Skip to content

7.1.9-rc1 review

Greg Kroah-Hartman linux-patches lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest271 patches 14 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/271mount: honour SB_NOUSER in the new mount APIfs/namespace.c+4 -00 replies
2/271selftests/bpf: Fail unbound UDP on sockmap updatetools/testing/selftests/bpf/test_maps.c+6 -70 replies
3/271selftests/bpf: Add tests for sleepable tracepoint programstools/testing/selftests/bpf/verifier/sleepable.c+15 -20 replies
4/271gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lockdrivers/gpio/gpio-pca953x.c+14 -50 replies
5/271drm/amd/display: Add AV mute wait frames to dce110_set_avmutedrivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c+20 -10 replies
6/271drm/amd/display: Check for tg ops in dce110_set_avmutedrivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c+4 -10 replies
7/271arm64: dts: qcom: glymur: fix PCIe SMMU interruptsarch/arm64/boot/dts/qcom/glymur.dtsi+3 -30 replies
8/271arm64: dts: qcom: glymur: fix QUP serial engine IRQsarch/arm64/boot/dts/qcom/glymur.dtsi+13 -130 replies
9/271arm64: dts: qcom: purwa: Fix GPU IOMMU propertyarch/arm64/boot/dts/qcom/purwa.dtsi+2 -00 replies
10/271arm64: dts: qcom: monaco: Add default GIC address cellsarch/arm64/boot/dts/qcom/monaco.dtsi+1 -00 replies
11/271arm64: dts: qcom: sm8650: Fix IPA IMEM slicearch/arm64/boot/dts/qcom/sm8650.dtsi+2 -20 replies
12/271arm64: dts: qcom: sdm850-lenovo-yoga-c630: lower PSCI cluster idlearch/arm64/boot/dts/qcom/sdm850-lenovo-yoga-c630.dts+4 -00 replies
13/271sched_ext: Reject setting disallow from init_task outside the enable pathinclude/linux/sched/ext.h kernel/sched/ext.c+8 -50 replies
14/271sched_ext: Skip sub-disable teardown for never-linked sub-schedulerskernel/sched/ext.c+12 -20 replies
15/271sched_ext: Dont enable non-ext tasks in the sub-sched task loopskernel/sched/ext.c+16 -50 replies
16/271NFS: Pin the struct nfs_server during a FREE_STATEID callfs/nfs/nfs4proc.c+5 -00 replies
17/271NFS: Decrement refcounts if allocating nfs_free_stateid_data failsfs/nfs/nfs4proc.c+13 -70 replies
18/271arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timerarch/arm64/boot/dts/broadcom/bcm2712.dtsi+0 -20 replies
19/271soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_readdrivers/soc/aspeed/Makefile drivers/soc/aspeed/aspeed-lpc-snoop.c+27 -120 replies
20/271xfs: handle NULL b_addr in xfs_buf_freefs/xfs/xfs_buf.c+1 -10 replies
21/271ARM: npcm: Fix OF node refcount leaks in SMP setuparch/arm/mach-npcm/platsmp.c+2 -00 replies
22/271selftests/sched_ext: Handle sleeping task affinity changes in numa testtools/testing/selftests/sched_ext/numa.bpf.c+12 -10 replies
23/271pinctrl: qcom: ipq806x: mark gpio as a GPIO pin functiondrivers/pinctrl/qcom/pinctrl-ipq8064.c drivers/pinctrl/qcom/pinctrl-msm.h+6 -10 replies
24/271pinctrl: qcom: ipq806x: mark pci reset as a GPIO pin functiondrivers/pinctrl/qcom/pinctrl-ipq8064.c+3 -30 replies
25/271ovpn: add missing rtnl_link_ops->get_size callbackdrivers/net/ovpn/main.c+7 -00 replies
26/271ARM: dts: BCM5301X: fix PCIe controller 2 second interruptarch/arm/boot/dts/broadcom/bcm-ns.dtsi+1 -10 replies
27/271ovpn: skip rehash for peers already removed from by_iddrivers/net/ovpn/peer.c+43 -300 replies
28/271ovpn: rehash peer in by_transp_addr table on CMD_PEER_SETdrivers/net/ovpn/netlink.c drivers/net/ovpn/peer.c drivers/net/ovpn/peer.h+79 -330 replies
29/271ovpn: ensure socket is owned by ovpn before deref sk_user_datadrivers/net/ovpn/socket.c+9 -00 replies
30/271ovpn: zero-initialize sockaddr before learning a floated endpointdrivers/net/ovpn/peer.c+23 -80 replies
31/271ovpn: hash floated peer by transport identity onlydrivers/net/ovpn/peer.c+21 -40 replies
32/271ovpn: disable IPv4 redirects on MP interfacesdrivers/net/ovpn/main.c+35 -150 replies
33/271ovpn: ensure TCP vars are initialized firstdrivers/net/ovpn/main.c+4 -30 replies
34/271ovpn: fix incorrect use of rcu_access_pointer()drivers/net/ovpn/peer.c+1 -10 replies
35/271drm/bridge: ps8640: propagate AUX transfer register errorsdrivers/gpu/drm/bridge/parade-ps8640.c+21 -60 replies
36/271net: hns3: fix speed configuration residue after driver reloaddrivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c+1 -50 replies
37/271Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"drivers/net/thunderbolt/main.c+7 -60 replies
38/271bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitordrivers/net/bonding/bond_alb.c+6 -40 replies
39/271enic: fix tx_hang_reset use-after-free on device removaldrivers/net/ethernet/cisco/enic/enic_main.c+3 -20 replies
40/271net/mlx5e: TC, Check if flow is PEER before acquiring devcom lockdrivers/net/ethernet/mellanox/mlx5/core/en/tc_priv.h drivers/net/ethernet/mellanox/mlx5/core/en_tc.c+4 -10 replies
41/271pds_core: keep the health thread stopped during resetdrivers/net/ethernet/amd/pds_core/core.h drivers/net/ethernet/amd/pds_core/main.c+9 -20 replies
42/271pds_core: cancel pending PCI reset work on AER recoverydrivers/net/ethernet/amd/pds_core/main.c+4 -00 replies
43/271netfilter: ipset: switch ext_size to atomic64_tinclude/linux/netfilter/ipset/ip_set.h net/netfilter/ipset/ip_set_bitmap_gen.h net/netfilter/ipset/ip_set_core.c +2 more+9 -90 replies
44/271ipvs: avoid out-of-bounds write in ip_vs_nat_icmpinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_core.c net/netfilter/ipvs/ip_vs_xmit.c+36 -350 replies
45/271ipvs: return the csum validation for forward hookinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_proto_sctp.c+6 -150 replies
46/271watchdog: bd96801_wdt: Fix timeout for enabled WDGdrivers/watchdog/bd96801_wdt.c+2 -30 replies
47/271btrfs: lzo: add error message for invalid headersfs/btrfs/lzo.c+12 -30 replies
48/271btrfs: lzo: reject inline extents without valid headersfs/btrfs/lzo.c+3 -20 replies
49/271btrfs: fix memory leak in btrfs_do_encoded_write()fs/btrfs/inode.c+1 -00 replies
50/271btrfs: initialize inode mapping flags for cached inodesfs/btrfs/inode.c+2 -10 replies
51/271accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()drivers/accel/amdxdna/amdxdna_gem.c+20 -40 replies
52/271bpf: Preserve pointer state for commuted arithmetickernel/bpf/verifier.c+8 -70 replies
53/271bpf: Propagate untrusted pointer state in commuted arithmetickernel/bpf/verifier.c+7 -70 replies
54/271net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()net/smc/smc_llc.c+2 -10 replies
55/271net/sched: cls_route: fix fastmap use-after-free on filternet/sched/cls_route.c+26 -90 replies
56/271net: hisilicon: hix5hd2_gmac: remove redundant NAPI deletedrivers/net/ethernet/hisilicon/hix5hd2_gmac.c+0 -10 replies
57/271devlink: fix net namespace reference leak in reloadnet/devlink/dev.c+1 -00 replies
58/271net/mlx5: fw_tracer, return NULL on create errordrivers/net/ethernet/mellanox/mlx5/core/diag/fw_tracer.c+7 -90 replies
59/271accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()drivers/accel/amdxdna/amdxdna_gem.c+8 -190 replies
60/271bpf: Fix netns reference imbalance in conntrack kfuncsnet/netfilter/nf_conntrack_bpf.c+48 -240 replies
61/271counter: microchip-tcb-capture: Fix DT channel validationdrivers/counter/microchip-tcb-capture.c+2 -20 replies
62/271bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()net/ipv4/tcp_ipv4.c+24 -190 replies
63/271ALSA: usb-audio: Add QUIRK_FLAG_MIXER_GET_CUR_BROKENDocumentation/sound/alsa-configuration.rst sound/usb/mixer.c sound/usb/mixer.h +2 more+77 -100 replies
64/271ALSA: usb-audio: Add QUIRK_FLAG_MIXER_GET_CUR_BROKEN for Logitech PRO X 2 LIGHTSPEEDsound/usb/quirks.c+2 -00 replies
65/271vhost_iotlb: bound map allocation in add_rangedrivers/vdpa/mlx5/core/mlx5_vdpa.h drivers/vdpa/mlx5/core/mr.c drivers/vdpa/mlx5/core/resources.c +5 more+82 -210 replies
66/271vhost/vdpa: reject overflowing PA map page counts on 32-bitdrivers/vhost/vdpa.c+8 -10 replies
67/271vdpa/mlx5: Fix buffer length in create_direct_keys()drivers/vdpa/mlx5/core/mr.c+2 -10 replies
68/271hwmon: (pmbus/core) Avoid race condition during probedrivers/hwmon/pmbus/pmbus_core.c+4 -00 replies
69/271hwmon: (pmbus) Fix type confusion in notification logicdrivers/hwmon/pmbus/pmbus_core.c+37 -240 replies
70/271tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()net/ipv4/tcp_input.c+1 -10 replies
71/271bnxt: fix memory leak in bnxt_queue_mem_alloc error casesdrivers/net/ethernet/broadcom/bnxt/bnxt.c+3 -00 replies
72/271xsk: require at least 16 bytes of TX metadatanet/xdp/xdp_umem.c+2 -00 replies
73/271xsk: pass TX metadata pointer by referencedrivers/net/ethernet/intel/igc/igc_main.c drivers/net/ethernet/mellanox/mlx5/core/en.h drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c +5 more+21 -150 replies
74/271xsk: clear metadata pointer when no timestamp is requestedinclude/net/xdp_sock.h net/xdp/xsk.c+12 -40 replies
75/271xsk: validate launch-time metadata sizeinclude/net/xdp_sock_drv.h net/xdp/xsk.c+19 -90 replies
76/271xsk: move xsk_tx_metadata_request() to xdp_sock_drv.hinclude/net/xdp_sock.h include/net/xdp_sock_drv.h+43 -430 replies
77/271xsk: validate metadata when processing requestsdrivers/net/ethernet/intel/igc/igc_main.c drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c drivers/net/ethernet/stmicro/stmmac/stmmac_main.c +3 more+37 -330 replies
78/271bnge: Fix NULL pointer dereference in aux device releasedrivers/net/ethernet/broadcom/bnge/bnge_auxr.c+6 -30 replies
79/271udp: fix potential use-after-free in tunnel segmentationnet/ipv4/udp_offload.c+3 -10 replies
80/271net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filternet/sched/sch_cake.c+0 -10 replies
81/271vhost-scsi: Validate T10 PI scatterlist countsdrivers/vhost/scsi.c+8 -00 replies
82/271vhost-scsi: reject feature changes after endpointdrivers/vhost/scsi.c+9 -00 replies
83/271net/openvswitch: check Ethernet header length in key_extract()net/openvswitch/flow.c+7 -40 replies
84/271net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiersnet/sched/cls_api.c+16 -10 replies
85/271drm/xe: Fix memory leak in exec_queue_set_hang_replay_state()drivers/gpu/drm/xe/xe_exec_queue.c+3 -00 replies
86/271drm/xe/uc: Apply RCS/CCS yield policy to SR-IOV VFsdrivers/gpu/drm/xe/xe_uc.c+5 -20 replies
87/271hwmon: (nzxt-smart2) Check return value of init_device() in probedrivers/hwmon/nzxt-smart2.c+5 -10 replies
88/271hwmon: (pmbus/lm25066) Fix PMBus coefficient calculationsdrivers/hwmon/pmbus/lm25066.c+3 -20 replies
89/271selftests/ftrace: refactor eprobes test to fix argument checkstools/testing/selftests/ftrace/test.d/dynevent/add_remove_eprobe.tc+5 -110 replies
90/271net: stmmac: resume PHY before hardware setup when opening the interfacedrivers/net/ethernet/stmicro/stmmac/stmmac_main.c+9 -00 replies
91/271bnge: use int for bnge_fix_rings_count() return valuedrivers/net/ethernet/broadcom/bnge/bnge_resc.c+2 -10 replies
92/271net/mlx5e: fix BQL reset on SQ re-activationdrivers/net/ethernet/mellanox/mlx5/core/en_main.c+3 -10 replies
93/271bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()drivers/net/ethernet/broadcom/bnxt/bnxt.c+7 -70 replies
94/271bnxt_en: Determine and store default RX ring in vnic structuredrivers/net/ethernet/broadcom/bnxt/bnxt.c drivers/net/ethernet/broadcom/bnxt/bnxt.h+23 -110 replies
95/271bnxt_en: Refresh VNIC default ring on queue restart if neededdrivers/net/ethernet/broadcom/bnxt/bnxt.c+5 -00 replies
96/271bnxt_en: Disable EOP for TPA on all chips to prevent data corruptiondrivers/net/ethernet/broadcom/bnxt/bnxt.c+7 -40 replies
97/271bnxt_en: Fix PTP PPS setting bugdrivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c+5 -20 replies
98/271sctp: fix addip_serial increment on ASCONF_ACK allocation failurenet/sctp/sm_make_chunk.c+1 -20 replies
99/271bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookienet/core/filter.c+2 -20 replies
100/271tcp: fix TFO max_qlen accounting across reuseport migrationnet/ipv4/inet_connection_sock.c+16 -40 replies
101/271netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()net/netfilter/nf_flow_table_ip.c+3 -00 replies
102/271net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload lengthnet/ncsi/ncsi-netlink.c+4 -00 replies
103/271net: prestera: validate firmware header lengthdrivers/net/ethernet/marvell/prestera/prestera_pci.c+3 -00 replies
104/271net: remove WARN_ON_ONCE() from sk_mc_loop()net/core/sock.c+0 -10 replies
105/271net/smc: fix TOCTOU race between smc_listen_out() and listener closenet/smc/af_smc.c+2 -10 replies
106/271net: qrtr: ns: Raise lookup limit to 128net/qrtr/ns.c+1 -10 replies
107/271net: thunderbolt: Tear down DMA paths before stopping the ringsdrivers/net/thunderbolt/main.c+15 -50 replies
108/271ata: pata_sl82c105: fix bridge revision use-after-freedrivers/ata/pata_sl82c105.c+3 -10 replies
109/271bnge: Fix resource leak in bnge_init_nic() error pathdrivers/net/ethernet/broadcom/bnge/bnge_netdev.c+0 -20 replies
110/271s390/ism: Fix UAF of sba and ieq during ism_dev_exit()drivers/s390/net/ism_drv.c+15 -40 replies
111/271net/atm: fix slab-out-of-bounds read in vcc_setsockopt()net/atm/common.c+9 -50 replies
112/271sctp: clear control chunk transport if it is being removednet/sctp/associola.c+4 -00 replies
113/271tls: dont abort the connection on signal-interrupted sendsnet/tls/tls_sw.c+1 -10 replies
114/271watchdog: at91sam9_wdt: prevent timer rearm during teardowndrivers/watchdog/at91sam9_wdt.c+2 -20 replies
115/271rqspinlock: Reset tail when preserving queue on deadlockkernel/bpf/rqspinlock.c+3 -20 replies
116/271hwmon: (corsair-psu) fix possible out-of-bounds access on missing string terminationdrivers/hwmon/corsair-psu.c+2 -20 replies
117/271hwmon: (ads7828) Fix external VREF regulator handlingdrivers/hwmon/ads7828.c+6 -50 replies
118/271hwmon: (ltc4282) Avoid overflow in maximum power calculationdrivers/hwmon/ltc4282.c+6 -60 replies
119/271hwmon: (ltc4282) Clamp negative current limitsdrivers/hwmon/ltc4282.c+5 -10 replies
120/271hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvoltdrivers/hwmon/ltc4282.c+1 -10 replies
121/271hwmon: Support guard() and scoped_guard for subsystem locksDocumentation/hwmon/hwmon-kernel-api.rst include/linux/hwmon.h+7 -30 replies
122/271hwmon: (corsair-psu) serialize debugfs access against hwmondrivers/hwmon/corsair-psu.c+4 -00 replies
123/271ALSA: usb-audio: Fix sticky mixer regressions on M-Audio Fast Track Ultrasound/usb/quirks.c+4 -00 replies
124/271net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()drivers/net/tap.c+14 -100 replies
125/271Input: evdev - sanitize event type index when fetching event masksdrivers/input/evdev.c+4 -10 replies
126/271ALSA: usb-audio: fix OOB write on Type II inbound URBssound/usb/endpoint.c+4 -20 replies
127/271usb: core: Add quirk for 255-bytes initial config readDocumentation/admin-guide/kernel-parameters.txt drivers/usb/core/config.c drivers/usb/core/quirks.c +1 more+36 -80 replies
128/271usb: quirks: Add ShanWan gamepad to quirk listdrivers/usb/core/quirks.c+3 -00 replies
129/271usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msgdrivers/usb/misc/usbio.c+1 -10 replies
130/271usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()drivers/usb/atm/cxacru.c+2 -00 replies
131/271usb: xhci: use BIT_ULL for CRCR bits to fix incorrect 64bit maskdrivers/usb/host/xhci.h+6 -60 replies
132/271thunderbolt: icm: Preserve USB4 proxy data-valid bitdrivers/thunderbolt/icm.c+1 -10 replies
133/271usb: cdnsp: fix incorrect endian conversions for APB timeout registerdrivers/usb/cdns3/cdnsp-gadget.c+2 -20 replies
134/271usb: gadget: f_ncm: Use unsigned int for ndp_indexdrivers/usb/gadget/function/f_ncm.c+1 -10 replies
135/271net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()drivers/net/usb/ax88179_178a.c+3 -10 replies
136/271net: usb: ipheth: fix carrier_work UAF on disconnectdrivers/net/usb/ipheth.c+10 -10 replies
137/271usbnet: cap max_mtu for drivers without bind callbackdrivers/net/usb/usbnet.c+2 -10 replies
138/271vt: add permission check for KDSKBMETA ioctldrivers/tty/vt/vt_ioctl.c+2 -00 replies
139/271vt: stabilize tty reference in kbd_keycode with tty_port_tty_getdrivers/tty/vt/keyboard.c+4 -10 replies
140/271mm: fix incorrect flush address in direct page table reclaimmm/memory.c+1 -10 replies
141/271Input: evdev - fix information leak in evdev_pass_values()drivers/input/evdev.c+12 -100 replies
142/271mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAFinclude/linux/mmap_lock.h mm/pagewalk.c mm/vmalloc.c+53 -190 replies
143/271ima: fix out-of-bounds read in xattr_verify()security/integrity/ima/ima_appraise.c+7 -20 replies
144/271ipvs: stop estimator after disabled calc phasenet/netfilter/ipvs/ip_vs_est.c+7 -30 replies
145/271ipvs: add totalconns for destinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_conn.c net/netfilter/ipvs/ip_vs_ctl.c +4 more+28 -380 replies
146/271ipvs: properly update the overload flag on dest editinclude/net/ip_vs.h net/netfilter/ipvs/ip_vs_conn.c net/netfilter/ipvs/ip_vs_ctl.c+72 -250 replies
147/271ipvs: separate destination availability stateinclude/net/ip_vs.h include/uapi/linux/ip_vs.h net/netfilter/ipvs/ip_vs_conn.c +6 more+23 -220 replies
148/271ipvs: clear IPv4 options after rebasing tunnel ICMP errorsnet/netfilter/ipvs/ip_vs_core.c+1 -00 replies
149/271packet: use consistent hard_header_len in non-ring send pathsinclude/linux/netdevice.h net/packet/af_packet.c+20 -120 replies
150/271packet: use consistent hard_header_len in TX_RING send pathnet/packet/af_packet.c+11 -80 replies
151/271net/packet: reset the MAC header on the packet-socket transmit pathnet/packet/af_packet.c+4 -30 replies
152/271packet: synchronize pressure clearing with ring reconfigurationnet/packet/af_packet.c+16 -40 replies
153/271net: fix skb length accounting after generic XDP frag adjustmentnet/core/dev.c+7 -30 replies
154/271net: openvswitch: reallocate update replies for mismatched IDsnet/openvswitch/datapath.c+26 -30 replies
155/271net/sched: reject overly deep qdisc hierarchiesinclude/net/sch_generic.h net/sched/sch_api.c+10 -00 replies
156/271net: octeontx2-pf: Fix UB in shift operationdrivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c+4 -20 replies
157/271net: remove CAP_SYS_RAWIO zero-padding in dev_validate_headerinclude/linux/netdevice.h+0 -50 replies
158/271inet: frags: publish queues before arming timernet/ipv4/inet_fragment.c+5 -50 replies
159/271mac802154: fix netdev use-after-free in beacon workernet/mac802154/scan.c+4 -00 replies
160/271igc: fix netdev not re-attached after resume if interface is downdrivers/net/ethernet/intel/igc/igc_main.c+5 -30 replies
161/271netfilter: ebt_nflog: pin the NFLOG backendnet/bridge/netfilter/ebt_nflog.c+16 -10 replies
162/271net: bridge: mrp: fix uninitialised bytes on the wirenet/bridge/br_mrp.c+2 -40 replies
163/271Revert "drm/amd/display: Fix backlight max_brightness to match exported range"drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c+3 -30 replies
164/271futex: Prevent robust futex exit race some morekernel/futex/core.c+58 -270 replies
165/271selftests/xsk: fix too-many-frags multi-buffer Tx testtools/testing/selftests/bpf/prog_tests/test_xsk.c+15 -90 replies
166/271selftests/xsk: account reclaimed invalid Tx descriptorstools/testing/selftests/bpf/prog_tests/test_xsk.c+14 -120 replies
167/271Bluetooth: btrtl: fix RTL8761B/BU broken LE extended scandrivers/bluetooth/btrtl.c+13 -00 replies
168/271Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUVdrivers/bluetooth/btusb.c+2 -00 replies
169/271selftests/bpf: Ensure UDP sockets are boundtools/testing/selftests/bpf/prog_tests/sockmap_basic.c+3 -30 replies
170/271selftests/bpf: Adapt sockmap update error handlingtools/testing/selftests/bpf/prog_tests/sockmap_listen.c+11 -100 replies
171/271ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthopsnet/ipv4/fib_semantics.c+49 -180 replies
172/271ipv4: fix use-after-free in fib_nhc_update_mtu()include/net/route.h net/ipv4/fib_semantics.c net/ipv4/route.c+42 -230 replies
173/271mei: pull kvfree out of spinlockdrivers/misc/mei/client.c+15 -100 replies
174/271nvmem: apple-spmi-nvmem: wrap regmap calls to satisfy CFIdrivers/nvmem/apple-spmi-nvmem.c+18 -20 replies
175/271nvmem: layouts: Add fixed-layout driverMAINTAINERS drivers/nvmem/core.c drivers/nvmem/internals.h +4 more+74 -330 replies
176/271rust_binder: do not query current thread for all ioctlsdrivers/android/binder/process.rs+8 -40 replies
177/271serial: qcom-geni: fix TX DMA buffer flushdrivers/tty/serial/qcom_geni_serial.c+22 -210 replies
178/271serial: sc16is7xx: enable THRI before filling TX FIFOdrivers/tty/serial/sc16is7xx.c+3 -00 replies
179/271serial: 8250_dma: Clear stale RX state on shutdowndrivers/tty/serial/8250/8250_dma.c+7 -50 replies
180/271serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xxdrivers/tty/serial/8250/8250_of.c+38 -00 replies
181/271serial: amba-pl011: fix indefinite RS485 post-send delaydrivers/tty/serial/amba-pl011.c+6 -20 replies
182/271serial: amba-pl011: cancel RS485 hrtimers after freeing IRQdrivers/tty/serial/amba-pl011.c+35 -170 replies
183/271serial: amba-pl011: synchronize DMA teardowndrivers/tty/serial/amba-pl011.c+4 -40 replies
184/271staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()drivers/staging/rtl8723bs/core/rtw_ieee80211.c+3 -00 replies
185/271staging: rtl8723bs: fix OOB read in WMM_param_handler()drivers/staging/rtl8723bs/core/rtw_wlan_util.c+3 -00 replies
186/271staging: rtl8723bs: fix missing shared-key auth challenge length checkdrivers/staging/rtl8723bs/core/rtw_mlme_ext.c+1 -10 replies
187/271staging: rtl8723bs: validate monitor transmit frame lengthsdrivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c+4 -00 replies
188/271misc: fastrpc: Fix initial memory allocation for Audio PD memory pooldrivers/misc/fastrpc.c+4 -40 replies
189/271misc: fastrpc: fix channel ctx ref leak when session alloc failsdrivers/misc/fastrpc.c+1 -10 replies
190/271misc: fastrpc: Remove buffer from list prior to unmap operationdrivers/misc/fastrpc.c+10 -40 replies
191/271misc: fastrpc: take fl->lock when moving mmaps on interrupted invokedrivers/misc/fastrpc.c+2 -00 replies
192/271misc: fastrpc: fix memory leak in fastrpc_channel_ctx_freedrivers/misc/fastrpc.c+1 -00 replies
193/271ring-buffer: Fix crash passing ERR_PTR to kthread_stop()kernel/trace/ring_buffer.c+1 -10 replies
194/271mm/damon/lru_sort: error out for >10000 active_mem_bpmm/damon/lru_sort.c+2 -00 replies
195/271mm/damon/ops-common: putback folios on invalid migrate nidmm/damon/ops-common.c+8 -10 replies
196/271samples/damon/mtier: error out for zero quota goal target valuessamples/damon/mtier.c+3 -00 replies
197/271mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD}mm/damon/ops-common.c mm/damon/paddr.c mm/damon/vaddr.c+8 -10 replies
198/271ALSA: usb: Fix UAF at delayed release of MIDI2 EPssound/usb/midi2.c+9 -00 replies
199/271ALSA: usx2y: bound the hwdep mmap fault offsetsound/usb/usx2y/usX2Yhwdep.c sound/usb/usx2y/usx2yhwdeppcm.c+4 -00 replies
200/271ALSA: FCP: fix OOB write in fcp_meter_ctl_get()sound/usb/fcp.c+9 -10 replies
201/271ALSA: hda/tas2781: fix ACPI reference handlingsound/hda/codecs/side-codecs/tas2781_hda_spi.c+2 -10 replies
202/271ALSA: us144mkii: re-anchor capture URBs on resubmissionsound/usb/usx2y/us144mkii_capture.c+1 -00 replies
203/271drm/v3d: Serialize the scheduler timeout handlersdrivers/gpu/drm/v3d/v3d_drv.h drivers/gpu/drm/v3d/v3d_sched.c+14 -10 replies
204/271perf/core: Fix group leader use-after-free after sibling detachkernel/events/core.c+37 -300 replies
205/271tracing: Fix race between update_event_fields and, event_define_fieldskernel/trace/trace_events.c+2 -00 replies
206/271fbdev: bitblit: bound-check glyph index in bit_cursor()drivers/video/fbdev/core/bitblit.c+7 -20 replies
207/271ring-buffer: Prevent subbuf order change when resizing is disabledkernel/trace/ring_buffer.c+1 -10 replies
208/271tracing: Fix NULL pointer dereference in module event cache removalkernel/trace/trace_events.c+1 -10 replies
209/271mm/huge_memory: initialise workingset state before folio splitmm/huge_memory.c+3 -10 replies
210/271mm/huge_memory: fix huge_zero_pfn racemm/huge_memory.c+29 -140 replies
211/271net: phy: mediatek: fix TX blink masks using the RX bitsdrivers/net/phy/mediatek/mtk.h+4 -40 replies
212/271net: smc: fix splice entry lifetime imbalance in smc_rx_splicenet/smc/smc_rx.c+10 -90 replies
213/271ipv6: prevent in6_dev_get() from resurrecting inet6_devinclude/net/addrconf.h+2 -20 replies
214/271net/dibs: Correct freeing of dmb_clientid_arrdrivers/dibs/dibs_loopback.c drivers/dibs/dibs_main.c+4 -110 replies
215/271net/x25: fix use-after-free of the socket by its timersnet/x25/af_x25.c net/x25/x25_timer.c+18 -110 replies
216/271net: devmem: prevent net-iov / page mixingnet/core/datagram.c+3 -00 replies
217/271NTB: ntb_netdev: Preserve RX queue depth on allocation failuredrivers/net/ntb_netdev.c+8 -70 replies
218/271netfilter: bridge: release template ct on non-IP pathnet/bridge/netfilter/nf_conntrack_bridge.c+1 -00 replies
219/271netfilter: nf_conntrack: defer invalid log until after unlocknet/netfilter/nf_conntrack_proto.c net/netfilter/nf_conntrack_proto_sctp.c net/netfilter/nf_conntrack_proto_tcp.c+102 -480 replies
220/271net: atlantic: free stranded TX buffers on ring deinitdrivers/net/ethernet/aquantia/atlantic/aq_ring.c drivers/net/ethernet/aquantia/atlantic/aq_ring.h drivers/net/ethernet/aquantia/atlantic/aq_vec.c+31 -10 replies
221/271net: atlantic: free RX pages of consumed but not refilled buffersdrivers/net/ethernet/aquantia/atlantic/aq_ring.c+18 -40 replies
222/271net/sched: act_ct: fix sk_buff leak when the header checks reject a packetnet/sched/act_ct.c+25 -40 replies
223/271net/sched: act_gact, act_police: range check the fallback control actioninclude/net/act_api.h net/sched/act_gact.c net/sched/act_police.c+30 -00 replies
224/271ovl: dont warn when the mount is completed from another user namespacefs/overlayfs/super.c+2 -10 replies
225/271binfmt_misc: dont warn when the mount is completed from another user namespacefs/binfmt_misc.c+2 -10 replies
226/271Revert "drm/amdgpu: fix aperture mapping leak"drivers/gpu/drm/amd/amdgpu/amdgpu_device.c drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c+21 -160 replies
227/271dibs: initialise dibs->lock in dibs_dev_alloc()drivers/dibs/dibs_main.c include/linux/dibs.h+2 -20 replies
228/271arm64: remove redundant concurrent ptdump UAF mitigationarch/arm64/include/asm/ptdump.h arch/arm64/mm/mmu.c arch/arm64/mm/ptdump.c +1 more+9 -620 replies
229/271x86/CPU: Add a tlbi= cmdline switchDocumentation/admin-guide/kernel-parameters.txt arch/x86/kernel/cpu/common.c+14 -00 replies
230/271x86/mce: Set up the polling timer before CMCI discoveryarch/x86/kernel/cpu/mce/core.c+1 -10 replies
231/271xdp: reject clones that overrun skb_shared_info tailroomnet/core/xdp.c+1 -10 replies
232/271vxlan: do not arm the ageing timer on a device that is downdrivers/net/vxlan/vxlan_core.c+1 -10 replies
233/271vsock/virtio: read virtqueues under worker locksnet/vmw_vsock/virtio_transport.c+6 -50 replies
234/271vsock/virtio: avoid refilling the RX queue after teardownnet/vmw_vsock/virtio_transport.c+2 -10 replies
235/271veth: fix skb length accounting after XDP frag adjustmentdrivers/net/veth.c+14 -80 replies
236/271vhost: reset the vring metadata cache on vring reconfigurationdrivers/vhost/vhost.c+8 -00 replies
237/271tls: rx: restore msg_iter before TLS 1.3 optimistic retrynet/tls/tls_sw.c tools/testing/selftests/net/tls.c+59 -00 replies
238/271tls: dont leave a full plaintext sk_msg ring unpushednet/tls/tls_sw.c+14 -00 replies
239/271tipc: read le->link under the node lock in tipc_node_link_down()net/tipc/node.c+10 -50 replies
240/271smb: client: Fix use-after-free in cifs_try_adding_channels()fs/smb/client/sess.c+1 -10 replies
241/271smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive()fs/smb/client/smb1transport.c+22 -60 replies
242/271KVM: SVM: Serialize accesses to the owner and mirror list with separate lockarch/x86/kvm/svm/sev.c arch/x86/kvm/svm/svm.h+26 -90 replies
243/271KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow pagearch/x86/kvm/mmu/mmu.c+3 -00 replies
244/271eventfs: Fix use-after-free in eventfs_remove_rec()fs/tracefs/event_inode.c+2 -20 replies
245/271eventfs: Use children field for rcu head and add memory barriersfs/tracefs/event_inode.c fs/tracefs/internal.h+26 -20 replies
246/271ring-buffer: Prevent resizing of persistent ring bufferkernel/trace/ring_buffer.c+2 -00 replies
247/271Revert "thermal/drivers/hwmon: Cleanup coding style a bit"drivers/thermal/thermal_hwmon.c+2 -10 replies
248/271Revert "thermal: hwmon: Register a hwmon device for each thermal zone"drivers/thermal/thermal_hwmon.c+104 -470 replies
249/271ptp: ocp: Fix board ID over-readdrivers/ptp/ptp_ocp.c+3 -10 replies
250/271ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()kernel/trace/ring_buffer.c+1 -00 replies
251/271ring-buffer: Use current_context for safe per-CPU buffer swapkernel/trace/ring_buffer.c+4 -40 replies
252/271mm/page_table_check: skip special zero mappingsmm/page_table_check.c+16 -40 replies
253/271mm/ptdump: always stabilise against page table freeing using init_mmmm/pagewalk.c mm/ptdump.c+16 -50 replies
254/271ipv6: fix Route Information option length validationnet/ipv6/route.c+4 -40 replies
255/271ip6_tunnel: clear skb2->cb[] in ip6ip6_err()net/ipv6/ip6_tunnel.c+3 -00 replies
256/271fs,fsverity: remove check for fsverity being enabled in setattr_prepare()fs/attr.c+1 -10 replies
257/271fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()fs/crypto/policy.c+1 -10 replies
258/271sched/psi: Shut down rtpoll_timer in psi_cgroup_free()kernel/sched/psi.c+6 -00 replies
259/271sched/psi: Create the psimon kthread outside of cgroup_mutexinclude/linux/psi.h kernel/cgroup/cgroup.c kernel/sched/psi.c+78 -180 replies
260/271sched_ext: Take cgroup_lock() first in scx_cgroup_lock()kernel/sched/ext.c+7 -20 replies
261/271ima: Instantiate file_truncate and path_truncate hookssecurity/integrity/ima/ima_main.c+39 -00 replies
262/271mm/filemap: __filemap_add_folio() restore index before retryingmm/filemap.c+6 -00 replies
263/271fsverity: Fix bpf_get_fsverity_digest() dynptr assumptionsfs/verity/measure.c+6 -40 replies
264/271fsverity: Fix silent truncation in bpf_get_fsverity_digest()fs/verity/measure.c+5 -40 replies
265/271bpf, sockmap: Fix sk_redir use-after-free in send verdictnet/ipv4/tcp_bpf.c+2 -00 replies
266/271scsi: scsi_debug: Negate wrapped memcmp() resultdrivers/scsi/scsi_debug.c+2 -20 replies
267/271sctp: keep chunk->transport in step with the list it is queued onnet/sctp/outqueue.c+1 -00 replies
268/271sctp: fix use-after-free of cached ASCONF chunknet/sctp/associola.c net/sctp/sm_statefuns.c+8 -20 replies
269/271sctp: clear new_transport when removing a peernet/sctp/associola.c+3 -00 replies
270/271thunderbolt: Bound the DROM dual link port number before indexing sw->portsdrivers/thunderbolt/eeprom.c+8 -10 replies
271/271thunderbolt: Fix bandwidth group reservation indexingdrivers/thunderbolt/tb.c+1 -10 replies

Reviews trailers per patch

148 of 271 patches have a Reviewed-by or Acked-by.

PatchManivannan SadhasivamKonrad DybcioAbel VesaAndrea RighiDan AloniKuniyuki IwashimaJakub SitnickiChristoph HellwigAvi FishmanLinus WalleijDmitry BaryshkovKumar Kartikeya DwivediDouglas AndersonWayne LinDan WheelerViktor JägersküpperMika WesterbergDavid SterbaFilipe MananaMax ZhenDaniel WadeShung-Hsi YuHidayath KhanSidraya JayagondDust LiVictor NogueiraSantosh KalluriNikolay AleksandrovJay VosburghJiri PirkoAntoine TenartShay DroriEmil TsalapatisJoshua CroftsMichael S. TsirkinDragos TatuleaVincent JardinJoe DamatoMichael ChanCosmin RatiuJacob KellerBhargava MarreddySimon HormanAlexander SteinMaxime ChevallierTariq ToukanKalesh APPavan ChebbiXin LongEric DumazetPablo Neira AyusoElad NachmanMahanta JambigiBreno LeitaoNiklas CasselStefan HajnocziDharmender GargRajashekar HudumulaNuno SáEelco ChaudronIlya MaximetsMatthew BrostDaniele Ceraolo SpurioWilken GottwaltArnd BergmannVlastimil Babka (SUSE)David Hildenbrand (Arm)Michal HockoQi ZhengMike Rapoport (Microsoft)Dev JainKiryl ShutsemauJulian AnastasovWillem de BruijnMohsin BashirLorenzo BianconiJamal Hadi SalimRatheesh KannothSunil GouthamMiquel RaynalAleksandr LoktionovDima RuinskiyGreg Kroah-HartmanAlan SternAntti LaaksoJason XingStanislav FomichevClayton CraftSven PeterCarlos LlamasPraveen TalariEkansh GuptaVincent DonnefortMasami Hiramatsu (Google)SJ ParkIago Toral QuirogaPaul MenzelDapeng MiIdo SchimmelMenachem AdinMina AlmasryBobby EshlemanDave JiangFlorian WestphalSukhdeep SinghJan KaraLijo LazarHawking ZhangAlexandra WinterWill DeaconZi YanTung NguyenPaulo AlcantaraLukasz LubaAndrew LunnVadim FedorenkoJohannes WeinerMatt FlemingSuren BaghdasaryanFrederick LawlerMatthew Wilcox (Oracle)Song LiuJohn FastabendJohn GarryRonald WarsowJustin M. ForbesPavel Machek (CIP)Florian FainelliPeter SchneiderBarry K. NathanRon EconomosTakeshi OgasawaraMark BrownBrett A C SheffieldShuah KhanBenjamin BoortzMiguel OjedaJeffrin Jose T
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
1/271
2/271R-b R-b
3/271A-b
4/271
5/271R-b T-b
6/271T-b
7/271R-b
8/271R-b
9/271R-b
10/271R-b R-b
11/271R-b
12/271R-b
13/271R-b
14/271R-b
15/271R-b
16/271T-b
17/271
18/271
19/271
20/271R-b
21/271R-b
22/271
23/271R-b A-b R-b
24/271A-b R-b
25/271
26/271
27/271
28/271
29/271
30/271
31/271
32/271
33/271
34/271
35/271R-b
36/271R-b
37/271A-b
38/271R-b A-b
39/271
40/271R-b
41/271R-b
42/271R-b
43/271
44/271
45/271
46/271
47/271R-b
48/271
49/271R-b R-b
50/271R-b
51/271R-b
52/271T-b A-b
53/271T-b
54/271R-b R-b R-b
55/271T-b T-b
56/271
57/271R-b R-b
58/271R-b
59/271R-b
60/271R-b
61/271R-b
62/271R-b
63/271
64/271
65/271
66/271A-b
67/271T-b R-b
68/271
69/271T-b
70/271
71/271R-b R-b
72/271
73/271
74/271
75/271
76/271
77/271
78/271R-b
79/271R-b
80/271
81/271
82/271R-b
83/271R-b R-b
84/271T-b
85/271R-b
86/271R-b
87/271
88/271
89/271
90/271T-b T-b R-b
91/271R-b
92/271R-b
93/271R-b R-b
94/271R-b R-b
95/271R-b R-b
96/271R-b R-b
97/271R-b
98/271A-b
99/271R-b R-b
100/271R-b R-b
101/271R-b
102/271
103/271A-b
104/271
105/271R-b R-b R-b
106/271
107/271A-b
108/271R-b
109/271R-b R-b
110/271
111/271
112/271
113/271
114/271
115/271
116/271
117/271
118/271R-b
119/271R-b
120/271R-b
121/271
122/271T-b
123/271
124/271A-b R-b
125/271A-b
126/271
127/271A-b
128/271
129/271T-b
130/271
131/271
132/271
133/271A-b
134/271
135/271
136/271
137/271
138/271
139/271
140/271A-b A-b A-b A-b
141/271
142/271A-b R-b R-b R-b
143/271
144/271A-b
145/271
146/271
147/271A-b
148/271A-b
149/271R-b
150/271R-b
151/271R-b
152/271
153/271R-b A-b
154/271R-b
155/271R-b A-b
156/271R-b R-b
157/271R-b
158/271
159/271R-b
160/271R-b R-b
161/271
162/271A-b
163/271
164/271
165/271R-b A-b
166/271R-b A-b
167/271
168/271R-b
169/271R-b R-b
170/271R-b R-b
171/271R-b
172/271R-b
173/271R-b
174/271T-b R-b
175/271R-b
176/271A-b
177/271R-b
178/271
179/271
180/271
181/271
182/271
183/271
184/271
185/271
186/271
187/271
188/271R-b
189/271R-b
190/271R-b
191/271R-b
192/271R-b
193/271R-b A-b
194/271
195/271R-b
196/271
197/271
198/271
199/271
200/271
201/271
202/271
203/271R-b
204/271R-b
205/271
206/271
207/271
208/271
209/271A-b R-b
210/271A-b
211/271R-b
212/271R-b R-b
213/271R-b
214/271R-b
215/271
216/271A-b R-b R-b
217/271R-b
218/271
219/271R-b
220/271A-b R-b
221/271A-b R-b
222/271A-b
223/271T-b A-b
224/271R-b
225/271R-b
226/271R-b R-b
227/271R-b
228/271R-b A-b R-b A-b A-b
229/271
230/271
231/271
232/271R-b
233/271R-b
234/271R-b
235/271A-b
236/271
237/271
238/271
239/271R-b
240/271
241/271R-b
242/271
243/271
244/271A-b
245/271R-b
246/271
247/271R-b
248/271
249/271R-b
250/271
251/271
252/271
253/271A-b R-b R-b
254/271R-b
255/271R-b
256/271R-b
257/271
258/271A-b T-b A-b
259/271A-b T-b A-b
260/271R-b
261/271T-b
262/271A-b R-b R-b
263/271A-b A-b
264/271A-b
265/271R-b R-b
266/271R-b
267/271A-b
268/271A-b
269/271A-b
270/271
271/271

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 138 reviewers.

Read the v1 thread

Cover letter [PATCH 7.1 000/271] 7.1.9-rc1 review

This is the start of the stable review cycle for the 7.1.9 release. There are 271 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.9-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 7.1.9-rc1

Xu Rao <[email protected]>
thunderbolt: Fix bandwidth group reservation indexing

Bryam Vargas <[email protected]>

    thunderbolt: Bound the DROM dual link port number before indexing sw->ports

Qing Ming <[email protected]>
sctp: clear new_transport when removing a peer

Yuxiang Yang <[email protected]>
sctp: fix use-after-free of cached ASCONF chunk

Baul Lee <[email protected]>

    sctp: keep chunk->transport in step with the list it is queued on

Xu Rao <[email protected]>
scsi: scsi_debug: Negate wrapped memcmp() result

Chengfeng Ye <[email protected]>
bpf, sockmap: Fix sk_redir use-after-free in send verdict

Eric Biggers <[email protected]>
fsverity: Fix silent truncation in bpf_get_fsverity_digest()

Eric Biggers <[email protected]>
fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions

Hugh Dickins <[email protected]>
mm/filemap: __filemap_add_folio() restore index before retrying

Mimi Zohar <[email protected]>
ima: Instantiate file_truncate and path_truncate hooks

Tejun Heo <[email protected]>
sched_ext: Take cgroup_lock() first in scx_cgroup_lock()

Tejun Heo <[email protected]>
sched/psi: Create the psimon kthread outside of cgroup_mutex

Tejun Heo <[email protected]>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

Zhan Xusheng <[email protected]>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()

Andrey Albershteyn <[email protected]>
fs,fsverity: remove check for fsverity being enabled in setattr_prepare()

Zhiling Zou <[email protected]>

    ip6_tunnel: clear skb2->cb[] in ip6ip6_err()

Yuejie Shi <[email protected]>
ipv6: fix Route Information option length validation

Lorenzo Stoakes (ARM) <[email protected]>
mm/ptdump: always stabilise against page table freeing using init_mm

Zhiling Zou <[email protected]>
mm/page_table_check: skip special zero mappings

Tengda Wu <[email protected]>
ring-buffer: Use current_context for safe per-CPU buffer swap

Vincent Donnefort <[email protected]>
ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()

Ahmad Byagowi <[email protected]>
ptp: ocp: Fix board ID over-read

Rafael J. Wysocki <[email protected]>
Revert "thermal: hwmon: Register a hwmon device for each thermal zone"

Rafael J. Wysocki <[email protected]>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

Vincent Donnefort <[email protected]>
ring-buffer: Prevent resizing of persistent ring buffer

Steven Rostedt <[email protected]>
eventfs: Use children field for rcu head and add memory barriers

Shuangpeng Bai <[email protected]>
eventfs: Fix use-after-free in eventfs_remove_rec()

Sean Christopherson <[email protected]>
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

Paolo Bonzini <[email protected]>
KVM: SVM: Serialize accesses to the owner and mirror list with separate lock

Frank Sorenson <[email protected]>
smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive()

Shuangpeng Bai <[email protected]>
smb: client: Fix use-after-free in cifs_try_adding_channels()

Jun Yang <[email protected]>

    tipc: read le->link under the node lock in tipc_node_link_down()

chanyoung <[email protected]>
tls: don't leave a full plaintext sk_msg ring unpushed

Jérémy Jean <[email protected]>
tls: rx: restore msg_iter before TLS 1.3 optimistic retry

Jun Yang <[email protected]>
vhost: reset the vring metadata cache on vring reconfiguration

Sun Jian <[email protected]>
veth: fix skb length accounting after XDP frag adjustment

Weiming Shi <[email protected]>
vsock/virtio: avoid refilling the RX queue after teardown

Weiming Shi <[email protected]>
vsock/virtio: read virtqueues under worker locks

Baul Lee <[email protected]>
vxlan: do not arm the ageing timer on a device that is down

Zhiling Zou <[email protected]>
xdp: reject clones that overrun skb_shared_info tailroom

Breno Leitao <[email protected]>
x86/mce: Set up the polling timer before CMCI discovery

Rik van Riel <[email protected]>
x86/CPU: Add a tlbi= cmdline switch

Lorenzo Stoakes (ARM) <[email protected]>
arm64: remove redundant concurrent ptdump UAF mitigation

Hidayath Khan <[email protected]>

    dibs: initialise dibs->lock in dibs_dev_alloc()

Asad Kamal <[email protected]>
Revert "drm/amdgpu: fix aperture mapping leak"

Christian Brauner <[email protected]>
binfmt_misc: don't warn when the mount is completed from another user namespace

Christian Brauner <[email protected]>
ovl: don't warn when the mount is completed from another user namespace

Hyunjung Ko <[email protected]>
net/sched: act_gact, act_police: range check the fallback control action

Hyunjung Ko <[email protected]>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

Yangyu Chen <[email protected]>
net: atlantic: free RX pages of consumed but not refilled buffers

Yangyu Chen <[email protected]>
net: atlantic: free stranded TX buffers on ring deinit

Zihan Xi <[email protected]>
netfilter: nf_conntrack: defer invalid log until after unlock

Zhiling Zou <[email protected]>
netfilter: bridge: release template ct on non-IP path

Koichiro Den <[email protected]>
NTB: ntb_netdev: Preserve RX queue depth on allocation failure

Pavel Begunkov <[email protected]>
net: devmem: prevent net-iov / page mixing

Baul Lee <[email protected]>
net/x25: fix use-after-free of the socket by its timers

Alexandra Winter <[email protected]>
net/dibs: Correct freeing of dmb_clientid_arr

Kyle Zeng <[email protected]>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev

Daming Li <[email protected]>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice

Ahmed Naseef <[email protected]>
net: phy: mediatek: fix TX blink masks using the RX bits

Lorenzo Stoakes (ARM) <[email protected]>
mm/huge_memory: fix huge_zero_pfn race

Matt Fleming <[email protected]>
mm/huge_memory: initialise workingset state before folio split

Hui Su <[email protected]>
tracing: Fix NULL pointer dereference in module event cache removal

Vincent Donnefort <[email protected]>
ring-buffer: Prevent subbuf order change when resizing is disabled

Rik van Riel <[email protected]>
fbdev: bitblit: bound-check glyph index in bit_cursor()

Michael Wu <[email protected]>
tracing: Fix race between update_event_fields and, event_define_fields

Aditya Chillara <[email protected]>
perf/core: Fix group leader use-after-free after sibling detach

Maíra Canal <[email protected]>
drm/v3d: Serialize the scheduler timeout handlers

Baul Lee <[email protected]>
ALSA: us144mkii: re-anchor capture URBs on resubmission

Xu Rao <[email protected]>
ALSA: hda/tas2781: fix ACPI reference handling

Baul Lee <[email protected]>
ALSA: FCP: fix OOB write in fcp_meter_ctl_get()

Baul Lee <[email protected]>
ALSA: usx2y: bound the hwdep mmap fault offset

Takashi Iwai <[email protected]>
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

SJ Park <[email protected]>

    mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD}

SJ Park <[email protected]>
samples/damon/mtier: error out for zero quota goal target values

liyouhong <[email protected]>
mm/damon/ops-common: putback folios on invalid migrate nid

SJ Park <[email protected]>
mm/damon/lru_sort: error out for >10000 active_mem_bp

Hui Su <[email protected]>
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()

Eddie Lin <[email protected]>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free

Junrui Luo <[email protected]>

    misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke

Ekansh Gupta <[email protected]>
misc: fastrpc: Remove buffer from list prior to unmap operation

Anandu Krishnan E <[email protected]>
misc: fastrpc: fix channel ctx ref leak when session alloc fails

Ekansh Gupta <[email protected]>
misc: fastrpc: Fix initial memory allocation for Audio PD memory pool

Mariano Baragiola <[email protected]>
staging: rtl8723bs: validate monitor transmit frame lengths

Panagiotis Petrakopoulos <[email protected]>
staging: rtl8723bs: fix missing shared-key auth challenge length check

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in WMM_param_handler()

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()

Fan Wu <[email protected]>
serial: amba-pl011: synchronize DMA teardown

Fan Wu <[email protected]>
serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ

Fan Wu <[email protected]>
serial: amba-pl011: fix indefinite RS485 post-send delay

Ryan Wilbur <[email protected]>
serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

Cunhao Lu <[email protected]>
serial: 8250_dma: Clear stale RX state on shutdown

Luca Fresi <[email protected]>
serial: sc16is7xx: enable THRI before filling TX FIFO

Jan Sebastian Götte <[email protected]>
serial: qcom-geni: fix TX DMA buffer flush

Alice Ryhl <[email protected]>
rust_binder: do not query current thread for all ioctls

Mathieu Dubois-Briand <[email protected]>
nvmem: layouts: Add fixed-layout driver

Aelin Reidel <[email protected]>
nvmem: apple-spmi-nvmem: wrap regmap calls to satisfy CFI

Alexander Usyskin <[email protected]>
mei: pull kvfree out of spinlock

Chengfeng Ye <[email protected]>
ipv4: fix use-after-free in fib_nhc_update_mtu()

Zihan Xi <[email protected]>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops

Michal Luczaj <[email protected]>
selftests/bpf: Adapt sockmap update error handling

Michal Luczaj <[email protected]>
selftests/bpf: Ensure UDP sockets are bound

Nils Helmig <[email protected]>
Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV

Alexej Sidorenko <[email protected]>
Bluetooth: btrtl: fix RTL8761B/BU broken LE extended scan

Maciej Fijalkowski <[email protected]>
selftests/xsk: account reclaimed invalid Tx descriptors

Maciej Fijalkowski <[email protected]>
selftests/xsk: fix too-many-frags multi-buffer Tx test

Keno Fischer <[email protected]>
futex: Prevent robust futex exit race some more

Alex Deucher <[email protected]>
Revert "drm/amd/display: Fix backlight max_brightness to match exported range"

Baul Lee <[email protected]>
net: bridge: mrp: fix uninitialised bytes on the wire

Chengfeng Ye <[email protected]>
netfilter: ebt_nflog: pin the NFLOG backend

Philipp David <[email protected]>
igc: fix netdev not re-attached after resume if interface is down

Zihan Xi <[email protected]>
mac802154: fix netdev use-after-free in beacon worker

Zhiling Zou <[email protected]>
inet: frags: publish queues before arming timer

Qihang Tang <[email protected]>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header

Sergey V. Frolov <[email protected]>
net: octeontx2-pf: Fix UB in shift operation

Zijie Huang <[email protected]>
net/sched: reject overly deep qdisc hierarchies

Zhiling Zou <[email protected]>
net: openvswitch: reallocate update replies for mismatched IDs

Sun Jian <[email protected]>
net: fix skb length accounting after generic XDP frag adjustment

Zihan Xi <[email protected]>
packet: synchronize pressure clearing with ring reconfiguration

Doruk Tan Ozturk <[email protected]>
net/packet: reset the MAC header on the packet-socket transmit path

Qihang Tang <[email protected]>
packet: use consistent hard_header_len in TX_RING send path

Qihang Tang <[email protected]>
packet: use consistent hard_header_len in non-ring send paths

Kyle Zeng <[email protected]>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors

Yizhou Zhao <[email protected]>
ipvs: separate destination availability state

Julian Anastasov <[email protected]>
ipvs: properly update the overload flag on dest edit

Julian Anastasov <[email protected]>
ipvs: add totalconns for dest

Zhiling Zou <[email protected]>
ipvs: stop estimator after disabled calc phase

Lincoln Wallace <[email protected]>
ima: fix out-of-bounds read in xattr_verify()

Lorenzo Stoakes (ARM) <[email protected]>
mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF

Dmitry Torokhov <[email protected]>
Input: evdev - fix information leak in evdev_pass_values()

Andy Lutomirski <[email protected]>
mm: fix incorrect flush address in direct page table reclaim

Joshua Rogers <[email protected]>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

Joshua Rogers <[email protected]>
vt: add permission check for KDSKBMETA ioctl

Laurent Vivier <[email protected]>
usbnet: cap max_mtu for drivers without bind callback

Doruk Tan Ozturk <[email protected]>
net: usb: ipheth: fix carrier_work UAF on disconnect

Yi Cong <[email protected]>

    net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()

Sonali Pradhan <[email protected]>
usb: gadget: f_ncm: Use unsigned int for ndp_index

Pawel Laszczak <[email protected]>
usb: cdnsp: fix incorrect endian conversions for APB timeout register

Xu Rao <[email protected]>
thunderbolt: icm: Preserve USB4 proxy data-valid bit

Lachlan Hodges <[email protected]>
usb: xhci: use BIT_ULL for CRCR bits to fix incorrect 64bit mask

Aleksandr Nogikh <[email protected]>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()

Jiangshan Yi <[email protected]>
usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg

Ishaan Dandekar <[email protected]>
usb: quirks: Add ShanWan gamepad to quirk list

Nikhil Solanke <[email protected]>
usb: core: Add quirk for 255-bytes initial config read

Baul Lee <[email protected]>
ALSA: usb-audio: fix OOB write on Type II inbound URBs

Dmitry Torokhov <[email protected]>
Input: evdev - sanitize event type index when fetching event masks

Dongli Zhang <[email protected]>

    net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()

Takashi Iwai <[email protected]>
ALSA: usb-audio: Fix sticky mixer regressions on M-Audio Fast Track Ultra

Ali Ahmet Memis <[email protected]>
hwmon: (corsair-psu) serialize debugfs access against hwmon

Guenter Roeck <[email protected]>
hwmon: Support guard() and scoped_guard for subsystem locks

Guenter Roeck <[email protected]>
hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt

Guenter Roeck <[email protected]>
hwmon: (ltc4282) Clamp negative current limits

Guenter Roeck <[email protected]>
hwmon: (ltc4282) Avoid overflow in maximum power calculation

Qingshuang Fu <[email protected]>
hwmon: (ads7828) Fix external VREF regulator handling

Wilken Gottwalt <[email protected]>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination

Kumar Kartikeya Dwivedi <[email protected]>
rqspinlock: Reset tail when preserving queue on deadlock

Hongyan Xu <[email protected]>
watchdog: at91sam9_wdt: prevent timer rearm during teardown

Maximilian Immanuel Brandtner <[email protected]>
tls: don't abort the connection on signal-interrupted sends

Xin Long <[email protected]>
sctp: clear control chunk transport if it is being removed

Eric Dumazet <[email protected]>
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()

Alexandra Winter <[email protected]>
s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

Bhargava Marreddy <[email protected]>
bnge: Fix resource leak in bnge_init_nic() error path

Hongyan Xu <[email protected]>
ata: pata_sl82c105: fix bridge revision use-after-free

Fan XinRan <[email protected]>
net: thunderbolt: Tear down DMA paths before stopping the rings

Łukasz Patron <[email protected]>
net: qrtr: ns: Raise lookup limit to 128

Sidraya Jayagond <[email protected]>
net/smc: fix TOCTOU race between smc_listen_out() and listener close

Eric Dumazet <[email protected]>
net: remove WARN_ON_ONCE() from sk_mc_loop()

Pengpeng Hou <[email protected]>
net: prestera: validate firmware header length

Henry Martin <[email protected]>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length

Eric Dumazet <[email protected]>
netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()

Jiayuan Chen <[email protected]>
tcp: fix TFO max_qlen accounting across reuseport migration

Luxiao Xu <[email protected]>
bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie

Qing Luo <[email protected]>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure

Keegan Freyhof <[email protected]>
bnxt_en: Fix PTP PPS setting bug

Michael Chan <[email protected]>
bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

Shravya KN <[email protected]>
bnxt_en: Refresh VNIC default ring on queue restart if needed

Shravya KN <[email protected]>
bnxt_en: Determine and store default RX ring in vnic structure

Shravya KN <[email protected]>
bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()

Bobby Eshleman <[email protected]>
net/mlx5e: fix BQL reset on SQ re-activation

Alok Tiwari <[email protected]>
bnge: use int for bnge_fix_rings_count() return value

Stefan Agner <[email protected]>
net: stmmac: resume PHY before hardware setup when opening the interface

Martin Kaiser <[email protected]>
selftests/ftrace: refactor eprobes test to fix argument checks

Guenter Roeck <[email protected]>
hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations

Qingshuang Fu <[email protected]>
hwmon: (nzxt-smart2) Check return value of init_device() in probe

Marcin Bernatowicz <[email protected]>
drm/xe/uc: Apply RCS/CCS yield policy to SR-IOV VFs

Michał Winiarski <[email protected]>
drm/xe: Fix memory leak in exec_queue_set_hang_replay_state()

Jamal Hadi Salim <[email protected]>
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers

Cen Zhang (Microsoft) <[email protected]>
net/openvswitch: check Ethernet header length in key_extract()

Jia Jia <[email protected]>
vhost-scsi: reject feature changes after endpoint

Linfeng Sun <[email protected]>
vhost-scsi: Validate T10 PI scatterlist counts

Toke Høiland-Jørgensen <[email protected]>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter

Xuanqiang Luo <[email protected]>
udp: fix potential use-after-free in tunnel segmentation

Alok Tiwari <[email protected]>
bnge: Fix NULL pointer dereference in aux device release

Stanislav Fomichev <[email protected]>
xsk: validate metadata when processing requests

Stanislav Fomichev <[email protected]>
xsk: move xsk_tx_metadata_request() to xdp_sock_drv.h

Stanislav Fomichev <[email protected]>
xsk: validate launch-time metadata size

Stanislav Fomichev <[email protected]>
xsk: clear metadata pointer when no timestamp is requested

Stanislav Fomichev <[email protected]>
xsk: pass TX metadata pointer by reference

Stanislav Fomichev <[email protected]>
xsk: require at least 16 bytes of TX metadata

Will Chen <[email protected]>
bnxt: fix memory leak in bnxt_queue_mem_alloc error cases

Nathan Gao <[email protected]>
tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()

Guenter Roeck <[email protected]>
hwmon: (pmbus) Fix type confusion in notification logic

Guenter Roeck <[email protected]>
hwmon: (pmbus/core) Avoid race condition during probe

Christian Borntraeger <[email protected]>
vdpa/mlx5: Fix buffer length in create_direct_keys()

Yousef Alhouseen <[email protected]>
vhost/vdpa: reject overflowing PA map page counts on 32-bit

Linfeng Sun  <[email protected]>
vhost_iotlb: bound map allocation in add_range

Rong Zhang <[email protected]>
ALSA: usb-audio: Add QUIRK_FLAG_MIXER_GET_CUR_BROKEN for Logitech PRO X 2 LIGHTSPEED

Rong Zhang <[email protected]>
ALSA: usb-audio: Add QUIRK_FLAG_MIXER_GET_CUR_BROKEN

Jose Fernandez (Anthropic) <[email protected]>
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()

Babanpreet Singh <[email protected]>
counter: microchip-tcb-capture: Fix DT channel validation

Chengfeng Ye <[email protected]>
bpf: Fix netns reference imbalance in conntrack kfuncs

Lizhi Hou <[email protected]>
accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()

Michael Guralnik <[email protected]>
net/mlx5: fw_tracer, return NULL on create error

Or Har-Toov <[email protected]>
devlink: fix net namespace reference leak in reload

Jiawen Liu <[email protected]>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete

Jamal Hadi Salim <[email protected]>
net/sched: cls_route: fix fastmap use-after-free on filter

Mahanta Jambigi <[email protected]>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

Yiyang Chen <[email protected]>
bpf: Propagate untrusted pointer state in commuted arithmetic

Yiyang Chen <[email protected]>
bpf: Preserve pointer state for commuted arithmetic

Lizhi Hou <[email protected]>
accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()

Qu Wenruo <[email protected]>
btrfs: initialize inode mapping flags for cached inodes

Dmitry Antipov <[email protected]>
btrfs: fix memory leak in btrfs_do_encoded_write()

David Lee <[email protected]>
btrfs: lzo: reject inline extents without valid headers

Qu Wenruo <[email protected]>
btrfs: lzo: add error message for invalid headers

Matti Vaittinen <[email protected]>
watchdog: bd96801_wdt: Fix timeout for enabled WDG

Julian Anastasov <[email protected]>
ipvs: return the csum validation for forward hook

Julian Anastasov <[email protected]>
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp

Jozsef Kadlecsik <[email protected]>
netfilter: ipset: switch ext_size to atomic64_t

Nikhil P. Rao <[email protected]>
pds_core: cancel pending PCI reset work on AER recovery

Nikhil P. Rao <[email protected]>
pds_core: keep the health thread stopped during reset

Shay Drory <[email protected]>
net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

Satish Kharat <[email protected]>
enic: fix tx_hang_reset use-after-free on device removal

Xiang Mei (Microsoft) <[email protected]>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor

Fan Ye <[email protected]>
Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"

Jijie Shao <[email protected]>
net: hns3: fix speed configuration residue after driver reload

Pengpeng Hou <[email protected]>
drm/bridge: ps8640: propagate AUX transfer register errors

Qingfang Deng <[email protected]>
ovpn: fix incorrect use of rcu_access_pointer()

Antonio Quartulli <[email protected]>
ovpn: ensure TCP vars are initialized first

Antonio Quartulli <[email protected]>
ovpn: disable IPv4 redirects on MP interfaces

Antonio Quartulli <[email protected]>
ovpn: hash floated peer by transport identity only

Antonio Quartulli <[email protected]>
ovpn: zero-initialize sockaddr before learning a floated endpoint

Antonio Quartulli <[email protected]>
ovpn: ensure socket is owned by ovpn before deref sk_user_data

Antonio Quartulli <[email protected]>
ovpn: rehash peer in by_transp_addr table on CMD_PEER_SET

Antonio Quartulli <[email protected]>
ovpn: skip rehash for peers already removed from by_id

Rosen Penev <[email protected]>
ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt

Ralf Lici <[email protected]>

    ovpn: add missing rtnl_link_ops->get_size callback

Hans Ulli Kroll <[email protected]>
pinctrl: qcom: ipq806x: mark pci reset as a GPIO pin function

Hans Ulli Kroll <[email protected]>
pinctrl: qcom: ipq806x: mark gpio as a GPIO pin function

Kuba Piecuch <[email protected]>
selftests/sched_ext: Handle sleeping task affinity changes in numa test

Yuho Choi <[email protected]>
ARM: npcm: Fix OF node refcount leaks in SMP setup

Yun Zhou <[email protected]>
xfs: handle NULL b_addr in xfs_buf_free

Karthikeyan KS <[email protected]>
soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read

Daniel Drake <[email protected]>
arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer

Anna Schumaker <[email protected]>
NFS: Decrement refcounts if allocating nfs_free_stateid_data fails

Anna Schumaker <[email protected]>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

Tejun Heo <[email protected]>
sched_ext: Don't enable non-ext tasks in the sub-sched task loops

Tejun Heo <[email protected]>
sched_ext: Skip sub-disable teardown for never-linked sub-schedulers

Tejun Heo <[email protected]>
sched_ext: Reject setting disallow from init_task outside the enable path

Dmitry Baryshkov <[email protected]>
arm64: dts: qcom: sdm850-lenovo-yoga-c630: lower PSCI cluster idle

Alexander Koskovich <[email protected]>
arm64: dts: qcom: sm8650: Fix IPA IMEM slice

Krzysztof Kozlowski <[email protected]>
arm64: dts: qcom: monaco: Add default GIC address cells

Akhil P Oommen <[email protected]>
arm64: dts: qcom: purwa: Fix GPU IOMMU property

Bjorn Andersson <[email protected]>
arm64: dts: qcom: glymur: fix QUP serial engine IRQs

Bjorn Andersson <[email protected]>
arm64: dts: qcom: glymur: fix PCIe SMMU interrupts

Ray Wu <[email protected]>
drm/amd/display: Check for tg ops in dce110_set_avmute

Ray Wu <[email protected]>
drm/amd/display: Add AV mute wait frames to dce110_set_avmute

Mark Tomlinson <[email protected]>
gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock

Mykyta Yatsenko <[email protected]>
selftests/bpf: Add tests for sleepable tracepoint programs

Michal Luczaj <[email protected]>
selftests/bpf: Fail unbound UDP on sockmap update

Al Viro <[email protected]>
mount: honour SB_NOUSER in the new mount API

-------------

Diffstat:

 Documentation/admin-guide/kernel-parameters.txt    |   9 ++
 Documentation/hwmon/hwmon-kernel-api.rst           |   7 +-
 Documentation/sound/alsa-configuration.rst         |  12 ++
 MAINTAINERS                                        |   5 +
 Makefile                                           |   4 +-
 arch/arm/boot/dts/broadcom/bcm-ns.dtsi             |   2 +-
 arch/arm/mach-npcm/platsmp.c                       |   2 +
 arch/arm64/boot/dts/broadcom/bcm2712.dtsi          |   2 -
 arch/arm64/boot/dts/qcom/glymur.dtsi               |  32 ++--
 arch/arm64/boot/dts/qcom/monaco.dtsi               |   1 +
 arch/arm64/boot/dts/qcom/purwa.dtsi                |   2 +
 .../boot/dts/qcom/sdm850-lenovo-yoga-c630.dts      |   4 +
 arch/arm64/boot/dts/qcom/sm8650.dtsi               |   4 +-
 arch/arm64/include/asm/ptdump.h                    |   2 -
 arch/arm64/mm/mmu.c                                |  43 +-----
 arch/arm64/mm/ptdump.c                             |  11 +-
 arch/x86/kernel/cpu/common.c                       |  10 ++
 arch/x86/kernel/cpu/mce/core.c                     |   2 +-
 arch/x86/kvm/mmu/mmu.c                             |   3 +
 arch/x86/kvm/svm/sev.c                             |  34 ++--
 arch/x86/kvm/svm/svm.h                             |   1 +
 drivers/accel/amdxdna/amdxdna_gem.c                |  47 +++---
 drivers/android/binder/process.rs                  |  12 +-
 drivers/ata/pata_sl82c105.c                        |   4 +-
 drivers/bluetooth/btrtl.c                          |  13 ++
 drivers/bluetooth/btusb.c                          |   2 +
 drivers/counter/microchip-tcb-capture.c            |   4 +-
 drivers/dibs/dibs_loopback.c                       |   1 -
 drivers/dibs/dibs_main.c                           |  16 +-
 drivers/gpio/gpio-pca953x.c                        |  19 ++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  35 +++--
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   6 +-
 .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c  |  24 ++-
 drivers/gpu/drm/bridge/parade-ps8640.c             |  27 +++-
 drivers/gpu/drm/v3d/v3d_drv.h                      |   6 +
 drivers/gpu/drm/v3d/v3d_sched.c                    |   9 +-
 drivers/gpu/drm/xe/xe_exec_queue.c                 |   3 +
 drivers/gpu/drm/xe/xe_uc.c                         |   7 +-
 drivers/hwmon/ads7828.c                            |  11 +-
 drivers/hwmon/corsair-psu.c                        |   8 +-
 drivers/hwmon/ltc4282.c                            |  20 ++-
 drivers/hwmon/nzxt-smart2.c                        |   6 +-
 drivers/hwmon/pmbus/lm25066.c                      |   5 +-
 drivers/hwmon/pmbus/pmbus_core.c                   |  65 +++++---
 drivers/input/evdev.c                              |  27 ++--
 drivers/misc/fastrpc.c                             |  27 ++--
 drivers/misc/mei/client.c                          |  25 +--
 drivers/net/bonding/bond_alb.c                     |  10 +-
 drivers/net/ethernet/amd/pds_core/core.h           |   1 +
 drivers/net/ethernet/amd/pds_core/main.c           |  14 +-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.c   |  51 +++++-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.h   |   1 +
 drivers/net/ethernet/aquantia/atlantic/aq_vec.c    |   2 +-
 drivers/net/ethernet/broadcom/bnge/bnge_auxr.c     |   9 +-
 drivers/net/ethernet/broadcom/bnge/bnge_netdev.c   |   2 -
 drivers/net/ethernet/broadcom/bnge/bnge_resc.c     |   3 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  64 +++++---
 drivers/net/ethernet/broadcom/bnxt/bnxt.h          |   1 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c      |   7 +-
 drivers/net/ethernet/cisco/enic/enic_main.c        |   5 +-
 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c      |   1 -
 .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c    |   6 +-
 drivers/net/ethernet/intel/igc/igc_main.c          |  10 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c   |   6 +-
 .../net/ethernet/marvell/prestera/prestera_pci.c   |   3 +
 .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c   |  16 +-
 drivers/net/ethernet/mellanox/mlx5/core/en.h       |   2 +-
 .../net/ethernet/mellanox/mlx5/core/en/tc_priv.h   |   1 +
 drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c   |  15 +-
 drivers/net/ethernet/mellanox/mlx5/core/en/xdp.h   |   4 +-
 .../net/ethernet/mellanox/mlx5/core/en/xsk/tx.c    |   2 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |   4 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_tc.c    |   4 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  13 +-
 drivers/net/ntb_netdev.c                           |  15 +-
 drivers/net/ovpn/main.c                            |  64 +++++---
 drivers/net/ovpn/netlink.c                         |   6 +
 drivers/net/ovpn/peer.c                            | 172 +++++++++++++++------
 drivers/net/ovpn/peer.h                            |   1 +
 drivers/net/ovpn/socket.c                          |   9 ++
 drivers/net/phy/mediatek/mtk.h                     |   8 +-
 drivers/net/tap.c                                  |  24 +--
 drivers/net/thunderbolt/main.c                     |  33 ++--
 drivers/net/usb/ax88179_178a.c                     |   4 +-
 drivers/net/usb/ipheth.c                           |  11 +-
 drivers/net/usb/usbnet.c                           |   3 +-
 drivers/net/veth.c                                 |  22 ++-
 drivers/net/vxlan/vxlan_core.c                     |   2 +-
 drivers/nvmem/apple-spmi-nvmem.c                   |  20 ++-
 drivers/nvmem/core.c                               |  24 +--
 drivers/nvmem/internals.h                          |   2 +
 drivers/nvmem/layouts.c                            |  11 --
 drivers/nvmem/layouts/Makefile                     |   1 +
 drivers/nvmem/layouts/fixed-layout.c               |  58 +++++++
 drivers/pinctrl/qcom/pinctrl-ipq8064.c             |   8 +-
 drivers/pinctrl/qcom/pinctrl-msm.h                 |   5 +
 drivers/ptp/ptp_ocp.c                              |   4 +-
 drivers/s390/net/ism_drv.c                         |  19 ++-
 drivers/scsi/scsi_debug.c                          |   4 +-
 drivers/soc/aspeed/Makefile                        |   1 +
 drivers/soc/aspeed/aspeed-lpc-snoop.c              |  38 +++--
 drivers/staging/rtl8723bs/core/rtw_ieee80211.c     |   3 +
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |   2 +-
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c     |   3 +
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |   4 +
 drivers/thermal/thermal_hwmon.c                    | 154 ++++++++++++------
 drivers/thunderbolt/eeprom.c                       |   9 +-
 drivers/thunderbolt/icm.c                          |   2 +-
 drivers/thunderbolt/tb.c                           |   2 +-
 drivers/tty/serial/8250/8250_dma.c                 |  12 +-
 drivers/tty/serial/8250/8250_of.c                  |  38 +++++
 drivers/tty/serial/amba-pl011.c                    |  86 +++++++----
 drivers/tty/serial/qcom_geni_serial.c              |  43 +++---
 drivers/tty/serial/sc16is7xx.c                     |   3 +
 drivers/tty/vt/keyboard.c                          |   5 +-
 drivers/tty/vt/vt_ioctl.c                          |   2 +
 drivers/usb/atm/cxacru.c                           |   2 +
 drivers/usb/cdns3/cdnsp-gadget.c                   |   4 +-
 drivers/usb/core/config.c                          |  32 +++-
 drivers/usb/core/quirks.c                          |   7 +
 drivers/usb/gadget/function/f_ncm.c                |   2 +-
 drivers/usb/host/xhci.h                            |  12 +-
 drivers/usb/misc/usbio.c                           |   2 +-
 drivers/vdpa/mlx5/core/mlx5_vdpa.h                 |   2 +
 drivers/vdpa/mlx5/core/mr.c                        |   8 +-
 drivers/vdpa/mlx5/core/resources.c                 |  11 +-
 drivers/vdpa/vdpa_sim/vdpa_sim.c                   |  10 +-
 drivers/vdpa/vdpa_user/iova_domain.c               |  11 +-
 drivers/vhost/iotlb.c                              |  47 ++++--
 drivers/vhost/scsi.c                               |  17 ++
 drivers/vhost/vdpa.c                               |  18 ++-
 drivers/vhost/vhost.c                              |  16 ++
 drivers/video/fbdev/core/bitblit.c                 |   9 +-
 drivers/watchdog/at91sam9_wdt.c                    |   4 +-
 drivers/watchdog/bd96801_wdt.c                     |   5 +-
 fs/attr.c                                          |   2 +-
 fs/binfmt_misc.c                                   |   3 +-
 fs/btrfs/inode.c                                   |   4 +-
 fs/btrfs/lzo.c                                     |  16 +-
 fs/crypto/policy.c                                 |   2 +-
 fs/namespace.c                                     |   4 +
 fs/nfs/nfs4proc.c                                  |  17 +-
 fs/overlayfs/super.c                               |   3 +-
 fs/smb/client/sess.c                               |   2 +-
 fs/smb/client/smb1transport.c                      |  28 +++-
 fs/tracefs/event_inode.c                           |  28 +++-
 fs/tracefs/internal.h                              |   4 +-
 fs/verity/measure.c                                |  15 +-
 fs/xfs/xfs_buf.c                                   |   2 +-
 include/linux/dibs.h                               |   2 +-
 include/linux/hwmon.h                              |   3 +
 include/linux/mmap_lock.h                          |   1 +
 include/linux/netdevice.h                          |  11 +-
 include/linux/netfilter/ipset/ip_set.h             |   2 +-
 include/linux/nvmem-provider.h                     |   6 +
 include/linux/psi.h                                |   4 +-
 include/linux/sched/ext.h                          |  10 +-
 include/linux/usb/quirks.h                         |   3 +
 include/net/act_api.h                              |  19 +++
 include/net/addrconf.h                             |   4 +-
 include/net/ip_vs.h                                |  48 +++---
 include/net/libeth/xsk.h                           |   2 +-
 include/net/route.h                                |   2 +
 include/net/sch_generic.h                          |   1 +
 include/net/xdp_sock.h                             |  47 +-----
 include/net/xdp_sock_drv.h                         |  77 +++++++--
 include/uapi/linux/ip_vs.h                         |   6 -
 kernel/bpf/rqspinlock.c                            |   5 +-
 kernel/bpf/verifier.c                              |  29 ++--
 kernel/cgroup/cgroup.c                             |  23 ++-
 kernel/events/core.c                               |  67 ++++----
 kernel/futex/core.c                                |  85 ++++++----
 kernel/sched/ext.c                                 |  47 ++++--
 kernel/sched/psi.c                                 |  75 +++++++--
 kernel/trace/ring_buffer.c                         |  15 +-
 kernel/trace/trace_events.c                        |   4 +-
 mm/damon/lru_sort.c                                |   2 +
 mm/damon/ops-common.c                              |  13 +-
 mm/damon/paddr.c                                   |   2 +
 mm/damon/vaddr.c                                   |   3 +-
 mm/filemap.c                                       |   6 +
 mm/huge_memory.c                                   |  53 ++++---
 mm/memory.c                                        |   2 +-
 mm/page_table_check.c                              |  20 ++-
 mm/pagewalk.c                                      |  36 +++--
 mm/ptdump.c                                        |   7 +
 mm/vmalloc.c                                       |  40 +++--
 net/atm/common.c                                   |  14 +-
 net/bridge/br_mrp.c                                |   6 +-
 net/bridge/netfilter/ebt_nflog.c                   |  17 +-
 net/bridge/netfilter/nf_conntrack_bridge.c         |   1 +
 net/core/datagram.c                                |   3 +
 net/core/dev.c                                     |  10 +-
 net/core/filter.c                                  |   4 +-
 net/core/sock.c                                    |   1 -
 net/core/xdp.c                                     |   2 +-
 net/devlink/dev.c                                  |   1 +
 net/ipv4/fib_semantics.c                           | 101 +++++++-----
 net/ipv4/inet_connection_sock.c                    |  20 ++-
 net/ipv4/inet_fragment.c                           |  10 +-
 net/ipv4/route.c                                   |  29 ++++
 net/ipv4/tcp_bpf.c                                 |   2 +
 net/ipv4/tcp_input.c                               |   2 +-
 net/ipv4/tcp_ipv4.c                                |  43 +++---
 net/ipv4/udp_offload.c                             |   4 +-
 net/ipv6/ip6_tunnel.c                              |   3 +
 net/ipv6/route.c                                   |   8 +-
 net/mac802154/scan.c                               |   4 +
 net/ncsi/ncsi-netlink.c                            |   4 +
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   4 +-
 net/netfilter/ipset/ip_set_core.c                  |   6 +-
 net/netfilter/ipset/ip_set_hash_gen.h              |   2 +-
 net/netfilter/ipset/ip_set_list_set.c              |   4 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |  45 ++----
 net/netfilter/ipvs/ip_vs_core.c                    |  76 ++++-----
 net/netfilter/ipvs/ip_vs_ctl.c                     |  81 ++++++++--
 net/netfilter/ipvs/ip_vs_dh.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_est.c                     |  10 +-
 net/netfilter/ipvs/ip_vs_lblc.c                    |   2 +-
 net/netfilter/ipvs/ip_vs_lblcr.c                   |   8 +-
 net/netfilter/ipvs/ip_vs_lc.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_proto_sctp.c              |   4 +-
 net/netfilter/ipvs/ip_vs_proto_tcp.c               |   2 -
 net/netfilter/ipvs/ip_vs_sync.c                    |   7 +-
 net/netfilter/ipvs/ip_vs_xmit.c                    |   6 +-
 net/netfilter/nf_conntrack_bpf.c                   |  72 ++++++---
 net/netfilter/nf_conntrack_proto.c                 |   6 +
 net/netfilter/nf_conntrack_proto_sctp.c            |  12 +-
 net/netfilter/nf_conntrack_proto_tcp.c             | 132 ++++++++++------
 net/netfilter/nf_flow_table_ip.c                   |   3 +
 net/openvswitch/datapath.c                         |  29 +++-
 net/openvswitch/flow.c                             |  11 +-
 net/packet/af_packet.c                             |  72 ++++++---
 net/qrtr/ns.c                                      |   2 +-
 net/sched/act_ct.c                                 |  29 +++-
 net/sched/act_gact.c                               |   5 +
 net/sched/act_police.c                             |   6 +
 net/sched/cls_api.c                                |  17 +-
 net/sched/cls_route.c                              |  35 +++--
 net/sched/sch_api.c                                |   9 ++
 net/sched/sch_cake.c                               |   1 -
 net/sctp/associola.c                               |  11 +-
 net/sctp/outqueue.c                                |   1 +
 net/sctp/sm_make_chunk.c                           |   3 +-
 net/sctp/sm_statefuns.c                            |   6 +-
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc_llc.c                                  |   3 +-
 net/smc/smc_rx.c                                   |  19 +--
 net/tipc/node.c                                    |  15 +-
 net/tls/tls_sw.c                                   |  18 ++-
 net/vmw_vsock/virtio_transport.c                   |  14 +-
 net/x25/af_x25.c                                   |   4 +-
 net/x25/x25_timer.c                                |  25 +--
 net/xdp/xdp_umem.c                                 |   2 +
 net/xdp/xsk.c                                      |  11 +-
 net/xdp/xsk_buff_pool.c                            |   6 +-
 samples/damon/mtier.c                              |   3 +
 security/integrity/ima/ima_appraise.c              |   9 +-
 security/integrity/ima/ima_main.c                  |  39 +++++
 sound/hda/codecs/side-codecs/tas2781_hda_spi.c     |   3 +-
 sound/usb/endpoint.c                               |   6 +-
 sound/usb/fcp.c                                    |  10 +-
 sound/usb/midi2.c                                  |   9 ++
 sound/usb/mixer.c                                  |  60 +++++--
 sound/usb/mixer.h                                  |   1 +
 sound/usb/quirks.c                                 |   7 +
 sound/usb/usbaudio.h                               |  13 ++
 sound/usb/usx2y/us144mkii_capture.c                |   1 +
 sound/usb/usx2y/usX2Yhwdep.c                       |   2 +
 sound/usb/usx2y/usx2yhwdeppcm.c                    |   2 +
 .../selftests/bpf/prog_tests/sockmap_basic.c       |   6 +-
 .../selftests/bpf/prog_tests/sockmap_listen.c      |  21 +--
 tools/testing/selftests/bpf/prog_tests/test_xsk.c  |  50 +++---
 tools/testing/selftests/bpf/test_maps.c            |  13 +-
 tools/testing/selftests/bpf/verifier/sleepable.c   |  17 +-
 .../ftrace/test.d/dynevent/add_remove_eprobe.tc    |  16 +-
 tools/testing/selftests/net/tls.c                  |  57 +++++++
 tools/testing/selftests/sched_ext/numa.bpf.c       |  13 +-
 279 files changed, 3087 insertions(+), 1355 deletions(-)