Skip to content

6.6.152-rc1 review

Greg Kroah-Hartman linux-patches lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest156 patches 11 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/156mount: honour SB_NOUSER in the new mount APIfs/namespace.c+5 -00 replies
2/156selftests/bpf: Fail unbound UDP on sockmap updatetools/testing/selftests/bpf/test_maps.c+6 -70 replies
3/156s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()drivers/s390/crypto/zcrypt_ccamisc.c+13 -70 replies
4/156NFS: Pin the struct nfs_server during a FREE_STATEID callfs/nfs/nfs4proc.c+5 -00 replies
5/156ARM: npcm: Fix OF node refcount leaks in SMP setuparch/arm/mach-npcm/platsmp.c+2 -00 replies
6/156ARM: dts: BCM5301X: fix PCIe controller 2 second interruptarch/arm/boot/dts/broadcom/bcm-ns.dtsi+1 -10 replies
7/156drm/bridge: ps8640: propagate AUX transfer register errorsdrivers/gpu/drm/bridge/parade-ps8640.c+21 -60 replies
8/156Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"drivers/net/thunderbolt/main.c+7 -60 replies
9/156bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitordrivers/net/bonding/bond_alb.c+6 -40 replies
10/156net/mlx5e: TC, Check if flow is PEER before acquiring devcom lockdrivers/net/ethernet/mellanox/mlx5/core/en/tc_priv.h drivers/net/ethernet/mellanox/mlx5/core/en_tc.c+4 -10 replies
11/156netfilter: ipset: switch ext_size to atomic64_tinclude/linux/netfilter/ipset/ip_set.h net/netfilter/ipset/ip_set_bitmap_gen.h net/netfilter/ipset/ip_set_core.c +2 more+9 -90 replies
12/156ipvs: avoid out-of-bounds write in ip_vs_nat_icmpinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_core.c net/netfilter/ipvs/ip_vs_xmit.c+36 -350 replies
13/156ipvs: return the csum validation for forward hookinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_proto_sctp.c+6 -150 replies
14/156btrfs: fix memory leak in btrfs_do_encoded_write()fs/btrfs/inode.c+1 -00 replies
15/156bpf: Preserve pointer state for commuted arithmetickernel/bpf/verifier.c+8 -70 replies
16/156net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()net/smc/smc_llc.c+2 -10 replies
17/156net/sched: cls_route: fix fastmap use-after-free on filternet/sched/cls_route.c+26 -90 replies
18/156net: hisilicon: hix5hd2_gmac: remove redundant NAPI deletedrivers/net/ethernet/hisilicon/hix5hd2_gmac.c+0 -10 replies
19/156devlink: fix net namespace reference leak in reloadnet/devlink/dev.c+1 -00 replies
20/156net/mlx5: fw_tracer, return NULL on create errordrivers/net/ethernet/mellanox/mlx5/core/diag/fw_tracer.c+7 -90 replies
21/156counter: microchip-tcb-capture: Fix DT channel validationdrivers/counter/microchip-tcb-capture.c+2 -20 replies
22/156bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batchnet/ipv4/tcp_ipv4.c+5 -40 replies
23/156bpf: tcp: Make sure iter->batch always contains a full bucket snapshotnet/ipv4/tcp_ipv4.c+77 -320 replies
24/156bpf: tcp: Get rid of st_bucket_donenet/ipv4/tcp_ipv4.c+6 -80 replies
25/156bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch itemsnet/ipv4/tcp_ipv4.c+14 -100 replies
26/156bpf: tcp: Avoid socket skips and repeats during iterationnet/ipv4/tcp_ipv4.c+115 -320 replies
27/156bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()net/ipv4/tcp_ipv4.c+24 -190 replies
28/156vhost/vdpa: reject overflowing PA map page counts on 32-bitdrivers/vhost/vdpa.c+8 -10 replies
29/156tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()net/ipv4/tcp_input.c+1 -10 replies
30/156udp: fix potential use-after-free in tunnel segmentationnet/ipv4/udp_offload.c+3 -10 replies
31/156net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filternet/sched/sch_cake.c+0 -10 replies
32/156net/openvswitch: check Ethernet header length in key_extract()net/openvswitch/flow.c+7 -40 replies
33/156net: sched: cls_api: add skip_sw counterinclude/net/sch_generic.h net/sched/cls_api.c+5 -00 replies
34/156net: sched: cls_api: add filter counterinclude/net/sch_generic.h net/sched/cls_api.c+21 -00 replies
35/156net: sched: make skip_sw actually skip softwareinclude/net/pkt_cls.h include/net/sch_generic.h net/core/dev.c +1 more+38 -00 replies
36/156net: sched: cls_api: fix slab-use-after-free in fl_dump_keynet/sched/cls_api.c+1 -10 replies
37/156net: sched: refine software bypass handling in tc_runinclude/net/pkt_cls.h include/net/sch_generic.h net/core/dev.c +5 more+55 -450 replies
38/156net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiersnet/sched/cls_api.c+16 -10 replies
39/156hwmon: (nzxt-smart2) Check return value of init_device() in probedrivers/hwmon/nzxt-smart2.c+5 -10 replies
40/156hwmon: (lm25066) Use i2c_get_match_data()drivers/hwmon/pmbus/lm25066.c+3 -110 replies
41/156hwmon: (pmbus/lm25066) Fix PMBus coefficient calculationsdrivers/hwmon/pmbus/lm25066.c+3 -20 replies
42/156selftests/ftrace: refactor eprobes test to fix argument checkstools/testing/selftests/ftrace/test.d/dynevent/add_remove_eprobe.tc+5 -110 replies
43/156bnxt_en: Do not set EOP on RX AGG BDs on 5760X chipsdrivers/net/ethernet/broadcom/bnxt/bnxt.c drivers/net/ethernet/broadcom/bnxt/bnxt.h+9 -10 replies
44/156bnxt_en: Disable EOP for TPA on all chips to prevent data corruptiondrivers/net/ethernet/broadcom/bnxt/bnxt.c+7 -40 replies
45/156bnxt_en: Fix PTP PPS setting bugdrivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c+5 -20 replies
46/156sctp: fix addip_serial increment on ASCONF_ACK allocation failurenet/sctp/sm_make_chunk.c+1 -20 replies
47/156tcp: fix TFO max_qlen accounting across reuseport migrationnet/ipv4/inet_connection_sock.c+16 -40 replies
48/156net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload lengthnet/ncsi/ncsi-netlink.c+4 -00 replies
49/156net: prestera: validate firmware header lengthdrivers/net/ethernet/marvell/prestera/prestera_pci.c+3 -00 replies
50/156net: remove WARN_ON_ONCE() from sk_mc_loop()net/core/sock.c+0 -10 replies
51/156net/smc: fix TOCTOU race between smc_listen_out() and listener closenet/smc/af_smc.c+2 -10 replies
52/156net: thunderbolt: Tear down DMA paths before stopping the ringsdrivers/net/thunderbolt/main.c+15 -50 replies
53/156ata: pata_sl82c105: fix bridge revision use-after-freedrivers/ata/pata_sl82c105.c+3 -10 replies
54/156net/tcp: Prepare tcp_md5sig_pool for TCP-AOinclude/net/tcp.h net/ipv4/Kconfig net/ipv4/Makefile +5 more+525 -2110 replies
55/156net/tcp: Add TCP-AO config and structuresinclude/linux/tcp.h include/net/tcp.h include/net/tcp_ao.h +2 more+114 -80 replies
56/156net/atm: fix slab-out-of-bounds read in vcc_setsockopt()net/atm/common.c+9 -50 replies
57/156sctp: clear control chunk transport if it is being removednet/sctp/associola.c+4 -00 replies
58/156tls: dont abort the connection on signal-interrupted sendsnet/tls/tls_sw.c+1 -10 replies
59/156hwmon: (corsair-psu) fix possible out-of-bounds access on missing string terminationdrivers/hwmon/corsair-psu.c+2 -20 replies
60/156regulator: devres: add API for reference voltage suppliesDocumentation/driver-api/driver-model/devres.rst drivers/regulator/devres.c include/linux/regulator/consumer.h+67 -00 replies
61/156hwmon: (ads7828) Fix external VREF regulator handlingdrivers/hwmon/ads7828.c+6 -50 replies
62/156net: fec: do not release NULL pages when RX buffer allocation failsdrivers/net/ethernet/freescale/fec_main.c+9 -20 replies
63/156spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfersdrivers/spi/spi-fsl-dspi.c+7 -60 replies
64/156Input: evdev - sanitize event type index when fetching event masksdrivers/input/evdev.c+4 -10 replies
65/156ALSA: usb-audio: fix OOB write on Type II inbound URBssound/usb/endpoint.c+4 -20 replies
66/156usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()drivers/usb/atm/cxacru.c+2 -00 replies
67/156thunderbolt: icm: Preserve USB4 proxy data-valid bitdrivers/thunderbolt/icm.c+1 -10 replies
68/156usb: cdnsp: fix incorrect endian conversions for APB timeout registerdrivers/usb/cdns3/cdnsp-gadget.c+2 -20 replies
69/156usb: gadget: f_ncm: Use unsigned int for ndp_indexdrivers/usb/gadget/function/f_ncm.c+1 -10 replies
70/156net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()drivers/net/usb/ax88179_178a.c+3 -10 replies
71/156vt: add permission check for KDSKBMETA ioctldrivers/tty/vt/vt_ioctl.c+2 -00 replies
72/156vt: stabilize tty reference in kbd_keycode with tty_port_tty_getdrivers/tty/vt/keyboard.c+4 -10 replies
73/156Input: evdev - fix information leak in evdev_pass_values()drivers/input/evdev.c+12 -100 replies
74/156ima: fix out-of-bounds read in xattr_verify()security/integrity/ima/ima_appraise.c+7 -20 replies
75/156ipvs: stop estimator after disabled calc phasenet/netfilter/ipvs/ip_vs_est.c+7 -30 replies
76/156ipvs: add totalconns for destinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_conn.c net/netfilter/ipvs/ip_vs_ctl.c +4 more+28 -380 replies
77/156ipvs: properly update the overload flag on dest editinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_conn.c net/netfilter/ipvs/ip_vs_ctl.c+72 -250 replies
78/156ipvs: clear IPv4 options after rebasing tunnel ICMP errorsnet/netfilter/ipvs/ip_vs_core.c+1 -00 replies
79/156packet: use consistent hard_header_len in non-ring send pathsinclude/linux/netdevice.h net/packet/af_packet.c+20 -120 replies
80/156packet: use consistent hard_header_len in TX_RING send pathnet/packet/af_packet.c+11 -80 replies
81/156net/packet: reset the MAC header on the packet-socket transmit pathnet/packet/af_packet.c+4 -30 replies
82/156packet: synchronize pressure clearing with ring reconfigurationnet/packet/af_packet.c+16 -40 replies
83/156net: openvswitch: reallocate update replies for mismatched IDsnet/openvswitch/datapath.c+26 -30 replies
84/156net/sched: reject overly deep qdisc hierarchiesinclude/net/sch_generic.h net/sched/sch_api.c+10 -00 replies
85/156net: octeontx2-pf: Fix UB in shift operationdrivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c+4 -20 replies
86/156net: remove CAP_SYS_RAWIO zero-padding in dev_validate_headerinclude/linux/netdevice.h+0 -50 replies
87/156mac802154: fix netdev use-after-free in beacon workernet/mac802154/scan.c+4 -00 replies
88/156netfilter: ebt_nflog: pin the NFLOG backendnet/bridge/netfilter/ebt_nflog.c+16 -10 replies
89/156net: bridge: mrp: fix uninitialised bytes on the wirenet/bridge/br_mrp.c+2 -40 replies
90/156KVM: s390: pci: Fix memory accounting for pinned/unpinned pagesarch/s390/kvm/pci.c arch/s390/kvm/pci.h+36 -140 replies
91/156KVM: s390: pci: Fix missing error codes and memory unaccountingarch/s390/kvm/pci.c+7 -20 replies
92/156KVM: s390: pci: Fix resource leak on IRQ registration failurearch/s390/kvm/pci.c+21 -80 replies
93/156KVM: s390: pci: Fix aisb calculationarch/s390/kvm/pci.c+1 -10 replies
94/156dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clkDocumentation/devicetree/bindings/crypto/qcom,inline-crypto-engine.yaml+15 -10 replies
95/156futex: Prevent robust futex exit race some morekernel/futex/core.c+56 -260 replies
96/156fortify: refactor test_fortify Makefile to fix some build problemslib/.gitignore lib/Makefile lib/test_fortify/.gitignore +2 more+33 -350 replies
97/156fortify: Disable -Wstringop-overread in testslib/test_fortify/Makefile+1 -00 replies
98/156pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPPdrivers/pinctrl/renesas/pinctrl-rzg2l.c+2 -20 replies
99/156fscrypt: Replace mk_users keyring with simple listfs/crypto/fscrypt_private.h fs/crypto/keyring.c+113 -1310 replies
100/156selftests/bpf: Adapt sockmap update error handlingtools/testing/selftests/bpf/prog_tests/sockmap_listen.c+11 -100 replies
101/156ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthopsnet/ipv4/fib_semantics.c+49 -180 replies
102/156ipv4: fix use-after-free in fib_nhc_update_mtu()include/net/route.h net/ipv4/fib_semantics.c net/ipv4/route.c+42 -230 replies
103/156mei: pull kvfree out of spinlockdrivers/misc/mei/client.c+15 -100 replies
104/156serial: 8250_dma: Clear stale RX state on shutdowndrivers/tty/serial/8250/8250_dma.c+7 -50 replies
105/156staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()drivers/staging/rtl8723bs/core/rtw_ieee80211.c+3 -00 replies
106/156staging: rtl8723bs: fix OOB read in WMM_param_handler()drivers/staging/rtl8723bs/core/rtw_wlan_util.c+3 -00 replies
107/156staging: rtl8723bs: fix missing shared-key auth challenge length checkdrivers/staging/rtl8723bs/core/rtw_mlme_ext.c+1 -10 replies
108/156staging: rtl8723bs: validate monitor transmit frame lengthsdrivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c+4 -00 replies
109/156misc: fastrpc: fix channel ctx ref leak when session alloc failsdrivers/misc/fastrpc.c+1 -10 replies
110/156misc: fastrpc: Remove buffer from list prior to unmap operationdrivers/misc/fastrpc.c+10 -40 replies
111/156misc: fastrpc: take fl->lock when moving mmaps on interrupted invokedrivers/misc/fastrpc.c+2 -00 replies
112/156misc: fastrpc: fix memory leak in fastrpc_channel_ctx_freedrivers/misc/fastrpc.c+1 -00 replies
113/156ring-buffer: Fix crash passing ERR_PTR to kthread_stop()kernel/trace/ring_buffer.c+1 -10 replies
114/156ALSA: usb: Fix UAF at delayed release of MIDI2 EPssound/usb/midi2.c+9 -00 replies
115/156ALSA: usx2y: bound the hwdep mmap fault offsetsound/usb/usx2y/usX2Yhwdep.c sound/usb/usx2y/usx2yhwdeppcm.c+4 -00 replies
116/156tracing: Fix race between update_event_fields and, event_define_fieldskernel/trace/trace_events.c+2 -00 replies
117/156fbdev: bitblit: bound-check glyph index in bit_cursor()drivers/video/fbdev/core/bitblit.c+7 -20 replies
118/156net: smc: fix splice entry lifetime imbalance in smc_rx_splicenet/smc/smc_rx.c+10 -90 replies
119/156ipv6: prevent in6_dev_get() from resurrecting inet6_devinclude/net/addrconf.h+2 -20 replies
120/156netfilter: bridge: release template ct on non-IP pathnet/bridge/netfilter/nf_conntrack_bridge.c+1 -00 replies
121/156netfilter: nf_conntrack: defer invalid log until after unlocknet/netfilter/nf_conntrack_proto.c net/netfilter/nf_conntrack_proto_sctp.c net/netfilter/nf_conntrack_proto_tcp.c+102 -480 replies
122/156net: atlantic: free stranded TX buffers on ring deinitdrivers/net/ethernet/aquantia/atlantic/aq_ring.c drivers/net/ethernet/aquantia/atlantic/aq_ring.h drivers/net/ethernet/aquantia/atlantic/aq_vec.c+31 -10 replies
123/156net: atlantic: free RX pages of consumed but not refilled buffersdrivers/net/ethernet/aquantia/atlantic/aq_ring.c+18 -40 replies
124/156net/sched: act_ct: fix sk_buff leak when the header checks reject a packetnet/sched/act_ct.c+25 -40 replies
125/156net/sched: act_gact, act_police: range check the fallback control actioninclude/net/act_api.h net/sched/act_gact.c net/sched/act_police.c+30 -00 replies
126/156ovl: dont warn when the mount is completed from another user namespacefs/overlayfs/super.c+2 -10 replies
127/156Revert "drm/amdgpu: fix aperture mapping leak"drivers/gpu/drm/amd/amdgpu/amdgpu_device.c drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c+21 -160 replies
128/156xdp: reject clones that overrun skb_shared_info tailroomnet/core/xdp.c+1 -10 replies
129/156vxlan: do not arm the ageing timer on a device that is downdrivers/net/vxlan/vxlan_core.c+1 -10 replies
130/156vsock/virtio: read virtqueues under worker locksnet/vmw_vsock/virtio_transport.c+6 -50 replies
131/156vsock/virtio: avoid refilling the RX queue after teardownnet/vmw_vsock/virtio_transport.c+2 -10 replies
132/156veth: fix skb length accounting after XDP frag adjustmentdrivers/net/veth.c+14 -80 replies
133/156vhost: reset the vring metadata cache on vring reconfigurationdrivers/vhost/vhost.c+8 -00 replies
134/156tls: dont leave a full plaintext sk_msg ring unpushednet/tls/tls_sw.c+14 -00 replies
135/156tipc: read le->link under the node lock in tipc_node_link_down()net/tipc/node.c+10 -50 replies
136/156smb: client: Fix use-after-free in cifs_try_adding_channels()fs/smb/client/sess.c+1 -10 replies
137/156KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow pagearch/x86/kvm/mmu/mmu.c+3 -00 replies
138/156eventfs: Fix use-after-free in eventfs_remove_rec()fs/tracefs/event_inode.c+2 -20 replies
139/156eventfs: Use children field for rcu head and add memory barriersfs/tracefs/event_inode.c fs/tracefs/internal.h+26 -20 replies
140/156Revert "thermal/drivers/hwmon: Cleanup coding style a bit"drivers/thermal/thermal_hwmon.c+2 -10 replies
141/156ptp: ocp: Fix board ID over-readdrivers/ptp/ptp_ocp.c+3 -10 replies
142/156ring-buffer: Use current_context for safe per-CPU buffer swapkernel/trace/ring_buffer.c+4 -40 replies
143/156ipv6: fix Route Information option length validationnet/ipv6/route.c+4 -40 replies
144/156ip6_tunnel: clear skb2->cb[] in ip6ip6_err()net/ipv6/ip6_tunnel.c+3 -00 replies
145/156fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()fs/crypto/policy.c+1 -10 replies
146/156sched/psi: Shut down rtpoll_timer in psi_cgroup_free()kernel/sched/psi.c+6 -00 replies
147/156bpf, sockmap: Fix sk_redir use-after-free in send verdictnet/ipv4/tcp_bpf.c+2 -00 replies
148/156scsi: scsi_debug: Negate wrapped memcmp() resultdrivers/scsi/scsi_debug.c+2 -20 replies
149/156sctp: keep chunk->transport in step with the list it is queued onnet/sctp/outqueue.c+1 -00 replies
150/156sctp: fix use-after-free of cached ASCONF chunknet/sctp/associola.c net/sctp/sm_statefuns.c+8 -20 replies
151/156sctp: clear new_transport when removing a peernet/sctp/associola.c+3 -00 replies
152/156thunderbolt: Bound the DROM dual link port number before indexing sw->portsdrivers/thunderbolt/eeprom.c+8 -10 replies
153/156bpf: tcp: fix double sock release on batch reallocnet/ipv4/tcp_ipv4.c+4 -10 replies
154/156net/tcp_sigpool: Fix some off by one bugsnet/ipv4/tcp_sigpool.c+4 -40 replies
155/156net/tcp_sigpool: Use kref_get_unless_zero()net/ipv4/tcp_sigpool.c+2 -30 replies
156/156regulator: devres: fix devm_regulator_get_enable_read_voltage() returndrivers/regulator/devres.c+1 -10 replies

Reviews trailers per patch

95 of 156 patches have a Reviewed-by or Acked-by.

PatchCosmin RatiuFilipe MananaDavid SterbaDaniel WadeShung-Hsi YuHidayath KhanSidraya JayagondDust LiVictor NogueiraSantosh KalluriJiri PirkoAntoine TenartKuniyuki IwashimaJakub SitnickiShay DroriJoshua CroftsStanislav FomichevMichael S. TsirkinHolger DenglerEelco ChaudronIlya MaximetsSimon HormanMarcelo Ricardo LeitnerDan AloniAvi FishmanDouglas AndersonMika WesterbergNikolay AleksandrovJay VosburghAsbjørn Sloth TønnesenPavan ChebbiXin LongEric DumazetElad NachmanMahanta JambigiBreno LeitaoNiklas CasselSteen HegelundDavid AhernGreg Kroah-HartmanArnd BergmannJulian AnastasovAndy GospodarekSomnath KoturKalesh APMiquel RaynalChristian BorntraegerMatthew RosatoNiklas SchnelleKuldeep SinghKrzysztof KozlowskiWillem de BruijnBartosz GolaszewskiGeert UytterhoevenIdo SchimmelMenachem AdinDmitry BaryshkovEkansh GuptaVincent DonnefortMasami Hiramatsu (Google)Jamal Hadi SalimRatheesh KannothSunil GouthamBobby EshlemanLorenzo BianconiTung NguyenFlorian WestphalLukasz LubaVadim FedorenkoJohannes WeinerMatt FlemingSuren BaghdasaryanJohn FastabendEmil TsalapatisJohn GarrySukhdeep SinghMina AlmasryJordan RifeDmitry SafonovBagas SanjayaJan KaraLijo LazarHawking ZhangPeter SchneiderPavel Machek (CIP)Florian FainelliWentao GuanFrancesco DolciniRon EconomosBrett A C SheffieldMark BrownShuah KhanMiguel Ojeda
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
1/156
2/156R-b R-b
3/156R-b
4/156T-b
5/156R-b
6/156
7/156R-b
8/156A-b
9/156R-b A-b
10/156R-b
11/156
12/156
13/156
14/156R-b R-b
15/156T-b A-b
16/156R-b R-b R-b
17/156T-b T-b
18/156
19/156R-b R-b
20/156R-b
21/156R-b
22/156R-b A-b
23/156R-b A-b
24/156R-b A-b
25/156R-b A-b
26/156A-b
27/156R-b
28/156A-b
29/156
30/156R-b
31/156
32/156R-b R-b
33/156R-b R-b R-b
34/156R-b R-b
35/156R-b R-b
36/156R-b T-b
37/156A-b R-b T-b
38/156T-b
39/156
40/156
41/156
42/156
43/156R-b R-b
44/156R-b R-b
45/156R-b
46/156A-b
47/156R-b R-b
48/156
49/156A-b
50/156
51/156R-b R-b R-b
52/156A-b
53/156R-b
54/156R-b A-b
55/156A-b
56/156
57/156
58/156
59/156
60/156
61/156
62/156
63/156
64/156A-b
65/156
66/156
67/156
68/156A-b
69/156
70/156
71/156
72/156
73/156
74/156
75/156A-b
76/156
77/156
78/156A-b
79/156R-b
80/156R-b
81/156R-b
82/156
83/156R-b
84/156R-b A-b
85/156R-b R-b
86/156R-b
87/156R-b
88/156
89/156A-b
90/156R-b R-b T-b
91/156R-b R-b T-b
92/156R-b R-b T-b
93/156R-b
94/156R-b R-b
95/156
96/156
97/156
98/156R-b R-b T-b
99/156
100/156R-b R-b
101/156R-b
102/156R-b
103/156R-b
104/156
105/156
106/156
107/156
108/156
109/156R-b
110/156R-b
111/156R-b
112/156R-b
113/156R-b A-b
114/156
115/156
116/156
117/156
118/156R-b R-b
119/156R-b
120/156
121/156R-b
122/156R-b A-b
123/156R-b A-b
124/156A-b
125/156T-b A-b
126/156R-b
127/156R-b R-b
128/156
129/156R-b
130/156R-b
131/156R-b
132/156A-b
133/156
134/156
135/156R-b
136/156
137/156
138/156A-b
139/156R-b
140/156R-b
141/156R-b
142/156
143/156R-b
144/156R-b
145/156
146/156A-b T-b A-b
147/156R-b R-b
148/156R-b
149/156A-b
150/156A-b
151/156A-b
152/156
153/156R-b R-b
154/156R-b R-b
155/156R-b T-b
156/156

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 93 reviewers.

Read the v1 thread

Cover letter [PATCH 6.6 000/156] 6.6.152-rc1 review

This is the start of the stable review cycle for the 6.6.152 release. There are 156 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.152-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.152-rc1

David Lechner <[email protected]>
regulator: devres: fix devm_regulator_get_enable_read_voltage() return

Dmitry Safonov <[email protected]>
net/tcp_sigpool: Use kref_get_unless_zero()

Dan Carpenter <[email protected]>
net/tcp_sigpool: Fix some off by one bugs

Xiang Mei (Microsoft) <[email protected]>
bpf: tcp: fix double sock release on batch realloc

Bryam Vargas <[email protected]>

    thunderbolt: Bound the DROM dual link port number before indexing sw->ports

Qing Ming <[email protected]>
sctp: clear new_transport when removing a peer

Yuxiang Yang <[email protected]>
sctp: fix use-after-free of cached ASCONF chunk

Baul Lee <[email protected]>

    sctp: keep chunk->transport in step with the list it is queued on

Xu Rao <[email protected]>
scsi: scsi_debug: Negate wrapped memcmp() result

Chengfeng Ye <[email protected]>
bpf, sockmap: Fix sk_redir use-after-free in send verdict

Tejun Heo <[email protected]>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

Zhan Xusheng <[email protected]>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()

Zhiling Zou <[email protected]>

    ip6_tunnel: clear skb2->cb[] in ip6ip6_err()

Yuejie Shi <[email protected]>
ipv6: fix Route Information option length validation

Tengda Wu <[email protected]>
ring-buffer: Use current_context for safe per-CPU buffer swap

Ahmad Byagowi <[email protected]>
ptp: ocp: Fix board ID over-read

Rafael J. Wysocki <[email protected]>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

Steven Rostedt <[email protected]>
eventfs: Use children field for rcu head and add memory barriers

Shuangpeng Bai <[email protected]>
eventfs: Fix use-after-free in eventfs_remove_rec()

Sean Christopherson <[email protected]>
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

Shuangpeng Bai <[email protected]>
smb: client: Fix use-after-free in cifs_try_adding_channels()

Jun Yang <[email protected]>

    tipc: read le->link under the node lock in tipc_node_link_down()

chanyoung <[email protected]>
tls: don't leave a full plaintext sk_msg ring unpushed

Jun Yang <[email protected]>
vhost: reset the vring metadata cache on vring reconfiguration

Sun Jian <[email protected]>
veth: fix skb length accounting after XDP frag adjustment

Weiming Shi <[email protected]>
vsock/virtio: avoid refilling the RX queue after teardown

Weiming Shi <[email protected]>
vsock/virtio: read virtqueues under worker locks

Baul Lee <[email protected]>
vxlan: do not arm the ageing timer on a device that is down

Zhiling Zou <[email protected]>
xdp: reject clones that overrun skb_shared_info tailroom

Asad Kamal <[email protected]>
Revert "drm/amdgpu: fix aperture mapping leak"

Christian Brauner <[email protected]>
ovl: don't warn when the mount is completed from another user namespace

Hyunjung Ko <[email protected]>
net/sched: act_gact, act_police: range check the fallback control action

Hyunjung Ko <[email protected]>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

Yangyu Chen <[email protected]>
net: atlantic: free RX pages of consumed but not refilled buffers

Yangyu Chen <[email protected]>
net: atlantic: free stranded TX buffers on ring deinit

Zihan Xi <[email protected]>
netfilter: nf_conntrack: defer invalid log until after unlock

Zhiling Zou <[email protected]>
netfilter: bridge: release template ct on non-IP path

Kyle Zeng <[email protected]>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev

Daming Li <[email protected]>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice

Rik van Riel <[email protected]>
fbdev: bitblit: bound-check glyph index in bit_cursor()

Michael Wu <[email protected]>
tracing: Fix race between update_event_fields and, event_define_fields

Baul Lee <[email protected]>
ALSA: usx2y: bound the hwdep mmap fault offset

Takashi Iwai <[email protected]>
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

Hui Su <[email protected]>
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()

Eddie Lin <[email protected]>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free

Junrui Luo <[email protected]>

    misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke

Ekansh Gupta <[email protected]>
misc: fastrpc: Remove buffer from list prior to unmap operation

Anandu Krishnan E <[email protected]>
misc: fastrpc: fix channel ctx ref leak when session alloc fails

Mariano Baragiola <[email protected]>
staging: rtl8723bs: validate monitor transmit frame lengths

Panagiotis Petrakopoulos <[email protected]>
staging: rtl8723bs: fix missing shared-key auth challenge length check

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in WMM_param_handler()

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()

Cunhao Lu <[email protected]>
serial: 8250_dma: Clear stale RX state on shutdown

Alexander Usyskin <[email protected]>
mei: pull kvfree out of spinlock

Chengfeng Ye <[email protected]>
ipv4: fix use-after-free in fib_nhc_update_mtu()

Zihan Xi <[email protected]>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops

Michal Luczaj <[email protected]>
selftests/bpf: Adapt sockmap update error handling

Eric Biggers <[email protected]>
fscrypt: Replace mk_users keyring with simple list

Claudiu Beznea <[email protected]>
pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP

Nathan Chancellor <[email protected]>
fortify: Disable -Wstringop-overread in tests

Masahiro Yamada <[email protected]>
fortify: refactor test_fortify Makefile to fix some build problems

Keno Fischer <[email protected]>
futex: Prevent robust futex exit race some more

Harshal Dev <[email protected]>
dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk

Matthew Rosato <[email protected]>
KVM: s390: pci: Fix aisb calculation

Farhan Ali <[email protected]>
KVM: s390: pci: Fix resource leak on IRQ registration failure

Farhan Ali <[email protected]>
KVM: s390: pci: Fix missing error codes and memory unaccounting

Farhan Ali <[email protected]>
KVM: s390: pci: Fix memory accounting for pinned/unpinned pages

Baul Lee <[email protected]>
net: bridge: mrp: fix uninitialised bytes on the wire

Chengfeng Ye <[email protected]>
netfilter: ebt_nflog: pin the NFLOG backend

Zihan Xi <[email protected]>
mac802154: fix netdev use-after-free in beacon worker

Qihang Tang <[email protected]>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header

Sergey V. Frolov <[email protected]>
net: octeontx2-pf: Fix UB in shift operation

Zijie Huang <[email protected]>
net/sched: reject overly deep qdisc hierarchies

Zhiling Zou <[email protected]>
net: openvswitch: reallocate update replies for mismatched IDs

Zihan Xi <[email protected]>
packet: synchronize pressure clearing with ring reconfiguration

Doruk Tan Ozturk <[email protected]>
net/packet: reset the MAC header on the packet-socket transmit path

Qihang Tang <[email protected]>
packet: use consistent hard_header_len in TX_RING send path

Qihang Tang <[email protected]>
packet: use consistent hard_header_len in non-ring send paths

Kyle Zeng <[email protected]>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors

Julian Anastasov <[email protected]>
ipvs: properly update the overload flag on dest edit

Julian Anastasov <[email protected]>
ipvs: add totalconns for dest

Zhiling Zou <[email protected]>
ipvs: stop estimator after disabled calc phase

Lincoln Wallace <[email protected]>
ima: fix out-of-bounds read in xattr_verify()

Dmitry Torokhov <[email protected]>
Input: evdev - fix information leak in evdev_pass_values()

Joshua Rogers <[email protected]>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

Joshua Rogers <[email protected]>
vt: add permission check for KDSKBMETA ioctl

Yi Cong <[email protected]>

    net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()

Sonali Pradhan <[email protected]>
usb: gadget: f_ncm: Use unsigned int for ndp_index

Pawel Laszczak <[email protected]>
usb: cdnsp: fix incorrect endian conversions for APB timeout register

Xu Rao <[email protected]>
thunderbolt: icm: Preserve USB4 proxy data-valid bit

Aleksandr Nogikh <[email protected]>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()

Baul Lee <[email protected]>
ALSA: usb-audio: fix OOB write on Type II inbound URBs

Dmitry Torokhov <[email protected]>
Input: evdev - sanitize event type index when fetching event masks

Larisa Grigore <[email protected]>
spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers

Mehmet Fide <[email protected]>
net: fec: do not release NULL pages when RX buffer allocation fails

Qingshuang Fu <[email protected]>
hwmon: (ads7828) Fix external VREF regulator handling

David Lechner <[email protected]>
regulator: devres: add API for reference voltage supplies

Wilken Gottwalt <[email protected]>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination

Maximilian Immanuel Brandtner <[email protected]>
tls: don't abort the connection on signal-interrupted sends

Xin Long <[email protected]>
sctp: clear control chunk transport if it is being removed

Eric Dumazet <[email protected]>
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()

Dmitry Safonov <[email protected]>
net/tcp: Add TCP-AO config and structures

Dmitry Safonov <[email protected]>
net/tcp: Prepare tcp_md5sig_pool for TCP-AO

Hongyan Xu <[email protected]>
ata: pata_sl82c105: fix bridge revision use-after-free

Fan XinRan <[email protected]>
net: thunderbolt: Tear down DMA paths before stopping the rings

Sidraya Jayagond <[email protected]>
net/smc: fix TOCTOU race between smc_listen_out() and listener close

Eric Dumazet <[email protected]>
net: remove WARN_ON_ONCE() from sk_mc_loop()

Pengpeng Hou <[email protected]>
net: prestera: validate firmware header length

Henry Martin <[email protected]>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length

Jiayuan Chen <[email protected]>
tcp: fix TFO max_qlen accounting across reuseport migration

Qing Luo <[email protected]>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure

Keegan Freyhof <[email protected]>
bnxt_en: Fix PTP PPS setting bug

Michael Chan <[email protected]>
bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

Michael Chan <[email protected]>
bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips

Martin Kaiser <[email protected]>
selftests/ftrace: refactor eprobes test to fix argument checks

Guenter Roeck <[email protected]>
hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations

Rob Herring <[email protected]>

    hwmon: (lm25066) Use i2c_get_match_data()

Qingshuang Fu <[email protected]>
hwmon: (nzxt-smart2) Check return value of init_device() in probe

Jamal Hadi Salim <[email protected]>
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers

Xin Long <[email protected]>
net: sched: refine software bypass handling in tc_run

Jianbo Liu <[email protected]>
net: sched: cls_api: fix slab-use-after-free in fl_dump_key

Asbjørn Sloth Tønnesen <[email protected]>
net: sched: make skip_sw actually skip software

Asbjørn Sloth Tønnesen <[email protected]>
net: sched: cls_api: add filter counter

Asbjørn Sloth Tønnesen <[email protected]>
net: sched: cls_api: add skip_sw counter

Cen Zhang (Microsoft) <[email protected]>
net/openvswitch: check Ethernet header length in key_extract()

Toke Høiland-Jørgensen <[email protected]>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter

Xuanqiang Luo <[email protected]>
udp: fix potential use-after-free in tunnel segmentation

Nathan Gao <[email protected]>
tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()

Yousef Alhouseen <[email protected]>
vhost/vdpa: reject overflowing PA map page counts on 32-bit

Jose Fernandez (Anthropic) <[email protected]>
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()

Jordan Rife <[email protected]>
bpf: tcp: Avoid socket skips and repeats during iteration

Jordan Rife <[email protected]>
bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items

Jordan Rife <[email protected]>
bpf: tcp: Get rid of st_bucket_done

Jordan Rife <[email protected]>

    bpf: tcp: Make sure iter->batch always contains a full bucket snapshot

Jordan Rife <[email protected]>
bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch

Babanpreet Singh <[email protected]>
counter: microchip-tcb-capture: Fix DT channel validation

Michael Guralnik <[email protected]>
net/mlx5: fw_tracer, return NULL on create error

Or Har-Toov <[email protected]>
devlink: fix net namespace reference leak in reload

Jiawen Liu <[email protected]>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete

Jamal Hadi Salim <[email protected]>
net/sched: cls_route: fix fastmap use-after-free on filter

Mahanta Jambigi <[email protected]>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

Yiyang Chen <[email protected]>
bpf: Preserve pointer state for commuted arithmetic

Dmitry Antipov <[email protected]>
btrfs: fix memory leak in btrfs_do_encoded_write()

Julian Anastasov <[email protected]>
ipvs: return the csum validation for forward hook

Julian Anastasov <[email protected]>
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp

Jozsef Kadlecsik <[email protected]>
netfilter: ipset: switch ext_size to atomic64_t

Shay Drory <[email protected]>
net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

Xiang Mei (Microsoft) <[email protected]>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor

Fan Ye <[email protected]>
Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"

Pengpeng Hou <[email protected]>
drm/bridge: ps8640: propagate AUX transfer register errors

Rosen Penev <[email protected]>
ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt

Yuho Choi <[email protected]>
ARM: npcm: Fix OF node refcount leaks in SMP setup

Anna Schumaker <[email protected]>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

Harald Freudenberger <[email protected]>
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()

Michal Luczaj <[email protected]>
selftests/bpf: Fail unbound UDP on sockmap update

Al Viro <[email protected]>
mount: honour SB_NOUSER in the new mount API

-------------

Diffstat:

 .../bindings/crypto/qcom,inline-crypto-engine.yaml |  16 +-
 Documentation/driver-api/driver-model/devres.rst   |   1 +
 Makefile                                           |   4 +-
 arch/arm/boot/dts/broadcom/bcm-ns.dtsi             |   2 +-
 arch/arm/mach-npcm/platsmp.c                       |   2 +
 arch/s390/kvm/pci.c                                |  86 +++--
 arch/s390/kvm/pci.h                                |   2 +
 arch/x86/kvm/mmu/mmu.c                             |   3 +
 drivers/ata/pata_sl82c105.c                        |   4 +-
 drivers/counter/microchip-tcb-capture.c            |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  35 +-
 drivers/gpu/drm/bridge/parade-ps8640.c             |  27 +-
 drivers/hwmon/ads7828.c                            |  11 +-
 drivers/hwmon/corsair-psu.c                        |   4 +-
 drivers/hwmon/nzxt-smart2.c                        |   6 +-
 drivers/hwmon/pmbus/lm25066.c                      |  19 +-
 drivers/input/evdev.c                              |  27 +-
 drivers/misc/fastrpc.c                             |  19 +-
 drivers/misc/mei/client.c                          |  25 +-
 drivers/net/bonding/bond_alb.c                     |  10 +-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.c   |  51 ++-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.h   |   1 +
 drivers/net/ethernet/aquantia/atlantic/aq_vec.c    |   2 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  12 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.h          |   1 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c      |   7 +-
 drivers/net/ethernet/freescale/fec_main.c          |  11 +-
 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c      |   1 -
 .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c   |   6 +-
 .../net/ethernet/marvell/prestera/prestera_pci.c   |   3 +
 .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c   |  16 +-
 .../net/ethernet/mellanox/mlx5/core/en/tc_priv.h   |   1 +
 drivers/net/ethernet/mellanox/mlx5/core/en_tc.c    |   4 +-
 drivers/net/thunderbolt/main.c                     |  33 +-
 drivers/net/usb/ax88179_178a.c                     |   4 +-
 drivers/net/veth.c                                 |  22 +-
 drivers/net/vxlan/vxlan_core.c                     |   2 +-
 drivers/pinctrl/renesas/pinctrl-rzg2l.c            |   4 +-
 drivers/ptp/ptp_ocp.c                              |   4 +-
 drivers/regulator/devres.c                         |  59 ++++
 drivers/s390/crypto/zcrypt_ccamisc.c               |  20 +-
 drivers/scsi/scsi_debug.c                          |   4 +-
 drivers/spi/spi-fsl-dspi.c                         |  13 +-
 drivers/staging/rtl8723bs/core/rtw_ieee80211.c     |   3 +
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |   2 +-
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c     |   3 +
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |   4 +
 drivers/thermal/thermal_hwmon.c                    |   3 +-
 drivers/thunderbolt/eeprom.c                       |   9 +-
 drivers/thunderbolt/icm.c                          |   2 +-
 drivers/tty/serial/8250/8250_dma.c                 |  12 +-
 drivers/tty/vt/keyboard.c                          |   5 +-
 drivers/tty/vt/vt_ioctl.c                          |   2 +
 drivers/usb/atm/cxacru.c                           |   2 +
 drivers/usb/cdns3/cdnsp-gadget.c                   |   4 +-
 drivers/usb/gadget/function/f_ncm.c                |   2 +-
 drivers/vhost/vdpa.c                               |   9 +-
 drivers/vhost/vhost.c                              |   8 +
 drivers/video/fbdev/core/bitblit.c                 |   9 +-
 fs/btrfs/inode.c                                   |   1 +
 fs/crypto/fscrypt_private.h                        |  32 +-
 fs/crypto/keyring.c                                | 212 +++++------
 fs/crypto/policy.c                                 |   2 +-
 fs/namespace.c                                     |   5 +
 fs/nfs/nfs4proc.c                                  |   5 +
 fs/overlayfs/super.c                               |   3 +-
 fs/smb/client/sess.c                               |   2 +-
 fs/tracefs/event_inode.c                           |  28 +-
 fs/tracefs/internal.h                              |   4 +-
 include/linux/netdevice.h                          |  11 +-
 include/linux/netfilter/ipset/ip_set.h             |   2 +-
 include/linux/regulator/consumer.h                 |   7 +
 include/linux/tcp.h                                |   9 +-
 include/net/act_api.h                              |  19 +
 include/net/addrconf.h                             |   4 +-
 include/net/ip_vs.h                                |  41 +--
 include/net/pkt_cls.h                              |  18 +
 include/net/route.h                                |   2 +
 include/net/sch_generic.h                          |   4 +
 include/net/tcp.h                                  |  58 +--
 include/net/tcp_ao.h                               |  90 +++++
 include/uapi/linux/tcp.h                           |   2 +
 kernel/bpf/verifier.c                              |  15 +-
 kernel/futex/core.c                                |  82 +++--
 kernel/sched/psi.c                                 |   6 +
 kernel/trace/ring_buffer.c                         |  10 +-
 kernel/trace/trace_events.c                        |   2 +
 lib/.gitignore                                     |   2 -
 lib/Makefile                                       |  34 +-
 lib/test_fortify/.gitignore                        |   2 +
 lib/test_fortify/Makefile                          |  29 ++
 net/atm/common.c                                   |  14 +-
 net/bridge/br_mrp.c                                |   6 +-
 net/bridge/netfilter/ebt_nflog.c                   |  17 +-
 net/bridge/netfilter/nf_conntrack_bridge.c         |   1 +
 net/core/dev.c                                     |  13 +
 net/core/sock.c                                    |   1 -
 net/core/xdp.c                                     |   2 +-
 net/devlink/dev.c                                  |   1 +
 net/ipv4/Kconfig                                   |  17 +
 net/ipv4/Makefile                                  |   1 +
 net/ipv4/fib_semantics.c                           | 101 +++---
 net/ipv4/inet_connection_sock.c                    |  20 +-
 net/ipv4/route.c                                   |  29 ++
 net/ipv4/tcp.c                                     | 145 ++------
 net/ipv4/tcp_bpf.c                                 |   2 +
 net/ipv4/tcp_input.c                               |   2 +-
 net/ipv4/tcp_ipv4.c                                | 390 ++++++++++++++-------
 net/ipv4/tcp_minisocks.c                           |  21 +-
 net/ipv4/tcp_sigpool.c                             | 357 +++++++++++++++++++
 net/ipv4/udp_offload.c                             |   4 +-
 net/ipv6/ip6_tunnel.c                              |   3 +
 net/ipv6/route.c                                   |   8 +-
 net/ipv6/tcp_ipv6.c                                |  60 ++--
 net/mac802154/scan.c                               |   4 +
 net/ncsi/ncsi-netlink.c                            |   4 +
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   4 +-
 net/netfilter/ipset/ip_set_core.c                  |   6 +-
 net/netfilter/ipset/ip_set_hash_gen.h              |   2 +-
 net/netfilter/ipset/ip_set_list_set.c              |   4 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |  41 +--
 net/netfilter/ipvs/ip_vs_core.c                    |  70 ++--
 net/netfilter/ipvs/ip_vs_ctl.c                     |  77 +++-
 net/netfilter/ipvs/ip_vs_est.c                     |  10 +-
 net/netfilter/ipvs/ip_vs_lc.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_proto_sctp.c              |   4 +-
 net/netfilter/ipvs/ip_vs_proto_tcp.c               |   2 -
 net/netfilter/ipvs/ip_vs_sync.c                    |   7 +-
 net/netfilter/ipvs/ip_vs_xmit.c                    |   2 +-
 net/netfilter/nf_conntrack_proto.c                 |   6 +
 net/netfilter/nf_conntrack_proto_sctp.c            |  12 +-
 net/netfilter/nf_conntrack_proto_tcp.c             | 132 ++++---
 net/openvswitch/datapath.c                         |  29 +-
 net/openvswitch/flow.c                             |  11 +-
 net/packet/af_packet.c                             |  72 ++--
 net/sched/act_ct.c                                 |  29 +-
 net/sched/act_gact.c                               |   5 +
 net/sched/act_police.c                             |   6 +
 net/sched/cls_api.c                                |  47 ++-
 net/sched/cls_bpf.c                                |   2 +
 net/sched/cls_flower.c                             |   2 +
 net/sched/cls_matchall.c                           |   2 +
 net/sched/cls_route.c                              |  35 +-
 net/sched/cls_u32.c                                |   4 +
 net/sched/sch_api.c                                |   9 +
 net/sched/sch_cake.c                               |   1 -
 net/sctp/associola.c                               |  11 +-
 net/sctp/outqueue.c                                |   1 +
 net/sctp/sm_make_chunk.c                           |   3 +-
 net/sctp/sm_statefuns.c                            |   6 +-
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc_llc.c                                  |   3 +-
 net/smc/smc_rx.c                                   |  19 +-
 net/tipc/node.c                                    |  15 +-
 net/tls/tls_sw.c                                   |  16 +-
 net/vmw_vsock/virtio_transport.c                   |  14 +-
 scripts/remove-stale-files                         |   2 +
 security/integrity/ima/ima_appraise.c              |   9 +-
 sound/usb/endpoint.c                               |   6 +-
 sound/usb/midi2.c                                  |   9 +
 sound/usb/usx2y/usX2Yhwdep.c                       |   2 +
 sound/usb/usx2y/usx2yhwdeppcm.c                    |   2 +
 .../selftests/bpf/prog_tests/sockmap_listen.c      |  21 +-
 tools/testing/selftests/bpf/test_maps.c            |  13 +-
 .../ftrace/test.d/dynevent/add_remove_eprobe.tc    |  16 +-
 166 files changed, 2407 insertions(+), 1036 deletions(-)