6.18.45-rc1 review

Greg Kroah-Hartman linux-patches lkml stable 1 version Aug 17 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Aug 17250 patches 13 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/250	KVM: s390: pci: Fix resource leak on IRQ registration failure`arch/s390/kvm/pci.c`	+21 -8	0 replies
2/250	mount: honour SB_NOUSER in the new mount API`fs/namespace.c`	+5 -0	0 replies
3/250	sched/fair: Separate se->vlag from se->vprot`include/linux/sched.h`	+4 -9	0 replies
4/250	sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag")`kernel/sched/fair.c`	+124 ~~-24~~	0 replies
5/250	selftests/bpf: Fail unbound UDP on sockmap update`tools/testing/selftests/bpf/test_maps.c`	+6 -7	0 replies
6/250	drm/amd/display: Add AV mute wait frames to dce110_set_avmute`drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c`	+20 -1	0 replies
7/250	drm/amd/display: Check for tg ops in dce110_set_avmute`drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c`	+4 -1	0 replies
8/250	arm64: dts: qcom: rename x1e80100 to hamoa`arch/arm64/boot/dts/qcom/hamoa-iot-som.dtsi` `arch/arm64/boot/dts/qcom/hamoa-pmics.dtsi` `arch/arm64/boot/dts/qcom/hamoa.dtsi` +18 more	+29 ~~-29~~	0 replies
9/250	arm64: dts: qcom: Rework X1-based Asus Zenbook A14s displays`arch/arm64/boot/dts/qcom/Makefile` `arch/arm64/boot/dts/qcom/x1-asus-zenbook-a14.dtsi` `arch/arm64/boot/dts/qcom/x1e80100-asus-zenbook-a14.dts` +3 more	+218 ~~-132~~	0 replies
10/250	arm64: dts: qcom: rename x1p42100 to purwa`arch/arm64/boot/dts/qcom/purwa.dtsi` `arch/arm64/boot/dts/qcom/x1p42100-asus-zenbook-a14.dtsi` `arch/arm64/boot/dts/qcom/x1p42100-crd.dts` +2 more	+4 -4	0 replies
11/250	arm64: dts: qcom: purwa: Fix GPU IOMMU property`arch/arm64/boot/dts/qcom/purwa.dtsi`	+2 -0	0 replies
12/250	arm64: dts: qcom: sdm850-lenovo-yoga-c630: lower PSCI cluster idle`arch/arm64/boot/dts/qcom/sdm850-lenovo-yoga-c630.dts`	+4 -0	0 replies
13/250	NFS: Pin the struct nfs_server during a FREE_STATEID call`fs/nfs/nfs4proc.c`	+5 -0	0 replies
14/250	arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer`arch/arm64/boot/dts/broadcom/bcm2712.dtsi`	+0 -2	0 replies
15/250	xfs: handle NULL b_addr in xfs_buf_free`fs/xfs/xfs_buf.c`	+1 -1	0 replies
16/250	ARM: npcm: Fix OF node refcount leaks in SMP setup`arch/arm/mach-npcm/platsmp.c`	+2 -0	0 replies
17/250	selftests/sched_ext: Handle sleeping task affinity changes in numa test`tools/testing/selftests/sched_ext/numa.bpf.c`	+12 -1	0 replies
18/250	pinctrl: qcom: ipq806x: mark gpio as a GPIO pin function`drivers/pinctrl/qcom/pinctrl-ipq8064.c` `drivers/pinctrl/qcom/pinctrl-msm.h`	+6 -1	0 replies
19/250	pinctrl: qcom: ipq806x: mark pci reset as a GPIO pin function`drivers/pinctrl/qcom/pinctrl-ipq8064.c`	+3 -3	0 replies
20/250	ovpn: add missing rtnl_link_ops->get_size callback`drivers/net/ovpn/main.c`	+7 -0	0 replies
21/250	ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt`arch/arm/boot/dts/broadcom/bcm-ns.dtsi`	+1 -1	0 replies
22/250	ovpn: skip rehash for peers already removed from by_id`drivers/net/ovpn/peer.c`	+43 ~~-30~~	0 replies
23/250	ovpn: rehash peer in by_transp_addr table on CMD_PEER_SET`drivers/net/ovpn/netlink.c` `drivers/net/ovpn/peer.c` `drivers/net/ovpn/peer.h`	+79 ~~-33~~	0 replies
24/250	ovpn: ensure socket is owned by ovpn before deref sk_user_data`drivers/net/ovpn/socket.c`	+9 -0	0 replies
25/250	ovpn: zero-initialize sockaddr before learning a floated endpoint`drivers/net/ovpn/peer.c`	+23 -8	0 replies
26/250	ovpn: hash floated peer by transport identity only`drivers/net/ovpn/peer.c`	+21 -4	0 replies
27/250	ovpn: disable IPv4 redirects on MP interfaces`drivers/net/ovpn/main.c`	+35 ~~-15~~	0 replies
28/250	ovpn: ensure TCP vars are initialized first`drivers/net/ovpn/main.c`	+4 -3	0 replies
29/250	ovpn: fix incorrect use of rcu_access_pointer()`drivers/net/ovpn/peer.c`	+1 -1	0 replies
30/250	drm/bridge: ps8640: propagate AUX transfer register errors`drivers/gpu/drm/bridge/parade-ps8640.c`	+21 -6	0 replies
31/250	net: hns3: fix speed configuration residue after driver reload`drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c`	+1 -5	0 replies
32/250	Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"`drivers/net/thunderbolt/main.c`	+7 -6	0 replies
33/250	bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor`drivers/net/bonding/bond_alb.c`	+6 -4	0 replies
34/250	enic: fix tx_hang_reset use-after-free on device removal`drivers/net/ethernet/cisco/enic/enic_main.c`	+3 -2	0 replies
35/250	net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock`drivers/net/ethernet/mellanox/mlx5/core/en/tc_priv.h` `drivers/net/ethernet/mellanox/mlx5/core/en_tc.c`	+4 -1	0 replies
36/250	pds_core: keep the health thread stopped during reset`drivers/net/ethernet/amd/pds_core/core.h` `drivers/net/ethernet/amd/pds_core/main.c`	+9 -2	0 replies
37/250	pds_core: cancel pending PCI reset work on AER recovery`drivers/net/ethernet/amd/pds_core/main.c`	+4 -0	0 replies
38/250	netfilter: ipset: switch ext_size to atomic64_t`include/linux/netfilter/ipset/ip_set.h` `net/netfilter/ipset/ip_set_bitmap_gen.h` `net/netfilter/ipset/ip_set_core.c` +2 more	+9 -9	0 replies
39/250	ipvs: avoid out-of-bounds write in ip_vs_nat_icmp`include/net/ip_vs.h` `net/netfilter/ipvs/ip_vs_core.c` `net/netfilter/ipvs/ip_vs_xmit.c`	+36 ~~-35~~	0 replies
40/250	ipvs: return the csum validation for forward hook`include/net/ip_vs.h` `net/netfilter/ipvs/ip_vs_proto_sctp.c`	+6 ~~-15~~	0 replies
41/250	watchdog: bd96801_wdt: Fix timeout for enabled WDG`drivers/watchdog/bd96801_wdt.c`	+2 -3	0 replies
42/250	btrfs: fix memory leak in btrfs_do_encoded_write()`fs/btrfs/inode.c`	+1 -0	0 replies
43/250	bpf: Preserve pointer state for commuted arithmetic`kernel/bpf/verifier.c`	+8 -7	0 replies
44/250	bpf: split check_reg_sane_offset() in two parts`kernel/bpf/verifier.c`	+27 ~~-12~~	0 replies
45/250	bpf: Propagate untrusted pointer state in commuted arithmetic`kernel/bpf/verifier.c`	+7 -7	0 replies
46/250	net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()`net/smc/smc_llc.c`	+2 -1	0 replies
47/250	net/sched: cls_route: fix fastmap use-after-free on filter`net/sched/cls_route.c`	+26 -9	0 replies
48/250	net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete`drivers/net/ethernet/hisilicon/hix5hd2_gmac.c`	+0 -1	0 replies
49/250	devlink: fix net namespace reference leak in reload`net/devlink/dev.c`	+1 -0	0 replies
50/250	net/mlx5: fw_tracer, return NULL on create error`drivers/net/ethernet/mellanox/mlx5/core/diag/fw_tracer.c`	+7 -9	0 replies
51/250	counter: microchip-tcb-capture: Fix DT channel validation`drivers/counter/microchip-tcb-capture.c`	+2 -2	0 replies
52/250	bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()`net/ipv4/tcp_ipv4.c`	+24 ~~-19~~	0 replies
53/250	vhost/vdpa: reject overflowing PA map page counts on 32-bit`drivers/vhost/vdpa.c`	+8 -1	0 replies
54/250	vdpa/mlx5: Fix buffer length in create_direct_keys()`drivers/vdpa/mlx5/core/mr.c`	+2 -1	0 replies
55/250	hwmon: (pmbus_core) Use guard() for mutex protection`drivers/hwmon/pmbus/pmbus_core.c`	+107 ~~-170~~	0 replies
56/250	hwmon: (pmbus) Fix type confusion in notification logic`drivers/hwmon/pmbus/pmbus_core.c`	+37 ~~-24~~	0 replies
57/250	tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()`net/ipv4/tcp_input.c`	+1 -1	0 replies
58/250	bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips`drivers/net/ethernet/broadcom/bnxt/bnxt.c` `drivers/net/ethernet/broadcom/bnxt/bnxt.h`	+9 -1	0 replies
59/250	net: reduce indent of struct netdev_queue_mgmt_ops members`include/net/netdev_queues.h`	+14 ~~-14~~	0 replies
60/250	net: add bare bone queue configs`drivers/net/ethernet/broadcom/bnxt/bnxt.c` `drivers/net/ethernet/google/gve/gve_main.c` `drivers/net/ethernet/mellanox/mlx5/core/en_main.c` +6 more	+66 ~~-16~~	0 replies
61/250	net: pass queue rx page size from memory provider`include/net/netdev_queues.h` `include/net/page_pool/types.h` `net/core/netdev_rx_queue.c`	+20 -0	0 replies
62/250	eth: bnxt: store rx buffer size per queue`drivers/net/ethernet/broadcom/bnxt/bnxt.c` `drivers/net/ethernet/broadcom/bnxt/bnxt.h` `drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c` +1 more	+38 ~~-27~~	0 replies
63/250	eth: bnxt: support qcfg provided rx page size`drivers/net/ethernet/broadcom/bnxt/bnxt.c` `drivers/net/ethernet/broadcom/bnxt/bnxt.h`	+36 -1	0 replies
64/250	bnxt: fix memory leak in bnxt_queue_mem_alloc error cases`drivers/net/ethernet/broadcom/bnxt/bnxt.c`	+3 -0	0 replies
65/250	xsk: require at least 16 bytes of TX metadata`net/xdp/xdp_umem.c`	+2 -0	0 replies
66/250	xsk: pass TX metadata pointer by reference`drivers/net/ethernet/intel/igc/igc_main.c` `drivers/net/ethernet/mellanox/mlx5/core/en.h` `drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c` +5 more	+21 ~~-15~~	0 replies
67/250	xsk: clear metadata pointer when no timestamp is requested`include/net/xdp_sock.h` `net/xdp/xsk.c`	+12 -4	0 replies
68/250	xsk: validate launch-time metadata size`include/net/xdp_sock_drv.h` `net/xdp/xsk.c`	+19 -9	0 replies
69/250	xsk: move xsk_tx_metadata_request() to xdp_sock_drv.h`include/net/xdp_sock.h` `include/net/xdp_sock_drv.h`	+43 ~~-43~~	0 replies
70/250	xsk: validate metadata when processing requests`drivers/net/ethernet/intel/igc/igc_main.c` `drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c` `drivers/net/ethernet/stmicro/stmmac/stmmac_main.c` +3 more	+37 ~~-33~~	0 replies
71/250	udp: fix potential use-after-free in tunnel segmentation`net/ipv4/udp_offload.c`	+3 -1	0 replies
72/250	net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter`net/sched/sch_cake.c`	+0 -1	0 replies
73/250	vhost-scsi: Validate T10 PI scatterlist counts`drivers/vhost/scsi.c`	+8 -0	0 replies
74/250	vhost-scsi: reject feature changes after endpoint`drivers/vhost/scsi.c`	+9 -0	0 replies
75/250	net/openvswitch: check Ethernet header length in key_extract()`net/openvswitch/flow.c`	+7 -4	0 replies
76/250	net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers`net/sched/cls_api.c`	+16 -1	0 replies
77/250	drm/xe/uc: Apply RCS/CCS yield policy to SR-IOV VFs`drivers/gpu/drm/xe/xe_uc.c`	+5 -2	0 replies
78/250	hwmon: (nzxt-smart2) Check return value of init_device() in probe`drivers/hwmon/nzxt-smart2.c`	+5 -1	0 replies
79/250	hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations`drivers/hwmon/pmbus/lm25066.c`	+3 -2	0 replies
80/250	selftests/ftrace: refactor eprobes test to fix argument checks`tools/testing/selftests/ftrace/test.d/dynevent/add_remove_eprobe.tc`	+5 ~~-11~~	0 replies
81/250	net: stmmac: resume PHY before hardware setup when opening the interface`drivers/net/ethernet/stmicro/stmmac/stmmac_main.c`	+9 -0	0 replies
82/250	bnge: use int for bnge_fix_rings_count() return value`drivers/net/ethernet/broadcom/bnge/bnge_resc.c`	+2 -1	0 replies
83/250	net/mlx5e: fix BQL reset on SQ re-activation`drivers/net/ethernet/mellanox/mlx5/core/en_main.c`	+3 -1	0 replies
84/250	bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()`drivers/net/ethernet/broadcom/bnxt/bnxt.c`	+7 -7	0 replies
85/250	bnxt_en: Determine and store default RX ring in vnic structure`drivers/net/ethernet/broadcom/bnxt/bnxt.c` `drivers/net/ethernet/broadcom/bnxt/bnxt.h`	+23 ~~-11~~	0 replies
86/250	bnxt_en: Refresh VNIC default ring on queue restart if needed`drivers/net/ethernet/broadcom/bnxt/bnxt.c`	+5 -0	0 replies
87/250	bnxt_en: Disable EOP for TPA on all chips to prevent data corruption`drivers/net/ethernet/broadcom/bnxt/bnxt.c`	+7 -4	0 replies
88/250	bnxt_en: Fix PTP PPS setting bug`drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c`	+5 -2	0 replies
89/250	sctp: fix addip_serial increment on ASCONF_ACK allocation failure`net/sctp/sm_make_chunk.c`	+1 -2	0 replies
90/250	tcp: fix TFO max_qlen accounting across reuseport migration`net/ipv4/inet_connection_sock.c`	+16 -4	0 replies
91/250	netfilter: flowtable: consolidate xmit path`include/net/netfilter/nf_flow_table.h` `net/netfilter/nf_flow_table_core.c` `net/netfilter/nf_flow_table_ip.c` +1 more	+57 ~~-39~~	0 replies
92/250	netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()`net/netfilter/nf_flow_table_ip.c`	+3 -0	0 replies
93/250	net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length`net/ncsi/ncsi-netlink.c`	+4 -0	0 replies
94/250	net: prestera: validate firmware header length`drivers/net/ethernet/marvell/prestera/prestera_pci.c`	+3 -0	0 replies
95/250	net: remove WARN_ON_ONCE() from sk_mc_loop()`net/core/sock.c`	+0 -1	0 replies
96/250	net/smc: fix TOCTOU race between smc_listen_out() and listener close`net/smc/af_smc.c`	+2 -1	0 replies
97/250	net: thunderbolt: Tear down DMA paths before stopping the rings`drivers/net/thunderbolt/main.c`	+15 -5	0 replies
98/250	ata: pata_sl82c105: fix bridge revision use-after-free`drivers/ata/pata_sl82c105.c`	+3 -1	0 replies
99/250	bnge: Fix resource leak in bnge_init_nic() error path`drivers/net/ethernet/broadcom/bnge/bnge_netdev.c`	+0 -2	0 replies
100/250	s390/ism: Fix UAF of sba and ieq during ism_dev_exit()`drivers/s390/net/ism_drv.c`	+15 -4	0 replies
101/250	net/atm: fix slab-out-of-bounds read in vcc_setsockopt()`net/atm/common.c`	+9 -5	0 replies
102/250	sctp: clear control chunk transport if it is being removed`net/sctp/associola.c`	+4 -0	0 replies
103/250	tls: dont abort the connection on signal-interrupted sends`net/tls/tls_sw.c`	+1 -1	0 replies
104/250	watchdog: at91sam9_wdt: prevent timer rearm during teardown`drivers/watchdog/at91sam9_wdt.c`	+2 -2	0 replies
105/250	hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination`drivers/hwmon/corsair-psu.c`	+2 -2	0 replies
106/250	hwmon: (ads7828) Fix external VREF regulator handling`drivers/hwmon/ads7828.c`	+6 -5	0 replies
107/250	hwmon: (ltc4282) Avoid overflow in maximum power calculation`drivers/hwmon/ltc4282.c`	+6 -6	0 replies
108/250	hwmon: (ltc4282) Clamp negative current limits`drivers/hwmon/ltc4282.c`	+5 -1	0 replies
109/250	hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt`drivers/hwmon/ltc4282.c`	+1 -1	0 replies
110/250	net: fec: do not release NULL pages when RX buffer allocation fails`drivers/net/ethernet/freescale/fec_main.c`	+9 -2	0 replies
111/250	net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()`drivers/net/tap.c`	+14 ~~-10~~	0 replies
112/250	Input: evdev - sanitize event type index when fetching event masks`drivers/input/evdev.c`	+4 -1	0 replies
113/250	ALSA: usb-audio: fix OOB write on Type II inbound URBs`sound/usb/endpoint.c`	+4 -2	0 replies
114/250	usb: core: Add quirk for 255-bytes initial config read`Documentation/admin-guide/kernel-parameters.txt` `drivers/usb/core/config.c` `drivers/usb/core/quirks.c` +1 more	+36 -8	0 replies
115/250	usb: quirks: Add ShanWan gamepad to quirk list`drivers/usb/core/quirks.c`	+3 -0	0 replies
116/250	usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg`drivers/usb/misc/usbio.c`	+1 -1	0 replies
117/250	usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()`drivers/usb/atm/cxacru.c`	+2 -0	0 replies
118/250	thunderbolt: icm: Preserve USB4 proxy data-valid bit`drivers/thunderbolt/icm.c`	+1 -1	0 replies
119/250	usb: cdnsp: fix incorrect endian conversions for APB timeout register`drivers/usb/cdns3/cdnsp-gadget.c`	+2 -2	0 replies
120/250	usb: gadget: f_ncm: Use unsigned int for ndp_index`drivers/usb/gadget/function/f_ncm.c`	+1 -1	0 replies
121/250	net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()`drivers/net/usb/ax88179_178a.c`	+3 -1	0 replies
122/250	net: usb: ipheth: fix carrier_work UAF on disconnect`drivers/net/usb/ipheth.c`	+10 -1	0 replies
123/250	vt: add permission check for KDSKBMETA ioctl`drivers/tty/vt/vt_ioctl.c`	+2 -0	0 replies
124/250	vt: stabilize tty reference in kbd_keycode with tty_port_tty_get`drivers/tty/vt/keyboard.c`	+4 -1	0 replies
125/250	Input: evdev - fix information leak in evdev_pass_values()`drivers/input/evdev.c`	+12 ~~-10~~	0 replies
126/250	mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF`include/linux/mmap_lock.h` `mm/pagewalk.c` `mm/vmalloc.c`	+53 ~~-19~~	0 replies
127/250	ima: fix out-of-bounds read in xattr_verify()`security/integrity/ima/ima_appraise.c`	+7 -2	0 replies
128/250	ipvs: stop estimator after disabled calc phase`net/netfilter/ipvs/ip_vs_est.c`	+7 -3	0 replies
129/250	ipvs: add totalconns for dest`include/net/ip_vs.h` `net/netfilter/ipvs/ip_vs_conn.c` `net/netfilter/ipvs/ip_vs_ctl.c` +4 more	+28 ~~-38~~	0 replies
130/250	ipvs: properly update the overload flag on dest edit`include/net/ip_vs.h` `net/netfilter/ipvs/ip_vs_conn.c` `net/netfilter/ipvs/ip_vs_ctl.c`	+72 ~~-25~~	0 replies
131/250	ipvs: clear IPv4 options after rebasing tunnel ICMP errors`net/netfilter/ipvs/ip_vs_core.c`	+1 -0	0 replies
132/250	packet: use consistent hard_header_len in non-ring send paths`include/linux/netdevice.h` `net/packet/af_packet.c`	+20 ~~-12~~	0 replies
133/250	packet: use consistent hard_header_len in TX_RING send path`net/packet/af_packet.c`	+11 -8	0 replies
134/250	net/packet: reset the MAC header on the packet-socket transmit path`net/packet/af_packet.c`	+4 -3	0 replies
135/250	packet: synchronize pressure clearing with ring reconfiguration`net/packet/af_packet.c`	+16 -4	0 replies
136/250	net: fix skb length accounting after generic XDP frag adjustment`net/core/dev.c`	+7 -3	0 replies
137/250	net: openvswitch: reallocate update replies for mismatched IDs`net/openvswitch/datapath.c`	+26 -3	0 replies
138/250	net/sched: reject overly deep qdisc hierarchies`include/net/sch_generic.h` `net/sched/sch_api.c`	+10 -0	0 replies
139/250	net: octeontx2-pf: Fix UB in shift operation`drivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c`	+4 -2	0 replies
140/250	net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header`include/linux/netdevice.h`	+0 -5	0 replies
141/250	inet: frags: publish queues before arming timer`net/ipv4/inet_fragment.c`	+5 -5	0 replies
142/250	mac802154: fix netdev use-after-free in beacon worker`net/mac802154/scan.c`	+4 -0	0 replies
143/250	igc: fix netdev not re-attached after resume if interface is down`drivers/net/ethernet/intel/igc/igc_main.c`	+5 -3	0 replies
144/250	netfilter: ebt_nflog: pin the NFLOG backend`net/bridge/netfilter/ebt_nflog.c`	+16 -1	0 replies
145/250	net: bridge: mrp: fix uninitialised bytes on the wire`net/bridge/br_mrp.c`	+2 -4	0 replies
146/250	Revert "drm/amd/display: Fix backlight max_brightness to match exported range"`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c`	+3 -3	0 replies
147/250	blk-mq: pop cached request if it is usable`block/blk-mq.c`	+9 ~~-25~~	0 replies
148/250	blk-mq: reinsert cached request to the list`block/blk-mq.c`	+1 -1	0 replies
149/250	KVM: s390: pci: Fix aisb calculation`arch/s390/kvm/pci.c`	+1 -1	0 replies
150/250	dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk`Documentation/devicetree/bindings/crypto/qcom,inline-crypto-engine.yaml`	+15 -1	0 replies
151/250	iommu/vt-d: Gather the unmapped range before freeing its page tables`drivers/iommu/intel/iommu.c`	+10 -1	0 replies
152/250	futex: Prevent robust futex exit race some more`kernel/futex/core.c`	+58 ~~-27~~	0 replies
153/250	netfilter: nf_tables: avoid softlockup warnings in nft_chain_validate`net/netfilter/nf_tables_api.c`	+2 -2	0 replies
154/250	Bluetooth: btrtl: fix RTL8761B/BU broken LE extended scan`drivers/bluetooth/btrtl.c`	+13 -0	0 replies
155/250	Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV`drivers/bluetooth/btusb.c`	+2 -0	0 replies
156/250	selftests/bpf: Ensure UDP sockets are bound`tools/testing/selftests/bpf/prog_tests/sockmap_basic.c`	+3 -3	0 replies
157/250	selftests/bpf: Adapt sockmap update error handling`tools/testing/selftests/bpf/prog_tests/sockmap_listen.c`	+11 ~~-10~~	0 replies
158/250	ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops`net/ipv4/fib_semantics.c`	+49 ~~-18~~	0 replies
159/250	ipv4: fix use-after-free in fib_nhc_update_mtu()`include/net/route.h` `net/ipv4/fib_semantics.c` `net/ipv4/route.c`	+42 ~~-23~~	0 replies
160/250	mei: pull kvfree out of spinlock`drivers/misc/mei/client.c`	+15 ~~-10~~	0 replies
161/250	nvmem: apple-spmi-nvmem: wrap regmap calls to satisfy CFI`drivers/nvmem/apple-spmi-nvmem.c`	+18 -2	0 replies
162/250	nvmem: layouts: Add fixed-layout driver`MAINTAINERS` `drivers/nvmem/core.c` `drivers/nvmem/internals.h` +4 more	+74 ~~-33~~	0 replies
163/250	rust_binder: do not query current thread for all ioctls`drivers/android/binder/process.rs`	+8 -4	0 replies
164/250	serial: qcom-geni: fix TX DMA buffer flush`drivers/tty/serial/qcom_geni_serial.c`	+22 ~~-21~~	0 replies
165/250	serial: 8250_dma: Clear stale RX state on shutdown`drivers/tty/serial/8250/8250_dma.c`	+7 -5	0 replies
166/250	serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx`drivers/tty/serial/8250/8250_of.c`	+38 -0	0 replies
167/250	serial: amba-pl011: fix indefinite RS485 post-send delay`drivers/tty/serial/amba-pl011.c`	+6 -2	0 replies
168/250	serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ`drivers/tty/serial/amba-pl011.c`	+35 ~~-17~~	0 replies
169/250	serial: amba-pl011: synchronize DMA teardown`drivers/tty/serial/amba-pl011.c`	+4 -4	0 replies
170/250	staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()`drivers/staging/rtl8723bs/core/rtw_ieee80211.c`	+3 -0	0 replies
171/250	staging: rtl8723bs: fix OOB read in WMM_param_handler()`drivers/staging/rtl8723bs/core/rtw_wlan_util.c`	+3 -0	0 replies
172/250	staging: rtl8723bs: fix missing shared-key auth challenge length check`drivers/staging/rtl8723bs/core/rtw_mlme_ext.c`	+1 -1	0 replies
173/250	staging: rtl8723bs: validate monitor transmit frame lengths`drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c`	+4 -0	0 replies
174/250	misc: fastrpc: Fix initial memory allocation for Audio PD memory pool`drivers/misc/fastrpc.c`	+4 -4	0 replies
175/250	misc: fastrpc: fix channel ctx ref leak when session alloc fails`drivers/misc/fastrpc.c`	+1 -1	0 replies
176/250	misc: fastrpc: Remove buffer from list prior to unmap operation`drivers/misc/fastrpc.c`	+10 -4	0 replies
177/250	misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke`drivers/misc/fastrpc.c`	+2 -0	0 replies
178/250	misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free`drivers/misc/fastrpc.c`	+1 -0	0 replies
179/250	ring-buffer: Fix crash passing ERR_PTR to kthread_stop()`kernel/trace/ring_buffer.c`	+1 -1	0 replies
180/250	mm/damon/ops-common: putback folios on invalid migrate nid`mm/damon/ops-common.c`	+8 -1	0 replies
181/250	samples/damon/mtier: error out for zero quota goal target values`samples/damon/mtier.c`	+3 -0	0 replies
182/250	mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD}`mm/damon/ops-common.c` `mm/damon/paddr.c` `mm/damon/vaddr.c`	+8 -1	0 replies
183/250	ALSA: usb: Fix UAF at delayed release of MIDI2 EPs`sound/usb/midi2.c`	+9 -0	0 replies
184/250	ALSA: usx2y: bound the hwdep mmap fault offset`sound/usb/usx2y/usX2Yhwdep.c` `sound/usb/usx2y/usx2yhwdeppcm.c`	+4 -0	0 replies
185/250	ALSA: FCP: fix OOB write in fcp_meter_ctl_get()`sound/usb/fcp.c`	+9 -1	0 replies
186/250	ALSA: hda/tas2781: fix ACPI reference handling`sound/hda/codecs/side-codecs/tas2781_hda_spi.c`	+2 -1	0 replies
187/250	ALSA: us144mkii: re-anchor capture URBs on resubmission`sound/usb/usx2y/us144mkii_capture.c`	+1 -0	0 replies
188/250	drm/v3d: Serialize the scheduler timeout handlers`drivers/gpu/drm/v3d/v3d_drv.h` `drivers/gpu/drm/v3d/v3d_sched.c`	+14 -1	0 replies
189/250	perf/core: Fix group leader use-after-free after sibling detach`kernel/events/core.c`	+37 ~~-30~~	0 replies
190/250	tracing: Fix race between update_event_fields and, event_define_fields`kernel/trace/trace_events.c`	+2 -0	0 replies
191/250	fbdev: bitblit: bound-check glyph index in bit_cursor()`drivers/video/fbdev/core/bitblit.c`	+7 -2	0 replies
192/250	ring-buffer: Prevent subbuf order change when resizing is disabled`kernel/trace/ring_buffer.c`	+1 -1	0 replies
193/250	tracing: Fix NULL pointer dereference in module event cache removal`kernel/trace/trace_events.c`	+1 -1	0 replies
194/250	mm/huge_memory: fix huge_zero_pfn race`mm/huge_memory.c`	+29 ~~-14~~	0 replies
195/250	net: phy: mediatek: fix TX blink masks using the RX bits`drivers/net/phy/mediatek/mtk.h`	+4 -4	0 replies
196/250	net: smc: fix splice entry lifetime imbalance in smc_rx_splice`net/smc/smc_rx.c`	+10 -9	0 replies
197/250	ipv6: prevent in6_dev_get() from resurrecting inet6_dev`include/net/addrconf.h`	+2 -2	0 replies
198/250	net/dibs: Correct freeing of dmb_clientid_arr`drivers/dibs/dibs_loopback.c` `drivers/dibs/dibs_main.c`	+4 ~~-11~~	0 replies
199/250	net/x25: fix use-after-free of the socket by its timers`net/x25/af_x25.c` `net/x25/x25_timer.c`	+18 ~~-11~~	0 replies
200/250	net: devmem: prevent net-iov / page mixing`net/core/datagram.c`	+3 -0	0 replies
201/250	netfilter: bridge: release template ct on non-IP path`net/bridge/netfilter/nf_conntrack_bridge.c`	+1 -0	0 replies
202/250	netfilter: nf_conntrack: defer invalid log until after unlock`net/netfilter/nf_conntrack_proto.c` `net/netfilter/nf_conntrack_proto_sctp.c` `net/netfilter/nf_conntrack_proto_tcp.c`	+102 ~~-48~~	0 replies
203/250	net: atlantic: free stranded TX buffers on ring deinit`drivers/net/ethernet/aquantia/atlantic/aq_ring.c` `drivers/net/ethernet/aquantia/atlantic/aq_ring.h` `drivers/net/ethernet/aquantia/atlantic/aq_vec.c`	+31 -1	0 replies
204/250	net: atlantic: free RX pages of consumed but not refilled buffers`drivers/net/ethernet/aquantia/atlantic/aq_ring.c`	+18 -4	0 replies
205/250	net/sched: act_ct: fix sk_buff leak when the header checks reject a packet`net/sched/act_ct.c`	+25 -4	0 replies
206/250	net/sched: act_gact, act_police: range check the fallback control action`include/net/act_api.h` `net/sched/act_gact.c` `net/sched/act_police.c`	+30 -0	0 replies
207/250	ovl: dont warn when the mount is completed from another user namespace`fs/overlayfs/super.c`	+2 -1	0 replies
208/250	binfmt_misc: dont warn when the mount is completed from another user namespace`fs/binfmt_misc.c`	+2 -1	0 replies
209/250	Revert "drm/amdgpu: fix aperture mapping leak"`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c` `drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c`	+21 ~~-16~~	0 replies
210/250	dibs: initialise dibs->lock in dibs_dev_alloc()`drivers/dibs/dibs_main.c` `include/linux/dibs.h`	+2 -2	0 replies
211/250	arm64: remove redundant concurrent ptdump UAF mitigation`arch/arm64/include/asm/ptdump.h` `arch/arm64/mm/mmu.c` `arch/arm64/mm/ptdump.c` +1 more	+9 ~~-62~~	0 replies
212/250	x86/CPU: Add a tlbi= cmdline switch`Documentation/admin-guide/kernel-parameters.txt` `arch/x86/kernel/cpu/common.c`	+14 -0	0 replies
213/250	x86/mce: Set up the polling timer before CMCI discovery`arch/x86/kernel/cpu/mce/core.c`	+1 -1	0 replies
214/250	xdp: reject clones that overrun skb_shared_info tailroom`net/core/xdp.c`	+1 -1	0 replies
215/250	vxlan: do not arm the ageing timer on a device that is down`drivers/net/vxlan/vxlan_core.c`	+1 -1	0 replies
216/250	vsock/virtio: read virtqueues under worker locks`net/vmw_vsock/virtio_transport.c`	+6 -5	0 replies
217/250	vsock/virtio: avoid refilling the RX queue after teardown`net/vmw_vsock/virtio_transport.c`	+2 -1	0 replies
218/250	veth: fix skb length accounting after XDP frag adjustment`drivers/net/veth.c`	+14 -8	0 replies
219/250	vhost: reset the vring metadata cache on vring reconfiguration`drivers/vhost/vhost.c`	+8 -0	0 replies
220/250	tls: rx: restore msg_iter before TLS 1.3 optimistic retry`net/tls/tls_sw.c` `tools/testing/selftests/net/tls.c`	+59 -0	0 replies
221/250	tls: dont leave a full plaintext sk_msg ring unpushed`net/tls/tls_sw.c`	+14 -0	0 replies
222/250	tipc: read le->link under the node lock in tipc_node_link_down()`net/tipc/node.c`	+10 -5	0 replies
223/250	smb: client: Fix use-after-free in cifs_try_adding_channels()`fs/smb/client/sess.c`	+1 -1	0 replies
224/250	KVM: SVM: Serialize accesses to the owner and mirror list with separate lock`arch/x86/kvm/svm/sev.c` `arch/x86/kvm/svm/svm.h`	+26 -9	0 replies
225/250	KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page`arch/x86/kvm/mmu/mmu.c`	+3 -0	0 replies
226/250	eventfs: Fix use-after-free in eventfs_remove_rec()`fs/tracefs/event_inode.c`	+2 -2	0 replies
227/250	eventfs: Use children field for rcu head and add memory barriers`fs/tracefs/event_inode.c` `fs/tracefs/internal.h`	+26 -2	2 replies
228/250	Revert "thermal/drivers/hwmon: Cleanup coding style a bit"`drivers/thermal/thermal_hwmon.c`	+2 -1	0 replies
229/250	ptp: ocp: Fix board ID over-read`drivers/ptp/ptp_ocp.c`	+3 -1	0 replies
230/250	ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()`kernel/trace/ring_buffer.c`	+1 -0	0 replies
231/250	ring-buffer: Use current_context for safe per-CPU buffer swap`kernel/trace/ring_buffer.c`	+4 -4	0 replies
232/250	mm/ptdump: always stabilise against page table freeing using init_mm`mm/pagewalk.c` `mm/ptdump.c`	+16 -5	0 replies
233/250	ipv6: fix Route Information option length validation`net/ipv6/route.c`	+4 -4	0 replies
234/250	ip6_tunnel: clear skb2->cb[] in ip6ip6_err()`net/ipv6/ip6_tunnel.c`	+3 -0	0 replies
235/250	fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()`fs/crypto/policy.c`	+1 -1	0 replies
236/250	sched/psi: Shut down rtpoll_timer in psi_cgroup_free()`kernel/sched/psi.c`	+6 -0	0 replies
237/250	sched/psi: Create the psimon kthread outside of cgroup_mutex`include/linux/psi.h` `kernel/cgroup/cgroup.c` `kernel/sched/psi.c`	+78 ~~-18~~	0 replies
238/250	ima: Instantiate file_truncate and path_truncate hooks`security/integrity/ima/ima_main.c`	+39 -0	0 replies
239/250	mm/filemap: __filemap_add_folio() restore index before retrying`mm/filemap.c`	+6 -0	0 replies
240/250	fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions`fs/verity/measure.c`	+6 -4	0 replies
241/250	fsverity: Fix silent truncation in bpf_get_fsverity_digest()`fs/verity/measure.c`	+5 -4	0 replies
242/250	bpf, sockmap: Fix sk_redir use-after-free in send verdict`net/ipv4/tcp_bpf.c`	+2 -0	0 replies
243/250	scsi: scsi_debug: Negate wrapped memcmp() result`drivers/scsi/scsi_debug.c`	+2 -2	0 replies
244/250	sctp: keep chunk->transport in step with the list it is queued on`net/sctp/outqueue.c`	+1 -0	0 replies
245/250	sctp: fix use-after-free of cached ASCONF chunk`net/sctp/associola.c` `net/sctp/sm_statefuns.c`	+8 -2	0 replies
246/250	sctp: clear new_transport when removing a peer`net/sctp/associola.c`	+3 -0	0 replies
247/250	thunderbolt: Bound the DROM dual link port number before indexing sw->ports`drivers/thunderbolt/eeprom.c`	+8 -1	0 replies
248/250	thunderbolt: Fix bandwidth group reservation indexing`drivers/thunderbolt/tb.c`	+1 -1	0 replies
249/250	netfilter: always set route tuple out ifindex`net/netfilter/nf_flow_table_path.c`	+3 -1	0 replies
250/250	netfilter: flowtable: ensure sufficient headroom in xmit path`net/netfilter/nf_flow_table_ip.c`	+11 -2	0 replies

Reviews trailers per patch

133 of 250 patches have a Reviewed-by or Acked-by.

Patch	Matthew Rosato	Christian Borntraeger	Abel Vesa	Konrad Dybcio	Dan Aloni	Christoph Hellwig	Avi Fishman	Linus Walleij	Dmitry Baryshkov	Vincent Guittot	K Prateek Nayak	Shubhang Kaushik	Kuniyuki Iwashima	Jakub Sitnicki	Wayne Lin	Dan Wheeler	Viktor Jägersküpper	Jacob Keller	Filipe Manana	David Sterba	Daniel Wade	Shung-Hsi Yu	Hidayath Khan	Sidraya Jayagond	Dust Li	Victor Nogueira	Santosh Kalluri	Jiri Pirko	Antoine Tenart	Shay Drori	Joshua Crofts	Michael S. Tsirkin	Dragos Tatulea	Sanman Pradhan	Vincent Jardin	Andy Gospodarek	Somnath Kotur	Mina Almasry	Joe Damato	Michael Chan	Douglas Anderson	Simon Horman	Nikolay Aleksandrov	Jay Vosburgh	Mika Westerberg	Cosmin Ratiu	Alexander Stein	Maxime Chevallier	Bhargava Marreddy	Tariq Toukan	Kalesh AP	Pavan Chebbi	Xin Long	Eric Dumazet	Pablo Neira Ayuso	Elad Nachman	Mahanta Jambigi	Breno Leitao	Niklas Cassel	Dharmender Garg	Rajashekar Hudumula	Nuno Sá	Stefan Hajnoczi	Eelco Chaudron	Ilya Maximets	Daniele Ceraolo Spurio	Greg Kroah-Hartman	Mike Rapoport (Microsoft)	Dev Jain	David Hildenbrand (Arm)	Kiryl Shutsemau	Julian Anastasov	Willem de Bruijn	Mohsin Bashir	Lorenzo Bianconi	Jamal Hadi Salim	Ratheesh Kannoth	Sunil Goutham	Alan Stern	Miquel Raynal	Aleksandr Loktionov	Dima Ruinskiy	Chaitanya Kulkarni	Niklas Schnelle	Kuldeep Singh	Krzysztof Kozlowski	Ben Cressey	Antti Laakso	Arnd Bergmann	Paul Menzel	Praveen Talari	Ekansh Gupta	Vincent Donnefort	Masami Hiramatsu (Google)	SJ Park	Iago Toral Quiroga	Dapeng Mi	Ido Schimmel	Andrew Lunn	Menachem Adin	Clayton Craft	Sven Peter	Carlos Llamas	Jan Kara	Lijo Lazar	Hawking Zhang	Alexandra Winter	Will Deacon	Bobby Eshleman	Tung Nguyen	Stanislav Fomichev	Lukasz Luba	Vadim Fedorenko	Johannes Weiner	Matt Fleming	Suren Baghdasaryan	Frederick Lawler	Florian Westphal	Sukhdeep Singh	Kumar Kartikeya Dwivedi	Song Liu	John Fastabend	Emil Tsalapatis	John Garry	Matthew Wilcox (Oracle)	Zi Yan	Pavel Machek (CIP)	Peter Schneider	Florian Fainelli	Ron Economos	Brett A C Sheffield	Wentao Guan	Mark Brown	Shuah Khan	Miguel Ojeda	Barry K. Nathan
Series																																																																																																																															T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b T-b	T-b	T-b
1/250	R-b T-b	R-b
2/250
3/250
4/250										R-b	T-b	T-b
5/250													R-b	R-b
6/250															R-b	T-b
7/250																	T-b
8/250
9/250				R-b
10/250
11/250				R-b
12/250			R-b
13/250					T-b
14/250
15/250						R-b
16/250							R-b
17/250
18/250				R-b				A-b	R-b
19/250								A-b	R-b
20/250
21/250
22/250
23/250
24/250
25/250
26/250
27/250
28/250
29/250
30/250																																									R-b
31/250																																										R-b
32/250																																													A-b
33/250																																											R-b	A-b
34/250
35/250																																														R-b
36/250																		R-b
37/250																		R-b
38/250
39/250
40/250
41/250
42/250																			R-b	R-b
43/250																					T-b	A-b
44/250
45/250																					T-b
46/250																							R-b	R-b	R-b
47/250																										T-b	T-b
48/250
49/250																												R-b	R-b
50/250																														R-b
51/250																															R-b
52/250													R-b
53/250																																A-b
54/250																																	T-b R-b
55/250																																		R-b
56/250																																			T-b
57/250
58/250																																				R-b	R-b
59/250																																						R-b
60/250
61/250
62/250
63/250
64/250																																							R-b	R-b
65/250
66/250
67/250
68/250
69/250
70/250
71/250																													R-b
72/250
73/250
74/250																																																															R-b
75/250																																																																R-b	R-b
76/250																										T-b
77/250																																																																		R-b
78/250
79/250
80/250
81/250																																															T-b	T-b R-b
82/250																																																	R-b
83/250																																																		R-b
84/250																																																			R-b	R-b
85/250																																																			R-b	R-b
86/250																																																			R-b	R-b
87/250																																																			R-b	R-b
88/250																																																				R-b
89/250																																																					A-b
90/250													R-b																																									R-b
91/250
92/250																																																							R-b
93/250
94/250																																																								A-b
95/250
96/250																									R-b																																R-b	R-b
97/250																																													A-b
98/250																																																											R-b
99/250																																																												R-b	R-b
100/250
101/250
102/250
103/250
104/250
105/250
106/250
107/250																																																														R-b
108/250																																																														R-b
109/250																																																														R-b
110/250
111/250																																A-b																																									R-b
112/250																																																																			A-b
113/250
114/250																																																																															A-b
115/250
116/250																																																																																								T-b
117/250
118/250
119/250																																																																																									A-b
120/250
121/250
122/250
123/250
124/250
125/250
126/250																																																																				R-b	R-b	A-b	R-b
127/250
128/250																																																																								A-b
129/250
130/250
131/250																																																																								A-b
132/250																																																																									R-b
133/250																																																																									R-b
134/250																																																																									R-b
135/250
136/250																																																																										R-b	A-b
137/250																																																																	R-b
138/250																										R-b																																																		A-b
139/250																																																																													R-b	R-b
140/250																																																																									R-b
141/250
142/250																																																																																R-b
143/250																																																																																	R-b	R-b
144/250
145/250																																											A-b
146/250
147/250
148/250																																																																																			R-b
149/250																																																																																				R-b
150/250																																																																																					R-b	R-b
151/250																																																																																							R-b
152/250
153/250
154/250
155/250																																																																																										R-b
156/250													R-b	R-b
157/250													R-b	R-b
158/250																																																																																																		R-b
159/250																																																																																																		R-b
160/250																																																																																																				R-b
161/250																																																																																																					T-b	R-b
162/250																																																																																R-b
163/250																																																																																																							A-b
164/250																																																																																											R-b
165/250
166/250
167/250
168/250
169/250
170/250
171/250
172/250
173/250
174/250									R-b
175/250									R-b
176/250									R-b
177/250									R-b
178/250																																																																																												R-b
179/250																																																																																													R-b	A-b
180/250																																																																																															R-b
181/250
182/250
183/250
184/250
185/250
186/250
187/250
188/250																																																																																																R-b
189/250																																																																																																	R-b
190/250
191/250
192/250
193/250
194/250																																																																						A-b
195/250																																																																																																			R-b
196/250																								R-b	R-b
197/250																																																																																																		R-b
198/250																									R-b
199/250
200/250																																						R-b																																																																							R-b		A-b
201/250
202/250																																																																																																																						R-b
203/250																																						A-b																																																																																	R-b
204/250																																						A-b																																																																																	R-b
205/250																																																																												A-b
206/250																										T-b																																																		A-b
207/250																																																																																																								R-b
208/250																																																																																																								R-b
209/250																																																																																																									R-b	R-b
210/250																																																																																																											R-b
211/250																																																																				A-b	R-b	R-b	A-b																																					A-b
212/250
213/250
214/250
215/250																																																																																																		R-b
216/250																																																																																																													R-b
217/250																																																																																																													R-b
218/250																																																																											A-b
219/250
220/250
221/250
222/250																																																																																																														R-b
223/250
224/250
225/250
226/250																																																																																														A-b
227/250																																																																																														R-b
228/250																																																																																																																R-b
229/250																																																																																																																	R-b
230/250
231/250
232/250																																																																				R-b		A-b	R-b
233/250																																																																																																		R-b
234/250																																																																																																		R-b
235/250
236/250																																																																																																																		A-b	T-b	A-b
237/250																																																																																																																		A-b	T-b	A-b
238/250																																																																																																																					T-b
239/250																																																																							A-b																																																						R-b	R-b
240/250																																																																																																																								A-b	A-b
241/250																																																																																																																									A-b
242/250																																																																																																																										R-b	R-b
243/250																																																																																																																												R-b
244/250																																																					A-b
245/250																																																					A-b
246/250																																																					A-b
247/250
248/250
249/250
250/250

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 136 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 000/250] 6.18.45-rc1 review

This is the start of the stable review cycle for the 6.18.45 release. There are 250 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.45-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.45-rc1

Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: ensure sufficient headroom in xmit path

Lorenzo Bianconi <[email protected]>
netfilter: always set route tuple out ifindex

Xu Rao <[email protected]>
thunderbolt: Fix bandwidth group reservation indexing

Bryam Vargas <[email protected]>

    thunderbolt: Bound the DROM dual link port number before indexing sw->ports

Qing Ming <[email protected]>
sctp: clear new_transport when removing a peer

Yuxiang Yang <[email protected]>
sctp: fix use-after-free of cached ASCONF chunk

Baul Lee <[email protected]>

    sctp: keep chunk->transport in step with the list it is queued on

Xu Rao <[email protected]>
scsi: scsi_debug: Negate wrapped memcmp() result

Chengfeng Ye <[email protected]>
bpf, sockmap: Fix sk_redir use-after-free in send verdict

Eric Biggers <[email protected]>
fsverity: Fix silent truncation in bpf_get_fsverity_digest()

Eric Biggers <[email protected]>
fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions

Hugh Dickins <[email protected]>
mm/filemap: __filemap_add_folio() restore index before retrying

Mimi Zohar <[email protected]>
ima: Instantiate file_truncate and path_truncate hooks

Tejun Heo <[email protected]>
sched/psi: Create the psimon kthread outside of cgroup_mutex

Tejun Heo <[email protected]>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

Zhan Xusheng <[email protected]>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()

Zhiling Zou <[email protected]>

    ip6_tunnel: clear skb2->cb[] in ip6ip6_err()

Yuejie Shi <[email protected]>
ipv6: fix Route Information option length validation

Lorenzo Stoakes (ARM) <[email protected]>
mm/ptdump: always stabilise against page table freeing using init_mm

Tengda Wu <[email protected]>
ring-buffer: Use current_context for safe per-CPU buffer swap

Vincent Donnefort <[email protected]>
ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()

Ahmad Byagowi <[email protected]>
ptp: ocp: Fix board ID over-read

Rafael J. Wysocki <[email protected]>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

Steven Rostedt <[email protected]>
eventfs: Use children field for rcu head and add memory barriers

Shuangpeng Bai <[email protected]>
eventfs: Fix use-after-free in eventfs_remove_rec()

Sean Christopherson <[email protected]>
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

Paolo Bonzini <[email protected]>
KVM: SVM: Serialize accesses to the owner and mirror list with separate lock

Shuangpeng Bai <[email protected]>
smb: client: Fix use-after-free in cifs_try_adding_channels()

Jun Yang <[email protected]>

    tipc: read le->link under the node lock in tipc_node_link_down()

chanyoung <[email protected]>
tls: don't leave a full plaintext sk_msg ring unpushed

Jérémy Jean <[email protected]>
tls: rx: restore msg_iter before TLS 1.3 optimistic retry

Jun Yang <[email protected]>
vhost: reset the vring metadata cache on vring reconfiguration

Sun Jian <[email protected]>
veth: fix skb length accounting after XDP frag adjustment

Weiming Shi <[email protected]>
vsock/virtio: avoid refilling the RX queue after teardown

Weiming Shi <[email protected]>
vsock/virtio: read virtqueues under worker locks

Baul Lee <[email protected]>
vxlan: do not arm the ageing timer on a device that is down

Zhiling Zou <[email protected]>
xdp: reject clones that overrun skb_shared_info tailroom

Breno Leitao <[email protected]>
x86/mce: Set up the polling timer before CMCI discovery

Rik van Riel <[email protected]>
x86/CPU: Add a tlbi= cmdline switch

Lorenzo Stoakes (ARM) <[email protected]>
arm64: remove redundant concurrent ptdump UAF mitigation

Hidayath Khan <[email protected]>

    dibs: initialise dibs->lock in dibs_dev_alloc()

Asad Kamal <[email protected]>
Revert "drm/amdgpu: fix aperture mapping leak"

Christian Brauner <[email protected]>
binfmt_misc: don't warn when the mount is completed from another user namespace

Christian Brauner <[email protected]>
ovl: don't warn when the mount is completed from another user namespace

Hyunjung Ko <[email protected]>
net/sched: act_gact, act_police: range check the fallback control action

Hyunjung Ko <[email protected]>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

Yangyu Chen <[email protected]>
net: atlantic: free RX pages of consumed but not refilled buffers

Yangyu Chen <[email protected]>
net: atlantic: free stranded TX buffers on ring deinit

Zihan Xi <[email protected]>
netfilter: nf_conntrack: defer invalid log until after unlock

Zhiling Zou <[email protected]>
netfilter: bridge: release template ct on non-IP path

Pavel Begunkov <[email protected]>
net: devmem: prevent net-iov / page mixing

Baul Lee <[email protected]>
net/x25: fix use-after-free of the socket by its timers

Alexandra Winter <[email protected]>
net/dibs: Correct freeing of dmb_clientid_arr

Kyle Zeng <[email protected]>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev

Daming Li <[email protected]>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice

Ahmed Naseef <[email protected]>
net: phy: mediatek: fix TX blink masks using the RX bits

Lorenzo Stoakes (ARM) <[email protected]>
mm/huge_memory: fix huge_zero_pfn race

Hui Su <[email protected]>
tracing: Fix NULL pointer dereference in module event cache removal

Vincent Donnefort <[email protected]>
ring-buffer: Prevent subbuf order change when resizing is disabled

Rik van Riel <[email protected]>
fbdev: bitblit: bound-check glyph index in bit_cursor()

Michael Wu <[email protected]>
tracing: Fix race between update_event_fields and, event_define_fields

Aditya Chillara <[email protected]>
perf/core: Fix group leader use-after-free after sibling detach

Maíra Canal <[email protected]>
drm/v3d: Serialize the scheduler timeout handlers

Baul Lee <[email protected]>
ALSA: us144mkii: re-anchor capture URBs on resubmission

Xu Rao <[email protected]>
ALSA: hda/tas2781: fix ACPI reference handling

Baul Lee <[email protected]>
ALSA: FCP: fix OOB write in fcp_meter_ctl_get()

Baul Lee <[email protected]>
ALSA: usx2y: bound the hwdep mmap fault offset

Takashi Iwai <[email protected]>
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

SJ Park <[email protected]>

    mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD}

SJ Park <[email protected]>
samples/damon/mtier: error out for zero quota goal target values

liyouhong <[email protected]>
mm/damon/ops-common: putback folios on invalid migrate nid

Hui Su <[email protected]>
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()

Eddie Lin <[email protected]>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free

Junrui Luo <[email protected]>

    misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke

Ekansh Gupta <[email protected]>
misc: fastrpc: Remove buffer from list prior to unmap operation

Anandu Krishnan E <[email protected]>
misc: fastrpc: fix channel ctx ref leak when session alloc fails

Ekansh Gupta <[email protected]>
misc: fastrpc: Fix initial memory allocation for Audio PD memory pool

Mariano Baragiola <[email protected]>
staging: rtl8723bs: validate monitor transmit frame lengths

Panagiotis Petrakopoulos <[email protected]>
staging: rtl8723bs: fix missing shared-key auth challenge length check

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in WMM_param_handler()

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()

Fan Wu <[email protected]>
serial: amba-pl011: synchronize DMA teardown

Fan Wu <[email protected]>
serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ

Fan Wu <[email protected]>
serial: amba-pl011: fix indefinite RS485 post-send delay

Ryan Wilbur <[email protected]>
serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

Cunhao Lu <[email protected]>
serial: 8250_dma: Clear stale RX state on shutdown

Jan Sebastian Götte <[email protected]>
serial: qcom-geni: fix TX DMA buffer flush

Alice Ryhl <[email protected]>
rust_binder: do not query current thread for all ioctls

Mathieu Dubois-Briand <[email protected]>
nvmem: layouts: Add fixed-layout driver

Aelin Reidel <[email protected]>
nvmem: apple-spmi-nvmem: wrap regmap calls to satisfy CFI

Alexander Usyskin <[email protected]>
mei: pull kvfree out of spinlock

Chengfeng Ye <[email protected]>
ipv4: fix use-after-free in fib_nhc_update_mtu()

Zihan Xi <[email protected]>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops

Michal Luczaj <[email protected]>
selftests/bpf: Adapt sockmap update error handling

Michal Luczaj <[email protected]>
selftests/bpf: Ensure UDP sockets are bound

Nils Helmig <[email protected]>
Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV

Alexej Sidorenko <[email protected]>
Bluetooth: btrtl: fix RTL8761B/BU broken LE extended scan

Florian Westphal <[email protected]>
netfilter: nf_tables: avoid softlockup warnings in nft_chain_validate

Keno Fischer <[email protected]>
futex: Prevent robust futex exit race some more

Jose Fernandez (Anthropic) <[email protected]>
iommu/vt-d: Gather the unmapped range before freeing its page tables

Harshal Dev <[email protected]>
dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk

Matthew Rosato <[email protected]>
KVM: s390: pci: Fix aisb calculation

Keith Busch <[email protected]>
blk-mq: reinsert cached request to the list

Keith Busch <[email protected]>
blk-mq: pop cached request if it is usable

Alex Deucher <[email protected]>
Revert "drm/amd/display: Fix backlight max_brightness to match exported range"

Baul Lee <[email protected]>
net: bridge: mrp: fix uninitialised bytes on the wire

Chengfeng Ye <[email protected]>
netfilter: ebt_nflog: pin the NFLOG backend

Philipp David <[email protected]>
igc: fix netdev not re-attached after resume if interface is down

Zihan Xi <[email protected]>
mac802154: fix netdev use-after-free in beacon worker

Zhiling Zou <[email protected]>
inet: frags: publish queues before arming timer

Qihang Tang <[email protected]>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header

Sergey V. Frolov <[email protected]>
net: octeontx2-pf: Fix UB in shift operation

Zijie Huang <[email protected]>
net/sched: reject overly deep qdisc hierarchies

Zhiling Zou <[email protected]>
net: openvswitch: reallocate update replies for mismatched IDs

Sun Jian <[email protected]>
net: fix skb length accounting after generic XDP frag adjustment

Zihan Xi <[email protected]>
packet: synchronize pressure clearing with ring reconfiguration

Doruk Tan Ozturk <[email protected]>
net/packet: reset the MAC header on the packet-socket transmit path

Qihang Tang <[email protected]>
packet: use consistent hard_header_len in TX_RING send path

Qihang Tang <[email protected]>
packet: use consistent hard_header_len in non-ring send paths

Kyle Zeng <[email protected]>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors

Julian Anastasov <[email protected]>
ipvs: properly update the overload flag on dest edit

Julian Anastasov <[email protected]>
ipvs: add totalconns for dest

Zhiling Zou <[email protected]>
ipvs: stop estimator after disabled calc phase

Lincoln Wallace <[email protected]>
ima: fix out-of-bounds read in xattr_verify()

Lorenzo Stoakes (ARM) <[email protected]>
mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF

Dmitry Torokhov <[email protected]>
Input: evdev - fix information leak in evdev_pass_values()

Joshua Rogers <[email protected]>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

Joshua Rogers <[email protected]>
vt: add permission check for KDSKBMETA ioctl

Doruk Tan Ozturk <[email protected]>
net: usb: ipheth: fix carrier_work UAF on disconnect

Yi Cong <[email protected]>

    net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()

Sonali Pradhan <[email protected]>
usb: gadget: f_ncm: Use unsigned int for ndp_index

Pawel Laszczak <[email protected]>
usb: cdnsp: fix incorrect endian conversions for APB timeout register

Xu Rao <[email protected]>
thunderbolt: icm: Preserve USB4 proxy data-valid bit

Aleksandr Nogikh <[email protected]>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()

Jiangshan Yi <[email protected]>
usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg

Ishaan Dandekar <[email protected]>
usb: quirks: Add ShanWan gamepad to quirk list

Nikhil Solanke <[email protected]>
usb: core: Add quirk for 255-bytes initial config read

Baul Lee <[email protected]>
ALSA: usb-audio: fix OOB write on Type II inbound URBs

Dmitry Torokhov <[email protected]>
Input: evdev - sanitize event type index when fetching event masks

Dongli Zhang <[email protected]>

    net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()

Mehmet Fide <[email protected]>
net: fec: do not release NULL pages when RX buffer allocation fails

Guenter Roeck <[email protected]>
hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt

Guenter Roeck <[email protected]>
hwmon: (ltc4282) Clamp negative current limits

Guenter Roeck <[email protected]>
hwmon: (ltc4282) Avoid overflow in maximum power calculation

Qingshuang Fu <[email protected]>
hwmon: (ads7828) Fix external VREF regulator handling

Wilken Gottwalt <[email protected]>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination

Hongyan Xu <[email protected]>
watchdog: at91sam9_wdt: prevent timer rearm during teardown

Maximilian Immanuel Brandtner <[email protected]>
tls: don't abort the connection on signal-interrupted sends

Xin Long <[email protected]>
sctp: clear control chunk transport if it is being removed

Eric Dumazet <[email protected]>
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()

Alexandra Winter <[email protected]>
s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

Bhargava Marreddy <[email protected]>
bnge: Fix resource leak in bnge_init_nic() error path

Hongyan Xu <[email protected]>
ata: pata_sl82c105: fix bridge revision use-after-free

Fan XinRan <[email protected]>
net: thunderbolt: Tear down DMA paths before stopping the rings

Sidraya Jayagond <[email protected]>
net/smc: fix TOCTOU race between smc_listen_out() and listener close

Eric Dumazet <[email protected]>
net: remove WARN_ON_ONCE() from sk_mc_loop()

Pengpeng Hou <[email protected]>
net: prestera: validate firmware header length

Henry Martin <[email protected]>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length

Eric Dumazet <[email protected]>
netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()

Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: consolidate xmit path

Jiayuan Chen <[email protected]>
tcp: fix TFO max_qlen accounting across reuseport migration

Qing Luo <[email protected]>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure

Keegan Freyhof <[email protected]>
bnxt_en: Fix PTP PPS setting bug

Michael Chan <[email protected]>
bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

Shravya KN <[email protected]>
bnxt_en: Refresh VNIC default ring on queue restart if needed

Shravya KN <[email protected]>
bnxt_en: Determine and store default RX ring in vnic structure

Shravya KN <[email protected]>
bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()

Bobby Eshleman <[email protected]>
net/mlx5e: fix BQL reset on SQ re-activation

Alok Tiwari <[email protected]>
bnge: use int for bnge_fix_rings_count() return value

Stefan Agner <[email protected]>
net: stmmac: resume PHY before hardware setup when opening the interface

Martin Kaiser <[email protected]>
selftests/ftrace: refactor eprobes test to fix argument checks

Guenter Roeck <[email protected]>
hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations

Qingshuang Fu <[email protected]>
hwmon: (nzxt-smart2) Check return value of init_device() in probe

Marcin Bernatowicz <[email protected]>
drm/xe/uc: Apply RCS/CCS yield policy to SR-IOV VFs

Jamal Hadi Salim <[email protected]>
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers

Cen Zhang (Microsoft) <[email protected]>
net/openvswitch: check Ethernet header length in key_extract()

Jia Jia <[email protected]>
vhost-scsi: reject feature changes after endpoint

Linfeng Sun <[email protected]>
vhost-scsi: Validate T10 PI scatterlist counts

Toke Høiland-Jørgensen <[email protected]>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter

Xuanqiang Luo <[email protected]>
udp: fix potential use-after-free in tunnel segmentation

Stanislav Fomichev <[email protected]>
xsk: validate metadata when processing requests

Stanislav Fomichev <[email protected]>
xsk: move xsk_tx_metadata_request() to xdp_sock_drv.h

Stanislav Fomichev <[email protected]>
xsk: validate launch-time metadata size

Stanislav Fomichev <[email protected]>
xsk: clear metadata pointer when no timestamp is requested

Stanislav Fomichev <[email protected]>
xsk: pass TX metadata pointer by reference

Stanislav Fomichev <[email protected]>
xsk: require at least 16 bytes of TX metadata

Will Chen <[email protected]>
bnxt: fix memory leak in bnxt_queue_mem_alloc error cases

Pavel Begunkov <[email protected]>
eth: bnxt: support qcfg provided rx page size

Pavel Begunkov <[email protected]>
eth: bnxt: store rx buffer size per queue

Pavel Begunkov <[email protected]>
net: pass queue rx page size from memory provider

Pavel Begunkov <[email protected]>
net: add bare bone queue configs

Jakub Kicinski <[email protected]>
net: reduce indent of struct netdev_queue_mgmt_ops members

Michael Chan <[email protected]>
bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips

Nathan Gao <[email protected]>
tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()

Guenter Roeck <[email protected]>
hwmon: (pmbus) Fix type confusion in notification logic

Guenter Roeck <[email protected]>
hwmon: (pmbus_core) Use guard() for mutex protection

Christian Borntraeger <[email protected]>
vdpa/mlx5: Fix buffer length in create_direct_keys()

Yousef Alhouseen <[email protected]>
vhost/vdpa: reject overflowing PA map page counts on 32-bit

Jose Fernandez (Anthropic) <[email protected]>
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()

Babanpreet Singh <[email protected]>
counter: microchip-tcb-capture: Fix DT channel validation

Michael Guralnik <[email protected]>
net/mlx5: fw_tracer, return NULL on create error

Or Har-Toov <[email protected]>
devlink: fix net namespace reference leak in reload

Jiawen Liu <[email protected]>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete

Jamal Hadi Salim <[email protected]>
net/sched: cls_route: fix fastmap use-after-free on filter

Mahanta Jambigi <[email protected]>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

Yiyang Chen <[email protected]>
bpf: Propagate untrusted pointer state in commuted arithmetic

Eduard Zingerman <[email protected]>
bpf: split check_reg_sane_offset() in two parts

Yiyang Chen <[email protected]>
bpf: Preserve pointer state for commuted arithmetic

Dmitry Antipov <[email protected]>
btrfs: fix memory leak in btrfs_do_encoded_write()

Matti Vaittinen <[email protected]>
watchdog: bd96801_wdt: Fix timeout for enabled WDG

Julian Anastasov <[email protected]>
ipvs: return the csum validation for forward hook

Julian Anastasov <[email protected]>
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp

Jozsef Kadlecsik <[email protected]>
netfilter: ipset: switch ext_size to atomic64_t

Nikhil P. Rao <[email protected]>
pds_core: cancel pending PCI reset work on AER recovery

Nikhil P. Rao <[email protected]>
pds_core: keep the health thread stopped during reset

Shay Drory <[email protected]>
net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

Satish Kharat <[email protected]>
enic: fix tx_hang_reset use-after-free on device removal

Xiang Mei (Microsoft) <[email protected]>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor

Fan Ye <[email protected]>
Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"

Jijie Shao <[email protected]>
net: hns3: fix speed configuration residue after driver reload

Pengpeng Hou <[email protected]>
drm/bridge: ps8640: propagate AUX transfer register errors

Qingfang Deng <[email protected]>
ovpn: fix incorrect use of rcu_access_pointer()

Antonio Quartulli <[email protected]>
ovpn: ensure TCP vars are initialized first

Antonio Quartulli <[email protected]>
ovpn: disable IPv4 redirects on MP interfaces

Antonio Quartulli <[email protected]>
ovpn: hash floated peer by transport identity only

Antonio Quartulli <[email protected]>
ovpn: zero-initialize sockaddr before learning a floated endpoint

Antonio Quartulli <[email protected]>
ovpn: ensure socket is owned by ovpn before deref sk_user_data

Antonio Quartulli <[email protected]>
ovpn: rehash peer in by_transp_addr table on CMD_PEER_SET

Antonio Quartulli <[email protected]>
ovpn: skip rehash for peers already removed from by_id

Rosen Penev <[email protected]>
ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt

Ralf Lici <[email protected]>

    ovpn: add missing rtnl_link_ops->get_size callback

Hans Ulli Kroll <[email protected]>
pinctrl: qcom: ipq806x: mark pci reset as a GPIO pin function

Hans Ulli Kroll <[email protected]>
pinctrl: qcom: ipq806x: mark gpio as a GPIO pin function

Kuba Piecuch <[email protected]>
selftests/sched_ext: Handle sleeping task affinity changes in numa test

Yuho Choi <[email protected]>
ARM: npcm: Fix OF node refcount leaks in SMP setup

Yun Zhou <[email protected]>
xfs: handle NULL b_addr in xfs_buf_free

Daniel Drake <[email protected]>
arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer

Anna Schumaker <[email protected]>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

Dmitry Baryshkov <[email protected]>
arm64: dts: qcom: sdm850-lenovo-yoga-c630: lower PSCI cluster idle

Akhil P Oommen <[email protected]>
arm64: dts: qcom: purwa: Fix GPU IOMMU property

Dmitry Baryshkov <[email protected]>

    arm64: dts: qcom: rename x1p42100 to purwa

Aleksandrs Vinarskis <[email protected]>
arm64: dts: qcom: Rework X1-based Asus Zenbook A14's displays

Dmitry Baryshkov <[email protected]>

    arm64: dts: qcom: rename x1e80100 to hamoa

Ray Wu <[email protected]>
drm/amd/display: Check for tg ops in dce110_set_avmute

Ray Wu <[email protected]>
drm/amd/display: Add AV mute wait frames to dce110_set_avmute

Michal Luczaj <[email protected]>
selftests/bpf: Fail unbound UDP on sockmap update

Peter Zijlstra <[email protected]>
sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag")

Ingo Molnar <[email protected]>

    sched/fair: Separate se->vlag from se->vprot

Al Viro <[email protected]>
mount: honour SB_NOUSER in the new mount API

Farhan Ali <[email protected]>
KVM: s390: pci: Fix resource leak on IRQ registration failure

-------------

Diffstat:

 Documentation/admin-guide/kernel-parameters.txt    |   9 +
 .../bindings/crypto/qcom,inline-crypto-engine.yaml |  16 +-
 MAINTAINERS                                        |   5 +
 Makefile                                           |   4 +-
 arch/arm/boot/dts/broadcom/bcm-ns.dtsi             |   2 +-
 arch/arm/mach-npcm/platsmp.c                       |   2 +
 arch/arm64/boot/dts/broadcom/bcm2712.dtsi          |   2 -
 arch/arm64/boot/dts/qcom/Makefile                  |   2 +
 arch/arm64/boot/dts/qcom/hamoa-iot-som.dtsi        |   4 +-
 .../qcom/{x1e80100-pmics.dtsi => hamoa-pmics.dtsi} |   0
 .../boot/dts/qcom/{x1e80100.dtsi => hamoa.dtsi}    |   0
 .../boot/dts/qcom/{x1p42100.dtsi => purwa.dtsi}    |   6 +-
 .../boot/dts/qcom/sdm850-lenovo-yoga-c630.dts      |   4 +
 arch/arm64/boot/dts/qcom/x1-asus-zenbook-a14.dtsi  |   9 +-
 arch/arm64/boot/dts/qcom/x1-crd.dtsi               |   2 +-
 arch/arm64/boot/dts/qcom/x1-dell-thena.dtsi        |   2 +-
 arch/arm64/boot/dts/qcom/x1e001de-devkit.dts       |   4 +-
 .../dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi    |   4 +-
 .../boot/dts/qcom/x1e80100-asus-vivobook-s15.dts   |   4 +-
 .../boot/dts/qcom/x1e80100-asus-zenbook-a14.dts    |  10 +-
 arch/arm64/boot/dts/qcom/x1e80100-crd.dts          |   2 +-
 .../qcom/x1e80100-dell-inspiron-14-plus-7441.dts   |   2 +-
 .../boot/dts/qcom/x1e80100-dell-latitude-7455.dts  |   2 +-
 .../boot/dts/qcom/x1e80100-dell-xps13-9345.dts     |   4 +-
 .../boot/dts/qcom/x1e80100-hp-omnibook-x14.dts     |   4 +-
 .../boot/dts/qcom/x1e80100-lenovo-yoga-slim7x.dts  |   4 +-
 .../boot/dts/qcom/x1e80100-microsoft-romulus.dtsi  |   4 +-
 arch/arm64/boot/dts/qcom/x1e80100-qcp.dts          |   4 +-
 .../dts/qcom/x1p42100-asus-zenbook-a14-lcd.dts     |  62 ++++
 .../boot/dts/qcom/x1p42100-asus-zenbook-a14.dts    | 133 +-------
 .../boot/dts/qcom/x1p42100-asus-zenbook-a14.dtsi   | 138 +++++++++
 arch/arm64/boot/dts/qcom/x1p42100-crd.dts          |   2 +-
 .../boot/dts/qcom/x1p42100-hp-omnibook-x14.dts     |   4 +-
 .../boot/dts/qcom/x1p42100-lenovo-thinkbook-16.dts |   4 +-
 arch/arm64/include/asm/ptdump.h                    |   2 -
 arch/arm64/mm/mmu.c                                |  43 +--
 arch/arm64/mm/ptdump.c                             |  11 +-
 arch/s390/kvm/pci.c                                |  31 +-
 arch/x86/kernel/cpu/common.c                       |  10 +
 arch/x86/kernel/cpu/mce/core.c                     |   2 +-
 arch/x86/kvm/mmu/mmu.c                             |   3 +
 arch/x86/kvm/svm/sev.c                             |  34 ++-
 arch/x86/kvm/svm/svm.h                             |   1 +
 block/blk-mq.c                                     |  34 +--
 drivers/android/binder/process.rs                  |  12 +-
 drivers/ata/pata_sl82c105.c                        |   4 +-
 drivers/bluetooth/btrtl.c                          |  13 +
 drivers/bluetooth/btusb.c                          |   2 +
 drivers/counter/microchip-tcb-capture.c            |   4 +-
 drivers/dibs/dibs_loopback.c                       |   1 -
 drivers/dibs/dibs_main.c                           |  16 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  35 ++-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   6 +-
 .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c  |  24 +-
 drivers/gpu/drm/bridge/parade-ps8640.c             |  27 +-
 drivers/gpu/drm/v3d/v3d_drv.h                      |   6 +
 drivers/gpu/drm/v3d/v3d_sched.c                    |   9 +-
 drivers/gpu/drm/xe/xe_uc.c                         |   7 +-
 drivers/hwmon/ads7828.c                            |  11 +-
 drivers/hwmon/corsair-psu.c                        |   4 +-
 drivers/hwmon/ltc4282.c                            |  20 +-
 drivers/hwmon/nzxt-smart2.c                        |   6 +-
 drivers/hwmon/pmbus/lm25066.c                      |   5 +-
 drivers/hwmon/pmbus/pmbus_core.c                   | 340 +++++++++------------
 drivers/input/evdev.c                              |  27 +-
 drivers/iommu/intel/iommu.c                        |  11 +-
 drivers/misc/fastrpc.c                             |  27 +-
 drivers/misc/mei/client.c                          |  25 +-
 drivers/net/bonding/bond_alb.c                     |  10 +-
 drivers/net/ethernet/amd/pds_core/core.h           |   1 +
 drivers/net/ethernet/amd/pds_core/main.c           |  14 +-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.c   |  51 +++-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.h   |   1 +
 drivers/net/ethernet/aquantia/atlantic/aq_vec.c    |   2 +-
 drivers/net/ethernet/broadcom/bnge/bnge_netdev.c   |   2 -
 drivers/net/ethernet/broadcom/bnge/bnge_resc.c     |   3 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          | 163 +++++++---
 drivers/net/ethernet/broadcom/bnxt/bnxt.h          |   4 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c      |   7 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c      |   6 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h      |   2 +-
 drivers/net/ethernet/cisco/enic/enic_main.c        |   5 +-
 drivers/net/ethernet/freescale/fec_main.c          |  11 +-
 drivers/net/ethernet/google/gve/gve_main.c         |   9 +-
 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c      |   1 -
 .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c    |   6 +-
 drivers/net/ethernet/intel/igc/igc_main.c          |  10 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c   |   6 +-
 .../net/ethernet/marvell/prestera/prestera_pci.c   |   3 +
 .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c   |  16 +-
 drivers/net/ethernet/mellanox/mlx5/core/en.h       |   2 +-
 .../net/ethernet/mellanox/mlx5/core/en/tc_priv.h   |   1 +
 drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c   |  15 +-
 drivers/net/ethernet/mellanox/mlx5/core/en/xdp.h   |   4 +-
 .../net/ethernet/mellanox/mlx5/core/en/xsk/tx.c    |   2 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |  14 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_tc.c    |   4 +-
 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c       |   8 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  13 +-
 drivers/net/netdevsim/netdev.c                     |   7 +-
 drivers/net/ovpn/main.c                            |  64 ++--
 drivers/net/ovpn/netlink.c                         |   6 +
 drivers/net/ovpn/peer.c                            | 172 ++++++++---
 drivers/net/ovpn/peer.h                            |   1 +
 drivers/net/ovpn/socket.c                          |   9 +
 drivers/net/phy/mediatek/mtk.h                     |   8 +-
 drivers/net/tap.c                                  |  24 +-
 drivers/net/thunderbolt/main.c                     |  33 +-
 drivers/net/usb/ax88179_178a.c                     |   4 +-
 drivers/net/usb/ipheth.c                           |  11 +-
 drivers/net/veth.c                                 |  22 +-
 drivers/net/vxlan/vxlan_core.c                     |   2 +-
 drivers/nvmem/apple-spmi-nvmem.c                   |  20 +-
 drivers/nvmem/core.c                               |  24 +-
 drivers/nvmem/internals.h                          |   2 +
 drivers/nvmem/layouts.c                            |  11 -
 drivers/nvmem/layouts/Makefile                     |   1 +
 drivers/nvmem/layouts/fixed-layout.c               |  58 ++++
 drivers/pinctrl/qcom/pinctrl-ipq8064.c             |   8 +-
 drivers/pinctrl/qcom/pinctrl-msm.h                 |   5 +
 drivers/ptp/ptp_ocp.c                              |   4 +-
 drivers/s390/net/ism_drv.c                         |  19 +-
 drivers/scsi/scsi_debug.c                          |   4 +-
 drivers/staging/rtl8723bs/core/rtw_ieee80211.c     |   3 +
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |   2 +-
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c     |   3 +
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |   4 +
 drivers/thermal/thermal_hwmon.c                    |   3 +-
 drivers/thunderbolt/eeprom.c                       |   9 +-
 drivers/thunderbolt/icm.c                          |   2 +-
 drivers/thunderbolt/tb.c                           |   2 +-
 drivers/tty/serial/8250/8250_dma.c                 |  12 +-
 drivers/tty/serial/8250/8250_of.c                  |  38 +++
 drivers/tty/serial/amba-pl011.c                    |  86 ++++--
 drivers/tty/serial/qcom_geni_serial.c              |  43 +--
 drivers/tty/vt/keyboard.c                          |   5 +-
 drivers/tty/vt/vt_ioctl.c                          |   2 +
 drivers/usb/atm/cxacru.c                           |   2 +
 drivers/usb/cdns3/cdnsp-gadget.c                   |   4 +-
 drivers/usb/core/config.c                          |  32 +-
 drivers/usb/core/quirks.c                          |   7 +
 drivers/usb/gadget/function/f_ncm.c                |   2 +-
 drivers/usb/misc/usbio.c                           |   2 +-
 drivers/vdpa/mlx5/core/mr.c                        |   3 +-
 drivers/vhost/scsi.c                               |  17 ++
 drivers/vhost/vdpa.c                               |   9 +-
 drivers/vhost/vhost.c                              |   8 +
 drivers/video/fbdev/core/bitblit.c                 |   9 +-
 drivers/watchdog/at91sam9_wdt.c                    |   4 +-
 drivers/watchdog/bd96801_wdt.c                     |   5 +-
 fs/binfmt_misc.c                                   |   3 +-
 fs/btrfs/inode.c                                   |   1 +
 fs/crypto/policy.c                                 |   2 +-
 fs/namespace.c                                     |   5 +
 fs/nfs/nfs4proc.c                                  |   5 +
 fs/overlayfs/super.c                               |   3 +-
 fs/smb/client/sess.c                               |   2 +-
 fs/tracefs/event_inode.c                           |  28 +-
 fs/tracefs/internal.h                              |   4 +-
 fs/verity/measure.c                                |  15 +-
 fs/xfs/xfs_buf.c                                   |   2 +-
 include/linux/dibs.h                               |   2 +-
 include/linux/mmap_lock.h                          |   1 +
 include/linux/netdevice.h                          |  11 +-
 include/linux/netfilter/ipset/ip_set.h             |   2 +-
 include/linux/nvmem-provider.h                     |   6 +
 include/linux/psi.h                                |   4 +-
 include/linux/sched.h                              |  13 +-
 include/linux/usb/quirks.h                         |   3 +
 include/net/act_api.h                              |  19 ++
 include/net/addrconf.h                             |   4 +-
 include/net/ip_vs.h                                |  41 +--
 include/net/libeth/xsk.h                           |   2 +-
 include/net/netdev_queues.h                        |  47 ++-
 include/net/netdev_rx_queue.h                      |   2 +
 include/net/netfilter/nf_flow_table.h              |   1 +
 include/net/page_pool/types.h                      |   1 +
 include/net/route.h                                |   2 +
 include/net/sch_generic.h                          |   1 +
 include/net/xdp_sock.h                             |  47 +--
 include/net/xdp_sock_drv.h                         |  77 ++++-
 kernel/bpf/verifier.c                              |  68 +++--
 kernel/cgroup/cgroup.c                             |  23 +-
 kernel/events/core.c                               |  67 ++--
 kernel/futex/core.c                                |  85 ++++--
 kernel/sched/fair.c                                | 148 +++++++--
 kernel/sched/psi.c                                 |  75 ++++-
 kernel/trace/ring_buffer.c                         |  13 +-
 kernel/trace/trace_events.c                        |   4 +-
 mm/damon/ops-common.c                              |  13 +-
 mm/damon/paddr.c                                   |   2 +
 mm/damon/vaddr.c                                   |   3 +-
 mm/filemap.c                                       |   6 +
 mm/huge_memory.c                                   |  49 +--
 mm/pagewalk.c                                      |  36 ++-
 mm/ptdump.c                                        |   7 +
 mm/vmalloc.c                                       |  40 ++-
 net/atm/common.c                                   |  14 +-
 net/bridge/br_mrp.c                                |   6 +-
 net/bridge/netfilter/ebt_nflog.c                   |  17 +-
 net/bridge/netfilter/nf_conntrack_bridge.c         |   1 +
 net/core/datagram.c                                |   3 +
 net/core/dev.c                                     |  27 +-
 net/core/netdev_rx_queue.c                         |  21 +-
 net/core/sock.c                                    |   1 -
 net/core/xdp.c                                     |   2 +-
 net/devlink/dev.c                                  |   1 +
 net/ipv4/fib_semantics.c                           | 101 +++---
 net/ipv4/inet_connection_sock.c                    |  20 +-
 net/ipv4/inet_fragment.c                           |  10 +-
 net/ipv4/route.c                                   |  29 ++
 net/ipv4/tcp_bpf.c                                 |   2 +
 net/ipv4/tcp_input.c                               |   2 +-
 net/ipv4/tcp_ipv4.c                                |  43 +--
 net/ipv4/udp_offload.c                             |   4 +-
 net/ipv6/ip6_tunnel.c                              |   3 +
 net/ipv6/route.c                                   |   8 +-
 net/mac802154/scan.c                               |   4 +
 net/ncsi/ncsi-netlink.c                            |   4 +
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   4 +-
 net/netfilter/ipset/ip_set_core.c                  |   6 +-
 net/netfilter/ipset/ip_set_hash_gen.h              |   2 +-
 net/netfilter/ipset/ip_set_list_set.c              |   4 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |  41 +--
 net/netfilter/ipvs/ip_vs_core.c                    |  70 ++---
 net/netfilter/ipvs/ip_vs_ctl.c                     |  77 ++++-
 net/netfilter/ipvs/ip_vs_est.c                     |  10 +-
 net/netfilter/ipvs/ip_vs_lc.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_proto_sctp.c              |   4 +-
 net/netfilter/ipvs/ip_vs_proto_tcp.c               |   2 -
 net/netfilter/ipvs/ip_vs_sync.c                    |   7 +-
 net/netfilter/ipvs/ip_vs_xmit.c                    |   2 +-
 net/netfilter/nf_conntrack_proto.c                 |   6 +
 net/netfilter/nf_conntrack_proto_sctp.c            |  12 +-
 net/netfilter/nf_conntrack_proto_tcp.c             | 132 +++++---
 net/netfilter/nf_flow_table_core.c                 |   1 +
 net/netfilter/nf_flow_table_ip.c                   |  95 ++++--
 net/netfilter/nf_flow_table_path.c                 |   9 +-
 net/netfilter/nf_tables_api.c                      |   4 +-
 net/openvswitch/datapath.c                         |  29 +-
 net/openvswitch/flow.c                             |  11 +-
 net/packet/af_packet.c                             |  72 +++--
 net/sched/act_ct.c                                 |  29 +-
 net/sched/act_gact.c                               |   5 +
 net/sched/act_police.c                             |   6 +
 net/sched/cls_api.c                                |  17 +-
 net/sched/cls_route.c                              |  35 ++-
 net/sched/sch_api.c                                |   9 +
 net/sched/sch_cake.c                               |   1 -
 net/sctp/associola.c                               |  11 +-
 net/sctp/outqueue.c                                |   1 +
 net/sctp/sm_make_chunk.c                           |   3 +-
 net/sctp/sm_statefuns.c                            |   6 +-
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc_llc.c                                  |   3 +-
 net/smc/smc_rx.c                                   |  19 +-
 net/tipc/node.c                                    |  15 +-
 net/tls/tls_sw.c                                   |  18 +-
 net/vmw_vsock/virtio_transport.c                   |  14 +-
 net/x25/af_x25.c                                   |   4 +-
 net/x25/x25_timer.c                                |  25 +-
 net/xdp/xdp_umem.c                                 |   2 +
 net/xdp/xsk.c                                      |  11 +-
 net/xdp/xsk_buff_pool.c                            |   6 +-
 samples/damon/mtier.c                              |   3 +
 security/integrity/ima/ima_appraise.c              |   9 +-
 security/integrity/ima/ima_main.c                  |  39 +++
 sound/hda/codecs/side-codecs/tas2781_hda_spi.c     |   3 +-
 sound/usb/endpoint.c                               |   6 +-
 sound/usb/fcp.c                                    |  10 +-
 sound/usb/midi2.c                                  |   9 +
 sound/usb/usx2y/us144mkii_capture.c                |   1 +
 sound/usb/usx2y/usX2Yhwdep.c                       |   2 +
 sound/usb/usx2y/usx2yhwdeppcm.c                    |   2 +
 .../selftests/bpf/prog_tests/sockmap_basic.c       |   6 +-
 .../selftests/bpf/prog_tests/sockmap_listen.c      |  21 +-
 tools/testing/selftests/bpf/test_maps.c            |  13 +-
 .../ftrace/test.d/dynevent/add_remove_eprobe.tc    |  16 +-
 tools/testing/selftests/net/tls.c                  |  57 ++++
 tools/testing/selftests/sched_ext/numa.bpf.c       |  13 +-
 281 files changed, 3279 insertions(+), 1604 deletions(-)

Read the cover letter in its thread