Skip to content

6.12.104-rc1 review

Greg Kroah-Hartman linux-iommu linux-patches lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest181 patches 19 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/181mount: honour SB_NOUSER in the new mount APIfs/namespace.c+5 -00 replies
2/181selftests/bpf: Fail unbound UDP on sockmap updatetools/testing/selftests/bpf/test_maps.c+6 -70 replies
3/181drm/amd/display: Add AV mute wait frames to dce110_set_avmutedrivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c+20 -10 replies
4/181drm/amd/display: Check for tg ops in dce110_set_avmutedrivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c+4 -10 replies
5/181s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()drivers/s390/crypto/zcrypt_ccamisc.c+13 -70 replies
6/181NFS: Pin the struct nfs_server during a FREE_STATEID callfs/nfs/nfs4proc.c+5 -00 replies
7/181arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timerarch/arm64/boot/dts/broadcom/bcm2712.dtsi+0 -20 replies
8/181ARM: npcm: Fix OF node refcount leaks in SMP setuparch/arm/mach-npcm/platsmp.c+2 -00 replies
9/181ARM: dts: BCM5301X: fix PCIe controller 2 second interruptarch/arm/boot/dts/broadcom/bcm-ns.dtsi+1 -10 replies
10/181drm/bridge: ps8640: propagate AUX transfer register errorsdrivers/gpu/drm/bridge/parade-ps8640.c+21 -60 replies
11/181net: hns3: fix speed configuration residue after driver reloaddrivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c+1 -50 replies
12/181Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"drivers/net/thunderbolt/main.c+7 -60 replies
13/181bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitordrivers/net/bonding/bond_alb.c+6 -40 replies
14/181enic: fix tx_hang_reset use-after-free on device removaldrivers/net/ethernet/cisco/enic/enic_main.c+3 -20 replies
15/181net/mlx5e: TC, Check if flow is PEER before acquiring devcom lockdrivers/net/ethernet/mellanox/mlx5/core/en/tc_priv.h drivers/net/ethernet/mellanox/mlx5/core/en_tc.c+4 -10 replies
16/181pds_core: keep the health thread stopped during resetdrivers/net/ethernet/amd/pds_core/core.h drivers/net/ethernet/amd/pds_core/main.c+9 -20 replies
17/181pds_core: cancel pending PCI reset work on AER recoverydrivers/net/ethernet/amd/pds_core/main.c+4 -00 replies
18/181netfilter: ipset: switch ext_size to atomic64_tinclude/linux/netfilter/ipset/ip_set.h net/netfilter/ipset/ip_set_bitmap_gen.h net/netfilter/ipset/ip_set_core.c +2 more+9 -90 replies
19/181ipvs: avoid out-of-bounds write in ip_vs_nat_icmpinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_core.c net/netfilter/ipvs/ip_vs_xmit.c+36 -350 replies
20/181ipvs: return the csum validation for forward hookinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_proto_sctp.c+6 -150 replies
21/181watchdog: bd96801_wdt: Fix timeout for enabled WDGdrivers/watchdog/bd96801_wdt.c+2 -30 replies
22/181btrfs: fix memory leak in btrfs_do_encoded_write()fs/btrfs/inode.c+1 -00 replies
23/181bpf: Preserve pointer state for commuted arithmetickernel/bpf/verifier.c+8 -70 replies
24/181net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()net/smc/smc_llc.c+2 -10 replies
25/181net/sched: cls_route: fix fastmap use-after-free on filternet/sched/cls_route.c+26 -90 replies
26/181net: hisilicon: hix5hd2_gmac: remove redundant NAPI deletedrivers/net/ethernet/hisilicon/hix5hd2_gmac.c+0 -10 replies
27/181devlink: fix net namespace reference leak in reloadnet/devlink/dev.c+1 -00 replies
28/181net/mlx5: fw_tracer, return NULL on create errordrivers/net/ethernet/mellanox/mlx5/core/diag/fw_tracer.c+7 -90 replies
29/181counter: microchip-tcb-capture: Fix DT channel validationdrivers/counter/microchip-tcb-capture.c+2 -20 replies
30/181bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batchnet/ipv4/tcp_ipv4.c+5 -40 replies
31/181bpf: tcp: Make sure iter->batch always contains a full bucket snapshotnet/ipv4/tcp_ipv4.c+77 -320 replies
32/181bpf: tcp: Get rid of st_bucket_donenet/ipv4/tcp_ipv4.c+6 -80 replies
33/181bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch itemsnet/ipv4/tcp_ipv4.c+14 -100 replies
34/181bpf: tcp: Avoid socket skips and repeats during iterationnet/ipv4/tcp_ipv4.c+115 -320 replies
35/181bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()net/ipv4/tcp_ipv4.c+24 -190 replies
36/181vhost/vdpa: reject overflowing PA map page counts on 32-bitdrivers/vhost/vdpa.c+8 -10 replies
37/181vdpa/mlx5: Fix buffer length in create_direct_keys()drivers/vdpa/mlx5/core/mr.c+2 -10 replies
38/181tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()net/ipv4/tcp_input.c+1 -10 replies
39/181xsk: require at least 16 bytes of TX metadatanet/xdp/xdp_umem.c+2 -00 replies
40/181udp: fix potential use-after-free in tunnel segmentationnet/ipv4/udp_offload.c+3 -10 replies
41/181net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filternet/sched/sch_cake.c+0 -10 replies
42/181net/openvswitch: check Ethernet header length in key_extract()net/openvswitch/flow.c+7 -40 replies
43/181net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiersnet/sched/cls_api.c+16 -10 replies
44/181hwmon: (nzxt-smart2) Check return value of init_device() in probedrivers/hwmon/nzxt-smart2.c+5 -10 replies
45/181hwmon: (pmbus/lm25066) Fix PMBus coefficient calculationsdrivers/hwmon/pmbus/lm25066.c+3 -20 replies
46/181selftests/ftrace: refactor eprobes test to fix argument checkstools/testing/selftests/ftrace/test.d/dynevent/add_remove_eprobe.tc+5 -110 replies
47/181bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()drivers/net/ethernet/broadcom/bnxt/bnxt.c+7 -70 replies
48/181bnxt_en: Determine and store default RX ring in vnic structuredrivers/net/ethernet/broadcom/bnxt/bnxt.c drivers/net/ethernet/broadcom/bnxt/bnxt.h+23 -110 replies
49/181bnxt_en: Refresh VNIC default ring on queue restart if neededdrivers/net/ethernet/broadcom/bnxt/bnxt.c+5 -00 replies
50/181bnxt_en: Fix PTP PPS setting bugdrivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c+5 -20 replies
51/181sctp: fix addip_serial increment on ASCONF_ACK allocation failurenet/sctp/sm_make_chunk.c+1 -20 replies
52/181tcp: fix TFO max_qlen accounting across reuseport migrationnet/ipv4/inet_connection_sock.c+16 -40 replies
53/181net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload lengthnet/ncsi/ncsi-netlink.c+4 -00 replies
54/181net: prestera: validate firmware header lengthdrivers/net/ethernet/marvell/prestera/prestera_pci.c+3 -00 replies
55/181net: remove WARN_ON_ONCE() from sk_mc_loop()net/core/sock.c+0 -10 replies
56/181net/smc: fix TOCTOU race between smc_listen_out() and listener closenet/smc/af_smc.c+2 -10 replies
57/181net: thunderbolt: Tear down DMA paths before stopping the ringsdrivers/net/thunderbolt/main.c+15 -50 replies
58/181ata: pata_sl82c105: fix bridge revision use-after-freedrivers/ata/pata_sl82c105.c+3 -10 replies
59/181net/atm: fix slab-out-of-bounds read in vcc_setsockopt()net/atm/common.c+9 -50 replies
60/181sctp: clear control chunk transport if it is being removednet/sctp/associola.c+4 -00 replies
61/181tls: dont abort the connection on signal-interrupted sendsnet/tls/tls_sw.c+1 -10 replies
62/181hwmon: (corsair-psu) fix possible out-of-bounds access on missing string terminationdrivers/hwmon/corsair-psu.c+2 -20 replies
63/181hwmon: (ads7828) Fix external VREF regulator handlingdrivers/hwmon/ads7828.c+6 -50 replies
64/181hwmon: (ltc4282) Avoid overflow in maximum power calculationdrivers/hwmon/ltc4282.c+6 -60 replies
65/181hwmon: (ltc4282) Clamp negative current limitsdrivers/hwmon/ltc4282.c+5 -10 replies
66/181hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvoltdrivers/hwmon/ltc4282.c+1 -10 replies
67/181mm/vmscan: wake up flushers conditionally to avoid cgroup OOMmm/vmscan.c+22 -30 replies
68/181net: fec: do not release NULL pages when RX buffer allocation failsdrivers/net/ethernet/freescale/fec_main.c+9 -20 replies
69/181spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfersdrivers/spi/spi-fsl-dspi.c+7 -60 replies
70/181mtd: spinand: fix direct mapping creation sizesdrivers/mtd/nand/spi/core.c+7 -70 replies
71/181mtd: spinand: try a regular dirmap if creating a dirmap for continuous reading failsdrivers/mtd/nand/spi/core.c+35 -80 replies
72/181mtd: spinand: repeat reading in regular mode if continuous reading failsdrivers/mtd/nand/spi/core.c+21 -40 replies
73/181swapfile: call cond_resched() before locking si->lockmm/swapfile.c+1 -10 replies
74/181Input: evdev - sanitize event type index when fetching event masksdrivers/input/evdev.c+4 -10 replies
75/181ALSA: usb-audio: fix OOB write on Type II inbound URBssound/usb/endpoint.c+4 -20 replies
76/181usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()drivers/usb/atm/cxacru.c+2 -00 replies
77/181thunderbolt: icm: Preserve USB4 proxy data-valid bitdrivers/thunderbolt/icm.c+1 -10 replies
78/181usb: cdnsp: fix incorrect endian conversions for APB timeout registerdrivers/usb/cdns3/cdnsp-gadget.c+2 -20 replies
79/181usb: gadget: f_ncm: Use unsigned int for ndp_indexdrivers/usb/gadget/function/f_ncm.c+1 -10 replies
80/181net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()drivers/net/usb/ax88179_178a.c+3 -10 replies
81/181net: usb: ipheth: fix carrier_work UAF on disconnectdrivers/net/usb/ipheth.c+10 -10 replies
82/181vt: add permission check for KDSKBMETA ioctldrivers/tty/vt/vt_ioctl.c+2 -00 replies
83/181vt: stabilize tty reference in kbd_keycode with tty_port_tty_getdrivers/tty/vt/keyboard.c+4 -10 replies
84/181Input: evdev - fix information leak in evdev_pass_values()drivers/input/evdev.c+12 -100 replies
85/181ima: fix out-of-bounds read in xattr_verify()security/integrity/ima/ima_appraise.c+7 -20 replies
86/181ipvs: stop estimator after disabled calc phasenet/netfilter/ipvs/ip_vs_est.c+7 -30 replies
87/181ipvs: add totalconns for destinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_conn.c net/netfilter/ipvs/ip_vs_ctl.c +4 more+28 -380 replies
88/181ipvs: properly update the overload flag on dest editinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_conn.c net/netfilter/ipvs/ip_vs_ctl.c+72 -250 replies
89/181ipvs: clear IPv4 options after rebasing tunnel ICMP errorsnet/netfilter/ipvs/ip_vs_core.c+1 -00 replies
90/181packet: use consistent hard_header_len in non-ring send pathsinclude/linux/netdevice.h net/packet/af_packet.c+20 -120 replies
91/181packet: use consistent hard_header_len in TX_RING send pathnet/packet/af_packet.c+11 -80 replies
92/181net/packet: reset the MAC header on the packet-socket transmit pathnet/packet/af_packet.c+4 -30 replies
93/181packet: synchronize pressure clearing with ring reconfigurationnet/packet/af_packet.c+16 -40 replies
94/181net: fix skb length accounting after generic XDP frag adjustmentnet/core/dev.c+7 -30 replies
95/181net: openvswitch: reallocate update replies for mismatched IDsnet/openvswitch/datapath.c+26 -30 replies
96/181net/sched: reject overly deep qdisc hierarchiesinclude/net/sch_generic.h net/sched/sch_api.c+10 -00 replies
97/181net: octeontx2-pf: Fix UB in shift operationdrivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c+4 -20 replies
98/181net: remove CAP_SYS_RAWIO zero-padding in dev_validate_headerinclude/linux/netdevice.h+0 -50 replies
99/181mac802154: fix netdev use-after-free in beacon workernet/mac802154/scan.c+4 -00 replies
100/181netfilter: ebt_nflog: pin the NFLOG backendnet/bridge/netfilter/ebt_nflog.c+16 -10 replies
101/181net: bridge: mrp: fix uninitialised bytes on the wirenet/bridge/br_mrp.c+2 -40 replies
102/181KVM: s390: pci: Fix memory accounting for pinned/unpinned pagesarch/s390/kvm/pci.c arch/s390/kvm/pci.h+36 -140 replies
103/181KVM: s390: pci: Fix missing error codes and memory unaccountingarch/s390/kvm/pci.c+7 -20 replies
104/181KVM: s390: pci: Fix resource leak on IRQ registration failurearch/s390/kvm/pci.c+21 -80 replies
105/181KVM: s390: pci: Fix aisb calculationarch/s390/kvm/pci.c+1 -10 replies
106/181block: Reorder the request allocation code in blk_mq_submit_bio()block/blk-mq.c+3 -30 replies
107/181blk-mq: pop cached request if it is usableblock/blk-mq.c+9 -250 replies
108/181blk-mq: reinsert cached request to the listblock/blk-mq.c+1 -10 replies
109/181dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clkDocumentation/devicetree/bindings/crypto/qcom,inline-crypto-engine.yaml+15 -10 replies
110/181crypto: ccp - Add new SEV/SNP platform shutdown APIdrivers/crypto/ccp/sev-dev.c include/linux/psp-sev.h+12 -00 replies
111/181KVM: SVM: Add support to initialize SEV/SNP functionality in KVMarch/x86/kvm/svm/sev.c+12 -09 replies
112/181crypto: ccp - Fix checks for SNP_VLEK_LOAD input buffer lengthdrivers/crypto/ccp/sev-dev.c+1 -00 replies
113/181crypto: ccp - Abort doing SEV INIT if SNP INIT failsdrivers/crypto/ccp/sev-dev.c+2 -50 replies
114/181futex: Prevent robust futex exit race some morekernel/futex/core.c+58 -270 replies
115/181kunit/fortify: Replace "volatile" with OPTIMIZER_HIDE_VAR()lib/fortify_kunit.c+77 -620 replies
116/181kunit/fortify: Add back "volatile" for sizeof() constantslib/fortify_kunit.c+2 -20 replies
117/181pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPPdrivers/pinctrl/renesas/pinctrl-rzg2l.c+2 -20 replies
118/181selftests/bpf: Ensure UDP sockets are boundtools/testing/selftests/bpf/prog_tests/sockmap_basic.c+3 -30 replies
119/181selftests/bpf: Adapt sockmap update error handlingtools/testing/selftests/bpf/prog_tests/sockmap_listen.c+11 -100 replies
120/181ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthopsnet/ipv4/fib_semantics.c+49 -180 replies
121/181ipv4: fix use-after-free in fib_nhc_update_mtu()include/net/route.h net/ipv4/fib_semantics.c net/ipv4/route.c+42 -230 replies
122/181mei: pull kvfree out of spinlockdrivers/misc/mei/client.c+15 -100 replies
123/181nvmem: layouts: Add fixed-layout driverMAINTAINERS drivers/nvmem/core.c drivers/nvmem/internals.h +4 more+74 -330 replies
124/181serial: qcom-geni: fix TX DMA buffer flushdrivers/tty/serial/qcom_geni_serial.c+22 -210 replies
125/181serial: 8250_dma: Clear stale RX state on shutdowndrivers/tty/serial/8250/8250_dma.c+7 -50 replies
126/181staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()drivers/staging/rtl8723bs/core/rtw_ieee80211.c+3 -00 replies
127/181staging: rtl8723bs: fix OOB read in WMM_param_handler()drivers/staging/rtl8723bs/core/rtw_wlan_util.c+3 -00 replies
128/181staging: rtl8723bs: fix missing shared-key auth challenge length checkdrivers/staging/rtl8723bs/core/rtw_mlme_ext.c+1 -10 replies
129/181staging: rtl8723bs: validate monitor transmit frame lengthsdrivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c+4 -00 replies
130/181misc: fastrpc: fix channel ctx ref leak when session alloc failsdrivers/misc/fastrpc.c+1 -10 replies
131/181misc: fastrpc: Remove buffer from list prior to unmap operationdrivers/misc/fastrpc.c+10 -40 replies
132/181misc: fastrpc: take fl->lock when moving mmaps on interrupted invokedrivers/misc/fastrpc.c+2 -00 replies
133/181misc: fastrpc: fix memory leak in fastrpc_channel_ctx_freedrivers/misc/fastrpc.c+1 -00 replies
134/181ring-buffer: Fix crash passing ERR_PTR to kthread_stop()kernel/trace/ring_buffer.c+1 -10 replies
135/181ALSA: usb: Fix UAF at delayed release of MIDI2 EPssound/usb/midi2.c+9 -00 replies
136/181ALSA: usx2y: bound the hwdep mmap fault offsetsound/usb/usx2y/usX2Yhwdep.c sound/usb/usx2y/usx2yhwdeppcm.c+4 -00 replies
137/181tracing: Fix race between update_event_fields and, event_define_fieldskernel/trace/trace_events.c+2 -00 replies
138/181fbdev: bitblit: bound-check glyph index in bit_cursor()drivers/video/fbdev/core/bitblit.c+7 -20 replies
139/181ring-buffer: Prevent subbuf order change when resizing is disabledkernel/trace/ring_buffer.c+1 -10 replies
140/181mm/huge_memory: fix huge_zero_pfn racemm/huge_memory.c+29 -140 replies
141/181net: smc: fix splice entry lifetime imbalance in smc_rx_splicenet/smc/smc_rx.c+10 -90 replies
142/181ipv6: prevent in6_dev_get() from resurrecting inet6_devinclude/net/addrconf.h+2 -20 replies
143/181netfilter: bridge: release template ct on non-IP pathnet/bridge/netfilter/nf_conntrack_bridge.c+1 -00 replies
144/181netfilter: nf_conntrack: defer invalid log until after unlocknet/netfilter/nf_conntrack_proto.c net/netfilter/nf_conntrack_proto_sctp.c net/netfilter/nf_conntrack_proto_tcp.c+102 -480 replies
145/181net: atlantic: free stranded TX buffers on ring deinitdrivers/net/ethernet/aquantia/atlantic/aq_ring.c drivers/net/ethernet/aquantia/atlantic/aq_ring.h drivers/net/ethernet/aquantia/atlantic/aq_vec.c+31 -10 replies
146/181net: atlantic: free RX pages of consumed but not refilled buffersdrivers/net/ethernet/aquantia/atlantic/aq_ring.c+18 -40 replies
147/181net/sched: act_ct: fix sk_buff leak when the header checks reject a packetnet/sched/act_ct.c+25 -40 replies
148/181net/sched: act_gact, act_police: range check the fallback control actioninclude/net/act_api.h net/sched/act_gact.c net/sched/act_police.c+30 -00 replies
149/181ovl: dont warn when the mount is completed from another user namespacefs/overlayfs/super.c+2 -10 replies
150/181binfmt_misc: dont warn when the mount is completed from another user namespacefs/binfmt_misc.c+2 -10 replies
151/181Revert "drm/amdgpu: fix aperture mapping leak"drivers/gpu/drm/amd/amdgpu/amdgpu_device.c drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c+21 -160 replies
152/181xdp: reject clones that overrun skb_shared_info tailroomnet/core/xdp.c+1 -10 replies
153/181vxlan: do not arm the ageing timer on a device that is downdrivers/net/vxlan/vxlan_core.c+1 -10 replies
154/181vsock/virtio: read virtqueues under worker locksnet/vmw_vsock/virtio_transport.c+6 -50 replies
155/181vsock/virtio: avoid refilling the RX queue after teardownnet/vmw_vsock/virtio_transport.c+2 -10 replies
156/181veth: fix skb length accounting after XDP frag adjustmentdrivers/net/veth.c+14 -80 replies
157/181vhost: reset the vring metadata cache on vring reconfigurationdrivers/vhost/vhost.c+8 -00 replies
158/181tls: dont leave a full plaintext sk_msg ring unpushednet/tls/tls_sw.c+14 -00 replies
159/181tipc: read le->link under the node lock in tipc_node_link_down()net/tipc/node.c+10 -50 replies
160/181smb: client: Fix use-after-free in cifs_try_adding_channels()fs/smb/client/sess.c+1 -10 replies
161/181KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow pagearch/x86/kvm/mmu/mmu.c+3 -00 replies
162/181eventfs: Fix use-after-free in eventfs_remove_rec()fs/tracefs/event_inode.c+2 -20 replies
163/181eventfs: Use children field for rcu head and add memory barriersfs/tracefs/event_inode.c fs/tracefs/internal.h+26 -22 replies
164/181Revert "thermal/drivers/hwmon: Cleanup coding style a bit"drivers/thermal/thermal_hwmon.c+2 -10 replies
165/181ptp: ocp: Fix board ID over-readdrivers/ptp/ptp_ocp.c+3 -10 replies
166/181ring-buffer: Use current_context for safe per-CPU buffer swapkernel/trace/ring_buffer.c+4 -42 replies
167/181ipv6: fix Route Information option length validationnet/ipv6/route.c+4 -40 replies
168/181ip6_tunnel: clear skb2->cb[] in ip6ip6_err()net/ipv6/ip6_tunnel.c+3 -00 replies
169/181fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()fs/crypto/policy.c+1 -10 replies
170/181sched/psi: Shut down rtpoll_timer in psi_cgroup_free()kernel/sched/psi.c+6 -00 replies
171/181ima: Instantiate file_truncate and path_truncate hookssecurity/integrity/ima/ima_main.c+39 -00 replies
172/181fsverity: Fix bpf_get_fsverity_digest() dynptr assumptionsfs/verity/measure.c+6 -40 replies
173/181fsverity: Fix silent truncation in bpf_get_fsverity_digest()fs/verity/measure.c+5 -40 replies
174/181bpf, sockmap: Fix sk_redir use-after-free in send verdictnet/ipv4/tcp_bpf.c+2 -00 replies
175/181scsi: scsi_debug: Negate wrapped memcmp() resultdrivers/scsi/scsi_debug.c+2 -20 replies
176/181sctp: keep chunk->transport in step with the list it is queued onnet/sctp/outqueue.c+1 -00 replies
177/181sctp: fix use-after-free of cached ASCONF chunknet/sctp/associola.c net/sctp/sm_statefuns.c+8 -20 replies
178/181sctp: clear new_transport when removing a peernet/sctp/associola.c+3 -00 replies
179/181thunderbolt: Bound the DROM dual link port number before indexing sw->portsdrivers/thunderbolt/eeprom.c+8 -10 replies
180/181thunderbolt: Fix bandwidth group reservation indexingdrivers/thunderbolt/tb.c+1 -10 replies
181/181bpf: tcp: fix double sock release on batch reallocnet/ipv4/tcp_ipv4.c+4 -10 replies

Reviews trailers per patch

109 of 181 patches have a Reviewed-by or Acked-by.

PatchDouglas AndersonSimon HormanMika WesterbergNikolay AleksandrovJay VosburghCosmin RatiuJacob KellerKuniyuki IwashimaJakub SitnickiFilipe MananaDavid SterbaDaniel WadeShung-Hsi YuHidayath KhanSidraya JayagondDust LiVictor NogueiraSantosh KalluriJiri PirkoAntoine TenartShay DroriJoshua CroftsWayne LinDan WheelerStanislav FomichevViktor JägersküpperHolger DenglerDan AloniAvi FishmanMichael S. TsirkinKalesh APPavan ChebbiXin LongEric DumazetElad NachmanDragos TatuleaMahanta JambigiBreno LeitaoNiklas CasselNuno SáWei XuChris LiGreg Kroah-HartmanEelco ChaudronIlya MaximetsArnd BergmannJulian AnastasovWillem de BruijnMohsin BashirLorenzo BianconiJamal Hadi SalimRatheesh KannothSunil GouthamMiquel RaynalChristian BorntraegerMatthew RosatoNiklas SchnelleDamien Le MoalChristoph HellwigChaitanya KulkarniKuldeep SinghKrzysztof KozlowskiDionna GlazeTom LendackyNathan ChancellorBartosz GolaszewskiGeert UytterhoevenIdo SchimmelDmitry BaryshkovEkansh GuptaVincent DonnefortMasami Hiramatsu (Google)David Hildenbrand (Arm)Florian WestphalSukhdeep SinghMina AlmasryMenachem AdinJan KaraLijo LazarHawking ZhangBobby EshlemanTung NguyenPraveen TalariKumar Kartikeya DwivediSong LiuJohn FastabendEmil TsalapatisJohn GarryJordan RifeLukasz LubaVadim FedorenkoJohannes WeinerMatt FlemingSuren BaghdasaryanFrederick LawlerPavel Machek (CIP)Peter SchneiderFlorian FainelliDominique MartinetFrancesco DolciniRon EconomosBrett A C SheffieldMark BrownShuah KhanHarshit MogalapalliVasant HegdeJoerg Roedel
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
1/181
2/181R-b R-b
3/181R-b T-b
4/181T-b
5/181R-b
6/181T-b
7/181
8/181R-b
9/181
10/181R-b
11/181R-b
12/181A-b
13/181R-b A-b
14/181
15/181R-b
16/181R-b
17/181R-b
18/181
19/181
20/181
21/181
22/181R-b R-b
23/181T-b A-b
24/181R-b R-b R-b
25/181T-b T-b
26/181
27/181R-b R-b
28/181R-b
29/181R-b
30/181R-b A-b
31/181R-b A-b
32/181R-b A-b
33/181R-b A-b
34/181A-b
35/181R-b
36/181A-b
37/181T-b R-b
38/181
39/181
40/181R-b
41/181
42/181R-b R-b
43/181T-b
44/181
45/181
46/181
47/181R-b R-b
48/181R-b R-b
49/181R-b R-b
50/181R-b
51/181A-b
52/181R-b R-b
53/181
54/181A-b
55/181
56/181R-b R-b R-b
57/181A-b
58/181R-b
59/181
60/181
61/181
62/181
63/181
64/181R-b
65/181R-b
66/181R-b
67/181R-b T-b
68/181
69/181
70/181
71/181
72/181
73/181
74/181A-b
75/181
76/181
77/181
78/181A-b
79/181
80/181
81/181
82/181
83/181
84/181
85/181
86/181A-b
87/181
88/181
89/181A-b
90/181R-b
91/181R-b
92/181R-b
93/181
94/181R-b A-b
95/181R-b
96/181R-b A-b
97/181R-b R-b
98/181R-b
99/181R-b
100/181
101/181A-b
102/181R-b R-b T-b
103/181R-b R-b T-b
104/181R-b R-b T-b
105/181R-b
106/181R-b R-b R-b
107/181
108/181R-b
109/181R-b R-b
110/181R-b R-b
111/181R-b R-b A-b
112/181
113/181
114/181
115/181
116/181R-b
117/181R-b R-b T-b
118/181R-b R-b
119/181R-b R-b
120/181R-b
121/181R-b
122/181R-b
123/181R-b
124/181R-b
125/181
126/181
127/181
128/181
129/181
130/181R-b
131/181R-b
132/181R-b
133/181R-b
134/181R-b A-b
135/181
136/181
137/181
138/181
139/181
140/181A-b
141/181R-b R-b
142/181R-b
143/181
144/181R-b
145/181R-b A-b
146/181R-b A-b
147/181A-b
148/181T-b A-b
149/181R-b
150/181R-b
151/181R-b R-b
152/181
153/181R-b
154/181R-b
155/181R-b
156/181A-b
157/181
158/181
159/181R-b
160/181
161/181
162/181A-b
163/181R-b
164/181R-b
165/181R-b
166/181
167/181R-b
168/181R-b
169/181
170/181A-b T-b A-b
171/181T-b
172/181A-b A-b
173/181A-b
174/181R-b R-b
175/181R-b
176/181A-b
177/181A-b
178/181A-b
179/181
180/181
181/181R-b R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 107 reviewers.

Read the v1 thread

Cover letter [PATCH 6.12 000/181] 6.12.104-rc1 review

This is the start of the stable review cycle for the 6.12.104 release. There are 181 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.104-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.12.104-rc1

Xiang Mei (Microsoft) <[email protected]>
bpf: tcp: fix double sock release on batch realloc

Xu Rao <[email protected]>
thunderbolt: Fix bandwidth group reservation indexing

Bryam Vargas <[email protected]>

    thunderbolt: Bound the DROM dual link port number before indexing sw->ports

Qing Ming <[email protected]>
sctp: clear new_transport when removing a peer

Yuxiang Yang <[email protected]>
sctp: fix use-after-free of cached ASCONF chunk

Baul Lee <[email protected]>

    sctp: keep chunk->transport in step with the list it is queued on

Xu Rao <[email protected]>
scsi: scsi_debug: Negate wrapped memcmp() result

Chengfeng Ye <[email protected]>
bpf, sockmap: Fix sk_redir use-after-free in send verdict

Eric Biggers <[email protected]>
fsverity: Fix silent truncation in bpf_get_fsverity_digest()

Eric Biggers <[email protected]>
fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions

Mimi Zohar <[email protected]>
ima: Instantiate file_truncate and path_truncate hooks

Tejun Heo <[email protected]>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

Zhan Xusheng <[email protected]>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()

Zhiling Zou <[email protected]>

    ip6_tunnel: clear skb2->cb[] in ip6ip6_err()

Yuejie Shi <[email protected]>
ipv6: fix Route Information option length validation

Tengda Wu <[email protected]>
ring-buffer: Use current_context for safe per-CPU buffer swap

Ahmad Byagowi <[email protected]>
ptp: ocp: Fix board ID over-read

Rafael J. Wysocki <[email protected]>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

Steven Rostedt <[email protected]>
eventfs: Use children field for rcu head and add memory barriers

Shuangpeng Bai <[email protected]>
eventfs: Fix use-after-free in eventfs_remove_rec()

Sean Christopherson <[email protected]>
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

Shuangpeng Bai <[email protected]>
smb: client: Fix use-after-free in cifs_try_adding_channels()

Jun Yang <[email protected]>

    tipc: read le->link under the node lock in tipc_node_link_down()

chanyoung <[email protected]>
tls: don't leave a full plaintext sk_msg ring unpushed

Jun Yang <[email protected]>
vhost: reset the vring metadata cache on vring reconfiguration

Sun Jian <[email protected]>
veth: fix skb length accounting after XDP frag adjustment

Weiming Shi <[email protected]>
vsock/virtio: avoid refilling the RX queue after teardown

Weiming Shi <[email protected]>
vsock/virtio: read virtqueues under worker locks

Baul Lee <[email protected]>
vxlan: do not arm the ageing timer on a device that is down

Zhiling Zou <[email protected]>
xdp: reject clones that overrun skb_shared_info tailroom

Asad Kamal <[email protected]>
Revert "drm/amdgpu: fix aperture mapping leak"

Christian Brauner <[email protected]>
binfmt_misc: don't warn when the mount is completed from another user namespace

Christian Brauner <[email protected]>
ovl: don't warn when the mount is completed from another user namespace

Hyunjung Ko <[email protected]>
net/sched: act_gact, act_police: range check the fallback control action

Hyunjung Ko <[email protected]>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

Yangyu Chen <[email protected]>
net: atlantic: free RX pages of consumed but not refilled buffers

Yangyu Chen <[email protected]>
net: atlantic: free stranded TX buffers on ring deinit

Zihan Xi <[email protected]>
netfilter: nf_conntrack: defer invalid log until after unlock

Zhiling Zou <[email protected]>
netfilter: bridge: release template ct on non-IP path

Kyle Zeng <[email protected]>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev

Daming Li <[email protected]>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice

Lorenzo Stoakes (ARM) <[email protected]>
mm/huge_memory: fix huge_zero_pfn race

Vincent Donnefort <[email protected]>
ring-buffer: Prevent subbuf order change when resizing is disabled

Rik van Riel <[email protected]>
fbdev: bitblit: bound-check glyph index in bit_cursor()

Michael Wu <[email protected]>
tracing: Fix race between update_event_fields and, event_define_fields

Baul Lee <[email protected]>
ALSA: usx2y: bound the hwdep mmap fault offset

Takashi Iwai <[email protected]>
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

Hui Su <[email protected]>
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()

Eddie Lin <[email protected]>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free

Junrui Luo <[email protected]>

    misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke

Ekansh Gupta <[email protected]>
misc: fastrpc: Remove buffer from list prior to unmap operation

Anandu Krishnan E <[email protected]>
misc: fastrpc: fix channel ctx ref leak when session alloc fails

Mariano Baragiola <[email protected]>
staging: rtl8723bs: validate monitor transmit frame lengths

Panagiotis Petrakopoulos <[email protected]>
staging: rtl8723bs: fix missing shared-key auth challenge length check

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in WMM_param_handler()

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()

Cunhao Lu <[email protected]>
serial: 8250_dma: Clear stale RX state on shutdown

Jan Sebastian Götte <[email protected]>
serial: qcom-geni: fix TX DMA buffer flush

Mathieu Dubois-Briand <[email protected]>
nvmem: layouts: Add fixed-layout driver

Alexander Usyskin <[email protected]>
mei: pull kvfree out of spinlock

Chengfeng Ye <[email protected]>
ipv4: fix use-after-free in fib_nhc_update_mtu()

Zihan Xi <[email protected]>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops

Michal Luczaj <[email protected]>
selftests/bpf: Adapt sockmap update error handling

Michal Luczaj <[email protected]>
selftests/bpf: Ensure UDP sockets are bound

Claudiu Beznea <[email protected]>
pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP

Kees Cook <[email protected]>
kunit/fortify: Add back "volatile" for sizeof() constants

Kees Cook <[email protected]>
kunit/fortify: Replace "volatile" with OPTIMIZER_HIDE_VAR()

Keno Fischer <[email protected]>
futex: Prevent robust futex exit race some more

Ashish Kalra <[email protected]>
crypto: ccp - Abort doing SEV INIT if SNP INIT fails

Michael Roth <[email protected]>
crypto: ccp - Fix checks for SNP_VLEK_LOAD input buffer length

Ashish Kalra <[email protected]>
KVM: SVM: Add support to initialize SEV/SNP functionality in KVM

Ashish Kalra <[email protected]>
crypto: ccp - Add new SEV/SNP platform shutdown API

Harshal Dev <[email protected]>
dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk

Keith Busch <[email protected]>
blk-mq: reinsert cached request to the list

Keith Busch <[email protected]>
blk-mq: pop cached request if it is usable

Bart Van Assche <[email protected]>
block: Reorder the request allocation code in blk_mq_submit_bio()

Matthew Rosato <[email protected]>
KVM: s390: pci: Fix aisb calculation

Farhan Ali <[email protected]>
KVM: s390: pci: Fix resource leak on IRQ registration failure

Farhan Ali <[email protected]>
KVM: s390: pci: Fix missing error codes and memory unaccounting

Farhan Ali <[email protected]>
KVM: s390: pci: Fix memory accounting for pinned/unpinned pages

Baul Lee <[email protected]>
net: bridge: mrp: fix uninitialised bytes on the wire

Chengfeng Ye <[email protected]>
netfilter: ebt_nflog: pin the NFLOG backend

Zihan Xi <[email protected]>
mac802154: fix netdev use-after-free in beacon worker

Qihang Tang <[email protected]>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header

Sergey V. Frolov <[email protected]>
net: octeontx2-pf: Fix UB in shift operation

Zijie Huang <[email protected]>
net/sched: reject overly deep qdisc hierarchies

Zhiling Zou <[email protected]>
net: openvswitch: reallocate update replies for mismatched IDs

Sun Jian <[email protected]>
net: fix skb length accounting after generic XDP frag adjustment

Zihan Xi <[email protected]>
packet: synchronize pressure clearing with ring reconfiguration

Doruk Tan Ozturk <[email protected]>
net/packet: reset the MAC header on the packet-socket transmit path

Qihang Tang <[email protected]>
packet: use consistent hard_header_len in TX_RING send path

Qihang Tang <[email protected]>
packet: use consistent hard_header_len in non-ring send paths

Kyle Zeng <[email protected]>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors

Julian Anastasov <[email protected]>
ipvs: properly update the overload flag on dest edit

Julian Anastasov <[email protected]>
ipvs: add totalconns for dest

Zhiling Zou <[email protected]>
ipvs: stop estimator after disabled calc phase

Lincoln Wallace <[email protected]>
ima: fix out-of-bounds read in xattr_verify()

Dmitry Torokhov <[email protected]>
Input: evdev - fix information leak in evdev_pass_values()

Joshua Rogers <[email protected]>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

Joshua Rogers <[email protected]>
vt: add permission check for KDSKBMETA ioctl

Doruk Tan Ozturk <[email protected]>
net: usb: ipheth: fix carrier_work UAF on disconnect

Yi Cong <[email protected]>

    net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()

Sonali Pradhan <[email protected]>
usb: gadget: f_ncm: Use unsigned int for ndp_index

Pawel Laszczak <[email protected]>
usb: cdnsp: fix incorrect endian conversions for APB timeout register

Xu Rao <[email protected]>
thunderbolt: icm: Preserve USB4 proxy data-valid bit

Aleksandr Nogikh <[email protected]>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()

Baul Lee <[email protected]>
ALSA: usb-audio: fix OOB write on Type II inbound URBs

Dmitry Torokhov <[email protected]>
Input: evdev - sanitize event type index when fetching event masks

Guillaume Morin <[email protected]>

    swapfile: call cond_resched() before locking si->lock

Mikhail Kshevetskiy <[email protected]>
mtd: spinand: repeat reading in regular mode if continuous reading fails

Mikhail Kshevetskiy <[email protected]>
mtd: spinand: try a regular dirmap if creating a dirmap for continuous reading fails

Mikhail Kshevetskiy <[email protected]>
mtd: spinand: fix direct mapping creation sizes

Larisa Grigore <[email protected]>
spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers

Mehmet Fide <[email protected]>
net: fec: do not release NULL pages when RX buffer allocation fails

Zeng Jingxiang <[email protected]>
mm/vmscan: wake up flushers conditionally to avoid cgroup OOM

Guenter Roeck <[email protected]>
hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt

Guenter Roeck <[email protected]>
hwmon: (ltc4282) Clamp negative current limits

Guenter Roeck <[email protected]>
hwmon: (ltc4282) Avoid overflow in maximum power calculation

Qingshuang Fu <[email protected]>
hwmon: (ads7828) Fix external VREF regulator handling

Wilken Gottwalt <[email protected]>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination

Maximilian Immanuel Brandtner <[email protected]>
tls: don't abort the connection on signal-interrupted sends

Xin Long <[email protected]>
sctp: clear control chunk transport if it is being removed

Eric Dumazet <[email protected]>
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()

Hongyan Xu <[email protected]>
ata: pata_sl82c105: fix bridge revision use-after-free

Fan XinRan <[email protected]>
net: thunderbolt: Tear down DMA paths before stopping the rings

Sidraya Jayagond <[email protected]>
net/smc: fix TOCTOU race between smc_listen_out() and listener close

Eric Dumazet <[email protected]>
net: remove WARN_ON_ONCE() from sk_mc_loop()

Pengpeng Hou <[email protected]>
net: prestera: validate firmware header length

Henry Martin <[email protected]>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length

Jiayuan Chen <[email protected]>
tcp: fix TFO max_qlen accounting across reuseport migration

Qing Luo <[email protected]>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure

Keegan Freyhof <[email protected]>
bnxt_en: Fix PTP PPS setting bug

Shravya KN <[email protected]>
bnxt_en: Refresh VNIC default ring on queue restart if needed

Shravya KN <[email protected]>
bnxt_en: Determine and store default RX ring in vnic structure

Shravya KN <[email protected]>
bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()

Martin Kaiser <[email protected]>
selftests/ftrace: refactor eprobes test to fix argument checks

Guenter Roeck <[email protected]>
hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations

Qingshuang Fu <[email protected]>
hwmon: (nzxt-smart2) Check return value of init_device() in probe

Jamal Hadi Salim <[email protected]>
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers

Cen Zhang (Microsoft) <[email protected]>
net/openvswitch: check Ethernet header length in key_extract()

Toke Høiland-Jørgensen <[email protected]>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter

Xuanqiang Luo <[email protected]>
udp: fix potential use-after-free in tunnel segmentation

Stanislav Fomichev <[email protected]>
xsk: require at least 16 bytes of TX metadata

Nathan Gao <[email protected]>
tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()

Christian Borntraeger <[email protected]>
vdpa/mlx5: Fix buffer length in create_direct_keys()

Yousef Alhouseen <[email protected]>
vhost/vdpa: reject overflowing PA map page counts on 32-bit

Jose Fernandez (Anthropic) <[email protected]>
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()

Jordan Rife <[email protected]>
bpf: tcp: Avoid socket skips and repeats during iteration

Jordan Rife <[email protected]>
bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items

Jordan Rife <[email protected]>
bpf: tcp: Get rid of st_bucket_done

Jordan Rife <[email protected]>

    bpf: tcp: Make sure iter->batch always contains a full bucket snapshot

Jordan Rife <[email protected]>
bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch

Babanpreet Singh <[email protected]>
counter: microchip-tcb-capture: Fix DT channel validation

Michael Guralnik <[email protected]>
net/mlx5: fw_tracer, return NULL on create error

Or Har-Toov <[email protected]>
devlink: fix net namespace reference leak in reload

Jiawen Liu <[email protected]>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete

Jamal Hadi Salim <[email protected]>
net/sched: cls_route: fix fastmap use-after-free on filter

Mahanta Jambigi <[email protected]>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

Yiyang Chen <[email protected]>
bpf: Preserve pointer state for commuted arithmetic

Dmitry Antipov <[email protected]>
btrfs: fix memory leak in btrfs_do_encoded_write()

Matti Vaittinen <[email protected]>
watchdog: bd96801_wdt: Fix timeout for enabled WDG

Julian Anastasov <[email protected]>
ipvs: return the csum validation for forward hook

Julian Anastasov <[email protected]>
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp

Jozsef Kadlecsik <[email protected]>
netfilter: ipset: switch ext_size to atomic64_t

Nikhil P. Rao <[email protected]>
pds_core: cancel pending PCI reset work on AER recovery

Nikhil P. Rao <[email protected]>
pds_core: keep the health thread stopped during reset

Shay Drory <[email protected]>
net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

Satish Kharat <[email protected]>
enic: fix tx_hang_reset use-after-free on device removal

Xiang Mei (Microsoft) <[email protected]>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor

Fan Ye <[email protected]>
Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"

Jijie Shao <[email protected]>
net: hns3: fix speed configuration residue after driver reload

Pengpeng Hou <[email protected]>
drm/bridge: ps8640: propagate AUX transfer register errors

Rosen Penev <[email protected]>
ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt

Yuho Choi <[email protected]>
ARM: npcm: Fix OF node refcount leaks in SMP setup

Daniel Drake <[email protected]>
arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer

Anna Schumaker <[email protected]>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

Harald Freudenberger <[email protected]>
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()

Ray Wu <[email protected]>
drm/amd/display: Check for tg ops in dce110_set_avmute

Ray Wu <[email protected]>
drm/amd/display: Add AV mute wait frames to dce110_set_avmute

Michal Luczaj <[email protected]>
selftests/bpf: Fail unbound UDP on sockmap update

Al Viro <[email protected]>
mount: honour SB_NOUSER in the new mount API

-------------

Diffstat:

 .../bindings/crypto/qcom,inline-crypto-engine.yaml |  16 +-
 MAINTAINERS                                        |   5 +
 Makefile                                           |   4 +-
 arch/arm/boot/dts/broadcom/bcm-ns.dtsi             |   2 +-
 arch/arm/mach-npcm/platsmp.c                       |   2 +
 arch/arm64/boot/dts/broadcom/bcm2712.dtsi          |   2 -
 arch/s390/kvm/pci.c                                |  86 ++++--
 arch/s390/kvm/pci.h                                |   2 +
 arch/x86/kvm/mmu/mmu.c                             |   3 +
 arch/x86/kvm/svm/sev.c                             |  12 +
 block/blk-mq.c                                     |  38 +--
 drivers/ata/pata_sl82c105.c                        |   4 +-
 drivers/counter/microchip-tcb-capture.c            |   4 +-
 drivers/crypto/ccp/sev-dev.c                       |  17 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  35 +--
 .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c  |  24 +-
 drivers/gpu/drm/bridge/parade-ps8640.c             |  27 +-
 drivers/hwmon/ads7828.c                            |  11 +-
 drivers/hwmon/corsair-psu.c                        |   4 +-
 drivers/hwmon/ltc4282.c                            |  20 +-
 drivers/hwmon/nzxt-smart2.c                        |   6 +-
 drivers/hwmon/pmbus/lm25066.c                      |   5 +-
 drivers/input/evdev.c                              |  27 +-
 drivers/misc/fastrpc.c                             |  19 +-
 drivers/misc/mei/client.c                          |  25 +-
 drivers/mtd/nand/spi/core.c                        |  74 ++++--
 drivers/net/bonding/bond_alb.c                     |  10 +-
 drivers/net/ethernet/amd/pds_core/core.h           |   1 +
 drivers/net/ethernet/amd/pds_core/main.c           |  14 +-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.c   |  51 +++-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.h   |   1 +
 drivers/net/ethernet/aquantia/atlantic/aq_vec.c    |   2 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  50 ++--
 drivers/net/ethernet/broadcom/bnxt/bnxt.h          |   1 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c      |   7 +-
 drivers/net/ethernet/cisco/enic/enic_main.c        |   5 +-
 drivers/net/ethernet/freescale/fec_main.c          |  11 +-
 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c      |   1 -
 .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c    |   6 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c   |   6 +-
 .../net/ethernet/marvell/prestera/prestera_pci.c   |   3 +
 .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c   |  16 +-
 .../net/ethernet/mellanox/mlx5/core/en/tc_priv.h   |   1 +
 drivers/net/ethernet/mellanox/mlx5/core/en_tc.c    |   4 +-
 drivers/net/thunderbolt/main.c                     |  33 ++-
 drivers/net/usb/ax88179_178a.c                     |   4 +-
 drivers/net/usb/ipheth.c                           |  11 +-
 drivers/net/veth.c                                 |  22 +-
 drivers/net/vxlan/vxlan_core.c                     |   2 +-
 drivers/nvmem/core.c                               |  24 +-
 drivers/nvmem/internals.h                          |   2 +
 drivers/nvmem/layouts.c                            |  11 -
 drivers/nvmem/layouts/Makefile                     |   1 +
 drivers/nvmem/layouts/fixed-layout.c               |  58 ++++
 drivers/pinctrl/renesas/pinctrl-rzg2l.c            |   4 +-
 drivers/ptp/ptp_ocp.c                              |   4 +-
 drivers/s390/crypto/zcrypt_ccamisc.c               |  20 +-
 drivers/scsi/scsi_debug.c                          |   4 +-
 drivers/spi/spi-fsl-dspi.c                         |  13 +-
 drivers/staging/rtl8723bs/core/rtw_ieee80211.c     |   3 +
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |   2 +-
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c     |   3 +
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |   4 +
 drivers/thermal/thermal_hwmon.c                    |   3 +-
 drivers/thunderbolt/eeprom.c                       |   9 +-
 drivers/thunderbolt/icm.c                          |   2 +-
 drivers/thunderbolt/tb.c                           |   2 +-
 drivers/tty/serial/8250/8250_dma.c                 |  12 +-
 drivers/tty/serial/qcom_geni_serial.c              |  43 +--
 drivers/tty/vt/keyboard.c                          |   5 +-
 drivers/tty/vt/vt_ioctl.c                          |   2 +
 drivers/usb/atm/cxacru.c                           |   2 +
 drivers/usb/cdns3/cdnsp-gadget.c                   |   4 +-
 drivers/usb/gadget/function/f_ncm.c                |   2 +-
 drivers/vdpa/mlx5/core/mr.c                        |   3 +-
 drivers/vhost/vdpa.c                               |   9 +-
 drivers/vhost/vhost.c                              |   8 +
 drivers/video/fbdev/core/bitblit.c                 |   9 +-
 drivers/watchdog/bd96801_wdt.c                     |   5 +-
 fs/binfmt_misc.c                                   |   3 +-
 fs/btrfs/inode.c                                   |   1 +
 fs/crypto/policy.c                                 |   2 +-
 fs/namespace.c                                     |   5 +
 fs/nfs/nfs4proc.c                                  |   5 +
 fs/overlayfs/super.c                               |   3 +-
 fs/smb/client/sess.c                               |   2 +-
 fs/tracefs/event_inode.c                           |  28 +-
 fs/tracefs/internal.h                              |   4 +-
 fs/verity/measure.c                                |  15 +-
 include/linux/netdevice.h                          |  11 +-
 include/linux/netfilter/ipset/ip_set.h             |   2 +-
 include/linux/nvmem-provider.h                     |   6 +
 include/linux/psp-sev.h                            |   3 +
 include/net/act_api.h                              |  19 ++
 include/net/addrconf.h                             |   4 +-
 include/net/ip_vs.h                                |  41 +--
 include/net/route.h                                |   2 +
 include/net/sch_generic.h                          |   1 +
 kernel/bpf/verifier.c                              |  15 +-
 kernel/futex/core.c                                |  85 ++++--
 kernel/sched/psi.c                                 |   6 +
 kernel/trace/ring_buffer.c                         |  12 +-
 kernel/trace/trace_events.c                        |   2 +
 lib/fortify_kunit.c                                | 139 +++++-----
 mm/huge_memory.c                                   |  49 ++--
 mm/swapfile.c                                      |   2 +-
 mm/vmscan.c                                        |  25 +-
 net/atm/common.c                                   |  14 +-
 net/bridge/br_mrp.c                                |   6 +-
 net/bridge/netfilter/ebt_nflog.c                   |  17 +-
 net/bridge/netfilter/nf_conntrack_bridge.c         |   1 +
 net/core/dev.c                                     |  10 +-
 net/core/sock.c                                    |   1 -
 net/core/xdp.c                                     |   2 +-
 net/devlink/dev.c                                  |   1 +
 net/ipv4/fib_semantics.c                           | 101 ++++---
 net/ipv4/inet_connection_sock.c                    |  20 +-
 net/ipv4/route.c                                   |  29 ++
 net/ipv4/tcp_bpf.c                                 |   2 +
 net/ipv4/tcp_input.c                               |   2 +-
 net/ipv4/tcp_ipv4.c                                | 293 +++++++++++++++------
 net/ipv4/udp_offload.c                             |   4 +-
 net/ipv6/ip6_tunnel.c                              |   3 +
 net/ipv6/route.c                                   |   8 +-
 net/mac802154/scan.c                               |   4 +
 net/ncsi/ncsi-netlink.c                            |   4 +
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   4 +-
 net/netfilter/ipset/ip_set_core.c                  |   6 +-
 net/netfilter/ipset/ip_set_hash_gen.h              |   2 +-
 net/netfilter/ipset/ip_set_list_set.c              |   4 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |  41 +--
 net/netfilter/ipvs/ip_vs_core.c                    |  70 ++---
 net/netfilter/ipvs/ip_vs_ctl.c                     |  77 +++++-
 net/netfilter/ipvs/ip_vs_est.c                     |  10 +-
 net/netfilter/ipvs/ip_vs_lc.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_proto_sctp.c              |   4 +-
 net/netfilter/ipvs/ip_vs_proto_tcp.c               |   2 -
 net/netfilter/ipvs/ip_vs_sync.c                    |   7 +-
 net/netfilter/ipvs/ip_vs_xmit.c                    |   2 +-
 net/netfilter/nf_conntrack_proto.c                 |   6 +
 net/netfilter/nf_conntrack_proto_sctp.c            |  12 +-
 net/netfilter/nf_conntrack_proto_tcp.c             | 132 ++++++----
 net/openvswitch/datapath.c                         |  29 +-
 net/openvswitch/flow.c                             |  11 +-
 net/packet/af_packet.c                             |  72 +++--
 net/sched/act_ct.c                                 |  29 +-
 net/sched/act_gact.c                               |   5 +
 net/sched/act_police.c                             |   6 +
 net/sched/cls_api.c                                |  17 +-
 net/sched/cls_route.c                              |  35 ++-
 net/sched/sch_api.c                                |   9 +
 net/sched/sch_cake.c                               |   1 -
 net/sctp/associola.c                               |  11 +-
 net/sctp/outqueue.c                                |   1 +
 net/sctp/sm_make_chunk.c                           |   3 +-
 net/sctp/sm_statefuns.c                            |   6 +-
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc_llc.c                                  |   3 +-
 net/smc/smc_rx.c                                   |  19 +-
 net/tipc/node.c                                    |  15 +-
 net/tls/tls_sw.c                                   |  16 +-
 net/vmw_vsock/virtio_transport.c                   |  14 +-
 net/xdp/xdp_umem.c                                 |   2 +
 security/integrity/ima/ima_appraise.c              |   9 +-
 security/integrity/ima/ima_main.c                  |  39 +++
 sound/usb/endpoint.c                               |   6 +-
 sound/usb/midi2.c                                  |   9 +
 sound/usb/usx2y/usX2Yhwdep.c                       |   2 +
 sound/usb/usx2y/usx2yhwdeppcm.c                    |   2 +
 .../selftests/bpf/prog_tests/sockmap_basic.c       |   6 +-
 .../selftests/bpf/prog_tests/sockmap_listen.c      |  21 +-
 tools/testing/selftests/bpf/test_maps.c            |  13 +-
 .../ftrace/test.d/dynevent/add_remove_eprobe.tc    |  16 +-
 174 files changed, 1957 insertions(+), 881 deletions(-)