Skip to content

5.15.217-rc1 review

Greg Kroah-Hartman dri-devel linux-patches linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest272 patches 13 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/272f2fs: fix UAF issue in f2fs_merge_page_bio()fs/f2fs/data.c+1 -10 replies
2/272media: mtk-vcodec: potential null pointer deference in SCPdrivers/media/platform/mtk-vcodec/mtk_vcodec_fw_scp.c+2 -00 replies
3/272media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initializationdrivers/media/platform/mtk-vcodec/mtk_vcodec_fw_scp.c+4 -10 replies
4/272fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()fs/crypto/policy.c+1 -10 replies
5/272ipvs: separate destination availability stateinclude/net/ip_vs.h include/uapi/linux/ip_vs.h net/netfilter/ipvs/ip_vs_conn.c +5 more+21 -200 replies
6/272selinux: require every boolean value to be definedsecurity/selinux/ss/policydb.c+19 -01 reply
7/272selinux: reject a class permission count below its inherited commonsecurity/selinux/ss/policydb.c+12 -00 replies
8/272selinux: do not cancel a policy conversion that never startedsecurity/selinux/ss/services.c+3 -10 replies
9/272mptcp: options: reset DSS fields in case of unexpected sizenet/mptcp/options.c+7 -10 replies
10/272s390/qeth: validate user buffer length in SNMP and ARP query ioctlsdrivers/s390/net/qeth_core_main.c drivers/s390/net/qeth_l3_main.c+8 -00 replies
11/272ASoC: cs4265: sort the register default tablesound/soc/codecs/cs4265.c+2 -20 replies
12/272ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accessessound/soc/codecs/lpass-wsa-macro.c+4 -40 replies
13/272powerpc/pseries: pci - logic bugarch/powerpc/platforms/pseries/pci.c+1 -10 replies
14/272Input: synaptics-rmi4 - fix F55 transmitter electrode count typodrivers/input/rmi4/rmi_f55.c+2 -20 replies
15/272Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packetdrivers/input/mouse/focaltech.c+1 -10 replies
16/272Input: psxpad-spi - set driver data before usedrivers/input/joystick/psxpad-spi.c+1 -00 replies
17/272Input: atkbd - skip deactivate for Xiaomi Book Pro 14s internal keyboarddrivers/input/keyboard/atkbd.c+8 -00 replies
18/272Input: iforce - validate input packet lengthsdrivers/input/joystick/iforce/iforce-packets.c drivers/input/joystick/iforce/iforce-usb.c+13 -10 replies
19/272powerpc/pseries: lparcfg - fix kbuf[] underflowarch/powerpc/platforms/pseries/lparcfg.c+1 -10 replies
20/272Input: synaptics-rmi4 - zero report size on F54 work errordrivers/input/rmi4/rmi_f54.c+8 -80 replies
21/272Input: synaptics-rmi4 - bound the F54 report size to the allocated bufferdrivers/input/rmi4/rmi_f54.c+10 -20 replies
22/272Input: synaptics-rmi4 - block s_input when F54 queue is busydrivers/input/rmi4/rmi_f54.c+6 -10 replies
23/272Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queuedrivers/input/rmi4/rmi_f54.c+8 -00 replies
24/272crypto: qce - fix error path in devm_qce_register_algsdrivers/crypto/qce/core.c+1 -10 replies
25/272libceph: fix multiple unsafe decodes in decode_locker()net/ceph/cls_lock_client.c+9 -40 replies
26/272ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()kernel/trace/ftrace.c+5 -10 replies
27/272openrisc: signal: do not restore privileged SR bits on sigreturnarch/openrisc/include/asm/processor.h arch/openrisc/kernel/signal.c+5 -20 replies
28/272Input: sur40 - fix input device registration orderingdrivers/input/touchscreen/sur40.c+11 -100 replies
29/272Input: sur40 - fix V4L error path cleanupdrivers/input/touchscreen/sur40.c+3 -10 replies
30/272libceph: Avoid using invalid osd indices from primary_tempnet/ceph/osdmap.c+3 -20 replies
31/272ceph: fix MDS random selection readiness predicatefs/ceph/mdsmap.c+1 -10 replies
32/272libceph: tolerate addrvecs with multiple entries of the same typenet/ceph/decode.c+9 -90 replies
33/272mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bitdrivers/mmc/host/omap_hsmmc.c+1 -10 replies
34/272mmc: sdhci: unmap the bounce buffer before device releasedrivers/mmc/host/sdhci.c+16 -00 replies
35/272mmc: sdhci: make tuning_err a signed intdrivers/mmc/host/sdhci.h+1 -10 replies
36/272mmc: atmel-mci: Fix use-after-free in atmci_remove due to race conditiondrivers/mmc/host/atmel-mci.c+2 -00 replies
37/272drm/radeon: fix autosuspend cleanup during teardowndrivers/gpu/drm/radeon/radeon_kms.c+1 -00 replies
38/272s390/vfio_ccw: Fix out of bounds check on CCW arraydrivers/s390/cio/vfio_ccw_cp.c+5 -120 replies
39/272drm/amdgpu: Reject UVD message with invalid number of h265 refsdrivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c+3 -00 replies
40/272drm/amdgpu: validate GEM_CREATE domain combinationsdrivers/gpu/drm/amd/amdgpu/amdgpu_gem.c+21 -00 replies
41/272drm/amdgpu: Reject UVD message with dimensions above 4096drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c+2 -20 replies
42/272drm/amdgpu: Implement insert_end for VCE 3drivers/gpu/drm/amd/amdgpu/vce_v3_0.c+22 -40 replies
43/272drm/amdgpu: Fix UVD decode image min size calculationdrivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c+2 -20 replies
44/272xfs: fix ilock leak on error in xfs_dq_get_next_idfs/xfs/xfs_dquot.c+2 -10 replies
45/272xfs: check v5 superblock features earlyfs/xfs/libxfs/xfs_sb.c+2 -20 replies
46/272net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slotnet/smc/af_smc.c+2 -10 replies
47/272mm: do file ownership checks with the proper mount idmapinclude/linux/fs.h mm/madvise.c mm/mincore.c+7 -40 replies
48/272iommu/amd: Dont split flush for amd_iommu_domain_flush_all()drivers/iommu/amd/iommu.c+2 -10 replies
49/272bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitializedinclude/linux/bpf_lsm.h kernel/bpf/bpf_inode_storage.c security/bpf/hooks.c+17 -00 replies
50/272udmabuf: Do not create malformed scatterlistsdrivers/dma-buf/udmabuf.c+5 -30 replies
51/272dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warningdrivers/dma-buf/udmabuf.c+2 -20 replies
52/272fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()drivers/fpga/dfl-afu-main.c+3 -00 replies
53/272Input: mms114 - fix touch indexing for MMS134S and MMS136drivers/input/touchscreen/mms114.c+11 -40 replies
54/272i2c: davinci: Unregister cpufreq notifier on probe failuredrivers/i2c/busses/i2c-davinci.c+3 -10 replies
55/272Input: mms114 - reject an oversized device packet sizedrivers/input/touchscreen/mms114.c+6 -00 replies
56/272ALSA: hda: conexant: Remove mic bias threshold overridesound/pci/hda/patch_conexant.c+0 -30 replies
57/272VFS/audit: introduce kern_path_parent() for auditfs/namei.c include/linux/namei.h kernel/audit.h +2 more+55 -110 replies
58/272audit: widen ino fields to u64include/linux/audit.h kernel/audit.h kernel/audit_fsnotify.c +2 more+13 -140 replies
59/272audit: use unsigned int instead of unsignedinclude/linux/audit.h kernel/audit.c kernel/audit.h +4 more+22 -220 replies
60/272audit: fix recursive locking deadlock in audit_dupe_exe()kernel/audit.h kernel/audit_fsnotify.c kernel/audit_watch.c +1 more+57 -260 replies
61/272ALSA: hda: Fix cached processing coefficient verbssound/hda/hdac_regmap.c+2 -20 replies
62/272serial: max310x: replace bare use of unsigned with unsigned int (checkpatch)drivers/tty/serial/max310x.c+4 -40 replies
63/272serial: max310x: implement gpio_chip::get_direction()drivers/tty/serial/max310x.c+12 -00 replies
64/272rxrpc: serialize kernel accept preallocation with socket teardownnet/rxrpc/call_accept.c+20 -70 replies
65/272fbcon: Rename struct fbcon_ops to struct fbcon_pardrivers/video/fbdev/core/bitblit.c drivers/video/fbdev/core/fbcon.c drivers/video/fbdev/core/fbcon.h +7 more+544 -5440 replies
66/272fbcon: Use correct type for vc_resize() return valuedrivers/video/fbdev/core/fbcon.c+1 -20 replies
67/272tipc: restrict socket queue dumps in enqueue tracepointsnet/tipc/socket.c+3 -30 replies
68/272mlxsw: spectrum: On port enslavement to a LAG, join uppers bridgesdrivers/net/ethernet/mellanox/mlxsw/spectrum.c+90 -00 replies
69/272mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()drivers/net/ethernet/mellanox/mlxsw/spectrum.c+1 -10 replies
70/272vduse: Use fixed 4KB bounce pages for non-4KB page sizedrivers/vdpa/vdpa_user/iova_domain.c drivers/vdpa/vdpa_user/iova_domain.h+50 -190 replies
71/272vduse: remove unused vaddr parameter of vduse_domain_free_coherentdrivers/vdpa/vdpa_user/iova_domain.c drivers/vdpa/vdpa_user/iova_domain.h drivers/vdpa/vdpa_user/vduse_dev.c+3 -50 replies
72/272vduse: take out allocations from vduse_dev_alloc_coherentdrivers/vdpa/vdpa_user/iova_domain.c drivers/vdpa/vdpa_user/iova_domain.h drivers/vdpa/vdpa_user/vduse_dev.c+19 -240 replies
73/272VDUSE: avoid leaking information to userspacedrivers/vdpa/vdpa_user/iova_domain.c drivers/vdpa/vdpa_user/vduse_dev.c+2 -20 replies
74/272octeontx2-af: Fix APR entry mapping based on APR_LMT_CFGdrivers/net/ethernet/marvell/octeontx2/af/rvu_cn10k.c+6 -30 replies
75/272octeontx2: Annotate mmio regions as __iomemdrivers/net/ethernet/marvell/octeontx2/af/rvu.c drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c+7 -80 replies
76/272octeontx2-pf: clear stale mailbox IRQ state before request_irq()drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c+4 -40 replies
77/272octeontx2-vf: clear stale mailbox IRQ state before request_irq()drivers/net/ethernet/marvell/octeontx2/nic/otx2_vf.c+4 -40 replies
78/272ASoC: mediatek: mt8183: Check runtime resume during probesound/soc/mediatek/mt8183/mt8183-afe-pcm.c+8 -40 replies
79/272tcp: convert to dev_net_rcu()include/net/inet6_hashtables.h include/net/inet_hashtables.h net/ipv4/tcp_ipv4.c +2 more+14 -140 replies
80/272net: dst: annotate data-races around dst->inputinclude/net/dst.h include/net/lwtunnel.h net/core/dst.c +1 more+5 -50 replies
81/272net: dst: annotate data-races around dst->outputinclude/net/dst.h include/net/lwtunnel.h net/core/dst.c +1 more+5 -50 replies
82/272net: dst: add four helpers to annotate data-races around dst->devinclude/net/dst.h net/core/dst.c net/core/sock.c+25 -50 replies
83/272ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]include/net/inet_hashtables.h include/net/ip.h include/net/route.h +11 more+41 -360 replies
84/272netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dstinclude/net/netfilter/nf_queue.h net/netfilter/nf_queue.c net/netfilter/nfnetlink_queue.c+18 -00 replies
85/272ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()sound/soc/mediatek/mt8192/mt8192-afe-pcm.c+17 -290 replies
86/272ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()sound/soc/mediatek/mt8192/mt8192-afe-pcm.c+22 -430 replies
87/272ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cbsound/soc/mediatek/mt8192/mt8192-afe-pcm.c+2 -20 replies
88/272ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variablesound/soc/mediatek/mt8192/mt8192-afe-pcm.c+8 -90 replies
89/272ASoC: mediatek: mt8192: Check runtime resume during probesound/soc/mediatek/mt8192/mt8192-afe-pcm.c+8 -40 replies
90/272netfilter: nft_set_pipapo: use GFP_KERNEL for insertionsnet/netfilter/nft_set_pipapo.c+11 -70 replies
91/272netfilter: nft_set_pipapo: move prove_locking helper aroundnet/netfilter/nft_set_pipapo.c+11 -110 replies
92/272netfilter: nf_conntrack_sip: remove net variable shadowingnet/netfilter/nf_conntrack_sip.c+1 -20 replies
93/272netfilter: nf_conntrack_sip: validate skb_dst() before accessing itnet/netfilter/nf_conntrack_sip.c+5 -20 replies
94/272netfilter: nft_set_pipapo: make pipapo_clone helper return NULLnet/netfilter/nft_set_pipapo.c+7 -70 replies
95/272netfilter: nft_set_pipapo: prepare walk function for on-demand clonenet/netfilter/nft_set_pipapo.c+39 -210 replies
96/272netfilter: nft_set_pipapo: merge deactivate helper into callernet/netfilter/nft_set_pipapo.c+9 -300 replies
97/272netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clonenet/netfilter/nft_set_pipapo.c+15 -100 replies
98/272netfilter: nft_set_pipapo: move cloning of match info to insert/removal pathnet/netfilter/nft_set_pipapo.c+49 -210 replies
99/272netfilter: nft_set_pipapo: dont leak bad clone into future transactionnet/netfilter/nft_set_pipapo.c net/netfilter/nft_set_pipapo.h+37 -50 replies
100/272remoteproc: qcom: replace kstrdup with kstrndupdrivers/remoteproc/qcom_common.c+1 -10 replies
101/272remoteproc: qcom: fix sparse warningsdrivers/remoteproc/qcom_common.c+2 -20 replies
102/272remoteproc: qcom: pas: Adjust the phys addr wrt the mem regiondrivers/remoteproc/qcom_common.c drivers/remoteproc/qcom_common.h drivers/remoteproc/qcom_q6v5_pas.c+32 -60 replies
103/272remoteproc: qcom: Fix leak when custom dump_segments addition failsdrivers/remoteproc/qcom_common.c+10 -40 replies
104/272lsm: use default hook return value in call_int_hook()security/security.c+280 -2050 replies
105/272lsm: infrastructure management of the sock securityinclude/linux/lsm_hooks.h security/apparmor/include/net.h security/apparmor/lsm.c +7 more+152 -1190 replies
106/272selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()security/selinux/hooks.c+10 -90 replies
107/272fs/ntfs3: Make ntfs_update_mftmirr return voidfs/ntfs3/fsntfs.c fs/ntfs3/ntfs_fs.h+8 -140 replies
108/272fs/ntfs3: Undo critial modificatins to keep directory consistencyfs/ntfs3/index.c+20 -100 replies
109/272ntfs3: validate split-point offset in indx_insert_into_bufferfs/ntfs3/index.c+14 -00 replies
110/2729p: skip nlink update in cacheless mode to fix WARN_ONfs/9p/vfs_inode.c+9 -00 replies
111/272mtd: maps: vmu-flash: fix fault in unaligned fixupdrivers/mtd/maps/vmu-flash.c+3 -51 reply
112/272net: thunderbolt: Fix frags[] overflow by bounding frame_countdrivers/net/thunderbolt.c+6 -20 replies
113/272mtd: spi-nor: Fix spi_nor_try_unlock_all()drivers/mtd/spi-nor/swp.c+8 -110 replies
114/272mtd: spi-nor: swp: Improve locking user experiencedrivers/mtd/spi-nor/swp.c+9 -20 replies
115/272dmaengine: dw-edma: Remove unused irq field in struct dw_edma_chipdrivers/dma/dw-edma/dw-edma-pcie.c include/linux/dma/edma.h+0 -30 replies
116/272dmaengine: dw-edma: Detach the private data and chip info structuresdrivers/dma/dw-edma/dw-edma-core.c drivers/dma/dw-edma/dw-edma-core.h drivers/dma/dw-edma/dw-edma-pcie.c +5 more+164 -1490 replies
117/272dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASKdrivers/dma/dw-edma/dw-edma-core.h drivers/dma/dw-edma/dw-edma-v0-core.c+7 -10 replies
118/272taskstats: fill_stats_for_tgid: use for_each_thread()kernel/taskstats.c+2 -30 replies
119/272taskstats: retain dead thread stats in TGID querieskernel/taskstats.c+33 -290 replies
120/272smb: client: use kvzalloc() for megabyte buffer in simple fallocatefs/cifs/smb2ops.c+2 -22 replies
121/272tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()drivers/char/tpm/tpm_tis_core.c+24 -140 replies
122/272ksmbd: fix integer overflow in set_file_allocation_info()fs/ksmbd/smb2pdu.c+14 -10 replies
123/272i2c: imx: separate atomic, dma and non-dma use casedrivers/i2c/busses/i2c-imx.c+70 -370 replies
124/272i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)drivers/i2c/busses/i2c-imx.c+16 -30 replies
125/272can/esd_usb2: Rename esd_usb2.c to esd_usb.cdrivers/net/can/usb/Kconfig drivers/net/can/usb/Makefile drivers/net/can/usb/esd_usb.c +1 more+1182 -11750 replies
126/272can: esd_usb: kill anchored URBs before freeing netdevsdrivers/net/can/usb/esd_usb.c+4 -10 replies
127/272thunderbolt: Remove usage of the deprecated ida_simple_xx() APIdrivers/thunderbolt/domain.c drivers/thunderbolt/nhi.c drivers/thunderbolt/nvm.c +2 more+13 -130 replies
128/272thunderbolt: Update property.c function documentationdrivers/thunderbolt/property.c+28 -100 replies
129/272thunderbolt: Keep XDomain reference during the lifetime of a servicedrivers/thunderbolt/xdomain.c+2 -10 replies
130/272thunderbolt: Remove service debugfs entries during unregisterdrivers/thunderbolt/xdomain.c+11 -30 replies
131/272thunderbolt: Remove XDomain from the bus without holding tb->lockdrivers/thunderbolt/domain.c drivers/thunderbolt/icm.c drivers/thunderbolt/switch.c +3 more+113 -470 replies
132/272thunderbolt: Prevent XDomain delayed work use-after-free on disconnectdrivers/thunderbolt/xdomain.c include/linux/thunderbolt.h+20 -50 replies
133/272bpf,fork: wipe ->bpf_storage before bailouts that access itkernel/fork.c+5 -40 replies
134/272ovl: use linked upper dentry in copy-up tmpfilefs/overlayfs/copy_up.c+10 -40 replies
135/272scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()drivers/scsi/lpfc/lpfc_init.c+1 -20 replies
136/272dm-integrity: dont increment hash_offset twicedrivers/md/dm-integrity.c+0 -40 replies
137/272dm-verity: make error counter atomicdrivers/md/dm-verity-target.c drivers/md/dm-verity.h+8 -60 replies
138/272firmware_loader: introduce __free() cleanup hanlerinclude/linux/firmware.h+3 -00 replies
139/272Input: ims-pcu - fix firmware leak in async updatedrivers/input/misc/ims-pcu.c+2 -30 replies
140/272mmc: vub300: fix use-after-free on disconnectdrivers/mmc/host/vub300.c+6 -60 replies
141/272mmc: vub300: rename probe error labelsdrivers/mmc/host/vub300.c+11 -90 replies
142/272mmc: vub300: fix use-after-free on probe failuredrivers/mmc/host/vub300.c+7 -30 replies
143/272locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()kernel/locking/spinlock_rt.c+24 -30 replies
144/272net: Add helper function to parse netlink msg of ip_tunnel_encapinclude/net/ip_tunnels.h net/ipv4/ip_tunnel_core.c net/ipv4/ipip.c +2 more+44 -1070 replies
145/272net: ipip: require CAP_NET_ADMIN in the device netns for changelinknet/ipv4/ipip.c+3 -00 replies
146/272net: ixp4xx_hss: fix duplicate HDLC netdev allocationdrivers/net/wan/ixp4xx_hss.c+2 -20 replies
147/272net/sched: act_ct: preserve tc_skb_cb across defragmentationnet/sched/act_ct.c+5 -50 replies
148/272net: mana: Validate the packet length reported by the NICdrivers/net/ethernet/microsoft/mana/mana_en.c+13 -00 replies
149/272net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelinknet/ipv6/ip6_tunnel.c+3 -00 replies
150/272octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PFdrivers/net/ethernet/marvell/octeontx2/af/rvu.c drivers/net/ethernet/marvell/octeontx2/af/rvu.h drivers/net/ethernet/marvell/octeontx2/af/rvu_cn10k.c+11 -10 replies
151/272treewide: rename pinctrl_gpio_direction_output_new()drivers/gpio/gpio-mvebu.c drivers/gpio/gpio-pxa.c drivers/gpio/gpio-rockchip.c +23 more+70 -570 replies
152/272gpio: tegra: do not call pinctrl for GPIO directiondrivers/gpio/gpio-tegra.c+2 -160 replies
153/272net/sched: taprio: avoid calling child->ops->dequeue(child) twicenet/sched/sch_taprio.c+3 -70 replies
154/272net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peekednet/sched/sch_taprio.c+1 -10 replies
155/272bootconfig: do not put quotes on cmdline items unless necessaryinit/main.c+9 -30 replies
156/272bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.cinclude/linux/bootconfig.h init/main.c lib/bootconfig.c+59 -450 replies
157/272bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()lib/bootconfig.c+16 -70 replies
158/272espintcp: use sk_msg_free_partial to fix partial sendnet/xfrm/espintcp.c+6 -260 replies
159/272net: ipa: fix SMEM state handle leaks in SMP2P initdrivers/net/ipa/ipa_smp2p.c+22 -80 replies
160/272octeontx2-pf: fix SQB pointer leak on init failuredrivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c+1 -20 replies
161/272fs/resctrl: Fix double-add of pseudo-locked regions RMID to free listarch/x86/kernel/cpu/resctrl/rdtgroup.c+7 -50 replies
162/272KVM: x86/mmu: Directly "destroy" PTE list when recycling rmapsarch/x86/kvm/mmu/mmu.c+1 -10 replies
163/272KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEsarch/x86/kvm/mmu/mmu.c+9 -80 replies
164/272KVM: x86/mmu: Document the "rules" for using host_pfn_mapping_level()arch/x86/kvm/mmu/mmu.c+25 -00 replies
165/272KVM: Rename mmu_notifier_* to mmu_invalidate_*arch/arm64/kvm/mmu.c arch/mips/kvm/mmu.c arch/powerpc/include/asm/kvm_book3s_64.h +11 more+93 -900 replies
166/272KVM: x86/mmu: Split out TDP MMU page fault handlingarch/x86/kvm/mmu/mmu.c+64 -200 replies
167/272KVM: x86/mmu: Rename __direct_map() to direct_map()arch/x86/kvm/mmu/mmu.c+10 -100 replies
168/272drm/dp/mst: fix buffer overflows in sideband chunk accumulationdrivers/gpu/drm/drm_dp_mst_topology.c+9 -00 replies
169/272usb: gadget: f_tcm: synchronize delayed set_alt with teardowndrivers/usb/gadget/function/f_tcm.c drivers/usb/gadget/function/tcm.h+177 -280 replies
170/272drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsersdrivers/gpu/drm/drm_dp_mst_topology.c+4 -20 replies
171/272drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsersdrivers/gpu/drm/drm_dp_mst_topology.c+4 -130 replies
172/272dma-buf/drivers: make reserving a shared slot mandatory v4drivers/dma-buf/dma-resv.c drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c +15 more+35 -260 replies
173/272drm/virtio: use uninterruptible resv lock for plane updatesdrivers/gpu/drm/virtio/virtgpu_drv.h drivers/gpu/drm/virtio/virtgpu_gem.c drivers/gpu/drm/virtio/virtgpu_plane.c+26 -20 replies
174/272drm/displayid: fix Tiled Display Topology ID sizedrivers/gpu/drm/drm_connector.c include/drm/drm_connector.h include/drm/drm_displayid.h+10 -100 replies
175/272drm/tegra: fbdev: Remove offset into framebuffer memorydrivers/gpu/drm/tegra/fb.c+2 -60 replies
176/272drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTTdrivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c+17 -00 replies
177/272drm/virtio: Return proper error codes instead of -1drivers/gpu/drm/virtio/virtgpu_vq.c+3 -30 replies
178/272drm/virtio: bound EDID block reads to the response bufferdrivers/gpu/drm/virtio/virtgpu_vq.c+2 -10 replies
179/272media: aspeed: fix missing of_reserved_mem_device_release() on probe failuredrivers/media/platform/aspeed-video.c+1 -00 replies
180/272drm/i915/vrr: require valid min/max vfreq for VRRdrivers/gpu/drm/i915/display/intel_vrr.c+4 -00 replies
181/272drm/i915/hdcp: check streams[] bounds before overflowdrivers/gpu/drm/i915/display/intel_hdcp.c+4 -10 replies
182/272drm/i915/hdcp: require monotonically increasing seq_num_vdrivers/gpu/drm/i915/display/intel_hdcp.c+4 -30 replies
183/272media: marvell-cam: fix missing pci_disable_device() on removedrivers/media/platform/marvell-ccic/cafe-driver.c+1 -00 replies
184/272media: i2c: imx219: Drop IMX219_VTS_* macrosdrivers/media/i2c/imx219.c+7 -170 replies
185/272media: i2c: imx219: Correct the minimum vblanking valuedrivers/media/i2c/imx219.c+1 -10 replies
186/272media: i2c: imx219: Rename VTS to FRM_LENGTHdrivers/media/i2c/imx219.c+16 -170 replies
187/272media: imx219: Fix maximum frame length in linesdrivers/media/i2c/imx219.c+1 -10 replies
188/272wifi: ath6kl: fix use-after-free in aggr_reset_state()drivers/net/wireless/ath/ath6kl/txrx.c+1 -10 replies
189/272media: v4l: async: Set owner for async sub-devicesdrivers/media/v4l2-core/v4l2-async.c include/media/v4l2-async.h+9 -30 replies
190/272media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()drivers/media/v4l2-core/v4l2-fwnode.c include/media/v4l2-async.h+6 -40 replies
191/272ALSA: seq: close a re-opened queue timer in the destructorsound/core/seq/seq_timer.c+12 -10 replies
192/272wifi: brcmfmac: drain bus_reset work on device removaldrivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c drivers/net/wireless/broadcom/brcm80211/brcmfmac/bus.h drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c +4 more+77 -30 replies
193/272serial: 8250_mid: Remove unneeded test for ->setup() presencedrivers/tty/serial/8250/8250_mid.c+3 -50 replies
194/272serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platformsdrivers/tty/serial/8250/8250_mid.c+9 -50 replies
195/272wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW)drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c include/linux/mmc/sdio_ids.h+3 -30 replies
196/272wifi: brcmfmac: set F2 blocksize to 256 for BCM43752drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c+1 -00 replies
197/272sc16is7xx: Properly resume TX after stopdrivers/tty/serial/sc16is7xx.c+41 -60 replies
198/272serial: sc16is7xx: Fill in rs485_supporteddrivers/tty/serial/sc16is7xx.c+7 -00 replies
199/272serial: sc16is7xx: remove obsolete out_thread labeldrivers/tty/serial/sc16is7xx.c+1 -30 replies
200/272serial: sc16is7xx: fix regression with GPIO configurationdrivers/tty/serial/sc16is7xx.c+105 -190 replies
201/272serial: sc16is7xx: implement gpio get_direction() callbackdrivers/tty/serial/sc16is7xx.c+12 -00 replies
202/272mptcp: cleanup MPJ subflow list handlingnet/mptcp/pm_netlink.c net/mptcp/protocol.c net/mptcp/protocol.h +2 more+61 -1070 replies
203/272mptcp: fix subflow accounting on closenet/mptcp/protocol.h net/mptcp/subflow.c+23 -30 replies
204/272mptcp: decrement subflows counter on failed passive joinnet/mptcp/protocol.c+1 -00 replies
205/272sctp: avoid auth_enable sysctl UAF during netns teardownnet/sctp/protocol.c net/sctp/sysctl.c+19 -100 replies
206/272ceph: avoid fs reclaim while using current->journal_infofs/ceph/mds_client.c+11 -00 replies
207/272libceph: Amend checking to fix `make W=1` build breakagenet/ceph/osdmap.c+2 -20 replies
208/272libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZEnet/ceph/osdmap.c+2 -20 replies
209/272libceph: add doutc and *_client debug macros supportinclude/linux/ceph/ceph_debug.h+38 -00 replies
210/272ceph: rename _to_client() to _to_fs_client()fs/ceph/addr.c fs/ceph/cache.c fs/ceph/caps.c +9 more+89 -890 replies
211/272ceph: print cluster fsid and client global_id in all debug logsfs/ceph/acl.c fs/ceph/file.c fs/ceph/metric.c +1 more+19 -70 replies
212/272ceph: fix hanging __ceph_get_caps() with stale mds_wantedfs/ceph/caps.c fs/ceph/file.c fs/ceph/mds_client.h+22 -60 replies
213/272libceph: fix two unsafe bare decodes in decode_lockers()net/ceph/cls_lock_client.c+6 -20 replies
214/272ksmbd: defer destroy_previous_session() until after NTLM authenticationfs/ksmbd/smb2pdu.c+4 -50 replies
215/272net/sched: serialize qdisc_rtab_list against concurrent get/putnet/sched/sch_api.c+19 -50 replies
216/272ftrace: Add global mutex to serialize trace_parser accesskernel/trace/ftrace.c+15 -00 replies
217/272super: fix emergency thaw deadlock on frozen block devicesfs/super.c+15 -40 replies
218/272ksmbd: rename smb2_get_msg to smb_get_msgfs/ksmbd/auth.c fs/ksmbd/connection.c fs/ksmbd/oplock.c +4 more+54 -540 replies
219/272smb/server: fix minimum SMB1 PDU sizefs/ksmbd/connection.c+3 -20 replies
220/272smb/server: fix minimum SMB2 PDU sizefs/ksmbd/connection.c+2 -20 replies
221/272ksmbd: validate minimum PDU size for transform requestsfs/ksmbd/connection.c+11 -50 replies
222/272mm/vmstat: fold stranded per-cpu node stats when a node comes onlinemm/memory_hotplug.c+11 -40 replies
223/272ksmbd: conn lock to serialize smb2 negotiatefs/ksmbd/smb2pdu.c+2 -00 replies
224/272ksmbd: reject repeated SMB2 NEGOTIATE requestsfs/ksmbd/connection.h fs/ksmbd/smb2pdu.c fs/ksmbd/smb_common.c+37 -152 replies
225/272wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()drivers/net/wireless/marvell/libertas_tf/main.c+1 -10 replies
226/272igc: remove napi_synchronize() in igc_down()drivers/net/ethernet/intel/igc/igc_main.c+0 -10 replies
227/272net: pktgen: fix code style (WARNING: Block comments)net/core/pktgen.c+23 -160 replies
228/272net: pktgen: fix proc entry use-after-freenet/core/pktgen.c+1 -30 replies
229/272scsi: sd: sd_zbc: Improve source code documentationdrivers/scsi/sd.h drivers/scsi/sd_zbc.c+54 -60 replies
230/272scsi: sd: sd_zbc: Use logical blocks as unit when querying zonesdrivers/scsi/sd_zbc.c+5 -60 replies
231/272scsi: sd: sd_zbc: Introduce struct zoned_disk_infodrivers/scsi/sd.h drivers/scsi/sd_zbc.c+41 -300 replies
232/272scsi: sd: sd_zbc: Return early in sd_zbc_check_zoned_characteristics()drivers/scsi/sd_zbc.c+7 -60 replies
233/272scsi: scsi_debug: Rename zone type constantsdrivers/scsi/scsi_debug.c+9 -90 replies
234/272scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB writedrivers/scsi/scsi_debug.c+6 -30 replies
235/272ice: fix VF interrupts cleanupdrivers/net/ethernet/intel/ice/ice_virtchnl_pf.c+48 -00 replies
236/272ice: fix memory leak in ice_lbtest_prepare_rings()drivers/net/ethernet/intel/ice/ice_ethtool.c+5 -50 replies
237/272fsnotify: opt-in for permission events at file open timeinclude/linux/fs.h+6 -00 replies
238/272fs: dont block write during exec on pre-content watched filesfs/binfmt_elf.c fs/binfmt_elf_fdpic.c fs/exec.c +2 more+35 -130 replies
239/272binfmt_misc: restore write access when removing an entryfs/binfmt_misc.c+3 -10 replies
240/272i2c: imx: Fix slave registration race and error handlingdrivers/i2c/busses/i2c-imx.c+6 -30 replies
241/272i2c: bcm-iproc: remove printout on handled timeoutsdrivers/i2c/busses/i2c-bcm-iproc.c+0 -20 replies
242/272i2c: iproc: reset bus after timeout if START_BUSY is stuckdrivers/i2c/busses/i2c-bcm-iproc.c+11 -00 replies
243/272can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failuredrivers/net/can/usb/gs_usb.c+1 -10 replies
244/272jiffies: Define secs_to_jiffies()include/linux/jiffies.h net/bluetooth/hci_event.c+13 -20 replies
245/272ice: wait for reset completion in ice_resume()drivers/net/ethernet/intel/ice/ice_main.c+10 -00 replies
246/272drm/amd/pm: fix torn gpu metrics readsdrivers/gpu/drm/amd/pm/amdgpu_pm.c+6 -80 replies
247/272sched/psi: Shut down rtpoll_timer in psi_cgroup_free()kernel/sched/psi.c+6 -00 replies
248/272mm/ptdump: always stabilise against page table freeing using init_mmmm/pagewalk.c mm/ptdump.c+15 -00 replies
249/272net: add a couple of helpers for iph tot_leninclude/linux/ip.h include/net/route.h+21 -30 replies
250/272openvswitch: use skb_ip_totlen in conntracknet/openvswitch/conntrack.c+1 -10 replies
251/272net: sched: use skb_ip_totlen and iph_totlennet/sched/act_ct.c net/sched/sch_cake.c+2 -20 replies
252/272openvswitch: move key and ovs_cb update out of handle_fragmentsnet/openvswitch/conntrack.c+25 -120 replies
253/272net/sched: act_ct: fix sk_buff leak when the header checks reject a packetnet/sched/act_ct.c+25 -40 replies
254/272net: atlantic: free stranded TX buffers on ring deinitdrivers/net/ethernet/aquantia/atlantic/aq_ring.c drivers/net/ethernet/aquantia/atlantic/aq_ring.h drivers/net/ethernet/aquantia/atlantic/aq_vec.c+27 -10 replies
255/272net/smc: rdma write inline if qp has sufficient inline spacenet/smc/smc_tx.c+12 -50 replies
256/272net: smc: fix splice entry lifetime imbalance in smc_rx_splicenet/smc/smc_rx.c+8 -40 replies
257/272arm64: tegra: Add EL2 virtual timer interrupt for Tegra194arch/arm64/boot/dts/nvidia/tegra194.dtsi+2 -00 replies
258/272crypto: ccm - Set rfc4309 maxauthsize from childcrypto/ccm.c+1 -10 replies
259/272netfilter: ipset: fix refcount race between list:set GC and swapnet/netfilter/ipset/ip_set_core.c+13 -60 replies
260/272netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathnet/netfilter/nf_tables_offload.c+1 -10 replies
261/272netfilter: flowtable: publish GC-visible tuple lastnet/netfilter/nf_flow_table_core.c+4 -30 replies
262/272netfilter: ipset: fix list type element drift bugnet/netfilter/ipset/ip_set_list_set.c+5 -20 replies
263/272net: packet: fix wrong transport_header when sending VLAN-tagged framenet/packet/af_packet.c+2 -20 replies
264/272ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlerssound/soc/xilinx/xlnx_formatter_pcm.c+4 -60 replies
265/272af_packet: Dont send zero-byte data in tpacket_snd().net/packet/af_packet.c+3 -00 replies
266/272net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAGdrivers/net/ethernet/ti/am65-cpsw-nuss.c+2 -00 replies
267/272net/x25: fix use-after-free of the socket by its timersnet/x25/af_x25.c net/x25/x25_timer.c+18 -110 replies
268/272binfmt_misc: use exe_file_deny_write_access() for the interpreter clonefs/binfmt_misc.c+8 -20 replies
269/272udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()drivers/dma-buf/udmabuf.c+5 -40 replies
270/272drm/vmwgfx: Reserve fence slots on buffer objects in cotablesdrivers/gpu/drm/vmwgfx/vmwgfx_cotable.c+4 -00 replies
271/272drm/virtio: Unlock reservations on dma_resv_reserve_fences() errordrivers/gpu/drm/virtio/virtgpu_gem.c+3 -10 replies
272/272jiffies: Cast to unsigned long in secs_to_jiffies() conversioninclude/linux/jiffies.h+1 -10 replies

Reviews trailers per patch

166 of 272 patches have a Reviewed-by or Acked-by.

PatchAlexandra WinterJoe DamatoCharles KeepaxRichard FitzgeraldSrinivas KandagatlaNayna JainR Nageswara SastryAndrew ZhouHans VerkuilBartosz GolaszewskiIlya DryomovMasami Hiramatsu (Google)Julian AnastasovStephen SmalleyViacheslav DubeykoChristian KönigLeo LiuRuijing DongAlex DeucherChristoph HellwigDarrick J. WongJan KaraChristian Brauner (Amutable)David Hildenbrand (Arm)Wei WangJason GunthorpeSamiullah KhawajaSuravee SuthikulpanitVasant HegdeEmil TsalapatisAmery HungVivek KasireddyXu YilunBryam VargasPaul MooreWaiman LongRichard Guy BriggsAndy ShevchenkoLinus WalleijHugo VilleneuveSam RavnborgThomas ZimmermannTung NguyenDanielle RatsonIdo SchimmelFrank LiMatthew RosatoXie YongjiEugenio PérezKuniyuki IwashimaChen-Yu TsaiAlexandre MergnatStefano BrivioSeeseeSibi SankarMukesh OjhaCasey SchauflerKees CookJohn JohansenSimon HormanRatheesh KannothMika WesterbergJean-Marc RangerPratyush YadavJason WangSerge SeminManivannan SadhasivamVinod KoulOleksij RempelCarlos SongStefan EichenbergerAmir GoldsteinMiklos SzerediJustin TeeLuis ChamberalinJohan HovoldJann HornSebastian Andrzej SiewiorAl ViroHaiyang ZhangKurt KanzenbachVictor NogueiraJamal Hadi SalimBalbir SinghFredric CoverStefan WahrenNamjae JeonMichael WalleIsaku YamahataLyude PaulDaniel VetterDave AirlieAnkit NautiyalSuraj KandpalDave StevensonJacopo MondiLaurent PinchartVasanthakumar ThiagarajanArend van SprielLarysa ZarembaAlex ElderAlex MarkuzePatrick DonnellyMilind ChangireEric DumazetLech PerczakDavid HowellsMaciej FijalkowskiDima RuinskiyMoriya KadoshRob HerringToke Høiland-JørgensenDamien Le MoalHimanshu MadhaniDouglas GilbertBart Van AsscheAleksandr LoktionovPatryk HoldaJacob KellerRinitha SMatthieu Baerts (NGI0)Xin LongXiubo LiDavid AhernAaron ConoleFlorian WestphalSukhdeep SinghMina AlmasryTony Lukernel test robotKarsten GraulDust LiSidraya JayagondJozsef KadlecsikWillem de BruijnMichal SimekJiayuan ChenChintan VankarRay JuiMikhail GavrilovThomas HellströmLuiz Augusto von DentzKohei EnjuPrzemek KitszelAlexander NowlinKenneth FengJohannes WeinerMatt FlemingSuren BaghdasaryanMike Rapoport (Microsoft)Kiryl ShutsemauFlorian FainelliBrett A C SheffieldBarry K. NathanShuah KhanRon EconomosMark Brown
SeriesT-b T-b T-b T-b T-b T-b
1/272
2/272
3/272
4/272
5/272A-b
6/272A-b
7/272A-b
8/272A-b
9/272
10/272R-b R-b
11/272R-b R-b
12/272R-b
13/272A-b T-b
14/272
15/272
16/272
17/272R-b
18/272
19/272A-b T-b
20/272
21/272
22/272R-b
23/272
24/272R-b
25/272R-b
26/272A-b
27/272
28/272
29/272
30/272R-b
31/272R-b
32/272R-b
33/272
34/272R-b
35/272R-b
36/272
37/272
38/272R-b
39/272R-b
40/272R-b
41/272A-b R-b
42/272A-b
43/272A-b R-b
44/272R-b R-b
45/272R-b
46/272
47/272R-b R-b A-b
48/272R-b R-b R-b R-b R-b
49/272R-b R-b
50/272R-b
51/272A-b
52/272R-b
53/272R-b
54/272R-b
55/272
56/272
57/272
58/272A-b
59/272
60/272A-b A-b
61/272
62/272R-b
63/272R-b R-b R-b
64/272
65/272R-b
66/272R-b
67/272R-b
68/272R-b
69/272R-b
70/272
71/272
72/272A-b
73/272R-b R-b
74/272
75/272
76/272R-b R-b
77/272R-b R-b
78/272
79/272R-b
80/272R-b
81/272R-b
82/272R-b
83/272R-b
84/272
85/272R-b
86/272R-b
87/272R-b
88/272
89/272
90/272
91/272R-b
92/272
93/272
94/272R-b
95/272R-b
96/272R-b
97/272R-b
98/272R-b
99/272R-b Reported-and-tested-by
100/272
101/272
102/272R-b
103/272R-b
104/272R-b
105/272A-b A-b R-b R-b
106/272R-b T-b
107/272
108/272
109/272
110/272
111/272
112/272A-b
113/272T-b R-b
114/272R-b
115/272T-b R-b T-b R-b A-b
116/272T-b R-b T-b R-b A-b
117/272
118/272
119/272A-b
120/272T-b
121/272R-b T-b
122/272A-b
123/272R-b A-b
124/272A-b A-b R-b
125/272
126/272
127/272
128/272
129/272
130/272
131/272
132/272
133/272
134/272R-b R-b
135/272R-b
136/272
137/272
138/272A-b
139/272
140/272
141/272
142/272R-b
143/272Decoded-by R-b A-b
144/272
145/272R-b
146/272R-b
147/272
148/272R-b
149/272R-b
150/272
151/272A-b
152/272
153/272R-b
154/272R-b A-b
155/272
156/272
157/272
158/272
159/272R-b R-b
160/272R-b
161/272
162/272
163/272
164/272
165/272
166/272R-b
167/272R-b
168/272R-b
169/272
170/272R-b
171/272R-b
172/272R-b
173/272
174/272R-b
175/272
176/272R-b
177/272
178/272
179/272
180/272R-b
181/272R-b
182/272R-b
183/272
184/272R-b R-b
185/272R-b R-b
186/272R-b
187/272R-b R-b
188/272R-b
189/272
190/272R-b R-b
191/272
192/272A-b
193/272
194/272R-b
195/272A-b
196/272A-b
197/272
198/272
199/272R-b R-b T-b
200/272R-b R-b T-b A-b
201/272A-b
202/272
203/272
204/272R-b
205/272A-b
206/272R-b R-b
207/272R-b
208/272R-b
209/272R-b R-b
210/272R-b R-b
211/272R-b R-b
212/272R-b
213/272R-b
214/272A-b
215/272A-b R-b
216/272
217/272
218/272
219/272A-b R-b
220/272A-b R-b
221/272
222/272
223/272
224/272
225/272
226/272R-b R-b T-b
227/272R-b
228/272R-b
229/272R-b R-b A-b
230/272R-b A-b
231/272R-b R-b A-b
232/272R-b A-b
233/272A-b
234/272R-b R-b
235/272R-b R-b T-b
236/272R-b T-b
237/272
238/272A-b
239/272
240/272R-b A-b
241/272
242/272A-b
243/272
244/272R-b
245/272R-b R-b R-b T-b
246/272R-b
247/272A-b T-b A-b
248/272A-b R-b R-b
249/272R-b R-b
250/272R-b R-b
251/272R-b
252/272R-b R-b A-b
253/272A-b
254/272R-b A-b
255/272R-b T-b A-b
256/272R-b R-b
257/272
258/272
259/272A-b
260/272
261/272
262/272A-b
263/272R-b
264/272R-b
265/272R-b R-b
266/272R-b R-b
267/272
268/272
269/272R-b
270/272R-b
271/272R-b
272/272

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 157 reviewers.

Read the v1 thread

Cover letter [PATCH 5.15 000/272] 5.15.217-rc1 review

This is the start of the stable review cycle for the 5.15.217 release. There are 272 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 22 Aug 2026 14:51:11 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.217-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 5.15.217-rc1

Easwar Hariharan <[email protected]>
jiffies: Cast to unsigned long in secs_to_jiffies() conversion

Dmitry Osipenko <[email protected]>
drm/virtio: Unlock reservations on dma_resv_reserve_fences() error

Zack Rusin <[email protected]>
drm/vmwgfx: Reserve fence slots on buffer objects in cotables

Robert Mader <[email protected]>
udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()

Christian Brauner <[email protected]>
binfmt_misc: use exe_file_deny_write_access() for the interpreter clone

Baul Lee <[email protected]>
net/x25: fix use-after-free of the socket by its timers

Siddharth Vadapalli <[email protected]>
net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

Eric Dumazet <[email protected]>
af_packet: Don't send zero-byte data in tpacket_snd().

Rosen Penev <[email protected]>
ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

Wei Fang <[email protected]>
net: packet: fix wrong transport_header when sending VLAN-tagged frame

Florian Westphal <[email protected]>
netfilter: ipset: fix list type element drift bug

Jérémy Jean <[email protected]>
netfilter: flowtable: publish GC-visible tuple last

Alexey Velichayshiy <[email protected]>
netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path

Xiang Mei (Microsoft) <[email protected]>
netfilter: ipset: fix refcount race between list:set GC and swap

Herbert Xu <[email protected]>
crypto: ccm - Set rfc4309 maxauthsize from child

Jon Hunter <[email protected]>
arm64: tegra: Add EL2 virtual timer interrupt for Tegra194

Daming Li <[email protected]>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice

Guangguan Wang <[email protected]>
net/smc: rdma write inline if qp has sufficient inline space

Yangyu Chen <[email protected]>
net: atlantic: free stranded TX buffers on ring deinit

Hyunjung Ko <[email protected]>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

Xin Long <[email protected]>
openvswitch: move key and ovs_cb update out of handle_fragments

Xin Long <[email protected]>
net: sched: use skb_ip_totlen and iph_totlen

Xin Long <[email protected]>
openvswitch: use skb_ip_totlen in conntrack

Xin Long <[email protected]>
net: add a couple of helpers for iph tot_len

Lorenzo Stoakes (ARM) <[email protected]>
mm/ptdump: always stabilise against page table freeing using init_mm

Tejun Heo <[email protected]>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

Yang Wang <[email protected]>
drm/amd/pm: fix torn gpu metrics reads

Aaron Ma <[email protected]>
ice: wait for reset completion in ice_resume()

Easwar Hariharan <[email protected]>
jiffies: Define secs_to_jiffies()

Marc Kleine-Budde <[email protected]>
can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure

Jonas Gorski <[email protected]>
i2c: iproc: reset bus after timeout if START_BUSY is stuck

Wolfram Sang <[email protected]>
i2c: bcm-iproc: remove printout on handled timeouts

Liem <[email protected]>
i2c: imx: Fix slave registration race and error handling

Christian Brauner <[email protected]>
binfmt_misc: restore write access when removing an entry

Amir Goldstein <[email protected]>
fs: don't block write during exec on pre-content watched files

Amir Goldstein <[email protected]>
fsnotify: opt-in for permission events at file open time

Dawei Feng <[email protected]>
ice: fix memory leak in ice_lbtest_prepare_rings()

Dawid Osuchowski <[email protected]>
ice: fix VF interrupts cleanup

Ibrahim Hashimov <[email protected]>
scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write

Damien Le Moal <[email protected]>
scsi: scsi_debug: Rename zone type constants

Damien Le Moal <[email protected]>
scsi: sd: sd_zbc: Return early in sd_zbc_check_zoned_characteristics()

Bart Van Assche <[email protected]>
scsi: sd: sd_zbc: Introduce struct zoned_disk_info

Damien Le Moal <[email protected]>
scsi: sd: sd_zbc: Use logical blocks as unit when querying zones

Bart Van Assche <[email protected]>
scsi: sd: sd_zbc: Improve source code documentation

Chengfeng Ye <[email protected]>
net: pktgen: fix proc entry use-after-free

Peter Seiderer <[email protected]>
net: pktgen: fix code style (WARNING: Block comments)

David Carlier <[email protected]>
igc: remove napi_synchronize() in igc_down()

Maoyi Xie <[email protected]>
wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()

Namjae Jeon <[email protected]>
ksmbd: reject repeated SMB2 NEGOTIATE requests

Namjae Jeon <[email protected]>
ksmbd: conn lock to serialize smb2 negotiate

Gregory Price <[email protected]>
mm/vmstat: fold stranded per-cpu node stats when a node comes online

Namjae Jeon <[email protected]>
ksmbd: validate minimum PDU size for transform requests

ChenXiaoSong <[email protected]>
smb/server: fix minimum SMB2 PDU size

ChenXiaoSong <[email protected]>
smb/server: fix minimum SMB1 PDU size

Namjae Jeon <[email protected]>
ksmbd: rename smb2_get_msg to smb_get_msg

Christian Brauner <[email protected]>
super: fix emergency thaw deadlock on frozen block devices

Tengda Wu <[email protected]>
ftrace: Add global mutex to serialize trace_parser access

Aldo Ariel Panzardo <[email protected]>
net/sched: serialize qdisc_rtab_list against concurrent get/put

James Montgomery <[email protected]>
ksmbd: defer destroy_previous_session() until after NTLM authentication

Pavitra Jha <[email protected]>
libceph: fix two unsafe bare decodes in decode_lockers()

Max Kellermann <[email protected]>
ceph: fix hanging __ceph_get_caps() with stale mds_wanted

Xiubo Li <[email protected]>
ceph: print cluster fsid and client global_id in all debug logs

Xiubo Li <[email protected]>
ceph: rename _to_client() to _to_fs_client()

Xiubo Li <[email protected]>
libceph: add doutc and *_client debug macros support

Xiang Mei <[email protected]>
libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE

Andy Shevchenko <[email protected]>
libceph: Amend checking to fix make W=1 build breakage

Max Kellermann <[email protected]>

    ceph: avoid fs reclaim while using current->journal_info

Zhiling Zou <[email protected]>
sctp: avoid auth_enable sysctl UAF during netns teardown

Chenguang Zhao <[email protected]>
mptcp: decrement subflows counter on failed passive join

Paolo Abeni <[email protected]>
mptcp: fix subflow accounting on close

Paolo Abeni <[email protected]>
mptcp: cleanup MPJ subflow list handling

Hugo Villeneuve <[email protected]>
serial: sc16is7xx: implement gpio get_direction() callback

Hugo Villeneuve <[email protected]>
serial: sc16is7xx: fix regression with GPIO configuration

Hugo Villeneuve <[email protected]>
serial: sc16is7xx: remove obsolete out_thread label

Ilpo Järvinen <[email protected]>
serial: sc16is7xx: Fill in rs485_supported

Tomasz Moń <[email protected]>
sc16is7xx: Properly resume TX after stop

LiangCheng Wang <[email protected]>
wifi: brcmfmac: set F2 blocksize to 256 for BCM43752

Gokul Sivakumar <[email protected]>
wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW)

Jiangshan Yi <[email protected]>
serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms

Andy Shevchenko <[email protected]>

    serial: 8250_mid: Remove unneeded test for ->setup() presence

Fan Wu <[email protected]>
wifi: brcmfmac: drain bus_reset work on device removal

Norbert Szetei <[email protected]>
ALSA: seq: close a re-opened queue timer in the destructor

Mirela Rabulea <[email protected]>
media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()

Sakari Ailus <[email protected]>
media: v4l: async: Set owner for async sub-devices

Daniel Hodges <[email protected]>
wifi: ath6kl: fix use-after-free in aggr_reset_state()

Sakari Ailus <[email protected]>
media: imx219: Fix maximum frame length in lines

Jai Luthra <[email protected]>
media: i2c: imx219: Rename VTS to FRM_LENGTH

David Plowman <[email protected]>
media: i2c: imx219: Correct the minimum vblanking value

Laurent Pinchart <[email protected]>

    media: i2c: imx219: Drop IMX219_VTS_* macros

Guangshuo Li <[email protected]>
media: marvell-cam: fix missing pci_disable_device() on remove

Jani Nikula <[email protected]>
drm/i915/hdcp: require monotonically increasing seq_num_v

Jani Nikula <[email protected]>

    drm/i915/hdcp: check streams[] bounds before overflow

Jani Nikula <[email protected]>
drm/i915/vrr: require valid min/max vfreq for VRR

David Carlier <[email protected]>
media: aspeed: fix missing of_reserved_mem_device_release() on probe failure

Bryam Vargas <[email protected]>
drm/virtio: bound EDID block reads to the response buffer

Dmitry Osipenko <[email protected]>
drm/virtio: Return proper error codes instead of -1

Timur Kristóf <[email protected]>
drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT

Thomas Zimmermann <[email protected]>
drm/tegra: fbdev: Remove offset into framebuffer memory

Jani Nikula <[email protected]>
drm/displayid: fix Tiled Display Topology ID size

Deepanshu Kartikey <[email protected]>
drm/virtio: use uninterruptible resv lock for plane updates

Christian König <[email protected]>
dma-buf/drivers: make reserving a shared slot mandatory v4

Ashutosh Desai <[email protected]>
drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers

Ashutosh Desai <[email protected]>
drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers

Cen Zhang <[email protected]>
usb: gadget: f_tcm: synchronize delayed set_alt with teardown

Ashutosh Desai <[email protected]>
drm/dp/mst: fix buffer overflows in sideband chunk accumulation

David Matlack <[email protected]>

    KVM: x86/mmu: Rename __direct_map() to direct_map()

David Matlack <[email protected]>
KVM: x86/mmu: Split out TDP MMU page fault handling

Chao Peng <[email protected]>
KVM: Rename mmu_notifier_* to mmu_invalidate_*

Sean Christopherson <[email protected]>
KVM: x86/mmu: Document the "rules" for using host_pfn_mapping_level()

Sean Christopherson <[email protected]>
KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEs

Sean Christopherson <[email protected]>
KVM: x86/mmu: Directly "destroy" PTE list when recycling rmaps

Reinette Chatre <[email protected]>
fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list

Dawei Feng <[email protected]>
octeontx2-pf: fix SQB pointer leak on init failure

Haoxiang Li <[email protected]>
net: ipa: fix SMEM state handle leaks in SMP2P init

Sabrina Dubroca <[email protected]>
espintcp: use sk_msg_free_partial to fix partial send

Breno Leitao <[email protected]>
bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()

Breno Leitao <[email protected]>
bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c

Rasmus Villemoes <[email protected]>
bootconfig: do not put quotes on cmdline items unless necessary

Bryam Vargas <[email protected]>
net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked

Vladimir Oltean <[email protected]>

    net/sched: taprio: avoid calling child->ops->dequeue(child) twice

Runyu Xiao <[email protected]>
gpio: tegra: do not call pinctrl for GPIO direction

Bartosz Golaszewski <[email protected]>
treewide: rename pinctrl_gpio_direction_output_new()

Junrui Luo <[email protected]>
octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF

Maoyi Xie <[email protected]>
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink

Dexuan Cui <[email protected]>
net: mana: Validate the packet length reported by the NIC

Zihan Xi <[email protected]>
net/sched: act_ct: preserve tc_skb_cb across defragmentation

Haoxiang Li <[email protected]>
net: ixp4xx_hss: fix duplicate HDLC netdev allocation

Maoyi Xie <[email protected]>
net: ipip: require CAP_NET_ADMIN in the device netns for changelink

Liu Jian <[email protected]>
net: Add helper function to parse netlink msg of ip_tunnel_encap

Thomas Gleixner <[email protected]>
locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()

Guangshuo Li <[email protected]>
mmc: vub300: fix use-after-free on probe failure

Johan Hovold <[email protected]>
mmc: vub300: rename probe error labels

Johan Hovold <[email protected]>
mmc: vub300: fix use-after-free on disconnect

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix firmware leak in async update

Dmitry Torokhov <[email protected]>
firmware_loader: introduce __free() cleanup hanler

Mikulas Patocka <[email protected]>
dm-verity: make error counter atomic

Mikulas Patocka <[email protected]>
dm-integrity: don't increment hash_offset twice

Abdun Nihaal <[email protected]>
scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()

Souvik Banerjee <[email protected]>
ovl: use linked upper dentry in copy-up tmpfile

Jann Horn <[email protected]>

    bpf,fork: wipe ->bpf_storage before bailouts that access it

Michael Bommarito <[email protected]>
thunderbolt: Prevent XDomain delayed work use-after-free on disconnect

Mika Westerberg <[email protected]>

    thunderbolt: Remove XDomain from the bus without holding tb->lock

Mika Westerberg <[email protected]>
thunderbolt: Remove service debugfs entries during unregister

Mika Westerberg <[email protected]>
thunderbolt: Keep XDomain reference during the lifetime of a service

Alan Borzeszkowski <[email protected]>
thunderbolt: Update property.c function documentation

Christophe JAILLET <[email protected]>
thunderbolt: Remove usage of the deprecated ida_simple_xx() API

Fan Wu <[email protected]>
can: esd_usb: kill anchored URBs before freeing netdevs

Frank Jungclaus <[email protected]>
can/esd_usb2: Rename esd_usb2.c to esd_usb.c

Vincent Jardin <[email protected]>
i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)

Stefan Eichenberger <[email protected]>
i2c: imx: separate atomic, dma and non-dma use case

Ibrahim Hashimov <[email protected]>
ksmbd: fix integer overflow in set_file_allocation_info()

Jarkko Sakkinen <[email protected]>
tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()

Fredric Cover <[email protected]>
smb: client: use kvzalloc() for megabyte buffer in simple fallocate

Yiyang Chen <[email protected]>
taskstats: retain dead thread stats in TGID queries

Oleg Nesterov <[email protected]>
taskstats: fill_stats_for_tgid: use for_each_thread()

Frank Li <[email protected]>
dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK

Frank Li <[email protected]>
dmaengine: dw-edma: Detach the private data and chip info structures

Frank Li <[email protected]>
dmaengine: dw-edma: Remove unused irq field in struct dw_edma_chip

Miquel Raynal <[email protected]>
mtd: spi-nor: swp: Improve locking user experience

Michael Walle <[email protected]>
mtd: spi-nor: Fix spi_nor_try_unlock_all()

Maoyi Xie <[email protected]>

    net: thunderbolt: Fix frags[] overflow by bounding frame_count

Florian Fuchs <[email protected]>
mtd: maps: vmu-flash: fix fault in unaligned fixup

Breno Leitao <[email protected]>
9p: skip nlink update in cacheless mode to fix WARN_ON

Michael Bommarito <[email protected]>
ntfs3: validate split-point offset in indx_insert_into_buffer

Konstantin Komarov <[email protected]>
fs/ntfs3: Undo critial modificatins to keep directory consistency

Pavel Skripkin <[email protected]>
fs/ntfs3: Make ntfs_update_mftmirr return void

Tristan Madani <[email protected]>
selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()

Casey Schaufler <[email protected]>
lsm: infrastructure management of the sock security

Ondrej Mosnacek <[email protected]>
lsm: use default hook return value in call_int_hook()

Wasim Nazir <[email protected]>
remoteproc: qcom: Fix leak when custom dump_segments addition fails

Yogesh Lal <[email protected]>
remoteproc: qcom: pas: Adjust the phys addr wrt the mem region

Mukesh Ojha <[email protected]>
remoteproc: qcom: fix sparse warnings

Mukesh Ojha <[email protected]>
remoteproc: qcom: replace kstrdup with kstrndup

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: don't leak bad clone into future transaction

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: move cloning of match info to insert/removal path

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: merge deactivate helper into caller

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: prepare walk function for on-demand clone

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: make pipapo_clone helper return NULL

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_sip: validate skb_dst() before accessing it

Florian Westphal <[email protected]>
netfilter: nf_conntrack_sip: remove net variable shadowing

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: move prove_locking helper around

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: use GFP_KERNEL for insertions

Cássio Gabriel <[email protected]>
ASoC: mediatek: mt8192: Check runtime resume during probe

Tang Bin <[email protected]>
ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable

AngeloGioacchino Del Regno <[email protected]>
ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb

AngeloGioacchino Del Regno <[email protected]>
ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()

AngeloGioacchino Del Regno <[email protected]>
ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()

Haoze Xie <[email protected]>
netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst

Eric Dumazet <[email protected]>
ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]

Eric Dumazet <[email protected]>

    net: dst: add four helpers to annotate data-races around dst->dev

Eric Dumazet <[email protected]>

    net: dst: annotate data-races around dst->output

Eric Dumazet <[email protected]>

    net: dst: annotate data-races around dst->input

Eric Dumazet <[email protected]>
tcp: convert to dev_net_rcu()

Cássio Gabriel <[email protected]>
ASoC: mediatek: mt8183: Check runtime resume during probe

Runyu Xiao <[email protected]>
octeontx2-vf: clear stale mailbox IRQ state before request_irq()

Runyu Xiao <[email protected]>
octeontx2-pf: clear stale mailbox IRQ state before request_irq()

Subbaraya Sundeep <[email protected]>
octeontx2: Annotate mmio regions as __iomem

Geetha sowjanya <[email protected]>
octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG

Jason Wang <[email protected]>
VDUSE: avoid leaking information to userspace

Eugenio Pérez <[email protected]>
vduse: take out allocations from vduse_dev_alloc_coherent

Eugenio Pérez <[email protected]>
vduse: remove unused vaddr parameter of vduse_domain_free_coherent

Sheng Zhao <[email protected]>
vduse: Use fixed 4KB bounce pages for non-4KB page size

Wentao Liang <[email protected]>
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()

Petr Machata <[email protected]>
mlxsw: spectrum: On port enslavement to a LAG, join upper's bridges

Li Xiasong <[email protected]>
tipc: restrict socket queue dumps in enqueue tracepoints

Jiacheng Yu <[email protected]>
fbcon: Use correct type for vc_resize() return value

Thomas Zimmermann <[email protected]>
fbcon: Rename struct fbcon_ops to struct fbcon_par

Li Daming <[email protected]>
rxrpc: serialize kernel accept preallocation with socket teardown

Tapio Reijonen <[email protected]>

    serial: max310x: implement gpio_chip::get_direction()

Hugo Villeneuve <[email protected]>

    serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch)

Xu Rao <[email protected]>
ALSA: hda: Fix cached processing coefficient verbs

Ricardo Robaina <[email protected]>
audit: fix recursive locking deadlock in audit_dupe_exe()

Ricardo Robaina <[email protected]>
audit: use 'unsigned int' instead of 'unsigned'

Jeff Layton <[email protected]>
audit: widen ino fields to u64

NeilBrown <[email protected]>
VFS/audit: introduce kern_path_parent() for audit

Zhang Heng <[email protected]>
ALSA: hda: conexant: Remove mic bias threshold override

Bryam Vargas <[email protected]>
Input: mms114 - reject an oversized device packet size

Haoxiang Li <[email protected]>
i2c: davinci: Unregister cpufreq notifier on probe failure

Dmitry Torokhov <[email protected]>
Input: mms114 - fix touch indexing for MMS134S and MMS136

Sebastian Alba Vives <[email protected]>
fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()

Mikhail Gavrilov <[email protected]>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning

Jason Gunthorpe <[email protected]>
udmabuf: Do not create malformed scatterlists

Matt Bobrowski <[email protected]>
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

Weinan Liu <[email protected]>
iommu/amd: Don't split flush for amd_iommu_domain_flush_all()

Pedro Falcato <[email protected]>
mm: do file ownership checks with the proper mount idmap

Xiang Mei <[email protected]>
net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot

Christoph Hellwig <[email protected]>
xfs: check v5 superblock features early

Long Li <[email protected]>
xfs: fix ilock leak on error in xfs_dq_get_next_id

David Rosca <[email protected]>
drm/amdgpu: Fix UVD decode image min size calculation

David Rosca <[email protected]>
drm/amdgpu: Implement insert_end for VCE 3

David Rosca <[email protected]>
drm/amdgpu: Reject UVD message with dimensions above 4096

Candice Li <[email protected]>
drm/amdgpu: validate GEM_CREATE domain combinations

David Rosca <[email protected]>
drm/amdgpu: Reject UVD message with invalid number of h265 refs

Eric Farman <[email protected]>
s390/vfio_ccw: Fix out of bounds check on CCW array

Guangshuo Li <[email protected]>
drm/radeon: fix autosuspend cleanup during teardown

Pei Xiao <[email protected]>
mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition

Haibo Chen <[email protected]>
mmc: sdhci: make tuning_err a signed int

Myeonghun Pak <[email protected]>
mmc: sdhci: unmap the bounce buffer before device release

Zhan Xusheng <[email protected]>
mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit

Kefu Chai <[email protected]>
libceph: tolerate addrvecs with multiple entries of the same type

Yiming Zhu <[email protected]>
ceph: fix MDS random selection readiness predicate

Raphael Zimmer <[email protected]>
libceph: Avoid using invalid osd indices from primary_temp

Dmitry Torokhov <[email protected]>
Input: sur40 - fix V4L error path cleanup

Dmitry Torokhov <[email protected]>
Input: sur40 - fix input device registration ordering

Ali Ahmet Memis <[email protected]>
openrisc: signal: do not restore privileged SR bits on sigreturn

Josh Poimboeuf <[email protected]>
ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()

Pavitra Jha <[email protected]>
libceph: fix multiple unsafe decodes in decode_locker()

Thorsten Blum <[email protected]>
crypto: qce - fix error path in devm_qce_register_algs

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - block s_input when F54 queue is busy

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - zero report size on F54 work error

George Wilson <[email protected]>

    powerpc/pseries: lparcfg - fix kbuf[] underflow

Pengpeng Hou <[email protected]>
Input: iforce - validate input packet lengths

Zhefu Zhang <[email protected]>
Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard

Linmao Li <[email protected]>
Input: psxpad-spi - set driver data before use

Richard Davies <[email protected]>
Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

George Wilson <[email protected]>
powerpc/pseries: pci - logic bug

Dawid Wróbel <[email protected]>
ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses

Peter Ujfalusi <[email protected]>
ASoC: cs4265: sort the register default table

Hidayath Khan <[email protected]>
s390/qeth: validate user buffer length in SNMP and ARP query ioctls

Matthieu Baerts (NGI0) <[email protected]>
mptcp: options: reset DSS fields in case of unexpected size

Bryam Vargas <[email protected]>
selinux: do not cancel a policy conversion that never started

Bryam Vargas <[email protected]>
selinux: reject a class permission count below its inherited common

Bryam Vargas <[email protected]>
selinux: require every boolean value to be defined

Yizhou Zhao <[email protected]>
ipvs: separate destination availability state

Zhan Xusheng <[email protected]>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()

Jiasheng Jiang <[email protected]>
media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization

Fullway Wang <[email protected]>
media: mtk-vcodec: potential null pointer deference in SCP

Chao Yu <[email protected]>
f2fs: fix UAF issue in f2fs_merge_page_bio()

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm64/boot/dts/nvidia/tegra194.dtsi           |   2 +
 arch/arm64/kvm/mmu.c                               |  10 +-
 arch/mips/kvm/mmu.c                                |  12 +-
 arch/openrisc/include/asm/processor.h              |   2 +
 arch/openrisc/kernel/signal.c                      |   5 +-
 arch/powerpc/include/asm/kvm_book3s_64.h           |   2 +-
 arch/powerpc/kvm/book3s_64_mmu_host.c              |   4 +-
 arch/powerpc/kvm/book3s_64_mmu_hv.c                |   4 +-
 arch/powerpc/kvm/book3s_64_mmu_radix.c             |   6 +-
 arch/powerpc/kvm/book3s_64_vio_hv.c                |   2 +-
 arch/powerpc/kvm/book3s_hv_nested.c                |   2 +-
 arch/powerpc/kvm/book3s_hv_rm_mmu.c                |   8 +-
 arch/powerpc/kvm/e500_mmu_host.c                   |   4 +-
 arch/powerpc/platforms/pseries/lparcfg.c           |   2 +-
 arch/powerpc/platforms/pseries/pci.c               |   2 +-
 arch/x86/kernel/cpu/resctrl/rdtgroup.c             |  12 +-
 arch/x86/kvm/mmu/mmu.c                             | 154 ++++--
 arch/x86/kvm/mmu/paging_tmpl.h                     |   6 +-
 crypto/ccm.c                                       |   2 +-
 drivers/char/tpm/tpm_tis_core.c                    |  38 +-
 drivers/crypto/qce/core.c                          |   2 +-
 drivers/dma-buf/dma-resv.c                         |  10 +-
 drivers/dma-buf/udmabuf.c                          |  21 +-
 drivers/dma/dw-edma/dw-edma-core.c                 |  90 ++--
 drivers/dma/dw-edma/dw-edma-core.h                 |  33 +-
 drivers/dma/dw-edma/dw-edma-pcie.c                 |  83 ++--
 drivers/dma/dw-edma/dw-edma-v0-core.c              |  38 +-
 drivers/dma/dw-edma/dw-edma-v0-core.h              |   4 +-
 drivers/dma/dw-edma/dw-edma-v0-debugfs.c           |  18 +-
 drivers/dma/dw-edma/dw-edma-v0-debugfs.h           |   8 +-
 drivers/fpga/dfl-afu-main.c                        |   3 +
 drivers/gpio/gpio-mvebu.c                          |   4 +-
 drivers/gpio/gpio-pxa.c                            |   4 +-
 drivers/gpio/gpio-rockchip.c                       |   4 +-
 drivers/gpio/gpio-tegra.c                          |  18 +-
 drivers/gpio/gpio-vf610.c                          |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c   |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c            |  21 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  17 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c            |  11 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c             |   4 +-
 drivers/gpu/drm/amd/amdgpu/vce_v3_0.c              |  26 +-
 drivers/gpu/drm/amd/amdkfd/kfd_svm.c               |   2 +-
 drivers/gpu/drm/amd/pm/amdgpu_pm.c                 |  14 +-
 drivers/gpu/drm/drm_connector.c                    |  12 +-
 drivers/gpu/drm/drm_dp_mst_topology.c              |  32 +-
 drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c       |   2 +-
 drivers/gpu/drm/i915/display/intel_hdcp.c          |  12 +-
 drivers/gpu/drm/i915/display/intel_vrr.c           |   4 +
 drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c     |   4 +-
 drivers/gpu/drm/i915/i915_vma.c                    |   2 +-
 drivers/gpu/drm/lima/lima_gem.c                    |   2 +-
 drivers/gpu/drm/msm/msm_gem_submit.c               |   2 +-
 drivers/gpu/drm/nouveau/nouveau_fence.c            |   2 +-
 drivers/gpu/drm/qxl/qxl_release.c                  |   2 +-
 drivers/gpu/drm/radeon/radeon_kms.c                |   1 +
 drivers/gpu/drm/radeon/radeon_vm.c                 |   2 +-
 drivers/gpu/drm/tegra/fb.c                         |   8 +-
 drivers/gpu/drm/ttm/ttm_bo.c                       |   4 +-
 drivers/gpu/drm/ttm/ttm_execbuf_util.c             |   4 +-
 drivers/gpu/drm/vc4/vc4_gem.c                      |   2 +-
 drivers/gpu/drm/vgem/vgem_fence.c                  |   2 +-
 drivers/gpu/drm/virtio/virtgpu_drv.h               |   1 +
 drivers/gpu/drm/virtio/virtgpu_gem.c               |  28 ++
 drivers/gpu/drm/virtio/virtgpu_plane.c             |  10 +-
 drivers/gpu/drm/virtio/virtgpu_vq.c                |   9 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_cotable.c            |   4 +
 drivers/i2c/busses/i2c-bcm-iproc.c                 |  11 +-
 drivers/i2c/busses/i2c-davinci.c                   |   4 +-
 drivers/i2c/busses/i2c-imx.c                       | 135 ++++--
 drivers/input/joystick/iforce/iforce-packets.c     |  11 +-
 drivers/input/joystick/iforce/iforce-usb.c         |   3 +
 drivers/input/joystick/psxpad-spi.c                |   1 +
 drivers/input/keyboard/atkbd.c                     |   8 +
 drivers/input/misc/ims-pcu.c                       |   5 +-
 drivers/input/mouse/focaltech.c                    |   2 +-
 drivers/input/rmi4/rmi_f54.c                       |  43 +-
 drivers/input/rmi4/rmi_f55.c                       |   4 +-
 drivers/input/touchscreen/mms114.c                 |  21 +-
 drivers/input/touchscreen/sur40.c                  |  23 +-
 drivers/iommu/amd/iommu.c                          |   3 +-
 drivers/md/dm-integrity.c                          |   4 -
 drivers/md/dm-verity-target.c                      |  12 +-
 drivers/md/dm-verity.h                             |   2 +-
 drivers/media/i2c/imx219.c                         |  47 +-
 drivers/media/platform/aspeed-video.c              |   1 +
 drivers/media/platform/marvell-ccic/cafe-driver.c  |   1 +
 .../media/platform/mtk-vcodec/mtk_vcodec_fw_scp.c  |   5 +
 drivers/media/v4l2-core/v4l2-async.c               |   8 +-
 drivers/media/v4l2-core/v4l2-fwnode.c              |   6 +-
 drivers/mmc/host/atmel-mci.c                       |   2 +
 drivers/mmc/host/omap_hsmmc.c                      |   2 +-
 drivers/mmc/host/sdhci.c                           |  16 +
 drivers/mmc/host/sdhci.h                           |   2 +-
 drivers/mmc/host/vub300.c                          |  36 +-
 drivers/mtd/maps/vmu-flash.c                       |   8 +-
 drivers/mtd/spi-nor/swp.c                          |  30 +-
 drivers/net/can/usb/Kconfig                        |  15 +-
 drivers/net/can/usb/Makefile                       |   2 +-
 drivers/net/can/usb/{esd_usb2.c => esd_usb.c}      |   5 +-
 drivers/net/can/usb/gs_usb.c                       |   2 +-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.c   |  25 +
 drivers/net/ethernet/aquantia/atlantic/aq_ring.h   |   1 +
 drivers/net/ethernet/aquantia/atlantic/aq_vec.c    |   2 +-
 drivers/net/ethernet/intel/ice/ice_ethtool.c       |  10 +-
 drivers/net/ethernet/intel/ice/ice_main.c          |  10 +
 drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c   |  48 ++
 drivers/net/ethernet/intel/igc/igc_main.c          |   1 -
 drivers/net/ethernet/marvell/octeontx2/af/rvu.c    |  14 +-
 drivers/net/ethernet/marvell/octeontx2/af/rvu.h    |   1 +
 .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c  |  18 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c   |  14 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c   |   8 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.c     |  92 +++-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |  13 +
 drivers/net/ethernet/ti/am65-cpsw-nuss.c           |   2 +
 drivers/net/ipa/ipa_smp2p.c                        |  30 +-
 drivers/net/thunderbolt.c                          |   8 +-
 drivers/net/wan/ixp4xx_hss.c                       |   4 +-
 drivers/net/wireless/ath/ath6kl/txrx.c             |   2 +-
 .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c  |  16 +-
 .../net/wireless/broadcom/brcm80211/brcmfmac/bus.h |   6 +
 .../wireless/broadcom/brcm80211/brcmfmac/core.c    |  45 +-
 .../wireless/broadcom/brcm80211/brcmfmac/pcie.c    |   6 +
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.c    |   8 +-
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.h    |   1 +
 .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c |   3 +
 drivers/net/wireless/marvell/libertas_tf/main.c    |   2 +-
 drivers/pinctrl/bcm/pinctrl-bcm2835.c              |   4 +-
 drivers/pinctrl/cirrus/pinctrl-lochnagar.c         |   2 +-
 drivers/pinctrl/core.c                             |  15 +-
 drivers/pinctrl/intel/pinctrl-cherryview.c         |   4 +-
 drivers/pinctrl/intel/pinctrl-intel.c              |   4 +-
 drivers/pinctrl/intel/pinctrl-lynxpoint.c          |   4 +-
 drivers/pinctrl/mediatek/pinctrl-moore.c           |   4 +-
 drivers/pinctrl/mediatek/pinctrl-mtk-common.c      |   4 +-
 drivers/pinctrl/mediatek/pinctrl-paris.c           |   4 +-
 drivers/pinctrl/nuvoton/pinctrl-npcm7xx.c          |   4 +-
 drivers/pinctrl/pinctrl-as3722.c                   |   4 +-
 drivers/pinctrl/pinctrl-axp209.c                   |   2 +-
 drivers/pinctrl/pinctrl-ingenic.c                  |  11 +-
 drivers/pinctrl/pinctrl-ocelot.c                   |   4 +-
 drivers/pinctrl/pinctrl-rk805.c                    |   4 +-
 drivers/pinctrl/pinctrl-st.c                       |   4 +-
 drivers/pinctrl/renesas/gpio.c                     |   4 +-
 drivers/pinctrl/stm32/pinctrl-stm32.c              |   4 +-
 drivers/pinctrl/sunxi/pinctrl-sunxi.c              |   4 +-
 drivers/pinctrl/vt8500/pinctrl-wmt.c               |   4 +-
 drivers/remoteproc/qcom_common.c                   |  31 +-
 drivers/remoteproc/qcom_common.h                   |   5 +-
 drivers/remoteproc/qcom_q6v5_pas.c                 |  20 +-
 drivers/s390/cio/vfio_ccw_cp.c                     |  17 +-
 drivers/s390/net/qeth_core_main.c                  |   3 +
 drivers/s390/net/qeth_l3_main.c                    |   5 +
 drivers/scsi/lpfc/lpfc_init.c                      |   3 +-
 drivers/scsi/scsi_debug.c                          |  27 +-
 drivers/scsi/sd.h                                  |  27 +-
 drivers/scsi/sd_zbc.c                              | 126 +++--
 drivers/thunderbolt/domain.c                       |  36 +-
 drivers/thunderbolt/icm.c                          |   5 +
 drivers/thunderbolt/nhi.c                          |   6 +-
 drivers/thunderbolt/nvm.c                          |   4 +-
 drivers/thunderbolt/property.c                     |  38 +-
 drivers/thunderbolt/switch.c                       |  20 +-
 drivers/thunderbolt/tb.c                           |  58 +--
 drivers/thunderbolt/tb.h                           |   2 +
 drivers/thunderbolt/xdomain.c                      |  96 ++--
 drivers/tty/serial/8250/8250_mid.c                 |   6 +-
 drivers/tty/serial/max310x.c                       |  20 +-
 drivers/tty/serial/sc16is7xx.c                     | 192 ++++++--
 drivers/usb/gadget/function/f_tcm.c                | 192 ++++++--
 drivers/usb/gadget/function/tcm.h                  |  13 +
 drivers/vdpa/vdpa_user/iova_domain.c               |  91 ++--
 drivers/vdpa/vdpa_user/iova_domain.h               |  13 +-
 drivers/vdpa/vdpa_user/vduse_dev.c                 |  16 +-
 drivers/video/fbdev/core/bitblit.c                 | 120 ++---
 drivers/video/fbdev/core/fbcon.c                   | 413 ++++++++--------
 drivers/video/fbdev/core/fbcon.h                   |   6 +-
 drivers/video/fbdev/core/fbcon_ccw.c               | 146 +++---
 drivers/video/fbdev/core/fbcon_cw.c                | 146 +++---
 drivers/video/fbdev/core/fbcon_rotate.c            |  44 +-
 drivers/video/fbdev/core/fbcon_rotate.h            |   6 +-
 drivers/video/fbdev/core/fbcon_ud.c                | 162 +++----
 drivers/video/fbdev/core/softcursor.c              |  18 +-
 drivers/video/fbdev/core/tileblit.c                |  28 +-
 fs/9p/vfs_inode.c                                  |   9 +
 fs/binfmt_elf.c                                    |   4 +-
 fs/binfmt_elf_fdpic.c                              |   4 +-
 fs/binfmt_misc.c                                   |  14 +-
 fs/ceph/acl.c                                      |   6 +-
 fs/ceph/addr.c                                     |  20 +-
 fs/ceph/cache.c                                    |   2 +-
 fs/ceph/caps.c                                     |  53 ++-
 fs/ceph/dir.c                                      |  20 +-
 fs/ceph/export.c                                   |  10 +-
 fs/ceph/file.c                                     |  42 +-
 fs/ceph/inode.c                                    |  14 +-
 fs/ceph/ioctl.c                                    |   8 +-
 fs/ceph/mds_client.c                               |  11 +
 fs/ceph/mds_client.h                               |   2 +
 fs/ceph/mdsmap.c                                   |   2 +-
 fs/ceph/metric.c                                   |   5 +-
 fs/ceph/snap.c                                     |   2 +-
 fs/ceph/super.c                                    |  22 +-
 fs/ceph/super.h                                    |  14 +-
 fs/ceph/xattr.c                                    |  12 +-
 fs/cifs/smb2ops.c                                  |   4 +-
 fs/crypto/policy.c                                 |   2 +-
 fs/exec.c                                          |   6 +-
 fs/f2fs/data.c                                     |   2 +-
 fs/ksmbd/auth.c                                    |   4 +-
 fs/ksmbd/connection.c                              |  23 +-
 fs/ksmbd/connection.h                              |   5 +
 fs/ksmbd/oplock.c                                  |   8 +-
 fs/ksmbd/smb2pdu.c                                 | 102 ++--
 fs/ksmbd/smb2pdu.h                                 |   9 -
 fs/ksmbd/smb_common.c                              |  43 +-
 fs/ksmbd/smb_common.h                              |   9 +
 fs/namei.c                                         |  43 ++
 fs/ntfs3/fsntfs.c                                  |  20 +-
 fs/ntfs3/index.c                                   |  44 +-
 fs/ntfs3/ntfs_fs.h                                 |   2 +-
 fs/overlayfs/copy_up.c                             |  14 +-
 fs/super.c                                         |  19 +-
 fs/xfs/libxfs/xfs_sb.c                             |   4 +-
 fs/xfs/xfs_dquot.c                                 |   3 +-
 include/drm/drm_connector.h                        |   6 +-
 include/drm/drm_displayid.h                        |   2 +-
 include/linux/audit.h                              |  18 +-
 include/linux/bootconfig.h                         |   3 +
 include/linux/bpf_lsm.h                            |   4 +
 include/linux/ceph/ceph_debug.h                    |  38 ++
 include/linux/dma-resv.h                           |   2 +-
 include/linux/dma/edma.h                           |  50 +-
 include/linux/firmware.h                           |   3 +
 include/linux/fs.h                                 |  33 ++
 include/linux/ip.h                                 |  21 +
 include/linux/jiffies.h                            |  13 +
 include/linux/kvm_host.h                           |  60 +--
 include/linux/lsm_hooks.h                          |   1 +
 include/linux/mmc/sdio_ids.h                       |   2 +-
 include/linux/namei.h                              |   1 +
 include/linux/pinctrl/consumer.h                   |  13 +-
 include/linux/thunderbolt.h                        |   3 +
 include/media/v4l2-async.h                         |   8 +-
 include/net/dst.h                                  |  24 +-
 include/net/inet6_hashtables.h                     |   2 +-
 include/net/inet_hashtables.h                      |   2 +-
 include/net/ip.h                                   |  11 +-
 include/net/ip_tunnels.h                           |   3 +
 include/net/ip_vs.h                                |   7 +
 include/net/lwtunnel.h                             |   8 +-
 include/net/netfilter/nf_queue.h                   |   1 +
 include/net/route.h                                |   5 +-
 include/uapi/linux/ip_vs.h                         |   6 -
 init/main.c                                        |  39 --
 kernel/audit.c                                     |   2 +-
 kernel/audit.h                                     |  32 +-
 kernel/audit_fsnotify.c                            |  39 +-
 kernel/audit_tree.c                                |   2 +-
 kernel/audit_watch.c                               |  42 +-
 kernel/auditfilter.c                               |  17 +-
 kernel/auditsc.c                                   |   6 +-
 kernel/bpf/bpf_inode_storage.c                     |  10 +
 kernel/fork.c                                      |  21 +-
 kernel/locking/spinlock_rt.c                       |  27 +-
 kernel/sched/psi.c                                 |   6 +
 kernel/taskstats.c                                 |  67 +--
 kernel/trace/ftrace.c                              |  21 +-
 lib/bootconfig.c                                   |  65 +++
 lib/compat_audit.c                                 |  12 +-
 mm/madvise.c                                       |   3 +-
 mm/memory_hotplug.c                                |  15 +-
 mm/mincore.c                                       |   3 +-
 mm/pagewalk.c                                      |   8 +
 mm/ptdump.c                                        |   7 +
 net/bluetooth/hci_event.c                          |   2 -
 net/ceph/cls_lock_client.c                         |  21 +-
 net/ceph/decode.c                                  |  18 +-
 net/ceph/osdmap.c                                  |   9 +-
 net/core/dst.c                                     |   8 +-
 net/core/pktgen.c                                  |  43 +-
 net/core/sock.c                                    |   6 +-
 net/ipv4/icmp.c                                    |  24 +-
 net/ipv4/igmp.c                                    |   2 +-
 net/ipv4/ip_fragment.c                             |   2 +-
 net/ipv4/ip_output.c                               |   4 +-
 net/ipv4/ip_tunnel_core.c                          |  35 ++
 net/ipv4/ip_vti.c                                  |   4 +-
 net/ipv4/ipip.c                                    |  41 +-
 net/ipv4/netfilter.c                               |   4 +-
 net/ipv4/route.c                                   |  10 +-
 net/ipv4/tcp_fastopen.c                            |   4 +-
 net/ipv4/tcp_ipv4.c                                |   8 +-
 net/ipv4/tcp_metrics.c                             |   8 +-
 net/ipv4/xfrm4_output.c                            |   2 +-
 net/ipv6/ip6_tunnel.c                              |  40 +-
 net/ipv6/sit.c                                     |  38 +-
 net/ipv6/tcp_ipv6.c                                |  10 +-
 net/mptcp/options.c                                |   8 +-
 net/mptcp/pm_netlink.c                             |   4 -
 net/mptcp/protocol.c                               | 127 +++--
 net/mptcp/protocol.h                               |  29 +-
 net/mptcp/sockopt.c                                |  24 +-
 net/mptcp/subflow.c                                |  17 +-
 net/netfilter/ipset/ip_set_core.c                  |  19 +-
 net/netfilter/ipset/ip_set_list_set.c              |   7 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |   4 +-
 net/netfilter/ipvs/ip_vs_core.c                    |   6 +-
 net/netfilter/ipvs/ip_vs_ctl.c                     |   4 +-
 net/netfilter/ipvs/ip_vs_dh.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_lblc.c                    |   2 +-
 net/netfilter/ipvs/ip_vs_lblcr.c                   |   8 +-
 net/netfilter/nf_conntrack_sip.c                   |  10 +-
 net/netfilter/nf_flow_table_core.c                 |   7 +-
 net/netfilter/nf_queue.c                           |  14 +
 net/netfilter/nf_tables_offload.c                  |   2 +-
 net/netfilter/nfnetlink_queue.c                    |   3 +
 net/netfilter/nft_set_pipapo.c                     | 260 ++++++----
 net/netfilter/nft_set_pipapo.h                     |   8 +
 net/openvswitch/conntrack.c                        |  39 +-
 net/packet/af_packet.c                             |   7 +-
 net/rxrpc/call_accept.c                            |  27 +-
 net/sched/act_ct.c                                 |  41 +-
 net/sched/sch_api.c                                |  24 +-
 net/sched/sch_cake.c                               |   2 +-
 net/sched/sch_taprio.c                             |  12 +-
 net/sctp/protocol.c                                |  20 +-
 net/sctp/sysctl.c                                  |   9 +-
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc_rx.c                                   |  12 +-
 net/smc/smc_tx.c                                   |  17 +-
 net/tipc/socket.c                                  |   6 +-
 net/x25/af_x25.c                                   |   4 +-
 net/x25/x25_timer.c                                |  25 +-
 net/xfrm/espintcp.c                                |  32 +-
 security/apparmor/include/net.h                    |   6 +-
 security/apparmor/lsm.c                            |  38 +-
 security/bpf/hooks.c                               |   3 +
 security/security.c                                | 530 +++++++++++++--------
 security/selinux/hooks.c                           |  91 ++--
 security/selinux/include/objsec.h                  |   5 +
 security/selinux/netlabel.c                        |  23 +-
 security/selinux/ss/policydb.c                     |  31 ++
 security/selinux/ss/services.c                     |   4 +-
 security/smack/smack.h                             |   5 +
 security/smack/smack_lsm.c                         |  66 ++-
 security/smack/smack_netfilter.c                   |   8 +-
 sound/core/seq/seq_timer.c                         |  13 +-
 sound/hda/hdac_regmap.c                            |   4 +-
 sound/pci/hda/patch_conexant.c                     |   3 -
 sound/soc/codecs/cs4265.c                          |   4 +-
 sound/soc/codecs/lpass-wsa-macro.c                 |   8 +-
 sound/soc/mediatek/mt8183/mt8183-afe-pcm.c         |  12 +-
 sound/soc/mediatek/mt8192/mt8192-afe-pcm.c         | 118 ++---
 sound/soc/xilinx/xlnx_formatter_pcm.c              |  10 +-
 virt/kvm/kvm_main.c                                |  49 +-
 358 files changed, 4765 insertions(+), 2894 deletions(-)