6.18.42-rc1 review
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest675 patches 13 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/675 | platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplugdrivers/ | +6 | 0 replies | |
| 2/675 | bpf: Fix ld_{abs,ind} failure path analysis in subprogskernel/ | +17 | 0 replies | |
| 3/675 | selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogstools/ | +142 | 0 replies | |
| 4/675 | netfilter: nft_counter: serialize reset with spinlocknet/ | +16 | 0 replies | |
| 5/675 | netfilter: nft_quota: use atomic64_xchg for resetnet/ | +7 | 0 replies | |
| 6/675 | netfilter: nf_tables: revert commit_mutex usage in reset pathnet/ | +42 | 0 replies | |
| 7/675 | drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue workerdrivers/ drivers/ | +4 | 0 replies | |
| 8/675 | fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update racefs/ | +9 | 0 replies | |
| 9/675 | seqlock: Cure some more scoped_seqlock() optimization failsinclude/ | +2 | 0 replies | |
| 10/675 | seqlock: Allow KASAN to fail optimizinginclude/ | +4 | 0 replies | |
| 11/675 | seqlock: Allow UBSAN_ALIGNMENT to fail optimizinginclude/ | +4 | 0 replies | |
| 12/675 | KVM: x86: Check for invalid/obsolete root *after* making MMU pages availablearch/ arch/ | +11 | 0 replies | |
| 13/675 | KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUNarch/ | +1 | 0 replies | |
| 14/675 | KVM: nVMX: Hide shadow VMCS right after VMCLEARarch/ | +9 | 0 replies | |
| 15/675 | KVM: x86/mmu: Fix use-after-free on vendor module reloadarch/ | +2 | 0 replies | |
| 16/675 | can: bcm: add locking when updating filter and timer valuesnet/ | +133 | 0 replies | |
| 17/675 | can: bcm: fix CAN frame rx/tx statisticsnet/ | +46 | 0 replies | |
| 18/675 | can: bcm: extend bcm_tx_lock usage for data and timer updatesnet/ | +75 | 0 replies | |
| 19/675 | can: bcm: validate frame length in bcm_rx_setup() for RTR repliesnet/ | +41 | 0 replies | |
| 20/675 | can: bcm: add missing device refcount for CAN filter removalnet/ | +24 | 0 replies | |
| 21/675 | can: bcm: fix stale rx/tx ops after device removalnet/ | +44 | 0 replies | |
| 22/675 | can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()net/ | +8 | 0 replies | |
| 23/675 | can: bcm: track a single source interface for ANYDEV timeout/throttle opsnet/ | +44 | 0 replies | |
| 24/675 | dmaengine: sh: rz-dmac: Move interrupt request after everything is set updrivers/ | +38 | 0 replies | |
| 25/675 | gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappingsdrivers/ | +2 | 0 replies | |
| 26/675 | crypto: tegra - Dont touch bo refcount in host1x bo pin/unpindrivers/ | +1 | 0 replies | |
| 27/675 | xprtrdma: Clear receive-side ownership pointers on releasenet/ net/ | +14 | 0 replies | |
| 28/675 | Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()drivers/ | +26 | 0 replies | |
| 29/675 | Input: ims-pcu - fix logic error in packet resetdrivers/ | +1 | 0 replies | |
| 30/675 | fuse: fix writeback array overflow when max_pages is onefs/ | +4 | 0 replies | |
| 31/675 | arm64: tegra: Remove fallback compatible for GPCDMAarch/ | +1 | 0 replies | |
| 32/675 | arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234arch/ | +12 | 0 replies | |
| 33/675 | net: dropreason: add SKB_DROP_REASON_RECURSION_LIMITinclude/ include/ net/ | +5 | 0 replies | |
| 34/675 | net: plumb drop reasons to __dev_queue_xmit()net/ | +43 | 0 replies | |
| 35/675 | xfrm: propagate -EINPROGRESS from validate_xmit_xfrm()net/ net/ | +10 | 0 replies | |
| 36/675 | xfrm: fix stale skb->prev after async crypto steals a GSO segmentnet/ | +8 | 0 replies | |
| 37/675 | firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limitsdrivers/ | +20 | 0 replies | |
| 38/675 | IB/mad: Drop unmatched RMPP responses before reassemblydrivers/ | +30 | 0 replies | |
| 39/675 | mtd: mtdswap: remove debugfs stats file on teardowndrivers/ | +4 | 0 replies | |
| 40/675 | mtd: nand: mtk-ecc: stop on ECC idle timeoutsdrivers/ | +12 | 0 replies | |
| 41/675 | btrfs: reject free space cache with more entries than pagesfs/ | +3 | 0 replies | |
| 42/675 | btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()fs/ | +1 | 0 replies | |
| 43/675 | btrfs: use bool type for btrfs_path members used as booleansfs/ fs/ fs/ +17 more | +94 | 0 replies | |
| 44/675 | btrfs: fallback to transaction csum tree on a commit root csum missfs/ | +25 | 0 replies | |
| 45/675 | firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()drivers/ | +1 | 0 replies | |
| 46/675 | sched/ext: Avoid null ptr traversal when ->put_prev_task() is called with NULL nextkernel/ | +1 | 0 replies | |
| 47/675 | sched_ext: Dont warn on core-sched forced idle in put_prev_task_scx()kernel/ | +6 | 0 replies | |
| 48/675 | xfrm: reject optional IPTFS templates in outbound policiesnet/ | +1 | 0 replies | |
| 49/675 | RDMA/cma: Fix hardware address comparison length in netevent callbackdrivers/ | +1 | 0 replies | |
| 50/675 | RDMA/umem: Add pinned revocable dmabuf import interfacedrivers/ include/ | +80 | 0 replies | |
| 51/675 | RDMA/irdma: Prevent rereg_mr for non-mem regionsdrivers/ | +3 | 0 replies | |
| 52/675 | RDMA/irdma: Remove redundant legacy_mode checksdrivers/ drivers/ drivers/ | +4 | 0 replies | |
| 53/675 | RDMA/irdma: Prevent user-triggered null deref on QP createdrivers/ | +9 | 0 replies | |
| 54/675 | RDMA/erdma: initialize ret for empty receive WR listsdrivers/ | +1 | 0 replies | |
| 55/675 | RDMA/mana_ib: initialize err for empty send WR listsdrivers/ | +1 | 0 replies | |
| 56/675 | RDMA/hns: Fix potential integer overflow in mhop hem cleanupdrivers/ | +1 | 0 replies | |
| 57/675 | RDMA/siw: publish QP after initializationdrivers/ | +24 | 0 replies | |
| 58/675 | mtd: fix double free and WARN_ON in add_mtd_device() error pathsdrivers/ | +19 | 0 replies | |
| 59/675 | selftests/alsa: Fix memory leak in find_controls error pathtools/ | +1 | 0 replies | |
| 60/675 | RDMA/irdma: Prevent overflows in memory contiguity checksdrivers/ | +2 | 0 replies | |
| 61/675 | xfrm: clear mode callbacks after failed mode setupnet/ | +6 | 0 replies | |
| 62/675 | xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags()net/ | +1 | 0 replies | |
| 63/675 | xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()net/ | +1 | 0 replies | |
| 64/675 | xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsertnet/ | +2 | 0 replies | |
| 65/675 | wifi: cfg80211: cancel sched scan results work on unregisternet/ | +1 | 0 replies | |
| 66/675 | wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()drivers/ | +4 | 0 replies | |
| 67/675 | wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()net/ | +4 | 0 replies | |
| 68/675 | wifi: mac80211_hwsim: clamp virtio RX length before skb_putdrivers/ | +1 | 0 replies | |
| 69/675 | wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failurenet/ | +3 | 0 replies | |
| 70/675 | wifi: mac80211: fix fils_discovery double free on alloc failurenet/ | +3 | 0 replies | |
| 71/675 | wifi: libertas: fix memory leak in helper_firmware_cb()drivers/ | +1 | 0 replies | |
| 72/675 | wifi: mac80211: defer link RX stats percpu free to RCUnet/ | +11 | 0 replies | |
| 73/675 | wifi: p54: validate RX frame length in p54_rx_eeprom_readback()drivers/ | +8 | 0 replies | |
| 74/675 | wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlockinclude/ net/ net/ +1 more | +6 | 0 replies | |
| 75/675 | wifi: nl80211: free RNR data on MBSSID mismatchnet/ | +3 | 0 replies | |
| 76/675 | wifi: cfg80211: derive S1G beacon TSF from S1G fieldsnet/ | +3 | 0 replies | |
| 77/675 | wifi: nl80211: validate nested MBSSID IE blobsnet/ | +10 | 0 replies | |
| 78/675 | wifi: nl80211: constrain MBSSID TX link ID rangenet/ | +1 | 0 replies | |
| 79/675 | wifi: cfg80211: validate PMSR measurement type datanet/ | +17 | 0 replies | |
| 80/675 | wifi: cfg80211: validate PMSR FTM preamble rangenet/ | +3 | 0 replies | |
| 81/675 | wifi: cfg80211: reject unsupported PMSR FTM location requestsnet/ | +2 | 0 replies | |
| 82/675 | wifi: mac80211: avoid non-S1G AID fallback for S1G assocnet/ | +4 | 0 replies | |
| 83/675 | wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ locknet/ | +7 | 0 replies | |
| 84/675 | wifi: brcmfmac: initialize SDIO data work before cleanupdrivers/ | +1 | 0 replies | |
| 85/675 | wifi: cfg80211: bound element ID read when checking non-inheritancenet/ | +1 | 0 replies | |
| 86/675 | firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()drivers/ | +3 | 0 replies | |
| 87/675 | firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculationdrivers/ include/ | +16 | 0 replies | |
| 88/675 | ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stopsound/ | +5 | 0 replies | |
| 89/675 | ASoC: amd: ps: disable MSI on resume in ACP PCI driversound/ | +29 | 0 replies | |
| 90/675 | ASoC: amd: ps: fix wrong ACP version string in pci_request_regions()sound/ | +1 | 0 replies | |
| 91/675 | ASoC: amd: ps: replace bitwise OR with logical OR in IRQ return checksound/ | +1 | 0 replies | |
| 92/675 | ASoC: cs42l43: Correct report for forced microphone jacksound/ | +2 | 0 replies | |
| 93/675 | ASoC: tas2562: fix deprecated shut-down GPIO always cleared after lookupsound/ | +3 | 0 replies | |
| 94/675 | firmware: arm_scmi: Rate-limit queue-full warnings in IRQ contextdrivers/ | +3 | 0 replies | |
| 95/675 | cpufreq: Make cpufreq_update_pressure() fall back to cpuinfo.max_freqdrivers/ | +3 | 0 replies | |
| 96/675 | ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAFdrivers/ | +15 | 0 replies | |
| 97/675 | ipv4: fib: free fib_alias with kfree_rcu() on insert error pathnet/ | +1 | 0 replies | |
| 98/675 | net/iucv: take a reference on the socket found in afiucv_hs_rcv()net/ | +4 | 0 replies | |
| 99/675 | udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()drivers/ | +5 | 0 replies | |
| 100/675 | scsi: core: wake eh reliably when using scsi_schedule_ehdrivers/ drivers/ drivers/ +1 more | +27 | 0 replies | |
| 101/675 | ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registereddrivers/ | +2 | 0 replies | |
| 102/675 | ata: sata_dwc_460ex: use platform_get_irq()drivers/ | +7 | 0 replies | |
| 103/675 | ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interruptsdrivers/ | +1 | 0 replies | |
| 104/675 | ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanningdrivers/ | +2 | 0 replies | |
| 105/675 | accel/ivpu: Fix wrong register read in LNL failure diagnosticsdrivers/ | +1 | 0 replies | |
| 106/675 | ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DACsound/ | +2 | 0 replies | |
| 107/675 | Bluetooth: qca: fix NVM tag length underflow in TLV parserdrivers/ | +1 | 0 replies | |
| 108/675 | Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued updatenet/ | +35 | 0 replies | |
| 109/675 | Bluetooth: hci_sync: extend conn_hash lookup critical sectionsnet/ | +39 | 0 replies | |
| 110/675 | Bluetooth: mgmt: fix locking in unpair_device/disconnect_syncnet/ | +16 | 0 replies | |
| 111/675 | Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmdsnet/ | +22 | 0 replies | |
| 112/675 | Bluetooth: hci_qca: Clear memdump state on invalid dump sizedrivers/ | +4 | 0 replies | |
| 113/675 | smb/client: handle overlapping allocated ranges in fallocatefs/ | +18 | 0 replies | |
| 114/675 | drm/i915/gt: use correct selftest config symboldrivers/ | +1 | 0 replies | |
| 115/675 | can: raw: add locking for raw flags bitfieldnet/ | +30 | 0 replies | |
| 116/675 | powerpc/85xx: Add fsl,ifc to common device idsarch/ | +2 | 0 replies | |
| 117/675 | powerpc/time: Prepare to stop elapsing in dynticks-idlearch/ include/ | +47 | 0 replies | |
| 118/675 | powerpc/vtime: Initialize starttime at boot for native accountingarch/ | +3 | 0 replies | |
| 119/675 | bpf, sockmap: Reject unhashed UDP sockets on sockmap updatenet/ | +2 | 0 replies | |
| 120/675 | drm/panthor: Check debugfs GEM lock initializationdrivers/ | +4 | 0 replies | |
| 121/675 | s390/checksum: Fix csum_partial() without vector facilityarch/ | +1 | 0 replies | |
| 122/675 | riscv: hwprobe: Avoid uninitialized read in hwprobe_get_cpus()arch/ | +1 | 0 replies | |
| 123/675 | can: j1939: fix lockless local-destination checknet/ | +14 | 0 replies | |
| 124/675 | drm/xe: Allow the caller to pass guc_buf_cache sizedrivers/ drivers/ | +34 | 0 replies | |
| 125/675 | drm/xe/sa: Shadow buffer support in the sub-allocator pooldrivers/ drivers/ drivers/ +2 more | +91 | 0 replies | |
| 126/675 | drm/xe/vf: Shadow buffer management for CCS read/write operationsdrivers/ drivers/ drivers/ +1 more | +73 | 0 replies | |
| 127/675 | drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO movesdrivers/ drivers/ drivers/ +2 more | +48 | 0 replies | |
| 128/675 | drm/xe/wopcm: fix WOPCM size for LNL+drivers/ | +10 | 0 replies | |
| 129/675 | ksmbd: pin conn during async oplock break notificationfs/ | +4 | 0 replies | |
| 130/675 | ksmbd: validate compound request size before reading StructureSize2fs/ | +5 | 0 replies | |
| 131/675 | drm/i915/wm: clear the plane ddb_y entries on plane disabledrivers/ | +1 | 0 replies | |
| 132/675 | drm/i915/selftests: Fix GT PM sort comparatorsdrivers/ | +4 | 0 replies | |
| 133/675 | accel/amdxdna: Fix use-after-free of mm_struct in job schedulerdrivers/ | +4 | 0 replies | |
| 134/675 | tcp: fix TIME_WAIT socket reference leak on PSP policy failurenet/ net/ | +8 | 0 replies | |
| 135/675 | dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync()drivers/ | +3 | 0 replies | |
| 136/675 | net/sched: act_tunnel_key: Defer dst_release to RCU callbacknet/ | +10 | 0 replies | |
| 137/675 | sctp: fix auth_hmacs array size in struct sctp_cookieinclude/ | +2 | 0 replies | |
| 138/675 | mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=nnet/ | +3 | 0 replies | |
| 139/675 | usb: core: sysfs: add lock to bos_descriptors_read()drivers/ | +7 | 0 replies | |
| 140/675 | wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()drivers/ | +5 | 0 replies | |
| 141/675 | usb: core: port: Deattach Type-C connector on component unbinddrivers/ | +2 | 0 replies | |
| 142/675 | usb: musb: omap2430: Do not put borrowed of_node in probedrivers/ | +0 | 0 replies | |
| 143/675 | USB: storage: add NO_ATA_1X quirk for Longmai USB Keydrivers/ | +7 | 0 replies | |
| 144/675 | usb: chipidea: fix usage_count leak when autosuspend_delay is negativedrivers/ | +1 | 0 replies | |
| 145/675 | usb: gadget: dummy_hcd: prevent fifo_req reuse during givebackdrivers/ | +27 | 0 replies | |
| 146/675 | usb: gadget: f_midi: cancel pending IN work before freeing the midi objectdrivers/ | +1 | 0 replies | |
| 147/675 | usb: gadget: printer: fix infinite loop in printer_read()drivers/ | +18 | 0 replies | |
| 148/675 | USB: gadget: snps-udc: fix device name leak on probe failuredrivers/ | +0 | 0 replies | |
| 149/675 | USB: gadget: fsl-udc: fix device name leak on probe failuredrivers/ | +0 | 0 replies | |
| 150/675 | USB: gadget: fsl-udc: fix dev_printk() devicedrivers/ drivers/ | +43 | 0 replies | |
| 151/675 | usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()drivers/ | +13 | 0 replies | |
| 152/675 | usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardowndrivers/ drivers/ | +24 | 0 replies | |
| 153/675 | usb: gadget: uvc: clamp SEND_RESPONSE length to the response bufferdrivers/ | +2 | 0 replies | |
| 154/675 | USB: serial: ftdi_sio: add support for E+H FXA291drivers/ drivers/ | +7 | 0 replies | |
| 155/675 | USB: serial: io_edgeport: cap received transmit creditsdrivers/ | +2 | 0 replies | |
| 156/675 | USB: serial: keyspan_pda: fix data loss on receive throttlingdrivers/ | +35 | 0 replies | |
| 157/675 | USB: serial: option: add TDTECH MT5710-CNdrivers/ | +1 | 0 replies | |
| 158/675 | usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmwaredrivers/ | +132 | 0 replies | |
| 159/675 | usb: typec: ucsi: Add duplicate detection to nvidia registration pathdrivers/ | +16 | 0 replies | |
| 160/675 | wifi: mwifiex: fix freeze for 60 seconds caused by request_firmwaredrivers/ | +8 | 0 replies | |
| 161/675 | RISC-V: KVM: Serialize virtual interrupt pending state updatesarch/ arch/ arch/ +1 more | +87 | 0 replies | |
| 162/675 | Revert "drm/amd/display: Add missing kdoc for ALLM parameters"drivers/ | +0 | 0 replies | |
| 163/675 | usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bitsdrivers/ drivers/ drivers/ | +12 | 0 replies | |
| 164/675 | selftests/bpf: Adjust verifier_map_ptr for the maps excl fieldtools/ | +5 | 0 replies | |
| 165/675 | selftests/bpf: Keep verifier_map_ptr exercising ops pointer accesstools/ | +30 | 0 replies | |
| 166/675 | wifi: ath9k: hif_usb: dont dereference hif_dev after re-arming firmware requestdrivers/ | +1 | 0 replies | |
| 167/675 | wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begindrivers/ | +8 | 0 replies | |
| 168/675 | hwmon: (corsair-psu) Stop device IO before calling hid_hw_stopdrivers/ | +1 | 0 replies | |
| 169/675 | hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stopdrivers/ | +1 | 0 replies | |
| 170/675 | hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stopdrivers/ | +3 | 0 replies | |
| 171/675 | hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stopdrivers/ | +1 | 0 replies | |
| 172/675 | hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stopdrivers/ | +4 | 0 replies | |
| 173/675 | watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()drivers/ | +2 | 0 replies | |
| 174/675 | watchdog: airoha: Prevent division by zero when clock frequency is zerodrivers/ | +3 | 0 replies | |
| 175/675 | wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()drivers/ | +3 | 0 replies | |
| 176/675 | wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESETdrivers/ | +4 | 0 replies | |
| 177/675 | wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESETdrivers/ | +4 | 0 replies | |
| 178/675 | firewire: net: Fix fragmented datagram reassemblydrivers/ | +21 | 0 replies | |
| 179/675 | wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handlerdrivers/ | +12 | 0 replies | |
| 180/675 | wifi: ath6kl: fix OOB read from firmware IE lengths in connect eventdrivers/ | +8 | 0 replies | |
| 181/675 | wifi: carl9170: bound memcpy length in cmd callback to prevent OOB readdrivers/ | +2 | 0 replies | |
| 182/675 | wifi: carl9170: fix OOB read from off-by-two in TX status handlerdrivers/ | +1 | 0 replies | |
| 183/675 | wifi: carl9170: fix buffer overflow in rx_stream failover pathdrivers/ | +3 | 0 replies | |
| 184/675 | btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8include/ | +1 | 0 replies | |
| 185/675 | btrfs: fix u32 to s64 type conversion in dirty_metadata_bytes accountingfs/ | +2 | 0 replies | |
| 186/675 | btrfs: dont propagate EXTENT_FLAG_LOGGING to split extent mapsfs/ | +2 | 0 replies | |
| 187/675 | btrfs: free mapping node on duplicate reloc root insertfs/ | +1 | 0 replies | |
| 188/675 | ASoC: tas2781: bound firmware description string parsingsound/ | +57 | 0 replies | |
| 189/675 | ASoC: sun4i-codec: Set quirks.playback_only for H616 codecsound/ | +1 | 0 replies | |
| 190/675 | ALSA: hda: cs35l41: validate and free ACPI mute objectsound/ | +10 | 0 replies | |
| 191/675 | ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAIsound/ | +8 | 0 replies | |
| 192/675 | ASoC: cs35l56: Dont use devres to unregister componentsound/ | +5 | 0 replies | |
| 193/675 | ASoC: cs35l56: Fix potential probe() deadlocksound/ sound/ sound/ | +17 | 0 replies | |
| 194/675 | ASoC: cs35l56: Use complete_all() to signal init_completionsound/ | +1 | 0 replies | |
| 195/675 | wifi: iwlwifi: mvm: validate SAR GEO response payload sizedrivers/ | +10 | 0 replies | |
| 196/675 | wifi: iwlwifi: fix pointer arithmetic in iwl_add_mcc_to_tas_block_listdrivers/ | +1 | 0 replies | |
| 197/675 | wifi: iwlwifi: validate payload length in iwl_pnvm_complete_fndrivers/ | +8 | 0 replies | |
| 198/675 | wifi: iwlwifi: mvm: fix read in wake packet notification handlerdrivers/ | +2 | 0 replies | |
| 199/675 | usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnectdrivers/ | +17 | 0 replies | |
| 200/675 | drivers/virt: pkvm: Fix end calculation in mmio_guard_ioremap_hook()drivers/ | +1 | 0 replies | |
| 201/675 | hwmon: (asus-ec-sensors) fix looping over banks while reading from ECdrivers/ | +1 | 0 replies | |
| 202/675 | hwmon: (asus-ec-sensors) fix EC read intervalsdrivers/ | +4 | 0 replies | |
| 203/675 | hwmon: (asus-ec-sensors) add missed handle for ENOMEMdrivers/ | +5 | 0 replies | |
| 204/675 | smb: client: validate DFS referral PathConsumedfs/ | +25 | 0 replies | |
| 205/675 | ovpn: avoid putting unrelated P2P peer on socket releasedrivers/ | +0 | 0 replies | |
| 206/675 | selftests/net: ovpn: fix getaddrinfo memory leak in ovpn_parse_remote()tools/ | +3 | 0 replies | |
| 207/675 | ovpn: fix use after free in unlock_ovpn()drivers/ | +3 | 0 replies | |
| 208/675 | ovpn: use monotonic clock for peer keepalive timeoutsdrivers/ drivers/ | +4 | 0 replies | |
| 209/675 | hwmon: occ: validate poll response sensor blocksdrivers/ | +30 | 0 replies | |
| 210/675 | regulator: mt6358: use regmap helper to read fixed LDO calibrationdrivers/ | +1 | 0 replies | |
| 211/675 | Bluetooth: btusb: validate Realtek vendor event lengthdrivers/ | +3 | 0 replies | |
| 212/675 | net: phy: marvell: fix return codedrivers/ | +1 | 0 replies | |
| 213/675 | netlink: specs: rt-link: convert bridge port flag attributes to u8Documentation/ | +20 | 0 replies | |
| 214/675 | net/packet: avoid fanout hook re-registration after unregisternet/ | +5 | 0 replies | |
| 215/675 | bonding: fix devconf_all NULL dereference when IPv6 is disableddrivers/ | +2 | 0 replies | |
| 216/675 | rds: drop incoming messages that cross network namespace boundariesnet/ | +15 | 0 replies | |
| 217/675 | gtp: parse extension headers before reading inner protocoldrivers/ | +6 | 0 replies | |
| 218/675 | rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()net/ | +4 | 0 replies | |
| 219/675 | dpaa2-switch: put MAC endpoint device on disconnectdrivers/ | +1 | 0 replies | |
| 220/675 | net: airoha: Fix potential use-after-free in airoha_ppe_deinit()drivers/ | +1 | 0 replies | |
| 221/675 | dpaa2-eth: put MAC endpoint device on disconnectdrivers/ | +1 | 0 replies | |
| 222/675 | net: airoha: Fix DMA direction for NPU mailbox bufferdrivers/ | +2 | 0 replies | |
| 223/675 | iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()drivers/ | +16 | 0 replies | |
| 224/675 | wifi: mac80211: tear down new links on vif update error pathnet/ | +4 | 0 replies | |
| 225/675 | nfp: Check resource mutex allocationdrivers/ | +3 | 0 replies | |
| 226/675 | wan: wanxl: Only reset hardware after BAR mappingdrivers/ | +2 | 0 replies | |
| 227/675 | vhost-net: fix TX stall when vhost owns virtio-net headerdrivers/ | +5 | 0 replies | |
| 228/675 | wifi: mwifiex: bound uAP association event IEs to the event bufferdrivers/ | +22 | 0 replies | |
| 229/675 | iommu/amd: Bound the early ACPI HID mapdrivers/ | +6 | 0 replies | |
| 230/675 | iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()drivers/ | +1 | 0 replies | |
| 231/675 | wifi: mac80211: recalculate TIM when a station enters power savenet/ | +2 | 0 replies | |
| 232/675 | pds_core: reject component parameter in legacy firmware updatedrivers/ | +6 | 0 replies | |
| 233/675 | arm64: Correct value returned by ESR_ELx_FSC_ADDRSZ_nL()arch/ | +1 | 0 replies | |
| 234/675 | amd-xgbe: fix MAC_AUTO_SW handling in CL37 ANdrivers/ | +8 | 0 replies | |
| 235/675 | soreuseport: Clear sk_reuseport_cb before failure in sk_clone().net/ | +2 | 0 replies | |
| 236/675 | net: Call net_enable_timestamp() before failure in sk_clone().net/ | +3 | 0 replies | |
| 237/675 | net: txgbe: fix FDIR filter leak on removedrivers/ | +1 | 0 replies | |
| 238/675 | sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkidnet/ | +1 | 0 replies | |
| 239/675 | pds_core: fix deadlock between reset thread and removedrivers/ | +4 | 0 replies | |
| 240/675 | pds_core: fix use-after-free on workqueue during removedrivers/ drivers/ | +13 | 0 replies | |
| 241/675 | pds_core: yield the CPU while waiting for the adminq to draindrivers/ | +1 | 0 replies | |
| 242/675 | pds_core: order completion reads after the ownership checkdrivers/ | +11 | 0 replies | |
| 243/675 | pds_core: fix auxiliary device add/del racesdrivers/ | +14 | 0 replies | |
| 244/675 | pds_core: check for workqueue allocation failuredrivers/ | +7 | 0 replies | |
| 245/675 | sctp: validate stream count in sctp_process_strreset_inreq()net/ | +5 | 0 replies | |
| 246/675 | net: mctp i3c: clean up notifier and buses if driver register failsdrivers/ | +7 | 0 replies | |
| 247/675 | tls: device: push pending open record on splice EOFnet/ | +4 | 0 replies | |
| 248/675 | selftests: af_unix: add USER_NS configtools/ | +1 | 0 replies | |
| 249/675 | selftests: openvswitch: add config filetools/ | +16 | 0 replies | |
| 250/675 | selftests: ovpn: add IPV6 and VETH configstools/ | +2 | 0 replies | |
| 251/675 | selftests: ovpn: increase timeouttools/ | +1 | 0 replies | |
| 252/675 | selftests: drv-net: increase timeouttools/ | +1 | 0 replies | |
| 253/675 | gtp: check skb_pull_data() return in gtp1u_send_echo_resp()drivers/ | +3 | 0 replies | |
| 254/675 | nexthop: initialize extack in nh_res_bucket_migrate()net/ | +1 | 0 replies | |
| 255/675 | tipc: fix infinite loop in __tipc_nl_compat_dumpitnet/ | +4 | 0 replies | |
| 256/675 | ppp: enable TX scatter-gatherdrivers/ | +25 | 0 replies | |
| 257/675 | ppp: dont store tx skb in the fastpathdrivers/ | +65 | 0 replies | |
| 258/675 | ppp: annotate concurrent dev->stats accessesdrivers/ | +16 | 0 replies | |
| 259/675 | wifi: mt76: mt7925: guard link STA in decap offloaddrivers/ | +3 | 0 replies | |
| 260/675 | wifi: mt76: mt7915: guard HE capability lookupsdrivers/ | +13 | 0 replies | |
| 261/675 | wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()drivers/ | +2 | 0 replies | |
| 262/675 | wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()drivers/ | +2 | 0 replies | |
| 263/675 | wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()drivers/ | +6 | 0 replies | |
| 264/675 | wifi: mt76: mt7925: fix crash in reset link replaydrivers/ | +3 | 0 replies | |
| 265/675 | wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()drivers/ | +7 | 0 replies | |
| 266/675 | wifi: brcmfmac: fix 802.1X-SHA256 call trace warningdrivers/ | +1 | 0 replies | |
| 267/675 | ovl: fix trusted xattr escape prefix matchingfs/ | +1 | 0 replies | |
| 268/675 | drm/panel: s6e3ha8: fix unmet dependency on DRM_DISPLAY_HELPERdrivers/ | +1 | 0 replies | |
| 269/675 | cred: add scoped_with_kernel_creds()include/ | +8 | 0 replies | |
| 270/675 | ovl: add override_creds cleanup guard extension for overlayfsfs/ | +5 | 0 replies | |
| 271/675 | ovl: port ovl_copyfile() to cred guardfs/ | +18 | 0 replies | |
| 272/675 | ovl: check access to copy_file_range source with src mounter credsfs/ | +15 | 0 replies | |
| 273/675 | amt: re-read skb header pointers after every pulldrivers/ | +55 | 0 replies | |
| 274/675 | amt: make the head writable before rewriting the L2 headerdrivers/ | +8 | 0 replies | |
| 275/675 | net: bridge: vlan: fix vlan range dumps starting with pvidnet/ net/ net/ +1 more | +13 | 0 replies | |
| 276/675 | net: hsr: fix memory leak on slave unregistration by removing synced VLANsnet/ | +2 | 0 replies | |
| 277/675 | net: dpaa: fix mode settingdrivers/ | +12 | 0 replies | |
| 278/675 | sctp: auth: verify auth requirement when auth_chunk is NULLnet/ | +1 | 0 replies | |
| 279/675 | vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packetsdrivers/ | +16 | 0 replies | |
| 280/675 | drm/xe/i2c: Allow per domain unique iddrivers/ | +4 | 0 replies | |
| 281/675 | drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create()drivers/ | +4 | 0 replies | |
| 282/675 | iomap: correct the range of a partial dirty clearfs/ | +8 | 0 replies | |
| 283/675 | tipc: fix u16 MTU truncation in media and bearer MTU validationnet/ | +5 | 0 replies | |
| 284/675 | drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmemdrivers/ | +10 | 0 replies | |
| 285/675 | bpf: tcp: fix double sock release on batch reallocnet/ | +4 | 0 replies | |
| 286/675 | net: stmmac: remove xstats.pcs_* membersdrivers/ drivers/ drivers/ | +2 | 0 replies | |
| 287/675 | net: stmmac: socfpga: Agilex5 EMAC platform configurationdrivers/ | +27 | 0 replies | |
| 288/675 | net: stmmac: socfpga: Enable TBS support for Agilex5drivers/ | +13 | 0 replies | |
| 289/675 | net: stmmac: socfpga: Add hardware supported cross-timestampdrivers/ drivers/ | +125 | 0 replies | |
| 290/675 | net: stmmac: cores: remove many xxx_SHIFT definitionsdrivers/ drivers/ drivers/ +15 more | +129 | 0 replies | |
| 291/675 | net: stmmac: xgmac: fix l4 filter port overwrite on register updatedrivers/ | +16 | 0 replies | |
| 292/675 | net: stmmac: fix l3l4 filter rejecting unsupported offload requestsdrivers/ | +34 | 0 replies | |
| 293/675 | net: stmmac: reset residual action in L3L4 filters on deletedrivers/ | +1 | 0 replies | |
| 294/675 | net: stmmac: enable the MAC on link up for all supported speedsdrivers/ | +37 | 0 replies | |
| 295/675 | net: gre: fix lltx regression for GRE tunnels with SEQ/CSUMnet/ net/ | +4 | 0 replies | |
| 296/675 | octeontx2-vf: set TC flower flag on MCAM entry allocationdrivers/ | +1 | 0 replies | |
| 297/675 | ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookupnet/ | +15 | 0 replies | |
| 298/675 | ppp: annotate data races in ppp_genericdrivers/ | +28 | 0 replies | |
| 299/675 | hinic: remove unused ethtool RSS user configuration buffersdrivers/ drivers/ | +0 | 0 replies | |
| 300/675 | net: qrtr: restrict socket creation to the initial network namespacenet/ | +8 | 0 replies | |
| 301/675 | raw: annotate lockless match fields in raw_v4_match()net/ net/ | +18 | 0 replies | |
| 302/675 | net/mlx5: Refactor EEPROM query error handling to return status separatelydrivers/ drivers/ drivers/ | +30 | 0 replies | |
| 303/675 | net/mlx5: Fix MCIA register buffer overflow on 32 dword readsdrivers/ include/ | +3 | 0 replies | |
| 304/675 | net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan ruledrivers/ | +1 | 0 replies | |
| 305/675 | net/mlx5e: Report zero bandwidth for non-ETS traffic classesdrivers/ | +7 | 0 replies | |
| 306/675 | net/mlx5e: Reject unsupported CB Shaper TSA in ETS validationdrivers/ | +8 | 0 replies | |
| 307/675 | octeontx2-pf: tc: fix egress ratelimitingdrivers/ | +16 | 0 replies | |
| 308/675 | net: ipv6: fix dif and sdif mismatch in raw6_icmp_errornet/ | +1 | 0 replies | |
| 309/675 | ice: allow creating VFs when !CONFIG_ICE_SWITCHDEVdrivers/ drivers/ drivers/ | +10 | 0 replies | |
| 310/675 | ice: fix LAG recipe to profile associationdrivers/ | +1 | 0 replies | |
| 311/675 | ice: prevent tstamp ring allocation for non-PF VSI typesdrivers/ | +3 | 0 replies | |
| 312/675 | ipv6: Change allocation flags to match rcu_read_lock section requirementsnet/ | +2 | 0 replies | |
| 313/675 | rds: tcp: unregister sysctl before tearing down listen socketnet/ | +2 | 0 replies | |
| 314/675 | ptp: netc: explicitly clear TMR_OFF during initializationdrivers/ | +1 | 0 replies | |
| 315/675 | mctp: check register_netdevice_notifier() error in mctp_device_init()net/ | +3 | 0 replies | |
| 316/675 | net: airoha: fix ETS channel derivation in airoha_tc_setup_qdisc_ets()drivers/ | +1 | 0 replies | |
| 317/675 | bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()net/ | +1 | 0 replies | |
| 318/675 | drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delaydrivers/ | +1 | 0 replies | |
| 319/675 | drm: renesas: rzg2l_mipi_dsi: Move rzg2l_mipi_dsi_set_display_timing()drivers/ | +10 | 0 replies | |
| 320/675 | drm/tidss: Fix missing drm_bridge_add() calldrivers/ | +2 | 0 replies | |
| 321/675 | drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()drivers/ | +2 | 0 replies | |
| 322/675 | drm/rockchip: analogix_dp: Add missing error check for platform_get_resource()drivers/ | +2 | 0 replies | |
| 323/675 | drm/imagination: Count paired job fence as dependency in prepare_job()drivers/ | +23 | 0 replies | |
| 324/675 | drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()drivers/ | +6 | 0 replies | |
| 325/675 | drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsersdrivers/ | +4 | 0 replies | |
| 326/675 | drm/dp/mst: fix buffer overflows in sideband chunk accumulationdrivers/ | +9 | 0 replies | |
| 327/675 | drm/imagination: Fit paired fragment job in the correct CCCBdrivers/ | +14 | 0 replies | |
| 328/675 | drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsersdrivers/ | +4 | 0 replies | |
| 329/675 | drm/amdgpu/gfx: fix cleaner shader IB buffer overflowdrivers/ | +5 | 0 replies | |
| 330/675 | drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isnt at 0 (v2)drivers/ | +24 | 0 replies | |
| 331/675 | drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and olderdrivers/ | +11 | 0 replies | |
| 332/675 | drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFOdrivers/ | +5 | 0 replies | |
| 333/675 | drm/sysfb: Do not page-align visible size of the framebufferdrivers/ | +1 | 0 replies | |
| 334/675 | drm/sysfb: Avoid truncating maximum stridedrivers/ | +7 | 0 replies | |
| 335/675 | drm/amdgpu/gfx9: Fix Ring and IB test fail after mode2drivers/ | +39 | 0 replies | |
| 336/675 | drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTTdrivers/ | +18 | 0 replies | |
| 337/675 | drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1drivers/ | +5 | 0 replies | |
| 338/675 | drm/nouveau: fix reversed error cleanup order in ucopy functionsdrivers/ drivers/ | +4 | 0 replies | |
| 339/675 | drm/sysfb: Avoid possible truncation with calculating visible sizedrivers/ | +2 | 0 replies | |
| 340/675 | drm/sysfb: Return errno code from drm_sysfb_get_visible_size()drivers/ drivers/ drivers/ +1 more | +9 | 0 replies | |
| 341/675 | drm/displayid: fix Tiled Display Topology ID sizedrivers/ drivers/ include/ | +10 | 0 replies | |
| 342/675 | drm/i915/gem: Add missing nospec on parallel submit slotdrivers/ | +1 | 0 replies | |
| 343/675 | drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()drivers/ | +1 | 0 replies | |
| 344/675 | drm/radeon: fix r100_copy_blit for large BOsdrivers/ | +9 | 0 replies | |
| 345/675 | drm/xe: Return error on non-migratable faults requiring devmemdrivers/ | +2 | 0 replies | |
| 346/675 | drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked bindsdrivers/ | +12 | 0 replies | |
| 347/675 | drm/xe: Hold a dma-buf reference for imported BOsdrivers/ drivers/ drivers/ +1 more | +25 | 0 replies | |
| 348/675 | drm/imagination: Fix double call to drm_sched_entity_fini()drivers/ drivers/ drivers/ | +15 | 0 replies | |
| 349/675 | drm/imagination: Fix user array stride in pvr_set_uobj_array()drivers/ | +6 | 0 replies | |
| 350/675 | drm/imagination: fix error checking of pvr_vm_context_lookup()drivers/ | +2 | 0 replies | |
| 351/675 | drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VMdrivers/ | +2 | 0 replies | |
| 352/675 | drm/amdkfd: Use kvcalloc to allocate arraysdrivers/ | +6 | 0 replies | |
| 353/675 | drm/amdkfd: Check bounds in allocate_event_notification_slotdrivers/ | +3 | 0 replies | |
| 354/675 | drm/amdkfd: Check bounds on CRIU restore queue type and mqd sizedrivers/ drivers/ drivers/ +1 more | +27 | 0 replies | |
| 355/675 | drm/amdkfd: fix 32-bit overflow in CWSR total size calculationdrivers/ | +17 | 0 replies | |
| 356/675 | drm/amd/display: Handle struct drm_plane_state.ignore_damage_clipsdrivers/ | +6 | 0 replies | |
| 357/675 | drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink referencedrivers/ | +4 | 0 replies | |
| 358/675 | drm/virtio: bound EDID block reads to the response bufferdrivers/ | +2 | 0 replies | |
| 359/675 | drm/i915/hdcp: require monotonically increasing seq_num_vdrivers/ | +4 | 0 replies | |
| 360/675 | drm/i915/hdcp: check streams[] bounds before overflowdrivers/ | +4 | 0 replies | |
| 361/675 | drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()drivers/ | +2 | 0 replies | |
| 362/675 | drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()drivers/ | +2 | 0 replies | |
| 363/675 | drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()drivers/ | +2 | 0 replies | |
| 364/675 | drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()drivers/ | +2 | 0 replies | |
| 365/675 | drm/i915: Return NULL on error in active_instancedrivers/ | +6 | 0 replies | |
| 366/675 | drm/i915/bios: range check LFP Data Block panel_type2drivers/ | +28 | 0 replies | |
| 367/675 | drm/amd/amdgpu: disable ASPM on VI if pcie dpm is disableddrivers/ | +2 | 0 replies | |
| 368/675 | drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()drivers/ | +10 | 0 replies | |
| 369/675 | drm/i915/gem: Do not leak siblings[] on proto context errordrivers/ | +14 | 0 replies | |
| 370/675 | drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEUdrivers/ | +1 | 0 replies | |
| 371/675 | drm/i915/mst: limit DP MST ESI service loopdrivers/ | +7 | 0 replies | |
| 372/675 | drm/amd/pm: fix smu14 power limit range calculationdrivers/ | +16 | 0 replies | |
| 373/675 | drm/gfx10: Program DB_RING_CONTROLdrivers/ | +9 | 0 replies | |
| 374/675 | drm/virtio: Dont detach GEM from a non-created contextdrivers/ | +8 | 0 replies | |
| 375/675 | drm/ttm: Account for NULL and handle pages in ttm_pool_backupdrivers/ | +30 | 0 replies | |
| 376/675 | drm/panthor: return error on truncated firmwaredrivers/ | +1 | 0 replies | |
| 377/675 | drm/amdgpu: Release VFCT ACPI table referencedrivers/ | +11 | 0 replies | |
| 378/675 | drm/amdgpu: Fix VFCT bus number matching with soft filterdrivers/ | +40 | 0 replies | |
| 379/675 | drm/amd/pm/ci: Dont disable MCLK DPM on Bonaire 0x6658 (R7 260X)drivers/ | +2 | 0 replies | |
| 380/675 | drm/amd/display: set new_stream to NULL after releasedrivers/ | +1 | 0 replies | |
| 381/675 | drm/amd/display: consolidate DCN vblank/flip handling onto vupdate_no_lockdrivers/ drivers/ | +229 | 0 replies | |
| 382/675 | drm/amd/display: dce100: skip non-DP stream encoders for DP MSTdrivers/ | +6 | 0 replies | |
| 383/675 | drm/amd/display: Force PWM backlight on Lenovo Legion 5 15ARH05drivers/ drivers/ include/ | +15 | 0 replies | |
| 384/675 | drm/amd/display: Fix backlight max_brightness to match exported rangedrivers/ | +3 | 0 replies | |
| 385/675 | drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridgedrivers/ | +9 | 0 replies | |
| 386/675 | drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserveddrivers/ | +8 | 0 replies | |
| 387/675 | drm/amd/display: Fix flip-done timeouts on mode1 resetdrivers/ | +11 | 0 replies | |
| 388/675 | drm/vc4: Shut down BO cache timer before teardowndrivers/ | +1 | 0 replies | |
| 389/675 | drm/amd/display: Fix missing DCE check in dm_gpureset_toggle_interrupts()drivers/ | +2 | 0 replies | |
| 390/675 | drm/vmwgfx: Validate vmw_surface_metadata::array_sizedrivers/ | +17 | 0 replies | |
| 391/675 | drm/vc4: Prevent shader BO mappings from becoming writabledrivers/ | +7 | 0 replies | |
| 392/675 | drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evictdrivers/ | +3 | 0 replies | |
| 393/675 | drm/v3d: Reach the GMP through the hub registers on V3D 7.xdrivers/ | +12 | 0 replies | |
| 394/675 | media: airspy: Return queued buffers on start_streaming() failuredrivers/ | +5 | 0 replies | |
| 395/675 | media: amlogic-c3: Add validations for ae and awb configdrivers/ | +4 | 0 replies | |
| 396/675 | media: aspeed: fix missing of_reserved_mem_device_release() on probe failuredrivers/ | +1 | 0 replies | |
| 397/675 | media: cec: seco: unregister adapter on IR probe failuredrivers/ | +5 | 0 replies | |
| 398/675 | media: cedrus: clean up media device on probe failuredrivers/ | +3 | 0 replies | |
| 399/675 | media: cedrus: Fix missing cleanup in error pathdrivers/ | +1 | 0 replies | |
| 400/675 | media: cedrus: skip invalid H.264 reference list entriesdrivers/ | +3 | 0 replies | |
| 401/675 | media: chips-media: wave5: Move src_buf Removal to finish_encodedrivers/ | +4 | 0 replies | |
| 402/675 | media: cx231xx: fix devres lifetimedrivers/ | +11 | 0 replies | |
| 403/675 | media: cx23885: add ioremap return check and cleanupdrivers/ | +12 | 0 replies | |
| 404/675 | media: i2c: alvium: fix critical pointer access in alvium_ctrl_initdrivers/ | +14 | 0 replies | |
| 405/675 | media: imx219: Fix maximum frame length in linesdrivers/ | +1 | 0 replies | |
| 406/675 | media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection for overlapping rangesdrivers/ | +18 | 0 replies | |
| 407/675 | media: iris: Fix use IRQF_NO_AUTOEN when requesting the IRQdrivers/ | +3 | 0 replies | |
| 408/675 | media: marvell-cam: fix missing pci_disable_device() on removedrivers/ | +1 | 0 replies | |
| 409/675 | media: meson: vdec: Fix memory leak in error path of vdec_opendrivers/ | +3 | 0 replies | |
| 410/675 | media: msi2500: Return queued buffers on start_streaming() failuredrivers/ | +24 | 0 replies | |
| 411/675 | media: nuvoton: npcm-video: fix error handling in npcm_video_init()drivers/ | +2 | 0 replies | |
| 412/675 | media: nuvoton: npcm-video: fix memory leaks in probe and removedrivers/ | +23 | 0 replies | |
| 413/675 | media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipedrivers/ drivers/ | +2 | 0 replies | |
| 414/675 | media: nxp: imx8-isi: Clean up already-initialized pipes on probe failuredrivers/ | +2 | 0 replies | |
| 415/675 | media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error pathdrivers/ | +4 | 0 replies | |
| 416/675 | media: nxp: imx8-isi: Fix potential out-of-bounds issuesdrivers/ drivers/ drivers/ | +32 | 0 replies | |
| 417/675 | media: nxp: imx8-isi: Fix scale factor calculation for hardware roundingdrivers/ | +8 | 0 replies | |
| 418/675 | media: pci: dm1105: Free allocated workqueuedrivers/ | +1 | 0 replies | |
| 419/675 | media: pwc: Drain fill_buf on start_streaming() failuredrivers/ | +5 | 0 replies | |
| 420/675 | media: pwc: Return queued buffers on start_streaming() failuredrivers/ | +6 | 0 replies | |
| 421/675 | media: qcom: camss: Fix RDI streaming for CSID 680drivers/ | +15 | 0 replies | |
| 422/675 | media: qcom: camss: Fix RDI streaming for CSID GEN2drivers/ | +24 | 0 replies | |
| 423/675 | media: qcom: camss: Fix RDI streaming for CSID GEN3drivers/ | +14 | 0 replies | |
| 424/675 | media: radio-si476x: Unregister v4l2_device on probe failuredrivers/ | +1 | 0 replies | |
| 425/675 | media: rtl2832: fix use-after-free in rtl2832_remove()drivers/ | +2 | 0 replies | |
| 426/675 | media: rtl2832_sdr: Return queued buffers on start_streaming() failuredrivers/ | +14 | 0 replies | |
| 427/675 | media: rzg2l-cru: Skip ICnMC configuration when ICnSVC is useddrivers/ drivers/ | +12 | 0 replies | |
| 428/675 | media: saa7134: Fix a possible memory leak in saa7134_video_init1drivers/ | +20 | 0 replies | |
| 429/675 | media: stm32-dcmipp: Return queued buffers on start_streaming() failuredrivers/ | +4 | 0 replies | |
| 430/675 | media: stm32: dcmi: unregister notifier on probe failuredrivers/ | +1 | 0 replies | |
| 431/675 | media: sun4i-csi: Return queued buffers on start_streaming() failuredrivers/ | +4 | 0 replies | |
| 432/675 | media: synopsys: hdmirx: Fix HPD lane hold timedrivers/ | +2 | 0 replies | |
| 433/675 | media: tegra-video: vi: fix invalid u32 return value in format lookupdrivers/ | +2 | 0 replies | |
| 434/675 | media: ti: vpe: unwind v4l2 device registration on probe errordrivers/ | +2 | 0 replies | |
| 435/675 | media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete()drivers/ | +9 | 0 replies | |
| 436/675 | media: v4l2-ctrls: validate HEVC active reference countsdrivers/ | +13 | 0 replies | |
| 437/675 | media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()drivers/ include/ | +6 | 0 replies | |
| 438/675 | media: v4l2-subdev: Fail {enable,disable}_streams and s_streaming nicelydrivers/ | +4 | 0 replies | |
| 439/675 | media: vb2: use ssize_t for vb2_read/vb2_writedrivers/ include/ | +10 | 0 replies | |
| 440/675 | media: verisilicon: Export only needed pixels formatsdrivers/ | +5 | 0 replies | |
| 441/675 | media: vidtv: fix reference leak on failed device registrationdrivers/ | +3 | 0 replies | |
| 442/675 | media: vimc: fix reference leak on failed device registrationdrivers/ | +1 | 0 replies | |
| 443/675 | media: vivid: add vivid_update_reduced_fps()drivers/ drivers/ drivers/ | +22 | 0 replies | |
| 444/675 | media: vivid: check for vb2_is_busy() when toggling capsdrivers/ drivers/ drivers/ | +24 | 0 replies | |
| 445/675 | media: vivid: fix cleanup bugs in vivid_init()drivers/ | +4 | 0 replies | |
| 446/675 | media: vpif_capture: fix OF node reference imbalancedrivers/ | +1 | 0 replies | |
| 447/675 | ALSA: hda/realtek: Fix speakers on Lunnen Ground 14sound/ | +9 | 0 replies | |
| 448/675 | ALSA: seq: close a re-opened queue timer in the destructorsound/ | +12 | 0 replies | |
| 449/675 | ALSA: hda: codecs: hdmi: disable keep-alive before audio format changesound/ sound/ sound/ | +42 | 0 replies | |
| 450/675 | ALSA: timer: drain a slaves callback before its master detaches itsound/ | +12 | 0 replies | |
| 451/675 | ALSA: timer: dont re-enter an instance callback that is still runningsound/ | +5 | 0 replies | |
| 452/675 | wifi: ath6kl: fix OOB access from firmware ADDBA window sizedrivers/ | +6 | 0 replies | |
| 453/675 | wifi: ath6kl: fix use-after-free in aggr_reset_state()drivers/ | +1 | 0 replies | |
| 454/675 | wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-operdrivers/ | +1 | 0 replies | |
| 455/675 | wifi: wilc1000: validate assoc response length before subtracting headerdrivers/ | +5 | 0 replies | |
| 456/675 | wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio busesdrivers/ | +6 | 0 replies | |
| 457/675 | wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio busesdrivers/ | +7 | 0 replies | |
| 458/675 | wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio busesdrivers/ | +7 | 0 replies | |
| 459/675 | wifi: brcmfmac: make release_scratchbuffers idempotentdrivers/ | +6 | 0 replies | |
| 460/675 | wifi: brcmfmac: set F2 blocksize to 256 for BCM43752drivers/ | +1 | 0 replies | |
| 461/675 | wifi: ath11k: fix refcount leak in ath11k_ahb_fw_resources_init()drivers/ | +1 | 0 replies | |
| 462/675 | staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()drivers/ | +8 | 0 replies | |
| 463/675 | staging: rtl8723bs: fix inverted HT40 secondary channel offsetdrivers/ | +1 | 0 replies | |
| 464/675 | Bluetooth: hci_sync: Protect UUID list traversalnet/ | +11 | 0 replies | |
| 465/675 | Bluetooth: RFCOMM: Fix session UAF in set_termiosinclude/ net/ net/ | +23 | 0 replies | |
| 466/675 | exec: fix unsigned loop counter wrap in transfer_args_to_stack()fs/ | +1 | 0 replies | |
| 467/675 | binfmt_misc: set have_execfd only once the interpreter is openedfs/ | +2 | 0 replies | |
| 468/675 | platform/loongarch: laptop: Explicitly reset bl_powered state when suspenddrivers/ | +1 | 0 replies | |
| 469/675 | rust_binder: only print failure if error has sourcedrivers/ | +7 | 0 replies | |
| 470/675 | rust: time: fix as_micros_ceil() to round correctly for negative Deltarust/ | +9 | 0 replies | |
| 471/675 | rust: allow `clippy::unwrap_or_default` globallyMakefile | +5 | 0 replies | |
| 472/675 | objtool/rust: add one more `noreturn` Rust function for Rust 1.99.0tools/ | +1 | 0 replies | |
| 473/675 | LoongArch: Fix address space mismatch in kexec command line lookuparch/ | +4 | 0 replies | |
| 474/675 | LoongArch: Fix oops during single-step debuggingarch/ | +2 | 0 replies | |
| 475/675 | LoongArch: Move jump_label_init() before parse_early_param()arch/ | +1 | 0 replies | |
| 476/675 | LoongArch: Retrieve CPU package ID from PPTT when availablearch/ arch/ | +28 | 0 replies | |
| 477/675 | cdrom: fix stack out-of-bounds read in CDROMVOLCTRLdrivers/ | +1 | 0 replies | |
| 478/675 | rhashtable: clear stale iter->p on table restartlib/ | +1 | 0 replies | |
| 479/675 | firmware: stratix10-svc: fix memory leaks and list corruption bugsdrivers/ | +6 | 0 replies | |
| 480/675 | x86/boot/compressed: Disable jump tablesarch/ | +1 | 0 replies | |
| 481/675 | comedi: comedi_parport: deal with premature interruptdrivers/ | +10 | 0 replies | |
| 482/675 | uio_hv_generic: Bind to FCopy device by defaultdrivers/ | +7 | 0 replies | |
| 483/675 | serial: sc16is7xx: implement gpio get_direction() callbackdrivers/ | +12 | 0 replies | |
| 484/675 | serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platformsdrivers/ | +9 | 0 replies | |
| 485/675 | selftests: ntsync: correct CONFIG_NTSYNC nametools/ | +1 | 0 replies | |
| 486/675 | mei: bus: access mei_device under device_lock on cleanupdrivers/ | +9 | 0 replies | |
| 487/675 | intel_th: fix MSC output device reference leakdrivers/ drivers/ | +2 | 0 replies | |
| 488/675 | misc: nsm: only unlock nsm_dev on post-lock error pathsdrivers/ | +1 | 0 replies | |
| 489/675 | misc: nsm: pin the module while the device is opendrivers/ | +1 | 0 replies | |
| 490/675 | tracing: Fix context switch counter truncationkernel/ | +1 | 0 replies | |
| 491/675 | tracing: Fix mmiotrace possible NULL dereferencing of hiter->devkernel/ | +1 | 0 replies | |
| 492/675 | tracing: Fix resource leak on mmiotrace trace_pipe closekernel/ | +1 | 0 replies | |
| 493/675 | tracing: Fix union collision of module and refcnt for dynamic eventskernel/ | +3 | 0 replies | |
| 494/675 | tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()kernel/ | +2 | 0 replies | |
| 495/675 | tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()kernel/ | +5 | 0 replies | |
| 496/675 | tracing/probes: Fix potential underflow in LEN_OR_ZERO macrokernel/ | +1 | 0 replies | |
| 497/675 | tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()kernel/ | +1 | 0 replies | |
| 498/675 | arm64: make huge_ptep_get handled unaligned addressesarch/ | +1 | 0 replies | |
| 499/675 | arm64: syscall: Ensure saved x0 is kept in-sync with tracer updatesarch/ | +29 | 0 replies | |
| 500/675 | Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"arch/ | +0 | 0 replies | |
| 501/675 | mptcp: decrement subflows counter on failed passive joinnet/ | +1 | 0 replies | |
| 502/675 | mptcp: only set DATA_FIN when a mapping is presentnet/ | +6 | 0 replies | |
| 503/675 | mptcp: pm: userspace: fix use-after-free in get_local_idnet/ | +5 | 0 replies | |
| 504/675 | afs: Fix afs_edit_dir_remove() to get, not find, block 0fs/ | +1 | 0 replies | |
| 505/675 | mm/kmemleak: fix checksum computation for per-cpu objectsmm/ | +4 | 0 replies | |
| 506/675 | mm/huge_memory: set PG_has_hwpoisoned only after new folio head is establishedmm/ | +8 | 0 replies | |
| 507/675 | sctp: dont free the ASCONFs own transport in DEL-IP processingnet/ | +6 | 0 replies | |
| 508/675 | sctp: avoid auth_enable sysctl UAF during netns teardownnet/ net/ | +19 | 0 replies | |
| 509/675 | sctp: close UDP tunnel sockets during netns teardownnet/ | +1 | 0 replies | |
| 510/675 | ceph: add owner/capability checks for CEPH_IOC_SET_LAYOUT*fs/ | +6 | 1 reply | |
| 511/675 | ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()fs/ | +1 | 0 replies | |
| 512/675 | ceph: fix refcount leak in ceph_readdir()fs/ | +6 | 0 replies | |
| 513/675 | ceph: fix writeback_count leak in write_folio_nounlock()fs/ | +9 | 0 replies | |
| 514/675 | libceph: bound get_version reply decode to front lennet/ | +1 | 0 replies | |
| 515/675 | libceph: Fix multiplication overflow in decode_new_up_state_weight()net/ | +4 | 0 replies | |
| 516/675 | libceph: guard missing CRUSH type name lookupnet/ | +4 | 0 replies | |
| 517/675 | libceph: refresh auth->authorizer_buf{,_len} after authorizer updatenet/ | +8 | 0 replies | |
| 518/675 | libceph: Reject monmaps advertising zero monitorsnet/ | +1 | 0 replies | |
| 519/675 | libceph: reject zero bucket types in crush_decodenet/ | +2 | 0 replies | |
| 520/675 | libceph: remove debugfs files before client teardownnet/ | +2 | 0 replies | |
| 521/675 | amt: fix use-after-free in AMT delayed worksdrivers/ | +11 | 0 replies | |
| 522/675 | ASoC: fsl: imx-card: Skip sysclk reset for active DAIs in shutdownsound/ | +8 | 0 replies | |
| 523/675 | ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYPsound/ | +25 | 0 replies | |
| 524/675 | binfmt_elf_fdpic: only honour the first PT_INTERPfs/ | +4 | 0 replies | |
| 525/675 | fs/super: fix emergency thaw double-unlock of s_umountfs/ | +5 | 0 replies | |
| 526/675 | fs: preserve ACL_DONT_CACHE state in forget_cached_acl()fs/ | +7 | 0 replies | |
| 527/675 | fscrypt: Add missing superblock check in find_or_insert_direct_key()fs/ | +7 | 0 replies | |
| 528/675 | ftrace: Add global mutex to serialize trace_parser accesskernel/ | +13 | 0 replies | |
| 529/675 | io_uring/rw: fix missing ERESTARTSYS conversion in read pathsio_uring/ | +25 | 0 replies | |
| 530/675 | iomap: fix out-of-bounds bitmap_set() with zero-length rangefs/ | +14 | 0 replies | |
| 531/675 | iommu/vt-d: Disallow SVA if page walk is not coherentdrivers/ | +1 | 0 replies | |
| 532/675 | net: stmmac: intel: skip SerDes reconfig when rate is unchangeddrivers/ | +31 | 0 replies | |
| 533/675 | phonet: pep: fix use-after-free in pep_get_sb()net/ | +2 | 0 replies | |
| 534/675 | vxlan: require CAP_NET_ADMIN in the device netns for changelinkdrivers/ | +3 | 0 replies | |
| 535/675 | net: slip: serialize receive against buffer reallocationdrivers/ | +4 | 0 replies | |
| 536/675 | geneve: require CAP_NET_ADMIN in the device netns for changelinkdrivers/ | +3 | 0 replies | |
| 537/675 | net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()net/ | +2 | 0 replies | |
| 538/675 | net/iucv: fix use-after-free of a severed iucv_pathnet/ | +14 | 0 replies | |
| 539/675 | net/mlx5e: Use sender devcom for MPV master-updrivers/ | +2 | 0 replies | |
| 540/675 | net/x25: fix use-after-free in x25_kill_by_neigh()net/ | +6 | 0 replies | |
| 541/675 | net: gro: fix double aggregation of flush-marked skbsnet/ | +3 | 0 replies | |
| 542/675 | net: hip04: fix RX buffer leak on build_skb failuredrivers/ | +8 | 0 replies | |
| 543/675 | net: pcs: xpcs: fix SGMII state readingdrivers/ | +7 | 0 replies | |
| 544/675 | proc: Fix broken error paths for namespace linksfs/ | +3 | 0 replies | |
| 545/675 | ptp: ptp_s390: Add missing facility checkdrivers/ | +5 | 0 replies | |
| 546/675 | ice: fix PTP Call Trace during PTP releasedrivers/ | +5 | 0 replies | |
| 547/675 | selftests/ftrace: Reset triggers at top level before instance looptools/ | +1 | 0 replies | |
| 548/675 | super: fix emergency thaw deadlock on frozen block devicesfs/ | +16 | 0 replies | |
| 549/675 | rbd: Reset positive result codes to zero in object map update pathdrivers/ | +6 | 0 replies | |
| 550/675 | smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink targetfs/ fs/ | +41 | 0 replies | |
| 551/675 | ksmbd: defer destroy_previous_session() until after NTLM authenticationfs/ | +4 | 0 replies | |
| 552/675 | gve: fix Rx queue stall on alloc failuredrivers/ drivers/ | +37 | 0 replies | |
| 553/675 | ice: reject out-of-range ptype in ice_parser_profile_initdrivers/ | +3 | 0 replies | |
| 554/675 | ice: use READ_ONCE() to access cached PHC timedrivers/ | +1 | 0 replies | |
| 555/675 | ila: reload IPv6 header after pskb_may_pull in checksum adjustnet/ | +12 | 0 replies | |
| 556/675 | mac802154: hold an interface reference across the scan workernet/ | +11 | 0 replies | |
| 557/675 | mac802154: llsec: reject frames shorter than the authentication tagnet/ | +5 | 0 replies | |
| 558/675 | mctp: serial: handle zero-length frames to prevent rx buffer overflowdrivers/ | +1 | 0 replies | |
| 559/675 | openvswitch: fix GSO userspace truncation underflownet/ net/ net/ +1 more | +23 | 0 replies | |
| 560/675 | ovpn: fix peer refcount leak in TCP error pathsdrivers/ | +4 | 0 replies | |
| 561/675 | ovpn: hold peer before scheduling keepalive workdrivers/ | +4 | 0 replies | |
| 562/675 | pppoe: reload header pointer after dev_hard_header()drivers/ | +1 | 0 replies | |
| 563/675 | rtase: Workaround for TX hang caused by hardware packet parsingdrivers/ drivers/ | +205 | 0 replies | |
| 564/675 | tcp: initialize standalone TCP-AO response paddingnet/ net/ | +5 | 0 replies | |
| 565/675 | tcp: challenge ACK for non-exact RST in SYN-RECEIVEDinclude/ net/ net/ | +56 | 0 replies | |
| 566/675 | tipc: clear sock->sk on the failed-insert path in tipc_sk_create()net/ | +1 | 0 replies | |
| 567/675 | vsock/virtio: collapse receive queue under memory pressurenet/ | +164 | 0 replies | |
| 568/675 | vxlan: mdb: Fix source list corruption on a failed replacedrivers/ | +18 | 0 replies | |
| 569/675 | watchdog: s32g_wdt: remove incorrect options in watchdog_info structdrivers/ | +1 | 0 replies | |
| 570/675 | drm/amd/pm: fix amdgpu_pm_info power display unitsdrivers/ | +12 | 0 replies | |
| 571/675 | drm/amd/pm: make pp_features read-only when scpm is enableddrivers/ | +5 | 0 replies | |
| 572/675 | drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()drivers/ | +5 | 0 replies | |
| 573/675 | drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()drivers/ | +5 | 0 replies | |
| 574/675 | drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()drivers/ | +5 | 0 replies | |
| 575/675 | drm/amdgpu/gfx8: drop unecessary BUG_ON()drivers/ | +0 | 0 replies | |
| 576/675 | drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()drivers/ | +4 | 0 replies | |
| 577/675 | drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()drivers/ | +5 | 0 replies | |
| 578/675 | drm/amdgpu/jpeg: fix jpeg_v4_0_3_is_idle detectiondrivers/ | +1 | 0 replies | |
| 579/675 | drm/amdgpu/jpeg: fix jpeg_v5_0_1_is_idle detectiondrivers/ | +1 | 0 replies | |
| 580/675 | drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()drivers/ | +2 | 0 replies | |
| 581/675 | drm/amdgpu/soc24: reset dGPU if suspend got aborteddrivers/ | +28 | 0 replies | |
| 582/675 | drm/amdgpu/vce: fix integer overflow in image sizedrivers/ | +14 | 0 replies | |
| 583/675 | drm/amdgpu/vcn4: avoid rereading IB param lengthdrivers/ | +9 | 0 replies | |
| 584/675 | drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()drivers/ | +3 | 0 replies | |
| 585/675 | drm/amdgpu: fix division by zero with invalid uvd dimensionsdrivers/ | +8 | 0 replies | |
| 586/675 | drm/amdgpu: fix resource leak on ACP reset timeoutdrivers/ | +7 | 0 replies | |
| 587/675 | drm/amdgpu: invoke pm_genpd_remove() before freeing genpddrivers/ | +2 | 0 replies | |
| 588/675 | drm/amdgpu: fix aperture mapping leakdrivers/ drivers/ | +16 | 0 replies | |
| 589/675 | drm/amd/pm: fix smu13 power limit range calculationdrivers/ drivers/ | +15 | 0 replies | |
| 590/675 | drm/amdgpu: fix check in amdgpu_hmm_invalidate_gfxdrivers/ drivers/ | +2 | 0 replies | |
| 591/675 | bpf: Fix same-register dst/src OOB read and pointer leak in sock_opsnet/ | +4 | 0 replies | |
| 592/675 | dm-verity-fec: fix the size of dm_verity_fec_io::erasuresdrivers/ | +2 | 0 replies | |
| 593/675 | dm-verity-fec: fix reading parity bytes split across blocks (take 3)drivers/ | +44 | 0 replies | |
| 594/675 | dm-verity-fec: replace {MAX,MIN}_RSN with {MIN,MAX}_ROOTSdrivers/ drivers/ | +6 | 0 replies | |
| 595/675 | dm-verity: fix buffer overflow in FEC calculationdrivers/ drivers/ | +3 | 0 replies | |
| 596/675 | drm/xe/uapi: Reject coh_none PAT index for CPU_ADDR_MIRRORdrivers/ | +2 | 0 replies | |
| 597/675 | ublk: wait on ublk_dev_ready() instead of ub->completiondrivers/ | +37 | 0 replies | |
| 598/675 | net: qrtr: ns: Raise node count limit to 512net/ | +2 | 0 replies | |
| 599/675 | ksmbd: validate num_subauth when copying ACE in set_ntacl_daclfs/ | +7 | 0 replies | |
| 600/675 | ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACLfs/ | +6 | 0 replies | |
| 601/675 | ksmbd: bound DACL dedup walk to copied ACEsfs/ | +10 | 0 replies | |
| 602/675 | ksmbd: validate ACE size against SID sub-authoritiesfs/ | +10 | 0 replies | |
| 603/675 | fscrypt: Avoid dynamic allocation in fscrypt_get_devices()fs/ fs/ include/ | +44 | 0 replies | |
| 604/675 | drm/amd/display: Fix DTB DTO updates breaking live pixel rate sourcesdrivers/ drivers/ | +16 | 0 replies | |
| 605/675 | landlock: Fix formattingsecurity/ security/ | +4 | 0 replies | |
| 606/675 | landlock: Account all audit data allocations to user spacesecurity/ security/ | +6 | 0 replies | |
| 607/675 | audit: widen ino fields to u64include/ kernel/ kernel/ +2 more | +17 | 0 replies | |
| 608/675 | audit: use unsigned int instead of unsignedinclude/ include/ kernel/ +6 more | +23 | 0 replies | |
| 609/675 | audit: fix recursive locking deadlock in audit_dupe_exe()kernel/ kernel/ kernel/ +1 more | +57 | 0 replies | |
| 610/675 | fuse-uring: fix race between registration and connection abortionfs/ | +16 | 0 replies | |
| 611/675 | xfs: dont replace the wrong part of the cow forkfs/ fs/ | +148 | 0 replies | |
| 612/675 | vduse: return internal vq group struct as map tokendrivers/ drivers/ drivers/ +1 more | +108 | 0 replies | |
| 613/675 | vduse: remove unused vaddr parameter of vduse_domain_free_coherentdrivers/ drivers/ drivers/ | +3 | 0 replies | |
| 614/675 | vduse: take out allocations from vduse_dev_alloc_coherentdrivers/ drivers/ | +1 | 0 replies | |
| 615/675 | VDUSE: avoid leaking information to userspacedrivers/ drivers/ | +2 | 0 replies | |
| 616/675 | arm64: dts: qcom: correct RBR opp entryarch/ arch/ arch/ +8 more | +50 | 0 replies | |
| 617/675 | arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort controllersarch/ | +12 | 0 replies | |
| 618/675 | netfilter: nf_tables: remove register tracking infrastructureinclude/ include/ include/ +49 more | +0 | 0 replies | |
| 619/675 | netfilter: nft_fib: reject fib expression on the netdev egress hooknet/ net/ | +37 | 0 replies | |
| 620/675 | netfilter: nf_conntrack_sip: remove net variable shadowingnet/ | +1 | 0 replies | |
| 621/675 | netfilter: nf_conntrack_sip: validate skb_dst() before accessing itnet/ | +5 | 0 replies | |
| 622/675 | gpu: Move DRM buddy allocator one level up (part two)Documentation/ MAINTAINERS drivers/ +35 more | +2597 | 0 replies | |
| 623/675 | gpu/buddy: bail out of try_harder when alignment cannot be honoureddrivers/ | +45 | 0 replies | |
| 624/675 | pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPPdrivers/ | +4 | 0 replies | |
| 625/675 | NFSD: pass nfsd_file to nfsd_iter_read()fs/ fs/ fs/ | +9 | 0 replies | |
| 626/675 | sunrpc: allocate a separate bvec array for socket sendsinclude/ net/ | +51 | 0 replies | |
| 627/675 | SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlistsinclude/ net/ | +214 | 0 replies | |
| 628/675 | SUNRPC: Return an error from xdr_buf_to_bvec() on overflowfs/ include/ net/ +1 more | +27 | 0 replies | |
| 629/675 | cxl/pci: Remove unnecessary CXL Endpoint handling helper functionsdrivers/ | +8 | 0 replies | |
| 630/675 | cxl/pci: Remove unnecessary CXL RCH handling helper functionsdrivers/ | +2 | 0 replies | |
| 631/675 | cxl/pci: Remove CXL VH handling in CONFIG_PCIEAER_CXL conditional blocks from core/pci.cdrivers/ drivers/ drivers/ +5 more | +233 | 0 replies | |
| 632/675 | cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability sizedrivers/ drivers/ drivers/ | +48 | 0 replies | |
| 633/675 | remoteproc: xlnx: Check remote core statedrivers/ drivers/ include/ | +54 | 0 replies | |
| 634/675 | mm/sparse-vmemmap: fix vmemmap accounting underflowmm/ | +22 | 0 replies | |
| 635/675 | kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTESkernel/ | +21 | 0 replies | |
| 636/675 | mtd: maps: vmu-flash: fix fault in unaligned fixupdrivers/ | +3 | 0 replies | |
| 637/675 | thunderbolt: Keep XDomain reference during the lifetime of a servicedrivers/ | +2 | 0 replies | |
| 638/675 | thunderbolt: Remove service debugfs entries during unregisterdrivers/ | +11 | 0 replies | |
| 639/675 | thunderbolt: Remove XDomain from the bus without holding tb->lockdrivers/ drivers/ drivers/ +4 more | +115 | 0 replies | |
| 640/675 | thunderbolt: Prevent XDomain delayed work use-after-free on disconnectdrivers/ | +13 | 0 replies | |
| 641/675 | dmaengine: dw-edma: Fix confusing cleanup.h syntaxdrivers/ | +2 | 0 replies | |
| 642/675 | dmaengine: dw-edma-pcie: Reject devices without driver datadrivers/ | +3 | 0 replies | |
| 643/675 | ovl: use linked upper dentry in copy-up tmpfilefs/ | +10 | 0 replies | |
| 644/675 | accel/amdxdna: reject command submission on devices without a submit opdrivers/ | +4 | 0 replies | |
| 645/675 | cred: add kernel_cred() helperinclude/ | +7 | 0 replies | |
| 646/675 | dm: avoid leaking the callers thread keyring via the table device filedrivers/ | +10 | 0 replies | |
| 647/675 | mmc: vub300: rename probe error labelsdrivers/ | +10 | 0 replies | |
| 648/675 | mmc: vub300: fix use-after-free on probe failuredrivers/ | +7 | 0 replies | |
| 649/675 | fs/resctrl: Split L3 dependent parts out of __mon_event_count()fs/ | +12 | 0 replies | |
| 650/675 | x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domainarch/ arch/ arch/ +5 more | +103 | 0 replies | |
| 651/675 | x86,fs/resctrl: Rename some L3 specific functionsarch/ arch/ arch/ +3 more | +32 | 0 replies | |
| 652/675 | fs/resctrl: Move allocation/free of closid_num_dirty_rmid[]fs/ | +51 | 0 replies | |
| 653/675 | fs/resctrl: Move RMID initialization to first mountfs/ fs/ fs/ | +34 | 0 replies | |
| 654/675 | fs/resctrl: Fix use-after-free during unmountfs/ | +16 | 0 replies | |
| 655/675 | net: mana: Validate the packet length reported by the NICdrivers/ | +13 | 0 replies | |
| 656/675 | net: mana: Optimize irq affinity for low vcpu configsdrivers/ | +64 | 0 replies | |
| 657/675 | octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notifydrivers/ drivers/ drivers/ | +10 | 0 replies | |
| 658/675 | octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PFdrivers/ | +9 | 0 replies | |
| 659/675 | bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.cinclude/ init/ lib/ | +59 | 0 replies | |
| 660/675 | bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()lib/ | +16 | 0 replies | |
| 661/675 | ata: libata-core: Reject an invalid concurrent positioning ranges countdrivers/ drivers/ drivers/ | +27 | 0 replies | |
| 662/675 | net: ipa: fix SMEM state handle leaks in SMP2P initdrivers/ | +22 | 0 replies | |
| 663/675 | pmdomain: imx93-blk-ctrl: convert to devm_* onlydrivers/ | +29 | 0 replies | |
| 664/675 | pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSIdrivers/ | +58 | 0 replies | |
| 665/675 | i3c: mipi-i3c-hci: Fix Hot-Join NACKdrivers/ | +2 | 0 replies | |
| 666/675 | i3c: mipi-i3c-hci: Fix handling of shared IRQs during early initializationdrivers/ drivers/ | +14 | 0 replies | |
| 667/675 | mm/damon/core: validate ranges in damon_set_regions()mm/ | +6 | 0 replies | |
| 668/675 | mm/damon/core: disallow overlapping input ranges for damon_set_regions()mm/ | +9 | 0 replies | |
| 669/675 | rust: allow `suspicious_runtime_symbol_definitions` lint for Rust >= 1.98init/ rust/ rust/ | +11 | 0 replies | |
| 670/675 | rust: device: avoid trailing ; in printing macrosrust/ | +8 | 0 replies | |
| 671/675 | usb: gadget: f_tcm: synchronize delayed set_alt with teardowndrivers/ drivers/ | +177 | 0 replies | |
| 672/675 | net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM querydrivers/ | +4 | 0 replies | |
| 673/675 | net: stmmac: fix dwmac4 transmit performance regressiondrivers/ drivers/ | +8 | 0 replies | |
| 674/675 | gpu: Fix uninitialized buddy for built-in driversdrivers/ | +2 | 0 replies | |
| 675/675 | KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplugarch/ | +6 | 0 replies |
Reviews trailers per patch
414 of 675 patches have a Reviewed-by or Acked-by.
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 311 reviewers.
Cover letter [PATCH 6.18 000/675] 6.18.42-rc1 review
This is the start of the stable review cycle for the 6.18.42 release. There are 675 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Sat, 01 Aug 2026 14:13:45 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.42-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <[email protected]>
Linux 6.18.42-rc1
Nikunj A Dadhania <[email protected]>
KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug
Koen Koning <[email protected]>
gpu: Fix uninitialized buddy for built-in drivers
Russell King (Oracle) <[email protected]>
net: stmmac: fix dwmac4 transmit performance regression
Gal Pressman <[email protected]>
net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query
Cen Zhang <[email protected]>
usb: gadget: f_tcm: synchronize delayed set_alt with teardown
Alice Ryhl <[email protected]>
rust: device: avoid trailing ; in printing macros
Miguel Ojeda <[email protected]>
rust: allow suspicious_runtime_symbol_definitions lint for Rust >= 1.98
SJ Park <[email protected]>
mm/damon/core: disallow overlapping input ranges for damon_set_regions()
SJ Park <[email protected]>
mm/damon/core: validate ranges in damon_set_regions()
Adrian Hunter <[email protected]>
i3c: mipi-i3c-hci: Fix handling of shared IRQs during early initialization
Adrian Hunter <[email protected]>
i3c: mipi-i3c-hci: Fix Hot-Join NACK
Guoniu Zhou <[email protected]>
pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI
Marco Felsch <[email protected]>
pmdomain: imx93-blk-ctrl: convert to devm_* only
Haoxiang Li <[email protected]>
net: ipa: fix SMEM state handle leaks in SMP2P init
Bryam Vargas <[email protected]>
ata: libata-core: Reject an invalid concurrent positioning ranges count
Breno Leitao <[email protected]>
bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
Breno Leitao <[email protected]>
bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
Junrui Luo <[email protected]>
octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
Michael Bommarito <[email protected]>
octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify
Shradha Gupta <[email protected]>
net: mana: Optimize irq affinity for low vcpu configs
Dexuan Cui <[email protected]>
net: mana: Validate the packet length reported by the NIC
Tony Luck <[email protected]>
fs/resctrl: Fix use-after-free during unmount
Tony Luck <[email protected]>
fs/resctrl: Move RMID initialization to first mount
Tony Luck <[email protected]>
fs/resctrl: Move allocation/free of closid_num_dirty_rmid[]
Tony Luck <[email protected]>
x86,fs/resctrl: Rename some L3 specific functions
Tony Luck <[email protected]>
x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain
Tony Luck <[email protected]>
fs/resctrl: Split L3 dependent parts out of __mon_event_count()
Guangshuo Li <[email protected]>
mmc: vub300: fix use-after-free on probe failure
Johan Hovold <[email protected]>
mmc: vub300: rename probe error labels
Ingo Blechschmidt <[email protected]>
dm: avoid leaking the caller's thread keyring via the table device file
Christian Brauner <[email protected]>
cred: add kernel_cred() helper
Doruk Tan Ozturk <[email protected]>
accel/amdxdna: reject command submission on devices without a submit op
Souvik Banerjee <[email protected]>
ovl: use linked upper dentry in copy-up tmpfile
Koichiro Den <[email protected]>
dmaengine: dw-edma-pcie: Reject devices without driver data
Krzysztof Kozlowski <[email protected]>
dmaengine: dw-edma: Fix confusing cleanup.h syntax
Michael Bommarito <[email protected]>
thunderbolt: Prevent XDomain delayed work use-after-free on disconnect
Mika Westerberg <[email protected]>
thunderbolt: Remove XDomain from the bus without holding tb->lock
Mika Westerberg <[email protected]>
thunderbolt: Remove service debugfs entries during unregister
Mika Westerberg <[email protected]>
thunderbolt: Keep XDomain reference during the lifetime of a service
Florian Fuchs <[email protected]>
mtd: maps: vmu-flash: fix fault in unaligned fixup
Pratyush Yadav (Google) <[email protected]>
kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES
Muchun Song <[email protected]>
mm/sparse-vmemmap: fix vmemmap accounting underflow
Tanmay Shah <[email protected]>
remoteproc: xlnx: Check remote core state
Terry Bowman <[email protected]>
cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size
Dave Jiang <[email protected]>
cxl/pci: Remove CXL VH handling in CONFIG_PCIEAER_CXL conditional blocks from core/pci.c
Terry Bowman <[email protected]>
cxl/pci: Remove unnecessary CXL RCH handling helper functions
Terry Bowman <[email protected]>
cxl/pci: Remove unnecessary CXL Endpoint handling helper functions
Chuck Lever <[email protected]>
SUNRPC: Return an error from xdr_buf_to_bvec() on overflow
Chuck Lever <[email protected]>
SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists
Jeff Layton <[email protected]>
sunrpc: allocate a separate bvec array for socket sends
Mike Snitzer <[email protected]>
NFSD: pass nfsd_file to nfsd_iter_read()
Claudiu Beznea <[email protected]>
pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP
Arunpravin Paneer Selvam <[email protected]>
gpu/buddy: bail out of try_harder when alignment cannot be honoured
Joel Fernandes <[email protected]>
gpu: Move DRM buddy allocator one level up (part two)
Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
Florian Westphal <[email protected]>
netfilter: nf_conntrack_sip: remove net variable shadowing
Theodor Arsenij Larionov-Trichkine <[email protected]>
netfilter: nft_fib: reject fib expression on the netdev egress hook
Florian Westphal <[email protected]>
netfilter: nf_tables: remove register tracking infrastructure
Abel Vesa <[email protected]>
arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort controllers
Dmitry Baryshkov <[email protected]>
arm64: dts: qcom: correct RBR opp entry
Jason Wang <[email protected]>
VDUSE: avoid leaking information to userspace
Eugenio Pérez <[email protected]>
vduse: take out allocations from vduse_dev_alloc_coherent
Eugenio Pérez <[email protected]>
vduse: remove unused vaddr parameter of vduse_domain_free_coherent
Eugenio Pérez <[email protected]>
vduse: return internal vq group struct as map token
Darrick J. Wong <[email protected]>
xfs: don't replace the wrong part of the cow fork
Joanne Koong <[email protected]>
fuse-uring: fix race between registration and connection abortion
Ricardo Robaina <[email protected]>
audit: fix recursive locking deadlock in audit_dupe_exe()
Ricardo Robaina <[email protected]>
audit: use 'unsigned int' instead of 'unsigned'
Jeff Layton <[email protected]>
audit: widen ino fields to u64
Mickaël Salaün <[email protected]>
landlock: Account all audit data allocations to user space
Mickaël Salaün <[email protected]>
landlock: Fix formatting
Harry Wentland <[email protected]>
drm/amd/display: Fix DTB DTO updates breaking live pixel rate sources
Eric Biggers <[email protected]>
fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
Namjae Jeon <[email protected]>
ksmbd: validate ACE size against SID sub-authorities
Namjae Jeon <[email protected]>
ksmbd: bound DACL dedup walk to copied ACEs
Wentao Guan <[email protected]>
ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL
Haofeng Li <[email protected]>
ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
Youssef Samir <[email protected]>
net: qrtr: ns: Raise node count limit to 512
Ming Lei <[email protected]>
ublk: wait on ublk_dev_ready() instead of ub->completion
Jia Yao <[email protected]>
drm/xe/uapi: Reject coh_none PAT index for CPU_ADDR_MIRROR
Mikulas Patocka <[email protected]>
dm-verity: fix buffer overflow in FEC calculation
Eric Biggers <[email protected]>
dm-verity-fec: replace {MAX,MIN}_RSN with {MIN,MAX}_ROOTS
Eric Biggers <[email protected]>
dm-verity-fec: fix reading parity bytes split across blocks (take 3)
Eric Biggers <[email protected]>
dm-verity-fec: fix the size of dm_verity_fec_io::erasures
Jiayuan Chen <[email protected]>
bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops
Christian König <[email protected]>
drm/amdgpu: fix check in amdgpu_hmm_invalidate_gfx
Yang Wang <[email protected]>
drm/amd/pm: fix smu13 power limit range calculation
Asad Kamal <[email protected]>
drm/amdgpu: fix aperture mapping leak
Ce Sun <[email protected]>
drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
Ce Sun <[email protected]>
drm/amdgpu: fix resource leak on ACP reset timeout
Boyuan Zhang <[email protected]>
drm/amdgpu: fix division by zero with invalid uvd dimensions
Luca Coelho <[email protected]>
drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
Boyuan Zhang <[email protected]>
drm/amdgpu/vcn4: avoid rereading IB param length
Boyuan Zhang <[email protected]>
drm/amdgpu/vce: fix integer overflow in image size
Jakob Linke <[email protected]>
drm/amdgpu/soc24: reset dGPU if suspend got aborted
Alex Deucher <[email protected]>
drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
Boyuan Zhang <[email protected]>
drm/amdgpu/jpeg: fix jpeg_v5_0_1_is_idle detection
Boyuan Zhang <[email protected]>
drm/amdgpu/jpeg: fix jpeg_v4_0_3_is_idle detection
Alex Deucher <[email protected]>
drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
Alex Deucher <[email protected]>
drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()
Alex Deucher <[email protected]>
drm/amdgpu/gfx8: drop unecessary BUG_ON()
Alex Deucher <[email protected]>
drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()
Alex Deucher <[email protected]>
drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()
Alex Deucher <[email protected]>
drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()
Yang Wang <[email protected]>
drm/amd/pm: make pp_features read-only when scpm is enabled
Yang Wang <[email protected]>
drm/amd/pm: fix amdgpu_pm_info power display units
Ethan Nelson-Moore <[email protected]>
watchdog: s32g_wdt: remove incorrect options in watchdog_info struct
James Raphael Tiovalen <[email protected]>
vxlan: mdb: Fix source list corruption on a failed replace
Stefano Garzarella <[email protected]>
vsock/virtio: collapse receive queue under memory pressure
Daehyeon Ko <[email protected]>
tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
Yuxiang Yang <[email protected]>
tcp: challenge ACK for non-exact RST in SYN-RECEIVED
Yizhou Zhao <[email protected]>
tcp: initialize standalone TCP-AO response padding
Justin Lai <[email protected]>
rtase: Workaround for TX hang caused by hardware packet parsing
Asim Viladi Oglu Manizada <[email protected]>
pppoe: reload header pointer after dev_hard_header()
Shuvam Pandey <[email protected]>
ovpn: hold peer before scheduling keepalive work
Pavitra Jha <[email protected]>
ovpn: fix peer refcount leak in TCP error paths
Kyle Zeng <[email protected]>
openvswitch: fix GSO userspace truncation underflow
Doruk Tan Ozturk <[email protected]>
mctp: serial: handle zero-length frames to prevent rx buffer overflow
Doruk Tan Ozturk <[email protected]>
mac802154: llsec: reject frames shorter than the authentication tag
Ibrahim Hashimov <[email protected]>
mac802154: hold an interface reference across the scan worker
Michael Bommarito <[email protected]>
ila: reload IPv6 header after pskb_may_pull in checksum adjust
Sergey Temerkhanov <[email protected]>
ice: use READ_ONCE() to access cached PHC time
Aleksandr Loktionov <[email protected]>
ice: reject out-of-range ptype in ice_parser_profile_init
Eddie Phillips <[email protected]>
gve: fix Rx queue stall on alloc failure
James Montgomery <[email protected]>
ksmbd: defer destroy_previous_session() until after NTLM authentication
Carl Johnson <[email protected]>
smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target
Raphael Zimmer <[email protected]>
rbd: Reset positive result codes to zero in object map update path
Christian Brauner <[email protected]>
super: fix emergency thaw deadlock on frozen block devices
Masami Hiramatsu (Google) <[email protected]>
selftests/ftrace: Reset triggers at top level before instance loop
Paul Greenwalt <[email protected]>
ice: fix PTP Call Trace during PTP release
Sven Schnelle <[email protected]>
ptp: ptp_s390: Add missing facility check
Jann Horn <[email protected]>
proc: Fix broken error paths for namespace links
Coia Prant <[email protected]>
net: pcs: xpcs: fix SGMII state reading
Fan Wu <[email protected]>
net: hip04: fix RX buffer leak on build_skb failure
Shiming Cheng <[email protected]>
net: gro: fix double aggregation of flush-marked skbs
David Lee <[email protected]>
net/x25: fix use-after-free in x25_kill_by_neigh()
Manjunath Patil <[email protected]>
net/mlx5e: Use sender devcom for MPV master-up
Bryam Vargas <[email protected]>
net/iucv: fix use-after-free of a severed iucv_path
Hidayath Khan <[email protected]>
net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
Doruk Tan Ozturk <[email protected]>
geneve: require CAP_NET_ADMIN in the device netns for changelink
Sungmin Kang <[email protected]>
net: slip: serialize receive against buffer reallocation
Doruk Tan Ozturk <[email protected]>
vxlan: require CAP_NET_ADMIN in the device netns for changelink
Breno Leitao <[email protected]>
phonet: pep: fix use-after-free in pep_get_sb()
Markus Breitenberger <[email protected]>
net: stmmac: intel: skip SerDes reconfig when rate is unchanged
Lu Baolu <[email protected]>
iommu/vt-d: Disallow SVA if page walk is not coherent
Zhang Yi <[email protected]>
iomap: fix out-of-bounds bitmap_set() with zero-length range
Yitang Yang <[email protected]>
io_uring/rw: fix missing ERESTARTSYS conversion in read paths
Tengda Wu <[email protected]>
ftrace: Add global mutex to serialize trace_parser access
Eric Biggers <[email protected]>
fscrypt: Add missing superblock check in find_or_insert_direct_key()
Amir Goldstein <[email protected]>
fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
Chen Changcheng <[email protected]>
fs/super: fix emergency thaw double-unlock of s_umount
Christian Brauner <[email protected]>
binfmt_elf_fdpic: only honour the first PT_INTERP
Chancel Liu <[email protected]>
ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP
Chancel Liu <[email protected]>
ASoC: fsl: imx-card: Skip sysclk reset for active DAIs in shutdown
Shihuang Liu <[email protected]>
amt: fix use-after-free in AMT delayed works
Douya Le <[email protected]>
libceph: remove debugfs files before client teardown
Douya Le <[email protected]>
libceph: reject zero bucket types in crush_decode
Raphael Zimmer <[email protected]>
libceph: Reject monmaps advertising zero monitors
Shuangpeng Bai <[email protected]>
libceph: refresh auth->authorizer_buf{,_len} after authorizer updateZhao Zhang <[email protected]>
libceph: guard missing CRUSH type name lookup
Raphael Zimmer <[email protected]>
libceph: Fix multiplication overflow in decode_new_up_state_weight()
Douya Le <[email protected]>
libceph: bound get_version reply decode to front len
Wentao Liang <[email protected]>
ceph: fix writeback_count leak in write_folio_nounlock()
WenTao Liang <[email protected]>
ceph: fix refcount leak in ceph_readdir()
Bryam Vargas <[email protected]>
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
Max Kellermann <[email protected]>
ceph: add owner/capability checks for CEPH_IOC_SET_LAYOUT*
Zhiling Zou <[email protected]>
sctp: close UDP tunnel sockets during netns teardown
Zhiling Zou <[email protected]>
sctp: avoid auth_enable sysctl UAF during netns teardown
Jun Yang <[email protected]>
sctp: don't free the ASCONF's own transport in DEL-IP processing
Rik van Riel <[email protected]>
mm/huge_memory: set PG_has_hwpoisoned only after new folio head is established
Breno Leitao <[email protected]>
mm/kmemleak: fix checksum computation for per-cpu objects
David Howells <[email protected]>
afs: Fix afs_edit_dir_remove() to get, not find, block 0
Geliang Tang <[email protected]>
mptcp: pm: userspace: fix use-after-free in get_local_id
Michael Bommarito <[email protected]>
mptcp: only set DATA_FIN when a mapping is present
Chenguang Zhao <[email protected]>
mptcp: decrement subflows counter on failed passive join
Will Deacon <[email protected]>
Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"
Will Deacon <[email protected]>
arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
Dev Jain <[email protected]>
arm64: make huge_ptep_get handled unaligned addresses
Masami Hiramatsu (Google) <[email protected]>
tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()
Masami Hiramatsu (Google) <[email protected]>
tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
Masami Hiramatsu (Google) <[email protected]>
tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()
Masami Hiramatsu (Google) <[email protected]>
tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()
Masami Hiramatsu (Google) <[email protected]>
tracing: Fix union collision of module and refcnt for dynamic events
deepakraog <[email protected]>
tracing: Fix resource leak on mmiotrace trace_pipe close
Steven Rostedt <[email protected]>
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
Usama Arif <[email protected]>
tracing: Fix context switch counter truncation
Xu Rao <[email protected]>
misc: nsm: pin the module while the device is open
Runyu Xiao <[email protected]>
misc: nsm: only unlock nsm_dev on post-lock error paths
Guangshuo Li <[email protected]>
intel_th: fix MSC output device reference leak
Alexander Usyskin <[email protected]>
mei: bus: access mei_device under device_lock on cleanup
Ethan Nelson-Moore <[email protected]>
selftests: ntsync: correct CONFIG_NTSYNC name
Jiangshan Yi <[email protected]>
serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
Hugo Villeneuve <[email protected]>
serial: sc16is7xx: implement gpio get_direction() callback
Ben Hutchings <[email protected]>
uio_hv_generic: Bind to FCopy device by default
Ian Abbott <[email protected]>
comedi: comedi_parport: deal with premature interrupt
Nathan Chancellor <[email protected]>
x86/boot/compressed: Disable jump tables
Tze Yee Ng <[email protected]>
firmware: stratix10-svc: fix memory leaks and list corruption bugs
Cen Zhang (Microsoft) <[email protected]>
rhashtable: clear stale iter->p on table restart
Xu Rao <[email protected]>
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
Rong Bao <[email protected]>
LoongArch: Retrieve CPU package ID from PPTT when available
Kanglong Wang <[email protected]>
LoongArch: Move jump_label_init() before parse_early_param()
Haoran Jiang <[email protected]>
LoongArch: Fix oops during single-step debugging
George Guo <[email protected]>
LoongArch: Fix address space mismatch in kexec command line lookup
Miguel Ojeda <[email protected]>
objtool/rust: add one more noreturn Rust function for Rust 1.99.0
Alexandre Courbot <[email protected]>
rust: allow clippy::unwrap_or_default globally
FUJITA Tomonori <[email protected]>
rust: time: fix as_micros_ceil() to round correctly for negative Delta
Alice Ryhl <[email protected]>
rust_binder: only print failure if error has source
Zixing Liu <[email protected]>
platform/loongarch: laptop: Explicitly reset bl_powered state when suspend
Christian Brauner <[email protected]>
binfmt_misc: set have_execfd only once the interpreter is opened
Christian Brauner <[email protected]>
exec: fix unsigned loop counter wrap in transfer_args_to_stack()
Chengfeng Ye <[email protected]>
Bluetooth: RFCOMM: Fix session UAF in set_termios
Chengfeng Ye <[email protected]>
Bluetooth: hci_sync: Protect UUID list traversal
MinJea Kim <[email protected]>
staging: rtl8723bs: fix inverted HT40 secondary channel offset
Moksh Panicker <[email protected]>
staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
Wentao Liang <[email protected]>
wifi: ath11k: fix refcount leak in ath11k_ahb_fw_resources_init()
LiangCheng Wang <[email protected]>
wifi: brcmfmac: set F2 blocksize to 256 for BCM43752
Fan Wu <[email protected]>
wifi: brcmfmac: make release_scratchbuffers idempotent
Devin Wittmayer <[email protected]>
wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses
Devin Wittmayer <[email protected]>
wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
Devin Wittmayer <[email protected]>
wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
Huihui Huang <[email protected]>
wifi: wilc1000: validate assoc response length before subtracting header
Doruk Tan Ozturk <[email protected]>
wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
Daniel Hodges <[email protected]>
wifi: ath6kl: fix use-after-free in aggr_reset_state()
Tristan Madani <[email protected]>
wifi: ath6kl: fix OOB access from firmware ADDBA window size
Norbert Szetei <[email protected]>
ALSA: timer: don't re-enter an instance callback that is still running
Norbert Szetei <[email protected]>
ALSA: timer: drain a slave's callback before its master detaches it
Kai Vehmanen <[email protected]>
ALSA: hda: codecs: hdmi: disable keep-alive before audio format change
Norbert Szetei <[email protected]>
ALSA: seq: close a re-opened queue timer in the destructor
Nikita Maksimov <[email protected]>
ALSA: hda/realtek: Fix speakers on Lunnen Ground 14
Johan Hovold <[email protected]>
media: vpif_capture: fix OF node reference imbalance
Guangshuo Li <[email protected]>
media: vivid: fix cleanup bugs in vivid_init()
Hans Verkuil <[email protected]>
media: vivid: check for vb2_is_busy() when toggling caps
Hans Verkuil <[email protected]>
media: vivid: add vivid_update_reduced_fps()
Guangshuo Li <[email protected]>
media: vimc: fix reference leak on failed device registration
Guangshuo Li <[email protected]>
media: vidtv: fix reference leak on failed device registration
Benjamin Gaignard <[email protected]>
media: verisilicon: Export only needed pixels formats
Zile Xiong <[email protected]>
media: vb2: use ssize_t for vb2_read/vb2_write
Sakari Ailus <[email protected]>
media: v4l2-subdev: Fail {enable,disable}_streams and s_streaming nicely
Mirela Rabulea <[email protected]>
media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()
Pengpeng Hou <[email protected]>
media: v4l2-ctrls: validate HEVC active reference counts
Sergey Shtylyov <[email protected]>
media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete()
Myeonghun Pak <[email protected]>
media: ti: vpe: unwind v4l2 device registration on probe error
Hungyu Lin <[email protected]>
media: tegra-video: vi: fix invalid u32 return value in format lookup
Dmitry Osipenko <[email protected]>
media: synopsys: hdmirx: Fix HPD lane hold time
Valery Borovsky <[email protected]>
media: sun4i-csi: Return queued buffers on start_streaming() failure
Myeonghun Pak <[email protected]>
media: stm32: dcmi: unregister notifier on probe failure
Valery Borovsky <[email protected]>
media: stm32-dcmipp: Return queued buffers on start_streaming() failure
Ma Ke <[email protected]>
media: saa7134: Fix a possible memory leak in saa7134_video_init1
Tommaso Merciai <[email protected]>
media: rzg2l-cru: Skip ICnMC configuration when ICnSVC is used
Valery Borovsky <[email protected]>
media: rtl2832_sdr: Return queued buffers on start_streaming() failure
Deepanshu Kartikey <[email protected]>
media: rtl2832: fix use-after-free in rtl2832_remove()
Myeonghun Pak <[email protected]>
media: radio-si476x: Unregister v4l2_device on probe failure
Bryan O'Donoghue <[email protected]>
media: qcom: camss: Fix RDI streaming for CSID GEN3
Bryan O'Donoghue <[email protected]>
media: qcom: camss: Fix RDI streaming for CSID GEN2
Bryan O'Donoghue <[email protected]>
media: qcom: camss: Fix RDI streaming for CSID 680
Valery Borovsky <[email protected]>
media: pwc: Return queued buffers on start_streaming() failure
Valery Borovsky <[email protected]>
media: pwc: Drain fill_buf on start_streaming() failure
Krzysztof Kozlowski <[email protected]>
media: pci: dm1105: Free allocated workqueue
Guoniu Zhou <[email protected]>
media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding
Guoniu Zhou <[email protected]>
media: nxp: imx8-isi: Fix potential out-of-bounds issues
Xiaolei Wang <[email protected]>
media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path
Xiaolei Wang <[email protected]>
media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure
Xiaolei Wang <[email protected]>
media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe
David Carlier <[email protected]>
media: nuvoton: npcm-video: fix memory leaks in probe and remove
David Carlier <[email protected]>
media: nuvoton: npcm-video: fix error handling in npcm_video_init()
Valery Borovsky <[email protected]>
media: msi2500: Return queued buffers on start_streaming() failure
Anand Moon <[email protected]>
media: meson: vdec: Fix memory leak in error path of vdec_open
Guangshuo Li <[email protected]>
media: marvell-cam: fix missing pci_disable_device() on remove
Dmitry Baryshkov <[email protected]>
media: iris: Fix use IRQF_NO_AUTOEN when requesting the IRQ
Marco Nenciarini <[email protected]>
media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection for overlapping ranges
Sakari Ailus <[email protected]>
media: imx219: Fix maximum frame length in lines
Martin Hecht <[email protected]>
media: i2c: alvium: fix critical pointer access in alvium_ctrl_init
Wang Jun <[email protected]>
media: cx23885: add ioremap return check and cleanup
Johan Hovold <[email protected]>
media: cx231xx: fix devres lifetime
Brandon Brnich <[email protected]>
media: chips-media: wave5: Move src_buf Removal to finish_encode
Pengpeng Hou <[email protected]>
media: cedrus: skip invalid H.264 reference list entries
Samuel Holland <[email protected]>
media: cedrus: Fix missing cleanup in error path
Myeonghun Pak <[email protected]>
media: cedrus: clean up media device on probe failure
Myeonghun Pak <[email protected]>
media: cec: seco: unregister adapter on IR probe failure
David Carlier <[email protected]>
media: aspeed: fix missing of_reserved_mem_device_release() on probe failure
Ricardo Ribalda <[email protected]>
media: amlogic-c3: Add validations for ae and awb config
Valery Borovsky <[email protected]>
media: airspy: Return queued buffers on start_streaming() failure
Maíra Canal <[email protected]>
drm/v3d: Reach the GMP through the hub registers on V3D 7.x
Matthew Brost <[email protected]>
drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict
Linmao Li <[email protected]>
drm/vc4: Prevent shader BO mappings from becoming writable
Ian Forbes <[email protected]>
drm/vmwgfx: Validate vmw_surface_metadata::array_size
Leo Li <[email protected]>
drm/amd/display: Fix missing DCE check in dm_gpureset_toggle_interrupts()
Linmao Li <[email protected]>
drm/vc4: Shut down BO cache timer before teardown
Leo Li <[email protected]>
drm/amd/display: Fix flip-done timeouts on mode1 reset
Zhu Lingshan <[email protected]>
drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
Mario Limonciello <[email protected]>
drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge
Mario Limonciello <[email protected]>
drm/amd/display: Fix backlight max_brightness to match exported range
Alessandro Rinaldi <[email protected]>
drm/amd/display: Force PWM backlight on Lenovo Legion 5 15ARH05
Andriy Korud <[email protected]>
drm/amd/display: dce100: skip non-DP stream encoders for DP MST
Leo Li <[email protected]>
drm/amd/display: consolidate DCN vblank/flip handling onto vupdate_no_lock
WenTao Liang <[email protected]>
drm/amd/display: set new_stream to NULL after release
Timur Kristóf <[email protected]>
drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X)
Mario Limonciello <[email protected]>
drm/amdgpu: Fix VFCT bus number matching with soft filter
Mario Limonciello <[email protected]>
drm/amdgpu: Release VFCT ACPI table reference
Osama Abdelkader <[email protected]>
drm/panthor: return error on truncated firmware
Matthew Brost <[email protected]>
drm/ttm: Account for NULL and handle pages in ttm_pool_backup
Jason Macnak <[email protected]>
drm/virtio: Don't detach GEM from a non-created context
Alex Deucher <[email protected]>
drm/gfx10: Program DB_RING_CONTROL
Yang Wang <[email protected]>
drm/amd/pm: fix smu14 power limit range calculation
Jani Nikula <[email protected]>
drm/i915/mst: limit DP MST ESI service loop
Joonas Lahtinen <[email protected]>
drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
Joonas Lahtinen <[email protected]>
drm/i915/gem: Do not leak siblings[] on proto context error
Shahyan Soltani <[email protected]>
drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()
Kenneth Feng <[email protected]>
drm/amd/amdgpu: disable ASPM on VI if pcie dpm is disabled
Jani Nikula <[email protected]>
drm/i915/bios: range check LFP Data Block panel_type2
Joonas Lahtinen <[email protected]>
drm/i915: Return NULL on error in active_instance
Alex Deucher <[email protected]>
drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
Alex Deucher <[email protected]>
drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
Alex Deucher <[email protected]>
drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
Alex Deucher <[email protected]>
drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()
Jani Nikula <[email protected]>
drm/i915/hdcp: check streams[] bounds before overflow
Jani Nikula <[email protected]>
drm/i915/hdcp: require monotonically increasing seq_num_v
Bryam Vargas <[email protected]>
drm/virtio: bound EDID block reads to the response buffer
WenTao Liang <[email protected]>
drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference
Thomas Zimmermann <[email protected]>
drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips
Yongqiang Sun <[email protected]>
drm/amdkfd: fix 32-bit overflow in CWSR total size calculation
David Francis <[email protected]>
drm/amdkfd: Check bounds on CRIU restore queue type and mqd size
David Francis <[email protected]>
drm/amdkfd: Check bounds in allocate_event_notification_slot
David Francis <[email protected]>
drm/amdkfd: Use kvcalloc to allocate arrays
Icenowy Zheng <[email protected]>
drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM
Luigi Santivetti <[email protected]>
drm/imagination: fix error checking of pvr_vm_context_lookup()
Shuvam Pandey <[email protected]>
drm/imagination: Fix user array stride in pvr_set_uobj_array()
Brajesh Gupta <[email protected]>
drm/imagination: Fix double call to drm_sched_entity_fini()
Nitin Gote <[email protected]>
drm/xe: Hold a dma-buf reference for imported BOs
Matthew Brost <[email protected]>
drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds
Matthew Brost <[email protected]>
drm/xe: Return error on non-migratable faults requiring devmem
Pavel Ondračka <[email protected]>
drm/radeon: fix r100_copy_blit for large BOs
Wentao Liang <[email protected]>
drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()
Joonas Lahtinen <[email protected]>
drm/i915/gem: Add missing nospec on parallel submit slot
Jani Nikula <[email protected]>
drm/displayid: fix Tiled Display Topology ID size
Thomas Zimmermann <[email protected]>
drm/sysfb: Return errno code from drm_sysfb_get_visible_size()
Thomas Zimmermann <[email protected]>
drm/sysfb: Avoid possible truncation with calculating visible size
Junrui Luo <[email protected]>
drm/nouveau: fix reversed error cleanup order in ucopy functions
Mario Limonciello <[email protected]>
drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
Timur Kristóf <[email protected]>
drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT
Jiqian Chen <[email protected]>
drm/amdgpu/gfx9: Fix Ring and IB test fail after mode2
Thomas Zimmermann <[email protected]>
drm/sysfb: Avoid truncating maximum stride
Thomas Zimmermann <[email protected]>
drm/sysfb: Do not page-align visible size of the framebuffer
Mario Limonciello <[email protected]>
drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO
Timur Kristóf <[email protected]>
drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older
Timur Kristóf <[email protected]>
drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2)
Asad Kamal <[email protected]>
drm/amdgpu/gfx: fix cleaner shader IB buffer overflow
Ashutosh Desai <[email protected]>
drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers
Alessio Belle <[email protected]>
drm/imagination: Fit paired fragment job in the correct CCCB
Ashutosh Desai <[email protected]>
drm/dp/mst: fix buffer overflows in sideband chunk accumulation
Ashutosh Desai <[email protected]>
drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers
Vitor Soares <[email protected]>
drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
Alessio Belle <[email protected]>
drm/imagination: Count paired job fence as dependency in prepare_job()
Chen Ni <[email protected]>
drm/rockchip: analogix_dp: Add missing error check for platform_get_resource()
Sergey Shtylyov <[email protected]>
drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
Tomi Valkeinen <[email protected]>
drm/tidss: Fix missing drm_bridge_add() call
Biju Das <[email protected]>
drm: renesas: rzg2l_mipi_dsi: Move rzg2l_mipi_dsi_set_display_timing()
Biju Das <[email protected]>
drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
Chengfeng Ye <[email protected]>
bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
Lorenzo Bianconi <[email protected]>
net: airoha: fix ETS channel derivation in airoha_tc_setup_qdisc_ets()
Minhong He <[email protected]>
mctp: check register_netdevice_notifier() error in mctp_device_init()
Clark Wang <[email protected]>
ptp: netc: explicitly clear TMR_OFF during initialization
Cen Zhang (Microsoft) <[email protected]>
rds: tcp: unregister sysctl before tearing down listen socket
Nikola Z. Ivanov <[email protected]>
ipv6: Change allocation flags to match rcu_read_lock section requirements
Paul Greenwalt <[email protected]>
ice: prevent tstamp ring allocation for non-PF VSI types
Marcin Szycik <[email protected]>
ice: fix LAG recipe to profile association
Vincent Chen <[email protected]>
ice: allow creating VFs when !CONFIG_ICE_SWITCHDEV
Li RongQing <[email protected]>
net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
Hariprasad Kelam <[email protected]>
octeontx2-pf: tc: fix egress ratelimiting
Alexei Lazar <[email protected]>
net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
Alexei Lazar <[email protected]>
net/mlx5e: Report zero bandwidth for non-ETS traffic classes
Yael Chemla <[email protected]>
net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule
Gal Pressman <[email protected]>
net/mlx5: Fix MCIA register buffer overflow on 32 dword reads
Gal Pressman <[email protected]>
net/mlx5: Refactor EEPROM query error handling to return status separately
Runyu Xiao <[email protected]>
raw: annotate lockless match fields in raw_v4_match()
Aldo Ariel Panzardo <[email protected]>
net: qrtr: restrict socket creation to the initial network namespace
Chenguang Zhao <[email protected]>
hinic: remove unused ethtool RSS user configuration buffers
Eric Dumazet <[email protected]>
ppp: annotate data races in ppp_generic
Eric Dumazet <[email protected]>
ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup
Suman Ghosh <[email protected]>
octeontx2-vf: set TC flower flag on MCAM entry allocation
Yun Zhou <[email protected]>
net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM
vadik likholetov <[email protected]>
net: stmmac: enable the MAC on link up for all supported speeds
Nazim Amirul <[email protected]>
net: stmmac: reset residual action in L3L4 filters on delete
Nazim Amirul <[email protected]>
net: stmmac: fix l3l4 filter rejecting unsupported offload requests
Nazim Amirul <[email protected]>
net: stmmac: xgmac: fix l4 filter port overwrite on register update
Russell King (Oracle) <[email protected]>
net: stmmac: cores: remove many xxx_SHIFT definitions
Rohan G Thomas <[email protected]>
net: stmmac: socfpga: Add hardware supported cross-timestamp
Rohan G Thomas <[email protected]>
net: stmmac: socfpga: Enable TBS support for Agilex5
Rohan G Thomas <[email protected]>
net: stmmac: socfpga: Agilex5 EMAC platform configuration
Russell King (Oracle) <[email protected]>
net: stmmac: remove xstats.pcs_* members
Xiang Mei (Microsoft) <[email protected]>
bpf: tcp: fix double sock release on batch realloc
José Expósito <[email protected]>
drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem
Cen Zhang (Microsoft) <[email protected]>
tipc: fix u16 MTU truncation in media and bearer MTU validation
Zhang Yi <[email protected]>
iomap: correct the range of a partial dirty clear
Shuicheng Lin <[email protected]>
drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create()
Raag Jadav <[email protected]>
drm/xe/i2c: Allow per domain unique id
Harshaka Narayana <[email protected]>
vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
Qing Luo <[email protected]>
sctp: auth: verify auth requirement when auth_chunk is NULL
Michael Walle <[email protected]>
net: dpaa: fix mode setting
Eric Dumazet <[email protected]>
net: hsr: fix memory leak on slave unregistration by removing synced VLANs
Nikolay Aleksandrov <[email protected]>
net: bridge: vlan: fix vlan range dumps starting with pvid
Michael Bommarito <[email protected]>
amt: make the head writable before rewriting the L2 header
Michael Bommarito <[email protected]>
amt: re-read skb header pointers after every pull
Amir Goldstein <[email protected]>
ovl: check access to copy_file_range source with src mounter creds
Christian Brauner <[email protected]>
ovl: port ovl_copyfile() to cred guard
Christian Brauner <[email protected]>
ovl: add override_creds cleanup guard extension for overlayfs
Christian Brauner <[email protected]>
cred: add scoped_with_kernel_creds()
Julian Braha <[email protected]>
drm/panel: s6e3ha8: fix unmet dependency on DRM_DISPLAY_HELPER
Yichong Chen <[email protected]>
ovl: fix trusted xattr escape prefix matching
Shelley Yang <[email protected]>
wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
Lorenzo Bianconi <[email protected]>
wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()
Sean Wang <[email protected]>
wifi: mt76: mt7925: fix crash in reset link replay
Lorenzo Bianconi <[email protected]>
wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()
Lorenzo Bianconi <[email protected]>
wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()
Lorenzo Bianconi <[email protected]>
wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()
Ruoyu Wang <[email protected]>
wifi: mt76: mt7915: guard HE capability lookups
Guangshuo Li <[email protected]>
wifi: mt76: mt7925: guard link STA in decap offload
Eric Dumazet <[email protected]>
ppp: annotate concurrent dev->stats accesses
Qingfang Deng <[email protected]>
ppp: don't store tx skb in the fastpath
Qingfang Deng <[email protected]>
ppp: enable TX scatter-gather
Helen Koike <[email protected]>
tipc: fix infinite loop in __tipc_nl_compat_dumpit
Xiang Mei (Microsoft) <[email protected]>
nexthop: initialize extack in nh_res_bucket_migrate()
Xiang Mei (Microsoft) <[email protected]>
gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
Matthieu Baerts (NGI0) <[email protected]>
selftests: drv-net: increase timeout
Matthieu Baerts (NGI0) <[email protected]>
selftests: ovpn: increase timeout
Matthieu Baerts (NGI0) <[email protected]>
selftests: ovpn: add IPV6 and VETH configs
Matthieu Baerts (NGI0) <[email protected]>
selftests: openvswitch: add config file
Matthieu Baerts (NGI0) <[email protected]>
selftests: af_unix: add USER_NS config
Rishikesh Jethwani <[email protected]>
tls: device: push pending open record on splice EOF
Myeonghun Pak <[email protected]>
net: mctp i3c: clean up notifier and buses if driver register fails
Cen Zhang (Microsoft) <[email protected]>
sctp: validate stream count in sctp_process_strreset_inreq()
Nikhil P. Rao <[email protected]>
pds_core: check for workqueue allocation failure
Nikhil P. Rao <[email protected]>
pds_core: fix auxiliary device add/del races
Nikhil P. Rao <[email protected]>
pds_core: order completion reads after the ownership check
Nikhil P. Rao <[email protected]>
pds_core: yield the CPU while waiting for the adminq to drain
Nikhil P. Rao <[email protected]>
pds_core: fix use-after-free on workqueue during remove
Nikhil P. Rao <[email protected]>
pds_core: fix deadlock between reset thread and remove
HanQuan <[email protected]>
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid
Chenguang Zhao <[email protected]>
net: txgbe: fix FDIR filter leak on remove
Kuniyuki Iwashima <[email protected]>
net: Call net_enable_timestamp() before failure in sk_clone().
Kuniyuki Iwashima <[email protected]>
soreuseport: Clear sk_reuseport_cb before failure in sk_clone().
Prashanth Kumar KR <[email protected]>
amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN
Steven Price <[email protected]>
arm64: Correct value returned by ESR_ELx_FSC_ADDRSZ_nL()
Nikhil P. Rao <[email protected]>
pds_core: reject component parameter in legacy firmware update
Andrew Pope <[email protected]>
wifi: mac80211: recalculate TIM when a station enters power save
Li RongQing <[email protected]>
iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
Pengpeng Hou <[email protected]>
iommu/amd: Bound the early ACPI HID map
HE WEI (ギカク) <[email protected]>
wifi: mwifiex: bound uAP association event IEs to the event buffer
Enrico Zanda <[email protected]>
vhost-net: fix TX stall when vhost owns virtio-net header
Ruoyu Wang <[email protected]>
wan: wanxl: Only reset hardware after BAR mapping
Ruoyu Wang <[email protected]>
nfp: Check resource mutex allocation
Xiang Mei <[email protected]>
wifi: mac80211: tear down new links on vif update error path
Guanghui Feng <[email protected]>
iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()
Wayen Yan <[email protected]>
net: airoha: Fix DMA direction for NPU mailbox buffer
Guangshuo Li <[email protected]>
dpaa2-eth: put MAC endpoint device on disconnect
Wayen Yan <[email protected]>
net: airoha: Fix potential use-after-free in airoha_ppe_deinit()
Guangshuo Li <[email protected]>
dpaa2-switch: put MAC endpoint device on disconnect
Xuanqiang Luo <[email protected]>
rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()
Zhixing Chen <[email protected]>
gtp: parse extension headers before reading inner protocol
Aldo Ariel Panzardo <[email protected]>
rds: drop incoming messages that cross network namespace boundaries
Zhaolong Zhang <[email protected]>
bonding: fix devconf_all NULL dereference when IPv6 is disabled
David Lee <[email protected]>
net/packet: avoid fanout hook re-registration after unregister
Danielle Ratson <[email protected]>
netlink: specs: rt-link: convert bridge port flag attributes to u8
Michael Walle <[email protected]>
net: phy: marvell: fix return code
Pengpeng Hou <[email protected]>
Bluetooth: btusb: validate Realtek vendor event length
Daniel Golle <[email protected]>
regulator: mt6358: use regmap helper to read fixed LDO calibration
Pengpeng Hou <[email protected]>
hwmon: occ: validate poll response sensor blocks
Marco Baffo <[email protected]>
ovpn: use monotonic clock for peer keepalive timeouts
Marco Baffo <[email protected]>
ovpn: fix use after free in unlock_ovpn()
longlong yan <[email protected]>
selftests/net: ovpn: fix getaddrinfo memory leak in ovpn_parse_remote()
Qing Ming <[email protected]>
ovpn: avoid putting unrelated P2P peer on socket release
Yichong Chen <[email protected]>
smb: client: validate DFS referral PathConsumed
Eugene Shalygin <[email protected]>
hwmon: (asus-ec-sensors) add missed handle for ENOMEM
Eugene Shalygin <[email protected]>
hwmon: (asus-ec-sensors) fix EC read intervals
Eugene Shalygin <[email protected]>
hwmon: (asus-ec-sensors) fix looping over banks while reading from EC
Mostafa Saleh <[email protected]>
drivers/virt: pkvm: Fix end calculation in mmio_guard_ioremap_hook()
Diego Fernando Mancera Gomez <[email protected]>
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
Shahar Tzarfati <[email protected]>
wifi: iwlwifi: mvm: fix read in wake packet notification handler
Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: validate payload length in iwl_pnvm_complete_fn
Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: fix pointer arithmetic in iwl_add_mcc_to_tas_block_list
Pagadala Yesu Anjaneyulu <[email protected]>
wifi: iwlwifi: mvm: validate SAR GEO response payload size
Richard Fitzgerald <[email protected]>
ASoC: cs35l56: Use complete_all() to signal init_completion
Richard Fitzgerald <[email protected]>
ASoC: cs35l56: Fix potential probe() deadlock
Richard Fitzgerald <[email protected]>
ASoC: cs35l56: Don't use devres to unregister component
Shengjiu Wang <[email protected]>
ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
Guangshuo Li <[email protected]>
ALSA: hda: cs35l41: validate and free ACPI mute object
Chen-Yu Tsai <[email protected]>
ASoC: sun4i-codec: Set quirks.playback_only for H616 codec
Pengpeng Hou <[email protected]>
ASoC: tas2781: bound firmware description string parsing
Guanghui Yang <[email protected]>
btrfs: free mapping node on duplicate reloc root insert
Leo Martins <[email protected]>
btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps
Dave Chen <[email protected]>
btrfs: fix u32 to s64 type conversion in dirty_metadata_bytes accounting
You-Kai Zheng <[email protected]>
btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8
Tristan Madani <[email protected]>
wifi: carl9170: fix buffer overflow in rx_stream failover path
Tristan Madani <[email protected]>
wifi: carl9170: fix OOB read from off-by-two in TX status handler
Tristan Madani <[email protected]>
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
Tristan Madani <[email protected]>
wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
Tristan Madani <[email protected]>
wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
Ruoyu Wang <[email protected]>
firewire: net: Fix fragmented datagram reassembly
Manivannan Sadhasivam <[email protected]>
wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
Manivannan Sadhasivam <[email protected]>
wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
Dmitry Morgun <[email protected]>
wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
Wayen Yan <[email protected]>
watchdog: airoha: Prevent division by zero when clock frequency is zero
Tzung-Bi Shih <[email protected]>
watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
Guenter Roeck <[email protected]>
hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop
Guenter Roeck <[email protected]>
hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
Guenter Roeck <[email protected]>
hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop
Guenter Roeck <[email protected]>
hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
Edward Adam Davis <[email protected]>
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
Gaole Zhang <[email protected]>
wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
Cheng Yongkang <[email protected]>
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
Daniel Borkmann <[email protected]>
selftests/bpf: Keep verifier_map_ptr exercising ops pointer access
KP Singh <[email protected]>
selftests/bpf: Adjust verifier_map_ptr for the map's excl field
Xincheng Zhang <[email protected]>
usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
Sasha Levin <[email protected]>
Revert "drm/amd/display: Add missing kdoc for ALLM parameters"
Xie Bo <[email protected]>
RISC-V: KVM: Serialize virtual interrupt pending state updates
Georgi Valkov <[email protected]>
wifi: mwifiex: fix freeze for 60 seconds caused by request_firmware
Chia-Lin Kao (AceLan) <[email protected]>
usb: typec: ucsi: Add duplicate detection to nvidia registration path
Chia-Lin Kao (AceLan) <[email protected]>
usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware
Chukun Pan <[email protected]>
USB: serial: option: add TDTECH MT5710-CN
Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix data loss on receive throttling
Sunho Park <[email protected]>
USB: serial: io_edgeport: cap received transmit credits
Tim Pambor <[email protected]>
USB: serial: ftdi_sio: add support for E+H FXA291
Muhammad Bilal <[email protected]>
usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
Fan Wu <[email protected]>
usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
Sonali Pradhan <[email protected]>
usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
Johan Hovold <[email protected]>
USB: gadget: fsl-udc: fix dev_printk() device
Johan Hovold <[email protected]>
USB: gadget: fsl-udc: fix device name leak on probe failure
Johan Hovold <[email protected]>
USB: gadget: snps-udc: fix device name leak on probe failure
Melbin K Mathew <[email protected]>
usb: gadget: printer: fix infinite loop in printer_read()
Fan Wu <[email protected]>
usb: gadget: f_midi: cancel pending IN work before freeing the midi object
Jinchao Wang <[email protected]>
usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
Xu Yang <[email protected]>
usb: chipidea: fix usage_count leak when autosuspend_delay is negative
Huang Wei <[email protected]>
USB: storage: add NO_ATA_1X quirk for Longmai USB Key
Guangshuo Li <[email protected]>
usb: musb: omap2430: Do not put borrowed of_node in probe
Chia-Lin Kao (AceLan) <[email protected]>
usb: core: port: Deattach Type-C connector on component unbind
Huihui Huang <[email protected]>
wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
Griffin Kroah-Hartman <[email protected]>
usb: core: sysfs: add lock to bos_descriptors_read()
Weiming Shi <[email protected]>
mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
Xin Long <[email protected]>
sctp: fix auth_hmacs array size in struct sctp_cookie
Jamal Hadi Salim <[email protected]>
net/sched: act_tunnel_key: Defer dst_release to RCU callback
Ivan Vecera <[email protected]>
dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync()
Eric Dumazet <[email protected]>
tcp: fix TIME_WAIT socket reference leak on PSP policy failure
Lizhi Hou <[email protected]>
accel/amdxdna: Fix use-after-free of mm_struct in job scheduler
Emre Cecanpunar <[email protected]>
drm/i915/selftests: Fix GT PM sort comparators
Vinod Govindapillai <[email protected]>
drm/i915/wm: clear the plane ddb_y entries on plane disable
Xiang Mei (Microsoft) <[email protected]>
ksmbd: validate compound request size before reading StructureSize2
Qihang <[email protected]>
ksmbd: pin conn during async oplock break notification
Daniele Ceraolo Spurio <[email protected]>
drm/xe/wopcm: fix WOPCM size for LNL+
Matthew Brost <[email protected]>
drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves
Satyanarayana K V P <[email protected]>
drm/xe/vf: Shadow buffer management for CCS read/write operations
Satyanarayana K V P <[email protected]>
drm/xe/sa: Shadow buffer support in the sub-allocator pool
Michał Winiarski <[email protected]>
drm/xe: Allow the caller to pass guc_buf_cache size
Shuhao Fu <[email protected]>
can: j1939: fix lockless local-destination check
Mark Harris <[email protected]>
riscv: hwprobe: Avoid uninitialized read in hwprobe_get_cpus()
Vasily Gorbik <[email protected]>
s390/checksum: Fix csum_partial() without vector facility
Linmao Li <[email protected]>
drm/panthor: Check debugfs GEM lock initialization
Michal Luczaj <[email protected]>
bpf, sockmap: Reject unhashed UDP sockets on sockmap update
Shrikanth Hegde <[email protected]>
powerpc/vtime: Initialize starttime at boot for native accounting
Frederic Weisbecker <[email protected]>
powerpc/time: Prepare to stop elapsing in dynticks-idle
Rosen Penev <[email protected]>
powerpc/85xx: Add fsl,ifc to common device ids
Oliver Hartkopp <[email protected]>
can: raw: add locking for raw flags bitfield
Pengpeng Hou <[email protected]>
drm/i915/gt: use correct selftest config symbol
Huiwen He <[email protected]>
smb/client: handle overlapping allocated ranges in fallocate
Ruoyu Wang <[email protected]>
Bluetooth: hci_qca: Clear memdump state on invalid dump size
Pauli Virtanen <[email protected]>
Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds
Pauli Virtanen <[email protected]>
Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: extend conn_hash lookup critical sections
Cen Zhang <[email protected]>
Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update
Xiang Mei <[email protected]>
Bluetooth: qca: fix NVM tag length underflow in TLV parser
Takashi Iwai <[email protected]>
ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC
Karol Wachowski <[email protected]>
accel/ivpu: Fix wrong register read in LNL failure diagnostics
Rosen Penev <[email protected]>
ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning
Rosen Penev <[email protected]>
ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts
Rosen Penev <[email protected]>
ata: sata_dwc_460ex: use platform_get_irq()
Rosen Penev <[email protected]>
ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
David Jeffery <[email protected]>
scsi: core: wake eh reliably when using scsi_schedule_eh
Robert Mader <[email protected]>
udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()
Bryam Vargas <[email protected]>
net/iucv: take a reference on the socket found in afiucv_hs_rcv()
Weiming Shi <[email protected]>
ipv4: fib: free fib_alias with kfree_rcu() on insert error path
Norbert Szetei <[email protected]>
ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
Rafael J. Wysocki <[email protected]>
cpufreq: Make cpufreq_update_pressure() fall back to cpuinfo.max_freq
Pushpendra Singh <[email protected]>
firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context
Uday Khare <[email protected]>
ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup
Charles Keepax <[email protected]>
ASoC: cs42l43: Correct report for forced microphone jack
Vijendar Mukunda <[email protected]>
ASoC: amd: ps: replace bitwise OR with logical OR in IRQ return check
Vijendar Mukunda <[email protected]>
ASoC: amd: ps: fix wrong ACP version string in pci_request_regions()
Vijendar Mukunda <[email protected]>
ASoC: amd: ps: disable MSI on resume in ACP PCI driver
Christian Hewitt <[email protected]>
ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop
Sebastian Ene <[email protected]>
firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation
Mostafa Saleh <[email protected]>
firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()
HE WEI (ギカク) <[email protected]>
wifi: cfg80211: bound element ID read when checking non-inheritance
Runyu Xiao <[email protected]>
wifi: brcmfmac: initialize SDIO data work before cleanup
Cen Zhang <[email protected]>
wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
Zhao Li <[email protected]>
wifi: mac80211: avoid non-S1G AID fallback for S1G assoc
Zhao Li <[email protected]>
wifi: cfg80211: reject unsupported PMSR FTM location requests
Zhao Li <[email protected]>
wifi: cfg80211: validate PMSR FTM preamble range
Zhao Li <[email protected]>
wifi: cfg80211: validate PMSR measurement type data
Zhao Li <[email protected]>
wifi: nl80211: constrain MBSSID TX link ID range
Zhao Li <[email protected]>
wifi: nl80211: validate nested MBSSID IE blobs
Zhao Li <[email protected]>
wifi: cfg80211: derive S1G beacon TSF from S1G fields
Zhao Li <[email protected]>
wifi: nl80211: free RNR data on MBSSID mismatch
Peddolla Harshavardhan Reddy <[email protected]>
wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock
Xiang Mei <[email protected]>
wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
Maoyi Xie <[email protected]>
wifi: mac80211: defer link RX stats percpu free to RCU
Dawei Feng <[email protected]>
wifi: libertas: fix memory leak in helper_firmware_cb()
Xiang Mei <[email protected]>
wifi: mac80211: fix fils_discovery double free on alloc failure
Xiang Mei <[email protected]>
wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure
Bryam Vargas <[email protected]>
wifi: mac80211_hwsim: clamp virtio RX length before skb_put
Christophe JAILLET <[email protected]>
wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()
Abdun Nihaal <[email protected]>
wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
Cen Zhang <[email protected]>
wifi: cfg80211: cancel sched scan results work on unregister
Xiang Mei (Microsoft) <[email protected]>
xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
Xiang Mei (Microsoft) <[email protected]>
xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()
Chen YanJun <[email protected]>
xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags()
Cen Zhang <[email protected]>
xfrm: clear mode callbacks after failed mode setup
Aleksandrova Alyona <[email protected]>
RDMA/irdma: Prevent overflows in memory contiguity checks
Malaya Kumar Rout <[email protected]>
selftests/alsa: Fix memory leak in find_controls error path
Xue Lei <[email protected]>
mtd: fix double free and WARN_ON in add_mtd_device() error paths
Ruoyu Wang <[email protected]>
RDMA/siw: publish QP after initialization
Danila Chernetsov <[email protected]>
RDMA/hns: Fix potential integer overflow in mhop hem cleanup
Ruoyu Wang <[email protected]>
RDMA/mana_ib: initialize err for empty send WR lists
Ruoyu Wang <[email protected]>
RDMA/erdma: initialize ret for empty receive WR lists
Jacob Moroni <[email protected]>
RDMA/irdma: Prevent user-triggered null deref on QP create
Jacob Moroni <[email protected]>
RDMA/irdma: Remove redundant legacy_mode checks
Jacob Moroni <[email protected]>
RDMA/irdma: Prevent rereg_mr for non-mem regions
Jacob Moroni <[email protected]>
RDMA/umem: Add pinned revocable dmabuf import interface
Or Gerlitz <[email protected]>
RDMA/cma: Fix hardware address comparison length in netevent callback
Antony Antony <[email protected]>
xfrm: reject optional IPTFS templates in outbound policies
Tejun Heo <[email protected]>
sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx()
John Stultz <[email protected]>
sched/ext: Avoid null ptr traversal when ->put_prev_task() is called with NULL next
Unnathi Chalicheemala <[email protected]>
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
Boris Burkov <[email protected]>
btrfs: fallback to transaction csum tree on a commit root csum miss
Filipe Manana <[email protected]>
btrfs: use bool type for btrfs_path members used as booleans
Filipe Manana <[email protected]>
btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
Xiang Mei <[email protected]>
btrfs: reject free space cache with more entries than pages
Pengpeng Hou <[email protected]>
mtd: nand: mtk-ecc: stop on ECC idle timeouts
Pengpeng Hou <[email protected]>
mtd: mtdswap: remove debugfs stats file on teardown
Michael Bommarito <[email protected]>
IB/mad: Drop unmatched RMPP responses before reassembly
Seth Forshee <[email protected]>
firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits
Petr Wozniak <[email protected]>
xfrm: fix stale skb->prev after async crypto steals a GSO segment
Petr Wozniak <[email protected]>
xfrm: propagate -EINPROGRESS from validate_xmit_xfrm()
Eric Dumazet <[email protected]>
net: plumb drop reasons to __dev_queue_xmit()
Eric Dumazet <[email protected]>
net: dropreason: add SKB_DROP_REASON_RECURSION_LIMIT
Sumit Gupta <[email protected]>
arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234
Akhil R <[email protected]>
arm64: tegra: Remove fallback compatible for GPCDMA
Junxi Qian <[email protected]>
fuse: fix writeback array overflow when max_pages is one
Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix logic error in packet reset
Seungjin Bae <[email protected]>
Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
Chuck Lever <[email protected]>
xprtrdma: Clear receive-side ownership pointers on release
Mikko Perttunen <[email protected]>
crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin
Mikko Perttunen <[email protected]>
gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
Claudiu Beznea <[email protected]>
dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
Oliver Hartkopp <[email protected]>
can: bcm: track a single source interface for ANYDEV timeout/throttle ops
Oliver Hartkopp <[email protected]>
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()
Oliver Hartkopp <[email protected]>
can: bcm: fix stale rx/tx ops after device removal
Oliver Hartkopp <[email protected]>
can: bcm: add missing device refcount for CAN filter removal
Oliver Hartkopp <[email protected]>
can: bcm: validate frame length in bcm_rx_setup() for RTR replies
Oliver Hartkopp <[email protected]>
can: bcm: extend bcm_tx_lock usage for data and timer updates
Oliver Hartkopp <[email protected]>
can: bcm: fix CAN frame rx/tx statistics
Oliver Hartkopp <[email protected]>
can: bcm: add locking when updating filter and timer values
Phil Rosenthal <[email protected]>
KVM: x86/mmu: Fix use-after-free on vendor module reload
Hyunwoo Kim <[email protected]>
KVM: nVMX: Hide shadow VMCS right after VMCLEAR
Venkatesh Srinivas <[email protected]>
KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN
Sean Christopherson <[email protected]>
KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
Heiko Carstens <[email protected]>
seqlock: Allow UBSAN_ALIGNMENT to fail optimizing
Peter Zijlstra <[email protected]>
seqlock: Allow KASAN to fail optimizing
Peter Zijlstra <[email protected]>
seqlock: Cure some more scoped_seqlock() optimization fails
Kiryl Shutsemau <[email protected]>
fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race
Ryosuke Yasuoka <[email protected]>
drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker
Brian Witte <[email protected]>
netfilter: nf_tables: revert commit_mutex usage in reset path
Brian Witte <[email protected]>
netfilter: nft_quota: use atomic64_xchg for reset
Brian Witte <[email protected]>
netfilter: nft_counter: serialize reset with spinlock
Daniel Borkmann <[email protected]>
selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs
Daniel Borkmann <[email protected]>
bpf: Fix ld_{abs,ind} failure path analysis in subprogs
Guixiong Wei <[email protected]>
platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug
-------------
Diffstat:
Documentation/gpu/drm-mm.rst | 10 +-
Documentation/netlink/specs/rt-link.yaml | 40 +-
MAINTAINERS | 13 +
Makefile | 9 +-
arch/arm64/boot/dts/nvidia/tegra234.dtsi | 24 +-
arch/arm64/boot/dts/nvidia/tegra264.dtsi | 2 +-
arch/arm64/boot/dts/qcom/lemans.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sc7180.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sc7280.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sc8180x.dtsi | 12 +-
arch/arm64/boot/dts/qcom/sc8280xp.dtsi | 32 +-
arch/arm64/boot/dts/qcom/sm6350.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sm8150.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sm8250.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sm8350.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sm8450.dtsi | 4 +-
arch/arm64/boot/dts/qcom/x1e80100.dtsi | 77 +-
arch/arm64/include/asm/esr.h | 2 +-
arch/arm64/mm/hugetlbpage.c | 2 +-
arch/loongarch/kernel/acpi.c | 27 +-
arch/loongarch/kernel/kgdb.c | 3 +-
arch/loongarch/kernel/machine_kexec.c | 5 +-
arch/loongarch/kernel/setup.c | 3 +-
arch/loongarch/kernel/smp.c | 4 +-
arch/powerpc/kernel/time.c | 43 +
arch/powerpc/platforms/85xx/common.c | 2 +
arch/riscv/include/asm/kvm_host.h | 10 +-
arch/riscv/kernel/sys_hwprobe.c | 1 +
arch/riscv/kvm/aia.c | 35 +-
arch/riscv/kvm/vcpu.c | 68 +-
arch/riscv/kvm/vcpu_onereg.c | 8 +-
arch/s390/lib/csum-partial.c | 2 +-
arch/x86/boot/compressed/Makefile | 1 +
arch/x86/kernel/cpu/resctrl/core.c | 32 +-
arch/x86/kernel/cpu/resctrl/internal.h | 18 +-
arch/x86/kernel/cpu/resctrl/monitor.c | 36 +-
arch/x86/kvm/lapic.c | 2 +-
arch/x86/kvm/mmu/mmu.c | 11 +-
arch/x86/kvm/mmu/paging_tmpl.h | 10 +-
arch/x86/kvm/svm/svm.c | 7 +-
arch/x86/kvm/vmx/nested.c | 11 +-
drivers/accel/amdxdna/amdxdna_ctx.c | 8 +
drivers/accel/ivpu/ivpu_hw_btrs.c | 2 +-
drivers/android/binder/thread.rs | 14 +-
drivers/ata/libata-core.c | 18 +
drivers/ata/libata-scsi.c | 2 -
drivers/ata/libata.h | 9 +
drivers/ata/sata_dwc_460ex.c | 38 +-
drivers/block/rbd.c | 7 +-
drivers/block/ublk_drv.c | 52 +-
drivers/bluetooth/btqca.c | 2 +-
drivers/bluetooth/btusb.c | 4 +-
drivers/bluetooth/hci_qca.c | 4 +
drivers/cdrom/cdrom.c | 1 +
drivers/comedi/drivers/comedi_parport.c | 13 +-
drivers/cpufreq/cpufreq.c | 3 +
drivers/crypto/tegra/tegra-se-main.c | 3 +-
drivers/cxl/Kconfig | 4 +
drivers/cxl/core/Makefile | 2 +-
drivers/cxl/core/core.h | 31 +
drivers/cxl/core/pci.c | 215 +---
drivers/cxl/core/ras.c | 197 ++-
drivers/cxl/core/trace.h | 24 +-
drivers/cxl/cxl.h | 22 +-
drivers/cxl/cxlpci.h | 16 +
drivers/dma-buf/udmabuf.c | 9 +-
drivers/dma/dw-edma/dw-edma-pcie.c | 7 +-
drivers/dma/sh/rz-dmac.c | 96 +-
drivers/dpll/dpll_netlink.c | 3 +
drivers/firewire/net.c | 37 +-
drivers/firmware/arm_ffa/driver.c | 54 +-
drivers/firmware/arm_scmi/notify.c | 6 +-
drivers/firmware/stratix10-svc.c | 10 +-
drivers/firmware/xilinx/zynqmp.c | 1 +
drivers/gpu/Kconfig | 13 +
drivers/gpu/Makefile | 4 +-
drivers/gpu/buddy.c | 1347 ++++++++++++++++++++
drivers/gpu/drm/Kconfig | 5 +-
drivers/gpu/drm/Kconfig.debug | 1 -
drivers/gpu/drm/Makefile | 1 -
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 13 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 62 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 14 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 6 +
drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 10 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c | 3 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 13 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_res_cursor.h | 12 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 54 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 58 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 17 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 25 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c | 79 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.h | 20 +-
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 22 +-
drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 13 +-
drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 13 +-
drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 3 -
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 49 +-
drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c | 11 +-
drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 2 +-
drivers/gpu/drm/amd/amdgpu/jpeg_v5_0_1.c | 2 +-
drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c | 4 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 4 +-
drivers/gpu/drm/amd/amdgpu/sdma_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/sdma_v7_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/soc24.c | 28 +
drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c | 15 +-
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 12 +-
.../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 6 +
.../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 2 +
drivers/gpu/drm/amd/amdkfd/kfd_events.c | 3 +
drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 3 +-
.../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 24 +-
drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 23 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 374 +++---
.../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 81 +-
.../amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c | 9 +-
.../amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c | 9 +-
.../gpu/drm/amd/display/dc/link/link_detection.c | 5 +-
.../display/dc/resource/dce100/dce100_resource.c | 7 +-
.../amd/display/modules/info_packet/info_packet.c | 2 -
drivers/gpu/drm/amd/pm/amdgpu_pm.c | 26 +-
drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 7 +-
.../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 11 +-
.../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 15 +-
.../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 28 +-
drivers/gpu/drm/bridge/cadence/cdns-dsi-core.c | 11 +-
drivers/gpu/drm/display/drm_dp_mst_topology.c | 36 +-
drivers/gpu/drm/drm_buddy.c | 1278 +------------------
drivers/gpu/drm/drm_connector.c | 12 +-
drivers/gpu/drm/drm_displayid_internal.h | 2 +-
drivers/gpu/drm/drm_gpusvm.c | 4 +-
drivers/gpu/drm/drm_panel_backlight_quirks.c | 9 +
drivers/gpu/drm/i915/display/intel_bios.c | 36 +-
drivers/gpu/drm/i915/display/intel_dp.c | 8 +-
drivers/gpu/drm/i915/display/intel_hdcp.c | 12 +-
drivers/gpu/drm/i915/display/skl_watermark.c | 2 +-
drivers/gpu/drm/i915/gem/i915_gem_context.c | 25 +-
drivers/gpu/drm/i915/gem/i915_gem_ttm.c | 3 +-
drivers/gpu/drm/i915/gt/intel_engine_user.c | 2 +-
drivers/gpu/drm/i915/gt/selftest_gt_pm.c | 8 +-
drivers/gpu/drm/i915/i915_active.c | 7 +-
drivers/gpu/drm/i915/i915_scatterlist.c | 10 +-
drivers/gpu/drm/i915/i915_ttm_buddy_manager.c | 59 +-
drivers/gpu/drm/i915/i915_ttm_buddy_manager.h | 4 +-
.../gpu/drm/i915/selftests/intel_memory_region.c | 20 +-
drivers/gpu/drm/imagination/pvr_context.c | 22 +-
drivers/gpu/drm/imagination/pvr_drv.c | 13 +-
drivers/gpu/drm/imagination/pvr_queue.c | 65 +-
drivers/gpu/drm/imagination/pvr_queue.h | 2 +-
drivers/gpu/drm/imagination/pvr_vm.c | 2 +
drivers/gpu/drm/nouveau/nouveau_exec.c | 4 +-
drivers/gpu/drm/nouveau/nouveau_uvmm.c | 4 +-
drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c | 1 +
drivers/gpu/drm/panel/Kconfig | 1 +
drivers/gpu/drm/panthor/panthor_device.c | 5 +-
drivers/gpu/drm/panthor/panthor_fw.c | 1 +
drivers/gpu/drm/radeon/r100.c | 13 +-
drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 18 +-
drivers/gpu/drm/rockchip/analogix_dp-rockchip.c | 2 +
drivers/gpu/drm/rockchip/cdn-dp-reg.c | 2 +
drivers/gpu/drm/sysfb/drm_sysfb_helper.h | 2 +-
drivers/gpu/drm/sysfb/drm_sysfb_screen_info.c | 13 +-
drivers/gpu/drm/sysfb/efidrm.c | 7 +-
drivers/gpu/drm/sysfb/vesadrm.c | 6 +-
drivers/gpu/drm/tests/Makefile | 1 -
drivers/gpu/drm/tests/drm_exec_test.c | 2 -
drivers/gpu/drm/tests/drm_gem_shmem_test.c | 16 +-
drivers/gpu/drm/tests/drm_mm_test.c | 2 -
drivers/gpu/drm/tidss/tidss_encoder.c | 2 +
drivers/gpu/drm/ttm/tests/ttm_bo_validate_test.c | 4 +-
drivers/gpu/drm/ttm/tests/ttm_mock_manager.c | 18 +-
drivers/gpu/drm/ttm/tests/ttm_mock_manager.h | 4 +-
drivers/gpu/drm/ttm/ttm_pool.c | 34 +-
drivers/gpu/drm/v3d/v3d_gem.c | 12 +
drivers/gpu/drm/vc4/vc4_bo.c | 12 +-
drivers/gpu/drm/virtio/virtgpu_gem.c | 14 +-
drivers/gpu/drm/virtio/virtgpu_kms.c | 5 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 6 +-
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 22 +-
drivers/gpu/drm/xe/xe_bo.c | 58 +-
drivers/gpu/drm/xe/xe_bo.h | 3 +-
drivers/gpu/drm/xe/xe_bo_types.h | 2 +
drivers/gpu/drm/xe/xe_dma_buf.c | 2 +-
drivers/gpu/drm/xe/xe_guc_buf.c | 44 +-
drivers/gpu/drm/xe/xe_guc_buf.h | 1 +
drivers/gpu/drm/xe/xe_i2c.c | 5 +-
drivers/gpu/drm/xe/xe_migrate.c | 62 +-
drivers/gpu/drm/xe/xe_migrate.h | 4 +
drivers/gpu/drm/xe/xe_pt.c | 14 +-
drivers/gpu/drm/xe/xe_res_cursor.h | 34 +-
drivers/gpu/drm/xe/xe_sa.c | 67 +-
drivers/gpu/drm/xe/xe_sa.h | 20 +-
drivers/gpu/drm/xe/xe_sa_types.h | 3 +
drivers/gpu/drm/xe/xe_sriov_vf_ccs.c | 42 +-
drivers/gpu/drm/xe/xe_sriov_vf_ccs.h | 4 +-
drivers/gpu/drm/xe/xe_svm.c | 18 +-
drivers/gpu/drm/xe/xe_ttm_vram_mgr.c | 71 +-
drivers/gpu/drm/xe/xe_ttm_vram_mgr_types.h | 4 +-
drivers/gpu/drm/xe/xe_vm.c | 10 +-
drivers/gpu/drm/xe/xe_wopcm.c | 15 +-
drivers/gpu/host1x/bus.c | 4 +-
drivers/gpu/tests/Makefile | 4 +
.../drm_buddy_test.c => tests/gpu_buddy_test.c} | 358 +++---
.../{drm/lib/drm_random.c => tests/gpu_random.c} | 18 +-
.../{drm/lib/drm_random.h => tests/gpu_random.h} | 18 +-
drivers/hwmon/asus-ec-sensors.c | 18 +-
drivers/hwmon/corsair-cpro.c | 1 +
drivers/hwmon/corsair-psu.c | 1 +
drivers/hwmon/gigabyte_waterforce.c | 4 +-
drivers/hwmon/nzxt-kraken3.c | 6 +-
drivers/hwmon/nzxt-smart2.c | 2 +-
drivers/hwmon/occ/common.c | 38 +-
drivers/hwtracing/intel_th/core.c | 10 -
drivers/hwtracing/intel_th/msu.c | 2 +
drivers/i3c/master/mipi-i3c-hci/core.c | 16 +-
drivers/i3c/master/mipi-i3c-hci/hci.h | 1 +
drivers/infiniband/core/cma.c | 2 +-
drivers/infiniband/core/mad.c | 30 +
drivers/infiniband/core/umem_dmabuf.c | 61 +
drivers/infiniband/hw/erdma/erdma_qp.c | 2 +-
drivers/infiniband/hw/hns/hns_roce_hem.c | 2 +-
drivers/infiniband/hw/irdma/uk.c | 9 +-
drivers/infiniband/hw/irdma/user.h | 1 -
drivers/infiniband/hw/irdma/verbs.c | 33 +-
drivers/infiniband/hw/mana/wr.c | 2 +-
drivers/infiniband/sw/siw/siw_verbs.c | 44 +-
drivers/input/misc/ims-pcu.c | 32 +-
drivers/iommu/amd/init.c | 6 +
drivers/iommu/amd/iommu.c | 22 +-
drivers/iommu/intel/perf.c | 2 +-
drivers/iommu/intel/svm.c | 2 +-
drivers/md/dm-verity-fec.c | 110 +-
drivers/md/dm-verity-fec.h | 6 +-
drivers/md/dm.c | 11 +-
drivers/media/cec/platform/seco/seco-cec.c | 6 +-
drivers/media/common/videobuf2/videobuf2-core.c | 12 +-
drivers/media/dvb-frontends/rtl2832.c | 4 +-
drivers/media/dvb-frontends/rtl2832_sdr.c | 19 +-
drivers/media/i2c/alvium-csi2.c | 21 +-
drivers/media/i2c/imx219.c | 2 +-
drivers/media/pci/cx23885/cx23885-core.c | 14 +-
drivers/media/pci/dm1105/dm1105.c | 1 +
drivers/media/pci/intel/ipu6/ipu6-isys-dwc-phy.c | 24 +-
drivers/media/pci/saa7134/saa7134-video.c | 25 +-
.../media/platform/amlogic/c3/isp/c3-isp-params.c | 4 +
drivers/media/platform/aspeed/aspeed-video.c | 1 +
.../platform/chips-media/wave5/wave5-vpu-enc.c | 29 +-
drivers/media/platform/marvell/cafe-driver.c | 1 +
drivers/media/platform/nuvoton/npcm-video.c | 34 +-
.../media/platform/nxp/imx8-isi/imx8-isi-core.c | 2 +
.../media/platform/nxp/imx8-isi/imx8-isi-core.h | 16 +
.../platform/nxp/imx8-isi/imx8-isi-crossbar.c | 1 +
drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c | 9 +-
drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c | 11 +-
.../media/platform/nxp/imx8-isi/imx8-isi-pipe.c | 20 +-
drivers/media/platform/qcom/camss/camss-csid-680.c | 30 +-
.../media/platform/qcom/camss/camss-csid-gen2.c | 47 +-
.../media/platform/qcom/camss/camss-csid-gen3.c | 28 +-
drivers/media/platform/qcom/iris/iris_probe.c | 6 +-
.../platform/renesas/rzg2l-cru/rzg2l-cru-regs.h | 1 +
.../media/platform/renesas/rzg2l-cru/rzg2l-video.c | 17 +-
drivers/media/platform/st/stm32/stm32-dcmi.c | 1 +
.../st/stm32/stm32-dcmipp/dcmipp-bytecap.c | 6 +-
drivers/media/platform/sunxi/sun4i-csi/sun4i_dma.c | 6 +-
.../media/platform/synopsys/hdmirx/snps_hdmirx.c | 4 +-
drivers/media/platform/ti/davinci/vpif_capture.c | 2 +-
drivers/media/platform/ti/vpe/vpe.c | 3 +-
drivers/media/platform/verisilicon/hantro_v4l2.c | 6 +-
drivers/media/radio/radio-si476x.c | 1 +
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +-
drivers/media/test-drivers/vimc/vimc-core.c | 1 +
drivers/media/test-drivers/vivid/vivid-core.c | 6 +-
drivers/media/test-drivers/vivid/vivid-ctrls.c | 15 +-
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 38 +-
drivers/media/test-drivers/vivid/vivid-vid-cap.h | 1 +
drivers/media/test-drivers/vivid/vivid-vid-out.c | 6 +
drivers/media/usb/airspy/airspy.c | 8 +-
drivers/media/usb/cx231xx/cx231xx-cards.c | 16 +-
drivers/media/usb/msi2500/msi2500.c | 32 +-
drivers/media/usb/pwc/pwc-if.c | 13 +-
drivers/media/v4l2-core/v4l2-ctrls-core.c | 13 +
drivers/media/v4l2-core/v4l2-ctrls-request.c | 14 +-
drivers/media/v4l2-core/v4l2-fwnode.c | 6 +-
drivers/media/v4l2-core/v4l2-subdev.c | 4 +
drivers/misc/mei/bus.c | 16 +-
drivers/misc/nsm.c | 3 +-
drivers/mmc/host/vub300.c | 24 +-
drivers/mtd/maps/vmu-flash.c | 8 +-
drivers/mtd/mtdcore.c | 23 +-
drivers/mtd/mtdswap.c | 5 +-
drivers/mtd/nand/ecc-mtk.c | 16 +-
drivers/net/amt.c | 101 +-
drivers/net/bonding/bond_main.c | 3 +-
drivers/net/ethernet/airoha/airoha_eth.c | 3 +-
drivers/net/ethernet/airoha/airoha_npu.c | 4 +-
drivers/net/ethernet/airoha/airoha_ppe.c | 1 +
drivers/net/ethernet/amd/pds_core/adminq.c | 12 +-
drivers/net/ethernet/amd/pds_core/auxbus.c | 17 +-
drivers/net/ethernet/amd/pds_core/core.c | 22 +-
drivers/net/ethernet/amd/pds_core/devlink.c | 6 +
drivers/net/ethernet/amd/pds_core/main.c | 14 +-
drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 11 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 1 +
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 1 +
drivers/net/ethernet/freescale/fman/fman_dtsec.c | 17 +-
drivers/net/ethernet/google/gve/gve.h | 3 +
drivers/net/ethernet/google/gve/gve_rx_dqo.c | 34 +
drivers/net/ethernet/hisilicon/hip04_eth.c | 11 +-
drivers/net/ethernet/huawei/hinic/hinic_dev.h | 2 -
drivers/net/ethernet/huawei/hinic/hinic_ethtool.c | 21 -
drivers/net/ethernet/intel/ice/ice.h | 3 +
drivers/net/ethernet/intel/ice/ice_eswitch.c | 3 -
drivers/net/ethernet/intel/ice/ice_lag.c | 2 +-
drivers/net/ethernet/intel/ice/ice_parser.c | 3 +
drivers/net/ethernet/intel/ice/ice_ptp.c | 7 +-
drivers/net/ethernet/intel/ice/ice_sriov.c | 14 +-
drivers/net/ethernet/intel/ice/ice_vf_lib.c | 3 +-
drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 2 +-
drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 1 +
.../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 9 +
.../net/ethernet/marvell/octeontx2/af/rvu_rep.c | 8 +
.../ethernet/marvell/octeontx2/nic/otx2_flows.c | 1 +
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 29 +-
drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 15 +
.../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 19 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 4 +-
.../ethernet/mellanox/mlx5/core/esw/acl/helper.c | 2 +-
.../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/port.c | 39 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 78 +-
drivers/net/ethernet/microsoft/mana/mana_en.c | 13 +
.../ethernet/netronome/nfp/nfpcore/nfp_resource.c | 3 +
drivers/net/ethernet/realtek/rtase/rtase.h | 8 +
drivers/net/ethernet/realtek/rtase/rtase_main.c | 197 +++
drivers/net/ethernet/stmicro/stmmac/common.h | 3 -
drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 31 +
.../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 5 +-
.../net/ethernet/stmicro/stmmac/dwmac-socfpga.c | 162 ++-
drivers/net/ethernet/stmicro/stmmac/dwmac100.h | 9 +-
drivers/net/ethernet/stmicro/stmmac/dwmac1000.h | 16 +-
.../net/ethernet/stmicro/stmmac/dwmac1000_core.c | 49 +-
.../net/ethernet/stmicro/stmmac/dwmac1000_dma.c | 16 +-
.../net/ethernet/stmicro/stmmac/dwmac100_core.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/dwmac100_dma.c | 3 +-
drivers/net/ethernet/stmicro/stmmac/dwmac4.h | 49 +-
drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 53 +-
drivers/net/ethernet/stmicro/stmmac/dwmac4_dma.c | 44 +-
drivers/net/ethernet/stmicro/stmmac/dwmac4_dma.h | 16 +-
drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/dwmac_dma.h | 10 +-
drivers/net/ethernet/stmicro/stmmac/dwmac_lib.c | 10 +-
drivers/net/ethernet/stmicro/stmmac/dwxgmac2.h | 34 +-
.../net/ethernet/stmicro/stmmac/dwxgmac2_core.c | 45 +-
drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 75 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 92 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 35 +
drivers/net/ethernet/wangxun/txgbe/txgbe_main.c | 1 +
drivers/net/geneve.c | 3 +
drivers/net/gtp.c | 17 +-
drivers/net/ipa/ipa_smp2p.c | 30 +-
drivers/net/mctp/mctp-i3c.c | 11 +-
drivers/net/mctp/mctp-serial.c | 2 +-
drivers/net/ovpn/io.c | 4 +-
drivers/net/ovpn/peer.c | 16 +-
drivers/net/ovpn/tcp.c | 6 +-
drivers/net/pcs/pcs-xpcs.c | 34 +-
drivers/net/phy/marvell.c | 2 +-
drivers/net/ppp/ppp_generic.c | 239 ++--
drivers/net/ppp/pppoe.c | 1 +
drivers/net/slip/slip.c | 4 +
drivers/net/vmxnet3/vmxnet3_drv.c | 22 +-
drivers/net/vxlan/vxlan_core.c | 3 +
drivers/net/vxlan/vxlan_mdb.c | 30 +-
drivers/net/wan/wanxl.c | 3 +-
drivers/net/wireless/ath/ath11k/ahb.c | 1 +
drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +
drivers/net/wireless/ath/ath11k/pci.c | 4 +
drivers/net/wireless/ath/ath11k/qmi.c | 11 +-
drivers/net/wireless/ath/ath12k/pci.c | 4 +
drivers/net/wireless/ath/ath6kl/txrx.c | 12 +-
drivers/net/wireless/ath/ath6kl/wmi.c | 20 +
drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +-
drivers/net/wireless/ath/carl9170/rx.c | 7 +-
drivers/net/wireless/ath/carl9170/tx.c | 2 +-
drivers/net/wireless/atmel/at76c50x-usb.c | 7 +-
.../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 1 +
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 2 +-
.../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 8 +-
.../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 2 +-
drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 9 +-
drivers/net/wireless/intel/iwlwifi/fw/regulatory.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 3 +-
drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 10 +
drivers/net/wireless/intersil/p54/txrx.c | 8 +
drivers/net/wireless/marvell/libertas/firmware.c | 1 +
drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 14 +-
drivers/net/wireless/marvell/mwifiex/tdls.c | 2 +-
drivers/net/wireless/marvell/mwifiex/uap_event.c | 24 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 6 +
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 2 +
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 18 +-
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7925/main.c | 3 +
drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 2 +
drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 19 +-
drivers/net/wireless/microchip/wilc1000/hif.c | 5 +
drivers/net/wireless/virtual/mac80211_hwsim.c | 1 +
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 8 +-
drivers/platform/loongarch/loongson-laptop.c | 1 +
.../uncore-frequency/uncore-frequency-common.c | 7 +-
drivers/pmdomain/imx/imx93-blk-ctrl.c | 126 +-
drivers/ptp/ptp_netc.c | 1 +
drivers/ptp/ptp_s390.c | 6 +-
drivers/regulator/mt6358-regulator.c | 2 +-
drivers/remoteproc/xlnx_r5_remoteproc.c | 50 +-
drivers/scsi/hosts.c | 2 +
drivers/scsi/scsi_error.c | 22 +-
drivers/scsi/scsi_priv.h | 1 +
drivers/staging/media/meson/vdec/vdec.c | 4 +-
drivers/staging/media/sunxi/cedrus/cedrus.c | 6 +-
drivers/staging/media/sunxi/cedrus/cedrus_h264.c | 3 +
drivers/staging/media/tegra-video/vi.c | 4 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 9 +-
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 2 +-
drivers/thunderbolt/debugfs.c | 2 +
drivers/thunderbolt/domain.c | 30 +
drivers/thunderbolt/icm.c | 5 +
drivers/thunderbolt/switch.c | 14 +
drivers/thunderbolt/tb.c | 59 +-
drivers/thunderbolt/tb.h | 2 +
drivers/thunderbolt/xdomain.c | 100 +-
drivers/tty/serial/8250/8250_mid.c | 14 +-
drivers/tty/serial/sc16is7xx.c | 12 +
drivers/uio/uio_hv_generic.c | 8 +-
drivers/usb/atm/ueagle-atm.c | 17 +
drivers/usb/chipidea/core.c | 1 +
drivers/usb/core/port.c | 2 +
drivers/usb/core/sysfs.c | 8 +-
drivers/usb/gadget/function/f_midi.c | 1 +
drivers/usb/gadget/function/f_ncm.c | 17 +-
drivers/usb/gadget/function/f_printer.c | 23 +-
drivers/usb/gadget/function/f_tcm.c | 192 ++-
drivers/usb/gadget/function/tcm.h | 13 +
drivers/usb/gadget/function/uvc_v4l2.c | 2 +
drivers/usb/gadget/udc/bdc/bdc_core.c | 20 +
drivers/usb/gadget/udc/bdc/bdc_udc.c | 7 +-
drivers/usb/gadget/udc/dummy_hcd.c | 40 +-
drivers/usb/gadget/udc/fsl_udc_core.c | 93 +-
drivers/usb/gadget/udc/fsl_usb2_udc.h | 1 +
drivers/usb/gadget/udc/snps_udc_core.c | 1 -
drivers/usb/host/xhci-pci.c | 1 +
drivers/usb/host/xhci.c | 15 +-
drivers/usb/host/xhci.h | 1 +
drivers/usb/musb/omap2430.c | 2 -
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 5 +
drivers/usb/serial/io_edgeport.c | 3 +-
drivers/usb/serial/keyspan_pda.c | 44 +-
drivers/usb/serial/option.c | 1 +
drivers/usb/storage/unusual_devs.h | 7 +
drivers/usb/typec/ucsi/ucsi.c | 158 ++-
drivers/vdpa/vdpa_user/iova_domain.c | 29 +-
drivers/vdpa/vdpa_user/iova_domain.h | 8 +-
drivers/vdpa/vdpa_user/vduse_dev.c | 112 +-
drivers/vhost/net.c | 8 +-
drivers/video/Kconfig | 1 +
drivers/virt/coco/pkvm-guest/arm-pkvm-guest.c | 2 +-
drivers/watchdog/airoha_wdt.c | 3 +
drivers/watchdog/s32g_wdt.c | 3 +-
drivers/watchdog/watchdog_pretimeout.c | 2 +
fs/afs/dir_edit.c | 2 +-
fs/binfmt_elf_fdpic.c | 4 +
fs/binfmt_misc.c | 5 +-
fs/btrfs/backref.c | 16 +-
fs/btrfs/block-group.c | 8 +-
fs/btrfs/ctree.c | 28 +-
fs/btrfs/ctree.h | 16 +-
fs/btrfs/defrag.c | 4 +-
fs/btrfs/dev-replace.c | 4 +-
fs/btrfs/extent-tree.c | 8 +-
fs/btrfs/extent_io.c | 4 +-
fs/btrfs/extent_map.c | 4 +-
fs/btrfs/file-item.c | 38 +-
fs/btrfs/free-space-cache.c | 7 +-
fs/btrfs/free-space-tree.c | 4 +-
fs/btrfs/inode-item.c | 2 +-
fs/btrfs/inode.c | 4 +-
fs/btrfs/qgroup.c | 4 +-
fs/btrfs/raid-stripe-tree.c | 4 +-
fs/btrfs/relocation.c | 10 +-
fs/btrfs/scrub.c | 20 +-
fs/btrfs/send.c | 14 +-
fs/btrfs/tree-log.c | 20 +-
fs/btrfs/volumes.c | 6 +-
fs/btrfs/xattr.c | 2 +-
fs/ceph/addr.c | 9 +
fs/ceph/caps.c | 1 +
fs/ceph/dir.c | 7 +-
fs/ceph/ioctl.c | 6 +
fs/crypto/inline_crypt.c | 57 +-
fs/crypto/keysetup_v1.c | 8 +-
fs/exec.c | 2 +-
fs/f2fs/super.c | 25 +-
fs/fuse/dev_uring.c | 22 +-
fs/fuse/file.c | 5 +-
fs/iomap/buffered-io.c | 34 +-
fs/nfsd/nfs4xdr.c | 8 +-
fs/nfsd/vfs.c | 15 +-
fs/nfsd/vfs.h | 2 +-
fs/overlayfs/copy_up.c | 12 +-
fs/overlayfs/file.c | 47 +-
fs/overlayfs/overlayfs.h | 5 +
fs/overlayfs/xattrs.c | 2 +-
fs/posix_acl.c | 7 +
fs/proc/namespaces.c | 4 +-
fs/proc/task_mmu.c | 14 +-
fs/resctrl/ctrlmondata.c | 6 +-
fs/resctrl/internal.h | 22 +-
fs/resctrl/monitor.c | 200 +--
fs/resctrl/rdtgroup.c | 75 +-
fs/smb/client/misc.c | 34 +-
fs/smb/client/smb2file.c | 21 +
fs/smb/client/smb2inode.c | 23 +-
fs/smb/client/smb2ops.c | 25 +-
fs/smb/server/oplock.c | 6 +-
fs/smb/server/smb2misc.c | 5 +
fs/smb/server/smb2pdu.c | 9 +-
fs/smb/server/smbacl.c | 42 +-
fs/super.c | 34 +-
fs/xfs/scrub/cow_repair.c | 203 +--
fs/xfs/scrub/trace.h | 28 +-
include/drm/drm_buddy.h | 165 +--
include/drm/drm_connector.h | 6 +-
include/drm/drm_utils.h | 1 +
include/linux/arm_ffa.h | 2 +-
include/linux/audit.h | 6 +-
include/linux/audit_arch.h | 12 +-
include/linux/bootconfig.h | 3 +
include/linux/cred.h | 15 +
include/linux/firmware/xlnx-zynqmp.h | 13 +
include/linux/fscrypt.h | 18 +-
include/linux/gpu_buddy.h | 177 +++
include/linux/mlx5/mlx5_ifc.h | 13 +-
include/linux/resctrl.h | 28 +-
include/linux/seqlock.h | 10 +-
include/linux/sunrpc/svcsock.h | 3 +
include/linux/sunrpc/xdr.h | 19 +-
include/linux/virtio.h | 6 +-
include/linux/vtime.h | 6 +
include/media/v4l2-async.h | 4 +-
include/media/videobuf2-core.h | 8 +-
include/net/bluetooth/rfcomm.h | 3 +
include/net/cfg80211.h | 2 +-
include/net/dropreason-core.h | 3 +
include/net/ip6_tunnel.h | 2 +-
include/net/netfilter/nf_tables.h | 32 -
include/net/netfilter/nft_fib.h | 2 -
include/net/netfilter/nft_meta.h | 3 -
include/net/sctp/structs.h | 3 +-
include/net/tcp.h | 2 +
include/rdma/ib_umem.h | 19 +
include/scsi/scsi_host.h | 3 +
include/uapi/linux/btrfs.h | 2 +-
init/Kconfig | 3 +
init/main.c | 45 -
io_uring/rw.c | 42 +-
kernel/audit.c | 2 +-
kernel/audit.h | 32 +-
kernel/audit_fsnotify.c | 36 +-
kernel/audit_tree.c | 2 +-
kernel/audit_watch.c | 35 +-
kernel/auditfilter.c | 17 +-
kernel/auditsc.c | 6 +-
kernel/bpf/verifier.c | 17 +
kernel/kexec_handover.c | 32 +-
kernel/sched/ext.c | 9 +-
kernel/trace/ftrace.c | 13 +
kernel/trace/trace.c | 2 +-
kernel/trace/trace_eprobe.c | 3 +-
kernel/trace/trace_events.c | 4 +-
kernel/trace/trace_mmiotrace.c | 4 +-
kernel/trace/trace_probe.c | 13 +-
lib/bootconfig.c | 65 +
lib/compat_audit.c | 12 +-
lib/rhashtable.c | 1 +
mm/damon/core.c | 13 +
mm/huge_memory.c | 12 +-
mm/kmemleak.c | 7 +-
mm/sparse.c | 32 +-
net/bluetooth/hci_sync.c | 55 +-
net/bluetooth/mgmt.c | 86 +-
net/bluetooth/rfcomm/core.c | 17 +
net/bluetooth/rfcomm/tty.c | 7 +-
net/bridge/br_netlink_tunnel.c | 3 +-
net/bridge/br_private.h | 6 +-
net/bridge/br_vlan.c | 10 +-
net/bridge/br_vlan_options.c | 3 +-
net/bridge/netfilter/nft_meta_bridge.c | 20 -
net/bridge/netfilter/nft_reject_bridge.c | 1 -
net/can/bcm.c | 528 ++++++--
net/can/j1939/transport.c | 18 +-
net/can/raw.c | 66 +-
net/ceph/auth_x.c | 9 +-
net/ceph/ceph_common.c | 4 +-
net/ceph/mon_client.c | 4 +-
net/ceph/osdmap.c | 12 +-
net/core/dev.c | 111 +-
net/core/filter.c | 6 +-
net/core/gro.c | 4 +-
net/core/sock.c | 10 +-
net/core/sock_map.c | 2 +
net/hsr/hsr_slave.c | 2 +
net/ipv4/datagram.c | 4 +-
net/ipv4/fib_trie.c | 2 +-
net/ipv4/icmp.c | 18 +-
net/ipv4/ip_gre.c | 4 +-
net/ipv4/ip_tunnel_core.c | 2 +-
net/ipv4/netfilter/nft_dup_ipv4.c | 1 -
net/ipv4/netfilter/nft_fib_ipv4.c | 2 -
net/ipv4/netfilter/nft_reject_ipv4.c | 1 -
net/ipv4/nexthop.c | 2 +-
net/ipv4/raw.c | 23 +-
net/ipv4/tcp_bpf.c | 2 +-
net/ipv4/tcp_input.c | 56 +-
net/ipv4/tcp_ipv4.c | 14 +-
net/ipv4/tcp_minisocks.c | 12 +-
net/ipv6/ila/ila_common.c | 12 +
net/ipv6/ip6_gre.c | 4 +-
net/ipv6/netfilter/nft_dup_ipv6.c | 1 -
net/ipv6/netfilter/nft_fib_ipv6.c | 2 -
net/ipv6/netfilter/nft_reject_ipv6.c | 1 -
net/ipv6/raw.c | 2 +-
net/ipv6/route.c | 4 +-
net/ipv6/tcp_ipv6.c | 8 +-
net/ipv6/xfrm6_policy.c | 1 +
net/iucv/af_iucv.c | 21 +-
net/mac80211/cfg.c | 11 +-
net/mac80211/iface.c | 8 +-
net/mac80211/link.c | 4 +
net/mac80211/mlme.c | 6 +-
net/mac80211/rx.c | 2 +
net/mac80211/sta_info.c | 15 +-
net/mac802154/llsec.c | 5 +
net/mac802154/scan.c | 11 +
net/mctp/device.c | 4 +-
net/mpls/af_mpls.c | 3 +
net/mptcp/options.c | 12 +-
net/mptcp/pm_userspace.c | 7 +-
net/mptcp/protocol.c | 1 +
net/netfilter/nf_conntrack_sip.c | 10 +-
net/netfilter/nf_tables_api.c | 315 +----
net/netfilter/nft_bitwise.c | 104 --
net/netfilter/nft_byteorder.c | 11 -
net/netfilter/nft_cmp.c | 3 -
net/netfilter/nft_compat.c | 10 -
net/netfilter/nft_connlimit.c | 1 -
net/netfilter/nft_counter.c | 21 +-
net/netfilter/nft_ct.c | 46 -
net/netfilter/nft_dup_netdev.c | 1 -
net/netfilter/nft_dynset.c | 1 -
net/netfilter/nft_exthdr.c | 34 -
net/netfilter/nft_fib.c | 51 +-
net/netfilter/nft_fib_inet.c | 1 -
net/netfilter/nft_fib_netdev.c | 30 +-
net/netfilter/nft_flow_offload.c | 1 -
net/netfilter/nft_fwd_netdev.c | 2 -
net/netfilter/nft_hash.c | 36 -
net/netfilter/nft_immediate.c | 12 -
net/netfilter/nft_last.c | 1 -
net/netfilter/nft_limit.c | 2 -
net/netfilter/nft_log.c | 1 -
net/netfilter/nft_lookup.c | 12 -
net/netfilter/nft_masq.c | 3 -
net/netfilter/nft_meta.c | 45 -
net/netfilter/nft_nat.c | 2 -
net/netfilter/nft_numgen.c | 22 -
net/netfilter/nft_objref.c | 2 -
net/netfilter/nft_osf.c | 25 -
net/netfilter/nft_payload.c | 47 -
net/netfilter/nft_queue.c | 2 -
net/netfilter/nft_quota.c | 14 +-
net/netfilter/nft_range.c | 1 -
net/netfilter/nft_redir.c | 3 -
net/netfilter/nft_reject_inet.c | 1 -
net/netfilter/nft_reject_netdev.c | 1 -
net/netfilter/nft_rt.c | 1 -
net/netfilter/nft_socket.c | 26 -
net/netfilter/nft_synproxy.c | 1 -
net/netfilter/nft_tproxy.c | 1 -
net/netfilter/nft_tunnel.c | 26 -
net/netfilter/nft_xfrm.c | 27 -
net/openvswitch/actions.c | 19 +-
net/openvswitch/datapath.c | 25 +-
net/openvswitch/datapath.h | 2 +-
net/openvswitch/vport.c | 2 +-
net/packet/af_packet.c | 6 +-
net/phonet/pep.c | 2 +
net/qrtr/af_qrtr.c | 8 +
net/qrtr/ns.c | 4 +-
net/rds/recv.c | 15 +
net/rds/tcp.c | 4 +-
net/rxrpc/ar-internal.h | 6 +-
net/sched/act_tunnel_key.c | 14 +-
net/sctp/auth.c | 2 +-
net/sctp/protocol.c | 21 +-
net/sctp/sm_make_chunk.c | 6 +
net/sctp/sm_statefuns.c | 2 +-
net/sctp/stream.c | 6 +-
net/sctp/sysctl.c | 9 +-
net/sunrpc/svcsock.c | 69 +-
net/sunrpc/xdr.c | 210 ++-
net/sunrpc/xprtrdma/rpc_rdma.c | 4 +
net/sunrpc/xprtrdma/verbs.c | 12 +-
net/tipc/netlink.c | 6 +-
net/tipc/netlink_compat.c | 4 +
net/tipc/socket.c | 1 +
net/tls/tls_device.c | 6 +-
net/vmw_vsock/virtio_transport_common.c | 165 ++-
net/wireless/core.c | 4 +-
net/wireless/core.h | 2 +-
net/wireless/nl80211.c | 22 +-
net/wireless/pmsr.c | 29 +-
net/wireless/scan.c | 13 +-
net/x25/af_x25.c | 8 +-
net/xfrm/xfrm_device.c | 12 +-
net/xfrm/xfrm_iptfs.c | 1 +
net/xfrm/xfrm_policy.c | 4 +-
net/xfrm/xfrm_state.c | 7 +-
net/xfrm/xfrm_user.c | 3 +-
rust/bindings/lib.rs | 4 +
rust/kernel/device.rs | 16 +-
rust/kernel/time.rs | 11 +-
rust/uapi/lib.rs | 4 +
security/landlock/domain.c | 8 +-
security/landlock/domain.h | 5 +-
security/landlock/ruleset.c | 7 +-
sound/core/seq/seq_timer.c | 13 +-
sound/core/timer.c | 21 +-
sound/hda/codecs/hdmi/hdmi.c | 3 +
sound/hda/codecs/hdmi/hdmi_local.h | 9 +
sound/hda/codecs/hdmi/intelhdmi.c | 36 +-
sound/hda/codecs/realtek/alc269.c | 9 +
sound/hda/codecs/side-codecs/cs35l41_hda.c | 11 +-
sound/soc/amd/ps/pci-ps.c | 33 +-
sound/soc/codecs/bt-sco.c | 10 +-
sound/soc/codecs/cs35l56-i2c.c | 4 +-
sound/soc/codecs/cs35l56-spi.c | 4 +-
sound/soc/codecs/cs35l56.c | 25 +-
sound/soc/codecs/cs42l43-jack.c | 3 +-
sound/soc/codecs/tas2562.c | 5 +-
sound/soc/codecs/tas2781-fmwlib.c | 63 +-
sound/soc/fsl/fsl_sai.c | 29 +-
sound/soc/fsl/imx-card.c | 12 +-
sound/soc/meson/aiu-fifo-spdif.c | 5 +
sound/soc/sunxi/sun4i-codec.c | 1 +
sound/usb/quirks.c | 2 +
tools/objtool/check.c | 1 +
tools/testing/cxl/Kbuild | 2 +-
tools/testing/selftests/alsa/mixer-test.c | 1 +
.../testing/selftests/bpf/progs/verifier_ld_ind.c | 142 +++
.../testing/selftests/bpf/progs/verifier_map_ptr.c | 36 +-
tools/testing/selftests/drivers/net/settings | 1 +
tools/testing/selftests/drivers/ntsync/config | 2 +-
tools/testing/selftests/ftrace/ftracetest | 1 +
tools/testing/selftests/net/af_unix/config | 1 +
tools/testing/selftests/net/openvswitch/config | 16 +
tools/testing/selftests/net/ovpn/config | 2 +
tools/testing/selftests/net/ovpn/ovpn-cli.c | 4 +-
tools/testing/selftests/net/ovpn/settings | 1 +
776 files changed, 10812 insertions(+), 6601 deletions(-)