Skip to content

6.18.58-rc1 review

Greg Kroah-Hartman linux-patches lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest52 patches 11 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/52spi: mpc52xx: clean up interrupt handlingdrivers/spi/spi-mpc52xx.c+16 -100 replies
2/52usb: gadget: f_hid: Add missing error codedrivers/usb/gadget/function/f_hid.c+3 -10 replies
3/52RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tablesdrivers/infiniband/hw/erdma/erdma_main.c drivers/infiniband/hw/erdma/erdma_verbs.c+11 -110 replies
4/52PCI: dwc: Return -ENODEV from dw_pcie_wait_for_link() if device is not founddrivers/pci/controller/dwc/pcie-designware.c+19 -10 replies
5/52PCI: dwc: Return -EIO from dw_pcie_wait_for_link() if device is not activedrivers/pci/controller/dwc/pcie-designware.c+13 -20 replies
6/52ip6_gre: remove obsolete ERSPAN PMTU updatenet/ipv6/ip6_gre.c+0 -70 replies
7/52drm/amd: Create a device link between APU display and XHCI devicesdrivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_0_ppt.c+67 -00 replies
8/52iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() testdrivers/net/ethernet/intel/iavf/iavf_virtchnl.c+5 -70 replies
9/52iavf: send MAC change request synchronouslydrivers/net/ethernet/intel/iavf/iavf.h drivers/net/ethernet/intel/iavf/iavf_main.c drivers/net/ethernet/intel/iavf/iavf_virtchnl.c+165 -300 replies
10/52mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAPmm/mremap.c mm/vma.c mm/vma.h+30 -100 replies
11/52mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-mergemm/mremap.c mm/vma.c mm/vma.h +1 more+24 -60 replies
12/52nfsd: fix all-zero stateid in CB_OFFLOAD for async COPYfs/nfsd/nfs4proc.c+2 -00 replies
13/52wifi: mt76: connac: tolerate inactive BSS deactivationdrivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.h drivers/net/wireless/mediatek/mt76/mt7925/mcu.c+35 -30 replies
14/52dm-integrity: fix NULL pointer dereference when the R flag is useddrivers/md/dm-integrity.c+5 -00 replies
15/52dm-integrity: validate the superblock on resumedrivers/md/dm-integrity.c+50 -00 replies
16/52sched_ext: Fix CPU hotplug hang when a dying CPUs tasks sit in the BPF schedulerkernel/sched/ext.c kernel/sched/sched.h+29 -50 replies
17/52Bluetooth: RFCOMM: connect the session socket without rfcomm_mutexinclude/net/bluetooth/rfcomm.h net/bluetooth/rfcomm/core.c+96 -390 replies
18/52net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stopdrivers/net/ethernet/xilinx/xilinx_axienet.h drivers/net/ethernet/xilinx/xilinx_axienet_main.c+47 -110 replies
19/52net: mana: reserve RX buffer headroom to fix forwarding performancedrivers/net/ethernet/microsoft/mana/mana_bpf.c drivers/net/ethernet/microsoft/mana/mana_en.c include/net/mana/mana.h+19 -190 replies
20/52riscv: patch: Avoid early phys_to_page()arch/riscv/kernel/patch.c+11 -100 replies
21/52riscv: patch: fix handling of bpf-jit execmem addressesarch/riscv/kernel/patch.c+1 -10 replies
22/52scsi: ufs: core: Decouple CQ sweep from request iterator in MCQdrivers/ufs/core/ufshcd.c+21 -160 replies
23/52scsi: ch: Do not keep references to data transfer element devicesdrivers/scsi/ch.c+9 -210 replies
24/52scsi: ufs: core: Move an assignment in ufshcd_mcq_process_cqe()drivers/ufs/core/ufs-mcq.c+2 -10 replies
25/52scsi: ufs: core: Add debug log for MCQ command timeoutdrivers/ufs/core/ufs-mcq.c+2 -00 replies
26/52scsi: ufs: core: Add a comment block above ufshcd_mcq_compl_all_cqes_lock()drivers/ufs/core/ufs-mcq.c+8 -00 replies
27/52scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock()drivers/ufs/core/ufs-mcq.c+17 -130 replies
28/52drm/xe/i2c: cancel the client work on removedrivers/gpu/drm/xe/xe_i2c.c+4 -10 replies
29/52cifs: fix time_last_write stamp placement in setattr/truncate pathsfs/smb/client/inode.c+23 -40 replies
30/52fat: stop reading directory entries past the end-of-directory markerfs/fat/dir.c+40 -40 replies
31/52ima: Access decompressed kernel module to verify appended signatureinclude/linux/kernel_read_file.h kernel/module/main.c security/integrity/ima/ima_main.c +3 more+37 -140 replies
32/52ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec()security/integrity/ima/ima.h security/integrity/ima/ima_appraise.c security/integrity/ima/ima_main.c+20 -240 replies
33/52ice: remove legacy Rx and construct SKBdrivers/net/ethernet/intel/ice/ice.h drivers/net/ethernet/intel/ice/ice_base.c drivers/net/ethernet/intel/ice/ice_ethtool.c +4 more+6 -2080 replies
34/52ice: drop page splitting and recyclingdrivers/net/ethernet/intel/ice/ice.h drivers/net/ethernet/intel/ice/ice_base.c drivers/net/ethernet/intel/ice/ice_txrx.c +2 more+24 -2230 replies
35/52ice: fix crash in ethtool offline loopback testdrivers/net/ethernet/intel/ice/ice_base.c drivers/net/ethernet/intel/ice/ice_ethtool.c drivers/net/ethernet/intel/ice/ice_lib.c+18 -60 replies
36/52ice: fix rxq info registering in mbuf packetsdrivers/net/ethernet/intel/ice/ice_base.c drivers/net/ethernet/intel/ice/ice_ethtool.c drivers/net/ethernet/intel/ice/ice_txrx.c +1 more+18 -190 replies
37/52ice: change XDP RxQ frag_size from DMA write length to xdp.frame_szdrivers/net/ethernet/intel/ice/ice_base.c+4 -50 replies
38/52xfs: factor out xfs_attr3_node_entry_removefs/xfs/libxfs/xfs_da_btree.c fs/xfs/libxfs/xfs_da_btree.h+44 -110 replies
39/52xfs: factor out xfs_attr3_leaf_initfs/xfs/libxfs/xfs_attr_leaf.c fs/xfs/libxfs/xfs_attr_leaf.h+25 -00 replies
40/52xfs: close crash window in attr dabtree inactivationfs/xfs/xfs_attr_inactive.c+57 -380 replies
41/52mm/damon/core: cancel damos_walk() before damon_ctx->kdamond resetmm/damon/core.c+1 -20 replies
42/52mm/damon/core: fix damos_walk() vs kdamond_fn() exit raceinclude/linux/damon.h mm/damon/core.c+15 -70 replies
43/52selinux: allow multiple opens of /sys/fs/selinux/policysecurity/selinux/selinuxfs.c+4 -230 replies
44/52usb: iowarrior: remove inherent race with minor numberdrivers/usb/misc/iowarrior.c+3 -140 replies
45/52USB: iowarrior: fix use-after-free on disconnect racedrivers/usb/misc/iowarrior.c+24 -330 replies
46/52ice: fix broken Rx on VFsdrivers/net/ethernet/intel/ice/virt/queues.c+3 -00 replies
47/52rose: hold a reference on incoming sockets queued for accept()net/rose/af_rose.c net/rose/rose_timer.c+44 -50 replies
48/52io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCKio_uring/io_uring.c io_uring/kbuf.c io_uring/memmap.c +3 more+37 -350 replies
49/52io_uring/kbuf: dont charge provided buffer rings to RLIMIT_MEMLOCKio_uring/kbuf.c+3 -30 replies
50/52kho: free chunks using free_page() instead of kfree()kernel/kexec_handover.c+1 -10 replies
51/52bpf, sockmap: Account for receive queue in FIONREAD without a verdict programinclude/linux/skmsg.h net/ipv4/tcp_bpf.c+16 -150 replies
52/52wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses"drivers/net/wireless/ath/ath9k/wmi.c drivers/net/wireless/ath/ath9k/wmi.h+2 -150 replies

Reviews trailers per patch

33 of 52 patches have a Reviewed-by or Acked-by.

PatchPedro FalcatoKiryl Shutsemau (Meta)Jose A. Perez de AzpillagaAnirudh SrinivasanAndrea Righi[email protected]Peter KorsgaardMichael ZimmermannRichard ZhuVincent GuittotShawn LinNiklas CasselIdo SchimmelAlex DeucherMark PearsonAlexander FFrancis DBAleksandr LoktionovRafal RomanowskiPrzemek KitszelSimon HormanHeikki KrogerusPaulo Alcantara (Red Hat)OGAWA HirofumiAlexander LobakinJacob KellerAlexander NowlinRinitha SMike Rapoport (Microsoft)Thomas WeißschuhDarrick J. WongTony NguyenJakub SlepeckiPu LehuiHengyu LiangPasha TatashinJiayuan ChenEmil TsalapatisJohn FastabendBart Van AsschePeter WangLaurence ObermanAvri AltmanBrett A C SheffieldPeter SchneiderWentao GuanMiguel OjedaSJ ParkSean LyonRon EconomosBarry K. NathanPavel Machek (CIP)Florian FainelliShuah Khan
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
1/52
2/52A-b R-b
3/52
4/52T-b T-b R-b R-b
5/52R-b
6/52R-b
7/52A-b T-b T-b T-b
8/52R-b T-b
9/52T-b R-b
10/52R-b A-b R-b T-b
11/52R-b A-b R-b T-b
12/52
13/52
14/52
15/52
16/52R-b
17/52T-b
18/52
19/52R-b
20/52A-b T-b
21/52R-b T-b
22/52R-b R-b
23/52R-b
24/52R-b
25/52R-b
26/52R-b
27/52R-b R-b
28/52R-b
29/52R-b
30/52A-b
31/52
32/52
33/52R-b R-b T-b
34/52R-b R-b T-b
35/52R-b T-b
36/52R-b
37/52R-b
38/52R-b
39/52R-b
40/52R-b
41/52
42/52
43/52
44/52
45/52
46/52R-b R-b T-b
47/52
48/52
49/52T-b
50/52R-b R-b
51/52R-b R-b R-b
52/52

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 54 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 00/52] 6.18.58-rc1 review

This is the start of the stable review cycle for the 6.18.58 release. There are 52 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Mon, 19 Oct 2026 15:50:51 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.58-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.58-rc1

Toke Høiland-Jørgensen <[email protected]>
wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses"

Mattia Meleleo <[email protected]>
bpf, sockmap: Account for receive queue in FIONREAD without a verdict program

Pratyush Yadav <[email protected]>
kho: free chunks using free_page() instead of kfree()

Jens Axboe <[email protected]>
io_uring/kbuf: don't charge provided buffer rings to RLIMIT_MEMLOCK

Hengyu Liang <[email protected]>
io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCK

Bernard Pidoux <[email protected]>
rose: hold a reference on incoming sockets queued for accept()

Alexander Lobakin <[email protected]>
ice: fix broken Rx on VFs

Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect race

Oliver Neukum <[email protected]>
usb: iowarrior: remove inherent race with minor number

Stephen Smalley <[email protected]>
selinux: allow multiple opens of /sys/fs/selinux/policy

SeongJae Park <[email protected]>
mm/damon/core: fix damos_walk() vs kdamond_fn() exit race

SeongJae Park <[email protected]>

    mm/damon/core: cancel damos_walk() before damon_ctx->kdamond reset

Long Li <[email protected]>
xfs: close crash window in attr dabtree inactivation

Long Li <[email protected]>
xfs: factor out xfs_attr3_leaf_init

Long Li <[email protected]>
xfs: factor out xfs_attr3_node_entry_remove

Larysa Zaremba <[email protected]>
ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz

Larysa Zaremba <[email protected]>
ice: fix rxq info registering in mbuf packets

Michal Schmidt <[email protected]>
ice: fix crash in ethtool offline loopback test

Michal Kubiak <[email protected]>
ice: drop page splitting and recycling

Michal Kubiak <[email protected]>
ice: remove legacy Rx and construct SKB

Chris J Arges <[email protected]>
ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec()

Coiby Xu <[email protected]>
ima: Access decompressed kernel module to verify appended signature

Matteo Croce <[email protected]>
fat: stop reading directory entries past the end-of-directory marker

Frank Sorenson <[email protected]>
cifs: fix time_last_write stamp placement in setattr/truncate paths

Fan Wu <[email protected]>
drm/xe/i2c: cancel the client work on remove

Stanley Jhu <[email protected]>
scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock()

Bart Van Assche <[email protected]>
scsi: ufs: core: Add a comment block above ufshcd_mcq_compl_all_cqes_lock()

Peter Wang <[email protected]>
scsi: ufs: core: Add debug log for MCQ command timeout

Bart Van Assche <[email protected]>
scsi: ufs: core: Move an assignment in ufshcd_mcq_process_cqe()

Ahmed Abdelhaleem Ahmed <[email protected]>
scsi: ch: Do not keep references to data transfer element devices

Stanley Jhu <[email protected]>
scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ

Wei-Jie Hung <[email protected]>
riscv: patch: fix handling of bpf-jit execmem addresses

Vivian Wang <[email protected]>
riscv: patch: Avoid early phys_to_page()

Hamza Mahfooz <[email protected]>
net: mana: reserve RX buffer headroom to fix forwarding performance

Suraj Gupta <[email protected]>
net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop

Mikhail Gavrilov <[email protected]>
Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex

Tejun Heo <[email protected]>
sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler

Mikulas Patocka <[email protected]>
dm-integrity: validate the superblock on resume

Mikulas Patocka <[email protected]>
dm-integrity: fix NULL pointer dereference when the 'R' flag is used

Sean Wang <[email protected]>
wifi: mt76: connac: tolerate inactive BSS deactivation

Lubos Rendek <[email protected]>
nfsd: fix all-zero stateid in CB_OFFLOAD for async COPY

Lorenzo Stoakes (ARM) <[email protected]>
mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge

Lorenzo Stoakes (ARM) <[email protected]>
mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP

Jose Ignacio Tornos Martinez <[email protected]>
iavf: send MAC change request synchronously

Corinna Vinschen <[email protected]>
iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test

Mario Limonciello <[email protected]>
drm/amd: Create a device link between APU display and XHCI devices

Daehyeon Ko <[email protected]>
ip6_gre: remove obsolete ERSPAN PMTU update

Manivannan Sadhasivam <[email protected]>
PCI: dwc: Return -EIO from dw_pcie_wait_for_link() if device is not active

Manivannan Sadhasivam <[email protected]>
PCI: dwc: Return -ENODEV from dw_pcie_wait_for_link() if device is not found

Cheng Xu <[email protected]>
RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables

Ethan Tidmore <[email protected]>
usb: gadget: f_hid: Add missing error code

Johan Hovold <[email protected]>
spi: mpc52xx: clean up interrupt handling

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/riscv/kernel/patch.c                          |  21 +-
 drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c          |  12 ++
 drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h      |  10 +
 .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_0_ppt.c   |  45 ++++
 drivers/gpu/drm/xe/xe_i2c.c                        |   5 +-
 drivers/infiniband/hw/erdma/erdma_main.c           |   4 +-
 drivers/infiniband/hw/erdma/erdma_verbs.c          |  18 +-
 drivers/md/dm-integrity.c                          |  55 +++++
 drivers/net/ethernet/intel/iavf/iavf.h             |  11 +-
 drivers/net/ethernet/intel/iavf/iavf_main.c        |  85 ++++++--
 drivers/net/ethernet/intel/iavf/iavf_virtchnl.c    | 111 ++++++++--
 drivers/net/ethernet/intel/ice/ice.h               |   3 +-
 drivers/net/ethernet/intel/ice/ice_base.c          |  79 ++-----
 drivers/net/ethernet/intel/ice/ice_ethtool.c       |  10 +-
 drivers/net/ethernet/intel/ice/ice_lib.c           |  15 +-
 drivers/net/ethernet/intel/ice/ice_main.c          |  11 +-
 drivers/net/ethernet/intel/ice/ice_txrx.c          | 233 ++-------------------
 drivers/net/ethernet/intel/ice/ice_txrx.h          |  88 --------
 drivers/net/ethernet/intel/ice/ice_xsk.c           |  75 +------
 drivers/net/ethernet/intel/ice/virt/queues.c       |   6 +-
 drivers/net/ethernet/microsoft/mana/mana_bpf.c     |   8 +-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |  26 ++-
 drivers/net/ethernet/xilinx/xilinx_axienet.h       |   7 +-
 drivers/net/ethernet/xilinx/xilinx_axienet_main.c  |  53 ++++-
 drivers/net/wireless/ath/ath9k/wmi.c               |  16 +-
 drivers/net/wireless/ath/ath9k/wmi.h               |   1 -
 .../net/wireless/mediatek/mt76/mt76_connac_mcu.c   |   9 +-
 .../net/wireless/mediatek/mt76/mt76_connac_mcu.h   |  23 ++
 drivers/net/wireless/mediatek/mt76/mt7925/mcu.c    |   6 +-
 drivers/pci/controller/dwc/pcie-designware.c       |  31 ++-
 drivers/scsi/ch.c                                  |  30 +--
 drivers/spi/spi-mpc52xx.c                          |  26 ++-
 drivers/ufs/core/ufs-mcq.c                         |  35 +++-
 drivers/ufs/core/ufshcd.c                          |  37 ++--
 drivers/usb/gadget/function/f_hid.c                |   4 +-
 drivers/usb/misc/iowarrior.c                       |  74 +++----
 fs/fat/dir.c                                       |  44 +++-
 fs/nfsd/nfs4proc.c                                 |   2 +
 fs/smb/client/inode.c                              |  27 ++-
 fs/xfs/libxfs/xfs_attr_leaf.c                      |  22 ++
 fs/xfs/libxfs/xfs_attr_leaf.h                      |   3 +
 fs/xfs/libxfs/xfs_da_btree.c                       |  53 ++++-
 fs/xfs/libxfs/xfs_da_btree.h                       |   2 +
 fs/xfs/xfs_attr_inactive.c                         |  99 +++++----
 include/linux/damon.h                              |   1 +
 include/linux/kernel_read_file.h                   |   1 +
 include/linux/skmsg.h                              |  14 --
 include/net/bluetooth/rfcomm.h                     |   1 +
 include/net/mana/mana.h                            |   4 +-
 io_uring/io_uring.c                                |  12 +-
 io_uring/kbuf.c                                    |   6 +-
 io_uring/memmap.c                                  |  29 ++-
 io_uring/memmap.h                                  |   6 +-
 io_uring/register.c                                |  15 +-
 io_uring/zcrx.c                                    |   4 +-
 kernel/kexec_handover.c                            |   2 +-
 kernel/module/main.c                               |  17 +-
 kernel/sched/ext.c                                 |  29 ++-
 kernel/sched/sched.h                               |   5 +-
 mm/damon/core.c                                    |  24 ++-
 mm/mremap.c                                        |  38 +++-
 mm/vma.c                                           |  21 +-
 mm/vma.h                                           |   7 +-
 net/bluetooth/rfcomm/core.c                        | 134 ++++++++----
 net/ipv4/tcp_bpf.c                                 |  17 +-
 net/ipv6/ip6_gre.c                                 |   7 -
 net/rose/af_rose.c                                 |  44 +++-
 net/rose/rose_timer.c                              |   5 +
 security/integrity/ima/ima.h                       |   6 +-
 security/integrity/ima/ima_appraise.c              |  16 +-
 security/integrity/ima/ima_main.c                  |  30 ++-
 security/integrity/ima/ima_policy.c                |   3 +-
 security/ipe/hooks.c                               |   1 +
 security/selinux/hooks.c                           |   5 +-
 security/selinux/selinuxfs.c                       |  27 +--
 tools/testing/vma/vma.c                            |   4 +-
 77 files changed, 1160 insertions(+), 914 deletions(-)