
392/699																																	R-b
393/699
394/699
395/699
396/699																																																																																																																																																											R-b
397/699
398/699																																																																																																																																																												R-b	R-b
399/699																																																																																																																																																												R-b	R-b
400/699																																																																																																																																																													R-b
401/699
402/699																																																																																																																																																														R-b
403/699																																																																																																																																																														R-b
404/699
405/699
406/699
407/699																																																										R-b
408/699																																																																																																																																																																					R-b
409/699																																																																													A-b
410/699
411/699
412/699
413/699
414/699
415/699
416/699
417/699
418/699																																	R-b
419/699																																R-b
420/699																																																																																																																																																																A-b
421/699																																																																																																																																																																A-b
422/699																																																																																																																																																																A-b
423/699
424/699																																																																																																																																																																	R-b	R-b
425/699
426/699
427/699																																																																																																																																											R-b																								R-b
428/699
429/699																																R-b
430/699																																																																																																																																											R-b
431/699																																																																																																																																											R-b
432/699
433/699																																																																																																																															R-b																																					R-b
434/699
435/699
436/699
437/699
438/699
439/699
440/699
441/699
442/699
443/699
444/699
445/699
446/699
447/699
448/699
449/699
450/699
451/699
452/699																																																																																													A-b
453/699																																																																																																																																																																								R-b
454/699
455/699
456/699
457/699
458/699
459/699
460/699
461/699
462/699
463/699
464/699
465/699
466/699
467/699
468/699
469/699
470/699
471/699																																																																																																																																																																						R-b
472/699																																																																																																																																																																						R-b
473/699
474/699
475/699
476/699
477/699
478/699
479/699
480/699
481/699
482/699																																																																																									R-b R-b		R-b																																																																												R-b
483/699																																																																																																R-b
484/699
485/699																																																																																																R-b
486/699																																																																																																R-b
487/699																																																																																																R-b
488/699																																																																																																R-b
489/699																																																																																																R-b
490/699
491/699
492/699																																																																																																																																																																									R-b
493/699
494/699																																																																																																																																																																										R-b
495/699
496/699						R-b
497/699
498/699
499/699																																																																																																																																																																													A-b
500/699																																																										R-b
501/699																																																																																																																																																																														A-b
502/699
503/699
504/699
505/699
506/699
507/699
508/699																																																																																																																																																																		R-b
509/699
510/699
511/699
512/699
513/699
514/699
515/699																																																																																																																																																																							A-b
516/699																																																																																	R-b
517/699																																																																																										R-b																																																																																	R-b
518/699
519/699
520/699
521/699
522/699
523/699
524/699
525/699
526/699
527/699																																																																																																																																																										R-b
528/699						R-b																																																																																																																																																									R-b
529/699																																																																																																																																																																												R-b T-b
530/699						R-b
531/699						R-b
532/699						R-b
533/699
534/699
535/699																																																																																																																																													R-b
536/699																																																																																																																																											R-b
537/699																																																																																											R-b
538/699
539/699
540/699
541/699
542/699																																																																																																																																											R-b
543/699
544/699
545/699																																																																																																																																																																																								R-b
546/699																																																																																																																																																																																										R-b	R-b
547/699																																																																																																																				A-b																																																																								R-b
548/699
549/699
550/699																																																																																																																																																									R-b
551/699
552/699																																																																																																																																																																															R-b
553/699						R-b																																																																																																																																							R-b
554/699
555/699																																																																																																																																																																A-b
556/699
557/699																																																																																																																																																																																R-b
558/699																																																																																																																																																																																	A-b
559/699
560/699																																																																																																																																																																																		R-b
561/699
562/699
563/699
564/699																													R-b
565/699
566/699
567/699																																																																																				R-b																																																																																															R-b	R-b
568/699																																																																																						A-b																																																																																													R-b
569/699
570/699
571/699																																																																																																																																																																																					R-b
572/699
573/699
574/699
575/699																												R-b
576/699																												R-b
577/699																																																																																																																																																																																						A-b
578/699
579/699																																																																																																																																																																																							A-b
580/699
581/699																																																																																																																																																																																									R-b
582/699
583/699																		R-b
584/699																		R-b
585/699																		R-b
586/699																		R-b
587/699																		R-b
588/699																																																																																																																																																																																													A-b
589/699
590/699
591/699
592/699																																																																																																																																																																																																				R-b	A-b
593/699																		R-b
594/699
595/699
596/699																																																																																																																																																																																																						T-b
597/699
598/699
599/699																																																																																																																																																																																														R-b
600/699																					R-b
601/699																						R-b
602/699
603/699
604/699
605/699
606/699
607/699																		R-b
608/699																																																																																																																																																																																															R-b
609/699																																																																																																																																																																																																R-b
610/699
611/699																																																																																																																																																																																																R-b
612/699
613/699																																																																																				R-b
614/699
615/699																																																																																																																											R-b
616/699																																					A-b
617/699																																					A-b
618/699
619/699
620/699
621/699
622/699
623/699																																																																																																																																																																																																	R-b
624/699																																																																																																																																																																																																	R-b
625/699
626/699																																																																																																																																																																									R-b
627/699
628/699
629/699																																																																																																																																																																																																		R-b
630/699																																																																																																																																																																																																			T-b
631/699																																																																																																																																																																																																			T-b
632/699																																																																																																																																																																																																			T-b								R-b
633/699																																																																																																																																																																																																			T-b
634/699																																																																																																																																																																																																											R-b
635/699
636/699																																																																																																																																																																																																																		R-b
637/699
638/699
639/699																				R-b
640/699
641/699
642/699
643/699
644/699
645/699
646/699																																																																																																						R-b																																																																																																	A-b
647/699																																																																																																																																																																																																								R-b	R-b
648/699																																																																																																																																																																																																										T-b
649/699																																																																																																						R-b
650/699
651/699
652/699
653/699
654/699
655/699
656/699
657/699
658/699																																																																																											R-b																																																																																																																	R-b
659/699																																																																																																																																																																																																												R-b	R-b
660/699																																																																																																																																																																																																												R-b
661/699
662/699																																								R-b																																																																																																																																																																						T-b	T-b
663/699
664/699
665/699																																											R-b
666/699
667/699																																													R-b
668/699
669/699																																																																																																																																																																																																																A-b
670/699																																																																																																																																																																																																																A-b
671/699																		R-b																																																																																																																																																																																															A-b
672/699																																																	R-b
673/699																																																																																																																																																																																																																			Originally-by	A-b
674/699																																																	R-b
675/699																																																																																																											T-b																																																																																																										R-b	A-b
676/699
677/699
678/699																																																																																																																																																																																																																																R-b
679/699
680/699																																																																																																																																																																																																																									R-b
681/699																																																																																																																																																																																																																										R-b
682/699																																																																																																																																																																																																		R-b																									R-b T-b
683/699																																																																																																																																																																																																																												A-b
684/699																																																																																																																																																																																																																													R-b
685/699
686/699																																																																																																																																																																																																																														R-b
687/699																																																																																																																																																																																																																															T-b
688/699
689/699
690/699
691/699
692/699
693/699
694/699
695/699
696/699																																	R-b																																																																																																																																																																																						T-b
697/699																																	R-b																																																																																																																																																																																						R-b	A-b
698/699
699/699

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 225 reviewers.

Read the v1 thread

Cover letter [PATCH 5.10 000/699] 5.10.261-rc1 review

This is the start of the stable review cycle for the 5.10.261 release. There are 699 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 23 Jul 2026 15:23:00 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.261-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 5.10.261-rc1

Taehee Yoo <[email protected]>
mld: fix suspicious RCU usage in __ipv6_dev_mc_dec()

Eric Dumazet <[email protected]>
ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()

Nikita Zhandarovich <[email protected]>
ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work

Taehee Yoo <[email protected]>
net: mld: fix reference count leak in mld_{query | report}_work()

Eric Dumazet <[email protected]>
ipv6: fix lockdep splat in in6_dump_addrs()

Ignat Korchagin <[email protected]>
ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()

Kristian Evensen <[email protected]>
net: ethernet: rmnet: Always subtract MAP header

Yue Haibing <[email protected]>

    ipv6: mcast: Delay put pmc->idev in mld_del_delrec()

Taehee Yoo <[email protected]>
mld: change lockdep annotation for ip6_sf_socklist and ipv6_mc_socklist

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamp clock period by using lower value

Jean-Baptiste Maneyrol <[email protected]>
iio: invensense: fix odr switching to same value

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_mpu6050: fix frequency setting when chip is off

Luiz Augusto von Dentz <[email protected]>
Bluetooth: L2CAP: Fix regressions caused by reusing ident

Marc Zyngier <[email protected]>
KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers

Zhan Xusheng <[email protected]>
posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()

Ricardo Robaina <[email protected]>
audit: fix potential integer overflow in audit_log_n_hex()

Ricardo Robaina <[email protected]>
audit: add audit_log_nf_skb helper function

Giovanni Cabiddu <[email protected]>
crypto: qat - validate RSA CRT component lengths

Ahsan Atta <[email protected]>
crypto: qat - fix restarting state leak on allocation failure

Qu Wenruo <[email protected]>
btrfs: do not trim a device which is not writeable

Neill Kapron <[email protected]>
usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile

Thorsten Blum <[email protected]>
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A

Uwe Kleine-König <[email protected]>
crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0

Krzysztof Kozlowski <[email protected]>
crypto: atmel-sha204a - Mark OF related data as maybe unused

Tyler Baker <[email protected]>
usb: gadget: f_fs: initialize reset_work at allocation time

Andy Yan <[email protected]>
usb: typec: tcpm: Fix VDM type for Enter Mode commands

Mauricio Faria de Oliveira <[email protected]>
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()

Fan Wu <[email protected]>
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove

Uwe Kleine-König <[email protected]>
gpio: pca953x: Make platform teardown callback return void

Uwe Kleine-König <[email protected]>
leds: lm3601x: Improve error reporting for problems during .remove()

Uwe Kleine-König <[email protected]>
leds: lm3697: Remove duplicated error reporting in .remove()

Uwe Kleine-König <[email protected]>
drm/i2c/sil164: Drop no-op remove function

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix write buffer corruption

Oliver Neukum <[email protected]>
usb: iowarrior: remove inherent race with minor number

Dawei Feng <[email protected]>
usb: free iso schedules on failed submit

Xu Rao <[email protected]>
usb: gadget: f_printer: take kref only for successful open

Andrzej Pietrasiewicz <[email protected]>
usb: gadget: function: Simplify diagnostic messaging in printer

Tristan Madani <[email protected]>
hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length

Viacheslav Dubeyko <[email protected]>
hfs/hfsplus: prevent getting negative values of offset/length

Yousef Alhouseen <[email protected]>
xfs: use null daddr for unset first bad log block

Alexey Nepomnyashih <[email protected]>
xfs: fix unreachable BIGTIME check in dquot flush validation

Dave Chinner <[email protected]>
xfs: reflect sb features in xfs_mount

Andy Shevchenko <[email protected]>
serial: 8250_mid: Disable DMA for selected platforms

Ilpo Järvinen <[email protected]>

    serial: 8250_mid: Remove 8250_pci usage

Manish Khadka <[email protected]>
HID: appleir: fix UAF on pending key_up_timer in remove()

Jann Horn <[email protected]>
proc: protect ptrace_may_access() with exec_update_lock (part 1)

Fushuai Wang <[email protected]>

    cpufreq: intel_pstate: Sync policy->cur during CPU offline

Trung Nguyen <[email protected]>
HID: multitouch: fix out-of-bounds bit access on mt_io_flags

Angela Czubak <[email protected]>
HID: add haptics page defines

Jann Horn <[email protected]>
proc: protect ptrace_may_access() with exec_update_lock (FD links)

Christoph Hellwig <[email protected]>
proc: rename proc_setattr to proc_nochmod_setattr

Thomas Weißschuh <[email protected]>
proc: use generic setattr() for /proc/$PID/net

Lukas Wunner <[email protected]>
X.509: Fix validation of ASN.1 certificate header

Baokun Li <[email protected]>
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()

Zihan Xi <[email protected]>
smb: client: harden POSIX SID length parsing

Zihan Xi <[email protected]>
smb: client: use unaligned reads in parse_posix_ctxt()

Norbert Manthey <[email protected]>
smb: client: mask server-provided mode to 07777 in modefromsid

Haoxiang Li <[email protected]>
smb: client: Fix next buffer leak in receive_encrypted_standard()

Runyu Xiao <[email protected]>

    Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock

Hyunwoo Kim <[email protected]>
Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()

Luiz Augusto von Dentz <[email protected]>
Bluetooth: L2CAP: Fix not tracking outstanding TX ident

Florian Westphal <[email protected]>
netfilter: ebtables: zero chainstack array

Qianfeng Rong <[email protected]>
netfilter: ebtables: Use vmalloc_array() to improve code

Runyu Xiao <[email protected]>
coresight: etb10: restore atomic_t for shared reading state

Marco Nenciarini <[email protected]>
PCI: Skip Resizable BAR restore on read error

Ilpo Järvinen <[email protected]>
PCI: Move Resizable BAR code to rebar.c

Ilpo Järvinen <[email protected]>
PCI: Add kerneldoc for pci_resize_resource()

Ilpo Järvinen <[email protected]>
PCI: Fix restoring BARs on BAR resize rollback path

Ilpo Järvinen <[email protected]>
PCI: Free saved list without holding pci_bus_sem

Ilpo Järvinen <[email protected]>
PCI: Prevent resource tree corruption when BAR resize fails

Giovanni Cabiddu <[email protected]>
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()

Fabio Aiuto <[email protected]>
staging: rtl8723bs: remove DBG_871X log argument

Manivannan Sadhasivam <[email protected]>
PCI: mediatek: Fix IRQ domain leak when port fails to enable

Christian Marangi <[email protected]>
PCI: mediatek: Convert bool to single quirks entry and bitmap

Jiri Slaby (SUSE) <[email protected]>
PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()

Franziska Naepelt <[email protected]>
staging: rtl8723bs: Fix space issues

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()

Michael Straube <[email protected]>
staging: rtl8723bs: clean up comparsions to NULL

Fabio Aiuto <[email protected]>
staging: rtl8723bs: remove commented out condition

Fabio Aiuto <[email protected]>
staging: rtl8723bs: remove 5Ghz code blocks

Fabio Aiuto <[email protected]>
staging: rtl8723bs: remove 5Ghz code related to channel plan definition

Fabio Aiuto <[email protected]>
staging: rtl8723bs: remove all 5Ghz network types

Fabio Aiuto <[email protected]>
staging: rtl8723bs: remove commented out RT_ASSERT occurrences

Fabio Aiuto <[email protected]>
staging: rtl8723bs: split too long line

Richard Zhu <[email protected]>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling

Shoichiro Miyamoto <[email protected]>
smb: client: restrict implied bcc[0] exemption to responses without data area

Enzo Matsumiya <[email protected]>
cifs: remove unused server parameter from calc_smb_size()

Enzo Matsumiya <[email protected]>
smb2: small refactor in smb2_check_message()

Jakob Koschel <[email protected]>
cifs: remove check of list iterator against head past the loop body

Ronnie Sahlberg <[email protected]>
cifs: Create a new shared file holding smb2 pdu definitions

Arnd Bergmann <[email protected]>
staging: media: atomisp: reduce load_primary_binaries() stack usage

Martiros Shakhzadyan <[email protected]>
media: staging: media: atomisp: Fix alignment and line length issues

Martiros Shakhzadyan <[email protected]>
media: staging: media: atomisp: Replace if else clause with a ternary

Martiros Shakhzadyan <[email protected]>
media: staging: media: atomisp: Fix the rest of sh_css.c brace issues

Martiros Shakhzadyan <[email protected]>
media: staging: media: atomisp: Fix sh_css.c brace coding style issues

Aditya Srivastava <[email protected]>
media: atomisp: replace boolean comparison of values with bool variables

Mahesh Vaidya <[email protected]>
PCI: altera: Fix resource leaks on probe failure

Carlos Llamas <[email protected]>
binder: fix UAF in binder_free_transaction()

Alex Williamson <[email protected]>
vfio/pci: Release the VGA arbiter client on register_device() failure

Johan Hovold <[email protected]>
Bluetooth: btusb: fix wakeup source leak on probe failure

Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on marvell probe failure

Luiz Augusto von Dentz <[email protected]>
Bluetooth: btintel: Check firmware version before download

Kiran K <[email protected]>
Bluetooth: btintel: Fix offset calculation boot address parameter

Zhao Dongdong <[email protected]>
ALSA: aoa: check snd_ctl_new1() return value

Herman van Hazendonk <[email protected]>
iio: common: st_sensors: honour channel endianness in read_axis_data

Alexander Lobakin <[email protected]>
bitops: make BYTES_TO_BITS() treewide-available

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: stabilized timestamp in interrupt

Jean-Baptiste Maneyrol <[email protected]>
iio: invensense: fix timestamp glitches when switching frequency

Colin Ian King <[email protected]>
iio: invensense: remove redundant initialization of variable period

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_mpu6050: use the common inv_sensors timestamp module

Jean-Baptiste Maneyrol <[email protected]>
iio: make invensense timestamp module generic

Jean-Baptiste Maneyrol <[email protected]>
iio: move inv_icm42600 timestamp module in common

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: make timestamp module chip independent

Zhang Lixu <[email protected]>
iio: hid-sensor-rotation: Fix stale or zero output when reading raw values

Runyu Xiao <[email protected]>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ

Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup

Sven Eckelmann <[email protected]>
batman-adv: clean untagged VLAN on netdev registration failure

Eric Biggers <[email protected]>
crypto: crypto4xx - Remove insecure and unused rng_alg

Herbert Xu <[email protected]>
crypto: crypto4xx - Remove ahash-related code

Aditya Srivastava <[email protected]>
crypto: amcc - fix incorrect kernel-doc comment syntax in files

Pengpeng Hou <[email protected]>
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout

Pengpeng Hou <[email protected]>
mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout

Pengpeng Hou <[email protected]>
mtd: rawnand: fsl_ifc: return errors for failed page reads

Runyu Xiao <[email protected]>
mmc: vub300: defer reset until cmd_mutex is unlocked

Pengpeng Hou <[email protected]>
mtd: onenand: samsung: report DMA completion timeouts

Rafael Beims <[email protected]>
wifi: mwifiex: fix permanently busy scans after multiple roam iterations

Zhiling Zou <[email protected]>
wifi: mac80211: free ack status frame on TX header build failure

Junrui Luo <[email protected]>
powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()

Zhao Dongdong <[email protected]>
reset: sunxi: fix memory region leak on ioremap failure

Robby Cai <[email protected]>
reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ

Julian Anastasov <[email protected]>
ipvs: fix more places with wrong ipv6 transport offsets

Maoyi Xie <[email protected]>
memstick: ms_block: reject a card that reports too many blocks

James Raphael Tiovalen <[email protected]>
macsec: fix promiscuity refcount leak in macsec_dev_open()

Xuanqiang Luo <[email protected]>
llc: fix SAP refcount leak when creating incoming sockets

Laxman Acharya Padhya <[email protected]>
Bluetooth: btrtl: validate firmware patch bounds

Abhishek Ojha <[email protected]>
regulator: ltc3676: Fix incorrect IRQSTAT bit offsets

Dawei Feng <[email protected]>

    wifi: mac80211: fix memory leak in ieee80211_register_hw()

Runyu Xiao <[email protected]>
wifi: rt2x00: avoid full teardown before work setup in probe

Farhad Alemi <[email protected]>
cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed

Michael Bommarito <[email protected]>
drbd: reject data replies with an out-of-range payload size

Yizhou Zhao <[email protected]>
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new

Yizhou Zhao <[email protected]>
ipvs: use parsed transport offset in SCTP state lookup

Shuangpeng Bai <[email protected]>
llc: fix SAP refcount leak in llc_ui_autobind()

Yousef Alhouseen <[email protected]>
mac802154: remove interfaces with RCU list deletion

Gerald Schaefer <[email protected]>
s390/monwriter: Reject buffer reuse with different data length

HyeongJun An <[email protected]>
hwmon: (asus_atk0110) Check package count before accessing element

Wentao Liang <[email protected]>
ata: pata_pxa: Fix DMA channel leak on probe error

Bryam Vargas <[email protected]>
orangefs: keep the readdir entry size 64-bit in fill_from_part()

Masami Hiramatsu (Google) <[email protected]>
tracing/probes: Fix double addition of offset for @+FOFFSET

Bryam Vargas <[email protected]>
net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked

Haoxiang Li <[email protected]>
fsl/fman: Free init resources on KeyGen failure in fman_init()

Haoxiang Li <[email protected]>
net: liquidio: fix BAR resource leak on PF number failure

Pengpeng Hou <[email protected]>
hwmon: (w83793) remove vrm sysfs file on probe failure

Pengpeng Hou <[email protected]>
hwmon: (w83627hf) remove VID sysfs files on error and remove

Abdun Nihaal <[email protected]>
bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()

Davidlohr Bueso <[email protected]>
locking/rtmutex: Skip remove_waiter() when waiter is not enqueued

Keenan Dong <[email protected]>
rtmutex: Use waiter::task instead of current in remove_waiter()

Sven Eckelmann <[email protected]>
batman-adv: ensure minimal ethernet header on TX

Sven Eckelmann <[email protected]>
batman-adv: retrieve ethhdr after potential skb realloc on RX

Shivam Kumar <[email protected]>
nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path

Shitalkumar Gandhi <[email protected]>
ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit

Shitalkumar Gandhi <[email protected]>
ieee802154: ca8210: fix cas_ctl leak on spi_async failure

Michael Bommarito <[email protected]>
ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation

Michael Bommarito <[email protected]>
ieee802154: admin-gate legacy LLSEC dump operations

Maoyi Xie <[email protected]>
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

Maoyi Xie <[email protected]>
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink

Maoyi Xie <[email protected]>
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink

Dawei Feng <[email protected]>
net: ena: clean up XDP TX queues when regular TX setup fails

Maoyi Xie <[email protected]>
net: sit: require CAP_NET_ADMIN in the device netns for changelink

Andreas Kemnade <[email protected]>
gpios: palmas: add .get_direction() op

Bradley Morgan <[email protected]>
cpu: hotplug: Preserve per instance callback errors

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix type confusion in CDC union descriptor parsing

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix DMA mapping violation in line setup

Dmitry Torokhov <[email protected]>
Input: ims-pcu - add response length checks

Dmitry Torokhov <[email protected]>
Input: ims-pcu - validate control endpoint type

Dmitry Torokhov <[email protected]>
Input: ims-pcu - release data interface on disconnect

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix use-after-free and double-free in disconnect

Bryam Vargas <[email protected]>
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE

Xu Rao <[email protected]>
scsi: sg: Report request-table problems when any status is set

Haoxiang Li <[email protected]>
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

Mikulas Patocka <[email protected]>
dm-verity: increase sprintf buffer size

Mikulas Patocka <[email protected]>
dm_early_create: fix freeing used table on dm_resume failure

Mikulas Patocka <[email protected]>
dm-stats: fix merge accounting

Mikulas Patocka <[email protected]>
dm-stats: fix dm_jiffies_to_msec64

Benjamin Marzinski <[email protected]>
dm-log: fix a bitset_size overflow on 32bit machines

Mikulas Patocka <[email protected]>
dm-bufio: fix wrong count calculation in dm_bufio_issue_discard

Samuel Moelius <[email protected]>
dm era: fix out-of-bounds memory access for non-zero start sector

Ming-Hung Tsai <[email protected]>
dm thin metadata: fix metadata snapshot consistency on commit failure

Genjian Zhang <[email protected]>
dm thin metadata: fix superblock refcount leak on snapshot shadow failure

Oliver Hartkopp <[email protected]>
can: bcm: add missing rcu list annotations and operations

Oliver Hartkopp <[email protected]>
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure

Oliver Hartkopp <[email protected]>
can: isotp: use unconditional synchronize_rcu() in isotp_release()

Bryam Vargas <[email protected]>
nvmet-rdma: handle inline data with a nonzero offset

Weiming Shi <[email protected]>
sctp: validate STALE_COOKIE cause length before reading staleness

Kunihiko Hayashi <[email protected]>
spi: uniphier: Fix completion initialization order before devm_request_irq()

Wang Yan <[email protected]>
time: Fix off-by-one in compat settimeofday() usec validation

Jaewon Yang <[email protected]>
tpm: Make the TPM character devices non-seekable

Thorsten Blum <[email protected]>
tpm: fix event_size output in tpm1_binary_bios_measurements_show

Maoyi Xie <[email protected]>
xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink

Sanman Pradhan <[email protected]>
xfrm: use compat translator only for u64 alignment mismatch

Wentao Liang <[email protected]>
xen/gntdev: fix error handling in ioctl

Xuanqiang Luo <[email protected]>
i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()

Roman Vivchar <[email protected]>
i2c: mediatek: fix WRRD for SoCs without auto_restart option

Bhargav Joshi <[email protected]>
irqchip/crossbar: Use correct index in crossbar_domain_free()

Florian Fuchs <[email protected]>
mtd: maps: vmu-flash: fix NULL pointer dereference in initialization

Michael Bommarito <[email protected]>
ocfs2: reject non-inline dinodes with i_size and zero i_clusters

Michael Bommarito <[email protected]>
ocfs2: reject dinodes whose i_rdev disagrees with the file type

Michael Bommarito <[email protected]>
ocfs2: reject dinodes with non-canonical i_mode type

Ian Bridges <[email protected]>
ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits

Kyle Zeng <[email protected]>
ocfs2: avoid moving extents to occupied clusters

Arseniy Krasnov <[email protected]>
mtd: rawnand: fix condition in 'nand_select_target()'

Tristan Madani <[email protected]>
ocfs2: use kzalloc for quota recovery bitmap allocation

Martin Wilck <[email protected]>
scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()

Ruoyu Wang <[email protected]>
mtd: slram: remove failed entries from the device list

Krzysztof Wilczyński <[email protected]>
proc: only bump parent nlink when registering directories

WenTao Liang <[email protected]>
power: supply: charger-manager: fix refcount leak in is_full_charged()

Maciej W. Rozycki <[email protected]>
MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()

Johan Hovold <[email protected]>
MIPS: ip22-gio: fix device reference leak in probe

Johan Hovold <[email protected]>
MIPS: ip22-gio: fix kfree() of static object

Johan Hovold <[email protected]>
MIPS: ip22-gio: fix gio device memory leak

Chuck Lever <[email protected]>
lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure

Chuck Lever <[email protected]>
lockd: Plug nlm_file leak when nlm_do_fopen() fails

Abdun Nihaal <[email protected]>
nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

Abdun Nihaal <[email protected]>
nvdimm/btt: Free arenas on btt_init() error paths

Bartosz Golaszewski <[email protected]>
mfd: tps6586x: Fix OF node refcount

Sven Eckelmann <[email protected]>
batman-adv: tt: prevent TVLV OOB check overflow

Sven Eckelmann <[email protected]>
batman-adv: frag: fix primary_if leak on failed linearization

Sven Eckelmann <[email protected]>
batman-adv: frag: free unfragmentable packet

Sven Eckelmann <[email protected]>
batman-adv: fix VLAN priority offset

Sven Eckelmann <[email protected]>
batman-adv: tt: avoid request storms during pending request

Sven Eckelmann <[email protected]>
batman-adv: dat: fix tie-break for candidate selection

Sven Eckelmann <[email protected]>
batman-adv: dat: ensure accessible eth_hdr proto field

Sven Eckelmann <[email protected]>
batman-adv: bla: reacquire gw address after skb realloc

Sven Eckelmann <[email protected]>
batman-adv: dat: acquire ARP hw source only after skb realloc

Sven Eckelmann <[email protected]>

    batman-adv: access unicast_ttvn skb->data only after skb realloc

Sven Eckelmann <[email protected]>
batman-adv: gw: acquire ethernet header only after skb realloc

Thorsten Blum <[email protected]>
x86/boot: Reject too long acpi_rsdp= values

Thorsten Blum <[email protected]>
x86/boot: Validate console=uart8250 baud rate to fix early boot hang

Guangshuo Li <[email protected]>
mfd: sm501: Fix reference leak on failed device registration

Armin Wolf <[email protected]>
leds: uleds: Fix potential buffer overread

Wang Jun <[email protected]>
soc: fsl: qe: panic on ioremap() failure in qe_reset()

Siddharth Vadapalli <[email protected]>
soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy

Guangshuo Li <[email protected]>
gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path

Xiang Mei (Microsoft) <[email protected]>
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()

Wyatt Feng <[email protected]>
netfilter: xt_nat: reject unsupported target families

Yizhou Zhao <[email protected]>
netfilter: nf_conncount: fix zone comparison in tuple dedup

Xiang Mei <[email protected]>
netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag

Florian Westphal <[email protected]>
netfilter: nf_nat_sip: reload possible stale data pointer

Wyatt Feng <[email protected]>
netfilter: xt_cluster: reject template conntracks in hash match

David Carlier <[email protected]>
netfilter: nfnl_cthelper: apply per-class values when updating policies

Muhammad Bilal <[email protected]>
netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read

Abdun Nihaal <[email protected]>
fbdev: tridentfb: fix potential memory leak in trident_pci_probe()

Abdun Nihaal <[email protected]>
fbdev: nvidia: fix potential memory leak in nvidiafb_probe()

Abdun Nihaal <[email protected]>
fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()

Abdun Nihaal <[email protected]>
fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()

Abdun Nihaal <[email protected]>
fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

Abdun Nihaal <[email protected]>
fbdev: s3fb: fix potential memory leak in s3_pci_probe()

Abdun Nihaal <[email protected]>
fbdev: i740fb: fix potential memory leak in i740fb_probe()

Abdun Nihaal <[email protected]>
fbdev: radeon: fix potential memory leak in radeonfb_pci_register()

Li RongQing <[email protected]>
fbdev: sm712: Fix operator precedence in big_swap macro

Hyunwoo Kim <[email protected]>
KVM: arm64: vgic: Check the interrupt is still ours before migrating it

Nickolay Goppen <[email protected]>
arm64: dts: qcom: sdm630: describe adsp_mem region properly

Yong Wang <[email protected]>
net: ife: require ETH_HLEN to be pullable in ife_decode()

Zhengchuan Liang <[email protected]>
net: atm: reject out-of-range traffic classes in QoS validation

Michael Bommarito <[email protected]>
net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()

Wentao Liang <[email protected]>
mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()

Guangshuo Li <[email protected]>
smb: client: fix overflow in passthrough ioctl bounds check

Li RongQing <[email protected]>
net/mlx5: Fix L3 tunnel entropy refcount leak

Timur Tabi <[email protected]>
regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK

Douglas Anderson <[email protected]>
regulator: core: Make regulator_lock_two() logic easier to follow

Cao Guanghui <[email protected]>
dm era: fix NULL pointer dereference in metadata_open()

Julian Anastasov <[email protected]>
ipvs: ensure inner headers in ICMP errors are in headroom

Yizhou Zhao <[email protected]>
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors

Yizhou Zhao <[email protected]>
ipvs: use parsed transport offset in TCP state lookup

Yizhou Zhao <[email protected]>
ipvs: pass parsed transport offset to state handlers

Eric Dumazet <[email protected]>
ipv6: mcast: Fix potential UAF in MLD delayed work

Kuniyuki Iwashima <[email protected]>
ipv6: mcast: Replace locking comments with lockdep annotations.

Eric Dumazet <[email protected]>
ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()

Taehee Yoo <[email protected]>
mld: add mc_lock for protecting per-interface mld data

Taehee Yoo <[email protected]>
mld: add new workqueues for process mld events

Taehee Yoo <[email protected]>
mld: convert ifmcaddr6 to RCU

Taehee Yoo <[email protected]>
mld: convert ip6_sf_list to RCU

Taehee Yoo <[email protected]>

    mld: convert ipv6_mc_socklist->sflist to RCU

Taehee Yoo <[email protected]>

    mld: get rid of inet6_dev->mc_lock

Taehee Yoo <[email protected]>
mld: convert from timer to delayed work

Samuel Moelius <[email protected]>
net/sched: cake: reject overhead values that underflow length

Enrico Pozzobon <[email protected]>
net: usb: lan78xx: disable VLAN filter in promiscuous mode

Hui Wang <[email protected]>
ring-buffer: Fix event length with forced 8-byte alignment

Weiming Shi <[email protected]>

    Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()

Pauli Virtanen <[email protected]>
Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length

Xiang Mei <[email protected]>
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket

Xiang Mei <[email protected]>
net: qualcomm: rmnet: validate MAP frame length before ingress parsing

Daniele Palmas <[email protected]>
net: qualcomm: rmnet: add tx packets aggregation

Sharath Chandra Vurukala <[email protected]>
net: ethernet: rmnet: Support for ingress MAPv5 checksum offload

Alex Elder <[email protected]>
net: qualcomm: rmnet: don't use C bit-fields in rmnet checksum header

Alex Elder <[email protected]>
net: qualcomm: rmnet: use masks instead of C bit-fields

Alex Elder <[email protected]>
net: qualcomm: rmnet: kill RMNET_MAP_GET_*() accessor macros

Alex Elder <[email protected]>
net: qualcomm: rmnet: simplify some byte order logic

Shigeru Yoshida <[email protected]>
qede: fix off-by-one in BD ring consumption on build_skb failure

Zhixing Chen <[email protected]>
netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop

Feng Wu <[email protected]>
netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()

Wyatt Feng <[email protected]>
netfilter: xt_u32: reject invalid shift counts

Qihang <[email protected]>
gue: validate REMCSUM private option length

Xiang Mei <[email protected]>
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup

Lee Jones <[email protected]>
HID: core: Fix OOB read in hid_get_report for numbered reports

Georgiy Osokin <[email protected]>
HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()

Myeonghun Pak <[email protected]>
ata: sata_gemini: unwind clocks on IDE pinctrl errors

David Howells <[email protected]>
afs: Fix unchecked-length string display in debug statement

David Howells <[email protected]>
afs: Fix vllist leak

David Howells <[email protected]>
afs: Fix callback service message parsers to pass through -EAGAIN

Dan Carpenter <[email protected]>
afs: Fix error code in afs_extract_vl_addrs()

Samuel Moelius <[email protected]>
net/sched: hhf: clear heavy-hitter state on reset

Vladimir Zapolskiy <[email protected]>
gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe

Gleb Markov <[email protected]>
cxgb4: Fix decode strings dump for T6 adapters

Longjun Tang <[email protected]>
virtio_net: disable cb when NAPI is busy-polled

Masami Hiramatsu (Google) <[email protected]>
tracing/events: Fix to check the simple_tsk_fn creation

Xiang Mei <[email protected]>
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()

Matti Vaittinen <[email protected]>
hwmon: adm1275: Prevent reading uninitialized stack

Nuoqi Gui <[email protected]>
seg6: validate SRH length before reading fixed fields

Pengpeng Hou <[email protected]>
gpio: htc-egpio: use managed gpiochip registration

Pengpeng Hou <[email protected]>
gpio: mvebu: fail probe if gpiochip registration fails

Pengpeng Hou <[email protected]>
spi: sh-msiof: abort transfers when reset times out

Martin Kaiser <[email protected]>
tracing: probes: fix typo in a log message

Ruoyu Wang <[email protected]>
net: sungem: fix probe error cleanup

Yun Zhou <[email protected]>
net: mvneta: re-enable percpu interrupt on resume

Haoxiang Li <[email protected]>
rtc: cmos: unregister HPET IRQ handler on probe failure

Fredrik M Olsson <[email protected]>
rtc: ds1307: Fix off-by-one issue with wday for rx8130

Huiwen He <[email protected]>
smb/client: preserve errors from smb2_set_sparse()

Fernando Fernandez Mancera <[email protected]>
ipv6: fix error handling in disable_policy sysctl

Fernando Fernandez Mancera <[email protected]>
ipv6: fix error handling in forwarding sysctl

Fernando Fernandez Mancera <[email protected]>
ipv6: fix error handling in ignore_routes_with_linkdown sysctl

Fernando Fernandez Mancera <[email protected]>
ipv6: fix error handling in disable_ipv6 sysctl

Aleksandrova Alyona <[email protected]>
net: dsa: sja1105: round up PTP perout pin duration

Krzysztof Wilczyński <[email protected]>
alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs

Krzysztof Wilczyński <[email protected]>
alpha/PCI: Add security_locked_down() check to pci_mmap_resource()

Runyu Xiao <[email protected]>

    netfilter: nft_synproxy: stop bypassing the priv->info snapshot

Fernando Fernandez Mancera <[email protected]>
netfilter: nf_conncount: prevent connlimit drops for early confirmed ct

Kuniyuki Iwashima <[email protected]>
ipv4: fib: Don't ignore error route in local/main tables.

Xiang Mei <[email protected]>
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().

Xiang Mei <[email protected]>
drm/edid: fix OOB read in drm_parse_tiled_block()

Nuoqi Gui <[email protected]>
bpf: Fix stack slot index in nospec checks

Ronan Dalton <[email protected]>

    rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231

Antoni Pokusinski <[email protected]>

    rtc: abx80x: fix the RTC_VL_CLR clearing all status flags

Sayali Patil <[email protected]>
selftests/mm: allow PUD-level entries in compound testcase of hmm tests

Sayali Patil <[email protected]>
selftests/mm: clarify alternate unmapping in compaction_test

Bhargav Joshi <[email protected]>
irqchip/crossbar: Fix parent domain resource leak

Florian Westphal <[email protected]>
netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak

Jozsef Kadlecsik <[email protected]>
netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()

Aleksandr Nogikh <[email protected]>
ieee802154: fix kernel-infoleak in dgram_recvmsg()

Ivan Abramov <[email protected]>

    ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()

Andy Shevchenko <[email protected]>
ACPI: resource: Amend kernel-doc style

Ricardo Neri <[email protected]>
thermal: intel: Fix dangling resources on thermal_throttle_online() failure

Breno Leitao <[email protected]>
arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS

Xin Long <[email protected]>
sctp: hold socket lock when dumping endpoints in sctp_diag

Jakub Kicinski <[email protected]>
net: psample: fix info leak in PSAMPLE_ATTR_DATA

Ratheesh Kannoth <[email protected]>
octeontx2-pf: Fix leak of SQ timestamp buffer on teardown

Arnaldo Carvalho de Melo <[email protected]>
perf machine: Use snprintf() for guestmount path construction

Eric Dumazet <[email protected]>
xfrm: validate selector family and prefixlen during match

Arnaldo Carvalho de Melo <[email protected]>
perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name()

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Use snprintf() for root_dir path construction

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id()

Pengpeng Hou <[email protected]>
sparc: led: avoid trimming a newline from empty writes

John Johansen <[email protected]>
apparmor: fix label can not be immediately before a declaration

Adrian Hunter <[email protected]>
i3c: master: Prevent reuse of dynamic address on device add failure

Zygmunt Krynicki <[email protected]>
apparmor: put secmark label after secid lookup

Zygmunt Krynicki <[email protected]>
apparmor: aa_getprocattr free procattr leak on format failure

Maxime Bélair <[email protected]>
apparmor: fix potential UAF in aa_replace_profiles

Ryan Lee <[email protected]>
apparmor: grab ns lock and refresh when looking up changehat child profiles

Zygmunt Krynicki <[email protected]>
apparmor: aa_label_alloc use aa_label_free on alloc failure

Ruoyu Wang <[email protected]>
apparmor: check label build before no_new_privs test

Manivannan Sadhasivam <[email protected]>
PCI: mediatek: Use actual physical address instead of virt_to_phys()

Ryder Lee <[email protected]>
PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Add bounds checks to read_build_id() note iteration in minimal build

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Add bounds checks to elf_read_build_id() note iteration

Arnaldo Carvalho de Melo <[email protected]>
perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name()

Arnaldo Carvalho de Melo <[email protected]>
tools lib api: Fix mount_overload() snprintf truncation and toupper range

Arnaldo Carvalho de Melo <[email protected]>
tools lib api: Fix filename__write_int() writing uninitialized stack data

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Fix thread__set_comm_from_proc() on empty comm file

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Bounds-check .gnu_debuglink section data

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Fix signed overflow in sysfs__read_build_id() size check

Arnaldo Carvalho de Melo <[email protected]>
tools lib api: Fix missing null termination in filename__read_int/ull()

Arnaldo Carvalho de Melo <[email protected]>
perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file

Arnaldo Carvalho de Melo <[email protected]>
perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path

Arnaldo Carvalho de Melo <[email protected]>
perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name()

Arnaldo Carvalho de Melo <[email protected]>
perf sched: Fix idle-hist callchain display using wrong rb_first variant

Lad Prabhakar <[email protected]>
PCI: rcar-host: Remove unused LIST_HEAD(res)

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Use perf_env__get_cpu_topology() in machine__resolve()

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Fix get_max_num() size_t underflow on empty sysfs file

Li RongQing <[email protected]>
PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro

Mike Snitzer <[email protected]>
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write

Mike Snitzer <[email protected]>
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors

Dai Ngo <[email protected]>
NFSv4/pnfs: defer return_range callbacks until after inode unlock

Sagi Grimberg <[email protected]>
pNFS/filelayout: fix cheking if a layout is striped

Phillip Varney <[email protected]>
clk: qcom: a53: Corrected frequency multiplier for 1152MHz

Nuno Sá <[email protected]>
dmaengine: Fix possible use after free

Arnaldo Carvalho de Melo <[email protected]>
perf c2c: Fix use-after-free in he__get_c2c_hists() error path

Arnaldo Carvalho de Melo <[email protected]>
perf mmap: Fix NULL deref in aio cleanup on alloc failure

Arnaldo Carvalho de Melo <[email protected]>
perf sched: Replace BUG_ON and add NULL checks in replay event helpers

Arnaldo Carvalho de Melo <[email protected]>
perf sched: Clean up idle_threads entry on init failure

Rui Qi <[email protected]>
perf: Fix off-by-one stack buffer overflow in kallsyms__parse()

Rosen Penev <[email protected]>
HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter

Sanjay Chitroda <[email protected]>

    iio: accel: mma8452: handle I2C read error(s) in mma8452_read()

Joshua Crofts <[email protected]>
iio: magnetometer: ak8975: fix potential kernel stack memory leak

Joshua Crofts <[email protected]>
iio: light: si1133: prevent race condition on timeout

Joshua Crofts <[email protected]>
iio: light: si1133: reset counter to prevent race condition

James Kim <[email protected]>
char: tlclk: fix use-after-free in tlclk_cleanup()

Seungjin Bae <[email protected]>
usb: host: max3421: Reject hub port requests for non-existent ports

Seungjin Bae <[email protected]>

    usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()

Guangshuo Li <[email protected]>
staging: most: video: avoid double free on video register failure

Ian Rogers <[email protected]>
perf sched: Add missing mmap2 handler in timehist

Rafael J. Wysocki <[email protected]>
platform/x86: xo15-ebook: Fix wakeup source and GPE handling

Rafael J. Wysocki <[email protected]>
x86/platform/olpc: xo15: Drop wakeup source on driver removal

Yingchao Deng <[email protected]>
coresight: cti: Fix DT filter signals silently ignored

Alexandru Hossu <[email protected]>
staging: nvec: fix use-after-free in nvec_rx_completed()

Yizhou Zhao <[email protected]>

    net/9p: fix race condition on rdma->state in trans_rdma.c

Aleksandr Nogikh <[email protected]>
ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write

Eric Dumazet <[email protected]>

    tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)

Eric Dumazet <[email protected]>
tipc: fix UAF in tipc_l2_send_msg()

Gui-Dong Han <[email protected]>
KEYS: Use acquire when reading state in keyring search

Aboorva Devarajan <[email protected]>
powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus

Aboorva Devarajan <[email protected]>
powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down

Aboorva Devarajan <[email protected]>
powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del

Yadan Fan <[email protected]>
MIPS: mm: Fix out-of-bounds write in maar_res_walk()

Sechang Lim <[email protected]>
bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check

Weiming Shi <[email protected]>
bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()

Florian Westphal <[email protected]>
netfilter: nf_conncount: callers must hold rcu read lock

Runyu Xiao <[email protected]>
kcm: use WRITE_ONCE() when changing lower socket callbacks

Victor Nogueira <[email protected]>
net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen

Victor Nogueira <[email protected]>
net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen

Lars Pöschel <[email protected]>
spi: xilinx: use FIFO occupancy register to determine buffer size

Herbert Xu <[email protected]>
crypto: rng - Free default RNG on module exit

Felix Gu <[email protected]>
crypto: cavium/cpt - fix DMA cleanup using wrong loop index

Felix Gu <[email protected]>
crypto: marvell/octeontx - fix DMA cleanup using wrong loop index

Michael Bommarito <[email protected]>
tipc: prevent snt_unacked underflow on CONN_ACK

Michael Bommarito <[email protected]>
tipc: require net admin for TIPCv2 netlink mutators

Victor Nogueira <[email protected]>
net/sched: sch_hfsc: Don't make class passive twice

Xin Long <[email protected]>
sctp: validate embedded address parameter length

Kuniyuki Iwashima <[email protected]>
net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().

HyeongJun An <[email protected]>
ASoC: tegra: tegra210_ahub: Validate written enum value

HyeongJun An <[email protected]>
ASoC: fsl: fsl_audmix: Validate written enum values

Maher Sanalla <[email protected]>
RDMA/mlx5: Fix undefined shift of user RQ WQE size

Maxwell Doose <[email protected]>
fs: efs: remove unneeded debug prints

Louis Scalbert <[email protected]>
bonding: 3ad: fix mux port state on oper down

longlong yan <[email protected]>
tools/virtio: check mmap return value in vringh_test

Qihang Tang <[email protected]>
vhost/vdpa: validate virtqueue index in mmap and fault paths

Jason Gunthorpe <[email protected]>
IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified

David Laight <[email protected]>
fbdev: sm501fb: Fix buffer errors in OF binding code

Filipe Manana <[email protected]>
btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()

Wolfram Sang <[email protected]>
hwspinlock: qcom: avoid uninitialized struct members

Luca Leonardo Scorcia <[email protected]>
pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39

Luca Leonardo Scorcia <[email protected]>
pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39

Al Viro <[email protected]>

    configfs: fix lockless traversals of ->s_children

Dmitry Vyukov <[email protected]>
firmware_loader: Fix recursive lock in device_cache_fw_images()

Felix Gu <[email protected]>
spi: ep93xx: fix double-free of zeropage on DMA setup failure

Pengjie Zhang <[email protected]>
cpufreq: Documentation: fix conservative governor freq_step description

Yuho Choi <[email protected]>
ACPI: IPMI: Fix message kref handling on dead device

Rui Qi <[email protected]>

    riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe

Tristan Madani <[email protected]>
wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication

Leon Hwang <[email protected]>
bpf: Update transport_header when encapsulating UDP tunnel in lwt

Pablo Neira Ayuso <[email protected]>
netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp

Fernando Fernandez Mancera <[email protected]>
netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock

Fernando Fernandez Mancera <[email protected]>
netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures

Joseph Qi <[email protected]>
ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()

Zhang Cen <[email protected]>
ocfs2/dlm: require a ref for locking_state debugfs open

Zhang Cen <[email protected]>
ocfs2: reject FITRIM ranges shorter than a cluster

Dmitry Antipov <[email protected]>
ocfs2: fix buffer head management in ocfs2_read_blocks()

Zhang Cen <[email protected]>
ocfs2: rebase copied fsdlm LVB pointers in locking_state

Sandipan Das <[email protected]>
perf/x86/amd/core: Always use the NMI latency mitigation

Woojin Ji <[email protected]>
bpftool: Use libbpf error code for flow dissector query

Alexander Potapenko <[email protected]>

    lib/test_meminit: use && for bools

Sang-Heon Jeon <[email protected]>
mm/fake-numa: fix under-allocation detection in uniform split

Dan Carpenter <[email protected]>
scsi: pm8001: Fix error code in non_fatal_log_show()

Martin Wilck <[email protected]>
scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"

Yuho Choi <[email protected]>
ARM: imx31: Fix IIM mapping leak in revision check

Yuho Choi <[email protected]>
ARM: imx3: Fix CCM node reference leak

Zhang Yi <[email protected]>
ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback

Renjiang Han <[email protected]>
media: qcom: venus: drop extra padding in NV12 raw size calculation

Jessica Zhang <[email protected]>
drm/msm/dp: Fix the ISR_* enum values

Jessica Zhang <[email protected]>
drm/msm/dp: fix HPD state status bit shift value

Tetsuo Handa <[email protected]>

    ocfs2: kill osb->system_file_mutex lock

ZhengYuan Huang <[email protected]>
ocfs2: don't BUG_ON an invalid journal dinode

Dan Carpenter <[email protected]>
rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()

Felix Gu <[email protected]>
drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()

Jiayuan Chen <[email protected]>
net/sched: cls_bpf: prevent unbounded recursion in offload rollback

Eric Dumazet <[email protected]>
ipv6: guard against possible NULL deref in __in6_dev_stats_get()

Breno Leitao <[email protected]>
workqueue: drop spurious '*' from print_worker_info() fn declaration

Nilay Shroff <[email protected]>
nvme-multipath: fix flex array size in struct nvme_ns_head

Miquel Raynal <[email protected]>
mtd: spi-nor: Drop duplicate Kconfig dependency

Maciej W. Rozycki <[email protected]>
MIPS: DEC: Remove do_IRQ() call indirection

Maciej W. Rozycki <[email protected]>
MIPS: Fix big-endian stack argument fetching in o32 wrapper

Jiakai Xu <[email protected]>
PM: sleep: Use complete() in device_pm_sleep_init()

Lianfa Weng <[email protected]>
RDMA/hns: Fix warning in poll cq direct mode

Guangshuo Li <[email protected]>
IB/mlx4: Fix refcount leak in add_port() error path

Samuel Holland <[email protected]>
bus: sunxi-rsb: Always check register address validity

Ronaldo Nunez <[email protected]>
pwm: imx27: Fix variable truncation in .apply()

Lifeng Zheng <[email protected]>
cpufreq: conservative: Simplify frequency limit handling

Pengjie Zhang <[email protected]>
cpufreq: Documentation: fix sampling_down_factor range

Stepan Ionichev <[email protected]>
device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()

Sven Püschel <[email protected]>
media: rockchip: rga: fix too small buffer size

Eric Dumazet <[email protected]>

    net/sched: sch_drr: annotate data-races around cl->deficit

Greg Kroah-Hartman <[email protected]>
sysfs: clamp show() return value in sysfs_kf_read()

Zilin Guan <[email protected]>
media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()

Sara Venkatesh <[email protected]>
RDMA/srpt: fix integer overflow in immediate data length check

Prathamesh Deshpande <[email protected]>
RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference

Alexander Chesnokov <[email protected]>
RDMA/hns: Fix arithmetic overflow in calc_hem_config()

Linmao Li <[email protected]>
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD

Eric Dumazet <[email protected]>
net/sched: sch_htb: annotate data-races (I)

Sean Christopherson <[email protected]>
crypto: ccp - Treat zero-length cert chain as query for blob lengths

Eric Dumazet <[email protected]>
net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()

Rafael J. Wysocki <[email protected]>
thermal: hwmon: Fix critical temperature attribute removal

Cristian Marussi <[email protected]>
clk: scmi: Fix clock rate rounding

Sean Christopherson <[email protected]>
iommu/amd: Fix a stale comment about which legacy mode is user visible

Weiming Shi <[email protected]>
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents

Thorsten Blum <[email protected]>
crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve

Lothar Rubusch <[email protected]>
crypto: atmel-sha204a - fix blocking and non-blocking rng logic

Felix Gu <[email protected]>
pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path

Samuel Holland <[email protected]>
media: cedrus: Fix failure to clean up hardware on probe failure

Felix Gu <[email protected]>
watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure

Jihed Chaibi <[email protected]>
ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint

Tristan Madani <[email protected]>
wifi: ath9k: fix OOB access from firmware tx status queue ID

Xingjing Deng <[email protected]>
kconfig: fix potential NULL pointer dereference in conf_askvalue

Tristan Madani <[email protected]>
wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer

Danilo Krummrich <[email protected]>

    driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()

Yuho Choi <[email protected]>
drm/radeon: fix memory leak in radeon_ring_restore() on lock failure

Tomi Valkeinen <[email protected]>
drm/tidss: Drop extra drm_mode_config_reset() call

David Howells <[email protected]>
afs: Fix further netns teardown to cancel the preallocation charger

Matvey Kovalev <[email protected]>
afs: fix NULL pointer dereference in afs_get_tree()

David Howells <[email protected]>
afs: Fix netns teardown to cancel the preallocation charger

Matthias Feser <[email protected]>
serial: 8250_omap: clear rx_running on zero-length DMA completes

Stephan Gerhold <[email protected]>
serial: msm: Disable DMA for kernel console UART

Ricardo Ribalda <[email protected]>
media: uvcvideo: Fix buffer sequence in frame gaps

Ricardo Ribalda <[email protected]>
media: uvcvideo: Avoid partial metadata buffers

Eric Biggers <[email protected]>
crypto: af_alg - Remove zero-copy support from skcipher and aead

Yichong Chen <[email protected]>
tools/mm/slabinfo: fix total_objects attribute name

Muhammet Kaan KILINÇ <[email protected]>

    crypto: algif_skcipher - force synchronous processing on trees without ctx->state

Adam Li <[email protected]>
sched/fair: Only update stats for allowed CPUs when looking for dst group

Joanne Koong <[email protected]>
fuse: re-lock request before returning from fuse_ref_folio()

Alberto Ruiz <[email protected]>
fuse: fix device node leak in cuse_process_init_reply()

Michael Bommarito <[email protected]>
RDMA/siw: bound Read Response placement to the RREAD length

Dmitry Torokhov <[email protected]>
Input: maplecontrol - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: maplemouse - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: maple_keyb - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: mms114 - fix multi-touch slot corruption

Florian Fuchs <[email protected]>
Input: maplemouse - fix NULL pointer dereference in open()

Bryam Vargas <[email protected]>
Input: touchwin - reset the packet index on every complete packet

Bryam Vargas <[email protected]>
Input: iforce - bound the device-reported force-feedback effect index

Bryam Vargas <[email protected]>
Input: goodix - clamp the device-reported contact count

Ranjan Kumar <[email protected]>
Input: elan_i2c - prevent division by zero and arithmetic underflow

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count

Haoxiang Li <[email protected]>
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure

Guillermo Rodríguez <[email protected]>
i2c: stm32f7: truncate clock period instead of rounding it

Mikhail Gavrilov <[email protected]>
udmabuf: fix DMA direction mismatch in release_udmabuf()

Sean Christopherson <[email protected]>
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode

Bryam Vargas <[email protected]>
exfat: bound uniname advance in exfat_find_dir_entry()

Benjamin Coddington <[email protected]>
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

Huihui Huang <[email protected]>
tracing: Prevent out-of-bounds read in glob matching

Carlos Song <[email protected]>
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path

Carlos Song <[email protected]>
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()

Paul Louvel <[email protected]>
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header

Eric Biggers <[email protected]>
crypto: drbg - Fix the fips_enabled priority boost

Eric Biggers <[email protected]>
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels

Eric Biggers <[email protected]>
crypto: drbg - Fix returning success on failure in CTR_DRBG

Ruijie Li <[email protected]>
crypto: pcrypt - restore callback for non-parallel fallback

Anastasia Tishchenko <[email protected]>
crypto: ecc - Fix carry overflow in vli multiplication

Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps again

Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps

Bryam Vargas <[email protected]>
isofs: bound Rock Ridge symlink components to the SL record

Bryam Vargas <[email protected]>
partitions: aix: bound the pp_count scan to the ppe array

Mikulas Patocka <[email protected]>
dm-ioctl: report an error if a device has no table

Bryam Vargas <[email protected]>
udf: validate sparing table length as an entry count, not a byte count

Bryam Vargas <[email protected]>
udf: validate VAT header length against the VAT inode size

Michael Bommarito <[email protected]>
udf: validate free block extents against the partition length

Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check

Maxwell Doose <[email protected]>
iio: adc: spear: Initialize completion before requesting IRQ

Madhu M <[email protected]>
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode

Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Invert DisplayPort role assignment

Badhri Jagan Sridharan <[email protected]>
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()

Sam Day <[email protected]>
usbip: vudc: fix NULL deref in vep_dequeue()

Yichong Chen <[email protected]>
usbip: tools: support SuperSpeedPlus devices

Xu Rao <[email protected]>
USB: usb-storage: ene_ub6250: restore media-ready check

Johan Hovold <[email protected]>
USB: ulpi: fix memory leak on registration failure

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix hard lockup on disconnect

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix broken rx after throttle

Fabio Porcedda <[email protected]>
USB: serial: option: add Telit Cinterion FE990D50 compositions

Haoxiang Li <[email protected]>
usb: mtu3: unmap request DMA on queue failure

Myeonghun Pak <[email protected]>
USB: misc: uss720: unregister parport on probe failure

Xu Rao <[email protected]>
USB: storage: include US_FL_NO_SAME in quirks mask

Myeonghun Pak <[email protected]>
usb: sl811-hcd: disable controller wakeup on remove

Johan Hovold <[email protected]>
USB: legousbtower: fix use-after-free on disconnect race

Erich E. Hoover <[email protected]>
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD

Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect

Johan Hovold <[email protected]>
USB: ldusb: fix use-after-free on disconnect race

Johan Hovold <[email protected]>
USB: idmouse: fix use-after-free on disconnect race

Maoyi Xie <[email protected]>
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler

Rodrigo Lugathe da Conceição Alves <[email protected]>
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub

Jared Baldridge <[email protected]>
usb: cdc_acm: Add quirk for Uniden BC125AT scanner

Maoyi Xie <[email protected]>
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()

Deepanshu Kartikey <[email protected]>
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers

Tristan Madani <[email protected]>
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read

Srinivas Pandruvada <[email protected]>
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads

Maoyi Xie <[email protected]>
HID: lg-g15: cancel pending work on remove to fix a use-after-free

Myeonghun Pak <[email protected]>
HID: wacom: stop hardware after post-start probe failures

WenTao Liang <[email protected]>
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

Yuho Choi <[email protected]>
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation

Tianxiang Chen <[email protected]>
cpufreq: Fix hotplug-suspend race during reboot

Steven Rostedt <[email protected]>
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT

Sebastian Andrzej Siewior <[email protected]>
net: Drop the lock in skb_may_tx_timestamp()

Muhammad Bilal <[email protected]>
Bluetooth: L2CAP: validate option length before reading conf opt value

Yousef Alhouseen <[email protected]>
Bluetooth: fix UAF in bt_accept_dequeue()

Yousef Alhouseen <[email protected]>
Bluetooth: bnep: pin L2CAP connection during netdev registration

Xiang Mei <[email protected]>
netfilter: ebtables: terminate table name before find_table_lock()

Florian Westphal <[email protected]>
netfilter: ebtables: module names must be null-terminated

Andrei Kuchynski <[email protected]>
mfd: cros_ec: Delay dev_set_drvdata() until probe success

Wyatt Feng <[email protected]>
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Yuyang Huang <[email protected]>
ipv4: igmp: remove multicast group from hash table on device destruction

Runyu Xiao <[email protected]>
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item

Runyu Xiao <[email protected]>
gpio: eic-sprd: use raw_spinlock_t in the irq startup path

Thomas Gleixner <[email protected]>
debugobjects: Plug race against a concurrent OOM disable

Chi Wang <[email protected]>
audit: Fix data races of skb_queue_len() readers on audit_queue

Zijing Yin <[email protected]>
net: af_key: initialize alg_key_len for IPComp states

Dawei Feng <[email protected]>
crypto: amlogic - avoid double cleanup in meson_crypto_probe()

Ricardo Ribalda <[email protected]>
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe

Samuel Page <[email protected]>
tipc: fix out-of-bounds read in broadcast Gap ACK blocks

Yizhou Zhao <[email protected]>
6lowpan: fix NHC entry use-after-free on error path

Alan Stern <[email protected]>
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()

Michael Bommarito <[email protected]>
hwrng: virtio: clamp device-reported used.len at copy_data()

Johan Hovold <[email protected]>
virtio-mmio: fix device release warning on module unload

Xiang Mei <[email protected]>
netfilter: ipset: fix race between dump and ip_set_list resize

Ratheesh Kannoth <[email protected]>
PCI: host-common: Request bus reassignment when not probe-only

Mahesh Vaidya <[email protected]>
PCI: altera: Do not dispose parent IRQ mapping

胡连勤 <[email protected]>
usb: xhci: Fix sleep in atomic context in xhci_free_streams()

Carlos Llamas <[email protected]>
binder: fix UAF in binder_thread_release()

Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on registration failure

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Roll back quirk control caches on write errors

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()

Darvell Long <[email protected]>
ALSA: usb-audio: avoid kobject path lookup in DualSense match

Maoyi Xie <[email protected]>
ALSA: firewire: isight: bound the sample count to the packet payload

Zhao Dongdong <[email protected]>
ALSA: es1938: check snd_ctl_new1() return value

Maoyi Xie <[email protected]>
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser

Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start

Andy Shevchenko <[email protected]>
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call

Javier Carrasco <[email protected]>
iio: light: veml6030: fix channel type when pushing events

Joshua Crofts <[email protected]>
iio: light: opt3001: fix missing state reset on timeout

Biren Pandya <[email protected]>
iio: light: gp2ap002: fix runtime PM leak on read error

Vidhu Sarwal <[email protected]>
iio: light: al3010: fix incorrect scale for the highest gain range

Andreas Kempe <[email protected]>
iio: imu: st_lsm6dsx: deselect shub page before reading whoami

Runyu Xiao <[email protected]>
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ

Stepan Ionichev <[email protected]>
iio: gyro: bmg160: wait full startup time after mode change at probe

Stepan Ionichev <[email protected]>
iio: gyro: bmg160: bail out when bandwidth/filter is not in table

Lars-Peter Clausen <[email protected]>
iio: event: Fix event FIFO reset race

Maxwell Doose <[email protected]>
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug

Pengpeng Hou <[email protected]>
iio: adc: ti-ads124s08: Return reset GPIO lookup errors

Maxwell Doose <[email protected]>
iio: adc: lpc32xx: Initialize completion before requesting IRQ

Biren Pandya <[email protected]>
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error

Bryam Vargas <[email protected]>
iio: accel: bmc150: clamp the device-reported FIFO frame count

Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check for header

Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check to response query

Michal Kosiorek <[email protected]>
xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

Fan Wu <[email protected]>
hdlc_ppp: sync per-proto timers before freeing hdlc state

Johan Hovold <[email protected]>
i2c: core: fix adapter registration race

Johan Hovold <[email protected]>
i2c: core: fix adapter debugfs creation

Johan Hovold <[email protected]>
i2c: core: fix NULL-deref on adapter registration failure

Johan Hovold <[email protected]>
i2c: core: fix hang on adapter registration failure

Johan Hovold <[email protected]>
i2c: core: fix irq domain leak on adapter registration failure

Mingyu Wang <[email protected]>
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()

Michael Bommarito <[email protected]>
NFSv4/flexfiles: reject zero filehandle version count

Keshav Verma <[email protected]>
f2fs: fix listxattr handling of corrupted xattr entries

Ruipeng Qi <[email protected]>
f2fs: fix potential deadlock in f2fs_balance_fs()

Bryam Vargas <[email protected]>
f2fs: bound i_inline_xattr_size for non-inline-xattr inodes

Wenjie Qi <[email protected]>
f2fs: validate orphan inode entry count

Sunmin Jeong <[email protected]>
f2fs: fix to round down start offset of fallocate for pin file

Jaegeuk Kim <[email protected]>
f2fs: adjust zone capacity when considering valid block count

Bryam Vargas <[email protected]>
apparmor: mediate the implicit connect of TCP fast open sendmsg

Maoyi Xie <[email protected]>
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink

Ruslan Valiyev <[email protected]>
apparmor: fix use-after-free in rawdata dedup loop

Yiming Qian <[email protected]>
net: skmsg: preserve sg.copy across SG transforms

Eric Dumazet <[email protected]>
skmsg: convert struct sk_msg_sg::copy to a bitmap

Xiang Mei <[email protected]>
netfilter: nf_log: validate MAC header was set before dumping it

Krishna chaitanya chundru <[email protected]>
bus: mhi: host: Add alignment check for event ring read pointer

Florian Fainelli <[email protected]>
perf trace beauty fcntl: Fix build with older kernel headers

Sean Christopherson <[email protected]>
KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()

Lad Prabhakar <[email protected]>
mmc: renesas_sdhi: Add quirk entry for RZ/G2H SoC

NeilBrown <[email protected]>
nfsd: change nfs4_client_to_reclaim() to allocate data

NeilBrown <[email protected]>
nfsd: move name lookup out of nfsd4_list_rec_dir()

Jiasheng Jiang <[email protected]>
clk: imx: Add check for kcalloc

Kiryl Shutsemau <[email protected]>
userfaultfd: gate must_wait writability check on pte_present()

Jeff Layton <[email protected]>
nfsd: reset write verifier on deferred writeback errors

Chris Mason <[email protected]>
nfsd: release layout stid on setlease failure

Chaitanya Kulkarni <[email protected]>
nvmet-tcp: fix race between ICReq handling and queue teardown

-------------

Diffstat:

 Documentation/admin-guide/pm/cpufreq.rst           |    6 +-
 Documentation/crypto/userspace-if.rst              |   31 +-
 Documentation/driver-api/pci/pci.rst               |    3 +
 Makefile                                           |    4 +-
 arch/alpha/kernel/pci-sysfs.c                      |   13 +-
 arch/arm/boot/dts/am335x-sl50.dts                  |    4 +-
 arch/arm/mach-davinci/board-da850-evm.c            |   12 +-
 arch/arm/mach-imx/cpu-imx31.c                      |    9 +-
 arch/arm/mach-imx/mm-imx3.c                        |    2 +
 arch/arm64/boot/dts/qcom/sdm630.dtsi               |    9 +-
 arch/arm64/kernel/hw_breakpoint.c                  |    9 +
 arch/arm64/kvm/vgic/vgic-its.c                     |   15 +-
 arch/arm64/kvm/vgic/vgic.c                         |   11 +-
 arch/mips/dec/int-handler.S                        |    2 +-
 arch/mips/dec/prom/init.c                          |    6 +-
 arch/mips/dec/setup.c                              |    6 -
 arch/mips/fw/lib/call_o32.S                        |    2 +-
 arch/mips/include/asm/dec/prom.h                   |   15 +-
 arch/mips/mm/init.c                                |   12 +-
 arch/mips/sgi-ip22/ip22-gio.c                      |    7 +-
 arch/powerpc/kexec/core_64.c                       |    4 +-
 arch/powerpc/perf/core-fsl-emb.c                   |    3 +-
 arch/powerpc/platforms/cell/spufs/file.c           |    6 +-
 arch/powerpc/platforms/powernv/setup.c             |    3 +-
 arch/riscv/kernel/stacktrace.c                     |    2 +-
 arch/sparc/kernel/led.c                            |    2 +-
 arch/x86/boot/compressed/acpi.c                    |    7 +-
 arch/x86/boot/early_serial_console.c               |   11 +-
 arch/x86/events/amd/core.c                         |    6 +-
 arch/x86/kernel/cpu/mce/therm_throt.c              |    7 +-
 arch/x86/kvm/vmx/vmx.c                             |    3 +-
 arch/x86/mm/numa_emulation.c                       |   17 +-
 arch/x86/platform/olpc/olpc-xo15-sci.c             |    1 +
 block/partitions/aix.c                             |    9 +
 certs/common.c                                     |    2 +-
 crypto/af_alg.c                                    |   54 +-
 crypto/algif_skcipher.c                            |   49 +-
 crypto/asymmetric_keys/verify_pefile.c             |    2 +
 crypto/drbg.c                                      |    4 +-
 crypto/ecc.c                                       |   31 +-
 crypto/ecrdsa.c                                    |    2 +-
 crypto/pcrypt.c                                    |    4 +
 crypto/rng.c                                       |   11 +
 drivers/acpi/acpi_ipmi.c                           |    2 +-
 drivers/acpi/nfit/core.c                           |   15 +-
 drivers/acpi/resource.c                            |    6 +-
 drivers/android/binder.c                           |   19 +-
 drivers/ata/pata_pxa.c                             |    1 +
 drivers/ata/sata_gemini.c                          |    2 +-
 drivers/base/firmware_loader/main.c                |    3 +-
 drivers/base/power/main.c                          |    6 +-
 drivers/base/property.c                            |    4 +-
 drivers/block/drbd/drbd_receiver.c                 |    5 +
 drivers/bluetooth/bpa10x.c                         |    8 +-
 drivers/bluetooth/btintel.c                        |  105 +-
 drivers/bluetooth/btintel.h                        |    5 +-
 drivers/bluetooth/btrtl.c                          |    5 +-
 drivers/bluetooth/btusb.c                          |   44 +-
 drivers/bluetooth/hci_intel.c                      |    7 +-
 drivers/bus/mhi/host/main.c                        |    3 +-
 drivers/bus/sunxi-rsb.c                            |    3 +
 drivers/char/hw_random/virtio-rng.c                |   23 +-
 drivers/char/tlclk.c                               |    4 +
 drivers/char/tpm/eventlog/tpm1.c                   |    4 +-
 drivers/char/tpm/tpm-dev.c                         |    2 +-
 drivers/char/tpm/tpmrm-dev.c                       |    2 +-
 drivers/clk/clk-scmi.c                             |    4 +-
 drivers/clk/imx/clk.c                              |    2 +
 drivers/clk/qcom/a53-pll.c                         |    2 +-
 drivers/cpufreq/cpufreq.c                          |    2 +
 drivers/cpufreq/cpufreq_conservative.c             |   12 +-
 drivers/cpufreq/intel_pstate.c                     |    6 +-
 drivers/cpufreq/pcc-cpufreq.c                      |    2 +
 drivers/crypto/amcc/crypto4xx_alg.c                |  114 +-
 drivers/crypto/amcc/crypto4xx_core.c               |  148 +-
 drivers/crypto/amcc/crypto4xx_core.h               |   15 +-
 drivers/crypto/amcc/crypto4xx_reg_def.h            |   19 +-
 drivers/crypto/amcc/crypto4xx_sa.h                 |   18 +-
 drivers/crypto/amcc/crypto4xx_trng.h               |    2 +-
 drivers/crypto/amlogic/amlogic-gxl-core.c          |    2 +-
 drivers/crypto/atmel-ecc.c                         |    2 +-
 drivers/crypto/atmel-sha204a.c                     |   29 +-
 drivers/crypto/caam/caamalg.c                      |   12 +-
 drivers/crypto/caam/caamalg_qi.c                   |   12 +-
 drivers/crypto/caam/caamalg_qi2.c                  |   12 +-
 drivers/crypto/caam/caamhash.c                     |    4 +-
 drivers/crypto/caam/key_gen.c                      |    4 +-
 drivers/crypto/cavium/cpt/cptvf_reqmanager.c       |    4 +-
 drivers/crypto/ccp/sev-dev.c                       |    3 +-
 drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c |    4 +-
 drivers/crypto/qat/qat_common/adf_accel_devices.h  |    2 +
 drivers/crypto/qat/qat_common/adf_aer.c            |    7 +-
 drivers/crypto/qat/qat_common/adf_common_drv.h     |    4 +
 drivers/crypto/qat/qat_common/adf_isr.c            |   18 +
 drivers/crypto/qat/qat_common/adf_pf2vf_msg.c      |   22 +
 drivers/crypto/qat/qat_common/adf_sriov.c          |   38 +-
 drivers/crypto/qat/qat_common/qat_asym_algs.c      |   10 +-
 drivers/crypto/talitos.c                           |   26 +-
 drivers/dma-buf/udmabuf.c                          |    5 +-
 drivers/dma/dmaengine.c                            |    3 +-
 drivers/gpio/gpio-eic-sprd.c                       |    8 +-
 drivers/gpio/gpio-htc-egpio.c                      |    6 +-
 drivers/gpio/gpio-mvebu.c                          |    5 +-
 drivers/gpio/gpio-palmas.c                         |   19 +
 drivers/gpio/gpio-pca953x.c                        |   11 +-
 drivers/gpio/gpio-timberdale.c                     |    2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |    4 +-
 drivers/gpu/drm/drm_edid.c                         |    8 +
 drivers/gpu/drm/i2c/sil164_drv.c                   |    7 -
 drivers/gpu/drm/msm/dp/dp_display.c                |    4 +-
 drivers/gpu/drm/msm/dp/dp_reg.h                    |    4 +-
 drivers/gpu/drm/radeon/radeon_ring.c               |    4 +-
 drivers/gpu/drm/tegra/dc.c                         |    4 +-
 drivers/gpu/drm/tidss/tidss_kms.c                  |    2 -
 drivers/gpu/host1x/bus.c                           |    2 +-
 drivers/hid/hid-appleir.c                          |   45 +-
 drivers/hid/hid-core.c                             |    7 +
 drivers/hid/hid-lg-g15.c                           |   16 +
 drivers/hid/hid-logitech-hidpp.c                   |    1 -
 drivers/hid/hid-multitouch.c                       |   32 +-
 drivers/hid/hid-picolcd_core.c                     |    3 +-
 drivers/hid/hid-sensor-hub.c                       |   77 +-
 drivers/hid/wacom_sys.c                            |   12 +-
 drivers/hwmon/asus_atk0110.c                       |    3 +
 drivers/hwmon/pmbus/adm1275.c                      |    2 +-
 drivers/hwmon/w83627hf.c                           |    4 +
 drivers/hwmon/w83793.c                             |    1 +
 drivers/hwspinlock/qcom_hwspinlock.c               |    5 +-
 .../hwtracing/coresight/coresight-cti-platform.c   |    1 +
 drivers/hwtracing/coresight/coresight-etb10.c      |    6 +-
 drivers/i2c/busses/i2c-mlxbf.c                     |    4 +-
 drivers/i2c/busses/i2c-mt65xx.c                    |    2 +-
 drivers/i2c/busses/i2c-stm32f7.c                   |    9 +-
 drivers/i2c/i2c-core-base.c                        |   82 +-
 drivers/i3c/master.c                               |   19 +-
 drivers/iio/accel/bmc150-accel-core.c              |    2 +
 drivers/iio/accel/kxsd9.c                          |    5 +-
 drivers/iio/accel/mma8452.c                        |    2 +
 drivers/iio/adc/lpc32xx_adc.c                      |    4 +-
 drivers/iio/adc/spear_adc.c                        |    4 +-
 drivers/iio/adc/ti-ads124s08.c                     |    3 +-
 drivers/iio/chemical/scd30_core.c                  |   19 +-
 drivers/iio/common/Kconfig                         |    1 +
 drivers/iio/common/Makefile                        |    1 +
 drivers/iio/common/inv_sensors/Kconfig             |    7 +
 drivers/iio/common/inv_sensors/Makefile            |    6 +
 .../inv_sensors/inv_sensors_timestamp.c}           |  120 +-
 drivers/iio/common/st_sensors/st_sensors_core.c    |   23 +-
 drivers/iio/gyro/bmg160_core.c                     |   16 +-
 drivers/iio/imu/adis_trigger.c                     |    2 +-
 drivers/iio/imu/bmi160/bmi160_core.c               |    3 +-
 drivers/iio/imu/inv_icm42600/Kconfig               |    1 +
 drivers/iio/imu/inv_icm42600/Makefile              |    1 -
 drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c  |   35 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c |   61 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h |    3 +
 drivers/iio/imu/inv_icm42600/inv_icm42600_core.c   |   24 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c   |   35 +-
 .../iio/imu/inv_icm42600/inv_icm42600_timestamp.h  |   85 -
 drivers/iio/imu/inv_mpu6050/Kconfig                |    1 +
 drivers/iio/imu/inv_mpu6050/inv_mpu_core.c         |   30 +-
 drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h          |   18 +-
 drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c         |   85 +-
 drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c      |   11 +-
 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c       |   21 +-
 drivers/iio/industrialio-event.c                   |    5 +-
 drivers/iio/light/al3010.c                         |    2 +-
 drivers/iio/light/gp2ap002.c                       |    2 +-
 drivers/iio/light/opt3001.c                        |    6 +-
 drivers/iio/light/si1133.c                         |   14 +-
 drivers/iio/light/veml6030.c                       |    8 +-
 drivers/iio/magnetometer/ak8975.c                  |   15 +
 drivers/iio/orientation/hid-sensor-rotation.c      |   40 +-
 drivers/iio/temperature/ltc2983.c                  |    5 +-
 drivers/infiniband/hw/hns/hns_roce_hem.c           |    8 +-
 drivers/infiniband/hw/hns/hns_roce_main.c          |    2 +-
 drivers/infiniband/hw/mlx4/mlx4_ib.h               |    1 +
 drivers/infiniband/hw/mlx4/mr.c                    |    9 +-
 drivers/infiniband/hw/mlx4/sysfs.c                 |   45 +-
 drivers/infiniband/hw/mlx5/devx.c                  |   30 +-
 drivers/infiniband/hw/mlx5/qp.c                    |   11 +-
 drivers/infiniband/sw/siw/siw_qp_rx.c              |    9 +
 drivers/infiniband/ulp/srpt/ib_srpt.c              |    5 +-
 drivers/input/joystick/iforce/iforce-packets.c     |   18 +-
 drivers/input/joystick/maplecontrol.c              |    3 +-
 drivers/input/keyboard/maple_keyb.c                |    4 +-
 drivers/input/misc/ims-pcu.c                       |  115 +-
 drivers/input/mouse/elan_i2c_core.c                |   36 +-
 drivers/input/mouse/maplemouse.c                   |    9 +-
 drivers/input/rmi4/rmi_bus.c                       |    4 +-
 drivers/input/rmi4/rmi_f30.c                       |    2 +-
 drivers/input/rmi4/rmi_f3a.c                       |    2 +-
 drivers/input/touchscreen/goodix.c                 |    3 +-
 drivers/input/touchscreen/mms114.c                 |    2 +-
 drivers/input/touchscreen/touchwin.c               |   15 +-
 drivers/iommu/amd/amd_iommu_types.h                |   11 +-
 drivers/irqchip/irq-crossbar.c                     |   10 +-
 drivers/leds/leds-lm3601x.c                        |   11 +-
 drivers/leds/leds-lm3697.c                         |    4 +-
 drivers/leds/uleds.c                               |    3 +-
 drivers/md/dm-bufio.c                              |    4 +-
 drivers/md/dm-era-target.c                         |   10 +-
 drivers/md/dm-ioctl.c                              |    7 +-
 drivers/md/dm-log.c                                |    3 +
 drivers/md/dm-stats.c                              |   10 +-
 drivers/md/dm-thin-metadata.c                      |   67 +-
 drivers/md/dm-verity-target.c                      |    2 +-
 drivers/media/platform/qcom/venus/helpers.c        |    4 +-
 drivers/media/platform/rockchip/rga/rga-hw.c       |    2 +-
 drivers/media/platform/rockchip/rga/rga-hw.h       |    2 +-
 drivers/media/usb/uvc/uvc_video.c                  |   30 +-
 drivers/memstick/core/ms_block.c                   |    4 +
 drivers/mfd/cros_ec_dev.c                          |    3 +-
 drivers/mfd/sm501.c                                |    4 +-
 drivers/mfd/tps6586x.c                             |    2 +-
 drivers/mmc/host/renesas_sdhi_core.c               |    1 +
 drivers/mmc/host/vub300.c                          |   26 +-
 drivers/mtd/devices/slram.c                        |   22 +-
 drivers/mtd/maps/vmu-flash.c                       |    1 +
 drivers/mtd/nand/onenand/onenand_samsung.c         |    7 +-
 drivers/mtd/nand/raw/fsl_ifc_nand.c                |    9 +-
 drivers/mtd/nand/raw/lpc32xx_mlc.c                 |   12 +-
 drivers/mtd/nand/raw/lpc32xx_slc.c                 |   12 +-
 drivers/mtd/nand/raw/nand_base.c                   |    2 +-
 drivers/mtd/spi-nor/Kconfig                        |    1 -
 drivers/net/bonding/bond_3ad.c                     |    1 +
 drivers/net/dsa/sja1105/sja1105_ptp.c              |    2 +-
 drivers/net/ethernet/amazon/ena/ena_netdev.c       |   23 +-
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c    |    3 +-
 .../ethernet/cavium/liquidio/cn23xx_pf_device.c    |   18 +-
 drivers/net/ethernet/chelsio/cxgb4/t4_hw.c         |    8 -
 drivers/net/ethernet/freescale/fman/fman.c         |    4 +-
 drivers/net/ethernet/marvell/mvneta.c              |    3 +
 .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c   |    1 +
 .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c |    3 +-
 .../net/ethernet/mellanox/mlxsw/spectrum_router.c  |    1 +
 drivers/net/ethernet/qlogic/qede/qede_fp.c         |    5 +
 drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c |    5 +
 drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h |   20 +
 .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c   |   53 +-
 drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h    |   22 +-
 .../ethernet/qualcomm/rmnet/rmnet_map_command.c    |   11 +-
 .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c   |  334 +++-
 drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.c    |    9 +-
 drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.h    |    1 +
 drivers/net/ethernet/sun/sungem.c                  |   13 +-
 drivers/net/ieee802154/ca8210.c                    |    9 +-
 drivers/net/macsec.c                               |    7 +-
 drivers/net/usb/gl620a.c                           |    6 +-
 drivers/net/usb/kalmia.c                           |    8 +
 drivers/net/usb/lan78xx.c                          |   18 +-
 drivers/net/usb/net1080.c                          |    2 +-
 drivers/net/virtio_net.c                           |    3 +
 drivers/net/wan/hdlc_ppp.c                         |   15 +-
 drivers/net/wireless/ath/ath9k/xmit.c              |    5 +
 drivers/net/wireless/ath/wcn36xx/smd.c             |    6 +
 drivers/net/wireless/marvell/mwifiex/join.c        |    1 -
 drivers/net/wireless/ralink/rt2x00/rt2x00dev.c     |   12 +-
 drivers/net/wireless/realtek/rtw88/pci.c           |    5 +
 drivers/nvdimm/btt.c                               |   14 +-
 drivers/nvme/host/core.c                           |    2 +-
 drivers/nvme/target/rdma.c                         |   18 +-
 drivers/nvme/target/tcp.c                          |   33 +-
 drivers/pci/Makefile                               |    2 +-
 drivers/pci/controller/dwc/pci-imx6.c              |    5 +-
 drivers/pci/controller/dwc/pcie-designware-host.c  |    2 +-
 .../pci/controller/mobiveil/pcie-mobiveil-host.c   |    8 +-
 drivers/pci/controller/pci-host-common.c           |    4 +
 drivers/pci/controller/pcie-altera-msi.c           |    2 +-
 drivers/pci/controller/pcie-altera.c               |   32 +-
 drivers/pci/controller/pcie-mediatek.c             |  117 +-
 drivers/pci/controller/pcie-rcar-host.c            |    1 -
 drivers/pci/controller/pcie-xilinx-nwl.c           |    2 +-
 drivers/pci/pci.c                                  |  135 --
 drivers/pci/pci.h                                  |    4 +
 drivers/pci/rebar.c                                |  217 +++
 drivers/pci/setup-bus.c                            |  100 +-
 drivers/pci/setup-res.c                            |   53 -
 drivers/pinctrl/mediatek/pinctrl-mt8167.c          |    2 +-
 drivers/pinctrl/mediatek/pinctrl-mt8516.c          |    2 +-
 drivers/pinctrl/sunxi/pinctrl-sunxi.c              |    2 +-
 drivers/platform/x86/xo15-ebook.c                  |    7 +-
 drivers/power/supply/charger-manager.c             |    6 +-
 drivers/pwm/pwm-imx27.c                            |    8 +-
 drivers/rapidio/devices/tsi721.c                   |    3 +-
 drivers/regulator/core.c                           |   29 +-
 drivers/regulator/ltc3676.c                        |   10 +-
 drivers/reset/reset-imx7.c                         |    6 +
 drivers/reset/reset-sunxi.c                        |    4 +-
 drivers/rtc/rtc-abx80x.c                           |    3 +-
 drivers/rtc/rtc-cmos.c                             |    6 +
 drivers/rtc/rtc-ds1307.c                           |   30 +-
 drivers/s390/char/monwriter.c                      |    3 +
 drivers/s390/net/qeth_l3_main.c                    |    6 +-
 drivers/scsi/hpsa.c                                |    4 +
 drivers/scsi/pm8001/pm8001_ctl.c                   |    5 +-
 drivers/scsi/scsi_scan.c                           |    2 +-
 drivers/scsi/scsi_transport_sas.c                  |   60 +-
 drivers/scsi/sg.c                                  |    7 +-
 drivers/scsi/smartpqi/smartpqi_init.c              |    2 +-
 drivers/soc/fsl/qe/qe.c                            |    3 +
 drivers/soc/ti/k3-ringacc.c                        |    4 +-
 drivers/spi/spi-ep93xx.c                           |    1 +
 drivers/spi/spi-fsl-lpspi.c                        |   18 +-
 drivers/spi/spi-sh-msiof.c                         |   10 +-
 drivers/spi/spi-uniphier.c                         |    4 +-
 drivers/spi/spi-xilinx.c                           |   11 +-
 drivers/staging/media/atomisp/pci/atomisp_cmd.c    |    6 +-
 .../media/atomisp/pci/atomisp_compat_css20.c       |    2 +-
 .../atomisp/pci/runtime/isys/src/virtual_isys.c    |   12 +-
 drivers/staging/media/atomisp/pci/sh_css.c         | 1946 +++++++++-----------
 drivers/staging/media/ipu3/ipu3-css-params.c       |    8 +-
 drivers/staging/media/sunxi/cedrus/cedrus.c        |    4 +-
 drivers/staging/most/video/video.c                 |    7 +-
 drivers/staging/nvec/nvec.c                        |    4 +-
 drivers/staging/rtl8723bs/core/rtw_ap.c            |   31 +-
 drivers/staging/rtl8723bs/core/rtw_cmd.c           |   96 +-
 drivers/staging/rtl8723bs/core/rtw_ieee80211.c     |   22 +-
 drivers/staging/rtl8723bs/core/rtw_ioctl_set.c     |    4 +-
 drivers/staging/rtl8723bs/core/rtw_mlme.c          |   16 +-
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |  349 ++--
 drivers/staging/rtl8723bs/core/rtw_recv.c          |    4 +-
 drivers/staging/rtl8723bs/core/rtw_security.c      |    6 +-
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c     |   14 +-
 drivers/staging/rtl8723bs/hal/hal_com_phycfg.c     |   34 -
 drivers/staging/rtl8723bs/hal/odm.c                |   30 -
 drivers/staging/rtl8723bs/hal/odm.h                |    3 -
 drivers/staging/rtl8723bs/hal/odm_EdcaTurboCheck.c |    4 +-
 drivers/staging/rtl8723bs/hal/rtl8723b_hal_init.c  |    1 -
 drivers/staging/rtl8723bs/hal/sdio_halinit.c       |   10 -
 drivers/staging/rtl8723bs/include/hal_phy.h        |    3 -
 drivers/staging/rtl8723bs/include/ieee80211.h      |   22 +-
 drivers/staging/rtl8723bs/include/rtw_mlme_ext.h   |    6 +-
 drivers/staging/rtl8723bs/include/wifi.h           |    1 -
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |  118 +-
 drivers/staging/rtl8723bs/os_dep/ioctl_linux.c     |   41 +-
 drivers/staging/rtl8723bs/os_dep/os_intfs.c        |    6 +-
 drivers/target/target_core_pr.c                    |    8 +-
 drivers/thermal/thermal_hwmon.c                    |    5 +-
 drivers/tty/serial/8250/8250_mid.c                 |   31 +-
 drivers/tty/serial/8250/8250_omap.c                |    3 +-
 drivers/tty/serial/msm_serial.c                    |    3 +-
 drivers/usb/atm/ueagle-atm.c                       |   36 +-
 drivers/usb/class/cdc-acm.c                        |    3 +
 drivers/usb/common/ulpi.c                          |   23 +-
 drivers/usb/core/quirks.c                          |    6 +
 drivers/usb/gadget/composite.c                     |    5 +-
 drivers/usb/gadget/function/f_fs.c                 |    5 +-
 drivers/usb/gadget/function/f_printer.c            |   10 +-
 drivers/usb/gadget/function/rndis.c                |   20 +-
 drivers/usb/host/ehci-sched.c                      |   11 +-
 drivers/usb/host/fotg210-hcd.c                     |    6 +-
 drivers/usb/host/max3421-hcd.c                     |    8 +
 drivers/usb/host/sl811-hcd.c                       |    1 +
 drivers/usb/host/xhci.c                            |   11 +-
 drivers/usb/misc/chaoskey.c                        |    1 -
 drivers/usb/misc/idmouse.c                         |   45 +-
 drivers/usb/misc/iowarrior.c                       |   21 +-
 drivers/usb/misc/ldusb.c                           |   38 +-
 drivers/usb/misc/legousbtower.c                    |   37 +-
 drivers/usb/misc/uss720.c                          |    5 +-
 drivers/usb/mtu3/mtu3_gadget.c                     |    1 +
 drivers/usb/serial/digi_acceleport.c               |   43 +-
 drivers/usb/serial/option.c                        |   16 +
 drivers/usb/storage/ene_ub6250.c                   |    3 +-
 drivers/usb/storage/usb.c                          |    2 +-
 drivers/usb/typec/tcpm/tcpm.c                      |    7 +-
 drivers/usb/typec/ucsi/displayport.c               |    7 +-
 drivers/usb/typec/ucsi/ucsi_ccg.c                  |    2 +-
 drivers/usb/usbip/vudc.h                           |    1 -
 drivers/usb/usbip/vudc_dev.c                       |    4 +-
 drivers/vfio/pci/vfio_pci.c                        |    1 +
 drivers/vhost/vdpa.c                               |   29 +-
 drivers/video/fbdev/aty/radeon_base.c              |    1 +
 drivers/video/fbdev/carminefb.c                    |    1 +
 drivers/video/fbdev/core/fbcon.c                   |    7 +
 drivers/video/fbdev/i740fb.c                       |    1 +
 drivers/video/fbdev/nvidia/nvidia.c                |    1 +
 drivers/video/fbdev/s3fb.c                         |    1 +
 drivers/video/fbdev/sm501fb.c                      |   16 +-
 drivers/video/fbdev/sm712.h                        |    2 +-
 drivers/video/fbdev/tdfxfb.c                       |    1 +
 drivers/video/fbdev/tridentfb.c                    |    1 +
 drivers/video/fbdev/uvesafb.c                      |    4 +-
 drivers/virtio/virtio_mmio.c                       |   26 +-
 drivers/watchdog/sprd_wdt.c                        |    5 +-
 drivers/xen/gntdev.c                               |    8 +-
 fs/afs/cell.c                                      |    2 +
 fs/afs/cmservice.c                                 |    2 -
 fs/afs/rxrpc.c                                     |   11 +-
 fs/afs/super.c                                     |    3 +-
 fs/afs/vl_list.c                                   |   10 +-
 fs/btrfs/extent-tree.c                             |   17 +-
 fs/cifs/cifs_debug.c                               |    2 +-
 fs/cifs/cifsacl.c                                  |    2 +-
 fs/cifs/cifsfs.c                                   |    1 -
 fs/cifs/cifsglob.h                                 |    5 +-
 fs/cifs/cifsproto.h                                |    2 +-
 fs/cifs/connect.c                                  |   17 +-
 fs/cifs/misc.c                                     |    4 +-
 fs/cifs/netmisc.c                                  |    2 +-
 fs/cifs/readdir.c                                  |    6 +-
 fs/cifs/smb2maperror.c                             |   16 +-
 fs/cifs/smb2misc.c                                 |  123 +-
 fs/cifs/smb2ops.c                                  |  107 +-
 fs/cifs/smb2pdu.c                                  |  114 +-
 fs/cifs/smb2pdu.h                                  |  365 +---
 fs/cifs/smb2proto.h                                |    4 +-
 fs/cifs/smb2transport.c                            |   36 +-
 fs/configfs/dir.c                                  |   54 +-
 fs/efs/file.c                                      |   21 +-
 fs/exfat/dir.c                                     |   13 +-
 fs/ext4/ioctl.c                                    |   12 +-
 fs/f2fs/checkpoint.c                               |   13 +-
 fs/f2fs/data.c                                     |   29 +
 fs/f2fs/debug.c                                    |    2 +-
 fs/f2fs/f2fs.h                                     |    1 +
 fs/f2fs/file.c                                     |   15 +-
 fs/f2fs/gc.c                                       |    4 +-
 fs/f2fs/inode.c                                    |   13 +-
 fs/f2fs/segment.c                                  |   14 +-
 fs/f2fs/segment.h                                  |    8 +-
 fs/f2fs/xattr.c                                    |    4 +-
 fs/fs-writeback.c                                  |   20 +-
 fs/fuse/cuse.c                                     |    4 +-
 fs/fuse/dev.c                                      |    2 +-
 fs/hfs/bfind.c                                     |    2 +-
 fs/hfs/bnode.c                                     |   56 +-
 fs/hfs/brec.c                                      |    2 +-
 fs/hfs/btree.c                                     |    2 +-
 fs/hfs/btree.h                                     |   71 +-
 fs/hfs/hfs_fs.h                                    |   83 +-
 fs/hfs/inode.c                                     |    2 +-
 fs/hfsplus/bfind.c                                 |    2 +-
 fs/hfsplus/bnode.c                                 |   62 +-
 fs/hfsplus/brec.c                                  |    2 +-
 fs/hfsplus/btree.c                                 |    2 +-
 fs/hfsplus/hfsplus_fs.h                            |   40 +-
 fs/isofs/rock.c                                    |   11 +
 fs/lockd/svcsubs.c                                 |    4 +-
 fs/nfs/callback_proc.c                             |    9 +-
 fs/nfs/dir.c                                       |    2 +
 fs/nfs/filelayout/filelayout.c                     |    2 +
 fs/nfs/flexfilelayout/flexfilelayout.c             |   33 +
 fs/nfs/flexfilelayout/flexfilelayout.h             |   16 +
 fs/nfs/pnfs.c                                      |    4 +-
 fs/nfsd/nfs4layouts.c                              |    4 +-
 fs/nfsd/nfs4recover.c                              |  120 +-
 fs/nfsd/nfs4state.c                                |   22 +-
 fs/nfsd/vfs.c                                      |    9 +-
 fs/nilfs2/segment.c                                |   22 +
 fs/ocfs2/alloc.c                                   |    2 +-
 fs/ocfs2/aops.c                                    |   13 +-
 fs/ocfs2/buffer_head_io.c                          |    7 +-
 fs/ocfs2/dlm/dlmdebug.c                            |   16 +-
 fs/ocfs2/dlmglue.c                                 |   17 +
 fs/ocfs2/inode.c                                   |  150 +-
 fs/ocfs2/journal.c                                 |   13 +-
 fs/ocfs2/move_extents.c                            |    4 +-
 fs/ocfs2/ocfs2.h                                   |    2 -
 fs/ocfs2/quota_local.c                             |    2 +-
 fs/ocfs2/stack_user.c                              |   10 +-
 fs/ocfs2/super.c                                   |    2 -
 fs/ocfs2/sysfile.c                                 |    9 +-
 fs/orangefs/dir.c                                  |    7 +-
 fs/proc/array.c                                    |    6 +
 fs/proc/base.c                                     |  184 +-
 fs/proc/fd.c                                       |   29 +-
 fs/proc/generic.c                                  |    9 +-
 fs/proc/internal.h                                 |    4 +-
 fs/proc/namespaces.c                               |   16 +-
 fs/proc/proc_net.c                                 |    1 +
 fs/smbfs_common/smb2pdu.h                          |  318 ++++
 fs/sysfs/file.c                                    |    4 +
 fs/udf/balloc.c                                    |    5 +-
 fs/udf/super.c                                     |   11 +-
 fs/userfaultfd.c                                   |   14 +-
 fs/xfs/libxfs/xfs_format.h                         |    2 +-
 fs/xfs/libxfs/xfs_sb.c                             |   64 +
 fs/xfs/libxfs/xfs_sb.h                             |    1 +
 fs/xfs/xfs_dquot.c                                 |   16 +-
 fs/xfs/xfs_log_recover.c                           |    6 +-
 fs/xfs/xfs_mount.c                                 |    1 +
 fs/xfs/xfs_mount.h                                 |   75 +
 fs/xfs/xfs_rtalloc.c                               |    3 +
 include/crypto/drbg.h                              |   18 +-
 include/linux/audit.h                              |    8 +
 include/linux/bitops.h                             |    2 +
 include/linux/device.h                             |    5 +-
 include/linux/glob.h                               |    1 +
 include/linux/hid-sensor-hub.h                     |   25 +
 include/linux/hid.h                                |   29 +
 include/linux/if_rmnet.h                           |   70 +-
 include/linux/iio/common/inv_sensors_timestamp.h   |   94 +
 include/linux/pci.h                                |    4 +-
 include/linux/platform_data/pca953x.h              |    2 +-
 include/linux/skmsg.h                              |   22 +-
 include/net/addrconf.h                             |   12 +-
 include/net/bluetooth/hci.h                        |    5 +-
 include/net/bluetooth/l2cap.h                      |    2 +-
 include/net/fib_rules.h                            |    5 +
 include/net/gue.h                                  |    2 +-
 include/net/if_inet6.h                             |   37 +-
 include/net/ip_fib.h                               |    7 +-
 include/net/ip_vs.h                                |    3 +-
 include/net/mld.h                                  |    3 +
 include/net/ndisc.h                                |    4 +-
 include/net/rtnetlink.h                            |    2 +
 include/net/sctp/sctp.h                            |    3 +-
 include/net/sock.h                                 |    2 +-
 include/net/xfrm.h                                 |    7 +
 include/uapi/linux/if_link.h                       |    1 +
 io_uring/io-wq.c                                   |    2 +-
 kernel/audit.c                                     |   85 +-
 kernel/bpf/verifier.c                              |    3 +-
 kernel/cgroup/cpuset.c                             |    7 +-
 kernel/cpu.c                                       |    8 +-
 kernel/locking/rtmutex.c                           |   16 +-
 kernel/sched/fair.c                                |    2 +-
 kernel/sched/features.h                            |    8 +
 kernel/time/posix-cpu-timers.c                     |    3 +-
 kernel/time/time.c                                 |    2 +-
 kernel/trace/ring_buffer.c                         |    3 +-
 kernel/trace/trace_events_filter.c                 |    6 +-
 kernel/trace/trace_probe.c                         |    3 +-
 kernel/trace/trace_probe.h                         |    2 +-
 kernel/workqueue.c                                 |    2 +-
 lib/debugobjects.c                                 |   17 +
 lib/glob.c                                         |   31 +-
 lib/test_meminit.c                                 |    2 +-
 net/6lowpan/nhc.c                                  |    2 +-
 net/9p/trans_rdma.c                                |   19 +-
 net/atm/common.c                                   |    2 +
 net/batman-adv/distributed-arp-table.c             |   30 +-
 net/batman-adv/fragmentation.c                     |    8 +-
 net/batman-adv/gateway_client.c                    |    3 +-
 net/batman-adv/main.c                              |   22 +-
 net/batman-adv/multicast.c                         |    6 +-
 net/batman-adv/routing.c                           |    3 +-
 net/batman-adv/soft-interface.c                    |   11 +-
 net/batman-adv/soft-interface.h                    |    2 +
 net/batman-adv/translation-table.c                 |    5 +-
 net/batman-adv/types.h                             |    7 +
 net/bluetooth/af_bluetooth.c                       |   17 +-
 net/bluetooth/bnep/core.c                          |   27 +-
 net/bluetooth/l2cap_core.c                         |  123 +-
 net/bluetooth/l2cap_sock.c                         |    4 +-
 net/bridge/netfilter/ebtables.c                    |   22 +-
 net/bridge/netfilter/nft_meta_bridge.c             |    4 +-
 net/can/bcm.c                                      |   90 +-
 net/can/isotp.c                                    |    9 +-
 net/core/fib_rules.c                               |    6 +-
 net/core/filter.c                                  |   38 +-
 net/core/lwt_bpf.c                                 |   12 +
 net/core/rtnetlink.c                               |    8 +
 net/core/skbuff.c                                  |   23 +-
 net/core/skmsg.c                                   |    2 +
 net/ieee802154/core.c                              |    2 +-
 net/ieee802154/header_ops.c                        |    9 +-
 net/ieee802154/ieee802154.h                        |   17 +
 net/ieee802154/netlink.c                           |   36 +-
 net/ife/ife.c                                      |    2 +-
 net/ipv4/igmp.c                                    |    1 +
 net/ipv4/ip_gre.c                                  |    6 +
 net/ipv4/ip_vti.c                                  |    3 +
 net/ipv4/netfilter/nf_log_ipv4.c                   |    4 +-
 net/ipv4/sysctl_net_ipv4.c                         |   10 +-
 net/ipv4/tcp_output.c                              |    4 +-
 net/ipv6/addrconf.c                                |   38 +-
 net/ipv6/addrconf_core.c                           |    2 +-
 net/ipv6/af_inet6.c                                |    2 +-
 net/ipv6/icmp.c                                    |    4 +-
 net/ipv6/ip6_gre.c                                 |    6 +
 net/ipv6/ip6_vti.c                                 |    3 +
 net/ipv6/mcast.c                                   | 1184 +++++++-----
 net/ipv6/netfilter.c                               |    4 +-
 net/ipv6/netfilter/ip6t_ah.c                       |    5 +
 net/ipv6/netfilter/ip6t_hbh.c                      |    1 +
 net/ipv6/netfilter/ip6t_rt.c                       |    3 +-
 net/ipv6/netfilter/nf_conntrack_reasm.c            |    3 +-
 net/ipv6/netfilter/nf_log_ipv6.c                   |    4 +-
 net/ipv6/route.c                                   |    9 +-
 net/ipv6/seg6.c                                    |    3 +
 net/ipv6/sit.c                                     |    3 +
 net/kcm/kcmsock.c                                  |    8 +-
 net/key/af_key.c                                   |    1 +
 net/llc/af_llc.c                                   |    1 +
 net/llc/llc_conn.c                                 |    1 -
 net/mac80211/main.c                                |    3 +-
 net/mac80211/tx.c                                  |   17 +-
 net/mac802154/iface.c                              |    2 +-
 net/netfilter/ipset/ip_set_core.c                  |   12 +-
 net/netfilter/ipvs/ip_vs_app.c                     |   10 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |    4 +-
 net/netfilter/ipvs/ip_vs_core.c                    |   36 +-
 net/netfilter/ipvs/ip_vs_proto_sctp.c              |   18 +-
 net/netfilter/ipvs/ip_vs_proto_tcp.c               |   11 +-
 net/netfilter/ipvs/ip_vs_proto_udp.c               |    3 +-
 net/netfilter/nf_conncount.c                       |   23 +-
 net/netfilter/nf_conntrack_core.c                  |   18 +-
 net/netfilter/nf_conntrack_irc.c                   |    6 +-
 net/netfilter/nf_conntrack_seqadj.c                |    2 +
 net/netfilter/nf_nat_sip.c                         |    9 +
 net/netfilter/nfnetlink_cthelper.c                 |    4 +-
 net/netfilter/nfnetlink_osf.c                      |    6 +-
 net/netfilter/nft_log.c                            |   58 +-
 net/netfilter/nft_synproxy.c                       |    9 +-
 net/netfilter/xt_AUDIT.c                           |   58 +-
 net/netfilter/xt_cluster.c                         |    2 +-
 net/netfilter/xt_nat.c                             |    9 +
 net/netfilter/xt_rateest.c                         |    2 +-
 net/netfilter/xt_u32.c                             |   12 +-
 net/openvswitch/conntrack.c                        |    2 +-
 net/psample/psample.c                              |    6 +-
 net/qrtr/af_qrtr.c                                 |    2 +-
 net/sched/cls_bpf.c                                |   10 +-
 net/sched/sch_cake.c                               |    5 +-
 net/sched/sch_codel.c                              |   48 +-
 net/sched/sch_drr.c                                |    8 +-
 net/sched/sch_fq_codel.c                           |   41 +-
 net/sched/sch_hfsc.c                               |   24 +-
 net/sched/sch_hhf.c                                |   27 +
 net/sched/sch_htb.c                                |    8 +-
 net/sched/sch_multiq.c                             |    2 +-
 net/sctp/diag.c                                    |   67 +-
 net/sctp/sm_make_chunk.c                           |   10 +-
 net/sctp/sm_statefuns.c                            |   23 +-
 net/sctp/socket.c                                  |   29 +-
 net/smc/smc_cdc.c                                  |   15 +-
 net/socket.c                                       |    2 +-
 net/tipc/bcast.c                                   |   22 +-
 net/tipc/bcast.h                                   |    2 +-
 net/tipc/bearer.c                                  |    1 +
 net/tipc/netlink.c                                 |   12 +
 net/tipc/node.c                                    |   15 +-
 net/tipc/socket.c                                  |    3 +
 net/tipc/udp_media.c                               |    2 +
 net/tls/tls_sw.c                                   |    4 +
 net/xfrm/xfrm_interface_core.c                     |    3 +
 net/xfrm/xfrm_policy.c                             |    3 +
 net/xfrm/xfrm_state.c                              |   11 +-
 net/xfrm/xfrm_user.c                               |    2 +-
 samples/trace_events/trace-events-sample.c         |    4 +
 scripts/kconfig/conf.c                             |    6 +-
 security/apparmor/domain.c                         |   58 +-
 security/apparmor/include/policy_unpack.h          |   19 +
 security/apparmor/label.c                          |    2 +-
 security/apparmor/lsm.c                            |   18 +-
 security/apparmor/net.c                            |    1 +
 security/apparmor/policy.c                         |   14 +-
 security/apparmor/procattr.c                       |    2 +
 security/keys/keyring.c                            |    2 +-
 sound/aoa/fabrics/layout.c                         |    6 +
 sound/firewire/isight.c                            |    3 +-
 sound/pci/es1938.c                                 |    2 +
 sound/soc/fsl/fsl_audmix.c                         |    6 +
 sound/soc/tegra/tegra210_ahub.c                    |    4 +-
 sound/usb/caiaq/input.c                            |    2 +-
 sound/usb/mixer_quirks.c                           |  101 +-
 sound/usb/mixer_scarlett.c                         |    4 +-
 sound/usb/mixer_us16x08.c                          |  127 +-
 tools/bpf/bpftool/net.c                            |    4 +-
 tools/include/linux/bitops.h                       |    2 +
 tools/lib/api/fs/fs.c                              |   19 +-
 tools/lib/symbol/kallsyms.c                        |    5 +-
 tools/perf/builtin-c2c.c                           |    1 +
 tools/perf/builtin-sched.c                         |   37 +-
 tools/perf/trace/beauty/fcntl.c                    |   16 +
 tools/perf/util/bpf-event.c                        |   18 +-
 tools/perf/util/cpumap.c                           |    6 +
 tools/perf/util/event.c                            |   15 +-
 tools/perf/util/hist.c                             |    7 +-
 tools/perf/util/machine.c                          |   10 +-
 tools/perf/util/mmap.c                             |   10 +-
 tools/perf/util/pmu.c                              |    4 +-
 tools/perf/util/probe-finder.c                     |    4 +-
 tools/perf/util/symbol-elf.c                       |   48 +-
 tools/perf/util/symbol-minimal.c                   |   11 +-
 tools/perf/util/symbol.c                           |    2 +-
 tools/perf/util/thread.c                           |    5 +
 tools/testing/selftests/vm/compaction_test.c       |    3 +
 tools/testing/selftests/vm/hmm-tests.c             |   32 +-
 tools/usb/usbip/libsrc/usbip_common.c              |    2 +
 tools/usb/usbip/libsrc/usbip_device_driver.c       |    4 +
 tools/usb/usbip/libsrc/vhci_driver.c               |    1 +
 tools/virtio/vringh_test.c                         |    5 +
 tools/vm/slabinfo.c                                |    4 +-
 virt/kvm/eventfd.c                                 |   12 +-
 virt/kvm/kvm_main.c                                |   16 +-
 689 files changed, 8712 insertions(+), 5883 deletions(-)

Read the cover letter in its thread