6.6.148-rc1 review

Greg Kroah-Hartman dri-devel intel-gfx linux-patches lkml stable 1 version Jul 30 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Jul 30484 patches 17 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/484	platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug`drivers/platform/x86/intel/uncore-frequency/uncore-frequency-common.c`	+6 -1	0 replies
2/484	bpf: Fix ld_{abs,ind} failure path analysis in subprogs`kernel/bpf/verifier.c`	+17 -0	0 replies
3/484	selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs`tools/testing/selftests/bpf/progs/verifier_ld_ind.c`	+142 -0	0 replies
4/484	drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker`drivers/gpu/drm/virtio/virtgpu_kms.c` `drivers/gpu/drm/virtio/virtgpu_vq.c`	+4 -4	0 replies
5/484	platform/x86/amd/pmc: Dont log during intermediate wakeups`drivers/platform/x86/amd/pmc/pmc.c` `drivers/platform/x86/amd/pmc/pmc.h`	+32 -8	0 replies
6/484	platform/x86/amd/pmc: Avoid logging "(null)" for DMI values`drivers/platform/x86/amd/pmc/pmc.c`	+5 -5	0 replies
7/484	seqlock: Cure some more scoped_seqlock() optimization fails`include/linux/seqlock.h`	+2 -2	0 replies
8/484	seqlock: Allow KASAN to fail optimizing`include/linux/seqlock.h`	+4 -1	0 replies
9/484	seqlock: Allow UBSAN_ALIGNMENT to fail optimizing`include/linux/seqlock.h`	+4 -3	0 replies
10/484	KVM: x86: Check for invalid/obsolete root after making MMU pages available`arch/x86/kvm/mmu/mmu.c` `arch/x86/kvm/mmu/paging_tmpl.h`	+11 -8	0 replies
11/484	KVM: nVMX: Hide shadow VMCS right after VMCLEAR`arch/x86/kvm/vmx/nested.c`	+9 -2	0 replies
12/484	KVM: x86/mmu: Fix use-after-free on vendor module reload`arch/x86/kvm/mmu/mmu.c`	+2 -0	0 replies
13/484	can: bcm: add locking when updating filter and timer values`net/can/bcm.c`	+133 ~~-43~~	0 replies
14/484	can: bcm: fix CAN frame rx/tx statistics`net/can/bcm.c`	+45 ~~-22~~	0 replies
15/484	can: bcm: extend bcm_tx_lock usage for data and timer updates`net/can/bcm.c`	+75 ~~-29~~	0 replies
16/484	can: bcm: validate frame length in bcm_rx_setup() for RTR replies`net/can/bcm.c`	+41 ~~-18~~	0 replies
17/484	can: bcm: add missing device refcount for CAN filter removal`net/can/bcm.c`	+24 ~~-20~~	0 replies
18/484	can: bcm: fix stale rx/tx ops after device removal`net/can/bcm.c`	+44 ~~-10~~	0 replies
19/484	can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()`net/can/bcm.c`	+8 -5	0 replies
20/484	can: bcm: track a single source interface for ANYDEV timeout/throttle ops`net/can/bcm.c`	+44 -5	0 replies
21/484	can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER`net/can/isotp.c`	+59 ~~-29~~	0 replies
22/484	can: isotp: serialize TX state transitions under so->rx_lock`net/can/isotp.c`	+154 ~~-38~~	0 replies
23/484	dmaengine: sh: rz-dmac: Move interrupt request after everything is set up`drivers/dma/sh/rz-dmac.c`	+38 ~~-58~~	0 replies
24/484	accel/ivpu: Reject firmware log with size smaller than header`drivers/accel/ivpu/ivpu_fw_log.c`	+4 -0	0 replies
25/484	gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings`drivers/gpu/host1x/bus.c`	+2 -2	0 replies
26/484	xprtrdma: Clear receive-side ownership pointers on release`net/sunrpc/xprtrdma/rpc_rdma.c` `net/sunrpc/xprtrdma/verbs.c`	+14 -2	0 replies
27/484	Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()`drivers/input/misc/ims-pcu.c`	+26 -6	0 replies
28/484	Input: ims-pcu - fix logic error in packet reset`drivers/input/misc/ims-pcu.c`	+1 -1	0 replies
29/484	arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234`arch/arm64/boot/dts/nvidia/tegra234.dtsi`	+12 ~~-12~~	0 replies
30/484	IB/mad: Drop unmatched RMPP responses before reassembly`drivers/infiniband/core/mad.c`	+30 -0	0 replies
31/484	mtd: mtdswap: remove debugfs stats file on teardown`drivers/mtd/mtdswap.c`	+4 -1	0 replies
32/484	mtd: nand: mtk-ecc: stop on ECC idle timeouts`drivers/mtd/nand/ecc-mtk.c`	+12 -4	0 replies
33/484	btrfs: reject free space cache with more entries than pages`fs/btrfs/free-space-cache.c`	+3 -0	0 replies
34/484	btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()`fs/btrfs/relocation.c`	+1 -0	0 replies
35/484	firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()`drivers/firmware/arm_ffa/driver.c`	+1 -1	0 replies
36/484	RDMA/cma: Fix hardware address comparison length in netevent callback`drivers/infiniband/core/cma.c`	+1 -1	0 replies
37/484	RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device`drivers/infiniband/core/umem_dmabuf.c` `include/rdma/ib_umem.h`	+49 ~~-11~~	0 replies
38/484	RDMA/umem: Introduce an option to revoke DMABUF umem`drivers/infiniband/core/umem_dmabuf.c` `include/rdma/ib_umem.h`	+22 -2	0 replies
39/484	RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper`drivers/infiniband/core/umem_dmabuf.c`	+26 -9	0 replies
40/484	RDMA/umem: Move umem dmabuf revoke logic into helper function`drivers/infiniband/core/umem_dmabuf.c`	+17 -9	0 replies
41/484	RDMA/umem: Add pinned revocable dmabuf import interface`drivers/infiniband/core/umem_dmabuf.c` `include/rdma/ib_umem.h`	+80 -0	0 replies
42/484	RDMA/umem: Add helpers for umem dmabuf revoke lock`drivers/infiniband/core/umem_dmabuf.c` `include/rdma/ib_umem.h`	+20 -0	0 replies
43/484	RDMA/irdma: Prevent rereg_mr for non-mem regions`drivers/infiniband/hw/irdma/verbs.c`	+3 -0	0 replies
44/484	RDMA/erdma: initialize ret for empty receive WR lists`drivers/infiniband/hw/erdma/erdma_qp.c`	+1 -1	0 replies
45/484	RDMA/hns: Fix potential integer overflow in mhop hem cleanup`drivers/infiniband/hw/hns/hns_roce_hem.c`	+1 -1	0 replies
46/484	RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp`drivers/infiniband/sw/siw/siw_verbs.c`	+5 ~~-13~~	0 replies
47/484	RDMA/siw: publish QP after initialization`drivers/infiniband/sw/siw/siw_verbs.c`	+24 ~~-20~~	0 replies
48/484	mtd: fix double free and WARN_ON in add_mtd_device() error paths`drivers/mtd/mtdcore.c`	+19 -4	0 replies
49/484	selftests/alsa: Fix memory leak in find_controls error path`tools/testing/selftests/alsa/mixer-test.c`	+1 -0	0 replies
50/484	RDMA/irdma: Prevent overflows in memory contiguity checks`drivers/infiniband/hw/irdma/verbs.c`	+2 -2	0 replies
51/484	xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()`net/ipv6/xfrm6_policy.c`	+1 -0	0 replies
52/484	xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert`net/xfrm/xfrm_policy.c`	+2 -2	0 replies
53/484	wifi: cfg80211: cancel sched scan results work on unregister`net/wireless/core.c`	+1 -0	0 replies
54/484	wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()`drivers/net/wireless/intel/ipw2x00/ipw2100.c`	+4 -4	0 replies
55/484	wifi: mac80211_hwsim: clamp virtio RX length before skb_put`drivers/net/wireless/virtual/mac80211_hwsim.c`	+1 -0	0 replies
56/484	wifi: libertas: fix memory leak in helper_firmware_cb()`drivers/net/wireless/marvell/libertas/firmware.c`	+1 -0	0 replies
57/484	wifi: p54: validate RX frame length in p54_rx_eeprom_readback()`drivers/net/wireless/intersil/p54/txrx.c`	+8 -0	0 replies
58/484	wifi: nl80211: free RNR data on MBSSID mismatch`net/wireless/nl80211.c`	+3 -1	0 replies
59/484	wifi: nl80211: validate nested MBSSID IE blobs`net/wireless/nl80211.c`	+10 -2	0 replies
60/484	wifi: cfg80211: validate PMSR measurement type data`net/wireless/pmsr.c`	+17 -2	0 replies
61/484	wifi: cfg80211: validate PMSR FTM preamble range`net/wireless/nl80211.c`	+3 -1	0 replies
62/484	wifi: cfg80211: reject unsupported PMSR FTM location requests`net/wireless/pmsr.c`	+2 -0	0 replies
63/484	wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock`net/mac80211/iface.c`	+7 -1	0 replies
64/484	wifi: brcmfmac: initialize SDIO data work before cleanup`drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c`	+1 -1	0 replies
65/484	wifi: cfg80211: bound element ID read when checking non-inheritance`net/wireless/scan.c`	+1 -1	0 replies
66/484	ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop`sound/soc/meson/aiu-fifo-spdif.c`	+5 -0	0 replies
67/484	ASoC: amd: ps: fix wrong ACP version string in pci_request_regions()`sound/soc/amd/ps/pci-ps.c`	+1 -1	0 replies
68/484	ASoC: cs42l43: Correct report for forced microphone jack`sound/soc/codecs/cs42l43-jack.c`	+2 -1	0 replies
69/484	ASoC: tas2562: fix deprecated shut-down GPIO always cleared after lookup`sound/soc/codecs/tas2562.c`	+3 -2	0 replies
70/484	firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context`drivers/firmware/arm_scmi/notify.c`	+3 -3	0 replies
71/484	ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF`drivers/net/ppp/ppp_generic.c`	+15 -3	0 replies
72/484	ipv4: fib: free fib_alias with kfree_rcu() on insert error path`net/ipv4/fib_trie.c`	+1 -1	0 replies
73/484	net/iucv: take a reference on the socket found in afiucv_hs_rcv()`net/iucv/af_iucv.c`	+4 -0	0 replies
74/484	ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered`drivers/ata/sata_dwc_460ex.c`	+2 -3	0 replies
75/484	ata: sata_dwc_460ex: use platform_get_irq()`drivers/ata/sata_dwc_460ex.c`	+7 ~~-14~~	0 replies
76/484	ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts`drivers/ata/sata_dwc_460ex.c`	+1 -2	0 replies
77/484	ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning`drivers/ata/sata_dwc_460ex.c`	+2 -7	0 replies
78/484	ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC`sound/usb/quirks.c`	+2 -0	0 replies
79/484	Bluetooth: qca: fix NVM tag length underflow in TLV parser`drivers/bluetooth/btqca.c`	+1 -1	0 replies
80/484	Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync`net/bluetooth/mgmt.c`	+16 -0	0 replies
81/484	Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds`net/bluetooth/mgmt.c`	+22 -4	0 replies
82/484	Bluetooth: hci_qca: Clear memdump state on invalid dump size`drivers/bluetooth/hci_qca.c`	+4 -0	0 replies
83/484	smb/client: handle overlapping allocated ranges in fallocate`fs/smb/client/smb2ops.c`	+18 -7	0 replies
84/484	drm/i915/gt: use correct selftest config symbol`drivers/gpu/drm/i915/gt/intel_engine_user.c`	+1 -1	0 replies
85/484	sched/vtime: Get rid of generic vtime_task_switch() implementation`arch/powerpc/include/asm/cputime.h` `arch/powerpc/kernel/time.c` `kernel/sched/cputime.c`	+22 ~~-26~~	0 replies
86/484	powerpc/time: Prepare to stop elapsing in dynticks-idle`arch/powerpc/kernel/time.c` `include/linux/vtime.h`	+47 -0	0 replies
87/484	powerpc/vtime: Initialize starttime at boot for native accounting`arch/powerpc/kernel/time.c`	+3 -1	0 replies
88/484	bpf, sockmap: Reject unhashed UDP sockets on sockmap update`net/core/sock_map.c`	+2 -0	0 replies
89/484	can: j1939: fix lockless local-destination check`net/can/j1939/transport.c`	+14 -4	0 replies
90/484	ksmbd: pin conn during async oplock break notification`fs/smb/server/oplock.c`	+4 -2	0 replies
91/484	ksmbd: validate compound request size before reading StructureSize2`fs/smb/server/smb2misc.c`	+5 -0	0 replies
92/484	drm/i915/selftests: Fix GT PM sort comparators`drivers/gpu/drm/i915/gt/selftest_gt_pm.c`	+4 -4	0 replies
93/484	net/sched: act_tunnel_key: Defer dst_release to RCU callback`net/sched/act_tunnel_key.c`	+10 -4	0 replies
94/484	sctp: fix auth_hmacs array size in struct sctp_cookie`include/net/sctp/structs.h`	+2 -1	0 replies
95/484	mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n`net/mpls/af_mpls.c`	+3 -0	0 replies
96/484	wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()`drivers/net/wireless/atmel/at76c50x-usb.c`	+5 -2	0 replies
97/484	USB: storage: add NO_ATA_1X quirk for Longmai USB Key`drivers/usb/storage/unusual_devs.h`	+7 -0	0 replies
98/484	usb: chipidea: fix usage_count leak when autosuspend_delay is negative`drivers/usb/chipidea/core.c`	+1 -0	0 replies
99/484	usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback`drivers/usb/gadget/udc/dummy_hcd.c`	+27 ~~-13~~	0 replies
100/484	usb: gadget: f_midi: cancel pending IN work before freeing the midi object`drivers/usb/gadget/function/f_midi.c`	+1 -0	0 replies
101/484	usb: gadget: printer: fix infinite loop in printer_read()`drivers/usb/gadget/function/f_printer.c`	+18 -5	0 replies
102/484	USB: gadget: snps-udc: fix device name leak on probe failure`drivers/usb/gadget/udc/snps_udc_core.c`	+0 -1	0 replies
103/484	USB: gadget: fsl-udc: fix device name leak on probe failure`drivers/usb/gadget/udc/fsl_udc_core.c`	+0 -1	0 replies
104/484	usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()`drivers/usb/gadget/function/f_ncm.c`	+13 -4	0 replies
105/484	usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown`drivers/usb/gadget/udc/bdc/bdc_core.c` `drivers/usb/gadget/udc/bdc/bdc_udc.c`	+24 -3	0 replies
106/484	usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer`drivers/usb/gadget/function/uvc_v4l2.c`	+2 -0	0 replies
107/484	USB: serial: ftdi_sio: add support for E+H FXA291`drivers/usb/serial/ftdi_sio.c` `drivers/usb/serial/ftdi_sio_ids.h`	+7 -0	0 replies
108/484	USB: serial: io_edgeport: cap received transmit credits`drivers/usb/serial/io_edgeport.c`	+2 -1	0 replies
109/484	USB: serial: keyspan_pda: fix data loss on receive throttling`drivers/usb/serial/keyspan_pda.c`	+35 -9	0 replies
110/484	USB: serial: option: add TDTECH MT5710-CN`drivers/usb/serial/option.c`	+1 -0	0 replies
111/484	crypto: rsa-pkcs1pad: Dont WARN on an empty digest`crypto/rsa-pkcs1pad.c`	+1 -1	0 replies
112/484	Revert "drm/amd/display: Add missing kdoc for ALLM parameters"`drivers/gpu/drm/amd/display/modules/info_packet/info_packet.c`	+0 -2	0 replies
113/484	RISC-V: KVM: Serialize virtual interrupt pending state updates`arch/riscv/include/asm/kvm_host.h` `arch/riscv/kvm/aia.c` `arch/riscv/kvm/vcpu.c` +1 more	+85 ~~-32~~	0 replies
114/484	usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits`drivers/usb/host/xhci-pci.c` `drivers/usb/host/xhci.c` `drivers/usb/host/xhci.h`	+12 -5	0 replies
115/484	wifi: ath9k: hif_usb: dont dereference hif_dev after re-arming firmware request`drivers/net/wireless/ath/ath9k/hif_usb.c`	+1 -6	0 replies
116/484	wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin`drivers/net/wireless/ath/ath11k/qmi.c`	+8 -3	0 replies
117/484	hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop`drivers/hwmon/corsair-psu.c`	+1 -0	0 replies
118/484	hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop`drivers/hwmon/corsair-cpro.c`	+1 -0	0 replies
119/484	hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop`drivers/hwmon/nzxt-smart2.c`	+1 -1	0 replies
120/484	watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()`drivers/watchdog/watchdog_pretimeout.c`	+2 -0	0 replies
121/484	wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()`drivers/net/wireless/ath/ath11k/dp_rx.c`	+3 -0	0 replies
122/484	wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET`drivers/net/wireless/ath/ath11k/pci.c`	+4 -0	0 replies
123/484	wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET`drivers/net/wireless/ath/ath12k/pci.c`	+4 -0	0 replies
124/484	firewire: net: Fix fragmented datagram reassembly`drivers/firewire/net.c`	+21 ~~-18~~	0 replies
125/484	wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler`drivers/net/wireless/ath/ath6kl/wmi.c`	+12 -0	0 replies
126/484	wifi: ath6kl: fix OOB read from firmware IE lengths in connect event`drivers/net/wireless/ath/ath6kl/wmi.c`	+8 -0	0 replies
127/484	wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read`drivers/net/wireless/ath/carl9170/rx.c`	+2 -1	0 replies
128/484	wifi: carl9170: fix OOB read from off-by-two in TX status handler`drivers/net/wireless/ath/carl9170/tx.c`	+1 -1	0 replies
129/484	wifi: carl9170: fix buffer overflow in rx_stream failover path`drivers/net/wireless/ath/carl9170/rx.c`	+3 -1	0 replies
130/484	btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8`include/uapi/linux/btrfs.h`	+1 -1	0 replies
131/484	btrfs: free mapping node on duplicate reloc root insert`fs/btrfs/relocation.c`	+1 -0	0 replies
132/484	ASoC: tas2781: bound firmware description string parsing`sound/soc/codecs/tas2781-fmwlib.c`	+57 -6	0 replies
133/484	ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI`sound/soc/codecs/bt-sco.c`	+8 -2	0 replies
134/484	ASoC: cs35l56: Dont use devres to unregister component`sound/soc/codecs/cs35l56.c`	+5 -3	0 replies
135/484	ASoC: cs35l56: Fix potential probe() deadlock`sound/soc/codecs/cs35l56-i2c.c` `sound/soc/codecs/cs35l56-spi.c` `sound/soc/codecs/cs35l56.c`	+17 -6	0 replies
136/484	ASoC: cs35l56: Use complete_all() to signal init_completion`sound/soc/codecs/cs35l56.c`	+1 -1	0 replies
137/484	wifi: iwlwifi: mvm: validate SAR GEO response payload size`drivers/net/wireless/intel/iwlwifi/mvm/fw.c`	+10 -0	0 replies
138/484	wifi: iwlwifi: mvm: fix read in wake packet notification handler`drivers/net/wireless/intel/iwlwifi/mvm/d3.c`	+2 -1	0 replies
139/484	usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect`drivers/usb/atm/ueagle-atm.c`	+17 -0	0 replies
140/484	hwmon: (asus-ec-sensors) fix looping over banks while reading from EC`drivers/hwmon/asus-ec-sensors.c`	+1 -1	0 replies
141/484	hwmon: (asus-ec-sensors) fix EC read intervals`drivers/hwmon/asus-ec-sensors.c`	+4 -4	0 replies
142/484	hwmon: (asus-ec-sensors) add missed handle for ENOMEM`drivers/hwmon/asus-ec-sensors.c`	+5 -3	0 replies
143/484	smb: client: validate DFS referral PathConsumed`fs/smb/client/misc.c`	+25 -9	0 replies
144/484	hwmon: occ: validate poll response sensor blocks`drivers/hwmon/occ/common.c`	+30 -8	0 replies
145/484	Bluetooth: btusb: validate Realtek vendor event length`drivers/bluetooth/btusb.c`	+3 -1	0 replies
146/484	net/packet: avoid fanout hook re-registration after unregister`net/packet/af_packet.c`	+5 -1	0 replies
147/484	bonding: fix devconf_all NULL dereference when IPv6 is disabled`drivers/net/bonding/bond_main.c`	+2 -1	0 replies
148/484	rds: drop incoming messages that cross network namespace boundaries`net/rds/recv.c`	+15 -0	0 replies
149/484	dpaa2-switch: put MAC endpoint device on disconnect`drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c`	+1 -0	0 replies
150/484	dpaa2-eth: put MAC endpoint device on disconnect`drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c`	+1 -0	0 replies
151/484	iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()`drivers/iommu/amd/iommu.c`	+16 -6	0 replies
152/484	wifi: mac80211: tear down new links on vif update error path`net/mac80211/link.c`	+4 -0	0 replies
153/484	nfp: Check resource mutex allocation`drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c`	+3 -0	0 replies
154/484	wan: wanxl: Only reset hardware after BAR mapping`drivers/net/wan/wanxl.c`	+2 -1	0 replies
155/484	wifi: mwifiex: bound uAP association event IEs to the event buffer`drivers/net/wireless/marvell/mwifiex/uap_event.c`	+22 -2	0 replies
156/484	iommu/amd: Bound the early ACPI HID map`drivers/iommu/amd/init.c`	+6 -0	0 replies
157/484	iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()`drivers/iommu/intel/perf.c`	+1 -1	0 replies
158/484	wifi: mac80211: recalculate TIM when a station enters power save`net/mac80211/rx.c`	+2 -0	0 replies
159/484	pds_core: reject component parameter in legacy firmware update`drivers/net/ethernet/amd/pds_core/devlink.c`	+6 -0	0 replies
160/484	amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN`drivers/net/ethernet/amd/xgbe/xgbe-mdio.c`	+8 -3	0 replies
161/484	sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid`net/sctp/auth.c`	+1 -1	0 replies
162/484	pds_core: yield the CPU while waiting for the adminq to drain`drivers/net/ethernet/amd/pds_core/core.c`	+1 -0	0 replies
163/484	pds_core: order completion reads after the ownership check`drivers/net/ethernet/amd/pds_core/adminq.c`	+11 -1	0 replies
164/484	pds_core: fix auxiliary device add/del races`drivers/net/ethernet/amd/pds_core/auxbus.c`	+14 -3	0 replies
165/484	pds_core: check for workqueue allocation failure`drivers/net/ethernet/amd/pds_core/main.c`	+7 -2	0 replies
166/484	sctp: validate stream count in sctp_process_strreset_inreq()`net/sctp/stream.c`	+5 -1	0 replies
167/484	tls: device: push pending open record on splice EOF`net/tls/tls_device.c`	+4 -2	0 replies
168/484	selftest: af_unix: Add Kconfig file.`tools/testing/selftests/net/af_unix/config`	+3 -0	0 replies
169/484	selftests: af_unix: add USER_NS config`tools/testing/selftests/net/af_unix/config`	+1 -0	0 replies
170/484	selftests: openvswitch: add config file`tools/testing/selftests/net/openvswitch/config`	+16 -0	0 replies
171/484	gtp: check skb_pull_data() return in gtp1u_send_echo_resp()`drivers/net/gtp.c`	+3 -2	0 replies
172/484	nexthop: initialize extack in nh_res_bucket_migrate()`net/ipv4/nexthop.c`	+1 -1	0 replies
173/484	tipc: fix infinite loop in __tipc_nl_compat_dumpit`net/tipc/netlink_compat.c`	+4 -0	0 replies
174/484	wifi: mt76: mt7915: guard HE capability lookups`drivers/net/wireless/mediatek/mt76/mt7915/mcu.c`	+13 -5	0 replies
175/484	wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()`drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c`	+2 -0	0 replies
176/484	wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()`drivers/net/wireless/mediatek/mt76/mt7996/mcu.c`	+6 -3	0 replies
177/484	wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()`drivers/net/wireless/mediatek/mt76/mt7996/mcu.c`	+7 -3	0 replies
178/484	wifi: brcmfmac: fix 802.1X-SHA256 call trace warning`drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c`	+1 -1	0 replies
179/484	amt: re-read skb header pointers after every pull`drivers/net/amt.c`	+55 ~~-24~~	0 replies
180/484	amt: make the head writable before rewriting the L2 header`drivers/net/amt.c`	+8 -0	0 replies
181/484	net: bridge: vlan: fix vlan range dumps starting with pvid`net/bridge/br_netlink_tunnel.c` `net/bridge/br_private.h` `net/bridge/br_vlan.c` +1 more	+13 -9	0 replies
182/484	net: hsr: fix memory leak on slave unregistration by removing synced VLANs`net/hsr/hsr_slave.c`	+2 -0	0 replies
183/484	net: dpaa: fix mode setting`drivers/net/ethernet/freescale/fman/fman_dtsec.c`	+12 -5	0 replies
184/484	sctp: auth: verify auth requirement when auth_chunk is NULL`net/sctp/sm_statefuns.c`	+1 -1	0 replies
185/484	vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets`drivers/net/vmxnet3/vmxnet3_drv.c`	+16 -6	0 replies
186/484	iomap: correct the range of a partial dirty clear`fs/iomap/buffered-io.c`	+8 -4	0 replies
187/484	tipc: fix u16 MTU truncation in media and bearer MTU validation`net/tipc/netlink.c`	+5 -1	0 replies
188/484	net: stmmac: fix l3l4 filter rejecting unsupported offload requests`drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c`	+34 -0	0 replies
189/484	net: stmmac: reset residual action in L3L4 filters on delete`drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c`	+1 -0	0 replies
190/484	net: stmmac: enable the MAC on link up for all supported speeds`drivers/net/ethernet/stmicro/stmmac/stmmac_main.c`	+37 ~~-55~~	0 replies
191/484	octeontx2-vf: set TC flower flag on MCAM entry allocation`drivers/net/ethernet/marvell/octeontx2/nic/otx2_flows.c`	+1 -0	0 replies
192/484	ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup`net/ipv4/icmp.c`	+15 -3	0 replies
193/484	ppp: use IFF_NO_QUEUE in virtual interfaces`drivers/net/ppp/ppp_generic.c` `drivers/net/ppp/pppoe.c` `drivers/net/ppp/pptp.c` +2 more	+8 -2	0 replies
194/484	ppp: convert to percpu netstats`drivers/net/ppp/ppp_generic.c`	+19 ~~-33~~	0 replies
195/484	ppp: enable TX scatter-gather`drivers/net/ppp/ppp_generic.c`	+25 -5	0 replies
196/484	ppp: annotate data races in ppp_generic`drivers/net/ppp/ppp_generic.c`	+28 ~~-22~~	0 replies
197/484	hinic: remove unused ethtool RSS user configuration buffers`drivers/net/ethernet/huawei/hinic/hinic_dev.h` `drivers/net/ethernet/huawei/hinic/hinic_ethtool.c`	+0 ~~-23~~	0 replies
198/484	net: qrtr: restrict socket creation to the initial network namespace`net/qrtr/af_qrtr.c`	+8 -0	0 replies
199/484	net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule`drivers/net/ethernet/mellanox/mlx5/core/esw/acl/helper.c`	+1 -1	0 replies
200/484	net/mlx5e: Report zero bandwidth for non-ETS traffic classes`drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c`	+7 -0	0 replies
201/484	net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation`drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c`	+8 -0	0 replies
202/484	net: ipv6: fix dif and sdif mismatch in raw6_icmp_error`net/ipv6/raw.c`	+1 -1	0 replies
203/484	ice: fix LAG recipe to profile association`drivers/net/ethernet/intel/ice/ice_lag.c`	+1 -1	0 replies
204/484	bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()`net/ipv4/tcp_bpf.c`	+1 -1	0 replies
205/484	drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()`drivers/gpu/drm/rockchip/cdn-dp-reg.c`	+2 -0	0 replies
206/484	drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()`drivers/gpu/drm/bridge/cadence/cdns-dsi-core.c`	+6 -5	0 replies
207/484	drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers`drivers/gpu/drm/display/drm_dp_mst_topology.c`	+4 -2	0 replies
208/484	drm/dp/mst: fix buffer overflows in sideband chunk accumulation`drivers/gpu/drm/display/drm_dp_mst_topology.c`	+9 -0	0 replies
209/484	drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers`drivers/gpu/drm/display/drm_dp_mst_topology.c`	+4 ~~-13~~	0 replies
210/484	drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isnt at 0 (v2)`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+24 -9	0 replies
211/484	drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+11 -6	0 replies
212/484	drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT`drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c`	+18 -0	0 replies
213/484	drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1`drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c`	+5 -1	0 replies
214/484	drm/nouveau: fix reversed error cleanup order in ucopy functions`drivers/gpu/drm/nouveau/nouveau_exec.c` `drivers/gpu/drm/nouveau/nouveau_uvmm.c`	+4 -4	0 replies
215/484	drm/i915/gem: Add missing nospec on parallel submit slot`drivers/gpu/drm/i915/gem/i915_gem_context.c`	+1 -0	0 replies
216/484	drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()`drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c`	+1 -0	0 replies
217/484	drm/radeon: fix r100_copy_blit for large BOs`drivers/gpu/drm/radeon/r100.c`	+9 -4	0 replies
218/484	drm/amdkfd: Check bounds in allocate_event_notification_slot`drivers/gpu/drm/amd/amdkfd/kfd_events.c`	+3 -0	0 replies
219/484	drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c`	+6 -4	0 replies
220/484	drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference`drivers/gpu/drm/amd/display/dc/link/link_detection.c`	+4 -1	0 replies
221/484	drm/virtio: bound EDID block reads to the response buffer`drivers/gpu/drm/virtio/virtgpu_vq.c`	+2 -1	0 replies
222/484	drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()`drivers/gpu/drm/amd/amdgpu/sdma_v6_0.c`	+2 -2	0 replies
223/484	drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()`drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c`	+2 -2	0 replies
224/484	drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()`drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c`	+2 -2	0 replies
225/484	drm/i915: Return NULL on error in active_instance`drivers/gpu/drm/i915/i915_active.c`	+6 -1	0 replies
226/484	drm/i915/gem: Do not leak siblings[] on proto context error`drivers/gpu/drm/i915/gem/i915_gem_context.c`	+14 -8	0 replies
227/484	drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU`drivers/gpu/drm/i915/gem/i915_gem_context.c`	+1 -1	0 replies
228/484	drm/amdgpu: Fix VFCT bus number matching with soft filter`drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c`	+40 -5	0 replies
229/484	drm/amd/pm/ci: Dont disable MCLK DPM on Bonaire 0x6658 (R7 260X)`drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c`	+2 -5	0 replies
230/484	drm/amd/display: set new_stream to NULL after release`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c`	+1 -0	0 replies
231/484	drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved`drivers/gpu/drm/amd/amdgpu/amdgpu_object.c`	+8 -5	0 replies
232/484	drm/vmwgfx: Validate vmw_surface_metadata::array_size`drivers/gpu/drm/vmwgfx/vmwgfx_surface.c`	+17 -5	0 replies
233/484	drm/vc4: Prevent shader BO mappings from becoming writable`drivers/gpu/drm/vc4/vc4_bo.c`	+7 -3	0 replies
234/484	media: airspy: Return queued buffers on start_streaming() failure`drivers/media/usb/airspy/airspy.c`	+5 -3	0 replies
235/484	media: aspeed: fix missing of_reserved_mem_device_release() on probe failure`drivers/media/platform/aspeed/aspeed-video.c`	+1 -0	0 replies
236/484	media: cec: seco: unregister adapter on IR probe failure`drivers/media/cec/platform/seco/seco-cec.c`	+5 -1	0 replies
237/484	media: cedrus: clean up media device on probe failure`drivers/staging/media/sunxi/cedrus/cedrus.c`	+3 -2	0 replies
238/484	media: cedrus: Fix missing cleanup in error path`drivers/staging/media/sunxi/cedrus/cedrus.c`	+1 -0	0 replies
239/484	media: cedrus: skip invalid H.264 reference list entries`drivers/staging/media/sunxi/cedrus/cedrus_h264.c`	+3 -0	0 replies
240/484	media: cx231xx: fix devres lifetime`drivers/media/usb/cx231xx/cx231xx-cards.c`	+11 -5	0 replies
241/484	media: cx23885: add ioremap return check and cleanup`drivers/media/pci/cx23885/cx23885-core.c`	+12 -2	0 replies
242/484	media: marvell-cam: fix missing pci_disable_device() on remove`drivers/media/platform/marvell/cafe-driver.c`	+1 -0	0 replies
243/484	media: meson: vdec: Fix memory leak in error path of vdec_open`drivers/staging/media/meson/vdec/vdec.c`	+3 -1	0 replies
244/484	media: msi2500: Return queued buffers on start_streaming() failure`drivers/media/usb/msi2500/msi2500.c`	+24 -8	0 replies
245/484	media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe`drivers/media/platform/nxp/imx8-isi/imx8-isi-crossbar.c` `drivers/media/platform/nxp/imx8-isi/imx8-isi-pipe.c`	+2 -0	0 replies
246/484	media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure`drivers/media/platform/nxp/imx8-isi/imx8-isi-core.c`	+2 -0	0 replies
247/484	media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path`drivers/media/platform/nxp/imx8-isi/imx8-isi-pipe.c`	+4 -2	0 replies
248/484	media: nxp: imx8-isi: Fix potential out-of-bounds issues`drivers/media/platform/nxp/imx8-isi/imx8-isi-core.h` `drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c` `drivers/media/platform/nxp/imx8-isi/imx8-isi-pipe.c`	+32 -8	0 replies
249/484	media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding`drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c`	+8 -1	0 replies
250/484	media: pci: dm1105: Free allocated workqueue`drivers/media/pci/dm1105/dm1105.c`	+1 -0	0 replies
251/484	media: pwc: Drain fill_buf on start_streaming() failure`drivers/media/usb/pwc/pwc-if.c`	+5 -0	0 replies
252/484	media: pwc: Return queued buffers on start_streaming() failure`drivers/media/usb/pwc/pwc-if.c`	+6 -2	0 replies
253/484	media: radio-si476x: Unregister v4l2_device on probe failure`drivers/media/radio/radio-si476x.c`	+1 -0	0 replies
254/484	media: rtl2832: fix use-after-free in rtl2832_remove()`drivers/media/dvb-frontends/rtl2832.c`	+2 -2	0 replies
255/484	media: rtl2832_sdr: Return queued buffers on start_streaming() failure`drivers/media/dvb-frontends/rtl2832_sdr.c`	+14 -5	0 replies
256/484	media: saa7134: Fix a possible memory leak in saa7134_video_init1`drivers/media/pci/saa7134/saa7134-video.c`	+20 -5	0 replies
257/484	media: stm32: dcmi: unregister notifier on probe failure`drivers/media/platform/st/stm32/stm32-dcmi.c`	+1 -0	0 replies
258/484	media: sun4i-csi: Return queued buffers on start_streaming() failure`drivers/media/platform/sunxi/sun4i-csi/sun4i_dma.c`	+4 -2	0 replies
259/484	media: tegra-video: vi: fix invalid u32 return value in format lookup`drivers/staging/media/tegra-video/vi.c`	+2 -2	0 replies
260/484	media: ti: vpe: unwind v4l2 device registration on probe error`drivers/media/platform/ti/vpe/vpe.c`	+2 -1	0 replies
261/484	media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete()`drivers/media/v4l2-core/v4l2-ctrls-request.c`	+9 -5	0 replies
262/484	media: v4l2-ctrls: validate HEVC active reference counts`drivers/media/v4l2-core/v4l2-ctrls-core.c`	+13 -0	0 replies
263/484	media: vb2: use ssize_t for vb2_read/vb2_write`drivers/media/common/videobuf2/videobuf2-core.c` `include/media/videobuf2-core.h`	+10 ~~-10~~	0 replies
264/484	media: vidtv: fix reference leak on failed device registration`drivers/media/test-drivers/vidtv/vidtv_bridge.c`	+3 -1	0 replies
265/484	media: vimc: fix reference leak on failed device registration`drivers/media/test-drivers/vimc/vimc-core.c`	+1 -0	0 replies
266/484	media: vivid: add vivid_update_reduced_fps()`drivers/media/test-drivers/vivid/vivid-ctrls.c` `drivers/media/test-drivers/vivid/vivid-vid-cap.c` `drivers/media/test-drivers/vivid/vivid-vid-cap.h`	+22 ~~-14~~	0 replies
267/484	media: vivid: check for vb2_is_busy() when toggling caps`drivers/media/test-drivers/vivid/vivid-ctrls.c` `drivers/media/test-drivers/vivid/vivid-vid-cap.c` `drivers/media/test-drivers/vivid/vivid-vid-out.c`	+24 -0	0 replies
268/484	media: vpif_capture: fix OF node reference imbalance`drivers/media/platform/ti/davinci/vpif_capture.c`	+1 -1	0 replies
269/484	ALSA: seq: close a re-opened queue timer in the destructor`sound/core/seq/seq_timer.c`	+12 -1	0 replies
270/484	wifi: ath6kl: fix OOB access from firmware ADDBA window size`drivers/net/wireless/ath/ath6kl/txrx.c`	+6 -4	0 replies
271/484	wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper`drivers/net/wireless/marvell/mwifiex/tdls.c`	+1 -1	0 replies
272/484	wifi: wilc1000: validate assoc response length before subtracting header`drivers/net/wireless/microchip/wilc1000/hif.c`	+5 -0	0 replies
273/484	wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses`drivers/net/wireless/mediatek/mt76/mt7615/mac.c`	+6 -0	0 replies
274/484	wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses`drivers/net/wireless/mediatek/mt76/mt7921/mac.c`	+7 -3	0 replies
275/484	wifi: brcmfmac: make release_scratchbuffers idempotent`drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c`	+6 -2	0 replies
276/484	staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()`drivers/staging/rtl8723bs/core/rtw_ieee80211.c`	+8 -1	0 replies
277/484	staging: rtl8723bs: fix inverted HT40 secondary channel offset`drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c`	+1 -1	0 replies
278/484	Bluetooth: hci_sync: Protect UUID list traversal`net/bluetooth/hci_sync.c`	+11 -2	0 replies
279/484	Bluetooth: RFCOMM: Fix session UAF in set_termios`include/net/bluetooth/rfcomm.h` `net/bluetooth/rfcomm/core.c` `net/bluetooth/rfcomm/tty.c`	+23 -4	0 replies
280/484	exec: fix unsigned loop counter wrap in transfer_args_to_stack()`fs/exec.c`	+1 -1	0 replies
281/484	binfmt_misc: set have_execfd only once the interpreter is opened`fs/binfmt_misc.c`	+2 -3	0 replies
282/484	platform/loongarch: laptop: Explicitly reset bl_powered state when suspend`drivers/platform/loongarch/loongson-laptop.c`	+1 -0	0 replies
283/484	LoongArch: Fix oops during single-step debugging`arch/loongarch/kernel/kgdb.c`	+2 -1	0 replies
284/484	cdrom: fix stack out-of-bounds read in CDROMVOLCTRL`drivers/cdrom/cdrom.c`	+1 -0	0 replies
285/484	x86/boot/compressed: Disable jump tables`arch/x86/boot/compressed/Makefile`	+1 -0	0 replies
286/484	comedi: comedi_parport: deal with premature interrupt`drivers/comedi/drivers/comedi_parport.c`	+10 -3	0 replies
287/484	serial: sc16is7xx: implement gpio get_direction() callback`drivers/tty/serial/sc16is7xx.c`	+12 -0	0 replies
288/484	serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms`drivers/tty/serial/8250/8250_mid.c`	+9 -5	0 replies
289/484	mei: bus: access mei_device under device_lock on cleanup`drivers/misc/mei/bus.c`	+9 -7	0 replies
290/484	intel_th: fix MSC output device reference leak`drivers/hwtracing/intel_th/core.c` `drivers/hwtracing/intel_th/msu.c`	+2 ~~-10~~	0 replies
291/484	tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev`kernel/trace/trace_mmiotrace.c`	+1 -1	0 replies
292/484	tracing: Fix resource leak on mmiotrace trace_pipe close`kernel/trace/trace_mmiotrace.c`	+1 -1	0 replies
293/484	tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()`kernel/trace/trace_eprobe.c`	+2 -1	0 replies
294/484	tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()`kernel/trace/trace_probe.c`	+5 -4	0 replies
295/484	tracing/probes: Fix potential underflow in LEN_OR_ZERO macro`kernel/trace/trace_probe.c`	+1 -1	0 replies
296/484	tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()`kernel/trace/trace_probe.c`	+1 -1	0 replies
297/484	arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates`arch/arm64/kernel/ptrace.c`	+29 -0	0 replies
298/484	Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"`arch/arm64/kernel/ptrace.c`	+0 ~~-29~~	0 replies
299/484	mptcp: decrement subflows counter on failed passive join`net/mptcp/protocol.c`	+1 -0	0 replies
300/484	mptcp: only set DATA_FIN when a mapping is present`net/mptcp/options.c`	+6 -6	0 replies
301/484	sctp: dont free the ASCONFs own transport in DEL-IP processing`net/sctp/sm_make_chunk.c`	+6 -0	0 replies
302/484	ceph: add owner/capability checks for CEPH_IOC_SET_LAYOUT*`fs/ceph/ioctl.c`	+6 -0	1 reply
303/484	ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()`fs/ceph/caps.c`	+1 -0	0 replies
304/484	libceph: bound get_version reply decode to front len`net/ceph/mon_client.c`	+1 -1	0 replies
305/484	libceph: Fix multiplication overflow in decode_new_up_state_weight()`net/ceph/osdmap.c`	+4 -1	0 replies
306/484	libceph: guard missing CRUSH type name lookup`net/ceph/osdmap.c`	+4 -1	0 replies
307/484	libceph: refresh auth->authorizer_buf{,_len} after authorizer update`net/ceph/auth_x.c`	+8 -1	0 replies
308/484	libceph: Reject monmaps advertising zero monitors`net/ceph/mon_client.c`	+1 -1	0 replies
309/484	libceph: reject zero bucket types in crush_decode`net/ceph/osdmap.c`	+2 -0	0 replies
310/484	libceph: remove debugfs files before client teardown`net/ceph/ceph_common.c`	+2 -2	0 replies
311/484	binfmt_elf_fdpic: only honour the first PT_INTERP`fs/binfmt_elf_fdpic.c`	+4 -0	0 replies
312/484	fs: preserve ACL_DONT_CACHE state in forget_cached_acl()`fs/posix_acl.c`	+7 -0	0 replies
313/484	fscrypt: Add missing superblock check in find_or_insert_direct_key()`fs/crypto/keysetup_v1.c`	+7 -1	0 replies
314/484	ftrace: Add global mutex to serialize trace_parser access`kernel/trace/ftrace.c`	+13 -0	0 replies
315/484	iommu/vt-d: Disallow SVA if page walk is not coherent`drivers/iommu/intel/svm.c`	+1 -1	0 replies
316/484	phonet: pep: fix use-after-free in pep_get_sb()`net/phonet/pep.c`	+2 -0	0 replies
317/484	vxlan: require CAP_NET_ADMIN in the device netns for changelink`drivers/net/vxlan/vxlan_core.c`	+3 -0	0 replies
318/484	net: slip: serialize receive against buffer reallocation`drivers/net/slip/slip.c`	+4 -0	0 replies
319/484	geneve: require CAP_NET_ADMIN in the device netns for changelink`drivers/net/geneve.c`	+3 -0	0 replies
320/484	net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()`net/iucv/af_iucv.c`	+2 -1	0 replies
321/484	net/iucv: fix use-after-free of a severed iucv_path`net/iucv/af_iucv.c`	+14 -0	0 replies
322/484	net/x25: fix use-after-free in x25_kill_by_neigh()`net/x25/af_x25.c`	+6 -2	0 replies
323/484	net: hip04: fix RX buffer leak on build_skb failure`drivers/net/ethernet/hisilicon/hip04_eth.c`	+8 -3	0 replies
324/484	proc: Fix broken error paths for namespace links`fs/proc/namespaces.c`	+3 -1	0 replies
325/484	selftests/ftrace: Reset triggers at top level before instance loop`tools/testing/selftests/ftrace/ftracetest`	+1 -0	0 replies
326/484	rbd: Reset positive result codes to zero in object map update path`drivers/block/rbd.c`	+6 -1	0 replies
327/484	ksmbd: defer destroy_previous_session() until after NTLM authentication`fs/smb/server/smb2pdu.c`	+4 -5	0 replies
328/484	ice: use READ_ONCE() to access cached PHC time`drivers/net/ethernet/intel/ice/ice_ptp.c`	+1 -1	0 replies
329/484	ila: reload IPv6 header after pskb_may_pull in checksum adjust`net/ipv6/ila/ila_common.c`	+12 -0	0 replies
330/484	mac802154: hold an interface reference across the scan worker`net/mac802154/scan.c`	+11 -0	0 replies
331/484	mac802154: llsec: reject frames shorter than the authentication tag`net/mac802154/llsec.c`	+5 -0	0 replies
332/484	mctp: serial: handle zero-length frames to prevent rx buffer overflow`drivers/net/mctp/mctp-serial.c`	+1 -1	0 replies
333/484	pppoe: reload header pointer after dev_hard_header()`drivers/net/ppp/pppoe.c`	+1 -0	0 replies
334/484	tipc: clear sock->sk on the failed-insert path in tipc_sk_create()`net/tipc/socket.c`	+1 -0	0 replies
335/484	vxlan: mdb: Fix source list corruption on a failed replace`drivers/net/vxlan/vxlan_mdb.c`	+18 ~~-12~~	0 replies
336/484	drm/amd/pm: make pp_features read-only when scpm is enabled`drivers/gpu/drm/amd/pm/amdgpu_pm.c`	+5 -0	0 replies
337/484	drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()`drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c`	+5 -8	0 replies
338/484	drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()`drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c`	+5 -8	0 replies
339/484	drm/amdgpu/gfx8: drop unecessary BUG_ON()`drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c`	+0 -3	0 replies
340/484	drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()`drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c`	+4 -7	0 replies
341/484	drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()`drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c`	+5 -5	0 replies
342/484	drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()`drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c`	+2 -2	0 replies
343/484	drm/amdgpu/vce: fix integer overflow in image size`drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c`	+14 -3	0 replies
344/484	drm/amdgpu/vcn4: avoid rereading IB param length`drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c`	+9 -6	0 replies
345/484	drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()`drivers/gpu/drm/display/drm_dp_mst_topology.c`	+3 -1	0 replies
346/484	drm/amdgpu: fix division by zero with invalid uvd dimensions`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+8 -0	0 replies
347/484	drm/amdgpu: invoke pm_genpd_remove() before freeing genpd`drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c`	+2 -0	0 replies
348/484	drm/amdgpu: fix aperture mapping leak`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c` `drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c`	+16 ~~-22~~	0 replies
349/484	i40e: remove read access to debugfs files`drivers/net/ethernet/intel/i40e/i40e_debugfs.c`	+19 ~~-102~~	0 replies
350/484	ipv6: ndisc: fix NULL deref in accept_untracked_na()`net/ipv6/ndisc.c`	+3 -5	0 replies
351/484	net: qrtr: ns: Raise node count limit to 512`net/qrtr/ns.c`	+2 -2	0 replies
352/484	ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl`fs/smb/server/smbacl.c`	+7 -1	0 replies
353/484	ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL`fs/smb/server/smbacl.c`	+6 -1	0 replies
354/484	ksmbd: bound DACL dedup walk to copied ACEs`fs/smb/server/smbacl.c`	+10 -6	0 replies
355/484	ksmbd: validate ACE size against SID sub-authorities`fs/smb/server/smbacl.c`	+10 -3	0 replies
356/484	openvswitch: fix GSO userspace truncation underflow`net/openvswitch/actions.c` `net/openvswitch/datapath.c` `net/openvswitch/datapath.h` +1 more	+21 ~~-23~~	0 replies
357/484	fscrypt: Avoid dynamic allocation in fscrypt_get_devices()`fs/crypto/inline_crypt.c` `fs/f2fs/super.c` `include/linux/fscrypt.h`	+44 ~~-56~~	0 replies
358/484	exfat: validate cluster allocation bits of the allocation bitmap`fs/exfat/balloc.c`	+42 ~~-12~~	0 replies
359/484	drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources`drivers/gpu/drm/amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c`	+8 -1	0 replies
360/484	io_uring/rw: fix missing ERESTARTSYS conversion in read paths`io_uring/rw.c`	+19 -9	0 replies
361/484	net: pcs: xpcs: fix SGMII state reading`drivers/net/pcs/pcs-xpcs.c`	+7 ~~-25~~	0 replies
362/484	bpf: drop bpf_lsm_getselfattr from hook list`kernel/bpf/bpf_lsm.c`	+0 -1	0 replies
363/484	bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized`include/linux/bpf_lsm.h` `kernel/bpf/bpf_inode_storage.c` `security/bpf/hooks.c`	+16 -0	0 replies
364/484	iommu/amd: Dont split flush for amd_iommu_domain_flush_all()`drivers/iommu/amd/iommu.c`	+2 -1	0 replies
365/484	udmabuf: Do not create malformed scatterlists`drivers/dma-buf/udmabuf.c`	+5 -3	0 replies
366/484	dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning`drivers/dma-buf/udmabuf.c`	+2 -2	0 replies
367/484	fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()`drivers/fpga/dfl-afu-main.c`	+3 -0	0 replies
368/484	i2c: davinci: Unregister cpufreq notifier on probe failure`drivers/i2c/busses/i2c-davinci.c`	+3 -1	0 replies
369/484	VFS/audit: introduce kern_path_parent() for audit`fs/namei.c` `include/linux/namei.h` `kernel/audit.h` +2 more	+55 ~~-11~~	0 replies
370/484	audit: widen ino fields to u64`include/linux/audit.h` `kernel/audit.h` `kernel/audit_fsnotify.c` +2 more	+13 ~~-14~~	0 replies
371/484	audit: use unsigned int instead of unsigned`include/linux/audit.h` `include/linux/audit_arch.h` `kernel/audit.c` +5 more	+22 ~~-22~~	0 replies
372/484	audit: fix recursive locking deadlock in audit_dupe_exe()`kernel/audit.h` `kernel/audit_fsnotify.c` `kernel/audit_watch.c` +1 more	+57 ~~-26~~	0 replies
373/484	i2c: i801: fix hardware state machine corruption in error path`drivers/i2c/busses/i2c-i801.c`	+1 -1	0 replies
374/484	ALSA: hda: conexant: Remove mic bias threshold override`sound/pci/hda/patch_conexant.c`	+0 -3	0 replies
375/484	ALSA: hda: Fix cached processing coefficient verbs`sound/hda/hdac_regmap.c`	+2 -2	0 replies
376/484	serial: max310x: replace bare use of unsigned with unsigned int (checkpatch)`drivers/tty/serial/max310x.c`	+4 -4	0 replies
377/484	serial: max310x: implement gpio_chip::get_direction()`drivers/tty/serial/max310x.c`	+12 -0	0 replies
378/484	afs: Annotate struct afs_addr_list with __counted_by`fs/afs/internal.h`	+1 -1	0 replies
379/484	afs: Turn the afs_addr_list address array into an array of structs`fs/afs/addr_list.c` `fs/afs/fs_probe.c` `fs/afs/internal.h` +7 more	+26 ~~-22~~	0 replies
380/484	rxrpc: Pull out certain app callback funcs into an ops table`fs/afs/rxrpc.c` `include/net/af_rxrpc.h` `net/rxrpc/af_rxrpc.c` +3 more	+55 ~~-48~~	0 replies
381/484	rxrpc: serialize kernel accept preallocation with socket teardown`net/rxrpc/call_accept.c`	+19 -6	0 replies
382/484	fbcon: Rename struct fbcon_ops to struct fbcon_par`drivers/video/fbdev/core/bitblit.c` `drivers/video/fbdev/core/fbcon.c` `drivers/video/fbdev/core/fbcon.h` +7 more	+547 ~~-556~~	0 replies
383/484	fbcon: Use correct type for vc_resize() return value`drivers/video/fbdev/core/fbcon.c`	+1 -2	0 replies
384/484	tipc: restrict socket queue dumps in enqueue tracepoints`net/tipc/socket.c`	+3 -3	0 replies
385/484	rxrpc: Dont need barrier for ->tx_bottom and ->acks_hard_ack`net/rxrpc/sendmsg.c` `net/rxrpc/txbuf.c`	+7 -5	0 replies
386/484	rxrpc: Use irq-disabling spinlocks between app and I/O thread`net/rxrpc/af_rxrpc.c` `net/rxrpc/call_accept.c` `net/rxrpc/call_object.c` +8 more	+55 ~~-57~~	0 replies
387/484	rxrpc: Fix notification vs call-release vs recvmsg`include/trace/events/rxrpc.h` `net/rxrpc/call_object.c` `net/rxrpc/recvmsg.c`	+18 ~~-17~~	0 replies
388/484	rxrpc: Fix socket notification race`net/rxrpc/recvmsg.c`	+0 -2	0 replies
389/484	vduse: Use fixed 4KB bounce pages for non-4KB page size`drivers/vdpa/vdpa_user/iova_domain.c` `drivers/vdpa/vdpa_user/iova_domain.h`	+101 ~~-38~~	0 replies
390/484	vduse: remove unused vaddr parameter of vduse_domain_free_coherent`drivers/vdpa/vdpa_user/iova_domain.c` `drivers/vdpa/vdpa_user/iova_domain.h` `drivers/vdpa/vdpa_user/vduse_dev.c`	+3 -5	0 replies
391/484	vduse: take out allocations from vduse_dev_alloc_coherent`drivers/vdpa/vdpa_user/iova_domain.c` `drivers/vdpa/vdpa_user/iova_domain.h` `drivers/vdpa/vdpa_user/vduse_dev.c`	+19 ~~-24~~	0 replies
392/484	VDUSE: avoid leaking information to userspace`drivers/vdpa/vdpa_user/iova_domain.c` `drivers/vdpa/vdpa_user/vduse_dev.c`	+2 -2	0 replies
393/484	octeontx2: Annotate mmio regions as __iomem`drivers/net/ethernet/marvell/octeontx2/af/rvu.c` `drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`	+7 -8	0 replies
394/484	octeontx2-pf: clear stale mailbox IRQ state before request_irq()`drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`	+4 -4	0 replies
395/484	octeontx2-vf: clear stale mailbox IRQ state before request_irq()`drivers/net/ethernet/marvell/octeontx2/nic/otx2_vf.c`	+8 -5	0 replies
396/484	fbdev/efifb: Replace references to global screen_info by local pointer`drivers/video/fbdev/efifb.c`	+64 ~~-60~~	0 replies
397/484	fbdev: efifb: fix memory leak in efifb_probe()`drivers/video/fbdev/efifb.c`	+1 -0	0 replies
398/484	ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link`sound/soc/mediatek/mt8195/mt8195-afe-pcm.c` `sound/soc/mediatek/mt8195/mt8195-mt6359.c`	+29 ~~-45~~	0 replies
399/484	ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()`sound/soc/mediatek/mt8192/mt8192-afe-pcm.c`	+17 ~~-29~~	0 replies
400/484	ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()`sound/soc/mediatek/mt8192/mt8192-afe-pcm.c`	+22 ~~-43~~	0 replies
401/484	ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb`sound/soc/mediatek/mt6797/mt6797-afe-pcm.c` `sound/soc/mediatek/mt7986/mt7986-afe-pcm.c` `sound/soc/mediatek/mt8183/mt8183-afe-pcm.c` +3 more	+7 ~~-102~~	0 replies
402/484	ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable`sound/soc/mediatek/mt8192/mt8192-afe-pcm.c`	+9 ~~-10~~	0 replies
403/484	ASoC: mediatek: mt8192: Check runtime resume during probe`sound/soc/mediatek/mt8192/mt8192-afe-pcm.c`	+8 -4	0 replies
404/484	ASoC: mediatek: mt8183: Check runtime resume during probe`sound/soc/mediatek/mt8183/mt8183-afe-pcm.c`	+8 -4	0 replies
405/484	netfilter: nft_set_pipapo: use GFP_KERNEL for insertions`net/netfilter/nft_set_pipapo.c`	+10 -7	0 replies
406/484	netfilter: nft_set_pipapo: move prove_locking helper around`net/netfilter/nft_set_pipapo.c`	+11 ~~-11~~	0 replies
407/484	netfilter: nft_set_pipapo: make pipapo_clone helper return NULL`net/netfilter/nft_set_pipapo.c`	+7 -7	0 replies
408/484	netfilter: nft_set_pipapo: prepare walk function for on-demand clone`net/netfilter/nft_set_pipapo.c`	+39 ~~-21~~	0 replies
409/484	netfilter: nft_set_pipapo: merge deactivate helper into caller`net/netfilter/nft_set_pipapo.c`	+9 ~~-30~~	0 replies
410/484	netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone`net/netfilter/nft_set_pipapo.c`	+15 ~~-10~~	0 replies
411/484	netfilter: nft_set_pipapo: move cloning of match info to insert/removal path`net/netfilter/nft_set_pipapo.c`	+49 ~~-21~~	0 replies
412/484	netfilter: nft_set_pipapo: dont leak bad clone into future transaction`net/netfilter/nft_set_pipapo.c` `net/netfilter/nft_set_pipapo.h`	+37 -5	0 replies
413/484	lsm: infrastructure management of the sock security`include/linux/lsm_hooks.h` `security/apparmor/include/net.h` `security/apparmor/lsm.c` +8 more	+146 ~~-124~~	0 replies
414/484	selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()`security/selinux/hooks.c`	+10 -9	0 replies
415/484	netfilter: nf_conntrack_sip: remove net variable shadowing`net/netfilter/nf_conntrack_sip.c`	+1 -2	0 replies
416/484	netfilter: nf_conntrack_sip: validate skb_dst() before accessing it`net/netfilter/nf_conntrack_sip.c`	+5 -2	0 replies
417/484	netfilter: nf_tables: Remove unused nft_reduce_is_readonly()`include/net/netfilter/nf_tables.h`	+0 -5	0 replies
418/484	netfilter: nf_tables: remove register tracking infrastructure`include/net/netfilter/nf_tables.h` `include/net/netfilter/nft_fib.h` `include/net/netfilter/nft_meta.h` +49 more	+0 ~~-693~~	0 replies
419/484	netfilter: nft_fib: reject fib expression on the netdev egress hook`net/netfilter/nft_fib.c` `net/netfilter/nft_fib_netdev.c`	+37 -1	0 replies
420/484	NFSD: pass nfsd_file to nfsd_iter_read()`fs/nfsd/nfs4xdr.c` `fs/nfsd/vfs.c` `fs/nfsd/vfs.h`	+9 -8	0 replies
421/484	sunrpc: allocate a separate bvec array for socket sends`include/linux/sunrpc/svcsock.h` `net/sunrpc/svcsock.c`	+31 -9	0 replies
422/484	SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists`include/linux/sunrpc/xdr.h` `net/sunrpc/xdr.c`	+214 -0	0 replies
423/484	SUNRPC: Return an error from xdr_buf_to_bvec() on overflow`include/linux/sunrpc/xdr.h` `net/sunrpc/svcsock.c` `net/sunrpc/xdr.c`	+20 -9	0 replies
424/484	mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages`mm/mm_init.c`	+19 ~~-15~~	0 replies
425/484	mtd: maps: vmu-flash: fix fault in unaligned fixup`drivers/mtd/maps/vmu-flash.c`	+3 -5	0 replies
426/484	mtd: rawnand: Add a helper for calculating a page index`drivers/mtd/nand/raw/nand_base.c`	+11 -5	0 replies
427/484	mtd: rawnand: Ensure all continuous terms are always in sync`drivers/mtd/nand/raw/nand_base.c`	+14 -9	0 replies
428/484	mtd: rawnand: Pause continuous reads at block boundaries`drivers/mtd/nand/raw/nand_base.c`	+12 ~~-12~~	0 replies
429/484	taskstats: fill_stats_for_tgid: use for_each_thread()`kernel/taskstats.c`	+2 -3	0 replies
430/484	taskstats: retain dead thread stats in TGID queries`kernel/taskstats.c`	+33 ~~-29~~	0 replies
431/484	dma: dw-edma: Fix build warning in dw_edma_pcie_probe()`drivers/dma/dw-edma/dw-edma-pcie.c`	+33 ~~-29~~	0 replies
432/484	dmaengine: dw-edma: Fix confusing cleanup.h syntax`drivers/dma/dw-edma/dw-edma-pcie.c`	+2 -2	0 replies
433/484	dmaengine: dw-edma-pcie: Reject devices without driver data`drivers/dma/dw-edma/dw-edma-pcie.c`	+3 -0	0 replies
434/484	thunderbolt: Handle lane bonding of Gen 4 XDomain links properly`drivers/thunderbolt/tb.c` `drivers/thunderbolt/xdomain.c`	+48 -3	0 replies
435/484	thunderbolt: Remove usage of the deprecated ida_simple_xx() API`drivers/thunderbolt/domain.c` `drivers/thunderbolt/nhi.c` `drivers/thunderbolt/nvm.c` +2 more	+13 ~~-13~~	0 replies
436/484	thunderbolt: Update property.c function documentation`drivers/thunderbolt/property.c`	+28 ~~-10~~	0 replies
437/484	thunderbolt: Keep XDomain reference during the lifetime of a service`drivers/thunderbolt/xdomain.c`	+2 -1	0 replies
438/484	thunderbolt: Remove service debugfs entries during unregister`drivers/thunderbolt/xdomain.c`	+11 -3	0 replies
439/484	thunderbolt: Remove XDomain from the bus without holding tb->lock`drivers/thunderbolt/debugfs.c` `drivers/thunderbolt/domain.c` `drivers/thunderbolt/icm.c` +4 more	+115 ~~-50~~	0 replies
440/484	thunderbolt: Prevent XDomain delayed work use-after-free on disconnect`drivers/thunderbolt/xdomain.c`	+13 ~~-13~~	0 replies
441/484	platform/x86: dell-smbios: Move request functions for reuse`drivers/platform/x86/dell/dell-laptop.c` `drivers/platform/x86/dell/dell-smbios-base.c` `drivers/platform/x86/dell/dell-smbios.h`	+30 ~~-23~~	0 replies
442/484	platform/x86: dell-laptop: fix missing cleanups in init error path`drivers/platform/x86/dell/dell-laptop.c`	+5 -0	0 replies
443/484	i2c: imx: separate atomic, dma and non-dma use case`drivers/i2c/busses/i2c-imx.c`	+70 ~~-37~~	0 replies
444/484	i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)`drivers/i2c/busses/i2c-imx.c`	+16 -3	0 replies
445/484	nfs: remove dead code for the old swap over NFS implementation`fs/nfs/internal.h`	+1 -1	0 replies
446/484	NFS: Charge unstable writes by request size, not folio size`fs/nfs/internal.h` `fs/nfs/pnfs_nfs.c` `fs/nfs/write.c`	+16 ~~-12~~	0 replies
447/484	ovl: use linked upper dentry in copy-up tmpfile`fs/overlayfs/copy_up.c`	+10 -2	0 replies
448/484	dm-verity: avoid double increment of &use_bh_wq_enabled`drivers/md/dm-verity-target.c`	+2 -0	0 replies
449/484	dm-verity: make error counter atomic`drivers/md/dm-verity-target.c` `drivers/md/dm-verity.h`	+8 -6	0 replies
450/484	firmware_loader: introduce __free() cleanup hanler`include/linux/firmware.h`	+3 -0	0 replies
451/484	Input: ims-pcu - fix firmware leak in async update`drivers/input/misc/ims-pcu.c`	+2 -3	0 replies
452/484	workqueue: Factor out init_cpu_worker_pool()`kernel/workqueue.c`	+18 ~~-14~~	0 replies
453/484	workqueue: Add system_percpu_wq and system_dfl_wq`include/linux/workqueue.h` `kernel/workqueue.c`	+15 -7	0 replies
454/484	tracing/user_events: Fix use-after-free in user_event_mm_dup()`kernel/trace/trace_events_user.c`	+32 -7	0 replies
455/484	wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()`drivers/net/wireless/marvell/libertas_tf/main.c`	+1 -1	0 replies
456/484	mmc: vub300: fix use-after-free on disconnect`drivers/mmc/host/vub300.c`	+6 -6	4 replies
457/484	mmc: vub300: rename probe error labels`drivers/mmc/host/vub300.c`	+11 -9	0 replies
458/484	mmc: vub300: fix use-after-free on probe failure`drivers/mmc/host/vub300.c`	+7 -3	0 replies
459/484	locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()`kernel/locking/spinlock_rt.c`	+24 -3	0 replies
460/484	net: mana: Validate the packet length reported by the NIC`drivers/net/ethernet/microsoft/mana/mana_en.c`	+13 -0	0 replies
461/484	pinctrl: remove pinctrl_gpio_direction_output()`drivers/gpio/gpio-mvebu.c` `drivers/gpio/gpio-pxa.c` `drivers/gpio/gpio-tegra.c` +22 more	+67 ~~-55~~	0 replies
462/484	gpio: tegra: do not call pinctrl for GPIO direction`drivers/gpio/gpio-tegra.c`	+2 ~~-16~~	0 replies
463/484	net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink`net/ipv6/ip6_tunnel.c`	+3 -0	0 replies
464/484	gpio: mt7621: avoid corruption of shared interrupt trigger state`drivers/gpio/gpio-mt7621.c`	+2 -0	0 replies
465/484	octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF`drivers/net/ethernet/marvell/octeontx2/af/rvu.c` `drivers/net/ethernet/marvell/octeontx2/af/rvu.h` `drivers/net/ethernet/marvell/octeontx2/af/rvu_cn10k.c`	+11 -1	0 replies
466/484	bootconfig: do not put quotes on cmdline items unless necessary`init/main.c`	+9 -3	0 replies
467/484	bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c`include/linux/bootconfig.h` `init/main.c` `lib/bootconfig.c`	+59 ~~-45~~	0 replies
468/484	bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()`lib/bootconfig.c`	+16 -7	0 replies
469/484	ipmi: fix refcount leak in i_ipmi_request()`drivers/char/ipmi/ipmi_msghandler.c`	+8 -0	0 replies
470/484	octeontx2-pf: fix SQB pointer leak on init failure`drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`	+8 -9	0 replies
471/484	ata: libata-core: Reject an invalid concurrent positioning ranges count`drivers/ata/libata-core.c` `drivers/ata/libata-scsi.c` `drivers/ata/libata.h`	+27 -2	0 replies
472/484	net: macb: drop in-flight Tx SKBs on close`drivers/net/ethernet/cadence/macb_main.c`	+20 -2	0 replies
473/484	net: ipa: fix SMEM state handle leaks in SMP2P init`drivers/net/ipa/ipa_smp2p.c`	+22 -8	0 replies
474/484	fs/resctrl: Fix double-add of pseudo-locked regions RMID to free list`arch/x86/kernel/cpu/resctrl/rdtgroup.c`	+7 -5	0 replies
475/484	KVM: Introduce vcpu->wants_to_run`arch/arm64/kvm/arm.c` `arch/mips/kvm/mips.c` `arch/powerpc/kvm/powerpc.c` +5 more	+11 -7	0 replies
476/484	KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN`arch/x86/kvm/lapic.c`	+1 -1	0 replies
477/484	coredump: fix pidfs file refcount leak in umh_coredump_setup`fs/coredump.c`	+1 -0	0 replies
478/484	mm/damon/core: validate ranges in damon_set_regions()`mm/damon/core.c`	+6 -0	0 replies
479/484	mm/damon/core: disallow overlapping input ranges for damon_set_regions()`mm/damon/core.c`	+9 -2	0 replies
480/484	ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link`sound/soc/mediatek/mt8195/mt8195-mt6359.c`	+1 -0	0 replies
481/484	ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()`sound/soc/mediatek/mt8195/mt8195-mt6359.c`	+2 -2	0 replies
482/484	udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()`drivers/dma-buf/udmabuf.c`	+5 -4	0 replies
483/484	rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link`net/rxrpc/io_thread.c`	+4 -4	0 replies
484/484	KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug`arch/x86/kvm/svm/svm.c`	+6 -1	0 replies

Reviews trailers per patch

261 of 484 patches have a Reviewed-by or Acked-by.

Patch	Srinivas Pandruvada	Ilpo Järvinen	Hans de Goede	Frank Li	John Madieu	Tommaso Merciai	Karol Wachowski	Qu Wenruo	David Sterba	Johannes Thumshirn	Arnd Bergmann	Junxian Huang	Bernard Metzler	Florian Westphal	Christian Lamparter	Arend van Spriel	Martin Blumenstingl	Mario Limonciello (AMD)	Qingfang Deng	Ido Schimmel	Hidayath Khan	Salvador Blaya	Johan Hovold	Bartosz Golaszewski	Paul Menzel	Zijun Hu	David Hu	Cheng Xu	Victor Nogueira	Davide Caratti	David Ahern	Alan Stern	Peter Chen	Frederic Weisbecker	Nicholas Piggin	Michael Ellerman	Lukas Wunner	Shrikanth Hegde	Anup Patel	Toke Høiland-Jørgensen	Baochen Qiang	Rameshkumar Sundaram	[email protected]	Raj Kumar Bhagat	Christophe Leroy (CS GROUP)	Vasanthakumar Thiagarajan	Kuniyuki Iwashima	Jakub Sitnicki	John Fastabend	Oleksij Rempel	Namjae Jeon	ChenXiaoSong	Paulo Alcantara (Red Hat)	Willem de Bruijn	Hangbin Liu	Allison Henderson	Simon Horman	Ioana Ciornei	Vasant Hegde	Francesco Dolcini	Ankit Soni	Patrick Oppenlander	Xin Long	Eric Joyner	Pavan Chebbi	Brett Creeley	Nils Juenemann	Eelco Chaudron	Tung Nguyen	Lorenzo Bianconi	Salman S. Tahir	Stanislaw Gruszka	Taehee Yoo	Maxime Chevallier	Jakub Raczynski	Jacob Keller	Joe Damato	Cosmin Ratiu	Carolina Jubran	Michal Swiatkowski	Aleksandr Loktionov	Dave Ertman	Rinitha S	Emil Tsalapatis	Chaoyi Chen	Tomi Valkeinen	Luca Ceresoli	Lyude Paul	Christian König	Alex Deucher	Matthew Brost	Tvrtko Ursulin	Fernando Fernandez Mancera	Felix Maurer	David Yat Sin	Javier Martinez Canillas	Harry Wentland	Vitaly Prosyak	Sebastian Brzezinka	Maarten Lankhorst	Sean Anderson	Ronak Doshi	Sankararaman Jayaraman	Joanne Koong	Darrick J. Wong	Christoph Hellwig	Vadim Fedorenko	Andi Shyti	Paul Kocialkowski	Nicolas Dufresne	Jernej Skrabec	Chen-Yu Tsai	Laurent Pinchart	Yemike Abhilash Chandra	Marek Szyprowski	George Zhang	Maaz Mombasawala	Maíra Canal	Ard Biesheuvel	Andy Shevchenko	Menachem Adin	Jinjie Ruan	Matthieu Baerts (NGI0)	Xiubo Li	Viacheslav Dubeyko	Alex Markuze	Ilya Dryomov	Jori Koolstra	Luis Henriques	Kevin Tian	Samiullah Khawaja	Jason Gunthorpe	Alexandra Winter	David Hildenbrand (Arm)	Yao Zi	Xi Ruoyao	Martin Schiller	Eric Dumazet	Breno Leitao	Antoine Tenart	Nikolay Aleksandrov	Asad Kamal	David Rosca	Imre Deak	Leo Liu	Tao Zhou	Lijo Lazar	Dawid Osuchowski	Kunwu Chan	Jiayuan Chen	Magnus Lindholm	Ilya Maximets	Aaron Conole	[email protected]	Yuezhang Mo	Sungjong Seo	Fangzhi Zuo	Dan Wheeler	Jiawen Wu	Amery Hung	Wei Wang	Suravee Suthikulpanit	Vivek Kasireddy	Xu Yilun	Gustavo A. R. Silva	Sam Ravnborg	Thomas Zimmermann	Jeffrey Altman	Paul Moore	Jason Wang	Xie Yongji	Eugenio Pérez	Ratheesh Kannoth	Sui Jingfeng	Alexandre Mergnat	Stefano Brivio	Waiman Long	Richard Guy Briggs	Seesee	Kees Cook	John Johansen	Stephen Smalley	Linus Walleij	Hugo Villeneuve	Balbir Singh	Manivannan Sadhasivam	Carlos Song	Stefan Eichenberger	Sagi Grimberg	Amir Goldstein	Miklos Szeredi	Luis Chamberalin	Allen Pais	Jann Horn	Sebastian Andrzej Siewior	Al Viro	Haiyang Zhang	Jeff Layton	NeilBrown	Anna Schumaker	Mike Rapoport (Microsoft)	Oscar Salvador	Liam R. Howlett	Larysa Zaremba	Alex Elder	David Matlack	Sean Christopherson	Jim Mattson	James Houghton	Chao Gao	AngeloGioacchino Del Regno	Mikhail Gavrilov	Srikanth Aithal	K Prateek Nayak	Tom Lendacky	Niklas Cassel	Nicolai Buchwitz	Florian Fainelli	Peter Schneider	Miguel Ojeda	Brett A C Sheffield	Shuah Khan	Pavel Machek (CIP)	Wentao Guan	Mark Brown	Ron Economos
Series																																																																																																																																																																																																																										T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/484	A-b	R-b
2/484
3/484
4/484
5/484		R-b	R-b
6/484		R-b
7/484											T-b
8/484
9/484
10/484
11/484
12/484
13/484
14/484
15/484
16/484
17/484
18/484
19/484
20/484
21/484
22/484
23/484				R-b	T-b	T-b
24/484							R-b
25/484
26/484
27/484
28/484
29/484
30/484
31/484
32/484
33/484								R-b	R-b
34/484								R-b	R-b	R-b
35/484
36/484
37/484
38/484
39/484
40/484
41/484
42/484
43/484																											R-b
44/484																												R-b
45/484												R-b
46/484													A-b
47/484													A-b
48/484
49/484
50/484
51/484
52/484														R-b
53/484
54/484
55/484
56/484
57/484															A-b
58/484
59/484
60/484
61/484
62/484
63/484
64/484																A-b
65/484
66/484																	R-b
67/484																		R-b
68/484
69/484
70/484
71/484																			R-b
72/484																				R-b
73/484																					R-b
74/484
75/484
76/484
77/484
78/484																						T-b
79/484																							R-b	A-b
80/484
81/484
82/484																									R-b	R-b
83/484																																																				R-b
84/484
85/484																																		R-b	R-b	A-b
86/484																																						T-b R-b
87/484																																													R-b
88/484																																															R-b	R-b	R-b
89/484																																																		T-b A-b
90/484																																																			A-b
91/484																																																			A-b
92/484
93/484																													T-b	R-b
94/484
95/484																															R-b
96/484
97/484																																A-b
98/484				R-b
99/484																																R-b
100/484
101/484																																	R-b
102/484
103/484
104/484
105/484
106/484
107/484
108/484
109/484
110/484
111/484																																					R-b
112/484
113/484																																							R-b
114/484
115/484																																								A-b
116/484																																									R-b	R-b
117/484																																											T-b
118/484
119/484
120/484
121/484																																									R-b	R-b
122/484																																									R-b			R-b
123/484																																									R-b			R-b T-b
124/484
125/484
126/484																																														R-b
127/484															A-b
128/484															A-b
129/484															A-b
130/484								R-b	R-b
131/484								R-b
132/484
133/484
134/484
135/484																																																																							T-b
136/484
137/484
138/484
139/484																																																																								A-b
140/484
141/484
142/484
143/484																																																					R-b
144/484
145/484
146/484																																																						R-b
147/484																																																							R-b
148/484																																																								R-b T-b
149/484																																																									R-b
150/484																																																										R-b R-b
151/484																																																											R-b
152/484
153/484																																																									R-b
154/484
155/484																																																												R-b
156/484																																																													R-b
157/484
158/484
159/484																																																									R-b
160/484																																																														T-b
161/484																																																															A-b
162/484																																																																R-b	R-b
163/484																																																																R-b
164/484																																																																	R-b	R-b
165/484																																																																	R-b	R-b
166/484																																																															A-b
167/484																																																																			T-b
168/484
169/484																																															R-b
170/484																																																																				R-b
171/484
172/484																				R-b
173/484																																																																					R-b R-b
174/484																																																																						A-b
175/484
176/484
177/484
178/484																A-b
179/484																																																									R-b																R-b
180/484																																																									R-b																R-b
181/484																				R-b
182/484																																																																																													R-b	R-b
183/484																																																																																																					R-b R-b
184/484																																																															A-b
185/484																																																									R-b																																													R-b	R-b
186/484																																																																																																								R-b	R-b	R-b
187/484																																																									R-b																																																		R-b
188/484																																																																										R-b	R-b
189/484																																																																										R-b	R-b
190/484																																																																										R-b		R-b
191/484																																																									R-b
192/484																															R-b
193/484																																								R-b
194/484
195/484
196/484																			R-b
197/484																																																																													R-b
198/484
199/484																																																																														R-b
200/484																																																																	R-b														R-b
201/484																																																																	R-b														R-b
202/484																																																																													R-b
203/484																																																									R-b																							R-b	R-b	R-b	T-b
204/484																																																R-b																																				R-b
205/484																																																																																					R-b
206/484																																																																																						R-b	R-b
207/484																																																																																								R-b
208/484																																																																																								R-b
209/484																																																																																								R-b
210/484																																																																																									R-b
211/484																																																																																									R-b
212/484																																																																																									R-b
213/484																																																																																										R-b
214/484
215/484																																																																																											R-b	R-b
216/484
217/484																																																																																									A-b
218/484																																																																																															R-b
219/484																																																																																																R-b	R-b
220/484																		R-b
221/484
222/484																																																																																																		R-b
223/484																																																																																																		R-b
224/484																																																																																																		R-b
225/484																																																																																																			R-b	R-b
226/484																																																																																																				R-b
227/484																																																																																																				R-b								R-b
228/484																																																																																										R-b
229/484
230/484																																																																																																																				R-b
231/484																																																																																									R-b	R-b
232/484																																																																																																																					R-b
233/484																																																																																																																						R-b
234/484
235/484
236/484
237/484																																																																																																													R-b
238/484																																																																																																													A-b
239/484																																																																																																														R-b	A-b	T-b
240/484
241/484
242/484
243/484
244/484
245/484				R-b																																																																																																													R-b
246/484				R-b																																																																																																													R-b
247/484																																																																																																																	R-b
248/484				R-b																																																																																																													R-b
249/484																																																																																																																	R-b
250/484
251/484
252/484
253/484
254/484
255/484
256/484
257/484
258/484
259/484																																																																																							R-b
260/484																																																																																																																		R-b
261/484
262/484																																																																																																														R-b
263/484																																																																																																																			A-b
264/484
265/484
266/484																																																																																																														R-b
267/484																																																																																																														R-b
268/484
269/484
270/484																																														R-b
271/484																																																												R-b
272/484
273/484
274/484
275/484																A-b
276/484
277/484
278/484
279/484
280/484																																																																																																																																						R-b
281/484
282/484																																																																																																																																							T-b	T-b
283/484
284/484
285/484																																																																																																																							A-b
286/484
287/484																								A-b
288/484																																																																																																																								R-b
289/484																																																																																																																									R-b
290/484																							R-b
291/484
292/484
293/484
294/484
295/484
296/484
297/484																																																																																																																										R-b T-b
298/484
299/484																																																																																																																											R-b
300/484																																																																																																																											R-b
301/484																																																															A-b
302/484																																																																																																																												R-b
303/484																																																																																																																													R-b
304/484																																																																																																																													R-b
305/484																																																																																																																													R-b
306/484																																																																																																																													R-b
307/484																																																																																																																														R-b
308/484																																																																																																																															R-b
309/484																																																																																																																															R-b
310/484																																																																																																																													R-b
311/484																																																																																																																																R-b
312/484																																																																																																																																	R-b
313/484																																																																																																										R-b
314/484
315/484																																																																																																																																		R-b	R-b	R-b
316/484
317/484																																																																																													R-b
318/484
319/484																																																																																													R-b
320/484																																																																																																																																					R-b
321/484
322/484																																																																																																																																									A-b
323/484																																																																												R-b
324/484																																																																																																																																																							T-b
325/484
326/484																																																																																																																															R-b
327/484																																																			A-b
328/484																																																									R-b																										T-b
329/484																																																									R-b																																																																																			R-b
330/484
331/484																																																									R-b
332/484																																																									R-b
333/484																																																																																																											R-b																															R-b
334/484																																																									R-b												R-b																																																																						R-b
335/484																				R-b																																																																																																																								R-b	R-b
336/484																																																																																																																																														R-b
337/484																																																																																																		R-b
338/484																																																																																																		R-b
339/484																																																																																																		R-b
340/484																																																																																																		R-b
341/484																																																																																																		R-b
342/484																																																																																																		R-b
343/484																																																																																										R-b
344/484																																																																																																																																															R-b
345/484																																																																																																																																																A-b
346/484																																																																																										R-b																																																							R-b
347/484																																																																																																																																																		R-b
348/484																																																																																									R-b																																																										R-b
349/484																																																									R-b																								R-b		T-b																																																																	R-b	R-b
350/484																																																																																																																																																						R-b
351/484
352/484																																																			A-b	R-b
353/484																																																			A-b
354/484
355/484
356/484																																																																																																																																																								R-b	R-b
357/484																																																																																																										R-b
358/484																																																																																																																																																										T-b	R-b	R-b
359/484																																																																																																																																																													R-b	T-b
360/484
361/484																																																																										T-b R-b																																																																																					T-b
362/484
363/484																																																																																				R-b																																																																												R-b
364/484																																																											R-b																																																																								R-b	R-b																													R-b	R-b
365/484																																																																																																																																																																			R-b
366/484																																																																																																																																																																			A-b
367/484																																																																																																																																																																				R-b
368/484																								R-b
369/484
370/484																																																																																																																																																																									A-b
371/484
372/484																																																																																																																																																																																	A-b	A-b
373/484
374/484
375/484
376/484																																																																																																																								R-b
377/484																								R-b																																																																																																																																																															R-b	R-b
378/484																																																																																																																																																																					R-b
379/484
380/484
381/484
382/484																																																																																																																																																																						R-b
383/484																																																																																																																																																																							R-b
384/484																																																																					R-b
385/484
386/484
387/484																																																																																																																																																																								R-b
388/484
389/484
390/484
391/484																																																																																																																																																																										A-b
392/484																																																																																																																																																																											R-b	R-b
393/484
394/484																																																									R-b																																																																																																																				R-b
395/484																																																									R-b																																																																																																																				R-b
396/484																																																																																																R-b																																																																														T-b
397/484																																																																																																																																																																							R-b
398/484
399/484																																																																																																																R-b
400/484																																																																																																																R-b
401/484																																																																																																																																																																															R-b
402/484
403/484
404/484
405/484
406/484																																																																																																																																																																																R-b
407/484																																																																																																																																																																																R-b
408/484																																																																																																																																																																																R-b
409/484																																																																																																																																																																																R-b
410/484																																																																																																																																																																																R-b
411/484																																																																																																																																																																																R-b
412/484																																																																																																																																																																																R-b			Reported-and-tested-by
413/484																																																																																																																																																																									A-b											R-b	R-b	A-b
414/484																																																																																																																																																																																						R-b T-b
415/484
416/484
417/484																																																									R-b
418/484
419/484
420/484																																																																																																										R-b																																																																																												R-b	R-b
421/484																																																																																																																																																																																																							R-b
422/484																																																																																																																																																																																																						R-b		A-b
423/484																																																																																																																																																																																																						R-b
424/484																																																																																																																																						A-b																																																																			R-b	R-b	A-b
425/484
426/484
427/484
428/484
429/484
430/484																																																																																																																																																																																									A-b
431/484																																																																																																																																																																																										A-b
432/484																																																																																																																																																																																										R-b
433/484				R-b
434/484
435/484
436/484
437/484
438/484
439/484
440/484
441/484		R-b
442/484		R-b
443/484				R-b																																														A-b
444/484																																																		A-b																																																																																																																																									A-b	R-b
445/484																																																																																																																																																																																													R-b
446/484
447/484																																																																																																																																																																																														R-b	R-b
448/484
449/484
450/484																																																																																																																																																																																																A-b
451/484
452/484																																																																																																																																																																																																	T-b
453/484
454/484
455/484
456/484
457/484
458/484																							R-b
459/484																																																																																																																																																																																																		Decoded-by	R-b	A-b
460/484																																																																																																																																																																																																					R-b
461/484																																																																																																																																																																																							A-b
462/484
463/484																																															R-b
464/484
465/484
466/484
467/484
468/484
469/484
470/484																																																																																																																																																																													R-b
471/484																																																																																																																																																																																																																								R-b
472/484																																																																																																																																																																																																																									R-b
473/484																																																																																																																																																																																																												R-b	R-b
474/484
475/484
476/484																																																																																																																																																																																																														Debugged-by	Debugged-by	Debugged-by	Debugged-by R-b	R-b
477/484
478/484
479/484
480/484																																																																																																																																																																																																																			R-b
481/484																																																																																																																																																																																																																			R-b
482/484																																																																																																																																																																																																																				R-b
483/484
484/484																																																																																																																																																																																																																					T-b	R-b	R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 226 reviewers.

Read the v1 thread

Cover letter [PATCH 6.6 000/484] 6.6.148-rc1 review

This is the start of the stable review cycle for the 6.6.148 release. There are 484 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 01 Aug 2026 14:13:41 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.148-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.148-rc1

Nikunj A Dadhania <[email protected]>
KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug

David Howells <[email protected]>

    rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link

Robert Mader <[email protected]>
udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()

Julien Massot <[email protected]>
ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()

Chen-Yu Tsai <[email protected]>
ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link

SJ Park <[email protected]>
mm/damon/core: disallow overlapping input ranges for damon_set_regions()

SJ Park <[email protected]>
mm/damon/core: validate ranges in damon_set_regions()

Qian Zuo <[email protected]>
coredump: fix pidfs file refcount leak in umh_coredump_setup

Venkatesh Srinivas <[email protected]>
KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN

David Matlack <[email protected]>

    KVM: Introduce vcpu->wants_to_run

Reinette Chatre <[email protected]>
fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list

Haoxiang Li <[email protected]>
net: ipa: fix SMEM state handle leaks in SMP2P init

Théo Lebrun <[email protected]>
net: macb: drop in-flight Tx SKBs on close

Bryam Vargas <[email protected]>
ata: libata-core: Reject an invalid concurrent positioning ranges count

Dawei Feng <[email protected]>
octeontx2-pf: fix SQB pointer leak on init failure

Wentao Liang <[email protected]>
ipmi: fix refcount leak in i_ipmi_request()

Breno Leitao <[email protected]>
bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()

Breno Leitao <[email protected]>
bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c

Rasmus Villemoes <[email protected]>
bootconfig: do not put quotes on cmdline items unless necessary

Junrui Luo <[email protected]>
octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF

Sergio Paracuellos <[email protected]>
gpio: mt7621: avoid corruption of shared interrupt trigger state

Maoyi Xie <[email protected]>
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink

Runyu Xiao <[email protected]>
gpio: tegra: do not call pinctrl for GPIO direction

Bartosz Golaszewski <[email protected]>
pinctrl: remove pinctrl_gpio_direction_output()

Dexuan Cui <[email protected]>
net: mana: Validate the packet length reported by the NIC

Thomas Gleixner <[email protected]>
locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()

Guangshuo Li <[email protected]>
mmc: vub300: fix use-after-free on probe failure

Johan Hovold <[email protected]>
mmc: vub300: rename probe error labels

Johan Hovold <[email protected]>
mmc: vub300: fix use-after-free on disconnect

Maoyi Xie <[email protected]>
wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()

Michael Bommarito <[email protected]>
tracing/user_events: Fix use-after-free in user_event_mm_dup()

Marco Crivellari <[email protected]>
workqueue: Add system_percpu_wq and system_dfl_wq

Tejun Heo <[email protected]>
workqueue: Factor out init_cpu_worker_pool()

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix firmware leak in async update

Dmitry Torokhov <[email protected]>
firmware_loader: introduce __free() cleanup hanler

Mikulas Patocka <[email protected]>
dm-verity: make error counter atomic

Mikulas Patocka <[email protected]>
dm-verity: avoid double increment of &use_bh_wq_enabled

Souvik Banerjee <[email protected]>
ovl: use linked upper dentry in copy-up tmpfile

Benjamin Coddington <[email protected]>
NFS: Charge unstable writes by request size, not folio size

Christoph Hellwig <[email protected]>
nfs: remove dead code for the old swap over NFS implementation

Vincent Jardin <[email protected]>
i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)

Stefan Eichenberger <[email protected]>
i2c: imx: separate atomic, dma and non-dma use case

Haoxiang Li <[email protected]>
platform/x86: dell-laptop: fix missing cleanups in init error path

Lyndon Sanche <[email protected]>
platform/x86: dell-smbios: Move request functions for reuse

Michael Bommarito <[email protected]>
thunderbolt: Prevent XDomain delayed work use-after-free on disconnect

Mika Westerberg <[email protected]>

    thunderbolt: Remove XDomain from the bus without holding tb->lock

Mika Westerberg <[email protected]>
thunderbolt: Remove service debugfs entries during unregister

Mika Westerberg <[email protected]>
thunderbolt: Keep XDomain reference during the lifetime of a service

Alan Borzeszkowski <[email protected]>
thunderbolt: Update property.c function documentation

Christophe JAILLET <[email protected]>
thunderbolt: Remove usage of the deprecated ida_simple_xx() API

Gil Fine <[email protected]>
thunderbolt: Handle lane bonding of Gen 4 XDomain links properly

Koichiro Den <[email protected]>
dmaengine: dw-edma-pcie: Reject devices without driver data

Krzysztof Kozlowski <[email protected]>
dmaengine: dw-edma: Fix confusing cleanup.h syntax

Abinash Singh <[email protected]>
dma: dw-edma: Fix build warning in dw_edma_pcie_probe()

Yiyang Chen <[email protected]>
taskstats: retain dead thread stats in TGID queries

Oleg Nesterov <[email protected]>
taskstats: fill_stats_for_tgid: use for_each_thread()

Miquel Raynal <[email protected]>
mtd: rawnand: Pause continuous reads at block boundaries

Miquel Raynal <[email protected]>
mtd: rawnand: Ensure all continuous terms are always in sync

Miquel Raynal <[email protected]>
mtd: rawnand: Add a helper for calculating a page index

Florian Fuchs <[email protected]>
mtd: maps: vmu-flash: fix fault in unaligned fixup

Muchun Song <[email protected]>
mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages

Chuck Lever <[email protected]>
SUNRPC: Return an error from xdr_buf_to_bvec() on overflow

Chuck Lever <[email protected]>
SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists

Jeff Layton <[email protected]>
sunrpc: allocate a separate bvec array for socket sends

Mike Snitzer <[email protected]>
NFSD: pass nfsd_file to nfsd_iter_read()

Theodor Arsenij Larionov-Trichkine <[email protected]>
netfilter: nft_fib: reject fib expression on the netdev egress hook

Florian Westphal <[email protected]>
netfilter: nf_tables: remove register tracking infrastructure

Yue Haibing <[email protected]>
netfilter: nf_tables: Remove unused nft_reduce_is_readonly()

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_sip: validate skb_dst() before accessing it

Florian Westphal <[email protected]>
netfilter: nf_conntrack_sip: remove net variable shadowing

Tristan Madani <[email protected]>
selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()

Casey Schaufler <[email protected]>
lsm: infrastructure management of the sock security

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: don't leak bad clone into future transaction

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: move cloning of match info to insert/removal path

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: merge deactivate helper into caller

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: prepare walk function for on-demand clone

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: make pipapo_clone helper return NULL

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: move prove_locking helper around

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: use GFP_KERNEL for insertions

Cássio Gabriel <[email protected]>
ASoC: mediatek: mt8183: Check runtime resume during probe

Cássio Gabriel <[email protected]>
ASoC: mediatek: mt8192: Check runtime resume during probe

Tang Bin <[email protected]>
ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable

AngeloGioacchino Del Regno <[email protected]>
ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb

AngeloGioacchino Del Regno <[email protected]>
ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()

AngeloGioacchino Del Regno <[email protected]>
ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()

AngeloGioacchino Del Regno <[email protected]>
ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link

Abdun Nihaal <[email protected]>
fbdev: efifb: fix memory leak in efifb_probe()

Thomas Zimmermann <[email protected]>
fbdev/efifb: Replace references to global screen_info by local pointer

Runyu Xiao <[email protected]>
octeontx2-vf: clear stale mailbox IRQ state before request_irq()

Runyu Xiao <[email protected]>
octeontx2-pf: clear stale mailbox IRQ state before request_irq()

Subbaraya Sundeep <[email protected]>
octeontx2: Annotate mmio regions as __iomem

Jason Wang <[email protected]>
VDUSE: avoid leaking information to userspace

Eugenio Pérez <[email protected]>
vduse: take out allocations from vduse_dev_alloc_coherent

Eugenio Pérez <[email protected]>
vduse: remove unused vaddr parameter of vduse_domain_free_coherent

Sheng Zhao <[email protected]>
vduse: Use fixed 4KB bounce pages for non-4KB page size

David Howells <[email protected]>
rxrpc: Fix socket notification race

David Howells <[email protected]>
rxrpc: Fix notification vs call-release vs recvmsg

David Howells <[email protected]>
rxrpc: Use irq-disabling spinlocks between app and I/O thread

David Howells <[email protected]>

    rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack

Li Xiasong <[email protected]>
tipc: restrict socket queue dumps in enqueue tracepoints

Jiacheng Yu <[email protected]>
fbcon: Use correct type for vc_resize() return value

Thomas Zimmermann <[email protected]>
fbcon: Rename struct fbcon_ops to struct fbcon_par

Li Daming <[email protected]>
rxrpc: serialize kernel accept preallocation with socket teardown

David Howells <[email protected]>
rxrpc: Pull out certain app callback funcs into an ops table

David Howells <[email protected]>
afs: Turn the afs_addr_list address array into an array of structs

Kees Cook <[email protected]>
afs: Annotate struct afs_addr_list with __counted_by

Tapio Reijonen <[email protected]>

    serial: max310x: implement gpio_chip::get_direction()

Hugo Villeneuve <[email protected]>

    serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch)

Xu Rao <[email protected]>
ALSA: hda: Fix cached processing coefficient verbs

Zhang Heng <[email protected]>
ALSA: hda: conexant: Remove mic bias threshold override

Mingyu Wang <[email protected]>
i2c: i801: fix hardware state machine corruption in error path

Ricardo Robaina <[email protected]>
audit: fix recursive locking deadlock in audit_dupe_exe()

Ricardo Robaina <[email protected]>
audit: use 'unsigned int' instead of 'unsigned'

Jeff Layton <[email protected]>
audit: widen ino fields to u64

NeilBrown <[email protected]>
VFS/audit: introduce kern_path_parent() for audit

Haoxiang Li <[email protected]>
i2c: davinci: Unregister cpufreq notifier on probe failure

Sebastian Alba Vives <[email protected]>
fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()

Mikhail Gavrilov <[email protected]>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning

Jason Gunthorpe <[email protected]>
udmabuf: Do not create malformed scatterlists

Weinan Liu <[email protected]>
iommu/amd: Don't split flush for amd_iommu_domain_flush_all()

Matt Bobrowski <[email protected]>
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

Wentao Guan <[email protected]>
bpf: drop bpf_lsm_getselfattr from hook list

Coia Prant <[email protected]>
net: pcs: xpcs: fix SGMII state reading

Yitang Yang <[email protected]>
io_uring/rw: fix missing ERESTARTSYS conversion in read paths

Harry Wentland <[email protected]>
drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources

Namjae Jeon <[email protected]>
exfat: validate cluster allocation bits of the allocation bitmap

Eric Biggers <[email protected]>
fscrypt: Avoid dynamic allocation in fscrypt_get_devices()

Kyle Zeng <[email protected]>
openvswitch: fix GSO userspace truncation underflow

Namjae Jeon <[email protected]>
ksmbd: validate ACE size against SID sub-authorities

Namjae Jeon <[email protected]>
ksmbd: bound DACL dedup walk to copied ACEs

Wentao Guan <[email protected]>
ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL

Haofeng Li <[email protected]>
ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl

Youssef Samir <[email protected]>
net: qrtr: ns: Raise node count limit to 512

Weiming Shi <[email protected]>
ipv6: ndisc: fix NULL deref in accept_untracked_na()

Jacob Keller <[email protected]>
i40e: remove read access to debugfs files

Asad Kamal <[email protected]>
drm/amdgpu: fix aperture mapping leak

Ce Sun <[email protected]>
drm/amdgpu: invoke pm_genpd_remove() before freeing genpd

Boyuan Zhang <[email protected]>
drm/amdgpu: fix division by zero with invalid uvd dimensions

Luca Coelho <[email protected]>
drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()

Boyuan Zhang <[email protected]>
drm/amdgpu/vcn4: avoid rereading IB param length

Boyuan Zhang <[email protected]>
drm/amdgpu/vce: fix integer overflow in image size

Alex Deucher <[email protected]>

    drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()

Alex Deucher <[email protected]>
drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()

Alex Deucher <[email protected]>

    drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()

Alex Deucher <[email protected]>
drm/amdgpu/gfx8: drop unecessary BUG_ON()

Alex Deucher <[email protected]>
drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()

Alex Deucher <[email protected]>
drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()

Yang Wang <[email protected]>
drm/amd/pm: make pp_features read-only when scpm is enabled

James Raphael Tiovalen <[email protected]>
vxlan: mdb: Fix source list corruption on a failed replace

Daehyeon Ko <[email protected]>

    tipc: clear sock->sk on the failed-insert path in tipc_sk_create()

Asim Viladi Oglu Manizada <[email protected]>
pppoe: reload header pointer after dev_hard_header()

Doruk Tan Ozturk <[email protected]>
mctp: serial: handle zero-length frames to prevent rx buffer overflow

Doruk Tan Ozturk <[email protected]>
mac802154: llsec: reject frames shorter than the authentication tag

Ibrahim Hashimov <[email protected]>
mac802154: hold an interface reference across the scan worker

Michael Bommarito <[email protected]>
ila: reload IPv6 header after pskb_may_pull in checksum adjust

Sergey Temerkhanov <[email protected]>
ice: use READ_ONCE() to access cached PHC time

James Montgomery <[email protected]>
ksmbd: defer destroy_previous_session() until after NTLM authentication

Raphael Zimmer <[email protected]>
rbd: Reset positive result codes to zero in object map update path

Masami Hiramatsu (Google) <[email protected]>
selftests/ftrace: Reset triggers at top level before instance loop

Jann Horn <[email protected]>
proc: Fix broken error paths for namespace links

Fan Wu <[email protected]>
net: hip04: fix RX buffer leak on build_skb failure

David Lee <[email protected]>

    net/x25: fix use-after-free in x25_kill_by_neigh()

Bryam Vargas <[email protected]>
net/iucv: fix use-after-free of a severed iucv_path

Hidayath Khan <[email protected]>
net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()

Doruk Tan Ozturk <[email protected]>
geneve: require CAP_NET_ADMIN in the device netns for changelink

Sungmin Kang <[email protected]>
net: slip: serialize receive against buffer reallocation

Doruk Tan Ozturk <[email protected]>
vxlan: require CAP_NET_ADMIN in the device netns for changelink

Breno Leitao <[email protected]>
phonet: pep: fix use-after-free in pep_get_sb()

Lu Baolu <[email protected]>
iommu/vt-d: Disallow SVA if page walk is not coherent

Tengda Wu <[email protected]>
ftrace: Add global mutex to serialize trace_parser access

Eric Biggers <[email protected]>
fscrypt: Add missing superblock check in find_or_insert_direct_key()

Amir Goldstein <[email protected]>
fs: preserve ACL_DONT_CACHE state in forget_cached_acl()

Christian Brauner <[email protected]>
binfmt_elf_fdpic: only honour the first PT_INTERP

Douya Le <[email protected]>
libceph: remove debugfs files before client teardown

Douya Le <[email protected]>
libceph: reject zero bucket types in crush_decode

Raphael Zimmer <[email protected]>
libceph: Reject monmaps advertising zero monitors

Shuangpeng Bai <[email protected]>

    libceph: refresh auth->authorizer_buf{,_len} after authorizer update

Zhao Zhang <[email protected]>
libceph: guard missing CRUSH type name lookup

Raphael Zimmer <[email protected]>
libceph: Fix multiplication overflow in decode_new_up_state_weight()

Douya Le <[email protected]>
libceph: bound get_version reply decode to front len

Bryam Vargas <[email protected]>
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()

Max Kellermann <[email protected]>
ceph: add owner/capability checks for CEPH_IOC_SET_LAYOUT*

Jun Yang <[email protected]>
sctp: don't free the ASCONF's own transport in DEL-IP processing

Michael Bommarito <[email protected]>
mptcp: only set DATA_FIN when a mapping is present

Chenguang Zhao <[email protected]>
mptcp: decrement subflows counter on failed passive join

Will Deacon <[email protected]>
Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"

Will Deacon <[email protected]>
arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates

Masami Hiramatsu (Google) <[email protected]>
tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()

Masami Hiramatsu (Google) <[email protected]>
tracing/probes: Fix potential underflow in LEN_OR_ZERO macro

Masami Hiramatsu (Google) <[email protected]>
tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()

Masami Hiramatsu (Google) <[email protected]>
tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()

deepakraog <[email protected]>
tracing: Fix resource leak on mmiotrace trace_pipe close

Steven Rostedt <[email protected]>

    tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev

Guangshuo Li <[email protected]>
intel_th: fix MSC output device reference leak

Alexander Usyskin <[email protected]>
mei: bus: access mei_device under device_lock on cleanup

Jiangshan Yi <[email protected]>
serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms

Hugo Villeneuve <[email protected]>
serial: sc16is7xx: implement gpio get_direction() callback

Ian Abbott <[email protected]>
comedi: comedi_parport: deal with premature interrupt

Nathan Chancellor <[email protected]>
x86/boot/compressed: Disable jump tables

Xu Rao <[email protected]>
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL

Haoran Jiang <[email protected]>
LoongArch: Fix oops during single-step debugging

Zixing Liu <[email protected]>
platform/loongarch: laptop: Explicitly reset bl_powered state when suspend

Christian Brauner <[email protected]>
binfmt_misc: set have_execfd only once the interpreter is opened

Christian Brauner <[email protected]>
exec: fix unsigned loop counter wrap in transfer_args_to_stack()

Chengfeng Ye <[email protected]>
Bluetooth: RFCOMM: Fix session UAF in set_termios

Chengfeng Ye <[email protected]>
Bluetooth: hci_sync: Protect UUID list traversal

MinJea Kim <[email protected]>
staging: rtl8723bs: fix inverted HT40 secondary channel offset

Moksh Panicker <[email protected]>
staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()

Fan Wu <[email protected]>
wifi: brcmfmac: make release_scratchbuffers idempotent

Devin Wittmayer <[email protected]>
wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses

Devin Wittmayer <[email protected]>
wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses

Huihui Huang <[email protected]>
wifi: wilc1000: validate assoc response length before subtracting header

Doruk Tan Ozturk <[email protected]>
wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper

Tristan Madani <[email protected]>
wifi: ath6kl: fix OOB access from firmware ADDBA window size

Norbert Szetei <[email protected]>
ALSA: seq: close a re-opened queue timer in the destructor

Johan Hovold <[email protected]>
media: vpif_capture: fix OF node reference imbalance

Hans Verkuil <[email protected]>
media: vivid: check for vb2_is_busy() when toggling caps

Hans Verkuil <[email protected]>
media: vivid: add vivid_update_reduced_fps()

Guangshuo Li <[email protected]>
media: vimc: fix reference leak on failed device registration

Guangshuo Li <[email protected]>
media: vidtv: fix reference leak on failed device registration

Zile Xiong <[email protected]>
media: vb2: use ssize_t for vb2_read/vb2_write

Pengpeng Hou <[email protected]>
media: v4l2-ctrls: validate HEVC active reference counts

Sergey Shtylyov <[email protected]>
media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete()

Myeonghun Pak <[email protected]>
media: ti: vpe: unwind v4l2 device registration on probe error

Hungyu Lin <[email protected]>
media: tegra-video: vi: fix invalid u32 return value in format lookup

Valery Borovsky <[email protected]>
media: sun4i-csi: Return queued buffers on start_streaming() failure

Myeonghun Pak <[email protected]>
media: stm32: dcmi: unregister notifier on probe failure

Ma Ke <[email protected]>
media: saa7134: Fix a possible memory leak in saa7134_video_init1

Valery Borovsky <[email protected]>
media: rtl2832_sdr: Return queued buffers on start_streaming() failure

Deepanshu Kartikey <[email protected]>

    media: rtl2832: fix use-after-free in rtl2832_remove()

Myeonghun Pak <[email protected]>
media: radio-si476x: Unregister v4l2_device on probe failure

Valery Borovsky <[email protected]>
media: pwc: Return queued buffers on start_streaming() failure

Valery Borovsky <[email protected]>
media: pwc: Drain fill_buf on start_streaming() failure

Krzysztof Kozlowski <[email protected]>
media: pci: dm1105: Free allocated workqueue

Guoniu Zhou <[email protected]>
media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding

Guoniu Zhou <[email protected]>
media: nxp: imx8-isi: Fix potential out-of-bounds issues

Xiaolei Wang <[email protected]>
media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path

Xiaolei Wang <[email protected]>
media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure

Xiaolei Wang <[email protected]>
media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe

Valery Borovsky <[email protected]>
media: msi2500: Return queued buffers on start_streaming() failure

Anand Moon <[email protected]>
media: meson: vdec: Fix memory leak in error path of vdec_open

Guangshuo Li <[email protected]>
media: marvell-cam: fix missing pci_disable_device() on remove

Wang Jun <[email protected]>
media: cx23885: add ioremap return check and cleanup

Johan Hovold <[email protected]>
media: cx231xx: fix devres lifetime

Pengpeng Hou <[email protected]>
media: cedrus: skip invalid H.264 reference list entries

Samuel Holland <[email protected]>
media: cedrus: Fix missing cleanup in error path

Myeonghun Pak <[email protected]>
media: cedrus: clean up media device on probe failure

Myeonghun Pak <[email protected]>
media: cec: seco: unregister adapter on IR probe failure

David Carlier <[email protected]>
media: aspeed: fix missing of_reserved_mem_device_release() on probe failure

Valery Borovsky <[email protected]>
media: airspy: Return queued buffers on start_streaming() failure

Linmao Li <[email protected]>
drm/vc4: Prevent shader BO mappings from becoming writable

Ian Forbes <[email protected]>
drm/vmwgfx: Validate vmw_surface_metadata::array_size

Zhu Lingshan <[email protected]>

    drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved

WenTao Liang <[email protected]>
drm/amd/display: set new_stream to NULL after release

Timur Kristóf <[email protected]>

    drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X)

Mario Limonciello <[email protected]>
drm/amdgpu: Fix VFCT bus number matching with soft filter

Joonas Lahtinen <[email protected]>
drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU

Joonas Lahtinen <[email protected]>

    drm/i915/gem: Do not leak siblings[] on proto context error

Joonas Lahtinen <[email protected]>
drm/i915: Return NULL on error in active_instance

Alex Deucher <[email protected]>
drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()

Alex Deucher <[email protected]>
drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()

Alex Deucher <[email protected]>
drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()

Bryam Vargas <[email protected]>
drm/virtio: bound EDID block reads to the response buffer

WenTao Liang <[email protected]>
drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference

Thomas Zimmermann <[email protected]>
drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips

David Francis <[email protected]>
drm/amdkfd: Check bounds in allocate_event_notification_slot

Pavel Ondračka <[email protected]>
drm/radeon: fix r100_copy_blit for large BOs

Wentao Liang <[email protected]>
drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()

Joonas Lahtinen <[email protected]>
drm/i915/gem: Add missing nospec on parallel submit slot

Junrui Luo <[email protected]>
drm/nouveau: fix reversed error cleanup order in ucopy functions

Mario Limonciello <[email protected]>
drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1

Timur Kristóf <[email protected]>
drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT

Timur Kristóf <[email protected]>
drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older

Timur Kristóf <[email protected]>
drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2)

Ashutosh Desai <[email protected]>
drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers

Ashutosh Desai <[email protected]>
drm/dp/mst: fix buffer overflows in sideband chunk accumulation

Ashutosh Desai <[email protected]>
drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers

Vitor Soares <[email protected]>
drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()

Sergey Shtylyov <[email protected]>
drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()

Chengfeng Ye <[email protected]>
bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()

Marcin Szycik <[email protected]>
ice: fix LAG recipe to profile association

Li RongQing <[email protected]>
net: ipv6: fix dif and sdif mismatch in raw6_icmp_error

Alexei Lazar <[email protected]>
net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation

Alexei Lazar <[email protected]>
net/mlx5e: Report zero bandwidth for non-ETS traffic classes

Yael Chemla <[email protected]>
net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule

Aldo Ariel Panzardo <[email protected]>
net: qrtr: restrict socket creation to the initial network namespace

Chenguang Zhao <[email protected]>
hinic: remove unused ethtool RSS user configuration buffers

Eric Dumazet <[email protected]>
ppp: annotate data races in ppp_generic

Qingfang Deng <[email protected]>
ppp: enable TX scatter-gather

Qingfang Deng <[email protected]>
ppp: convert to percpu netstats

Qingfang Deng <[email protected]>
ppp: use IFF_NO_QUEUE in virtual interfaces

Eric Dumazet <[email protected]>
ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup

Suman Ghosh <[email protected]>
octeontx2-vf: set TC flower flag on MCAM entry allocation

vadik likholetov <[email protected]>
net: stmmac: enable the MAC on link up for all supported speeds

Nazim Amirul <[email protected]>
net: stmmac: reset residual action in L3L4 filters on delete

Nazim Amirul <[email protected]>
net: stmmac: fix l3l4 filter rejecting unsupported offload requests

Cen Zhang (Microsoft) <[email protected]>
tipc: fix u16 MTU truncation in media and bearer MTU validation

Zhang Yi <[email protected]>
iomap: correct the range of a partial dirty clear

Harshaka Narayana <[email protected]>
vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets

Qing Luo <[email protected]>
sctp: auth: verify auth requirement when auth_chunk is NULL

Michael Walle <[email protected]>
net: dpaa: fix mode setting

Eric Dumazet <[email protected]>
net: hsr: fix memory leak on slave unregistration by removing synced VLANs

Nikolay Aleksandrov <[email protected]>
net: bridge: vlan: fix vlan range dumps starting with pvid

Michael Bommarito <[email protected]>
amt: make the head writable before rewriting the L2 header

Michael Bommarito <[email protected]>
amt: re-read skb header pointers after every pull

Shelley Yang <[email protected]>
wifi: brcmfmac: fix 802.1X-SHA256 call trace warning

Lorenzo Bianconi <[email protected]>
wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()

Lorenzo Bianconi <[email protected]>
wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()

Lorenzo Bianconi <[email protected]>
wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()

Ruoyu Wang <[email protected]>
wifi: mt76: mt7915: guard HE capability lookups

Helen Koike <[email protected]>
tipc: fix infinite loop in __tipc_nl_compat_dumpit

Xiang Mei (Microsoft) <[email protected]>
nexthop: initialize extack in nh_res_bucket_migrate()

Xiang Mei (Microsoft) <[email protected]>
gtp: check skb_pull_data() return in gtp1u_send_echo_resp()

Matthieu Baerts (NGI0) <[email protected]>
selftests: openvswitch: add config file

Matthieu Baerts (NGI0) <[email protected]>
selftests: af_unix: add USER_NS config

Kuniyuki Iwashima <[email protected]>
selftest: af_unix: Add Kconfig file.

Rishikesh Jethwani <[email protected]>
tls: device: push pending open record on splice EOF

Cen Zhang (Microsoft) <[email protected]>
sctp: validate stream count in sctp_process_strreset_inreq()

Nikhil P. Rao <[email protected]>
pds_core: check for workqueue allocation failure

Nikhil P. Rao <[email protected]>
pds_core: fix auxiliary device add/del races

Nikhil P. Rao <[email protected]>
pds_core: order completion reads after the ownership check

Nikhil P. Rao <[email protected]>
pds_core: yield the CPU while waiting for the adminq to drain

HanQuan <[email protected]>
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid

Prashanth Kumar KR <[email protected]>
amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN

Nikhil P. Rao <[email protected]>
pds_core: reject component parameter in legacy firmware update

Andrew Pope <[email protected]>
wifi: mac80211: recalculate TIM when a station enters power save

Li RongQing <[email protected]>
iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()

Pengpeng Hou <[email protected]>
iommu/amd: Bound the early ACPI HID map

HE WEI (ギカク) <[email protected]>
wifi: mwifiex: bound uAP association event IEs to the event buffer

Ruoyu Wang <[email protected]>
wan: wanxl: Only reset hardware after BAR mapping

Ruoyu Wang <[email protected]>
nfp: Check resource mutex allocation

Xiang Mei <[email protected]>
wifi: mac80211: tear down new links on vif update error path

Guanghui Feng <[email protected]>
iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()

Guangshuo Li <[email protected]>
dpaa2-eth: put MAC endpoint device on disconnect

Guangshuo Li <[email protected]>
dpaa2-switch: put MAC endpoint device on disconnect

Aldo Ariel Panzardo <[email protected]>
rds: drop incoming messages that cross network namespace boundaries

Zhaolong Zhang <[email protected]>
bonding: fix devconf_all NULL dereference when IPv6 is disabled

David Lee <[email protected]>
net/packet: avoid fanout hook re-registration after unregister

Pengpeng Hou <[email protected]>
Bluetooth: btusb: validate Realtek vendor event length

Pengpeng Hou <[email protected]>
hwmon: occ: validate poll response sensor blocks

Yichong Chen <[email protected]>
smb: client: validate DFS referral PathConsumed

Eugene Shalygin <[email protected]>
hwmon: (asus-ec-sensors) add missed handle for ENOMEM

Eugene Shalygin <[email protected]>
hwmon: (asus-ec-sensors) fix EC read intervals

Eugene Shalygin <[email protected]>
hwmon: (asus-ec-sensors) fix looping over banks while reading from EC

Diego Fernando Mancera Gomez <[email protected]>
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect

Shahar Tzarfati <[email protected]>
wifi: iwlwifi: mvm: fix read in wake packet notification handler

Pagadala Yesu Anjaneyulu <[email protected]>
wifi: iwlwifi: mvm: validate SAR GEO response payload size

Richard Fitzgerald <[email protected]>
ASoC: cs35l56: Use complete_all() to signal init_completion

Richard Fitzgerald <[email protected]>
ASoC: cs35l56: Fix potential probe() deadlock

Richard Fitzgerald <[email protected]>
ASoC: cs35l56: Don't use devres to unregister component

Shengjiu Wang <[email protected]>
ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI

Pengpeng Hou <[email protected]>
ASoC: tas2781: bound firmware description string parsing

Guanghui Yang <[email protected]>
btrfs: free mapping node on duplicate reloc root insert

You-Kai Zheng <[email protected]>
btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8

Tristan Madani <[email protected]>
wifi: carl9170: fix buffer overflow in rx_stream failover path

Tristan Madani <[email protected]>
wifi: carl9170: fix OOB read from off-by-two in TX status handler

Tristan Madani <[email protected]>
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read

Tristan Madani <[email protected]>
wifi: ath6kl: fix OOB read from firmware IE lengths in connect event

Tristan Madani <[email protected]>
wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler

Ruoyu Wang <[email protected]>
firewire: net: Fix fragmented datagram reassembly

Manivannan Sadhasivam <[email protected]>
wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET

Manivannan Sadhasivam <[email protected]>
wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET

Dmitry Morgun <[email protected]>
wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()

Tzung-Bi Shih <[email protected]>
watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()

Guenter Roeck <[email protected]>
hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop

Guenter Roeck <[email protected]>
hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop

Edward Adam Davis <[email protected]>
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop

Gaole Zhang <[email protected]>
wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin

Cheng Yongkang <[email protected]>
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request

Xincheng Zhang <[email protected]>
usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits

Xie Bo <[email protected]>
RISC-V: KVM: Serialize virtual interrupt pending state updates

Sasha Levin <[email protected]>
Revert "drm/amd/display: Add missing kdoc for ALLM parameters"

Doruk Tan Ozturk <[email protected]>
crypto: rsa-pkcs1pad: Don't WARN on an empty digest

Chukun Pan <[email protected]>
USB: serial: option: add TDTECH MT5710-CN

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix data loss on receive throttling

Sunho Park <[email protected]>
USB: serial: io_edgeport: cap received transmit credits

Tim Pambor <[email protected]>
USB: serial: ftdi_sio: add support for E+H FXA291

Muhammad Bilal <[email protected]>
usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer

Fan Wu <[email protected]>
usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown

Sonali Pradhan <[email protected]>
usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()

Johan Hovold <[email protected]>
USB: gadget: fsl-udc: fix device name leak on probe failure

Johan Hovold <[email protected]>
USB: gadget: snps-udc: fix device name leak on probe failure

Melbin K Mathew <[email protected]>
usb: gadget: printer: fix infinite loop in printer_read()

Fan Wu <[email protected]>
usb: gadget: f_midi: cancel pending IN work before freeing the midi object

Jinchao Wang <[email protected]>
usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback

Xu Yang <[email protected]>
usb: chipidea: fix usage_count leak when autosuspend_delay is negative

Huang Wei <[email protected]>
USB: storage: add NO_ATA_1X quirk for Longmai USB Key

Huihui Huang <[email protected]>

    wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()

Weiming Shi <[email protected]>
mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n

Xin Long <[email protected]>
sctp: fix auth_hmacs array size in struct sctp_cookie

Jamal Hadi Salim <[email protected]>
net/sched: act_tunnel_key: Defer dst_release to RCU callback

Emre Cecanpunar <[email protected]>
drm/i915/selftests: Fix GT PM sort comparators

Xiang Mei (Microsoft) <[email protected]>
ksmbd: validate compound request size before reading StructureSize2

Qihang <[email protected]>
ksmbd: pin conn during async oplock break notification

Shuhao Fu <[email protected]>
can: j1939: fix lockless local-destination check

Michal Luczaj <[email protected]>
bpf, sockmap: Reject unhashed UDP sockets on sockmap update

Shrikanth Hegde <[email protected]>
powerpc/vtime: Initialize starttime at boot for native accounting

Frederic Weisbecker <[email protected]>
powerpc/time: Prepare to stop elapsing in dynticks-idle

Alexander Gordeev <[email protected]>
sched/vtime: Get rid of generic vtime_task_switch() implementation

Pengpeng Hou <[email protected]>
drm/i915/gt: use correct selftest config symbol

Huiwen He <[email protected]>
smb/client: handle overlapping allocated ranges in fallocate

Ruoyu Wang <[email protected]>
Bluetooth: hci_qca: Clear memdump state on invalid dump size

Pauli Virtanen <[email protected]>
Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds

Pauli Virtanen <[email protected]>
Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync

Xiang Mei <[email protected]>
Bluetooth: qca: fix NVM tag length underflow in TLV parser

Takashi Iwai <[email protected]>
ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC

Rosen Penev <[email protected]>
ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning

Rosen Penev <[email protected]>
ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts

Rosen Penev <[email protected]>

    ata: sata_dwc_460ex: use platform_get_irq()

Rosen Penev <[email protected]>
ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered

Bryam Vargas <[email protected]>
net/iucv: take a reference on the socket found in afiucv_hs_rcv()

Weiming Shi <[email protected]>
ipv4: fib: free fib_alias with kfree_rcu() on insert error path

Norbert Szetei <[email protected]>
ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF

Pushpendra Singh <[email protected]>
firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context

Uday Khare <[email protected]>
ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup

Charles Keepax <[email protected]>
ASoC: cs42l43: Correct report for forced microphone jack

Vijendar Mukunda <[email protected]>
ASoC: amd: ps: fix wrong ACP version string in pci_request_regions()

Christian Hewitt <[email protected]>
ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop

HE WEI (ギカク) <[email protected]>
wifi: cfg80211: bound element ID read when checking non-inheritance

Runyu Xiao <[email protected]>
wifi: brcmfmac: initialize SDIO data work before cleanup

Cen Zhang <[email protected]>
wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock

Zhao Li <[email protected]>
wifi: cfg80211: reject unsupported PMSR FTM location requests

Zhao Li <[email protected]>
wifi: cfg80211: validate PMSR FTM preamble range

Zhao Li <[email protected]>
wifi: cfg80211: validate PMSR measurement type data

Zhao Li <[email protected]>
wifi: nl80211: validate nested MBSSID IE blobs

Zhao Li <[email protected]>
wifi: nl80211: free RNR data on MBSSID mismatch

Xiang Mei <[email protected]>
wifi: p54: validate RX frame length in p54_rx_eeprom_readback()

Dawei Feng <[email protected]>
wifi: libertas: fix memory leak in helper_firmware_cb()

Bryam Vargas <[email protected]>
wifi: mac80211_hwsim: clamp virtio RX length before skb_put

Abdun Nihaal <[email protected]>
wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()

Cen Zhang <[email protected]>
wifi: cfg80211: cancel sched scan results work on unregister

Xiang Mei (Microsoft) <[email protected]>
xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert

Xiang Mei (Microsoft) <[email protected]>
xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()

Aleksandrova Alyona <[email protected]>
RDMA/irdma: Prevent overflows in memory contiguity checks

Malaya Kumar Rout <[email protected]>
selftests/alsa: Fix memory leak in find_controls error path

Xue Lei <[email protected]>
mtd: fix double free and WARN_ON in add_mtd_device() error paths

Ruoyu Wang <[email protected]>
RDMA/siw: publish QP after initialization

Guoqing Jiang <[email protected]>

    RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp

Danila Chernetsov <[email protected]>
RDMA/hns: Fix potential integer overflow in mhop hem cleanup

Ruoyu Wang <[email protected]>
RDMA/erdma: initialize ret for empty receive WR lists

Jacob Moroni <[email protected]>
RDMA/irdma: Prevent rereg_mr for non-mem regions

Jacob Moroni <[email protected]>
RDMA/umem: Add helpers for umem dmabuf revoke lock

Jacob Moroni <[email protected]>
RDMA/umem: Add pinned revocable dmabuf import interface

Jacob Moroni <[email protected]>
RDMA/umem: Move umem dmabuf revoke logic into helper function

Jacob Moroni <[email protected]>
RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper

Yishai Hadas <[email protected]>
RDMA/umem: Introduce an option to revoke DMABUF umem

Yishai Hadas <[email protected]>
RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device

Or Gerlitz <[email protected]>
RDMA/cma: Fix hardware address comparison length in netevent callback

Unnathi Chalicheemala <[email protected]>
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()

Filipe Manana <[email protected]>
btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()

Xiang Mei <[email protected]>
btrfs: reject free space cache with more entries than pages

Pengpeng Hou <[email protected]>
mtd: nand: mtk-ecc: stop on ECC idle timeouts

Pengpeng Hou <[email protected]>
mtd: mtdswap: remove debugfs stats file on teardown

Michael Bommarito <[email protected]>
IB/mad: Drop unmatched RMPP responses before reassembly

Sumit Gupta <[email protected]>
arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix logic error in packet reset

Seungjin Bae <[email protected]>
Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()

Chuck Lever <[email protected]>
xprtrdma: Clear receive-side ownership pointers on release

Mikko Perttunen <[email protected]>
gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings

Jhonraushan <[email protected]>
accel/ivpu: Reject firmware log with size smaller than header

Claudiu Beznea <[email protected]>
dmaengine: sh: rz-dmac: Move interrupt request after everything is set up

Oliver Hartkopp <[email protected]>

    can: isotp: serialize TX state transitions under so->rx_lock

Oliver Hartkopp <[email protected]>
can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER

Oliver Hartkopp <[email protected]>
can: bcm: track a single source interface for ANYDEV timeout/throttle ops

Oliver Hartkopp <[email protected]>
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()

Oliver Hartkopp <[email protected]>
can: bcm: fix stale rx/tx ops after device removal

Oliver Hartkopp <[email protected]>
can: bcm: add missing device refcount for CAN filter removal

Oliver Hartkopp <[email protected]>
can: bcm: validate frame length in bcm_rx_setup() for RTR replies

Oliver Hartkopp <[email protected]>
can: bcm: extend bcm_tx_lock usage for data and timer updates

Oliver Hartkopp <[email protected]>
can: bcm: fix CAN frame rx/tx statistics

Oliver Hartkopp <[email protected]>
can: bcm: add locking when updating filter and timer values

Phil Rosenthal <[email protected]>
KVM: x86/mmu: Fix use-after-free on vendor module reload

Hyunwoo Kim <[email protected]>
KVM: nVMX: Hide shadow VMCS right after VMCLEAR

Sean Christopherson <[email protected]>
KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

Heiko Carstens <[email protected]>
seqlock: Allow UBSAN_ALIGNMENT to fail optimizing

Peter Zijlstra <[email protected]>
seqlock: Allow KASAN to fail optimizing

Peter Zijlstra <[email protected]>
seqlock: Cure some more scoped_seqlock() optimization fails

Daniel Gibson <[email protected]>
platform/x86/amd/pmc: Avoid logging "(null)" for DMI values

Daniel Gibson <[email protected]>
platform/x86/amd/pmc: Don't log during intermediate wakeups

Ryosuke Yasuoka <[email protected]>
drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker

Daniel Borkmann <[email protected]>
selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs

Daniel Borkmann <[email protected]>
bpf: Fix ld_{abs,ind} failure path analysis in subprogs

Guixiong Wei <[email protected]>
platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm64/boot/dts/nvidia/tegra234.dtsi           |  24 +-
 arch/arm64/kvm/arm.c                               |   2 +-
 arch/loongarch/kernel/kgdb.c                       |   3 +-
 arch/mips/kvm/mips.c                               |   2 +-
 arch/powerpc/include/asm/cputime.h                 |  13 -
 arch/powerpc/kernel/time.c                         |  65 +++
 arch/powerpc/kvm/powerpc.c                         |   2 +-
 arch/riscv/include/asm/kvm_host.h                  |  10 +-
 arch/riscv/kvm/aia.c                               |  35 +-
 arch/riscv/kvm/vcpu.c                              |  66 ++-
 arch/riscv/kvm/vcpu_onereg.c                       |   8 +-
 arch/s390/kvm/kvm-s390.c                           |   2 +-
 arch/x86/boot/compressed/Makefile                  |   1 +
 arch/x86/kernel/cpu/resctrl/rdtgroup.c             |  12 +-
 arch/x86/kvm/lapic.c                               |   2 +-
 arch/x86/kvm/mmu/mmu.c                             |  11 +-
 arch/x86/kvm/mmu/paging_tmpl.h                     |  10 +-
 arch/x86/kvm/svm/svm.c                             |   7 +-
 arch/x86/kvm/vmx/nested.c                          |  11 +-
 arch/x86/kvm/x86.c                                 |   4 +-
 crypto/rsa-pkcs1pad.c                              |   2 +-
 drivers/accel/ivpu/ivpu_fw_log.c                   |   4 +
 drivers/ata/libata-core.c                          |  18 +
 drivers/ata/libata-scsi.c                          |   2 -
 drivers/ata/libata.h                               |   9 +
 drivers/ata/sata_dwc_460ex.c                       |  38 +-
 drivers/block/rbd.c                                |   7 +-
 drivers/bluetooth/btqca.c                          |   2 +-
 drivers/bluetooth/btusb.c                          |   4 +-
 drivers/bluetooth/hci_qca.c                        |   4 +
 drivers/cdrom/cdrom.c                              |   1 +
 drivers/char/ipmi/ipmi_msghandler.c                |   8 +
 drivers/comedi/drivers/comedi_parport.c            |  13 +-
 drivers/dma-buf/udmabuf.c                          |  21 +-
 drivers/dma/dw-edma/dw-edma-pcie.c                 |  63 +--
 drivers/dma/sh/rz-dmac.c                           |  96 ++--
 drivers/firewire/net.c                             |  37 +-
 drivers/firmware/arm_ffa/driver.c                  |   2 +-
 drivers/firmware/arm_scmi/notify.c                 |   6 +-
 drivers/fpga/dfl-afu-main.c                        |   3 +
 drivers/gpio/gpio-mt7621.c                         |   2 +
 drivers/gpio/gpio-mvebu.c                          |   4 +-
 drivers/gpio/gpio-pxa.c                            |   4 +-
 drivers/gpio/gpio-tegra.c                          |  18 +-
 drivers/gpio/gpio-vf610.c                          |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c            |   2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c           |  45 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c             |   6 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   2 -
 drivers/gpu/drm/amd/amdgpu/amdgpu_object.c         |  13 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  54 ++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c            |  58 ++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c            |  17 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c             |  13 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c             |  13 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c              |   3 -
 drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c              |  10 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c            |  11 +-
 drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c           |   4 +-
 drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c             |   4 +-
 drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c             |   4 +-
 drivers/gpu/drm/amd/amdgpu/sdma_v6_0.c             |   4 +-
 drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c              |  15 +-
 drivers/gpu/drm/amd/amdkfd/kfd_events.c            |   3 +
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |  11 +-
 .../amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c   |   9 +-
 .../gpu/drm/amd/display/dc/link/link_detection.c   |   5 +-
 .../amd/display/modules/info_packet/info_packet.c  |   2 -
 drivers/gpu/drm/amd/pm/amdgpu_pm.c                 |   5 +
 drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c     |   7 +-
 drivers/gpu/drm/bridge/cadence/cdns-dsi-core.c     |  11 +-
 drivers/gpu/drm/display/drm_dp_mst_topology.c      |  36 +-
 drivers/gpu/drm/i915/gem/i915_gem_context.c        |  25 +-
 drivers/gpu/drm/i915/gt/intel_engine_user.c        |   2 +-
 drivers/gpu/drm/i915/gt/selftest_gt_pm.c           |   8 +-
 drivers/gpu/drm/i915/i915_active.c                 |   7 +-
 drivers/gpu/drm/nouveau/nouveau_exec.c             |   4 +-
 drivers/gpu/drm/nouveau/nouveau_uvmm.c             |   4 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c     |   1 +
 drivers/gpu/drm/radeon/r100.c                      |  13 +-
 drivers/gpu/drm/rockchip/cdn-dp-reg.c              |   2 +
 drivers/gpu/drm/vc4/vc4_bo.c                       |  10 +-
 drivers/gpu/drm/virtio/virtgpu_kms.c               |   5 +-
 drivers/gpu/drm/virtio/virtgpu_vq.c                |   6 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_surface.c            |  22 +-
 drivers/gpu/host1x/bus.c                           |   4 +-
 drivers/hwmon/asus-ec-sensors.c                    |  18 +-
 drivers/hwmon/corsair-cpro.c                       |   1 +
 drivers/hwmon/corsair-psu.c                        |   1 +
 drivers/hwmon/nzxt-smart2.c                        |   2 +-
 drivers/hwmon/occ/common.c                         |  38 +-
 drivers/hwtracing/intel_th/core.c                  |  10 -
 drivers/hwtracing/intel_th/msu.c                   |   2 +
 drivers/i2c/busses/i2c-davinci.c                   |   4 +-
 drivers/i2c/busses/i2c-i801.c                      |   2 +-
 drivers/i2c/busses/i2c-imx.c                       | 126 +++--
 drivers/infiniband/core/cma.c                      |   2 +-
 drivers/infiniband/core/mad.c                      |  30 ++
 drivers/infiniband/core/umem_dmabuf.c              | 176 ++++++-
 drivers/infiniband/hw/erdma/erdma_qp.c             |   2 +-
 drivers/infiniband/hw/hns/hns_roce_hem.c           |   2 +-
 drivers/infiniband/hw/irdma/verbs.c                |   7 +-
 drivers/infiniband/sw/siw/siw_verbs.c              |  62 ++-
 drivers/input/misc/ims-pcu.c                       |  37 +-
 drivers/iommu/amd/init.c                           |   6 +
 drivers/iommu/amd/iommu.c                          |  25 +-
 drivers/iommu/intel/perf.c                         |   2 +-
 drivers/iommu/intel/svm.c                          |   2 +-
 drivers/md/dm-verity-target.c                      |  14 +-
 drivers/md/dm-verity.h                             |   2 +-
 drivers/media/cec/platform/seco/seco-cec.c         |   6 +-
 drivers/media/common/videobuf2/videobuf2-core.c    |  12 +-
 drivers/media/dvb-frontends/rtl2832.c              |   4 +-
 drivers/media/dvb-frontends/rtl2832_sdr.c          |  19 +-
 drivers/media/pci/cx23885/cx23885-core.c           |  14 +-
 drivers/media/pci/dm1105/dm1105.c                  |   1 +
 drivers/media/pci/saa7134/saa7134-video.c          |  25 +-
 drivers/media/platform/aspeed/aspeed-video.c       |   1 +
 drivers/media/platform/marvell/cafe-driver.c       |   1 +
 .../media/platform/nxp/imx8-isi/imx8-isi-core.c    |   2 +
 .../media/platform/nxp/imx8-isi/imx8-isi-core.h    |  16 +
 .../platform/nxp/imx8-isi/imx8-isi-crossbar.c      |   1 +
 drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c  |   9 +-
 drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c |  11 +-
 .../media/platform/nxp/imx8-isi/imx8-isi-pipe.c    |  20 +-
 drivers/media/platform/st/stm32/stm32-dcmi.c       |   1 +
 drivers/media/platform/sunxi/sun4i-csi/sun4i_dma.c |   6 +-
 drivers/media/platform/ti/davinci/vpif_capture.c   |   2 +-
 drivers/media/platform/ti/vpe/vpe.c                |   3 +-
 drivers/media/radio/radio-si476x.c                 |   1 +
 drivers/media/test-drivers/vidtv/vidtv_bridge.c    |   4 +-
 drivers/media/test-drivers/vimc/vimc-core.c        |   1 +
 drivers/media/test-drivers/vivid/vivid-ctrls.c     |  15 +-
 drivers/media/test-drivers/vivid/vivid-vid-cap.c   |  38 +-
 drivers/media/test-drivers/vivid/vivid-vid-cap.h   |   1 +
 drivers/media/test-drivers/vivid/vivid-vid-out.c   |   6 +
 drivers/media/usb/airspy/airspy.c                  |   8 +-
 drivers/media/usb/cx231xx/cx231xx-cards.c          |  16 +-
 drivers/media/usb/msi2500/msi2500.c                |  32 +-
 drivers/media/usb/pwc/pwc-if.c                     |  13 +-
 drivers/media/v4l2-core/v4l2-ctrls-core.c          |  13 +
 drivers/media/v4l2-core/v4l2-ctrls-request.c       |  14 +-
 drivers/misc/mei/bus.c                             |  16 +-
 drivers/mmc/host/vub300.c                          |  36 +-
 drivers/mtd/maps/vmu-flash.c                       |   8 +-
 drivers/mtd/mtdcore.c                              |  23 +-
 drivers/mtd/mtdswap.c                              |   5 +-
 drivers/mtd/nand/ecc-mtk.c                         |  16 +-
 drivers/mtd/nand/raw/nand_base.c                   |  43 +-
 drivers/net/amt.c                                  |  87 +++-
 drivers/net/bonding/bond_main.c                    |   3 +-
 drivers/net/ethernet/amd/pds_core/adminq.c         |  12 +-
 drivers/net/ethernet/amd/pds_core/auxbus.c         |  17 +-
 drivers/net/ethernet/amd/pds_core/core.c           |   1 +
 drivers/net/ethernet/amd/pds_core/devlink.c        |   6 +
 drivers/net/ethernet/amd/pds_core/main.c           |   9 +-
 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c          |  11 +-
 drivers/net/ethernet/cadence/macb_main.c           |  22 +-
 drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c   |   1 +
 .../net/ethernet/freescale/dpaa2/dpaa2-switch.c    |   1 +
 drivers/net/ethernet/freescale/fman/fman_dtsec.c   |  17 +-
 drivers/net/ethernet/hisilicon/hip04_eth.c         |  11 +-
 drivers/net/ethernet/huawei/hinic/hinic_dev.h      |   2 -
 drivers/net/ethernet/huawei/hinic/hinic_ethtool.c  |  21 -
 drivers/net/ethernet/intel/i40e/i40e_debugfs.c     | 121 +----
 drivers/net/ethernet/intel/ice/ice_lag.c           |   2 +-
 drivers/net/ethernet/intel/ice/ice_ptp.c           |   2 +-
 drivers/net/ethernet/marvell/octeontx2/af/rvu.c    |  14 +-
 drivers/net/ethernet/marvell/octeontx2/af/rvu.h    |   1 +
 .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c  |   9 +
 .../ethernet/marvell/octeontx2/nic/otx2_flows.c    |   1 +
 .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c   |  28 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c   |  13 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c |  15 +
 .../ethernet/mellanox/mlx5/core/esw/acl/helper.c   |   2 +-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |  13 +
 .../ethernet/netronome/nfp/nfpcore/nfp_resource.c  |   3 +
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  92 ++--
 drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c    |  35 ++
 drivers/net/geneve.c                               |   3 +
 drivers/net/gtp.c                                  |   5 +-
 drivers/net/ipa/ipa_smp2p.c                        |  30 +-
 drivers/net/mctp/mctp-serial.c                     |   2 +-
 drivers/net/pcs/pcs-xpcs.c                         |  34 +-
 drivers/net/ppp/ppp_generic.c                      | 154 +++---
 drivers/net/ppp/pppoe.c                            |   2 +
 drivers/net/ppp/pptp.c                             |   1 +
 drivers/net/slip/slip.c                            |   4 +
 drivers/net/vmxnet3/vmxnet3_drv.c                  |  22 +-
 drivers/net/vxlan/vxlan_core.c                     |   3 +
 drivers/net/vxlan/vxlan_mdb.c                      |  30 +-
 drivers/net/wan/wanxl.c                            |   3 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |   3 +
 drivers/net/wireless/ath/ath11k/pci.c              |   4 +
 drivers/net/wireless/ath/ath11k/qmi.c              |  11 +-
 drivers/net/wireless/ath/ath12k/pci.c              |   4 +
 drivers/net/wireless/ath/ath6kl/txrx.c             |  10 +-
 drivers/net/wireless/ath/ath6kl/wmi.c              |  20 +
 drivers/net/wireless/ath/ath9k/hif_usb.c           |   7 +-
 drivers/net/wireless/ath/carl9170/rx.c             |   7 +-
 drivers/net/wireless/ath/carl9170/tx.c             |   2 +-
 drivers/net/wireless/atmel/at76c50x-usb.c          |   7 +-
 .../broadcom/brcm80211/brcmfmac/cfg80211.c         |   2 +-
 .../wireless/broadcom/brcm80211/brcmfmac/pcie.c    |   8 +-
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.c    |   2 +-
 drivers/net/wireless/intel/ipw2x00/ipw2100.c       |   8 +-
 drivers/net/wireless/intel/iwlwifi/mvm/d3.c        |   3 +-
 drivers/net/wireless/intel/iwlwifi/mvm/fw.c        |  10 +
 drivers/net/wireless/intersil/p54/txrx.c           |   8 +
 drivers/net/wireless/marvell/libertas/firmware.c   |   1 +
 drivers/net/wireless/marvell/libertas_tf/main.c    |   2 +-
 drivers/net/wireless/marvell/mwifiex/tdls.c        |   2 +-
 drivers/net/wireless/marvell/mwifiex/uap_event.c   |  24 +-
 drivers/net/wireless/mediatek/mt76/mt7615/mac.c    |   6 +
 .../net/wireless/mediatek/mt76/mt76_connac_mcu.c   |   2 +
 drivers/net/wireless/mediatek/mt76/mt7915/mcu.c    |  18 +-
 drivers/net/wireless/mediatek/mt76/mt7921/mac.c    |  10 +-
 drivers/net/wireless/mediatek/mt76/mt7996/mcu.c    |  19 +-
 drivers/net/wireless/microchip/wilc1000/hif.c      |   5 +
 drivers/net/wireless/virtual/mac80211_hwsim.c      |   1 +
 drivers/pinctrl/cirrus/pinctrl-cs42l43.c           |   4 +-
 drivers/pinctrl/cirrus/pinctrl-lochnagar.c         |   2 +-
 drivers/pinctrl/core.c                             |  14 +-
 drivers/pinctrl/intel/pinctrl-cherryview.c         |   4 +-
 drivers/pinctrl/intel/pinctrl-intel.c              |   4 +-
 drivers/pinctrl/intel/pinctrl-lynxpoint.c          |   4 +-
 drivers/pinctrl/mediatek/pinctrl-moore.c           |   4 +-
 drivers/pinctrl/mediatek/pinctrl-mtk-common.c      |   4 +-
 drivers/pinctrl/mediatek/pinctrl-paris.c           |   4 +-
 drivers/pinctrl/nuvoton/pinctrl-npcm7xx.c          |   4 +-
 drivers/pinctrl/pinctrl-as3722.c                   |   4 +-
 drivers/pinctrl/pinctrl-axp209.c                   |   2 +-
 drivers/pinctrl/pinctrl-cy8c95x0.c                 |   4 +-
 drivers/pinctrl/pinctrl-ingenic.c                  |  11 +-
 drivers/pinctrl/pinctrl-ocelot.c                   |   4 +-
 drivers/pinctrl/pinctrl-rk805.c                    |   4 +-
 drivers/pinctrl/pinctrl-st.c                       |   4 +-
 drivers/pinctrl/renesas/gpio.c                     |   4 +-
 drivers/pinctrl/stm32/pinctrl-stm32.c              |   4 +-
 drivers/pinctrl/vt8500/pinctrl-wmt.c               |   4 +-
 drivers/platform/loongarch/loongson-laptop.c       |   1 +
 drivers/platform/x86/amd/pmc/pmc.c                 |  39 +-
 drivers/platform/x86/amd/pmc/pmc.h                 |   1 +
 drivers/platform/x86/dell/dell-laptop.c            |  28 +-
 drivers/platform/x86/dell/dell-smbios-base.c       |  25 +
 drivers/platform/x86/dell/dell-smbios.h            |   5 +
 .../uncore-frequency/uncore-frequency-common.c     |   7 +-
 drivers/staging/media/meson/vdec/vdec.c            |   4 +-
 drivers/staging/media/sunxi/cedrus/cedrus.c        |   6 +-
 drivers/staging/media/sunxi/cedrus/cedrus_h264.c   |   3 +
 drivers/staging/media/tegra-video/vi.c             |   4 +-
 drivers/staging/rtl8723bs/core/rtw_ieee80211.c     |   9 +-
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |   2 +-
 drivers/thunderbolt/debugfs.c                      |   2 +
 drivers/thunderbolt/domain.c                       |  36 +-
 drivers/thunderbolt/icm.c                          |   5 +
 drivers/thunderbolt/nhi.c                          |   6 +-
 drivers/thunderbolt/nvm.c                          |   4 +-
 drivers/thunderbolt/property.c                     |  38 +-
 drivers/thunderbolt/switch.c                       |  20 +-
 drivers/thunderbolt/tb.c                           |  61 ++-
 drivers/thunderbolt/tb.h                           |   2 +
 drivers/thunderbolt/xdomain.c                      | 149 ++++--
 drivers/tty/serial/8250/8250_mid.c                 |  14 +-
 drivers/tty/serial/max310x.c                       |  20 +-
 drivers/tty/serial/sc16is7xx.c                     |  12 +
 drivers/usb/atm/ueagle-atm.c                       |  17 +
 drivers/usb/chipidea/core.c                        |   1 +
 drivers/usb/gadget/function/f_midi.c               |   1 +
 drivers/usb/gadget/function/f_ncm.c                |  17 +-
 drivers/usb/gadget/function/f_printer.c            |  23 +-
 drivers/usb/gadget/function/uvc_v4l2.c             |   2 +
 drivers/usb/gadget/udc/bdc/bdc_core.c              |  20 +
 drivers/usb/gadget/udc/bdc/bdc_udc.c               |   7 +-
 drivers/usb/gadget/udc/dummy_hcd.c                 |  40 +-
 drivers/usb/gadget/udc/fsl_udc_core.c              |   1 -
 drivers/usb/gadget/udc/snps_udc_core.c             |   1 -
 drivers/usb/host/xhci-pci.c                        |   1 +
 drivers/usb/host/xhci.c                            |  15 +-
 drivers/usb/host/xhci.h                            |   1 +
 drivers/usb/serial/ftdi_sio.c                      |   2 +
 drivers/usb/serial/ftdi_sio_ids.h                  |   5 +
 drivers/usb/serial/io_edgeport.c                   |   3 +-
 drivers/usb/serial/keyspan_pda.c                   |  44 +-
 drivers/usb/serial/option.c                        |   1 +
 drivers/usb/storage/unusual_devs.h                 |   7 +
 drivers/vdpa/vdpa_user/iova_domain.c               | 161 ++++---
 drivers/vdpa/vdpa_user/iova_domain.h               |  13 +-
 drivers/vdpa/vdpa_user/vduse_dev.c                 |  16 +-
 drivers/video/fbdev/core/bitblit.c                 | 122 ++---
 drivers/video/fbdev/core/fbcon.c                   | 420 ++++++++--------
 drivers/video/fbdev/core/fbcon.h                   |   6 +-
 drivers/video/fbdev/core/fbcon_ccw.c               | 148 +++---
 drivers/video/fbdev/core/fbcon_cw.c                | 148 +++---
 drivers/video/fbdev/core/fbcon_rotate.c            |  44 +-
 drivers/video/fbdev/core/fbcon_rotate.h            |   6 +-
 drivers/video/fbdev/core/fbcon_ud.c                | 164 +++----
 drivers/video/fbdev/core/softcursor.c              |  18 +-
 drivers/video/fbdev/core/tileblit.c                |  28 +-
 drivers/video/fbdev/efifb.c                        | 125 ++---
 drivers/watchdog/watchdog_pretimeout.c             |   2 +
 fs/afs/addr_list.c                                 |  10 +-
 fs/afs/fs_probe.c                                  |   6 +-
 fs/afs/internal.h                                  |   6 +-
 fs/afs/proc.c                                      |   4 +-
 fs/afs/rotate.c                                    |   2 +-
 fs/afs/rxrpc.c                                     |  15 +-
 fs/afs/server.c                                    |   4 +-
 fs/afs/vl_alias.c                                  |   4 +-
 fs/afs/vl_probe.c                                  |   6 +-
 fs/afs/vl_rotate.c                                 |   2 +-
 fs/binfmt_elf_fdpic.c                              |   4 +
 fs/binfmt_misc.c                                   |   5 +-
 fs/btrfs/free-space-cache.c                        |   3 +
 fs/btrfs/relocation.c                              |   2 +
 fs/ceph/caps.c                                     |   1 +
 fs/ceph/ioctl.c                                    |   6 +
 fs/coredump.c                                      |   1 +
 fs/crypto/inline_crypt.c                           |  57 +--
 fs/crypto/keysetup_v1.c                            |   8 +-
 fs/exec.c                                          |   2 +-
 fs/exfat/balloc.c                                  |  54 ++-
 fs/f2fs/super.c                                    |  25 +-
 fs/iomap/buffered-io.c                             |  12 +-
 fs/namei.c                                         |  43 ++
 fs/nfs/internal.h                                  |  16 +-
 fs/nfs/pnfs_nfs.c                                  |   2 +-
 fs/nfs/write.c                                     |  14 +-
 fs/nfsd/nfs4xdr.c                                  |   8 +-
 fs/nfsd/vfs.c                                      |   7 +-
 fs/nfsd/vfs.h                                      |   2 +-
 fs/overlayfs/copy_up.c                             |  12 +-
 fs/posix_acl.c                                     |   7 +
 fs/proc/namespaces.c                               |   4 +-
 fs/smb/client/misc.c                               |  34 +-
 fs/smb/client/smb2ops.c                            |  25 +-
 fs/smb/server/oplock.c                             |   6 +-
 fs/smb/server/smb2misc.c                           |   5 +
 fs/smb/server/smb2pdu.c                            |   9 +-
 fs/smb/server/smbacl.c                             |  42 +-
 include/linux/audit.h                              |   6 +-
 include/linux/audit_arch.h                         |  12 +-
 include/linux/bootconfig.h                         |   3 +
 include/linux/bpf_lsm.h                            |   4 +
 include/linux/firmware.h                           |   3 +
 include/linux/fscrypt.h                            |  18 +-
 include/linux/kvm_host.h                           |   1 +
 include/linux/lsm_hooks.h                          |   1 +
 include/linux/namei.h                              |   1 +
 include/linux/pinctrl/consumer.h                   |  13 +-
 include/linux/ppp_channel.h                        |   3 +-
 include/linux/seqlock.h                            |  10 +-
 include/linux/sunrpc/svcsock.h                     |   3 +
 include/linux/sunrpc/xdr.h                         |  19 +-
 include/linux/vtime.h                              |   6 +
 include/linux/workqueue.h                          |   8 +-
 include/media/videobuf2-core.h                     |   8 +-
 include/net/af_rxrpc.h                             |  25 +-
 include/net/bluetooth/rfcomm.h                     |   3 +
 include/net/netfilter/nf_tables.h                  |  37 --
 include/net/netfilter/nft_fib.h                    |   2 -
 include/net/netfilter/nft_meta.h                   |   3 -
 include/net/sctp/structs.h                         |   3 +-
 include/rdma/ib_umem.h                             |  41 ++
 include/trace/events/rxrpc.h                       |   3 +-
 include/uapi/linux/btrfs.h                         |   2 +-
 init/main.c                                        |  39 --
 io_uring/rw.c                                      |  28 +-
 kernel/audit.c                                     |   2 +-
 kernel/audit.h                                     |  32 +-
 kernel/audit_fsnotify.c                            |  39 +-
 kernel/audit_tree.c                                |   2 +-
 kernel/audit_watch.c                               |  42 +-
 kernel/auditfilter.c                               |  17 +-
 kernel/auditsc.c                                   |   6 +-
 kernel/bpf/bpf_inode_storage.c                     |   9 +
 kernel/bpf/bpf_lsm.c                               |   1 -
 kernel/bpf/verifier.c                              |  17 +
 kernel/locking/spinlock_rt.c                       |  27 +-
 kernel/sched/cputime.c                             |  13 -
 kernel/taskstats.c                                 |  67 +--
 kernel/trace/ftrace.c                              |  13 +
 kernel/trace/trace_eprobe.c                        |   3 +-
 kernel/trace/trace_events_user.c                   |  43 +-
 kernel/trace/trace_mmiotrace.c                     |   4 +-
 kernel/trace/trace_probe.c                         |  13 +-
 kernel/workqueue.c                                 |  46 +-
 lib/bootconfig.c                                   |  65 +++
 lib/compat_audit.c                                 |  12 +-
 mm/damon/core.c                                    |  13 +
 mm/mm_init.c                                       |  34 +-
 net/bluetooth/hci_sync.c                           |  13 +-
 net/bluetooth/mgmt.c                               |  42 +-
 net/bluetooth/rfcomm/core.c                        |  17 +
 net/bluetooth/rfcomm/tty.c                         |   7 +-
 net/bridge/br_netlink_tunnel.c                     |   3 +-
 net/bridge/br_private.h                            |   6 +-
 net/bridge/br_vlan.c                               |  10 +-
 net/bridge/br_vlan_options.c                       |   3 +-
 net/bridge/netfilter/nft_meta_bridge.c             |  20 -
 net/bridge/netfilter/nft_reject_bridge.c           |   1 -
 net/can/bcm.c                                      | 528 +++++++++++++++------
 net/can/isotp.c                                    | 278 ++++++++---
 net/can/j1939/transport.c                          |  18 +-
 net/ceph/auth_x.c                                  |   9 +-
 net/ceph/ceph_common.c                             |   4 +-
 net/ceph/mon_client.c                              |   4 +-
 net/ceph/osdmap.c                                  |  12 +-
 net/core/sock_map.c                                |   2 +
 net/hsr/hsr_slave.c                                |   2 +
 net/ipv4/fib_trie.c                                |   2 +-
 net/ipv4/icmp.c                                    |  18 +-
 net/ipv4/netfilter/nft_dup_ipv4.c                  |   1 -
 net/ipv4/netfilter/nft_fib_ipv4.c                  |   2 -
 net/ipv4/netfilter/nft_reject_ipv4.c               |   1 -
 net/ipv4/nexthop.c                                 |   2 +-
 net/ipv4/tcp_bpf.c                                 |   2 +-
 net/ipv6/ila/ila_common.c                          |  12 +
 net/ipv6/ip6_tunnel.c                              |   3 +
 net/ipv6/ndisc.c                                   |   8 +-
 net/ipv6/netfilter/nft_dup_ipv6.c                  |   1 -
 net/ipv6/netfilter/nft_fib_ipv6.c                  |   2 -
 net/ipv6/netfilter/nft_reject_ipv6.c               |   1 -
 net/ipv6/raw.c                                     |   2 +-
 net/ipv6/xfrm6_policy.c                            |   1 +
 net/iucv/af_iucv.c                                 |  21 +-
 net/l2tp/l2tp_ppp.c                                |   1 +
 net/mac80211/iface.c                               |   8 +-
 net/mac80211/link.c                                |   4 +
 net/mac80211/rx.c                                  |   2 +
 net/mac802154/llsec.c                              |   5 +
 net/mac802154/scan.c                               |  11 +
 net/mpls/af_mpls.c                                 |   3 +
 net/mptcp/options.c                                |  12 +-
 net/mptcp/protocol.c                               |   1 +
 net/netfilter/nf_conntrack_sip.c                   |  10 +-
 net/netfilter/nf_tables_api.c                      |  67 ---
 net/netfilter/nft_bitwise.c                        | 104 ----
 net/netfilter/nft_byteorder.c                      |  11 -
 net/netfilter/nft_cmp.c                            |   3 -
 net/netfilter/nft_compat.c                         |  10 -
 net/netfilter/nft_connlimit.c                      |   1 -
 net/netfilter/nft_counter.c                        |   1 -
 net/netfilter/nft_ct.c                             |  46 --
 net/netfilter/nft_dup_netdev.c                     |   1 -
 net/netfilter/nft_dynset.c                         |   1 -
 net/netfilter/nft_exthdr.c                         |  34 --
 net/netfilter/nft_fib.c                            |  51 +-
 net/netfilter/nft_fib_inet.c                       |   1 -
 net/netfilter/nft_fib_netdev.c                     |  30 +-
 net/netfilter/nft_flow_offload.c                   |   1 -
 net/netfilter/nft_fwd_netdev.c                     |   2 -
 net/netfilter/nft_hash.c                           |  36 --
 net/netfilter/nft_immediate.c                      |  12 -
 net/netfilter/nft_last.c                           |   1 -
 net/netfilter/nft_limit.c                          |   2 -
 net/netfilter/nft_log.c                            |   1 -
 net/netfilter/nft_lookup.c                         |  12 -
 net/netfilter/nft_masq.c                           |   3 -
 net/netfilter/nft_meta.c                           |  45 --
 net/netfilter/nft_nat.c                            |   2 -
 net/netfilter/nft_numgen.c                         |  22 -
 net/netfilter/nft_objref.c                         |   2 -
 net/netfilter/nft_osf.c                            |  25 -
 net/netfilter/nft_payload.c                        |  47 --
 net/netfilter/nft_queue.c                          |   2 -
 net/netfilter/nft_quota.c                          |   1 -
 net/netfilter/nft_range.c                          |   1 -
 net/netfilter/nft_redir.c                          |   3 -
 net/netfilter/nft_reject_inet.c                    |   1 -
 net/netfilter/nft_reject_netdev.c                  |   1 -
 net/netfilter/nft_rt.c                             |   1 -
 net/netfilter/nft_set_pipapo.c                     | 259 ++++++----
 net/netfilter/nft_set_pipapo.h                     |   8 +
 net/netfilter/nft_socket.c                         |  26 -
 net/netfilter/nft_synproxy.c                       |   1 -
 net/netfilter/nft_tproxy.c                         |   1 -
 net/netfilter/nft_tunnel.c                         |  26 -
 net/netfilter/nft_xfrm.c                           |  27 --
 net/openvswitch/actions.c                          |  15 +-
 net/openvswitch/datapath.c                         |  25 +-
 net/openvswitch/datapath.h                         |   2 +-
 net/openvswitch/vport.c                            |   2 +-
 net/packet/af_packet.c                             |   6 +-
 net/phonet/pep.c                                   |   2 +
 net/qrtr/af_qrtr.c                                 |   8 +
 net/qrtr/ns.c                                      |   4 +-
 net/rds/recv.c                                     |  15 +
 net/rxrpc/af_rxrpc.c                               |  24 +-
 net/rxrpc/ar-internal.h                            |   3 +-
 net/rxrpc/call_accept.c                            |  77 +--
 net/rxrpc/call_object.c                            |  42 +-
 net/rxrpc/conn_client.c                            |  12 +-
 net/rxrpc/conn_event.c                             |  14 +-
 net/rxrpc/conn_object.c                            |   8 +-
 net/rxrpc/input.c                                  |   5 +-
 net/rxrpc/io_thread.c                              |   8 +-
 net/rxrpc/peer_event.c                             |   8 +-
 net/rxrpc/peer_object.c                            |   1 +
 net/rxrpc/recvmsg.c                                |  26 +-
 net/rxrpc/rxperf.c                                 |  10 +-
 net/rxrpc/security.c                               |   4 +-
 net/rxrpc/sendmsg.c                                |   8 +-
 net/rxrpc/txbuf.c                                  |   4 +-
 net/sched/act_tunnel_key.c                         |  14 +-
 net/sctp/auth.c                                    |   2 +-
 net/sctp/sm_make_chunk.c                           |   6 +
 net/sctp/sm_statefuns.c                            |   2 +-
 net/sctp/stream.c                                  |   6 +-
 net/sunrpc/svcsock.c                               |  51 +-
 net/sunrpc/xdr.c                                   | 210 +++++++-
 net/sunrpc/xprtrdma/rpc_rdma.c                     |   4 +
 net/sunrpc/xprtrdma/verbs.c                        |  12 +-
 net/tipc/netlink.c                                 |   6 +-
 net/tipc/netlink_compat.c                          |   4 +
 net/tipc/socket.c                                  |   7 +-
 net/tls/tls_device.c                               |   6 +-
 net/wireless/core.c                                |   1 +
 net/wireless/nl80211.c                             |  20 +-
 net/wireless/pmsr.c                                |  21 +-
 net/wireless/scan.c                                |   2 +-
 net/x25/af_x25.c                                   |   8 +-
 net/xfrm/xfrm_policy.c                             |   4 +-
 security/apparmor/include/net.h                    |   6 +-
 security/apparmor/lsm.c                            |  38 +-
 security/apparmor/net.c                            |   2 +-
 security/bpf/hooks.c                               |   3 +
 security/security.c                                |  36 +-
 security/selinux/hooks.c                           |  99 ++--
 security/selinux/include/objsec.h                  |   5 +
 security/selinux/netlabel.c                        |  23 +-
 security/smack/smack.h                             |   5 +
 security/smack/smack_lsm.c                         |  70 ++-
 security/smack/smack_netfilter.c                   |   4 +-
 sound/core/seq/seq_timer.c                         |  13 +-
 sound/hda/hdac_regmap.c                            |   4 +-
 sound/pci/hda/patch_conexant.c                     |   3 -
 sound/soc/amd/ps/pci-ps.c                          |   2 +-
 sound/soc/codecs/bt-sco.c                          |  10 +-
 sound/soc/codecs/cs35l56-i2c.c                     |   4 +-
 sound/soc/codecs/cs35l56-spi.c                     |   4 +-
 sound/soc/codecs/cs35l56.c                         |  25 +-
 sound/soc/codecs/cs42l43-jack.c                    |   3 +-
 sound/soc/codecs/tas2562.c                         |   5 +-
 sound/soc/codecs/tas2781-fmwlib.c                  |  63 ++-
 sound/soc/mediatek/mt6797/mt6797-afe-pcm.c         |  14 +-
 sound/soc/mediatek/mt7986/mt7986-afe-pcm.c         |  14 +-
 sound/soc/mediatek/mt8183/mt8183-afe-pcm.c         |  26 +-
 sound/soc/mediatek/mt8188/mt8188-afe-pcm.c         |  21 +-
 sound/soc/mediatek/mt8192/mt8192-afe-pcm.c         | 135 ++----
 sound/soc/mediatek/mt8195/mt8195-afe-pcm.c         |  54 +--
 sound/soc/mediatek/mt8195/mt8195-mt6359.c          |  38 +-
 sound/soc/meson/aiu-fifo-spdif.c                   |   5 +
 sound/usb/quirks.c                                 |   2 +
 tools/testing/selftests/alsa/mixer-test.c          |   1 +
 .../testing/selftests/bpf/progs/verifier_ld_ind.c  | 142 ++++++
 tools/testing/selftests/ftrace/ftracetest          |   1 +
 tools/testing/selftests/net/af_unix/config         |   4 +
 tools/testing/selftests/net/openvswitch/config     |  16 +
 virt/kvm/kvm_main.c                                |   3 +
 561 files changed, 6388 insertions(+), 4060 deletions(-)

Read the cover letter in its thread