Skip to content

6.6.145-rc1 review

Greg Kroah-Hartman linux-arm-kernel linux-clk linux-doc linux-fsdevel linux-patches linux-rockchip linux-rtc linux-tegra lkml sashiko-reviews stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest1,266 patches 16 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/1266bpf, arm64: Reject out-of-range B.cond targetsarch/arm64/lib/insn.c+2 -00 replies
2/1266nfsd: release layout stid on setlease failurefs/nfsd/nfs4layouts.c+1 -30 replies
3/1266nfsd: reset write verifier on deferred writeback errorsfs/nfsd/vfs.c+8 -10 replies
4/1266ext4: get rid of ppath in get_ext_path()fs/ext4/extents.c fs/ext4/move_extent.c+20 -190 replies
5/1266LoongArch: Report dying CPU to RCU in stop_this_cpu()arch/loongarch/kernel/smp.c+1 -00 replies
6/1266Bluetooth: btmtk: apply the common btmtk_fw_get_filenamedrivers/bluetooth/btmtksdio.c drivers/bluetooth/btusb.c+5 -80 replies
7/1266Bluetooth: btusb: mediatek: reset the controller before downloading the fwdrivers/bluetooth/btusb.c+10 -00 replies
8/1266Bluetooth: btusb: mediatek: add MT7922 subsystem resetdrivers/bluetooth/btusb.c+13 -10 replies
9/1266Bluetooth: btusb: mediatek: remove the unnecessary goto tagdrivers/bluetooth/btusb.c+1 -40 replies
10/1266Bluetooth: btusb: mediatek: return error for failed reg accessdrivers/bluetooth/btusb.c+84 -300 replies
11/1266Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.cdrivers/bluetooth/btmtk.c drivers/bluetooth/btmtk.h drivers/bluetooth/btusb.c+484 -4390 replies
12/1266Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices.drivers/bluetooth/btmtk.c net/bluetooth/rfcomm/tty.c+9 -20 replies
13/1266Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdowndrivers/bluetooth/btmtk.c+1 -60 replies
14/1266userfaultfd: gate must_wait writability check on pte_present()fs/userfaultfd.c+12 -20 replies
15/1266perf: Fix dangling cgroup pointer in cpuctx backportkernel/events/core.c+2 -30 replies
16/1266Bluetooth: btmtk: Fix btmtk.c undefined reference build errordrivers/bluetooth/btmtk.c drivers/bluetooth/btmtk.h+4 -00 replies
17/1266slimbus: qcom-ngd-ctrl: Fix probe error path orderingdrivers/slimbus/qcom-ngd-ctrl.c+5 -60 replies
18/1266slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownershipdrivers/slimbus/qcom-ngd-ctrl.c+3 -20 replies
19/1266slimbus: Convert to platform remove callback returning voiddrivers/slimbus/qcom-ctrl.c drivers/slimbus/qcom-ngd-ctrl.c+6 -100 replies
20/1266slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngddrivers/slimbus/qcom-ngd-ctrl.c+26 -190 replies
21/1266drm/amd: Fix set but not used warningsdrivers/gpu/drm/amd/amdgpu/amdgpu_gart.c drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c+7 -110 replies
22/1266net: ip_gre: require CAP_NET_ADMIN in the device netns for changelinkinclude/net/rtnetlink.h net/core/rtnetlink.c net/ipv4/ip_gre.c+16 -00 replies
23/1266device property: initialize the remaining fields of fwnode_handle in fwnode_init()include/linux/fwnode.h+2 -00 replies
24/1266f2fs: validate orphan inode entry countfs/f2fs/checkpoint.c include/linux/f2fs_fs.h+14 -10 replies
25/1266f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inodefs/f2fs/gc.c fs/f2fs/inode.c+50 -110 replies
26/1266f2fs: bound i_inline_xattr_size for non-inline-xattr inodesfs/f2fs/inode.c+10 -90 replies
27/1266f2fs: fix potential deadlock in f2fs_balance_fs()fs/f2fs/data.c fs/f2fs/f2fs.h fs/f2fs/segment.c+38 -00 replies
28/1266f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()fs/f2fs/segment.c+7 -70 replies
29/1266f2fs: fix listxattr handling of corrupted xattr entriesfs/f2fs/xattr.c+3 -30 replies
30/1266KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()virt/kvm/eventfd.c+5 -70 replies
31/1266block: Avoid mounting the bdev pseudo-filesystem in userspaceblock/bdev.c+0 -40 replies
32/1266i2c: core: fix irq domain leak on adapter registration failuredrivers/i2c/i2c-core-base.c+3 -10 replies
33/1266i2c: core: fix hang on adapter registration failuredrivers/i2c/i2c-core-base.c+29 -200 replies
34/1266i2c: core: fix NULL-deref on adapter registration failuredrivers/i2c/i2c-core-base.c+5 -30 replies
35/1266i2c: core: fix adapter debugfs creationdrivers/i2c/i2c-core-base.c+13 -80 replies
36/1266i2c: core: fix adapter registration racedrivers/i2c/i2c-core-base.c+6 -20 replies
37/1266fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()drivers/video/fbdev/core/fbcon.c+7 -00 replies
38/1266NFSv4/flexfiles: reject zero filehandle version countfs/nfs/flexfilelayout/flexfilelayout.c+4 -00 replies
39/1266nfsd: Dont reset the write verifier on a commit EAGAINfs/nfsd/vfs.c+23 -100 replies
40/1266apparmor: advertise the tcp fast open fix is appliedsecurity/apparmor/net.c+1 -00 replies
41/1266nfsd: move name lookup out of nfsd4_list_rec_dir()fs/nfsd/nfs4recover.c+28 -270 replies
42/1266nfsd: change nfs4_client_to_reclaim() to allocate datafs/nfsd/nfs4recover.c fs/nfsd/nfs4state.c+42 -470 replies
43/1266net: team: rename team to team_core for linkingdrivers/net/team/Makefile drivers/net/team/team_core.c+1 -00 replies
44/1266net, team, bonding: Add netdev_base_features helperdrivers/net/bonding/bond_main.c drivers/net/team/team_core.c include/linux/netdev_features.h+9 -50 replies
45/1266bonding: Fix initial {vlan,mpls}_feature set in bond_compute_featuresdrivers/net/bonding/bond_main.c+3 -20 replies
46/1266bonding: add ESP offload features when slaves supportdrivers/net/bonding/bond_main.c+9 -00 replies
47/1266bonding: Correctly support GSO ESP offloaddrivers/net/bonding/bond_main.c+10 -90 replies
48/1266net: add a common function to compute features for upper devicesinclude/linux/netdev_features.h include/linux/netdevice.h net/core/dev.c+107 -00 replies
49/1266bonding: use common function to compute the featuresdrivers/net/bonding/bond_main.c+4 -950 replies
50/1266bonding: fix xfrm offload feature setup on active-backup modedrivers/net/bonding/bond_main.c drivers/net/bonding/bond_netlink.c include/net/bonding.h+11 -80 replies
51/1266bonding: fix type confusion in bond_setup_by_slave()drivers/net/bonding/bond_main.c+46 -10 replies
52/1266bonding: prevent potential infinite loop in bond_header_parse()drivers/firewire/net.c drivers/net/bonding/bond_main.c drivers/net/wireless/cisco/airo.c +8 more+32 -190 replies
53/1266team: fix header_ops type confusion with non-Ethernet portsdrivers/net/team/team_core.c+64 -10 replies
54/1266mm/vmscan: flush deferred TLB before freeing large foliosmm/vmscan.c+4 -20 replies
55/1266xfs: recreate work items when recovering intent itemsfs/xfs/libxfs/xfs_defer.c fs/xfs/libxfs/xfs_defer.h fs/xfs/xfs_attr_item.c +4 more+216 -1640 replies
56/1266xfs: dump the recovered xattri log item if corruption happensfs/xfs/xfs_attr_item.c+4 -00 replies
57/1266xfs: use xfs_defer_finish_one to finish recovered work itemsfs/xfs/libxfs/xfs_defer.c fs/xfs/libxfs/xfs_defer.h fs/xfs/libxfs/xfs_log_recover.h +6 more+49 -1570 replies
58/1266xfs: move ->iop_recover to xfs_defer_op_typefs/xfs/libxfs/xfs_defer.c fs/xfs/libxfs/xfs_defer.h fs/xfs/libxfs/xfs_log_recover.h +7 more+109 -880 replies
59/1266Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUIDnet/bluetooth/iso.c+12 -40 replies
60/1266perf trace beauty fcntl: Fix build with older kernel headerstools/perf/trace/beauty/fcntl.c+16 -00 replies
61/1266ACPI: CPPC: Suppress UBSAN warning caused by field misusedrivers/acpi/cppc_acpi.c+7 -40 replies
62/1266ACPI: NFIT: core: Fix possible NULL pointer dereferencedrivers/acpi/nfit/core.c+3 -00 replies
63/1266rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTERMakefile+3 -02 replies
64/1266perf/core: Detach event groups during remove_on_execkernel/events/core.c+8 -60 replies
65/1266Revert "crypto: talitos - rename first/last to first_desc/last_desc"drivers/crypto/talitos.c+23 -230 replies
66/1266Revert "crypto: talitos - fix SEC1 32k ahash request limitation"drivers/crypto/talitos.c+69 -1470 replies
67/1266crypto: talitos - stop using crypto_ahash::initdrivers/crypto/talitos.c+9 -60 replies
68/1266crypto: talitos - fix SEC1 32k ahash request limitationdrivers/crypto/talitos.c+147 -690 replies
69/1266crypto: talitos - rename first/last to first_desc/last_descdrivers/crypto/talitos.c+23 -230 replies
70/1266arm64: sysreg: Add layout for ID_AA64MMFR4_EL1arch/arm64/tools/sysreg+37 -00 replies
71/1266arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negativearch/arm64/kernel/head.S+15 -80 replies
72/1266arm64: Fix early handling of FEAT_E2H0 not being implementedarch/arm64/kernel/head.S+16 -130 replies
73/1266KVM: arm64: Initialize HCR_EL2.E2H earlyarch/arm64/include/asm/el2_setup.h arch/arm64/kernel/head.S arch/arm64/kvm/hyp/nvhe/hyp-init.S+29 -180 replies
74/1266KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu()arch/arm64/include/asm/el2_setup.h arch/arm64/kernel/head.S arch/arm64/kvm/hyp/nvhe/hyp-init.S +1 more+5 -60 replies
75/1266arm64: Revamp HCR_EL2.E2H RES1 detectionarch/arm64/include/asm/el2_setup.h+32 -60 replies
76/1266arm64: sysreg: Correct sign definitions for EIESB and DoubleLockarch/arm64/tools/sysreg+2 -20 replies
77/1266virtio_net: Support dynamic rss indirection table sizedrivers/net/virtio_net.c+38 -50 replies
78/1266LoongArch: Add PIO for early access before ACPI PCI root registerarch/loongarch/include/asm/acpi.h arch/loongarch/kernel/acpi.c arch/loongarch/kernel/setup.c +1 more+34 -00 replies
79/1266net: Drop the lock in skb_may_tx_timestamp()include/net/sock.h net/core/skbuff.c net/socket.c+20 -70 replies
80/1266MIPS: smp: report dying CPU to RCU in stop_this_cpu()arch/mips/kernel/smp.c+2 -00 replies
81/1266usb: gadget: function: rndis: add length check to response querydrivers/usb/gadget/function/rndis.c+10 -40 replies
82/1266usb: gadget: function: rndis: add length check for headerdrivers/usb/gadget/function/rndis.c+6 -00 replies
83/1266iio: accel: bmc150: clamp the device-reported FIFO frame countdrivers/iio/accel/bmc150-accel-core.c+2 -00 replies
84/1266iio: accel: kxsd9: fix runtime PM imbalance on write_raw() errordrivers/iio/accel/kxsd9.c+3 -20 replies
85/1266iio: adc: lpc32xx: Initialize completion before requesting IRQdrivers/iio/adc/lpc32xx_adc.c+2 -20 replies
86/1266iio: adc: spear: Initialize completion before requesting IRQdrivers/iio/adc/spear_adc.c+1 -20 replies
87/1266iio: adc: ti-ads124s08: Return reset GPIO lookup errorsdrivers/iio/adc/ti-ads124s08.c+2 -10 replies
88/1266iio: chemical: scd30: Cleanup initializations and fix sign-extension bugdrivers/iio/chemical/scd30_core.c+15 -40 replies
89/1266iio: event: Fix event FIFO reset racedrivers/iio/industrialio-event.c+2 -30 replies
90/1266iio: gyro: bmg160: bail out when bandwidth/filter is not in tabledrivers/iio/gyro/bmg160_core.c+6 -00 replies
91/1266iio: gyro: bmg160: wait full startup time after mode change at probedrivers/iio/gyro/bmg160_core.c+8 -20 replies
92/1266iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQdrivers/iio/imu/bmi160/bmi160_core.c+2 -10 replies
93/1266iio: imu: inv_icm42600: fix timestamp clock period by using lower valuedrivers/iio/imu/inv_icm42600/inv_icm42600_accel.c drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c+4 -40 replies
94/1266iio: imu: st_lsm6dsx: deselect shub page before reading whoamidrivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c+20 -10 replies
95/1266iio: light: al3010: fix incorrect scale for the highest gain rangedrivers/iio/light/al3010.c+1 -10 replies
96/1266iio: light: gp2ap002: fix runtime PM leak on read errordrivers/iio/light/gp2ap002.c+1 -10 replies
97/1266iio: light: opt3001: fix missing state reset on timeoutdrivers/iio/light/opt3001.c+4 -20 replies
98/1266iio: light: tsl2591: return actual error from probe IRQ failuredrivers/iio/light/tsl2591.c+2 -40 replies
99/1266iio: light: veml6030: fix channel type when pushing eventsdrivers/iio/light/veml6030.c+5 -30 replies
100/1266iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() calldrivers/iio/magnetometer/ak8975.c+1 -00 replies
101/1266iio: temperature: ltc2983: Fix reinit_completion() called after conversion startdrivers/iio/temperature/ltc2983.c+1 -20 replies
102/1266ALSA: virtio: Add missing 384 kHz PCM rate mappingsound/virtio/virtio_pcm.c sound/virtio/virtio_pcm_ops.c+4 -20 replies
103/1266ALSA: ymfpci: check snd_ctl_new1() return valuesound/pci/ymfpci/ymfpci_main.c+6 -00 replies
104/1266ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parsersound/usb/caiaq/input.c+1 -10 replies
105/1266ALSA: cmipci: check snd_ctl_new1() return valuesound/pci/cmipci.c+6 -00 replies
106/1266ALSA: es1938: check snd_ctl_new1() return valuesound/pci/es1938.c+2 -00 replies
107/1266ALSA: firewire: isight: bound the sample count to the packet payloadsound/firewire/isight.c+2 -10 replies
108/1266ALSA: gus: check snd_ctl_new1() return valuesound/isa/gus/gus_pcm.c+2 -00 replies
109/1266ALSA: ice1712: check snd_ctl_new1() return valuesound/pci/ice1712/aureon.c sound/pci/ice1712/ice1712.c sound/pci/ice1712/ice1724.c+16 -00 replies
110/1266ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()sound/core/seq/seq_memory.c+1 -10 replies
111/1266ALSA: usb-audio: avoid kobject path lookup in DualSense matchsound/usb/mixer_quirks.c+12 -280 replies
112/1266ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()sound/usb/mixer_scarlett.c+3 -10 replies
113/1266ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbackssound/usb/mixer_us16x08.c+24 -250 replies
114/1266ALSA: usb-audio: Roll back quirk control caches on write errorssound/usb/mixer_quirks.c+37 -80 replies
115/1266ALSA: usb-audio: Update Babyface Pro control caches only after successful writessound/usb/mixer_quirks.c+10 -60 replies
116/1266ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writessound/usb/mixer_us16x08.c+52 -260 replies
117/1266vfio/pci: Use a private flag to prevent power state change with VFsdrivers/vfio/pci/vfio_pci_core.c include/linux/vfio_pci_core.h+15 -30 replies
118/1266vfio/pci: Latch disable_idle_d3 per devicedrivers/vfio/pci/vfio_pci_core.c include/linux/vfio_pci_core.h+11 -90 replies
119/1266vfio/pci: Release the VGA arbiter client on register_device() failuredrivers/vfio/pci/vfio_pci_core.c+1 -00 replies
120/1266vfio/pci: Fix racy bitfields and tighten struct layoutinclude/linux/vfio_pci_core.h+8 -50 replies
121/1266vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arcdrivers/vfio/vfio_main.c+2 -10 replies
122/1266Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNBdrivers/bluetooth/btusb.c+2 -00 replies
123/1266Bluetooth: btusb: fix use-after-free on registration failuredrivers/bluetooth/btusb.c+10 -10 replies
124/1266Bluetooth: btusb: fix use-after-free on marvell probe failuredrivers/bluetooth/btusb.c+5 -30 replies
125/1266Bluetooth: btusb: fix wakeup source leak on probe failuredrivers/bluetooth/btusb.c+15 -30 replies
126/1266binder: fix UAF in binder_thread_release()drivers/android/binder.c+5 -10 replies
127/1266binder: fix UAF in binder_free_transaction()drivers/android/binder.c+13 -00 replies
128/1266usb: xhci: Fix sleep in atomic context in xhci_free_streams()drivers/usb/host/xhci.c+10 -10 replies
129/1266usb: typec: tcpci_rt1711h: unregister TCPCI port with devresdrivers/usb/typec/tcpm/tcpci_rt1711h.c+8 -50 replies
130/1266PCI: altera: Do not dispose parent IRQ mappingdrivers/pci/controller/pcie-altera.c+0 -10 replies
131/1266PCI: host-common: Request bus reassignment when not probe-onlydrivers/pci/controller/pci-host-common.c+4 -00 replies
132/1266mm/damon/ops-common: handle extreme intervals in damon_hot_score()include/linux/damon.h mm/damon/ops-common.c+7 -20 replies
133/1266netfilter: ipset: fix race between dump and ip_set_list resizenet/netfilter/ipset/ip_set_core.c+7 -10 replies
134/1266virtio-mmio: fix device release warning on module unloaddrivers/virtio/virtio_mmio.c+13 -130 replies
135/1266hwrng: virtio: clamp device-reported used.len at copy_data()drivers/char/hw_random/virtio-rng.c+21 -20 replies
136/1266USB: chaoskey: Fix slab-use-after-free in chaoskey_release()drivers/usb/misc/chaoskey.c+0 -10 replies
137/1266usb: dwc3: run gadget disconnect from sleepable suspend contextdrivers/usb/dwc3/gadget.c+36 -70 replies
138/12666lowpan: fix NHC entry use-after-free on error pathnet/6lowpan/nhc.c+1 -10 replies
139/1266tipc: fix out-of-bounds read in broadcast Gap ACK blocksnet/tipc/bcast.c net/tipc/bcast.h net/tipc/node.c+27 -120 replies
140/1266staging: vme_user: bound slave read/write to the kern_buf sizedrivers/staging/vme_user/vme_user.c+22 -00 replies
141/1266smb: client: restrict implied bcc[0] exemption to responses without data areafs/smb/client/smb2misc.c+26 -60 replies
142/1266staging: vme_user: fix location monitor leak in fake bridgedrivers/staging/vme_user/vme_fake.c+8 -00 replies
143/1266staging: vme_user: fix location monitor leak in tsi148 bridgedrivers/staging/vme_user/vme_tsi148.c+8 -00 replies
144/1266media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripedrivers/staging/media/ipu3/ipu3-css-params.c+6 -20 replies
145/1266staging: media: atomisp: reduce load_primary_binaries() stack usagedrivers/staging/media/atomisp/pci/sh_css.c+3 -30 replies
146/1266staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c+8 -00 replies
147/1266staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()drivers/staging/rtl8723bs/core/rtw_mlme_ext.c+7 -10 replies
148/1266staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loopdrivers/staging/rtl8723bs/core/rtw_mlme_ext.c+4 -00 replies
149/1266staging: rtl8723bs: fix OOB read in update_beacon_info() IE loopdrivers/staging/rtl8723bs/core/rtw_wlan_util.c+5 -10 replies
150/1266staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()drivers/staging/rtl8723bs/core/rtw_mlme_ext.c+8 -00 replies
151/1266staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loopdrivers/staging/rtl8723bs/core/rtw_wlan_util.c+11 -30 replies
152/1266staging: rtl8723bs: fix OOB write in HT_caps_handler()drivers/staging/rtl8723bs/core/rtw_wlan_util.c+2 -10 replies
153/1266crypto: amlogic - avoid double cleanup in meson_crypto_probe()drivers/crypto/amlogic/amlogic-gxl-core.c+1 -10 replies
154/1266ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCELfs/smb/server/smb2pdu.c+7 -70 replies
155/1266net: af_key: initialize alg_key_len for IPComp statesnet/key/af_key.c+1 -00 replies
156/1266audit: Fix data races of skb_queue_len() readers on audit_queuekernel/audit.c+5 -50 replies
157/1266Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_completenet/bluetooth/mgmt.c+3 -00 replies
158/1266debugobjects: Plug race against a concurrent OOM disablelib/debugobjects.c+17 -00 replies
159/1266fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcnsfs/ntfs3/fslog.c+15 -50 replies
160/1266NTB: epf: Avoid calling pci_irq_vector() from hardirq contextdrivers/ntb/hw/epf/ntb_hw_epf.c+3 -10 replies
161/1266gpio: eic-sprd: use raw_spinlock_t in the irq startup pathdrivers/gpio/gpio-eic-sprd.c+4 -40 replies
162/1266io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work itemio_uring/io-wq.c+1 -10 replies
163/1266ipv4: igmp: remove multicast group from hash table on device destructionnet/ipv4/igmp.c+1 -00 replies
164/1266net: ipv4: bound TCP reordering sysctl writes and MTU probe sizesnet/ipv4/sysctl_net_ipv4.c net/ipv4/tcp_output.c+10 -40 replies
165/1266mfd: cros_ec: Delay dev_set_drvdata() until probe successdrivers/mfd/cros_ec_dev.c+2 -10 replies
166/1266mm: shrinker: fix NULL pointer dereference in debugfsmm/shrinker_debug.c+6 -40 replies
167/1266netfilter: ctnetlink: use nf_ct_exp_net() in expectation dumpnet/netfilter/nf_conntrack_netlink.c+1 -10 replies
168/1266netfilter: ebtables: module names must be null-terminatednet/bridge/netfilter/ebtables.c+3 -00 replies
169/1266netfilter: ebtables: terminate table name before find_table_lock()net/bridge/netfilter/ebtables.c+6 -00 replies
170/1266Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()drivers/bluetooth/btmtksdio.c+1 -10 replies
171/1266Bluetooth: bnep: pin L2CAP connection during netdev registrationnet/bluetooth/bnep/core.c+21 -60 replies
172/1266Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()drivers/bluetooth/btnxpuart.c+6 -00 replies
173/1266Bluetooth: fix UAF in bt_accept_dequeue()net/bluetooth/af_bluetooth.c net/bluetooth/l2cap_sock.c+5 -160 replies
174/1266Bluetooth: L2CAP: validate option length before reading conf opt valuenet/bluetooth/l2cap_core.c+28 -80 replies
175/1266fs/ntfs3: fsync files by syncing parent inodesfs/ntfs3/dir.c fs/ntfs3/file.c fs/ntfs3/frecord.c +1 more+91 -20 replies
176/1266fs/ntfs3: handle attr_set_size() errors when truncating filesfs/ntfs3/file.c+4 -60 replies
177/1266fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()fs/ntfs3/inode.c+8 -00 replies
178/1266fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()fs/ntfs3/attrib.c+14 -00 replies
179/1266coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()drivers/hwtracing/coresight/ultrasoc-smb.c+1 -00 replies
180/1266smb/client: Fix error code in smb2_aead_req_alloc()fs/smb/client/smb2ops.c+5 -30 replies
181/1266ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILEfs/smb/server/smb2pdu.c+11 -00 replies
182/1266ksmbd: add a permission check for FSCTL_SET_ZERO_DATAfs/smb/server/smb2pdu.c+6 -00 replies
183/1266ksmbd: serialize QUERY_DIRECTORY requests per filefs/smb/server/smb2pdu.c fs/smb/server/vfs_cache.c fs/smb/server/vfs_cache.h+7 -00 replies
184/1266ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellationfs/smb/server/smb2pdu.c+16 -180 replies
185/1266ksmbd: require source read access for duplicate extentsfs/smb/server/smb2pdu.c+4 -00 replies
186/1266ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITYfs/smb/server/smb2pdu.c+3 -00 replies
187/1266ksmbd: run set info with opener credentialsfs/smb/server/smb2pdu.c+3 -50 replies
188/1266ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATIONfs/smb/server/smb2pdu.c+6 -00 replies
189/1266ksmbd: add per-handle permission check to FILE_LINK_INFORMATIONfs/smb/server/smb2pdu.c+5 -00 replies
190/1266ksmbd: use opener credentials for delete-on-closefs/smb/server/vfs.c fs/smb/server/vfs_cache.c+9 -20 replies
191/1266smb: client: fix query directory replay double-freefs/smb/client/smb2pdu.c+2 -00 replies
192/1266smb: client: fix query_info() replay double-freefs/smb/client/smb2pdu.c+2 -00 replies
193/1266smb: client: fix double-free in SMB2_ioctl() replayfs/smb/client/smb2pdu.c+2 -00 replies
194/1266smb: client: fix change notify replay double-freefs/smb/client/smb2pdu.c+2 -00 replies
195/1266smb: client: fix double-free in SMB2_flush() replayfs/smb/client/smb2pdu.c+2 -00 replies
196/1266smb: client: fix double-free in SMB2_open() replayfs/smb/client/smb2pdu.c+2 -00 replies
197/1266smb: client: fix double-free in SMB2_close() replayfs/smb/client/smb2pdu.c+2 -00 replies
198/1266smb: client: Fix next buffer leak in receive_encrypted_standard()fs/smb/client/smb2ops.c+6 -40 replies
199/1266smb: client: use unaligned reads in parse_posix_ctxt()fs/smb/client/smb2pdu.c+3 -30 replies
200/1266smb: client: harden POSIX SID length parsingfs/smb/client/smb2pdu.c+1 -10 replies
201/1266smb: client: mask server-provided mode to 07777 in modefromsidfs/smb/client/cifsacl.c+1 -10 replies
202/1266OPP: of: Fix potential memory leak in opp_parse_supplies()drivers/opp/of.c+2 -10 replies
203/1266firmware_loader: fix device reference leak in firmware_upload_register()drivers/base/firmware_loader/sysfs_upload.c+3 -50 replies
204/1266cpufreq: intel_pstate: Sync policy->cur during CPU offlinedrivers/cpufreq/intel_pstate.c+4 -20 replies
205/1266sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RTkernel/sched/features.h+8 -00 replies
206/1266cpufreq: Fix hotplug-suspend race during rebootdrivers/cpufreq/cpufreq.c+2 -00 replies
207/1266cpufreq: pcc: fix use-after-free and double free in _OSC evaluationdrivers/cpufreq/pcc-cpufreq.c+2 -00 replies
208/1266posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error pathkernel/time/posix-cpu-timers.c+1 -00 replies
209/1266clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instancesdrivers/clocksource/timer-tegra186.c+2 -10 replies
210/1266X.509: Fix validation of ASN.1 certificate headercrypto/asymmetric_keys/x509_loader.c+1 -10 replies
211/1266tools/mm/slabinfo: Fix trace disable logic inversiontools/mm/slabinfo.c+1 -10 replies
212/1266tools/mm/slabinfo: fix total_objects attribute nametools/mm/slabinfo.c+2 -20 replies
213/1266HID: wacom: stop hardware after post-start probe failuresdrivers/hid/wacom_sys.c+6 -60 replies
214/1266HID: letsketch: fix UAF on inrange_timer at driver unbinddrivers/hid/hid-letsketch.c+33 -30 replies
215/1266HID: lg-g15: cancel pending work on remove to fix a use-after-freedrivers/hid/hid-lg-g15.c+16 -00 replies
216/1266HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte readsdrivers/hid/hid-sensor-hub.c include/linux/hid-sensor-hub.h+96 -60 replies
217/1266hfs/hfsplus: zero-initialize buffer in hfs_bnode_readfs/hfs/bnode.c fs/hfsplus/bnode.c+4 -00 replies
218/1266nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbersfs/nilfs2/segment.c+22 -00 replies
219/1266media: mtk-jpeg: cancel workqueue on release for supported platforms onlydrivers/media/platform/mediatek/jpeg/mtk_jpeg_core.c+2 -10 replies
220/1266xfs: use null daddr for unset first bad log blockfs/xfs/xfs_log_recover.c+3 -30 replies
221/1266xfs: fix unreachable BIGTIME check in dquot flush validationfs/xfs/xfs_dquot.c+8 -80 replies
222/1266bpf: Reject fragmented frames in devmapkernel/bpf/devmap.c+7 -00 replies
223/1266bpf: Restore sysctl new-value from 1 to 0kernel/bpf/cgroup.c+1 -10 replies
224/1266net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()drivers/net/usb/kalmia.c+8 -00 replies
225/1266usb: cdc_acm: Add quirk for Uniden BC125AT scannerdrivers/usb/class/cdc-acm.c+3 -00 replies
226/1266usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()drivers/usb/cdns3/cdnsp-mem.c+2 -00 replies
227/1266USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hubdrivers/usb/core/quirks.c+3 -00 replies
228/1266usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()drivers/usb/dwc3/dwc3-meson-g12a.c+9 -50 replies
229/1266usb: free iso schedules on failed submitdrivers/usb/fotg210/fotg210-hcd.c drivers/usb/host/ehci-sched.c+13 -40 replies
230/1266usb: gadget: composite: fix dead empty check in the USB_DT_OTG handlerdrivers/usb/gadget/composite.c+3 -20 replies
231/1266usb: gadget: udc: Fix use-after-free in gadget_match_driverdrivers/usb/gadget/udc/core.c+28 -10 replies
232/1266usb: gadget: f_printer: take kref only for successful opendrivers/usb/gadget/function/f_printer.c+1 -20 replies
233/1266USB: idmouse: fix use-after-free on disconnect racedrivers/usb/misc/idmouse.c+22 -230 replies
234/1266USB: ldusb: fix use-after-free on disconnect racedrivers/usb/misc/ldusb.c+18 -200 replies
235/1266USB: iowarrior: fix use-after-free on disconnectdrivers/usb/misc/iowarrior.c+3 -10 replies
236/1266USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSDdrivers/usb/core/quirks.c+3 -00 replies
237/1266USB: legousbtower: fix use-after-free on disconnect racedrivers/usb/misc/legousbtower.c+19 -180 replies
238/1266usb: sl811-hcd: disable controller wakeup on removedrivers/usb/host/sl811-hcd.c+1 -00 replies
239/1266USB: storage: include US_FL_NO_SAME in quirks maskdrivers/usb/storage/usb.c+1 -10 replies
240/1266USB: misc: uss720: unregister parport on probe failuredrivers/usb/misc/uss720.c+4 -10 replies
241/1266usb: mtu3: unmap request DMA on queue failuredrivers/usb/mtu3/mtu3_gadget.c+1 -00 replies
242/1266USB: serial: keyspan_pda: fix information leakdrivers/usb/serial/keyspan_pda.c+1 -10 replies
243/1266USB: serial: option: add Telit Cinterion FE990D50 compositionsdrivers/usb/serial/option.c+16 -00 replies
244/1266USB: serial: digi_acceleport: fix broken rx after throttledrivers/usb/serial/digi_acceleport.c+16 -00 replies
245/1266USB: serial: digi_acceleport: fix hard lockup on disconnectdrivers/usb/serial/digi_acceleport.c+7 -50 replies
246/1266USB: serial: digi_acceleport: fix write buffer corruptiondrivers/usb/serial/digi_acceleport.c+10 -50 replies
247/1266USB: ulpi: fix memory leak on registration failuredrivers/usb/common/ulpi.c+10 -130 replies
248/1266USB: usb-storage: ene_ub6250: restore media-ready checkdrivers/usb/storage/ene_ub6250.c+2 -10 replies
249/1266usbip: tools: support SuperSpeedPlus devicestools/usb/usbip/libsrc/usbip_common.c tools/usb/usbip/libsrc/usbip_device_driver.c tools/usb/usbip/libsrc/vhci_driver.c+7 -00 replies
250/1266usbip: vudc: fix NULL deref in vep_dequeue()drivers/usb/usbip/vudc.h drivers/usb/usbip/vudc_dev.c+1 -40 replies
251/1266usb: typec: anx7411: use devm_pm_runtime_enable()drivers/usb/typec/anx7411.c+3 -10 replies
252/1266usb: typec: class: drop PD lookup referencedrivers/usb/typec/class.c+1 -00 replies
253/1266usb: typec: tcpm: Validate SVID index in svdm_consume_modes()drivers/usb/typec/tcpm/tcpm.c+5 -00 replies
254/1266usb: typec: ucsi: Invert DisplayPort role assignmentdrivers/usb/typec/ucsi/displayport.c+2 -20 replies
255/1266usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt modedrivers/usb/typec/ucsi/displayport.c+1 -20 replies
256/1266usb: typec: ucsi: ccg: Fix use-after-free of ucsi on removedrivers/usb/typec/ucsi/ucsi_ccg.c+1 -10 replies
257/1266usb: typec: ucsi: cancel pending work on system suspenddrivers/usb/typec/ucsi/ucsi.c drivers/usb/typec/ucsi/ucsi.h drivers/usb/typec/ucsi/ucsi_acpi.c+30 -10 replies
258/1266iio: temperature: ltc2983: Fix n_wires default bypassing rotation checkdrivers/iio/temperature/ltc2983.c+1 -10 replies
259/1266PCI: Always lift 2.5GT/s restriction in PCIe failed link retrainingdrivers/pci/quirks.c+20 -310 replies
260/1266udf: validate free block extents against the partition lengthfs/udf/balloc.c+3 -20 replies
261/1266udf: validate VAT header length against the VAT inode sizefs/udf/super.c+8 -00 replies
262/1266udf: validate sparing table length as an entry count, not a byte countfs/udf/super.c+2 -10 replies
263/1266hwrng: jh7110 - fix refcount leak in starfive_trng_read()drivers/char/hw_random/jh7110-trng.c+8 -50 replies
264/1266dm-ioctl: report an error if a device has no tabledrivers/md/dm-ioctl.c+4 -10 replies
265/1266nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disksdrivers/nvme/host/multipath.c+6 -00 replies
266/1266btrfs: do not trim a device which is not writeablefs/btrfs/extent-tree.c+8 -40 replies
267/1266partitions: aix: bound the pp_count scan to the ppe arrayblock/partitions/aix.c+9 -00 replies
268/1266isofs: bound Rock Ridge symlink components to the SL recordfs/isofs/rock.c+11 -00 replies
269/1266crypto: af_alg - Remove zero-copy support from skcipher and aeadDocumentation/crypto/userspace-if.rst crypto/af_alg.c crypto/algif_aead.c+32 -780 replies
270/1266crypto: caam - use print_hex_dump_devel to guard key hex dumpsdrivers/crypto/caam/caamalg.c drivers/crypto/caam/caamalg_qi.c drivers/crypto/caam/caamhash.c +1 more+16 -160 replies
271/1266crypto: caam - use print_hex_dump_devel to guard key hex dumps againdrivers/crypto/caam/caamalg_qi2.c+6 -60 replies
272/1266crypto: ecc - Fix carry overflow in vli multiplicationcrypto/ecc.c+20 -110 replies
273/1266crypto: pcrypt - restore callback for non-parallel fallbackcrypto/pcrypt.c+4 -00 replies
274/1266crypto: drbg - Fix returning success on failure in CTR_DRBGcrypto/drbg.c+1 -10 replies
275/1266crypto: drbg - Fix drbg_max_addtl() on 64-bit kernelsinclude/crypto/drbg.h+7 -110 replies
276/1266crypto: drbg - Fix the fips_enabled priority boostcrypto/drbg.c+1 -10 replies
277/1266crypto: qat - validate RSA CRT component lengthsdrivers/crypto/intel/qat/qat_common/qat_asym_algs.c+5 -50 replies
278/1266crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor headerdrivers/crypto/talitos.c+20 -80 replies
279/1266crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1drivers/crypto/talitos.c drivers/crypto/talitos.h+124 -580 replies
280/1266crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() functiondrivers/crypto/talitos.c+22 -170 replies
281/1266crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() functiondrivers/crypto/talitos.c+41 -340 replies
282/1266crypto: talitos - move code in current_desc_hdr() into a standalone functiondrivers/crypto/talitos.c+19 -160 replies
283/1266crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptordrivers/crypto/talitos.c+6 -950 replies
284/1266crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueuedrivers/crypto/talitos.c drivers/crypto/talitos.h+115 -630 replies
285/1266crypto: talitos/hash - drop workqueue mechanism for SEC1drivers/crypto/talitos.c+7 -730 replies
286/1266crypto: talitos/hash - rename first_desc/last_desc to first_request/last_requestdrivers/crypto/talitos.c+13 -160 replies
287/1266crypto: talitos/hash - remove useless wrapperdrivers/crypto/talitos.c+1 -60 replies
288/1266crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitationdrivers/crypto/talitos.c+40 -90 replies
289/1266arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()arch/arm64/kernel/entry-fpsimd.S+4 -40 replies
290/1266spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()drivers/spi/spi-fsl-lpspi.c+9 -90 replies
291/1266spi: fsl-lpspi: terminate the RX channel on TX prepare failure pathdrivers/spi/spi-fsl-lpspi.c+1 -10 replies
292/1266EDAC/i10nm: Dont fail probing if ADXL is missingdrivers/edac/i10nm_base.c+11 -30 replies
293/1266watchdog: apple: Add "apple,t8103-wdt" compatibledrivers/watchdog/apple_wdt.c+1 -00 replies
294/1266tracing: Prevent out-of-bounds read in glob matchinginclude/linux/glob.h kernel/trace/trace_events_filter.c lib/glob.c+32 -60 replies
295/1266NFSv4: include MAY_WRITE in open permission mask for O_TRUNCfs/nfs/dir.c+2 -00 replies
296/1266module: decompress: check return value of module_extend_max_pages()kernel/module/decompress.c+2 -00 replies
297/1266exfat: bound uniname advance in exfat_find_dir_entry()fs/exfat/dir.c+8 -50 replies
298/1266NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()drivers/ntb/hw/epf/ntb_hw_epf.c+4 -60 replies
299/1266KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBsarch/x86/kvm/vmx/vmx.c+18 -170 replies
300/1266KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest modearch/x86/kvm/vmx/vmx.c+1 -20 replies
301/1266udmabuf: fix DMA direction mismatch in release_udmabuf()drivers/dma-buf/udmabuf.c+4 -10 replies
302/1266i2c: core: fix adapter deregistration racedrivers/i2c/i2c-core-base.c+7 -20 replies
303/1266i2c: mpc: Fix timeout calculationsdrivers/i2c/busses/i2c-mpc.c+1 -10 replies
304/1266i2c: stm32f7: truncate clock period instead of rounding itdrivers/i2c/busses/i2c-stm32f7.c+7 -20 replies
305/1266Input: synaptics-rmi4 - unregister function handlers on physical driver registration failuredrivers/input/rmi4/rmi_bus.c+3 -10 replies
306/1266Input: synaptics-rmi4 - bound the F3A keymap to the GPIO countdrivers/input/rmi4/rmi_f3a.c+1 -10 replies
307/1266Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED countdrivers/input/rmi4/rmi_f30.c+1 -10 replies
308/1266Input: elan_i2c - prevent division by zero and arithmetic underflowdrivers/input/mouse/elan_i2c_core.c+30 -60 replies
309/1266Input: goodix - clamp the device-reported contact countdrivers/input/touchscreen/goodix.c+2 -10 replies
310/1266Input: iforce - bound the device-reported force-feedback effect indexdrivers/input/joystick/iforce/iforce-packets.c+11 -70 replies
311/1266Input: mms114 - fix touch indexing for MMS134S and MMS136drivers/input/touchscreen/mms114.c+12 -60 replies
312/1266Input: touchwin - reset the packet index on every complete packetdrivers/input/touchscreen/touchwin.c+9 -60 replies
313/1266Input: mms114 - reject an oversized device packet sizedrivers/input/touchscreen/mms114.c+6 -00 replies
314/1266Input: maplemouse - fix NULL pointer dereference in open()drivers/input/mouse/maplemouse.c+3 -20 replies
315/1266Input: mms114 - fix multi-touch slot corruptiondrivers/input/touchscreen/mms114.c+1 -10 replies
316/1266Input: maple_keyb - set driver data before registering input devicedrivers/input/keyboard/maple_keyb.c+2 -20 replies
317/1266Input: maplemouse - set driver data before registering input devicedrivers/input/mouse/maplemouse.c+3 -10 replies
318/1266Input: maplecontrol - set driver data before registering input devicedrivers/input/joystick/maplecontrol.c+2 -10 replies
319/1266RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sgdrivers/infiniband/ulp/rtrs/rtrs-srv.c+3 -20 replies
320/1266RDMA/siw: bound Read Response placement to the RREAD lengthdrivers/infiniband/sw/siw/siw_qp_rx.c+9 -00 replies
321/1266fuse: fix device node leak in cuse_process_init_reply()fs/fuse/cuse.c+3 -10 replies
322/1266fuse: re-lock request before returning from fuse_ref_folio()fs/fuse/dev.c+1 -10 replies
323/1266smb: client: reject overlapping data areas in SMB2 responsesfs/smb/client/smb2misc.c+25 -90 replies
324/1266xfs: fail recovery on a committed log item with no regionsfs/xfs/xfs_log_recover.c+9 -00 replies
325/1266xfs: resample the data fork mapping after cycling ILOCKfs/xfs/xfs_reflink.c+36 -00 replies
326/1266smb/server: do not require delete access for non-replacing linksfs/smb/server/smb2pdu.c+8 -60 replies
327/1266block: skip sync_blockdev() on surprise removal in bdev_mark_dead()block/bdev.c+6 -10 replies
328/1266sched/fair: Only update stats for allowed CPUs when looking for dst groupkernel/sched/fair.c+1 -10 replies
329/1266crypto: algif_skcipher - force synchronous processing on trees without ctx->statecrypto/algif_skcipher.c+18 -310 replies
330/1266KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPUarch/arm64/include/asm/kvm_hyp.h arch/arm64/kvm/arm.c arch/arm64/kvm/hyp/nvhe/hyp-main.c+12 -00 replies
331/1266KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPUarch/arm64/kvm/hyp/nvhe/hyp-main.c+3 -00 replies
332/1266nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error pathdrivers/nvme/target/tcp.c+2 -10 replies
333/1266nvmet-tcp: Fix potential UAF when ddgst mismatchdrivers/nvme/target/tcp.c+3 -10 replies
334/1266crypto: sun4i-ss - Remove insecure and unused rng_algarch/arm/configs/sunxi_defconfig drivers/crypto/allwinner/Kconfig drivers/crypto/allwinner/sun4i-ss/Makefile +3 more+0 -1350 replies
335/1266x86/mm: Fix check/use ordering in switch_mm_irqs_off()arch/x86/mm/tlb.c+8 -80 replies
336/1266crypto: crypto4xx - Remove ahash-related codedrivers/crypto/amcc/crypto4xx_alg.c drivers/crypto/amcc/crypto4xx_core.c drivers/crypto/amcc/crypto4xx_core.h+1 -1550 replies
337/1266crypto: crypto4xx - Remove insecure and unused rng_algdrivers/crypto/amcc/crypto4xx_core.c drivers/crypto/amcc/crypto4xx_core.h drivers/crypto/amcc/crypto4xx_reg_def.h+0 -1020 replies
338/1266crypto: hisi-trng - Remove crypto_rng interfacedrivers/crypto/hisilicon/Kconfig drivers/crypto/hisilicon/trng/trng.c+2 -2970 replies
339/1266bpf: Support for hardening against JIT sprayinginclude/linux/filter.h kernel/bpf/core.c+29 -00 replies
340/1266x86/bugs: Enable IBPB flush on BPF JIT allocationarch/x86/include/asm/nospec-branch.h arch/x86/kernel/cpu/bugs.c+49 -50 replies
341/1266bpf: Restrict JIT predictor flush to cBPFarch/riscv/net/bpf_jit_core.c arch/x86/net/bpf_jit_comp.c include/linux/filter.h +2 more+16 -100 replies
342/1266bpf: Skip redundant IBPB in pack allocatorkernel/bpf/core.c+14 -10 replies
343/1266bpf: Prefer packs that wont trigger an IBPB flush on allocationkernel/bpf/core.c+24 -30 replies
344/1266bpf: Prefer dirty packs for eBPF allocationskernel/bpf/core.c+3 -30 replies
345/1266media: uvcvideo: Avoid partial metadata buffersdrivers/media/usb/uvc/uvc_video.c+9 -40 replies
346/1266media: uvcvideo: Fix buffer sequence in frame gapsdrivers/media/usb/uvc/uvc_video.c+13 -40 replies
347/1266media: uvcvideo: Fix sequence number when no EOFdrivers/media/usb/uvc/uvc_video.c+47 -450 replies
348/1266dt-bindings: media: sun4i-a10-video-engine: Add interconnect propertiesDocumentation/devicetree/bindings/media/allwinner,sun4i-a10-video-engine.yaml+10 -00 replies
349/1266dt-bindings: power: imx93: Add MIPI PHY power domaininclude/dt-bindings/power/fsl,imx93-power.h+1 -00 replies
350/1266serial: msm: Disable DMA for kernel console UARTdrivers/tty/serial/msm_serial.c+2 -10 replies
351/1266serial: 8250_omap: clear rx_running on zero-length DMA completesdrivers/tty/serial/8250/8250_omap.c+2 -10 replies
352/1266rxrpc: rxrpc_verify_data ensure rx_dec_buffer allocnet/rxrpc/recvmsg.c+1 -10 replies
353/1266rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)net/rxrpc/recvmsg.c+1 -20 replies
354/1266afs: Fix netns teardown to cancel the preallocation chargerfs/afs/rxrpc.c+4 -20 replies
355/1266afs: fix NULL pointer dereference in afs_get_tree()fs/afs/super.c+2 -10 replies
356/1266afs: Fix further netns teardown to cancel the preallocation chargerfs/afs/rxrpc.c+5 -00 replies
357/1266fbcon: fix NULL pointer dereference for a console without vc_datadrivers/video/fbdev/core/fbcon.c+4 -30 replies
358/1266clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive()drivers/clocksource/timer-sun5i.c+3 -00 replies
359/1266drm/rockchip: Test for imported buffers with drm_gem_is_imported()drivers/gpu/drm/rockchip/rockchip_drm_gem.c+1 -10 replies
360/1266drm/tidss: Drop extra drm_mode_config_reset() calldrivers/gpu/drm/tidss/tidss_kms.c+0 -20 replies
361/1266drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c+17 -80 replies
362/1266drm/radeon: fix integer overflow in radeon_align_pitch()drivers/gpu/drm/radeon/radeon_gem.c+11 -20 replies
363/1266drm/radeon: fix memory leak in radeon_ring_restore() on lock failuredrivers/gpu/drm/radeon/radeon_ring.c+3 -10 replies
364/1266libbpf: Report error when a negative kprobe offset is specifiedtools/lib/bpf/libbpf.c+8 -10 replies
365/1266Documentation: proc: fix section numbering in table of contentsDocumentation/filesystems/proc.rst+7 -70 replies
366/1266arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5Sarch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts+3 -30 replies
367/1266arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warningarch/arm64/boot/dts/qcom/sdm845-db845c-navigation-mezzanine.dtso+5 -00 replies
368/1266wifi: cfg80211: fix grammar in MLO group key error messagenet/wireless/nl80211.c+1 -10 replies
369/1266arm64: tegra: Fix Tegra234 MGBE PTP clockarch/arm64/boot/dts/nvidia/tegra234.dtsi+4 -40 replies
370/1266dt-bindings: pinctrl: nvidia,tegra234: Add missing required blockDocumentation/devicetree/bindings/pinctrl/nvidia,tegra234-pinmux-aon.yaml Documentation/devicetree/bindings/pinctrl/nvidia,tegra234-pinmux.yaml+8 -00 replies
371/1266drm/amdkfd: Validate CRIU-restored IDs before idr_allocdrivers/gpu/drm/amd/amdkfd/kfd_chardev.c drivers/gpu/drm/amd/amdkfd/kfd_events.c+8 -00 replies
372/1266driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()include/linux/device.h+4 -10 replies
373/1266wifi: rtw89: Correct data type for scan index to avoid infinite loopdrivers/net/wireless/realtek/rtw89/fw.c+1 -10 replies
374/1266wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA bufferdrivers/net/wireless/realtek/rtw88/pci.c+5 -00 replies
375/1266kconfig: fix potential NULL pointer dereference in conf_askvaluescripts/kconfig/conf.c+2 -40 replies
376/1266wifi: ath9k: fix OOB access from firmware tx status queue IDdrivers/net/wireless/ath/ath9k/xmit.c+5 -00 replies
377/1266ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpointarch/arm/boot/dts/ti/omap/am335x-sl50.dts+2 -20 replies
378/1266watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCHdrivers/watchdog/sp5100_tco.c+2 -10 replies
379/1266watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5drivers/watchdog/sama5d4_wdt.c+21 -270 replies
380/1266watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failuredrivers/watchdog/sprd_wdt.c+2 -30 replies
381/1266media: cedrus: Fix failure to clean up hardware on probe failuredrivers/staging/media/sunxi/cedrus/cedrus.c+3 -10 replies
382/1266media: v4l2-common: Add YUV24 format infodrivers/media/v4l2-core/v4l2-common.c+1 -00 replies
383/1266pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error pathdrivers/pinctrl/sunxi/pinctrl-sunxi.c+1 -10 replies
384/1266arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pcarch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts+1 -10 replies
385/1266arm64: dts: imx8x-colibri: Correct SODIMM PAD settingsarch/arm64/boot/dts/freescale/imx8x-colibri.dtsi+2 -20 replies
386/1266vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().drivers/net/vxlan/vxlan_core.c+6 -20 replies
387/1266crypto: atmel-sha204a - fix blocking and non-blocking rng logicdrivers/crypto/atmel-sha204a.c+4 -40 replies
388/1266crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curvecrypto/ecrdsa.c+1 -10 replies
389/1266crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contentscrypto/asymmetric_keys/verify_pefile.c+2 -00 replies
390/1266dlm: fix add msg handle in send_queue orderedfs/dlm/midcomms.c+2 -20 replies
391/1266nilfs2: fix backing_dev_info reference leakfs/nilfs2/super.c+0 -20 replies
392/1266iommu/amd: Fix a stale comment about which legacy mode is user visibledrivers/iommu/amd/amd_iommu_types.h+6 -50 replies
393/1266arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to hostarch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi+1 -10 replies
394/1266clk: scmi: Fix clock rate roundingdrivers/clk/clk-scmi.c+2 -20 replies
395/1266arm64: dts: qcom: sm8450: Fix ICE reg sizearch/arm64/boot/dts/qcom/sm8450.dtsi+1 -10 replies
396/1266drm/hisilicon/hibmc: move display contrl config to hibmc_probe()drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c+11 -220 replies
397/1266drm/hisilicon/hibmc: use clock to look up the PLL valuedrivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c+45 -350 replies
398/1266evm: terminate and bound the evm_xattrs read buffersecurity/integrity/evm/evm_secfs.c+11 -50 replies
399/1266thermal: hwmon: Fix critical temperature attribute removaldrivers/thermal/thermal_hwmon.c+4 -10 replies
400/1266clk: scpi: Unregister child clock providers on removedrivers/clk/clk-scpi.c+1 -10 replies
401/1266net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()net/sched/sch_hfsc.c+11 -110 replies
402/1266crypto: ccp - Treat zero-length cert chain as query for blob lengthsdrivers/crypto/ccp/sev-dev.c+2 -10 replies
403/1266spi: hisi-kunpeng: Use dev_err_probe() for host registration failuredrivers/spi/spi-hisi-kunpeng.c+2 -40 replies
404/1266net/sched: sch_htb: do not change sch->flags in htb_dump()net/sched/sch_htb.c+1 -50 replies
405/1266net/sched: sch_htb: annotate data-races (I)net/sched/sch_htb.c+4 -40 replies
406/1266ipv6: addrconf: bail out of dad_failure when state is no longer POSTDADnet/ipv6/addrconf.c+10 -30 replies
407/1266IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlierdrivers/infiniband/hw/mlx5/main.c+8 -70 replies
408/1266RDMA/hns: Fix arithmetic overflow in calc_hem_config()drivers/infiniband/hw/hns/hns_roce_hem.c+4 -40 replies
409/1266RDMA/mlx5: Fix devx subscribe-event unwind NULL dereferencedrivers/infiniband/hw/mlx5/devx.c+23 -70 replies
410/1266RDMA/srpt: fix integer overflow in immediate data length checkdrivers/infiniband/ulp/srpt/ib_srpt.c+3 -20 replies
411/1266media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()drivers/staging/media/atomisp/pci/atomisp_cmd.c+2 -40 replies
412/1266firmware: arm_scmi: Read sensor config as 32-bit valuedrivers/firmware/arm_scmi/sensors.c+1 -10 replies
413/1266sysfs: clamp show() return value in sysfs_kf_read()fs/sysfs/file.c+4 -00 replies
414/1266bitops: use common function parameter namesinclude/asm-generic/bitops/lock.h+11 -110 replies
415/1266regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictionsDocumentation/devicetree/bindings/regulator/mt6359-regulator.yaml+0 -430 replies
416/1266net/sched: sch_drr: annotate data-races around cl->deficitnet/sched/sch_drr.c+4 -40 replies
417/1266media: rockchip: rga: fix too small buffer sizedrivers/media/platform/rockchip/rga/rga-hw.c drivers/media/platform/rockchip/rga/rga-hw.h+2 -20 replies
418/1266firmware: arm_scmi: Fix OOB in scmi_power_name_get()drivers/firmware/arm_scmi/power.c+5 -10 replies
419/1266arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice nodearch/arm64/boot/dts/qcom/sm8450.dtsi+5 -10 replies
420/1266tracing: Bound synthetic-field strings with seq_bufkernel/trace/trace_events_hist.c+29 -120 replies
421/1266device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()drivers/base/property.c+3 -10 replies
422/1266driver core: Use mod_delayed_work to prevent lost deferred probe workdrivers/base/dd.c+2 -40 replies
423/1266Revert "treewide: Fix probing of devices in DT overlays"drivers/bus/imx-weim.c drivers/i2c/i2c-core-of.c drivers/of/dynamic.c +2 more+0 -220 replies
424/1266cpufreq: Documentation: fix sampling_down_factor rangeDocumentation/admin-guide/pm/cpufreq.rst+1 -10 replies
425/1266cpufreq: conservative: Simplify frequency limit handlingdrivers/cpufreq/cpufreq_conservative.c+1 -110 replies
426/1266pwm: imx27: Fix variable truncation in .apply()drivers/pwm/pwm-imx27.c+7 -10 replies
427/1266bus: sunxi-rsb: Always check register address validitydrivers/bus/sunxi-rsb.c+3 -00 replies
428/1266RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrsdrivers/infiniband/hw/irdma/verbs.c+10 -40 replies
429/1266RDMA/rxe: Fix a use-after-free problem in rxe_mmapdrivers/infiniband/sw/rxe/rxe_mmap.c+16 -30 replies
430/1266IB/mlx4: Fix refcount leak in add_port() error pathdrivers/infiniband/hw/mlx4/sysfs.c+27 -180 replies
431/1266RDMA/hns: Fix warning in poll cq direct modedrivers/infiniband/hw/hns/hns_roce_main.c+1 -10 replies
432/1266RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanupdrivers/infiniband/core/counters.c+1 -10 replies
433/1266PM: sleep: Use complete() in device_pm_sleep_init()drivers/base/power/main.c+5 -10 replies
434/1266MIPS: Fix big-endian stack argument fetching in o32 wrapperarch/mips/fw/lib/call_o32.S+1 -10 replies
435/1266MIPS: DEC: Remove do_IRQ() call indirectionarch/mips/dec/int-handler.S arch/mips/dec/setup.c+1 -70 replies
436/1266mips: ralink: mt7621: add missing __iomemarch/mips/ralink/mt7621.c+1 -10 replies
437/1266mips: n64: add __iomem for writel callarch/mips/n64/init.c+1 -10 replies
438/1266mtd: spi-nor: Drop duplicate Kconfig dependencydrivers/mtd/spi-nor/Kconfig+0 -10 replies
439/1266ALSA: seq: midi: Serialize output teardown with event_inputsound/core/seq/seq_midi.c+41 -140 replies
440/1266pinctrl: cs42l43: Fix polarity on debouncedrivers/pinctrl/cirrus/pinctrl-cs42l43.c+1 -10 replies
441/1266nvme-multipath: fix flex array size in struct nvme_ns_headdrivers/nvme/host/core.c+1 -10 replies
442/1266workqueue: drop spurious * from print_worker_info() fn declarationkernel/workqueue.c+1 -10 replies
443/1266ipv6: guard against possible NULL deref in __in6_dev_stats_get()include/net/addrconf.h+4 -10 replies
444/1266net/sched: cls_bpf: prevent unbounded recursion in offload rollbacknet/sched/cls_bpf.c+6 -40 replies
445/1266drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registereddrivers/gpu/drm/tegra/gr2d.c drivers/gpu/drm/tegra/gr3d.c+8 -80 replies
446/1266drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_removedrivers/gpu/drm/tegra/gr2d.c drivers/gpu/drm/tegra/gr3d.c+12 -140 replies
447/1266gpu: host1x: Allow entries in BO caches to be freeddrivers/gpu/drm/tegra/gem.c drivers/gpu/drm/tegra/submit.c drivers/gpu/host1x/bus.c +1 more+69 -140 replies
448/1266drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()drivers/gpu/drm/tegra/dc.c+3 -10 replies
449/1266gpu: host1x: Fix iommu_map_sgtable() return value checkdrivers/gpu/host1x/job.c+6 -40 replies
450/1266drm/tegra: Fix iommu_map_sgtable() return value checkdrivers/gpu/drm/tegra/gem.c+6 -30 replies
451/1266drm/nouveau/bios: specify correct display fuse register for Ampere and Adadrivers/gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c+2 -10 replies
452/1266libbpf: Harden parse_vma_segs() path parsingtools/lib/bpf/usdt.c+12 -40 replies
453/1266libbpf: Fix UAF in strset__add_str()tools/lib/bpf/strset.c+41 -210 replies
454/1266dax/kmem: account for partial discontiguous resource upon removaldrivers/dax/kmem.c+6 -00 replies
455/1266rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()drivers/rapidio/devices/tsi721.c+2 -10 replies
456/1266ocfs2: dont BUG_ON an invalid journal dinodefs/ocfs2/journal.c+2 -50 replies
457/1266ocfs2: kill osb->system_file_mutex lockfs/ocfs2/ocfs2.h fs/ocfs2/super.c fs/ocfs2/sysfile.c+3 -100 replies
458/1266crypto: hisilicon/qm - disable error report before flrdrivers/crypto/hisilicon/qm.c+2 -20 replies
459/1266drm/msm/dp: fix HPD state status bit shift valuedrivers/gpu/drm/msm/dp/dp_reg.h+2 -20 replies
460/1266drm/msm/dp: Fix the ISR_* enum valuesdrivers/gpu/drm/msm/dp/dp_display.c+2 -20 replies
461/1266EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_infodrivers/edac/skx_common.c+3 -00 replies
462/1266RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqedrivers/infiniband/sw/rxe/rxe_resp.c+4 -20 replies
463/1266RDMA/rxe: Copy WQE to local buffer in non-SRQ receive pathdrivers/infiniband/sw/rxe/rxe_resp.c+24 -30 replies
464/1266media: qcom: venus: drop extra padding in NV12 raw size calculationdrivers/media/platform/qcom/venus/helpers.c+2 -20 replies
465/1266media: qcom: venus: relax encoder frame/blur dimension steps on v4drivers/media/platform/qcom/venus/hfi_platform_v4.c+10 -100 replies
466/1266media: qcom: venus: relax encoder frame/blur step size on v6drivers/media/platform/qcom/venus/hfi_platform_v6.c+8 -80 replies
467/1266rpmsg: use generic driver_override infrastructuredrivers/rpmsg/qcom_glink_native.c drivers/rpmsg/rpmsg_core.c drivers/rpmsg/virtio_rpmsg_bus.c +1 more+7 -430 replies
468/1266md/raid10: reset read_slot when reusing r10bio for discarddrivers/md/raid10.c+1 -00 replies
469/1266ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writebackfs/ext4/ioctl.c+9 -30 replies
470/1266ASoC: rsnd: Fix RSND_SOC_MASK width to single nibblesound/soc/sh/rcar/rsnd.h+1 -10 replies
471/1266ARM: imx3: Fix CCM node reference leakarch/arm/mach-imx/mm-imx3.c+2 -00 replies
472/1266HID: wiimote: Fix table layout and whitespace errorsdrivers/hid/hid-wiimote-modules.c+29 -290 replies
473/1266ata: libata: Fix ata_exec_internal()drivers/ata/libata-core.c+17 -20 replies
474/1266ARM: imx31: Fix IIM mapping leak in revision checkarch/arm/mach-imx/cpu-imx31.c+7 -20 replies
475/1266nvdimm/btt: Handle preemption in BTT lane acquisitionDocumentation/driver-api/nvdimm/btt.rst drivers/nvdimm/nd.h drivers/nvdimm/region_devs.c+29 -530 replies
476/1266scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"drivers/scsi/scsi_scan.c drivers/scsi/scsi_transport_sas.c+13 -490 replies
477/1266scsi: pm8001: Fix error code in non_fatal_log_show()drivers/scsi/pm8001/pm8001_ctl.c+1 -40 replies
478/1266scsi: ufs: Fix wrong value printed in unexpected UPIU response casedrivers/ufs/core/ufshcd.c+1 -10 replies
479/1266bpf: fix UAF by restoring RCU-delayed inode freeing in bpffskernel/bpf/inode.c+11 -20 replies
480/1266mm/fake-numa: fix under-allocation detection in uniform splitarch/x86/mm/numa_emulation.c+13 -40 replies
481/1266ext2: fix ignored return value of generic_write_sync()fs/ext2/file.c+6 -30 replies
482/1266sched: restore timer_slack_ns when resetting RT policy on forkkernel/sched/core.c+1 -00 replies
483/1266lib/test_meminit: use && for boolslib/test_meminit.c+1 -10 replies
484/1266configfs_lookup(): dont leave ->s_dentry dangling on failurefs/configfs/dir.c+3 -00 replies
485/1266drm/amdgpu: set sub_block_index for mca ras sub-blocksdrivers/gpu/drm/amd/amdgpu/amdgpu_mca.c+3 -00 replies
486/1266bpftool: Use libbpf error code for flow dissector querytools/bpf/bpftool/net.c+2 -20 replies
487/1266perf/x86/amd/core: Always use the NMI latency mitigationarch/x86/events/amd/core.c+3 -30 replies
488/1266ocfs2: rebase copied fsdlm LVB pointers in locking_statefs/ocfs2/dlmglue.c+17 -00 replies
489/1266ocfs2: fix buffer head management in ocfs2_read_blocks()fs/ocfs2/buffer_head_io.c+4 -30 replies
490/1266ocfs2: reject FITRIM ranges shorter than a clusterfs/ocfs2/alloc.c+1 -10 replies
491/1266ocfs2/dlm: require a ref for locking_state debugfs openfs/ocfs2/dlm/dlmdebug.c+12 -40 replies
492/1266ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()fs/ocfs2/stack_user.c+3 -70 replies
493/1266netfilter: nfnetlink_osf: fix mss parsing on big-endian architecturesnet/netfilter/nfnetlink_osf.c+1 -50 replies
494/1266netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack locknet/netfilter/nf_conntrack_seqadj.c+2 -00 replies
495/1266netfilter: conntrack: revert ct extension genid infrastructureinclude/net/netfilter/nf_conntrack_extend.h net/netfilter/nf_conntrack_core.c net/netfilter/nf_conntrack_extend.c+2 -1030 replies
496/1266netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptpnet/netfilter/nf_conntrack_core.c+16 -20 replies
497/1266IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path()drivers/infiniband/core/cm.c+8 -50 replies
498/1266RDMA/irdma: Fix OOB read during CQ MR registrationdrivers/infiniband/hw/irdma/verbs.c drivers/infiniband/hw/irdma/verbs.h+2 -30 replies
499/1266RDMA/irdma: Initialize iwmr->access during MR registrationdrivers/infiniband/hw/irdma/verbs.c+1 -00 replies
500/1266arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as wellarch/arm64/boot/dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts+3 -00 replies
501/1266bpf: Check tail zero of bpf_prog_infoinclude/uapi/linux/bpf.h kernel/bpf/syscall.c tools/include/uapi/linux/bpf.h+5 -20 replies
502/1266bpf: Update transport_header when encapsulating UDP tunnel in lwtnet/core/lwt_bpf.c+12 -00 replies
503/1266wifi: wcn36xx: fix heap overflow from oversized firmware HAL responsedrivers/net/wireless/ath/wcn36xx/smd.c+4 -00 replies
504/1266wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indicationdrivers/net/wireless/ath/wcn36xx/smd.c+6 -00 replies
505/1266wifi: wcn36xx: fix OOB read from short trigger BA firmware responsedrivers/net/wireless/ath/wcn36xx/smd.c+3 -00 replies
506/1266ALSA: seq: Fix partial userptr event expansionsound/core/seq/seq_memory.c+1 -10 replies
507/1266riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframearch/riscv/kernel/stacktrace.c+1 -10 replies
508/1266ALSA: seq: Clear variable event pointer on readsound/core/seq/seq_clientmgr.c+1 -00 replies
509/1266ACPI: IPMI: Fix message kref handling on dead devicedrivers/acpi/acpi_ipmi.c+1 -10 replies
510/1266cpufreq: Documentation: fix conservative governor freq_step descriptionDocumentation/admin-guide/pm/cpufreq.rst+2 -20 replies
511/1266IB/mlx5: Dont take the rereg_mr fallback without a new translationdrivers/infiniband/hw/mlx5/mr.c+1 -10 replies
512/1266IB/mlx5: Properly support implicit ODP rereg_mrdrivers/infiniband/hw/mlx5/mr.c+15 -00 replies
513/1266spi: ep93xx: fix double-free of zeropage on DMA setup failuredrivers/spi/spi-ep93xx.c+1 -00 replies
514/1266firmware_loader: Fix recursive lock in device_cache_fw_images()drivers/base/firmware_loader/main.c+2 -10 replies
515/1266configfs: fix lockless traversals of ->s_childrenfs/configfs/dir.c+41 -130 replies
516/1266watchdog: unregister PM notifier on watchdog unregisterdrivers/watchdog/watchdog_core.c+3 -00 replies
517/1266scsi: target: Fix hexadecimal CHAP_I handlingdrivers/target/iscsi/iscsi_target_auth.c+4 -20 replies
518/1266scsi: target: Remove tcm_loop target reset handlingdrivers/target/loopback/tcm_loop.c+0 -640 replies
519/1266pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39drivers/pinctrl/mediatek/pinctrl-mt8516.c+1 -10 replies
520/1266pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39drivers/pinctrl/mediatek/pinctrl-mt8167.c+1 -10 replies
521/1266vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()include/linux/vmalloc.h+3 -10 replies
522/1266hwspinlock: qcom: avoid uninitialized struct membersdrivers/hwspinlock/qcom_hwspinlock.c+1 -40 replies
523/1266sched/fair: Fix cpu_util runnable_avg arithmetickernel/sched/fair.c+15 -80 replies
524/1266wifi: mt76: fix argument to ieee80211_is_first_frag()drivers/net/wireless/mediatek/mt76/mac80211.c+1 -10 replies
525/1266wifi: mt76: mt7915: fix potential tx_retries underflowdrivers/net/wireless/mediatek/mt76/mt7915/mac.c+5 -50 replies
526/1266wifi: mt76: mt7921: fix potential tx_retries underflowdrivers/net/wireless/mediatek/mt76/mt7921/mac.c+3 -20 replies
527/1266btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()fs/btrfs/extent-tree.c+3 -20 replies
528/1266fbdev: sm501fb: Fix buffer errors in OF binding codedrivers/video/fbdev/sm501fb.c+12 -40 replies
529/1266hwmon: (it87) Clamp negative values to zero in set_fan()drivers/hwmon/it87.c+3 -00 replies
530/1266btrfs: zoned: dont account data relocation space-info in statfs free spacefs/btrfs/super.c+2 -10 replies
531/1266IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specifieddrivers/infiniband/hw/mlx4/mlx4_ib.h drivers/infiniband/hw/mlx4/mr.c+8 -20 replies
532/1266spi: meson-spifc: fix runtime PM leak on removedrivers/spi/spi-meson-spifc.c+1 -00 replies
533/1266ASoC: codecs: aw88261: fix incorrect masks for boost regssound/soc/codecs/aw88261.c+6 -60 replies
534/1266vduse: hold vduse_lock across IDR lookup in open pathdrivers/vdpa/vdpa_user/vduse_dev.c+7 -140 replies
535/1266vhost/vdpa: validate virtqueue index in mmap and fault pathsdrivers/vhost/vdpa.c+22 -70 replies
536/1266vduse: Requeue failed read to send_list headdrivers/vdpa/vdpa_user/vduse_dev.c+7 -10 replies
537/1266vhost/net: complete zerocopy ubufs only oncedrivers/vhost/net.c+11 -40 replies
538/1266tools/virtio: check mmap return value in vringh_testtools/virtio/vringh_test.c+5 -00 replies
539/1266ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()sound/soc/codecs/cs35l56.c+6 -10 replies
540/1266ASoC: cs35l56: Dont leave parent IRQ disabled if system_suspend failssound/soc/codecs/cs35l56.c+6 -10 replies
541/1266bonding: 3ad: fix mux port state on oper downdrivers/net/bonding/bond_3ad.c+1 -00 replies
542/1266ext4: fix kernel BUG in ext4_write_inline_data_endfs/ext4/inode.c+2 -10 replies
543/1266selftests/bpf: Fix bpf_iter/task_vma testtools/testing/selftests/bpf/progs/bpf_iter_task_vma.c+1 -10 replies
544/1266cxl/test: Fix integer overflow in mock LSA bounds checkstools/testing/cxl/test/mem.c+2 -20 replies
545/1266cxl/test: Zero out LSA backing memory to avoid leaking to usertools/testing/cxl/test/mem.c+1 -10 replies
546/1266of: cpu: add check in __of_find_n_match_cpu_property()drivers/of/cpu.c+1 -10 replies
547/1266bpf: Tighten cgroup storage cookie checks for prog arrayskernel/bpf/core.c+1 -10 replies
548/1266s390/process: Fix kernel thread function pointer typearch/s390/kernel/process.c+1 -10 replies
549/1266Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev devicedrivers/bluetooth/hci_qca.c+1 -10 replies
550/1266Bluetooth: hci: validate codec capability element lengthnet/bluetooth/hci_codec.c+1 -10 replies
551/1266Bluetooth: vhci: validate devcoredump state before side effectsdrivers/bluetooth/hci_vhci.c+10 -00 replies
552/1266fs: efs: remove unneeded debug printsfs/efs/file.c+3 -180 replies
553/1266RDMA/mlx5: Remove raw RSS QP restrack trackingdrivers/infiniband/hw/mlx5/qp.c+1 -00 replies
554/1266RDMA/mlx5: Fix undefined shift of user RQ WQE sizedrivers/infiniband/hw/mlx5/qp.c+4 -70 replies
555/1266RDMA/mlx5: Release the HW‑provided UAR index rather than the SW onedrivers/infiniband/hw/mlx5/main.c+1 -10 replies
556/1266ASoC: codecs: hdac_hdmi: Validate written enum valuesound/soc/codecs/hdac_hdmi.c+3 -10 replies
557/1266ASoC: fsl: fsl_audmix: Validate written enum valuessound/soc/fsl/fsl_audmix.c+6 -00 replies
558/1266ASoC: tegra: tegra210_ahub: Validate written enum valuesound/soc/tegra/tegra210_ahub.c+3 -10 replies
559/1266net/sched: cls_flow: Dont expose folded kernel pointersnet/sched/cls_flow.c+9 -30 replies
560/1266net: fib_rules: Dont dump dying fib_rule in fib_rules_dump().include/net/fib_rules.h net/core/fib_rules.c+10 -10 replies
561/1266bridge: cfm: reject invalid CCM interval at configuration timenet/bridge/br_cfm.c net/bridge/br_cfm_netlink.c+9 -10 replies
562/1266sctp: validate embedded address parameter lengthnet/sctp/sm_make_chunk.c+8 -20 replies
563/1266net/sched: sch_hfsc: Dont make class passive twicenet/sched/sch_hfsc.c+1 -10 replies
564/1266tipc: require net admin for TIPCv2 netlink mutatorsnet/tipc/netlink.c+12 -00 replies
565/1266tipc: prevent snt_unacked underflow on CONN_ACKnet/tipc/socket.c+3 -00 replies
566/1266tipc: reject inverted service ranges from peer bindingsnet/tipc/name_distr.c+11 -20 replies
567/1266cxl/test: Add check after kzalloc() memory in alloc_mock_res()tools/testing/cxl/test/cxl.c+6 -20 replies
568/1266crypto: marvell/octeontx - fix DMA cleanup using wrong loop indexdrivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c+2 -20 replies
569/1266crypto: cavium/cpt - fix DMA cleanup using wrong loop indexdrivers/crypto/cavium/cpt/cptvf_reqmanager.c+2 -20 replies
570/1266crypto: rng - Free default RNG on module exitcrypto/rng.c+11 -00 replies
571/1266spi: xilinx: use FIFO occupancy register to determine buffer sizedrivers/spi/spi-xilinx.c+9 -20 replies
572/1266ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIOsound/soc/codecs/adau1372.c+5 -00 replies
573/1266power: supply: core: fix supplied_from allocationsdrivers/power/supply/power_supply_core.c+3 -80 replies
574/1266handshake: Require admin permission for DONE commandDocumentation/netlink/specs/handshake.yaml net/handshake/genl.c+2 -10 replies
575/1266net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlennet/sched/sch_fq_codel.c+39 -20 replies
576/1266net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlennet/sched/sch_codel.c+43 -50 replies
577/1266net: mana: initialize gdma queue id to INVALID_QUEUE_IDdrivers/net/ethernet/microsoft/mana/gdma_main.c+2 -00 replies
578/1266net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE checkdrivers/net/ethernet/microsoft/mana/mana_en.c+2 -10 replies
579/1266bpf: Run generic devmap egress prog on private skbkernel/bpf/devmap.c+12 -00 replies
580/1266net/mlx5: Check max_macs devlink param value against max capabilitydrivers/net/ethernet/mellanox/mlx5/core/main.c+7 -50 replies
581/1266net: wwan: t7xx: check skb_clone in control TXdrivers/net/wwan/t7xx/t7xx_port_wwan.c+2 -00 replies
582/1266net: bcmgenet: Use weighted round-robin TX DMA arbitrationdrivers/net/ethernet/broadcom/genet/bcmgenet.c+8 -150 replies
583/1266kcm: use WRITE_ONCE() when changing lower socket callbacksnet/kcm/kcmsock.c+4 -40 replies
584/1266netfilter: nf_conncount: callers must hold rcu read locknet/netfilter/nf_conncount.c net/openvswitch/conntrack.c+4 -40 replies
585/1266ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()sound/core/init.c+8 -30 replies
586/1266cifs: remove all cifs files before kill superfs/smb/client/connect.c+3 -00 replies
587/1266smb/client: always return a value for FS_IOC_GETFLAGSfs/smb/client/ioctl.c+5 -70 replies
588/1266selftests/bpf: Initialize operation name before usetools/testing/selftests/bpf/prog_tests/verifier_log.c+1 -00 replies
589/1266bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socketnet/core/filter.c+14 -10 replies
590/1266bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()net/core/filter.c+3 -00 replies
591/1266bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds checknet/core/filter.c+2 -20 replies
592/1266MIPS: mm: Fix out-of-bounds write in maar_res_walk()arch/mips/mm/init.c+8 -40 replies
593/1266powerpc/perf: fix preempt count underflow in fsl_emb_pmu_delarch/powerpc/perf/core-fsl-emb.c+2 -10 replies
594/1266powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_downarch/powerpc/platforms/powernv/setup.c+2 -10 replies
595/1266powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpusarch/powerpc/kexec/core_64.c+1 -30 replies
596/1266KEYS: Use acquire when reading state in keyring searchsecurity/keys/keyring.c+1 -10 replies
597/1266tipc: fix UAF in tipc_l2_send_msg()net/tipc/bearer.c+1 -00 replies
598/1266tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)net/ipv6/route.c+3 -30 replies
599/1266ionic: Fix check in ionic_get_link_ext_statsdrivers/net/ethernet/pensando/ionic/ionic_ethtool.c+9 -20 replies
600/1266ksmbd: fix use-after-free in same_client_has_lease()fs/smb/server/oplock.c+6 -00 replies
601/1266mfd: cs42l43: Sanity check firmware sizedrivers/mfd/cs42l43.c+1 -10 replies
602/1266ocfs2: fix circular locking dependency in ocfs2_dio_end_io_writefs/ocfs2/aops.c+9 -40 replies
603/1266net/9p: fix race condition on rdma->state in trans_rdma.cnet/9p/trans_rdma.c+17 -20 replies
604/1266staging: nvec: fix use-after-free in nvec_rx_completed()drivers/staging/nvec/nvec.c+3 -10 replies
605/1266coresight: cti: Fix DT filter signals silently ignoreddrivers/hwtracing/coresight/coresight-cti-platform.c+1 -00 replies
606/1266coresight: etm4x: Correct TRCVMIDCCTLR1 save and restoredrivers/hwtracing/coresight/coresight-etm4x-core.c+2 -20 replies
607/1266PCI/ASPM: Dont reconfigure ASPM entering low-power statedrivers/pci/pci.c+0 -30 replies
608/1266PCI: Introduce named defines for PCI ROMdrivers/pci/rom.c+28 -120 replies
609/1266PCI: Check ROM header and data structure addr before accessingdrivers/pci/rom.c+105 -180 replies
610/1266x86/platform/olpc: xo15: Drop wakeup source on driver removalarch/x86/platform/olpc/olpc-xo15-sci.c+1 -00 replies
611/1266platform/x86: xo15-ebook: Fix wakeup source and GPE handlingdrivers/platform/x86/xo15-ebook.c+6 -10 replies
612/1266perf sched: Add missing mmap2 handler in timehisttools/perf/builtin-sched.c+1 -00 replies
613/1266PCI: loongson: Do not ignore downstream devices on external bridgesdrivers/pci/controller/pci-loongson.c+16 -150 replies
614/1266bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()drivers/bus/mhi/ep/main.c+3 -40 replies
615/1266phy: phy-can-transceiver: Check driver match and driver data against NULLdrivers/phy/phy-can-transceiver.c+3 -00 replies
616/1266perf pmu: Skip test on Arm64 when #slots is zerotools/perf/tests/pmu-events.c+22 -20 replies
617/1266mailbox: mtk-adsp: fix UAF during device teardowndrivers/mailbox/mtk-adsp-mailbox.c+8 -10 replies
618/1266staging: most: video: avoid double free on video register failuredrivers/staging/most/video/video.c+6 -10 replies
619/1266usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()drivers/usb/host/max3421-hcd.c+4 -00 replies
620/1266usb: host: max3421: Reject hub port requests for non-existent portsdrivers/usb/host/max3421-hcd.c+4 -00 replies
621/1266char: tlclk: fix use-after-free in tlclk_cleanup()drivers/char/tlclk.c+4 -00 replies
622/1266perf header: Sanity check HEADER_EVENT_DESC attr.size before swaptools/perf/util/header.c+54 -00 replies
623/1266iio: light: si1133: reset counter to prevent race conditiondrivers/iio/light/si1133.c+5 -00 replies
624/1266iio: light: si1133: prevent race condition on timeoutdrivers/iio/light/si1133.c+8 -10 replies
625/1266iio: magnetometer: ak8975: fix potential kernel stack memory leakdrivers/iio/magnetometer/ak8975.c+14 -00 replies
626/1266iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handlingdrivers/iio/adc/xilinx-ams.c+5 -00 replies
627/1266iio: accel: mma8452: handle I2C read error(s) in mma8452_read()drivers/iio/accel/mma8452.c+2 -00 replies
628/1266iio: tcs3472: power down chip on probe failuredrivers/iio/light/tcs3472.c+20 -180 replies
629/1266clk: at91: keep securam node alive while mapping itdrivers/clk/at91/pmc.c+1 -10 replies
630/1266HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counterdrivers/hid/hid-logitech-hidpp.c+0 -10 replies
631/1266fs/ntfs3: add bounds check to run_get_highest_vcn()fs/ntfs3/fslog.c fs/ntfs3/ntfs_fs.h fs/ntfs3/run.c+13 -40 replies
632/1266fs/ntfs3: fix mount failure on 64K page-size kernelsfs/ntfs3/fslog.c+1 -50 replies
633/1266drm/amd/display: Add missing kdoc for ALLM parametersdrivers/gpu/drm/amd/display/modules/info_packet/info_packet.c+2 -00 replies
634/1266dmaengine: imx-sdma: Refine spba bus searching in probedrivers/dma/imx-sdma.c+3 -10 replies
635/1266perf: Fix off-by-one stack buffer overflow in kallsyms__parse()tools/lib/symbol/kallsyms.c+4 -10 replies
636/1266perf tools: Guard test_bit from out-of-bounds sample CPUtools/perf/builtin-annotate.c tools/perf/builtin-diff.c tools/perf/builtin-report.c +1 more+10 -50 replies
637/1266perf sched: Replace BUG_ON on invalid CPU with graceful skiptools/perf/builtin-sched.c+19 -30 replies
638/1266perf sched: Fix NULL dereference in latency_runtime_eventtools/perf/builtin-sched.c+3 -10 replies
639/1266perf tools: Add bounds check to cpu__get_node()tools/perf/util/cpumap.c+4 -00 replies
640/1266perf mmap: Guard cpu__get_node() return in aio_bind()tools/perf/util/mmap.c+7 -10 replies
641/1266perf c2c: Bounds-check CPU and node IDs before bitmap and array accesstools/perf/builtin-c2c.c+17 -20 replies
642/1266perf sched: Clean up idle_threads entry on init failuretools/perf/builtin-sched.c+4 -10 replies
643/1266perf sched: Replace BUG_ON and add NULL checks in replay event helperstools/perf/builtin-sched.c+25 -30 replies
644/1266perf mmap: Fix NULL deref in aio cleanup on alloc failuretools/perf/util/mmap.c+6 -40 replies
645/1266perf c2c: Fix use-after-free in he__get_c2c_hists() error pathtools/perf/builtin-c2c.c+1 -00 replies
646/1266dmaengine: qcom: gpi: set DMA_PRIVATE capabilitydrivers/dma/qcom/gpi.c+1 -00 replies
647/1266dmaengine: Fix possible use after freedrivers/dma/dmaengine.c+2 -10 replies
648/1266clk: qcom: a53: Corrected frequency multiplier for 1152MHzdrivers/clk/qcom/a53-pll.c+1 -10 replies
649/1266pNFS/filelayout: fix cheking if a layout is stripedfs/nfs/filelayout/filelayout.c+2 -00 replies
650/1266xprtrdma: Remove temp allocation of rpcrdma_rep objectsnet/sunrpc/xprtrdma/rpc_rdma.c net/sunrpc/xprtrdma/verbs.c net/sunrpc/xprtrdma/xprt_rdma.h+26 -370 replies
651/1266xprtrdma: Avoid 250 ms delay on backlog wakeupnet/sunrpc/xprtrdma/transport.c+1 -10 replies
652/1266xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slotinclude/linux/sunrpc/xprt.h net/sunrpc/xprt.c net/sunrpc/xprtrdma/transport.c+32 -10 replies
653/1266xprtrdma: Post receive buffers after RPC completionnet/sunrpc/xprtrdma/rpc_rdma.c+9 -50 replies
654/1266xprtrdma: Use sendctx DMA state for Send signalingnet/sunrpc/xprtrdma/frwr_ops.c net/sunrpc/xprtrdma/rpc_rdma.c+14 -100 replies
655/1266xprtrdma: Decouple req recycling from RPC completionnet/sunrpc/xprtrdma/backchannel.c net/sunrpc/xprtrdma/rpc_rdma.c net/sunrpc/xprtrdma/transport.c +2 more+97 -410 replies
656/1266NFSv4/pnfs: defer return_range callbacks until after inode unlockfs/nfs/callback_proc.c fs/nfs/pnfs.c+7 -60 replies
657/1266nfs: keep PG_UPTODATE clear after read errors in page groupsfs/nfs/read.c include/linux/nfs_page.h+25 -10 replies
658/1266NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errorsfs/nfs/flexfilelayout/flexfilelayout.c+16 -00 replies
659/1266NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_writefs/nfs/flexfilelayout/flexfilelayout.c fs/nfs/flexfilelayout/flexfilelayout.h+29 -00 replies
660/1266PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macrodrivers/pci/controller/pcie-mediatek.c+2 -10 replies
661/1266PCI: meson: Propagate devm_add_action_or_reset() failuredrivers/pci/controller/dwc/pci-meson.c+3 -10 replies
662/1266fs/ntfs3: resize log->one_page_buf when adopting on-disk page sizefs/ntfs3/fslog.c+19 -00 replies
663/1266perf tools: Fix get_max_num() size_t underflow on empty sysfs filetools/perf/util/cpumap.c+6 -00 replies
664/1266perf tools: Use scnprintf() in cpu_map__snprint() to prevent overflowtools/perf/util/cpumap.c+9 -90 replies
665/1266perf tools: Use perf_env__get_cpu_topology() in machine__resolve()tools/perf/util/event.c+13 -20 replies
666/1266PCI: rcar-host: Remove unused LIST_HEAD(res)drivers/pci/controller/pcie-rcar-host.c+0 -10 replies
667/1266perf sched: Fix idle-hist callchain display using wrong rb_first varianttools/perf/builtin-sched.c+2 -10 replies
668/1266perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name()tools/perf/util/bpf-event.c+6 -50 replies
669/1266perf hists: Fix snprintf() in hists__scnprintf_title() UID filter pathtools/perf/util/hist.c+4 -30 replies
670/1266xprtrdma: Check frwr_wp_create() during connectnet/sunrpc/xprtrdma/verbs.c+11 -10 replies
671/1266xprtrdma: Document and assert reply-handler invariantsnet/sunrpc/xprtrdma/rpc_rdma.c net/sunrpc/xprtrdma/transport.c net/sunrpc/xprtrdma/verbs.c+84 -40 replies
672/1266xprtrdma: Resize reply buffers before reposting receivesnet/sunrpc/xprtrdma/verbs.c+30 -10 replies
673/1266xprtrdma: Fix bcall rep leak and unbounded peeknet/sunrpc/xprtrdma/rpc_rdma.c+3 -10 replies
674/1266xprtrdma: Sanitize the reply credit grant after parsingnet/sunrpc/xprtrdma/rpc_rdma.c+8 -40 replies
675/1266xprtrdma: Repost Receive buffers for malformed repliesnet/sunrpc/xprtrdma/rpc_rdma.c+5 -30 replies
676/1266xprtrdma: Return sendctx slot after Send preparation failurenet/sunrpc/xprtrdma/rpc_rdma.c net/sunrpc/xprtrdma/verbs.c net/sunrpc/xprtrdma/xprt_rdma.h+42 -50 replies
677/1266perf cs-etm: Fix incorrect or missing decoder for raw tracetools/perf/util/cs-etm.c+65 -410 replies
678/1266perf cs-etm: Create decoders after both AUX and HW_ID search passestools/perf/util/cs-etm.c+113 -690 replies
679/1266perf cs-etm: Queue context packets for frontendtools/perf/util/cs-etm-decoder/cs-etm-decoder.c tools/perf/util/cs-etm.c tools/perf/util/cs-etm.h+163 -1020 replies
680/1266perf pmu: Fix pmu_id() heap underwrite on empty identifier filetools/perf/util/pmu.c+6 -00 replies
681/1266perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs filetools/perf/util/pmu.c+2 -20 replies
682/1266tools lib api: Fix missing null termination in filename__read_int/ull()tools/lib/api/fs/fs.c+8 -20 replies
683/1266perf symbols: Fix signed overflow in sysfs__read_build_id() size checktools/perf/util/symbol-elf.c+6 -30 replies
684/1266perf symbols: Bounds-check .gnu_debuglink section datatools/perf/util/symbol-elf.c+8 -10 replies
685/1266perf intel-pt: Fix snprintf size tracking bug in insn decodertools/perf/util/intel-pt-decoder/intel-pt-insn-decoder.c+3 -80 replies
686/1266perf tools: Fix thread__set_comm_from_proc() on empty comm filetools/perf/util/thread.c+5 -00 replies
687/1266perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallbacktools/perf/util/symbol-elf.c+7 -20 replies
688/1266tools lib api: Fix filename__write_int() writing uninitialized stack datatools/lib/api/fs/fs.c+3 -20 replies
689/1266tools lib api: Fix mount_overload() snprintf truncation and toupper rangetools/lib/api/fs/fs.c+2 -20 replies
690/1266perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name()tools/perf/util/bpf-event.c+2 -10 replies
691/1266perf symbols: Add bounds checks to elf_read_build_id() note iterationtools/perf/util/symbol-elf.c+16 -20 replies
692/1266perf symbols: Add bounds checks to read_build_id() note iteration in minimal buildtools/perf/util/symbol-minimal.c+10 -10 replies
693/1266PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()drivers/pci/controller/pcie-mediatek.c+1 -10 replies
694/1266PCI: mediatek: Use actual physical address instead of virt_to_phys()drivers/pci/controller/pcie-mediatek.c+13 -30 replies
695/1266Revert "PCI/MSI: Unmap MSI-X region on error"drivers/pci/msi/msi.c+1 -30 replies
696/1266security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()security/apparmor/apparmorfs.c+2 -00 replies
697/1266apparmor: check label build before no_new_privs testsecurity/apparmor/domain.c+15 -100 replies
698/1266apparmor: aa_label_alloc use aa_label_free on alloc failuresecurity/apparmor/label.c+1 -10 replies
699/1266apparmor: fix rawdata_f_data implicit flex arraysecurity/apparmor/apparmorfs.c+3 -40 replies
700/1266apparmor: grab ns lock and refresh when looking up changehat child profilessecurity/apparmor/domain.c+31 -20 replies
701/1266apparmor: fix potential UAF in aa_replace_profilessecurity/apparmor/policy.c+3 -10 replies
702/1266apparmor: aa_getprocattr free procattr leak on format failuresecurity/apparmor/procattr.c+2 -00 replies
703/1266apparmor: put secmark label after secid lookupsecurity/apparmor/net.c+1 -00 replies
704/1266i3c: master: Prevent reuse of dynamic address on device add failuredrivers/i3c/master.c+14 -50 replies
705/1266apparmor: fix label can not be immediately before a declarationsecurity/apparmor/policy.c+2 -10 replies
706/1266sparc: led: avoid trimming a newline from empty writesarch/sparc/kernel/led.c+1 -10 replies
707/1266perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id()tools/perf/util/symbol-elf.c+3 -00 replies
708/1266perf tools: Use snprintf() for root_dir path constructiontools/perf/util/machine.c tools/perf/util/symbol.c+2 -20 replies
709/1266perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name()tools/perf/util/bpf-event.c+3 -10 replies
710/1266perf bpf: Bounds-check array offsets in bpil_offs_to_addr()tools/perf/util/bpf-utils.c+16 -00 replies
711/1266gpio: mlxbf3: fail probe if gpiochip registration failsdrivers/gpio/gpio-mlxbf3.c+2 -10 replies
712/1266spi: dw: fix wrong BAUDR setting after resumedrivers/spi/spi-dw.h+1 -00 replies
713/1266xfrm: Use the XFRM_GRO to indicate a GRO call on inputnet/ipv4/esp4_offload.c net/ipv6/esp6_offload.c net/xfrm/xfrm_input.c+4 -60 replies
714/1266xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO pathnet/xfrm/xfrm_input.c net/xfrm/xfrm_policy.c+5 -20 replies
715/1266xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]include/net/xfrm.h net/xfrm/xfrm_policy.c net/xfrm/xfrm_user.c+25 -250 replies
716/1266xfrm: validate selector family and prefixlen during matchinclude/net/xfrm.h net/xfrm/xfrm_policy.c+10 -00 replies
717/1266perf machine: Use snprintf() for guestmount path constructiontools/perf/util/machine.c+4 -40 replies
718/1266perf cs-etm: Validate num_cpu before metadata allocationtools/perf/util/cs-etm.c+12 -00 replies
719/1266perf cs-etm: Require full global header in auxtrace_info size checktools/perf/util/cs-etm-base.c+3 -10 replies
720/1266ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate modesound/soc/codecs/tlv320aic3x.c+19 -60 replies
721/1266drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on freedrivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c+9 -70 replies
722/1266drm/amdkfd: fix list_del corruption in kfd_criu_resume_svmdrivers/gpu/drm/amd/amdkfd/kfd_svm.c+1 -00 replies
723/1266drm/amdgpu: initialize irq.lock spinlock earlierdrivers/gpu/drm/amd/amdgpu/amdgpu_device.c drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c+2 -20 replies
724/1266octeontx2-pf: Fix leak of SQ timestamp buffer on teardowndrivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c+1 -00 replies
725/1266net: psample: fix info leak in PSAMPLE_ATTR_DATAnet/psample/psample.c+4 -20 replies
726/1266sctp: hold socket lock when dumping endpoints in sctp_diaginclude/net/sctp/sctp.h net/sctp/diag.c net/sctp/socket.c+56 -430 replies
727/1266PCI: iproc: Restore .map_irq() for the platform bus driverdrivers/pci/controller/pcie-iproc-bcma.c drivers/pci/controller/pcie-iproc-platform.c drivers/pci/controller/pcie-iproc.c +1 more+2 -50 replies
728/1266spi: rpc-if: Use correct device for hardware reinitialization on resumedrivers/spi/spi-rpc-if.c+5 -10 replies
729/1266virtio-net: fix len check in receive_big()drivers/net/virtio_net.c+6 -30 replies
730/1266dpaa2-switch: fix VLAN upper check not rejecting bridge joindrivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c+1 -10 replies
731/1266devlink: Fix parent ref leak in devl_rate_node_create()net/devlink/rate.c+5 -50 replies
732/1266flow_dissector: check device type before reading ETH_ADDRSnet/core/flow_dissector.c+10 -20 replies
733/1266ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpointssound/usb/midi2.c+5 -00 replies
734/1266arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BASarch/arm64/kernel/hw_breakpoint.c+9 -00 replies
735/1266thermal: intel: Fix dangling resources on thermal_throttle_online() failuredrivers/thermal/intel/therm_throt.c+6 -10 replies
736/1266ACPI: resource: Amend kernel-doc styledrivers/acpi/resource.c+3 -30 replies
737/1266ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()drivers/acpi/acpi_ipmi.c+1 -10 replies
738/1266ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()net/ieee802154/core.c+1 -10 replies
739/1266ieee802154: fix kernel-infoleak in dgram_recvmsg()net/ieee802154/header_ops.c+6 -30 replies
740/1266md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retrydrivers/md/raid1.c+6 -00 replies
741/1266netfilter: ipset: Fix data race between add and dump in all hash typesnet/netfilter/ipset/ip_set_hash_gen.h+5 -20 replies
742/1266netfilter: ipset: annotate "pos" for concurrent readers/writersnet/netfilter/ipset/ip_set_hash_gen.h+38 -240 replies
743/1266netfilter: ipset: Dont use test_bit() in lockless RCU readers in hash typesnet/netfilter/ipset/ip_set_hash_gen.h+5 -50 replies
744/1266netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()net/netfilter/ipset/ip_set_core.c+2 -20 replies
745/1266netfilter: nf_reject: skip iphdr options when looking for icmp headernet/ipv4/netfilter/nf_reject_ipv4.c+1 -10 replies
746/1266netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leaknet/bridge/netfilter/nft_meta_bridge.c+3 -10 replies
747/1266irqchip/crossbar: Fix parent domain resource leakdrivers/irqchip/irq-crossbar.c+1 -00 replies
748/1266selftests/mm: clarify alternate unmapping in compaction_testtools/testing/selftests/mm/compaction_test.c+3 -00 replies
749/1266selftests/mm: allow PUD-level entries in compound testcase of hmm teststools/testing/selftests/mm/hmm-tests.c+24 -80 replies
750/1266selftests/mm: fix exclusive_cow test fork() handlingtools/testing/selftests/mm/hmm-tests.c+28 -30 replies
751/1266net: marvell: prestera: initialize err in prestera_port_sfp_binddrivers/net/ethernet/marvell/prestera/prestera_main.c+1 -10 replies
752/1266tipc: fix use-after-free of the discoverer in tipc_disc_rcv()net/tipc/core.c net/tipc/discover.c+17 -20 replies
753/1266net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error pathsdrivers/net/ethernet/mediatek/mtk_ppe.c+2 -20 replies
754/1266octeontx2-af: mcs: Fix unsupported secy stats readdrivers/net/ethernet/marvell/octeontx2/af/mcs.c drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c+5 -40 replies
755/1266octeontx2-pf: Clear stats of all resources when freeing resourcesdrivers/net/ethernet/marvell/octeontx2/nic/cn10k_macsec.c+1 -00 replies
756/1266octeontx2-pf: mcs: Fix mcs resources free on PF shutdowndrivers/net/ethernet/marvell/octeontx2/nic/cn10k_macsec.c+7 -20 replies
757/1266rtc: abx80x: fix the RTC_VL_CLR clearing all status flagsdrivers/rtc/rtc-abx80x.c+2 -10 replies
758/1266rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231drivers/rtc/rtc-ds1307.c+17 -110 replies
759/1266bpf: Fix stack slot index in nospec checkskernel/bpf/verifier.c+2 -10 replies
760/1266bpf: zero-initialize the fib lookup flow structnet/core/filter.c+2 -20 replies
761/1266bpf: Fix effective prog array index with BPF_F_PREORDERkernel/bpf/cgroup.c+62 -460 replies
762/1266drm/edid: fix OOB read in drm_parse_tiled_block()drivers/gpu/drm/drm_edid.c+8 -00 replies
763/1266PCI: endpoint: pci-epf-vntb: Add check to detect db_count value of 0drivers/pci/endpoint/functions/pci-epf-vntb.c+3 -60 replies
764/1266PCI: endpoint: pci-epf-ntb: Add check to detect db_count value of 0drivers/pci/endpoint/functions/pci-epf-ntb.c+11 -100 replies
765/1266ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()drivers/net/ethernet/intel/ice/ice_vf_lib.c+1 -10 replies
766/1266ice: fix AQ error code comparison in ice_set_pauseparam()drivers/net/ethernet/intel/ice/ice_common.c drivers/net/ethernet/intel/ice/ice_ethtool.c+8 -50 replies
767/1266i40e: Fix i40e_debug() to use struct i40e_hw argumentdrivers/net/ethernet/intel/i40e/i40e_debug.h+1 -10 replies
768/1266rtc: msc313: fix NULL deref in shared IRQ handler at probedrivers/rtc/rtc-msc313.c+2 -20 replies
769/1266ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATEfs/smb/server/smb2pdu.c+7 -40 replies
770/1266ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().net/ipv6/route.c+3 -00 replies
771/1266ipv4: fib: Dont ignore error route in local/main tables.include/net/ip_fib.h+3 -40 replies
772/1266bpf, lsm: Add disabled BPF LSM hook listkernel/bpf/bpf_lsm.c+29 -26 replies
773/1266bpf: Disable xfrm_decode_session hook attachmentkernel/bpf/bpf_lsm.c+3 -00 replies
774/1266netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()net/netfilter/nf_nat_core.c+10 -00 replies
775/1266netfilter: nf_conncount: prevent connlimit drops for early confirmed ctnet/netfilter/nf_conncount.c+5 -60 replies
776/1266netfilter: nft_synproxy: stop bypassing the priv->info snapshotnet/netfilter/nft_synproxy.c+4 -50 replies
777/1266netfilter: nft_compat: ebtables emulation must reject non-bridge targetsnet/netfilter/nft_compat.c+21 -30 replies
778/1266NTB: epf: Make db_valid_mask cover only real doorbell bitsdrivers/ntb/hw/epf/ntb_hw_epf.c+5 -10 replies
779/1266NTB: epf: Report 0-based doorbell vector via ntb_db_event()drivers/ntb/hw/epf/ntb_hw_epf.c+13 -30 replies
780/1266NTB: epf: Fix doorbell bitmask and IRQ vector handlingdrivers/ntb/hw/epf/ntb_hw_epf.c+39 -220 replies
781/1266alpha/PCI: Add security_locked_down() check to pci_mmap_resource()arch/alpha/kernel/pci-sysfs.c+6 -10 replies
782/1266alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARsarch/alpha/kernel/pci-sysfs.c+5 -10 replies
783/1266net, bpf: check master for NULL in xdp_master_redirect()net/core/filter.c+1 -10 replies
784/1266net: dsa: sja1105: round up PTP perout pin durationdrivers/net/dsa/sja1105/sja1105_ptp.c+1 -10 replies
785/1266veth: fix NAPI leak in XDP enable error pathdrivers/net/veth.c+2 -00 replies
786/1266net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handlenet/sched/cls_api.c+3 -00 replies
787/1266ipv6: fix error handling in disable_ipv6 sysctlnet/ipv6/addrconf.c+2 -00 replies
788/1266ipv6: fix error handling in ignore_routes_with_linkdown sysctlnet/ipv6/addrconf.c+2 -00 replies
789/1266ipv6: fix error handling in forwarding sysctlnet/ipv6/addrconf.c+3 -10 replies
790/1266ipv6: fix error handling in disable_policy sysctlnet/ipv6/addrconf.c+2 -00 replies
791/1266smb/client: preserve errors from smb2_set_sparse()fs/smb/client/smb2ops.c+15 -150 replies
792/1266rtc: ds1307: Fix off-by-one issue with wday for rx8130drivers/rtc/rtc-ds1307.c+1 -10 replies
793/1266rtc: cmos: unregister HPET IRQ handler on probe failuredrivers/rtc/rtc-cmos.c+6 -00 replies
794/1266net: mvneta: re-enable percpu interrupt on resumedrivers/net/ethernet/marvell/mvneta.c+3 -00 replies
795/1266net: sungem: fix probe error cleanupdrivers/net/ethernet/sun/sungem.c+9 -40 replies
796/1266net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in removedrivers/net/ethernet/sunplus/spl2sw_phy.c+4 -20 replies
797/1266ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel countsound/soc/fsl/fsl_asrc_dma.c+20 -00 replies
798/1266dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallbackDocumentation/devicetree/bindings/net/renesas,ether.yaml+1 -20 replies
799/1266tracing: probes: fix typo in a log messagekernel/trace/trace_probe.h+1 -10 replies
800/1266spi: sh-msiof: abort transfers when reset times outdrivers/spi/spi-sh-msiof.c+6 -40 replies
801/1266gpio: mvebu: fail probe if gpiochip registration failsdrivers/gpio/gpio-mvebu.c+4 -10 replies
802/1266gpio: htc-egpio: use managed gpiochip registrationdrivers/gpio/gpio-htc-egpio.c+5 -10 replies
803/1266seg6: validate SRH length before reading fixed fieldsnet/ipv6/seg6.c+3 -00 replies
804/1266qede: fix out-of-bounds check for cqe->len_list[]drivers/net/ethernet/qlogic/qede/qede_fp.c+2 -20 replies
805/1266net: enetc: check the number of BDs needed for xdp_framedrivers/net/ethernet/freescale/enetc/enetc.c+7 -00 replies
806/1266sctp: fix SCTP_RESET_STREAMS stream list length limitnet/sctp/socket.c+5 -40 replies
807/1266MIPS: DEC: Ensure RTC platform device deregistration upon failurearch/mips/dec/platform.c+5 -10 replies
808/1266hwmon: adm1275: Prevent reading uninitialized stackdrivers/hwmon/pmbus/adm1275.c+1 -10 replies
809/1266hwmon: (pmbus) Fix passing events to regulator coredrivers/hwmon/pmbus/pmbus_core.c+9 -40 replies
810/1266usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()drivers/net/usb/gl620a.c+3 -30 replies
811/1266net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroydrivers/net/phy/sfp.c+1 -00 replies
812/1266net: gianfar: dispose irq mappings on probe failure and device removaldrivers/net/ethernet/freescale/gianfar.c+11 -50 replies
813/1266net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAFnet/sched/sch_teql.c+86 -390 replies
814/1266bridge: stp: Fix a potential use-after-free when deleting a bridgenet/bridge/br_if.c net/bridge/br_stp.c+5 -10 replies
815/1266tracing/events: Fix to check the simple_tsk_fn creationsamples/trace_events/trace-events-sample.c+4 -00 replies
816/1266tracing: eprobe: read the complete FILTER_PTR_STRING pointerkernel/trace/trace_eprobe.c+1 -10 replies
817/1266irqchip/gic-v3-its: Fix OF node reference leakdrivers/irqchip/irq-gic-v3-its.c+2 -40 replies
818/1266irqchip/ts4800: Fix missing chained handler cleanup on removedrivers/irqchip/irq-ts4800.c+10 -00 replies
819/1266virtio_net: disable cb when NAPI is busy-polleddrivers/net/virtio_net.c+3 -00 replies
820/1266cxgb4: Fix decode strings dump for T6 adaptersdrivers/net/ethernet/chelsio/cxgb4/t4_hw.c+0 -80 replies
821/1266net/sched: act_bpf: use rcu_dereference_bh() to read the filternet/sched/act_bpf.c+1 -10 replies
822/1266ksmbd: reject undersized DACLs before parsing ACEsfs/smb/server/smbacl.c+6 -10 replies
823/1266smb: move some duplicate definitions to common/cifsglob.hfs/smb/client/cifsglob.h fs/smb/common/cifsglob.h fs/smb/server/smb_common.h+32 -310 replies
824/1266ksmbd: fix use-after-free of fp->owner.name in durable handle owner checkfs/smb/server/vfs_cache.c+21 -80 replies
825/1266gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probedrivers/gpio/gpio-timberdale.c+1 -10 replies
826/1266pinctrl: meson: restore non-sleeping GPIO accessdrivers/pinctrl/meson/pinctrl-meson.c+1 -10 replies
827/1266net/sched: hhf: clear heavy-hitter state on resetnet/sched/sch_hhf.c+27 -00 replies
828/1266fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgidfs/namei.c+4 -00 replies
829/1266afs: Fix error code in afs_extract_vl_addrs()fs/afs/vl_list.c+3 -10 replies
830/1266afs: use kvfree() to free memory allocated by kvcalloc()fs/afs/fs_operation.c+1 -10 replies
831/1266afs: Fix callback service message parsers to pass through -EAGAINfs/afs/cmservice.c+0 -20 replies
832/1266afs: Fix vllist leakfs/afs/cell.c+2 -00 replies
833/1266afs: Fix the volume AFS_VOLUME_RM_TREE is set onfs/afs/volume.c+1 -10 replies
834/1266afs: Fix unchecked-length string display in debug statementfs/afs/vl_list.c+5 -10 replies
835/1266minix: avoid overflow in bitmap block count calculationfs/minix/minix.h+1 -10 replies
836/1266ata: sata_gemini: unwind clocks on IDE pinctrl errorsdrivers/ata/sata_gemini.c+1 -10 replies
837/1266HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()drivers/hid/hid-picolcd_core.c+2 -10 replies
838/1266HID: core: Fix OOB read in hid_get_report for numbered reportsdrivers/hid/hid-core.c+7 -00 replies
839/1266arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep)arch/arm64/include/asm/pgtable.h arch/arm64/kernel/efi.c arch/arm64/mm/fault.c +5 more+25 -190 replies
840/1266arm64/mm: convert set_pte_at() to set_ptes(..., 1)arch/arm64/include/asm/pgtable.h arch/arm64/kernel/mte.c arch/arm64/kvm/guest.c +2 more+9 -90 replies
841/1266arm64/mm: convert ptep_clear() to ptep_get_and_clear()arch/arm64/mm/hugetlbpage.c+1 -10 replies
842/1266arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range()arch/arm64/mm/mmu.c+9 -20 replies
843/1266selftests/hid: ensure we can compile the tests on kernels pre-6.3tools/testing/selftests/hid/progs/hid.c tools/testing/selftests/hid/progs/hid_bpf_helpers.h+77 -30 replies
844/1266selftests/hid: do not manually call headers_installtools/testing/selftests/hid/Makefile+2 -60 replies
845/1266selftests/hid: force using our compiled libbpf headerstools/testing/selftests/hid/Makefile+2 -00 replies
846/1266selftests/hid: convert the hid_bpf selftests with struct_opstools/testing/selftests/hid/hid_bpf.c tools/testing/selftests/hid/progs/hid.c tools/testing/selftests/hid/progs/hid_bpf_helpers.h+89 -650 replies
847/1266selftests/hid: Cover hid_bpf_get_data() size overflowtools/testing/selftests/hid/Makefile tools/testing/selftests/hid/hid_bpf.c tools/testing/selftests/hid/progs/hid.c+27 -10 replies
848/1266net: usb: net1080: validate packet_len before pad-byte access in rx_fixupdrivers/net/usb/net1080.c+1 -10 replies
849/1266gue: validate REMCSUM private option lengthinclude/net/gue.h+1 -10 replies
850/1266netfilter: xt_u32: reject invalid shift countsnet/netfilter/xt_u32.c+11 -10 replies
851/1266netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()net/netfilter/xt_rateest.c+1 -10 replies
852/1266netfilter: ip6tables: mark malformed IPv6 extension headers for hotdropnet/ipv6/netfilter/ip6t_ah.c net/ipv6/netfilter/ip6t_hbh.c net/ipv6/netfilter/ip6t_rt.c+8 -10 replies
853/1266netfilter: xt_connmark: reject invalid shift parametersnet/netfilter/xt_connmark.c+12 -20 replies
854/1266net/mlx5e: Fix HV VHCA stats zero-sized buffer allocationdrivers/net/ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c+9 -10 replies
855/1266net/mlx5e: Fix HV VHCA stats agent registration racedrivers/net/ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c drivers/net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c drivers/net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h+22 -130 replies
856/1266net: microchip: vcap: fix races on the shared Super VCAP blockdrivers/net/ethernet/microchip/lan966x/lan966x_vcap_impl.c drivers/net/ethernet/microchip/sparx5/sparx5_vcap_impl.c drivers/net/ethernet/microchip/vcap/vcap_api.c +5 more+60 -420 replies
857/1266qede: fix off-by-one in BD ring consumption on build_skb failuredrivers/net/ethernet/qlogic/qede/qede_fp.c+5 -00 replies
858/1266net: qualcomm: rmnet: validate MAP frame length before ingress parsingdrivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c+45 -330 replies
859/1266net/sched: act_pedit: fix TOCTOU heap OOB write in tc offloadinclude/net/tc_act/tc_pedit.h net/sched/act_api.c net/sched/act_pedit.c +1 more+45 -210 replies
860/1266net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socketnet/smc/smc_cdc.c+10 -50 replies
861/1266amt: fix size calculation in amt_get_size()drivers/net/amt.c+3 -30 replies
862/1266Bluetooth: 6lowpan: hold L2CAP conn across debugfs controlnet/bluetooth/6lowpan.c net/bluetooth/l2cap_core.c+16 -60 replies
863/1266Bluetooth: MGMT: Fix adv monitor add failure cleanupnet/bluetooth/mgmt.c net/bluetooth/msft.c+3 -10 replies
864/1266Bluetooth: ISO: exclude RFU bits from ISO_SDU_Lengthinclude/net/bluetooth/hci.h+3 -20 replies
865/1266Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()drivers/bluetooth/bpa10x.c+6 -20 replies
866/1266ring-buffer: Fix event length with forced 8-byte alignmentkernel/trace/ring_buffer.c+2 -10 replies
867/1266net/tls: Consume empty data records in tls_sw_read_sock()net/tls/tls_sw.c+11 -00 replies
868/1266net: usb: lan78xx: move functions to avoid forward definitionsdrivers/net/usb/lan78xx.c+150 -1500 replies
869/1266net: usb: lan78xx: disable VLAN filter in promiscuous modedrivers/net/usb/lan78xx.c+14 -40 replies
870/1266net/sched: cake: reject overhead values that underflow lengthnet/sched/sch_cake.c+1 -40 replies
871/1266octeontx2-pf: check DMAC extraction support before filteringdrivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c+37 -60 replies
872/1266ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()include/linux/inetdevice.h net/ipv4/igmp.c+14 -50 replies
873/1266ipv6: mcast: Replace locking comments with lockdep annotations.net/ipv6/mcast.c+71 -540 replies
874/1266ipv6: mcast: Fix potential UAF in MLD delayed workinclude/net/addrconf.h net/ipv6/mcast.c+33 -120 replies
875/1266ipvs: pass parsed transport offset to state handlersinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_core.c net/netfilter/ipvs/ip_vs_proto_sctp.c +2 more+13 -90 replies
876/1266ipvs: use parsed transport offset in TCP state lookupnet/netfilter/ipvs/ip_vs_proto_tcp.c+1 -70 replies
877/1266ipvs: fix PMTU for GUE/GRE tunnel ICMP errorsnet/netfilter/ipvs/ip_vs_core.c+3 -30 replies
878/1266ipvs: ensure inner headers in ICMP errors are in headroomnet/netfilter/ipvs/ip_vs_core.c+15 -60 replies
879/1266s390/zcrypt: Remove the empty filedrivers/s390/crypto/zcrypt_cex2a.c drivers/s390/crypto/zcrypt_cex2a.h drivers/s390/crypto/zcrypt_cex2c.c +1 more+0 -00 replies
880/1266cifs: validate DFS referral string offsetsfs/smb/client/misc.c+8 -00 replies
881/1266SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKEDnet/sunrpc/xprtsock.c+4 -10 replies
882/1266SUNRPC: pin upper rpc_clnt across the TLS connect_workerinclude/linux/sunrpc/clnt.h net/sunrpc/clnt.c net/sunrpc/xprtsock.c+28 -30 replies
883/1266dm era: fix NULL pointer dereference in metadata_open()drivers/md/dm-era-target.c+4 -20 replies
884/1266regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCKdrivers/regulator/core.c+2 -20 replies
885/1266selftests/net: fix EVP_MD_CTX leak in tcp_mmaptools/testing/selftests/net/tcp_mmap.c+4 -00 replies
886/1266net/mlx5: Fix L3 tunnel entropy refcount leakdrivers/net/ethernet/mellanox/mlx5/core/lib/port_tun.c+2 -10 replies
887/1266octeontx2-af: fix VF bringup affecting PF promiscuous statedrivers/net/ethernet/marvell/octeontx2/af/rvu_nix.c+2 -20 replies
888/1266smb: client: fix overflow in passthrough ioctl bounds checkfs/smb/client/smb2ops.c+2 -20 replies
889/1266mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()drivers/net/ethernet/mellanox/mlxsw/spectrum.c+1 -10 replies
890/1266mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c+1 -00 replies
891/1266vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iterdrivers/vdpa/vdpa_user/vduse_dev.c+27 -100 replies
892/1266ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_putsound/soc/sof/ipc4-control.c+7 -40 replies
893/1266ASoC: SOF: ipc3-control: Use overflow checks in control_update size calcsound/soc/sof/ipc3-control.c+16 -40 replies
894/1266ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_getsound/soc/sof/ipc3-control.c+16 -70 replies
895/1266ASoC: SOF: topology: validate vendor array size before parsingsound/soc/sof/topology.c+4 -10 replies
896/1266net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()net/qrtr/af_qrtr.c+1 -10 replies
897/1266net: atm: reject out-of-range traffic classes in QoS validationnet/atm/common.c+2 -00 replies
898/1266net: ife: require ETH_HLEN to be pullable in ife_decode()net/ife/ife.c+1 -10 replies
899/1266arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()arch/arm64/kernel/entry-fpsimd.S+4 -40 replies
900/1266arm64: dts: qcom: sdm630: describe adsp_mem region properlyarch/arm64/boot/dts/qcom/sdm630.dtsi+6 -30 replies
901/1266KVM: s390: pci: Fix GISC refcount leak on AIF enable failurearch/s390/kvm/pci.c+1 -00 replies
902/1266KVM: arm64: vgic: Check the interrupt is still ours before migrating itarch/arm64/kvm/vgic/vgic.c+6 -50 replies
903/1266KVM: s390: pci: Fix handling of AIF enable without AISBarch/s390/kvm/pci.c+8 -30 replies
904/1266KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIsarch/x86/kvm/lapic.c+6 -20 replies
905/1266fbdev: metronomefb: fix potential memory leak in metronomefb_probe()drivers/video/fbdev/metronomefb.c+6 -20 replies
906/1266fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()drivers/video/fbdev/broadsheetfb.c+6 -20 replies
907/1266fbdev: hecubafb: fix potential memory leak in hecubafb_probe()drivers/video/fbdev/hecubafb.c+5 -10 replies
908/1266fbdev: sm712: Fix operator precedence in big_swap macrodrivers/video/fbdev/sm712.h+1 -10 replies
909/1266fbdev: radeon: fix potential memory leak in radeonfb_pci_register()drivers/video/fbdev/aty/radeon_base.c+1 -00 replies
910/1266fbdev: i740fb: fix potential memory leak in i740fb_probe()drivers/video/fbdev/i740fb.c+1 -00 replies
911/1266fbdev: s3fb: fix potential memory leak in s3_pci_probe()drivers/video/fbdev/s3fb.c+1 -00 replies
912/1266fbdev: uvesafb: fix potential memory leak in uvesafb_probe()drivers/video/fbdev/uvesafb.c+2 -20 replies
913/1266fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()drivers/video/fbdev/tdfxfb.c+1 -00 replies
914/1266fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()drivers/video/fbdev/carminefb.c+1 -00 replies
915/1266fbdev: vesafb: fix memory leak in vesafb_probe()drivers/video/fbdev/vesafb.c+1 -00 replies
916/1266fbdev: nvidia: fix potential memory leak in nvidiafb_probe()drivers/video/fbdev/nvidia/nvidia.c+1 -00 replies
917/1266fbdev: tridentfb: fix potential memory leak in trident_pci_probe()drivers/video/fbdev/tridentfb.c+1 -00 replies
918/1266ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/getsound/soc/sof/ipc3-control.c+19 -80 replies
919/1266ASoC: SOF: ipc3-control: Validate size in snd_sof_update_controlsound/soc/sof/ipc3-control.c+9 -00 replies
920/1266ASoC: mediatek: mt8192: Release reserved memory on cleanupsound/soc/mediatek/mt8192/mt8192-afe-pcm.c+9 -00 replies
921/1266ASoC: mediatek: mt8183: Release reserved memory on cleanupsound/soc/mediatek/mt8183/mt8183-afe-pcm.c+11 -00 replies
922/1266ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callbacksound/soc/qcom/qdsp6/q6apm.c+8 -00 replies
923/1266netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB readnet/netfilter/nf_conntrack_irc.c+3 -30 replies
924/1266netfilter: nfnl_cthelper: apply per-class values when updating policiesnet/netfilter/nfnetlink_cthelper.c+2 -20 replies
925/1266netfilter: xt_cluster: reject template conntracks in hash matchnet/netfilter/xt_cluster.c+1 -10 replies
926/1266netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dstinclude/net/netfilter/nf_queue.h net/netfilter/nf_queue.c net/netfilter/nfnetlink_queue.c+18 -00 replies
927/1266netfilter: nf_nat_sip: reload possible stale data pointernet/netfilter/nf_nat_sip.c+11 -00 replies
928/1266netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defragnet/ipv6/netfilter/nf_conntrack_reasm.c+2 -10 replies
929/1266netfilter: nf_conncount: fix zone comparison in tuple dedupnet/netfilter/nf_conncount.c+3 -30 replies
930/1266netfilter: ecache: fix inverted time_after() checknet/netfilter/nf_conntrack_ecache.c+1 -10 replies
931/1266netfilter: xt_nat: reject unsupported target familiesnet/netfilter/xt_nat.c+9 -00 replies
932/1266netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()net/ipv6/netfilter.c+3 -10 replies
933/1266gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error pathdrivers/gpu/host1x/bus.c+1 -10 replies
934/1266soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxydrivers/soc/ti/k3-ringacc.c+2 -20 replies
935/1266soc: fsl: qe: panic on ioremap() failure in qe_reset()drivers/soc/fsl/qe/qe.c+3 -00 replies
936/1266selinux: check connect-related permissions on TCP Fast Opensecurity/selinux/hooks.c+18 -10 replies
937/1266selinux: fix incorrect execmem checks on overlayfssecurity/selinux/hooks.c+24 -180 replies
938/1266leds: uleds: Fix potential buffer overreaddrivers/leds/uleds.c+2 -10 replies
939/1266mfd: sm501: Fix reference leak on failed device registrationdrivers/mfd/sm501.c+3 -10 replies
940/1266tools/power/x86/intel-speed-select: Harden daemon pidfile opentools/power/x86/intel-speed-select/isst-daemon.c+8 -10 replies
941/1266x86/boot: Validate console=uart8250 baud rate to fix early boot hangarch/x86/boot/early_serial_console.c+7 -40 replies
942/1266x86/boot: Reject too long acpi_rsdp= valuesarch/x86/boot/compressed/acpi.c+6 -10 replies
943/1266perf/x86/amd/lbr: Fix kernel address leakagearch/x86/events/amd/lbr.c+2 -10 replies
944/1266s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()arch/s390/kernel/perf_cpum_cf.c+3 -00 replies
945/1266batman-adv: gw: acquire ethernet header only after skb reallocnet/batman-adv/gateway_client.c+2 -10 replies
946/1266batman-adv: access unicast_ttvn skb->data only after skb reallocnet/batman-adv/routing.c+1 -10 replies
947/1266batman-adv: dat: acquire ARP hw source only after skb reallocnet/batman-adv/distributed-arp-table.c+4 -10 replies
948/1266batman-adv: bla: reacquire gw address after skb reallocnet/batman-adv/routing.c+1 -00 replies
949/1266batman-adv: dat: ensure accessible eth_hdr proto fieldnet/batman-adv/distributed-arp-table.c net/batman-adv/main.c+26 -00 replies
950/1266batman-adv: dat: fix tie-break for candidate selectionnet/batman-adv/distributed-arp-table.c+1 -10 replies
951/1266batman-adv: tt: avoid request storms during pending requestnet/batman-adv/translation-table.c+1 -10 replies
952/1266batman-adv: fix VLAN priority offsetnet/batman-adv/main.c+1 -10 replies
953/1266batman-adv: frag: free unfragmentable packetnet/batman-adv/fragmentation.c+4 -20 replies
954/1266batman-adv: frag: fix primary_if leak on failed linearizationnet/batman-adv/fragmentation.c+1 -10 replies
955/1266batman-adv: tt: prevent TVLV OOB check overflownet/batman-adv/translation-table.c+2 -10 replies
956/1266cifs: invalidate cfid on unlink/rename/rmdirfs/smb/client/inode.c+29 -10 replies
957/1266mfd: tps6586x: Fix OF node refcountdrivers/mfd/tps6586x.c+1 -10 replies
958/1266HID: playstation: validate num_touch_reports in DualShock 4 reportsdrivers/hid/hid-playstation.c+12 -00 replies
959/1266Bluetooth: SCO: fix sleeping under spinlock in sco_conn_readynet/bluetooth/sco.c+9 -110 replies
960/1266Bluetooth: SCO: hold sk properly in sco_conn_readynet/bluetooth/sco.c+32 -120 replies
961/1266jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()fs/jbd2/journal.c+2 -00 replies
962/1266nvdimm/btt: Free arenas on btt_init() error pathsdrivers/nvdimm/btt.c+7 -40 replies
963/1266nvdimm/btt: Free arena sub-allocations on discover_arenas() error pathdrivers/nvdimm/btt.c+3 -00 replies
964/1266sunrpc: pin svc_xprt across the asynchronous TLS handshake callbacknet/sunrpc/svcsock.c+6 -00 replies
965/1266sunrpc: wait for in-flight TLS handshake callback when cancel loses racenet/sunrpc/svcsock.c+4 -00 replies
966/1266lockd: Plug nlm_file leak when nlm_do_fopen() failsfs/lockd/svcsubs.c+1 -10 replies
967/1266lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failurefs/lockd/svcsubs.c+2 -00 replies
968/1266SUNRPC: Bound-check xdr_buf_to_bvec() stores before writingnet/sunrpc/xdr.c+9 -50 replies
969/1266remoteproc: qcom: Fix leak when custom dump_segments addition failsdrivers/remoteproc/qcom_common.c+10 -40 replies
970/1266MIPS: ip22-gio: fix gio device memory leakarch/mips/sgi-ip22/ip22-gio.c+2 -00 replies
971/1266MIPS: ip22-gio: fix kfree() of static objectarch/mips/sgi-ip22/ip22-gio.c+0 -10 replies
972/1266MIPS: ip22-gio: fix device reference leak in probearch/mips/sgi-ip22/ip22-gio.c+0 -40 replies
973/1266MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()arch/mips/dec/prom/init.c arch/mips/include/asm/dec/prom.h+18 -30 replies
974/1266power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leakdrivers/power/supply/cpcap-battery.c+7 -40 replies
975/1266mm/damon/core: make charge_addr_from aware of end-address exclusivitymm/damon/core.c+1 -10 replies
976/1266fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory renamefs/ntfs3/namei.c+1 -10 replies
977/1266fs/ntfs3: bound DeleteIndexEntryAllocation memmove lengthfs/ntfs3/fslog.c+15 -10 replies
978/1266fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis passfs/ntfs3/fslog.c+29 -170 replies
979/1266fs/ntfs3: bound attr_off in UpdateResidentValue against data_offfs/ntfs3/fslog.c+11 -00 replies
980/1266fs/ntfs3: validate lcns_follow in log_replay conversionfs/ntfs3/fslog.c+16 -30 replies
981/1266fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflowfs/ntfs3/index.c+12 -30 replies
982/1266fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}fs/ntfs3/fslog.c+18 -00 replies
983/1266ntfs3: cap RESTART_TABLE free-chain walker at rt->usedfs/ntfs3/fslog.c+12 -10 replies
984/1266ntfs3: bound to_move in indx_insert_into_root before hdr_insert_headfs/ntfs3/index.c+16 -00 replies
985/1266ntfs3: validate split-point offset in indx_insert_into_bufferfs/ntfs3/index.c+14 -00 replies
986/1266ntfs3: fix out-of-bounds read in decompress_lzntfs/ntfs3/lznt.c+1 -10 replies
987/1266power: supply: charger-manager: fix refcount leak in is_full_charged()drivers/power/supply/charger-manager.c+4 -20 replies
988/1266mips: sched: Fix CPUMASK_OFFSTACK memory corruptionarch/mips/kernel/mips-mt-fpaff.c+15 -130 replies
989/1266riscv: cacheinfo: Fix node reference leak in populate_cache_leavesarch/riscv/kernel/cacheinfo.c+1 -10 replies
990/1266mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()mm/damon/sysfs-schemes.c+3 -60 replies
991/1266mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal errormm/damon/sysfs-schemes.c+4 -40 replies
992/1266proc: only bump parent nlink when registering directoriesfs/proc/generic.c+4 -50 replies
993/1266mm/mm_init: fix uninitialized struct pages for ZONE_DEVICEmm/mm_init.c+10 -30 replies
994/1266mtd: slram: remove failed entries from the device listdrivers/mtd/devices/slram.c+16 -60 replies
995/12669p: skip nlink update in cacheless mode to fix WARN_ONfs/9p/vfs_inode.c+9 -00 replies
996/1266scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()drivers/scsi/smartpqi/smartpqi_init.c+1 -10 replies
997/1266scsi: sas: Skip opt_sectors when DMA reports no real optimization hintdrivers/scsi/scsi_transport_sas.c+36 -50 replies
998/1266ocfs2: use kzalloc for quota recovery bitmap allocationfs/ocfs2/quota_local.c+1 -10 replies
999/1266mtd: rawnand: pl353: fix probe resource allocationdrivers/mtd/nand/raw/pl35x-nand-controller.c+1 -10 replies
1000/1266net/9p: fix infinite loop in p9_client_rpc on fatal signalnet/9p/client.c+2 -00 replies
1001/1266mtd: rawnand: fix condition in nand_select_target()drivers/mtd/nand/raw/nand_base.c+1 -10 replies
1002/1266ocfs2: avoid moving extents to occupied clustersfs/ocfs2/move_extents.c+3 -10 replies
1003/1266ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_creditsfs/ocfs2/journal.c+5 -10 replies
1004/1266ocfs2: add journal NULL check in ocfs2_checkpoint_inode()fs/ocfs2/journal.h+3 -00 replies
1005/1266ocfs2: reject dinodes with non-canonical i_mode typefs/ocfs2/inode.c+33 -20 replies
1006/1266ocfs2: reject dinodes whose i_rdev disagrees with the file typefs/ocfs2/inode.c+55 -00 replies
1007/1266ocfs2: reject non-inline dinodes with i_size and zero i_clustersfs/ocfs2/inode.c+60 -00 replies
1008/1266fpga: dfl: add bounds check in dfh_get_param_size()drivers/fpga/dfl.c+2 -00 replies
1009/1266bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error pathdrivers/bus/mhi/ep/main.c+2 -00 replies
1010/1266net: thunderbolt: Fix frags[] overflow by bounding frame_countdrivers/net/thunderbolt/main.c+6 -20 replies
1011/1266fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()drivers/fpga/microchip-spi.c+3 -00 replies
1012/1266mtd: spi-nor: swp: Improve locking user experiencedrivers/mtd/spi-nor/swp.c+9 -20 replies
1013/1266mtd: maps: vmu-flash: fix NULL pointer dereference in initializationdrivers/mtd/maps/vmu-flash.c+1 -00 replies
1014/1266irqchip/crossbar: Use correct index in crossbar_domain_free()drivers/irqchip/irq-crossbar.c+7 -20 replies
1015/1266tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()drivers/char/tpm/tpm_tis_core.c+21 -140 replies
1016/1266dmaengine: tegra: Fix burst size calculationdrivers/dma/tegra186-gpc-dma.c+7 -00 replies
1017/1266dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASKdrivers/dma/dw-edma/dw-edma-core.h drivers/dma/dw-edma/dw-edma-v0-core.c+7 -10 replies
1018/1266platform/x86/amd/pmc: Check for intermediate wakeup in functiondrivers/platform/x86/amd/pmc/pmc.c+14 -30 replies
1019/1266platform/x86/amd/pmc: Delay suspend for some Lenovo Laptopsdrivers/platform/x86/amd/pmc/pmc-quirks.c drivers/platform/x86/amd/pmc/pmc.c drivers/platform/x86/amd/pmc/pmc.h+63 -10 replies
1020/1266platform/x86/amd/pmc: Add delay_suspend module parameterdrivers/platform/x86/amd/pmc/pmc.c+23 -24 replies
1021/1266smb: client: use kvzalloc() for megabyte buffer in simple fallocatefs/smb/client/smb2ops.c+2 -20 replies
1022/1266ksmbd: fix integer overflow in set_file_allocation_info()fs/smb/server/smb2pdu.c+14 -10 replies
1023/1266hwmon: (ltc2992) add missing select REGMAP_I2C to Kconfigdrivers/hwmon/Kconfig+1 -00 replies
1024/1266i2c: mediatek: fix WRRD for SoCs without auto_restart optiondrivers/i2c/busses/i2c-mt65xx.c+1 -10 replies
1025/1266i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()drivers/i2c/busses/i2c-mlxbf.c+3 -10 replies
1026/1266ice: fix ice_init_link() error return preventing probedrivers/net/ethernet/intel/ice/ice_main.c+5 -110 replies
1027/1266xen/gntdev: fix error handling in ioctldrivers/xen/gntdev.c+6 -20 replies
1028/1266xfrm: use compat translator only for u64 alignment mismatchnet/xfrm/xfrm_state.c net/xfrm/xfrm_user.c+2 -20 replies
1029/1266xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelinknet/xfrm/xfrm_interface_core.c+3 -00 replies
1030/1266tpm: fix event_size output in tpm1_binary_bios_measurements_showdrivers/char/tpm/eventlog/tpm1.c+2 -20 replies
1031/1266tpm: Make the TPM character devices non-seekabledrivers/char/tpm/tpm-dev.c drivers/char/tpm/tpmrm-dev.c+2 -20 replies
1032/1266time: Fix off-by-one in compat settimeofday() usec validationkernel/time/time.c+1 -10 replies
1033/1266spi: uniphier: Fix completion initialization order before devm_request_irq()drivers/spi/spi-uniphier.c+2 -20 replies
1034/1266sctp: validate STALE_COOKIE cause length before reading stalenessnet/sctp/sm_statefuns.c+14 -90 replies
1035/1266nvmet-rdma: handle inline data with a nonzero offsetdrivers/nvme/target/rdma.c+10 -80 replies
1036/1266can: esd_usb: kill anchored URBs before freeing netdevsdrivers/net/can/usb/esd_usb.c+4 -10 replies
1037/1266can: isotp: use unconditional synchronize_rcu() in isotp_release()net/can/isotp.c+8 -10 replies
1038/1266can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAFnet/can/bcm.c+34 -30 replies
1039/1266can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failurenet/can/bcm.c+51 -140 replies
1040/1266can: bcm: add missing rcu list annotations and operationsnet/can/bcm.c+16 -90 replies
1041/1266bpf,fork: wipe ->bpf_storage before bailouts that access itkernel/fork.c+5 -40 replies
1042/1266bpf: Add missing access_ok call to copy_user_symskernel/trace/bpf_trace.c+6 -50 replies
1043/1266net: sparx5: unregister blocking notifier on init failuredrivers/net/ethernet/microchip/sparx5/sparx5_switchdev.c+3 -10 replies
1044/1266dm thin metadata: fix superblock refcount leak on snapshot shadow failuredrivers/md/dm-thin-metadata.c+3 -10 replies
1045/1266dm thin metadata: fix metadata snapshot consistency on commit failuredrivers/md/dm-thin-metadata.c+18 -450 replies
1046/1266dm era: fix out-of-bounds memory access for non-zero start sectordrivers/md/dm-era-target.c+3 -10 replies
1047/1266dm-bufio: fix wrong count calculation in dm_bufio_issue_discarddrivers/md/dm-bufio.c+3 -10 replies
1048/1266dm-ioctl: fix a possible overflow in list_version_get_infodrivers/md/dm-ioctl.c+1 -10 replies
1049/1266dm-log: fix a bitset_size overflow on 32bit machinesdrivers/md/dm-log.c+3 -00 replies
1050/1266dm-stats: fix dm_jiffies_to_msec64drivers/md/dm-stats.c+2 -20 replies
1051/1266dm-stats: fix merge accountingdrivers/md/dm-stats.c+2 -40 replies
1052/1266dm_early_create: fix freeing used table on dm_resume failuredrivers/md/dm-ioctl.c+1 -10 replies
1053/1266dm-integrity: dont increment hash_offset twicedrivers/md/dm-integrity.c+0 -30 replies
1054/1266dm-verity: fix a possible NULL pointer dereferencedrivers/md/dm-verity-loadpin.c+1 -10 replies
1055/1266dm-verity: increase sprintf buffer sizedrivers/md/dm-verity-target.c+1 -10 replies
1056/1266scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset pathdrivers/scsi/hpsa.c+4 -00 replies
1057/1266scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()drivers/scsi/lpfc/lpfc_init.c+1 -20 replies
1058/1266scsi: sg: Report request-table problems when any status is setdrivers/scsi/sg.c+3 -40 replies
1059/1266scsi: xen: scsiback: Free the command tag on the TMR submit-failure pathdrivers/xen/xen-scsiback.c+1 -10 replies
1060/1266scsi: xen: scsiback: Free unsubmitted command instead of double-putting itdrivers/xen/xen-scsiback.c+22 -60 replies
1061/1266scsi: target: Bound PR-OUT TransportID parsing to the received bufferdrivers/target/target_core_fabric_lib.c drivers/target/target_core_internal.h drivers/target/target_core_pr.c+73 -230 replies
1062/1266scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVEdrivers/target/target_core_pr.c+5 -30 replies
1063/1266scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()drivers/scsi/elx/efct/efct_hw.c+2 -00 replies
1064/1266scsi: elx: efct: Fix I/O leak on unsupported additional CDBdrivers/scsi/elx/efct/efct_unsol.c+1 -00 replies
1065/1266Input: ims-pcu - fix use-after-free and double-free in disconnectdrivers/input/misc/ims-pcu.c+1 -20 replies
1066/1266Input: ims-pcu - release data interface on disconnectdrivers/input/misc/ims-pcu.c+1 -00 replies
1067/1266Input: ims-pcu - validate control endpoint typedrivers/input/misc/ims-pcu.c+6 -00 replies
1068/1266Input: ims-pcu - add response length checksdrivers/input/misc/ims-pcu.c+81 -60 replies
1069/1266Input: ims-pcu - fix DMA mapping violation in line setupdrivers/input/misc/ims-pcu.c+7 -20 replies
1070/1266Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug loggingdrivers/input/misc/ims-pcu.c+1 -10 replies
1071/1266Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsingdrivers/input/misc/ims-pcu.c+3 -20 replies
1072/1266Input: ims-pcu - fix race condition in reset_device sysfs callbackdrivers/input/misc/ims-pcu.c+2 -00 replies
1073/1266Input: ims-pcu - fix type confusion in CDC union descriptor parsingdrivers/input/misc/ims-pcu.c+1 -10 replies
1074/1266net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC deletedrivers/net/ethernet/mellanox/mlx5/core/en_accel/macsec.c+28 -190 replies
1075/1266posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()kernel/time/posix-cpu-timers.c+1 -10 replies
1076/1266cpu: hotplug: Preserve per instance callback errorskernel/cpu.c+4 -40 replies
1077/1266cpu: hotplug: Bound hotplug states sysfs outputkernel/cpu.c+4 -80 replies
1078/1266gpio-f7188x: Add support for NCT6126D version Bdrivers/gpio/gpio-f7188x.c+4 -20 replies
1079/1266gpios: palmas: add .get_direction() opdrivers/gpio/gpio-palmas.c+19 -00 replies
1080/1266net: sit: require CAP_NET_ADMIN in the device netns for changelinknet/ipv6/sit.c+3 -00 replies
1081/1266net: wwan: t7xx: destroy DMA pool on CLDMA late init failuredrivers/net/wwan/t7xx/t7xx_hif_cldma.c+3 -00 replies
1082/1266net: ixp4xx_hss: fix duplicate HDLC netdev allocationdrivers/net/wan/ixp4xx_hss.c+2 -20 replies
1083/1266net/sched: act_ct: preserve tc_skb_cb across defragmentationnet/sched/act_ct.c+4 -30 replies
1084/1266net: ena: clean up XDP TX queues when regular TX setup failsdrivers/net/ethernet/amazon/ena/ena_netdev.c+21 -20 replies
1085/1266net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelinknet/ipv6/ip6_vti.c+3 -00 replies
1086/1266net: ip_vti: require CAP_NET_ADMIN in the device netns for changelinknet/ipv4/ip_vti.c+3 -00 replies
1087/1266net: ipip: require CAP_NET_ADMIN in the device netns for changelinknet/ipv4/ipip.c+3 -00 replies
1088/1266net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelinknet/ipv6/ip6_gre.c+6 -00 replies
1089/1266ieee802154: admin-gate legacy LLSEC dump operationsnet/ieee802154/ieee802154.h net/ieee802154/netlink.c+16 -80 replies
1090/1266ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validationnet/ieee802154/ieee802154.h net/ieee802154/netlink.c+19 -100 replies
1091/1266ieee802154: ca8210: fix cas_ctl leak on spi_async failuredrivers/net/ieee802154/ca8210.c+2 -10 replies
1092/1266ieee802154: ca8210: fix pointer truncation in kfifo on 64-bitdrivers/net/ieee802154/ca8210.c+4 -20 replies
1093/1266net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variantsnet/sched/sch_teql.c+14 -130 replies
1094/1266batman-adv: retrieve ethhdr after potential skb realloc on RXnet/batman-adv/soft-interface.c+1 -00 replies
1095/1266batman-adv: ensure minimal ethernet header on TXnet/batman-adv/soft-interface.c+3 -00 replies
1096/1266batman-adv: clean untagged VLAN on netdev registration failurenet/batman-adv/main.c net/batman-adv/soft-interface.c net/batman-adv/soft-interface.h+12 -110 replies
1097/1266LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()arch/loongarch/include/asm/pgtable.h+4 -00 replies
1098/1266espintcp: use sk_msg_free_partial to fix partial sendnet/xfrm/espintcp.c+7 -270 replies
1099/1266bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c+1 -20 replies
1100/1266rtc: mpfs: fix counter upload completion conditiondrivers/rtc/rtc-mpfs.c+1 -10 replies
1101/1266hwmon: (w83627hf) remove VID sysfs files on error and removedrivers/hwmon/w83627hf.c+4 -00 replies
1102/1266hwmon: (w83793) remove vrm sysfs file on probe failuredrivers/hwmon/w83793.c+1 -00 replies
1103/1266net: liquidio: fix BAR resource leak on PF number failuredrivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c+10 -80 replies
1104/1266hwmon: (occ) unregister sysfs devices outside occ lockdrivers/hwmon/occ/common.c drivers/hwmon/occ/common.h+29 -60 replies
1105/1266fsl/fman: Free init resources on KeyGen failure in fman_init()drivers/net/ethernet/freescale/fman/fman.c+3 -10 replies
1106/1266net: lan743x: Initialize eth_syslock spinlock before usedrivers/net/ethernet/microchip/lan743x_main.c+1 -10 replies
1107/1266net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peekednet/sched/sch_multiq.c+1 -10 replies
1108/1266net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peekednet/sched/sch_taprio.c+1 -10 replies
1109/1266tracing/probes: Fix double addition of offset for @+FOFFSETkernel/trace/trace_probe.c+1 -00 replies
1110/1266orangefs: keep the readdir entry size 64-bit in fill_from_part()fs/orangefs/dir.c+4 -30 replies
1111/1266ata: pata_pxa: Fix DMA channel leak on probe errordrivers/ata/pata_pxa.c+1 -00 replies
1112/1266net: wwan: iosm: bound device offsets in the MUX downlink decoderdrivers/net/wwan/iosm/iosm_ipc_mux_codec.c+30 -100 replies
1113/1266hwmon: (asus_atk0110) Check package count before accessing elementdrivers/hwmon/asus_atk0110.c+3 -00 replies
1114/1266riscv: probes: save original sp in rethook trampolinearch/riscv/kernel/probes/rethook_trampoline.S+3 -00 replies
1115/1266s390/monwriter: Reject buffer reuse with different data lengthdrivers/s390/char/monwriter.c+3 -00 replies
1116/1266mac802154: remove interfaces with RCU list deletionnet/mac802154/iface.c+1 -10 replies
1117/1266llc: fix SAP refcount leak in llc_ui_autobind()net/llc/af_llc.c+1 -00 replies
1118/1266ipvs: use parsed transport offset in SCTP state lookupnet/netfilter/ipvs/ip_vs_proto_sctp.c+5 -100 replies
1119/1266ipvs: reset full ip_vs_seq structs in ip_vs_conn_newnet/netfilter/ipvs/ip_vs_conn.c+2 -20 replies
1120/1266macsec: dont read an unset MAC header in macsec_encrypt()drivers/net/macsec.c+1 -10 replies
1121/1266drbd: reject data replies with an out-of-range payload sizedrivers/block/drbd/drbd_receiver.c+5 -00 replies
1122/1266riscv: Prevent NULL pointer dereference in machine_kexec_prepare()arch/riscv/kernel/machine_kexec.c+3 -00 replies
1123/1266tracing/osnoise: Call synchronize_rcu() when unregisteringkernel/trace/trace_osnoise.c+3 -10 replies
1124/1266cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowedkernel/cgroup/cpuset.c+6 -10 replies
1125/1266pmdomain: imx: Fix i.MX8MP power notifierdrivers/pmdomain/imx/imx8m-blk-ctrl.c+26 -10 replies
1126/1266pmdomain: imx: Fix i.MX8MP VC8000E power up sequencedrivers/pmdomain/imx/imx8m-blk-ctrl.c+18 -10 replies
1127/1266powerpc/pseries: fix memory leak on krealloc failure in papr_initarch/powerpc/platforms/pseries/papr_platform_attributes.c+3 -50 replies
1128/1266wifi: rt2x00: avoid full teardown before work setup in probedrivers/net/wireless/ralink/rt2x00/rt2x00dev.c+10 -20 replies
1129/1266wifi: mac80211: fix memory leak in ieee80211_register_hw()net/mac80211/main.c+2 -10 replies
1130/1266regulator: ltc3676: Fix incorrect IRQSTAT bit offsetsdrivers/regulator/ltc3676.c+5 -50 replies
1131/1266net: openvswitch: reject oversized nested action attrsnet/openvswitch/flow_netlink.c+157 -440 replies
1132/1266Bluetooth: btrtl: validate firmware patch boundsdrivers/bluetooth/btrtl.c+3 -20 replies
1133/1266llc: fix SAP refcount leak when creating incoming socketsnet/llc/llc_conn.c+0 -10 replies
1134/1266macsec: fix promiscuity refcount leak in macsec_dev_open()drivers/net/macsec.c+5 -20 replies
1135/1266memstick: ms_block: reject a card that reports too many blocksdrivers/memstick/core/ms_block.c+4 -00 replies
1136/1266ipvs: fix more places with wrong ipv6 transport offsetsnet/netfilter/ipvs/ip_vs_app.c net/netfilter/ipvs/ip_vs_core.c+5 -80 replies
1137/1266ipvs: reload ip header after head reallocationnet/netfilter/ipvs/ip_vs_xmit.c+2 -40 replies
1138/1266reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQdrivers/reset/reset-imx7.c+6 -00 replies
1139/1266reset: sunxi: fix memory region leak on ioremap failuredrivers/reset/reset-sunxi.c+3 -10 replies
1140/1266powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()arch/powerpc/platforms/cell/spufs/file.c+4 -20 replies
1141/1266wifi: mac80211: free ack status frame on TX header build failurenet/mac80211/tx.c+16 -10 replies
1142/1266wifi: mwifiex: fix permanently busy scans after multiple roam iterationsdrivers/net/wireless/marvell/mwifiex/join.c+0 -10 replies
1143/1266mtd: onenand: samsung: report DMA completion timeoutsdrivers/mtd/nand/onenand/onenand_samsung.c+6 -10 replies
1144/1266mtd: mchp23k256: use SPI match data for chip capsdrivers/mtd/devices/mchp23k256.c+1 -10 replies
1145/1266mmc: vub300: defer reset until cmd_mutex is unlockeddrivers/mmc/host/vub300.c+17 -90 replies
1146/1266mtd: rawnand: fsl_ifc: return errors for failed page readsdrivers/mtd/nand/raw/fsl_ifc_nand.c+8 -10 replies
1147/1266mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeoutdrivers/mtd/nand/raw/lpc32xx_mlc.c+10 -20 replies
1148/1266mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeoutdrivers/mtd/nand/raw/lpc32xx_slc.c+10 -20 replies
1149/1266perf/x86/amd/brs: Fix kernel address leakagearch/x86/events/amd/brs.c+5 -50 replies
1150/1266ACPI: NFIT: core: Fix acpi_nfit_init() error cleanupdrivers/acpi/nfit/core.c+15 -30 replies
1151/1266ACPI: driver: Check ACPI_COMPANION() against NULL during probedrivers/acpi/acpi_tad.c drivers/acpi/pfr_telemetry.c drivers/acpi/pfr_update.c +1 more+16 -40 replies
1152/1266ACPI: bus: Introduce devm_acpi_install_notify_handler()drivers/acpi/bus.c include/acpi/acpi_bus.h+72 -00 replies
1153/1266ACPI: NFIT: core: Use devm_acpi_install_notify_handler()drivers/acpi/nfit/core.c+2 -150 replies
1154/1266ACPI: NFIT: core: Fix possible deadlock and missing notificationsdrivers/acpi/nfit/core.c+47 -120 replies
1155/1266iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQdrivers/iio/imu/adis_trigger.c+1 -10 replies
1156/1266iio: hid-sensor-rotation: Fix stale or zero output when reading raw valuesdrivers/iio/orientation/hid-sensor-rotation.c+38 -20 replies
1157/1266iio: invensense: remove redundant initialization of variable perioddrivers/iio/common/inv_sensors/inv_sensors_timestamp.c+1 -10 replies
1158/1266iio: invensense: fix timestamp glitches when switching frequencydrivers/iio/common/inv_sensors/inv_sensors_timestamp.c drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c +1 more+21 -280 replies
1159/1266iio: imu: inv_icm42600: stabilized timestamp in interruptdrivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h drivers/iio/imu/inv_icm42600/inv_icm42600_core.c+20 -20 replies
1160/1266iio: imu: inv_icm42600: fix timestamping by limiting FIFO readingdrivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h+6 -40 replies
1161/1266iio: pressure: mpl115: fix runtime PM leak on read errordrivers/iio/pressure/mpl115.c+4 -40 replies
1162/1266bitops: make BYTES_TO_BITS() treewide-availableinclude/linux/bitops.h kernel/trace/trace_probe.c tools/include/linux/bitops.h +1 more+5 -50 replies
1163/1266iio: common: st_sensors: honour channel endianness in read_axis_datadrivers/iio/common/st_sensors/st_sensors_core.c+17 -60 replies
1164/1266ALSA: aoa: check snd_ctl_new1() return valuesound/aoa/fabrics/layout.c+6 -00 replies
1165/1266PCI: altera: Fix resource leaks on probe failuredrivers/pci/controller/pcie-altera.c+26 -20 replies
1166/1266vfio/mlx5: Fix racy bitfields and tighten struct layoutdrivers/vfio/pci/mlx5/cmd.h+8 -50 replies
1167/1266PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handlingdrivers/pci/controller/dwc/pci-imx6.c+2 -20 replies
1168/1266PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()drivers/pci/controller/dwc/pcie-designware-host.c drivers/pci/controller/mobiveil/pcie-mobiveil-host.c drivers/pci/controller/pcie-altera-msi.c +4 more+10 -130 replies
1169/1266PCI: mediatek: Convert bool to single quirks entry and bitmapdrivers/pci/controller/pcie-mediatek.c+20 -130 replies
1170/1266PCI: mediatek: Use generic MACRO for TPVPERL delaydrivers/pci/controller/pcie-mediatek.c+1 -60 replies
1171/1266PCI: mediatek: Fix IRQ domain leak when port fails to enabledrivers/pci/controller/pcie-mediatek.c+42 -250 replies
1172/1266PCI: Prevent resource tree corruption when BAR resize failsdrivers/pci/setup-bus.c+5 -00 replies
1173/1266PCI: Free saved list without holding pci_bus_semdrivers/pci/setup-bus.c+1 -10 replies
1174/1266PCI: Fix restoring BARs on BAR resize rollback pathdrivers/gpu/drm/amd/amdgpu/amdgpu_device.c drivers/gpu/drm/i915/gt/intel_region_lmem.c drivers/pci/pci-sysfs.c +4 more+87 -600 replies
1175/1266PCI: Add kerneldoc for pci_resize_resource()drivers/pci/setup-res.c+20 -00 replies
1176/1266PCI: Move Resizable BAR code to rebar.cDocumentation/driver-api/pci/pci.rst drivers/pci/Makefile drivers/pci/pci.c +3 more+217 -2010 replies
1177/1266PCI: Skip Resizable BAR restore on read errordrivers/pci/rebar.c+6 -00 replies
1178/1266staging: rtl8723bs: core: move constants to right side in comparisondrivers/staging/rtl8723bs/core/rtw_ieee80211.c drivers/staging/rtl8723bs/core/rtw_security.c+3 -30 replies
1179/1266staging: rtl8723bs: fix spaces around binary operatorsdrivers/staging/rtl8723bs/core/rtw_ieee80211.c+42 -360 replies
1180/1266staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()drivers/staging/rtl8723bs/core/rtw_ieee80211.c+15 -00 replies
1181/1266crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()drivers/crypto/intel/qat/qat_common/adf_accel_devices.h drivers/crypto/intel/qat/qat_common/adf_common_drv.h drivers/crypto/intel/qat/qat_common/adf_isr.c +1 more+61 -20 replies
1182/1266Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn refinclude/net/bluetooth/l2cap.h net/bluetooth/l2cap_core.c+21 -140 replies
1183/1266mm: shrinker: remove redundant shrinker_rwsem in debugfs operationsmm/shrinker_debug.c+1 -150 replies
1184/1266mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()mm/shrinker_debug.c+0 -40 replies
1185/1266coresight: etb10: restore atomic_t for shared reading statedrivers/hwtracing/coresight/coresight-etb10.c+3 -30 replies
1186/1266gpio: sch: use raw_spinlock_t in the irq startup pathdrivers/gpio/gpio-sch.c+16 -160 replies
1187/1266media: nxp: imx8-isi: Convert to platform remove callback returning voiddrivers/media/platform/nxp/imx8-isi/imx8-isi-core.c+2 -40 replies
1188/1266media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify codedrivers/media/platform/nxp/imx8-isi/imx8-isi-core.c+7 -90 replies
1189/1266media: nxp: imx8-isi: Fix use-after-free on removedrivers/media/platform/nxp/imx8-isi/imx8-isi-core.c+1 -10 replies
1190/1266netfilter: ebtables: Use vmalloc_array() to improve codenet/bridge/netfilter/ebtables.c+7 -70 replies
1191/1266netfilter: ebtables: zero chainstack arraynet/bridge/netfilter/ebtables.c+1 -20 replies
1192/1266Bluetooth: L2CAP: cancel pending_rx_work before taking conn->locknet/bluetooth/l2cap_core.c+2 -80 replies
1193/1266Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregisternet/bluetooth/6lowpan.c+23 -20 replies
1194/1266Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()include/net/bluetooth/l2cap.h net/bluetooth/6lowpan.c net/bluetooth/l2cap_core.c +2 more+127 -1090 replies
1195/1266smb: client: Improve unlocking of a mutex in cifs_get_swn_reg()fs/smb/client/cifs_swn.c+6 -70 replies
1196/1266smb: client: resolve SWN tcon from live registrationsfs/smb/client/cifs_swn.c fs/smb/client/trace.h+262 -540 replies
1197/1266ksmbd: use opener credentials for FSCTL mutationsfs/smb/server/smb2pdu.c fs/smb/server/vfs.c+16 -70 replies
1198/1266ksmbd: centralize ksmbd_conn final release to plug transport leakfs/smb/server/connection.c fs/smb/server/connection.h fs/smb/server/oplock.c +2 more+156 -300 replies
1199/1266ksmbd: track the connection owning a byte-range lockfs/smb/server/smb2pdu.c fs/smb/server/vfs_cache.c fs/smb/server/vfs_cache.h+26 -80 replies
1200/1266proc: rename proc_setattr to proc_nochmod_setattrfs/proc/base.c fs/proc/fd.c fs/proc/internal.h +2 more+19 -190 replies
1201/1266proc: protect ptrace_may_access() with exec_update_lock (FD links)fs/proc/base.c fs/proc/fd.c fs/proc/internal.h+58 -880 replies
1202/1266cpufreq: pcc: Remove empty exit() callbackdrivers/cpufreq/pcc-cpufreq.c+0 -60 replies
1203/1266cpufreq: Make cpufreq_driver->exit() return voiddrivers/cpufreq/acpi-cpufreq.c drivers/cpufreq/amd-pstate.c drivers/cpufreq/apple-soc-cpufreq.c +25 more+37 -840 replies
1204/1266cpufreq: qcom-cpufreq-hw: Fix possible double freedrivers/cpufreq/qcom-cpufreq-hw.c+0 -10 replies
1205/1266writeback: Avoid contention on wb->list_lock when switching inodesfs/fs-writeback.c include/linux/backing-dev-defs.h include/linux/writeback.h +1 more+74 -360 replies
1206/1266writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()fs/fs-writeback.c+29 -20 replies
1207/1266perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()arch/x86/events/intel/uncore_snb.c+0 -70 replies
1208/1266HID: add haptics page definesinclude/linux/hid.h+29 -00 replies
1209/1266HID: multitouch: fix out-of-bounds bit access on mt_io_flagsdrivers/hid/hid-multitouch.c+20 -120 replies
1210/1266mm/slab: do not limit zeroing to orig_size when only red zoning is enabledmm/slab.h+10 -70 replies
1211/1266seqlock: Introduce scoped_seqlock_read()include/linux/seqlock.h+111 -00 replies
1212/1266seqlock: Change do_task_stat() to use scoped_seqlock_read()fs/proc/array.c+2 -70 replies
1213/1266proc: protect ptrace_may_access() with exec_update_lock (part 1)fs/proc/array.c fs/proc/base.c fs/proc/namespaces.c+40 -190 replies
1214/1266treewide: Switch/rename to timer_delete[_sync]()drivers/hid/hid-appleir.c+1 -10 replies
1215/1266HID: appleir: fix UAF on pending key_up_timer in remove()drivers/hid/hid-appleir.c+35 -100 replies
1216/1266serial: 8250_mid: Remove 8250_pci usagedrivers/tty/serial/8250/8250_mid.c+7 -110 replies
1217/1266serial: 8250_mid: Disable DMA for selected platformsdrivers/tty/serial/8250/8250_mid.c+11 -20 replies
1218/1266hfs/hfsplus: prevent getting negative values of offset/lengthfs/hfs/bfind.c fs/hfs/bnode.c fs/hfs/brec.c +9 more+171 -1530 replies
1219/1266hfs/hfsplus: fix u32 overflow in check_and_correct_requested_lengthfs/hfs/bnode.c fs/hfsplus/hfsplus_fs.h+2 -20 replies
1220/1266bpf: Consistently use bpf_rcu_lock_held() everywhereinclude/linux/bpf.h include/linux/bpf_local_storage.h kernel/bpf/hashtab.c +2 more+16 -290 replies
1221/1266bpf: Allow LPM map access from sleepable BPF programskernel/bpf/lpm_trie.c+2 -20 replies
1222/1266usb: iowarrior: remove inherent race with minor numberdrivers/usb/misc/iowarrior.c+3 -140 replies
1223/1266usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()drivers/usb/atm/ueagle-atm.c+31 -50 replies
1224/1266usb: typec: tcpm: Fix VDM type for Enter Mode commandsdrivers/usb/typec/tcpm/tcpm.c+1 -10 replies
1225/1266crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0drivers/crypto/atmel-ecc.c drivers/crypto/atmel-sha204a.c+3 -30 replies
1226/1266crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204Adrivers/crypto/atmel-sha204a.c+12 -70 replies
1227/1266usb: gadget: f_fs: initialize reset_work at allocation timedrivers/usb/gadget/function/f_fs.c+2 -10 replies
1228/1266nvmet: remove superfluous initializationdrivers/nvme/target/fabrics-cmd.c+2 -20 replies
1229/1266nvmet: return DHCHAP status codes from nvmet_setup_auth()drivers/nvme/target/auth.c drivers/nvme/target/fabrics-cmd-auth.c drivers/nvme/target/fabrics-cmd.c +1 more+43 -450 replies
1230/1266nvmet-auth: validate reply message payload bounds against transfer lengthdrivers/nvme/target/fabrics-cmd-auth.c+12 -30 replies
1231/1266usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfiledrivers/usb/gadget/function/f_fs.c+1 -10 replies
1232/1266btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOCfs/btrfs/btrfs_inode.h fs/btrfs/file.c fs/btrfs/inode.c +1 more+57 -340 replies
1233/1266crypto: qat - fix restarting state leak on allocation failuredrivers/crypto/intel/qat/qat_common/adf_aer.c+4 -30 replies
1234/1266audit: add audit_log_nf_skb helper functioninclude/linux/audit.h kernel/audit.c net/netfilter/nft_log.c +1 more+74 -1140 replies
1235/1266audit: fix potential integer overflow in audit_log_n_hex()kernel/audit.c+9 -20 replies
1236/1266regulator: scmi: Simplify with scoped for each OF child loopdrivers/regulator/scmi-regulator.c+3 -50 replies
1237/1266regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()drivers/regulator/scmi-regulator.c+3 -10 replies
1238/1266mm: do file ownership checks with the proper mount idmapinclude/linux/fs.h mm/filemap.c mm/madvise.c +1 more+8 -50 replies
1239/1266exfat: move free cluster out of exfat_init_ext_entry()fs/exfat/dir.c fs/exfat/namei.c+4 -60 replies
1240/1266exfat: remove unnecessary read entry in __exfat_rename()fs/exfat/namei.c+7 -160 replies
1241/1266exfat: rename argument name for exfat_move_file and exfat_rename_filefs/exfat/namei.c+19 -170 replies
1242/1266exfat: add exfat_get_dentry_set_by_ei() helperfs/exfat/exfat_fs.h fs/exfat/inode.c fs/exfat/namei.c+38 -480 replies
1243/1266exfat: move exfat_chain_set() out of __exfat_resolve_path()fs/exfat/namei.c+30 -380 replies
1244/1266exfat: preserve benign secondary entries during rename and movefs/exfat/dir.c fs/exfat/exfat_fs.h fs/exfat/namei.c+169 -720 replies
1245/1266btrfs: fix false IO failure after falling back to buffered writefs/btrfs/inode.c fs/btrfs/ordered-data.c fs/btrfs/ordered-data.h+29 -80 replies
1246/1266btrfs: fix incorrect buffered IO fallback for append direct writesfs/btrfs/inode.c+42 -10 replies
1247/1266Bluetooth: hci_core: Enable buffer flow control for SCO/eSCOinclude/net/bluetooth/hci.h include/net/bluetooth/hci_core.h net/bluetooth/hci_core.c +2 more+68 -340 replies
1248/1266Bluetooth: separate CIS_LINK and BIS_LINK link typesinclude/net/bluetooth/hci.h include/net/bluetooth/hci_core.h net/bluetooth/hci_conn.c +5 more+84 -610 replies
1249/1266Bluetooth: hci_sync: annotate data-races around hdev->req_statusnet/bluetooth/hci_core.c net/bluetooth/hci_sync.c+11 -110 replies
1250/1266Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()include/net/bluetooth/hci_core.h net/bluetooth/hci_conn.c net/bluetooth/hci_sync.c+123 -320 replies
1251/1266KVM: Move kvm_io_bus_get_dev() locking responsibilities to callersarch/arm64/kvm/vgic/vgic-its.c virt/kvm/kvm_main.c+7 -110 replies
1252/1266seqlock: fix scoped_seqlock_read kernel-docinclude/linux/seqlock.h+7 -80 replies
1253/1266ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fdfs/smb/server/vfs_cache.c+9 -30 replies
1254/1266Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_stateinclude/net/bluetooth/hci_core.h+1 -20 replies
1255/1266Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handlenet/bluetooth/hci_sync.c+1 -10 replies
1256/1266Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdevnet/bluetooth/6lowpan.c+3 -150 replies
1257/1266selftests/hid: ensure CKI can compile our new tests on old kernelstools/testing/selftests/hid/progs/hid_bpf_helpers.h+16 -00 replies
1258/1266Bluetooth: btmtk: Fix btmtk.c undefined reference build error harderdrivers/bluetooth/Kconfig+2 -00 replies
1259/1266Bluetooth: btmtk: remove #ifdef around declarationsdrivers/bluetooth/btmtk.h+0 -20 replies
1260/1266xfs: fix stupid compiler warningfs/xfs/xfs_attr_item.c+1 -10 replies
1261/1266writeback: Fix use after free in inode_switch_wbs_work_fn()fs/fs-writeback.c+19 -170 replies
1262/1266writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()fs/fs-writeback.c+0 -50 replies
1263/1266jiffies: Define secs_to_jiffies()include/linux/jiffies.h net/bluetooth/hci_event.c+13 -20 replies
1264/1266jiffies: Cast to unsigned long in secs_to_jiffies() conversioninclude/linux/jiffies.h+1 -10 replies
1265/1266driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout()drivers/base/dd.c+1 -10 replies
1266/1266driver core: Guard deferred probe timeout extension with delayed_work_pending()drivers/base/dd.c+2 -10 replies

Reviews trailers per patch

595 of 1266 patches have a Reviewed-by or Acked-by.

PatchPuranjay MohanJeff LaytonJan KaraOjaswin MujooLorenzo StoakesDmitry BaryshkovMukesh OjhaKuniyuki IwashimaSakari AilusRafael J. Wysocki (Intel)Andy ShevchenkoChao YuChristoph HellwigThomas ZimmermannEric DumazetJiayuan ChenMatthew WilcoxIan RogersJarred WhiteEaswar HariharanDave JiangJiri PirkoSuzuki K PouloseCatalin MarinasMiguel LuisLeo YanMark RutlandOliver UptonJan KotasJoe DamatoMichael S. TsirkinWillem de BruijnJason XingHangbin LiuNikolay AleksandrovVladimir ZapolskiyBoris PismennyJay VosburghSabrina DubrocaJoshua CroftsNuno SáKevin TianJason GunthorpePaul MenzelAlice RyhlSubhransu S. PrustyLorenzo BianconiLuka GejakNamjae JeonRicardo RobainaSebastian Andrzej SiewiorShuangpeng BaiJohan HovoldIdo SchimmelBenson LeungMuchun SongSean WangNeeraj Sanjay KaleThinh NguyenAlexander AringTung NguyenJozsef KadlecsikHenrique CarvalhoZhongqiu HanFrederic WeisbeckerJon HunterIgnat KorchaginAlistair FrancisSeongJae ParkDmitry TorokhovHans de GoedeJiri Kosina[email protected]Viacheslav Dubeyko[email protected]Nicolas DufresneDarrick J. WongAllison HendersonEmil TsalapatisToke Høiland-JørgensenYonghong SongXu KuohaiAndrew LunnAlan SternAlex HenrieGreg Kroah-HartmanShuah KhanIgor KotrasinskiHeikki KrogerusRD BabieraJameson ThiesAndrei KuchynskiAlok TiwariBenjamin MarzinskiFilipe MananaPhilippe De MuyterDemi Marie ObenourPeter ChenQiuxu ZhuoNeal GompaMasami Hiramatsu (Google)Christophe Leroy (CS GROUP)Hou WenlongVivek KasireddyChris PackhamAlain VolmatPierre-Yves MORDRETBryam VargasFlorian FuchsAhsan AttaLaurent M CoquerelLukas WunnerMd Haris IqbalFuad TabbaCorentin LABBEDave HansenSeth ForsheeEric HagbergChristian LamparterDaniel BorkmannLaurent PinchartRob Herring (Arm)Jernej SkrabecFrank LiKrzysztof KozlowskiPeng FanKonrad DybcioMoteen ShahChen-Yu TsaiMaxime RipardCarlos MaiolinoSungwoo KimDave TianWeidong ZhuRandy DunlapNathan ChancellorGuenter RoeckAlexandre BelloniBaolin WangPaul KocialkowskiAndre PrzywaraDaniel BalutaAlexander SteinThorsten BlumVitaly ChikunovRyusuke KonishiVasant HegdeWei WangDavid HeidelbergFlorian FainelliGeert UytterhoevenBrian MasneyHarshal DevRoberto SassuTom LendackyYishai HadasCarlos Bilbao (Lambda)Bart Van AsscheDavid Yat SinSaravana KannanMykyta YatsenkoCristian MarussiMark BrownWolfram SangnasmDanilo KrummrichSergio ParacuellosMichael WalleBartosz GolaszewskiMukesh Kumar Chaurasiya (IBM)Hannes ReineckeJohn GarryJakub KicinskiMikko PerttunenAaron KlingLyude PaulBen CheathamAlison SchofieldJonathan CameronJoseph QiKuldeep SinghTom ZanussiMathieu PoirierXiao NiBaokun LiKuninori MorimotoDavid RheinsbergNiklas CasselDamien Le MoalAboorva DevarajanVishal VermaVal PackettYongxing MouJack WangAl ViroAndrew MortonBreno LeitaoHawking ZhangLeon HwangQuentin MonnetZhu YanjunDikshita AgarwalHeming ZhaoLoic PoulainLee DuncanDev JainUladzislau Rezki (Sony)Vincent GuittotBoris BurkovQu WenruoNaohiro AotaLuca WeissEugenio PérezXie YongjiJason WangAlexander GordeevDavid AhernAnirudh GuptaJamal Hadi SalimMichal SimekDipayaan RoyHaiyang ZhangMichael GuralnikYael ChemlaCarolina JubranAlexander LobakinChenXiaoSongIhor SolodraiXiang MeiXinyu MaShrikanth HegdeKyle ZengVictor NogueiraJames ClarkKrzysztof WilczyńskiIlpo JärvinenTzung-Bi ShihSalih ErimMatthew R. OchsAlex HungNamhyung KimDan CarpenterJarkko SakkinenNeil ArmstrongMarek VasutAnshuman KhandualMike LeachGanapatrao KulkarniSagi GrimbergGeorgia GarciaTyler HicksRyan LeeLinus WalleijEyal BirgerFelix KuehlingAlex DeucherTvrtko UrsulinSimon HormanRay JuiXuan ZhuoBui Quang MinhCaleb James DeLisleVenkat Rao BagalkoteMaxime ChevallierElad NachmanMeagan LloydLuis GerhorstJani NikulaKoichiro DenRafal RomanowskiRinitha SAleksandr LoktionovAlexander NowlinFernando Fernandez ManceraMiquel RaynalMagnus LindholmShivaprasad G BhatNicolas DichtelNobuhiro IwamatsuConor DooleyNiklas SöderlundAndrea MayerXin LongThomas BogendoerferLarysa ZarembaZenghui Yu (Huawei)Marc ZyngierPotnuri Bharat TejaAmery HungPavan ChebbiJohn HubbardDavid Hildenbrand (Arm)Nick DesaulniersJustin StittRen WeiPhil SutterEran Ben ElishaJamie BainbridgeSubash Abhinov KasiviswanathanNicolai BuchwitzHarshitha RamamurthyMichael NemanovSu YueMing-Hung TsaiTariq ToukanLiam GirdwoodBard LiaoEkansh GuptaMatthew RosatoClaudio ImbrendaChristian BorntraegerJulian AnastasovFarhan AliKai HuangHolger DenglerHari Prasath Gujulan ElangoStephen SmalleyIlya LeoshkevichThomas RichterZhang YiMike Rapoport (Microsoft)Liam R. HowlettDon BraceFarhad AlemiXu YilunMika WesterbergAngeloGioacchino Del RegnoJuergen GrossArnd BergmannFeng XueOliver HartkoppStefan WahrenJustin TeeSindre HenriksenMario Limonciello (AMD)Fredric CoverArthur KiyanovskiDavid DisseldorpValentina FernandezDaniel WagnerChristoph BöhmwalderBaoquan HePratyush YadavNutty LiuWaiman LongZilin GuanEelco ChaudronAaron ConoleIlya MaximetsDavid ThompsonThangaraj SamynathanPhilipp ZabelGuoniu ZhouJeff ChenPrzemek KitszelYury NorovAlex BennéeChristian KönigEthan TidmoreQi ZhengNhat PhamRoman GushchinJean-Baptiste ManeyrolTejun HeoDapeng MiHarry Yoo (Oracle)Hao LiOleg Nesterov[email protected][email protected]Jiri OlsaAndrey TsygunkaStanislaw GruszkaArd BiesheuvelMichał NazarewiczGiovanni CabidduFlorian WestphalRichard Guy BriggsChristian Brauner (Amutable)Andy WuAoyama WataruSungjong SeoDaniel PalmerSudeep HollaMario LimoncielloKevin HilmanLuiz Augusto von DentzBiju DasYuezhang MoPauli VirtanenBrett A C SheffieldPeter SchneiderFrancesco DolciniWentao GuanRon EconomosPavel Machek (CIP)
SeriesT-b T-b T-b T-b T-b T-b T-b
1/1266R-b
2/1266R-b
3/1266
4/1266R-b R-b T-b
5/1266
6/1266
7/1266
8/1266
9/1266
10/1266
11/1266
12/1266
13/1266
14/1266R-b
15/1266
16/1266
17/1266R-b R-b
18/1266R-b R-b
19/1266
20/1266R-b
21/1266
22/1266R-b
23/1266R-b R-b R-b
24/1266R-b
25/1266
26/1266R-b
27/1266R-b
28/1266
29/1266R-b
30/1266
31/1266R-b
32/1266
33/1266
34/1266
35/1266
36/1266
37/1266R-b
38/1266
39/1266R-b
40/1266
41/1266R-b
42/1266R-b
43/1266R-b
44/1266R-b R-b
45/1266R-b R-b
46/1266R-b
47/1266A-b
48/1266R-b R-b
49/1266R-b R-b
50/1266
51/1266R-b
52/1266R-b T-b
53/1266
54/1266R-b
55/1266R-b
56/1266R-b
57/1266R-b
58/1266R-b
59/1266
60/1266R-b
61/1266T-b R-b R-b
62/1266R-b
63/1266
64/1266
65/1266
66/1266
67/1266
68/1266
69/1266
70/1266R-b R-b R-b
71/1266R-b R-b
72/1266A-b
73/1266
74/1266R-b
75/1266A-b A-b R-b T-b
76/1266A-b
77/1266A-b A-b
78/1266
79/1266R-b R-b R-b
80/1266
81/1266
82/1266
83/1266
84/1266
85/1266R-b
86/1266R-b
87/1266R-b R-b
88/1266
89/1266R-b
90/1266R-b
91/1266
92/1266
93/1266
94/1266A-b
95/1266R-b
96/1266
97/1266
98/1266
99/1266
100/1266R-b
101/1266
102/1266
103/1266
104/1266
105/1266
106/1266
107/1266
108/1266
109/1266
110/1266
111/1266
112/1266
113/1266
114/1266
115/1266
116/1266
117/1266
118/1266R-b
119/1266R-b
120/1266R-b
121/1266R-b R-b
122/1266
123/1266R-b
124/1266
125/1266
126/1266R-b
127/1266R-b
128/1266
129/1266
130/1266R-b
131/1266
132/1266
133/1266A-b
134/1266
135/1266
136/1266T-b R-b
137/1266A-b
138/1266A-b
139/1266R-b
140/1266
141/1266
142/1266
143/1266
144/1266
145/1266R-b
146/1266R-b
147/1266
148/1266R-b
149/1266R-b
150/1266R-b
151/1266
152/1266R-b
153/1266
154/1266A-b
155/1266R-b
156/1266R-b
157/1266
158/1266
159/1266
160/1266R-b
161/1266R-b
162/1266
163/1266R-b R-b
164/1266R-b
165/1266R-b
166/1266R-b
167/1266
168/1266
169/1266
170/1266R-b
171/1266
172/1266R-b
173/1266
174/1266
175/1266
176/1266
177/1266
178/1266
179/1266
180/1266
181/1266A-b
182/1266A-b
183/1266
184/1266
185/1266
186/1266A-b
187/1266
188/1266A-b
189/1266A-b
190/1266
191/1266
192/1266
193/1266
194/1266
195/1266A-b
196/1266
197/1266
198/1266
199/1266
200/1266
201/1266
202/1266
203/1266
204/1266
205/1266
206/1266R-b
207/1266R-b
208/1266R-b
209/1266R-b
210/1266R-b R-b
211/1266R-b
212/1266R-b
213/1266R-b
214/1266
215/1266R-b
216/1266R-b A-b
217/1266T-b R-b
218/1266T-b
219/1266R-b
220/1266R-b
221/1266R-b R-b
222/1266R-b R-b
223/1266R-b A-b A-b
224/1266R-b
225/1266
226/1266A-b
227/1266
228/1266
229/1266R-b
230/1266
231/1266R-b
232/1266
233/1266
234/1266
235/1266
236/1266
237/1266
238/1266
239/1266R-b
240/1266R-b
241/1266
242/1266
243/1266
244/1266
245/1266R-b
246/1266R-b
247/1266
248/1266R-b
249/1266R-b
250/1266R-b
251/1266R-b
252/1266
253/1266A-b R-b
254/1266R-b
255/1266R-b R-b R-b
256/1266R-b
257/1266R-b
258/1266
259/1266T-b
260/1266
261/1266
262/1266
263/1266
264/1266R-b
265/1266R-b
266/1266R-b
267/1266A-b
268/1266
269/1266R-b
270/1266
271/1266
272/1266R-b
273/1266
274/1266
275/1266
276/1266
277/1266R-b R-b T-b
278/1266
279/1266
280/1266
281/1266
282/1266
283/1266
284/1266
285/1266
286/1266
287/1266
288/1266
289/1266
290/1266
291/1266
292/1266R-b
293/1266R-b
294/1266A-b
295/1266
296/1266R-b
297/1266
298/1266R-b
299/1266R-b
300/1266
301/1266R-b
302/1266
303/1266R-b
304/1266A-b R-b
305/1266
306/1266
307/1266
308/1266
309/1266R-b
310/1266
311/1266R-b
312/1266
313/1266
314/1266
315/1266
316/1266
317/1266T-b
318/1266T-b
319/1266R-b
320/1266
321/1266
322/1266
323/1266
324/1266R-b R-b
325/1266R-b R-b
326/1266A-b
327/1266R-b A-b A-b A-b
328/1266
329/1266
330/1266R-b T-b
331/1266R-b T-b
332/1266R-b
333/1266R-b
334/1266A-b
335/1266A-b T-b T-b
336/1266
337/1266A-b
338/1266
339/1266A-b
340/1266A-b A-b
341/1266A-b
342/1266A-b
343/1266A-b
344/1266A-b
345/1266R-b
346/1266R-b
347/1266R-b R-b
348/1266A-b A-b
349/1266R-b A-b R-b
350/1266A-b
351/1266R-b
352/1266
353/1266
354/1266
355/1266
356/1266
357/1266
358/1266A-b
359/1266
360/1266A-b
361/1266
362/1266
363/1266
364/1266A-b
365/1266A-b
366/1266
367/1266R-b R-b
368/1266
369/1266R-b
370/1266A-b
371/1266R-b
372/1266R-b A-b R-b
373/1266
374/1266
375/1266R-b
376/1266A-b
377/1266
378/1266R-b
379/1266R-b
380/1266R-b R-b
381/1266A-b
382/1266R-b
383/1266R-b
384/1266
385/1266R-b R-b
386/1266
387/1266T-b
388/1266R-b R-b
389/1266
390/1266
391/1266R-b A-b
392/1266R-b R-b
393/1266
394/1266T-b T-b R-b
395/1266R-b R-b
396/1266R-b
397/1266R-b
398/1266R-b
399/1266
400/1266
401/1266R-b
402/1266R-b
403/1266
404/1266
405/1266
406/1266R-b
407/1266
408/1266
409/1266R-b
410/1266R-b R-b
411/1266R-b
412/1266R-b
413/1266R-b R-b
414/1266
415/1266R-b
416/1266
417/1266R-b
418/1266R-b
419/1266R-b R-b
420/1266A-b R-b
421/1266
422/1266
423/1266A-b A-b A-b
424/1266R-b
425/1266R-b
426/1266R-b
427/1266R-b R-b
428/1266
429/1266Reported-and-tested-by
430/1266
431/1266
432/1266
433/1266
434/1266
435/1266
436/1266R-b
437/1266
438/1266R-b
439/1266
440/1266R-b
441/1266R-b T-b R-b R-b R-b
442/1266
443/1266R-b
444/1266R-b
445/1266A-b
446/1266A-b
447/1266T-b
448/1266A-b
449/1266
450/1266
451/1266R-b
452/1266R-b
453/1266
454/1266R-b R-b R-b
455/1266
456/1266R-b
457/1266A-b R-b
458/1266
459/1266R-b T-b T-b
460/1266R-b T-b T-b
461/1266
462/1266R-b
463/1266R-b
464/1266R-b
465/1266R-b
466/1266R-b
467/1266R-b R-b
468/1266R-b
469/1266R-b R-b
470/1266A-b
471/1266
472/1266R-b
473/1266R-b R-b R-b
474/1266
475/1266R-b T-b R-b R-b
476/1266R-b
477/1266A-b
478/1266R-b
479/1266A-b
480/1266
481/1266
482/1266
483/1266R-b
484/1266R-b R-b
485/1266R-b
486/1266A-b A-b A-b
487/1266
488/1266R-b
489/1266R-b
490/1266R-b
491/1266R-b
492/1266
493/1266
494/1266
495/1266
496/1266
497/1266
498/1266
499/1266
500/1266
501/1266A-b
502/1266
503/1266R-b
504/1266R-b
505/1266R-b
506/1266
507/1266
508/1266
509/1266
510/1266R-b
511/1266
512/1266
513/1266
514/1266
515/1266R-b
516/1266
517/1266R-b R-b
518/1266R-b
519/1266
520/1266
521/1266R-b R-b
522/1266R-b
523/1266R-b
524/1266
525/1266
526/1266
527/1266R-b R-b
528/1266
529/1266
530/1266R-b R-b
531/1266
532/1266
533/1266T-b
534/1266
535/1266A-b A-b
536/1266A-b A-b R-b A-b
537/1266
538/1266
539/1266
540/1266
541/1266A-b
542/1266R-b
543/1266A-b
544/1266R-b
545/1266R-b
546/1266
547/1266A-b
548/1266R-b
549/1266
550/1266
551/1266
552/1266
553/1266R-b
554/1266
555/1266
556/1266
557/1266
558/1266
559/1266R-b T-b T-b
560/1266R-b R-b
561/1266A-b R-b
562/1266
563/1266T-b A-b
564/1266R-b
565/1266R-b
566/1266R-b
567/1266R-b
568/1266
569/1266
570/1266
571/1266R-b
572/1266
573/1266
574/1266R-b R-b
575/1266T-b A-b
576/1266A-b
577/1266R-b R-b
578/1266R-b R-b
579/1266R-b
580/1266R-b R-b R-b
581/1266R-b
582/1266
583/1266
584/1266
585/1266
586/1266
587/1266R-b
588/1266A-b
589/1266
590/1266R-b R-b R-b T-b T-b
591/1266R-b R-b R-b
592/1266
593/1266R-b
594/1266
595/1266R-b
596/1266R-b
597/1266R-b
598/1266R-b
599/1266
600/1266A-b
601/1266
602/1266R-b
603/1266
604/1266R-b
605/1266R-b
606/1266R-b
607/1266
608/1266R-b R-b
609/1266R-b
610/1266R-b
611/1266R-b
612/1266
613/1266
614/1266
615/1266
616/1266R-b R-b
617/1266R-b
618/1266
619/1266
620/1266R-b
621/1266
622/1266R-b
623/1266
624/1266
625/1266
626/1266R-b T-b
627/1266
628/1266
629/1266R-b
630/1266
631/1266
632/1266T-b
633/1266R-b
634/1266R-b
635/1266A-b
636/1266
637/1266R-b
638/1266
639/1266
640/1266
641/1266
642/1266
643/1266
644/1266
645/1266
646/1266R-b
647/1266R-b
648/1266R-b R-b
649/1266
650/1266R-b
651/1266
652/1266
653/1266
654/1266
655/1266
656/1266
657/1266
658/1266
659/1266
660/1266R-b
661/1266R-b
662/1266
663/1266R-b
664/1266R-b
665/1266R-b
666/1266R-b R-b
667/1266A-b
668/1266R-b
669/1266R-b
670/1266
671/1266
672/1266
673/1266
674/1266
675/1266
676/1266
677/1266R-b
678/1266A-b T-b R-b R-b T-b
679/1266Co-authored-by
680/1266
681/1266
682/1266
683/1266
684/1266
685/1266
686/1266
687/1266
688/1266
689/1266
690/1266
691/1266
692/1266
693/1266
694/1266T-b
695/1266
696/1266
697/1266
698/1266
699/1266R-b
700/1266R-b
701/1266R-b
702/1266R-b R-b
703/1266
704/1266R-b
705/1266
706/1266
707/1266R-b
708/1266
709/1266
710/1266
711/1266R-b
712/1266
713/1266R-b
714/1266
715/1266
716/1266
717/1266
718/1266
719/1266
720/1266
721/1266R-b
722/1266R-b
723/1266R-b
724/1266R-b
725/1266R-b
726/1266
727/1266A-b
728/1266R-b
729/1266A-b R-b R-b
730/1266
731/1266R-b R-b
732/1266
733/1266
734/1266
735/1266
736/1266
737/1266
738/1266R-b
739/1266R-b
740/1266
741/1266
742/1266
743/1266
744/1266
745/1266
746/1266
747/1266
748/1266T-b
749/1266
750/1266
751/1266R-b A-b
752/1266R-b
753/1266A-b
754/1266
755/1266
756/1266
757/1266
758/1266R-b R-b
759/1266R-b R-b A-b
760/1266R-b
761/1266A-b
762/1266R-b
763/1266R-b R-b
764/1266
765/1266R-b T-b
766/1266R-b T-b
767/1266R-b R-b T-b
768/1266
769/1266A-b
770/1266R-b R-b
771/1266R-b
772/1266
773/1266
774/1266
775/1266
776/1266R-b
777/1266
778/1266R-b R-b
779/1266R-b R-b
780/1266R-b R-b
781/1266R-b T-b A-b T-b
782/1266R-b T-b A-b T-b
783/1266R-b
784/1266
785/1266R-b
786/1266T-b
787/1266R-b R-b
788/1266R-b R-b
789/1266R-b R-b
790/1266R-b R-b
791/1266R-b
792/1266R-b
793/1266
794/1266R-b
795/1266R-b
796/1266R-b
797/1266
798/1266R-b A-b A-b
799/1266
800/1266
801/1266
802/1266
803/1266R-b
804/1266
805/1266
806/1266A-b
807/1266A-b
808/1266
809/1266
810/1266
811/1266R-b R-b
812/1266
813/1266T-b
814/1266A-b R-b
815/1266
816/1266
817/1266R-b A-b
818/1266
819/1266A-b
820/1266R-b
821/1266R-b
822/1266A-b R-b
823/1266
824/1266
825/1266
826/1266A-b
827/1266
828/1266R-b
829/1266
830/1266
831/1266
832/1266
833/1266
834/1266
835/1266R-b
836/1266R-b R-b
837/1266
838/1266
839/1266A-b A-b T-b
840/1266A-b A-b T-b
841/1266A-b A-b T-b
842/1266R-b R-b
843/1266T-b T-b
844/1266A-b T-b T-b
845/1266T-b T-b
846/1266
847/1266
848/1266
849/1266R-b
850/1266
851/1266
852/1266
853/1266R-b R-b
854/1266R-b
855/1266R-b
856/1266
857/1266R-b
858/1266R-b
859/1266T-b
860/1266
861/1266R-b
862/1266
863/1266
864/1266
865/1266
866/1266R-b
867/1266R-b
868/1266R-b
869/1266R-b
870/1266A-b
871/1266R-b
872/1266R-b
873/1266R-b
874/1266R-b
875/1266A-b
876/1266A-b
877/1266A-b
878/1266
879/1266R-b
880/1266
881/1266T-b R-b
882/1266T-b R-b
883/1266R-b R-b
884/1266
885/1266
886/1266R-b R-b
887/1266
888/1266
889/1266R-b
890/1266R-b
891/1266A-b A-b R-b A-b
892/1266R-b R-b
893/1266R-b R-b
894/1266R-b R-b
895/1266
896/1266R-b
897/1266R-b
898/1266
899/1266
900/1266R-b R-b
901/1266R-b T-b A-b R-b
902/1266
903/1266R-b
904/1266R-b
905/1266R-b
906/1266R-b
907/1266R-b
908/1266
909/1266
910/1266
911/1266
912/1266
913/1266
914/1266
915/1266R-b
916/1266
917/1266
918/1266R-b R-b
919/1266R-b R-b
920/1266
921/1266
922/1266
923/1266
924/1266
925/1266
926/1266
927/1266
928/1266
929/1266
930/1266
931/1266
932/1266
933/1266A-b
934/1266R-b
935/1266
936/1266T-b
937/1266R-b
938/1266
939/1266
940/1266
941/1266
942/1266
943/1266
944/1266R-b A-b
945/1266
946/1266
947/1266
948/1266
949/1266
950/1266
951/1266
952/1266
953/1266
954/1266
955/1266
956/1266
957/1266
958/1266
959/1266
960/1266
961/1266R-b R-b R-b
962/1266R-b
963/1266R-b
964/1266R-b
965/1266R-b
966/1266
967/1266
968/1266R-b
969/1266R-b
970/1266
971/1266
972/1266
973/1266
974/1266
975/1266
976/1266
977/1266
978/1266
979/1266
980/1266
981/1266
982/1266
983/1266
984/1266
985/1266
986/1266
987/1266
988/1266
989/1266
990/1266
991/1266
992/1266
993/1266A-b A-b A-b
994/1266
995/1266
996/1266R-b R-b R-b R-b
997/1266R-b R-b
998/1266R-b
999/1266
1000/1266
1001/1266
1002/1266R-b
1003/1266R-b
1004/1266R-b T-b
1005/1266R-b
1006/1266R-b
1007/1266R-b
1008/1266R-b
1009/1266
1010/1266A-b
1011/1266R-b
1012/1266R-b
1013/1266
1014/1266
1015/1266R-b T-b
1016/1266R-b R-b
1017/1266
1018/1266R-b
1019/1266R-b R-b T-b R-b
1020/1266R-b R-b
1021/1266T-b
1022/1266A-b
1023/1266
1024/1266R-b
1025/1266
1026/1266R-b T-b
1027/1266R-b
1028/1266
1029/1266R-b
1030/1266
1031/1266
1032/1266A-b
1033/1266R-b
1034/1266A-b
1035/1266
1036/1266
1037/1266
1038/1266T-b T-b
1039/1266
1040/1266
1041/1266
1042/1266R-b
1043/1266R-b
1044/1266
1045/1266
1046/1266R-b
1047/1266
1048/1266
1049/1266
1050/1266
1051/1266
1052/1266
1053/1266
1054/1266
1055/1266
1056/1266A-b
1057/1266R-b
1058/1266R-b
1059/1266R-b
1060/1266R-b
1061/1266R-b R-b
1062/1266R-b R-b
1063/1266R-b
1064/1266R-b
1065/1266
1066/1266
1067/1266
1068/1266
1069/1266
1070/1266
1071/1266
1072/1266
1073/1266
1074/1266R-b
1075/1266
1076/1266
1077/1266
1078/1266
1079/1266R-b
1080/1266R-b R-b
1081/1266R-b
1082/1266R-b
1083/1266
1084/1266R-b T-b
1085/1266R-b
1086/1266R-b
1087/1266R-b
1088/1266R-b
1089/1266
1090/1266
1091/1266R-b
1092/1266R-b
1093/1266
1094/1266
1095/1266
1096/1266
1097/1266
1098/1266
1099/1266R-b
1100/1266T-b
1101/1266
1102/1266
1103/1266R-b
1104/1266
1105/1266R-b R-b
1106/1266R-b R-b
1107/1266A-b R-b
1108/1266A-b R-b
1109/1266
1110/1266
1111/1266R-b
1112/1266R-b R-b
1113/1266
1114/1266A-b
1115/1266R-b
1116/1266R-b R-b
1117/1266
1118/1266A-b
1119/1266
1120/1266R-b
1121/1266R-b
1122/1266A-b A-b R-b
1123/1266
1124/1266A-b
1125/1266R-b
1126/1266R-b
1127/1266
1128/1266
1129/1266R-b
1130/1266
1131/1266R-b R-b R-b
1132/1266
1133/1266
1134/1266R-b
1135/1266
1136/1266
1137/1266A-b
1138/1266R-b R-b R-b
1139/1266A-b R-b
1140/1266
1141/1266
1142/1266R-b
1143/1266
1144/1266
1145/1266
1146/1266
1147/1266R-b
1148/1266R-b
1149/1266
1150/1266R-b
1151/1266R-b R-b
1152/1266
1153/1266
1154/1266R-b
1155/1266
1156/1266R-b
1157/1266A-b
1158/1266
1159/1266
1160/1266
1161/1266
1162/1266R-b A-b
1163/1266R-b
1164/1266
1165/1266R-b
1166/1266R-b
1167/1266R-b
1168/1266
1169/1266R-b
1170/1266R-b
1171/1266
1172/1266T-b
1173/1266T-b
1174/1266T-b R-b
1175/1266T-b
1176/1266R-b
1177/1266
1178/1266
1179/1266R-b
1180/1266
1181/1266R-b
1182/1266
1183/1266R-b
1184/1266A-b R-b T-b R-b R-b R-b
1185/1266R-b
1186/1266R-b R-b
1187/1266R-b
1188/1266R-b
1189/1266R-b R-b
1190/1266
1191/1266
1192/1266
1193/1266
1194/1266
1195/1266
1196/1266
1197/1266
1198/1266A-b
1199/1266
1200/1266R-b
1201/1266
1202/1266A-b
1203/1266A-b R-b R-b A-b A-b A-b
1204/1266R-b
1205/1266A-b
1206/1266R-b A-b
1207/1266R-b
1208/1266
1209/1266
1210/1266R-b R-b
1211/1266Originally-by
1212/1266
1213/1266
1214/1266
1215/1266
1216/1266
1217/1266
1218/1266
1219/1266R-b T-b T-b
1220/1266A-b
1221/1266R-b
1222/1266
1223/1266Originally-by A-b
1224/1266R-b
1225/1266
1226/1266R-b
1227/1266R-b T-b A-b
1228/1266
1229/1266R-b
1230/1266R-b
1231/1266
1232/1266R-b
1233/1266R-b
1234/1266A-b
1235/1266R-b
1236/1266
1237/1266
1238/1266R-b A-b R-b
1239/1266R-b R-b R-b
1240/1266R-b R-b R-b
1241/1266R-b
1242/1266R-b R-b R-b
1243/1266R-b R-b R-b
1244/1266R-b
1245/1266R-b
1246/1266R-b
1247/1266T-b
1248/1266
1249/1266
1250/1266
1251/1266R-b
1252/1266
1253/1266A-b
1254/1266
1255/1266
1256/1266
1257/1266
1258/1266
1259/1266R-b
1260/1266R-b R-b
1261/1266A-b
1262/1266R-b A-b
1263/1266R-b
1264/1266
1265/1266R-b T-b T-b
1266/1266R-b T-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 396 reviewers.

Read the v1 thread

Cover letter [PATCH 6.6 0000/1266] 6.6.145-rc1 review

This is the start of the stable review cycle for the 6.6.145 release. There are 1266 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 23 Jul 2026 15:23:00 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.145-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.145-rc1

Danilo Krummrich <[email protected]>
driver core: Guard deferred probe timeout extension with delayed_work_pending()

Danilo Krummrich <[email protected]>
driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout()

Easwar Hariharan <[email protected]>
jiffies: Cast to unsigned long in secs_to_jiffies() conversion

Easwar Hariharan <[email protected]>
jiffies: Define secs_to_jiffies()

Baokun Li <[email protected]>
writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()

Jan Kara <[email protected]>
writeback: Fix use after free in inode_switch_wbs_work_fn()

Darrick J. Wong <[email protected]>
xfs: fix stupid compiler warning

Arnd Bergmann <[email protected]>
Bluetooth: btmtk: remove #ifdef around declarations

Arnd Bergmann <[email protected]>
Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder

Benjamin Tissoires <[email protected]>
selftests/hid: ensure CKI can compile our new tests on old kernels

Luiz Augusto von Dentz <[email protected]>

    Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state

Gil Portnoy <[email protected]>
ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd

Randy Dunlap <[email protected]>
seqlock: fix scoped_seqlock_read kernel-doc

Marc Zyngier <[email protected]>
KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers

Siwei Zhang <[email protected]>
Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()

Cen Zhang <[email protected]>

    Bluetooth: hci_sync: annotate data-races around hdev->req_status

Pauli Virtanen <[email protected]>
Bluetooth: separate CIS_LINK and BIS_LINK link types

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO

Qu Wenruo <[email protected]>
btrfs: fix incorrect buffered IO fallback for append direct writes

Qu Wenruo <[email protected]>
btrfs: fix false IO failure after falling back to buffered write

Rochan Avlur <[email protected]>
exfat: preserve benign secondary entries during rename and move

Yuezhang Mo <[email protected]>
exfat: move exfat_chain_set() out of __exfat_resolve_path()

Yuezhang Mo <[email protected]>
exfat: add exfat_get_dentry_set_by_ei() helper

Yuezhang Mo <[email protected]>
exfat: rename argument name for exfat_move_file and exfat_rename_file

Yuezhang Mo <[email protected]>
exfat: remove unnecessary read entry in __exfat_rename()

Yuezhang Mo <[email protected]>
exfat: move free cluster out of exfat_init_ext_entry()

Pedro Falcato <[email protected]>
mm: do file ownership checks with the proper mount idmap

Wentao Liang <[email protected]>
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()

Krzysztof Kozlowski <[email protected]>
regulator: scmi: Simplify with scoped for each OF child loop

Ricardo Robaina <[email protected]>
audit: fix potential integer overflow in audit_log_n_hex()

Ricardo Robaina <[email protected]>
audit: add audit_log_nf_skb helper function

Ahsan Atta <[email protected]>
crypto: qat - fix restarting state leak on allocation failure

Qu Wenruo <[email protected]>
btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC

Neill Kapron <[email protected]>
usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile

Tianchu Chen <[email protected]>
nvmet-auth: validate reply message payload bounds against transfer length

Hannes Reinecke <[email protected]>
nvmet: return DHCHAP status codes from nvmet_setup_auth()

Chaitanya Kulkarni <[email protected]>
nvmet: remove superfluous initialization

Tyler Baker <[email protected]>
usb: gadget: f_fs: initialize reset_work at allocation time

Thorsten Blum <[email protected]>
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A

Uwe Kleine-König <[email protected]>
crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0

Andy Yan <[email protected]>
usb: typec: tcpm: Fix VDM type for Enter Mode commands

Mauricio Faria de Oliveira <[email protected]>
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()

Oliver Neukum <[email protected]>
usb: iowarrior: remove inherent race with minor number

Vlad Poenaru <[email protected]>
bpf: Allow LPM map access from sleepable BPF programs

Andrii Nakryiko <[email protected]>
bpf: Consistently use bpf_rcu_lock_held() everywhere

Tristan Madani <[email protected]>
hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length

Viacheslav Dubeyko <[email protected]>
hfs/hfsplus: prevent getting negative values of offset/length

Andy Shevchenko <[email protected]>
serial: 8250_mid: Disable DMA for selected platforms

Ilpo Järvinen <[email protected]>

    serial: 8250_mid: Remove 8250_pci usage

Manish Khadka <[email protected]>
HID: appleir: fix UAF on pending key_up_timer in remove()

Thomas Gleixner <[email protected]>
treewide: Switch/rename to timer_delete[_sync]()

Jann Horn <[email protected]>
proc: protect ptrace_may_access() with exec_update_lock (part 1)

Oleg Nesterov <[email protected]>
seqlock: Change do_task_stat() to use scoped_seqlock_read()

Peter Zijlstra <[email protected]>
seqlock: Introduce scoped_seqlock_read()

Vlastimil Babka (SUSE) <[email protected]>
mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

Trung Nguyen <[email protected]>
HID: multitouch: fix out-of-bounds bit access on mt_io_flags

Angela Czubak <[email protected]>
HID: add haptics page defines

Zide Chen <[email protected]>
perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()

Baokun Li <[email protected]>
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()

Jan Kara <[email protected]>

    writeback: Avoid contention on wb->list_lock when switching inodes

Guangshuo Li <[email protected]>
cpufreq: qcom-cpufreq-hw: Fix possible double free

Lizhe <[email protected]>

    cpufreq: Make cpufreq_driver->exit() return void

Viresh Kumar <[email protected]>
cpufreq: pcc: Remove empty exit() callback

Jann Horn <[email protected]>
proc: protect ptrace_may_access() with exec_update_lock (FD links)

Christoph Hellwig <[email protected]>
proc: rename proc_setattr to proc_nochmod_setattr

Namjae Jeon <[email protected]>
ksmbd: track the connection owning a byte-range lock

DaeMyung Kang <[email protected]>
ksmbd: centralize ksmbd_conn final release to plug transport leak

Namjae Jeon <[email protected]>
ksmbd: use opener credentials for FSCTL mutations

Michael Bommarito <[email protected]>
smb: client: resolve SWN tcon from live registrations

Markus Elfring <[email protected]>
smb: client: Improve unlocking of a mutex in cifs_get_swn_reg()

Siwei Zhang <[email protected]>
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()

Pauli Virtanen <[email protected]>
Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister

Runyu Xiao <[email protected]>

    Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock

Florian Westphal <[email protected]>
netfilter: ebtables: zero chainstack array

Qianfeng Rong <[email protected]>
netfilter: ebtables: Use vmalloc_array() to improve code

Xiaolei Wang <[email protected]>
media: nxp: imx8-isi: Fix use-after-free on remove

Frank Li <[email protected]>
media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code

Uwe Kleine-König <[email protected]>
media: nxp: imx8-isi: Convert to platform remove callback returning void

Runyu Xiao <[email protected]>
gpio: sch: use raw_spinlock_t in the irq startup path

Runyu Xiao <[email protected]>
coresight: etb10: restore atomic_t for shared reading state

Shakeel Butt <[email protected]>
mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()

Qi Zheng <[email protected]>
mm: shrinker: remove redundant shrinker_rwsem in debugfs operations

Marco Elver <[email protected]>
Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref

Giovanni Cabiddu <[email protected]>
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()

Nikolay Kulikov <[email protected]>
staging: rtl8723bs: fix spaces around binary operators

William Hansen-Baird <[email protected]>
staging: rtl8723bs: core: move constants to right side in comparison

Marco Nenciarini <[email protected]>
PCI: Skip Resizable BAR restore on read error

Ilpo Järvinen <[email protected]>
PCI: Move Resizable BAR code to rebar.c

Ilpo Järvinen <[email protected]>
PCI: Add kerneldoc for pci_resize_resource()

Ilpo Järvinen <[email protected]>
PCI: Fix restoring BARs on BAR resize rollback path

Ilpo Järvinen <[email protected]>
PCI: Free saved list without holding pci_bus_sem

Ilpo Järvinen <[email protected]>
PCI: Prevent resource tree corruption when BAR resize fails

Manivannan Sadhasivam <[email protected]>
PCI: mediatek: Fix IRQ domain leak when port fails to enable

Christian Marangi <[email protected]>
PCI: mediatek: Use generic MACRO for TPVPERL delay

Christian Marangi <[email protected]>
PCI: mediatek: Convert bool to single quirks entry and bitmap

Jiri Slaby (SUSE) <[email protected]>
PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()

Richard Zhu <[email protected]>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling

Alex Williamson <[email protected]>
vfio/mlx5: Fix racy bitfields and tighten struct layout

Mahesh Vaidya <[email protected]>
PCI: altera: Fix resource leaks on probe failure

Zhao Dongdong <[email protected]>
ALSA: aoa: check snd_ctl_new1() return value

Herman van Hazendonk <[email protected]>
iio: common: st_sensors: honour channel endianness in read_axis_data

Alexander Lobakin <[email protected]>
bitops: make BYTES_TO_BITS() treewide-available

Biren Pandya <[email protected]>
iio: pressure: mpl115: fix runtime PM leak on read error

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: stabilized timestamp in interrupt

Jean-Baptiste Maneyrol <[email protected]>
iio: invensense: fix timestamp glitches when switching frequency

Colin Ian King <[email protected]>
iio: invensense: remove redundant initialization of variable period

Zhang Lixu <[email protected]>
iio: hid-sensor-rotation: Fix stale or zero output when reading raw values

Runyu Xiao <[email protected]>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ

Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Fix possible deadlock and missing notifications

Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Use devm_acpi_install_notify_handler()

Rafael J. Wysocki <[email protected]>
ACPI: bus: Introduce devm_acpi_install_notify_handler()

Rafael J. Wysocki <[email protected]>
ACPI: driver: Check ACPI_COMPANION() against NULL during probe

Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup

Sandipan Das <[email protected]>
perf/x86/amd/brs: Fix kernel address leakage

Pengpeng Hou <[email protected]>
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout

Pengpeng Hou <[email protected]>
mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout

Pengpeng Hou <[email protected]>
mtd: rawnand: fsl_ifc: return errors for failed page reads

Runyu Xiao <[email protected]>
mmc: vub300: defer reset until cmd_mutex is unlocked

Pengpeng Hou <[email protected]>
mtd: mchp23k256: use SPI match data for chip caps

Pengpeng Hou <[email protected]>
mtd: onenand: samsung: report DMA completion timeouts

Rafael Beims <[email protected]>
wifi: mwifiex: fix permanently busy scans after multiple roam iterations

Zhiling Zou <[email protected]>
wifi: mac80211: free ack status frame on TX header build failure

Junrui Luo <[email protected]>
powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()

Zhao Dongdong <[email protected]>
reset: sunxi: fix memory region leak on ioremap failure

Robby Cai <[email protected]>
reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ

Florian Westphal <[email protected]>
ipvs: reload ip header after head reallocation

Julian Anastasov <[email protected]>
ipvs: fix more places with wrong ipv6 transport offsets

Maoyi Xie <[email protected]>
memstick: ms_block: reject a card that reports too many blocks

James Raphael Tiovalen <[email protected]>
macsec: fix promiscuity refcount leak in macsec_dev_open()

Xuanqiang Luo <[email protected]>
llc: fix SAP refcount leak when creating incoming sockets

Laxman Acharya Padhya <[email protected]>
Bluetooth: btrtl: validate firmware patch bounds

Asim Viladi Oglu Manizada <[email protected]>
net: openvswitch: reject oversized nested action attrs

Abhishek Ojha <[email protected]>
regulator: ltc3676: Fix incorrect IRQSTAT bit offsets

Dawei Feng <[email protected]>

    wifi: mac80211: fix memory leak in ieee80211_register_hw()

Runyu Xiao <[email protected]>
wifi: rt2x00: avoid full teardown before work setup in probe

Thorsten Blum <[email protected]>
powerpc/pseries: fix memory leak on krealloc failure in papr_init

Peng Fan <[email protected]>
pmdomain: imx: Fix i.MX8MP VC8000E power up sequence

Peng Fan <[email protected]>
pmdomain: imx: Fix i.MX8MP power notifier

Farhad Alemi <[email protected]>
cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed

Crystal Wood <[email protected]>
tracing/osnoise: Call synchronize_rcu() when unregistering

Tao Liu <[email protected]>
riscv: Prevent NULL pointer dereference in machine_kexec_prepare()

Michael Bommarito <[email protected]>
drbd: reject data replies with an out-of-range payload size

Daehyeon Ko <[email protected]>
macsec: don't read an unset MAC header in macsec_encrypt()

Yizhou Zhao <[email protected]>
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new

Yizhou Zhao <[email protected]>
ipvs: use parsed transport offset in SCTP state lookup

Shuangpeng Bai <[email protected]>
llc: fix SAP refcount leak in llc_ui_autobind()

Yousef Alhouseen <[email protected]>
mac802154: remove interfaces with RCU list deletion

Gerald Schaefer <[email protected]>
s390/monwriter: Reject buffer reuse with different data length

Martin Kaiser <[email protected]>
riscv: probes: save original sp in rethook trampoline

HyeongJun An <[email protected]>
hwmon: (asus_atk0110) Check package count before accessing element

Maoyi Xie <[email protected]>
net: wwan: iosm: bound device offsets in the MUX downlink decoder

Wentao Liang <[email protected]>
ata: pata_pxa: Fix DMA channel leak on probe error

Bryam Vargas <[email protected]>
orangefs: keep the readdir entry size 64-bit in fill_from_part()

Masami Hiramatsu (Google) <[email protected]>
tracing/probes: Fix double addition of offset for @+FOFFSET

Bryam Vargas <[email protected]>
net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked

Bryam Vargas <[email protected]>
net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked

Andrea Righi <[email protected]>
net: lan743x: Initialize eth_syslock spinlock before use

Haoxiang Li <[email protected]>
fsl/fman: Free init resources on KeyGen failure in fman_init()

Runyu Xiao <[email protected]>
hwmon: (occ) unregister sysfs devices outside occ lock

Haoxiang Li <[email protected]>
net: liquidio: fix BAR resource leak on PF number failure

Pengpeng Hou <[email protected]>
hwmon: (w83793) remove vrm sysfs file on probe failure

Pengpeng Hou <[email protected]>
hwmon: (w83627hf) remove VID sysfs files on error and remove

Conor Dooley <[email protected]>
rtc: mpfs: fix counter upload completion condition

Abdun Nihaal <[email protected]>
bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()

Sabrina Dubroca <[email protected]>
espintcp: use sk_msg_free_partial to fix partial send

Hongchen Zhang <[email protected]>
LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()

Sven Eckelmann <[email protected]>
batman-adv: clean untagged VLAN on netdev registration failure

Sven Eckelmann <[email protected]>
batman-adv: ensure minimal ethernet header on TX

Sven Eckelmann <[email protected]>
batman-adv: retrieve ethhdr after potential skb realloc on RX

Jamal Hadi Salim <[email protected]>
net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants

Shitalkumar Gandhi <[email protected]>
ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit

Shitalkumar Gandhi <[email protected]>
ieee802154: ca8210: fix cas_ctl leak on spi_async failure

Michael Bommarito <[email protected]>
ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation

Michael Bommarito <[email protected]>
ieee802154: admin-gate legacy LLSEC dump operations

Maoyi Xie <[email protected]>
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

Maoyi Xie <[email protected]>
net: ipip: require CAP_NET_ADMIN in the device netns for changelink

Maoyi Xie <[email protected]>
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink

Maoyi Xie <[email protected]>
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink

Dawei Feng <[email protected]>
net: ena: clean up XDP TX queues when regular TX setup fails

Zihan Xi <[email protected]>
net/sched: act_ct: preserve tc_skb_cb across defragmentation

Haoxiang Li <[email protected]>
net: ixp4xx_hss: fix duplicate HDLC netdev allocation

Haoxiang Li <[email protected]>
net: wwan: t7xx: destroy DMA pool on CLDMA late init failure

Maoyi Xie <[email protected]>
net: sit: require CAP_NET_ADMIN in the device netns for changelink

Andreas Kemnade <[email protected]>
gpios: palmas: add .get_direction() op

Paul Louvel <[email protected]>
gpio-f7188x: Add support for NCT6126D version B

Bradley Morgan <[email protected]>
cpu: hotplug: Bound hotplug states sysfs output

Bradley Morgan <[email protected]>
cpu: hotplug: Preserve per instance callback errors

Zhan Xusheng <[email protected]>
posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()

Doruk Tan Ozturk <[email protected]>
net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix type confusion in CDC union descriptor parsing

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix race condition in reset_device sysfs callback

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix DMA mapping violation in line setup

Dmitry Torokhov <[email protected]>
Input: ims-pcu - add response length checks

Dmitry Torokhov <[email protected]>
Input: ims-pcu - validate control endpoint type

Dmitry Torokhov <[email protected]>
Input: ims-pcu - release data interface on disconnect

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix use-after-free and double-free in disconnect

Haoxiang Li <[email protected]>
scsi: elx: efct: Fix I/O leak on unsupported additional CDB

WenTao Liang <[email protected]>
scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()

Bryam Vargas <[email protected]>
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE

Bryam Vargas <[email protected]>
scsi: target: Bound PR-OUT TransportID parsing to the received buffer

Michael Bommarito <[email protected]>
scsi: xen: scsiback: Free unsubmitted command instead of double-putting it

Michael Bommarito <[email protected]>
scsi: xen: scsiback: Free the command tag on the TMR submit-failure path

Xu Rao <[email protected]>
scsi: sg: Report request-table problems when any status is set

Abdun Nihaal <[email protected]>
scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()

Haoxiang Li <[email protected]>
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

Mikulas Patocka <[email protected]>
dm-verity: increase sprintf buffer size

Mikulas Patocka <[email protected]>
dm-verity: fix a possible NULL pointer dereference

Mikulas Patocka <[email protected]>
dm-integrity: don't increment hash_offset twice

Mikulas Patocka <[email protected]>
dm_early_create: fix freeing used table on dm_resume failure

Mikulas Patocka <[email protected]>
dm-stats: fix merge accounting

Mikulas Patocka <[email protected]>
dm-stats: fix dm_jiffies_to_msec64

Benjamin Marzinski <[email protected]>
dm-log: fix a bitset_size overflow on 32bit machines

Mikulas Patocka <[email protected]>
dm-ioctl: fix a possible overflow in list_version_get_info

Mikulas Patocka <[email protected]>
dm-bufio: fix wrong count calculation in dm_bufio_issue_discard

Samuel Moelius <[email protected]>
dm era: fix out-of-bounds memory access for non-zero start sector

Ming-Hung Tsai <[email protected]>
dm thin metadata: fix metadata snapshot consistency on commit failure

Genjian Zhang <[email protected]>
dm thin metadata: fix superblock refcount leak on snapshot shadow failure

Haoxiang Li <[email protected]>
net: sparx5: unregister blocking notifier on init failure

Jiri Olsa <[email protected]>
bpf: Add missing access_ok call to copy_user_syms

Jann Horn <[email protected]>

    bpf,fork: wipe ->bpf_storage before bailouts that access it

Oliver Hartkopp <[email protected]>
can: bcm: add missing rcu list annotations and operations

Oliver Hartkopp <[email protected]>
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure

Lee Jones <[email protected]>
can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF

Oliver Hartkopp <[email protected]>
can: isotp: use unconditional synchronize_rcu() in isotp_release()

Fan Wu <[email protected]>
can: esd_usb: kill anchored URBs before freeing netdevs

Bryam Vargas <[email protected]>
nvmet-rdma: handle inline data with a nonzero offset

Weiming Shi <[email protected]>
sctp: validate STALE_COOKIE cause length before reading staleness

Kunihiko Hayashi <[email protected]>
spi: uniphier: Fix completion initialization order before devm_request_irq()

Wang Yan <[email protected]>
time: Fix off-by-one in compat settimeofday() usec validation

Jaewon Yang <[email protected]>
tpm: Make the TPM character devices non-seekable

Thorsten Blum <[email protected]>
tpm: fix event_size output in tpm1_binary_bios_measurements_show

Maoyi Xie <[email protected]>
xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink

Sanman Pradhan <[email protected]>
xfrm: use compat translator only for u64 alignment mismatch

Wentao Liang <[email protected]>
xen/gntdev: fix error handling in ioctl

Paul Greenwalt <[email protected]>
ice: fix ice_init_link() error return preventing probe

Xuanqiang Luo <[email protected]>
i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()

Roman Vivchar <[email protected]>
i2c: mediatek: fix WRRD for SoCs without auto_restart option

Joshua Crofts <[email protected]>
hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig

Ibrahim Hashimov <[email protected]>
ksmbd: fix integer overflow in set_file_allocation_info()

Fredric Cover <[email protected]>
smb: client: use kvzalloc() for megabyte buffer in simple fallocate

Daniel Gibson <[email protected]>
platform/x86/amd/pmc: Add delay_suspend module parameter

Daniel Gibson <[email protected]>
platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops

Daniel Gibson <[email protected]>
platform/x86/amd/pmc: Check for intermediate wakeup in function

Frank Li <[email protected]>
dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK

Kartik Rajput <[email protected]>
dmaengine: tegra: Fix burst size calculation

Jarkko Sakkinen <[email protected]>
tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()

Bhargav Joshi <[email protected]>
irqchip/crossbar: Use correct index in crossbar_domain_free()

Florian Fuchs <[email protected]>
mtd: maps: vmu-flash: fix NULL pointer dereference in initialization

Miquel Raynal <[email protected]>
mtd: spi-nor: swp: Improve locking user experience

Sebastian Alba Vives <[email protected]>
fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()

Maoyi Xie <[email protected]>

    net: thunderbolt: Fix frags[] overflow by bounding frame_count

Manivannan Sadhasivam <[email protected]>
bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path

Sebastian Alba Vives <[email protected]>
fpga: dfl: add bounds check in dfh_get_param_size()

Michael Bommarito <[email protected]>
ocfs2: reject non-inline dinodes with i_size and zero i_clusters

Michael Bommarito <[email protected]>
ocfs2: reject dinodes whose i_rdev disagrees with the file type

Michael Bommarito <[email protected]>
ocfs2: reject dinodes with non-canonical i_mode type

Joseph Qi <[email protected]>
ocfs2: add journal NULL check in ocfs2_checkpoint_inode()

Ian Bridges <[email protected]>
ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits

Kyle Zeng <[email protected]>
ocfs2: avoid moving extents to occupied clusters

Arseniy Krasnov <[email protected]>
mtd: rawnand: fix condition in 'nand_select_target()'

Vasiliy Kovalev <[email protected]>
net/9p: fix infinite loop in p9_client_rpc on fatal signal

Bastien Curutchet <[email protected]>
mtd: rawnand: pl353: fix probe resource allocation

Tristan Madani <[email protected]>
ocfs2: use kzalloc for quota recovery bitmap allocation

Ionut Nechita <[email protected]>
scsi: sas: Skip opt_sectors when DMA reports no real optimization hint

Martin Wilck <[email protected]>
scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()

Breno Leitao <[email protected]>
9p: skip nlink update in cacheless mode to fix WARN_ON

Ruoyu Wang <[email protected]>
mtd: slram: remove failed entries from the device list

Muchun Song <[email protected]>
mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE

Krzysztof Wilczyński <[email protected]>
proc: only bump parent nlink when registering directories

SeongJae Park <[email protected]>
mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error

SeongJae Park <[email protected]>
mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()

Zishun Yi <[email protected]>
riscv: cacheinfo: Fix node reference leak in populate_cache_leaves

Aaron Tomlin <[email protected]>
mips: sched: Fix CPUMASK_OFFSTACK memory corruption

WenTao Liang <[email protected]>
power: supply: charger-manager: fix refcount leak in is_full_charged()

Tristan Madani <[email protected]>
ntfs3: fix out-of-bounds read in decompress_lznt

Michael Bommarito <[email protected]>
ntfs3: validate split-point offset in indx_insert_into_buffer

Michael Bommarito <[email protected]>
ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head

Michael Bommarito <[email protected]>

    ntfs3: cap RESTART_TABLE free-chain walker at rt->used

Michael Bommarito <[email protected]>

    fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}

Michael Bommarito <[email protected]>
fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow

Konstantin Komarov <[email protected]>
fs/ntfs3: validate lcns_follow in log_replay conversion

Konstantin Komarov <[email protected]>
fs/ntfs3: bound attr_off in UpdateResidentValue against data_off

Michael Bommarito <[email protected]>

    fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass

Konstantin Komarov <[email protected]>
fs/ntfs3: bound DeleteIndexEntryAllocation memmove length

Zhan Xusheng <[email protected]>
fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename

SeongJae Park <[email protected]>
mm/damon/core: make charge_addr_from aware of end-address exclusivity

Ma Ke <[email protected]>
power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak

Maciej W. Rozycki <[email protected]>
MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()

Johan Hovold <[email protected]>
MIPS: ip22-gio: fix device reference leak in probe

Johan Hovold <[email protected]>
MIPS: ip22-gio: fix kfree() of static object

Johan Hovold <[email protected]>
MIPS: ip22-gio: fix gio device memory leak

Wasim Nazir <[email protected]>
remoteproc: qcom: Fix leak when custom dump_segments addition fails

Chuck Lever <[email protected]>
SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing

Chuck Lever <[email protected]>
lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure

Chuck Lever <[email protected]>
lockd: Plug nlm_file leak when nlm_do_fopen() fails

Chuck Lever <[email protected]>
sunrpc: wait for in-flight TLS handshake callback when cancel loses race

Chris Mason <[email protected]>
sunrpc: pin svc_xprt across the asynchronous TLS handshake callback

Abdun Nihaal <[email protected]>
nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

Abdun Nihaal <[email protected]>
nvdimm/btt: Free arenas on btt_init() error paths

Junrui Luo <[email protected]>
jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()

Pauli Virtanen <[email protected]>
Bluetooth: SCO: hold sk properly in sco_conn_ready

Pauli Virtanen <[email protected]>
Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready

Benoît Sevens <[email protected]>
HID: playstation: validate num_touch_reports in DualShock 4 reports

Bartosz Golaszewski <[email protected]>
mfd: tps6586x: Fix OF node refcount

Shyam Prasad N <[email protected]>
cifs: invalidate cfid on unlink/rename/rmdir

Sven Eckelmann <[email protected]>
batman-adv: tt: prevent TVLV OOB check overflow

Sven Eckelmann <[email protected]>
batman-adv: frag: fix primary_if leak on failed linearization

Sven Eckelmann <[email protected]>
batman-adv: frag: free unfragmentable packet

Sven Eckelmann <[email protected]>
batman-adv: fix VLAN priority offset

Sven Eckelmann <[email protected]>
batman-adv: tt: avoid request storms during pending request

Sven Eckelmann <[email protected]>
batman-adv: dat: fix tie-break for candidate selection

Sven Eckelmann <[email protected]>
batman-adv: dat: ensure accessible eth_hdr proto field

Sven Eckelmann <[email protected]>
batman-adv: bla: reacquire gw address after skb realloc

Sven Eckelmann <[email protected]>
batman-adv: dat: acquire ARP hw source only after skb realloc

Sven Eckelmann <[email protected]>

    batman-adv: access unicast_ttvn skb->data only after skb realloc

Sven Eckelmann <[email protected]>
batman-adv: gw: acquire ethernet header only after skb realloc

Sumanth Korikkar <[email protected]>
s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()

Sandipan Das <[email protected]>
perf/x86/amd/lbr: Fix kernel address leakage

Thorsten Blum <[email protected]>
x86/boot: Reject too long acpi_rsdp= values

Thorsten Blum <[email protected]>
x86/boot: Validate console=uart8250 baud rate to fix early boot hang

Ali Ahmet MEMIS <[email protected]>
tools/power/x86/intel-speed-select: Harden daemon pidfile open

Guangshuo Li <[email protected]>
mfd: sm501: Fix reference leak on failed device registration

Armin Wolf <[email protected]>
leds: uleds: Fix potential buffer overread

Ondrej Mosnacek <[email protected]>
selinux: fix incorrect execmem checks on overlayfs

Stephen Smalley <[email protected]>
selinux: check connect-related permissions on TCP Fast Open

Wang Jun <[email protected]>
soc: fsl: qe: panic on ioremap() failure in qe_reset()

Siddharth Vadapalli <[email protected]>
soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy

Guangshuo Li <[email protected]>
gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path

Xiang Mei (Microsoft) <[email protected]>
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()

Wyatt Feng <[email protected]>
netfilter: xt_nat: reject unsupported target families

Yizhou Zhao <[email protected]>
netfilter: ecache: fix inverted time_after() check

Yizhou Zhao <[email protected]>
netfilter: nf_conncount: fix zone comparison in tuple dedup

Xiang Mei <[email protected]>
netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag

Florian Westphal <[email protected]>
netfilter: nf_nat_sip: reload possible stale data pointer

Haoze Xie <[email protected]>
netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst

Wyatt Feng <[email protected]>
netfilter: xt_cluster: reject template conntracks in hash match

David Carlier <[email protected]>
netfilter: nfnl_cthelper: apply per-class values when updating policies

Muhammad Bilal <[email protected]>
netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read

Srinivas Kandagatla <[email protected]>
ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback

Cássio Gabriel <[email protected]>
ASoC: mediatek: mt8183: Release reserved memory on cleanup

Cássio Gabriel <[email protected]>
ASoC: mediatek: mt8192: Release reserved memory on cleanup

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get

Abdun Nihaal <[email protected]>
fbdev: tridentfb: fix potential memory leak in trident_pci_probe()

Abdun Nihaal <[email protected]>
fbdev: nvidia: fix potential memory leak in nvidiafb_probe()

Abdun Nihaal <[email protected]>
fbdev: vesafb: fix memory leak in vesafb_probe()

Abdun Nihaal <[email protected]>
fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()

Abdun Nihaal <[email protected]>
fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()

Abdun Nihaal <[email protected]>
fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

Abdun Nihaal <[email protected]>
fbdev: s3fb: fix potential memory leak in s3_pci_probe()

Abdun Nihaal <[email protected]>
fbdev: i740fb: fix potential memory leak in i740fb_probe()

Abdun Nihaal <[email protected]>
fbdev: radeon: fix potential memory leak in radeonfb_pci_register()

Li RongQing <[email protected]>
fbdev: sm712: Fix operator precedence in big_swap macro

Abdun Nihaal <[email protected]>
fbdev: hecubafb: fix potential memory leak in hecubafb_probe()

Abdun Nihaal <[email protected]>
fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()

Abdun Nihaal <[email protected]>
fbdev: metronomefb: fix potential memory leak in metronomefb_probe()

Sean Christopherson <[email protected]>
KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs

Matthew Rosato <[email protected]>
KVM: s390: pci: Fix handling of AIF enable without AISB

Hyunwoo Kim <[email protected]>
KVM: arm64: vgic: Check the interrupt is still ours before migrating it

Haoxiang Li <[email protected]>
KVM: s390: pci: Fix GISC refcount leak on AIF enable failure

Nickolay Goppen <[email protected]>
arm64: dts: qcom: sdm630: describe adsp_mem region properly

Mark Rutland <[email protected]>
arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()

Yong Wang <[email protected]>
net: ife: require ETH_HLEN to be pullable in ife_decode()

Zhengchuan Liang <[email protected]>
net: atm: reject out-of-range traffic classes in QoS validation

Michael Bommarito <[email protected]>
net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()

Cássio Gabriel <[email protected]>
ASoC: SOF: topology: validate vendor array size before parsing

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put

Zhang Tianci <[email protected]>
vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter

Wentao Liang <[email protected]>
mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()

Wentao Liang <[email protected]>
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()

Guangshuo Li <[email protected]>
smb: client: fix overflow in passthrough ioctl bounds check

Harman Kalra <[email protected]>
octeontx2-af: fix VF bringup affecting PF promiscuous state

Li RongQing <[email protected]>
net/mlx5: Fix L3 tunnel entropy refcount leak

Wang Yan <[email protected]>
selftests/net: fix EVP_MD_CTX leak in tcp_mmap

Timur Tabi <[email protected]>
regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK

Cao Guanghui <[email protected]>
dm era: fix NULL pointer dereference in metadata_open()

Chuck Lever <[email protected]>
SUNRPC: pin upper rpc_clnt across the TLS connect_worker

Chuck Lever <[email protected]>
SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED

Guangshuo Li <[email protected]>
cifs: validate DFS referral string offsets

Rongguang Wei <[email protected]>
s390/zcrypt: Remove the empty file

Julian Anastasov <[email protected]>
ipvs: ensure inner headers in ICMP errors are in headroom

Yizhou Zhao <[email protected]>
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors

Yizhou Zhao <[email protected]>
ipvs: use parsed transport offset in TCP state lookup

Yizhou Zhao <[email protected]>
ipvs: pass parsed transport offset to state handlers

Eric Dumazet <[email protected]>
ipv6: mcast: Fix potential UAF in MLD delayed work

Kuniyuki Iwashima <[email protected]>
ipv6: mcast: Replace locking comments with lockdep annotations.

Eric Dumazet <[email protected]>
ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()

Suman Ghosh <[email protected]>
octeontx2-pf: check DMAC extraction support before filtering

Samuel Moelius <[email protected]>
net/sched: cake: reject overhead values that underflow length

Enrico Pozzobon <[email protected]>
net: usb: lan78xx: disable VLAN filter in promiscuous mode

Oleksij Rempel <[email protected]>
net: usb: lan78xx: move functions to avoid forward definitions

Chuck Lever <[email protected]>
net/tls: Consume empty data records in tls_sw_read_sock()

Hui Wang <[email protected]>
ring-buffer: Fix event length with forced 8-byte alignment

Weiming Shi <[email protected]>

    Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()

Pauli Virtanen <[email protected]>
Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length

Cen Zhang <[email protected]>
Bluetooth: MGMT: Fix adv monitor add failure cleanup

Cen Zhang <[email protected]>
Bluetooth: 6lowpan: hold L2CAP conn across debugfs control

Eric Dumazet <[email protected]>
amt: fix size calculation in amt_get_size()

Xiang Mei <[email protected]>
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket

Jamal Hadi Salim <[email protected]>
net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload

Xiang Mei <[email protected]>
net: qualcomm: rmnet: validate MAP frame length before ingress parsing

Shigeru Yoshida <[email protected]>
qede: fix off-by-one in BD ring consumption on build_skb failure

Jens Emil Schulz Østergaard <[email protected]>
net: microchip: vcap: fix races on the shared Super VCAP block

Feng Liu <[email protected]>
net/mlx5e: Fix HV VHCA stats agent registration race

Feng Liu <[email protected]>
net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation

Wyatt Feng <[email protected]>
netfilter: xt_connmark: reject invalid shift parameters

Zhixing Chen <[email protected]>
netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop

Feng Wu <[email protected]>
netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()

Wyatt Feng <[email protected]>
netfilter: xt_u32: reject invalid shift counts

Qihang <[email protected]>
gue: validate REMCSUM private option length

Xiang Mei <[email protected]>
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup

Yiyang Chen <[email protected]>
selftests/hid: Cover hid_bpf_get_data() size overflow

Benjamin Tissoires <[email protected]>
selftests/hid: convert the hid_bpf selftests with struct_ops

Benjamin Tissoires <[email protected]>
selftests/hid: force using our compiled libbpf headers

Benjamin Tissoires <[email protected]>
selftests/hid: do not manually call headers_install

Benjamin Tissoires <[email protected]>
selftests/hid: ensure we can compile the tests on kernels pre-6.3

Anshuman Khandual <[email protected]>
arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range()

Ryan Roberts <[email protected]>
arm64/mm: convert ptep_clear() to ptep_get_and_clear()

Ryan Roberts <[email protected]>

    arm64/mm: convert set_pte_at() to set_ptes(..., 1)

Ryan Roberts <[email protected]>
arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep)

Lee Jones <[email protected]>
HID: core: Fix OOB read in hid_get_report for numbered reports

Georgiy Osokin <[email protected]>
HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()

Myeonghun Pak <[email protected]>
ata: sata_gemini: unwind clocks on IDE pinctrl errors

Michael Bommarito <[email protected]>
minix: avoid overflow in bitmap block count calculation

David Howells <[email protected]>
afs: Fix unchecked-length string display in debug statement

David Howells <[email protected]>
afs: Fix the volume AFS_VOLUME_RM_TREE is set on

David Howells <[email protected]>
afs: Fix vllist leak

David Howells <[email protected]>
afs: Fix callback service message parsers to pass through -EAGAIN

Zilin Guan <[email protected]>
afs: use kvfree() to free memory allocated by kvcalloc()

Dan Carpenter <[email protected]>
afs: Fix error code in afs_extract_vl_addrs()

Christian Brauner <[email protected]>
fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid

Samuel Moelius <[email protected]>
net/sched: hhf: clear heavy-hitter state on reset

Viacheslav Bocharov <[email protected]>
pinctrl: meson: restore non-sleeping GPIO access

Vladimir Zapolskiy <[email protected]>
gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe

Gil Portnoy <[email protected]>

    ksmbd: fix use-after-free of fp->owner.name in durable handle owner check

ZhangGuoDong <[email protected]>
smb: move some duplicate definitions to common/cifsglob.h

Haofeng Li <[email protected]>
ksmbd: reject undersized DACLs before parsing ACEs

Sechang Lim <[email protected]>
net/sched: act_bpf: use rcu_dereference_bh() to read the filter

Gleb Markov <[email protected]>
cxgb4: Fix decode strings dump for T6 adapters

Longjun Tang <[email protected]>
virtio_net: disable cb when NAPI is busy-polled

Qingshuang Fu <[email protected]>
irqchip/ts4800: Fix missing chained handler cleanup on remove

Yuho Choi <[email protected]>
irqchip/gic-v3-its: Fix OF node reference leak

Martin Kaiser <[email protected]>
tracing: eprobe: read the complete FILTER_PTR_STRING pointer

Masami Hiramatsu (Google) <[email protected]>
tracing/events: Fix to check the simple_tsk_fn creation

Ido Schimmel <[email protected]>
bridge: stp: Fix a potential use-after-free when deleting a bridge

Jamal Hadi Salim <[email protected]>
net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF

Rosen Penev <[email protected]>
net: gianfar: dispose irq mappings on probe failure and device removal

Petr Wozniak <[email protected]>
net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy

Xiang Mei <[email protected]>
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()

Guenter Roeck <[email protected]>
hwmon: (pmbus) Fix passing events to regulator core

Matti Vaittinen <[email protected]>
hwmon: adm1275: Prevent reading uninitialized stack

Maciej W. Rozycki <[email protected]>
MIPS: DEC: Ensure RTC platform device deregistration upon failure

Yousef Alhouseen <[email protected]>
sctp: fix SCTP_RESET_STREAMS stream list length limit

Wei Fang <[email protected]>
net: enetc: check the number of BDs needed for xdp_frame

Matvey Kovalev <[email protected]>

    qede: fix out-of-bounds check for cqe->len_list[]

Nuoqi Gui <[email protected]>
seg6: validate SRH length before reading fixed fields

Pengpeng Hou <[email protected]>
gpio: htc-egpio: use managed gpiochip registration

Pengpeng Hou <[email protected]>
gpio: mvebu: fail probe if gpiochip registration fails

Pengpeng Hou <[email protected]>
spi: sh-msiof: abort transfers when reset times out

Martin Kaiser <[email protected]>
tracing: probes: fix typo in a log message

Rob Herring (Arm) <[email protected]>
dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback

Shengjiu Wang <[email protected]>
ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count

Shitalkumar Gandhi <[email protected]>
net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove

Ruoyu Wang <[email protected]>
net: sungem: fix probe error cleanup

Yun Zhou <[email protected]>
net: mvneta: re-enable percpu interrupt on resume

Haoxiang Li <[email protected]>
rtc: cmos: unregister HPET IRQ handler on probe failure

Fredrik M Olsson <[email protected]>
rtc: ds1307: Fix off-by-one issue with wday for rx8130

Huiwen He <[email protected]>
smb/client: preserve errors from smb2_set_sparse()

Fernando Fernandez Mancera <[email protected]>
ipv6: fix error handling in disable_policy sysctl

Fernando Fernandez Mancera <[email protected]>
ipv6: fix error handling in forwarding sysctl

Fernando Fernandez Mancera <[email protected]>
ipv6: fix error handling in ignore_routes_with_linkdown sysctl

Fernando Fernandez Mancera <[email protected]>
ipv6: fix error handling in disable_ipv6 sysctl

Jamal Hadi Salim <[email protected]>
net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle

Eric Dumazet <[email protected]>
veth: fix NAPI leak in XDP enable error path

Aleksandrova Alyona <[email protected]>
net: dsa: sja1105: round up PTP perout pin duration

Xiang Mei <[email protected]>
net, bpf: check master for NULL in xdp_master_redirect()

Krzysztof Wilczyński <[email protected]>
alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs

Krzysztof Wilczyński <[email protected]>
alpha/PCI: Add security_locked_down() check to pci_mmap_resource()

Koichiro Den <[email protected]>
NTB: epf: Fix doorbell bitmask and IRQ vector handling

Koichiro Den <[email protected]>
NTB: epf: Report 0-based doorbell vector via ntb_db_event()

Koichiro Den <[email protected]>
NTB: epf: Make db_valid_mask cover only real doorbell bits

Florian Westphal <[email protected]>
netfilter: nft_compat: ebtables emulation must reject non-bridge targets

Runyu Xiao <[email protected]>

    netfilter: nft_synproxy: stop bypassing the priv->info snapshot

Fernando Fernandez Mancera <[email protected]>
netfilter: nf_conncount: prevent connlimit drops for early confirmed ct

Mathias Krause <[email protected]>
netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()

Bradley Morgan <[email protected]>
bpf: Disable xfrm_decode_session hook attachment

Xu Kuohai <[email protected]>
bpf, lsm: Add disabled BPF LSM hook list

Kuniyuki Iwashima <[email protected]>
ipv4: fib: Don't ignore error route in local/main tables.

Xiang Mei <[email protected]>
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().

Gil Portnoy <[email protected]>

    ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE

Stepan Ionichev <[email protected]>
rtc: msc313: fix NULL deref in shared IRQ handler at probe

Mohamed Khalfella <[email protected]>
i40e: Fix i40e_debug() to use struct i40e_hw argument

Lukasz Czapnik <[email protected]>
ice: fix AQ error code comparison in ice_set_pauseparam()

Dawid Osuchowski <[email protected]>
ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()

Manivannan Sadhasivam <[email protected]>
PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0

Manivannan Sadhasivam <[email protected]>
PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0

Xiang Mei <[email protected]>
drm/edid: fix OOB read in drm_parse_tiled_block()

Amery Hung <[email protected]>
bpf: Fix effective prog array index with BPF_F_PREORDER

Avinash Duduskar <[email protected]>
bpf: zero-initialize the fib lookup flow struct

Nuoqi Gui <[email protected]>
bpf: Fix stack slot index in nospec checks

Ronan Dalton <[email protected]>

    rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231

Antoni Pokusinski <[email protected]>

    rtc: abx80x: fix the RTC_VL_CLR clearing all status flags

Geetha sowjanya <[email protected]>
octeontx2-pf: mcs: Fix mcs resources free on PF shutdown

Subbaraya Sundeep <[email protected]>
octeontx2-pf: Clear stats of all resources when freeing resources

Geetha sowjanya <[email protected]>
octeontx2-af: mcs: Fix unsupported secy stats read

Wayen Yan <[email protected]>
net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths

Weiming Shi <[email protected]>
tipc: fix use-after-free of the discoverer in tipc_disc_rcv()

Ruoyu Wang <[email protected]>
net: marvell: prestera: initialize err in prestera_port_sfp_bind

Aboorva Devarajan <[email protected]>
selftests/mm: fix exclusive_cow test fork() handling

Sayali Patil <[email protected]>
selftests/mm: allow PUD-level entries in compound testcase of hmm tests

Sayali Patil <[email protected]>
selftests/mm: clarify alternate unmapping in compaction_test

Bhargav Joshi <[email protected]>
irqchip/crossbar: Fix parent domain resource leak

Florian Westphal <[email protected]>
netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak

Florian Westphal <[email protected]>
netfilter: nf_reject: skip iphdr options when looking for icmp header

Jozsef Kadlecsik <[email protected]>
netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()

Jozsef Kadlecsik <[email protected]>
netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types

Jozsef Kadlecsik <[email protected]>
netfilter: ipset: annotate "pos" for concurrent readers/writers

Jozsef Kadlecsik <[email protected]>
netfilter: ipset: Fix data race between add and dump in all hash types

Abd-Alrhman Masalkhi <[email protected]>
md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry

Aleksandr Nogikh <[email protected]>
ieee802154: fix kernel-infoleak in dgram_recvmsg()

Ivan Abramov <[email protected]>

    ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()

Xu Rao <[email protected]>
ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()

Andy Shevchenko <[email protected]>
ACPI: resource: Amend kernel-doc style

Ricardo Neri <[email protected]>
thermal: intel: Fix dangling resources on thermal_throttle_online() failure

Breno Leitao <[email protected]>
arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS

Cen Zhang <[email protected]>
ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints

Yun Zhou <[email protected]>
flow_dissector: check device type before reading ETH_ADDRS

Cosmin Ratiu <[email protected]>
devlink: Fix parent ref leak in devl_rate_node_create()

Ioana Ciornei <[email protected]>
dpaa2-switch: fix VLAN upper check not rejecting bridge join

Xiang Mei <[email protected]>
virtio-net: fix len check in receive_big()

Quang Nguyen <[email protected]>
spi: rpc-if: Use correct device for hardware reinitialization on resume

Mark Tomlinson <[email protected]>
PCI: iproc: Restore .map_irq() for the platform bus driver

Xin Long <[email protected]>
sctp: hold socket lock when dumping endpoints in sctp_diag

Jakub Kicinski <[email protected]>
net: psample: fix info leak in PSAMPLE_ATTR_DATA

Ratheesh Kannoth <[email protected]>
octeontx2-pf: Fix leak of SQ timestamp buffer on teardown

Thadeu Lima de Souza Cascardo <[email protected]>
drm/amdgpu: initialize irq.lock spinlock earlier

Mario Limonciello <[email protected]>
drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm

Yunxiang Li <[email protected]>
drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free

Sen Wang <[email protected]>
ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode

Arnaldo Carvalho de Melo <[email protected]>
perf cs-etm: Require full global header in auxtrace_info size check

Arnaldo Carvalho de Melo <[email protected]>
perf cs-etm: Validate num_cpu before metadata allocation

Arnaldo Carvalho de Melo <[email protected]>
perf machine: Use snprintf() for guestmount path construction

Eric Dumazet <[email protected]>
xfrm: validate selector family and prefixlen during match

Eric Dumazet <[email protected]>

    xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]

Mike Yu <[email protected]>
xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path

Steffen Klassert <[email protected]>
xfrm: Use the XFRM_GRO to indicate a GRO call on input

Jisheng Zhang <[email protected]>
spi: dw: fix wrong BAUDR setting after resume

Pengpeng Hou <[email protected]>
gpio: mlxbf3: fail probe if gpiochip registration fails

Arnaldo Carvalho de Melo <[email protected]>
perf bpf: Bounds-check array offsets in bpil_offs_to_addr()

Arnaldo Carvalho de Melo <[email protected]>
perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name()

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Use snprintf() for root_dir path construction

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id()

Pengpeng Hou <[email protected]>
sparc: led: avoid trimming a newline from empty writes

John Johansen <[email protected]>
apparmor: fix label can not be immediately before a declaration

Adrian Hunter <[email protected]>
i3c: master: Prevent reuse of dynamic address on device add failure

Zygmunt Krynicki <[email protected]>
apparmor: put secmark label after secid lookup

Zygmunt Krynicki <[email protected]>
apparmor: aa_getprocattr free procattr leak on format failure

Maxime Bélair <[email protected]>
apparmor: fix potential UAF in aa_replace_profiles

Ryan Lee <[email protected]>
apparmor: grab ns lock and refresh when looking up changehat child profiles

John Johansen <[email protected]>
apparmor: fix rawdata_f_data implicit flex array

Zygmunt Krynicki <[email protected]>
apparmor: aa_label_alloc use aa_label_free on alloc failure

Ruoyu Wang <[email protected]>
apparmor: check label build before no_new_privs test

Andrew Morton <[email protected]>
security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()

Yuanhe Shu <[email protected]>
Revert "PCI/MSI: Unmap MSI-X region on error"

Manivannan Sadhasivam <[email protected]>
PCI: mediatek: Use actual physical address instead of virt_to_phys()

Ryder Lee <[email protected]>
PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Add bounds checks to read_build_id() note iteration in minimal build

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Add bounds checks to elf_read_build_id() note iteration

Arnaldo Carvalho de Melo <[email protected]>
perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name()

Arnaldo Carvalho de Melo <[email protected]>
tools lib api: Fix mount_overload() snprintf truncation and toupper range

Arnaldo Carvalho de Melo <[email protected]>
tools lib api: Fix filename__write_int() writing uninitialized stack data

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Fix thread__set_comm_from_proc() on empty comm file

Arnaldo Carvalho de Melo <[email protected]>
perf intel-pt: Fix snprintf size tracking bug in insn decoder

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Bounds-check .gnu_debuglink section data

Arnaldo Carvalho de Melo <[email protected]>
perf symbols: Fix signed overflow in sysfs__read_build_id() size check

Arnaldo Carvalho de Melo <[email protected]>
tools lib api: Fix missing null termination in filename__read_int/ull()

Arnaldo Carvalho de Melo <[email protected]>
perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file

Arnaldo Carvalho de Melo <[email protected]>
perf pmu: Fix pmu_id() heap underwrite on empty identifier file

James Clark <[email protected]>
perf cs-etm: Queue context packets for frontend

James Clark <[email protected]>
perf cs-etm: Create decoders after both AUX and HW_ID search passes

Besar Wicaksono <[email protected]>
perf cs-etm: Fix incorrect or missing decoder for raw trace

Chuck Lever <[email protected]>
xprtrdma: Return sendctx slot after Send preparation failure

Chuck Lever <[email protected]>
xprtrdma: Repost Receive buffers for malformed replies

Chuck Lever <[email protected]>
xprtrdma: Sanitize the reply credit grant after parsing

Chris Mason <[email protected]>
xprtrdma: Fix bcall rep leak and unbounded peek

Chuck Lever <[email protected]>
xprtrdma: Resize reply buffers before reposting receives

Chuck Lever <[email protected]>
xprtrdma: Document and assert reply-handler invariants

Chuck Lever <[email protected]>
xprtrdma: Check frwr_wp_create() during connect

Arnaldo Carvalho de Melo <[email protected]>
perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path

Arnaldo Carvalho de Melo <[email protected]>
perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name()

Arnaldo Carvalho de Melo <[email protected]>
perf sched: Fix idle-hist callchain display using wrong rb_first variant

Lad Prabhakar <[email protected]>
PCI: rcar-host: Remove unused LIST_HEAD(res)

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Use perf_env__get_cpu_topology() in machine__resolve()

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Use scnprintf() in cpu_map__snprint() to prevent overflow

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Fix get_max_num() size_t underflow on empty sysfs file

Jamie Nguyen <[email protected]>

    fs/ntfs3: resize log->one_page_buf when adopting on-disk page size

Shuvam Pandey <[email protected]>
PCI: meson: Propagate devm_add_action_or_reset() failure

Li RongQing <[email protected]>
PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro

Mike Snitzer <[email protected]>
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write

Mike Snitzer <[email protected]>
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors

Clark Wang <[email protected]>
nfs: keep PG_UPTODATE clear after read errors in page groups

Dai Ngo <[email protected]>
NFSv4/pnfs: defer return_range callbacks until after inode unlock

Chuck Lever <[email protected]>
xprtrdma: Decouple req recycling from RPC completion

Chuck Lever <[email protected]>
xprtrdma: Use sendctx DMA state for Send signaling

Chuck Lever <[email protected]>
xprtrdma: Post receive buffers after RPC completion

Chuck Lever <[email protected]>
xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot

Chuck Lever <[email protected]>
xprtrdma: Avoid 250 ms delay on backlog wakeup

Chuck Lever <[email protected]>
xprtrdma: Remove temp allocation of rpcrdma_rep objects

Sagi Grimberg <[email protected]>
pNFS/filelayout: fix cheking if a layout is striped

Phillip Varney <[email protected]>
clk: qcom: a53: Corrected frequency multiplier for 1152MHz

Nuno Sá <[email protected]>
dmaengine: Fix possible use after free

Icenowy Zheng <[email protected]>
dmaengine: qcom: gpi: set DMA_PRIVATE capability

Arnaldo Carvalho de Melo <[email protected]>
perf c2c: Fix use-after-free in he__get_c2c_hists() error path

Arnaldo Carvalho de Melo <[email protected]>
perf mmap: Fix NULL deref in aio cleanup on alloc failure

Arnaldo Carvalho de Melo <[email protected]>
perf sched: Replace BUG_ON and add NULL checks in replay event helpers

Arnaldo Carvalho de Melo <[email protected]>
perf sched: Clean up idle_threads entry on init failure

Arnaldo Carvalho de Melo <[email protected]>
perf c2c: Bounds-check CPU and node IDs before bitmap and array access

Arnaldo Carvalho de Melo <[email protected]>
perf mmap: Guard cpu__get_node() return in aio_bind()

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Add bounds check to cpu__get_node()

Arnaldo Carvalho de Melo <[email protected]>
perf sched: Fix NULL dereference in latency_runtime_event

Arnaldo Carvalho de Melo <[email protected]>
perf sched: Replace BUG_ON on invalid CPU with graceful skip

Arnaldo Carvalho de Melo <[email protected]>
perf tools: Guard test_bit from out-of-bounds sample CPU

Rui Qi <[email protected]>
perf: Fix off-by-one stack buffer overflow in kallsyms__parse()

Shengjiu Wang <[email protected]>
dmaengine: imx-sdma: Refine spba bus searching in probe

Srinivasan Shanmugam <[email protected]>
drm/amd/display: Add missing kdoc for ALLM parameters

Jamie Nguyen <[email protected]>
fs/ntfs3: fix mount failure on 64K page-size kernels

Konstantin Komarov <[email protected]>
fs/ntfs3: add bounds check to run_get_highest_vcn()

Rosen Penev <[email protected]>
HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter

Yuho Choi <[email protected]>
clk: at91: keep securam node alive while mapping it

Aldo Conte <[email protected]>
iio: tcs3472: power down chip on probe failure

Sanjay Chitroda <[email protected]>

    iio: accel: mma8452: handle I2C read error(s) in mma8452_read()

Guilherme Ivo Bozi <[email protected]>
iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling

Joshua Crofts <[email protected]>
iio: magnetometer: ak8975: fix potential kernel stack memory leak

Joshua Crofts <[email protected]>
iio: light: si1133: prevent race condition on timeout

Joshua Crofts <[email protected]>
iio: light: si1133: reset counter to prevent race condition

Arnaldo Carvalho de Melo <[email protected]>
perf header: Sanity check HEADER_EVENT_DESC attr.size before swap

James Kim <[email protected]>
char: tlclk: fix use-after-free in tlclk_cleanup()

Seungjin Bae <[email protected]>
usb: host: max3421: Reject hub port requests for non-existent ports

Seungjin Bae <[email protected]>

    usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()

Guangshuo Li <[email protected]>
staging: most: video: avoid double free on video register failure

Sergey Senozhatsky <[email protected]>
mailbox: mtk-adsp: fix UAF during device teardown

Leo Yan <[email protected]>
perf pmu: Skip test on Arm64 when #slots is zero

Andy Shevchenko <[email protected]>
phy: phy-can-transceiver: Check driver match and driver data against NULL

Sumit Kumar <[email protected]>
bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()

Rong Zhang <[email protected]>
PCI: loongson: Do not ignore downstream devices on external bridges

Ian Rogers <[email protected]>
perf sched: Add missing mmap2 handler in timehist

Rafael J. Wysocki <[email protected]>
platform/x86: xo15-ebook: Fix wakeup source and GPE handling

Rafael J. Wysocki <[email protected]>
x86/platform/olpc: xo15: Drop wakeup source on driver removal

Guixin Liu <[email protected]>
PCI: Check ROM header and data structure addr before accessing

Guixin Liu <[email protected]>
PCI: Introduce named defines for PCI ROM

Carlos Bilbao <[email protected]>
PCI/ASPM: Don't reconfigure ASPM entering low-power state

Leo Yan <[email protected]>
coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore

Yingchao Deng <[email protected]>
coresight: cti: Fix DT filter signals silently ignored

Alexandru Hossu <[email protected]>
staging: nvec: fix use-after-free in nvec_rx_completed()

Yizhou Zhao <[email protected]>

    net/9p: fix race condition on rdma->state in trans_rdma.c

Aleksandr Nogikh <[email protected]>
ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write

Charles Keepax <[email protected]>
mfd: cs42l43: Sanity check firmware size

Guangshuo Li <[email protected]>
ksmbd: fix use-after-free in same_client_has_lease()

Brett Creeley <[email protected]>
ionic: Fix check in ionic_get_link_ext_stats

Eric Dumazet <[email protected]>

    tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)

Eric Dumazet <[email protected]>
tipc: fix UAF in tipc_l2_send_msg()

Gui-Dong Han <[email protected]>
KEYS: Use acquire when reading state in keyring search

Aboorva Devarajan <[email protected]>
powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus

Aboorva Devarajan <[email protected]>
powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down

Aboorva Devarajan <[email protected]>
powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del

Yadan Fan <[email protected]>
MIPS: mm: Fix out-of-bounds write in maar_res_walk()

Sechang Lim <[email protected]>
bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check

Weiming Shi <[email protected]>
bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()

Leon Hwang <[email protected]>
bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket

Leo Yan <[email protected]>
selftests/bpf: Initialize operation name before use

Huiwen He <[email protected]>
smb/client: always return a value for FS_IOC_GETFLAGS

Jian Zhang <[email protected]>
cifs: remove all cifs files before kill super

Takashi Iwai <[email protected]>
ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()

Florian Westphal <[email protected]>
netfilter: nf_conncount: callers must hold rcu read lock

Runyu Xiao <[email protected]>
kcm: use WRITE_ONCE() when changing lower socket callbacks

Ovidiu Panait <[email protected]>
net: bcmgenet: Use weighted round-robin TX DMA arbitration

Ruoyu Wang <[email protected]>
net: wwan: t7xx: check skb_clone in control TX

Dragos Tatulea <[email protected]>
net/mlx5: Check max_macs devlink param value against max capability

Sun Jian <[email protected]>
bpf: Run generic devmap egress prog on private skb

Aditya Garg <[email protected]>
net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check

Aditya Garg <[email protected]>
net: mana: initialize gdma queue id to INVALID_QUEUE_ID

Victor Nogueira <[email protected]>
net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen

Victor Nogueira <[email protected]>
net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen

Chuck Lever <[email protected]>
handshake: Require admin permission for DONE command

Lucas Tsai <[email protected]>
power: supply: core: fix supplied_from allocations

Guangshuo Li <[email protected]>
ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO

Lars Pöschel <[email protected]>
spi: xilinx: use FIFO occupancy register to determine buffer size

Herbert Xu <[email protected]>
crypto: rng - Free default RNG on module exit

Felix Gu <[email protected]>
crypto: cavium/cpt - fix DMA cleanup using wrong loop index

Felix Gu <[email protected]>
crypto: marvell/octeontx - fix DMA cleanup using wrong loop index

Dave Jiang <[email protected]>
cxl/test: Add check after kzalloc() memory in alloc_mock_res()

Michael Bommarito <[email protected]>
tipc: reject inverted service ranges from peer bindings

Michael Bommarito <[email protected]>
tipc: prevent snt_unacked underflow on CONN_ACK

Michael Bommarito <[email protected]>
tipc: require net admin for TIPCv2 netlink mutators

Victor Nogueira <[email protected]>
net/sched: sch_hfsc: Don't make class passive twice

Xin Long <[email protected]>
sctp: validate embedded address parameter length

Xiang Mei <[email protected]>
bridge: cfm: reject invalid CCM interval at configuration time

Kuniyuki Iwashima <[email protected]>
net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().

Jamal Hadi Salim <[email protected]>
net/sched: cls_flow: Dont expose folded kernel pointers

HyeongJun An <[email protected]>
ASoC: tegra: tegra210_ahub: Validate written enum value

HyeongJun An <[email protected]>
ASoC: fsl: fsl_audmix: Validate written enum values

HyeongJun An <[email protected]>
ASoC: codecs: hdac_hdmi: Validate written enum value

Leon Romanovsky <[email protected]>
RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one

Maher Sanalla <[email protected]>
RDMA/mlx5: Fix undefined shift of user RQ WQE size

Patrisious Haddad <[email protected]>
RDMA/mlx5: Remove raw RSS QP restrack tracking

Maxwell Doose <[email protected]>
fs: efs: remove unneeded debug prints

Samuel Moelius <[email protected]>
Bluetooth: vhci: validate devcoredump state before side effects

Samuel Moelius <[email protected]>
Bluetooth: hci: validate codec capability element length

Zijun Hu <[email protected]>
Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device

Heiko Carstens <[email protected]>
s390/process: Fix kernel thread function pointer type

Daniel Borkmann <[email protected]>
bpf: Tighten cgroup storage cookie checks for prog arrays

Sergey Shtylyov <[email protected]>
of: cpu: add check in __of_find_n_match_cpu_property()

Dave Jiang <[email protected]>
cxl/test: Zero out LSA backing memory to avoid leaking to user

Dave Jiang <[email protected]>
cxl/test: Fix integer overflow in mock LSA bounds checks

Yonghong Song <[email protected]>
selftests/bpf: Fix bpf_iter/task_vma test

Aditya Prakash Srivastava <[email protected]>
ext4: fix kernel BUG in ext4_write_inline_data_end

Louis Scalbert <[email protected]>
bonding: 3ad: fix mux port state on oper down

Richard Fitzgerald <[email protected]>
ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails

Richard Fitzgerald <[email protected]>
ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()

longlong yan <[email protected]>
tools/virtio: check mmap return value in vringh_test

Qing Ming <[email protected]>
vhost/net: complete zerocopy ubufs only once

Zhang Tianci <[email protected]>
vduse: Requeue failed read to send_list head

Qihang Tang <[email protected]>
vhost/vdpa: validate virtqueue index in mmap and fault paths

Qihang Tang <[email protected]>
vduse: hold vduse_lock across IDR lookup in open path

Val Packett <[email protected]>
ASoC: codecs: aw88261: fix incorrect masks for boost regs

Ruoyu Wang <[email protected]>
spi: meson-spifc: fix runtime PM leak on remove

Jason Gunthorpe <[email protected]>
IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified

Johannes Thumshirn <[email protected]>
btrfs: zoned: don't account data relocation space-info in statfs free space

Nikita Zhandarovich <[email protected]>
hwmon: (it87) Clamp negative values to zero in set_fan()

David Laight <[email protected]>
fbdev: sm501fb: Fix buffer errors in OF binding code

Filipe Manana <[email protected]>
btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()

Ryder Lee <[email protected]>
wifi: mt76: mt7921: fix potential tx_retries underflow

Ryder Lee <[email protected]>
wifi: mt76: mt7915: fix potential tx_retries underflow

Bjoern A. Zeeb <[email protected]>

    wifi: mt76: fix argument to ieee80211_is_first_frag()

Hongyan Xia <[email protected]>
sched/fair: Fix cpu_util runnable_avg arithmetic

Wolfram Sang <[email protected]>
hwspinlock: qcom: avoid uninitialized struct members

Hui Zhu <[email protected]>
vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()

Luca Leonardo Scorcia <[email protected]>
pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39

Luca Leonardo Scorcia <[email protected]>
pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39

Mike Christie <[email protected]>
scsi: target: Remove tcm_loop target reset handling

David Disseldorp <[email protected]>
scsi: target: Fix hexadecimal CHAP_I handling

Yuho Choi <[email protected]>
watchdog: unregister PM notifier on watchdog unregister

Al Viro <[email protected]>

    configfs: fix lockless traversals of ->s_children

Dmitry Vyukov <[email protected]>
firmware_loader: Fix recursive lock in device_cache_fw_images()

Felix Gu <[email protected]>
spi: ep93xx: fix double-free of zeropage on DMA setup failure

Jason Gunthorpe <[email protected]>
IB/mlx5: Properly support implicit ODP rereg_mr

Jason Gunthorpe <[email protected]>
IB/mlx5: Don't take the rereg_mr fallback without a new translation

Pengjie Zhang <[email protected]>
cpufreq: Documentation: fix conservative governor freq_step description

Yuho Choi <[email protected]>
ACPI: IPMI: Fix message kref handling on dead device

Kyle Zeng <[email protected]>
ALSA: seq: Clear variable event pointer on read

Rui Qi <[email protected]>

    riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe

HyeongJun An <[email protected]>
ALSA: seq: Fix partial userptr event expansion

Tristan Madani <[email protected]>
wifi: wcn36xx: fix OOB read from short trigger BA firmware response

Tristan Madani <[email protected]>
wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication

Tristan Madani <[email protected]>
wifi: wcn36xx: fix heap overflow from oversized firmware HAL response

Leon Hwang <[email protected]>
bpf: Update transport_header when encapsulating UDP tunnel in lwt

Leon Hwang <[email protected]>
bpf: Check tail zero of bpf_prog_info

Alexander Stein <[email protected]>
arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well

Jacob Moroni <[email protected]>

    RDMA/irdma: Initialize iwmr->access during MR registration

Jacob Moroni <[email protected]>
RDMA/irdma: Fix OOB read during CQ MR registration

Jason Gunthorpe <[email protected]>
IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path()

Pablo Neira Ayuso <[email protected]>
netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp

Pablo Neira Ayuso <[email protected]>
netfilter: conntrack: revert ct extension genid infrastructure

Fernando Fernandez Mancera <[email protected]>
netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock

Fernando Fernandez Mancera <[email protected]>
netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures

Joseph Qi <[email protected]>
ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()

Zhang Cen <[email protected]>
ocfs2/dlm: require a ref for locking_state debugfs open

Zhang Cen <[email protected]>
ocfs2: reject FITRIM ranges shorter than a cluster

Dmitry Antipov <[email protected]>
ocfs2: fix buffer head management in ocfs2_read_blocks()

Zhang Cen <[email protected]>
ocfs2: rebase copied fsdlm LVB pointers in locking_state

Sandipan Das <[email protected]>
perf/x86/amd/core: Always use the NMI latency mitigation

Woojin Ji <[email protected]>
bpftool: Use libbpf error code for flow dissector query

Yunxiang Li <[email protected]>
drm/amdgpu: set sub_block_index for mca ras sub-blocks

Al Viro <[email protected]>

    configfs_lookup(): don't leave ->s_dentry dangling on failure

Alexander Potapenko <[email protected]>

    lib/test_meminit: use && for bools

Guanyou.Chen <[email protected]>
sched: restore timer_slack_ns when resetting RT policy on fork

Danila Chernetsov <[email protected]>
ext2: fix ignored return value of generic_write_sync()

Sang-Heon Jeon <[email protected]>
mm/fake-numa: fix under-allocation detection in uniform split

Deepanshu Kartikey <[email protected]>
bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs

Chanwoo Lee <[email protected]>
scsi: ufs: Fix wrong value printed in unexpected UPIU response case

Dan Carpenter <[email protected]>
scsi: pm8001: Fix error code in non_fatal_log_show()

Martin Wilck <[email protected]>
scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"

Alison Schofield <[email protected]>
nvdimm/btt: Handle preemption in BTT lane acquisition

Yuho Choi <[email protected]>
ARM: imx31: Fix IIM mapping leak in revision check

Bart Van Assche <[email protected]>
ata: libata: Fix ata_exec_internal()

J. Neuschäfer <[email protected]>
HID: wiimote: Fix table layout and whitespace errors

Yuho Choi <[email protected]>
ARM: imx3: Fix CCM node reference leak

John Madieu <[email protected]>
ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble

Zhang Yi <[email protected]>
ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback

Chen Cheng <[email protected]>
md/raid10: reset read_slot when reusing r10bio for discard

Danilo Krummrich <[email protected]>
rpmsg: use generic driver_override infrastructure

Renjiang Han <[email protected]>
media: qcom: venus: relax encoder frame/blur step size on v6

Renjiang Han <[email protected]>
media: qcom: venus: relax encoder frame/blur dimension steps on v4

Renjiang Han <[email protected]>
media: qcom: venus: drop extra padding in NV12 raw size calculation

Tristan Madani <[email protected]>
RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path

Tristan Madani <[email protected]>
RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe

zhoumin <[email protected]>
EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info

Jessica Zhang <[email protected]>
drm/msm/dp: Fix the ISR_* enum values

Jessica Zhang <[email protected]>
drm/msm/dp: fix HPD state status bit shift value

Weili Qian <[email protected]>
crypto: hisilicon/qm - disable error report before flr

Tetsuo Handa <[email protected]>

    ocfs2: kill osb->system_file_mutex lock

ZhengYuan Huang <[email protected]>
ocfs2: don't BUG_ON an invalid journal dinode

Dan Carpenter <[email protected]>
rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()

Davidlohr Bueso <[email protected]>
dax/kmem: account for partial discontiguous resource upon removal

Carlos Llamas <[email protected]>
libbpf: Fix UAF in strset__add_str()

Michael Bommarito <[email protected]>
libbpf: Harden parse_vma_segs() path parsing

Timur Tabi <[email protected]>
drm/nouveau/bios: specify correct display fuse register for Ampere and Ada

Mikko Perttunen <[email protected]>
drm/tegra: Fix iommu_map_sgtable() return value check

Mikko Perttunen <[email protected]>
gpu: host1x: Fix iommu_map_sgtable() return value check

Felix Gu <[email protected]>
drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()

Mikko Perttunen <[email protected]>
gpu: host1x: Allow entries in BO caches to be freed

Ion Agorria <[email protected]>
drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove

Svyatoslav Ryhel <[email protected]>
drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered

Jiayuan Chen <[email protected]>
net/sched: cls_bpf: prevent unbounded recursion in offload rollback

Eric Dumazet <[email protected]>
ipv6: guard against possible NULL deref in __in6_dev_stats_get()

Breno Leitao <[email protected]>
workqueue: drop spurious '*' from print_worker_info() fn declaration

Nilay Shroff <[email protected]>
nvme-multipath: fix flex array size in struct nvme_ns_head

Charles Keepax <[email protected]>
pinctrl: cs42l43: Fix polarity on debounce

Zhang Cen <[email protected]>
ALSA: seq: midi: Serialize output teardown with event_input

Miquel Raynal <[email protected]>
mtd: spi-nor: Drop duplicate Kconfig dependency

Rosen Penev <[email protected]>
mips: n64: add __iomem for writel call

Rosen Penev <[email protected]>
mips: ralink: mt7621: add missing __iomem

Maciej W. Rozycki <[email protected]>
MIPS: DEC: Remove do_IRQ() call indirection

Maciej W. Rozycki <[email protected]>
MIPS: Fix big-endian stack argument fetching in o32 wrapper

Jiakai Xu <[email protected]>
PM: sleep: Use complete() in device_pm_sleep_init()

Tao Cui <[email protected]>
RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup

Lianfa Weng <[email protected]>
RDMA/hns: Fix warning in poll cq direct mode

Guangshuo Li <[email protected]>
IB/mlx4: Fix refcount leak in add_port() error path

Zhu Yanjun <[email protected]>
RDMA/rxe: Fix a use-after-free problem in rxe_mmap

Jacob Moroni <[email protected]>
RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs

Samuel Holland <[email protected]>
bus: sunxi-rsb: Always check register address validity

Ronaldo Nunez <[email protected]>
pwm: imx27: Fix variable truncation in .apply()

Lifeng Zheng <[email protected]>
cpufreq: conservative: Simplify frequency limit handling

Pengjie Zhang <[email protected]>
cpufreq: Documentation: fix sampling_down_factor range

Saravana Kannan <[email protected]>
Revert "treewide: Fix probing of devices in DT overlays"

Zhang Yuwei <[email protected]>
driver core: Use mod_delayed_work to prevent lost deferred probe work

Stepan Ionichev <[email protected]>
device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()

Pengpeng Hou <[email protected]>
tracing: Bound synthetic-field strings with seq_buf

Harshal Dev <[email protected]>
arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node

Geert Uytterhoeven <[email protected]>
firmware: arm_scmi: Fix OOB in scmi_power_name_get()

Sven Püschel <[email protected]>
media: rockchip: rga: fix too small buffer size

Eric Dumazet <[email protected]>

    net/sched: sch_drr: annotate data-races around cl->deficit

Chen-Yu Tsai <[email protected]>
regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions

Randy Dunlap <[email protected]>
bitops: use common function parameter names

Greg Kroah-Hartman <[email protected]>
sysfs: clamp show() return value in sysfs_kf_read()

Sudeep Holla <[email protected]>
firmware: arm_scmi: Read sensor config as 32-bit value

Zilin Guan <[email protected]>
media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()

Sara Venkatesh <[email protected]>
RDMA/srpt: fix integer overflow in immediate data length check

Prathamesh Deshpande <[email protected]>
RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference

Alexander Chesnokov <[email protected]>
RDMA/hns: Fix arithmetic overflow in calc_hem_config()

Prathamesh Deshpande <[email protected]>
IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier

Linmao Li <[email protected]>
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD

Eric Dumazet <[email protected]>
net/sched: sch_htb: annotate data-races (I)

Eric Dumazet <[email protected]>

    net/sched: sch_htb: do not change sch->flags in htb_dump()

Qiang Ma <[email protected]>
spi: hisi-kunpeng: Use dev_err_probe() for host registration failure

Sean Christopherson <[email protected]>
crypto: ccp - Treat zero-length cert chain as query for blob lengths

Eric Dumazet <[email protected]>
net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()

Stepan Ionichev <[email protected]>
clk: scpi: Unregister child clock providers on remove

Rafael J. Wysocki <[email protected]>
thermal: hwmon: Fix critical temperature attribute removal

Pengpeng Hou <[email protected]>
evm: terminate and bound the evm_xattrs read buffer

Lin He <[email protected]>
drm/hisilicon/hibmc: use clock to look up the PLL value

Lin He <[email protected]>
drm/hisilicon/hibmc: move display contrl config to hibmc_probe()

Kuldeep Singh <[email protected]>
arm64: dts: qcom: sm8450: Fix ICE reg size

Cristian Marussi <[email protected]>
clk: scmi: Fix clock rate rounding

Chen-Yu Tsai <[email protected]>
arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host

Sean Christopherson <[email protected]>
iommu/amd: Fix a stale comment about which legacy mode is user visible

Shuangpeng Bai <[email protected]>
nilfs2: fix backing_dev_info reference leak

Alexander Aring <[email protected]>
dlm: fix add msg handle in send_queue ordered

Weiming Shi <[email protected]>
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents

Thorsten Blum <[email protected]>
crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve

Lothar Rubusch <[email protected]>
crypto: atmel-sha204a - fix blocking and non-blocking rng logic

Kuniyuki Iwashima <[email protected]>
vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().

Peng Fan <[email protected]>
arm64: dts: imx8x-colibri: Correct SODIMM PAD settings

Weixin Guo <[email protected]>
arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc

Felix Gu <[email protected]>
pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path

Nas Chung <[email protected]>
media: v4l2-common: Add YUV24 format info

Samuel Holland <[email protected]>
media: cedrus: Fix failure to clean up hardware on probe failure

Felix Gu <[email protected]>
watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure

Balakrishnan Sambath <[email protected]>
watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5

Yingjie Gao <[email protected]>
watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH

Jihed Chaibi <[email protected]>
ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint

Tristan Madani <[email protected]>
wifi: ath9k: fix OOB access from firmware tx status queue ID

Xingjing Deng <[email protected]>
kconfig: fix potential NULL pointer dereference in conf_askvalue

Tristan Madani <[email protected]>
wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer

Shin-Yi Lin <[email protected]>
wifi: rtw89: Correct data type for scan index to avoid infinite loop

Danilo Krummrich <[email protected]>

    driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()

Srinivasan Shanmugam <[email protected]>
drm/amdkfd: Validate CRIU-restored IDs before idr_alloc

Krzysztof Kozlowski <[email protected]>
dt-bindings: pinctrl: nvidia,tegra234: Add missing required block

Jon Hunter <[email protected]>
arm64: tegra: Fix Tegra234 MGBE PTP clock

Louis Kotze <[email protected]>
wifi: cfg80211: fix grammar in MLO group key error message

Krzysztof Kozlowski <[email protected]>
arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning

Diederik de Haas <[email protected]>
arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S

Baolin Liu <[email protected]>
Documentation: proc: fix section numbering in table of contents

Aaron Tomlin <[email protected]>
libbpf: Report error when a negative kprobe offset is specified

Yuho Choi <[email protected]>
drm/radeon: fix memory leak in radeon_ring_restore() on lock failure

Werner Kasselman <[email protected]>
drm/radeon: fix integer overflow in radeon_align_pitch()

Werner Kasselman <[email protected]>
drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()

Tomi Valkeinen <[email protected]>
drm/tidss: Drop extra drm_mode_config_reset() call

Thomas Zimmermann <[email protected]>
drm/rockchip: Test for imported buffers with drm_gem_is_imported()

Chen Ni <[email protected]>
clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive()

Ian Bridges <[email protected]>
fbcon: fix NULL pointer dereference for a console without vc_data

David Howells <[email protected]>
afs: Fix further netns teardown to cancel the preallocation charger

Matvey Kovalev <[email protected]>
afs: fix NULL pointer dereference in afs_get_tree()

David Howells <[email protected]>
afs: Fix netns teardown to cancel the preallocation charger

David Howells <[email protected]>
rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)

Jeffrey Altman <[email protected]>
rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc

Matthias Feser <[email protected]>
serial: 8250_omap: clear rx_running on zero-length DMA completes

Stephan Gerhold <[email protected]>
serial: msm: Disable DMA for kernel console UART

Guoniu Zhou <[email protected]>
dt-bindings: power: imx93: Add MIPI PHY power domain

Chen-Yu Tsai <[email protected]>
dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties

Ricardo Ribalda <[email protected]>
media: uvcvideo: Fix sequence number when no EOF

Ricardo Ribalda <[email protected]>
media: uvcvideo: Fix buffer sequence in frame gaps

Ricardo Ribalda <[email protected]>
media: uvcvideo: Avoid partial metadata buffers

Pawan Gupta <[email protected]>
bpf: Prefer dirty packs for eBPF allocations

Pawan Gupta <[email protected]>
bpf: Prefer packs that won't trigger an IBPB flush on allocation

Pawan Gupta <[email protected]>
bpf: Skip redundant IBPB in pack allocator

Pawan Gupta <[email protected]>
bpf: Restrict JIT predictor flush to cBPF

Pawan Gupta <[email protected]>
x86/bugs: Enable IBPB flush on BPF JIT allocation

Pawan Gupta <[email protected]>
bpf: Support for hardening against JIT spraying

Eric Biggers <[email protected]>
crypto: hisi-trng - Remove crypto_rng interface

Eric Biggers <[email protected]>
crypto: crypto4xx - Remove insecure and unused rng_alg

Herbert Xu <[email protected]>
crypto: crypto4xx - Remove ahash-related code

Stephen Dolan <[email protected]>
x86/mm: Fix check/use ordering in switch_mm_irqs_off()

Eric Biggers <[email protected]>
crypto: sun4i-ss - Remove insecure and unused rng_alg

Sagi Grimberg <[email protected]>
nvmet-tcp: Fix potential UAF when ddgst mismatch

Shivam Kumar <[email protected]>
nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path

Hyunwoo Kim <[email protected]>
KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU

Hyunwoo Kim <[email protected]>
KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU

Muhammet Kaan KILINÇ <[email protected]>

    crypto: algif_skcipher - force synchronous processing on trees without ctx->state

Adam Li <[email protected]>
sched/fair: Only update stats for allowed CPUs when looking for dst group

Chao Shi <[email protected]>
block: skip sync_blockdev() on surprise removal in bdev_mark_dead()

ChenXiaoSong <[email protected]>
smb/server: do not require delete access for non-replacing links

Darrick J. Wong <[email protected]>
xfs: resample the data fork mapping after cycling ILOCK

Weiming Shi <[email protected]>
xfs: fail recovery on a committed log item with no regions

Shoichiro Miyamoto <[email protected]>
smb: client: reject overlapping data areas in SMB2 responses

Joanne Koong <[email protected]>
fuse: re-lock request before returning from fuse_ref_folio()

Alberto Ruiz <[email protected]>
fuse: fix device node leak in cuse_process_init_reply()

Michael Bommarito <[email protected]>
RDMA/siw: bound Read Response placement to the RREAD length

Zhenhao Wan <[email protected]>
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg

Dmitry Torokhov <[email protected]>
Input: maplecontrol - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: maplemouse - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: maple_keyb - set driver data before registering input device

Dmitry Torokhov <[email protected]>
Input: mms114 - fix multi-touch slot corruption

Florian Fuchs <[email protected]>
Input: maplemouse - fix NULL pointer dereference in open()

Bryam Vargas <[email protected]>
Input: mms114 - reject an oversized device packet size

Bryam Vargas <[email protected]>
Input: touchwin - reset the packet index on every complete packet

Dmitry Torokhov <[email protected]>
Input: mms114 - fix touch indexing for MMS134S and MMS136

Bryam Vargas <[email protected]>
Input: iforce - bound the device-reported force-feedback effect index

Bryam Vargas <[email protected]>
Input: goodix - clamp the device-reported contact count

Ranjan Kumar <[email protected]>
Input: elan_i2c - prevent division by zero and arithmetic underflow

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count

Haoxiang Li <[email protected]>
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure

Guillermo Rodríguez <[email protected]>
i2c: stm32f7: truncate clock period instead of rounding it

Andy Shevchenko <[email protected]>
i2c: mpc: Fix timeout calculations

Johan Hovold <[email protected]>
i2c: core: fix adapter deregistration race

Mikhail Gavrilov <[email protected]>
udmabuf: fix DMA direction mismatch in release_udmabuf()

Sean Christopherson <[email protected]>
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode

Sean Christopherson <[email protected]>
KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs

Koichiro Den <[email protected]>
NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()

Bryam Vargas <[email protected]>
exfat: bound uniname advance in exfat_find_dir_entry()

Andrii Kuchmenko <[email protected]>
module: decompress: check return value of module_extend_max_pages()

Benjamin Coddington <[email protected]>
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

Huihui Huang <[email protected]>
tracing: Prevent out-of-bounds read in glob matching

Janne Grunau <[email protected]>
watchdog: apple: Add "apple,t8103-wdt" compatible

Vasily Khoruzhick <[email protected]>
EDAC/i10nm: Don't fail probing if ADXL is missing

Carlos Song <[email protected]>
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path

Carlos Song <[email protected]>
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()

Mark Rutland <[email protected]>
arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()

Paul Louvel <[email protected]>
crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation

Paul Louvel <[email protected]>
crypto: talitos/hash - remove useless wrapper

Paul Louvel <[email protected]>
crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request

Paul Louvel <[email protected]>
crypto: talitos/hash - drop workqueue mechanism for SEC1

Paul Louvel <[email protected]>
crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue

Paul Louvel <[email protected]>
crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor

Paul Louvel <[email protected]>
crypto: talitos - move code in current_desc_hdr() into a standalone function

Paul Louvel <[email protected]>
crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function

Paul Louvel <[email protected]>
crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function

Paul Louvel <[email protected]>
crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1

Paul Louvel <[email protected]>
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header

Giovanni Cabiddu <[email protected]>
crypto: qat - validate RSA CRT component lengths

Eric Biggers <[email protected]>
crypto: drbg - Fix the fips_enabled priority boost

Eric Biggers <[email protected]>
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels

Eric Biggers <[email protected]>
crypto: drbg - Fix returning success on failure in CTR_DRBG

Ruijie Li <[email protected]>
crypto: pcrypt - restore callback for non-parallel fallback

Anastasia Tishchenko <[email protected]>
crypto: ecc - Fix carry overflow in vli multiplication

Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps again

Thorsten Blum <[email protected]>
crypto: caam - use print_hex_dump_devel to guard key hex dumps

Eric Biggers <[email protected]>
crypto: af_alg - Remove zero-copy support from skcipher and aead

Bryam Vargas <[email protected]>
isofs: bound Rock Ridge symlink components to the SL record

Bryam Vargas <[email protected]>
partitions: aix: bound the pp_count scan to the ppe array

Qu Wenruo <[email protected]>
btrfs: do not trim a device which is not writeable

Achkinazi, Igor <[email protected]>
nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks

Mikulas Patocka <[email protected]>
dm-ioctl: report an error if a device has no table

Wentao Liang <[email protected]>
hwrng: jh7110 - fix refcount leak in starfive_trng_read()

Bryam Vargas <[email protected]>
udf: validate sparing table length as an entry count, not a byte count

Bryam Vargas <[email protected]>
udf: validate VAT header length against the VAT inode size

Michael Bommarito <[email protected]>
udf: validate free block extents against the partition length

Maciej W. Rozycki <[email protected]>
PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining

Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check

Paul Menzel <[email protected]>
usb: typec: ucsi: cancel pending work on system suspend

Fan Wu <[email protected]>
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove

Madhu M <[email protected]>
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode

Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Invert DisplayPort role assignment

Badhri Jagan Sridharan <[email protected]>
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()

Shuangpeng Bai <[email protected]>
usb: typec: class: drop PD lookup reference

Myeonghun Pak <[email protected]>
usb: typec: anx7411: use devm_pm_runtime_enable()

Sam Day <[email protected]>
usbip: vudc: fix NULL deref in vep_dequeue()

Yichong Chen <[email protected]>
usbip: tools: support SuperSpeedPlus devices

Xu Rao <[email protected]>
USB: usb-storage: ene_ub6250: restore media-ready check

Johan Hovold <[email protected]>
USB: ulpi: fix memory leak on registration failure

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix write buffer corruption

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix hard lockup on disconnect

Johan Hovold <[email protected]>
USB: serial: digi_acceleport: fix broken rx after throttle

Fabio Porcedda <[email protected]>
USB: serial: option: add Telit Cinterion FE990D50 compositions

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix information leak

Haoxiang Li <[email protected]>
usb: mtu3: unmap request DMA on queue failure

Myeonghun Pak <[email protected]>
USB: misc: uss720: unregister parport on probe failure

Xu Rao <[email protected]>
USB: storage: include US_FL_NO_SAME in quirks mask

Myeonghun Pak <[email protected]>
usb: sl811-hcd: disable controller wakeup on remove

Johan Hovold <[email protected]>
USB: legousbtower: fix use-after-free on disconnect race

Erich E. Hoover <[email protected]>
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD

Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect

Johan Hovold <[email protected]>
USB: ldusb: fix use-after-free on disconnect race

Johan Hovold <[email protected]>
USB: idmouse: fix use-after-free on disconnect race

Xu Rao <[email protected]>
usb: gadget: f_printer: take kref only for successful open

Jimmy Hu <[email protected]>
usb: gadget: udc: Fix use-after-free in gadget_match_driver

Maoyi Xie <[email protected]>
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler

Dawei Feng <[email protected]>
usb: free iso schedules on failed submit

WenTao Liang <[email protected]>
usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()

Rodrigo Lugathe da Conceição Alves <[email protected]>
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub

Haoxiang Li <[email protected]>
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()

Jared Baldridge <[email protected]>
usb: cdc_acm: Add quirk for Uniden BC125AT scanner

Maoyi Xie <[email protected]>
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()

Dawei Feng <[email protected]>
bpf: Restore sysctl new-value from 1 to 0

Zhao Zhang <[email protected]>
bpf: Reject fragmented frames in devmap

Alexey Nepomnyashih <[email protected]>
xfs: fix unreachable BIGTIME check in dquot flush validation

Yousef Alhouseen <[email protected]>
xfs: use null daddr for unset first bad log block

Louis-Alexis Eyraud <[email protected]>
media: mtk-jpeg: cancel workqueue on release for supported platforms only

Deepanshu Kartikey <[email protected]>
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers

Tristan Madani <[email protected]>
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read

Srinivas Pandruvada <[email protected]>
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads

Maoyi Xie <[email protected]>
HID: lg-g15: cancel pending work on remove to fix a use-after-free

Manish Khadka <[email protected]>
HID: letsketch: fix UAF on inrange_timer at driver unbind

Myeonghun Pak <[email protected]>
HID: wacom: stop hardware after post-start probe failures

Yichong Chen <[email protected]>
tools/mm/slabinfo: fix total_objects attribute name

Xuewen Wang <[email protected]>
tools/mm/slabinfo: Fix trace disable logic inversion

Lukas Wunner <[email protected]>
X.509: Fix validation of ASN.1 certificate header

Kartik Rajput <[email protected]>
clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances

WenTao Liang <[email protected]>
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

Yuho Choi <[email protected]>
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation

Tianxiang Chen <[email protected]>
cpufreq: Fix hotplug-suspend race during reboot

Steven Rostedt <[email protected]>
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT

Fushuai Wang <[email protected]>

    cpufreq: intel_pstate: Sync policy->cur during CPU offline

Guangshuo Li <[email protected]>
firmware_loader: fix device reference leak in firmware_upload_register()

Abdun Nihaal <[email protected]>
OPP: of: Fix potential memory leak in opp_parse_supplies()

Norbert Manthey <[email protected]>
smb: client: mask server-provided mode to 07777 in modefromsid

Zihan Xi <[email protected]>
smb: client: harden POSIX SID length parsing

Zihan Xi <[email protected]>
smb: client: use unaligned reads in parse_posix_ctxt()

Haoxiang Li <[email protected]>
smb: client: Fix next buffer leak in receive_encrypted_standard()

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_close() replay

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_open() replay

Zhao Zhang <[email protected]>
smb: client: fix double-free in SMB2_flush() replay

Henrique Carvalho <[email protected]>
smb: client: fix change notify replay double-free

Henrique Carvalho <[email protected]>
smb: client: fix double-free in SMB2_ioctl() replay

Henrique Carvalho <[email protected]>
smb: client: fix query_info() replay double-free

Henrique Carvalho <[email protected]>
smb: client: fix query directory replay double-free

Namjae Jeon <[email protected]>
ksmbd: use opener credentials for delete-on-close

Gil Portnoy <[email protected]>
ksmbd: add per-handle permission check to FILE_LINK_INFORMATION

Gil Portnoy <[email protected]>
ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION

Namjae Jeon <[email protected]>
ksmbd: run set info with opener credentials

Gil Portnoy <[email protected]>
ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY

Namjae Jeon <[email protected]>
ksmbd: require source read access for duplicate extents

Davide Ornaghi <[email protected]>
ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation

Namjae Jeon <[email protected]>
ksmbd: serialize QUERY_DIRECTORY requests per file

Gil Portnoy <[email protected]>
ksmbd: add a permission check for FSCTL_SET_ZERO_DATA

Gil Portnoy <[email protected]>
ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE

Dan Carpenter <[email protected]>
smb/client: Fix error code in smb2_aead_req_alloc()

Junrui Luo <[email protected]>
coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()

Deepanshu Kartikey <[email protected]>
fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()

Konstantin Komarov <[email protected]>
fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()

Konstantin Komarov <[email protected]>
fs/ntfs3: handle attr_set_size() errors when truncating files

Konstantin Komarov <[email protected]>
fs/ntfs3: fsync files by syncing parent inodes

Muhammad Bilal <[email protected]>
Bluetooth: L2CAP: validate option length before reading conf opt value

Yousef Alhouseen <[email protected]>
Bluetooth: fix UAF in bt_accept_dequeue()

Maoyi Xie <[email protected]>
Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()

Yousef Alhouseen <[email protected]>
Bluetooth: bnep: pin L2CAP connection during netdev registration

Sergey Senozhatsky <[email protected]>
Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()

Xiang Mei <[email protected]>
netfilter: ebtables: terminate table name before find_table_lock()

Florian Westphal <[email protected]>
netfilter: ebtables: module names must be null-terminated

Pratham Gupta <[email protected]>
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump

Qi Zheng <[email protected]>
mm: shrinker: fix NULL pointer dereference in debugfs

Andrei Kuchynski <[email protected]>
mfd: cros_ec: Delay dev_set_drvdata() until probe success

Wyatt Feng <[email protected]>
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Yuyang Huang <[email protected]>
ipv4: igmp: remove multicast group from hash table on device destruction

Runyu Xiao <[email protected]>
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item

Runyu Xiao <[email protected]>
gpio: eic-sprd: use raw_spinlock_t in the irq startup path

Koichiro Den <[email protected]>
NTB: epf: Avoid calling pci_irq_vector() from hardirq context

Yunpeng Tian <[email protected]>
fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns

Thomas Gleixner <[email protected]>
debugobjects: Plug race against a concurrent OOM disable

Samuel Page <[email protected]>
Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete

Chi Wang <[email protected]>
audit: Fix data races of skb_queue_len() readers on audit_queue

Zijing Yin <[email protected]>
net: af_key: initialize alg_key_len for IPComp states

Gil Portnoy <[email protected]>
ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL

Dawei Feng <[email protected]>
crypto: amlogic - avoid double cleanup in meson_crypto_probe()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB write in HT_caps_handler()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()

Alexandru Hossu <[email protected]>
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()

Arnd Bergmann <[email protected]>
staging: media: atomisp: reduce load_primary_binaries() stack usage

Ricardo Ribalda <[email protected]>
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe

Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in tsi148 bridge

Hao-Qun Huang <[email protected]>
staging: vme_user: fix location monitor leak in fake bridge

Shoichiro Miyamoto <[email protected]>
smb: client: restrict implied bcc[0] exemption to responses without data area

Michael Tautschnig <[email protected]>
staging: vme_user: bound slave read/write to the kern_buf size

Samuel Page <[email protected]>
tipc: fix out-of-bounds read in broadcast Gap ACK blocks

Yizhou Zhao <[email protected]>
6lowpan: fix NHC entry use-after-free on error path

Runyu Xiao <[email protected]>
usb: dwc3: run gadget disconnect from sleepable suspend context

Alan Stern <[email protected]>
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()

Michael Bommarito <[email protected]>
hwrng: virtio: clamp device-reported used.len at copy_data()

Johan Hovold <[email protected]>
virtio-mmio: fix device release warning on module unload

Xiang Mei <[email protected]>
netfilter: ipset: fix race between dump and ip_set_list resize

SeongJae Park <[email protected]>
mm/damon/ops-common: handle extreme intervals in damon_hot_score()

Ratheesh Kannoth <[email protected]>
PCI: host-common: Request bus reassignment when not probe-only

Mahesh Vaidya <[email protected]>
PCI: altera: Do not dispose parent IRQ mapping

Myeonghun Pak <[email protected]>
usb: typec: tcpci_rt1711h: unregister TCPCI port with devres

胡连勤 <[email protected]>
usb: xhci: Fix sleep in atomic context in xhci_free_streams()

Carlos Llamas <[email protected]>
binder: fix UAF in binder_free_transaction()

Carlos Llamas <[email protected]>
binder: fix UAF in binder_thread_release()

Johan Hovold <[email protected]>
Bluetooth: btusb: fix wakeup source leak on probe failure

Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on marvell probe failure

Johan Hovold <[email protected]>
Bluetooth: btusb: fix use-after-free on registration failure

Zenm Chen <[email protected]>
Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB

Junrui Luo <[email protected]>
vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc

Alex Williamson <[email protected]>
vfio/pci: Fix racy bitfields and tighten struct layout

Alex Williamson <[email protected]>
vfio/pci: Release the VGA arbiter client on register_device() failure

Alex Williamson <[email protected]>
vfio/pci: Latch disable_idle_d3 per device

Raghavendra Rao Ananta <[email protected]>
vfio/pci: Use a private flag to prevent power state change with VFs

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Roll back quirk control caches on write errors

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()

Darvell Long <[email protected]>
ALSA: usb-audio: avoid kobject path lookup in DualSense match

HyeongJun An <[email protected]>
ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()

Zhao Dongdong <[email protected]>
ALSA: ice1712: check snd_ctl_new1() return value

Zhao Dongdong <[email protected]>
ALSA: gus: check snd_ctl_new1() return value

Maoyi Xie <[email protected]>
ALSA: firewire: isight: bound the sample count to the packet payload

Zhao Dongdong <[email protected]>
ALSA: es1938: check snd_ctl_new1() return value

Zhao Dongdong <[email protected]>
ALSA: cmipci: check snd_ctl_new1() return value

Maoyi Xie <[email protected]>
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser

Zhao Dongdong <[email protected]>
ALSA: ymfpci: check snd_ctl_new1() return value

Cássio Gabriel <[email protected]>
ALSA: virtio: Add missing 384 kHz PCM rate mapping

Liviu Stan <[email protected]>
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start

Andy Shevchenko <[email protected]>
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call

Javier Carrasco <[email protected]>
iio: light: veml6030: fix channel type when pushing events

Stepan Ionichev <[email protected]>
iio: light: tsl2591: return actual error from probe IRQ failure

Joshua Crofts <[email protected]>
iio: light: opt3001: fix missing state reset on timeout

Biren Pandya <[email protected]>
iio: light: gp2ap002: fix runtime PM leak on read error

Vidhu Sarwal <[email protected]>
iio: light: al3010: fix incorrect scale for the highest gain range

Andreas Kempe <[email protected]>
iio: imu: st_lsm6dsx: deselect shub page before reading whoami

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix timestamp clock period by using lower value

Runyu Xiao <[email protected]>
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ

Stepan Ionichev <[email protected]>
iio: gyro: bmg160: wait full startup time after mode change at probe

Stepan Ionichev <[email protected]>
iio: gyro: bmg160: bail out when bandwidth/filter is not in table

Lars-Peter Clausen <[email protected]>
iio: event: Fix event FIFO reset race

Maxwell Doose <[email protected]>
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug

Pengpeng Hou <[email protected]>
iio: adc: ti-ads124s08: Return reset GPIO lookup errors

Maxwell Doose <[email protected]>
iio: adc: spear: Initialize completion before requesting IRQ

Maxwell Doose <[email protected]>
iio: adc: lpc32xx: Initialize completion before requesting IRQ

Biren Pandya <[email protected]>
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error

Bryam Vargas <[email protected]>
iio: accel: bmc150: clamp the device-reported FIFO frame count

Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check for header

Griffin Kroah-Hartman <[email protected]>
usb: gadget: function: rndis: add length check to response query

Jonas Jelonek <[email protected]>
MIPS: smp: report dying CPU to RCU in stop_this_cpu()

Sebastian Andrzej Siewior <[email protected]>
net: Drop the lock in skb_may_tx_timestamp()

Huacai Chen <[email protected]>
LoongArch: Add PIO for early access before ACPI PCI root register

Philo Lu <[email protected]>
virtio_net: Support dynamic rss indirection table size

Fuad Tabba <[email protected]>
arm64: sysreg: Correct sign definitions for EIESB and DoubleLock

Marc Zyngier <[email protected]>
arm64: Revamp HCR_EL2.E2H RES1 detection

Ahmed Genidi <[email protected]>
KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu()

Mark Rutland <[email protected]>
KVM: arm64: Initialize HCR_EL2.E2H early

Marc Zyngier <[email protected]>
arm64: Fix early handling of FEAT_E2H0 not being implemented

Marc Zyngier <[email protected]>
arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negative

Marc Zyngier <[email protected]>
arm64: sysreg: Add layout for ID_AA64MMFR4_EL1

Paul Louvel <[email protected]>
crypto: talitos - rename first/last to first_desc/last_desc

Paul Louvel <[email protected]>
crypto: talitos - fix SEC1 32k ahash request limitation

Eric Biggers <[email protected]>
crypto: talitos - stop using crypto_ahash::init

Goetz Goerisch <[email protected]>
Revert "crypto: talitos - fix SEC1 32k ahash request limitation"

Goetz Goerisch <[email protected]>
Revert "crypto: talitos - rename first/last to first_desc/last_desc"

Taeyang Lee <[email protected]>
perf/core: Detach event groups during remove_on_exec

Alice Ryhl <[email protected]>
rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER

Rafael J. Wysocki <[email protected]>
ACPI: NFIT: core: Fix possible NULL pointer dereference

Jeremy Linton <[email protected]>
ACPI: CPPC: Suppress UBSAN warning caused by field misuse

Florian Fainelli <[email protected]>
perf trace beauty fcntl: Fix build with older kernel headers

Claudia Draghicescu <[email protected]>
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID

Darrick J. Wong <[email protected]>

    xfs: move ->iop_recover to xfs_defer_op_type

Darrick J. Wong <[email protected]>
xfs: use xfs_defer_finish_one to finish recovered work items

Darrick J. Wong <[email protected]>
xfs: dump the recovered xattri log item if corruption happens

Darrick J. Wong <[email protected]>
xfs: recreate work items when recovering intent items

Jiayuan Chen <[email protected]>
mm/vmscan: flush deferred TLB before freeing large folios

Jiayuan Chen <[email protected]>
team: fix header_ops type confusion with non-Ethernet ports

Eric Dumazet <[email protected]>
bonding: prevent potential infinite loop in bond_header_parse()

Jiayuan Chen <[email protected]>
bonding: fix type confusion in bond_setup_by_slave()

Hangbin Liu <[email protected]>
bonding: fix xfrm offload feature setup on active-backup mode

Hangbin Liu <[email protected]>
bonding: use common function to compute the features

Hangbin Liu <[email protected]>
net: add a common function to compute features for upper devices

Cosmin Ratiu <[email protected]>
bonding: Correctly support GSO ESP offload

Jianbo Liu <[email protected]>
bonding: add ESP offload features when slaves support

Daniel Borkmann <[email protected]>
bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features

Daniel Borkmann <[email protected]>
net, team, bonding: Add netdev_base_features helper

Hangbin Liu <[email protected]>
net: team: rename team to team_core for linking

NeilBrown <[email protected]>
nfsd: change nfs4_client_to_reclaim() to allocate data

NeilBrown <[email protected]>
nfsd: move name lookup out of nfsd4_list_rec_dir()

John Johansen <[email protected]>
apparmor: advertise the tcp fast open fix is applied

Trond Myklebust <[email protected]>
nfsd: Don't reset the write verifier on a commit EAGAIN

Michael Bommarito <[email protected]>
NFSv4/flexfiles: reject zero filehandle version count

Mingyu Wang <[email protected]>
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()

Johan Hovold <[email protected]>
i2c: core: fix adapter registration race

Johan Hovold <[email protected]>
i2c: core: fix adapter debugfs creation

Johan Hovold <[email protected]>
i2c: core: fix NULL-deref on adapter registration failure

Johan Hovold <[email protected]>
i2c: core: fix hang on adapter registration failure

Johan Hovold <[email protected]>
i2c: core: fix irq domain leak on adapter registration failure

Denis Arefev <[email protected]>
block: Avoid mounting the bdev pseudo-filesystem in userspace

Sean Christopherson <[email protected]>
KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()

Keshav Verma <[email protected]>
f2fs: fix listxattr handling of corrupted xattr entries

Chao Yu <[email protected]>
f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()

Ruipeng Qi <[email protected]>
f2fs: fix potential deadlock in f2fs_balance_fs()

Bryam Vargas <[email protected]>
f2fs: bound i_inline_xattr_size for non-inline-xattr inodes

Chao Yu <[email protected]>
f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode

Wenjie Qi <[email protected]>
f2fs: validate orphan inode entry count

Bartosz Golaszewski <[email protected]>
device property: initialize the remaining fields of fwnode_handle in fwnode_init()

Maoyi Xie <[email protected]>
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink

Tiezhu Yang <[email protected]>
drm/amd: Fix set but not used warnings

Bjorn Andersson <[email protected]>
slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd

Uwe Kleine-König <[email protected]>
slimbus: Convert to platform remove callback returning void

Bjorn Andersson <[email protected]>
slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership

Bjorn Andersson <[email protected]>
slimbus: qcom-ngd-ctrl: Fix probe error path ordering

Chris Lu <[email protected]>
Bluetooth: btmtk: Fix btmtk.c undefined reference build error

Wentao Guan <[email protected]>
perf: Fix dangling cgroup pointer in cpuctx backport

Kiryl Shutsemau <[email protected]>
userfaultfd: gate must_wait writability check on pte_present()

Jiande Lu <[email protected]>
Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown

Chris Lu <[email protected]>
Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices.

Chris Lu <[email protected]>
Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c

Chris Lu <[email protected]>
Bluetooth: btusb: mediatek: return error for failed reg access

Chris Lu <[email protected]>
Bluetooth: btusb: mediatek: remove the unnecessary goto tag

Hao Qin <[email protected]>
Bluetooth: btusb: mediatek: add MT7922 subsystem reset

Hao Qin <[email protected]>
Bluetooth: btusb: mediatek: reset the controller before downloading the fw

Sean Wang <[email protected]>
Bluetooth: btmtk: apply the common btmtk_fw_get_filename

Huacai Chen <[email protected]>
LoongArch: Report dying CPU to RCU in stop_this_cpu()

Baokun Li <[email protected]>
ext4: get rid of ppath in get_ext_path()

Jeff Layton <[email protected]>
nfsd: reset write verifier on deferred writeback errors

Chris Mason <[email protected]>
nfsd: release layout stid on setlease failure

Daniel Borkmann <[email protected]>
bpf, arm64: Reject out-of-range B.cond targets

-------------

Diffstat:

 Documentation/admin-guide/pm/cpufreq.rst           |   6 +-
 Documentation/crypto/userspace-if.rst              |  31 +-
 .../media/allwinner,sun4i-a10-video-engine.yaml    |  10 +
 .../devicetree/bindings/net/renesas,ether.yaml     |   3 +-
 .../pinctrl/nvidia,tegra234-pinmux-aon.yaml        |   4 +
 .../bindings/pinctrl/nvidia,tegra234-pinmux.yaml   |   4 +
 .../bindings/regulator/mt6359-regulator.yaml       |  43 --
 Documentation/driver-api/nvdimm/btt.rst            |   5 +-
 Documentation/driver-api/pci/pci.rst               |   3 +
 Documentation/filesystems/proc.rst                 |  14 +-
 Documentation/netlink/specs/handshake.yaml         |   1 +
 Makefile                                           |   7 +-
 arch/alpha/kernel/pci-sysfs.c                      |  13 +-
 arch/arm/boot/dts/ti/omap/am335x-sl50.dts          |   4 +-
 arch/arm/configs/sunxi_defconfig                   |   1 -
 arch/arm/mach-imx/cpu-imx31.c                      |   9 +-
 arch/arm/mach-imx/mm-imx3.c                        |   2 +
 .../dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts    |   3 +
 arch/arm64/boot/dts/freescale/imx8x-colibri.dtsi   |   4 +-
 arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi   |   2 +-
 arch/arm64/boot/dts/nvidia/tegra234.dtsi           |   8 +-
 arch/arm64/boot/dts/qcom/sdm630.dtsi               |   9 +-
 .../qcom/sdm845-db845c-navigation-mezzanine.dtso   |   5 +
 arch/arm64/boot/dts/qcom/sm8450.dtsi               |   8 +-
 arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts     |   2 +-
 arch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts |   6 +-
 arch/arm64/include/asm/el2_setup.h                 |  56 +-
 arch/arm64/include/asm/kvm_hyp.h                   |   1 +
 arch/arm64/include/asm/pgtable.h                   |  14 +-
 arch/arm64/kernel/efi.c                            |   2 +-
 arch/arm64/kernel/entry-fpsimd.S                   |  16 +-
 arch/arm64/kernel/head.S                           |  20 +-
 arch/arm64/kernel/hw_breakpoint.c                  |   9 +
 arch/arm64/kernel/mte.c                            |   2 +-
 arch/arm64/kvm/arm.c                               |   2 +
 arch/arm64/kvm/guest.c                             |   2 +-
 arch/arm64/kvm/hyp/nvhe/hyp-init.S                 |   3 +-
 arch/arm64/kvm/hyp/nvhe/hyp-main.c                 |  12 +
 arch/arm64/kvm/hyp/nvhe/psci-relay.c               |   3 +
 arch/arm64/kvm/vgic/vgic-its.c                     |   2 +
 arch/arm64/kvm/vgic/vgic.c                         |  11 +-
 arch/arm64/lib/insn.c                              |   2 +
 arch/arm64/mm/fault.c                              |   6 +-
 arch/arm64/mm/hugetlbpage.c                        |  18 +-
 arch/arm64/mm/kasan_init.c                         |   2 +-
 arch/arm64/mm/mmu.c                                |  23 +-
 arch/arm64/mm/pageattr.c                           |   4 +-
 arch/arm64/mm/trans_pgd.c                          |   2 +-
 arch/arm64/tools/sysreg                            |  39 +-
 arch/loongarch/include/asm/acpi.h                  |   2 +
 arch/loongarch/include/asm/pgtable.h               |   4 +
 arch/loongarch/kernel/acpi.c                       |  28 +
 arch/loongarch/kernel/setup.c                      |   2 +
 arch/loongarch/kernel/smp.c                        |   1 +
 arch/loongarch/pci/acpi.c                          |   2 +
 arch/mips/dec/int-handler.S                        |   2 +-
 arch/mips/dec/platform.c                           |   6 +-
 arch/mips/dec/prom/init.c                          |   6 +-
 arch/mips/dec/setup.c                              |   6 -
 arch/mips/fw/lib/call_o32.S                        |   2 +-
 arch/mips/include/asm/dec/prom.h                   |  15 +-
 arch/mips/kernel/mips-mt-fpaff.c                   |  28 +-
 arch/mips/kernel/smp.c                             |   2 +
 arch/mips/mm/init.c                                |  12 +-
 arch/mips/n64/init.c                               |   2 +-
 arch/mips/ralink/mt7621.c                          |   2 +-
 arch/mips/sgi-ip22/ip22-gio.c                      |   7 +-
 arch/powerpc/kexec/core_64.c                       |   4 +-
 arch/powerpc/perf/core-fsl-emb.c                   |   3 +-
 arch/powerpc/platforms/cell/spufs/file.c           |   6 +-
 arch/powerpc/platforms/powernv/setup.c             |   3 +-
 .../platforms/pseries/papr_platform_attributes.c   |   8 +-
 arch/riscv/kernel/cacheinfo.c                      |   2 +-
 arch/riscv/kernel/machine_kexec.c                  |   3 +
 arch/riscv/kernel/probes/rethook_trampoline.S      |   3 +
 arch/riscv/kernel/stacktrace.c                     |   2 +-
 arch/riscv/net/bpf_jit_core.c                      |   3 +-
 arch/s390/kernel/perf_cpum_cf.c                    |   3 +
 arch/s390/kernel/process.c                         |   2 +-
 arch/s390/kvm/pci.c                                |  12 +-
 arch/sparc/kernel/led.c                            |   2 +-
 arch/x86/boot/compressed/acpi.c                    |   7 +-
 arch/x86/boot/early_serial_console.c               |  11 +-
 arch/x86/events/amd/brs.c                          |  10 +-
 arch/x86/events/amd/core.c                         |   6 +-
 arch/x86/events/amd/lbr.c                          |   3 +-
 arch/x86/events/intel/uncore_snb.c                 |   7 -
 arch/x86/include/asm/nospec-branch.h               |   4 +
 arch/x86/kernel/cpu/bugs.c                         |  50 +-
 arch/x86/kvm/lapic.c                               |   8 +-
 arch/x86/kvm/vmx/vmx.c                             |  38 +-
 arch/x86/mm/numa_emulation.c                       |  17 +-
 arch/x86/mm/tlb.c                                  |  16 +-
 arch/x86/net/bpf_jit_comp.c                        |   3 +-
 arch/x86/platform/olpc/olpc-xo15-sci.c             |   1 +
 block/bdev.c                                       |  11 +-
 block/partitions/aix.c                             |   9 +
 crypto/af_alg.c                                    |  69 +--
 crypto/algif_aead.c                                |   8 +-
 crypto/algif_skcipher.c                            |  49 +-
 crypto/asymmetric_keys/verify_pefile.c             |   2 +
 crypto/asymmetric_keys/x509_loader.c               |   2 +-
 crypto/drbg.c                                      |   4 +-
 crypto/ecc.c                                       |  31 +-
 crypto/ecrdsa.c                                    |   2 +-
 crypto/pcrypt.c                                    |   4 +
 crypto/rng.c                                       |  11 +
 drivers/acpi/acpi_ipmi.c                           |   4 +-
 drivers/acpi/acpi_tad.c                            |   6 +-
 drivers/acpi/bus.c                                 |  70 +++
 drivers/acpi/cppc_acpi.c                           |  11 +-
 drivers/acpi/nfit/core.c                           |  89 +++-
 drivers/acpi/pfr_telemetry.c                       |   6 +-
 drivers/acpi/pfr_update.c                          |   6 +-
 drivers/acpi/resource.c                            |   6 +-
 drivers/acpi/thermal.c                             |   2 +-
 drivers/android/binder.c                           |  19 +-
 drivers/ata/libata-core.c                          |  19 +-
 drivers/ata/pata_pxa.c                             |   1 +
 drivers/ata/sata_gemini.c                          |   2 +-
 drivers/base/dd.c                                  |   7 +-
 drivers/base/firmware_loader/main.c                |   3 +-
 drivers/base/firmware_loader/sysfs_upload.c        |   8 +-
 drivers/base/power/main.c                          |   6 +-
 drivers/base/property.c                            |   4 +-
 drivers/block/drbd/drbd_receiver.c                 |   5 +
 drivers/bluetooth/Kconfig                          |   2 +
 drivers/bluetooth/bpa10x.c                         |   8 +-
 drivers/bluetooth/btmtk.c                          | 470 ++++++++++++++++-
 drivers/bluetooth/btmtk.h                          |  23 +-
 drivers/bluetooth/btmtksdio.c                      |   5 +-
 drivers/bluetooth/btnxpuart.c                      |   6 +
 drivers/bluetooth/btrtl.c                          |   5 +-
 drivers/bluetooth/btusb.c                          | 418 ++-------------
 drivers/bluetooth/hci_qca.c                        |   2 +-
 drivers/bluetooth/hci_vhci.c                       |  10 +
 drivers/bus/imx-weim.c                             |   6 -
 drivers/bus/mhi/ep/main.c                          |   9 +-
 drivers/bus/sunxi-rsb.c                            |   3 +
 drivers/char/hw_random/jh7110-trng.c               |  13 +-
 drivers/char/hw_random/virtio-rng.c                |  23 +-
 drivers/char/tlclk.c                               |   4 +
 drivers/char/tpm/eventlog/tpm1.c                   |   4 +-
 drivers/char/tpm/tpm-dev.c                         |   2 +-
 drivers/char/tpm/tpm_tis_core.c                    |  35 +-
 drivers/char/tpm/tpmrm-dev.c                       |   2 +-
 drivers/clk/at91/pmc.c                             |   2 +-
 drivers/clk/clk-scmi.c                             |   4 +-
 drivers/clk/clk-scpi.c                             |   2 +-
 drivers/clk/qcom/a53-pll.c                         |   2 +-
 drivers/clocksource/timer-sun5i.c                  |   3 +
 drivers/clocksource/timer-tegra186.c               |   3 +-
 drivers/cpufreq/acpi-cpufreq.c                     |   4 +-
 drivers/cpufreq/amd-pstate.c                       |   7 +-
 drivers/cpufreq/apple-soc-cpufreq.c                |   4 +-
 drivers/cpufreq/bmips-cpufreq.c                    |   4 +-
 drivers/cpufreq/cppc_cpufreq.c                     |   3 +-
 drivers/cpufreq/cpufreq-dt.c                       |   3 +-
 drivers/cpufreq/cpufreq.c                          |   2 +
 drivers/cpufreq/cpufreq_conservative.c             |  12 +-
 drivers/cpufreq/e_powersaver.c                     |   3 +-
 drivers/cpufreq/intel_pstate.c                     |  14 +-
 drivers/cpufreq/mediatek-cpufreq-hw.c              |   4 +-
 drivers/cpufreq/mediatek-cpufreq.c                 |   4 +-
 drivers/cpufreq/omap-cpufreq.c                     |   3 +-
 drivers/cpufreq/pasemi-cpufreq.c                   |   6 +-
 drivers/cpufreq/pcc-cpufreq.c                      |   8 +-
 drivers/cpufreq/powernow-k6.c                      |   5 +-
 drivers/cpufreq/powernow-k7.c                      |   3 +-
 drivers/cpufreq/powernow-k8.c                      |   6 +-
 drivers/cpufreq/powernv-cpufreq.c                  |   4 +-
 drivers/cpufreq/ppc_cbe_cpufreq.c                  |   3 +-
 drivers/cpufreq/qcom-cpufreq-hw.c                  |   5 +-
 drivers/cpufreq/qoriq-cpufreq.c                    |   4 +-
 drivers/cpufreq/scmi-cpufreq.c                     |   4 +-
 drivers/cpufreq/scpi-cpufreq.c                     |   4 +-
 drivers/cpufreq/sh-cpufreq.c                       |   4 +-
 drivers/cpufreq/sparc-us2e-cpufreq.c               |   3 +-
 drivers/cpufreq/sparc-us3-cpufreq.c                |   3 +-
 drivers/cpufreq/speedstep-centrino.c               |  10 +-
 drivers/cpufreq/tegra194-cpufreq.c                 |   4 +-
 drivers/cpufreq/vexpress-spc-cpufreq.c             |   5 +-
 drivers/crypto/allwinner/Kconfig                   |   8 -
 drivers/crypto/allwinner/sun4i-ss/Makefile         |   1 -
 drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c  |  36 --
 drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c  |  69 ---
 drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h       |  20 -
 drivers/crypto/amcc/crypto4xx_alg.c                | 106 ----
 drivers/crypto/amcc/crypto4xx_core.c               | 130 +----
 drivers/crypto/amcc/crypto4xx_core.h               |  11 -
 drivers/crypto/amcc/crypto4xx_reg_def.h            |  11 -
 drivers/crypto/amlogic/amlogic-gxl-core.c          |   2 +-
 drivers/crypto/atmel-ecc.c                         |   2 +-
 drivers/crypto/atmel-sha204a.c                     |  29 +-
 drivers/crypto/caam/caamalg.c                      |  12 +-
 drivers/crypto/caam/caamalg_qi.c                   |  12 +-
 drivers/crypto/caam/caamalg_qi2.c                  |  12 +-
 drivers/crypto/caam/caamhash.c                     |   4 +-
 drivers/crypto/caam/key_gen.c                      |   4 +-
 drivers/crypto/cavium/cpt/cptvf_reqmanager.c       |   4 +-
 drivers/crypto/ccp/sev-dev.c                       |   3 +-
 drivers/crypto/hisilicon/Kconfig                   |   1 -
 drivers/crypto/hisilicon/qm.c                      |   4 +-
 drivers/crypto/hisilicon/trng/trng.c               | 298 +----------
 .../intel/qat/qat_common/adf_accel_devices.h       |   2 +
 drivers/crypto/intel/qat/qat_common/adf_aer.c      |   7 +-
 .../crypto/intel/qat/qat_common/adf_common_drv.h   |   2 +
 drivers/crypto/intel/qat/qat_common/adf_isr.c      |  39 ++
 drivers/crypto/intel/qat/qat_common/adf_sriov.c    |  20 +-
 .../crypto/intel/qat/qat_common/qat_asym_algs.c    |  10 +-
 drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c |   4 +-
 drivers/crypto/talitos.c                           | 576 +++++++++++----------
 drivers/crypto/talitos.h                           |  12 +
 drivers/dax/kmem.c                                 |   6 +
 drivers/dma-buf/udmabuf.c                          |   5 +-
 drivers/dma/dmaengine.c                            |   3 +-
 drivers/dma/dw-edma/dw-edma-core.h                 |   2 +-
 drivers/dma/dw-edma/dw-edma-v0-core.c              |   6 +
 drivers/dma/imx-sdma.c                             |   4 +-
 drivers/dma/qcom/gpi.c                             |   1 +
 drivers/dma/tegra186-gpc-dma.c                     |   7 +
 drivers/edac/i10nm_base.c                          |  14 +-
 drivers/edac/skx_common.c                          |   3 +
 drivers/firewire/net.c                             |   5 +-
 drivers/firmware/arm_scmi/power.c                  |   6 +-
 drivers/firmware/arm_scmi/sensors.c                |   2 +-
 drivers/fpga/dfl.c                                 |   2 +
 drivers/fpga/microchip-spi.c                       |   3 +
 drivers/gpio/gpio-eic-sprd.c                       |   8 +-
 drivers/gpio/gpio-f7188x.c                         |   6 +-
 drivers/gpio/gpio-htc-egpio.c                      |   6 +-
 drivers/gpio/gpio-mlxbf3.c                         |   3 +-
 drivers/gpio/gpio-mvebu.c                          |   5 +-
 drivers/gpio/gpio-palmas.c                         |  19 +
 drivers/gpio/gpio-sch.c                            |  32 +-
 drivers/gpio/gpio-timberdale.c                     |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c   |  16 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   6 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c           |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c            |  25 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c            |   2 -
 drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c            |   3 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h            |   3 +-
 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c           |   3 +
 drivers/gpu/drm/amd/amdkfd/kfd_events.c            |   5 +
 drivers/gpu/drm/amd/amdkfd/kfd_svm.c               |   1 +
 drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c       |  11 +-
 .../amd/display/modules/info_packet/info_packet.c  |   2 +
 drivers/gpu/drm/drm_edid.c                         |   8 +
 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c     |  78 +--
 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c    |  11 +
 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c   |  22 -
 drivers/gpu/drm/i915/gt/intel_region_lmem.c        |   2 +-
 drivers/gpu/drm/msm/dp/dp_display.c                |   4 +-
 drivers/gpu/drm/msm/dp/dp_reg.h                    |   4 +-
 .../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c |   3 +-
 drivers/gpu/drm/radeon/radeon_gem.c                |  13 +-
 drivers/gpu/drm/radeon/radeon_ring.c               |   4 +-
 drivers/gpu/drm/rockchip/rockchip_drm_gem.c        |   2 +-
 drivers/gpu/drm/tegra/dc.c                         |   4 +-
 drivers/gpu/drm/tegra/gem.c                        |  22 +-
 drivers/gpu/drm/tegra/gr2d.c                       |  19 +-
 drivers/gpu/drm/tegra/gr3d.c                       |  19 +-
 drivers/gpu/drm/tegra/submit.c                     |   3 +-
 drivers/gpu/drm/tidss/tidss_kms.c                  |   2 -
 drivers/gpu/host1x/bus.c                           |  62 ++-
 drivers/gpu/host1x/job.c                           |  10 +-
 drivers/hid/hid-appleir.c                          |  45 +-
 drivers/hid/hid-core.c                             |   7 +
 drivers/hid/hid-letsketch.c                        |  36 +-
 drivers/hid/hid-lg-g15.c                           |  16 +
 drivers/hid/hid-logitech-hidpp.c                   |   1 -
 drivers/hid/hid-multitouch.c                       |  32 +-
 drivers/hid/hid-picolcd_core.c                     |   3 +-
 drivers/hid/hid-playstation.c                      |  12 +
 drivers/hid/hid-sensor-hub.c                       |  77 ++-
 drivers/hid/hid-wiimote-modules.c                  |  58 +--
 drivers/hid/wacom_sys.c                            |  12 +-
 drivers/hwmon/Kconfig                              |   1 +
 drivers/hwmon/asus_atk0110.c                       |   3 +
 drivers/hwmon/it87.c                               |   3 +
 drivers/hwmon/occ/common.c                         |  34 +-
 drivers/hwmon/occ/common.h                         |   1 +
 drivers/hwmon/pmbus/adm1275.c                      |   2 +-
 drivers/hwmon/pmbus/pmbus_core.c                   |  13 +-
 drivers/hwmon/w83627hf.c                           |   4 +
 drivers/hwmon/w83793.c                             |   1 +
 drivers/hwspinlock/qcom_hwspinlock.c               |   5 +-
 .../hwtracing/coresight/coresight-cti-platform.c   |   1 +
 drivers/hwtracing/coresight/coresight-etb10.c      |   6 +-
 drivers/hwtracing/coresight/coresight-etm4x-core.c |   4 +-
 drivers/hwtracing/coresight/ultrasoc-smb.c         |   1 +
 drivers/i2c/busses/i2c-mlxbf.c                     |   4 +-
 drivers/i2c/busses/i2c-mpc.c                       |   2 +-
 drivers/i2c/busses/i2c-mt65xx.c                    |   2 +-
 drivers/i2c/busses/i2c-stm32f7.c                   |   9 +-
 drivers/i2c/i2c-core-base.c                        |  85 +--
 drivers/i2c/i2c-core-of.c                          |   5 -
 drivers/i3c/master.c                               |  19 +-
 drivers/iio/accel/bmc150-accel-core.c              |   2 +
 drivers/iio/accel/kxsd9.c                          |   5 +-
 drivers/iio/accel/mma8452.c                        |   2 +
 drivers/iio/adc/lpc32xx_adc.c                      |   4 +-
 drivers/iio/adc/spear_adc.c                        |   3 +-
 drivers/iio/adc/ti-ads124s08.c                     |   3 +-
 drivers/iio/adc/xilinx-ams.c                       |   5 +
 drivers/iio/chemical/scd30_core.c                  |  19 +-
 .../iio/common/inv_sensors/inv_sensors_timestamp.c |  26 +-
 drivers/iio/common/st_sensors/st_sensors_core.c    |  23 +-
 drivers/iio/gyro/bmg160_core.c                     |  16 +-
 drivers/iio/imu/adis_trigger.c                     |   2 +-
 drivers/iio/imu/bmi160/bmi160_core.c               |   3 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c  |   4 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c |  44 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h |   3 +
 drivers/iio/imu/inv_icm42600/inv_icm42600_core.c   |   1 +
 drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c   |   4 +-
 drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c         |   2 +-
 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c       |  21 +-
 drivers/iio/industrialio-event.c                   |   5 +-
 drivers/iio/light/al3010.c                         |   2 +-
 drivers/iio/light/gp2ap002.c                       |   2 +-
 drivers/iio/light/opt3001.c                        |   6 +-
 drivers/iio/light/si1133.c                         |  14 +-
 drivers/iio/light/tcs3472.c                        |  38 +-
 drivers/iio/light/tsl2591.c                        |   6 +-
 drivers/iio/light/veml6030.c                       |   8 +-
 drivers/iio/magnetometer/ak8975.c                  |  15 +
 drivers/iio/orientation/hid-sensor-rotation.c      |  40 +-
 drivers/iio/pressure/mpl115.c                      |   8 +-
 drivers/iio/temperature/ltc2983.c                  |   5 +-
 drivers/infiniband/core/cm.c                       |  13 +-
 drivers/infiniband/core/counters.c                 |   2 +-
 drivers/infiniband/hw/hns/hns_roce_hem.c           |   8 +-
 drivers/infiniband/hw/hns/hns_roce_main.c          |   2 +-
 drivers/infiniband/hw/irdma/verbs.c                |  19 +-
 drivers/infiniband/hw/irdma/verbs.h                |   1 -
 drivers/infiniband/hw/mlx4/mlx4_ib.h               |   1 +
 drivers/infiniband/hw/mlx4/mr.c                    |   9 +-
 drivers/infiniband/hw/mlx4/sysfs.c                 |  45 +-
 drivers/infiniband/hw/mlx5/devx.c                  |  30 +-
 drivers/infiniband/hw/mlx5/main.c                  |  17 +-
 drivers/infiniband/hw/mlx5/mr.c                    |  17 +-
 drivers/infiniband/hw/mlx5/qp.c                    |  12 +-
 drivers/infiniband/sw/rxe/rxe_mmap.c               |  19 +-
 drivers/infiniband/sw/rxe/rxe_resp.c               |  33 +-
 drivers/infiniband/sw/siw/siw_qp_rx.c              |   9 +
 drivers/infiniband/ulp/rtrs/rtrs-srv.c             |   5 +-
 drivers/infiniband/ulp/srpt/ib_srpt.c              |   5 +-
 drivers/input/joystick/iforce/iforce-packets.c     |  18 +-
 drivers/input/joystick/maplecontrol.c              |   3 +-
 drivers/input/keyboard/maple_keyb.c                |   4 +-
 drivers/input/misc/ims-pcu.c                       | 117 ++++-
 drivers/input/mouse/elan_i2c_core.c                |  36 +-
 drivers/input/mouse/maplemouse.c                   |   9 +-
 drivers/input/rmi4/rmi_bus.c                       |   4 +-
 drivers/input/rmi4/rmi_f30.c                       |   2 +-
 drivers/input/rmi4/rmi_f3a.c                       |   2 +-
 drivers/input/touchscreen/goodix.c                 |   3 +-
 drivers/input/touchscreen/mms114.c                 |  26 +-
 drivers/input/touchscreen/touchwin.c               |  15 +-
 drivers/iommu/amd/amd_iommu_types.h                |  11 +-
 drivers/irqchip/irq-crossbar.c                     |  10 +-
 drivers/irqchip/irq-gic-v3-its.c                   |   6 +-
 drivers/irqchip/irq-ts4800.c                       |  10 +
 drivers/leds/uleds.c                               |   3 +-
 drivers/mailbox/mtk-adsp-mailbox.c                 |   9 +-
 drivers/md/dm-bufio.c                              |   4 +-
 drivers/md/dm-era-target.c                         |  10 +-
 drivers/md/dm-integrity.c                          |   3 -
 drivers/md/dm-ioctl.c                              |   9 +-
 drivers/md/dm-log.c                                |   3 +
 drivers/md/dm-stats.c                              |  10 +-
 drivers/md/dm-thin-metadata.c                      |  67 +--
 drivers/md/dm-verity-loadpin.c                     |   2 +-
 drivers/md/dm-verity-target.c                      |   2 +-
 drivers/md/raid1.c                                 |   6 +
 drivers/md/raid10.c                                |   1 +
 .../media/platform/mediatek/jpeg/mtk_jpeg_core.c   |   3 +-
 .../media/platform/nxp/imx8-isi/imx8-isi-core.c    |  24 +-
 drivers/media/platform/qcom/venus/helpers.c        |   4 +-
 .../media/platform/qcom/venus/hfi_platform_v4.c    |  20 +-
 .../media/platform/qcom/venus/hfi_platform_v6.c    |  16 +-
 drivers/media/platform/rockchip/rga/rga-hw.c       |   2 +-
 drivers/media/platform/rockchip/rga/rga-hw.h       |   2 +-
 drivers/media/usb/uvc/uvc_video.c                  | 122 +++--
 drivers/media/v4l2-core/v4l2-common.c              |   1 +
 drivers/memstick/core/ms_block.c                   |   4 +
 drivers/mfd/cros_ec_dev.c                          |   3 +-
 drivers/mfd/cs42l43.c                              |   2 +-
 drivers/mfd/sm501.c                                |   4 +-
 drivers/mfd/tps6586x.c                             |   2 +-
 drivers/mmc/host/vub300.c                          |  26 +-
 drivers/mtd/devices/mchp23k256.c                   |   2 +-
 drivers/mtd/devices/slram.c                        |  22 +-
 drivers/mtd/maps/vmu-flash.c                       |   1 +
 drivers/mtd/nand/onenand/onenand_samsung.c         |   7 +-
 drivers/mtd/nand/raw/fsl_ifc_nand.c                |   9 +-
 drivers/mtd/nand/raw/lpc32xx_mlc.c                 |  12 +-
 drivers/mtd/nand/raw/lpc32xx_slc.c                 |  12 +-
 drivers/mtd/nand/raw/nand_base.c                   |   2 +-
 drivers/mtd/nand/raw/pl35x-nand-controller.c       |   2 +-
 drivers/mtd/spi-nor/Kconfig                        |   1 -
 drivers/mtd/spi-nor/swp.c                          |  11 +-
 drivers/net/amt.c                                  |   6 +-
 drivers/net/bonding/bond_3ad.c                     |   1 +
 drivers/net/bonding/bond_main.c                    | 133 ++---
 drivers/net/bonding/bond_netlink.c                 |  16 +-
 drivers/net/can/usb/esd_usb.c                      |   5 +-
 drivers/net/dsa/sja1105/sja1105_ptp.c              |   2 +-
 drivers/net/ethernet/amazon/ena/ena_netdev.c       |  23 +-
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c    |   3 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |  23 +-
 .../ethernet/cavium/liquidio/cn23xx_pf_device.c    |  18 +-
 drivers/net/ethernet/chelsio/cxgb4/t4_hw.c         |   8 -
 .../net/ethernet/freescale/dpaa2/dpaa2-switch.c    |   2 +-
 drivers/net/ethernet/freescale/enetc/enetc.c       |   7 +
 drivers/net/ethernet/freescale/fman/fman.c         |   4 +-
 drivers/net/ethernet/freescale/gianfar.c           |  16 +-
 drivers/net/ethernet/intel/i40e/i40e_debug.h       |   2 +-
 drivers/net/ethernet/intel/ice/ice_common.c        |   1 -
 drivers/net/ethernet/intel/ice/ice_ethtool.c       |  12 +-
 drivers/net/ethernet/intel/ice/ice_main.c          |  16 +-
 drivers/net/ethernet/intel/ice/ice_vf_lib.c        |   2 +-
 drivers/net/ethernet/marvell/mvneta.c              |   3 +
 drivers/net/ethernet/marvell/octeontx2/af/mcs.c    |   6 +-
 .../ethernet/marvell/octeontx2/af/rvu_debugfs.c    |   3 +-
 .../net/ethernet/marvell/octeontx2/af/rvu_nix.c    |   4 +-
 .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c  |  10 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c   |  44 +-
 .../net/ethernet/marvell/prestera/prestera_main.c  |   2 +-
 drivers/net/ethernet/mediatek/mtk_ppe.c            |   4 +-
 .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c |  29 +-
 .../ethernet/mellanox/mlx5/core/en_accel/macsec.c  |  47 +-
 .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c  |   8 +-
 .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h  |   6 +-
 .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c |   3 +-
 drivers/net/ethernet/mellanox/mlx5/core/main.c     |  12 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.c     |   2 +-
 .../net/ethernet/mellanox/mlxsw/spectrum_router.c  |   1 +
 drivers/net/ethernet/microchip/lan743x_main.c      |   2 +-
 .../ethernet/microchip/lan966x/lan966x_vcap_impl.c |   5 +-
 .../ethernet/microchip/sparx5/sparx5_switchdev.c   |   4 +-
 .../ethernet/microchip/sparx5/sparx5_vcap_impl.c   |   5 +-
 drivers/net/ethernet/microchip/vcap/vcap_api.c     |  72 +--
 drivers/net/ethernet/microchip/vcap/vcap_api.h     |   3 +-
 .../net/ethernet/microchip/vcap/vcap_api_debugfs.c |   8 +-
 .../microchip/vcap/vcap_api_debugfs_kunit.c        |   3 +-
 .../net/ethernet/microchip/vcap/vcap_api_kunit.c   |   3 +-
 .../net/ethernet/microchip/vcap/vcap_api_private.h |   3 +
 drivers/net/ethernet/microsoft/mana/gdma_main.c    |   2 +
 drivers/net/ethernet/microsoft/mana/mana_en.c      |   3 +-
 .../net/ethernet/pensando/ionic/ionic_ethtool.c    |  11 +-
 drivers/net/ethernet/qlogic/qede/qede_fp.c         |   9 +-
 .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c   |   5 +-
 drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h    |   1 +
 .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c   |  78 +--
 drivers/net/ethernet/sun/sungem.c                  |  13 +-
 drivers/net/ethernet/sunplus/spl2sw_phy.c          |   6 +-
 drivers/net/ieee802154/ca8210.c                    |   9 +-
 drivers/net/macsec.c                               |   9 +-
 drivers/net/phy/sfp.c                              |   1 +
 drivers/net/team/Makefile                          |   1 +
 drivers/net/team/{team.c => team_core.c}           |  68 ++-
 drivers/net/thunderbolt/main.c                     |   8 +-
 drivers/net/usb/gl620a.c                           |   6 +-
 drivers/net/usb/kalmia.c                           |   8 +
 drivers/net/usb/lan78xx.c                          | 318 ++++++------
 drivers/net/usb/net1080.c                          |   2 +-
 drivers/net/veth.c                                 |   2 +
 drivers/net/virtio_net.c                           |  55 +-
 drivers/net/vxlan/vxlan_core.c                     |   8 +-
 drivers/net/wan/ixp4xx_hss.c                       |   4 +-
 drivers/net/wireless/ath/ath9k/xmit.c              |   5 +
 drivers/net/wireless/ath/wcn36xx/smd.c             |  13 +
 drivers/net/wireless/cisco/airo.c                  |   4 +-
 drivers/net/wireless/intersil/hostap/hostap_main.c |   1 +
 drivers/net/wireless/marvell/mwifiex/join.c        |   1 -
 drivers/net/wireless/mediatek/mt76/mac80211.c      |   2 +-
 drivers/net/wireless/mediatek/mt76/mt7915/mac.c    |  10 +-
 drivers/net/wireless/mediatek/mt76/mt7921/mac.c    |   5 +-
 drivers/net/wireless/ralink/rt2x00/rt2x00dev.c     |  12 +-
 drivers/net/wireless/realtek/rtw88/pci.c           |   5 +
 drivers/net/wireless/realtek/rtw89/fw.c            |   2 +-
 drivers/net/wwan/iosm/iosm_ipc_mux_codec.c         |  40 +-
 drivers/net/wwan/t7xx/t7xx_hif_cldma.c             |   3 +
 drivers/net/wwan/t7xx/t7xx_port_wwan.c             |   2 +
 drivers/ntb/hw/epf/ntb_hw_epf.c                    |  89 ++--
 drivers/nvdimm/btt.c                               |  14 +-
 drivers/nvdimm/nd.h                                |  11 +-
 drivers/nvdimm/region_devs.c                       |  66 +--
 drivers/nvme/host/core.c                           |   2 +-
 drivers/nvme/host/multipath.c                      |   6 +
 drivers/nvme/target/auth.c                         |  20 +-
 drivers/nvme/target/fabrics-cmd-auth.c             |  60 ++-
 drivers/nvme/target/fabrics-cmd.c                  |  15 +-
 drivers/nvme/target/nvmet.h                        |   8 +-
 drivers/nvme/target/rdma.c                         |  18 +-
 drivers/nvme/target/tcp.c                          |   5 +-
 drivers/of/cpu.c                                   |   2 +-
 drivers/of/dynamic.c                               |   1 -
 drivers/of/platform.c                              |   5 -
 drivers/opp/of.c                                   |   3 +-
 drivers/pci/Makefile                               |   2 +-
 drivers/pci/controller/dwc/pci-imx6.c              |   4 +-
 drivers/pci/controller/dwc/pci-meson.c             |   4 +-
 drivers/pci/controller/dwc/pcie-designware-host.c  |   2 +-
 .../pci/controller/mobiveil/pcie-mobiveil-host.c   |   8 +-
 drivers/pci/controller/pci-host-common.c           |   4 +
 drivers/pci/controller/pci-loongson.c              |  31 +-
 drivers/pci/controller/pcie-altera-msi.c           |   2 +-
 drivers/pci/controller/pcie-altera.c               |  32 +-
 drivers/pci/controller/pcie-iproc-bcma.c           |   2 +-
 drivers/pci/controller/pcie-iproc-platform.c       |   2 +-
 drivers/pci/controller/pcie-iproc.c                |   1 -
 drivers/pci/controller/pcie-iproc.h                |   2 -
 drivers/pci/controller/pcie-mediatek-gen3.c        |   4 +-
 drivers/pci/controller/pcie-mediatek.c             | 132 +++--
 drivers/pci/controller/pcie-rcar-host.c            |   1 -
 drivers/pci/controller/pcie-xilinx-nwl.c           |   2 +-
 drivers/pci/endpoint/functions/pci-epf-ntb.c       |  21 +-
 drivers/pci/endpoint/functions/pci-epf-vntb.c      |   9 +-
 drivers/pci/msi/msi.c                              |   4 +-
 drivers/pci/pci-sysfs.c                            |  14 +-
 drivers/pci/pci.c                                  | 139 -----
 drivers/pci/pci.h                                  |   4 +
 drivers/pci/quirks.c                               |  51 +-
 drivers/pci/rebar.c                                | 218 ++++++++
 drivers/pci/rom.c                                  | 149 +++++-
 drivers/pci/setup-bus.c                            | 104 ++--
 drivers/pci/setup-res.c                            |  53 --
 drivers/phy/phy-can-transceiver.c                  |   3 +
 drivers/pinctrl/cirrus/pinctrl-cs42l43.c           |   2 +-
 drivers/pinctrl/mediatek/pinctrl-mt8167.c          |   2 +-
 drivers/pinctrl/mediatek/pinctrl-mt8516.c          |   2 +-
 drivers/pinctrl/meson/pinctrl-meson.c              |   2 +-
 drivers/pinctrl/sunxi/pinctrl-sunxi.c              |   2 +-
 drivers/platform/x86/amd/pmc/pmc-quirks.c          |  39 ++
 drivers/platform/x86/amd/pmc/pmc.c                 |  60 ++-
 drivers/platform/x86/amd/pmc/pmc.h                 |   1 +
 drivers/platform/x86/xo15-ebook.c                  |   7 +-
 drivers/pmdomain/imx/imx8m-blk-ctrl.c              |  46 +-
 drivers/power/supply/charger-manager.c             |   6 +-
 drivers/power/supply/cpcap-battery.c               |  11 +-
 drivers/power/supply/power_supply_core.c           |  11 +-
 drivers/pwm/pwm-imx27.c                            |   8 +-
 drivers/rapidio/devices/tsi721.c                   |   3 +-
 drivers/regulator/core.c                           |   4 +-
 drivers/regulator/ltc3676.c                        |  10 +-
 drivers/regulator/scmi-regulator.c                 |   6 +-
 drivers/remoteproc/qcom_common.c                   |  14 +-
 drivers/reset/reset-imx7.c                         |   6 +
 drivers/reset/reset-sunxi.c                        |   4 +-
 drivers/rpmsg/qcom_glink_native.c                  |   2 -
 drivers/rpmsg/rpmsg_core.c                         |  43 +-
 drivers/rpmsg/virtio_rpmsg_bus.c                   |   1 -
 drivers/rtc/rtc-abx80x.c                           |   3 +-
 drivers/rtc/rtc-cmos.c                             |   6 +
 drivers/rtc/rtc-ds1307.c                           |  30 +-
 drivers/rtc/rtc-mpfs.c                             |   2 +-
 drivers/rtc/rtc-msc313.c                           |   4 +-
 drivers/s390/char/monwriter.c                      |   3 +
 drivers/s390/crypto/zcrypt_cex2a.c                 |   0
 drivers/s390/crypto/zcrypt_cex2a.h                 |   0
 drivers/s390/crypto/zcrypt_cex2c.c                 |   0
 drivers/s390/crypto/zcrypt_cex2c.h                 |   0
 drivers/scsi/elx/efct/efct_hw.c                    |   2 +
 drivers/scsi/elx/efct/efct_unsol.c                 |   1 +
 drivers/scsi/hpsa.c                                |   4 +
 drivers/scsi/lpfc/lpfc_init.c                      |   3 +-
 drivers/scsi/pm8001/pm8001_ctl.c                   |   5 +-
 drivers/scsi/scsi_scan.c                           |   2 +-
 drivers/scsi/scsi_transport_sas.c                  | 101 ++--
 drivers/scsi/sg.c                                  |   7 +-
 drivers/scsi/smartpqi/smartpqi_init.c              |   2 +-
 drivers/slimbus/qcom-ctrl.c                        |   5 +-
 drivers/slimbus/qcom-ngd-ctrl.c                    |  62 +--
 drivers/soc/fsl/qe/qe.c                            |   3 +
 drivers/soc/ti/k3-ringacc.c                        |   4 +-
 drivers/spi/spi-dw.h                               |   1 +
 drivers/spi/spi-ep93xx.c                           |   1 +
 drivers/spi/spi-fsl-lpspi.c                        |  18 +-
 drivers/spi/spi-hisi-kunpeng.c                     |   6 +-
 drivers/spi/spi-meson-spifc.c                      |   1 +
 drivers/spi/spi-rpc-if.c                           |   6 +-
 drivers/spi/spi-sh-msiof.c                         |  10 +-
 drivers/spi/spi-uniphier.c                         |   4 +-
 drivers/spi/spi-xilinx.c                           |  11 +-
 drivers/spi/spi.c                                  |   5 -
 drivers/staging/media/atomisp/pci/atomisp_cmd.c    |   6 +-
 drivers/staging/media/atomisp/pci/sh_css.c         |   6 +-
 drivers/staging/media/ipu3/ipu3-css-params.c       |   8 +-
 drivers/staging/media/sunxi/cedrus/cedrus.c        |   4 +-
 drivers/staging/most/video/video.c                 |   7 +-
 drivers/staging/nvec/nvec.c                        |   4 +-
 drivers/staging/rtl8723bs/core/rtw_ieee80211.c     |  93 ++--
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |  20 +-
 drivers/staging/rtl8723bs/core/rtw_security.c      |   2 +-
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c     |  23 +-
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |   8 +
 drivers/staging/vme_user/vme_fake.c                |   8 +
 drivers/staging/vme_user/vme_tsi148.c              |   8 +
 drivers/staging/vme_user/vme_user.c                |  22 +
 drivers/target/iscsi/iscsi_target_auth.c           |   6 +-
 drivers/target/loopback/tcm_loop.c                 |  64 ---
 drivers/target/target_core_fabric_lib.c            |  89 +++-
 drivers/target/target_core_internal.h              |   3 +-
 drivers/target/target_core_pr.c                    |  12 +-
 drivers/thermal/intel/therm_throt.c                |   7 +-
 drivers/thermal/thermal_hwmon.c                    |   5 +-
 drivers/tty/serial/8250/8250_mid.c                 |  31 +-
 drivers/tty/serial/8250/8250_omap.c                |   3 +-
 drivers/tty/serial/msm_serial.c                    |   3 +-
 drivers/ufs/core/ufshcd.c                          |   2 +-
 drivers/usb/atm/ueagle-atm.c                       |  36 +-
 drivers/usb/cdns3/cdnsp-mem.c                      |   2 +
 drivers/usb/class/cdc-acm.c                        |   3 +
 drivers/usb/common/ulpi.c                          |  23 +-
 drivers/usb/core/quirks.c                          |   6 +
 drivers/usb/dwc3/dwc3-meson-g12a.c                 |  14 +-
 drivers/usb/dwc3/gadget.c                          |  43 +-
 drivers/usb/fotg210/fotg210-hcd.c                  |   6 +-
 drivers/usb/gadget/composite.c                     |   5 +-
 drivers/usb/gadget/function/f_fs.c                 |   5 +-
 drivers/usb/gadget/function/f_printer.c            |   3 +-
 drivers/usb/gadget/function/rndis.c                |  20 +-
 drivers/usb/gadget/udc/core.c                      |  29 +-
 drivers/usb/host/ehci-sched.c                      |  11 +-
 drivers/usb/host/max3421-hcd.c                     |   8 +
 drivers/usb/host/sl811-hcd.c                       |   1 +
 drivers/usb/host/xhci.c                            |  11 +-
 drivers/usb/misc/chaoskey.c                        |   1 -
 drivers/usb/misc/idmouse.c                         |  45 +-
 drivers/usb/misc/iowarrior.c                       |  21 +-
 drivers/usb/misc/ldusb.c                           |  38 +-
 drivers/usb/misc/legousbtower.c                    |  37 +-
 drivers/usb/misc/uss720.c                          |   5 +-
 drivers/usb/mtu3/mtu3_gadget.c                     |   1 +
 drivers/usb/serial/digi_acceleport.c               |  43 +-
 drivers/usb/serial/keyspan_pda.c                   |   2 +-
 drivers/usb/serial/option.c                        |  16 +
 drivers/usb/storage/ene_ub6250.c                   |   3 +-
 drivers/usb/storage/usb.c                          |   2 +-
 drivers/usb/typec/anx7411.c                        |   4 +-
 drivers/usb/typec/class.c                          |   1 +
 drivers/usb/typec/tcpm/tcpci_rt1711h.c             |  13 +-
 drivers/usb/typec/tcpm/tcpm.c                      |   7 +-
 drivers/usb/typec/ucsi/displayport.c               |   7 +-
 drivers/usb/typec/ucsi/ucsi.c                      |  20 +
 drivers/usb/typec/ucsi/ucsi.h                      |   1 +
 drivers/usb/typec/ucsi/ucsi_acpi.c                 |  10 +-
 drivers/usb/typec/ucsi/ucsi_ccg.c                  |   2 +-
 drivers/usb/usbip/vudc.h                           |   1 -
 drivers/usb/usbip/vudc_dev.c                       |   4 +-
 drivers/vdpa/vdpa_user/vduse_dev.c                 |  72 ++-
 drivers/vfio/pci/mlx5/cmd.h                        |  13 +-
 drivers/vfio/pci/vfio_pci_core.c                   |  37 +-
 drivers/vfio/vfio_main.c                           |   3 +-
 drivers/vhost/net.c                                |  15 +-
 drivers/vhost/vdpa.c                               |  29 +-
 drivers/video/fbdev/aty/radeon_base.c              |   1 +
 drivers/video/fbdev/broadsheetfb.c                 |   8 +-
 drivers/video/fbdev/carminefb.c                    |   1 +
 drivers/video/fbdev/core/fbcon.c                   |  14 +-
 drivers/video/fbdev/hecubafb.c                     |   6 +-
 drivers/video/fbdev/i740fb.c                       |   1 +
 drivers/video/fbdev/metronomefb.c                  |   8 +-
 drivers/video/fbdev/nvidia/nvidia.c                |   1 +
 drivers/video/fbdev/s3fb.c                         |   1 +
 drivers/video/fbdev/sm501fb.c                      |  16 +-
 drivers/video/fbdev/sm712.h                        |   2 +-
 drivers/video/fbdev/tdfxfb.c                       |   1 +
 drivers/video/fbdev/tridentfb.c                    |   1 +
 drivers/video/fbdev/uvesafb.c                      |   4 +-
 drivers/video/fbdev/vesafb.c                       |   1 +
 drivers/virtio/virtio_mmio.c                       |  26 +-
 drivers/watchdog/apple_wdt.c                       |   1 +
 drivers/watchdog/sama5d4_wdt.c                     |  48 +-
 drivers/watchdog/sp5100_tco.c                      |   3 +-
 drivers/watchdog/sprd_wdt.c                        |   5 +-
 drivers/watchdog/watchdog_core.c                   |   3 +
 drivers/xen/gntdev.c                               |   8 +-
 drivers/xen/xen-scsiback.c                         |  30 +-
 fs/9p/vfs_inode.c                                  |   9 +
 fs/afs/cell.c                                      |   2 +
 fs/afs/cmservice.c                                 |   2 -
 fs/afs/fs_operation.c                              |   2 +-
 fs/afs/rxrpc.c                                     |  11 +-
 fs/afs/super.c                                     |   3 +-
 fs/afs/vl_list.c                                   |  10 +-
 fs/afs/volume.c                                    |   2 +-
 fs/btrfs/btrfs_inode.h                             |   2 +
 fs/btrfs/extent-tree.c                             |  17 +-
 fs/btrfs/file.c                                    |  12 +-
 fs/btrfs/inode.c                                   | 138 +++--
 fs/btrfs/ordered-data.c                            |  12 +
 fs/btrfs/ordered-data.h                            |   2 +
 fs/btrfs/reflink.c                                 |   5 +-
 fs/btrfs/super.c                                   |   3 +-
 fs/configfs/dir.c                                  |  57 +-
 fs/dlm/midcomms.c                                  |   4 +-
 fs/efs/file.c                                      |  21 +-
 fs/exfat/dir.c                                     |  61 ++-
 fs/exfat/exfat_fs.h                                |   7 +-
 fs/exfat/inode.c                                   |   2 +-
 fs/exfat/namei.c                                   | 331 ++++++------
 fs/ext2/file.c                                     |   9 +-
 fs/ext4/extents.c                                  |   5 +-
 fs/ext4/inode.c                                    |   3 +-
 fs/ext4/ioctl.c                                    |  12 +-
 fs/ext4/move_extent.c                              |  34 +-
 fs/f2fs/checkpoint.c                               |  14 +-
 fs/f2fs/data.c                                     |  29 ++
 fs/f2fs/f2fs.h                                     |   1 +
 fs/f2fs/gc.c                                       |  50 +-
 fs/f2fs/inode.c                                    |  30 +-
 fs/f2fs/segment.c                                  |   8 +
 fs/f2fs/xattr.c                                    |   6 +-
 fs/fs-writeback.c                                  | 133 +++--
 fs/fuse/cuse.c                                     |   4 +-
 fs/fuse/dev.c                                      |   2 +-
 fs/hfs/bfind.c                                     |   2 +-
 fs/hfs/bnode.c                                     |  56 +-
 fs/hfs/brec.c                                      |   2 +-
 fs/hfs/btree.c                                     |   2 +-
 fs/hfs/btree.h                                     |  71 +--
 fs/hfs/hfs_fs.h                                    |  88 ++--
 fs/hfs/inode.c                                     |   3 +-
 fs/hfsplus/bfind.c                                 |   2 +-
 fs/hfsplus/bnode.c                                 |  62 +--
 fs/hfsplus/brec.c                                  |   2 +-
 fs/hfsplus/btree.c                                 |   2 +-
 fs/hfsplus/hfsplus_fs.h                            |  40 +-
 fs/isofs/rock.c                                    |  11 +
 fs/jbd2/journal.c                                  |   2 +
 fs/lockd/svcsubs.c                                 |   4 +-
 fs/minix/minix.h                                   |   2 +-
 fs/namei.c                                         |   4 +
 fs/nfs/callback_proc.c                             |   9 +-
 fs/nfs/dir.c                                       |   2 +
 fs/nfs/filelayout/filelayout.c                     |   2 +
 fs/nfs/flexfilelayout/flexfilelayout.c             |  33 ++
 fs/nfs/flexfilelayout/flexfilelayout.h             |  16 +
 fs/nfs/pnfs.c                                      |   4 +-
 fs/nfs/read.c                                      |  25 +-
 fs/nfsd/nfs4layouts.c                              |   4 +-
 fs/nfsd/nfs4recover.c                              | 120 ++---
 fs/nfsd/nfs4state.c                                |  22 +-
 fs/nfsd/vfs.c                                      |  42 +-
 fs/nilfs2/segment.c                                |  22 +
 fs/nilfs2/super.c                                  |   2 -
 fs/ntfs3/attrib.c                                  |  14 +
 fs/ntfs3/dir.c                                     |   2 +-
 fs/ntfs3/file.c                                    |  48 +-
 fs/ntfs3/frecord.c                                 |  51 ++
 fs/ntfs3/fslog.c                                   | 131 ++++-
 fs/ntfs3/index.c                                   |  45 +-
 fs/ntfs3/inode.c                                   |   8 +
 fs/ntfs3/lznt.c                                    |   2 +-
 fs/ntfs3/namei.c                                   |   2 +-
 fs/ntfs3/ntfs_fs.h                                 |   5 +-
 fs/ntfs3/run.c                                     |   9 +-
 fs/ocfs2/alloc.c                                   |   2 +-
 fs/ocfs2/aops.c                                    |  13 +-
 fs/ocfs2/buffer_head_io.c                          |   7 +-
 fs/ocfs2/dlm/dlmdebug.c                            |  16 +-
 fs/ocfs2/dlmglue.c                                 |  17 +
 fs/ocfs2/inode.c                                   | 150 +++++-
 fs/ocfs2/journal.c                                 |  13 +-
 fs/ocfs2/journal.h                                 |   3 +
 fs/ocfs2/move_extents.c                            |   4 +-
 fs/ocfs2/ocfs2.h                                   |   2 -
 fs/ocfs2/quota_local.c                             |   2 +-
 fs/ocfs2/stack_user.c                              |  10 +-
 fs/ocfs2/super.c                                   |   2 -
 fs/ocfs2/sysfile.c                                 |   9 +-
 fs/orangefs/dir.c                                  |   7 +-
 fs/proc/array.c                                    |  15 +-
 fs/proc/base.c                                     | 184 +++----
 fs/proc/fd.c                                       |  31 +-
 fs/proc/generic.c                                  |   9 +-
 fs/proc/internal.h                                 |   6 +-
 fs/proc/namespaces.c                               |  16 +-
 fs/proc/proc_net.c                                 |   2 +-
 fs/smb/client/cifs_swn.c                           | 329 +++++++++---
 fs/smb/client/cifsacl.c                            |   2 +-
 fs/smb/client/cifsglob.h                           |  19 +-
 fs/smb/client/connect.c                            |   3 +
 fs/smb/client/inode.c                              |  30 +-
 fs/smb/client/ioctl.c                              |  12 +-
 fs/smb/client/misc.c                               |   8 +
 fs/smb/client/smb2misc.c                           |  52 +-
 fs/smb/client/smb2ops.c                            |  56 +-
 fs/smb/client/smb2pdu.c                            |  22 +-
 fs/smb/client/trace.h                              |   2 +
 fs/smb/common/cifsglob.h                           |  30 ++
 fs/smb/server/connection.c                         | 101 +++-
 fs/smb/server/connection.h                         |   6 +
 fs/smb/server/oplock.c                             |  13 +-
 fs/smb/server/server.c                             |  12 +
 fs/smb/server/smb2pdu.c                            | 146 ++++--
 fs/smb/server/smb_common.h                         |  14 +-
 fs/smb/server/smbacl.c                             |   7 +-
 fs/smb/server/vfs.c                                |  29 +-
 fs/smb/server/vfs_cache.c                          | 119 ++++-
 fs/smb/server/vfs_cache.h                          |   3 +
 fs/sysfs/file.c                                    |   4 +
 fs/udf/balloc.c                                    |   5 +-
 fs/udf/super.c                                     |  11 +-
 fs/userfaultfd.c                                   |  14 +-
 fs/xfs/libxfs/xfs_defer.c                          |  22 +-
 fs/xfs/libxfs/xfs_defer.h                          |  14 +
 fs/xfs/libxfs/xfs_log_recover.h                    |   4 +-
 fs/xfs/xfs_attr_item.c                             | 115 ++--
 fs/xfs/xfs_bmap_item.c                             |  92 ++--
 fs/xfs/xfs_dquot.c                                 |  16 +-
 fs/xfs/xfs_extfree_item.c                          | 117 ++---
 fs/xfs/xfs_log_recover.c                           |  52 +-
 fs/xfs/xfs_refcount_item.c                         | 127 ++---
 fs/xfs/xfs_reflink.c                               |  36 ++
 fs/xfs/xfs_rmap_item.c                             | 151 +++---
 fs/xfs/xfs_trans.h                                 |   4 -
 include/acpi/acpi_bus.h                            |   2 +
 include/asm-generic/bitops/lock.h                  |  22 +-
 include/crypto/drbg.h                              |  18 +-
 include/dt-bindings/power/fsl,imx93-power.h        |   1 +
 include/linux/audit.h                              |   8 +
 include/linux/backing-dev-defs.h                   |   4 +
 include/linux/bitops.h                             |   2 +
 include/linux/bpf.h                                |   3 +
 include/linux/bpf_local_storage.h                  |   3 -
 include/linux/cpufreq.h                            |   2 +-
 include/linux/damon.h                              |   8 +-
 include/linux/device.h                             |   5 +-
 include/linux/etherdevice.h                        |   3 +-
 include/linux/f2fs_fs.h                            |   1 +
 include/linux/filter.h                             |  15 +-
 include/linux/fs.h                                 |   5 +
 include/linux/fwnode.h                             |   2 +
 include/linux/glob.h                               |   1 +
 include/linux/hid-sensor-hub.h                     |  25 +
 include/linux/hid.h                                |  29 ++
 include/linux/host1x.h                             |   7 +
 include/linux/if_ether.h                           |   3 +-
 include/linux/iio/common/inv_sensors_timestamp.h   |   3 +-
 include/linux/inetdevice.h                         |   5 +
 include/linux/jiffies.h                            |  13 +
 include/linux/netdev_features.h                    |  25 +
 include/linux/netdevice.h                          |   7 +-
 include/linux/nfs_page.h                           |   1 +
 include/linux/pci.h                                |   4 +-
 include/linux/rpmsg.h                              |   4 -
 include/linux/seqlock.h                            | 110 ++++
 include/linux/sunrpc/clnt.h                        |   1 +
 include/linux/sunrpc/xprt.h                        |   2 +
 include/linux/vfio_pci_core.h                      |  15 +-
 include/linux/vmalloc.h                            |   4 +-
 include/linux/writeback.h                          |   2 +
 include/net/addrconf.h                             |  10 +-
 include/net/bluetooth/hci.h                        |  21 +-
 include/net/bluetooth/hci_core.h                   |  39 +-
 include/net/bluetooth/l2cap.h                      |  11 +-
 include/net/bonding.h                              |   1 +
 include/net/fib_rules.h                            |   5 +
 include/net/gue.h                                  |   2 +-
 include/net/ip_fib.h                               |   7 +-
 include/net/ip_vs.h                                |   3 +-
 include/net/netfilter/nf_conntrack_extend.h        |  12 -
 include/net/netfilter/nf_queue.h                   |   1 +
 include/net/rtnetlink.h                            |   2 +
 include/net/sctp/sctp.h                            |   3 +-
 include/net/sock.h                                 |   2 +-
 include/net/tc_act/tc_pedit.h                      |  18 +-
 include/net/xfrm.h                                 |  15 +-
 include/uapi/linux/bpf.h                           |   1 +
 io_uring/io-wq.c                                   |   2 +-
 kernel/audit.c                                     |  85 ++-
 kernel/bpf/bpf_lsm.c                               |  34 +-
 kernel/bpf/cgroup.c                                | 110 ++--
 kernel/bpf/core.c                                  |  70 ++-
 kernel/bpf/devmap.c                                |  19 +
 kernel/bpf/dispatcher.c                            |   2 +-
 kernel/bpf/hashtab.c                               |  21 +-
 kernel/bpf/helpers.c                               |  12 +-
 kernel/bpf/inode.c                                 |  13 +-
 kernel/bpf/lpm_trie.c                              |  10 +-
 kernel/bpf/syscall.c                               |   5 +-
 kernel/bpf/verifier.c                              |   3 +-
 kernel/cgroup/cpuset.c                             |   7 +-
 kernel/cpu.c                                       |  20 +-
 kernel/events/core.c                               |  19 +-
 kernel/fork.c                                      |   9 +-
 kernel/module/decompress.c                         |   2 +
 kernel/sched/core.c                                |   1 +
 kernel/sched/fair.c                                |  25 +-
 kernel/sched/features.h                            |   8 +
 kernel/time/posix-cpu-timers.c                     |   3 +-
 kernel/time/time.c                                 |   2 +-
 kernel/trace/bpf_trace.c                           |  11 +-
 kernel/trace/ring_buffer.c                         |   3 +-
 kernel/trace/trace_eprobe.c                        |   2 +-
 kernel/trace/trace_events_filter.c                 |   6 +-
 kernel/trace/trace_events_hist.c                   |  41 +-
 kernel/trace/trace_osnoise.c                       |   4 +-
 kernel/trace/trace_probe.c                         |   3 +-
 kernel/trace/trace_probe.h                         |   2 +-
 kernel/workqueue.c                                 |   2 +-
 lib/debugobjects.c                                 |  17 +
 lib/glob.c                                         |  31 +-
 lib/test_meminit.c                                 |   2 +-
 mm/backing-dev.c                                   |   5 +
 mm/damon/core.c                                    |   2 +-
 mm/damon/ops-common.c                              |   1 +
 mm/damon/sysfs-schemes.c                           |  17 +-
 mm/filemap.c                                       |   2 +-
 mm/madvise.c                                       |   3 +-
 mm/mincore.c                                       |   3 +-
 mm/mm_init.c                                       |  13 +-
 mm/shrinker_debug.c                                |  30 +-
 mm/slab.h                                          |  17 +-
 mm/vmscan.c                                        |   6 +-
 net/6lowpan/nhc.c                                  |   2 +-
 net/9p/client.c                                    |   2 +
 net/9p/trans_rdma.c                                |  19 +-
 net/atm/common.c                                   |   2 +
 net/batman-adv/distributed-arp-table.c             |  30 +-
 net/batman-adv/fragmentation.c                     |   8 +-
 net/batman-adv/gateway_client.c                    |   3 +-
 net/batman-adv/main.c                              |  13 +-
 net/batman-adv/routing.c                           |   3 +-
 net/batman-adv/soft-interface.c                    |  17 +-
 net/batman-adv/soft-interface.h                    |   2 +
 net/batman-adv/translation-table.c                 |   5 +-
 net/bluetooth/6lowpan.c                            |  74 +--
 net/bluetooth/af_bluetooth.c                       |  17 +-
 net/bluetooth/bnep/core.c                          |  27 +-
 net/bluetooth/hci_codec.c                          |   2 +-
 net/bluetooth/hci_conn.c                           |  56 +-
 net/bluetooth/hci_core.c                           |  83 ++-
 net/bluetooth/hci_event.c                          |  29 +-
 net/bluetooth/hci_sync.c                           | 197 +++++--
 net/bluetooth/iso.c                                |  20 +-
 net/bluetooth/l2cap_core.c                         | 159 ++++--
 net/bluetooth/l2cap_sock.c                         | 107 ++--
 net/bluetooth/mgmt.c                               |   8 +-
 net/bluetooth/msft.c                               |   2 +-
 net/bluetooth/rfcomm/tty.c                         |   4 +-
 net/bluetooth/sco.c                                |  62 ++-
 net/bluetooth/smp.c                                |  27 +-
 net/bridge/br_cfm.c                                |   6 +
 net/bridge/br_cfm_netlink.c                        |   4 +-
 net/bridge/br_if.c                                 |   3 +
 net/bridge/br_stp.c                                |   3 +-
 net/bridge/netfilter/ebtables.c                    |  22 +-
 net/bridge/netfilter/nft_meta_bridge.c             |   4 +-
 net/can/bcm.c                                      | 127 ++++-
 net/can/isotp.c                                    |   9 +-
 net/core/dev.c                                     |  88 ++++
 net/core/fib_rules.c                               |   6 +-
 net/core/filter.c                                  |  28 +-
 net/core/flow_dissector.c                          |  12 +-
 net/core/lwt_bpf.c                                 |  12 +
 net/core/rtnetlink.c                               |   8 +
 net/core/skbuff.c                                  |  23 +-
 net/devlink/rate.c                                 |  10 +-
 net/ethernet/eth.c                                 |   9 +-
 net/handshake/genl.c                               |   2 +-
 net/ieee802154/core.c                              |   2 +-
 net/ieee802154/header_ops.c                        |   9 +-
 net/ieee802154/ieee802154.h                        |  17 +
 net/ieee802154/netlink.c                           |  36 +-
 net/ife/ife.c                                      |   2 +-
 net/ipv4/esp4_offload.c                            |   2 +-
 net/ipv4/igmp.c                                    |  15 +-
 net/ipv4/ip_gre.c                                  |   9 +-
 net/ipv4/ip_vti.c                                  |   3 +
 net/ipv4/ipip.c                                    |   3 +
 net/ipv4/netfilter/nf_reject_ipv4.c                |   2 +-
 net/ipv4/sysctl_net_ipv4.c                         |  10 +-
 net/ipv4/tcp_output.c                              |   4 +-
 net/ipv6/addrconf.c                                |  23 +-
 net/ipv6/esp6_offload.c                            |   2 +-
 net/ipv6/ip6_gre.c                                 |   6 +
 net/ipv6/ip6_vti.c                                 |   3 +
 net/ipv6/mcast.c                                   | 165 +++---
 net/ipv6/netfilter.c                               |   4 +-
 net/ipv6/netfilter/ip6t_ah.c                       |   5 +
 net/ipv6/netfilter/ip6t_hbh.c                      |   1 +
 net/ipv6/netfilter/ip6t_rt.c                       |   3 +-
 net/ipv6/netfilter/nf_conntrack_reasm.c            |   3 +-
 net/ipv6/route.c                                   |   9 +-
 net/ipv6/seg6.c                                    |   3 +
 net/ipv6/sit.c                                     |   3 +
 net/kcm/kcmsock.c                                  |   8 +-
 net/key/af_key.c                                   |   1 +
 net/llc/af_llc.c                                   |   1 +
 net/llc/llc_conn.c                                 |   1 -
 net/mac80211/main.c                                |   3 +-
 net/mac80211/tx.c                                  |  17 +-
 net/mac802154/iface.c                              |   6 +-
 net/netfilter/ipset/ip_set_core.c                  |  12 +-
 net/netfilter/ipset/ip_set_hash_gen.h              |  67 ++-
 net/netfilter/ipvs/ip_vs_app.c                     |  10 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |   4 +-
 net/netfilter/ipvs/ip_vs_core.c                    |  36 +-
 net/netfilter/ipvs/ip_vs_proto_sctp.c              |  18 +-
 net/netfilter/ipvs/ip_vs_proto_tcp.c               |  11 +-
 net/netfilter/ipvs/ip_vs_proto_udp.c               |   3 +-
 net/netfilter/ipvs/ip_vs_xmit.c                    |   6 +-
 net/netfilter/nf_conncount.c                       |  23 +-
 net/netfilter/nf_conntrack_core.c                  |  79 +--
 net/netfilter/nf_conntrack_ecache.c                |   2 +-
 net/netfilter/nf_conntrack_extend.c                |  32 +-
 net/netfilter/nf_conntrack_irc.c                   |   6 +-
 net/netfilter/nf_conntrack_netlink.c               |   2 +-
 net/netfilter/nf_conntrack_seqadj.c                |   2 +
 net/netfilter/nf_nat_core.c                        |  10 +
 net/netfilter/nf_nat_sip.c                         |  11 +
 net/netfilter/nf_queue.c                           |  14 +
 net/netfilter/nfnetlink_cthelper.c                 |   4 +-
 net/netfilter/nfnetlink_osf.c                      |   6 +-
 net/netfilter/nfnetlink_queue.c                    |   3 +
 net/netfilter/nft_compat.c                         |  24 +-
 net/netfilter/nft_log.c                            |  58 +--
 net/netfilter/nft_synproxy.c                       |   9 +-
 net/netfilter/xt_AUDIT.c                           |  58 +--
 net/netfilter/xt_cluster.c                         |   2 +-
 net/netfilter/xt_connmark.c                        |  14 +-
 net/netfilter/xt_nat.c                             |   9 +
 net/netfilter/xt_rateest.c                         |   2 +-
 net/netfilter/xt_u32.c                             |  12 +-
 net/openvswitch/conntrack.c                        |   2 +-
 net/openvswitch/flow_netlink.c                     | 201 +++++--
 net/phonet/af_phonet.c                             |   5 +-
 net/psample/psample.c                              |   6 +-
 net/qrtr/af_qrtr.c                                 |   2 +-
 net/rxrpc/recvmsg.c                                |   5 +-
 net/sched/act_api.c                                |  13 +-
 net/sched/act_bpf.c                                |   2 +-
 net/sched/act_ct.c                                 |   7 +-
 net/sched/act_pedit.c                              |  13 +-
 net/sched/cls_api.c                                |  25 +-
 net/sched/cls_bpf.c                                |  10 +-
 net/sched/cls_flow.c                               |  12 +-
 net/sched/sch_cake.c                               |   5 +-
 net/sched/sch_codel.c                              |  48 +-
 net/sched/sch_drr.c                                |   8 +-
 net/sched/sch_fq_codel.c                           |  41 +-
 net/sched/sch_hfsc.c                               |  24 +-
 net/sched/sch_hhf.c                                |  27 +
 net/sched/sch_htb.c                                |  14 +-
 net/sched/sch_multiq.c                             |   2 +-
 net/sched/sch_taprio.c                             |   2 +-
 net/sched/sch_teql.c                               | 126 +++--
 net/sctp/diag.c                                    |  67 ++-
 net/sctp/sm_make_chunk.c                           |  10 +-
 net/sctp/sm_statefuns.c                            |  23 +-
 net/sctp/socket.c                                  |  38 +-
 net/smc/smc_cdc.c                                  |  15 +-
 net/socket.c                                       |   2 +-
 net/sunrpc/clnt.c                                  |  19 +-
 net/sunrpc/svcsock.c                               |  10 +
 net/sunrpc/xdr.c                                   |  14 +-
 net/sunrpc/xprt.c                                  |  16 +
 net/sunrpc/xprtrdma/backchannel.c                  |   5 +-
 net/sunrpc/xprtrdma/frwr_ops.c                     |   2 +-
 net/sunrpc/xprtrdma/rpc_rdma.c                     | 172 ++++--
 net/sunrpc/xprtrdma/transport.c                    |  85 ++-
 net/sunrpc/xprtrdma/verbs.c                        | 167 ++++--
 net/sunrpc/xprtrdma/xprt_rdma.h                    |   7 +-
 net/sunrpc/xprtsock.c                              |  16 +-
 net/tipc/bcast.c                                   |  22 +-
 net/tipc/bcast.h                                   |   2 +-
 net/tipc/bearer.c                                  |   1 +
 net/tipc/core.c                                    |   5 +
 net/tipc/discover.c                                |  14 +-
 net/tipc/name_distr.c                              |  13 +-
 net/tipc/netlink.c                                 |  12 +
 net/tipc/node.c                                    |  15 +-
 net/tipc/socket.c                                  |   3 +
 net/tls/tls_sw.c                                   |  11 +
 net/wireless/nl80211.c                             |   2 +-
 net/xfrm/espintcp.c                                |  34 +-
 net/xfrm/xfrm_input.c                              |   6 +-
 net/xfrm/xfrm_interface_core.c                     |   3 +
 net/xfrm/xfrm_policy.c                             |  32 +-
 net/xfrm/xfrm_state.c                              |   2 +-
 net/xfrm/xfrm_user.c                               |  20 +-
 samples/trace_events/trace-events-sample.c         |   4 +
 scripts/kconfig/conf.c                             |   6 +-
 security/apparmor/apparmorfs.c                     |   9 +-
 security/apparmor/domain.c                         |  58 ++-
 security/apparmor/label.c                          |   2 +-
 security/apparmor/net.c                            |   2 +
 security/apparmor/policy.c                         |   5 +-
 security/apparmor/procattr.c                       |   2 +
 security/integrity/evm/evm_secfs.c                 |  16 +-
 security/keys/keyring.c                            |   2 +-
 security/selinux/hooks.c                           |  61 ++-
 sound/aoa/fabrics/layout.c                         |   6 +
 sound/core/init.c                                  |  11 +-
 sound/core/seq/seq_clientmgr.c                     |   1 +
 sound/core/seq/seq_memory.c                        |   4 +-
 sound/core/seq/seq_midi.c                          |  55 +-
 sound/firewire/isight.c                            |   3 +-
 sound/isa/gus/gus_pcm.c                            |   2 +
 sound/pci/cmipci.c                                 |   6 +
 sound/pci/es1938.c                                 |   2 +
 sound/pci/ice1712/aureon.c                         |   2 +
 sound/pci/ice1712/ice1712.c                        |   8 +
 sound/pci/ice1712/ice1724.c                        |   6 +
 sound/pci/ymfpci/ymfpci_main.c                     |   6 +
 sound/soc/codecs/adau1372.c                        |   5 +
 sound/soc/codecs/aw88261.c                         |  12 +-
 sound/soc/codecs/cs35l56.c                         |  14 +-
 sound/soc/codecs/hdac_hdmi.c                       |   4 +-
 sound/soc/codecs/tlv320aic3x.c                     |  25 +-
 sound/soc/fsl/fsl_asrc_dma.c                       |  20 +
 sound/soc/fsl/fsl_audmix.c                         |   6 +
 sound/soc/mediatek/mt8183/mt8183-afe-pcm.c         |  11 +
 sound/soc/mediatek/mt8192/mt8192-afe-pcm.c         |   9 +
 sound/soc/qcom/qdsp6/q6apm.c                       |   8 +
 sound/soc/sh/rcar/rsnd.h                           |   2 +-
 sound/soc/sof/ipc3-control.c                       |  79 ++-
 sound/soc/sof/ipc4-control.c                       |  11 +-
 sound/soc/sof/topology.c                           |   5 +-
 sound/soc/tegra/tegra210_ahub.c                    |   4 +-
 sound/usb/caiaq/input.c                            |   2 +-
 sound/usb/midi2.c                                  |   5 +
 sound/usb/mixer_quirks.c                           | 101 ++--
 sound/usb/mixer_scarlett.c                         |   4 +-
 sound/usb/mixer_us16x08.c                          | 127 +++--
 sound/virtio/virtio_pcm.c                          |   3 +-
 sound/virtio/virtio_pcm_ops.c                      |   3 +-
 tools/bpf/bpftool/net.c                            |   4 +-
 tools/include/linux/bitops.h                       |   2 +
 tools/include/uapi/linux/bpf.h                     |   1 +
 tools/lib/api/fs/fs.c                              |  19 +-
 tools/lib/bpf/libbpf.c                             |   9 +-
 tools/lib/bpf/strset.c                             |  62 ++-
 tools/lib/bpf/usdt.c                               |  16 +-
 tools/lib/symbol/kallsyms.c                        |   5 +-
 tools/mm/slabinfo.c                                |   6 +-
 tools/perf/builtin-annotate.c                      |   3 +-
 tools/perf/builtin-c2c.c                           |  20 +-
 tools/perf/builtin-diff.c                          |   3 +-
 tools/perf/builtin-report.c                        |   3 +-
 tools/perf/builtin-sched.c                         |  69 ++-
 tools/perf/tests/pmu-events.c                      |  24 +-
 tools/perf/trace/beauty/fcntl.c                    |  16 +
 tools/perf/util/bpf-event.c                        |  18 +-
 tools/perf/util/bpf-utils.c                        |  16 +
 tools/perf/util/cpumap.c                           |  28 +-
 tools/perf/util/cs-etm-base.c                      |   4 +-
 tools/perf/util/cs-etm-decoder/cs-etm-decoder.c    |  21 +-
 tools/perf/util/cs-etm.c                           | 522 ++++++++++++-------
 tools/perf/util/cs-etm.h                           |   8 +-
 tools/perf/util/event.c                            |  15 +-
 tools/perf/util/header.c                           |  54 ++
 tools/perf/util/hist.c                             |   7 +-
 .../util/intel-pt-decoder/intel-pt-insn-decoder.c  |  11 +-
 tools/perf/util/machine.c                          |  10 +-
 tools/perf/util/mmap.c                             |  18 +-
 tools/perf/util/pmu.c                              |  10 +-
 tools/perf/util/probe-finder.c                     |   4 +-
 tools/perf/util/symbol-elf.c                       |  48 +-
 tools/perf/util/symbol-minimal.c                   |  11 +-
 tools/perf/util/symbol.c                           |   2 +-
 tools/perf/util/thread.c                           |   5 +
 tools/power/x86/intel-speed-select/isst-daemon.c   |   9 +-
 tools/testing/cxl/test/cxl.c                       |   8 +-
 tools/testing/cxl/test/mem.c                       |   6 +-
 .../selftests/bpf/prog_tests/verifier_log.c        |   1 +
 .../selftests/bpf/progs/bpf_iter_task_vma.c        |   2 +-
 tools/testing/selftests/hid/Makefile               |  10 +-
 tools/testing/selftests/hid/hid_bpf.c              |  70 ++-
 tools/testing/selftests/hid/progs/hid.c            |  94 +++-
 .../testing/selftests/hid/progs/hid_bpf_helpers.h  |  84 ++-
 tools/testing/selftests/mm/compaction_test.c       |   3 +
 tools/testing/selftests/mm/hmm-tests.c             |  63 ++-
 tools/testing/selftests/net/tcp_mmap.c             |   4 +
 tools/usb/usbip/libsrc/usbip_common.c              |   2 +
 tools/usb/usbip/libsrc/usbip_device_driver.c       |   4 +
 tools/usb/usbip/libsrc/vhci_driver.c               |   1 +
 tools/virtio/vringh_test.c                         |   5 +
 virt/kvm/eventfd.c                                 |  12 +-
 virt/kvm/kvm_main.c                                |  16 +-
 1187 files changed, 14330 insertions(+), 8071 deletions(-)