6.1.191-rc1 review
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest1,887 patches 19 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/1887 | io-wq: order the exit bit against worker creation task workio_uring/ | +2 | 0 replies | |
| 2/1887 | io_uring/io-wq: dont lose the signal that ends workio_uring/ | +7 | 0 replies | |
| 3/1887 | io_uring/io-wq: dont hide a link from cancellationsio_uring/ io_uring/ io_uring/ +2 more | +46 | 0 replies | |
| 4/1887 | io_uring: dont flood a cancelling task with task_workio_uring/ | +11 | 0 replies | |
| 5/1887 | io_uring/io-wq: dont strand work when a worker exitsio_uring/ | +38 | 0 replies | |
| 6/1887 | io_uring/io-wq: dont exit with a creation pendingio_uring/ | +5 | 0 replies | |
| 7/1887 | io_uring/io-wq: let cancel find picked up hashed workio_uring/ | +20 | 0 replies | |
| 8/1887 | io_uring/poll: dont lose a cancel as io-wq arms pollio_uring/ | +11 | 0 replies | |
| 9/1887 | io_uring/cancel: dont forget that the work was runningio_uring/ io_uring/ | +14 | 0 replies | |
| 10/1887 | io_uring/cancel: recognize "no timeout" on 32-bitio_uring/ | +1 | 0 replies | |
| 11/1887 | io_uring/cancel: let CANCEL_ALL find parked requestsio_uring/ | +14 | 0 replies | |
| 12/1887 | io_uring/wait: look at all CQ waiters on wake upio_uring/ | +2 | 0 replies | |
| 13/1887 | io_uring/poll: drop stale double poll entry on rearmio_uring/ | +12 | 0 replies | |
| 14/1887 | io_uring/timeout: dont skip over reached sequencesio_uring/ | +14 | 0 replies | |
| 15/1887 | io_uring/sqpoll: let the thread sleep on disabled ringsio_uring/ | +7 | 0 replies | |
| 16/1887 | io_uring: dont pass restart error codes to userspaceio_uring/ io_uring/ io_uring/ | +25 | 0 replies | |
| 17/1887 | io_uring: look up the file before queueing to io-wqio_uring/ | +28 | 0 replies | |
| 18/1887 | io_uring/poll: avoid retry wakeup loss when dropping ownershipio_uring/ | +2 | 0 replies | |
| 19/1887 | io_uring/timeout: dont put a sequence target behind the last flushio_uring/ | +9 | 0 replies | |
| 20/1887 | io_uring/timeout: dont flush with the sequence behind the last flushio_uring/ | +8 | 0 replies | |
| 21/1887 | io_uring/timeout: dont lose a cancel as io-wq arms a timeoutinclude/ io_uring/ io_uring/ +1 more | +33 | 0 replies | |
| 22/1887 | io_uring/poll: dont loop on HUP with multiple referencesio_uring/ | +13 | 0 replies | |
| 23/1887 | mips: unhide uasm_in_compat_space_p() declarationarch/ | +0 | 0 replies | |
| 24/1887 | apparmor: fix out-of-bounds write when null terminating a label vecsecurity/ | +3 | 0 replies | |
| 25/1887 | nfsd: fix nfsd_file leak on inter-server COPY setup failurefs/ | +5 | 0 replies | |
| 26/1887 | ceph: bound copied dentry name length in NFS export get_namefs/ | +18 | 0 replies | |
| 27/1887 | smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()fs/ | +20 | 0 replies | |
| 28/1887 | HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbinddrivers/ | +3 | 0 replies | |
| 29/1887 | nouveau/gem: reserve the bo in the info ioctl around the vma lookupdrivers/ | +10 | 0 replies | |
| 30/1887 | ocfs2: validate dx_root extent list fields during block readfs/ | +25 | 0 replies | |
| 31/1887 | ocfs2: validate directory-index entry counts when reading metadatafs/ | +41 | 0 replies | |
| 32/1887 | wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stopdrivers/ | +14 | 0 replies | |
| 33/1887 | usb: storage: realtek_cr: fix use-after-free on disconnectdrivers/ | +4 | 0 replies | |
| 34/1887 | staging: rtl8723bs: fix spacing around operatorsdrivers/ | +1 | 0 replies | |
| 35/1887 | staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()drivers/ | +3 | 0 replies | |
| 36/1887 | ftrace: Take trace_array reference before accessing its ftrace_opsinclude/ kernel/ kernel/ +2 more | +46 | 0 replies | |
| 37/1887 | nvme: add missing SRCU grace period in error pathdrivers/ | +3 | 0 replies | |
| 38/1887 | KVM: s390: Zero initialize data structures for inject_pfault_tokenarch/ | +2 | 0 replies | |
| 39/1887 | scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leakdrivers/ | +1 | 0 replies | |
| 40/1887 | scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap lockingdrivers/ | +15 | 0 replies | |
| 41/1887 | scsi: qla2xxx: Fix use-after-free of qpair work on queue teardowndrivers/ | +4 | 0 replies | |
| 42/1887 | scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]drivers/ | +43 | 0 replies | |
| 43/1887 | f2fs: embed f2fs_gc_kthread in f2fs_sb_infofs/ fs/ fs/ +4 more | +46 | 0 replies | |
| 44/1887 | Bluetooth: btqcomsmd: Convert to platform remove callback returning voiddrivers/ | +2 | 0 replies | |
| 45/1887 | Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_devdrivers/ | +5 | 0 replies | |
| 46/1887 | genetlink: pin family module during policy dumpnet/ | +21 | 0 replies | |
| 47/1887 | net: bridge: use option bits for CFM/MRP frame handlersnet/ net/ net/ +2 more | +35 | 0 replies | |
| 48/1887 | landlock: Fix use-after-free of the sources parent directorysecurity/ | +6 | 0 replies | |
| 49/1887 | smb: client: fix heap overflow in DACL owner/group rewritefs/ | +7 | 0 replies | |
| 50/1887 | ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handlingsound/ sound/ | +4 | 0 replies | |
| 51/1887 | ALSA: usb-audio: Clamp implicit feedback packet count to URB capacitysound/ sound/ | +8 | 0 replies | |
| 52/1887 | exec: Cleanup POSIX timers right after de_thread()fs/ | +15 | 0 replies | |
| 53/1887 | wifi: libipw: reject TKIP frames without a full MICnet/ | +8 | 0 replies | |
| 54/1887 | smb: client: fix use-after-free of iface in cifs_try_adding_channels()fs/ | +64 | 0 replies | |
| 55/1887 | smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()fs/ | +16 | 0 replies | |
| 56/1887 | vlan: require the MAC header to be present in __vlan_insert_inner_tag()include/ | +3 | 0 replies | |
| 57/1887 | pinctrl: sunxi: keep a shadow copy of the data register output latchesdrivers/ drivers/ | +71 | 0 replies | |
| 58/1887 | perf tools: Fix a asan issue in parse_events_multi_pmu_add()tools/ | +1 | 0 replies | |
| 59/1887 | perf test bpf: Address error about non-null argument for epoll_pwait 2nd argtools/ | +2 | 0 replies | |
| 60/1887 | usb: xhci: bail out of setup if the controller is inaccessibledrivers/ | +8 | 0 replies | |
| 61/1887 | gtp: serialize PDP context updatesdrivers/ | +15 | 0 replies | |
| 62/1887 | KEYS: trusted: Fix TPM teardown orderingsecurity/ | +1 | 0 replies | |
| 63/1887 | zram: fixup read_block_state()drivers/ | +1 | 0 replies | |
| 64/1887 | zram: fix out-of-bounds access in read_block_state()drivers/ | +3 | 0 replies | |
| 65/1887 | nfsd: release path refs on follow_down() errorfs/ | +3 | 0 replies | |
| 66/1887 | nfsd: size fh_verify server sockaddr slot by xpt_locallenfs/ | +2 | 0 replies | |
| 67/1887 | nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()fs/ | +17 | 0 replies | |
| 68/1887 | nfsd: fix clock domain mismatch in clients_still_reclaiming()fs/ fs/ | +3 | 0 replies | |
| 69/1887 | nfsd: gate nfs2 setacl by argp->maskfs/ | +13 | 0 replies | |
| 70/1887 | coresight: etm3x: Fix cntr_val_show() to match cntr_val_store() behaviordrivers/ | +4 | 0 replies | |
| 71/1887 | kasan: fix lockdep report invalid wait contextmm/ | +8 | 0 replies | |
| 72/1887 | kasan: fix cache shrink race with CPU hotplugmm/ | +6 | 0 replies | |
| 73/1887 | ACPI: TAD: Rearrange RT data validation checkingdrivers/ | +20 | 0 replies | |
| 74/1887 | ACPI: TAD: Split three functions to untangle runtime PM handlingdrivers/ | +84 | 0 replies | |
| 75/1887 | ACPI: TAD: Add locking around AML evaluationsdrivers/ | +30 | 0 replies | |
| 76/1887 | kernel/params.c: Use kstrtobool() instead of strtobool()kernel/ | +2 | 0 replies | |
| 77/1887 | params: Do not go over the limit when getting the string lengthkernel/ | +6 | 0 replies | |
| 78/1887 | params: Use size_add() for kmalloc()kernel/ | +2 | 0 replies | |
| 79/1887 | params: Sort headerskernel/ | +6 | 0 replies | |
| 80/1887 | params: Fix multi-line comment stylekernel/ | +12 | 0 replies | |
| 81/1887 | params: fix charp corruption on allocation failurekernel/ | +8 | 0 replies | |
| 82/1887 | dmaengine: Add devm_dma_request_chan()drivers/ include/ | +37 | 0 replies | |
| 83/1887 | i2c: mxs: fix DMA channel leak on probe errordrivers/ | +1 | 0 replies | |
| 84/1887 | lockd: fix swapped arguments in nlmsvc_match_ip()fs/ include/ | +2 | 0 replies | |
| 85/1887 | power: supply: rt9455: Convert to i2cs .probe_new()drivers/ | +2 | 0 replies | |
| 86/1887 | power: supply: rt9455: quiesce delayed work before teardowndrivers/ | +17 | 0 replies | |
| 87/1887 | i2c: core: Introduce i2c_client_get_device_id helper functiondrivers/ include/ | +15 | 0 replies | |
| 88/1887 | power: supply: max17040: Convert to i2cs .probe_new()drivers/ | +3 | 0 replies | |
| 89/1887 | power: supply: max17040: drop incorrect I2C functionality checkdrivers/ | +0 | 0 replies | |
| 90/1887 | mmc: via-sdmmc: cancel card-detect work on removedrivers/ | +4 | 0 replies | |
| 91/1887 | hwrng: stm32 - Fix runtime PM cleanup on registration failuredrivers/ | +3 | 0 replies | |
| 92/1887 | i3c: master: Do not treat master device as a duplicate targetdrivers/ | +2 | 0 replies | |
| 93/1887 | i3c: master: Fix use-after-free of master->thisdrivers/ | +11 | 0 replies | |
| 94/1887 | usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()drivers/ | +3 | 0 replies | |
| 95/1887 | spi: bcm63xx: switch to use modern namedrivers/ | +34 | 0 replies | |
| 96/1887 | spi: bcm63xx: disable clock on resume failuredrivers/ | +5 | 0 replies | |
| 97/1887 | staging: sm750fb: fix mono image source stride mismatch in lynxfb_ops_imageblit()drivers/ drivers/ drivers/ +1 more | +5 | 0 replies | |
| 98/1887 | ftrace: Synchronize the initialization of ftrace_opskernel/ | +11 | 0 replies | |
| 99/1887 | rtc: rzn1: Handle unset alarm weekday in rzn1_rtc_read_alarmdrivers/ | +12 | 0 replies | |
| 100/1887 | arm64: allow pte_offset_map() to failarch/ | +3 | 0 replies | |
| 101/1887 | arm64: mm: Fix the lockless page-table walk in show_pte()arch/ | +8 | 0 replies | |
| 102/1887 | nvme-fabrics: fix DHCHAP secret leak on parse failuredrivers/ | +2 | 0 replies | |
| 103/1887 | s390/vfio-ap: Fix NULL deref in status_show() during queue probedrivers/ | +29 | 0 replies | |
| 104/1887 | iio: pressure: dps310: fix NULL pointer dereference on ACPI probedrivers/ | +1 | 0 replies | |
| 105/1887 | mm/mremap: reset unfaulted VMA page offset for MREMAP_DONTUNMAPmm/ | +11 | 0 replies | |
| 106/1887 | media: platform: mtk-mdp3: fix NULL deref on failed SCP lookupdrivers/ | +5 | 0 replies | |
| 107/1887 | media: rkvdec: Propagate platform_get_irq() errorsdrivers/ | +2 | 0 replies | |
| 108/1887 | scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error pathdrivers/ | +13 | 0 replies | |
| 109/1887 | scsi: qla2xxx: Fix 64G link speed reporting in get_data_ratedrivers/ | +1 | 0 replies | |
| 110/1887 | scsi: qla2xxx: Quiesce response IRQ before freeing request queuedrivers/ | +17 | 0 replies | |
| 111/1887 | scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slotdrivers/ | +3 | 0 replies | |
| 112/1887 | scsi: qla2xxx: Fix soft lockup polling continuation IOCB signaturedrivers/ | +16 | 0 replies | |
| 113/1887 | f2fs: limit recovery filename logging to stored lengthfs/ | +22 | 0 replies | |
| 114/1887 | f2fs: fix dentry folio leak in find_in_levelfs/ | +1 | 0 replies | |
| 115/1887 | drm/sysfb: simpledrm: Improve stride validationdrivers/ | +8 | 0 replies | |
| 116/1887 | ipmr: account multicast table and route memorynet/ net/ net/ | +4 | 0 replies | |
| 117/1887 | virtio-mmio: Remove virtqueue list from mmio devicedrivers/ include/ | +4 | 0 replies | |
| 118/1887 | virtio_mmio: disable IRQ wake before free_irqdrivers/ | +13 | 0 replies | |
| 119/1887 | net/sched: act_api: release all action references on NEWACTION failurenet/ | +2 | 0 replies | |
| 120/1887 | net: mana: Reserve extra CQ slot for the fence completion CQEdrivers/ | +5 | 0 replies | |
| 121/1887 | erofs: preserve LZMA decoders on resize failurefs/ | +14 | 0 replies | |
| 122/1887 | mptcp: userspace pm: use a single point of exitnet/ | +3 | 0 replies | |
| 123/1887 | mptcp: pm: drop match in userspace_pm_append_new_local_addrnet/ | +3 | 0 replies | |
| 124/1887 | sock: add sock_kmemdup helperinclude/ net/ | +18 | 0 replies | |
| 125/1887 | mptcp: use sock_kmemdup for address entrynet/ | +1 | 0 replies | |
| 126/1887 | mptcp: pm: userspace: fix address ID overflownet/ | +14 | 0 replies | |
| 127/1887 | mptcp: pm: reset retrans_time when ADD_ADDR entry is reusednet/ | +1 | 0 replies | |
| 128/1887 | smb: client: fix file type corruption in cifs_reparse_point_to_fattr()fs/ | +1 | 0 replies | |
| 129/1887 | smb: client: fix cifsFileInfo reference leak in deferred closefs/ | +12 | 0 replies | |
| 130/1887 | btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()fs/ | +1 | 0 replies | |
| 131/1887 | mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio()mm/ | +1 | 0 replies | |
| 132/1887 | watchdog: rtd119x: Use devm_clk_get_enabled() helperdrivers/ | +1 | 0 replies | |
| 133/1887 | watchdog: rtd119x: Avoid division by zerodrivers/ | +6 | 0 replies | |
| 134/1887 | hwmon: (pwm-fan) Stop RPM timer before freeing tach datadrivers/ | +12 | 0 replies | |
| 135/1887 | wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardowndrivers/ | +1 | 0 replies | |
| 136/1887 | smb/client: send lease break ACKs thru correct session for multiuser mountsfs/ | +2 | 0 replies | |
| 137/1887 | bna: prevent IOC timer rearm during teardowndrivers/ | +10 | 0 replies | |
| 138/1887 | tcp: prevent collapsing skbs across boundary in rtx queueinclude/ net/ | +3 | 0 replies | |
| 139/1887 | perf/x86/intel: Remove anythread_deprecated bit from perf_capabilitiesarch/ arch/ | +4 | 0 replies | |
| 140/1887 | tracing/user_events: Dont destroy fields when event removal failskernel/ | +20 | 0 replies | |
| 141/1887 | mm/kmemleak: simplify kmemleak_cond_resched() usagemm/ | +12 | 0 replies | |
| 142/1887 | mm/kmemleak: fix UAF bug in kmemleak_scan()mm/ | +29 | 0 replies | |
| 143/1887 | mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publishmm/ mm/ | +13 | 0 replies | |
| 144/1887 | mm/hugetlb: preserve mremap address delta when skipping page tablesmm/ | +7 | 0 replies | |
| 145/1887 | openvswitch: prepare for stolen verdict coming from conntrack and nat enginenet/ | +34 | 0 replies | |
| 146/1887 | net: openvswitch: conntrack: fix helper UAF due to extensions reallocnet/ | +15 | 0 replies | |
| 147/1887 | smb3: make query_on_disk_id open context consistent and move to common codefs/ fs/ fs/ +1 more | +12 | 0 replies | |
| 148/1887 | smb: client: fix create context out-of-bounds readsfs/ fs/ | +54 | 0 replies | |
| 149/1887 | PCI: Fix Resizable BAR restore orderdrivers/ drivers/ | +33 | 0 replies | |
| 150/1887 | PCI: Fix BAR resize for devices on a root busdrivers/ | +17 | 0 replies | |
| 151/1887 | net: ipconfig: Remove outdated comment and indent code blocknet/ | +42 | 0 replies | |
| 152/1887 | net: ipconfig: bound DHCP option constructionnet/ | +26 | 0 replies | |
| 153/1887 | net: ena: Remove autopolling modedrivers/ drivers/ | +5 | 0 replies | |
| 154/1887 | net: ena: fix MMIO read buffer leak on probe failuredrivers/ | +1 | 0 replies | |
| 155/1887 | netfilter: nf_tables: set->ops->insert returns opaque set element in case of EEXISTinclude/ net/ net/ +3 more | +26 | 0 replies | |
| 156/1887 | netfilter: nf_tables: skip expired catchall elements on insert and deletenet/ | +8 | 0 replies | |
| 157/1887 | perf/x86/intel: Update event constraints and cache_extra_regsfor ADLarch/ arch/ arch/ | +29 | 0 replies | |
| 158/1887 | perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classificationarch/ | +13 | 0 replies | |
| 159/1887 | smb: client: use finish_no_open() for non-regular inodesfs/ | +29 | 0 replies | |
| 160/1887 | Bluetooth: mgmt: fix race in read_unconf_index_list()net/ | +3 | 0 replies | |
| 161/1887 | Bluetooth: btusb: Add IMC Networks QCA9377 to quirks tabledrivers/ | +2 | 0 replies | |
| 162/1887 | HID: core: remove #ifdef CONFIG_PM from hid_driverinclude/ | +2 | 0 replies | |
| 163/1887 | HID: hid-alps: use default remove for hid devicedrivers/ | +0 | 0 replies | |
| 164/1887 | HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PMdrivers/ | +2 | 0 replies | |
| 165/1887 | HID: alps: unregister DualPoint Stick input device on removedrivers/ | +19 | 0 replies | |
| 166/1887 | smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink()fs/ | +3 | 0 replies | |
| 167/1887 | smb/client: pass cifs_open_info_data to SMB2_open()fs/ fs/ fs/ +1 more | +28 | 0 replies | |
| 168/1887 | smb: client: close handle after create-context parsing failurefs/ | +3 | 0 replies | |
| 169/1887 | smb: client: close completed creates on compound wait errorsfs/ fs/ | +59 | 0 replies | |
| 170/1887 | xfs: fix cursor and pointer handling when recovering iunlink bucketsfs/ | +8 | 0 replies | |
| 171/1887 | ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devicessound/ | +2 | 0 replies | |
| 172/1887 | audit: fix exe mark UAF in kill_rules()kernel/ | +20 | 0 replies | |
| 173/1887 | kprobes: Skip disarmed probes when checking optkprobe overlapkernel/ | +5 | 0 replies | |
| 174/1887 | of/irq: Fix remaining refcount leaks in of_irq_init()drivers/ | +2 | 0 replies | |
| 175/1887 | of/overlay: put property on deadprops only after changeset add succeedsdrivers/ | +4 | 0 replies | |
| 176/1887 | of/overlay: only treat a positive changeset id as registereddrivers/ | +2 | 0 replies | |
| 177/1887 | netfilter: nft_flow_offload: drop flowtable reference on init error pathnet/ | +6 | 0 replies | |
| 178/1887 | net/packet: prevent TX_RING byte count overflownet/ | +3 | 0 replies | |
| 179/1887 | rtc: spear: initialize IRQ state before requesting alarm IRQdrivers/ | +6 | 0 replies | |
| 180/1887 | sctp: check RCV_SHUTDOWN after the sendmsg connect waitnet/ | +1 | 0 replies | |
| 181/1887 | bpf: Fail bpf_timer_cancel when callback is being cancelledkernel/ | +34 | 0 replies | |
| 182/1887 | bpf: Defer work in bpf_timer_cancel_and_freekernel/ | +46 | 0 replies | |
| 183/1887 | ocfs2: Avoid touching renamed directory if parent does not changefs/ | +5 | 0 replies | |
| 184/1887 | net/mlx5e: Fix netif state handlingdrivers/ | +9 | 0 replies | |
| 185/1887 | net: ena: Add validation for completion descriptors consistencydrivers/ drivers/ drivers/ | +30 | 0 replies | |
| 186/1887 | x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 clientarch/ | +11 | 0 replies | |
| 187/1887 | wifi: cfg80211: avoid double free if updating BSS failsnet/ | +3 | 0 replies | |
| 188/1887 | drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrsdrivers/ drivers/ | +2 | 0 replies | |
| 189/1887 | rds_tcp: close NULL deref window in rds_tcp_set_callbacksnet/ | +6 | 0 replies | |
| 190/1887 | vxlan: use one headroom snapshot for neighbour repliesdrivers/ | +4 | 0 replies | |
| 191/1887 | drm/amd/display: Validate function returnsdrivers/ drivers/ drivers/ | +5 | 0 replies | |
| 192/1887 | drm/i915/hdcp: Add encoder check in intel_hdcp_get_capabilitydrivers/ | +6 | 0 replies | |
| 193/1887 | drm/i915/hdcp: Add encoder check in hdcp2_get_capabilitydrivers/ | +6 | 0 replies | |
| 194/1887 | drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()drivers/ | +1 | 0 replies | |
| 195/1887 | kvm: s390: Reject memory region operations for ucontrol VMsDocumentation/ arch/ | +9 | 0 replies | |
| 196/1887 | media: av7110: fix a spectre vulnerabilitydrivers/ drivers/ | +21 | 0 replies | |
| 197/1887 | ethtool: fail closed if we cant get max channel used in indirection tablesnet/ net/ | +13 | 0 replies | |
| 198/1887 | nvme-fabrics: use reserved tag for reg read/write commanddrivers/ | +3 | 0 replies | |
| 199/1887 | of/irq: add missing of_node_put() for interrupt parent nodedrivers/ | +9 | 0 replies | |
| 200/1887 | vt: skip screen update for DEC alignment test on backgroup consolesdrivers/ | +2 | 0 replies | |
| 201/1887 | ALSA: caiaq: unregister the input device when probe failssound/ | +3 | 0 replies | |
| 202/1887 | ALSA: line6: reject oversized playback packetssound/ | +7 | 0 replies | |
| 203/1887 | mm/secretmem: properly account locked pagesinclude/ mm/ tools/ | +112 | 0 replies | |
| 204/1887 | perf/core: Fix WARN in perf_sigtrap()kernel/ | +7 | 0 replies | |
| 205/1887 | watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_triggerdrivers/ | +1 | 0 replies | |
| 206/1887 | wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor modedrivers/ | +8 | 0 replies | |
| 207/1887 | hsr: Remove WARN_ONCE() in hsr_addr_is_self().net/ | +1 | 0 replies | |
| 208/1887 | perf/x86/amd/lbr: Fix kernel address leakagearch/ | +2 | 0 replies | |
| 209/1887 | drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registereddrivers/ drivers/ | +8 | 0 replies | |
| 210/1887 | scsi: qla2xxx: Initialize NVMe abort_work once at submissiondrivers/ | +2 | 0 replies | |
| 211/1887 | scsi: qla2xxx: Fix NVMe abort reference leak on repeated abortdrivers/ | +4 | 0 replies | |
| 212/1887 | mm/damon/core: dont skip damos_adjust_quota() while esz is not zeromm/ | +1 | 0 replies | |
| 213/1887 | mtd: use refcount to prevent corruptiondrivers/ drivers/ drivers/ +1 more | +49 | 0 replies | |
| 214/1887 | mtd: call external _get and _put in right orderdrivers/ | +14 | 0 replies | |
| 215/1887 | mtd: core: call _get_device() with the master MTDdrivers/ | +1 | 0 replies | |
| 216/1887 | nvmet: preserve device path on allocation failuredrivers/ | +6 | 0 replies | |
| 217/1887 | of/overlay: dont leak fragment references when changeset init failsdrivers/ | +4 | 0 replies | |
| 218/1887 | of/overlay: dont create "//" paths for fragments targeting the rootdrivers/ | +3 | 0 replies | |
| 219/1887 | ASoC: wm8903: Move the DRC QR threshold to the register that holds itsound/ | +1 | 0 replies | |
| 220/1887 | wifi: wfx: validate MIB read length before copying to callerdrivers/ | +3 | 0 replies | |
| 221/1887 | ASoC: tegra: Fix ASRC Stream6 input threshold controlsound/ | +1 | 0 replies | |
| 222/1887 | wifi: ath11k: reset ar->num_stations on hardware startdrivers/ | +1 | 0 replies | |
| 223/1887 | rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leakdrivers/ | +1 | 0 replies | |
| 224/1887 | rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()drivers/ | +5 | 0 replies | |
| 225/1887 | wifi: cfg80211: preserve hidden-group beacon IE ownershipnet/ | +12 | 0 replies | |
| 226/1887 | ASoC: codecs: rt286: Revert delay value for jack setupsound/ | +1 | 0 replies | |
| 227/1887 | ASoC: codecs: rt274: Fix format setting for 44100 ratesound/ | +3 | 0 replies | |
| 228/1887 | Bluetooth: hci_core: free the HCI ID if naming failsnet/ | +3 | 0 replies | |
| 229/1887 | Bluetooth: btintel: validate DDC record lengthsdrivers/ | +10 | 0 replies | |
| 230/1887 | net/mctp: publish the mctp_dev only after it is initialisednet/ | +3 | 0 replies | |
| 231/1887 | net/sched: cls_api: reclaim an empty proto on the error pathnet/ | +14 | 0 replies | |
| 232/1887 | netfilter: ipset: do not update comments from kernel-side addsnet/ | +1 | 0 replies | |
| 233/1887 | Bluetooth: hci_sync: dont drain cmd_sync backlog on unregisternet/ | +6 | 0 replies | |
| 234/1887 | net: systemport: Fix RUNT MIB counter register offset calculationdrivers/ | +3 | 0 replies | |
| 235/1887 | octeontx2-af: mcs: Fix SC resource cleanup loopdrivers/ | +2 | 0 replies | |
| 236/1887 | tipc: prevent GCM nonce reuse on peer key changesnet/ | +5 | 0 replies | |
| 237/1887 | net/sched: fq_codel: match the no-drop threshold to the packet sizenet/ | +2 | 0 replies | |
| 238/1887 | net/sched: sch_codel: match the no-drop threshold to the packet sizenet/ | +1 | 0 replies | |
| 239/1887 | net: bcmgenet: fix NULL dereference in set_coalesce before first opendrivers/ | +4 | 0 replies | |
| 240/1887 | tcp: refresh TS.Recent for accepted old ACKsnet/ | +6 | 0 replies | |
| 241/1887 | ipvs: fix missing counter decrement in lblcnet/ | +1 | 0 replies | |
| 242/1887 | ipvs: do not create invisible templatesnet/ | +3 | 0 replies | |
| 243/1887 | ipvs: filter some flags received in the backup servernet/ | +30 | 0 replies | |
| 244/1887 | netfilter: bpf: reject invalid NAT manipulation typesnet/ net/ | +6 | 0 replies | |
| 245/1887 | net: sparx5: make ports inherit the switch base mac address typedrivers/ drivers/ drivers/ | +3 | 0 replies | |
| 246/1887 | net: add and use skb_get_hash_netinclude/ net/ net/ | +22 | 0 replies | |
| 247/1887 | ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()net/ | +1 | 0 replies | |
| 248/1887 | i2c: at91: release DMA channels when probe defersdrivers/ | +7 | 0 replies | |
| 249/1887 | perf: Fix race between perf_event_exit_task() and perf_pending_task()kernel/ | +4 | 0 replies | |
| 250/1887 | PCI: Accept AtomicOps already enabled by the hypervisordrivers/ | +14 | 0 replies | |
| 251/1887 | drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DCdrivers/ | +2 | 0 replies | |
| 252/1887 | drm/amd/pm/si: Fix updating clock limits on AC/DCdrivers/ | +18 | 0 replies | |
| 253/1887 | drm/amdgpu/gfx6: fix firmware leak on teardowndrivers/ | +9 | 0 replies | |
| 254/1887 | drm/radeon: Read the VRAM VBIOS signature with readb()drivers/ | +5 | 0 replies | |
| 255/1887 | drm/amdgpu: fix IP instance memory leak on kobject add failuredrivers/ | +2 | 0 replies | |
| 256/1887 | drm/amdgpu: fix ACP MFD device leak on init failuredrivers/ | +9 | 0 replies | |
| 257/1887 | binder: fix is_failure flag for superseded transaction cleanupdrivers/ | +1 | 0 replies | |
| 258/1887 | binder: fix leaked fd fixups on TF_UPDATE_TXN supersededrivers/ | +1 | 0 replies | |
| 259/1887 | kgdboc: Fix tty driver reference leak in configure_kgdboc()drivers/ | +9 | 0 replies | |
| 260/1887 | Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11drivers/ | +8 | 0 replies | |
| 261/1887 | Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410drivers/ | +9 | 0 replies | |
| 262/1887 | Input: s6sy761 - fix resume ordering and restore sensingdrivers/ | +13 | 0 replies | |
| 263/1887 | Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490drivers/ | +1 | 0 replies | |
| 264/1887 | Input: synaptics - limit T440p InterTouch quirk to LEN0036drivers/ | +4 | 0 replies | |
| 265/1887 | nitro_enclaves: fix use-after-free on SLOT_ALLOC failuredrivers/ | +1 | 0 replies | |
| 266/1887 | USB: cdc-acm: fix racy TIOCMIWAIT implementationdrivers/ drivers/ | +19 | 0 replies | |
| 267/1887 | USB: cdc-acm: skip URB restart in port_shutdown if disconnecteddrivers/ | +3 | 0 replies | |
| 268/1887 | USB: serial: fix port tear down use-after-freedrivers/ | +7 | 0 replies | |
| 269/1887 | usb: storage: sierra_ms: reject short SWoC info transfersdrivers/ | +7 | 0 replies | |
| 270/1887 | usb: hub: use shorter 120ms post resume hold for SS root hubsdrivers/ | +6 | 0 replies | |
| 271/1887 | usb: octeon-hcd: fix the FIFO-flush timeout computationdrivers/ | +1 | 0 replies | |
| 272/1887 | usb: ohci-da8xx: disable controller wakeup on cleanupdrivers/ | +2 | 0 replies | |
| 273/1887 | usb: ohci-s3c2410: disable controller wakeup on removaldrivers/ | +1 | 0 replies | |
| 274/1887 | usb: ohci-st: disable controller wakeup on removaldrivers/ | +1 | 0 replies | |
| 275/1887 | usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmddrivers/ | +6 | 0 replies | |
| 276/1887 | usb: typec: anx7411 - stop the IRQ before destroying the workqueuedrivers/ | +4 | 0 replies | |
| 277/1887 | usb: dwc3: am62: Fix runtime PM usage count leak on probe error pathdrivers/ | +1 | 0 replies | |
| 278/1887 | usb: gadget: aspeed-vhub: cancel wake work on device removaldrivers/ drivers/ drivers/ +1 more | +9 | 0 replies | |
| 279/1887 | USB: gadget: dummy-hcd: Fix wait for outstanding request completionsdrivers/ | +4 | 0 replies | |
| 280/1887 | usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESCdrivers/ | +13 | 0 replies | |
| 281/1887 | usb: chipidea: tegra: disable runtime PM on resume failuredrivers/ | +3 | 0 replies | |
| 282/1887 | usb: core: clear both ep_in and ep_out for non-ep0 control endpointsdrivers/ | +7 | 0 replies | |
| 283/1887 | usb: typec: tcpm: recover after failure to start the frs amsdrivers/ | +1 | 0 replies | |
| 284/1887 | usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()drivers/ | +1 | 0 replies | |
| 285/1887 | usb: typec: ucsi: Get the connector fwnode based on reg valuedrivers/ | +14 | 0 replies | |
| 286/1887 | usb: typec: ucsi: displayport: Current CAM OOB index fixupdrivers/ | +6 | 0 replies | |
| 287/1887 | usb: cdns3: fix use-after-free in cdns3_gadget_exit()drivers/ | +4 | 0 replies | |
| 288/1887 | usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probedrivers/ | +5 | 0 replies | |
| 289/1887 | tty: vt: fix memory leak in vc_allocate()drivers/ | +2 | 0 replies | |
| 290/1887 | tty: amiserial: fix broken TIOCMIWAITdrivers/ | +4 | 0 replies | |
| 291/1887 | tty: vcc: zero-initialize control packet in vcc_send_ctl()drivers/ | +1 | 0 replies | |
| 292/1887 | tty: vcc: hold port lock when clearing tty pointer in vcc_cleanupdrivers/ | +2 | 0 replies | |
| 293/1887 | tty: serial: qcom_geni_serial: Keep console RX functional after deep idledrivers/ | +2 | 0 replies | |
| 294/1887 | tty: abort break signalling on hangupdrivers/ include/ | +28 | 0 replies | |
| 295/1887 | serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()drivers/ | +1 | 0 replies | |
| 296/1887 | serial: tegra: dont clear the Tx FIFO on an Rx-only resetdrivers/ | +16 | 0 replies | |
| 297/1887 | serial: vt8500: Fix clock reference leak in vt8500_serial_probe()drivers/ | +1 | 0 replies | |
| 298/1887 | ASoC: qcom: lpass-cpu: use DAI table index for playback constraintssound/ | +2 | 0 replies | |
| 299/1887 | ALSA: seq: Serialize compat port-info ioctlssound/ | +3 | 0 replies | |
| 300/1887 | ALSA: ua101: reject mismatched capture/playback packet sizessound/ | +9 | 0 replies | |
| 301/1887 | Bluetooth: RFCOMM: Fix initial port reference racenet/ | +3 | 0 replies | |
| 302/1887 | Bluetooth: hci_conn: Lock parent access during enhanced SCO setupnet/ | +13 | 0 replies | |
| 303/1887 | Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systemsinclude/ net/ | +3 | 0 replies | |
| 304/1887 | Bluetooth: hci_core: Serialize ACL scheduling with channel deletionnet/ | +8 | 0 replies | |
| 305/1887 | Bluetooth: hci_core: Serialize fragmented ISO packet queueingnet/ | +4 | 0 replies | |
| 306/1887 | Bluetooth: btintel: fix buffer over-read in btintel_hw_error()drivers/ | +2 | 0 replies | |
| 307/1887 | ipvs: bound LBLCR and LBLC cache growthnet/ net/ | +6 | 0 replies | |
| 308/1887 | nvme-multipath: fix underflow in ANA log bounds checksdrivers/ | +3 | 0 replies | |
| 309/1887 | nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()drivers/ | +1 | 0 replies | |
| 310/1887 | mtd: rawnand: cadence: Initialize IRQ state before requesting IRQdrivers/ | +3 | 0 replies | |
| 311/1887 | mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOBdrivers/ | +60 | 0 replies | |
| 312/1887 | mtd: spinand: fix zero oobavail when no ECC engine is useddrivers/ | +9 | 0 replies | |
| 313/1887 | wifi: cw1200: fix TX padding OOB read leaking heap data to devicedrivers/ drivers/ | +21 | 0 replies | |
| 314/1887 | wifi: iwlegacy: 3945: free EEPROM data on removedrivers/ | +1 | 0 replies | |
| 315/1887 | wifi: mac80211: drain PS delivery work during station teardownnet/ | +4 | 0 replies | |
| 316/1887 | wifi: mac80211: minstrel_ht: validate fixed rate indexnet/ | +28 | 0 replies | |
| 317/1887 | wifi: mac80211: release mesh path quota on failed additionsnet/ | +4 | 0 replies | |
| 318/1887 | wifi: mac80211: handle empty FILS association request payloadnet/ | +8 | 0 replies | |
| 319/1887 | USB: serial: cp210x: add Corsair AX1500i Power Supplydrivers/ | +1 | 0 replies | |
| 320/1887 | USB: serial: quatech2: fix baud rate overflowdrivers/ | +16 | 0 replies | |
| 321/1887 | USB: serial: ssu100: fix baud rate overflowdrivers/ | +16 | 0 replies | |
| 322/1887 | USB: serial: fix dynamic id driver deregistration racedrivers/ | +1 | 0 replies | |
| 323/1887 | USB: serial: fix driver deregistration orderdrivers/ drivers/ include/ | +23 | 0 replies | |
| 324/1887 | USB: serial: option: add support for SIMCom SIM8260Cdrivers/ | +2 | 0 replies | |
| 325/1887 | USB: serial: option: add Quectel EG060Wdrivers/ | +2 | 0 replies | |
| 326/1887 | USB: serial: option: add Compal EXM-G1x supportdrivers/ | +3 | 0 replies | |
| 327/1887 | USB: serial: option: add Quectel RG660QBdrivers/ | +3 | 0 replies | |
| 328/1887 | USB: serial: option: add Compal EXC-T1 supportdrivers/ | +4 | 0 replies | |
| 329/1887 | thunderbolt: Fix KASAN reported use-after-free when request is canceleddrivers/ | +31 | 0 replies | |
| 330/1887 | thunderbolt: Disable CL states for the Anker Prime TB5 dockdrivers/ | +3 | 0 replies | |
| 331/1887 | thunderbolt: Reject oversized XDomain properties responsesdrivers/ | +4 | 0 replies | |
| 332/1887 | iio: accel: kxcjk-1013: reject duplicate event disabledrivers/ | +1 | 0 replies | |
| 333/1887 | iio: accel: sca3000: fix frequency divider condition checkdrivers/ | +1 | 0 replies | |
| 334/1887 | iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failuredrivers/ | +4 | 0 replies | |
| 335/1887 | iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() callsdrivers/ | +0 | 0 replies | |
| 336/1887 | iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbinddrivers/ | +5 | 0 replies | |
| 337/1887 | iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.drivers/ | +2 | 0 replies | |
| 338/1887 | iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw()drivers/ | +1 | 0 replies | |
| 339/1887 | iio: gyro: adis16136: fix unprotected debugfs readsdrivers/ | +1 | 0 replies | |
| 340/1887 | iio: imu: adis16400: fix unprotected debugfs readsdrivers/ | +1 | 0 replies | |
| 341/1887 | iio: imu: adis16480: fix unprotected debugfs readsdrivers/ | +2 | 0 replies | |
| 342/1887 | iio: light: gp2ap020a00f: drain irq_work after free_irqdrivers/ | +2 | 0 replies | |
| 343/1887 | iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookupdrivers/ | +1 | 0 replies | |
| 344/1887 | iio: proximity: isl29501: Fix return type of isl29501_register_writedrivers/ | +1 | 0 replies | |
| 345/1887 | iio: proximity: pulsedlight: fix iio_device left registered on PM setup failuredrivers/ | +3 | 0 replies | |
| 346/1887 | iio: proximity: sx9324: Correct proximity channel resolutiondrivers/ | +1 | 0 replies | |
| 347/1887 | iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handlerdrivers/ | +17 | 0 replies | |
| 348/1887 | iio: trigger: cancel reenable_work before freeing triggerdrivers/ | +2 | 0 replies | |
| 349/1887 | jfs: fix array-index-out-of-bounds read in add_missing_indicesfs/ | +15 | 0 replies | |
| 350/1887 | drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB readdrivers/ drivers/ | +16 | 0 replies | |
| 351/1887 | SUNRPC: fix gssx_dec_option_array error path bugsnet/ | +6 | 0 replies | |
| 352/1887 | SUNRPC: reject duplicate CREDS_VALUE optionsnet/ | +6 | 0 replies | |
| 353/1887 | vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAFdrivers/ | +13 | 0 replies | |
| 354/1887 | mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pagesdrivers/ | +11 | 0 replies | |
| 355/1887 | tcp: introduce icsk->icsk_keepalive_timerinclude/ include/ net/ +9 more | +49 | 0 replies | |
| 356/1887 | mptcp: prevent race between disconnect() and rtxnet/ | +8 | 0 replies | |
| 357/1887 | smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW racesfs/ | +4 | 0 replies | |
| 358/1887 | wifi: wlcore: Convert to platform remove callback returning voiddrivers/ drivers/ drivers/ +1 more | +7 | 0 replies | |
| 359/1887 | wifi: wlcore: Fix runtime PM leak in wlcore_remove()drivers/ | +3 | 0 replies | |
| 360/1887 | net: usb: qmi_wwan: add Quectel EG120K-EAdrivers/ | +1 | 0 replies | |
| 361/1887 | serial: imx: Convert to platform remove callback returning voiddrivers/ | +2 | 0 replies | |
| 362/1887 | serial: imx: serialize imx_uart_ports[] lifetimedrivers/ | +17 | 0 replies | |
| 363/1887 | usb: gadget: at91_udc: Convert to platform remove callback returning voiddrivers/ | +7 | 0 replies | |
| 364/1887 | usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freeddrivers/ | +19 | 0 replies | |
| 365/1887 | USB: gadget: ffs: fix mm lifetime handlingdrivers/ | +20 | 0 replies | |
| 366/1887 | usb: gadget: f_fs: Fix Use-After-Free in AIO error pathdrivers/ | +4 | 0 replies | |
| 367/1887 | usb: typec: tcpm: fix debug accessory mode detection for sink portsdrivers/ | +7 | 0 replies | |
| 368/1887 | usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handlingdrivers/ | +22 | 0 replies | |
| 369/1887 | xen/netfront: drop RX packets with a short Ethernet headerdrivers/ | +10 | 0 replies | |
| 370/1887 | smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensionsfs/ | +23 | 0 replies | |
| 371/1887 | bpf: Fix accesses to uninit stack slotskernel/ tools/ tools/ +4 more | +89 | 0 replies | |
| 372/1887 | soc: qcom: geni-se: Correct QUP Core ICC vote constantsinclude/ | +5 | 0 replies | |
| 373/1887 | usb: dwc3: gadget: fix IRQ storm on invalid event buffer countdrivers/ drivers/ drivers/ | +130 | 0 replies | |
| 374/1887 | tty: fix saved termios reset racedrivers/ drivers/ drivers/ +2 more | +21 | 0 replies | |
| 375/1887 | perf: Require kernel access for text poke eventskernel/ | +1 | 0 replies | |
| 376/1887 | arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systemsarch/ | +20 | 0 replies | |
| 377/1887 | arm64: errata: Factor out broken AMU const counter caparch/ arch/ arch/ +2 more | +25 | 0 replies | |
| 378/1887 | arm64: errata: Add Cortex-A725 erratum 3821522 workaroundDocumentation/ arch/ arch/ +1 more | +33 | 0 replies | |
| 379/1887 | iio: buffer: serialize buffer teardown with mode claimsdrivers/ | +2 | 0 replies | |
| 380/1887 | KVM: arm64: Dont use the VMA to size stage-2 block mappings for VM_PFNMAParch/ | +2 | 0 replies | |
| 381/1887 | fsverity: add dependency on 64K or smaller pagesfs/ | +3 | 0 replies | |
| 382/1887 | drm/amd/display: check dc_state_create_copy() for NULL in dm_suspenddrivers/ | +7 | 0 replies | |
| 383/1887 | drm/amdgpu: reset VI ASIC on MacBookPro15,1drivers/ | +20 | 0 replies | |
| 384/1887 | drm/amdgpu: reset VI ASIC on MacBookPro14,3drivers/ | +1 | 0 replies | |
| 385/1887 | usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare()drivers/ | +1 | 0 replies | |
| 386/1887 | usb: ohci-spear: disable controller wakeup on removaldrivers/ | +1 | 0 replies | |
| 387/1887 | USB: dwc2: shut down wakeup timer before freeing HCD statedrivers/ | +1 | 0 replies | |
| 388/1887 | usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41drivers/ | +32 | 0 replies | |
| 389/1887 | tty: tty_port: restore TTY_IO_ERROR on activation failuredrivers/ | +1 | 0 replies | |
| 390/1887 | tty: serial: max3100: shut down timer before freeing portdrivers/ | +11 | 0 replies | |
| 391/1887 | serial: fix TIOCMIWAIT racedrivers/ | +2 | 0 replies | |
| 392/1887 | drm/amd/display: Mark DCE 6.4 as not APUdrivers/ | +0 | 0 replies | |
| 393/1887 | mtd: spinand: fix NULL pointer dereference with no ECC enginedrivers/ | +2 | 0 replies | |
| 394/1887 | wifi: mac80211: shut down RX BA session timer on teardownnet/ | +1 | 0 replies | |
| 395/1887 | wifi: mac80211: keep fallback association elements alivenet/ | +2 | 0 replies | |
| 396/1887 | USB: serial: return errors from break handlingdrivers/ drivers/ drivers/ +22 more | +140 | 0 replies | |
| 397/1887 | USB: serial: report unsupported break signallingdrivers/ | +1 | 0 replies | |
| 398/1887 | USB: serial: fix ioctl hangup racedrivers/ drivers/ | +83 | 0 replies | |
| 399/1887 | mtd: block2mtd: Fix divide error when erase_size is zerodrivers/ | +1 | 0 replies | |
| 400/1887 | mtd: spinand: Enable QE on all diesdrivers/ | +19 | 0 replies | |
| 401/1887 | wifi: mac80211: account proxy paths against the mesh path limitnet/ | +9 | 0 replies | |
| 402/1887 | bnxt_en: fix DMA mapping length for padded small packetsdrivers/ | +10 | 0 replies | |
| 403/1887 | tty: port: fix tty_port_tty_vhangup() racedrivers/ include/ | +53 | 0 replies | |
| 404/1887 | wifi: mac80211: keep paired old chanctx alivenet/ | +12 | 0 replies | |
| 405/1887 | wifi: mac80211: count only matching reservations in reserved switchnet/ | +17 | 0 replies | |
| 406/1887 | fs: Free any excess xarray nodes in clear_inode()fs/ | +10 | 0 replies | |
| 407/1887 | mm/hugetlb: fix avoid_reserve to allow taking folio from subpoolmm/ | +3 | 0 replies | |
| 408/1887 | KVM: SVM: Use the active VMCBs MSR bitmap when checking if MSR is interceptedarch/ | +1 | 0 replies | |
| 409/1887 | wifi: mac80211: set info->band for 802.3 encap offload framesnet/ | +11 | 0 replies | |
| 410/1887 | smb: client: discard post-EOF pagecache when extending a file via zero rangefs/ | +4 | 0 replies | |
| 411/1887 | iio: adc: ad_sigma_delta: fix use-after-free on unbinddrivers/ | +15 | 0 replies | |
| 412/1887 | iio: adc: aspeed: Simplify with dev_err_probedrivers/ | +4 | 0 replies | |
| 413/1887 | iio: adc: aspeed: propagate reset deassert errorsdrivers/ | +3 | 0 replies | |
| 414/1887 | iio: adc: max1363: sign-extend bipolar differential channel readsdrivers/ | +8 | 0 replies | |
| 415/1887 | iio: adc: axp288: Add TS bias override for Haier HV103Hdrivers/ | +8 | 0 replies | |
| 416/1887 | iio: adc: stm32-adc: fix possible division by zero in processed channeldrivers/ | +7 | 0 replies | |
| 417/1887 | iio: cdc: ad7150: fix OF matching and publish module aliasesdrivers/ | +5 | 0 replies | |
| 418/1887 | fs/ntfs3: Add more checks in mi_enum_attr (part 2)fs/ | +13 | 0 replies | |
| 419/1887 | fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()fs/ fs/ fs/ +1 more | +90 | 0 replies | |
| 420/1887 | fs/ntfs3: fix KMSAN uninit-value in ni_create_attr_listfs/ | +1 | 0 replies | |
| 421/1887 | fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()fs/ | +16 | 0 replies | |
| 422/1887 | scsi: lpfc: Fix use-after-free of mboxq in lpfc_sli4_driver_resource_setup()drivers/ | +1 | 0 replies | |
| 423/1887 | HID: core: introduce hid_safe_input_report()drivers/ drivers/ drivers/ +1 more | +36 | 0 replies | |
| 424/1887 | HID: uhid: convert to hid_safe_input_report()drivers/ | +4 | 0 replies | |
| 425/1887 | mm/damon/core: do non-safe region walk on kdamond_apply_schemes()mm/ | +3 | 0 replies | |
| 426/1887 | mm/damon/core: fix unconditionally skip last regionmm/ | +15 | 0 replies | |
| 427/1887 | Bluetooth: hci_event: fix simultaneous discovery stuck in FINDINGnet/ | +7 | 0 replies | |
| 428/1887 | netfilter: nft_set_pipapo: restore cloned mapping table memcg accountingnet/ | +1 | 0 replies | |
| 429/1887 | crypto: drbg - Fix ineffective sanity checkcrypto/ | +5 | 0 replies | |
| 430/1887 | ipv4: stop PMTU walk when nexthop group shrinksnet/ | +2 | 0 replies | |
| 431/1887 | ipv4: stop route notification sizing when nexthop group shrinksnet/ | +3 | 0 replies | |
| 432/1887 | ipv4: do not warn on route notification size racenet/ | +0 | 0 replies | |
| 433/1887 | ipv6: do not warn on route notification size racenet/ | +0 | 0 replies | |
| 434/1887 | arm64: irq: exclude the softirq stack switch from KCOVarch/ | +3 | 0 replies | |
| 435/1887 | ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P)sound/ | +7 | 0 replies | |
| 436/1887 | btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()fs/ | +3 | 0 replies | |
| 437/1887 | dm ioctl: dont let data_start run past the bufferdrivers/ | +8 | 0 replies | |
| 438/1887 | wifi: brcmfmac: fix P2P device removal race in brcmf_detach()drivers/ | +25 | 0 replies | |
| 439/1887 | wireguard: noise: reject response consumption after intermediate initiationdrivers/ | +4 | 0 replies | |
| 440/1887 | workqueue: Fix NULL current_pwq deref in chained work checkkernel/ | +1 | 0 replies | |
| 441/1887 | xen/netfront: dont leak the skb when xennet_fill_frags() failsdrivers/ | +3 | 0 replies | |
| 442/1887 | strparser: make sure __strp_recv isnt running before tearing down the parserDocumentation/ include/ net/ | +11 | 0 replies | |
| 443/1887 | tipc: destroy topsrv workqueues before closing connectionsnet/ | +65 | 0 replies | |
| 444/1887 | tipc: hold a reference to nodes found by link namenet/ | +9 | 0 replies | |
| 445/1887 | Revert "wifi: libertas: reject short monitor TX frames"drivers/ | +0 | 0 replies | |
| 446/1887 | selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_optssecurity/ | +8 | 0 replies | |
| 447/1887 | sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoutenet/ | +1 | 0 replies | |
| 448/1887 | gpio: xilinx: fix runtime PM leak on request error pathdrivers/ | +1 | 0 replies | |
| 449/1887 | ibmveth: h_free logical LAN on open-fail after registerdrivers/ | +3 | 0 replies | |
| 450/1887 | ibmveth: fix TX LTB and filter unwind on open-faildrivers/ | +9 | 0 replies | |
| 451/1887 | keys: finalize persistent keyring timeout after link attemptsecurity/ | +32 | 0 replies | |
| 452/1887 | KEYS: Fix add_key() race with keyring restrictionsecurity/ | +3 | 0 replies | |
| 453/1887 | memstick: core: wait for request completion before freeing carddrivers/ | +2 | 0 replies | |
| 454/1887 | memstick: rtsx_usb_ms: complete requests after eject instead of dropping themdrivers/ | +11 | 0 replies | |
| 455/1887 | dm-crypt: reject the lmk IV mode with AEAD ciphersdrivers/ | +6 | 0 replies | |
| 456/1887 | dm-snap: reject the transient exception store for snapshot-mergedrivers/ | +14 | 0 replies | |
| 457/1887 | mmc: cavium-octeon: destroy slot platform devices on removedrivers/ | +4 | 0 replies | |
| 458/1887 | mmc: cavium-thunderx: destroy slot platform devices on removedrivers/ | +4 | 0 replies | |
| 459/1887 | mmc: mtk-sd: Cancel request timeout work on removedrivers/ | +1 | 0 replies | |
| 460/1887 | mmc: sdhci-sprd: disable runtime PM on removedrivers/ | +4 | 0 replies | |
| 461/1887 | net/packet: guard the ll header push in packet_rcv_spkt()net/ | +2 | 0 replies | |
| 462/1887 | net/smc: protect clcsock lifetime in smc_getnamenet/ | +6 | 0 replies | |
| 463/1887 | net: bridge: avoid recursive multicast port cleanupnet/ | +18 | 0 replies | |
| 464/1887 | net: dsa: microchip: fix KSZ8765 fiber detectiondrivers/ | +1 | 0 replies | |
| 465/1887 | net: usb: ax88179_178a: fix rx frame length for non-last packetsdrivers/ | +3 | 0 replies | |
| 466/1887 | nvme: fix swapped ZRASF zone state values for full and read onlyinclude/ | +2 | 0 replies | |
| 467/1887 | openvswitch: fix soft lockup in the netlink flow dumpnet/ | +8 | 0 replies | |
| 468/1887 | regulator: ltc3676: dont read the write-only HRST and CLIRQ registersdrivers/ | +12 | 0 replies | |
| 469/1887 | scsi: qedi: Initialize callback state before registrationdrivers/ | +1 | 0 replies | |
| 470/1887 | Bluetooth: hci_sock: Serialize dead-device detachmentnet/ | +2 | 0 replies | |
| 471/1887 | Bluetooth: MGMT: Fix status of pending commands flushed on power offnet/ | +1 | 0 replies | |
| 472/1887 | Bluetooth: RFCOMM: free the skb when the DLC has no ownernet/ | +4 | 0 replies | |
| 473/1887 | Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdownnet/ | +1 | 0 replies | |
| 474/1887 | drm/gud: dont keep a connector without a CRTC as connector_statedrivers/ | +1 | 0 replies | |
| 475/1887 | drm/i915/gem: Prevent overstepping exec array boundarydrivers/ | +1 | 0 replies | |
| 476/1887 | drm/i915/gt: Unmask interrupts only when ACTIVE is truedrivers/ | +2 | 0 replies | |
| 477/1887 | drm/vc4: drain the hangcheck timer and works on V3D unbinddrivers/ | +8 | 0 replies | |
| 478/1887 | drm/amdgpu: make Mac FB workaround genericdrivers/ | +7 | 0 replies | |
| 479/1887 | fs: refuse fspick() on internal superblocksfs/ | +3 | 0 replies | |
| 480/1887 | namespace: check a submount for references right before unmounting itfs/ | +53 | 0 replies | |
| 481/1887 | dcache: dont put a mountpoint on a dentry thats being removedfs/ | +3 | 0 replies | |
| 482/1887 | namespace: refuse an automount below a mount that is in no namespacefs/ | +1 | 0 replies | |
| 483/1887 | drm/dp: dont mark the AUX backlight enabled when enabling faileddrivers/ | +3 | 0 replies | |
| 484/1887 | gpio: exar: initialize the ID before registering its cleanupdrivers/ | +1 | 0 replies | |
| 485/1887 | drm/aspeed: Balance the display clock enable on teardowndrivers/ | +2 | 0 replies | |
| 486/1887 | drm/vc4: Free the BO cache size list on teardowndrivers/ | +1 | 0 replies | |
| 487/1887 | net/sched: em_text: reject unterminated algo before autoloadnet/ | +3 | 0 replies | |
| 488/1887 | amt: send the relays General Query directly from the receive pathdrivers/ include/ | +15 | 0 replies | |
| 489/1887 | cxgb4/ch_ktls: disable softirqs around tid_list erasesdrivers/ | +2 | 0 replies | |
| 490/1887 | nvmet: use the local P2P device on metadata allocation failuredrivers/ | +1 | 0 replies | |
| 491/1887 | ASoC: adau1372: allow sleepy powerdown GPIOssound/ | +3 | 0 replies | |
| 492/1887 | ASoC: adau1372: fix invalid default state of output ASRC and DAC muxessound/ | +11 | 0 replies | |
| 493/1887 | ASoC: samsung: i2s: enable op_clk in probe to balance runtime PMsound/ | +8 | 0 replies | |
| 494/1887 | flow_dissector: avoid u16 truncation of skb->len when computing thoffnet/ | +8 | 0 replies | |
| 495/1887 | flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()net/ | +2 | 0 replies | |
| 496/1887 | net/mlx5e: Order ICOSQ cc update after CQ doorbelldrivers/ | +4 | 0 replies | |
| 497/1887 | net: openvswitch: validate transport header presence in set_ipv6_addrnet/ | +6 | 0 replies | |
| 498/1887 | mtd: Clean refcounting with MTD_PARTITIONED_MASTERdrivers/ | +10 | 0 replies | |
| 499/1887 | mtd: fix use-after-free in mtd releasedrivers/ | +11 | 0 replies | |
| 500/1887 | mtd: maps: vmu-flash: Fix the (mtd core) switch to ref countersdrivers/ | +1 | 0 replies | |
| 501/1887 | mtd: fix double free and WARN_ON in add_mtd_device() error pathsdrivers/ | +19 | 0 replies | |
| 502/1887 | dlm: validate length in dlm_search_rsb_treefs/ | +2 | 0 replies | |
| 503/1887 | can: fix unique skb identifier regression under RPSdrivers/ include/ net/ +5 more | +22 | 0 replies | |
| 504/1887 | drm/amd/display: Dont replace a sink mode that shares the native totalsdrivers/ | +6 | 0 replies | |
| 505/1887 | HID: hid-steam: Fix cleanup in probe()drivers/ | +23 | 0 replies | |
| 506/1887 | HID: hid-steam: Make client_opened a counterdrivers/ | +7 | 0 replies | |
| 507/1887 | HID: steam: Fully unregister controller when hidraw is openeddrivers/ | +42 | 0 replies | |
| 508/1887 | HID: steam: Rearrange teardown sequencedrivers/ | +3 | 0 replies | |
| 509/1887 | HID: steam: Refactor registrationdrivers/ | +31 | 0 replies | |
| 510/1887 | HID: steam: Clean up lockingdrivers/ | +37 | 0 replies | |
| 511/1887 | tracing: Set the trace clock before registering the histogram triggerkernel/ | +9 | 0 replies | |
| 512/1887 | ip6_gre: remove obsolete ERSPAN PMTU updatenet/ | +0 | 0 replies | |
| 513/1887 | ice: fix metadata_dst refcount handling on representor teardowndrivers/ | +1 | 0 replies | |
| 514/1887 | selinux: fix data race on AVC latest_notifsecurity/ | +3 | 0 replies | |
| 515/1887 | EDAC/amd64: Mask UMC chip select to the four implemented selectsdrivers/ | +1 | 0 replies | |
| 516/1887 | mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAPmm/ | +17 | 0 replies | |
| 517/1887 | mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-mergeinclude/ mm/ mm/ | +25 | 0 replies | |
| 518/1887 | wireguard: queueing: preserve tstamp_type when encapsulating packetdrivers/ | +2 | 0 replies | |
| 519/1887 | xfrm: prevent policy_hthresh.work from racing with netns teardowninclude/ net/ | +19 | 0 replies | |
| 520/1887 | netfilter: nf_tables: fix bidirectional offload regressionnet/ | +1 | 0 replies | |
| 521/1887 | net: team: Remove unused team_mode_op, port_enableddrivers/ include/ | +0 | 0 replies | |
| 522/1887 | net: team: Rename port_disabled team mode op to port_tx_disableddrivers/ drivers/ include/ | +5 | 0 replies | |
| 523/1887 | net: team: fix NULL pointer dereference in team_xmit during mode changedrivers/ | +32 | 0 replies | |
| 524/1887 | net: team: stop reusing skb after queue overridedrivers/ | +8 | 0 replies | |
| 525/1887 | Bluetooth: RFCOMM: connect the session socket without rfcomm_mutexinclude/ net/ | +96 | 0 replies | |
| 526/1887 | drm/vmwgfx: validate pitch coming from userspacedrivers/ | +18 | 0 replies | |
| 527/1887 | Bluetooth: ISO: Serialize concurrent connect callsnet/ | +48 | 0 replies | |
| 528/1887 | namespace: dont inherit MNT_UMOUNT in clone_mnt()fs/ include/ | +4 | 0 replies | |
| 529/1887 | namespace: check the mounts before reading their parents in pivot_root()fs/ | +3 | 0 replies | |
| 530/1887 | dm: fix reading free memory in do_resumedrivers/ | +3 | 0 replies | |
| 531/1887 | pmdomain: rockchip: fix clock leak on domain probe failuredrivers/ | +1 | 0 replies | |
| 532/1887 | pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domainsdrivers/ | +15 | 0 replies | |
| 533/1887 | pmdomain: rockchip: dont ignore clock lookup errors on attachdrivers/ | +13 | 0 replies | |
| 534/1887 | pmdomain: rockchip: propagate subdomain add errorsdrivers/ | +3 | 0 replies | |
| 535/1887 | optee: register TEE devices only once fully initializeddrivers/ drivers/ | +16 | 0 replies | |
| 536/1887 | scsi: ch: Do not keep references to data transfer element devicesdrivers/ | +9 | 0 replies | |
| 537/1887 | drm/vc4: Fix firmware reference leak in vc4_drm_bind()drivers/ | +4 | 0 replies | |
| 538/1887 | drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locksdrivers/ | +45 | 0 replies | |
| 539/1887 | drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAINdrivers/ | +4 | 0 replies | |
| 540/1887 | namespace: unhash a dentry before detaching the mounts on itfs/ | +5 | 0 replies | |
| 541/1887 | namespace: dont copy an unmounted mount treefs/ | +3 | 0 replies | |
| 542/1887 | namespace: check the target before walking it in do_mount_setattr()fs/ | +8 | 0 replies | |
| 543/1887 | fcntl: refuse F_SET_RW_HINT on an immutable inodefs/ | +3 | 0 replies | |
| 544/1887 | namespace: handle mount locking for automounts correctlyfs/ | +17 | 0 replies | |
| 545/1887 | tty: add break_wait kernel-docinclude/ | +1 | 0 replies | |
| 546/1887 | xfs: xfs_ifree_cluster vs xfs_iflush_shutdown_abort deadlockfs/ fs/ | +9 | 0 replies | |
| 547/1887 | xfs: catch stale AGF/AGF metadatafs/ fs/ | +64 | 0 replies | |
| 548/1887 | xfs: rearrange code in xfs_buf_item.cfs/ fs/ | +60 | 0 replies | |
| 549/1887 | xfs: factor out stale buffer item completionfs/ | +37 | 0 replies | |
| 550/1887 | xfs: fix unmount hang with unflushable inodes stuck in the AILfs/ fs/ | +86 | 0 replies | |
| 551/1887 | mm: migrate: fix getting incorrect page mapping during page migrationmm/ | +12 | 0 replies | |
| 552/1887 | drm/msm/dpu: Add mutex lock in control vblank irqdrivers/ drivers/ drivers/ +1 more | +48 | 0 replies | |
| 553/1887 | fs: new helper: simple_rename_timestampfs/ include/ | +29 | 0 replies | |
| 554/1887 | reiserfs: convert to simple_rename_timestampfs/ | +1 | 0 replies | |
| 555/1887 | reiserfs: Avoid touching renamed directory if parent does not changefs/ | +29 | 0 replies | |
| 556/1887 | SUNRPC: fix a memleak in gss_import_v2_contextnet/ | +14 | 0 replies | |
| 557/1887 | drm/amd/display: Fix hang/underflow when transitioning to ODM4:1drivers/ drivers/ | +14 | 0 replies | |
| 558/1887 | smb: client: fix use-after-free in smb2_query_info_compound()fs/ | +60 | 0 replies | |
| 559/1887 | riscv: VMAP_STACK overflow detection thread-safearch/ arch/ arch/ +3 more | +35 | 0 replies | |
| 560/1887 | f2fs: split initial and dynamic conditions for extent_cachefs/ | +13 | 0 replies | |
| 561/1887 | cxl/port: Fix delete_endpoint() vs parent unregistration racedrivers/ | +9 | 0 replies | |
| 562/1887 | media: mediatek: vcodec: Only free buffer VA that is not NULLdrivers/ | +3 | 0 replies | |
| 563/1887 | ext4: avoid deadlock in fs reclaim with page writebackfs/ fs/ fs/ | +40 | 0 replies | |
| 564/1887 | coresight: Fix memory leak in acpi_buffer->pointerdrivers/ | +31 | 0 replies | |
| 565/1887 | net/mlx5e: xsk: Fix crash on regular rq reactivationdrivers/ | +11 | 0 replies | |
| 566/1887 | f2fs: fix to set flush_merge opt and show noflush_mergefs/ | +11 | 0 replies | |
| 567/1887 | f2fs: dont reset unchangable mount option in f2fs_remount()fs/ | +18 | 0 replies | |
| 568/1887 | can: gs_usb: fix time stamp counter initializationdrivers/ | +52 | 0 replies | |
| 569/1887 | smc: Fix use-after-free in tcp_write_timer_handler().net/ | +10 | 0 replies | |
| 570/1887 | block/rq_qos: protect rq_qos apis with a new lockblock/ block/ block/ +4 more | +26 | 0 replies | |
| 571/1887 | f2fs: fix to do sanity check on direct node in truncate_dnode()fs/ fs/ fs/ | +12 | 0 replies | |
| 572/1887 | interconnect: Fix locking for runpm vs reclaimdrivers/ | +6 | 0 replies | |
| 573/1887 | blk-cgroup: dropping parent refcount after pd_free_fn() is doneblock/ | +2 | 0 replies | |
| 574/1887 | nexthop: Factor out hash threshold fdb nexthop selectionnet/ | +20 | 0 replies | |
| 575/1887 | nexthop: Factor out neighbor validity checknet/ | +16 | 0 replies | |
| 576/1887 | nexthop: Do not return invalid nexthop object during multipath selectionnet/ | +8 | 0 replies | |
| 577/1887 | net: nexthop: Have all NH notifiers carry NH IDinclude/ net/ | +2 | 0 replies | |
| 578/1887 | net: nexthop: Increase weight to u16include/ include/ net/ | +31 | 0 replies | |
| 579/1887 | drm/amd/display: Add NULL test for timing generator in dcn21_set_pipe()drivers/ | +8 | 0 replies | |
| 580/1887 | drm/amd/display: Fix panel_cntl could be null in dcn21_set_backlight_level()drivers/ | +8 | 0 replies | |
| 581/1887 | net/sched: flower: Fix chain template offloadinclude/ net/ net/ | +35 | 0 replies | |
| 582/1887 | arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOADarch/ | +13 | 0 replies | |
| 583/1887 | rxrpc: Fix delayed ACKs to not set the reference serial numbernet/ | +1 | 0 replies | |
| 584/1887 | net: stmmac: protect updates of 64-bit statistics countersdrivers/ drivers/ drivers/ +4 more | +221 | 0 replies | |
| 585/1887 | net/sched: act_mirred: use the backlog for mirred ingressnet/ tools/ | +5 | 0 replies | |
| 586/1887 | ASoC: qcom: Fix uninitialized pointer dmactlsound/ | +1 | 0 replies | |
| 587/1887 | spi: lpspi: Avoid potential use-after-free in probe()drivers/ | +4 | 0 replies | |
| 588/1887 | f2fs: introduce f2fs_is_readonly() for readabilityfs/ fs/ | +7 | 0 replies | |
| 589/1887 | f2fs: introduce f2fs_invalidate_internal_cache() for cleanupfs/ fs/ fs/ +1 more | +16 | 0 replies | |
| 590/1887 | f2fs: fix to truncate meta inode pages forcelyfs/ fs/ fs/ +1 more | +33 | 0 replies | |
| 591/1887 | drm/bridge: adv7511: fix crash on irq during probedrivers/ | +11 | 0 replies | |
| 592/1887 | Bluetooth: af_bluetooth: Fix deadlocknet/ | +3 | 0 replies | |
| 593/1887 | Bluetooth: hci_core: Fix possible buffer overflownet/ | +1 | 0 replies | |
| 594/1887 | perf: RISC-V: Define helper functions expose hpm counter width and countdrivers/ include/ | +38 | 0 replies | |
| 595/1887 | perf: RISCV: Fix panic on pmu overflow handlerdrivers/ | +2 | 0 replies | |
| 596/1887 | ARM: 9359/1: flush: check if the folio is reserved for no-mapping addressesarch/ | +2 | 0 replies | |
| 597/1887 | drm/amd/display: Add a dc_state NULL check in dc_state_releasedrivers/ | +2 | 0 replies | |
| 598/1887 | net: esp: fix bad handling of pages from page_poolinclude/ net/ net/ | +18 | 0 replies | |
| 599/1887 | net/sched: Fix mirred deadlock on device recursioninclude/ net/ net/ | +8 | 0 replies | |
| 600/1887 | netfilter: nf_tables: fix memleak in map from abort pathnet/ | +14 | 0 replies | |
| 601/1887 | drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()drivers/ | +9 | 0 replies | |
| 602/1887 | ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspendsound/ | +15 | 0 replies | |
| 603/1887 | nouveau: lock the client object tree.drivers/ drivers/ drivers/ | +22 | 0 replies | |
| 604/1887 | dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setupdrivers/ | +17 | 0 replies | |
| 605/1887 | btrfs: fix deadlock with fiemap and extent lockingfs/ | +45 | 0 replies | |
| 606/1887 | drm/amd/display: Prevent crash when disable streamdrivers/ | +2 | 0 replies | |
| 607/1887 | bpf: support deferring bpf_link dealloc to after RCU grace periodinclude/ kernel/ kernel/ | +48 | 0 replies | |
| 608/1887 | selinux: avoid dereference of garbage after mount failuresecurity/ | +8 | 0 replies | |
| 609/1887 | usb: typec: ucsi: Limit read size on v1.2drivers/ drivers/ | +35 | 0 replies | |
| 610/1887 | pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domaindrivers/ | +5 | 0 replies | |
| 611/1887 | net: phy: phy_device: Prevent nullptr exceptions on ISRdrivers/ | +8 | 0 replies | |
| 612/1887 | wifi: rtw89: fix null pointer access when abort scandrivers/ | +1 | 0 replies | |
| 613/1887 | drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()drivers/ | +9 | 0 replies | |
| 614/1887 | mm/userfaultfd: reset ptes when close() for wr-protected onesfs/ | +4 | 0 replies | |
| 615/1887 | hv_netvsc: Dont free decrypted memorydrivers/ | +12 | 0 replies | |
| 616/1887 | Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()include/ include/ net/ +4 more | +85 | 0 replies | |
| 617/1887 | net/mlx5: Reload only IB representors upon lag disable/enabledrivers/ drivers/ drivers/ | +26 | 0 replies | |
| 618/1887 | bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATEkernel/ | +10 | 0 replies | |
| 619/1887 | gfs2: Fix potential glock use-after-free on unmountfs/ fs/ fs/ +3 more | +46 | 0 replies | |
| 620/1887 | net: stmmac: move the EST lock to struct stmmac_privdrivers/ drivers/ drivers/ +1 more | +16 | 0 replies | |
| 621/1887 | drm/msm/dpu: Add callback function pointer check before its calldrivers/ | +3 | 0 replies | |
| 622/1887 | fs/ntfs3: Check folio pointer for NULLfs/ | +11 | 0 replies | |
| 623/1887 | platform/x86: x86-android-tablets: Unregister devices in reverse orderdrivers/ | +3 | 0 replies | |
| 624/1887 | ext4: refactoring to use the unified helper ext4_quotas_off()fs/ | +7 | 0 replies | |
| 625/1887 | ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()fs/ | +10 | 0 replies | |
| 626/1887 | drm/amdgpu: change vm->task_info handlingdrivers/ drivers/ drivers/ +9 more | +229 | 0 replies | |
| 627/1887 | LoongArch: Update cpu_sibling_map when disabling nonboot CPUsarch/ | +72 | 0 replies | |
| 628/1887 | fork: defer linking file vma until vma is fully initializedkernel/ | +18 | 0 replies | |
| 629/1887 | sched/deadline: Fix task_struct reference leakkernel/ | +5 | 0 replies | |
| 630/1887 | f2fs: fix to shrink read extent node in batchesfs/ | +39 | 0 replies | |
| 631/1887 | drm/amdgpu: fix double free err_addr pointer warningsdrivers/ | +1 | 0 replies | |
| 632/1887 | leds: an30259a: Use devm_mutex_init() for mutex initializationdrivers/ | +4 | 0 replies | |
| 633/1887 | ice: Fix improper extts handlingdrivers/ drivers/ | +56 | 0 replies | |
| 634/1887 | s390/pkey: Wipe copies of protected- and secure-keysdrivers/ | +37 | 0 replies | |
| 635/1887 | s390/pkey: Wipe copies of clear-key structures on failuredrivers/ | +9 | 0 replies | |
| 636/1887 | s390/pkey: Use kfree_sensitive() to fix Coccinelle warningsdrivers/ | +3 | 0 replies | |
| 637/1887 | filemap: add helper mapping_max_folio_size()include/ | +21 | 0 replies | |
| 638/1887 | mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarrayinclude/ mm/ | +9 | 0 replies | |
| 639/1887 | spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transferdrivers/ | +4 | 0 replies | |
| 640/1887 | PCI: endpoint: pci-epf-test: Make use of cached epc_features in pci_epf_test_core_init()drivers/ | +3 | 0 replies | |
| 641/1887 | soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_removedrivers/ | +2 | 0 replies | |
| 642/1887 | drm/amd/display: Fix null pointer deref in dcn20_resource.cdrivers/ | +5 | 0 replies | |
| 643/1887 | nvme: apple: fix device reference countingdrivers/ | +23 | 0 replies | |
| 644/1887 | f2fs: fix to cover read extent cache access with lockfs/ fs/ fs/ | +26 | 0 replies | |
| 645/1887 | f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GCfs/ | +10 | 0 replies | |
| 646/1887 | btrfs: do not BUG_ON() when freeing tree block after errorfs/ fs/ fs/ +3 more | +82 | 0 replies | |
| 647/1887 | pktgen: use cpus_read_lock() in pg_net_init()net/ | +4 | 0 replies | |
| 648/1887 | drm/amd/display: Check index for aux_rd_interval before usingdrivers/ | +2 | 0 replies | |
| 649/1887 | drm/amd/display: Ensure array index tg_inst wont be -1drivers/ | +1 | 0 replies | |
| 650/1887 | ice: protect XDP configuration with a mutexdrivers/ drivers/ drivers/ +1 more | +35 | 0 replies | |
| 651/1887 | userfaultfd: fix checks for huge PMDsmm/ | +12 | 0 replies | |
| 652/1887 | drm/amd/display: Use kcalloc() instead of kzalloc()drivers/ | +1 | 0 replies | |
| 653/1887 | drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_rangedrivers/ | +1 | 0 replies | |
| 654/1887 | drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_boxdrivers/ drivers/ drivers/ +1 more | +40 | 0 replies | |
| 655/1887 | wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_changedrivers/ | +1 | 0 replies | |
| 656/1887 | pinmux: Use sequential access to access desc->pinmux datadrivers/ drivers/ drivers/ | +100 | 0 replies | |
| 657/1887 | crypto: stm32/cryp - call finalize with bh disableddrivers/ | +6 | 0 replies | |
| 658/1887 | drm/amd/display: Refactor ABM featuredrivers/ drivers/ drivers/ +2 more | +442 | 0 replies | |
| 659/1887 | drm/amd/display: Avoid overflow from uint32_t to uint8_tdrivers/ drivers/ | +2 | 0 replies | |
| 660/1887 | spi: hisi-kunpeng: Convert to platform remove callback returning voiddrivers/ | +2 | 0 replies | |
| 661/1887 | spi: hisi-kunpeng: switch to use modern namedrivers/ | +42 | 0 replies | |
| 662/1887 | spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmwaredrivers/ | +3 | 0 replies | |
| 663/1887 | media: mediatek: vcodec: Fix H264 stateless decoder smatch warningdrivers/ | +7 | 0 replies | |
| 664/1887 | bpf: Prevent tailcall infinite loop caused by freplaceinclude/ kernel/ kernel/ +2 more | +81 | 0 replies | |
| 665/1887 | nvme-rdma: unquiesce admin_q before destroy itdrivers/ | +1 | 0 replies | |
| 666/1887 | drm/amd/display: Check null pointer before try to access itdrivers/ | +5 | 0 replies | |
| 667/1887 | drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipedrivers/ | +3 | 0 replies | |
| 668/1887 | drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layerdrivers/ | +3 | 0 replies | |
| 669/1887 | drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layerdrivers/ | +3 | 0 replies | |
| 670/1887 | drm/amd/display: Check null pointers before multiple usesdrivers/ drivers/ drivers/ +2 more | +18 | 0 replies | |
| 671/1887 | drm/amd/display: Check null pointers before useddrivers/ drivers/ drivers/ +4 more | +13 | 0 replies | |
| 672/1887 | drm/amd/display: Check null pointers before using themdrivers/ | +4 | 0 replies | |
| 673/1887 | drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flagsdrivers/ drivers/ | +4 | 0 replies | |
| 674/1887 | l2tp: prevent possible tunnel refcount underflownet/ net/ net/ +1 more | +17 | 0 replies | |
| 675/1887 | net/ncsi: Disable the ncsi work before freeing the associated structurenet/ | +2 | 0 replies | |
| 676/1887 | drm/amd/display: Implement bounds check for stream encoder creation in DCN401drivers/ | +1 | 0 replies | |
| 677/1887 | cpufreq: amd-pstate: add check for cpufreq_cpu_gets return valuedrivers/ | +6 | 0 replies | |
| 678/1887 | nvme-pci: fix race condition between reset and nvme_dev_disable()drivers/ | +15 | 0 replies | |
| 679/1887 | cxl/port: Fix use-after-free, permit out-of-order decoder shutdowndrivers/ drivers/ drivers/ +3 more | +93 | 0 replies | |
| 680/1887 | ksmbd: check outstanding simultaneous SMB operationsfs/ fs/ fs/ +2 more | +20 | 0 replies | |
| 681/1887 | drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()drivers/ | +1 | 0 replies | |
| 682/1887 | firmware: arm_scmi: Simplify chan_available transport operationdrivers/ drivers/ drivers/ +3 more | +9 | 0 replies | |
| 683/1887 | firmware: arm_scmi: Use dedicated devices to initialize channelsdrivers/ drivers/ drivers/ +3 more | +116 | 0 replies | |
| 684/1887 | firmware: arm_scmi: Move protocol registration helpersdrivers/ drivers/ drivers/ | +67 | 0 replies | |
| 685/1887 | firmware: arm_scmi: Add common notifier helpersdrivers/ drivers/ drivers/ | +92 | 0 replies | |
| 686/1887 | firmware: arm_scmi: Refactor protocol device creationdrivers/ drivers/ drivers/ | +156 | 0 replies | |
| 687/1887 | firmware: arm_scmi: Move handle get/set helpersdrivers/ drivers/ drivers/ | +25 | 0 replies | |
| 688/1887 | firmware: arm_scmi: Refactor device create/destroy helpersdrivers/ drivers/ drivers/ +1 more | +141 | 0 replies | |
| 689/1887 | firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()drivers/ | +4 | 0 replies | |
| 690/1887 | afs: Fix lock recursionfs/ fs/ | +59 | 0 replies | |
| 691/1887 | bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rxinclude/ | +10 | 0 replies | |
| 692/1887 | RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGESdrivers/ | +2 | 0 replies | |
| 693/1887 | smb: client: Fix use-after-free of network namespace.fs/ | +10 | 0 replies | |
| 694/1887 | pmdomain: imx93-blk-ctrl: correct remove pathdrivers/ | +3 | 0 replies | |
| 695/1887 | exfat: fix out-of-bounds access of directory entriesfs/ | +9 | 0 replies | |
| 696/1887 | sunrpc: fix one UAF issue caused by sunrpc kernel tcp socketnet/ net/ | +9 | 0 replies | |
| 697/1887 | smb: Dont leak cfid when reconnect races with open_cached_dirfs/ | +14 | 0 replies | |
| 698/1887 | smb: client: stop flooding dmesg in smb2_calc_signature()fs/ | +1 | 0 replies | |
| 699/1887 | smb: client: fix use-after-free of signing keyfs/ fs/ | +40 | 0 replies | |
| 700/1887 | io_uring: check for overflows in io_pin_pagesio_uring/ | +6 | 0 replies | |
| 701/1887 | KVM: arm64: Get rid of userspace_irqchip_in_usearch/ arch/ arch/ | +4 | 0 replies | |
| 702/1887 | nfsd: release svc_expkey/svc_export with rcu_workfs/ fs/ | +27 | 0 replies | |
| 703/1887 | RDMA/mlx5: Move events notifier registration to be after device registrationdrivers/ drivers/ | +20 | 0 replies | |
| 704/1887 | netfilter: IDLETIMER: Fix for possible ABBA deadlocknet/ | +28 | 0 replies | |
| 705/1887 | drm: zynqmp_kms: Unplug DRM device before removaldrivers/ | +1 | 0 replies | |
| 706/1887 | f2fs: fix to drop all discards after creating snapshot on lvm devicefs/ fs/ | +21 | 0 replies | |
| 707/1887 | mm/slub: Avoid list corruption when removing a slab from the full listmm/ mm/ | +13 | 0 replies | |
| 708/1887 | sched/deadline: Fix warning in migrate_enable for boosted taskskernel/ | +1 | 0 replies | |
| 709/1887 | scsi: hisi_sas: Move slot variable definition in hisi_sas_abort_task()drivers/ | +3 | 0 replies | |
| 710/1887 | scsi: hisi_sas: Add SATA_DISK_ERR bit handling for v3 hwdrivers/ drivers/ drivers/ | +64 | 0 replies | |
| 711/1887 | scsi: hisi_sas: Add function complete_v3_hw()drivers/ drivers/ | +13 | 0 replies | |
| 712/1887 | scsi: hisi_sas: Directly call register snapshot instead of using workqueuedrivers/ drivers/ drivers/ | +8 | 0 replies | |
| 713/1887 | scsi: hisi_sas: Allocate DFX memory during dump triggerdrivers/ drivers/ | +62 | 0 replies | |
| 714/1887 | scsi: hisi_sas: Create all dump files during debugfs initializationdrivers/ | +61 | 0 replies | |
| 715/1887 | bpf: Call free_htab_elem() after htab_unlock_bucket()kernel/ | +38 | 0 replies | |
| 716/1887 | mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MMmm/ | +2 | 0 replies | |
| 717/1887 | net/smc: initialize close_work early to avoid warningnet/ | +1 | 0 replies | |
| 718/1887 | f2fs: fix to do sanity check on node blkaddr in truncate_node()fs/ | +10 | 0 replies | |
| 719/1887 | udmabuf: fix memory leak on last export_udmabuf() error pathdrivers/ | +10 | 0 replies | |
| 720/1887 | smb: Initialize cfid->tcon before performing network opsfs/ | +1 | 0 replies | |
| 721/1887 | vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()drivers/ | +5 | 0 replies | |
| 722/1887 | scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfsdrivers/ drivers/ | +13 | 0 replies | |
| 723/1887 | workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM workerkernel/ | +13 | 0 replies | |
| 724/1887 | udp: Deal with race between UDP socket address change and rehashnet/ net/ | +106 | 0 replies | |
| 725/1887 | btrfs: do proper folio cleanup when cow_file_range() failedfs/ | +34 | 0 replies | |
| 726/1887 | xfrm: state: fix out-of-bounds read during lookupnet/ | +62 | 0 replies | |
| 727/1887 | powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDWarch/ arch/ | +3 | 0 replies | |
| 728/1887 | PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()drivers/ | +17 | 0 replies | |
| 729/1887 | ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during paramssound/ | +5 | 0 replies | |
| 730/1887 | rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxynet/ | +32 | 0 replies | |
| 731/1887 | smb: client: fix double free of TCP_Server_Info::hostnamefs/ | +1 | 0 replies | |
| 732/1887 | mm: clear uffd-wp PTE/PMD state on mremap()fs/ include/ mm/ +2 more | +70 | 0 replies | |
| 733/1887 | RDMA/mlx5: Fix implicit ODP use after freedrivers/ | +15 | 0 replies | |
| 734/1887 | scsi: mpi3mr: Fix possible crash when setting up bsg failsdrivers/ | +7 | 0 replies | |
| 735/1887 | wifi: rtw89: fix race between cancel_hw_scan and hw_scan completiondrivers/ | +5 | 0 replies | |
| 736/1887 | RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with errordrivers/ drivers/ | +27 | 0 replies | |
| 737/1887 | net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnelsnet/ net/ | +12 | 0 replies | |
| 738/1887 | net: ravb: Fix missing rtnl lock in suspend/resume pathdrivers/ | +7 | 0 replies | |
| 739/1887 | x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4arch/ | +59 | 0 replies | |
| 740/1887 | PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1arch/ | +30 | 0 replies | |
| 741/1887 | ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copierssound/ | +5 | 0 replies | |
| 742/1887 | efi: Dont map the entire mokvar table to determine its sizedrivers/ | +13 | 0 replies | |
| 743/1887 | RDMA/bnxt_re: Fix the page details for the srq created by kernel consumersdrivers/ | +2 | 0 replies | |
| 744/1887 | RDMA/mlx5: Fix a WARN during dereg_mr for DM typedrivers/ | +1 | 0 replies | |
| 745/1887 | RDMA/mlx5: Dont keep umrable page_shift in cache entriesdrivers/ drivers/ drivers/ | +1 | 0 replies | |
| 746/1887 | RDMA/mlx5: Remove implicit ODP cache entrydrivers/ include/ | +5 | 0 replies | |
| 747/1887 | RDMA/mlx5: Change the cache structure to an RB-treedrivers/ drivers/ drivers/ | +132 | 0 replies | |
| 748/1887 | RDMA/mlx5: Introduce mlx5r_cache_rb_keydrivers/ drivers/ drivers/ | +201 | 0 replies | |
| 749/1887 | RDMA/mlx5: Implement mkeys management via LIFO queuedrivers/ | +2 | 0 replies | |
| 750/1887 | RDMA/mlx5: Fix the recovery flow of the UMR QPdrivers/ | +56 | 0 replies | |
| 751/1887 | net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNCdrivers/ drivers/ | +11 | 0 replies | |
| 752/1887 | nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()drivers/ | +29 | 0 replies | |
| 753/1887 | ksmbd: prevent connection release during oplock break notificationfs/ fs/ fs/ +1 more | +29 | 0 replies | |
| 754/1887 | eth: bnxt: fix truesize for mb-xdp-pass casedrivers/ drivers/ | +9 | 0 replies | |
| 755/1887 | ksmbd: fix use-after-free in ksmbd_free_work_structfs/ fs/ fs/ +1 more | +15 | 0 replies | |
| 756/1887 | Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmdnet/ | +34 | 0 replies | |
| 757/1887 | net: mctp: unshare packets when reassemblingnet/ | +29 | 0 replies | |
| 758/1887 | ksmbd: fix null pointer dereference in alloc_preauth_hash()fs/ fs/ | +22 | 0 replies | |
| 759/1887 | LoongArch: BPF: Dont override subprogs return valuearch/ | +4 | 0 replies | |
| 760/1887 | ibmveth: Always stop tx queues during closedrivers/ drivers/ | +1 | 0 replies | |
| 761/1887 | net: ibmveth: make veth_pool_store stop hangingdrivers/ | +27 | 0 replies | |
| 762/1887 | net: decrease cached dst counters in dst_releasenet/ | +8 | 0 replies | |
| 763/1887 | fs/9p: fix NULL pointer dereference on mkdirfs/ | +1 | 0 replies | |
| 764/1887 | ax25: Remove broken autobindinclude/ net/ net/ | +10 | 0 replies | |
| 765/1887 | btrfs: fix block group refcount race in btrfs_create_pending_block_groups()fs/ | +3 | 0 replies | |
| 766/1887 | f2fs: convert f2fs_handle_page_eio() to use foliofs/ fs/ fs/ | +6 | 0 replies | |
| 767/1887 | f2fs: fix potential deadloop in prepare_compress_overwrite()fs/ fs/ | +7 | 0 replies | |
| 768/1887 | perf: Fix hang while freeing sigtrap eventinclude/ kernel/ | +19 | 0 replies | |
| 769/1887 | smb: client: fix UAF in decryption with multichannelfs/ | +3 | 0 replies | |
| 770/1887 | fs/ntfs3: Keep write operations atomicfs/ | +12 | 0 replies | |
| 771/1887 | bpf: Fix kmemleak warning for percpu hashmapkernel/ | +2 | 0 replies | |
| 772/1887 | spi: fsl-qspi: use devm function instead of driver removedrivers/ | +19 | 0 replies | |
| 773/1887 | drm/amdkfd: debugfs hang_hws skip GPU with MESdrivers/ | +5 | 0 replies | |
| 774/1887 | btrfs: harden block_group::bg_list against list_del() racesfs/ fs/ | +20 | 0 replies | |
| 775/1887 | sfc: fix NULL dereferences in ef100_process_design_param()drivers/ drivers/ | +25 | 0 replies | |
| 776/1887 | scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queuedrivers/ drivers/ | +66 | 0 replies | |
| 777/1887 | um: fix time-travel syscall scheduling hackarch/ | +20 | 0 replies | |
| 778/1887 | ksmbd: Fix UAF in __close_file_table_idsfs/ | +31 | 0 replies | |
| 779/1887 | ksmbd: prevent rename with empty stringfs/ | +5 | 0 replies | |
| 780/1887 | KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interceptionarch/ arch/ arch/ | +5 | 0 replies | |
| 781/1887 | scsi: ufs: exynos: Disable iocc if dma-coherent property isnt setdrivers/ drivers/ | +15 | 0 replies | |
| 782/1887 | net: mctp: Dont access ifa_index when missingnet/ | +11 | 0 replies | |
| 783/1887 | kasan: use unchecked __memset internallymm/ mm/ | +3 | 0 replies | |
| 784/1887 | kasan: avoid sleepable page allocation from atomic contextmm/ | +78 | 0 replies | |
| 785/1887 | clk: sunxi-ng: h616: Reparent CPU clock during frequency changesdrivers/ | +26 | 0 replies | |
| 786/1887 | clk: sunxi-ng: h616: Reparent GPU clock during frequency changesdrivers/ | +35 | 0 replies | |
| 787/1887 | dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chndrivers/ drivers/ include/ | +14 | 0 replies | |
| 788/1887 | wifi: iwlwifi: dbg-tlv: fix DRAM data initdrivers/ | +6 | 0 replies | |
| 789/1887 | wifi: iwlwifi: fix debug actions orderdrivers/ | +5 | 0 replies | |
| 790/1887 | virtio: break and reset virtio devices on device_shutdown()drivers/ | +29 | 0 replies | |
| 791/1887 | PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oopsdrivers/ | +2 | 0 replies | |
| 792/1887 | spi-rockchip: Fix register out of bounds accessdrivers/ | +1 | 0 replies | |
| 793/1887 | wifi: iwlwifi: dont warn when if there is a FW errordrivers/ | +3 | 0 replies | |
| 794/1887 | ice: fix Tx scheduler error handling in XDP callbackdrivers/ | +32 | 0 replies | |
| 795/1887 | coresight: holding cscfg_csdev_lock while removing cscfg from csdevdrivers/ | +2 | 0 replies | |
| 796/1887 | ublk: santizize the arguments from userspace when adding a devicedrivers/ | +4 | 0 replies | |
| 797/1887 | LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()arch/ | +2 | 0 replies | |
| 798/1887 | sched/rt: Fix race in push_rt_taskkernel/ | +25 | 0 replies | |
| 799/1887 | smb: client: fix potential deadlock when reconnecting channelsfs/ fs/ | +38 | 0 replies | |
| 800/1887 | bnxt: properly flush XDP redirect listsdrivers/ | +4 | 0 replies | |
| 801/1887 | bridge: mcast: Fix use-after-free during router port configurationnet/ | +9 | 0 replies | |
| 802/1887 | riscv: save the SR_SUM status over switchesarch/ arch/ arch/ | +15 | 0 replies | |
| 803/1887 | net: dsa: b53: do not enable EEE on bcm63xxdrivers/ | +6 | 0 replies | |
| 804/1887 | hisi_acc_vfio_pci: bugfix live migration function without VF device driverdrivers/ | +15 | 0 replies | |
| 805/1887 | s390/mm: Fix in_atomic() handling in do_secure_storage_access()arch/ | +4 | 0 replies | |
| 806/1887 | bus: mhi: ep: Update read pointer only after buffer is writtendrivers/ | +6 | 0 replies | |
| 807/1887 | HID: nintendo: avoid bluetooth suspend/resume stallsdrivers/ | +36 | 0 replies | |
| 808/1887 | rxrpc: Fix recv-recv race of completed callnet/ | +14 | 0 replies | |
| 809/1887 | iio: st_sensors: core and lsm9ds0 switch to devm_regulator_bulk_get_enable()drivers/ drivers/ include/ | +14 | 0 replies | |
| 810/1887 | iio: st_sensors: relax WhoAmI check in st_sensors_verify_id()drivers/ | +1 | 0 replies | |
| 811/1887 | iio: common: st_sensors: Fix use of uninitialize device structsdrivers/ drivers/ drivers/ | +31 | 0 replies | |
| 812/1887 | rxrpc: Fix bug due to prealloc collisionnet/ | +5 | 0 replies | |
| 813/1887 | RDMA/hns: Fix double destruction of rsv_qpdrivers/ drivers/ | +16 | 0 replies | |
| 814/1887 | net/mlx5e: Provide intermediate pointer to access IPsec structdrivers/ | +6 | 0 replies | |
| 815/1887 | net/mlx5e: Remove skb secpath if xfrm state is not founddrivers/ | +4 | 0 replies | |
| 816/1887 | xen: fix UAF in dmabuf_exp_from_pages()drivers/ | +13 | 0 replies | |
| 817/1887 | drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-portdrivers/ | +4 | 0 replies | |
| 818/1887 | fs/ntfs3: cancle set bad inode after removing name failsfs/ fs/ fs/ | +7 | 0 replies | |
| 819/1887 | Use strings in da monitors tracepointsinclude/ | +38 | 0 replies | |
| 820/1887 | exfat: remove unnecessary arguments from exfat_find_dir_entry()fs/ fs/ fs/ | +10 | 0 replies | |
| 821/1887 | exfat: add cluster chain loop check for dirfs/ fs/ fs/ +1 more | +48 | 0 replies | |
| 822/1887 | drm/amd/pm: fix null pointer accessdrivers/ | +2 | 0 replies | |
| 823/1887 | loop: Avoid updating block size under exclusive ownerdrivers/ | +31 | 0 replies | |
| 824/1887 | pagemap: add filemap_grab_folio()include/ | +20 | 0 replies | |
| 825/1887 | highmem: add memcpy_to_folio() and memcpy_from_folio()include/ | +44 | 0 replies | |
| 826/1887 | hfs: fix general protection fault in hfs_find_init()fs/ fs/ fs/ +1 more | +51 | 0 replies | |
| 827/1887 | habanalabs: remove support to export dmabuf from handledrivers/ drivers/ | +9 | 0 replies | |
| 828/1887 | habanalabs: helper function to validate export paramsdrivers/ | +44 | 0 replies | |
| 829/1887 | habanalabs: fix dma-buf release handling if dma_buf_fd() failsdrivers/ | +5 | 0 replies | |
| 830/1887 | habanalabs: fix UAF in export_dmabuf()drivers/ | +8 | 0 replies | |
| 831/1887 | net/smc: fix UAF on smcsk after smc_listen_out()net/ | +2 | 0 replies | |
| 832/1887 | net/sched: Fix backlog accounting in qdisc_dequeue_internalinclude/ net/ net/ +4 more | +50 | 0 replies | |
| 833/1887 | drm/amd/display: fix a Null pointer dereference vulnerabilitydrivers/ | +9 | 0 replies | |
| 834/1887 | ksmbd: fix refcount leak causing resource not releasedfs/ | +3 | 0 replies | |
| 835/1887 | s390/ism: Introduce struct ism_dmbdrivers/ drivers/ include/ | +40 | 0 replies | |
| 836/1887 | s390/ism: fix concurrency management in ism_cmd()drivers/ drivers/ | +4 | 0 replies | |
| 837/1887 | rcu: Fix rcu_read_unlock() deadloop due to IRQ workkernel/ kernel/ | +38 | 0 replies | |
| 838/1887 | mm/smaps: fix race between smaps_hugetlb_range and migrationfs/ | +3 | 0 replies | |
| 839/1887 | LoongArch: Optimize module load time by optimizing PLT/GOT countingarch/ | +18 | 0 replies | |
| 840/1887 | xfrm: Duplicate SPI Handlingnet/ | +41 | 0 replies | |
| 841/1887 | bnxt_en: Fix memory corruption when FW resources change during ifdowndrivers/ | +19 | 0 replies | |
| 842/1887 | trace/fgraph: Fix the warning caused by missing unregister notifierkernel/ | +1 | 0 replies | |
| 843/1887 | vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objectsdrivers/ | +8 | 0 replies | |
| 844/1887 | vxlan: Fix NPD when refreshing an FDB entry with a nexthop objectdrivers/ drivers/ | +5 | 0 replies | |
| 845/1887 | ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdogdrivers/ | +1 | 0 replies | |
| 846/1887 | mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()include/ mm/ mm/ | +29 | 0 replies | |
| 847/1887 | smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)fs/ | +3 | 1 reply | |
| 848/1887 | smb: client: let recv_done verify data_offset, data_length and remaining_data_lengthfs/ | +18 | 0 replies | |
| 849/1887 | wifi: wilc1000: avoid buffer overflow in WID string configurationdrivers/ drivers/ | +30 | 0 replies | |
| 850/1887 | Bluetooth: MGMT: Fix possible UAFsnet/ net/ net/ | +231 | 0 replies | |
| 851/1887 | x86/mce: use is_copy_from_user() to determine copy-from-user contextarch/ | +5 | 0 replies | |
| 852/1887 | net: mscc: ocelot: Fix use-after-free caused by cyclic delayed workdrivers/ | +1 | 0 replies | |
| 853/1887 | i915: Move list_count() to list.h as list_count_nodes() for broader usedrivers/ include/ | +17 | 0 replies | |
| 854/1887 | ptp: Add a upper bound on max_vclocksdrivers/ drivers/ | +2 | 0 replies | |
| 855/1887 | RISC-V: KVM: Write hgatp register with valid mode bitsarch/ | +1 | 0 replies | |
| 856/1887 | tty: n_gsm: introduce macro for minimal unit sizedrivers/ | +5 | 0 replies | |
| 857/1887 | tty: n_gsm: add parameters used with parameter negotiationdrivers/ | +45 | 0 replies | |
| 858/1887 | tty: n_gsm: Dont block input queue by waiting MSCdrivers/ | +24 | 0 replies | |
| 859/1887 | tcp_metrics: use dst_dev_net_rcu()net/ | +3 | 0 replies | |
| 860/1887 | f2fs: Use a folio in f2fs_truncate_partial_cluster()fs/ | +5 | 0 replies | |
| 861/1887 | f2fs: fix to avoid overflow while left shift operationfs/ | +1 | 0 replies | |
| 862/1887 | crypto: hisilicon/qm - request reserved interrupt for virtual functiondrivers/ | +32 | 0 replies | |
| 863/1887 | f2fs: fix to truncate first page in error path of f2fs_truncate()fs/ | +9 | 0 replies | |
| 864/1887 | ipv6: use RCU in ip6_output()net/ | +16 | 0 replies | |
| 865/1887 | xen/events: avoid using info_for_irq() in xen_send_IPI_one()drivers/ | +8 | 0 replies | |
| 866/1887 | xen/events: reduce externally visible helper functionsdrivers/ drivers/ drivers/ +1 more | +15 | 0 replies | |
| 867/1887 | xen/events: remove some simple helpers from events_base.cdrivers/ | +38 | 0 replies | |
| 868/1887 | xen/events: drop xen_allocate_irqs_dynamic()drivers/ | +44 | 0 replies | |
| 869/1887 | xen/events: modify internal [un]bind interfacesdrivers/ | +122 | 0 replies | |
| 870/1887 | xen/events: Return -EEXIST for bound VIRQsdrivers/ | +14 | 0 replies | |
| 871/1887 | net: use dst_dev_rcu() in sk_setup_caps()include/ include/ include/ +1 more | +22 | 0 replies | |
| 872/1887 | of: Move of_device_(add|register|unregister) to of_platform.hinclude/ include/ | +5 | 0 replies | |
| 873/1887 | of: Move of_device_get_match_data() declarationinclude/ include/ | +6 | 0 replies | |
| 874/1887 | mailbox: Explicitly include correct DT includesdrivers/ drivers/ drivers/ +13 more | +15 | 0 replies | |
| 875/1887 | mailbox: zynqmp-ipi: fix an Excess struct member kernel-doc warningdrivers/ | +0 | 0 replies | |
| 876/1887 | mailbox: zynqmp: Move of_match structure closer to usagedrivers/ | +6 | 0 replies | |
| 877/1887 | mailbox: zynqmp: Move buffered IPI setup to of_match selected routinedrivers/ | +87 | 0 replies | |
| 878/1887 | mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loopdrivers/ | +1 | 0 replies | |
| 879/1887 | cifs: client: fix memory leak in smb3_fs_context_parse_paramfs/ | +2 | 0 replies | |
| 880/1887 | drm/amdgpu: Show vram vendor only if availabledrivers/ | +16 | 0 replies | |
| 881/1887 | drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAMdrivers/ | +3 | 0 replies | |
| 882/1887 | accel/habanalabs: support mapping cb with vmalloc-backed coherent memorydrivers/ drivers/ | +26 | 0 replies | |
| 883/1887 | md/raid10: wait barrier before returning discard request with REQ_NOWAITdrivers/ | +1 | 0 replies | |
| 884/1887 | smb: client: fix potential UAF in smb2_close_cached_fid()fs/ | +9 | 0 replies | |
| 885/1887 | net: stmmac: Prevent DSA tags from breaking COEdrivers/ | +35 | 0 replies | |
| 886/1887 | net: stmmac: Correctly handle Rx checksum offload errorsdrivers/ | +2 | 0 replies | |
| 887/1887 | ASoC: Intel: avs: Do not share the name pointer between componentssound/ | +3 | 0 replies | |
| 888/1887 | ima: dont clear IMA_DIGSIG flag when setting or removing non-IMA xattrsecurity/ | +17 | 0 replies | |
| 889/1887 | tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()net/ | +4 | 0 replies | |
| 890/1887 | mlx5: Fix default values in create CQdrivers/ drivers/ drivers/ +4 more | +45 | 0 replies | |
| 891/1887 | cifs: fix memory leak in smb3_fs_context_parse_param error pathfs/ | +4 | 0 replies | |
| 892/1887 | scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)drivers/ | +12 | 0 replies | |
| 893/1887 | lan966x: Fix sleeping in atomic contextdrivers/ drivers/ drivers/ | +11 | 0 replies | |
| 894/1887 | scsi: imm: Fix use-after-free bug caused by unfinished delayed workdrivers/ | +1 | 0 replies | |
| 895/1887 | can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing datadrivers/ | +54 | 0 replies | |
| 896/1887 | bpf: Fix stackmap overflow check in __bpf_get_stackid()kernel/ | +10 | 0 replies | |
| 897/1887 | RDMA/rxe: Fix null deref on srq->rq.queue after resize failuredrivers/ | +1 | 0 replies | |
| 898/1887 | scsi: qla2xxx: Clear cmds after chip resetdrivers/ drivers/ drivers/ | +20 | 0 replies | |
| 899/1887 | staging: most: remove broken i2c driverdrivers/ drivers/ drivers/ +2 more | +0 | 0 replies | |
| 900/1887 | ksmbd: vfs: fix race on m_flags in vfs_cachefs/ | +61 | 0 replies | |
| 901/1887 | Input: alps - fix use-after-free bugs caused by dev3_register_workdrivers/ | +2 | 0 replies | |
| 902/1887 | svcrdma: bound check rq_pages index in inline pathnet/ | +3 | 0 replies | |
| 903/1887 | Input: lkkbd - disable pending work before freeing devicedrivers/ | +2 | 0 replies | |
| 904/1887 | usb: gadget: ffs: remove ENTER() macrodrivers/ drivers/ drivers/ | +0 | 0 replies | |
| 905/1887 | usb: gadget: Support already-mapped DMA SGsdrivers/ include/ | +8 | 0 replies | |
| 906/1887 | usb: gadget: functionfs: Factorize wait-for-endpoint codedrivers/ | +27 | 0 replies | |
| 907/1887 | functionfs, gadgetfs: use simple_recursive_removal()drivers/ drivers/ | +2 | 0 replies | |
| 908/1887 | functionfs: fix the open/removal racesdrivers/ | +44 | 0 replies | |
| 909/1887 | MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bitsarch/ | +21 | 0 replies | |
| 910/1887 | drm/msm/dpu: Add missing NULL pointer check for pingpong interfacedrivers/ | +4 | 0 replies | |
| 911/1887 | net: dsa: properly keep track of conduit referenceinclude/ net/ | +31 | 0 replies | |
| 912/1887 | btrfs: fix NULL dereference on root when tracing inode evictioninclude/ | +2 | 0 replies | |
| 913/1887 | phy: qcom-qusb2: Fix NULL pointer dereference on early suspenddrivers/ | +8 | 0 replies | |
| 914/1887 | iio: imu: st_lsm6dsx: fix LSM6DSV sensor descriptiondrivers/ | +7 | 0 replies | |
| 915/1887 | iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detectiondrivers/ | +9 | 0 replies | |
| 916/1887 | wifi: mac80211: dont WARN for connections on invalid channelsnet/ | +4 | 0 replies | |
| 917/1887 | wifi: rtw88: debugfs: support multiple adapters debuggingdrivers/ drivers/ drivers/ +1 more | +180 | 0 replies | |
| 918/1887 | wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()drivers/ | +6 | 0 replies | |
| 919/1887 | net: qrtr: Drop the MHI auto_queue feature for IPCR DL channelsdrivers/ drivers/ net/ | +55 | 0 replies | |
| 920/1887 | fs/ntfs3: handle attr_set_size() errors when truncating filesfs/ | +4 | 0 replies | |
| 921/1887 | PCI: endpoint: Add missing NULL check for alloc_workqueue()drivers/ drivers/ | +10 | 0 replies | |
| 922/1887 | staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error pathsdrivers/ | +17 | 0 replies | |
| 923/1887 | drm/msm: Recover HW before retire hung submitdrivers/ | +2 | 0 replies | |
| 924/1887 | dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()net/ net/ | +7 | 0 replies | |
| 925/1887 | pNFS: Fix a deadlock when returning a delegation during open()fs/ fs/ fs/ | +51 | 0 replies | |
| 926/1887 | rxrpc: Fix data-race warning and potential load/store tearingnet/ net/ net/ +3 more | +35 | 0 replies | |
| 927/1887 | of: unittest: Fix memory leak in unittest_data_add()drivers/ | +3 | 0 replies | |
| 928/1887 | tracing: Add recursion protection in kernel stack trace recordinginclude/ kernel/ | +15 | 0 replies | |
| 929/1887 | bonding: fix use-after-free due to enslave fail after slave array updatedrivers/ | +5 | 0 replies | |
| 930/1887 | spi: tegra210-quad: Protect curr_xfer check in IRQ handlerdrivers/ | +20 | 0 replies | |
| 931/1887 | ALSA: usb-audio: Prevent excessive number of framessound/ | +2 | 0 replies | |
| 932/1887 | drm/amd/pm: Disable MMIO access during SMU Mode 1 resetdrivers/ drivers/ | +10 | 0 replies | |
| 933/1887 | btrfs: reject new transactions if the fs is fully read-onlyfs/ fs/ | +19 | 0 replies | |
| 934/1887 | ksmbd: add chann_lock to protect ksmbd_chann_list xarrayfs/ fs/ fs/ | +17 | 0 replies | |
| 935/1887 | tcp: secure_seq: add back ports to TS offsetinclude/ include/ net/ +5 more | +128 | 0 replies | |
| 936/1887 | cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()drivers/ | +7 | 0 replies | |
| 937/1887 | nfc: nci: complete pending data exchange on device closenet/ | +9 | 0 replies | |
| 938/1887 | PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entrydrivers/ | +3 | 0 replies | |
| 939/1887 | sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boostingkernel/ | +28 | 0 replies | |
| 940/1887 | blktrace: fix __this_cpu_read/write in preemptible contextkernel/ | +1 | 0 replies | |
| 941/1887 | bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearingarch/ | +1 | 0 replies | |
| 942/1887 | net/rds: Fix circular locking dependency in rds_tcp_tunenet/ | +10 | 0 replies | |
| 943/1887 | btrfs: log new dentries when logging parent dir of a conflicting inodefs/ | +6 | 0 replies | |
| 944/1887 | serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWNdrivers/ | +4 | 0 replies | |
| 945/1887 | ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATIONfs/ | +7 | 0 replies | |
| 946/1887 | ksmbd: fix OOB write in QUERY_INFO for compound requestsfs/ fs/ fs/ | +134 | 0 replies | |
| 947/1887 | drm/amdgpu: Remove usage of the deprecated ida_simple_xx() APIdrivers/ | +3 | 0 replies | |
| 948/1887 | drm/amdgpu: prevent immediate PASID reuse casedrivers/ drivers/ drivers/ | +34 | 0 replies | |
| 949/1887 | hwmon: (pmbus/core) Protect regulator operations with mutexdrivers/ | +44 | 0 replies | |
| 950/1887 | team: fix header_ops type confusion with non-Ethernet portsdrivers/ | +72 | 0 replies | |
| 951/1887 | iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()drivers/ | +15 | 0 replies | |
| 952/1887 | nvmet: move async event work off nvmet-wqdrivers/ drivers/ drivers/ +1 more | +15 | 0 replies | |
| 953/1887 | spi: spi-dw-dma: fix print error log when wait finish transactiondrivers/ | +1 | 0 replies | |
| 954/1887 | s390/mm: Add missing secure storage access fixups for donated memoryarch/ | +9 | 0 replies | |
| 955/1887 | KVM: SEV: Use long-term pin when registering encrypted memory regionsarch/ | +8 | 0 replies | |
| 956/1887 | KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lockarch/ | +2 | 0 replies | |
| 957/1887 | usb: gadget: f_hid: dont call cdev_init while cdev in usedrivers/ | +12 | 0 replies | |
| 958/1887 | pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enableddrivers/ | +1 | 0 replies | |
| 959/1887 | xfrm: hold dev ref until after transport_finish NF_HOOKnet/ net/ net/ | +20 | 0 replies | |
| 960/1887 | net/sched: sch_netem: fix out-of-bounds access in packet corruptionnet/ | +3 | 0 replies | |
| 961/1887 | crypto: af_alg - limit RX SG extraction by receive buffer budgetcrypto/ crypto/ | +9 | 0 replies | |
| 962/1887 | ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()fs/ | +23 | 0 replies | |
| 963/1887 | ksmbd: validate response sizes in ipc_validate_msg()fs/ | +4 | 0 replies | |
| 964/1887 | usb: gadget: f_rndis: Fix net_device lifecycle with device_movedrivers/ drivers/ | +48 | 0 replies | |
| 965/1887 | usb: gadget: f_subset: Fix net_device lifecycle with device_movedrivers/ drivers/ | +44 | 0 replies | |
| 966/1887 | usb: gadget: f_eem: Fix net_device lifecycle with device_movedrivers/ drivers/ | +46 | 0 replies | |
| 967/1887 | usb: gadget: f_ecm: Fix net_device lifecycle with device_movedrivers/ drivers/ | +39 | 0 replies | |
| 968/1887 | drm/i915/dsi: Dont do DSC horizontal timing adjustments in command modedrivers/ | +2 | 0 replies | |
| 969/1887 | Bluetooth: hci_event: move wake reason storage into validated event handlersnet/ | +34 | 0 replies | |
| 970/1887 | bpf: Fix incorrect pruning due to atomic fetch precision trackingkernel/ | +26 | 0 replies | |
| 971/1887 | bpf: Reject sleepable kprobe_multi programs at attach timekernel/ | +4 | 0 replies | |
| 972/1887 | bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().net/ | +10 | 0 replies | |
| 973/1887 | Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if existsnet/ | +6 | 0 replies | |
| 974/1887 | net: use skb_header_pointer() for TCPv4 GSO frag_off checknet/ | +8 | 0 replies | |
| 975/1887 | mpls: add seqcount to protect the platform_label{,s} pairinclude/ net/ | +31 | 0 replies | |
| 976/1887 | HID: core: Add reserved item tag for main itemsdrivers/ include/ | +7 | 0 replies | |
| 977/1887 | HID: rate-limit hid_warn to prevent log floodingdrivers/ include/ | +4 | 0 replies | |
| 978/1887 | HID: core: Mitigate potential OOB by removing bogus memset()drivers/ | +3 | 0 replies | |
| 979/1887 | HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failuredrivers/ | +3 | 0 replies | |
| 980/1887 | net: ioam6: fix OOB and missing locknet/ | +5 | 0 replies | |
| 981/1887 | xfrm: Wait for RCU readers during policy netns exitnet/ | +2 | 0 replies | |
| 982/1887 | ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()net/ | +16 | 0 replies | |
| 983/1887 | xfrm: account XFRMA_IF_ID in aevent size calculationnet/ | +8 | 0 replies | |
| 984/1887 | btrfs: fix zero size inode with non-zero size after log replayfs/ | +65 | 0 replies | |
| 985/1887 | Bluetooth: hci_sync: annotate data-races around hdev->req_statusnet/ net/ | +11 | 0 replies | |
| 986/1887 | ALSA: mixer: oss: Add card disconnect checkpointssound/ | +32 | 0 replies | |
| 987/1887 | ima: verify the previous kernels IMA buffer lies in addressable RAMinclude/ security/ | +36 | 0 replies | |
| 988/1887 | xfs: remove xfs_attr_leaf_hasnamefs/ | +23 | 0 replies | |
| 989/1887 | xfrm: always flush state and policy upon NETDEV_UNREGISTER eventnet/ | +10 | 0 replies | |
| 990/1887 | usb: dwc3: gadget: Move vbus draw to workqueue contextdrivers/ drivers/ drivers/ | +25 | 0 replies | |
| 991/1887 | ksmbd: fix signededness bug in smb_direct_prepare_negotiation()fs/ | +2 | 0 replies | |
| 992/1887 | ASoC: qcom: q6asm: handle the responses after closingsound/ | +5 | 0 replies | |
| 993/1887 | ASoC: qcom: q6asm: drop DSP responses for closed data streamssound/ | +2 | 0 replies | |
| 994/1887 | wifi: rtw89: pci: validate sequence number of TX release reportdrivers/ | +6 | 0 replies | |
| 995/1887 | cifs: Fix locking usage for tcon fieldsfs/ fs/ fs/ | +8 | 0 replies | |
| 996/1887 | team: avoid NETDEV_CHANGEMTU event when unregistering slavedrivers/ | +15 | 0 replies | |
| 997/1887 | smb: client: prevent races in ->query_interfaces()fs/ | +8 | 0 replies | |
| 998/1887 | kcm: fix zero-frag skb in frag_list on partial sendmsg errornet/ | +19 | 0 replies | |
| 999/1887 | vhost: move vdpa group bound check to vhost_vdpadrivers/ drivers/ drivers/ | +1 | 0 replies | |
| 1000/1887 | 9p/xen: protect xen_9pfs_front_free against concurrent callsnet/ | +44 | 0 replies | |
| 1001/1887 | usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()drivers/ | +4 | 0 replies | |
| 1002/1887 | iommu/amd: move wait_on_sem() out of spinlockdrivers/ | +9 | 0 replies | |
| 1003/1887 | arch: turn off -Werror for architectures with known warningsarch/ arch/ arch/ +4 more | +0 | 0 replies | |
| 1004/1887 | alpha: fix user-space corruption during memory compactionarch/ arch/ arch/ +1 more | +148 | 0 replies | |
| 1005/1887 | md-cluster: fix NULL pointer dereference in process_metadata_updatedrivers/ | +10 | 0 replies | |
| 1006/1887 | btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()fs/ | +7 | 0 replies | |
| 1007/1887 | btrfs: dont BUG() on unexpected delayed ref type in run_one_delayed_ref()fs/ | +10 | 0 replies | |
| 1008/1887 | media: hantro: Disable multicore supportdrivers/ | +47 | 0 replies | |
| 1009/1887 | media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structuredrivers/ include/ | +44 | 0 replies | |
| 1010/1887 | media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVCdrivers/ drivers/ drivers/ | +49 | 0 replies | |
| 1011/1887 | btrfs: reserve enough transaction items for qgroup ioctlsfs/ | +9 | 0 replies | |
| 1012/1887 | perf/x86/intel/uncore: Fix die ID init and look up bugsarch/ | +0 | 0 replies | |
| 1013/1887 | i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeuedrivers/ | +17 | 0 replies | |
| 1014/1887 | i3c: mipi-i3c-hci: Fix race in DMA ring dequeuedrivers/ drivers/ drivers/ | +5 | 0 replies | |
| 1015/1887 | scsi: qla2xxx: Completely fix fcport double freedrivers/ | +0 | 0 replies | |
| 1016/1887 | ceph: fix memory leaks in ceph_mdsc_build_path()fs/ | +1 | 0 replies | |
| 1017/1887 | ASoC: amd: acp: Add setbias level for rt5682s codec in machine driversound/ | +56 | 0 replies | |
| 1018/1887 | ASoC: amd: acp: Refactor dai format implementationsound/ | +122 | 0 replies | |
| 1019/1887 | ASoC: amd: acp: Refactor i2s clocks programming sequencesound/ | +94 | 0 replies | |
| 1020/1887 | ASoC: amd: acp-mach-common: Add missing error check for clock acquisitionsound/ | +14 | 0 replies | |
| 1021/1887 | bonding: fix type confusion in bond_setup_by_slave()drivers/ | +46 | 0 replies | |
| 1022/1887 | ksmbd: validate inherited ACE SID lengthfs/ | +52 | 0 replies | |
| 1023/1887 | ata: libata-scsi: avoid Non-NCQ command starvationdrivers/ drivers/ drivers/ +2 more | +109 | 0 replies | |
| 1024/1887 | HID: Intel-ish-hid: Ishtp: Fix sensor reads after ACPI S3 suspenddrivers/ drivers/ | +5 | 0 replies | |
| 1025/1887 | HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clientsdrivers/ | +1 | 0 replies | |
| 1026/1887 | apparmor: Fix & Optimize table creation from possibly unaligned memorysecurity/ security/ | +11 | 0 replies | |
| 1027/1887 | iommu/vt-d: Clear Present bit before tearing down PASID entrydrivers/ | +20 | 0 replies | |
| 1028/1887 | ext4: drop extent cache when splitting extent failsfs/ | +6 | 0 replies | |
| 1029/1887 | ipvs: do not keep dest_dst if dev is going downnet/ | +36 | 0 replies | |
| 1030/1887 | btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocationfs/ | +183 | 0 replies | |
| 1031/1887 | net: stmmac: fix oops when split header is enableddrivers/ | +17 | 0 replies | |
| 1032/1887 | ext4: remove unnecessary e4b->bd_buddy_page check in ext4_mb_load_buddy_gfpfs/ | +1 | 0 replies | |
| 1033/1887 | ext4: convert some BUG_ONs in mballoc to use WARN_RATELIMITED insteadfs/ | +19 | 0 replies | |
| 1034/1887 | ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock()fs/ | +2 | 0 replies | |
| 1035/1887 | ext4: convert bd_bitmap_page to bd_bitmap_foliofs/ fs/ | +52 | 0 replies | |
| 1036/1887 | ext4: convert bd_buddy_page to bd_buddy_foliofs/ fs/ | +46 | 0 replies | |
| 1037/1887 | ext4: fix e4b bitmap inconsistency reportsfs/ | +11 | 0 replies | |
| 1038/1887 | iommu/vt-d: Clear Present bit before tearing down context entrydrivers/ | +24 | 0 replies | |
| 1039/1887 | hwrng: core - use RCU and work_struct to fix race conditiondrivers/ include/ | +100 | 0 replies | |
| 1040/1887 | rcu: Fix rcu_read_unlock() deadloop due to softirqkernel/ kernel/ | +10 | 0 replies | |
| 1041/1887 | gfs2: fix memory leaks in gfs2_fill_super error pathfs/ fs/ | +9 | 0 replies | |
| 1042/1887 | ext4: dont set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/Ofs/ | +8 | 0 replies | |
| 1043/1887 | rxrpc: Fix conn-level packet handling to unshare RESPONSE packetsnet/ | +29 | 0 replies | |
| 1044/1887 | rxrpc: Fix memory leaks in rxkad_verify_response()net/ | +1 | 0 replies | |
| 1045/1887 | KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXITarch/ | +2 | 0 replies | |
| 1046/1887 | KVM: nSVM: Always use NextRIP as vmcb02s NextRIP after first L2 VMRUNarch/ | +16 | 0 replies | |
| 1047/1887 | KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12arch/ arch/ | +9 | 0 replies | |
| 1048/1887 | spi: microchip-core-qspi: control built-in cs manuallydrivers/ | +65 | 0 replies | |
| 1049/1887 | ALSA: pcm: oss: Fix data race at accessing runtime.oss.triggersound/ | +23 | 0 replies | |
| 1050/1887 | RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()drivers/ | +8 | 0 replies | |
| 1051/1887 | spi: mpc52xx: Convert to platform remove callback returning voiddrivers/ | +2 | 0 replies | |
| 1052/1887 | spi: mpc52xx: switch to use modern namedrivers/ | +28 | 0 replies | |
| 1053/1887 | spi: mpc52xx: fix controller deregistrationdrivers/ | +2 | 0 replies | |
| 1054/1887 | drm/amdgpu: limit AV1 to the first instance on VCN4 encodedrivers/ | +46 | 0 replies | |
| 1055/1887 | drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packagesdrivers/ | +21 | 0 replies | |
| 1056/1887 | drm/amdgpu/vcn4: Prevent OOB reads when parsing IBdrivers/ | +12 | 0 replies | |
| 1057/1887 | spi: rspi: Convert to platform remove callback returning voiddrivers/ | +2 | 0 replies | |
| 1058/1887 | spi: rspi: fix controller deregistrationdrivers/ | +8 | 0 replies | |
| 1059/1887 | spi: fsl-spi: Convert to platform remove callback returning voiddrivers/ | +4 | 0 replies | |
| 1060/1887 | spi: fsl-spi: switch to use modern namedrivers/ | +38 | 0 replies | |
| 1061/1887 | spi: fsl: fix controller deregistrationdrivers/ | +13 | 0 replies | |
| 1062/1887 | drm/amdkfd: Clear VRAM on allocation to prevent stale data exposuredrivers/ | +2 | 0 replies | |
| 1063/1887 | spi: mpc52xx: fix use-after-free on registration failuredrivers/ | +3 | 0 replies | |
| 1064/1887 | AppArmor: Allow apparmor to handle unaligned dfa tablessecurity/ | +7 | 0 replies | |
| 1065/1887 | selinux: allow multiple opens of /sys/fs/selinux/policysecurity/ | +4 | 0 replies | |
| 1066/1887 | media: videobuf2: Set vma_flags in vb2_dma_sg_mmapdrivers/ | +1 | 0 replies | |
| 1067/1887 | netfilter: nf_tables: use list_del_rcu for netlink hooksnet/ | +2 | 0 replies | |
| 1068/1887 | Revert "net/smc: Introduce TCP ULP support"net/ | +17 | 0 replies | |
| 1069/1887 | crypto: jitter - replace LFSR with SHA3-256crypto/ crypto/ crypto/ +1 more | +219 | 3 replies | |
| 1070/1887 | crypto: jitterentropy - replace long-held spinlock with mutexcrypto/ | +7 | 0 replies | |
| 1071/1887 | tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDRdrivers/ | +1 | 0 replies | |
| 1072/1887 | libceph: Fix potential out-of-bounds access in __ceph_x_decrypt()net/ | +5 | 0 replies | |
| 1073/1887 | ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob sizefs/ | +16 | 0 replies | |
| 1074/1887 | fsnotify: fix inode reference leak in fsnotify_recalc_mask()fs/ | +36 | 0 replies | |
| 1075/1887 | sched/psi: fix race between file release and pressure writekernel/ | +16 | 0 replies | |
| 1076/1887 | netfilter: nat: use kfree_rcu to release opsinclude/ net/ net/ +1 more | +12 | 0 replies | |
| 1077/1887 | ice: fix double-free of tx_buf skbdrivers/ | +4 | 0 replies | |
| 1078/1887 | erofs: unify lcn as u64 for 32-bit platformsfs/ | +9 | 0 replies | |
| 1079/1887 | f2fs: fix data loss caused by incorrect use of nat_entry flagfs/ | +2 | 0 replies | |
| 1080/1887 | f2fs: avoid reading already updated pages during GCfs/ | +4 | 0 replies | |
| 1081/1887 | greybus: raw: fix use-after-free on cdev closedrivers/ | +33 | 0 replies | |
| 1082/1887 | fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()fs/ | +16 | 0 replies | |
| 1083/1887 | iommu/amd: Fix clone_alias() to use the original devices deviddrivers/ | +4 | 0 replies | |
| 1084/1887 | sctp: disable BH before calling udp_tunnel_xmit_skb()net/ net/ | +9 | 0 replies | |
| 1085/1887 | bpf: Fix OOB in pcpu_init_valuekernel/ | +2 | 0 replies | |
| 1086/1887 | bpf: Fix RCU stall in bpf_fd_array_map_clear()kernel/ | +3 | 0 replies | |
| 1087/1887 | wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req()drivers/ | +3 | 0 replies | |
| 1088/1887 | powerpc/64s: Fix unmap race with PMD migration entriesarch/ arch/ | +25 | 0 replies | |
| 1089/1887 | btrfs: fix deadlock between reflink and transaction commit when using flushoncommitfs/ | +53 | 0 replies | |
| 1090/1887 | fs/mbcache: cancel shrink work before destroying the cachefs/ | +1 | 0 replies | |
| 1091/1887 | sctp: validate embedded INIT chunk and address list lengths in cookienet/ net/ | +21 | 0 replies | |
| 1092/1887 | net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failuredrivers/ | +5 | 0 replies | |
| 1093/1887 | net/mlx5: Add generic getters for other functions capsdrivers/ drivers/ drivers/ +2 more | +11 | 0 replies | |
| 1094/1887 | net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_listdrivers/ drivers/ include/ | +59 | 0 replies | |
| 1095/1887 | net: phy: clean the sfp upstream if phy probing failsdrivers/ | +6 | 0 replies | |
| 1096/1887 | gpio: mvebu: Use IS_REACHABLE instead of IS_ENABLED for CONFIG_PWMdrivers/ | +3 | 0 replies | |
| 1097/1887 | gpio: mvebu: fix NULL pointer dereference in suspend/resumedrivers/ | +2 | 0 replies | |
| 1098/1887 | wifi: fix leak if split 6 GHz scanning failsnet/ | +8 | 0 replies | |
| 1099/1887 | l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()net/ | +50 | 0 replies | |
| 1100/1887 | netfilter: nft_ct: bail out on template ct in get evalnet/ | +3 | 0 replies | |
| 1101/1887 | erofs: fix use-after-free on sbi->sync_decompressfs/ | +1 | 0 replies | |
| 1102/1887 | btrfs: only release the dirty pages io tree after successful writesfs/ fs/ | +5 | 0 replies | |
| 1103/1887 | net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bindnet/ | +8 | 0 replies | |
| 1104/1887 | net: mana: Guard mana_remove against double invocationdrivers/ | +6 | 0 replies | |
| 1105/1887 | drm/amd/display: Add interface to enable DPIA tracedrivers/ drivers/ drivers/ | +50 | 0 replies | |
| 1106/1887 | drm/amd/display: Avoid NULL dereference in dc_dmub_srv error pathsdrivers/ | +8 | 0 replies | |
| 1107/1887 | wifi: mt76: mt7921: Place upper limit on station AIDdrivers/ drivers/ | +8 | 0 replies | |
| 1108/1887 | drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()drivers/ | +1 | 0 replies | |
| 1109/1887 | KVM: Dont WARN if memory is dirtied without a vCPU when the VM is dyingvirt/ | +2 | 0 replies | |
| 1110/1887 | f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usagefs/ | +5 | 0 replies | |
| 1111/1887 | drm/amdkfd: Add upper bound check for num_of_nodesdrivers/ drivers/ drivers/ | +15 | 0 replies | |
| 1112/1887 | drm/msm: always recover the gpudrivers/ | +14 | 0 replies | |
| 1113/1887 | fbdev: omap2: fix inconsistent lock returns in omapfb_mmapdrivers/ | +1 | 0 replies | |
| 1114/1887 | fbdev: omap2: fix use-after-free in omapfb_mmapdrivers/ | +8 | 0 replies | |
| 1115/1887 | gcov: use atomic counter updates to fix concurrent access crashesMakefile | +21 | 0 replies | |
| 1116/1887 | fbdev: fix use-after-free in store_modes()drivers/ | +8 | 0 replies | |
| 1117/1887 | drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ringdrivers/ | +1 | 0 replies | |
| 1118/1887 | drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ringdrivers/ | +1 | 0 replies | |
| 1119/1887 | drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ringdrivers/ | +2 | 0 replies | |
| 1120/1887 | drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ringdrivers/ | +1 | 0 replies | |
| 1121/1887 | drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ringdrivers/ | +1 | 0 replies | |
| 1122/1887 | drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec ringsdrivers/ | +3 | 0 replies | |
| 1123/1887 | drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec ringsdrivers/ | +4 | 0 replies | |
| 1124/1887 | drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec ringsdrivers/ | +2 | 0 replies | |
| 1125/1887 | Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route callsnet/ | +20 | 0 replies | |
| 1126/1887 | KVM: SEV: Ignore Port I/O requests of length 0arch/ | +8 | 0 replies | |
| 1127/1887 | usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNTdrivers/ | +9 | 0 replies | |
| 1128/1887 | usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()drivers/ | +4 | 0 replies | |
| 1129/1887 | usb: typec: tcpm: validate VDO count in Discover Identity ACK handlersdrivers/ | +3 | 0 replies | |
| 1130/1887 | Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device closenet/ | +8 | 0 replies | |
| 1131/1887 | netfilter: nf_tables: Extend nft_expr_ops::dump callback parametersinclude/ include/ include/ +41 more | +108 | 2 replies | |
| 1132/1887 | netfilter: nf_tables: fix dst corruption in same register operationinclude/ net/ net/ | +28 | 0 replies | |
| 1133/1887 | blk-mq: pop cached request if it is usableblock/ | +13 | 0 replies | |
| 1134/1887 | bpf, skmsg: fix verdict sk_data_ready racing with ktls rxnet/ | +7 | 0 replies | |
| 1135/1887 | hwmon: (lm90) Stop work before releasing hwmon devicedrivers/ | +20 | 0 replies | |
| 1136/1887 | netfilter: bridge: eb_tables: close module init racenet/ | +6 | 0 replies | |
| 1137/1887 | netfilter: ebtables: move to two-stage removal schemenet/ net/ net/ +1 more | +40 | 0 replies | |
| 1138/1887 | ksmbd: validate SID in parent security descriptor during ACL inheritancefs/ | +50 | 0 replies | |
| 1139/1887 | Bluetooth: btmtk: fix urb->setup_packet leak in error pathsdrivers/ | +2 | 0 replies | |
| 1140/1887 | erofs: fix metabuf leak in inode xattr initializationfs/ | +2 | 0 replies | |
| 1141/1887 | test_kprobes: clear kprobes between test runslib/ | +17 | 0 replies | |
| 1142/1887 | hwmon: (lm90) Add lock protection to lm90_alertdrivers/ | +2 | 0 replies | |
| 1143/1887 | crypto: qat - protect service table iterations with service_lockdrivers/ | +14 | 0 replies | |
| 1144/1887 | nvmet: return DHCHAP status codes from nvmet_setup_auth()drivers/ drivers/ drivers/ +1 more | +43 | 0 replies | |
| 1145/1887 | nvmet-auth: validate reply message payload bounds against transfer lengthdrivers/ | +12 | 0 replies | |
| 1146/1887 | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Pagedrivers/ | +22 | 0 replies | |
| 1147/1887 | USB: iowarrior: fix use-after-free on disconnect racedrivers/ | +24 | 0 replies | |
| 1148/1887 | usb: gadget: function: Simplify diagnostic messaging in printerdrivers/ | +1 | 0 replies | |
| 1149/1887 | usb: gadget: f_printer: take kref only for successful opendrivers/ | +1 | 0 replies | |
| 1150/1887 | usb: free iso schedules on failed submitdrivers/ drivers/ | +13 | 0 replies | |
| 1151/1887 | smb/client: fix chown/chgrp with SMB3 POSIX Extensionsfs/ | +2 | 0 replies | |
| 1152/1887 | ksmbd: validate NTLMv2 response before updating session keyfs/ | +16 | 0 replies | |
| 1153/1887 | ksmbd: use opener credentials for ADS I/Ofs/ | +9 | 0 replies | |
| 1154/1887 | ksmbd: use opener credentials for delete-on-closefs/ fs/ | +9 | 0 replies | |
| 1155/1887 | ksmbd: prevent path traversal bypass by restricting caseless retryfs/ | +2 | 0 replies | |
| 1156/1887 | netpoll: fix a use-after-free on shutdown pathnet/ | +2 | 0 replies | |
| 1157/1887 | usb: typec: tcpci_rt1711h: unregister TCPCI port with devresdrivers/ | +8 | 0 replies | |
| 1158/1887 | ALSA: hda/cs35l41: Fix firmware load work teardownsound/ sound/ | +61 | 0 replies | |
| 1159/1887 | perf/core: Detach event groups during remove_on_execkernel/ | +7 | 0 replies | |
| 1160/1887 | KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest statearch/ | +5 | 0 replies | |
| 1161/1887 | ksmbd: fix path resolution in ksmbd_vfs_kern_path_createfs/ fs/ fs/ | +41 | 0 replies | |
| 1162/1887 | ksmbd: bound DACL dedup walk to copied ACEsfs/ | +10 | 0 replies | |
| 1163/1887 | drm/amdgpu: fix aperture mapping leakdrivers/ drivers/ | +15 | 0 replies | |
| 1164/1887 | tcp: challenge ACK for non-exact RST in SYN-RECEIVEDinclude/ net/ net/ | +56 | 0 replies | |
| 1165/1887 | media: vivid: fix cleanup bugs in vivid_init()drivers/ | +3 | 0 replies | |
| 1166/1887 | drm/vc4: Shut down BO cache timer before teardowndrivers/ | +1 | 0 replies | |
| 1167/1887 | drm/amd/amdgpu: Fix errors & warnings in amdgpu _bios, _cs, _dma_buf, _fence.cdrivers/ drivers/ drivers/ +1 more | +24 | 0 replies | |
| 1168/1887 | drm/amdgpu: Use dbg level for VBIOS check messagesdrivers/ | +14 | 0 replies | |
| 1169/1887 | drm/amdgpu: Add wrapper for freeing vbios memorydrivers/ drivers/ drivers/ | +16 | 0 replies | |
| 1170/1887 | drm/amdgpu: Release VFCT ACPI table referencedrivers/ | +11 | 0 replies | |
| 1171/1887 | drm/i915/mst: limit DP MST ESI service loopdrivers/ | +7 | 0 replies | |
| 1172/1887 | drm/i915/gt: Fix NULL deref on sched_engine alloc failuredrivers/ | +10 | 0 replies | |
| 1173/1887 | drm/i915/bios: range check LFP Data Block panel_type2drivers/ | +28 | 0 replies | |
| 1174/1887 | drm/amdkfd: Check bounds on CRIU restore queue type and mqd sizedrivers/ drivers/ drivers/ +1 more | +26 | 0 replies | |
| 1175/1887 | drm/amdgpu: keep amdgpu_ctx_mgr in ctx structuredrivers/ drivers/ | +3 | 0 replies | |
| 1176/1887 | drm/amdgpu: Fix context pstate override handlingdrivers/ | +42 | 0 replies | |
| 1177/1887 | net/mlx5: Fix MCIA register buffer overflow on 32 dword readsdrivers/ include/ | +3 | 0 replies | |
| 1178/1887 | drm/vc4: hvs/v3d: Fix null dereference in unbinddrivers/ drivers/ | +2 | 0 replies | |
| 1179/1887 | cifs: prevent readdir from changing file size due to stale directory metadatafs/ fs/ fs/ +2 more | +46 | 0 replies | |
| 1180/1887 | cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain pathsfs/ | +39 | 0 replies | |
| 1181/1887 | tipc: serialize udp bearer replicast list updatesnet/ | +27 | 0 replies | |
| 1182/1887 | iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()drivers/ | +16 | 0 replies | |
| 1183/1887 | scsi: core: wake eh reliably when using scsi_schedule_ehdrivers/ drivers/ drivers/ +1 more | +27 | 0 replies | |
| 1184/1887 | bpf: Fix UAF in sock clone early bailoutsnet/ net/ | +3 | 0 replies | |
| 1185/1887 | firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()drivers/ | +2 | 0 replies | |
| 1186/1887 | wifi: cfg80211: use wiphy work for socket owner autodisconnectinclude/ net/ net/ +2 more | +10 | 0 replies | |
| 1187/1887 | wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlockinclude/ net/ net/ +1 more | +7 | 0 replies | |
| 1188/1887 | wifi: mac80211: refactor populating mesh related fields in sinfonet/ | +35 | 0 replies | |
| 1189/1887 | wifi: cfg80211: add link_station_info structure to support MLO statisticsinclude/ | +101 | 0 replies | |
| 1190/1887 | wifi: mac80211: defer link RX stats percpu free to RCUnet/ | +11 | 0 replies | |
| 1191/1887 | RDMA/irdma: Prevent user-triggered null deref on QP createdrivers/ | +10 | 0 replies | |
| 1192/1887 | xfrm: fix stale skb->prev after async crypto steals a GSO segmentnet/ | +8 | 0 replies | |
| 1193/1887 | LoongArch: Fix address space mismatch in kexec command line lookuparch/ | +4 | 0 replies | |
| 1194/1887 | net/sched: Handle TC_ACT_REDIRECT from qdisc filter chainsinclude/ net/ net/ +10 more | +25 | 0 replies | |
| 1195/1887 | drm/vc4: Prevent shader BO mappings from becoming writabledrivers/ | +7 | 0 replies | |
| 1196/1887 | ovl: check access to copy_file_range source with src mounter credsfs/ | +18 | 0 replies | |
| 1197/1887 | ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanningdrivers/ | +2 | 0 replies | |
| 1198/1887 | s390/zcrypt: Fix buffer over-read in cca_cipher2protkeydrivers/ drivers/ drivers/ | +65 | 0 replies | |
| 1199/1887 | wifi: ieee80211: validate MLE common info lengthinclude/ | +4 | 0 replies | |
| 1200/1887 | pmdomain: imx: Fix i.MX8MP VC8000E power up sequencedrivers/ | +18 | 0 replies | |
| 1201/1887 | pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSIdrivers/ | +47 | 0 replies | |
| 1202/1887 | riscv: probes: save original sp in rethook trampolinearch/ | +3 | 0 replies | |
| 1203/1887 | dm-verity: fix buffer overflow in FEC calculationdrivers/ | +2 | 0 replies | |
| 1204/1887 | dm ioctl: a small code cleanup in list_version_get_infodrivers/ | +1 | 0 replies | |
| 1205/1887 | dm: avoid spaces before function arguments or in favour of tabsdrivers/ drivers/ drivers/ +11 more | +84 | 0 replies | |
| 1206/1887 | dm-ioctl: fix a possible overflow in list_version_get_infodrivers/ | +1 | 0 replies | |
| 1207/1887 | nvmet: Introduce nvmet_req_transfer_len()drivers/ drivers/ drivers/ +3 more | +135 | 0 replies | |
| 1208/1887 | nvmet-auth: reject short AUTH_RECEIVE buffersdrivers/ | +25 | 0 replies | |
| 1209/1887 | ACPI: battery: Pass battery hook pointer to hook callbacksdrivers/ drivers/ drivers/ +5 more | +18 | 0 replies | |
| 1210/1887 | platform/x86: dell-smbios: Move request functions for reusedrivers/ drivers/ drivers/ | +30 | 0 replies | |
| 1211/1887 | platform/x86: dell-laptop: fix missing cleanups in init error pathdrivers/ | +5 | 0 replies | |
| 1212/1887 | dmaengine: dw-edma-pcie: Reject devices without driver datadrivers/ | +3 | 0 replies | |
| 1213/1887 | ocfs2: correct l_next_free_rec in online checkfs/ | +24 | 0 replies | |
| 1214/1887 | ocfs2: add suballoc slot check in ocfs2_validate_inode_block()fs/ | +8 | 0 replies | |
| 1215/1887 | ocfs2: add extra consistency checks for chain allocator dinodesfs/ | +17 | 0 replies | |
| 1216/1887 | ocfs2: validate i_refcount_loc when refcount flag is setfs/ | +7 | 0 replies | |
| 1217/1887 | ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_recfs/ | +32 | 0 replies | |
| 1218/1887 | mtd: maps: vmu-flash: fix fault in unaligned fixupdrivers/ | +5 | 0 replies | |
| 1219/1887 | fs: Remove NTFS classicCREDITS Documentation/ Documentation/ +49 more | +5 | 0 replies | |
| 1220/1887 | mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatchmm/ | +5 | 0 replies | |
| 1221/1887 | netfilter: nft_fib: reject fib expression on the netdev egress hooknet/ net/ | +37 | 0 replies | |
| 1222/1887 | netfilter: nft_lookup: fix catchall element handling with inverted lookupsnet/ | +8 | 0 replies | |
| 1223/1887 | ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()net/ | +12 | 0 replies | |
| 1224/1887 | perf/x86/amd/core: Avoid enabling BRS from the SVM reload patharch/ | +8 | 0 replies | |
| 1225/1887 | net/liquidio: drop cached VF pci_dev LUTdrivers/ drivers/ drivers/ | +32 | 0 replies | |
| 1226/1887 | Bluetooth: 6lowpan: avoid untracked enable worknet/ | +4 | 0 replies | |
| 1227/1887 | net/sched: act_pedit: fix TOCTOU heap OOB write in tc offloadinclude/ net/ net/ +1 more | +44 | 0 replies | |
| 1228/1887 | net/mlx5e: Fix publication race for priv->channel_stats[]drivers/ drivers/ drivers/ +2 more | +28 | 0 replies | |
| 1229/1887 | afs: Fix reinitialisation of the inode, in particular ->lock_workfs/ fs/ | +2 | 0 replies | |
| 1230/1887 | fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgidfs/ | +4 | 0 replies | |
| 1231/1887 | xen/pvcalls: bound backend response req_id before indexing rsp[]drivers/ | +76 | 0 replies | |
| 1232/1887 | ksmbd: reject undersized DACLs before parsing ACEsfs/ | +6 | 0 replies | |
| 1233/1887 | sctp: fix addr_wq_timer race in sctp_free_addr_wq()net/ | +2 | 0 replies | |
| 1234/1887 | sctp: add INIT verification after cookie unpackingnet/ net/ | +37 | 0 replies | |
| 1235/1887 | tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()net/ | +11 | 0 replies | |
| 1236/1887 | net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_syncnet/ | +1 | 0 replies | |
| 1237/1887 | netfilter: nft_compat: ebtables emulation must reject non-bridge targetsnet/ | +21 | 0 replies | |
| 1238/1887 | md/raid5: avoid R5_Overlap races while breaking stripe batchesdrivers/ | +7 | 0 replies | |
| 1239/1887 | bpf: Guard conntrack opts error writesnet/ | +13 | 0 replies | |
| 1240/1887 | md/raid10: fix writes_pending and barrier reference leaks on discard failuresdrivers/ | +1 | 0 replies | |
| 1241/1887 | md/raid10: Handle bio_split() errorsdrivers/ | +46 | 0 replies | |
| 1242/1887 | md/raid10: fix writes_pending leak on write request failuresdrivers/ | +15 | 0 replies | |
| 1243/1887 | md/raid1: fix writes_pending and barrier reference leaks on write failuresdrivers/ | +7 | 0 replies | |
| 1244/1887 | nfs: use nfsi->rwsem to protect traversal of the file lock listfs/ fs/ include/ | +19 | 0 replies | |
| 1245/1887 | soundwire: fix bug in sdw_add_element_group_count found by syzkallerdrivers/ | +14 | 0 replies | |
| 1246/1887 | RDMA/irdma: Replace waitqueue and flag with completiondrivers/ drivers/ drivers/ | +9 | 0 replies | |
| 1247/1887 | sockmap: Fix use-after-free in udp_bpf_recvmsg()net/ | +9 | 0 replies | |
| 1248/1887 | ALSA: seq: fifo: Use guard() for lockingsound/ | +24 | 0 replies | |
| 1249/1887 | ALSA: seq: Clean up fifo locking with guardsound/ sound/ sound/ | +6 | 0 replies | |
| 1250/1887 | ALSA: seq: avoid stale FIFO cells during resizesound/ | +37 | 0 replies | |
| 1251/1887 | bnxt: fix head underflow on XDP head-growdrivers/ drivers/ | +9 | 0 replies | |
| 1252/1887 | ALSA: seq: Drop superfluous filter argument of get_event_dest_client()sound/ | +7 | 0 replies | |
| 1253/1887 | ALSA: seq: Fix kernel heap address leak in bounce_error_event()sound/ | +27 | 0 replies | |
| 1254/1887 | ASoC: topology: Check PCM and DAI name strings before usesound/ | +34 | 0 replies | |
| 1255/1887 | ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXTfs/ | +5 | 0 replies | |
| 1256/1887 | ext4: fix kernel BUG in ext4_write_inline_data_endfs/ | +2 | 0 replies | |
| 1257/1887 | ixgbe: do not configure xps for XDP queuesdrivers/ | +2 | 0 replies | |
| 1258/1887 | btrfs: fix deadlock cloning inline extent when using flushoncommitfs/ | +57 | 0 replies | |
| 1259/1887 | RDMA/siw: Introduce siw_destroy_cep_sockdrivers/ | +12 | 0 replies | |
| 1260/1887 | RDMA/siw: Fix endpoint/socket association handlingdrivers/ | +15 | 0 replies | |
| 1261/1887 | netfilter: cttimeout: detach dataplane timeout policy and repurpose refcountinclude/ net/ net/ +3 more | +107 | 0 replies | |
| 1262/1887 | ocfs2: validate fast symlink target during inode readfs/ | +23 | 0 replies | |
| 1263/1887 | vhost: correct misleading printing informationdrivers/ | +1 | 0 replies | |
| 1264/1887 | vhost: move smp_rmb() into vhost_get_avail_idx()drivers/ | +42 | 0 replies | |
| 1265/1887 | vhost: fix vhost_get_avail_idx for a non empty ringdrivers/ | +7 | 0 replies | |
| 1266/1887 | nvmet-tcp: fix page fragment cache leak in error pathdrivers/ | +8 | 0 replies | |
| 1267/1887 | ALSA: seq: oss: Fix UAF at handling events with embedded SysEx datasound/ sound/ sound/ +3 more | +19 | 0 replies | |
| 1268/1887 | RDMA/hns: Fix log flood after cmd_mbox failuredrivers/ drivers/ drivers/ +1 more | +16 | 0 replies | |
| 1269/1887 | seq_buf: Add seq_buf_do_printk() helperinclude/ lib/ | +34 | 0 replies | |
| 1270/1887 | tracing: Move readpos from seq_buf to trace_seqinclude/ include/ kernel/ +2 more | +23 | 0 replies | |
| 1271/1887 | seq_buf: Introduce DECLARE_SEQ_BUF and seq_buf_str()include/ kernel/ lib/ | +19 | 0 replies | |
| 1272/1887 | tracing: Bound synthetic-field strings with seq_bufkernel/ | +29 | 0 replies | |
| 1273/1887 | IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlierdrivers/ | +8 | 0 replies | |
| 1274/1887 | dlm: fix add msg handle in send_queue orderedfs/ | +2 | 0 replies | |
| 1275/1887 | OPP: Fix race between OPP addition and lookupdrivers/ | +3 | 0 replies | |
| 1276/1887 | wifi: ath11k: cancel SSR work items during PCI shutdowndrivers/ drivers/ | +9 | 0 replies | |
| 1277/1887 | drm/radeon: fix integer overflow in radeon_align_pitch()drivers/ drivers/ | +11 | 0 replies | |
| 1278/1887 | drm/vmwgfx: reject DX_BIND_QUERY without a DX contextdrivers/ | +5 | 0 replies | |
| 1279/1887 | s390/zcrypt: Close speculative mem read possibilitydrivers/ | +3 | 0 replies | |
| 1280/1887 | octeontx2-af: Block VFs from clobbering special CGX PKIND statedrivers/ drivers/ drivers/ +3 more | +131 | 0 replies | |
| 1281/1887 | Bluetooth: ISO: hold sk properly in iso_conn_readynet/ | +21 | 0 replies | |
| 1282/1887 | net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()net/ | +18 | 0 replies | |
| 1283/1887 | net/sched: cls_u32: validate offshift to prevent shift-out-of-boundsnet/ | +7 | 0 replies | |
| 1284/1887 | btrfs: skip global block reserve accounting for rescue mountsfs/ fs/ fs/ | +27 | 0 replies | |
| 1285/1887 | mm/ptdump: always stabilise against page table freeing using init_mmmm/ mm/ | +15 | 0 replies | |
| 1286/1887 | mm/page_table_check: skip special zero mappingsmm/ | +16 | 0 replies | |
| 1287/1887 | selftests: tls: add getsockopt testtools/ | +35 | 0 replies | |
| 1288/1887 | selftests: tls: add test with a partially invalid iovtools/ | +34 | 0 replies | |
| 1289/1887 | selftests: tls: add rekey teststools/ | +458 | 0 replies | |
| 1290/1887 | tls: rx: restore msg_iter before TLS 1.3 optimistic retrynet/ tools/ | +59 | 0 replies | |
| 1291/1887 | net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()drivers/ | +14 | 0 replies | |
| 1292/1887 | watchdog: at91sam9_wdt: prevent timer rearm during teardowndrivers/ | +2 | 0 replies | |
| 1293/1887 | s390/ism: Fix UAF of sba and ieq during ism_dev_exit()drivers/ | +16 | 0 replies | |
| 1294/1887 | netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()net/ | +3 | 0 replies | |
| 1295/1887 | net: sched: cls_api: add skip_sw counterinclude/ net/ | +5 | 0 replies | |
| 1296/1887 | net: sched: cls_api: add filter counterinclude/ net/ | +21 | 0 replies | |
| 1297/1887 | net: sched: cls_api: fix slab-use-after-free in fl_dump_keynet/ | +1 | 0 replies | |
| 1298/1887 | net: sched: refine software bypass handling in tc_runinclude/ include/ net/ +5 more | +55 | 0 replies | |
| 1299/1887 | net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiersnet/ | +16 | 0 replies | |
| 1300/1887 | vhost_iotlb: bound map allocation in add_rangedrivers/ drivers/ drivers/ +5 more | +78 | 0 replies | |
| 1301/1887 | bpf: Fix netns reference imbalance in conntrack kfuncsnet/ | +26 | 0 replies | |
| 1302/1887 | btrfs: lzo: reject inline extents without valid headersfs/ | +1 | 0 replies | |
| 1303/1887 | soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_readdrivers/ | +24 | 0 replies | |
| 1304/1887 | gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lockdrivers/ | +13 | 0 replies | |
| 1305/1887 | l2tp: fix tunnel and session refcount leak on seq_file releasenet/ net/ | +57 | 0 replies | |
| 1306/1887 | net, sched: Make tc-related drop reason more flexibleinclude/ include/ net/ | +11 | 0 replies | |
| 1307/1887 | net, sched: Fix SKB_NOT_DROPPED_YET splat under debug confignet/ net/ | +9 | 0 replies | |
| 1308/1887 | net: sched: Move drop_reason to struct tc_skb_cbinclude/ include/ include/ +3 more | +20 | 0 replies | |
| 1309/1887 | net: sched: Add initial TC error skb drop reasonsinclude/ net/ | +5 | 0 replies | |
| 1310/1887 | net/sched: act_api: fix TOCTOU NULL deref on a->goto_chainnet/ | +5 | 0 replies | |
| 1311/1887 | ipvs: revalidate ihl to prevent out-of-bounds accessinclude/ net/ net/ | +12 | 0 replies | |
| 1312/1887 | scsi: core: pair EH runtime PM get and putdrivers/ drivers/ include/ | +9 | 0 replies | |
| 1313/1887 | ASoC: tas2562: Validate values for volume writessound/ | +6 | 0 replies | |
| 1314/1887 | s390/vfio_ccw: Limit the number of channel program segmentsdrivers/ drivers/ | +14 | 0 replies | |
| 1315/1887 | drm/amdgpu: reject oversized IBs with per-ring packet limitsdrivers/ | +25 | 0 replies | |
| 1316/1887 | mptcp: avoid combining some incoming suboptionsnet/ net/ | +67 | 0 replies | |
| 1317/1887 | ACPI: processor_idle: Mark LPI enter functions as __cpuidledrivers/ | +2 | 0 replies | |
| 1318/1887 | ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()net/ | +5 | 0 replies | |
| 1319/1887 | coresight: ete: Always save state on power downdrivers/ | +33 | 0 replies | |
| 1320/1887 | ALSA: seq: oss: Serialize readq reset state with q->locksound/ | +52 | 0 replies | |
| 1321/1887 | octeontx2-af: npc: Fix size of entry2cntr_mapdrivers/ | +15 | 0 replies | |
| 1322/1887 | btrfs: lzo: reject compressed segment that overflows the compressed inputfs/ | +12 | 0 replies | |
| 1323/1887 | netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untagnet/ | +2 | 0 replies | |
| 1324/1887 | netfilter: make nftables drops visible in net dropmonitorinclude/ net/ net/ | +18 | 0 replies | |
| 1325/1887 | netfilter: synproxy: drop packets if timestamp adjustment failsnet/ | +13 | 0 replies | |
| 1326/1887 | netfilter: synproxy: adjust duplicate timestamp optionsnet/ | +0 | 0 replies | |
| 1327/1887 | netfilter: synproxy: fix unaligned memory access in timestamp adjustmentnet/ | +9 | 0 replies | |
| 1328/1887 | EDAC/igen6: Fix call trace due to missing release()drivers/ | +6 | 0 replies | |
| 1329/1887 | media: atomisp: gc2235: fix UAF and memory leakdrivers/ | +18 | 0 replies | |
| 1330/1887 | scsi: hisi_sas: Add slave_destroy interface for v3 hwdrivers/ | +11 | 0 replies | |
| 1331/1887 | soc/xilinx: zynqmp_power: Convert to platform remove callback returning voiddrivers/ | +2 | 0 replies | |
| 1332/1887 | soc: xilinx: Shutdown and free rx mailbox channeldrivers/ | +3 | 0 replies | |
| 1333/1887 | netfilter: nf_conntrack_expect: use conntrack GC to reap expectationsinclude/ include/ net/ +6 more | +140 | 0 replies | |
| 1334/1887 | net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controllerdrivers/ | +1 | 0 replies | |
| 1335/1887 | hwmon: (sht3x) Fix unaligned accessesdrivers/ | +5 | 0 replies | |
| 1336/1887 | dmaengine: idxd: fix double free of wq, engine, and group structsdrivers/ | +5 | 0 replies | |
| 1337/1887 | s390/appldata: remove power management callbacksarch/ | +2 | 0 replies | |
| 1338/1887 | s390/cpum_sf: move functions from header file to source filearch/ arch/ | +52 | 0 replies | |
| 1339/1887 | s390/mm: do not include <asm-generic/io.h> directlyarch/ | +1 | 0 replies | |
| 1340/1887 | s390: include linux/io.h instead of asm/io.harch/ arch/ arch/ +16 more | +25 | 0 replies | |
| 1341/1887 | s390/dasd: Fix undersized format-check bufferdrivers/ | +7 | 0 replies | |
| 1342/1887 | bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookienet/ | +2 | 0 replies | |
| 1343/1887 | net/mlx5e: TC, Check if flow is PEER before acquiring devcom lockdrivers/ drivers/ | +4 | 0 replies | |
| 1344/1887 | drm/amdkfd: Fix infinite loop parsing CRAT with zero subtype lengthdrivers/ | +8 | 0 replies | |
| 1345/1887 | drm/amdkfd: Add bounds check for CRAT subtype lengthdrivers/ | +9 | 0 replies | |
| 1346/1887 | selinux: reject a permission value exceeding the class permission countsecurity/ | +4 | 0 replies | |
| 1347/1887 | Bluetooth: ISO: zero the sockaddr before returning it in getnamenet/ | +1 | 0 replies | |
| 1348/1887 | fbdev: Wrap user-invoked calls to fb_set_var() in helperdrivers/ drivers/ drivers/ +3 more | +20 | 0 replies | |
| 1349/1887 | crypto: virtio - Less function calls in __virtio_crypto_akcipher_do_req() after error detectiondrivers/ | +6 | 0 replies | |
| 1350/1887 | crypto: virtio - Drop sign/verify operationsdrivers/ include/ | +22 | 0 replies | |
| 1351/1887 | crypto: virtio - Drop superfluous [as]kcipher_ctx pointerdrivers/ drivers/ | +5 | 0 replies | |
| 1352/1887 | crypto: virtio - Drop superfluous [as]kcipher_req pointerdrivers/ drivers/ | +7 | 0 replies | |
| 1353/1887 | crypto: virtio - bound the akcipher result lengthdrivers/ | +2 | 0 replies | |
| 1354/1887 | netfilter: nf_tables: dont queue packet path object notificationsnet/ | +23 | 0 replies | |
| 1355/1887 | net/packet: defer vmalloc TX_RING free until skbs finishnet/ | +88 | 0 replies | |
| 1356/1887 | tcp: clamp route advmss to TCP_MIN_MSSinclude/ net/ net/ +2 more | +11 | 0 replies | |
| 1357/1887 | RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qpdrivers/ | +9 | 0 replies | |
| 1358/1887 | tipc: avoid busy looping in tipc_exit_net()net/ net/ | +5 | 0 replies | |
| 1359/1887 | NTB: core: Add .get_dma_dev() callback to ntb_dev_opsinclude/ | +24 | 0 replies | |
| 1360/1887 | NTB: ntb_transport: Use ntb_get_dma_dev() for DMA buffersdrivers/ | +7 | 0 replies | |
| 1361/1887 | ntb: Store original DMA address for future releasedrivers/ | +3 | 0 replies | |
| 1362/1887 | tap: Keep hdr_len in tap_get_user()drivers/ | +10 | 0 replies | |
| 1363/1887 | net: tap: fix wrong transport_header when sending VLAN-tagged framedrivers/ | +2 | 0 replies | |
| 1364/1887 | drm/amd/amdgpu: Fix errors & warnings in amdgpu _uvd, _vce.cdrivers/ drivers/ | +63 | 0 replies | |
| 1365/1887 | drm/amdgpu: Fix UVD dpb min size calculation for H264drivers/ | +4 | 0 replies | |
| 1366/1887 | vlan: fix skb_under_panic and races when toggling HW VLAN offloadnet/ net/ | +7 | 0 replies | |
| 1367/1887 | wifi: mt76: mt7915: set correct background radar capabilitydrivers/ drivers/ drivers/ +3 more | +49 | 0 replies | |
| 1368/1887 | wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copydrivers/ | +9 | 0 replies | |
| 1369/1887 | wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()drivers/ | +2 | 0 replies | |
| 1370/1887 | mfd: sm501: Remove #ifdef guards for PM related functionsdrivers/ | +2 | 0 replies | |
| 1371/1887 | mfd: sm501: Convert to platform remove callback returning voiddrivers/ | +2 | 0 replies | |
| 1372/1887 | mfd: sm501: Fix potential memory leaks during removedrivers/ | +2 | 0 replies | |
| 1373/1887 | net/smc: stop killed, freed and out_of_sync sharing a bytenet/ | +3 | 0 replies | |
| 1374/1887 | net: thunderbolt: Release the Rx HopID that was handed out on mismatchdrivers/ | +2 | 0 replies | |
| 1375/1887 | net: thunderbolt: Mark the connection down when bringing it up failsdrivers/ | +10 | 0 replies | |
| 1376/1887 | net: ravb: serialize PTP clock teardowndrivers/ | +29 | 0 replies | |
| 1377/1887 | net: l2tp: do not propagate multicast notification errorsnet/ | +8 | 0 replies | |
| 1378/1887 | platform/x86/amd/pmc: Propagate SMU errors and validate S2D addressdrivers/ | +20 | 0 replies | |
| 1379/1887 | platform/x86: intel_sar: Check ACPI_HANDLE() against NULLdrivers/ | +6 | 0 replies | |
| 1380/1887 | platform/x86: int1092: Fix potential memory leak in sar_probe()drivers/ | +10 | 0 replies | |
| 1381/1887 | iommu: Add max_pasids field in struct iommu_devicedrivers/ drivers/ drivers/ +1 more | +12 | 0 replies | |
| 1382/1887 | iommu/vt-d: Force requesting ACS when tboot is enableddrivers/ drivers/ drivers/ | +16 | 0 replies | |
| 1383/1887 | iommu/msm: Unwind probe state on registration failuredrivers/ | +7 | 0 replies | |
| 1384/1887 | power: supply: max17040: propagate register read errorsdrivers/ | +22 | 0 replies | |
| 1385/1887 | power: supply: lp8788-charger: Convert to platform remove callback returning voiddrivers/ | +2 | 0 replies | |
| 1386/1887 | power: supply: lp8788: Use devm_power_supply_register() helperdrivers/ | +6 | 0 replies | |
| 1387/1887 | power: supply: lp8788-charger: fix use-after-free on removedrivers/ | +1 | 0 replies | |
| 1388/1887 | power: supply: charger-manager: Convert to platform remove callback returning voiddrivers/ | +2 | 0 replies | |
| 1389/1887 | power: supply: charger-manager: register regulators before exposing sysfsdrivers/ | +39 | 0 replies | |
| 1390/1887 | lockd: fix NULL dereference on lockowner allocation failurefs/ | +3 | 0 replies | |
| 1391/1887 | sched/core: Make core-sched flips wait for in-flight selectionskernel/ kernel/ | +23 | 0 replies | |
| 1392/1887 | svcrdma: Allocate new transports on devices NUMA nodenet/ | +9 | 0 replies | |
| 1393/1887 | svcrdma: Refactor the creation of listener CMA IDnet/ | +40 | 0 replies | |
| 1394/1887 | sunrpc: xprtrdma: Use ERR_CAST() to returnnet/ | +1 | 0 replies | |
| 1395/1887 | svcrdma: Use svc_xprt_put to free listener on create failurenet/ | +7 | 0 replies | |
| 1396/1887 | svcrdma: Reject inline replies that overflow the pull-up buffernet/ | +32 | 0 replies | |
| 1397/1887 | svcrdma: Handle ADDR_CHANGE CM event properlynet/ | +15 | 0 replies | |
| 1398/1887 | svcrdma: Reject connection when transport allocation failsnet/ | +10 | 0 replies | |
| 1399/1887 | SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2net/ | +3 | 0 replies | |
| 1400/1887 | sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedirnet/ | +16 | 0 replies | |
| 1401/1887 | sunrpc: defer rq_argp and rq_resp free until after RCU grace periodnet/ | +10 | 0 replies | |
| 1402/1887 | SUNRPC: Fix crasher in unwrap_integ_data()net/ | +32 | 0 replies | |
| 1403/1887 | SUNRPC: Rename automatic variables in unwrap_priv_data()net/ | +25 | 0 replies | |
| 1404/1887 | SUNRPC: Convert unwrap_priv_data() to use xdr_streaminclude/ net/ net/ | +21 | 0 replies | |
| 1405/1887 | SUNRPC: svcauth_gss: enforce krb5 token minimum lengthnet/ | +2 | 0 replies | |
| 1406/1887 | ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()net/ | +12 | 0 replies | |
| 1407/1887 | ip: orphan prefetched skbs before multicast forwardingnet/ net/ | +4 | 0 replies | |
| 1408/1887 | dm: correct block comments format.drivers/ drivers/ drivers/ +23 more | +315 | 0 replies | |
| 1409/1887 | dm array: validate array block headers on readdrivers/ | +29 | 0 replies | |
| 1410/1887 | fbdev: Dont re-validate info->state in fb_ops implementationsdrivers/ drivers/ drivers/ +3 more | +0 | 0 replies | |
| 1411/1887 | fbdev: Validate info->screen_{base, buffer} in fb_ops implementationsdrivers/ drivers/ drivers/ +8 more | +43 | 0 replies | |
| 1412/1887 | fbdev: Add initializer macros for struct fb_opsinclude/ | +112 | 0 replies | |
| 1413/1887 | fbdev/ssd1307fb: Generate deferred I/O opsdrivers/ | +11 | 0 replies | |
| 1414/1887 | fbdev: ssd1307fb: defer I2C transfers from damage callbacksdrivers/ | +67 | 0 replies | |
| 1415/1887 | ext2: Fix lost inode updates for IS_SYNC inodesfs/ fs/ | +3 | 0 replies | |
| 1416/1887 | HID: mcp2221: fix OOB write in mcp2221_raw_event()drivers/ | +9 | 0 replies | |
| 1417/1887 | HID: mcp2221: clear rxbuf after I2C/SMBus transfer completesdrivers/ | +6 | 0 replies | |
| 1418/1887 | smb: client: reject a tree connect response whose byte count is too smallfs/ | +5 | 0 replies | |
| 1419/1887 | cifs: call pagecache_isize_extended() in cifs_setsize() when extendingfs/ | +4 | 0 replies | |
| 1420/1887 | btrfs: fix extent map leak in NOCOW direct I/O writefs/ | +13 | 0 replies | |
| 1421/1887 | btrfs: rename ret to err in btrfs_recover_relocation()fs/ | +11 | 0 replies | |
| 1422/1887 | btrfs: rename ret to ret2 in btrfs_recover_relocation()fs/ | +4 | 0 replies | |
| 1423/1887 | btrfs: rename err to ret in btrfs_recover_relocation()fs/ | +28 | 0 replies | |
| 1424/1887 | btrfs: drop recovered reloc root refs on recovery failurefs/ | +27 | 0 replies | |
| 1425/1887 | ceph: do not repeat ceph_trim_dentries() if no progress possiblefs/ | +7 | 0 replies | |
| 1426/1887 | ceph: cap delegated inode count in ceph_parse_deleg_inos()fs/ fs/ fs/ | +60 | 0 replies | |
| 1427/1887 | ceph: fix UAF in check_new_map() on session freed during unlockfs/ | +6 | 0 replies | |
| 1428/1887 | NFSD: Prevent client use-after-free during delegation revokefs/ | +23 | 0 replies | |
| 1429/1887 | nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create opsfs/ | +38 | 0 replies | |
| 1430/1887 | nfsd: gate nfs3 setacl by argp->maskfs/ | +11 | 0 replies | |
| 1431/1887 | nfsd: fix stale s2s_cp_stateids IDR entry for async COPYfs/ | +6 | 0 replies | |
| 1432/1887 | nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_netfs/ fs/ | +20 | 0 replies | |
| 1433/1887 | nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revokefs/ | +15 | 0 replies | |
| 1434/1887 | lockd, nfsd: RCU-protect nlmsvc_ops dispatchfs/ fs/ fs/ +3 more | +60 | 0 replies | |
| 1435/1887 | NFSD: check truncate permission under inode lockfs/ | +21 | 0 replies | |
| 1436/1887 | zram: fix out-of-bounds access in writeback_store()drivers/ | +11 | 0 replies | |
| 1437/1887 | mm/filemap: skip to create PMD-sized page cache if neededmm/ | +1 | 0 replies | |
| 1438/1887 | ice: Dont process extts if PTP is disableddrivers/ | +4 | 0 replies | |
| 1439/1887 | mm/shmem: disable PMD-sized page cache if neededmm/ | +11 | 0 replies | |
| 1440/1887 | RDMA/hns: Fix soft lockup under heavy CEQE loaddrivers/ drivers/ | +53 | 0 replies | |
| 1441/1887 | serial: sc16is7xx: fix TX fifo corruptiondrivers/ | +10 | 0 replies | |
| 1442/1887 | drm/amd/display: Check link_index before accessing dc->links[]drivers/ | +3 | 0 replies | |
| 1443/1887 | rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()kernel/ | +54 | 0 replies | |
| 1444/1887 | btrfs: avoid NULL pointer dereference if no valid extent treefs/ | +5 | 0 replies | |
| 1445/1887 | btrfs: avoid NULL pointer dereference if no valid csum treefs/ | +3 | 0 replies | |
| 1446/1887 | bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()kernel/ | +5 | 0 replies | |
| 1447/1887 | netfilter: nf_tables: clone set on flush onlyinclude/ net/ net/ | +23 | 0 replies | |
| 1448/1887 | ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()net/ | +8 | 0 replies | |
| 1449/1887 | scsi: hisi_sas: Fix NULL pointer exception during user_scan()drivers/ drivers/ | +2 | 0 replies | |
| 1450/1887 | netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentationinclude/ net/ | +75 | 0 replies | |
| 1451/1887 | erofs: fix inline data read failure for ztailpacking pclustersfs/ | +23 | 0 replies | |
| 1452/1887 | f2fs: fix fsck inconsistency caused by FGGC of node blockfs/ | +14 | 0 replies | |
| 1453/1887 | greybus: raw: fix use-after-free if write is called after disconnectdrivers/ | +21 | 0 replies | |
| 1454/1887 | netfilter: revalidate bridge portsnet/ net/ net/ +1 more | +89 | 0 replies | |
| 1455/1887 | cgroup/rstat: validate cpu before css_rstat_cpu() accessblock/ include/ kernel/ +1 more | +19 | 0 replies | |
| 1456/1887 | LoongArch: Move jump_label_init() before parse_early_param()arch/ | +1 | 0 replies | |
| 1457/1887 | KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disablingarch/ | +8 | 0 replies | |
| 1458/1887 | Bluetooth: 6lowpan: hold L2CAP conn across debugfs controlinclude/ net/ net/ | +19 | 0 replies | |
| 1459/1887 | fs/ntfs3: resize log->one_page_buf when adopting on-disk page sizefs/ | +16 | 0 replies | |
| 1460/1887 | net: watchdog: fix refcount tracking racesinclude/ net/ net/ | +38 | 0 replies | |
| 1461/1887 | Bluetooth: hci_core: Fix UAF in hci_unregister_dev()net/ | +2 | 0 replies | |
| 1462/1887 | bpf: Reject sleepable BPF_LSM_CGROUP programs at load timekernel/ | +6 | 0 replies | |
| 1463/1887 | s390/vfio_ccw: Ensure first IDAW remains constantdrivers/ | +7 | 0 replies | |
| 1464/1887 | HID: nintendo: register input device after capabilities are setdrivers/ | +4 | 0 replies | |
| 1465/1887 | svcrdma: Validate Read chunk positions before reconstructionnet/ | +27 | 0 replies | |
| 1466/1887 | svcrdma: Reject Read lists that exceed the page budgetinclude/ net/ | +12 | 0 replies | |
| 1467/1887 | bpf: Disable preemption in __bpf_get_stackkernel/ | +8 | 0 replies | |
| 1468/1887 | mm/mglru: fix and remove redundant unevictable folio handlingmm/ | +5 | 0 replies | |
| 1469/1887 | mm: use stack_depot for recording kmemleaks backtracelib/ mm/ | +29 | 0 replies | |
| 1470/1887 | kmemleak: drop (age <increasing>) from leak recordmm/ | +2 | 0 replies | |
| 1471/1887 | mm/kmemleak: avoid soft lockup when scanning task stacksmm/ | +38 | 0 replies | |
| 1472/1887 | apparmor: make aa_set_current_onexec return voidsecurity/ security/ security/ | +3 | 0 replies | |
| 1473/1887 | apparmor: fix cred UAF caused by begin_current_label_crit_section()security/ security/ security/ | +39 | 0 replies | |
| 1474/1887 | ksmbd: fix tree connection use-after-free in smb2_tree_connect()fs/ fs/ | +31 | 0 replies | |
| 1475/1887 | ksmbd: zero pipe read compound paddingfs/ | +6 | 0 replies | |
| 1476/1887 | PCI: Introduce PCI_SLOT_PLACEHOLDER constant for slot_nr placeholder valuedrivers/ drivers/ drivers/ +1 more | +16 | 0 replies | |
| 1477/1887 | PCI: Allow per function PCI slots to fix slot reset on s390drivers/ drivers/ include/ | +28 | 0 replies | |
| 1478/1887 | bpf: Disable preemption in bpf_get_stackidkernel/ | +10 | 0 replies | |
| 1479/1887 | drm/nouveau: unsubscribe the channel-kill event before the fence contextdrivers/ | +8 | 0 replies | |
| 1480/1887 | drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vramdrivers/ | +7 | 0 replies | |
| 1481/1887 | drm/amdkfd: Fix error path at svm_migrate_copy_to_ramdrivers/ | +30 | 0 replies | |
| 1482/1887 | drm/amdkfd: Add TLB flush after MES queue eviction/suspensiondrivers/ | +9 | 0 replies | |
| 1483/1887 | drm/amdgpu: force complete the KIQ ring fences on resetdrivers/ | +8 | 0 replies | |
| 1484/1887 | f2fs: fix to clear dirty flag on folio in error pathfs/ | +1 | 0 replies | |
| 1485/1887 | f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()fs/ | +5 | 0 replies | |
| 1486/1887 | f2fs: fix to migrate all curseg types during free_segment_rangefs/ | +1 | 0 replies | |
| 1487/1887 | f2fs: convert to use sysfs_emitfs/ | +3 | 0 replies | |
| 1488/1887 | scsi: block: ioprio: Clean up interface definitionblock/ block/ include/ | +21 | 0 replies | |
| 1489/1887 | f2fs: use new ioprio Macro to get ckpt thread ioprio levelfs/ | +6 | 0 replies | |
| 1490/1887 | f2fs: avoid NULL checkpoint thread access in sysfsfs/ | +4 | 0 replies | |
| 1491/1887 | f2fs: validate MOVE_RANGE destination sizefs/ | +13 | 0 replies | |
| 1492/1887 | KVM: arm64: vgic-its: Dont dereference a NULL collection on ITT savearch/ | +8 | 0 replies | |
| 1493/1887 | KVM: s390: Fix memory corruption by not reinjecting CK machine checksarch/ arch/ arch/ | +12 | 0 replies | |
| 1494/1887 | iio: light: ltrf216a: Return floating point valuesdrivers/ | +5 | 0 replies | |
| 1495/1887 | iio: light: ltrf216a: fix runtime PM reference leak in error pathdrivers/ | +1 | 0 replies | |
| 1496/1887 | ASoC: hdac_hda: Fix hlink refcount leak on component registration failuresound/ | +1 | 0 replies | |
| 1497/1887 | s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objectsdrivers/ | +23 | 0 replies | |
| 1498/1887 | s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULLdrivers/ | +30 | 0 replies | |
| 1499/1887 | s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()drivers/ | +20 | 0 replies | |
| 1500/1887 | powerpc/kexec_file: Prevent kexec range truncationarch/ | +5 | 0 replies | |
| 1501/1887 | dma-direct: cleanup parameters to dma_direct_optimal_gfp_maskkernel/ | +7 | 0 replies | |
| 1502/1887 | dma-direct: simplify the use atomic pool logic in dma_direct_allockernel/ | +10 | 0 replies | |
| 1503/1887 | dma-direct: return struct page from dma_direct_alloc_from_pool()kernel/ | +10 | 0 replies | |
| 1504/1887 | dma-buf: dma-heap: dont publish fd before copy_to_user() succeedsdrivers/ drivers/ include/ | +56 | 0 replies | |
| 1505/1887 | tracing: Take trace_array reference when opening options filekernel/ | +65 | 0 replies | |
| 1506/1887 | Compiler Attributes: Add __counted_by macroinclude/ | +13 | 0 replies | |
| 1507/1887 | usb: gadget: f_midi: Annotate struct f_midi with __counted_bydrivers/ | +2 | 0 replies | |
| 1508/1887 | usb: gadget: f_midi: initialize work in f_midi_alloc()drivers/ | +1 | 0 replies | |
| 1509/1887 | NFSD: Prevent client use-after-free during close_lru reapingfs/ | +7 | 0 replies | |
| 1510/1887 | HID: sony: clean up device list on probe failuredrivers/ | +16 | 0 replies | |
| 1511/1887 | netfilter: nf_tables: skip double clone set expressions on element insertinclude/ net/ net/ | +33 | 0 replies | |
| 1512/1887 | samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modifysamples/ | +10 | 0 replies | |
| 1513/1887 | net/sched: fq: add overflow bounds to quantum and initial quantumnet/ | +4 | 0 replies | |
| 1514/1887 | net/sched: act_ife: Only operate on Ethernet framesnet/ net/ | +35 | 0 replies | |
| 1515/1887 | octeontx2-vf: fix workqueue and netdev race in probe/removedrivers/ | +13 | 0 replies | |
| 1516/1887 | Bluetooth: do not leak an hci_conn when a second LE connect is rejectednet/ | +7 | 0 replies | |
| 1517/1887 | Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partitiondrivers/ | +15 | 0 replies | |
| 1518/1887 | net/sched: account classifier filter allocations to memcginclude/ net/ net/ +7 more | +25 | 0 replies | |
| 1519/1887 | NFSv4.1: zero referring call lists before decodingfs/ | +3 | 0 replies | |
| 1520/1887 | vxlan: fix reading neigh hadrivers/ | +13 | 0 replies | |
| 1521/1887 | net: bridge: arp/nd proxy: fix reading neigh hanet/ | +14 | 0 replies | |
| 1522/1887 | net_sched: sch_fifo: implement lockless __fifo_dump()net/ | +7 | 0 replies | |
| 1523/1887 | net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueuenet/ net/ net/ | +4 | 0 replies | |
| 1524/1887 | ip6mr: do not clone dst in ip6mr_cache_report()net/ | +2 | 0 replies | |
| 1525/1887 | net: qlcnic: validate unified ROM sections before loadingdrivers/ | +248 | 0 replies | |
| 1526/1887 | ALSA: mtpav: shut down output timer before card teardownsound/ | +1 | 0 replies | |
| 1527/1887 | smb: client: fix request buffer leak in smb2_new_read_req()fs/ | +12 | 0 replies | |
| 1528/1887 | net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()net/ | +1 | 0 replies | |
| 1529/1887 | vsock: dont check the listeners sk_err in vsock_accept()net/ | +1 | 0 replies | |
| 1530/1887 | fuse: check for NULL root inode in fuse_fill_super_submountfs/ | +2 | 0 replies | |
| 1531/1887 | bpf, xdp: move offload check into dev_xdp_install()net/ | +23 | 0 replies | |
| 1532/1887 | NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()fs/ | +3 | 0 replies | |
| 1533/1887 | NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data serversfs/ fs/ | +13 | 0 replies | |
| 1534/1887 | pnfs/blocklayout: Fix device leaks on parse failurefs/ | +15 | 0 replies | |
| 1535/1887 | smb/server: fix session leak in ksmbd_session_register()fs/ | +12 | 0 replies | |
| 1536/1887 | ksmbd: bound smb_check_perm_dacl() ACE walks by DACL sizefs/ | +2 | 0 replies | |
| 1537/1887 | ksmbd: detach blocked lock requests before freeingfs/ fs/ | +15 | 0 replies | |
| 1538/1887 | ksmbd: safely discard unregistered deferred locksfs/ | +12 | 0 replies | |
| 1539/1887 | erofs: fix interlaced ztailpacking pclustersfs/ | +2 | 0 replies | |
| 1540/1887 | ksmbd: defer publishing granted locks to prevent UAF/double-free racefs/ | +15 | 0 replies | |
| 1541/1887 | smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()fs/ | +6 | 0 replies | |
| 1542/1887 | ksmbd: serialize oplock close with pending break ownershipfs/ fs/ fs/ | +77 | 0 replies | |
| 1543/1887 | ksmbd: free preauth sessions on connection teardownfs/ fs/ fs/ +1 more | +15 | 0 replies | |
| 1544/1887 | ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()fs/ | +11 | 0 replies | |
| 1545/1887 | apparmor: fix deadlock in complain-mode change_hatsecurity/ security/ security/ | +35 | 0 replies | |
| 1546/1887 | blk-cgroup: delay freeing policy data after rcu grace periodblock/ block/ block/ +3 more | +45 | 0 replies | |
| 1547/1887 | blk-iocost: clear delay state when freeing policy datablock/ | +7 | 0 replies | |
| 1548/1887 | blk-iolatency: clear delay state when freeing policy datablock/ | +9 | 0 replies | |
| 1549/1887 | null_blk: free zones array on device power-offdrivers/ | +13 | 0 replies | |
| 1550/1887 | fs/ntfs3: fix integer overflow in MFT cluster validationfs/ | +11 | 0 replies | |
| 1551/1887 | ocfs2: validate DIO orphan slot during inode readfs/ | +8 | 0 replies | |
| 1552/1887 | ocfs2: validate orphan slot during inode readfs/ | +8 | 0 replies | |
| 1553/1887 | nvmet: fix max_qid race between configfs and controller allocationdrivers/ drivers/ drivers/ +1 more | +35 | 0 replies | |
| 1554/1887 | clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t typedrivers/ drivers/ include/ | +23 | 0 replies | |
| 1555/1887 | firewire: core: fix memory leak in error path of build_tree()drivers/ | +26 | 0 replies | |
| 1556/1887 | nvme-apple: Destroy the admin queue on removaldrivers/ | +9 | 0 replies | |
| 1557/1887 | amt: Dont support cross-netns setup.drivers/ | +3 | 0 replies | |
| 1558/1887 | NFS: Return a delegation the client fails to recordfs/ | +14 | 0 replies | |
| 1559/1887 | fs: dlm: use listen sock as dlm running indicatorfs/ fs/ fs/ | +10 | 0 replies | |
| 1560/1887 | fs: dlm: remove socket shutdown handlingfs/ fs/ fs/ | +27 | 0 replies | |
| 1561/1887 | fs: dlm: cleanup listen sock handlingfs/ | +17 | 0 replies | |
| 1562/1887 | net: Introduce sk_use_task_frag in struct sock.include/ net/ | +10 | 0 replies | |
| 1563/1887 | Treewide: Stop corrupting sockets task_fragdrivers/ drivers/ drivers/ +9 more | +17 | 0 replies | |
| 1564/1887 | sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCEnet/ | +11 | 0 replies | |
| 1565/1887 | bpf: Fix mmap_lock leak in irq_work pathkernel/ kernel/ kernel/ | +59 | 0 replies | |
| 1566/1887 | bpf, cgroup: Fix storage null-ptr-deref after replacing progkernel/ | +17 | 0 replies | |
| 1567/1887 | btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()fs/ | +11 | 0 replies | |
| 1568/1887 | btrfs: check if root is readonly when setting posix aclfs/ | +3 | 0 replies | |
| 1569/1887 | btrfs: always wait for ordered extents to avoid OE racesfs/ | +42 | 0 replies | |
| 1570/1887 | btrfs: defrag: fix deadlock between defrag and delalloc space reservationfs/ | +33 | 0 replies | |
| 1571/1887 | scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() failsdrivers/ | +20 | 0 replies | |
| 1572/1887 | coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enabledrivers/ | +22 | 0 replies | |
| 1573/1887 | drm/amd/display: Resize MST HDCP per-connector arrays to 32drivers/ drivers/ drivers/ | +10 | 0 replies | |
| 1574/1887 | bpf: Clear buf on error in __bpf_get_task_stackkernel/ | +5 | 0 replies | |
| 1575/1887 | ocfs2/heartbeat: fix slot mapping rollback leaks on error pathsfs/ | +49 | 0 replies | |
| 1576/1887 | ocfs2/cluster: keep heartbeat local node stablefs/ fs/ fs/ | +46 | 0 replies | |
| 1577/1887 | ocfs2: o2hb: quiesce negotiate handlers and timeout workfs/ fs/ fs/ | +138 | 0 replies | |
| 1578/1887 | RDMA/erdma: Hold QP references for AE and CM processingdrivers/ drivers/ drivers/ +1 more | +24 | 0 replies | |
| 1579/1887 | thermal: hwmon: Remove hwmon class device along with its parentdrivers/ | +34 | 0 replies | |
| 1580/1887 | bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failedkernel/ | +6 | 0 replies | |
| 1581/1887 | HID: steam: Reject short readsdrivers/ | +31 | 0 replies | |
| 1582/1887 | HID: logitech-hidpp: Fix FF device cleanup on init failuredrivers/ | +16 | 0 replies | |
| 1583/1887 | tty: make tty_class a static const structuredrivers/ drivers/ drivers/ +1 more | +14 | 0 replies | |
| 1584/1887 | tty: skip cdev_del() when no cdev is registereddrivers/ | +1 | 0 replies | |
| 1585/1887 | serial: core: clear freed pointers on uart_register_driver() failuredrivers/ | +2 | 0 replies | |
| 1586/1887 | serial: core: do fallible allocations before the console can be registereddrivers/ | +19 | 0 replies | |
| 1587/1887 | wifi: cfg80211: stop PMSR before P2P and NAN teardownnet/ | +7 | 0 replies | |
| 1588/1887 | wifi: brcmfmac: fix P2P action frame handling without device vifdrivers/ | +4 | 0 replies | |
| 1589/1887 | wifi: nl80211: clean up color-change beacon data on errorsnet/ | +5 | 0 replies | |
| 1590/1887 | arm64: ptrace: Keep orig_x0 in-sync with x0 on syscall entryarch/ | +50 | 0 replies | |
| 1591/1887 | bpf, x86: Fix trampoline stack size for 128-bit argumentsarch/ | +1 | 0 replies | |
| 1592/1887 | wifi: mt76: cancel reset and rc work on device unregisterdrivers/ | +2 | 0 replies | |
| 1593/1887 | wifi: mt76: mt7915: allocate vif wcid in the same range as stationsdrivers/ | +4 | 0 replies | |
| 1594/1887 | wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface()drivers/ | +4 | 0 replies | |
| 1595/1887 | wifi: mt76: mt7915: unwind state on add_interface failuredrivers/ | +11 | 0 replies | |
| 1596/1887 | wifi: mt76: fix non-AQL packet accounting for MLO stationsdrivers/ | +0 | 0 replies | |
| 1597/1887 | misc: sgi-gru: remove interrupt-context page-table walksdrivers/ drivers/ drivers/ | +12 | 0 replies | |
| 1598/1887 | md/raid1: create serial pool adding rdev to array with serialize_policy=1drivers/ | +2 | 0 replies | |
| 1599/1887 | x86/ftrace: Remove SYSTEM_BOOTING exceptionsarch/ arch/ | +1 | 0 replies | |
| 1600/1887 | bpf: Retire the struct_ops map kvalue->refcnt.include/ kernel/ kernel/ | +49 | 0 replies | |
| 1601/1887 | bpf: Fix potential UAF when reading bpf link infokernel/ | +24 | 0 replies | |
| 1602/1887 | wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()drivers/ | +5 | 0 replies | |
| 1603/1887 | wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()drivers/ | +19 | 0 replies | |
| 1604/1887 | spi: davinci: switch to managed controller allocationdrivers/ | +3 | 0 replies | |
| 1605/1887 | RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()drivers/ | +17 | 0 replies | |
| 1606/1887 | nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatchfs/ | +15 | 0 replies | |
| 1607/1887 | PCI: Initialize temporary device in new_id_store()drivers/ | +8 | 0 replies | |
| 1608/1887 | PCI: Make pci_match_one_device() match on ID instead of devicedrivers/ drivers/ drivers/ | +62 | 0 replies | |
| 1609/1887 | PCI: Fix dyn_id add TOCTOUdrivers/ | +73 | 0 replies | |
| 1610/1887 | PCI: Fix UAF when probe runs concurrent to dyn ID removaldrivers/ include/ | +16 | 0 replies | |
| 1611/1887 | spi: oc-tiny: switch to managed controller allocationdrivers/ | +8 | 0 replies | |
| 1612/1887 | scsi: ufs: core: Validate string descriptorsdrivers/ | +19 | 0 replies | |
| 1613/1887 | pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chipdrivers/ drivers/ drivers/ | +7 | 0 replies | |
| 1614/1887 | bpf: Fix WARNING in bpf_tracing_link_releaseinclude/ kernel/ kernel/ | +11 | 0 replies | |
| 1615/1887 | RDMA/erdma: complete object teardown when the destroy command failsdrivers/ | +14 | 0 replies | |
| 1616/1887 | ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()fs/ fs/ fs/ +1 more | +37 | 0 replies | |
| 1617/1887 | bpf: Zero queue and stack outputs on lock failurekernel/ | +6 | 0 replies | |
| 1618/1887 | dmaengine: dw-edma: Terminate all descriptors without callbacksdrivers/ | +76 | 0 replies | |
| 1619/1887 | drm/sched: Use struct for drm_sched_init() paramsdrivers/ drivers/ drivers/ +5 more | +105 | 0 replies | |
| 1620/1887 | drm/msm: Only fini scheduler after successful initdrivers/ drivers/ | +5 | 0 replies | |
| 1621/1887 | wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragmentsdrivers/ | +7 | 0 replies | |
| 1622/1887 | firmware: arm_scmi: Fix SCMI device destroy lifetimesdrivers/ | +24 | 0 replies | |
| 1623/1887 | firmware: arm_scmi: Publish channel state before callbacksdrivers/ drivers/ drivers/ | +20 | 0 replies | |
| 1624/1887 | fs/resctrl: Prevent use-after-free in rdtgroup_kn_put()arch/ | +8 | 0 replies | |
| 1625/1887 | RDMA/rvt: Return NULL after port allocation failuredrivers/ | +3 | 0 replies | |
| 1626/1887 | esp: do not unref managed frag pages in esp_ssg_unref()net/ net/ | +14 | 0 replies | |
| 1627/1887 | platform/x86: asus-wmi: fix resource leaks on probe failuredrivers/ | +1 | 0 replies | |
| 1628/1887 | usb: gadget: uac: validate rate list length before storingdrivers/ drivers/ | +18 | 0 replies | |
| 1629/1887 | bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 maxkernel/ | +5 | 0 replies | |
| 1630/1887 | platform/x86: lg-laptop: Fix LED resource handlingdrivers/ | +17 | 0 replies | |
| 1631/1887 | platform/x86: dell-wmi-base: Fix handling of ultra performance keydrivers/ | +1 | 0 replies | |
| 1632/1887 | time/namespace: Validate nanosecond field in proc_timens_set_offset()kernel/ | +5 | 0 replies | |
| 1633/1887 | cgroup/cpuset: introduce cpuset-v1.cMAINTAINERS kernel/ kernel/ +1 more | +12 | 0 replies | |
| 1634/1887 | cgroup/cpuset: move common code to cpuset-internal.hkernel/ kernel/ | +217 | 0 replies | |
| 1635/1887 | cgroup/cpuset: Make nr_deadline_tasks an atomic_tkernel/ kernel/ | +6 | 0 replies | |
| 1636/1887 | crypto: keembay - Fix AEAD unregister count in error pathdrivers/ | +2 | 0 replies | |
| 1637/1887 | hwrng: core - fix rng list on registration errordrivers/ | +3 | 0 replies | |
| 1638/1887 | dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeoutdrivers/ | +10 | 0 replies | |
| 1639/1887 | mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotpluginclude/ mm/ mm/ | +14 | 0 replies | |
| 1640/1887 | bpf: Copy per-CPU map value padding in copy_map_value_long()include/ | +4 | 0 replies | |
| 1641/1887 | drm/amd/display: Fix dangling pointer in CRTC reset functiondrivers/ | +4 | 0 replies | |
| 1642/1887 | drm/amd/display: Fix dangling pointer in plane reset functiondrivers/ | +7 | 0 replies | |
| 1643/1887 | cxl/mbox: Clamp mailbox output allocation to the payload sizedrivers/ | +1 | 0 replies | |
| 1644/1887 | drm/v3d: Clear queue->active_job when v3d_fence_create() failsdrivers/ | +34 | 0 replies | |
| 1645/1887 | nvdimm: virtio_pmem: refcount requests for token lifetimedrivers/ drivers/ | +30 | 0 replies | |
| 1646/1887 | i3c: master: Fix recursive locking during device registrationdrivers/ include/ | +29 | 0 replies | |
| 1647/1887 | iommu/arm-smmu-v3: Manage teardown with devmdrivers/ | +31 | 0 replies | |
| 1648/1887 | svcrdma: Reject Write/Reply chunks with segcount 0net/ net/ | +7 | 0 replies | |
| 1649/1887 | ACPI: bus: Introduce acpi_bus_get_primary_device()drivers/ include/ | +44 | 0 replies | |
| 1650/1887 | powerpc/xive: add error return value to xive_smp_probe()arch/ arch/ | +5 | 0 replies | |
| 1651/1887 | powerpc/xive: propagate IPI init errors to prevent use-after-freearch/ arch/ arch/ | +16 | 0 replies | |
| 1652/1887 | ext4: fix circular lock dependency in ext4_ext_migratefs/ | +2 | 0 replies | |
| 1653/1887 | remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3drivers/ | +14 | 0 replies | |
| 1654/1887 | ksmbd: fix maximum allowed access checksfs/ fs/ fs/ | +61 | 0 replies | |
| 1655/1887 | ksmbd: preserve VFS inherited POSIX ACL maskfs/ | +1 | 0 replies | |
| 1656/1887 | wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notifdrivers/ | +7 | 0 replies | |
| 1657/1887 | wifi: iwlwifi: mvm: add a check on the tid coming from the firmwaredrivers/ | +4 | 0 replies | |
| 1658/1887 | wifi: iwlwifi: mvm: fix a possible underflowdrivers/ | +14 | 0 replies | |
| 1659/1887 | wifi: iwlwifi: mvm: validate TX_CMD response layoutdrivers/ | +35 | 0 replies | |
| 1660/1887 | smb/client: flush dirty data before punching a holefs/ | +10 | 0 replies | |
| 1661/1887 | wifi: iwlwifi: pcie: null RX pointers after freedrivers/ | +7 | 0 replies | |
| 1662/1887 | wifi: mac80211: ibss: wait for in-flight TX on disconnectnet/ | +3 | 0 replies | |
| 1663/1887 | perf: Fix addr_filter_ranges lifetimekernel/ | +1 | 0 replies | |
| 1664/1887 | drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctldrivers/ drivers/ drivers/ | +24 | 0 replies | |
| 1665/1887 | exfat: resolve memory leak from exfat_create_upcase_table()fs/ | +4 | 0 replies | |
| 1666/1887 | exfat: fix handling of damaged volume in exfat_create_upcase_table()fs/ | +13 | 0 replies | |
| 1667/1887 | cifs: get rid of dns resolve workerfs/ fs/ | +2 | 0 replies | |
| 1668/1887 | smb: client: fix races in cifsd thread creationfs/ | +16 | 0 replies | |
| 1669/1887 | nvme-fc: Do not cancel requests in io target before it is initializeddrivers/ | +6 | 0 replies | |
| 1670/1887 | drm/amdkfd: fix SMI event cross-process information leakdrivers/ | +3 | 0 replies | |
| 1671/1887 | drm/amdgpu: Add vbios attribute only if supporteddrivers/ drivers/ drivers/ +1 more | +15 | 0 replies | |
| 1672/1887 | drm/amd: Use attribute groups for PSP flashing attributesdrivers/ | +7 | 0 replies | |
| 1673/1887 | drm/amdgpu: fix buffer overflow during vBIOS updatedrivers/ | +1 | 0 replies | |
| 1674/1887 | RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()drivers/ | +8 | 0 replies | |
| 1675/1887 | virt: acrn: Fix irqfd use-after-free during eventfd shutdowndrivers/ | +44 | 0 replies | |
| 1676/1887 | driver core: Avoid warning when removing a device while its supplier is unbindingdrivers/ | +2 | 0 replies | |
| 1677/1887 | tty: serial: 8250: protect against NULL uart->port.dev in registerdrivers/ | +1 | 0 replies | |
| 1678/1887 | drm/amdgpu: Bound GPIO I2C table entry count from VBIOSdrivers/ | +17 | 0 replies | |
| 1679/1887 | drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fwdrivers/ drivers/ drivers/ +4 more | +56 | 0 replies | |
| 1680/1887 | wifi: rtw89: phy: check length before parsing PHY status IEdrivers/ | +6 | 0 replies | |
| 1681/1887 | pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO directiondrivers/ | +2 | 0 replies | |
| 1682/1887 | PCI/sysfs: Demacrofy pci_dev_resource_resize_attr(n) functionsdrivers/ | +66 | 0 replies | |
| 1683/1887 | PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()drivers/ | +3 | 0 replies | |
| 1684/1887 | spi: spi-qcom-qspi: Support pinctrl sleep statesdrivers/ | +5 | 0 replies | |
| 1685/1887 | spi: spi-qcom-qspi: Fix incomplete error handling in runtime PMdrivers/ | +36 | 0 replies | |
| 1686/1887 | wifi: cfg80211: reject duplicate wiphy cipher suite entriesnet/ | +21 | 0 replies | |
| 1687/1887 | scsi: qla2xxx: Skip vport under deletion in report ID acquisitiondrivers/ | +2 | 0 replies | |
| 1688/1887 | f2fs: accurately adjust free_sections during free_segment_rangefs/ | +14 | 0 replies | |
| 1689/1887 | scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap sizedrivers/ drivers/ | +14 | 0 replies | |
| 1690/1887 | smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()fs/ | +11 | 0 replies | |
| 1691/1887 | smb: client: fail DACL rewrite when the new DACL exceeds 64Kfs/ | +22 | 0 replies | |
| 1692/1887 | smb: client: honor forceuid/forcegid when mapping SIDs to uid/gidfs/ fs/ | +23 | 0 replies | |
| 1693/1887 | mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0net/ | +8 | 0 replies | |
| 1694/1887 | perf: RISC-V: store available counter mask as bitmapdrivers/ drivers/ include/ | +53 | 0 replies | |
| 1695/1887 | ipv6: flowlabel: cap duplicate leases per socketnet/ | +20 | 0 replies | |
| 1696/1887 | ieee802154: hwsim: serialize pib updates to fix double-freedrivers/ | +7 | 0 replies | |
| 1697/1887 | netfilter: cttimeout: prevent UAF during module unloadnet/ | +1 | 0 replies | |
| 1698/1887 | powerpc: Remove initialisation of readposarch/ | +0 | 0 replies | |
| 1699/1887 | ksmbd: fix heap out-of-bounds write in krb5_authenticate()fs/ | +1 | 0 replies | |
| 1700/1887 | KVM: x86: Use active memslots for the per-vCPU MMIO cachearch/ | +2 | 0 replies | |
| 1701/1887 | mptcp: move the OoO check back into __mptcp_try_fallback()net/ net/ | +8 | 0 replies | |
| 1702/1887 | power: supply: Fix maintenance charge table kernel-docinclude/ | +3 | 0 replies | |
| 1703/1887 | power: supply: ds2780: Fix ds2780_get_capacity() returning raw valuedrivers/ | +1 | 0 replies | |
| 1704/1887 | Drivers: hv: Avoid infinite retry loop in init_vp_index()drivers/ | +9 | 0 replies | |
| 1705/1887 | Drivers: hv: Dont reset VMBus connection state on error/exit pathsdrivers/ drivers/ | +0 | 0 replies | |
| 1706/1887 | vsock: treat TCP_CLOSING as once-establishednet/ | +8 | 0 replies | |
| 1707/1887 | net/rds: dont let the rdma_cm destroy an id RDS still owns on route failurenet/ | +11 | 0 replies | |
| 1708/1887 | ASoC: Intel: avs: Reset the stream unless it is already preparedsound/ | +1 | 0 replies | |
| 1709/1887 | ASoC: stm32: spdifrx: fix synchronization state checksound/ | +1 | 0 replies | |
| 1710/1887 | ASoC: cs42l56: Put the Limiter Cushion control on the limiter registersound/ | +1 | 0 replies | |
| 1711/1887 | ASoC: cs42l52: Fix the NG Type Switch bitsound/ | +1 | 0 replies | |
| 1712/1887 | ASoC: pcm3168a: Fix the DAC zero flag polarity bitsound/ | +1 | 0 replies | |
| 1713/1887 | ASoC: max98371: Fix the Speaker DHT Min Volume bitssound/ | +1 | 0 replies | |
| 1714/1887 | ASoC: wm8978: Fix the 128x oversampling switch bitssound/ | +2 | 0 replies | |
| 1715/1887 | ASoC: nau8822: Fix the 128x oversampling switch bitssound/ | +2 | 0 replies | |
| 1716/1887 | spi: tegra114: assert CS GPIO for every transfer in a messagedrivers/ | +7 | 0 replies | |
| 1717/1887 | nios2: fix __wsum type degradation in csum_fold()arch/ | +1 | 0 replies | |
| 1718/1887 | scsi: st: Save the visited block for the partition the drive is indrivers/ | +10 | 0 replies | |
| 1719/1887 | scsi: target: iscsi: Fix race in discovery auth updatesdrivers/ | +19 | 0 replies | |
| 1720/1887 | ocfs2/dlm: Protect the recovery list during debugfs readsfs/ fs/ fs/ | +7 | 0 replies | |
| 1721/1887 | samples: pidfd: fix userprogs typosamples/ | +1 | 0 replies | |
| 1722/1887 | pipe: preserve existing fasync readers on writer setup failurefs/ | +4 | 0 replies | |
| 1723/1887 | scsi: libsas: Fix SMP IO deadlock during HA resumedrivers/ | +12 | 0 replies | |
| 1724/1887 | netlink: avoid hashing the network namespace pointernet/ | +3 | 0 replies | |
| 1725/1887 | net: bcmgenet: unshare the skb before writing the control blockdrivers/ | +10 | 0 replies | |
| 1726/1887 | gpio: mxc: enable pad wakeup on i.MX8x platformsdrivers/ | +91 | 0 replies | |
| 1727/1887 | gpio: mxc: use lock guards for the generic GPIO chip lockdrivers/ | +21 | 0 replies | |
| 1728/1887 | gpio: mxc: fix both_edges bit operationsdrivers/ | +5 | 0 replies | |
| 1729/1887 | gpio: mxc: use BIT() macrodrivers/ | +2 | 0 replies | |
| 1730/1887 | gpio: mxc: fix wakeup_pads bit operationsdrivers/ | +6 | 0 replies | |
| 1731/1887 | autofs: ignore notification errors from a replaced pipefs/ | +19 | 0 replies | |
| 1732/1887 | unicode: free the map after a grace periodfs/ include/ | +18 | 0 replies | |
| 1733/1887 | KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entryarch/ | +3 | 0 replies | |
| 1734/1887 | fsnotify: prevent mark additions during connector teardownfs/ include/ | +12 | 0 replies | |
| 1735/1887 | net/sched: fix use-after-free in __tcf_action_put()net/ | +5 | 0 replies | |
| 1736/1887 | net: rds: fix uninitialized trans dereference in CM event handlernet/ | +22 | 0 replies | |
| 1737/1887 | pinctrl: amd: Clear S4 wake bits when firmware has _AEIdrivers/ | +9 | 0 replies | |
| 1738/1887 | sctp: revalidate output stream after association connect waitnet/ | +21 | 0 replies | |
| 1739/1887 | tools: gpio: fix building from the top level with O=tools/ | +6 | 0 replies | |
| 1740/1887 | i2c: qcom-cci: Fix HALT_ACK reset request being droppeddrivers/ | +2 | 0 replies | |
| 1741/1887 | scsi: xen/scsifront: Check for a NULL shadow entry on a backend responsedrivers/ | +1 | 0 replies | |
| 1742/1887 | scsi: libiscsi: Reject a negative task index from parse_pdu_ittdrivers/ | +2 | 0 replies | |
| 1743/1887 | scsi: libiscsi: Validate the ITT reflected in a Reject PDUdrivers/ | +5 | 0 replies | |
| 1744/1887 | scsi: libiscsi: Validate the task named by a management responsedrivers/ | +1 | 0 replies | |
| 1745/1887 | drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hangdrivers/ | +21 | 0 replies | |
| 1746/1887 | drm/amdgpu: dont drop the runtime PM reference twice in amdgpu_gprdrivers/ | +3 | 0 replies | |
| 1747/1887 | tracing: Fix the shift out of bounds in the log2 histogram modifierkernel/ | +1 | 0 replies | |
| 1748/1887 | tracing: Do not initialize tracefs work if tracing is disabledkernel/ | +6 | 0 replies | |
| 1749/1887 | tracing: Fix hist trigger timestamps for buffered eventskernel/ | +1 | 0 replies | |
| 1750/1887 | wifi: p54: validate firmware record lengthsdrivers/ | +37 | 0 replies | |
| 1751/1887 | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)net/ net/ net/ +2 more | +16 | 0 replies | |
| 1752/1887 | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)net/ net/ | +4 | 0 replies | |
| 1753/1887 | cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP childreninclude/ kernel/ | +6 | 0 replies | |
| 1754/1887 | dm cache: fix demotion stats in passthrough modedrivers/ | +3 | 0 replies | |
| 1755/1887 | dm cache: fix issue with background work lockingdrivers/ | +28 | 0 replies | |
| 1756/1887 | dm-crypt: fix a tiny race condition in crypt_dec_pendingdrivers/ | +1 | 0 replies | |
| 1757/1887 | dm-ebs: fix incorrect device offset check in ebs_ctr()drivers/ | +1 | 0 replies | |
| 1758/1887 | net/iucv: fix the recvmsg window updatenet/ | +25 | 0 replies | |
| 1759/1887 | xfs: fix capability check in xfsfs/ fs/ fs/ | +3 | 0 replies | |
| 1760/1887 | tipc: protect node reset trace dump with node locknet/ | +2 | 0 replies | |
| 1761/1887 | sctp: validate chunk length in the inqueue parsernet/ | +4 | 0 replies | |
| 1762/1887 | page_pool: keep frag_offset aligned for odd-sized requestsnet/ | +2 | 0 replies | |
| 1763/1887 | s390/ctcm: Prevent XID null dereferencedrivers/ | +1 | 0 replies | |
| 1764/1887 | s390/pci: Fix leak of uninitialized kernel data in SCLP reportarch/ | +3 | 0 replies | |
| 1765/1887 | ipv4: avoid divide by zero in fib_rebalancenet/ | +1 | 0 replies | |
| 1766/1887 | drm/amdgpu: Fix VCE 3 ring align_maskdrivers/ | +1 | 0 replies | |
| 1767/1887 | mm/huge_memory: initialise workingset state before folio splitmm/ | +2 | 0 replies | |
| 1768/1887 | KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as rootsarch/ | +3 | 0 replies | |
| 1769/1887 | mm, madvise: fix potential workingset node list_lru leaksmm/ | +3 | 0 replies | |
| 1770/1887 | net: bridge: mcast: dont truncate the port group walk on teardownnet/ | +12 | 0 replies | |
| 1771/1887 | ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATIONfs/ | +3 | 0 replies | |
| 1772/1887 | ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATIONfs/ | +1 | 0 replies | |
| 1773/1887 | ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it infs/ | +1 | 0 replies | |
| 1774/1887 | net/sched: cls_flower: validate mask pointer after nla_next()net/ | +5 | 0 replies | |
| 1775/1887 | smb: client: fix multiuser mount with krb5fs/ | +16 | 0 replies | |
| 1776/1887 | tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fieldskernel/ | +7 | 0 replies | |
| 1777/1887 | scsi: st: Fix use-after-free race between st_remove() and st_open()drivers/ | +2 | 0 replies | |
| 1778/1887 | perf: Track the perf mlock gift separatelyinclude/ kernel/ | +11 | 0 replies | |
| 1779/1887 | hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occurdrivers/ | +7 | 0 replies | |
| 1780/1887 | watch_queue: Fix note pool publication race in watch_queue_set_size()kernel/ | +7 | 0 replies | |
| 1781/1887 | ext4: free the sbi after a grace periodfs/ fs/ fs/ +1 more | +20 | 0 replies | |
| 1782/1887 | exit: move core of do_wait() into helperkernel/ | +31 | 0 replies | |
| 1783/1887 | pid_namespace: make zap_pid_ns_processes() freezablekernel/ kernel/ | +2 | 0 replies | |
| 1784/1887 | mm/huge_memory: transfer the pmd dirty bit to the folio on zapmm/ | +3 | 0 replies | |
| 1785/1887 | dm-integrity: require stable writes for internal hash modesdrivers/ drivers/ include/ | +9 | 0 replies | |
| 1786/1887 | vsock/virtio: validate packet source for connected socketsinclude/ net/ net/ | +37 | 0 replies | |
| 1787/1887 | ipv4: udp: Create exceptions before socket matchingnet/ | +9 | 0 replies | |
| 1788/1887 | i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()drivers/ | +1 | 0 replies | |
| 1789/1887 | futex: Fix mm reuse handling for FUT_OFF_MMSHAREDinclude/ include/ kernel/ +1 more | +41 | 0 replies | |
| 1790/1887 | drm/i915/dmc: Harden DMC firmware payload parsingdrivers/ | +16 | 0 replies | |
| 1791/1887 | dm-integrity: fix infinite loop on discard with large tag sizedrivers/ | +1 | 0 replies | |
| 1792/1887 | cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()fs/ | +6 | 0 replies | |
| 1793/1887 | xfs: dont hold buffer locks across sync transaction commit in xfs_sync_sb_buffs/ | +7 | 0 replies | |
| 1794/1887 | bonding: do not set usable_slaves for broadcast modedrivers/ | +9 | 0 replies | |
| 1795/1887 | net_sched: codel: fix stale state for empty flows in fq_codelinclude/ | +1 | 0 replies | |
| 1796/1887 | mm: split critical region in remap_file_pages() and invoke LSMs in betweenmm/ | +52 | 0 replies | |
| 1797/1887 | Bluetooth: L2CAP: access chan->conn safely in get/setsockoptnet/ | +46 | 0 replies | |
| 1798/1887 | Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has connnet/ net/ | +8 | 0 replies | |
| 1799/1887 | Compiler Attributes: counted_by: Adjust name and identifier expansioninclude/ include/ | +17 | 0 replies | |
| 1800/1887 | tracing: Reject incomplete event filter expressionskernel/ tools/ | +30 | 0 replies | |
| 1801/1887 | tracing: Save the event file instead of the compatible histogramkernel/ | +4 | 0 replies | |
| 1802/1887 | tracing: Unregister field variable histograms when the command failskernel/ | +6 | 0 replies | |
| 1803/1887 | tracing: Fix 64-bit and signed histogram fields on 32-bit kernelskernel/ | +1 | 0 replies | |
| 1804/1887 | tracing/histograms: Verify event_call identity when updating synth_event refcountkernel/ kernel/ kernel/ | +14 | 0 replies | |
| 1805/1887 | keys: Avoid the owner account dereference in named keyring lookupsecurity/ | +1 | 0 replies | |
| 1806/1887 | keys: Check the authorization payload in process keyring searchessecurity/ | +2 | 0 replies | |
| 1807/1887 | keys: Protect the type name while describing a keysecurity/ | +2 | 0 replies | |
| 1808/1887 | keys: make keyring indexes independent of kernel addressesinclude/ include/ security/ | +86 | 0 replies | |
| 1809/1887 | keys: Protect the read method check against type removalsecurity/ | +6 | 0 replies | |
| 1810/1887 | KEYS: Fix key_reject_and_link() race with keyring restrictionsecurity/ | +10 | 0 replies | |
| 1811/1887 | KEYS: trusted: Fix blob allocation size in tpm2_key_decode()security/ | +1 | 0 replies | |
| 1812/1887 | keys/trusted_keys: return immediately after TPM unseal failuresecurity/ | +3 | 0 replies | |
| 1813/1887 | asymmetric_keys: reject trust keys without IDscrypto/ | +6 | 0 replies | |
| 1814/1887 | ftrace: Initialize modname and offset in print_rec()kernel/ | +2 | 0 replies | |
| 1815/1887 | coredump: hold RCU while releasing parked threadsfs/ | +3 | 0 replies | |
| 1816/1887 | signal: only SIGKILL and the freezers interrupt a coredumping taskfs/ | +5 | 0 replies | |
| 1817/1887 | signal: dont retarget shared signals in a dying thread groupkernel/ | +4 | 0 replies | |
| 1818/1887 | pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaperkernel/ | +2 | 0 replies | |
| 1819/1887 | signal: allow taks to temporarily block TIF_NOTIFY_SIGNALinclude/ include/ | +26 | 0 replies | |
| 1820/1887 | riscv: use lw when reading int cpu in asm_per_cpuarch/ | +1 | 0 replies | |
| 1821/1887 | riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macroarch/ | +0 | 0 replies | |
| 1822/1887 | interconnect: Dont access req_list while its being manipulateddrivers/ | +8 | 0 replies | |
| 1823/1887 | Documentation: networking: Add a caveat to nexthop_compat_mode sysctlDocumentation/ | +6 | 0 replies | |
| 1824/1887 | net/sched: initialize noop_qdisc ownernet/ | +1 | 0 replies | |
| 1825/1887 | btrfs: fix race between ordered extent completion and fiemapfs/ | +96 | 0 replies | |
| 1826/1887 | bpf: Fix a potential use-after-free in bpf_link_free()kernel/ | +6 | 0 replies | |
| 1827/1887 | f2fs: fix node_cnt race between extent node destroy and writebackfs/ | +10 | 0 replies | |
| 1828/1887 | pinmux: fix race causing mux_owner NULL with active mux_usecountdrivers/ | +9 | 0 replies | |
| 1829/1887 | drm/amd/display: drop unused function set_abm_event()drivers/ drivers/ | +0 | 0 replies | |
| 1830/1887 | drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipedrivers/ | +3 | 0 replies | |
| 1831/1887 | drm/amd/display: Remove unused-but-set variable hubp fromdrivers/ | +1 | 0 replies | |
| 1832/1887 | firmware: arm_scmi: Move errors defs and code to common.hdrivers/ drivers/ | +40 | 0 replies | |
| 1833/1887 | firmware: arm_scmi: Add internal platform/channel identifiersdrivers/ drivers/ | +18 | 0 replies | |
| 1834/1887 | firmware: arm_scmi: Use channel ID for transport teardowndrivers/ | +1 | 0 replies | |
| 1835/1887 | firmware: arm_scmi: Reject out of range DT protocol IDsdrivers/ | +6 | 0 replies | |
| 1836/1887 | firmware: arm_scmi: Avoid IDR updates while cleaning channelsdrivers/ | +1 | 0 replies | |
| 1837/1887 | firmware: arm_scmi: Protect device request lookup with RCUdrivers/ | +3 | 0 replies | |
| 1838/1887 | firmware: arm_scmi: Free transport channel on IDR failuredrivers/ | +1 | 0 replies | |
| 1839/1887 | firmware: arm_scmi: Unregister device notifier before IDR teardowndrivers/ | +3 | 0 replies | |
| 1840/1887 | firmware: arm_scmi: Add multiple protocols registration supportdrivers/ | +22 | 0 replies | |
| 1841/1887 | firmware: arm_scmi: Unrequest devices if driver registration failsdrivers/ | +7 | 0 replies | |
| 1842/1887 | firmware: arm_scmi: Fix requested device removal racedrivers/ | +13 | 0 replies | |
| 1843/1887 | firmware: arm_scmi: Drop handle on protocol bind failuresdrivers/ | +23 | 0 replies | |
| 1844/1887 | scsi: hisi_sas: Check before using pointer variablesdrivers/ | +5 | 0 replies | |
| 1845/1887 | scsi: hisi_sas: Fix a deadlock issue related to automatic dumpdrivers/ | +10 | 0 replies | |
| 1846/1887 | scsi: hisi_sas: Remove redundant checks for automatic debugfs dumpdrivers/ | +2 | 0 replies | |
| 1847/1887 | rds: tcp: unregister sysctl before tearing down listen socketnet/ | +2 | 0 replies | |
| 1848/1887 | RDMA/mlx5: Fix implicit ODP hang on parent deregistrationdrivers/ | +1 | 0 replies | |
| 1849/1887 | RDMA/mlx5: Follow rb_key.ats when creating new mkeysdrivers/ | +1 | 0 replies | |
| 1850/1887 | ksmbd: pin conn during async oplock break notificationfs/ | +4 | 0 replies | |
| 1851/1887 | ksmbd: fix r_count dec/increment mismatchfs/ | +2 | 0 replies | |
| 1852/1887 | virtio_ccw: always take irq_lock in the classic interrupt handlerdrivers/ | +0 | 0 replies | |
| 1853/1887 | fs/ntfs3: reject index allocation if $BITMAP is empty but blocks existfs/ | +10 | 0 replies | |
| 1854/1887 | highmem: fix a memory copy problem in memcpy_from_folioinclude/ | +1 | 0 replies | |
| 1855/1887 | Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_completenet/ | +1 | 0 replies | |
| 1856/1887 | Bluetooth: MGMT: Fix memory leak in set_ssp_completenet/ | +3 | 0 replies | |
| 1857/1887 | Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_completeinclude/ net/ | +16 | 0 replies | |
| 1858/1887 | xen/events: fix error code in xen_bind_pirq_msi_to_irq()drivers/ | +3 | 0 replies | |
| 1859/1887 | drm/amdgpu: ensure no_hw_access is visible before MMIOdrivers/ | +3 | 0 replies | |
| 1860/1887 | KVM: SEV: Drop FOLL_WRITE for encrypted region registrationarch/ | +5 | 0 replies | |
| 1861/1887 | drm/amdgpu: fix the idr allocation flagsdrivers/ | +4 | 0 replies | |
| 1862/1887 | drm/amdgpu: replace PASID IDR with XArraydrivers/ | +19 | 0 replies | |
| 1863/1887 | smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()fs/ | +2 | 0 replies | |
| 1864/1887 | alpha: do not clear remote MMU contexts in migrate_flush_tlb_page()arch/ | +0 | 0 replies | |
| 1865/1887 | media: verisilicon: Fix kernel panic due to __initconst misusedrivers/ | +1 | 0 replies | |
| 1866/1887 | i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ringdrivers/ | +1 | 0 replies | |
| 1867/1887 | ata: libata-core: fix cancellation of a port deferred qc workdrivers/ | +3 | 0 replies | |
| 1868/1887 | ext4: fix error pointer dereference in ext4_mb_load_buddy_gfp()fs/ | +1 | 0 replies | |
| 1869/1887 | sched/psi: Create the psimon kthread outside of cgroup_mutexinclude/ kernel/ kernel/ | +78 | 0 replies | |
| 1870/1887 | Bluetooth: hci_core: Print number of packets in conn->data_qnet/ | +8 | 0 replies | |
| 1871/1887 | Bluetooth: hci_core: Fix queuing tx_work after workqueue is drainednet/ | +14 | 0 replies | |
| 1872/1887 | ocfs2: use correct endian in ocfs2_dinode_has_extentsfs/ | +6 | 0 replies | |
| 1873/1887 | ALSA: seq: Dont leak the extension cell pointer in the bounce payloadsound/ | +10 | 0 replies | |
| 1874/1887 | seq_buf: Make DECLARE_SEQ_BUF() usableinclude/ | +1 | 0 replies | |
| 1875/1887 | netfilter: ctnetlink: do not expose expectation DEAD flagnet/ | +1 | 0 replies | |
| 1876/1887 | vlan: restore HW VLAN tag insertion with reorder_hdr offnet/ | +32 | 0 replies | |
| 1877/1887 | fbdev: Use /* */ comment in initializer macroinclude/ | +2 | 0 replies | |
| 1878/1887 | mm/kmemleak: use object_cache instead of kmemleak_initialized to check in set_track_prepare()mm/ | +6 | 0 replies | |
| 1879/1887 | mm: use stack_depot_early_init for kmemleaklib/ mm/ | +4 | 0 replies | |
| 1880/1887 | scsi: block: Introduce ioprio hintsinclude/ | +49 | 0 replies | |
| 1881/1887 | scsi: block: Improve ioprio value validity checksblock/ include/ | +34 | 0 replies | |
| 1882/1887 | inet: control sockets should not use current thread task_fragnet/ | +1 | 0 replies | |
| 1883/1887 | Revert "esp: do not unref managed frag pages in esp_ssg_unref()"net/ net/ | +0 | 0 replies | |
| 1884/1887 | drm/amdkfd: fix dma_buf reference leak in get_dmabuf_infodrivers/ | +2 | 0 replies | |
| 1885/1887 | gpio: mxc: map Both Edge pad wakeup to Rising Edgedrivers/ | +9 | 0 replies | |
| 1886/1887 | pinctrl: freescale: Fix a memory out of bounds when num_configs is 1drivers/ | +2 | 0 replies | |
| 1887/1887 | uapi: stddef.h: Fix header guard locationinclude/ | +2 | 0 replies |
Reviews trailers per patch
990 of 1887 patches have a Reviewed-by or Acked-by.
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 611 reviewers.
Cover letter [PATCH 6.1 0000/1887] 6.1.191-rc1 review
This is the start of the stable review cycle for the 6.1.191 release. There are 1887 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Fri, 30 Oct 2026 17:02:34 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.191-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <[email protected]>
Linux 6.1.191-rc1
Alexey Dobriyan <[email protected]>
uapi: stddef.h: Fix header guard location
Xiaolei Wang <[email protected]>
pinctrl: freescale: Fix a memory out of bounds when num_configs is 1
Shenwei Wang <[email protected]>
gpio: mxc: map Both Edge pad wakeup to Rising Edge
Haojie Li <[email protected]>
drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info
Steffen Klassert <[email protected]>
Revert "esp: do not unref managed frag pages in esp_ssg_unref()"
Eric Dumazet <[email protected]>
inet: control sockets should not use current thread task_frag
Damien Le Moal <[email protected]>
scsi: block: Improve ioprio value validity checks
Damien Le Moal <[email protected]>
scsi: block: Introduce ioprio hints
Zhaoyang Huang <[email protected]>
mm: use stack_depot_early_init for kmemleak
Xiaolei Wang <[email protected]>
mm/kmemleak: use object_cache instead of kmemleak_initialized to check in set_track_prepare()
Thomas Zimmermann <[email protected]>
fbdev: Use /* */ comment in initializer macro
Eric Dumazet <[email protected]>
vlan: restore HW VLAN tag insertion with reorder_hdr off
Pablo Neira Ayuso <[email protected]>
netfilter: ctnetlink: do not expose expectation DEAD flag
Nathan Lynch <[email protected]>
seq_buf: Make DECLARE_SEQ_BUF() usable
HyeongJun An <[email protected]>
ALSA: seq: Don't leak the extension cell pointer in the bounce payload
Joseph Qi <[email protected]>
ocfs2: use correct endian in ocfs2_dinode_has_extents
ThangNN99 <[email protected]>
Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained
Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_core: Print number of packets in conn->data_q
Tejun Heo <[email protected]>
sched/psi: Create the psimon kthread outside of cgroup_mutex
Dan Carpenter <[email protected]>
ext4: fix error pointer dereference in ext4_mb_load_buddy_gfp()
Damien Le Moal <[email protected]>
ata: libata-core: fix cancellation of a port deferred qc work
Adrian Hunter <[email protected]>
i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring
Ming Qian <[email protected]>
media: verisilicon: Fix kernel panic due to __initconst misuse
Magnus Lindholm <[email protected]>
alpha: do not clear remote MMU contexts in migrate_flush_tlb_page()
Henrique Carvalho <[email protected]>
smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
Mikhail Gavrilov <[email protected]>
drm/amdgpu: replace PASID IDR with XArray
Prike Liang <[email protected]>
drm/amdgpu: fix the idr allocation flags
Pankaj Gupta <[email protected]>
KVM: SEV: Drop FOLL_WRITE for encrypted region registration
Perry Yuan <[email protected]>
drm/amdgpu: ensure no_hw_access is visible before MMIO
Dan Carpenter <[email protected]>
xen/events: fix error code in xen_bind_pirq_msi_to_irq()
Pauli Virtanen <[email protected]>
Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
Jianpeng Chang <[email protected]>
Bluetooth: MGMT: Fix memory leak in set_ssp_complete
Luiz Augusto von Dentz <[email protected]>
Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
Su Hui <[email protected]>
highmem: fix a memory copy problem in memcpy_from_folio
Moon Hee Lee <[email protected]>
fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
Karl Mehltretter <[email protected]>
virtio_ccw: always take irq_lock in the classic interrupt handler
Namjae Jeon <[email protected]>
ksmbd: fix r_count dec/increment mismatch
Qihang <[email protected]>
ksmbd: pin conn during async oplock break notification
Jason Gunthorpe <[email protected]>
RDMA/mlx5: Follow rb_key.ats when creating new mkeys
Yishai Hadas <[email protected]>
RDMA/mlx5: Fix implicit ODP hang on parent deregistration
Cen Zhang (Microsoft) <[email protected]>
rds: tcp: unregister sysctl before tearing down listen socket
Yihang Li <[email protected]>
scsi: hisi_sas: Remove redundant checks for automatic debugfs dump
Yihang Li <[email protected]>
scsi: hisi_sas: Fix a deadlock issue related to automatic dump
Yihang Li <[email protected]>
scsi: hisi_sas: Check before using pointer variables
Sudeep Holla <[email protected]>
firmware: arm_scmi: Drop handle on protocol bind failures
Sudeep Holla <[email protected]>
firmware: arm_scmi: Fix requested device removal race
Sudeep Holla <[email protected]>
firmware: arm_scmi: Unrequest devices if driver registration fails
Cristian Marussi <[email protected]>
firmware: arm_scmi: Add multiple protocols registration support
Sudeep Holla <[email protected]>
firmware: arm_scmi: Unregister device notifier before IDR teardown
Sudeep Holla <[email protected]>
firmware: arm_scmi: Free transport channel on IDR failure
Sudeep Holla <[email protected]>
firmware: arm_scmi: Protect device request lookup with RCU
Sudeep Holla <[email protected]>
firmware: arm_scmi: Avoid IDR updates while cleaning channels
Sudeep Holla <[email protected]>
firmware: arm_scmi: Reject out of range DT protocol IDs
Sudeep Holla <[email protected]>
firmware: arm_scmi: Use channel ID for transport teardown
Cristian Marussi <[email protected]>
firmware: arm_scmi: Add internal platform/channel identifiers
Cristian Marussi <[email protected]>
firmware: arm_scmi: Move errors defs and code to common.h
Gleb Markov <[email protected]>
drm/amd/display: Remove unused-but-set variable hubp from
Zicheng Qu <[email protected]>
drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
Hamza Mahfooz <[email protected]>
drm/amd/display: drop unused function set_abm_event()
Mukesh Ojha <[email protected]>
pinmux: fix race causing mux_owner NULL with active mux_usecount
Yongpeng Yang <[email protected]>
f2fs: fix node_cnt race between extent node destroy and writeback
Cong Wang <[email protected]>
bpf: Fix a potential use-after-free in bpf_link_free()
Filipe Manana <[email protected]>
btrfs: fix race between ordered extent completion and fiemap
Johannes Berg <[email protected]>
net/sched: initialize noop_qdisc owner
Petr Machata <[email protected]>
Documentation: networking: Add a caveat to nexthop_compat_mode sysctl
Mike Tipton <[email protected]>
interconnect: Don't access req_list while it's being manipulated
Song Shuai <[email protected]>
riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
Radim Krčmář <[email protected]>
riscv: use lw when reading int cpu in asm_per_cpu
Christian Brauner <[email protected]>
signal: allow taks to temporarily block TIF_NOTIFY_SIGNAL
Christian Brauner <[email protected]>
pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper
Christian Brauner <[email protected]>
signal: don't retarget shared signals in a dying thread group
Christian Brauner <[email protected]>
signal: only SIGKILL and the freezers interrupt a coredumping task
Christian Brauner <[email protected]>
coredump: hold RCU while releasing parked threads
Aaron Ahmed <[email protected]>
ftrace: Initialize modname and offset in print_rec()
Weiming Shi <[email protected]>
asymmetric_keys: reject trust keys without IDs
Srish Srinivasan <[email protected]>
keys/trusted_keys: return immediately after TPM unseal failure
Stefano Garzarella <[email protected]>
KEYS: trusted: Fix blob allocation size in tpm2_key_decode()
Adrian Martinez <[email protected]>
KEYS: Fix key_reject_and_link() race with keyring restriction
Cen Zhang <[email protected]>
keys: Protect the read method check against type removal
Kyle Zeng <[email protected]>
keys: make keyring indexes independent of kernel addresses
Cen Zhang <[email protected]>
keys: Protect the type name while describing a key
Cen Zhang <[email protected]>
keys: Check the authorization payload in process keyring searches
Cen Zhang <[email protected]>
keys: Avoid the owner account dereference in named keyring lookup
Lee Jones <[email protected]>
tracing/histograms: Verify event_call identity when updating synth_event refcount
Donggeun Yoo <[email protected]>
tracing: Fix 64-bit and signed histogram fields on 32-bit kernels
Donggeun Yoo <[email protected]>
tracing: Unregister field variable histograms when the command fails
Donggeun Yoo <[email protected]>
tracing: Save the event file instead of the compatible histogram
Kyle Zeng <[email protected]>
tracing: Reject incomplete event filter expressions
Kees Cook <[email protected]>
Compiler Attributes: counted_by: Adjust name and identifier expansion
Pauli Virtanen <[email protected]>
Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn
Pauli Virtanen <[email protected]>
Bluetooth: L2CAP: access chan->conn safely in get/setsockopt
Kirill A. Shutemov <[email protected]>
mm: split critical region in remap_file_pages() and invoke LSMs in between
Jonas Köppeler <[email protected]>
net_sched: codel: fix stale state for empty flows in fq_codel
Hangbin Liu <[email protected]>
bonding: do not set usable_slaves for broadcast mode
Yun Zhou <[email protected]>
xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf
Frank Sorenson <[email protected]>
cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()
Ben Cressey <[email protected]>
dm-integrity: fix infinite loop on discard with large tag size
Dibin Moolakadan Subrahmanian <[email protected]>
drm/i915/dmc: Harden DMC firmware payload parsing
Jann Horn <[email protected]>
futex: Fix mm reuse handling for FUT_OFF_MMSHARED
Wentao Liang <[email protected]>
i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
Ido Schimmel <[email protected]>
ipv4: udp: Create exceptions before socket matching
Daehyeon Ko <[email protected]>
vsock/virtio: validate packet source for connected sockets
Chen Cheng <[email protected]>
dm-integrity: require stable writes for internal hash modes
Usama Arif <[email protected]>
mm/huge_memory: transfer the pmd dirty bit to the folio on zap
Aviv Vaknin <[email protected]>
pid_namespace: make zap_pid_ns_processes() freezable
Jens Axboe <[email protected]>
exit: move core of do_wait() into helper
Christian Brauner <[email protected]>
ext4: free the sbi after a grace period
Cen Zhang (Microsoft) <[email protected]>
watch_queue: Fix note pool publication race in watch_queue_set_size()
Daniil Stas <[email protected]>
hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
Lorenzo Stoakes (ARM) <[email protected]>
perf: Track the perf mlock gift separately
Laurence Oberman <[email protected]>
scsi: st: Fix use-after-free race between st_remove() and st_open()
Lee Jones <[email protected]>
tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields
Paulo Alcantara <[email protected]>
smb: client: fix multiuser mount with krb5
Aohan Mei <[email protected]>
net/sched: cls_flower: validate mask pointer after nla_next()
Aleksandr Khromov <[email protected]>
ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in
Aleksandr Khromov <[email protected]>
ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
Aleksandr Khromov <[email protected]>
ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION
Jun Yang <[email protected]>
net: bridge: mcast: don't truncate the port group walk on teardown
Kairui Song <[email protected]>
mm, madvise: fix potential workingset node list_lru leaks
Hyunwoo Kim <[email protected]>
KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots
Matt Fleming <[email protected]>
mm/huge_memory: initialise workingset state before folio split
David Rosca <[email protected]>
drm/amdgpu: Fix VCE 3 ring align_mask
Zihan Xi <[email protected]>
ipv4: avoid divide by zero in fib_rebalance
Niklas Schnelle <[email protected]>
s390/pci: Fix leak of uninitialized kernel data in SCLP report
Aswin Karuvally <[email protected]>
s390/ctcm: Prevent XID null dereference
Florian Schauer <[email protected]>
page_pool: keep frag_offset aligned for odd-sized requests
Charles Vosburgh <[email protected]>
sctp: validate chunk length in the inqueue parser
Chengfeng Ye <[email protected]>
tipc: protect node reset trace dump with node lock
Carlos Maiolino <[email protected]>
xfs: fix capability check in xfs
Bryam Vargas <[email protected]>
net/iucv: fix the recvmsg window update
Genjian Zhang <[email protected]>
dm-ebs: fix incorrect device offset check in ebs_ctr()
Ben Cressey <[email protected]>
dm-crypt: fix a tiny race condition in crypt_dec_pending
Benjamin Marzinski <[email protected]>
dm cache: fix issue with background work locking
Ming-Hung Tsai <[email protected]>
dm cache: fix demotion stats in passthrough mode
Etienne Perot <[email protected]>
cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children
Cen Zhang (Microsoft Security FORGE Labs) <[email protected]>
tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)
Cen Zhang (Microsoft Security FORGE Labs) <[email protected]>
tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)
Heyang Tan <[email protected]>
wifi: p54: validate firmware record lengths
Tengda Wu <[email protected]>
tracing: Fix hist trigger timestamps for buffered events
Amit Machhiwal <[email protected]>
tracing: Do not initialize tracefs work if tracing is disabled
Donggeun Yoo <[email protected]>
tracing: Fix the shift out of bounds in the log2 histogram modifier
Jesse Zhang <[email protected]>
drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr
Timur Kristóf <[email protected]>
drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang
Yehyeong Lee <[email protected]>
scsi: libiscsi: Validate the task named by a management response
Yehyeong Lee <[email protected]>
scsi: libiscsi: Validate the ITT reflected in a Reject PDU
Yehyeong Lee <[email protected]>
scsi: libiscsi: Reject a negative task index from parse_pdu_itt
Yehyeong Lee <[email protected]>
scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
Loic Poulain <[email protected]>
i2c: qcom-cci: Fix HALT_ACK reset request being dropped
Sasha Levin <[email protected]>
tools: gpio: fix building from the top level with O=
Daehyeon Ko <[email protected]>
sctp: revalidate output stream after association connect wait
Mario Limonciello <[email protected]>
pinctrl: amd: Clear S4 wake bits when firmware has _AEI
Aohan Mei <[email protected]>
net: rds: fix uninitialized trans dereference in CM event handler
Jérémy Jean <[email protected]>
net/sched: fix use-after-free in __tcf_action_put()
Kyle Zeng <[email protected]>
fsnotify: prevent mark additions during connector teardown
Amirmohammad Eftekhar <[email protected]>
KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry
Christian Brauner <[email protected]>
unicode: free the map after a grace period
Sung Byeongchan <[email protected]>
autofs: ignore notification errors from a replaced pipe
Peng Fan <[email protected]>
gpio: mxc: fix wakeup_pads bit operations
Alexander Stein <[email protected]>
gpio: mxc: use BIT() macro
Peng Fan <[email protected]>
gpio: mxc: fix both_edges bit operations
Bartosz Golaszewski <[email protected]>
gpio: mxc: use lock guards for the generic GPIO chip lock
Shenwei Wang <[email protected]>
gpio: mxc: enable pad wakeup on i.MX8x platforms
Nicolai Buchwitz <[email protected]>
net: bcmgenet: unshare the skb before writing the control block
Kyle Zeng <[email protected]>
netlink: avoid hashing the network namespace pointer
Xingui Yang <[email protected]>
scsi: libsas: Fix SMP IO deadlock during HA resume
Kyle Zeng <[email protected]>
pipe: preserve existing fasync readers on writer setup failure
Sasha Levin <[email protected]>
samples: pidfd: fix userprogs typo
Cen Zhang <[email protected]>
ocfs2/dlm: Protect the recovery list during debugfs reads
Linfeng Sun <[email protected]>
scsi: target: iscsi: Fix race in discovery auth updates
Laurence Oberman <[email protected]>
scsi: st: Save the visited block for the partition the drive is in
Keith Busch <[email protected]>
nios2: fix __wsum type degradation in csum_fold()
Carlos Jones Jr <[email protected]>
spi: tegra114: assert CS GPIO for every transfer in a message
HyeongJun An <[email protected]>
ASoC: nau8822: Fix the 128x oversampling switch bits
HyeongJun An <[email protected]>
ASoC: wm8978: Fix the 128x oversampling switch bits
HyeongJun An <[email protected]>
ASoC: max98371: Fix the Speaker DHT Min Volume bits
HyeongJun An <[email protected]>
ASoC: pcm3168a: Fix the DAC zero flag polarity bit
HyeongJun An <[email protected]>
ASoC: cs42l52: Fix the NG Type Switch bit
HyeongJun An <[email protected]>
ASoC: cs42l56: Put the Limiter Cushion control on the limiter register
Avi Weiss <[email protected]>
ASoC: stm32: spdifrx: fix synchronization state check
Sergey Tiraspolsky <[email protected]>
ASoC: Intel: avs: Reset the stream unless it is already prepared
Allison Henderson <[email protected]>
net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
Michal Luczaj <[email protected]>
vsock: treat TCP_CLOSING as once-established
Michael Kelley <[email protected]>
Drivers: hv: Don't reset VMBus connection state on error/exit paths
Waiman Long <[email protected]>
Drivers: hv: Avoid infinite retry loop in init_vp_index()
Xueqin Luo <[email protected]>
power: supply: ds2780: Fix ds2780_get_capacity() returning raw value
Karl Mehltretter <[email protected]>
power: supply: Fix maintenance charge table kernel-doc
Abdul Wasey <[email protected]>
mptcp: move the OoO check back into __mptcp_try_fallback()
Jinu Kim <[email protected]>
KVM: x86: Use active memslots for the per-vCPU MMIO cache
Ilan Dudnik <[email protected]>
ksmbd: fix heap out-of-bounds write in krb5_authenticate()
Matthew Wilcox (Oracle) <[email protected]>
powerpc: Remove initialisation of readpos
Chengfeng Ye <[email protected]>
netfilter: cttimeout: prevent UAF during module unload
David Carlier <[email protected]>
ieee802154: hwsim: serialize pib updates to fix double-free
Zhiling Zou <[email protected]>
ipv6: flowlabel: cap duplicate leases per socket
Xixin Liu <[email protected]>
perf: RISC-V: store available counter mask as bitmap
Kalpan Jani <[email protected]>
mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0
Paulo Alcantara <[email protected]>
smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid
Bjoern Doebel <[email protected]>
smb: client: fail DACL rewrite when the new DACL exceeds 64K
Paulo Alcantara <[email protected]>
smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()
Nilesh Javali <[email protected]>
scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size
Daeho Jeong <[email protected]>
f2fs: accurately adjust free_sections during free_segment_range
Nilesh Javali <[email protected]>
scsi: qla2xxx: Skip vport under deletion in report ID acquisition
Yuqi Xu <[email protected]>
wifi: cfg80211: reject duplicate wiphy cipher suite entries
Viken Dadhaniya <[email protected]>
spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM
Douglas Anderson <[email protected]>
spi: spi-qcom-qspi: Support pinctrl sleep states
Krzysztof Wilczyński <[email protected]>
PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()
Ilpo Järvinen <[email protected]>
PCI/sysfs: Demacrofy pci_dev_resource_resize_attr(n) functions
Chen-Yu Tsai <[email protected]>
pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction
Ping-Ke Shih <[email protected]>
wifi: rtw89: phy: check length before parsing PHY status IE
Candice Li <[email protected]>
drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
Candice Li <[email protected]>
drm/amdgpu: Bound GPIO I2C table entry count from VBIOS
Stepan Ionichev <[email protected]>
tty: serial: 8250: protect against NULL uart->port.dev in register
Herve Codina <[email protected]>
driver core: Avoid warning when removing a device while its supplier is unbinding
Sicong Huang <[email protected]>
virt: acrn: Fix irqfd use-after-free during eventfd shutdown
Tao Cui <[email protected]>
RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()
Shiwu Zhang <[email protected]>
drm/amdgpu: fix buffer overflow during vBIOS update
Mario Limonciello <[email protected]>
drm/amd: Use attribute groups for PSP flashing attributes
Lijo Lazar <[email protected]>
drm/amdgpu: Add vbios attribute only if supported
Yongqiang Sun <[email protected]>
drm/amdkfd: fix SMI event cross-process information leak
Mohamed Khalfella <[email protected]>
nvme-fc: Do not cancel requests in io target before it is initialized
Fredric Cover <[email protected]>
smb: client: fix races in cifsd thread creation
Paulo Alcantara <[email protected]>
cifs: get rid of dns resolve worker
David Timber <[email protected]>
exfat: fix handling of damaged volume in exfat_create_upcase_table()
Daniel Yang <[email protected]>
exfat: resolve memory leak from exfat_create_upcase_table()
Xiaogang Chen <[email protected]>
drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl
Peter Zijlstra <[email protected]>
perf: Fix addr_filter_ranges lifetime
Pagadala Yesu Anjaneyulu <[email protected]>
wifi: mac80211: ibss: wait for in-flight TX on disconnect
Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: pcie: null RX pointers after free
Huiwen He <[email protected]>
smb/client: flush dirty data before punching a hole
Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: mvm: validate TX_CMD response layout
Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: mvm: fix a possible underflow
Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif
Namjae Jeon <[email protected]>
ksmbd: preserve VFS inherited POSIX ACL mask
Namjae Jeon <[email protected]>
ksmbd: fix maximum allowed access checks
Val Packett <[email protected]>
remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3
Yun Zhou <[email protected]>
ext4: fix circular lock dependency in ext4_ext_migrate
Gou Hao <[email protected]>
powerpc/xive: propagate IPI init errors to prevent use-after-free
Gou Hao <[email protected]>
powerpc/xive: add error return value to xive_smp_probe()
Rafael J. Wysocki <[email protected]>
ACPI: bus: Introduce acpi_bus_get_primary_device()
Chris Mason <[email protected]>
svcrdma: Reject Write/Reply chunks with segcount 0
Shameer Kolothum <[email protected]>
iommu/arm-smmu-v3: Manage teardown with devm
Adrian Hunter <[email protected]>
i3c: master: Fix recursive locking during device registration
Li Chen <[email protected]>
nvdimm: virtio_pmem: refcount requests for token lifetime
Maíra Canal <[email protected]>
drm/v3d: Clear queue->active_job when v3d_fence_create() fails
Richard Cheng <[email protected]>
cxl/mbox: Clamp mailbox output allocation to the payload size
Evgenii Burenchev <[email protected]>
drm/amd/display: Fix dangling pointer in plane reset function
Evgenii Burenchev <[email protected]>
drm/amd/display: Fix dangling pointer in CRTC reset function
Leon Hwang <[email protected]>
bpf: Copy per-CPU map value padding in copy_map_value_long()
Gregory Price <[email protected]>
mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug
Alex Bereza <[email protected]>
dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout
Manos Pitsidianakis <[email protected]>
hwrng: core - fix rng list on registration error
Myeonghun Pak <[email protected]>
crypto: keembay - Fix AEAD unregister count in error path
Waiman Long <[email protected]>
cgroup/cpuset: Make nr_deadline_tasks an atomic_t
Chen Ridong <[email protected]>
cgroup/cpuset: move common code to cpuset-internal.h
Chen Ridong <[email protected]>
cgroup/cpuset: introduce cpuset-v1.c
Malaya Kumar Rout <[email protected]>
time/namespace: Validate nanosecond field in proc_timens_set_offset()
Armin Wolf <[email protected]>
platform/x86: dell-wmi-base: Fix handling of ultra performance key
Armin Wolf <[email protected]>
platform/x86: lg-laptop: Fix LED resource handling
Nicholas Dudar <[email protected]>
bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max
Qing Ming <[email protected]>
usb: gadget: uac: validate rate list length before storing
Marco Scardovi <[email protected]>
platform/x86: asus-wmi: fix resource leaks on probe failure
Maher Azzouzi <[email protected]>
esp: do not unref managed frag pages in esp_ssg_unref()
Leon Romanovsky <[email protected]>
RDMA/rvt: Return NULL after port allocation failure
Reinette Chatre <[email protected]>
fs/resctrl: Prevent use-after-free in rdtgroup_kn_put()
Sudeep Holla <[email protected]>
firmware: arm_scmi: Publish channel state before callbacks
Sudeep Holla <[email protected]>
firmware: arm_scmi: Fix SCMI device destroy lifetimes
Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments
Ruoyu Wang <[email protected]>
drm/msm: Only fini scheduler after successful init
Philipp Stanner <[email protected]>
drm/sched: Use struct for drm_sched_init() params
Koichiro Den <[email protected]>
dmaengine: dw-edma: Terminate all descriptors without callbacks
Kumar Kartikeya Dwivedi <[email protected]>
bpf: Zero queue and stack outputs on lock failure
Aditya Prakash Srivastava <[email protected]>
ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()
Leon Romanovsky <[email protected]>
RDMA/erdma: complete object teardown when the destroy command fails
Leon Hwang <[email protected]>
bpf: Fix WARNING in bpf_tracing_link_release
Justin Yeh <[email protected]>
pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip
Li Qiang <[email protected]>
scsi: ufs: core: Validate string descriptors
Fan Wu <[email protected]>
spi: oc-tiny: switch to managed controller allocation
Gary Guo <[email protected]>
PCI: Fix UAF when probe runs concurrent to dyn ID removal
Gary Guo <[email protected]>
PCI: Fix dyn_id add TOCTOU
Gary Guo <[email protected]>
PCI: Make pci_match_one_device() match on ID instead of device
Samiullah Khawaja <[email protected]>
PCI: Initialize temporary device in new_id_store()
Ryusuke Konishi <[email protected]>
nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch
Leon Romanovsky <[email protected]>
RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()
Fan Wu <[email protected]>
spi: davinci: switch to managed controller allocation
Jeff Johnson <[email protected]>
wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()
Jeff Johnson <[email protected]>
wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()
Pu Lehui <[email protected]>
bpf: Fix potential UAF when reading bpf link info
Kui-Feng Lee <[email protected]>
bpf: Retire the struct_ops map kvalue->refcnt.
Peter Zijlstra <[email protected]>
x86/ftrace: Remove SYSTEM_BOOTING exceptions
Martin Wilck <[email protected]>
md/raid1: create serial pool adding rdev to array with serialize_policy=1
Muhammad Usama Anjum <[email protected]>
misc: sgi-gru: remove interrupt-context page-table walks
Michael-CY Lee <[email protected]>
wifi: mt76: fix non-AQL packet accounting for MLO stations
Felix Fietkau <[email protected]>
wifi: mt76: mt7915: unwind state on add_interface failure
Christophe JAILLET <[email protected]>
wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface()
Felix Fietkau <[email protected]>
wifi: mt76: mt7915: allocate vif wcid in the same range as stations
Felix Fietkau <[email protected]>
wifi: mt76: cancel reset and rc work on device unregister
Yonghong Song <[email protected]>
bpf, x86: Fix trampoline stack size for 128-bit arguments
Will Deacon <[email protected]>
arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry
Zhao Li <[email protected]>
wifi: nl80211: clean up color-change beacon data on errors
Jason Huang <[email protected]>
wifi: brcmfmac: fix P2P action frame handling without device vif
Zhao Li <[email protected]>
wifi: cfg80211: stop PMSR before P2P and NAN teardown
Karl Mehltretter <[email protected]>
serial: core: do fallible allocations before the console can be registered
Karl Mehltretter <[email protected]>
serial: core: clear freed pointers on uart_register_driver() failure
Karl Mehltretter <[email protected]>
tty: skip cdev_del() when no cdev is registered
Greg Kroah-Hartman <[email protected]>
tty: make tty_class a static const structure
Haoxiang Li <[email protected]>
HID: logitech-hidpp: Fix FF device cleanup on init failure
Vicki Pfau <[email protected]>
HID: steam: Reject short reads
Pu Lehui <[email protected]>
bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed
Rafael J. Wysocki <[email protected]>
thermal: hwmon: Remove hwmon class device along with its parent
Cheng Xu <[email protected]>
RDMA/erdma: Hold QP references for AE and CM processing
Cen Zhang <[email protected]>
ocfs2: o2hb: quiesce negotiate handlers and timeout work
Cen Zhang <[email protected]>
ocfs2/cluster: keep heartbeat local node stable
Yufan Chen <[email protected]>
ocfs2/heartbeat: fix slot mapping rollback leaks on error paths
Jiri Olsa <[email protected]>
bpf: Clear buf on error in __bpf_get_task_stack
Harry Wentland <[email protected]>
drm/amd/display: Resize MST HDCP per-connector arrays to 32
Yeoreum Yun <[email protected]>
coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable
Yang Xiuwei <[email protected]>
scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails
Filipe Manana <[email protected]>
btrfs: defrag: fix deadlock between defrag and delalloc space reservation
Qu Wenruo <[email protected]>
btrfs: always wait for ordered extents to avoid OE races
Sun YangKai <[email protected]>
btrfs: check if root is readonly when setting posix acl
Qu Wenruo <[email protected]>
btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()
Pu Lehui <[email protected]>
bpf, cgroup: Fix storage null-ptr-deref after replacing prog
Sanghyun Park <[email protected]>
bpf: Fix mmap_lock leak in irq_work path
Runyu Xiao <[email protected]>
sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
Benjamin Coddington <[email protected]>
Treewide: Stop corrupting socket's task_frag
Guillaume Nault <[email protected]>
net: Introduce sk_use_task_frag in struct sock.
Alexander Aring <[email protected]>
fs: dlm: cleanup listen sock handling
Alexander Aring <[email protected]>
fs: dlm: remove socket shutdown handling
Alexander Aring <[email protected]>
fs: dlm: use listen sock as dlm running indicator
Chuck Lever <[email protected]>
NFS: Return a delegation the client fails to record
Kuniyuki Iwashima <[email protected]>
amt: Don't support cross-netns setup.
Sven Peter <[email protected]>
nvme-apple: Destroy the admin queue on removal
Takashi Sakamoto <[email protected]>
firewire: core: fix memory leak in error path of build_tree()
Marek Szyprowski <[email protected]>
clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type
Maurizio Lombardi <[email protected]>
nvmet: fix max_qid race between configfs and controller allocation
ZhengYuan Huang <[email protected]>
ocfs2: validate orphan slot during inode read
ZhengYuan Huang <[email protected]>
ocfs2: validate DIO orphan slot during inode read
Zhan Xusheng <[email protected]>
fs/ntfs3: fix integer overflow in MFT cluster validation
Zizhi Wo <[email protected]>
null_blk: free zones array on device power-off
Usama Arif <[email protected]>
blk-iolatency: clear delay state when freeing policy data
Usama Arif <[email protected]>
blk-iocost: clear delay state when freeing policy data
Yu Kuai <[email protected]>
blk-cgroup: delay freeing policy data after rcu grace period
John Johansen <[email protected]>
apparmor: fix deadlock in complain-mode change_hat
Yunseong Kim <[email protected]>
ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()
Namjae Jeon <[email protected]>
ksmbd: free preauth sessions on connection teardown
Namjae Jeon <[email protected]>
ksmbd: serialize oplock close with pending break ownership
ZhangGuoDong <[email protected]>
smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
Ilan Dudnik <[email protected]>
ksmbd: defer publishing granted locks to prevent UAF/double-free race
Gao Xiang <[email protected]>
erofs: fix interlaced ztailpacking pclusters
Namjae Jeon <[email protected]>
ksmbd: safely discard unregistered deferred locks
Namjae Jeon <[email protected]>
ksmbd: detach blocked lock requests before freeing
Hang Nan <[email protected]>
ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size
Ze Tan <[email protected]>
smb/server: fix session leak in ksmbd_session_register()
ZhangGuoDong <[email protected]>
pnfs/blocklayout: Fix device leaks on parse failure
Jeuk Kim <[email protected]>
NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers
Zhansong Gao <[email protected]>
NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()
Jiayuan Chen <[email protected]>
bpf, xdp: move offload check into dev_xdp_install()
Baokun Li <[email protected]>
fuse: check for NULL root inode in fuse_fill_super_submount
Nguyen Dinh Phi <[email protected]>
vsock: don't check the listener's sk_err in vsock_accept()
Tetsuo Handa <[email protected]>
net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()
Christopher Lusk <[email protected]>
smb: client: fix request buffer leak in smb2_new_read_req()
Runyu Xiao <[email protected]>
ALSA: mtpav: shut down output timer before card teardown
Pengpeng Hou <[email protected]>
net: qlcnic: validate unified ROM sections before loading
Eric Dumazet <[email protected]>
ip6mr: do not clone dst in ip6mr_cache_report()
Jamal Hadi Salim <[email protected]>
net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue
Eric Dumazet <[email protected]>
net_sched: sch_fifo: implement lockless __fifo_dump()
Nikolay Aleksandrov <[email protected]>
net: bridge: arp/nd proxy: fix reading neigh ha
Nikolay Aleksandrov <[email protected]>
vxlan: fix reading neigh ha
Jérémy Jean <[email protected]>
NFSv4.1: zero referring call lists before decoding
Jamal Hadi Salim <[email protected]>
net/sched: account classifier filter allocations to memcg
Michael Kelley <[email protected]>
Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition
Radek Podgorny <[email protected]>
Bluetooth: do not leak an hci_conn when a second LE connect is rejected
Anshumali Gaur <[email protected]>
octeontx2-vf: fix workqueue and netdev race in probe/remove
Victor Nogueira <[email protected]>
net/sched: act_ife: Only operate on Ethernet frames
Jamal Hadi Salim <[email protected]>
net/sched: fq: add overflow bounds to quantum and initial quantum
Haotian Zhang <[email protected]>
samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: skip double clone set expressions on element insert
Doruk Tan Ozturk <[email protected]>
HID: sony: clean up device list on probe failure
Chuck Lever <[email protected]>
NFSD: Prevent client use-after-free during close_lru reaping
Jeffin Philip <[email protected]>
usb: gadget: f_midi: initialize work in f_midi_alloc()
Kees Cook <[email protected]>
usb: gadget: f_midi: Annotate struct f_midi with __counted_by
Kees Cook <[email protected]>
Compiler Attributes: Add __counted_by macro
Steven Rostedt <[email protected]>
tracing: Take trace_array reference when opening options file
Baineng Shou <[email protected]>
dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds
Aneesh Kumar K.V (Arm) <[email protected]>
dma-direct: return struct page from dma_direct_alloc_from_pool()
Christoph Hellwig <[email protected]>
dma-direct: simplify the use atomic pool logic in dma_direct_alloc
Petr Tesarik <[email protected]>
dma-direct: cleanup parameters to dma_direct_optimal_gfp_mask
Jinjie Ruan <[email protected]>
powerpc/kexec_file: Prevent kexec range truncation
Anthony Krowiak <[email protected]>
s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
Anthony Krowiak <[email protected]>
s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL
Anthony Krowiak <[email protected]>
s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects
Haoxiang Li <[email protected]>
ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
Vidhu Sarwal <[email protected]>
iio: light: ltrf216a: fix runtime PM reference leak in error path
Shreeya Patel <[email protected]>
iio: light: ltrf216a: Return floating point values
Christian Borntraeger <[email protected]>
KVM: s390: Fix memory corruption by not reinjecting CK machine checks
Fuad Tabba <[email protected]>
KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
Wenjie Qi <[email protected]>
f2fs: validate MOVE_RANGE destination size
Wenjie Qi <[email protected]>
f2fs: avoid NULL checkpoint thread access in sysfs
Zhiguo Niu <[email protected]>
f2fs: use new ioprio Macro to get ckpt thread ioprio level
Damien Le Moal <[email protected]>
scsi: block: ioprio: Clean up interface definition
Yangtao Li <[email protected]>
f2fs: convert to use sysfs_emit
Daeho Jeong <[email protected]>
f2fs: fix to migrate all curseg types during free_segment_range
Chao Yu <[email protected]>
f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
Chao Yu <[email protected]>
f2fs: fix to clear dirty flag on folio in error path
Jesse Zhang <[email protected]>
drm/amdgpu: force complete the KIQ ring fences on reset
Priya Hosur <[email protected]>
drm/amdkfd: Add TLB flush after MES queue eviction/suspension
Xiaogang Chen <[email protected]>
drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
Xiaogang Chen <[email protected]>
drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram
Marek Czernohous <[email protected]>
drm/nouveau: unsubscribe the channel-kill event before the fence context
Jiri Olsa <[email protected]>
bpf: Disable preemption in bpf_get_stackid
Farhan Ali <[email protected]>
PCI: Allow per function PCI slots to fix slot reset on s390
Farhan Ali <[email protected]>
PCI: Introduce PCI_SLOT_PLACEHOLDER constant for slot_nr placeholder value
Namjae Jeon <[email protected]>
ksmbd: zero pipe read compound padding
Cen Zhang (Microsoft Security FORGE Labs) <[email protected]>
ksmbd: fix tree connection use-after-free in smb2_tree_connect()
Jann Horn <[email protected]>
apparmor: fix cred UAF caused by begin_current_label_crit_section()
Quanfa Fu <[email protected]>
apparmor: make aa_set_current_onexec return void
Breno Leitao <[email protected]>
mm/kmemleak: avoid soft lockup when scanning task stacks
Jim Cromie <[email protected]>
kmemleak: drop (age <increasing>) from leak record
Zhaoyang Huang <[email protected]>
mm: use stack_depot for recording kmemleak's backtrace
Kairui Song <[email protected]>
mm/mglru: fix and remove redundant unevictable folio handling
Daniel Borkmann <[email protected]>
bpf: Disable preemption in __bpf_get_stack
Chuck Lever <[email protected]>
svcrdma: Reject Read lists that exceed the page budget
Chuck Lever <[email protected]>
svcrdma: Validate Read chunk positions before reconstruction
Jiangshan Yi <[email protected]>
HID: nintendo: register input device after capabilities are set
Eric Farman <[email protected]>
s390/vfio_ccw: Ensure first IDAW remains constant
David Windsor <[email protected]>
bpf: Reject sleepable BPF_LSM_CGROUP programs at load time
Jordan Walters <[email protected]>
Bluetooth: hci_core: Fix UAF in hci_unregister_dev()
Eric Dumazet <[email protected]>
net: watchdog: fix refcount tracking races
Jamie Nguyen <[email protected]>
fs/ntfs3: resize log->one_page_buf when adopting on-disk page size
Cen Zhang <[email protected]>
Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
Marc Zyngier <[email protected]>
KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling
Kanglong Wang <[email protected]>
LoongArch: Move jump_label_init() before parse_early_param()
Qing Ming <[email protected]>
cgroup/rstat: validate cpu before css_rstat_cpu() access
Florian Westphal <[email protected]>
netfilter: revalidate bridge ports
Damien Riégel <[email protected]>
greybus: raw: fix use-after-free if write is called after disconnect
Yongpeng Yang <[email protected]>
f2fs: fix fsck inconsistency caused by FGGC of node block
Gao Xiang <[email protected]>
erofs: fix inline data read failure for ztailpacking pclusters
Florian Westphal <[email protected]>
netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation
Xingui Yang <[email protected]>
scsi: hisi_sas: Fix NULL pointer exception during user_scan()
Fernando Fernandez Mancera <[email protected]>
ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()
Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: clone set on flush only
Peilin Ye <[email protected]>
bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
Qu Wenruo <[email protected]>
btrfs: avoid NULL pointer dereference if no valid csum tree
Qu Wenruo <[email protected]>
btrfs: avoid NULL pointer dereference if no valid extent tree
Zqiang <[email protected]>
rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
Alex Hung <[email protected]>
drm/amd/display: Check link_index before accessing dc->links[]
Hugo Villeneuve <[email protected]>
serial: sc16is7xx: fix TX fifo corruption
Junxian Huang <[email protected]>
RDMA/hns: Fix soft lockup under heavy CEQE load
Gavin Shan <[email protected]>
mm/shmem: disable PMD-sized page cache if needed
Jacob Keller <[email protected]>
ice: Don't process extts if PTP is disabled
Gavin Shan <[email protected]>
mm/filemap: skip to create PMD-sized page cache if needed
Longlong Xia <[email protected]>
zram: fix out-of-bounds access in writeback_store()
Chuck Lever <[email protected]>
NFSD: check truncate permission under inode lock
Jeff Layton <[email protected]>
lockd, nfsd: RCU-protect nlmsvc_ops dispatch
Jeff Layton <[email protected]>
nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
Jeff Layton <[email protected]>
nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net
Jeff Layton <[email protected]>
nfsd: fix stale s2s_cp_stateids IDR entry for async COPY
Chris Mason <[email protected]>
nfsd: gate nfs3 setacl by argp->mask
Robbie Ko <[email protected]>
nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops
Chuck Lever <[email protected]>
NFSD: Prevent client use-after-free during delegation revoke
Xiubo Li <[email protected]>
ceph: fix UAF in check_new_map() on session freed during unlock
Michael Bommarito <[email protected]>
ceph: cap delegated inode count in ceph_parse_deleg_inos()
Max Kellermann <[email protected]>
ceph: do not repeat ceph_trim_dentries() if no progress possible
Guanghui Yang <[email protected]>
btrfs: drop recovered reloc root refs on recovery failure
Anand Jain <[email protected]>
btrfs: rename err to ret in btrfs_recover_relocation()
Anand Jain <[email protected]>
btrfs: rename ret to ret2 in btrfs_recover_relocation()
Anand Jain <[email protected]>
btrfs: rename ret to err in btrfs_recover_relocation()
Shuangpeng Bai <[email protected]>
btrfs: fix extent map leak in NOCOW direct I/O write
Frank Sorenson <[email protected]>
cifs: call pagecache_isize_extended() in cifs_setsize() when extending
Bryam Vargas <[email protected]>
smb: client: reject a tree connect response whose byte count is too small
Jiangshan Yi <[email protected]>
HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes
Florian Pradines <[email protected]>
HID: mcp2221: fix OOB write in mcp2221_raw_event()
Jan Kara <[email protected]>
ext2: Fix lost inode updates for IS_SYNC inodes
Hui Su <[email protected]>
fbdev: ssd1307fb: defer I2C transfers from damage callbacks
Thomas Zimmermann <[email protected]>
fbdev/ssd1307fb: Generate deferred I/O ops
Thomas Zimmermann <[email protected]>
fbdev: Add initializer macros for struct fb_ops
Thomas Zimmermann <[email protected]>
fbdev: Validate info->screen_{base, buffer} in fb_ops implementationsThomas Zimmermann <[email protected]>
fbdev: Don't re-validate info->state in fb_ops implementations
Bryam Vargas <[email protected]>
dm array: validate array block headers on read
Heinz Mauelshagen <[email protected]>
dm: correct block comments format.
Zhiling Zou <[email protected]>
ip: orphan prefetched skbs before multicast forwarding
Andrea Mayer <[email protected]>
ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()
Chris Mason <[email protected]>
SUNRPC: svcauth_gss: enforce krb5 token minimum length
Chuck Lever <[email protected]>
SUNRPC: Convert unwrap_priv_data() to use xdr_stream
Chuck Lever <[email protected]>
SUNRPC: Rename automatic variables in unwrap_priv_data()
Chuck Lever <[email protected]>
SUNRPC: Fix crasher in unwrap_integ_data()
Jeff Layton <[email protected]>
sunrpc: defer rq_argp and rq_resp free until after RCU grace period
Luxiao Xu <[email protected]>
sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
Chuck Lever <[email protected]>
SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2
Chuck Lever <[email protected]>
svcrdma: Reject connection when transport allocation fails
Chuck Lever <[email protected]>
svcrdma: Handle ADDR_CHANGE CM event properly
Chuck Lever <[email protected]>
svcrdma: Reject inline replies that overflow the pull-up buffer
Chuck Lever <[email protected]>
svcrdma: Use svc_xprt_put to free listener on create failure
Yan Zhen <[email protected]>
sunrpc: xprtrdma: Use ERR_CAST() to return
Chuck Lever <[email protected]>
svcrdma: Refactor the creation of listener CMA ID
Chuck Lever <[email protected]>
svcrdma: Allocate new transports on device's NUMA node
Tejun Heo <[email protected]>
sched/core: Make core-sched flips wait for in-flight selections
Shuangpeng Bai <[email protected]>
lockd: fix NULL dereference on lockowner allocation failure
Fan Wu <[email protected]>
power: supply: charger-manager: register regulators before exposing sysfs
Uwe Kleine-König <[email protected]>
power: supply: charger-manager: Convert to platform remove callback returning void
Fan Wu <[email protected]>
power: supply: lp8788-charger: fix use-after-free on remove
Andrew Davis <[email protected]>
power: supply: lp8788: Use devm_power_supply_register() helper
Uwe Kleine-König <[email protected]>
power: supply: lp8788-charger: Convert to platform remove callback returning void
Jianing Li <[email protected]>
power: supply: max17040: propagate register read errors
Weimin Xiong <[email protected]>
iommu/msm: Unwind probe state on registration failure
Kevin Tian <[email protected]>
iommu/vt-d: Force requesting ACS when tboot is enabled
Lu Baolu <[email protected]>
iommu: Add max_pasids field in struct iommu_device
Abdun Nihaal <[email protected]>
platform/x86: int1092: Fix potential memory leak in sar_probe()
Rafael J. Wysocki <[email protected]>
platform/x86: intel_sar: Check ACPI_HANDLE() against NULL
Mario Limonciello <[email protected]>
platform/x86/amd/pmc: Propagate SMU errors and validate S2D address
Zihan Xi <[email protected]>
net: l2tp: do not propagate multicast notification errors
Xuanqiang Luo <[email protected]>
net: ravb: serialize PTP clock teardown
Fan Ye <[email protected]>
net: thunderbolt: Mark the connection down when bringing it up fails
Fan Ye <[email protected]>
net: thunderbolt: Release the Rx HopID that was handed out on mismatch
Hidayath Khan <[email protected]>
net/smc: stop killed, freed and out_of_sync sharing a byte
Abdun Nihaal <[email protected]>
mfd: sm501: Fix potential memory leaks during remove
Uwe Kleine-König <[email protected]>
mfd: sm501: Convert to platform remove callback returning void
Paul Cercueil <[email protected]>
mfd: sm501: Remove #ifdef guards for PM related functions
Dawei Feng <[email protected]>
wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()
Bryam Vargas <[email protected]>
wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy
StanleyYP Wang <[email protected]>
wifi: mt76: mt7915: set correct background radar capability
Eric Dumazet <[email protected]>
vlan: fix skb_under_panic and races when toggling HW VLAN offload
David Rosca <[email protected]>
drm/amdgpu: Fix UVD dpb min size calculation for H264
Srinivasan Shanmugam <[email protected]>
drm/amd/amdgpu: Fix errors & warnings in amdgpu _uvd, _vce.c
Wei Fang <[email protected]>
net: tap: fix wrong transport_header when sending VLAN-tagged frame
Akihiko Odaki <[email protected]>
tap: Keep hdr_len in tap_get_user()
Leon Romanovsky <[email protected]>
ntb: Store original DMA address for future release
Koichiro Den <[email protected]>
NTB: ntb_transport: Use ntb_get_dma_dev() for DMA buffers
Koichiro Den <[email protected]>
NTB: core: Add .get_dma_dev() callback to ntb_dev_ops
Eric Dumazet <[email protected]>
tipc: avoid busy looping in tipc_exit_net()
Ibrahim Hashimov <[email protected]>
RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp
Yong Wang <[email protected]>
tcp: clamp route advmss to TCP_MIN_MSS
Kyle Zeng <[email protected]>
net/packet: defer vmalloc TX_RING free until skbs finish
Fourie Zhang <[email protected]>
netfilter: nf_tables: don't queue packet path object notifications
Bryam Vargas <[email protected]>
crypto: virtio - bound the akcipher result length
Lukas Wunner <[email protected]>
crypto: virtio - Drop superfluous [as]kcipher_req pointer
Lukas Wunner <[email protected]>
crypto: virtio - Drop superfluous [as]kcipher_ctx pointer
Lukas Wunner <[email protected]>
crypto: virtio - Drop sign/verify operations
Markus Elfring <[email protected]>
crypto: virtio - Less function calls in __virtio_crypto_akcipher_do_req() after error detection
Thomas Zimmermann <[email protected]>
fbdev: Wrap user-invoked calls to fb_set_var() in helper
Ali Ahmet Memis <[email protected]>
Bluetooth: ISO: zero the sockaddr before returning it in getname
Bryam Vargas <[email protected]>
selinux: reject a permission value exceeding the class permission count
William Palacek <[email protected]>
drm/amdkfd: Add bounds check for CRAT subtype length
Yongqiang Sun <[email protected]>
drm/amdkfd: Fix infinite loop parsing CRAT with zero subtype length
Shay Drory <[email protected]>
net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock
Luxiao Xu <[email protected]>
bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie
Stefan Haberland <[email protected]>
s390/dasd: Fix undersized format-check buffer
Heiko Carstens <[email protected]>
s390: include linux/io.h instead of asm/io.h
Baoquan He <[email protected]>
s390/mm: do not include <asm-generic/io.h> directly
Thomas Richter <[email protected]>
s390/cpum_sf: move functions from header file to source file
Heiko Carstens <[email protected]>
s390/appldata: remove power management callbacks
Yuho Choi <[email protected]>
dmaengine: idxd: fix double free of wq, engine, and group structs
Guenter Roeck <[email protected]>
hwmon: (sht3x) Fix unaligned accesses
Chenguang Zhao <[email protected]>
net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller
Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
Prasanna Kumar T S M <[email protected]>
soc: xilinx: Shutdown and free rx mailbox channel
Uwe Kleine-König <[email protected]>
soc/xilinx: zynqmp_power: Convert to platform remove callback returning void
Yihang Li <[email protected]>
scsi: hisi_sas: Add slave_destroy interface for v3 hw
Yuho Choi <[email protected]>
media: atomisp: gc2235: fix UAF and memory leak
Qiuxu Zhuo <[email protected]>
EDAC/igen6: Fix call trace due to missing release()
Fernando Fernandez Mancera <[email protected]>
netfilter: synproxy: fix unaligned memory access in timestamp adjustment
Fernando Fernandez Mancera <[email protected]>
netfilter: synproxy: adjust duplicate timestamp options
Fernando Fernandez Mancera <[email protected]>
netfilter: synproxy: drop packets if timestamp adjustment fails
Florian Westphal <[email protected]>
netfilter: make nftables drops visible in net dropmonitor
David Carlier <[email protected]>
netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag
Weiming Shi <[email protected]>
btrfs: lzo: reject compressed segment that overflows the compressed input
Ratheesh Kannoth <[email protected]>
octeontx2-af: npc: Fix size of entry2cntr_map
Cen Zhang <[email protected]>
ALSA: seq: oss: Serialize readq reset state with q->lock
James Clark <[email protected]>
coresight: ete: Always save state on power down
Ivan Abramov <[email protected]>
ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()
Li RongQing <[email protected]>
ACPI: processor_idle: Mark LPI enter functions as __cpuidle
Matthieu Baerts (NGI0) <[email protected]>
mptcp: avoid combining some incoming suboptions
Candice Li <[email protected]>
drm/amdgpu: reject oversized IBs with per-ring packet limits
Eric Farman <[email protected]>
s390/vfio_ccw: Limit the number of channel program segments
Mark Brown <[email protected]>
ASoC: tas2562: Validate values for volume writes
Hongjie Fang <[email protected]>
scsi: core: pair EH runtime PM get and put
Julian Anastasov <[email protected]>
ipvs: revalidate ihl to prevent out-of-bounds access
Jamal Hadi Salim <[email protected]>
net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
Victor Nogueira <[email protected]>
net: sched: Add initial TC error skb drop reasons
Victor Nogueira <[email protected]>
net: sched: Move drop_reason to struct tc_skb_cb
Jamal Hadi Salim <[email protected]>
net, sched: Fix SKB_NOT_DROPPED_YET splat under debug config
Daniel Borkmann <[email protected]>
net, sched: Make tc-related drop reason more flexible
Eric Dumazet <[email protected]>
l2tp: fix tunnel and session refcount leak on seq_file release
Mark Tomlinson <[email protected]>
gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock
Karthikeyan KS <[email protected]>
soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read
David Lee <[email protected]>
btrfs: lzo: reject inline extents without valid headers
Chengfeng Ye <[email protected]>
bpf: Fix netns reference imbalance in conntrack kfuncs
Linfeng Sun <[email protected]>
vhost_iotlb: bound map allocation in add_range
Jamal Hadi Salim <[email protected]>
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers
Xin Long <[email protected]>
net: sched: refine software bypass handling in tc_run
Jianbo Liu <[email protected]>
net: sched: cls_api: fix slab-use-after-free in fl_dump_key
Asbjørn Sloth Tønnesen <[email protected]>
net: sched: cls_api: add filter counter
Asbjørn Sloth Tønnesen <[email protected]>
net: sched: cls_api: add skip_sw counter
Eric Dumazet <[email protected]>
netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
Alexandra Winter <[email protected]>
s390/ism: Fix UAF of sba and ieq during ism_dev_exit()
Hongyan Xu <[email protected]>
watchdog: at91sam9_wdt: prevent timer rearm during teardown
Dongli Zhang <[email protected]>
net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()
Jérémy Jean <[email protected]>
tls: rx: restore msg_iter before TLS 1.3 optimistic retry
Sabrina Dubroca <[email protected]>
selftests: tls: add rekey tests
Sabrina Dubroca <[email protected]>
selftests: tls: add test with a partially invalid iov
Sabrina Dubroca <[email protected]>
selftests: tls: add getsockopt test
Zhiling Zou <[email protected]>
mm/page_table_check: skip special zero mappings
Lorenzo Stoakes (ARM) <[email protected]>
mm/ptdump: always stabilise against page table freeing using init_mm
Dongjiang Zhu <[email protected]>
btrfs: skip global block reserve accounting for rescue mounts
Cen Zhang (Microsoft) <[email protected]>
net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds
Eric Dumazet <[email protected]>
net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()
Pauli Virtanen <[email protected]>
Bluetooth: ISO: hold sk properly in iso_conn_ready
Hariprasad Kelam <[email protected]>
octeontx2-af: Block VFs from clobbering special CGX PKIND state
Harald Freudenberger <[email protected]>
s390/zcrypt: Close speculative mem read possibility
Zack Rusin <[email protected]>
drm/vmwgfx: reject DX_BIND_QUERY without a DX context
Werner Kasselman <[email protected]>
drm/radeon: fix integer overflow in radeon_align_pitch()
Wei Zhang <[email protected]>
wifi: ath11k: cancel SSR work items during PCI shutdown
Di Shen <[email protected]>
OPP: Fix race between OPP addition and lookup
Alexander Aring <[email protected]>
dlm: fix add msg handle in send_queue ordered
Prathamesh Deshpande <[email protected]>
IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier
Pengpeng Hou <[email protected]>
tracing: Bound synthetic-field strings with seq_buf
Kees Cook <[email protected]>
seq_buf: Introduce DECLARE_SEQ_BUF and seq_buf_str()
Matthew Wilcox (Oracle) <[email protected]>
tracing: Move readpos from seq_buf to trace_seq
Sergey Senozhatsky <[email protected]>
seq_buf: Add seq_buf_do_printk() helper
Lianfa Weng <[email protected]>
RDMA/hns: Fix log flood after cmd_mbox failure
Takashi Iwai <[email protected]>
ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data
Geliang Tang <[email protected]>
nvmet-tcp: fix page fragment cache leak in error path
Michael S. Tsirkin <[email protected]>
vhost: fix vhost_get_avail_idx for a non empty ring
Michael S. Tsirkin <[email protected]>
vhost: move smp_rmb() into vhost_get_avail_idx()
Xianting Tian <[email protected]>
vhost: correct misleading printing information
Zhang Cen <[email protected]>
ocfs2: validate fast symlink target during inode read
Pablo Neira Ayuso <[email protected]>
netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount
Bernard Metzler <[email protected]>
RDMA/siw: Fix endpoint/socket association handling
Guoqing Jiang <[email protected]>
RDMA/siw: Introduce siw_destroy_cep_sock
Filipe Manana <[email protected]>
btrfs: fix deadlock cloning inline extent when using flushoncommit
Larysa Zaremba <[email protected]>
ixgbe: do not configure xps for XDP queues
Aditya Prakash Srivastava <[email protected]>
ext4: fix kernel BUG in ext4_write_inline_data_end
Yun Zhou <[email protected]>
ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
Cássio Gabriel <[email protected]>
ASoC: topology: Check PCM and DAI name strings before use
HanQuan <[email protected]>
ALSA: seq: Fix kernel heap address leak in bounce_error_event()
Takashi Iwai <[email protected]>
ALSA: seq: Drop superfluous filter argument of get_event_dest_client()
Joe Damato <[email protected]>
bnxt: fix head underflow on XDP head-grow
Cen Zhang <[email protected]>
ALSA: seq: avoid stale FIFO cells during resize
Takashi Iwai <[email protected]>
ALSA: seq: Clean up fifo locking with guard
Takashi Iwai <[email protected]>
ALSA: seq: fifo: Use guard() for locking
Kuniyuki Iwashima <[email protected]>
sockmap: Fix use-after-free in udp_bpf_recvmsg()
Jacob Moroni <[email protected]>
RDMA/irdma: Replace waitqueue and flag with completion
Baoli.Zhang <[email protected]>
soundwire: fix bug in sdw_add_element_group_count found by syzkaller
Yang Erkun <[email protected]>
nfs: use nfsi->rwsem to protect traversal of the file lock list
Abd-Alrhman Masalkhi <[email protected]>
md/raid1: fix writes_pending and barrier reference leaks on write failures
Abd-Alrhman Masalkhi <[email protected]>
md/raid10: fix writes_pending leak on write request failures
John Garry <[email protected]>
md/raid10: Handle bio_split() errors
Abd-Alrhman Masalkhi <[email protected]>
md/raid10: fix writes_pending and barrier reference leaks on discard failures
Yiyang Chen <[email protected]>
bpf: Guard conntrack opts error writes
Chen Cheng <[email protected]>
md/raid5: avoid R5_Overlap races while breaking stripe batches
Florian Westphal <[email protected]>
netfilter: nft_compat: ebtables emulation must reject non-bridge targets
Eric Dumazet <[email protected]>
net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync
Eric Dumazet <[email protected]>
tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()
Xin Long <[email protected]>
sctp: add INIT verification after cookie unpacking
Xin Long <[email protected]>
sctp: fix addr_wq_timer race in sctp_free_addr_wq()
Haofeng Li <[email protected]>
ksmbd: reject undersized DACLs before parsing ACEs
Michael Bommarito <[email protected]>
xen/pvcalls: bound backend response req_id before indexing rsp[]
Christian Brauner <[email protected]>
fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
David Howells <[email protected]>
afs: Fix reinitialisation of the inode, in particular ->lock_work
Feng Liu <[email protected]>
net/mlx5e: Fix publication race for priv->channel_stats[]
Jamal Hadi Salim <[email protected]>
net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload
Cen Zhang <[email protected]>
Bluetooth: 6lowpan: avoid untracked enable work
Yuho Choi <[email protected]>
net/liquidio: drop cached VF pci_dev LUT
Sandipan Das <[email protected]>
perf/x86/amd/core: Avoid enabling BRS from the SVM reload path
Eric Dumazet <[email protected]>
ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()
Tamaki Yanagawa <[email protected]>
netfilter: nft_lookup: fix catchall element handling with inverted lookups
Theodor Arsenij Larionov-Trichkine <[email protected]>
netfilter: nft_fib: reject fib expression on the netdev egress hook
Deepanshu Kartikey <[email protected]>
mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
Matthew Wilcox (Oracle) <[email protected]>
fs: Remove NTFS classic
Florian Fuchs <[email protected]>
mtd: maps: vmu-flash: fix fault in unaligned fixup
Ian Bridges <[email protected]>
ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec
Deepanshu Kartikey <[email protected]>
ocfs2: validate i_refcount_loc when refcount flag is set
Dmitry Antipov <[email protected]>
ocfs2: add extra consistency checks for chain allocator dinodes
Dmitry Antipov <[email protected]>
ocfs2: add suballoc slot check in ocfs2_validate_inode_block()
Julian Sun <[email protected]>
ocfs2: correct l_next_free_rec in online check
Koichiro Den <[email protected]>
dmaengine: dw-edma-pcie: Reject devices without driver data
Haoxiang Li <[email protected]>
platform/x86: dell-laptop: fix missing cleanups in init error path
Lyndon Sanche <[email protected]>
platform/x86: dell-smbios: Move request functions for reuse
Armin Wolf <[email protected]>
ACPI: battery: Pass battery hook pointer to hook callbacks
Michael Bommarito <[email protected]>
nvmet-auth: reject short AUTH_RECEIVE buffers
Damien Le Moal <[email protected]>
nvmet: Introduce nvmet_req_transfer_len()
Mikulas Patocka <[email protected]>
dm-ioctl: fix a possible overflow in list_version_get_info
Heinz Mauelshagen <[email protected]>
dm: avoid spaces before function arguments or in favour of tabs
Mikulas Patocka <[email protected]>
dm ioctl: a small code cleanup in list_version_get_info
Mikulas Patocka <[email protected]>
dm-verity: fix buffer overflow in FEC calculation
Martin Kaiser <[email protected]>
riscv: probes: save original sp in rethook trampoline
Guoniu Zhou <[email protected]>
pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI
Peng Fan <[email protected]>
pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
Zhao Li <[email protected]>
wifi: ieee80211: validate MLE common info length
Harald Freudenberger <[email protected]>
s390/zcrypt: Fix buffer over-read in cca_cipher2protkey
Rosen Penev <[email protected]>
ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning
Amir Goldstein <[email protected]>
ovl: check access to copy_file_range source with src mounter creds
Linmao Li <[email protected]>
drm/vc4: Prevent shader BO mappings from becoming writable
Jamal Hadi Salim <[email protected]>
net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains
George Guo <[email protected]>
LoongArch: Fix address space mismatch in kexec command line lookup
Petr Wozniak <[email protected]>
xfrm: fix stale skb->prev after async crypto steals a GSO segment
Jacob Moroni <[email protected]>
RDMA/irdma: Prevent user-triggered null deref on QP create
Maoyi Xie <[email protected]>
wifi: mac80211: defer link RX stats percpu free to RCU
Sarika Sharma <[email protected]>
wifi: cfg80211: add link_station_info structure to support MLO statistics
Sarika Sharma <[email protected]>
wifi: mac80211: refactor populating mesh related fields in sinfo
Peddolla Harshavardhan Reddy <[email protected]>
wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock
Cen Zhang <[email protected]>
wifi: cfg80211: use wiphy work for socket owner autodisconnect
Mostafa Saleh <[email protected]>
firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()
Matt Bobrowski <[email protected]>
bpf: Fix UAF in sock clone early bailouts
David Jeffery <[email protected]>
scsi: core: wake eh reliably when using scsi_schedule_eh
Guanghui Feng <[email protected]>
iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()
Weiming Shi <[email protected]>
tipc: serialize udp bearer replicast list updates
Frank Sorenson <[email protected]>
cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths
Frank Sorenson <[email protected]>
cifs: prevent readdir from changing file size due to stale directory metadata
Gregor Herburger <[email protected]>
drm/vc4: hvs/v3d: Fix null dereference in unbind
Gal Pressman <[email protected]>
net/mlx5: Fix MCIA register buffer overflow on 32 dword reads
Tvrtko Ursulin <[email protected]>
drm/amdgpu: Fix context pstate override handling
James Zhu <[email protected]>
drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure
David Francis <[email protected]>
drm/amdkfd: Check bounds on CRIU restore queue type and mqd size
Jani Nikula <[email protected]>
drm/i915/bios: range check LFP Data Block panel_type2
Joonas Lahtinen <[email protected]>
drm/i915/gt: Fix NULL deref on sched_engine alloc failure
Jani Nikula <[email protected]>
drm/i915/mst: limit DP MST ESI service loop
Mario Limonciello <[email protected]>
drm/amdgpu: Release VFCT ACPI table reference
Lijo Lazar <[email protected]>
drm/amdgpu: Add wrapper for freeing vbios memory
Lijo Lazar <[email protected]>
drm/amdgpu: Use dbg level for VBIOS check messages
Srinivasan Shanmugam <[email protected]>
drm/amd/amdgpu: Fix errors & warnings in amdgpu _bios, _cs, _dma_buf, _fence.c
Linmao Li <[email protected]>
drm/vc4: Shut down BO cache timer before teardown
Guangshuo Li <[email protected]>
media: vivid: fix cleanup bugs in vivid_init()
Yuxiang Yang <[email protected]>
tcp: challenge ACK for non-exact RST in SYN-RECEIVED
Asad Kamal <[email protected]>
drm/amdgpu: fix aperture mapping leak
Namjae Jeon <[email protected]>
ksmbd: bound DACL dedup walk to copied ACEs
Davide Ornaghi <[email protected]>
ksmbd: fix path resolution in ksmbd_vfs_kern_path_create
Sean Christopherson <[email protected]>
KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state
Taeyang Lee <[email protected]>
perf/core: Detach event groups during remove_on_exec
Cássio Gabriel <[email protected]>
ALSA: hda/cs35l41: Fix firmware load work teardown
Myeonghun Pak <[email protected]>
usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
Breno Leitao <[email protected]>
netpoll: fix a use-after-free on shutdown path
Namjae Jeon <[email protected]>
ksmbd: prevent path traversal bypass by restricting caseless retry
Namjae Jeon <[email protected]>
ksmbd: use opener credentials for delete-on-close
Namjae Jeon <[email protected]>
ksmbd: use opener credentials for ADS I/O
Haofeng Li <[email protected]>
ksmbd: validate NTLMv2 response before updating session key
Ralph Boehme <[email protected]>
smb/client: fix chown/chgrp with SMB3 POSIX Extensions
Dawei Feng <[email protected]>
usb: free iso schedules on failed submit
Xu Rao <[email protected]>
usb: gadget: f_printer: take kref only for successful open
Andrzej Pietrasiewicz <[email protected]>
usb: gadget: function: Simplify diagnostic messaging in printer
Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect race
Bryam Vargas <[email protected]>
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
Tianchu Chen <[email protected]>
nvmet-auth: validate reply message payload bounds against transfer length
Hannes Reinecke <[email protected]>
nvmet: return DHCHAP status codes from nvmet_setup_auth()
Ahsan Atta <[email protected]>
crypto: qat - protect service table iterations with service_lock
Guenter Roeck <[email protected]>
hwmon: (lm90) Add lock protection to lm90_alert
Martin Kaiser <[email protected]>
test_kprobes: clear kprobes between test runs
Jia Zhu <[email protected]>
erofs: fix metabuf leak in inode xattr initialization
Jiajia Liu <[email protected]>
Bluetooth: btmtk: fix urb->setup_packet leak in error paths
Junyi Liu <[email protected]>
ksmbd: validate SID in parent security descriptor during ACL inheritance
Florian Westphal <[email protected]>
netfilter: ebtables: move to two-stage removal scheme
Florian Westphal <[email protected]>
netfilter: bridge: eb_tables: close module init race
Guenter Roeck <[email protected]>
hwmon: (lm90) Stop work before releasing hwmon device
Xingwang Xiang <[email protected]>
bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
Keith Busch <[email protected]>
blk-mq: pop cached request if it is usable
Fernando Fernandez Mancera <[email protected]>
netfilter: nf_tables: fix dst corruption in same register operation
Phil Sutter <[email protected]>
netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters
Heitor Alves de Siqueira <[email protected]>
Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close
Greg Kroah-Hartman <[email protected]>
usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers
Greg Kroah-Hartman <[email protected]>
usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()
Greg Kroah-Hartman <[email protected]>
usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT
Sean Christopherson <[email protected]>
KVM: SEV: Ignore Port I/O requests of length '0'
SeungJu Cheon <[email protected]>
Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
Yinjie Yao <[email protected]>
drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings
Yinjie Yao <[email protected]>
drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings
Yinjie Yao <[email protected]>
drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings
Yinjie Yao <[email protected]>
drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring
Yinjie Yao <[email protected]>
drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring
Yinjie Yao <[email protected]>
drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring
Yinjie Yao <[email protected]>
drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring
Yinjie Yao <[email protected]>
drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring
Ian Bridges <[email protected]>
fbdev: fix use-after-free in store_modes()
Konstantin Khorenko <[email protected]>
gcov: use atomic counter updates to fix concurrent access crashes
Hongling Zeng <[email protected]>
fbdev: omap2: fix use-after-free in omapfb_mmap
Hongling Zeng <[email protected]>
fbdev: omap2: fix inconsistent lock returns in omapfb_mmap
Anna Maniscalco <[email protected]>
drm/msm: always recover the gpu
Alysa Liu <[email protected]>
drm/amdkfd: Add upper bound check for num_of_nodes
Yongpeng Yang <[email protected]>
f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage
Sean Christopherson <[email protected]>
KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying
Harry Wentland <[email protected]>
drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()
Rory Little <[email protected]>
wifi: mt76: mt7921: Place upper limit on station AID
Srinivasan Shanmugam <[email protected]>
drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths
Stylon Wang <[email protected]>
drm/amd/display: Add interface to enable DPIA trace
Erni Sri Satya Vennela <[email protected]>
net: mana: Guard mana_remove against double invocation
Morduan Zang <[email protected]>
net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
Qu Wenruo <[email protected]>
btrfs: only release the dirty pages io tree after successful writes
Gao Xiang <[email protected]>
erofs: fix use-after-free on sbi->sync_decompress
Jiayuan Chen <[email protected]>
netfilter: nft_ct: bail out on template ct in get eval
Lee Jones <[email protected]>
l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
Fedor Pchelkin <[email protected]>
wifi: fix leak if split 6 GHz scanning fails
Yun Zhou <[email protected]>
gpio: mvebu: fix NULL pointer dereference in suspend/resume
Uwe Kleine-König <[email protected]>
gpio: mvebu: Use IS_REACHABLE instead of IS_ENABLED for CONFIG_PWM
Maxime Chevallier <[email protected]>
net: phy: clean the sfp upstream if phy probing fails
Dragos Tatulea <[email protected]>
net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list
Shay Drory <[email protected]>
net/mlx5: Add generic getters for other functions caps
Dragos Tatulea <[email protected]>
net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure
Xin Long <[email protected]>
sctp: validate embedded INIT chunk and address list lengths in cookie
HyungJung Joo <[email protected]>
fs/mbcache: cancel shrink work before destroying the cache
Filipe Manana <[email protected]>
btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
Ritesh Harjani (IBM) <[email protected]>
powerpc/64s: Fix unmap race with PMD migration entries
Zilin Guan <[email protected]>
wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req()
Sechang Lim <[email protected]>
bpf: Fix RCU stall in bpf_fd_array_map_clear()
Lang Xu <[email protected]>
bpf: Fix OOB in pcpu_init_value
Xin Long <[email protected]>
sctp: disable BH before calling udp_tunnel_xmit_skb()
Vasant Hegde <[email protected]>
iommu/amd: Fix clone_alias() to use the original device's devid
Deepanshu Kartikey <[email protected]>
fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
Damien Riégel <[email protected]>
greybus: raw: fix use-after-free on cdev close
Jianan Huang <[email protected]>
f2fs: avoid reading already updated pages during GC
Yongpeng Yang <[email protected]>
f2fs: fix data loss caused by incorrect use of nat_entry flag
Gao Xiang <[email protected]>
erofs: unify lcn as u64 for 32-bit platforms
Michal Schmidt <[email protected]>
ice: fix double-free of tx_buf skb
Pablo Neira Ayuso <[email protected]>
netfilter: nat: use kfree_rcu to release ops
Edward Adam Davis <[email protected]>
sched/psi: fix race between file release and pressure write
Amir Goldstein <[email protected]>
fsnotify: fix inode reference leak in fsnotify_recalc_mask()
Viacheslav Dubeyko <[email protected]>
ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size
Raphael Zimmer <[email protected]>
libceph: Fix potential out-of-bounds access in __ceph_x_decrypt()
Weiming Shi <[email protected]>
tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR
Haixin Xu <[email protected]>
crypto: jitterentropy - replace long-held spinlock with mutex
Stephan Müller <[email protected]>
crypto: jitter - replace LFSR with SHA3-256
D. Wythe <[email protected]>
Revert "net/smc: Introduce TCP ULP support"
Florian Westphal <[email protected]>
netfilter: nf_tables: use list_del_rcu for netlink hooks
Janne Grunau <[email protected]>
media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
Stephen Smalley <[email protected]>
selinux: allow multiple opens of /sys/fs/selinux/policy
Helge Deller <[email protected]>
AppArmor: Allow apparmor to handle unaligned dfa tables
Johan Hovold <[email protected]>
spi: mpc52xx: fix use-after-free on registration failure
Amir Shetaia <[email protected]>
drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
Johan Hovold <[email protected]>
spi: fsl: fix controller deregistration
Yang Yingliang <[email protected]>
spi: fsl-spi: switch to use modern name
Uwe Kleine-König <[email protected]>
spi: fsl-spi: Convert to platform remove callback returning void
Johan Hovold <[email protected]>
spi: rspi: fix controller deregistration
Uwe Kleine-König <[email protected]>
spi: rspi: Convert to platform remove callback returning void
Benjamin Cheng <[email protected]>
drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
David Rosca <[email protected]>
drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
David (Ming Qiang) Wu <[email protected]>
drm/amdgpu: limit AV1 to the first instance on VCN4 encode
Johan Hovold <[email protected]>
spi: mpc52xx: fix controller deregistration
Yang Yingliang <[email protected]>
spi: mpc52xx: switch to use modern name
Uwe Kleine-König <[email protected]>
spi: mpc52xx: Convert to platform remove callback returning void
Jason Gunthorpe <[email protected]>
RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
Takashi Iwai <[email protected]>
ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
Conor Dooley <[email protected]>
spi: microchip-core-qspi: control built-in cs manually
Yosry Ahmed <[email protected]>
KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12
Yosry Ahmed <[email protected]>
KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN
Yosry Ahmed <[email protected]>
KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
David Howells <[email protected]>
rxrpc: Fix memory leaks in rxkad_verify_response()
David Howells <[email protected]>
rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
Zhang Yi <[email protected]>
ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
Deepanshu Kartikey <[email protected]>
gfs2: fix memory leaks in gfs2_fill_super error path
Yao Kai <[email protected]>
rcu: Fix rcu_read_unlock() deadloop due to softirq
Lianjie Wang <[email protected]>
hwrng: core - use RCU and work_struct to fix race condition
Lu Baolu <[email protected]>
iommu/vt-d: Clear Present bit before tearing down context entry
Yongjian Sun <[email protected]>
ext4: fix e4b bitmap inconsistency reports
Matthew Wilcox (Oracle) <[email protected]>
ext4: convert bd_buddy_page to bd_buddy_folio
Matthew Wilcox (Oracle) <[email protected]>
ext4: convert bd_bitmap_page to bd_bitmap_folio
Gou Hao <[email protected]>
ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock()
Theodore Ts'o <[email protected]>
ext4: convert some BUG_ON's in mballoc to use WARN_RATELIMITED instead
Kemeng Shi <[email protected]>
ext4: remove unnecessary e4b->bd_buddy_page check in ext4_mb_load_buddy_gfp
Jie Zhang <[email protected]>
net: stmmac: fix oops when split header is enabled
Boris Burkov <[email protected]>
btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation
Julian Anastasov <[email protected]>
ipvs: do not keep dest_dst if dev is going down
Zhang Yi <[email protected]>
ext4: drop extent cache when splitting extent fails
Lu Baolu <[email protected]>
iommu/vt-d: Clear Present bit before tearing down PASID entry
Helge Deller <[email protected]>
apparmor: Fix & Optimize table creation from possibly unaligned memory
Ryan Lin <[email protected]>
HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients
Even Xu <[email protected]>
HID: Intel-ish-hid: Ishtp: Fix sensor reads after ACPI S3 suspend
Damien Le Moal <[email protected]>
ata: libata-scsi: avoid Non-NCQ command starvation
Shota Zaizen <[email protected]>
ksmbd: validate inherited ACE SID length
Jiayuan Chen <[email protected]>
bonding: fix type confusion in bond_setup_by_slave()
Chen Ni <[email protected]>
ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
Venkata Prasad Potturu <[email protected]>
ASoC: amd: acp: Refactor i2s clocks programming sequence
Venkata Prasad Potturu <[email protected]>
ASoC: amd: acp: Refactor dai format implementation
Venkata Prasad Potturu <[email protected]>
ASoC: amd: acp: Add setbias level for rt5682s codec in machine driver
Max Kellermann <[email protected]>
ceph: fix memory leaks in ceph_mdsc_build_path()
Vladimir Riabchun <[email protected]>
scsi: qla2xxx: Completely fix fcport double free
Adrian Hunter <[email protected]>
i3c: mipi-i3c-hci: Fix race in DMA ring dequeue
Adrian Hunter <[email protected]>
i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue
Zide Chen <[email protected]>
perf/x86/intel/uncore: Fix die ID init and look up bugs
Filipe Manana <[email protected]>
btrfs: reserve enough transaction items for qgroup ioctls
Ming Qian <[email protected]>
media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC
Nicolas Dufresne <[email protected]>
media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure
Sebastian Reichel <[email protected]>
media: hantro: Disable multicore support
Filipe Manana <[email protected]>
btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()
Qu Wenruo <[email protected]>
btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()
Jiasheng Jiang <[email protected]>
md-cluster: fix NULL pointer dereference in process_metadata_update
Magnus Lindholm <[email protected]>
alpha: fix user-space corruption during memory compaction
Arnd Bergmann <[email protected]>
arch: turn off -Werror for architectures with known warnings
Ankit Soni <[email protected]>
iommu/amd: move wait_on_sem() out of spinlock
Mario Peter <[email protected]>
usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()
Stefano Stabellini <[email protected]>
9p/xen: protect xen_9pfs_front_free against concurrent calls
Eugenio Pérez <[email protected]>
vhost: move vdpa group bound check to vhost_vdpa
Jiayuan Chen <[email protected]>
kcm: fix zero-frag skb in frag_list on partial sendmsg error
Henrique Carvalho <[email protected]>
smb: client: prevent races in ->query_interfaces()
Tetsuo Handa <[email protected]>
team: avoid NETDEV_CHANGEMTU event when unregistering slave
Shyam Prasad N <[email protected]>
cifs: Fix locking usage for tcon fields
Ping-Ke Shih <[email protected]>
wifi: rtw89: pci: validate sequence number of TX release report
Cédric Bellegarde <[email protected]>
ASoC: qcom: q6asm: drop DSP responses for closed data streams
Srinivas Kandagatla <[email protected]>
ASoC: qcom: q6asm: handle the responses after closing
Nicholas Carlini <[email protected]>
ksmbd: fix signededness bug in smb_direct_prepare_negotiation()
Prashanth K <[email protected]>
usb: dwc3: gadget: Move vbus draw to workqueue context
Tetsuo Handa <[email protected]>
xfrm: always flush state and policy upon NETDEV_UNREGISTER event
Christoph Hellwig <[email protected]>
xfs: remove xfs_attr_leaf_hasname
Harshit Mogalapalli <[email protected]>
ima: verify the previous kernel's IMA buffer lies in addressable RAM
Takashi Iwai <[email protected]>
ALSA: mixer: oss: Add card disconnect checkpoints
Cen Zhang <[email protected]>
Bluetooth: hci_sync: annotate data-races around hdev->req_status
Filipe Manana <[email protected]>
btrfs: fix zero size inode with non-zero size after log replay
Keenan Dong <[email protected]>
xfrm: account XFRMA_IF_ID in aevent size calculation
Eric Dumazet <[email protected]>
ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()
Steffen Klassert <[email protected]>
xfrm: Wait for RCU readers during policy netns exit
Justin Iurman <[email protected]>
net: ioam6: fix OOB and missing lock
Lee Jones <[email protected]>
HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
Lee Jones <[email protected]>
HID: core: Mitigate potential OOB by removing bogus memset()
Li Chen <[email protected]>
HID: rate-limit hid_warn to prevent log flooding
Tatsuya S <[email protected]>
HID: core: Add reserved item tag for main items
Sabrina Dubroca <[email protected]>
mpls: add seqcount to protect the platform_label{,s} pair
Guoyu Su <[email protected]>
net: use skb_header_pointer() for TCPv4 GSO frag_off check
Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
Kuniyuki Iwashima <[email protected]>
bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
Varun R Mallya <[email protected]>
bpf: Reject sleepable kprobe_multi programs at attach time
Daniel Borkmann <[email protected]>
bpf: Fix incorrect pruning due to atomic fetch precision tracking
Oleh Konko <[email protected]>
Bluetooth: hci_event: move wake reason storage into validated event handlers
Ville Syrjälä <[email protected]>
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
Kuen-Han Tsai <[email protected]>
usb: gadget: f_ecm: Fix net_device lifecycle with device_move
Kuen-Han Tsai <[email protected]>
usb: gadget: f_eem: Fix net_device lifecycle with device_move
Kuen-Han Tsai <[email protected]>
usb: gadget: f_subset: Fix net_device lifecycle with device_move
Kuen-Han Tsai <[email protected]>
usb: gadget: f_rndis: Fix net_device lifecycle with device_move
Michael Bommarito <[email protected]>
ksmbd: validate response sizes in ipc_validate_msg()
Michael Bommarito <[email protected]>
ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()
Douya Le <[email protected]>
crypto: af_alg - limit RX SG extraction by receive buffer budget
Yucheng Lu <[email protected]>
net/sched: sch_netem: fix out-of-bounds access in packet corruption
Qi Tang <[email protected]>
xfrm: hold dev ref until after transport_finish NF_HOOK
Jacky Bai <[email protected]>
pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled
Michael Zimmermann <[email protected]>
usb: gadget: f_hid: don't call cdev_init while cdev in use
Sean Christopherson <[email protected]>
KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock
Ge Yang <[email protected]>
KVM: SEV: Use long-term pin when registering encrypted memory regions
Janosch Frank <[email protected]>
s390/mm: Add missing secure storage access fixups for donated memory
Vladimir Yakovlev <[email protected]>
spi: spi-dw-dma: fix print error log when wait finish transaction
Chaitanya Kulkarni <[email protected]>
nvmet: move async event work off nvmet-wq
Kohei Enju <[email protected]>
iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
Jiayuan Chen <[email protected]>
team: fix header_ops type confusion with non-Ethernet ports
Guenter Roeck <[email protected]>
hwmon: (pmbus/core) Protect regulator operations with mutex
Eric Huang <[email protected]>
drm/amdgpu: prevent immediate PASID reuse case
Christophe JAILLET <[email protected]>
drm/amdgpu: Remove usage of the deprecated ida_simple_xx() API
Asim Viladi Oglu Manizada <[email protected]>
ksmbd: fix OOB write in QUERY_INFO for compound requests
Namjae Jeon <[email protected]>
ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
Jiayuan Chen <[email protected]>
serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
Filipe Manana <[email protected]>
btrfs: log new dentries when logging parent dir of a conflicting inode
Allison Henderson <[email protected]>
net/rds: Fix circular locking dependency in rds_tcp_tune
Fuad Tabba <[email protected]>
bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
Chaitanya Kulkarni <[email protected]>
blktrace: fix __this_cpu_read/write in preemptible context
Juri Lelli <[email protected]>
sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
Niklas Cassel <[email protected]>
PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
Jakub Kicinski <[email protected]>
nfc: nci: complete pending data exchange on device close
Davidlohr Bueso <[email protected]>
cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
Eric Dumazet <[email protected]>
tcp: secure_seq: add back ports to TS offset
Namjae Jeon <[email protected]>
ksmbd: add chann_lock to protect ksmbd_chann_list xarray
Qu Wenruo <[email protected]>
btrfs: reject new transactions if the fs is fully read-only
Perry Yuan <[email protected]>
drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
Edward Adam Davis <[email protected]>
ALSA: usb-audio: Prevent excessive number of frames
Breno Leitao <[email protected]>
spi: tegra210-quad: Protect curr_xfer check in IRQ handler
Nikolay Aleksandrov <[email protected]>
bonding: fix use-after-free due to enslave fail after slave array update
Steven Rostedt <[email protected]>
tracing: Add recursion protection in kernel stack trace recording
Zilin Guan <[email protected]>
of: unittest: Fix memory leak in unittest_data_add()
David Howells <[email protected]>
rxrpc: Fix data-race warning and potential load/store tearing
Trond Myklebust <[email protected]>
pNFS: Fix a deadlock when returning a delegation during open()
Eric Dumazet <[email protected]>
dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
Jie Zhang <[email protected]>
drm/msm: Recover HW before retire hung submit
Cong Nguyen <[email protected]>
staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths
Haotian Zhang <[email protected]>
PCI: endpoint: Add missing NULL check for alloc_workqueue()
Konstantin Komarov <[email protected]>
fs/ntfs3: handle attr_set_size() errors when truncating files
Manivannan Sadhasivam <[email protected]>
net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels
Bitterblue Smith <[email protected]>
wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()
Ping-Ke Shih <[email protected]>
wifi: rtw88: debugfs: support multiple adapters debugging
Johannes Berg <[email protected]>
wifi: mac80211: don't WARN for connections on invalid channels
Francesco Lavra <[email protected]>
iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection
Lorenzo Bianconi <[email protected]>
iio: imu: st_lsm6dsx: fix LSM6DSV sensor description
Loic Poulain <[email protected]>
phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
Miquel Sabaté Solà <[email protected]>
btrfs: fix NULL dereference on root when tracing inode eviction
Vladimir Oltean <[email protected]>
net: dsa: properly keep track of conduit reference
Nikolay Kuratov <[email protected]>
drm/msm/dpu: Add missing NULL pointer check for pingpong interface
Gregory CLEMENT <[email protected]>
MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits
Al Viro <[email protected]>
functionfs: fix the open/removal races
Al Viro <[email protected]>
functionfs, gadgetfs: use simple_recursive_removal()
Paul Cercueil <[email protected]>
usb: gadget: functionfs: Factorize wait-for-endpoint code
Paul Cercueil <[email protected]>
usb: gadget: Support already-mapped DMA SGs
Linyu Yuan <[email protected]>
usb: gadget: ffs: remove ENTER() macro
Minseong Kim <[email protected]>
Input: lkkbd - disable pending work before freeing device
Joshua Rogers <[email protected]>
svcrdma: bound check rq_pages index in inline path
Duoming Zhou <[email protected]>
Input: alps - fix use-after-free bugs caused by dev3_register_work
Qianchang Zhao <[email protected]>
ksmbd: vfs: fix race on m_flags in vfs_cache
Johan Hovold <[email protected]>
staging: most: remove broken i2c driver
Tony Battersby <[email protected]>
scsi: qla2xxx: Clear cmds after chip reset
Zhu Yanjun <[email protected]>
RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
Arnaud Lecomte <[email protected]>
bpf: Fix stackmap overflow check in __bpf_get_stackid()
Marc Kleine-Budde <[email protected]>
can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
Duoming Zhou <[email protected]>
scsi: imm: Fix use-after-free bug caused by unfinished delayed work
Horatiu Vultur <[email protected]>
lan966x: Fix sleeping in atomic context
Nitin Rawat <[email protected]>
scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)
Shaurya Rane <[email protected]>
cifs: fix memory leak in smb3_fs_context_parse_param error path
Akiva Goldberger <[email protected]>
mlx5: Fix default values in create CQ
Eric Dumazet <[email protected]>
tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
Coiby Xu <[email protected]>
ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
Cezary Rojewski <[email protected]>
ASoC: Intel: avs: Do not share the name pointer between components
Oleksij Rempel <[email protected]>
net: stmmac: Correctly handle Rx checksum offload errors
Romain Gantois <[email protected]>
net: stmmac: Prevent DSA tags from breaking COE
Henrique Carvalho <[email protected]>
smb: client: fix potential UAF in smb2_close_cached_fid()
Xiao Ni <[email protected]>
md/raid10: wait barrier before returning discard request with REQ_NOWAIT
Moti Haimovski <[email protected]>
accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
Christian König <[email protected]>
drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
Lijo Lazar <[email protected]>
drm/amdgpu: Show vram vendor only if available
Edward Adam Davis <[email protected]>
cifs: client: fix memory leak in smb3_fs_context_parse_param
Harini T <[email protected]>
mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
Ben Levinsky <[email protected]>
mailbox: zynqmp: Move buffered IPI setup to of_match selected routine
Ben Levinsky <[email protected]>
mailbox: zynqmp: Move of_match structure closer to usage
Randy Dunlap <[email protected]>
mailbox: zynqmp-ipi: fix an Excess struct member kernel-doc warning
Rob Herring <[email protected]>
mailbox: Explicitly include correct DT includes
Rob Herring <[email protected]>
of: Move of_device_get_match_data() declaration
Rob Herring <[email protected]>
of: Move of_device_(add|register|unregister) to of_platform.h
Eric Dumazet <[email protected]>
net: use dst_dev_rcu() in sk_setup_caps()
Jason Andryuk <[email protected]>
xen/events: Return -EEXIST for bound VIRQs
Juergen Gross <[email protected]>
xen/events: modify internal [un]bind interfaces
Juergen Gross <[email protected]>
xen/events: drop xen_allocate_irqs_dynamic()
Juergen Gross <[email protected]>
xen/events: remove some simple helpers from events_base.c
Juergen Gross <[email protected]>
xen/events: reduce externally visible helper functions
Juergen Gross <[email protected]>
xen/events: avoid using info_for_irq() in xen_send_IPI_one()
Eric Dumazet <[email protected]>
ipv6: use RCU in ip6_output()
Chao Yu <[email protected]>
f2fs: fix to truncate first page in error path of f2fs_truncate()
Weili Qian <[email protected]>
crypto: hisilicon/qm - request reserved interrupt for virtual function
Chao Yu <[email protected]>
f2fs: fix to avoid overflow while left shift operation
Matthew Wilcox (Oracle) <[email protected]>
f2fs: Use a folio in f2fs_truncate_partial_cluster()
Eric Dumazet <[email protected]>
tcp_metrics: use dst_dev_net_rcu()
Seppo Takalo <[email protected]>
tty: n_gsm: Don't block input queue by waiting MSC
Daniel Starke <[email protected]>
tty: n_gsm: add parameters used with parameter negotiation
Daniel Starke <[email protected]>
tty: n_gsm: introduce macro for minimal unit size
Fangyu Yu <[email protected]>
RISC-V: KVM: Write hgatp register with valid mode bits
I Viswanath <[email protected]>
ptp: Add a upper bound on max_vclocks
Andy Shevchenko <[email protected]>
i915: Move list_count() to list.h as list_count_nodes() for broader use
Duoming Zhou <[email protected]>
net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work
Shuai Xue <[email protected]>
x86/mce: use is_copy_from_user() to determine copy-from-user context
Luiz Augusto von Dentz <[email protected]>
Bluetooth: MGMT: Fix possible UAFs
[email protected] <[email protected]>
wifi: wilc1000: avoid buffer overflow in WID string configuration
Stefan Metzmacher <[email protected]>
smb: client: let recv_done verify data_offset, data_length and remaining_data_length
Stefan Metzmacher <[email protected]>
smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)
Uladzislau Rezki (Sony) <[email protected]>
mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
Duoming Zhou <[email protected]>
ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog
Ido Schimmel <[email protected]>
vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
Ido Schimmel <[email protected]>
vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
Ye Weihua <[email protected]>
trace/fgraph: Fix the warning caused by missing unregister notifier
Sreekanth Reddy <[email protected]>
bnxt_en: Fix memory corruption when FW resources change during ifdown
Aakash Kumar S <[email protected]>
xfrm: Duplicate SPI Handling
Kanglong Wang <[email protected]>
LoongArch: Optimize module load time by optimizing PLT/GOT counting
Jinjiang Tu <[email protected]>
mm/smaps: fix race between smaps_hugetlb_range and migration
Joel Fernandes <[email protected]>
rcu: Fix rcu_read_unlock() deadloop due to IRQ work
Halil Pasic <[email protected]>
s390/ism: fix concurrency management in ism_cmd()
Stefan Raspl <[email protected]>
s390/ism: Introduce struct ism_dmb
Ziyan Xu <[email protected]>
ksmbd: fix refcount leak causing resource not released
Siyang Liu <[email protected]>
drm/amd/display: fix a Null pointer dereference vulnerability
William Liu <[email protected]>
net/sched: Fix backlog accounting in qdisc_dequeue_internal
D. Wythe <[email protected]>
net/smc: fix UAF on smcsk after smc_listen_out()
Al Viro <[email protected]>
habanalabs: fix UAF in export_dmabuf()
Tomer Tayar <[email protected]>
habanalabs: fix dma-buf release handling if dma_buf_fd() fails
Ohad Sharabi <[email protected]>
habanalabs: helper function to validate export params
Ohad Sharabi <[email protected]>
habanalabs: remove support to export dmabuf from handle
Viacheslav Dubeyko <[email protected]>
hfs: fix general protection fault in hfs_find_init()
Matthew Wilcox (Oracle) <[email protected]>
highmem: add memcpy_to_folio() and memcpy_from_folio()
Vishal Moola (Oracle) <[email protected]>
pagemap: add filemap_grab_folio()
Jan Kara <[email protected]>
loop: Avoid updating block size under exclusive owner
Umio Yasuno <[email protected]>
drm/amd/pm: fix null pointer access
Yuezhang Mo <[email protected]>
exfat: add cluster chain loop check for dir
Yuezhang Mo <[email protected]>
exfat: remove unnecessary arguments from exfat_find_dir_entry()
Gabriele Monaco <[email protected]>
rv: Use strings in da monitors tracepoints
Edward Adam Davis <[email protected]>
fs/ntfs3: cancle set bad inode after removing name fails
Heiko Stuebner <[email protected]>
drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port
Al Viro <[email protected]>
xen: fix UAF in dmabuf_exp_from_pages()
Jianbo Liu <[email protected]>
net/mlx5e: Remove skb secpath if xfrm state is not found
Leon Romanovsky <[email protected]>
net/mlx5e: Provide intermediate pointer to access IPsec struct
wenglianfa <[email protected]>
RDMA/hns: Fix double destruction of rsv_qp
David Howells <[email protected]>
rxrpc: Fix bug due to prealloc collision
Maud Spierings <[email protected]>
iio: common: st_sensors: Fix use of uninitialize device structs
Kaustabh Chakraborty <[email protected]>
iio: st_sensors: relax WhoAmI check in st_sensors_verify_id()
Jonathan Cameron <[email protected]>
iio: st_sensors: core and lsm9ds0 switch to devm_regulator_bulk_get_enable()
David Howells <[email protected]>
rxrpc: Fix recv-recv race of completed call
Daniel J. Ogorchock <[email protected]>
HID: nintendo: avoid bluetooth suspend/resume stalls
Sumit Kumar <[email protected]>
bus: mhi: ep: Update read pointer only after buffer is written
Heiko Carstens <[email protected]>
s390/mm: Fix in_atomic() handling in do_secure_storage_access()
Longfang Liu <[email protected]>
hisi_acc_vfio_pci: bugfix live migration function without VF device driver
Jonas Gorski <[email protected]>
net: dsa: b53: do not enable EEE on bcm63xx
Ben Dooks <[email protected]>
riscv: save the SR_SUM status over switches
Ido Schimmel <[email protected]>
bridge: mcast: Fix use-after-free during router port configuration
Yan Zhai <[email protected]>
bnxt: properly flush XDP redirect lists
Paulo Alcantara <[email protected]>
smb: client: fix potential deadlock when reconnecting channels
Harshit Agarwal <[email protected]>
sched/rt: Fix race in push_rt_task
Tianyang Zhang <[email protected]>
LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
Ronnie Sahlberg <[email protected]>
ublk: santizize the arguments from userspace when adding a device
Yeoreum Yun <[email protected]>
coresight: holding cscfg_csdev_lock while removing cscfg from csdev
Michal Kubiak <[email protected]>
ice: fix Tx scheduler error handling in XDP callback
Miri Korenblit <[email protected]>
wifi: iwlwifi: don't warn when if there is a FW error
Luis de Arquer <[email protected]>
spi-rockchip: Fix register out of bounds access
Christian Bruel <[email protected]>
PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops
Michael S. Tsirkin <[email protected]>
virtio: break and reset virtio devices on device_shutdown()
Johannes Berg <[email protected]>
wifi: iwlwifi: fix debug actions order
Johannes Berg <[email protected]>
wifi: iwlwifi: dbg-tlv: fix DRAM data init
Roger Quadros <[email protected]>
dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn
Philippe Simons <[email protected]>
clk: sunxi-ng: h616: Reparent GPU clock during frequency changes
Andre Przywara <[email protected]>
clk: sunxi-ng: h616: Reparent CPU clock during frequency changes
Alexander Gordeev <[email protected]>
kasan: avoid sleepable page allocation from atomic context
Andrey Konovalov <[email protected]>
kasan: use unchecked __memset internally
Matt Johnston <[email protected]>
net: mctp: Don't access ifa_index when missing
Peter Griffin <[email protected]>
scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
Mikhail Lobanov <[email protected]>
KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
Namjae Jeon <[email protected]>
ksmbd: prevent rename with empty string
Sean Heelan <[email protected]>
ksmbd: Fix UAF in __close_file_table_ids
Johannes Berg <[email protected]>
um: fix time-travel syscall scheduling hack
Ranjan Kumar <[email protected]>
scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
Edward Cree <[email protected]>
sfc: fix NULL dereferences in ef100_process_design_param()
Boris Burkov <[email protected]>
btrfs: harden block_group::bg_list against list_del() races
Philip Yang <[email protected]>
drm/amdkfd: debugfs hang_hws skip GPU with MES
Han Xu <[email protected]>
spi: fsl-qspi: use devm function instead of driver remove
Yonghong Song <[email protected]>
bpf: Fix kmemleak warning for percpu hashmap
Lizhi Xu <[email protected]>
fs/ntfs3: Keep write operations atomic
Paulo Alcantara <[email protected]>
smb: client: fix UAF in decryption with multichannel
Frederic Weisbecker <[email protected]>
perf: Fix hang while freeing sigtrap event
Chao Yu <[email protected]>
f2fs: fix potential deadloop in prepare_compress_overwrite()
Chao Yu <[email protected]>
f2fs: convert f2fs_handle_page_eio() to use folio
Boris Burkov <[email protected]>
btrfs: fix block group refcount race in btrfs_create_pending_block_groups()
Murad Masimov <[email protected]>
ax25: Remove broken autobind
Christian Schoenebeck <[email protected]>
fs/9p: fix NULL pointer dereference on mkdir
Antoine Tenart <[email protected]>
net: decrease cached dst counters in dst_release
Dave Marquardt <[email protected]>
net: ibmveth: make veth_pool_store stop hanging
Nick Child <[email protected]>
ibmveth: Always stop tx queues during close
Hengqi Chen <[email protected]>
LoongArch: BPF: Don't override subprog's return value
Namjae Jeon <[email protected]>
ksmbd: fix null pointer dereference in alloc_preauth_hash()
Matt Johnston <[email protected]>
net: mctp: unshare packets when reassembling
Luiz Augusto von Dentz <[email protected]>
Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
Namjae Jeon <[email protected]>
ksmbd: fix use-after-free in ksmbd_free_work_struct
Taehee Yoo <[email protected]>
eth: bnxt: fix truesize for mb-xdp-pass case
Namjae Jeon <[email protected]>
ksmbd: prevent connection release during oplock break notification
Maurizio Lombardi <[email protected]>
nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
Wei Fang <[email protected]>
net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
Yishai Hadas <[email protected]>
RDMA/mlx5: Fix the recovery flow of the UMR QP
Shay Drory <[email protected]>
RDMA/mlx5: Implement mkeys management via LIFO queue
Michael Guralnik <[email protected]>
RDMA/mlx5: Introduce mlx5r_cache_rb_key
Michael Guralnik <[email protected]>
RDMA/mlx5: Change the cache structure to an RB-tree
Aharon Landau <[email protected]>
RDMA/mlx5: Remove implicit ODP cache entry
Aharon Landau <[email protected]>
RDMA/mlx5: Don't keep umrable 'page_shift' in cache entries
Yishai Hadas <[email protected]>
RDMA/mlx5: Fix a WARN during dereg_mr for DM type
Kashyap Desai <[email protected]>
RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
Peter Jones <[email protected]>
efi: Don't map the entire mokvar table to determine its size
Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
Werner Sembach <[email protected]>
PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
Mario Limonciello <[email protected]>
x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4
Kory Maincent <[email protected]>
net: ravb: Fix missing rtnl lock in suspend/resume path
Jakub Kicinski <[email protected]>
net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
Yishai Hadas <[email protected]>
RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
Ping-Ke Shih <[email protected]>
wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
Guixin Liu <[email protected]>
scsi: mpi3mr: Fix possible crash when setting up bsg fails
Patrisious Haddad <[email protected]>
RDMA/mlx5: Fix implicit ODP use after free
Ryan Roberts <[email protected]>
mm: clear uffd-wp PTE/PMD state on mremap()
Paulo Alcantara <[email protected]>
smb: client: fix double free of TCP_Server_Info::hostname
Matthieu Baerts (NGI0) <[email protected]>
rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxyBard Liao <[email protected]>
ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
Niklas Cassel <[email protected]>
PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
Gaurav Batra <[email protected]>
powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
Florian Westphal <[email protected]>
xfrm: state: fix out-of-bounds read during lookup
Qu Wenruo <[email protected]>
btrfs: do proper folio cleanup when cow_file_range() failed
Stefano Brivio <[email protected]>
udp: Deal with race between UDP socket address change and rehash
Tvrtko Ursulin <[email protected]>
workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
Ranjan Kumar <[email protected]>
scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
Yishai Hadas <[email protected]>
vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
Paul Aurich <[email protected]>
smb: Initialize cfid->tcon before performing network ops
Jann Horn <[email protected]>
udmabuf: fix memory leak on last export_udmabuf() error path
Chao Yu <[email protected]>
f2fs: fix to do sanity check on node blkaddr in truncate_node()
Wen Gu <[email protected]>
net/smc: initialize close_work early to avoid warning
David Hildenbrand <[email protected]>
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
Hou Tao <[email protected]>
bpf: Call free_htab_elem() after htab_unlock_bucket()
Yihang Li <[email protected]>
scsi: hisi_sas: Create all dump files during debugfs initialization
Yihang Li <[email protected]>
scsi: hisi_sas: Allocate DFX memory during dump trigger
Yihang Li <[email protected]>
scsi: hisi_sas: Directly call register snapshot instead of using workqueue
Xiang Chen <[email protected]>
scsi: hisi_sas: Add function complete_v3_hw()
Xingui Yang <[email protected]>
scsi: hisi_sas: Add SATA_DISK_ERR bit handling for v3 hw
Xingui Yang <[email protected]>
scsi: hisi_sas: Move slot variable definition in hisi_sas_abort_task()
Wander Lairson Costa <[email protected]>
sched/deadline: Fix warning in migrate_enable for boosted tasks
yuan.gao <[email protected]>
mm/slub: Avoid list corruption when removing a slab from the full list
Chao Yu <[email protected]>
f2fs: fix to drop all discards after creating snapshot on lvm device
Sean Anderson <[email protected]>
drm: zynqmp_kms: Unplug DRM device before removal
Phil Sutter <[email protected]>
netfilter: IDLETIMER: Fix for possible ABBA deadlock
Patrisious Haddad <[email protected]>
RDMA/mlx5: Move events notifier registration to be after device registration
Yang Erkun <[email protected]>
nfsd: release svc_expkey/svc_export with rcu_work
Raghavendra Rao Ananta <[email protected]>
KVM: arm64: Get rid of userspace_irqchip_in_use
Pavel Begunkov <[email protected]>
io_uring: check for overflows in io_pin_pages
Paulo Alcantara <[email protected]>
smb: client: fix use-after-free of signing key
Paulo Alcantara <[email protected]>
smb: client: stop flooding dmesg in smb2_calc_signature()
Paul Aurich <[email protected]>
smb: Don't leak cfid when reconnect races with open_cached_dir
Liu Jian <[email protected]>
sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
Yuezhang Mo <[email protected]>
exfat: fix out-of-bounds access of directory entries
Peng Fan <[email protected]>
pmdomain: imx93-blk-ctrl: correct remove path
Kuniyuki Iwashima <[email protected]>
smb: client: Fix use-after-free of network namespace.
Showrya M N <[email protected]>
RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
Zijian Zhang <[email protected]>
bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
David Howells <[email protected]>
afs: Fix lock recursion
Xinqi Zhang <[email protected]>
firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
Cristian Marussi <[email protected]>
firmware: arm_scmi: Refactor device create/destroy helpers
Cristian Marussi <[email protected]>
firmware: arm_scmi: Move handle get/set helpers
Cristian Marussi <[email protected]>
firmware: arm_scmi: Refactor protocol device creation
Cristian Marussi <[email protected]>
firmware: arm_scmi: Add common notifier helpers
Cristian Marussi <[email protected]>
firmware: arm_scmi: Move protocol registration helpers
Cristian Marussi <[email protected]>
firmware: arm_scmi: Use dedicated devices to initialize channels
Cristian Marussi <[email protected]>
firmware: arm_scmi: Simplify chan_available transport operation
Dan Carpenter <[email protected]>
drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
Namjae Jeon <[email protected]>
ksmbd: check outstanding simultaneous SMB operations
Dan Williams <[email protected]>
cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
Maurizio Lombardi <[email protected]>
nvme-pci: fix race condition between reset and nvme_dev_disable()
Anastasia Belova <[email protected]>
cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
Srinivasan Shanmugam <[email protected]>
drm/amd/display: Implement bounds check for stream encoder creation in DCN401
Eddie James <[email protected]>
net/ncsi: Disable the ncsi work before freeing the associated structure
James Chapman <[email protected]>
l2tp: prevent possible tunnel refcount underflow
Alex Hung <[email protected]>
drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
Alex Hung <[email protected]>
drm/amd/display: Check null pointers before using them
Alex Hung <[email protected]>
drm/amd/display: Check null pointers before used
Alex Hung <[email protected]>
drm/amd/display: Check null pointers before multiple uses
Srinivasan Shanmugam <[email protected]>
drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
Srinivasan Shanmugam <[email protected]>
drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
Srinivasan Shanmugam <[email protected]>
drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
Rodrigo Siqueira <[email protected]>
drm/amd/display: Check null pointer before try to access it
Chunguang.xu <[email protected]>
nvme-rdma: unquiesce admin_q before destroy it
Leon Hwang <[email protected]>
bpf: Prevent tailcall infinite loop caused by freplace
Yunfei Dong <[email protected]>
media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
Devyn Liu <[email protected]>
spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
Yang Yingliang <[email protected]>
spi: hisi-kunpeng: switch to use modern name
Uwe Kleine-König <[email protected]>
spi: hisi-kunpeng: Convert to platform remove callback returning void
Alex Hung <[email protected]>
drm/amd/display: Avoid overflow from uint32_t to uint8_t
Leon Huang <[email protected]>
drm/amd/display: Refactor ABM feature
Maxime Méré <[email protected]>
crypto: stm32/cryp - call finalize with bh disabled
Mukesh Ojha <[email protected]>
pinmux: Use sequential access to access desc->pinmux data
Bert Karwatzki <[email protected]>
wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
Hersen Wu <[email protected]>
drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
Hersen Wu <[email protected]>
drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range
Lenko Donchev <[email protected]>
drm/amd/display: Use kcalloc() instead of kzalloc()
Jann Horn <[email protected]>
userfaultfd: fix checks for huge PMDs
Larysa Zaremba <[email protected]>
ice: protect XDP configuration with a mutex
Alex Hung <[email protected]>
drm/amd/display: Ensure array index tg_inst won't be -1
Alex Hung <[email protected]>
drm/amd/display: Check index for aux_rd_interval before using
Eric Dumazet <[email protected]>
pktgen: use cpus_read_lock() in pg_net_init()
Filipe Manana <[email protected]>
btrfs: do not BUG_ON() when freeing tree block after error
Chao Yu <[email protected]>
f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
Chao Yu <[email protected]>
f2fs: fix to cover read extent cache access with lock
Keith Busch <[email protected]>
nvme: apple: fix device reference counting
Aurabindo Pillai <[email protected]>
drm/amd/display: Fix null pointer deref in dcn20_resource.c
Sibi Sankar <[email protected]>
soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove
Manivannan Sadhasivam <[email protected]>
PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
Steve Wilkins <[email protected]>
spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
Gavin Shan <[email protected]>
mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray
Xu Yang <[email protected]>
filemap: add helper mapping_max_folio_size()
Jules Irenge <[email protected]>
s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
Holger Dengler <[email protected]>
s390/pkey: Wipe copies of clear-key structures on failure
Holger Dengler <[email protected]>
s390/pkey: Wipe copies of protected- and secure-keys
Milena Olech <[email protected]>
ice: Fix improper extts handling
George Stark <[email protected]>
leds: an30259a: Use devm_mutex_init() for mutex initialization
Bob Zhou <[email protected]>
drm/amdgpu: fix double free err_addr pointer warnings
Chao Yu <[email protected]>
f2fs: fix to shrink read extent node in batches
Wander Lairson Costa <[email protected]>
sched/deadline: Fix task_struct reference leak
Miaohe Lin <[email protected]>
fork: defer linking file vma until vma is fully initialized
Huacai Chen <[email protected]>
LoongArch: Update cpu_sibling_map when disabling nonboot CPUs
Shashank Sharma <[email protected]>
drm/amdgpu: change vm->task_info handling
Baokun Li <[email protected]>
ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
Baokun Li <[email protected]>
ext4: refactoring to use the unified helper ext4_quotas_off()
Hans de Goede <[email protected]>
platform/x86: x86-android-tablets: Unregister devices in reverse order
Konstantin Komarov <[email protected]>
fs/ntfs3: Check 'folio' pointer for NULL
Aleksandr Mishin <[email protected]>
drm/msm/dpu: Add callback function pointer check before its call
Xiaolei Wang <[email protected]>
net: stmmac: move the EST lock to struct stmmac_priv
Andreas Gruenbacher <[email protected]>
gfs2: Fix potential glock use-after-free on unmount
Stanislav Fomichev <[email protected]>
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
Maher Sanalla <[email protected]>
net/mlx5: Reload only IB representors upon lag disable/enable
Sungwoo Kim <[email protected]>
Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
Rick Edgecombe <[email protected]>
hv_netvsc: Don't free decrypted memory
Peter Xu <[email protected]>
mm/userfaultfd: reset ptes when close() for wr-protected ones
Boris Brezillon <[email protected]>
drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
Po-Hao Huang <[email protected]>
wifi: rtw89: fix null pointer access when abort scan
Andre Werner <[email protected]>
net: phy: phy_device: Prevent nullptr exceptions on ISR
Adam Ford <[email protected]>
pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain
Abhishek Pandit-Subedi <[email protected]>
usb: typec: ucsi: Limit read size on v1.2
Christian Göttsche <[email protected]>
selinux: avoid dereference of garbage after mount failure
Andrii Nakryiko <[email protected]>
bpf: support deferring bpf_link dealloc to after RCU grace period
Chris Park <[email protected]>
drm/amd/display: Prevent crash when disable stream
Josef Bacik <[email protected]>
btrfs: fix deadlock with fiemap and extent locking
Kory Maincent <[email protected]>
dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup
Dave Airlie <[email protected]>
nouveau: lock the client object tree.
Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend
Nikita Zhandarovich <[email protected]>
drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()
Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: fix memleak in map from abort path
Eric Dumazet <[email protected]>
net/sched: Fix mirred deadlock on device recursion
Dragos Tatulea <[email protected]>
net: esp: fix bad handling of pages from page_pool
Allen Pan <[email protected]>
drm/amd/display: Add a dc_state NULL check in dc_state_release
Yongqiang Liu <[email protected]>
ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
Fei Wu <[email protected]>
perf: RISCV: Fix panic on pmu overflow handler
Atish Patra <[email protected]>
perf: RISC-V: Define helper functions expose hpm counter width and count
Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_core: Fix possible buffer overflow
Luiz Augusto von Dentz <[email protected]>
Bluetooth: af_bluetooth: Fix deadlock
Mads Bligaard Nielsen <[email protected]>
drm/bridge: adv7511: fix crash on irq during probe
Chao Yu <[email protected]>
f2fs: fix to truncate meta inode pages forcely
Chao Yu <[email protected]>
f2fs: introduce f2fs_invalidate_internal_cache() for cleanup
Yangtao Li <[email protected]>
f2fs: introduce f2fs_is_readonly() for readability
Alexander Sverdlin <[email protected]>
spi: lpspi: Avoid potential use-after-free in probe()
Colin Ian King <[email protected]>
ASoC: qcom: Fix uninitialized pointer dmactl
Jakub Kicinski <[email protected]>
net/sched: act_mirred: use the backlog for mirred ingress
Petr Tesarik <[email protected]>
net: stmmac: protect updates of 64-bit statistics counters
David Howells <[email protected]>
rxrpc: Fix delayed ACKs to not set the reference serial number
Mark Rutland <[email protected]>
arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD
Ido Schimmel <[email protected]>
net/sched: flower: Fix chain template offload
Srinivasan Shanmugam <[email protected]>
drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
Srinivasan Shanmugam <[email protected]>
drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
Petr Machata <[email protected]>
net: nexthop: Increase weight to u16
Petr Machata <[email protected]>
net: nexthop: Have all NH notifiers carry NH ID
Benjamin Poirier <[email protected]>
nexthop: Do not return invalid nexthop object during multipath selection
Benjamin Poirier <[email protected]>
nexthop: Factor out neighbor validity check
Benjamin Poirier <[email protected]>
nexthop: Factor out hash threshold fdb nexthop selection
Yu Kuai <[email protected]>
blk-cgroup: dropping parent refcount after pd_free_fn() is done
Rob Clark <[email protected]>
interconnect: Fix locking for runpm vs reclaim
Chao Yu <[email protected]>
f2fs: fix to do sanity check on direct node in truncate_dnode()
Yu Kuai <[email protected]>
block/rq_qos: protect rq_qos apis with a new lock
Kuniyuki Iwashima <[email protected]>
smc: Fix use-after-free in tcp_write_timer_handler().
Marc Kleine-Budde <[email protected]>
can: gs_usb: fix time stamp counter initialization
Chao Yu <[email protected]>
f2fs: don't reset unchangable mount option in f2fs_remount()
Yangtao Li <[email protected]>
f2fs: fix to set flush_merge opt and show noflush_merge
Dragos Tatulea <[email protected]>
net/mlx5e: xsk: Fix crash on regular rq reactivation
Junhao He <[email protected]>
coresight: Fix memory leak in acpi_buffer->pointer
Jan Kara <[email protected]>
ext4: avoid deadlock in fs reclaim with page writeback
Fei Shao <[email protected]>
media: mediatek: vcodec: Only free buffer VA that is not NULL
Dan Williams <[email protected]>
cxl/port: Fix delete_endpoint() vs parent unregistration race
Jaegeuk Kim <[email protected]>
f2fs: split initial and dynamic conditions for extent_cache
Deepak Gupta <[email protected]>
riscv: VMAP_STACK overflow detection thread-safe
Paulo Alcantara <[email protected]>
smb: client: fix use-after-free in smb2_query_info_compound()
Ilya Bakoulin <[email protected]>
drm/amd/display: Fix hang/underflow when transitioning to ODM4:1
Zhipeng Lu <[email protected]>
SUNRPC: fix a memleak in gss_import_v2_context
Jan Kara <[email protected]>
reiserfs: Avoid touching renamed directory if parent does not change
Jeff Layton <[email protected]>
reiserfs: convert to simple_rename_timestamp
Jeff Layton <[email protected]>
fs: new helper: simple_rename_timestamp
Paloma Arellano <[email protected]>
drm/msm/dpu: Add mutex lock in control vblank irq
Baolin Wang <[email protected]>
mm: migrate: fix getting incorrect page mapping during page migration
Dave Chinner <[email protected]>
xfs: fix unmount hang with unflushable inodes stuck in the AIL
Dave Chinner <[email protected]>
xfs: factor out stale buffer item completion
Dave Chinner <[email protected]>
xfs: rearrange code in xfs_buf_item.c
Dave Chinner <[email protected]>
xfs: catch stale AGF/AGF metadata
Dave Chinner <[email protected]>
xfs: xfs_ifree_cluster vs xfs_iflush_shutdown_abort deadlock
Johan Hovold <[email protected]>
tty: add break_wait kernel-doc
Christian Brauner <[email protected]>
namespace: handle mount locking for automounts correctly
Christian Brauner <[email protected]>
fcntl: refuse F_SET_RW_HINT on an immutable inode
Christian Brauner <[email protected]>
namespace: check the target before walking it in do_mount_setattr()
Christian Brauner <[email protected]>
namespace: don't copy an unmounted mount tree
Christian Brauner <[email protected]>
namespace: unhash a dentry before detaching the mounts on it
Nguyen Ngoc Thang <[email protected]>
drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN
Mikhail Gavrilov <[email protected]>
drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks
Wentao Liang <[email protected]>
drm/vc4: Fix firmware reference leak in vc4_drm_bind()
Ahmed Abdelhaleem Ahmed <[email protected]>
scsi: ch: Do not keep references to data transfer element devices
Shao-Fu Chen <[email protected]>
optee: register TEE devices only once fully initialized
Shawn Lin <[email protected]>
pmdomain: rockchip: propagate subdomain add errors
Shawn Lin <[email protected]>
pmdomain: rockchip: don't ignore clock lookup errors on attach
Ming Qian <[email protected]>
pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains
Shawn Lin <[email protected]>
pmdomain: rockchip: fix clock leak on domain probe failure
Mikulas Patocka <[email protected]>
dm: fix reading free memory in do_resume
Christian Brauner <[email protected]>
namespace: check the mounts before reading their parents in pivot_root()
Christian Brauner <[email protected]>
namespace: don't inherit MNT_UMOUNT in clone_mnt()
Chengfeng Ye <[email protected]>
Bluetooth: ISO: Serialize concurrent connect calls
Zack Rusin <[email protected]>
drm/vmwgfx: validate pitch coming from userspace
Mikhail Gavrilov <[email protected]>
Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex
Weiming Shi <[email protected]>
net: team: stop reusing skb after queue override
Weiming Shi <[email protected]>
net: team: fix NULL pointer dereference in team_xmit during mode change
Marc Harvey <[email protected]>
net: team: Rename port_disabled team mode op to port_tx_disabled
Marc Harvey <[email protected]>
net: team: Remove unused team_mode_op, port_enabled
Felix Fietkau <[email protected]>
netfilter: nf_tables: fix bidirectional offload regression
Tahera Fahimi <[email protected]>
xfrm: prevent policy_hthresh.work from racing with netns teardown
Ramses de Norre <[email protected]>
wireguard: queueing: preserve tstamp_type when encapsulating packet
Lorenzo Stoakes (ARM) <[email protected]>
mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge
Lorenzo Stoakes (ARM) <[email protected]>
mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP
Vishal Badole <[email protected]>
EDAC/amd64: Mask UMC chip select to the four implemented selects
Christian Göttsche <[email protected]>
selinux: fix data race on AVC latest_notif
Tristan Madani <[email protected]>
ice: fix metadata_dst refcount handling on representor teardown
Daehyeon Ko <[email protected]>
ip6_gre: remove obsolete ERSPAN PMTU update
Donggeun Yoo <[email protected]>
tracing: Set the trace clock before registering the histogram trigger
Vicki Pfau <[email protected]>
HID: steam: Clean up locking
Vicki Pfau <[email protected]>
HID: steam: Refactor registration
Vicki Pfau <[email protected]>
HID: steam: Rearrange teardown sequence
Vicki Pfau <[email protected]>
HID: steam: Fully unregister controller when hidraw is opened
Vicki Pfau <[email protected]>
HID: hid-steam: Make client_opened a counter
Dan Carpenter <[email protected]>
HID: hid-steam: Fix cleanup in probe()
Adrian Betschart <[email protected]>
drm/amd/display: Don't replace a sink mode that shares the native totals
Oliver Hartkopp <[email protected]>
can: fix unique skb identifier regression under RPS
Ezrak1e <[email protected]>
dlm: validate length in dlm_search_rsb_tree
Xue Lei <[email protected]>
mtd: fix double free and WARN_ON in add_mtd_device() error paths
Miquel Raynal <[email protected]>
mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters
Alexander Usyskin <[email protected]>
mtd: fix use-after-free in mtd release
Miquel Raynal <[email protected]>
mtd: Clean refcounting with MTD_PARTITIONED_MASTER
Fernando Fernandez Mancera <[email protected]>
net: openvswitch: validate transport header presence in set_ipv6_addr
Li RongQing <[email protected]>
net/mlx5e: Order ICOSQ cc update after CQ doorbell
Eric Dumazet <[email protected]>
flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()
Eric Dumazet <[email protected]>
flow_dissector: avoid u16 truncation of skb->len when computing thoff
Marek Szyprowski <[email protected]>
ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM
Alvin Šipraga <[email protected]>
ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes
Alvin Šipraga <[email protected]>
ASoC: adau1372: allow sleepy powerdown GPIOs
Sang-Hoon Choi <[email protected]>
nvmet: use the local P2P device on metadata allocation failure
Sang-Hoon Choi <[email protected]>
cxgb4/ch_ktls: disable softirqs around tid_list erases
Omar Ramadan <[email protected]>
amt: send the relay's General Query directly from the receive path
Jamal Hadi Salim <[email protected]>
net/sched: em_text: reject unterminated algo before autoload
Maíra Canal <[email protected]>
drm/vc4: Free the BO cache size list on teardown
Myeonghun Pak <[email protected]>
drm/aspeed: Balance the display clock enable on teardown
Sang-Hoon Choi <[email protected]>
gpio: exar: initialize the ID before registering its cleanup
Oleg Keri <[email protected]>
drm/dp: don't mark the AUX backlight enabled when enabling failed
Christian Brauner <[email protected]>
namespace: refuse an automount below a mount that is in no namespace
Christian Brauner <[email protected]>
dcache: don't put a mountpoint on a dentry that's being removed
Christian Brauner <[email protected]>
namespace: check a submount for references right before unmounting it
Christian Brauner <[email protected]>
fs: refuse fspick() on internal superblocks
Alex Deucher <[email protected]>
drm/amdgpu: make Mac FB workaround generic
Fan Wu <[email protected]>
drm/vc4: drain the hangcheck timer and works on V3D unbind
Krzysztof Karas <[email protected]>
drm/i915/gt: Unmask interrupts only when ACTIVE is true
Krzysztof Karas <[email protected]>
drm/i915/gem: Prevent overstepping exec array boundary
Sajal Gupta <[email protected]>
drm/gud: don't keep a connector without a CRTC as connector_state
Palla Raghunath <[email protected]>
Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown
Maxim Skokov <[email protected]>
Bluetooth: RFCOMM: free the skb when the DLC has no owner
Iaroslav Voitovych <[email protected]>
Bluetooth: MGMT: Fix status of pending commands flushed on power off
Chengfeng Ye <[email protected]>
Bluetooth: hci_sock: Serialize dead-device detachment
Runyu Xiao <[email protected]>
scsi: qedi: Initialize callback state before registration
Abhishek Ojha <[email protected]>
regulator: ltc3676: don't read the write-only HRST and CLIRQ registers
Denis V. Lunev <[email protected]>
openvswitch: fix soft lockup in the netlink flow dump
Karl Bonde Torp <[email protected]>
nvme: fix swapped ZRASF zone state values for full and read only
Fredrik Nyberg <[email protected]>
net: usb: ax88179_178a: fix rx frame length for non-last packets
Sebastien Royen <[email protected]>
net: dsa: microchip: fix KSZ8765 fiber detection
Zixuan Chai <[email protected]>
net: bridge: avoid recursive multicast port cleanup
Chengfeng Ye <[email protected]>
net/smc: protect clcsock lifetime in smc_getname
Quchaosheng <[email protected]>
net/packet: guard the ll header push in packet_rcv_spkt()
Guangshuo Li <[email protected]>
mmc: sdhci-sprd: disable runtime PM on remove
Yibo Tan <[email protected]>
mmc: mtk-sd: Cancel request timeout work on remove
Guangshuo Li <[email protected]>
mmc: cavium-thunderx: destroy slot platform devices on remove
Guangshuo Li <[email protected]>
mmc: cavium-octeon: destroy slot platform devices on remove
Ma Xinmeng <[email protected]>
dm-snap: reject the transient exception store for snapshot-merge
Ben Cressey <[email protected]>
dm-crypt: reject the lmk IV mode with AEAD ciphers
Nguyen Ngoc Thang <[email protected]>
memstick: rtsx_usb_ms: complete requests after eject instead of dropping them
Raj Ojha <[email protected]>
memstick: core: wait for request completion before freeing card
성병찬 <[email protected]>
KEYS: Fix add_key() race with keyring restriction
Karl Mehltretter <[email protected]>
keys: finalize persistent keyring timeout after link attempt
Mingming Cao <[email protected]>
ibmveth: fix TX LTB and filter unwind on open-fail
Mingming Cao <[email protected]>
ibmveth: h_free logical LAN on open-fail after register
Ridham Khurana <[email protected]>
gpio: xilinx: fix runtime PM leak on request error path
Hui Peng <[email protected]>
sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute
Stephen Smalley <[email protected]>
selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
Johannes Berg <[email protected]>
Revert "wifi: libertas: reject short monitor TX frames"
Chengfeng Ye <[email protected]>
tipc: hold a reference to nodes found by link name
Yuqi Xu <[email protected]>
tipc: destroy topsrv workqueues before closing connections
Sabrina Dubroca <[email protected]>
strparser: make sure __strp_recv isn't running before tearing down the parser
Josef Bacik <[email protected]>
xen/netfront: don't leak the skb when xennet_fill_frags() fails
Pavankumar Kondeti <[email protected]>
workqueue: Fix NULL current_pwq deref in chained work check
Jason A. Donenfeld <[email protected]>
wireguard: noise: reject response consumption after intermediate initiation
Michele Dionisio <[email protected]>
wifi: brcmfmac: fix P2P device removal race in brcmf_detach()
Palla Raghunath <[email protected]>
dm ioctl: don't let data_start run past the buffer
Wentao Liang <[email protected]>
btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()
Michael Garland <[email protected]>
ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P)
Karl Mehltretter <[email protected]>
arm64: irq: exclude the softirq stack switch from KCOV
Daehyeon Ko <[email protected]>
ipv6: do not warn on route notification size race
Daehyeon Ko <[email protected]>
ipv4: do not warn on route notification size race
Daehyeon Ko <[email protected]>
ipv4: stop route notification sizing when nexthop group shrinks
Daehyeon Ko <[email protected]>
ipv4: stop PMTU walk when nexthop group shrinks
Eric Biggers <[email protected]>
crypto: drbg - Fix ineffective sanity check
Karl Mehltretter <[email protected]>
netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting
Jiajia Liu <[email protected]>
Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING
Liew Rui Yan <[email protected]>
mm/damon/core: fix unconditionally skip last region
SeongJae Park <[email protected]>
mm/damon/core: do non-safe region walk on kdamond_apply_schemes()
Carlos Llamas <[email protected]>
HID: uhid: convert to hid_safe_input_report()
Benjamin Tissoires <[email protected]>
HID: core: introduce hid_safe_input_report()
Andrey Misiurov <[email protected]>
scsi: lpfc: Fix use-after-free of mboxq in lpfc_sli4_driver_resource_setup()
HE WEI（ギカク） <[email protected]>
fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
Nirbhay Sharma <[email protected]>
fs/ntfs3: fix KMSAN uninit-value in ni_create_attr_list
Konstantin Komarov <[email protected]>
fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
Konstantin Komarov <[email protected]>
fs/ntfs3: Add more checks in mi_enum_attr (part 2)
Pengpeng Hou <[email protected]>
iio: cdc: ad7150: fix OF matching and publish module aliases
Fabrice Gasnier <[email protected]>
iio: adc: stm32-adc: fix possible division by zero in processed channel
Vladyslav Ivashchenko <[email protected]>
iio: adc: axp288: Add TS bias override for Haier HV103H
Cong Nguyen <[email protected]>
iio: adc: max1363: sign-extend bipolar differential channel reads
Pengpeng Hou <[email protected]>
iio: adc: aspeed: propagate reset deassert errors
Krzysztof Kozlowski <[email protected]>
iio: adc: aspeed: Simplify with dev_err_probe
Fan Wu <[email protected]>
iio: adc: ad_sigma_delta: fix use-after-free on unbind
Paulo Alcantara <[email protected]>
smb: client: discard post-EOF pagecache when extending a file via zero range
Felix Fietkau <[email protected]>
wifi: mac80211: set info->band for 802.3 encap offload frames
Sean Christopherson <[email protected]>
KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted
Peter Xu <[email protected]>
mm/hugetlb: fix avoid_reserve to allow taking folio from subpool
Matthew Wilcox (Oracle) <[email protected]>
fs: Free any excess xarray nodes in clear_inode()
Zhiling Zou <[email protected]>
wifi: mac80211: count only matching reservations in reserved switch
Zhiling Zou <[email protected]>
wifi: mac80211: keep paired old chanctx alive
Johan Hovold <[email protected]>
tty: port: fix tty_port_tty_vhangup() race
Eric Dumazet <[email protected]>
bnxt_en: fix DMA mapping length for padded small packets
Zhao Li <[email protected]>
wifi: mac80211: account proxy paths against the mesh path limit
Han Xu <[email protected]>
mtd: spinand: Enable QE on all dies
Pei Xiao <[email protected]>
mtd: block2mtd: Fix divide error when erase_size is zero
Johan Hovold <[email protected]>
USB: serial: fix ioctl hangup race
Johan Hovold <[email protected]>
USB: serial: report unsupported break signalling
Johan Hovold <[email protected]>
USB: serial: return errors from break handling
Zhao Li <[email protected]>
wifi: mac80211: keep fallback association elements alive
Zhao Li <[email protected]>
wifi: mac80211: shut down RX BA session timer on teardown
Nuno Sá <[email protected]>
mtd: spinand: fix NULL pointer dereference with no ECC engine
Timur Kristóf <[email protected]>
drm/amd/display: Mark DCE 6.4 as not APU
Johan Hovold <[email protected]>
serial: fix TIOCMIWAIT race
Fan Wu <[email protected]>
tty: serial: max3100: shut down timer before freeing port
Johan Hovold <[email protected]>
tty: tty_port: restore TTY_IO_ERROR on activation failure
Pannarat Wiriyaarritham <[email protected]>
usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41
Runyu Xiao <[email protected]>
USB: dwc2: shut down wakeup timer before freeing HCD state
Myeonghun Pak <[email protected]>
usb: ohci-spear: disable controller wakeup on removal
Chen Ni <[email protected]>
usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare()
Francisco Beltrán Millalén <[email protected]>
drm/amdgpu: reset VI ASIC on MacBookPro14,3
Andre Eikmeyer <[email protected]>
drm/amdgpu: reset VI ASIC on MacBookPro15,1
Jiangshan Yi <[email protected]>
drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend
Eric Biggers <[email protected]>
fsverity: add dependency on 64K or smaller pages
Mostafa Saleh <[email protected]>
KVM: arm64: Don't use the VMA to size stage-2 block mappings for VM_PFNMAP
Jinseob Kim <[email protected]>
iio: buffer: serialize buffer teardown with mode claims
Beata Michalska <[email protected]>
arm64: errata: Add Cortex-A725 erratum 3821522 workaround
Beata Michalska <[email protected]>
arm64: errata: Factor out broken AMU const counter cap
Mark Rutland <[email protected]>
arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems
Zhengchuan Liang <[email protected]>
perf: Require kernel access for text poke events
Johan Hovold <[email protected]>
tty: fix saved termios reset race
Jiazi Liu <[email protected]>
usb: dwc3: gadget: fix IRQ storm on invalid event buffer count
Viken Dadhaniya <[email protected]>
soc: qcom: geni-se: Correct QUP Core ICC vote constants
Andrei Matei <[email protected]>
bpf: Fix accesses to uninit stack slots
Jiangshan Yi <[email protected]>
smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions
Josef Bacik <[email protected]>
xen/netfront: drop RX packets with a short Ethernet header
Amit Sunil Dhamne <[email protected]>
usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handling
Xu Yang <[email protected]>
usb: typec: tcpm: fix debug accessory mode detection for sink ports
Neill Kapron <[email protected]>
usb: gadget: f_fs: Fix Use-After-Free in AIO error path
Gabriel Prostitis <[email protected]>
USB: gadget: ffs: fix mm lifetime handling
Fan Wu <[email protected]>
usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed
Uwe Kleine-König <[email protected]>
usb: gadget: at91_udc: Convert to platform remove callback returning void
Karl Mehltretter <[email protected]>
serial: imx: serialize imx_uart_ports[] lifetime
Uwe Kleine-König <[email protected]>
serial: imx: Convert to platform remove callback returning void
Gilberto Conde <[email protected]>
net: usb: qmi_wwan: add Quectel EG120K-EA
Wentao Liang <[email protected]>
wifi: wlcore: Fix runtime PM leak in wlcore_remove()
Uwe Kleine-König <[email protected]>
wifi: wlcore: Convert to platform remove callback returning void
Frank Sorenson <[email protected]>
smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races
Paolo Abeni <[email protected]>
mptcp: prevent race between disconnect() and rtx
Eric Dumazet <[email protected]>
tcp: introduce icsk->icsk_keepalive_timer
Mehmet Fide <[email protected]>
mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages
Yi Yang <[email protected]>
vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF
Chris Mason <[email protected]>
SUNRPC: reject duplicate CREDS_VALUE options
Chris Mason <[email protected]>
SUNRPC: fix gssx_dec_option_array error path bugs
Asad Kamal <[email protected]>
drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
Aditya Dutt <[email protected]>
jfs: fix array-index-out-of-bounds read in add_missing_indices
Fan Wu <[email protected]>
iio: trigger: cancel reenable_work before freeing trigger
Salah Triki <[email protected]>
iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler
Zhang Jie <[email protected]>
iio: proximity: sx9324: Correct proximity channel resolution
Cong Nguyen <[email protected]>
iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure
Salah Triki <[email protected]>
iio: proximity: isl29501: Fix return type of isl29501_register_write
Hui Su <[email protected]>
iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup
Fan Wu <[email protected]>
iio: light: gp2ap020a00f: drain irq_work after free_irq
Arka Mondal <[email protected]>
iio: imu: adis16480: fix unprotected debugfs reads
Arka Mondal <[email protected]>
iio: imu: adis16400: fix unprotected debugfs reads
Arka Mondal <[email protected]>
iio: gyro: adis16136: fix unprotected debugfs reads
Salah Triki <[email protected]>
iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw()
Jonathan Cameron <[email protected]>
iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
Fan Wu <[email protected]>
iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind
Felix Gu <[email protected]>
iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls
Felix Gu <[email protected]>
iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure
Salah Triki <[email protected]>
iio: accel: sca3000: fix frequency divider condition check
Jiale Yao <[email protected]>
iio: accel: kxcjk-1013: reject duplicate event disable
Daehyeon Ko <[email protected]>
thunderbolt: Reject oversized XDomain properties responses
Kurt Lieber <[email protected]>
thunderbolt: Disable CL states for the Anker Prime TB5 dock
Mika Westerberg <[email protected]>
thunderbolt: Fix KASAN reported use-after-free when request is canceled
Ian Lin <[email protected]>
USB: serial: option: add Compal EXC-T1 support
Sebastian Sjoholm <[email protected]>
USB: serial: option: add Quectel RG660QB
Ian Lin <[email protected]>
USB: serial: option: add Compal EXM-G1x support
Carlo Szelinsky <[email protected]>
USB: serial: option: add Quectel EG060W
Zhao Dongdong <[email protected]>
USB: serial: option: add support for SIMCom SIM8260C
Johan Hovold <[email protected]>
USB: serial: fix driver deregistration order
Johan Hovold <[email protected]>
USB: serial: fix dynamic id driver deregistration race
Johan Hovold <[email protected]>
USB: serial: ssu100: fix baud rate overflow
Johan Hovold <[email protected]>
USB: serial: quatech2: fix baud rate overflow
Jérémy Carrat <[email protected]>
USB: serial: cp210x: add Corsair AX1500i Power Supply
Yuqi Xu <[email protected]>
wifi: mac80211: handle empty FILS association request payload
Zhao Li <[email protected]>
wifi: mac80211: release mesh path quota on failed additions
Yuqi Xu <[email protected]>
wifi: mac80211: minstrel_ht: validate fixed rate index
Zhao Li <[email protected]>
wifi: mac80211: drain PS delivery work during station teardown
Guangshuo Li <[email protected]>
wifi: iwlegacy: 3945: free EEPROM data on remove
Tianchu Chen <[email protected]>
wifi: cw1200: fix TX padding OOB read leaking heap data to device
Nuno Sá <[email protected]>
mtd: spinand: fix zero oobavail when no ECC engine is used
Mehmet Fide <[email protected]>
mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB
Runyu Xiao <[email protected]>
mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
Weiming Shi <[email protected]>
nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()
Daehyeon Ko <[email protected]>
nvme-multipath: fix underflow in ANA log bounds checks
Zhiling Zou <[email protected]>
ipvs: bound LBLCR and LBLC cache growth
Chandrashekar Devegowda <[email protected]>
Bluetooth: btintel: fix buffer over-read in btintel_hw_error()
Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize fragmented ISO packet queueing
Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize ACL scheduling with channel deletion
Linmao Li <[email protected]>
Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems
Chengfeng Ye <[email protected]>
Bluetooth: hci_conn: Lock parent access during enhanced SCO setup
Chengfeng Ye <[email protected]>
Bluetooth: RFCOMM: Fix initial port reference race
Xiang Mei <[email protected]>
ALSA: ua101: reject mismatched capture/playback packet sizes
Kyle Zeng <[email protected]>
ALSA: seq: Serialize compat port-info ioctls
Zimeng Li <[email protected]>
ASoC: qcom: lpass-cpu: use DAI table index for playback constraints
Wentao Liang <[email protected]>
serial: vt8500: Fix clock reference leak in vt8500_serial_probe()
Simon Gassner <[email protected]>
serial: tegra: don't clear the Tx FIFO on an Rx-only reset
Fan Wu <[email protected]>
serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()
Johan Hovold <[email protected]>
tty: abort break signalling on hangup
Viken Dadhaniya <[email protected]>
tty: serial: qcom_geni_serial: Keep console RX functional after deep idle
Joshua Rogers <[email protected]>
tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup
Joshua Rogers <[email protected]>
tty: vcc: zero-initialize control packet in vcc_send_ctl()
Johan Hovold <[email protected]>
tty: amiserial: fix broken TIOCMIWAIT
Mingyu Wang <[email protected]>
tty: vt: fix memory leak in vc_allocate()
Jie Deng <[email protected]>
usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe
Fan Wu <[email protected]>
usb: cdns3: fix use-after-free in cdns3_gadget_exit()
Jameson Thies <[email protected]>
usb: typec: ucsi: displayport: Current CAM OOB index fixup
Prashanth K <[email protected]>
usb: typec: ucsi: Get the connector fwnode based on reg value
Radhey Shyam Pandey <[email protected]>
usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()
Amit Sunil Dhamne <[email protected]>
usb: typec: tcpm: recover after failure to start the frs ams
Hui Peng <[email protected]>
usb: core: clear both ep_in and ep_out for non-ep0 control endpoints
Myeonghun Pak <[email protected]>
usb: chipidea: tegra: disable runtime PM on resume failure
Yuchao Zhang <[email protected]>
usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC
Alan Stern <[email protected]>
USB: gadget: dummy-hcd: Fix wait for outstanding request completions
Fan Wu <[email protected]>
usb: gadget: aspeed-vhub: cancel wake work on device removal
Radhey Shyam Pandey <[email protected]>
usb: dwc3: am62: Fix runtime PM usage count leak on probe error path
Linkai Gong <[email protected]>
usb: typec: anx7411 - stop the IRQ before destroying the workqueue
Liu Chao <[email protected]>
usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
Myeonghun Pak <[email protected]>
usb: ohci-st: disable controller wakeup on removal
Myeonghun Pak <[email protected]>
usb: ohci-s3c2410: disable controller wakeup on removal
Myeonghun Pak <[email protected]>
usb: ohci-da8xx: disable controller wakeup on cleanup
Orgad Shaneh <[email protected]>
usb: octeon-hcd: fix the FIFO-flush timeout computation
Lovekesh Solanki <[email protected]>
usb: hub: use shorter 120ms post resume hold for SS root hubs
Syed Labeeq Sajid Bukhari <[email protected]>
usb: storage: sierra_ms: reject short SWoC info transfers
Johan Hovold <[email protected]>
USB: serial: fix port tear down use-after-free
Yuchao Zhang <[email protected]>
USB: cdc-acm: skip URB restart in port_shutdown if disconnected
Johan Hovold <[email protected]>
USB: cdc-acm: fix racy TIOCMIWAIT implementation
Yuxiao Wang <[email protected]>
nitro_enclaves: fix use-after-free on SLOT_ALLOC failure
Raphaël Larocque <[email protected]>
Input: synaptics - limit T440p InterTouch quirk to LEN0036
Lovekesh Solanki <[email protected]>
Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490
David Heidelberg <[email protected]>
Input: s6sy761 - fix resume ordering and restore sensing
Lovekesh Solanki <[email protected]>
Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410
Martino Papero <[email protected]>
Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11
Wentao Liang <[email protected]>
kgdboc: Fix tty driver reference leak in configure_kgdboc()
Tomer Pomeranc <[email protected]>
binder: fix leaked fd fixups on TF_UPDATE_TXN supersede
Tomer Pomeranc <[email protected]>
binder: fix is_failure flag for superseded transaction cleanup
Guangshuo Li <[email protected]>
drm/amdgpu: fix ACP MFD device leak on init failure
Guangshuo Li <[email protected]>
drm/amdgpu: fix IP instance memory leak on kobject add failure
Imre Kaloz <[email protected]>
drm/radeon: Read the VRAM VBIOS signature with readb()
Willian Oliveira <[email protected]>
drm/amdgpu/gfx6: fix firmware leak on teardown
Timur Kristóf <[email protected]>
drm/amd/pm/si: Fix updating clock limits on AC/DC
Timur Kristóf <[email protected]>
drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC
Nikola Prica <[email protected]>
PCI: Accept AtomicOps already enabled by the hypervisor
Luo Gengkun <[email protected]>
perf: Fix race between perf_event_exit_task() and perf_pending_task()
Hongjian Dai <[email protected]>
i2c: at91: release DMA channels when probe defers
Eric Dumazet <[email protected]>
ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()
Florian Westphal <[email protected]>
net: add and use skb_get_hash_net
Quentin Freimanis <[email protected]>
net: sparx5: make ports inherit the switch base mac address type
Fernando Fernandez Mancera <[email protected]>
netfilter: bpf: reject invalid NAT manipulation types
Julian Anastasov <[email protected]>
ipvs: filter some flags received in the backup server
Julian Anastasov <[email protected]>
ipvs: do not create invisible templates
Julian Anastasov <[email protected]>
ipvs: fix missing counter decrement in lblc
Jeff Jo <[email protected]>
tcp: refresh TS.Recent for accepted old ACKs
Nicolai Buchwitz <[email protected]>
net: bcmgenet: fix NULL dereference in set_coalesce before first open
Jamal Hadi Salim <[email protected]>
net/sched: sch_codel: match the no-drop threshold to the packet size
Jamal Hadi Salim <[email protected]>
net/sched: fq_codel: match the no-drop threshold to the packet size
Jérémy Jean <[email protected]>
tipc: prevent GCM nonce reuse on peer key changes
Baha Mesleh <[email protected]>
octeontx2-af: mcs: Fix SC resource cleanup loop
Florian Fainelli <[email protected]>
net: systemport: Fix RUNT MIB counter register offset calculation
Nguyen Ngoc Thang <[email protected]>
Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister
Florian Westphal <[email protected]>
netfilter: ipset: do not update comments from kernel-side adds
Jamal Hadi Salim <[email protected]>
net/sched: cls_api: reclaim an empty proto on the error path
Binbin Deng <[email protected]>
net/mctp: publish the mctp_dev only after it is initialised
Sai Teja Aluvala <[email protected]>
Bluetooth: btintel: validate DDC record lengths
Sang-Hoon Choi <[email protected]>
Bluetooth: hci_core: free the HCI ID if naming fails
Cezary Rojewski <[email protected]>
ASoC: codecs: rt274: Fix format setting for 44100 rate
Cezary Rojewski <[email protected]>
ASoC: codecs: rt286: Revert delay value for jack setup
Zhao Li <[email protected]>
wifi: cfg80211: preserve hidden-group beacon IE ownership
Manush Prajwal <[email protected]>
rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()
Liu Dalin <[email protected]>
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak
Nicolas Escande <[email protected]>
wifi: ath11k: reset ar->num_stations on hardware start
Sheetal <[email protected]>
ASoC: tegra: Fix ASRC Stream6 input threshold control
Aamir Ahmed <[email protected]>
wifi: wfx: validate MIB read length before copying to caller
HyeongJun An <[email protected]>
ASoC: wm8903: Move the DRC QR threshold to the register that holds it
Abdurrahman Hussain <[email protected]>
of/overlay: don't create "//" paths for fragments targeting the root
Abdurrahman Hussain <[email protected]>
of/overlay: don't leak fragment references when changeset init fails
Julian Sun <[email protected]>
nvmet: preserve device path on allocation failure
Karl Mehltretter <[email protected]>
mtd: core: call _get_device() with the master MTD
Alexander Usyskin <[email protected]>
mtd: call external _get and _put in right order
Tomas Winkler <[email protected]>
mtd: use refcount to prevent corruption
SJ Park <[email protected]>
mm/damon/core: don't skip damos_adjust_quota() while esz is not zero
Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort
Nilesh Javali <[email protected]>
scsi: qla2xxx: Initialize NVMe abort_work once at submission
Svyatoslav Ryhel <[email protected]>
drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
Sandipan Das <[email protected]>
perf/x86/amd/lbr: Fix kernel address leakage
Kuniyuki Iwashima <[email protected]>
hsr: Remove WARN_ONCE() in hsr_addr_is_self().
Kang Yang <[email protected]>
wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
Duoming Zhou <[email protected]>
watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
Tetsuo Handa <[email protected]>
perf/core: Fix WARN in perf_sigtrap()
Lorenzo Stoakes (ARM) <[email protected]>
mm/secretmem: properly account locked pages
Xiang Mei <[email protected]>
ALSA: line6: reject oversized playback packets
Nguyen Ngoc Thang <[email protected]>
ALSA: caiaq: unregister the input device when probe fails
Zizhi Wo <[email protected]>
vt: skip screen update for DEC alignment test on backgroup consoles
Clément Léger <[email protected]>
of/irq: add missing of_node_put() for interrupt parent node
Chunguang Xu <[email protected]>
nvme-fabrics: use reserved tag for reg read/write command
Jakub Kicinski <[email protected]>
ethtool: fail closed if we can't get max channel used in indirection tables
Mauro Carvalho Chehab <[email protected]>
media: av7110: fix a spectre vulnerability
Christoph Schlameuss <[email protected]>
kvm: s390: Reject memory region operations for ucontrol VMs
Dan Carpenter <[email protected]>
drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
Suraj Kandpal <[email protected]>
drm/i915/hdcp: Add encoder check in hdcp2_get_capability
Suraj Kandpal <[email protected]>
drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
Alex Hung <[email protected]>
drm/amd/display: Validate function returns
Sanghyun Park <[email protected]>
vxlan: use one headroom snapshot for neighbour replies
Maoyi Xie <[email protected]>
rds_tcp: close NULL deref window in rds_tcp_set_callbacks
Konrad Dybcio <[email protected]>
drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
Benjamin Berg <[email protected]>
wifi: cfg80211: avoid double free if updating BSS fails
Mario Limonciello <[email protected]>
x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
David Arinzon <[email protected]>
net: ena: Add validation for completion descriptors consistency
Shay Drory <[email protected]>
net/mlx5e: Fix netif state handling
Jan Kara <[email protected]>
ocfs2: Avoid touching renamed directory if parent does not change
Kumar Kartikeya Dwivedi <[email protected]>
bpf: Defer work in bpf_timer_cancel_and_free
Kumar Kartikeya Dwivedi <[email protected]>
bpf: Fail bpf_timer_cancel when callback is being cancelled
Jun Yang <[email protected]>
sctp: check RCV_SHUTDOWN after the sendmsg connect wait
Runyu Xiao <[email protected]>
rtc: spear: initialize IRQ state before requesting alarm IRQ
Ilkka Lappeteläinen <[email protected]>
net/packet: prevent TX_RING byte count overflow
Aohan Mei <[email protected]>
netfilter: nft_flow_offload: drop flowtable reference on init error path
Abdurrahman Hussain <[email protected]>
of/overlay: only treat a positive changeset id as registered
Abdurrahman Hussain <[email protected]>
of/overlay: put property on deadprops only after changeset add succeeds
Wentao Liang <[email protected]>
of/irq: Fix remaining refcount leaks in of_irq_init()
Leon Hwang <[email protected]>
kprobes: Skip disarmed probes when checking optkprobe overlap
Jérémy Jean <[email protected]>
audit: fix exe mark UAF in kill_rules()
Takashi Iwai <[email protected]>
ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices
Darrick J. Wong <[email protected]>
xfs: fix cursor and pointer handling when recovering iunlink buckets
Zihan Xi <[email protected]>
smb: client: close completed creates on compound wait errors
Zihan Xi <[email protected]>
smb: client: close handle after create-context parsing failure
ChenXiaoSong <[email protected]>
smb/client: pass cifs_open_info_data to SMB2_open()
ChenXiaoSong <[email protected]>
smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink()
Chen Changcheng <[email protected]>
HID: alps: unregister DualPoint Stick input device on remove
Bastien Nocera <[email protected]>
HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM
Marcus Folkesson <[email protected]>
HID: hid-alps: use default remove for hid device
Thomas Weißschuh <[email protected]>
HID: core: remove #ifdef CONFIG_PM from hid_driver
Tibor Harcsa <[email protected]>
Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table
Aldo Ariel Panzardo <[email protected]>
Bluetooth: mgmt: fix race in read_unconf_index_list()
Namjae Jeon <[email protected]>
smb: client: use finish_no_open() for non-regular inodes
Dapeng Mi <[email protected]>
perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification
Dapeng Mi <[email protected]>
perf/x86/intel: Update event constraints and cache_extra_regsfor ADL
Aohan Mei <[email protected]>
netfilter: nf_tables: skip expired catchall elements on insert and delete
Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: set->ops->insert returns opaque set element in case of EEXIST
Guangshuo Li <[email protected]>
net: ena: fix MMIO read buffer leak on probe failure
Dr. David Alan Gilbert <[email protected]>
net: ena: Remove autopolling mode
Yuqi Xu <[email protected]>
net: ipconfig: bound DHCP option construction
Thorsten Blum <[email protected]>
net: ipconfig: Remove outdated comment and indent code block
Liz Fong-Jones <[email protected]>
PCI: Fix BAR resize for devices on a root bus
Ilpo Järvinen <[email protected]>
PCI: Fix Resizable BAR restore order
Zihan Xi <[email protected]>
smb: client: fix create context out-of-bounds reads
Steve French <[email protected]>
smb3: make query_on_disk_id open context consistent and move to common code
Ilya Maximets <[email protected]>
net: openvswitch: conntrack: fix helper UAF due to extensions realloc
Florian Westphal <[email protected]>
openvswitch: prepare for stolen verdict coming from conntrack and nat engine
Jaewook You <[email protected]>
mm/hugetlb: preserve mremap address delta when skipping page tables
Jinjiang Tu <[email protected]>
mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish
Waiman Long <[email protected]>
mm/kmemleak: fix UAF bug in kmemleak_scan()
Waiman Long <[email protected]>
mm/kmemleak: simplify kmemleak_cond_resched() usage
Henry Martin <[email protected]>
tracing/user_events: Don't destroy fields when event removal fails
Dapeng Mi <[email protected]>
perf/x86/intel: Remove anythread_deprecated bit from perf_capabilities
Willem de Bruijn <[email protected]>
tcp: prevent collapsing skbs across boundary in rtx queue
Myeonghun Pak <[email protected]>
bna: prevent IOC timer rearm during teardown
April Cardenas <[email protected]>
smb/client: send lease break ACKs thru correct session for multiuser mounts
Fan Wu <[email protected]>
wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown
Yibo Tan <[email protected]>
hwmon: (pwm-fan) Stop RPM timer before freeing tach data
Tzung-Bi Shih <[email protected]>
watchdog: rtd119x: Avoid division by zero
Christophe JAILLET <[email protected]>
watchdog: rtd119x: Use devm_clk_get_enabled() helper
Shakeel Butt <[email protected]>
mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio()
Hongling Zeng <[email protected]>
btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()
Fan Wu <[email protected]>
smb: client: fix cifsFileInfo reference leak in deferred close
Paulo Alcantara <[email protected]>
smb: client: fix file type corruption in cifs_reparse_point_to_fattr()
Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: reset retrans_time when ADD_ADDR entry is reused
Qing Luo <[email protected]>
mptcp: pm: userspace: fix address ID overflow
Geliang Tang <[email protected]>
mptcp: use sock_kmemdup for address entry
Geliang Tang <[email protected]>
sock: add sock_kmemdup helper
Geliang Tang <[email protected]>
mptcp: pm: drop match in userspace_pm_append_new_local_addr
Matthieu Baerts <[email protected]>
mptcp: userspace pm: use a single point of exit
Nikhil Gurudasani <[email protected]>
erofs: preserve LZMA decoders on resize failure
Sahil Chandna <[email protected]>
net: mana: Reserve extra CQ slot for the fence completion CQE
Xuanqiang Luo <[email protected]>
net/sched: act_api: release all action references on NEWACTION failure
Xiong Weimin <[email protected]>
virtio_mmio: disable IRQ wake before free_irq
Viresh Kumar <[email protected]>
virtio-mmio: Remove virtqueue list from mmio device
Zihan Xi <[email protected]>
ipmr: account multicast table and route memory
Thomas Zimmermann <[email protected]>
drm/sysfb: simpledrm: Improve stride validation
Guanghui Yang <[email protected]>
f2fs: fix dentry folio leak in find_in_level
Wenjie Qi <[email protected]>
f2fs: limit recovery filename logging to stored length
Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature
Nilesh Javali <[email protected]>
scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot
Nilesh Javali <[email protected]>
scsi: qla2xxx: Quiesce response IRQ before freeing request queue
Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate
Nilesh Javali <[email protected]>
scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path
Narasimharao Vadlamudi <[email protected]>
media: rkvdec: Propagate platform_get_irq() errors
Johan Hovold <[email protected]>
media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
Lorenzo Stoakes (ARM) <[email protected]>
mm/mremap: reset unfaulted VMA page offset for MREMAP_DONTUNMAP
Rupesh Majhi <[email protected]>
iio: pressure: dps310: fix NULL pointer dereference on ACPI probe
Anthony Krowiak <[email protected]>
s390/vfio-ap: Fix NULL deref in status_show() during queue probe
Xu Rao <[email protected]>
nvme-fabrics: fix DHCHAP secret leak on parse failure
Karl Mehltretter <[email protected]>
arm64: mm: Fix the lockless page-table walk in show_pte()
Hugh Dickins <[email protected]>
arm64: allow pte_offset_map() to fail
Lad Prabhakar <[email protected]>
rtc: rzn1: Handle unset alarm weekday in rzn1_rtc_read_alarm
Steven Rostedt <[email protected]>
ftrace: Synchronize the initialization of ftrace_ops
Muhammad Bilal <[email protected]>
staging: sm750fb: fix mono image source stride mismatch in lynxfb_ops_imageblit()
Can Peng <[email protected]>
spi: bcm63xx: disable clock on resume failure
Yang Yingliang <[email protected]>
spi: bcm63xx: switch to use modern name
Jeffin Philip <[email protected]>
usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
Adrian Hunter <[email protected]>
i3c: master: Fix use-after-free of master->this
Adrian Hunter <[email protected]>
i3c: master: Do not treat master device as a duplicate target
Can Peng <[email protected]>
hwrng: stm32 - Fix runtime PM cleanup on registration failure
Fan Wu <[email protected]>
mmc: via-sdmmc: cancel card-detect work on remove
Jianing Li <[email protected]>
power: supply: max17040: drop incorrect I2C functionality check
Uwe Kleine-König <[email protected]>
power: supply: max17040: Convert to i2c's .probe_new()
Angel Iglesias <[email protected]>
i2c: core: Introduce i2c_client_get_device_id helper function
Fan Wu <[email protected]>
power: supply: rt9455: quiesce delayed work before teardown
Uwe Kleine-König <[email protected]>
power: supply: rt9455: Convert to i2c's .probe_new()
Oscar Ou <[email protected]>
lockd: fix swapped arguments in nlmsvc_match_ip()
Ruoyu Wang <[email protected]>
i2c: mxs: fix DMA channel leak on probe error
Bence Csókás <[email protected]>
dmaengine: Add devm_dma_request_chan()
Jiacheng Yu <[email protected]>
params: fix charp corruption on allocation failure
Andy Shevchenko <[email protected]>
params: Fix multi-line comment style
Andy Shevchenko <[email protected]>
params: Sort headers
Andy Shevchenko <[email protected]>
params: Use size_add() for kmalloc()
Andy Shevchenko <[email protected]>
params: Do not go over the limit when getting the string length
Christophe JAILLET <[email protected]>
kernel/params.c: Use kstrtobool() instead of strtobool()
Rafael J. Wysocki <[email protected]>
ACPI: TAD: Add locking around AML evaluations
Rafael J. Wysocki <[email protected]>
ACPI: TAD: Split three functions to untangle runtime PM handling
Rafael J. Wysocki <[email protected]>
ACPI: TAD: Rearrange RT data validation checking
Hui Su <[email protected]>
kasan: fix cache shrink race with CPU hotplug
Zqiang <[email protected]>
kasan: fix lockdep report invalid wait context
Kuan-Wei Chiu <[email protected]>
coresight: etm3x: Fix cntr_val_show() to match cntr_val_store() behavior
Chuck Lever <[email protected]>
nfsd: gate nfs2 setacl by argp->mask
Jeff Layton <[email protected]>
nfsd: fix clock domain mismatch in clients_still_reclaiming()
Jeff Layton <[email protected]>
nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()
Chris Mason <[email protected]>
nfsd: size fh_verify server sockaddr slot by xpt_locallen
Chris Mason <[email protected]>
nfsd: release path refs on follow_down() error
Longlong Xia <[email protected]>
zram: fix out-of-bounds access in read_block_state()
Sergey Senozhatsky <[email protected]>
zram: fixup read_block_state()
Chengfeng Ye <[email protected]>
KEYS: trusted: Fix TPM teardown ordering
Qing Ming <[email protected]>
gtp: serialize PDP context updates
Breno Leitao <[email protected]>
usb: xhci: bail out of setup if the controller is inaccessible
Arnaldo Carvalho de Melo <[email protected]>
perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
Namhyung Kim <[email protected]>
perf tools: Fix a asan issue in parse_events_multi_pmu_add()
Ilya Titov <[email protected]>
pinctrl: sunxi: keep a shadow copy of the data register output latches
Xiang Mei <[email protected]>
vlan: require the MAC header to be present in __vlan_insert_inner_tag()
Frank Sorenson <[email protected]>
smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()
Joseph Qi <[email protected]>
smb: client: fix use-after-free of iface in cifs_try_adding_channels()
Daehyeon Ko <[email protected]>
wifi: libipw: reject TKIP frames without a full MIC
Hyunwoo Kim <[email protected]>
exec: Cleanup POSIX timers right after de_thread()
Xiang Mei <[email protected]>
ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity
Takashi Iwai <[email protected]>
ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling
Bjoern Doebel <[email protected]>
smb: client: fix heap overflow in DACL owner/group rewrite
Norbert Szetei <[email protected]>
landlock: Fix use-after-free of the source's parent directory
Zhiling Zou <[email protected]>
net: bridge: use option bits for CFM/MRP frame handlers
XingWang Xiang <[email protected]>
genetlink: pin family module during policy dump
Xu Rao <[email protected]>
Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev
Uwe Kleine-König <[email protected]>
Bluetooth: btqcomsmd: Convert to platform remove callback returning void
Chao Yu <[email protected]>
f2fs: embed f2fs_gc_kthread in f2fs_sb_info
Nilesh Javali <[email protected]>
scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]
Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown
Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking
Nilesh Javali <[email protected]>
scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
Christian Borntraeger <[email protected]>
KVM: s390: Zero initialize data structures for inject_pfault_token
Tristan Madani <[email protected]>
nvme: add missing SRCU grace period in error path
Steven Rostedt <[email protected]>
ftrace: Take trace_array reference before accessing its ftrace_ops
Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()
Vivek BalachandharTN <[email protected]>
staging: rtl8723bs: fix spacing around operators
Myeonghun Pak <[email protected]>
usb: storage: realtek_cr: fix use-after-free on disconnect
Fan Wu <[email protected]>
wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop
Doruk Tan Ozturk <[email protected]>
ocfs2: validate directory-index entry counts when reading metadata
Joseph Qi <[email protected]>
ocfs2: validate dx_root extent list fields during block read
Dave Airlie <[email protected]>
nouveau/gem: reserve the bo in the info ioctl around the vma lookup
Doruk Tan Ozturk <[email protected]>
HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
Frank Sorenson <[email protected]>
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()
Michael Bommarito <[email protected]>
ceph: bound copied dentry name length in NFS export get_name
Jeff Layton <[email protected]>
nfsd: fix nfsd_file leak on inter-server COPY setup failure
Hyunwoo Kim <[email protected]>
apparmor: fix out-of-bounds write when null terminating a label vec
Arnd Bergmann <[email protected]>
mips: unhide uasm_in_compat_space_p() declaration
Jens Axboe <[email protected]>
io_uring/poll: don't loop on HUP with multiple references
Jens Axboe <[email protected]>
io_uring/timeout: don't lose a cancel as io-wq arms a timeout
Jens Axboe <[email protected]>
io_uring/timeout: don't flush with the sequence behind the last flush
Jens Axboe <[email protected]>
io_uring/timeout: don't put a sequence target behind the last flush
Juanlu Herrero <[email protected]>
io_uring/poll: avoid retry wakeup loss when dropping ownership
Josef Bacik <[email protected]>
io_uring: look up the file before queueing to io-wq
Josef Bacik <[email protected]>
io_uring: don't pass restart error codes to userspace
Josef Bacik <[email protected]>
io_uring/sqpoll: let the thread sleep on disabled rings
Josef Bacik <[email protected]>
io_uring/timeout: don't skip over reached sequences
Josef Bacik <[email protected]>
io_uring/poll: drop stale double poll entry on rearm
Josef Bacik <[email protected]>
io_uring/wait: look at all CQ waiters on wake up
Josef Bacik <[email protected]>
io_uring/cancel: let CANCEL_ALL find parked requests
Josef Bacik <[email protected]>
io_uring/cancel: recognize "no timeout" on 32-bit
Josef Bacik <[email protected]>
io_uring/cancel: don't forget that the work was running
Josef Bacik <[email protected]>
io_uring/poll: don't lose a cancel as io-wq arms poll
Josef Bacik <[email protected]>
io_uring/io-wq: let cancel find picked up hashed work
Josef Bacik <[email protected]>
io_uring/io-wq: don't exit with a creation pending
Josef Bacik <[email protected]>
io_uring/io-wq: don't strand work when a worker exits
Josef Bacik <[email protected]>
io_uring: don't flood a cancelling task with task_work
Josef Bacik <[email protected]>
io_uring/io-wq: don't hide a link from cancellations
Josef Bacik <[email protected]>
io_uring/io-wq: don't lose the signal that ends work
Christian Brauner <[email protected]>
io-wq: order the exit bit against worker creation task work
-------------
Diffstat:
CREDITS | 5 + Documentation/arm64/silicon-errata.rst | 2 + Documentation/filesystems/index.rst | 1 - Documentation/filesystems/ntfs.rst | 466 --- Documentation/networking/ip-sysctl.rst | 6 + Documentation/networking/strparser.rst | 2 +- Documentation/virt/kvm/api.rst | 6 + MAINTAINERS | 11 +- Makefile | 31 +- arch/alpha/include/asm/pgtable.h | 33 +- arch/alpha/include/asm/tlbflush.h | 4 +- arch/alpha/lib/Makefile | 1 - arch/alpha/mm/Makefile | 4 +- arch/alpha/mm/tlbflush.c | 96 + arch/arm/mm/flush.c | 2 + arch/arm64/Kconfig | 30 + arch/arm64/include/asm/kvm_host.h | 2 - arch/arm64/kernel/Makefile | 3 + arch/arm64/kernel/cpu_errata.c | 24 +- arch/arm64/kernel/cpufeature.c | 2 +- arch/arm64/kernel/entry.S | 22 +- arch/arm64/kernel/ptrace.c | 50 + arch/arm64/kernel/signal.c | 25 +- arch/arm64/kernel/topology.c | 11 +- arch/arm64/kvm/arch_timer.c | 3 +- arch/arm64/kvm/arm.c | 18 +- arch/arm64/kvm/mmu.c | 25 +- arch/arm64/kvm/vgic/vgic-its.c | 8 + arch/arm64/kvm/vgic/vgic.c | 9 +- arch/arm64/mm/fault.c | 15 +- arch/arm64/net/bpf_jit_comp.c | 2 +- arch/arm64/tools/cpucaps | 2 +- arch/loongarch/kernel/machine_kexec.c | 5 +- arch/loongarch/kernel/module-sections.c | 38 +- arch/loongarch/kernel/setup.c | 1 + arch/loongarch/kernel/smp.c | 129 +- arch/loongarch/mm/hugetlbpage.c | 3 +- arch/loongarch/net/bpf_jit.c | 5 +- arch/mips/Kbuild | 6 - arch/mips/include/asm/uasm.h | 2 - arch/mips/kernel/ftrace.c | 25 +- arch/nios2/include/asm/checksum.h | 2 +- arch/powerpc/include/asm/book3s/64/pgtable.h | 16 + arch/powerpc/include/asm/xive.h | 4 +- arch/powerpc/kernel/iommu.c | 2 +- arch/powerpc/kernel/setup-common.c | 1 - arch/powerpc/kexec/ranges.c | 12 +- arch/powerpc/mm/book3s64/pgtable.c | 13 +- arch/powerpc/platforms/powernv/smp.c | 8 +- arch/powerpc/platforms/pseries/iommu.c | 3 +- arch/powerpc/platforms/pseries/smp.c | 8 +- arch/powerpc/sysdev/xive/common.c | 10 +- arch/riscv/include/asm/asm-prototypes.h | 1 - arch/riscv/include/asm/asm.h | 23 + arch/riscv/include/asm/processor.h | 1 + arch/riscv/include/asm/thread_info.h | 4 - arch/riscv/kernel/asm-offsets.c | 6 + arch/riscv/kernel/entry.S | 79 +- arch/riscv/kernel/probes/kprobes_trampoline.S | 3 + arch/riscv/kernel/traps.c | 30 +- arch/riscv/kvm/vmid.c | 2 +- arch/s390/appldata/appldata_base.c | 117 +- arch/s390/appldata/appldata_mem.c | 2 +- arch/s390/include/asm/appldata.h | 2 +- arch/s390/include/asm/cpu_mf.h | 53 - arch/s390/include/asm/dma.h | 2 +- arch/s390/include/asm/nmi.h | 3 + arch/s390/kernel/cpcmd.c | 2 +- arch/s390/kernel/dis.c | 2 +- arch/s390/kernel/nmi.c | 5 +- arch/s390/kernel/perf_cpum_sf.c | 52 + arch/s390/kernel/process.c | 2 +- arch/s390/kvm/interrupt.c | 24 +- arch/s390/kvm/kvm-s390.c | 7 +- arch/s390/kvm/priv.c | 3 +- arch/s390/lib/spinlock.c | 2 +- arch/s390/mm/fault.c | 15 +- arch/s390/mm/maccess.c | 2 +- arch/s390/pci/pci_sysfs.c | 3 + arch/sparc/kernel/Makefile | 1 - arch/sparc/lib/Makefile | 1 - arch/sparc/mm/Makefile | 1 - arch/sparc/prom/Makefile | 1 - arch/um/kernel/skas/syscall.c | 34 +- arch/x86/events/amd/core.c | 12 +- arch/x86/events/amd/lbr.c | 3 +- arch/x86/events/intel/core.c | 14 +- arch/x86/events/intel/ds.c | 48 +- arch/x86/events/intel/uncore_snbep.c | 5 - arch/x86/events/perf_event.h | 12 +- arch/x86/kernel/alternative.c | 10 - arch/x86/kernel/cpu/amd.c | 11 + arch/x86/kernel/cpu/mce/severity.c | 12 +- arch/x86/kernel/cpu/resctrl/rdtgroup.c | 13 +- arch/x86/kernel/ftrace.c | 3 +- arch/x86/kvm/mmu/mmu.c | 4 +- arch/x86/kvm/svm/nested.c | 34 +- arch/x86/kvm/svm/sev.c | 33 +- arch/x86/kvm/svm/svm.c | 24 +- arch/x86/kvm/vmx/nested.c | 9 +- arch/x86/kvm/x86.c | 5 +- arch/x86/kvm/x86.h | 5 +- arch/x86/net/bpf_jit_comp.c | 4 +- arch/x86/pci/fixup.c | 89 + block/bfq-cgroup.c | 15 +- block/bfq-iosched.c | 8 +- block/bfq-iosched.h | 2 +- block/blk-cgroup.c | 18 +- block/blk-cgroup.h | 2 + block/blk-core.c | 1 + block/blk-iocost.c | 25 +- block/blk-iolatency.c | 19 +- block/blk-mq.c | 28 +- block/blk-rq-qos.c | 2 + block/blk-rq-qos.h | 18 +- block/blk-throttle.c | 15 +- block/blk-wbt.c | 2 + block/ioprio.c | 7 +- crypto/Kconfig | 1 + crypto/af_alg.c | 2 + crypto/algif_skcipher.c | 8 +- crypto/asymmetric_keys/restrict.c | 8 +- crypto/drbg.c | 11 +- crypto/jitterentropy-kcapi.c | 195 +- crypto/jitterentropy.c | 143 +- crypto/jitterentropy.h | 10 +- drivers/acpi/acpi_tad.c | 188 +- drivers/acpi/battery.c | 8 +- drivers/acpi/bus.c | 54 +- drivers/acpi/processor_idle.c | 4 +- drivers/android/binder.c | 3 +- drivers/ata/libata-core.c | 5 +- drivers/ata/libata-eh.c | 6 + drivers/ata/libata-scsi.c | 93 + drivers/ata/libata.h | 2 + drivers/ata/sata_dwc_460ex.c | 9 +- drivers/base/core.c | 38 +- drivers/block/drbd/drbd_receiver.c | 3 + drivers/block/loop.c | 40 +- drivers/block/nbd.c | 1 + drivers/block/null_blk/main.c | 16 +- drivers/block/ublk_drv.c | 4 + drivers/block/zram/zram_drv.c | 21 +- drivers/bluetooth/btintel.c | 15 +- drivers/bluetooth/btqcomsmd.c | 10 +- drivers/bluetooth/btusb.c | 4 + drivers/bus/mhi/ep/ring.c | 12 +- drivers/bus/mhi/host/pci_generic.c | 20 +- drivers/char/hw_random/core.c | 153 +- drivers/char/hw_random/stm32-rng.c | 12 +- drivers/clk/sunxi-ng/ccu-sun50i-h616.c | 64 +- drivers/clocksource/samsung_pwm_timer.c | 22 +- drivers/cpufreq/amd-pstate.c | 7 +- drivers/crypto/hisilicon/qm.c | 38 +- drivers/crypto/keembay/keembay-ocs-aes-core.c | 4 +- drivers/crypto/qat/qat_common/adf_init.c | 14 + drivers/crypto/stm32/stm32-cryp.c | 8 +- .../crypto/virtio/virtio_crypto_akcipher_algs.c | 91 +- .../crypto/virtio/virtio_crypto_skcipher_algs.c | 13 +- drivers/cxl/core/hdm.c | 48 +- drivers/cxl/core/mbox.c | 15 +- drivers/cxl/core/port.c | 23 +- drivers/cxl/core/region.c | 29 +- drivers/cxl/cxl.h | 3 +- drivers/dma-buf/dma-buf.c | 15 + drivers/dma-buf/dma-heap.c | 80 +- drivers/dma-buf/udmabuf.c | 11 +- drivers/dma/dmaengine.c | 30 + drivers/dma/dw-edma/dw-edma-core.c | 90 +- drivers/dma/dw-edma/dw-edma-pcie.c | 3 + drivers/dma/dw-edma/dw-edma-v0-core.c | 17 + drivers/dma/idxd/init.c | 36 +- drivers/dma/ti/k3-udma-glue.c | 15 +- drivers/dma/xilinx/xilinx_dma.c | 14 +- drivers/edac/amd64_edac.c | 2 +- drivers/edac/igen6_edac.c | 6 + drivers/firewire/core-topology.c | 40 +- drivers/firmware/arm_ffa/driver.c | 4 +- drivers/firmware/arm_scmi/bus.c | 428 ++- drivers/firmware/arm_scmi/common.h | 66 +- drivers/firmware/arm_scmi/driver.c | 699 ++--- drivers/firmware/arm_scmi/mailbox.c | 32 +- drivers/firmware/arm_scmi/optee.c | 6 +- drivers/firmware/arm_scmi/smc.c | 18 +- drivers/firmware/arm_scmi/virtio.c | 4 +- drivers/firmware/efi/mokvar-table.c | 42 +- drivers/gpio/gpio-exar.c | 2 +- drivers/gpio/gpio-mvebu.c | 6 +- drivers/gpio/gpio-mxc.c | 161 +- drivers/gpio/gpio-pca953x.c | 18 +- drivers/gpio/gpio-xilinx.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 27 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_atombios.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_atombios.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 79 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 42 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 75 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 108 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 55 +- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_fence.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 54 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 18 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 46 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.h | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 33 +- drivers/gpu/drm/amd/amdgpu/amdgpu_umc.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 137 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 39 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 150 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 21 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_pt.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c | 20 +- drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 9 + drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c | 25 +- drivers/gpu/drm/amd/amdgpu/gmc_v11_0.c | 24 +- drivers/gpu/drm/amd/amdgpu/gmc_v8_0.c | 20 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 24 +- drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c | 1 + drivers/gpu/drm/amd/amdgpu/jpeg_v2_5.c | 2 + drivers/gpu/drm/amd/amdgpu/jpeg_v3_0.c | 1 + drivers/gpu/drm/amd/amdgpu/jpeg_v4_0.c | 1 + drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 8 +- drivers/gpu/drm/amd/amdgpu/psp_v12_0.c | 8 +- drivers/gpu/drm/amd/amdgpu/psp_v13_0.c | 14 +- drivers/gpu/drm/amd/amdgpu/psp_v13_0_4.c | 14 +- drivers/gpu/drm/amd/amdgpu/psp_v3_1.c | 8 +- drivers/gpu/drm/amd/amdgpu/sdma_v3_0.c | 25 +- drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 23 +- drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 2 + drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 4 + drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 3 + drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c | 58 +- drivers/gpu/drm/amd/amdgpu/vi.c | 21 + drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 13 +- drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 17 + drivers/gpu/drm/amd/amdkfd/kfd_device.c | 5 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 14 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 2 + drivers/gpu/drm/amd/amdkfd/kfd_migrate.c | 56 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 +- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 24 +- drivers/gpu/drm/amd/amdkfd/kfd_smi_events.c | 19 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 11 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 43 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 2 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 8 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c | 10 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.h | 8 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 15 +- .../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 19 +- drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 14 +- drivers/gpu/drm/amd/display/dc/core/dc_link_dpcd.c | 3 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 2 +- drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c | 40 +- drivers/gpu/drm/amd/display/dc/dc_dmub_srv.h | 3 + drivers/gpu/drm/amd/display/dc/dc_link.h | 3 + drivers/gpu/drm/amd/display/dc/dc_types.h | 2 +- drivers/gpu/drm/amd/display/dc/dce/Makefile | 2 +- drivers/gpu/drm/amd/display/dc/dce/dmub_abm.c | 282 +- drivers/gpu/drm/amd/display/dc/dce/dmub_abm_lcd.c | 286 ++ drivers/gpu/drm/amd/display/dc/dce/dmub_abm_lcd.h | 46 + .../amd/display/dc/dce110/dce110_hw_sequencer.c | 5 +- .../drm/amd/display/dc/dce112/dce112_resource.c | 5 +- .../gpu/drm/amd/display/dc/dce60/dce60_resource.c | 1 - .../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 4 +- .../gpu/drm/amd/display/dc/dcn20/dcn20_hubbub.c | 3 +- drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hubp.c | 3 +- drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 17 +- .../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 12 +- .../drm/amd/display/dc/dcn201/dcn201_resource.c | 4 +- drivers/gpu/drm/amd/display/dc/dcn21/dcn21_hwseq.c | 24 +- .../gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 3 +- drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hwseq.c | 4 +- .../gpu/drm/amd/display/dc/dcn314/dcn314_optc.c | 7 + drivers/gpu/drm/amd/display/dc/dcn32/dcn32_optc.c | 7 + .../gpu/drm/amd/display/dc/dcn32/dcn32_resource.c | 7 +- .../drm/amd/display/dc/dcn321/dcn321_resource.c | 2 +- .../gpu/drm/amd/display/dc/dml/dcn302/dcn302_fpu.c | 10 + .../gpu/drm/amd/display/dc/dml/dcn303/dcn303_fpu.c | 10 + .../gpu/drm/amd/display/dc/dml/dcn32/dcn32_fpu.c | 10 + .../gpu/drm/amd/display/dc/dml/dcn321/dcn321_fpu.c | 10 + drivers/gpu/drm/amd/display/dc/inc/hw/abm.h | 4 + .../gpu/drm/amd/display/dc/link/link_hwss_dio.c | 5 +- .../gpu/drm/amd/display/dc/link/link_hwss_hpo_dp.c | 3 +- drivers/gpu/drm/amd/display/dmub/inc/dmub_cmd.h | 18 + drivers/gpu/drm/amd/pm/amdgpu_pm.c | 2 + drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 39 +- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c | 10 +- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomfwctrl.c | 11 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 7 +- drivers/gpu/drm/aspeed/aspeed_gfx_drv.c | 5 +- drivers/gpu/drm/bridge/adv7511/adv7511_drv.c | 22 +- drivers/gpu/drm/display/drm_dp_helper.c | 4 +- drivers/gpu/drm/drm_fb_helper.c | 8 +- drivers/gpu/drm/etnaviv/etnaviv_sched.c | 13 +- drivers/gpu/drm/gud/gud_pipe.c | 1 + drivers/gpu/drm/i915/display/icl_dsi.c | 4 +- drivers/gpu/drm/i915/display/intel_bios.c | 36 +- drivers/gpu/drm/i915/display/intel_dmc.c | 21 +- drivers/gpu/drm/i915/display/intel_dp.c | 8 +- drivers/gpu/drm/i915/display/intel_hdcp.c | 14 +- drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +- .../gpu/drm/i915/gt/intel_execlists_submission.c | 34 +- drivers/gpu/drm/i915/gt/intel_rps.c | 3 +- drivers/gpu/drm/lima/lima_sched.c | 13 +- drivers/gpu/drm/mediatek/mtk_drm_crtc.c | 3 +- drivers/gpu/drm/msm/adreno/adreno_gpu.c | 2 + drivers/gpu/drm/msm/disp/dpu1/dpu_encoder_phys.h | 4 +- .../gpu/drm/msm/disp/dpu1/dpu_encoder_phys_cmd.c | 33 +- .../gpu/drm/msm/disp/dpu1/dpu_encoder_phys_vid.c | 35 +- .../gpu/drm/msm/disp/dpu1/dpu_encoder_phys_wb.c | 11 +- drivers/gpu/drm/msm/disp/dpu1/dpu_hw_interrupts.c | 4 +- drivers/gpu/drm/msm/msm_gem_submit.c | 3 +- drivers/gpu/drm/msm/msm_gpu.c | 31 +- drivers/gpu/drm/msm/msm_ringbuffer.c | 22 +- drivers/gpu/drm/msm/msm_ringbuffer.h | 1 + drivers/gpu/drm/nouveau/include/nvkm/core/client.h | 1 + drivers/gpu/drm/nouveau/nouveau_chan.c | 9 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 11 +- drivers/gpu/drm/nouveau/nvkm/core/client.c | 1 + drivers/gpu/drm/nouveau/nvkm/core/object.c | 26 +- drivers/gpu/drm/panfrost/panfrost_job.c | 16 +- drivers/gpu/drm/panfrost/panfrost_mmu.c | 13 +- drivers/gpu/drm/radeon/radeon_bios.c | 6 +- drivers/gpu/drm/radeon/radeon_fb.c | 9 +- drivers/gpu/drm/radeon/radeon_gem.c | 4 + drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 4 + drivers/gpu/drm/scheduler/sched_main.c | 33 +- drivers/gpu/drm/tegra/gr2d.c | 8 +- drivers/gpu/drm/tegra/gr3d.c | 8 +- drivers/gpu/drm/tiny/simpledrm.c | 10 +- drivers/gpu/drm/v3d/v3d_sched.c | 106 +- drivers/gpu/drm/vc4/vc4_bo.c | 13 +- drivers/gpu/drm/vc4/vc4_drv.c | 5 +- drivers/gpu/drm/vc4/vc4_hvs.c | 2 +- drivers/gpu/drm/vc4/vc4_v3d.c | 10 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 22 +- drivers/gpu/drm/xlnx/zynqmp_dpsub.c | 2 +- drivers/hid/hid-alps.c | 21 +- drivers/hid/hid-core.c | 38 +- drivers/hid/hid-logitech-hidpp.c | 27 +- drivers/hid/hid-mcp2221.c | 17 +- drivers/hid/hid-nintendo.c | 46 +- drivers/hid/hid-sony.c | 36 +- drivers/hid/hid-steam.c | 243 +- drivers/hid/i2c-hid/i2c-hid-core.c | 7 +- drivers/hid/intel-ish-hid/ishtp/bus.c | 2 + drivers/hid/intel-ish-hid/ishtp/client.c | 4 +- drivers/hid/uhid.c | 8 +- drivers/hid/usbhid/hid-core.c | 11 +- drivers/hv/channel_mgmt.c | 12 +- drivers/hv/connection.c | 1 - drivers/hv/vmbus_drv.c | 16 +- drivers/hwmon/drivetemp.c | 10 +- drivers/hwmon/lm90.c | 26 +- drivers/hwmon/pmbus/pmbus_core.c | 60 +- drivers/hwmon/pwm-fan.c | 13 +- drivers/hwmon/sht3x.c | 9 +- .../hwtracing/coresight/coresight-etm3x-sysfs.c | 15 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 83 +- drivers/hwtracing/coresight/coresight-platform.c | 48 +- drivers/hwtracing/coresight/coresight-syscfg.c | 2 + drivers/i2c/busses/i2c-at91-master.c | 8 +- drivers/i2c/busses/i2c-mxs.c | 5 +- drivers/i2c/busses/i2c-qcom-cci.c | 4 +- drivers/i2c/busses/i2c-wmt.c | 2 +- drivers/i2c/i2c-core-base.c | 14 + drivers/i3c/master.c | 58 +- drivers/i3c/master/mipi-i3c-hci/core.c | 2 + drivers/i3c/master/mipi-i3c-hci/dma.c | 27 +- drivers/i3c/master/mipi-i3c-hci/hci.h | 1 + drivers/iio/accel/kxcjk-1013.c | 2 +- drivers/iio/accel/sca3000.c | 2 +- drivers/iio/accel/st_accel_core.c | 10 +- drivers/iio/adc/ad_sigma_delta.c | 26 +- drivers/iio/adc/aspeed_adc.c | 13 +- drivers/iio/adc/axp288_adc.c | 8 + drivers/iio/adc/max1363.c | 8 + drivers/iio/adc/stm32-adc.c | 13 +- drivers/iio/adc/sun4i-gpadc-iio.c | 10 +- drivers/iio/adc/xilinx-xadc-core.c | 9 +- drivers/iio/cdc/ad7150.c | 8 +- drivers/iio/common/st_sensors/st_sensors_core.c | 72 +- drivers/iio/common/st_sensors/st_sensors_trigger.c | 20 +- drivers/iio/frequency/admv1013.c | 2 +- drivers/iio/gyro/adis16136.c | 2 +- drivers/iio/imu/adis16400.c | 2 +- drivers/iio/imu/adis16480.c | 4 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 18 +- drivers/iio/imu/st_lsm9ds0/st_lsm9ds0_core.c | 65 +- drivers/iio/industrialio-buffer.c | 5 +- drivers/iio/industrialio-trigger.c | 2 + drivers/iio/light/gp2ap020a00f.c | 2 + drivers/iio/light/ltrf216a.c | 13 +- drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/pressure/dps310.c | 2 +- drivers/iio/proximity/isl29501.c | 2 +- drivers/iio/proximity/pulsedlight-lidar-lite-v2.c | 4 +- drivers/iio/proximity/sx9324.c | 2 +- drivers/iio/proximity/vcnl3020.c | 24 +- drivers/infiniband/core/counters.c | 9 +- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 2 + drivers/infiniband/hw/cxgb4/mem.c | 46 +- drivers/infiniband/hw/erdma/erdma_cm.c | 6 +- drivers/infiniband/hw/erdma/erdma_eq.c | 3 +- drivers/infiniband/hw/erdma/erdma_verbs.c | 23 +- drivers/infiniband/hw/erdma/erdma_verbs.h | 15 + drivers/infiniband/hw/hns/hns_roce_cq.c | 6 +- drivers/infiniband/hw/hns/hns_roce_device.h | 1 + drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 130 +- drivers/infiniband/hw/hns/hns_roce_main.c | 5 +- drivers/infiniband/hw/hns/hns_roce_mr.c | 6 +- drivers/infiniband/hw/hns/hns_roce_srq.c | 2 +- drivers/infiniband/hw/irdma/hw.c | 7 +- drivers/infiniband/hw/irdma/main.h | 3 +- drivers/infiniband/hw/irdma/utils.c | 12 +- drivers/infiniband/hw/irdma/verbs.c | 21 +- drivers/infiniband/hw/mlx5/cq.c | 11 +- drivers/infiniband/hw/mlx5/main.c | 55 +- drivers/infiniband/hw/mlx5/mlx5_ib.h | 35 +- drivers/infiniband/hw/mlx5/mr.c | 385 ++- drivers/infiniband/hw/mlx5/odp.c | 59 +- drivers/infiniband/hw/mlx5/umr.c | 87 +- drivers/infiniband/sw/rdmavt/vt.c | 4 +- drivers/infiniband/sw/rxe/rxe_qp.c | 9 + drivers/infiniband/sw/rxe/rxe_srq.c | 7 +- drivers/infiniband/sw/siw/siw_cm.c | 48 +- drivers/infiniband/sw/siw/siw_qp_tx.c | 2 + drivers/input/keyboard/atkbd.c | 8 + drivers/input/keyboard/lkkbd.c | 2 + drivers/input/mouse/alps.c | 2 + drivers/input/mouse/synaptics.c | 7 +- drivers/input/serio/i8042-acpipnpio.h | 9 + drivers/input/touchscreen/s6sy761.c | 14 +- drivers/interconnect/core.c | 16 +- drivers/iommu/amd/iommu.c | 43 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 46 +- drivers/iommu/intel/dmar.c | 22 +- drivers/iommu/intel/iommu.c | 28 +- drivers/iommu/intel/iommu.h | 6 +- drivers/iommu/intel/pasid.c | 22 +- drivers/iommu/msm_iommu.c | 9 +- drivers/leds/leds-an30259a.c | 14 +- drivers/mailbox/arm_mhu.c | 1 + drivers/mailbox/arm_mhu_db.c | 1 - drivers/mailbox/hi3660-mailbox.c | 1 + drivers/mailbox/hi6220-mailbox.c | 1 + drivers/mailbox/imx-mailbox.c | 3 +- drivers/mailbox/mailbox-mpfs.c | 1 + drivers/mailbox/mailbox.c | 1 + drivers/mailbox/mtk-adsp-mailbox.c | 3 +- drivers/mailbox/mtk-cmdq-mailbox.c | 2 +- drivers/mailbox/omap-mailbox.c | 2 +- drivers/mailbox/platform_mhu.c | 1 + drivers/mailbox/rockchip-mailbox.c | 2 +- drivers/mailbox/sprd-mailbox.c | 2 +- drivers/mailbox/stm32-ipcc.c | 1 + drivers/mailbox/tegra-hsp.c | 1 - drivers/mailbox/zynqmp-ipi-mailbox.c | 137 +- drivers/md/dm-bio-prison-v1.c | 6 +- drivers/md/dm-bufio.c | 30 +- drivers/md/dm-cache-metadata.c | 7 +- drivers/md/dm-cache-target.c | 129 +- drivers/md/dm-crypt.c | 17 +- drivers/md/dm-ebs-target.c | 5 +- drivers/md/dm-era-target.c | 58 +- drivers/md/dm-exception-store.h | 44 +- drivers/md/dm-integrity.c | 5 +- drivers/md/dm-io.c | 24 +- drivers/md/dm-ioctl.c | 99 +- drivers/md/dm-kcopyd.c | 20 +- drivers/md/dm-log.c | 24 +- drivers/md/dm-mpath.c | 33 +- drivers/md/dm-path-selector.h | 27 +- drivers/md/dm-ps-queue-length.c | 4 +- drivers/md/dm-ps-round-robin.c | 13 +- drivers/md/dm-ps-service-time.c | 8 +- drivers/md/dm-raid.c | 12 +- drivers/md/dm-raid1.c | 46 +- drivers/md/dm-region-hash.c | 6 +- drivers/md/dm-snap-persistent.c | 8 +- drivers/md/dm-snap-transient.c | 8 +- drivers/md/dm-snap.c | 27 +- drivers/md/dm-table.c | 2 +- drivers/md/dm-thin-metadata.c | 20 +- drivers/md/dm-thin.c | 24 +- drivers/md/dm-uevent.c | 2 +- drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm.c | 12 +- drivers/md/dm.h | 12 +- drivers/md/md-cluster.c | 11 +- drivers/md/md.c | 3 +- drivers/md/persistent-data/dm-array.c | 37 +- drivers/md/persistent-data/dm-block-manager.c | 6 +- drivers/md/persistent-data/dm-btree.c | 6 +- drivers/md/raid1.c | 12 +- drivers/md/raid10.c | 72 +- drivers/md/raid5.c | 12 +- drivers/media/common/videobuf2/videobuf2-dma-sg.c | 1 + drivers/media/pci/ivtv/ivtvfb.c | 4 +- .../media/platform/mediatek/mdp3/mtk-mdp3-core.c | 5 + .../mediatek/vcodec/vdec/vdec_h264_req_if.c | 9 +- .../platform/mediatek/vcodec/venc/venc_h264_if.c | 5 +- drivers/media/platform/verisilicon/hantro.h | 2 + drivers/media/platform/verisilicon/hantro_drv.c | 89 +- drivers/media/platform/verisilicon/imx8m_vpu_hw.c | 8 + drivers/media/test-drivers/vivid/vivid-core.c | 4 +- drivers/media/v4l2-core/v4l2-mem2mem.c | 23 + drivers/memstick/core/memstick.c | 8 +- drivers/memstick/host/rtsx_usb_ms.c | 31 +- drivers/mfd/sm501.c | 18 +- drivers/misc/habanalabs/common/habanalabs.h | 5 - drivers/misc/habanalabs/common/memory.c | 236 +- drivers/misc/habanalabs/gaudi/gaudi.c | 19 + drivers/misc/habanalabs/gaudi2/gaudi2.c | 7 + drivers/misc/sgi-gru/grufault.c | 101 +- drivers/misc/sgi-gru/gruprocfs.c | 1 - drivers/misc/sgi-gru/grutables.h | 1 - drivers/mmc/host/cavium-octeon.c | 5 +- drivers/mmc/host/cavium-thunderx.c | 5 +- drivers/mmc/host/mtk-sd.c | 1 + drivers/mmc/host/sdhci-sprd.c | 4 + drivers/mmc/host/via-sdmmc.c | 4 + drivers/mtd/devices/block2mtd.c | 2 +- drivers/mtd/maps/vmu-flash.c | 12 +- drivers/mtd/mtdcore.c | 124 +- drivers/mtd/mtdcore.h | 1 + drivers/mtd/mtdpart.c | 14 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 6 +- drivers/mtd/nand/raw/vf610_nfc.c | 85 +- drivers/mtd/nand/spi/core.c | 37 +- drivers/net/amt.c | 51 +- drivers/net/bonding/bond_main.c | 70 +- drivers/net/can/dev/skb.c | 2 + drivers/net/can/usb/gs_usb.c | 159 +- drivers/net/dsa/b53/b53_common.c | 8 +- drivers/net/dsa/microchip/ksz_common.h | 2 +- drivers/net/ethernet/amazon/ena/ena_com.c | 25 +- drivers/net/ethernet/amazon/ena/ena_com.h | 14 - drivers/net/ethernet/amazon/ena/ena_eth_com.c | 37 +- drivers/net/ethernet/amazon/ena/ena_netdev.c | 3 + drivers/net/ethernet/amazon/ena/ena_regs_defs.h | 1 + drivers/net/ethernet/broadcom/bcmsysport.c | 4 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 70 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 15 +- drivers/net/ethernet/brocade/bna/bnad.c | 16 +- drivers/net/ethernet/cavium/liquidio/lio_main.c | 27 - .../net/ethernet/cavium/liquidio/octeon_device.h | 3 - .../net/ethernet/cavium/liquidio/octeon_mailbox.c | 33 +- .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c | 4 +- drivers/net/ethernet/freescale/enetc/enetc.c | 3 + .../net/ethernet/freescale/enetc/enetc_ethtool.c | 10 +- drivers/net/ethernet/ibm/ibmveth.c | 79 +- drivers/net/ethernet/ibm/ibmveth.h | 1 - drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 31 +- drivers/net/ethernet/intel/ice/ice.h | 2 + drivers/net/ethernet/intel/ice/ice_eswitch.c | 2 +- drivers/net/ethernet/intel/ice/ice_lib.c | 18 +- drivers/net/ethernet/intel/ice/ice_main.c | 66 +- drivers/net/ethernet/intel/ice/ice_ptp.c | 70 +- drivers/net/ethernet/intel/ice/ice_ptp.h | 8 + drivers/net/ethernet/intel/ice/ice_txrx.c | 6 +- drivers/net/ethernet/intel/ice/ice_xsk.c | 3 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 +- drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 12 + drivers/net/ethernet/marvell/octeontx2/af/cgx.h | 1 + drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 4 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 2 + .../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 79 + .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 22 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 69 +- .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 20 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 2 +- drivers/net/ethernet/mellanox/mlx4/srq.c | 14 +- drivers/net/ethernet/mellanox/mlx5/core/cq.c | 23 +- drivers/net/ethernet/mellanox/mlx5/core/en.h | 12 + .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 10 +- .../net/ethernet/mellanox/mlx5/core/en/tc_priv.h | 1 + drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 6 +- .../mellanox/mlx5/core/en_accel/ipsec_rxtx.c | 16 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 38 +- drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 6 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 9 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 13 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 4 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 30 +- .../net/ethernet/mellanox/mlx5/core/fpga/conn.c | 17 +- .../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 12 +- .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 3 +- drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/port.c | 4 +- .../ethernet/mellanox/mlx5/core/steering/dr_send.c | 28 +- drivers/net/ethernet/mellanox/mlx5/core/vport.c | 78 +- .../ethernet/microchip/lan966x/lan966x_ethtool.c | 18 +- .../net/ethernet/microchip/lan966x/lan966x_main.c | 2 - .../net/ethernet/microchip/lan966x/lan966x_main.h | 4 +- .../net/ethernet/microchip/sparx5/sparx5_main.c | 1 + .../net/ethernet/microchip/sparx5/sparx5_main.h | 1 + .../net/ethernet/microchip/sparx5/sparx5_netdev.c | 1 + drivers/net/ethernet/microsoft/mana/mana_en.c | 13 +- drivers/net/ethernet/mscc/ocelot_stats.c | 2 +- drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 467 +-- drivers/net/ethernet/renesas/ravb_main.c | 8 +- drivers/net/ethernet/renesas/ravb_ptp.c | 37 +- drivers/net/ethernet/sfc/ef100_netdev.c | 6 +- drivers/net/ethernet/sfc/ef100_nic.c | 47 +- drivers/net/ethernet/stmicro/stmmac/common.h | 56 +- drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 15 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c | 15 +- drivers/net/ethernet/stmicro/stmmac/dwmac_lib.c | 15 +- drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 15 +- drivers/net/ethernet/stmicro/stmmac/stmmac.h | 2 + .../net/ethernet/stmicro/stmmac/stmmac_ethtool.c | 125 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 191 +- drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c | 8 +- drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 18 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 4 +- drivers/net/gtp.c | 18 +- drivers/net/hyperv/netvsc.c | 20 +- drivers/net/ieee802154/mac802154_hwsim.c | 9 +- drivers/net/phy/phy_device.c | 19 +- drivers/net/tap.c | 55 +- drivers/net/team/team.c | 161 +- drivers/net/team/team_mode_loadbalance.c | 4 +- drivers/net/thunderbolt.c | 12 + drivers/net/usb/ax88179_178a.c | 6 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/vxlan/vxlan_core.c | 44 +- drivers/net/vxlan/vxlan_private.h | 4 +- drivers/net/wireguard/noise.c | 7 +- drivers/net/wireguard/queueing.h | 2 + drivers/net/wireless/ath/ath11k/dp_rx.c | 10 +- drivers/net/wireless/ath/ath11k/mac.c | 1 + drivers/net/wireless/ath/ath11k/mhi.c | 6 +- drivers/net/wireless/ath/ath11k/pci.c | 7 + drivers/net/wireless/ath/ath11k/wmi.c | 29 +- drivers/net/wireless/ath/wcn36xx/dxe.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 27 +- .../net/wireless/broadcom/brcm80211/brcmfmac/p2p.c | 4 + drivers/net/wireless/intel/iwlegacy/3945-mac.c | 1 + drivers/net/wireless/intel/iwlwifi/dvm/main.c | 4 +- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 28 +- drivers/net/wireless/intel/iwlwifi/iwl-trans.h | 3 + drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 18 +- drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 47 +- drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 9 +- drivers/net/wireless/intersil/p54/fwio.c | 42 +- drivers/net/wireless/marvell/libertas/tx.c | 7 - .../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 4 +- .../net/wireless/mediatek/mt76/mt7915/debugfs.c | 5 + drivers/net/wireless/mediatek/mt76/mt7915/eeprom.c | 33 +- drivers/net/wireless/mediatek/mt76/mt7915/eeprom.h | 1 + drivers/net/wireless/mediatek/mt76/mt7915/init.c | 9 +- drivers/net/wireless/mediatek/mt76/mt7915/main.c | 17 +- drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 15 +- drivers/net/wireless/mediatek/mt76/mt7915/mt7915.h | 3 +- drivers/net/wireless/mediatek/mt76/mt7921/main.c | 8 +- drivers/net/wireless/mediatek/mt76/mt7921/mt7921.h | 2 + drivers/net/wireless/mediatek/mt76/tx.c | 1 - drivers/net/wireless/microchip/wilc1000/wlan_cfg.c | 37 +- drivers/net/wireless/microchip/wilc1000/wlan_cfg.h | 5 +- .../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 19 +- drivers/net/wireless/realtek/rtw88/debug.c | 303 +- drivers/net/wireless/realtek/rtw88/debug.h | 2 + drivers/net/wireless/realtek/rtw88/main.c | 20 +- drivers/net/wireless/realtek/rtw88/main.h | 3 +- drivers/net/wireless/realtek/rtw89/core.c | 8 +- drivers/net/wireless/realtek/rtw89/mac80211.c | 11 +- drivers/net/wireless/realtek/rtw89/pci.c | 7 +- drivers/net/wireless/silabs/wfx/hif_tx.c | 4 +- drivers/net/wireless/st/cw1200/bh.c | 8 +- drivers/net/wireless/st/cw1200/txrx.c | 14 + drivers/net/wireless/ti/wl12xx/main.c | 6 +- drivers/net/wireless/ti/wl18xx/main.c | 2 +- drivers/net/wireless/ti/wlcore/main.c | 10 +- drivers/net/wireless/ti/wlcore/wlcore.h | 2 +- drivers/net/xen-netfront.c | 16 +- drivers/ntb/ntb_transport.c | 18 +- drivers/nvdimm/nd_virtio.c | 32 +- drivers/nvdimm/virtio_pmem.h | 2 + drivers/nvme/host/apple.c | 38 +- drivers/nvme/host/core.c | 3 + drivers/nvme/host/fabrics.c | 8 +- drivers/nvme/host/fc.c | 7 +- drivers/nvme/host/multipath.c | 5 +- drivers/nvme/host/pci.c | 18 +- drivers/nvme/host/rdma.c | 8 +- drivers/nvme/host/tcp.c | 33 +- drivers/nvme/target/admin-cmd.c | 31 +- drivers/nvme/target/auth.c | 20 +- drivers/nvme/target/configfs.c | 9 +- drivers/nvme/target/core.c | 94 +- drivers/nvme/target/discovery.c | 37 +- drivers/nvme/target/fabrics-cmd-auth.c | 100 +- drivers/nvme/target/fabrics-cmd.c | 56 +- drivers/nvme/target/nvmet.h | 23 +- drivers/nvme/target/rdma.c | 1 + drivers/nvme/target/tcp.c | 8 + drivers/of/irq.c | 14 +- drivers/of/overlay.c | 17 +- drivers/of/unittest.c | 7 +- drivers/opp/core.c | 6 +- drivers/pci/controller/dwc/pcie-designware-ep.c | 20 + drivers/pci/endpoint/functions/pci-epf-ntb.c | 5 + drivers/pci/endpoint/functions/pci-epf-test.c | 16 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 5 + drivers/pci/hotplug/pnv_php.c | 2 +- drivers/pci/hotplug/rpaphp_slot.c | 2 +- drivers/pci/pci-driver.c | 187 +- drivers/pci/pci-sysfs.c | 125 +- drivers/pci/pci.c | 20 +- drivers/pci/pci.h | 41 +- drivers/pci/rebar.c | 19 +- drivers/pci/search.c | 4 +- drivers/pci/setup-bus.c | 56 +- drivers/pci/slot.c | 46 +- drivers/perf/riscv_pmu_legacy.c | 5 +- drivers/perf/riscv_pmu_sbi.c | 103 +- drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +- drivers/pinctrl/core.c | 3 + drivers/pinctrl/core.h | 1 + drivers/pinctrl/freescale/pinctrl-scu.c | 3 +- drivers/pinctrl/mediatek/pinctrl-moore.c | 6 +- drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 14 +- drivers/pinctrl/mediatek/pinctrl-paris.c | 7 +- drivers/pinctrl/pinctrl-amd.c | 9 + drivers/pinctrl/pinmux.c | 175 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 88 +- drivers/pinctrl/sunxi/pinctrl-sunxi.h | 7 + drivers/platform/x86/amd/pmc.c | 26 +- drivers/platform/x86/asus-wmi.c | 6 +- drivers/platform/x86/dell/dell-laptop.c | 28 +- drivers/platform/x86/dell/dell-smbios-base.c | 25 + drivers/platform/x86/dell/dell-smbios.h | 5 + drivers/platform/x86/dell/dell-wmi-base.c | 2 +- drivers/platform/x86/huawei-wmi.c | 4 +- drivers/platform/x86/intel/int1092/intel_sar.c | 39 +- drivers/platform/x86/lg-laptop.c | 26 +- drivers/platform/x86/system76_acpi.c | 4 +- drivers/platform/x86/thinkpad_acpi.c | 4 +- drivers/platform/x86/toshiba_acpi.c | 4 +- drivers/platform/x86/x86-android-tablets.c | 6 +- drivers/power/supply/charger-manager.c | 60 +- drivers/power/supply/ds2780_battery.c | 2 +- drivers/power/supply/lp8788-charger.c | 29 +- drivers/power/supply/max17040_battery.c | 37 +- drivers/power/supply/rt9455_charger.c | 26 +- drivers/ptp/ptp_ocp.c | 3 +- drivers/ptp/ptp_private.h | 1 + drivers/ptp/ptp_sysfs.c | 2 +- drivers/pwm/pwm-samsung.c | 22 +- drivers/regulator/ltc3676.c | 15 +- drivers/remoteproc/qcom_wcnss.c | 23 +- drivers/rtc/dev.c | 2 +- drivers/rtc/rtc-mpfs.c | 6 +- drivers/rtc/rtc-rzn1.c | 16 +- drivers/rtc/rtc-spear.c | 11 +- drivers/s390/block/dasd_diag.c | 2 +- drivers/s390/block/dasd_eckd.c | 15 +- drivers/s390/block/dasd_fba.c | 2 +- drivers/s390/block/dcssblk.c | 2 +- drivers/s390/char/con3215.c | 2 +- drivers/s390/char/monwriter.c | 2 +- drivers/s390/cio/vfio_ccw_cp.c | 13 + drivers/s390/cio/vfio_ccw_cp.h | 8 + drivers/s390/crypto/pkey_api.c | 120 +- drivers/s390/crypto/vfio_ap_ops.c | 142 +- drivers/s390/crypto/zcrypt_api.c | 3 + drivers/s390/crypto/zcrypt_ccamisc.c | 64 +- drivers/s390/crypto/zcrypt_ccamisc.h | 6 +- drivers/s390/net/ctcm_mpc.c | 13 +- drivers/s390/net/ism.h | 2 + drivers/s390/net/ism_drv.c | 45 +- drivers/s390/net/netiucv.c | 2 +- drivers/s390/virtio/virtio_ccw.c | 4 - drivers/scsi/ch.c | 30 +- drivers/scsi/hisi_sas/hisi_sas.h | 4 +- drivers/scsi/hisi_sas/hisi_sas_main.c | 48 +- drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 279 +- drivers/scsi/hosts.c | 2 + drivers/scsi/imm.c | 1 + drivers/scsi/iscsi_tcp.c | 1 + drivers/scsi/libiscsi.c | 14 +- drivers/scsi/libsas/sas_expander.c | 14 +- drivers/scsi/lpfc/lpfc_init.c | 2 +- drivers/scsi/mpi3mr/mpi3mr.h | 11 +- drivers/scsi/mpi3mr/mpi3mr_app.c | 11 +- drivers/scsi/mpi3mr/mpi3mr_fw.c | 148 +- drivers/scsi/qedi/qedi_main.c | 3 +- drivers/scsi/qla2xxx/qla_bsg.c | 47 +- drivers/scsi/qla2xxx/qla_init.c | 17 + drivers/scsi/qla2xxx/qla_iocb.c | 12 +- drivers/scsi/qla2xxx/qla_isr.c | 25 +- drivers/scsi/qla2xxx/qla_mbx.c | 6 +- drivers/scsi/qla2xxx/qla_mid.c | 41 +- drivers/scsi/qla2xxx/qla_nvme.c | 10 +- drivers/scsi/qla2xxx/qla_os.c | 33 +- drivers/scsi/qla2xxx/qla_target.c | 5 +- drivers/scsi/qla2xxx/qla_target.h | 1 + drivers/scsi/scsi_error.c | 28 +- drivers/scsi/scsi_priv.h | 1 + drivers/scsi/sd.c | 25 +- drivers/scsi/st.c | 18 +- drivers/scsi/xen-scsifront.c | 1 + drivers/soc/aspeed/aspeed-lpc-snoop.c | 33 +- drivers/soc/imx/imx8m-blk-ctrl.c | 34 +- drivers/soc/imx/imx8mp-blk-ctrl.c | 18 +- drivers/soc/imx/imx93-blk-ctrl.c | 54 +- drivers/soc/qcom/icc-bwmon.c | 2 + drivers/soc/rockchip/pm_domains.c | 20 +- drivers/soc/xilinx/zynqmp_power.c | 10 +- drivers/soundwire/generic_bandwidth_allocation.c | 35 +- drivers/spi/spi-bcm63xx.c | 72 +- drivers/spi/spi-davinci.c | 5 +- drivers/spi/spi-dw-dma.c | 2 +- drivers/spi/spi-fsl-lpspi.c | 9 +- drivers/spi/spi-fsl-qspi.c | 42 +- drivers/spi/spi-fsl-spi.c | 97 +- drivers/spi/spi-hisi-kunpeng.c | 95 +- drivers/spi/spi-microchip-core-qspi.c | 79 +- drivers/spi/spi-microchip-core.c | 4 + drivers/spi/spi-mpc52xx.c | 66 +- drivers/spi/spi-oc-tiny.c | 24 +- drivers/spi/spi-qcom-qspi.c | 45 +- drivers/spi/spi-rockchip.c | 2 +- drivers/spi/spi-rspi.c | 14 +- drivers/spi/spi-tegra114.c | 7 + drivers/spi/spi-tegra210-quad.c | 20 + drivers/staging/greybus/raw.c | 90 +- drivers/staging/greybus/uart.c | 3 +- drivers/staging/media/atomisp/i2c/atomisp-gc2235.c | 29 +- .../media/deprecated/saa7146/av7110/av7110.h | 4 +- .../media/deprecated/saa7146/av7110/av7110_ca.c | 26 +- drivers/staging/media/rkvdec/rkvdec.c | 4 +- drivers/staging/most/Kconfig | 2 - drivers/staging/most/Makefile | 1 - drivers/staging/most/i2c/Kconfig | 13 - drivers/staging/most/i2c/Makefile | 4 - drivers/staging/most/i2c/i2c.c | 371 --- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 22 +- drivers/staging/sm750fb/sm750.c | 2 +- drivers/staging/sm750fb/sm750.h | 2 +- drivers/staging/sm750fb/sm750_accel.c | 6 +- drivers/staging/sm750fb/sm750_accel.h | 4 +- drivers/target/iscsi/iscsi_target_configfs.c | 26 +- drivers/tee/optee/ffa_abi.c | 16 +- drivers/tee/optee/smc_abi.c | 17 +- drivers/thermal/thermal_hwmon.c | 89 +- drivers/thunderbolt/ctl.c | 63 +- drivers/thunderbolt/quirks.c | 3 + drivers/thunderbolt/xdomain.c | 4 + drivers/tty/amiserial.c | 9 +- drivers/tty/n_gsm.c | 90 +- drivers/tty/pty.c | 2 +- drivers/tty/serial/8250/8250_bcm7271.c | 2 +- drivers/tty/serial/8250/8250_core.c | 2 +- drivers/tty/serial/imx.c | 26 +- drivers/tty/serial/kgdboc.c | 9 + drivers/tty/serial/max3100.c | 13 +- drivers/tty/serial/qcom_geni_serial.c | 5 +- drivers/tty/serial/sc16is7xx.c | 22 +- drivers/tty/serial/serial-tegra.c | 18 +- drivers/tty/serial/serial_core.c | 48 +- drivers/tty/serial/vt8500_serial.c | 1 + drivers/tty/tty_io.c | 80 +- drivers/tty/tty_port.c | 75 +- drivers/tty/vcc.c | 5 +- drivers/tty/vt/vc_screen.c | 25 +- drivers/tty/vt/vt.c | 7 +- drivers/ufs/core/ufshcd.c | 28 +- drivers/ufs/host/ufs-exynos.c | 17 +- drivers/ufs/host/ufs-exynos.h | 3 +- drivers/ufs/host/ufs-qcom.c | 13 +- drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/cdns3/cdns3-pci-wrap.c | 5 + drivers/usb/chipidea/ci_hdrc_tegra.c | 4 +- drivers/usb/chipidea/udc.c | 4 + drivers/usb/class/cdc-acm.c | 41 +- drivers/usb/class/cdc-acm.h | 1 - drivers/usb/core/hub.c | 7 +- drivers/usb/core/message.c | 8 +- drivers/usb/dwc2/hcd.c | 3 +- drivers/usb/dwc3/core.c | 19 +- drivers/usb/dwc3/core.h | 23 + drivers/usb/dwc3/dwc3-am62.c | 1 + drivers/usb/dwc3/ep0.c | 9 + drivers/usb/dwc3/gadget.c | 112 +- drivers/usb/gadget/function/f_ecm.c | 41 +- drivers/usb/gadget/function/f_eem.c | 59 +- drivers/usb/gadget/function/f_fs.c | 241 +- drivers/usb/gadget/function/f_hid.c | 17 +- drivers/usb/gadget/function/f_mass_storage.c | 3 + drivers/usb/gadget/function/f_midi.c | 6 +- drivers/usb/gadget/function/f_printer.c | 10 +- drivers/usb/gadget/function/f_rndis.c | 42 +- drivers/usb/gadget/function/f_subset.c | 57 +- drivers/usb/gadget/function/f_uac1.c | 13 +- drivers/usb/gadget/function/f_uac1_legacy.c | 6 + drivers/usb/gadget/function/f_uac2.c | 13 +- drivers/usb/gadget/function/u_ecm.h | 21 +- drivers/usb/gadget/function/u_eem.h | 21 +- drivers/usb/gadget/function/u_fs.h | 2 - drivers/usb/gadget/function/u_gether.h | 22 +- drivers/usb/gadget/function/u_rndis.h | 31 +- drivers/usb/gadget/legacy/g_ffs.c | 9 - drivers/usb/gadget/legacy/inode.c | 7 +- drivers/usb/gadget/udc/aspeed-vhub/core.c | 4 + drivers/usb/gadget/udc/aspeed-vhub/dev.c | 2 +- drivers/usb/gadget/udc/aspeed-vhub/hub.c | 5 +- drivers/usb/gadget/udc/aspeed-vhub/vhub.h | 1 + drivers/usb/gadget/udc/at91_udc.c | 33 +- drivers/usb/gadget/udc/core.c | 7 +- drivers/usb/gadget/udc/dummy_hcd.c | 4 + drivers/usb/host/ehci-sched.c | 11 +- drivers/usb/host/fotg210-hcd.c | 6 +- drivers/usb/host/octeon-hcd.c | 2 +- drivers/usb/host/ohci-da8xx.c | 2 + drivers/usb/host/ohci-s3c2410.c | 1 + drivers/usb/host/ohci-spear.c | 4 +- drivers/usb/host/ohci-st.c | 1 + drivers/usb/host/xhci.c | 11 +- drivers/usb/misc/iowarrior.c | 57 +- drivers/usb/serial/ark3116.c | 7 +- drivers/usb/serial/belkin_sa.c | 12 +- drivers/usb/serial/bus.c | 6 +- drivers/usb/serial/ch341.c | 37 +- drivers/usb/serial/cp210x.c | 9 +- drivers/usb/serial/digi_acceleport.c | 7 +- drivers/usb/serial/f81232.c | 4 +- drivers/usb/serial/f81534.c | 4 +- drivers/usb/serial/ftdi_sio.c | 10 +- drivers/usb/serial/generic.c | 10 +- drivers/usb/serial/io_edgeport.c | 6 +- drivers/usb/serial/io_ti.c | 9 +- drivers/usb/serial/keyspan.c | 5 +- drivers/usb/serial/keyspan_pda.c | 8 +- drivers/usb/serial/mct_u232.c | 6 +- drivers/usb/serial/mos7720.c | 9 +- drivers/usb/serial/mos7840.c | 7 +- drivers/usb/serial/mxuport.c | 6 +- drivers/usb/serial/option.c | 14 + drivers/usb/serial/pl2303.c | 14 +- drivers/usb/serial/quatech2.c | 27 +- drivers/usb/serial/ssu100.c | 18 +- drivers/usb/serial/ti_usb_3410_5052.c | 10 +- drivers/usb/serial/upd78f0730.c | 7 +- drivers/usb/serial/usb-serial.c | 127 +- drivers/usb/serial/usb_debug.c | 13 +- drivers/usb/serial/whiteheat.c | 7 +- drivers/usb/serial/xr_serial.c | 4 +- drivers/usb/storage/realtek_cr.c | 9 +- drivers/usb/storage/sierra_ms.c | 7 + drivers/usb/typec/anx7411.c | 5 +- drivers/usb/typec/tcpm/tcpci_maxim.c | 9 + drivers/usb/typec/tcpm/tcpci_rt1711h.c | 13 +- drivers/usb/typec/tcpm/tcpm.c | 53 +- drivers/usb/typec/tipd/core.c | 3 +- drivers/usb/typec/ucsi/displayport.c | 9 +- drivers/usb/typec/ucsi/ucsi.c | 43 +- drivers/usb/typec/ucsi/ucsi.h | 11 + drivers/usb/typec/ucsi/ucsi_acpi.c | 32 + drivers/usb/usbip/usbip_common.c | 1 + drivers/vdpa/mlx5/core/mlx5_vdpa.h | 2 + drivers/vdpa/mlx5/core/mr.c | 3 + drivers/vdpa/mlx5/core/resources.c | 11 +- drivers/vdpa/mlx5/net/mlx5_vnet.c | 9 +- drivers/vdpa/vdpa_sim/vdpa_sim.c | 11 +- drivers/vdpa/vdpa_user/iova_domain.c | 11 +- drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c | 22 +- drivers/vfio/pci/mlx5/main.c | 6 +- drivers/vhost/iotlb.c | 47 +- drivers/vhost/vdpa.c | 11 +- drivers/vhost/vhost.c | 116 +- drivers/video/fbdev/arcfb.c | 3 + drivers/video/fbdev/broadsheetfb.c | 4 +- drivers/video/fbdev/cobalt_lcdfb.c | 6 + drivers/video/fbdev/core/fb_sys_fops.c | 8 +- drivers/video/fbdev/core/fbcon.c | 2 - drivers/video/fbdev/core/fbmem.c | 29 +- drivers/video/fbdev/core/fbsysfs.c | 13 +- drivers/video/fbdev/hecubafb.c | 4 +- drivers/video/fbdev/metronomefb.c | 4 +- drivers/video/fbdev/omap2/omapfb/omapfb-main.c | 11 +- drivers/video/fbdev/ps3fb.c | 5 +- drivers/video/fbdev/pvr2fb.c | 3 + drivers/video/fbdev/sh_mobile_lcdcfb.c | 5 +- drivers/video/fbdev/sm712fb.c | 10 +- drivers/video/fbdev/ssd1307fb.c | 126 +- drivers/virt/acrn/irqfd.c | 75 +- drivers/virt/nitro_enclaves/ne_misc_dev.c | 1 + drivers/virtio/virtio.c | 29 + drivers/virtio/virtio_mmio.c | 66 +- drivers/watchdog/at91sam9_wdt.c | 4 +- drivers/watchdog/cpu5wdt.c | 2 +- drivers/watchdog/rtd119x_wdt.c | 21 +- drivers/xen/events/events_2l.c | 8 +- drivers/xen/events/events_base.c | 449 +-- drivers/xen/events/events_internal.h | 1 - drivers/xen/gntdev-dmabuf.c | 31 +- drivers/xen/pvcalls-front.c | 88 +- fs/9p/vfs_inode_dotl.c | 2 +- fs/Kconfig | 1 - fs/Makefile | 1 - fs/afs/inode.c | 1 + fs/afs/internal.h | 2 + fs/afs/rxrpc.c | 79 +- fs/afs/super.c | 2 +- fs/autofs/waitq.c | 25 +- fs/btrfs/acl.c | 3 + fs/btrfs/block-group.c | 3 + fs/btrfs/block-rsv.c | 19 +- fs/btrfs/ctree.c | 65 +- fs/btrfs/ctree.h | 23 +- fs/btrfs/dev-replace.c | 1 + fs/btrfs/disk-io.c | 5 + fs/btrfs/extent-tree.c | 46 +- fs/btrfs/extent_io.c | 173 +- fs/btrfs/file.c | 105 +- fs/btrfs/free-space-tree.c | 10 +- fs/btrfs/inode.c | 82 +- fs/btrfs/ioctl.c | 68 +- fs/btrfs/lzo.c | 14 +- fs/btrfs/qgroup.c | 24 +- fs/btrfs/reflink.c | 58 + fs/btrfs/relocation.c | 87 +- fs/btrfs/scrub.c | 9 +- fs/btrfs/transaction.c | 21 +- fs/btrfs/tree-log.c | 105 +- fs/btrfs/volumes.c | 243 +- fs/ceph/dir.c | 10 +- fs/ceph/export.c | 23 +- fs/ceph/mds_client.c | 63 +- fs/ceph/mds_client.h | 1 + fs/ceph/super.h | 9 + fs/ceph/xattr.c | 16 + fs/coredump.c | 16 +- fs/dcache.c | 4 +- fs/dlm/config.c | 4 +- fs/dlm/lock.c | 2 + fs/dlm/lowcomms.c | 197 +- fs/dlm/lowcomms.h | 5 +- fs/dlm/midcomms.c | 10 +- fs/erofs/decompressor_lzma.c | 18 +- fs/erofs/xattr.c | 5 +- fs/erofs/zdata.c | 46 +- fs/erofs/zmap.c | 21 +- fs/exec.c | 23 +- fs/exfat/dir.c | 24 +- fs/exfat/exfat_fs.h | 3 +- fs/exfat/fatent.c | 10 + fs/exfat/namei.c | 28 +- fs/exfat/nls.c | 24 +- fs/exfat/super.c | 32 +- fs/ext2/inode.c | 3 +- fs/ext2/xattr.c | 4 +- fs/ext4/ext4.h | 29 +- fs/ext4/extents.c | 20 +- fs/ext4/extents_status.c | 7 +- fs/ext4/extents_status.h | 1 + fs/ext4/inode.c | 57 +- fs/ext4/ioctl.c | 5 + fs/ext4/mballoc.c | 217 +- fs/ext4/mballoc.h | 4 +- fs/ext4/migrate.c | 14 +- fs/ext4/super.c | 61 +- fs/ext4/xattr.c | 2 +- fs/f2fs/checkpoint.c | 7 +- fs/f2fs/compress.c | 10 +- fs/f2fs/data.c | 14 +- fs/f2fs/debug.c | 4 - fs/f2fs/dir.c | 1 + fs/f2fs/extent_cache.c | 153 +- fs/f2fs/f2fs.h | 69 +- fs/f2fs/file.c | 32 +- fs/f2fs/gc.c | 70 +- fs/f2fs/gc.h | 20 - fs/f2fs/inode.c | 8 +- fs/f2fs/node.c | 78 +- fs/f2fs/recovery.c | 33 +- fs/f2fs/segment.c | 37 +- fs/f2fs/super.c | 58 +- fs/f2fs/sysfs.c | 42 +- fs/fcntl.c | 3 + fs/fsopen.c | 3 + fs/fuse/inode.c | 2 + fs/gfs2/glock.c | 35 +- fs/gfs2/glock.h | 1 + fs/gfs2/incore.h | 1 + fs/gfs2/lock_dlm.c | 12 +- fs/gfs2/ops_fstype.c | 13 +- fs/gfs2/super.c | 7 +- fs/hfs/bfind.c | 3 + fs/hfs/btree.c | 57 +- fs/hfs/extent.c | 2 +- fs/hfs/hfs_fs.h | 1 + fs/inode.c | 24 +- fs/jfs/jfs_dtree.c | 18 +- fs/libfs.c | 36 +- fs/lockd/clntproc.c | 3 + fs/lockd/svc.c | 6 +- fs/lockd/svc4proc.c | 4 +- fs/lockd/svcproc.c | 4 +- fs/lockd/svcsubs.c | 47 +- fs/mbcache.c | 1 + fs/namei.c | 4 + fs/namespace.c | 123 +- fs/nfs/blocklayout/dev.c | 19 +- fs/nfs/callback_xdr.c | 6 +- fs/nfs/delegation.c | 27 +- fs/nfs/flexfilelayout/flexfilelayout.c | 3 +- fs/nfs/nfs4proc.c | 32 +- fs/nfs/nfs4session.c | 16 +- fs/nfs/pnfs.c | 58 +- fs/nfs/pnfs.h | 17 +- fs/nfsd/export.c | 31 +- fs/nfsd/export.h | 4 +- fs/nfsd/filecache.c | 67 +- fs/nfsd/lockd.c | 6 +- fs/nfsd/netns.h | 5 +- fs/nfsd/nfs2acl.c | 21 +- fs/nfsd/nfs3acl.c | 17 +- fs/nfsd/nfs3proc.c | 38 + fs/nfsd/nfs4layouts.c | 21 +- fs/nfsd/nfs4proc.c | 36 +- fs/nfsd/nfs4state.c | 33 +- fs/nfsd/trace.h | 4 +- fs/nfsd/vfs.c | 36 +- fs/nilfs2/page.c | 17 +- fs/notify/mark.c | 50 +- fs/ntfs/Kconfig | 80 - fs/ntfs/Makefile | 15 - fs/ntfs/aops.c | 1761 ----------- fs/ntfs/aops.h | 88 - fs/ntfs/attrib.c | 2624 ---------------- fs/ntfs/attrib.h | 102 - fs/ntfs/bitmap.c | 179 -- fs/ntfs/bitmap.h | 104 - fs/ntfs/collate.c | 110 - fs/ntfs/collate.h | 36 - fs/ntfs/compress.c | 950 ------ fs/ntfs/debug.c | 159 - fs/ntfs/debug.h | 57 - fs/ntfs/dir.c | 1538 ---------- fs/ntfs/dir.h | 34 - fs/ntfs/endian.h | 79 - fs/ntfs/file.c | 2006 ------------ fs/ntfs/index.c | 440 --- fs/ntfs/index.h | 134 - fs/ntfs/inode.c | 3100 ------------------- fs/ntfs/inode.h | 310 -- fs/ntfs/layout.h | 2421 --------------- fs/ntfs/lcnalloc.c | 1000 ------ fs/ntfs/lcnalloc.h | 131 - fs/ntfs/logfile.c | 849 ------ fs/ntfs/logfile.h | 295 -- fs/ntfs/malloc.h | 77 - fs/ntfs/mft.c | 2906 ------------------ fs/ntfs/mft.h | 110 - fs/ntfs/mst.c | 189 -- fs/ntfs/namei.c | 391 --- fs/ntfs/ntfs.h | 150 - fs/ntfs/quota.c | 103 - fs/ntfs/quota.h | 21 - fs/ntfs/runlist.c | 1893 ------------ fs/ntfs/runlist.h | 88 - fs/ntfs/super.c | 3194 -------------------- fs/ntfs/sysctl.c | 69 - fs/ntfs/sysctl.h | 27 - fs/ntfs/time.h | 89 - fs/ntfs/types.h | 55 - fs/ntfs/unistr.c | 384 --- fs/ntfs/upcase.c | 73 - fs/ntfs/usnjrnl.c | 70 - fs/ntfs/usnjrnl.h | 191 -- fs/ntfs/volume.h | 164 - fs/ntfs3/attrib.c | 27 +- fs/ntfs3/file.c | 43 +- fs/ntfs3/frecord.c | 86 +- fs/ntfs3/fslog.c | 16 + fs/ntfs3/index.c | 10 + fs/ntfs3/inode.c | 17 +- fs/ntfs3/namei.c | 10 +- fs/ntfs3/ntfs_fs.h | 24 +- fs/ntfs3/record.c | 91 +- fs/ntfs3/super.c | 16 +- fs/ocfs2/cluster/heartbeat.c | 168 +- fs/ocfs2/cluster/nodemanager.c | 19 +- fs/ocfs2/cluster/nodemanager.h | 2 + fs/ocfs2/cluster/tcp.c | 104 +- fs/ocfs2/cluster/tcp.h | 1 + fs/ocfs2/dir.c | 71 +- fs/ocfs2/dlm/dlmcommon.h | 2 + fs/ocfs2/dlm/dlmdebug.c | 5 +- fs/ocfs2/dlm/dlmrecovery.c | 2 +- fs/ocfs2/inode.c | 129 + fs/ocfs2/namei.c | 8 +- fs/overlayfs/file.c | 19 +- fs/pipe.c | 6 +- fs/proc/task_mmu.c | 3 + fs/reiserfs/namei.c | 61 +- fs/smb/client/cached_dir.c | 122 +- fs/smb/client/cifsacl.c | 71 +- fs/smb/client/cifsfs.c | 1 + fs/smb/client/cifsglob.h | 15 +- fs/smb/client/connect.c | 172 +- fs/smb/client/dir.c | 39 +- fs/smb/client/file.c | 41 +- fs/smb/client/fs_context.c | 6 + fs/smb/client/inode.c | 40 +- fs/smb/client/link.c | 15 +- fs/smb/client/misc.c | 72 +- fs/smb/client/readdir.c | 17 +- fs/smb/client/sess.c | 104 +- fs/smb/client/smb1ops.c | 21 +- fs/smb/client/smb2file.c | 19 +- fs/smb/client/smb2misc.c | 15 +- fs/smb/client/smb2ops.c | 107 +- fs/smb/client/smb2pdu.c | 96 +- fs/smb/client/smb2pdu.h | 9 - fs/smb/client/smb2proto.h | 4 +- fs/smb/client/smb2transport.c | 58 +- fs/smb/client/smbdirect.c | 22 +- fs/smb/client/transport.c | 69 +- fs/smb/common/smb2pdu.h | 11 + fs/smb/server/auth.c | 22 +- fs/smb/server/connection.c | 23 + fs/smb/server/connection.h | 14 + fs/smb/server/ksmbd_work.c | 3 - fs/smb/server/ksmbd_work.h | 1 - fs/smb/server/mgmt/share_config.c | 7 +- fs/smb/server/mgmt/tree_connect.c | 28 +- fs/smb/server/mgmt/user_config.c | 11 + fs/smb/server/mgmt/user_session.c | 29 +- fs/smb/server/mgmt/user_session.h | 2 + fs/smb/server/misc.c | 33 - fs/smb/server/misc.h | 1 - fs/smb/server/oplock.c | 133 +- fs/smb/server/oplock.h | 2 +- fs/smb/server/server.c | 26 +- fs/smb/server/smb2ops.c | 1 - fs/smb/server/smb2pdu.c | 292 +- fs/smb/server/smb2pdu.h | 8 - fs/smb/server/smb_common.c | 10 +- fs/smb/server/smb_common.h | 2 +- fs/smb/server/smbacl.c | 317 +- fs/smb/server/smbacl.h | 4 +- fs/smb/server/transport_ipc.c | 5 +- fs/smb/server/transport_rdma.c | 4 +- fs/smb/server/vfs.c | 94 +- fs/smb/server/vfs_cache.c | 135 +- fs/unicode/utf8-core.c | 21 +- fs/userfaultfd.c | 11 + fs/verity/Kconfig | 3 + fs/xfs/libxfs/xfs_alloc.c | 46 +- fs/xfs/libxfs/xfs_attr.c | 74 +- fs/xfs/libxfs/xfs_ialloc.c | 32 +- fs/xfs/libxfs/xfs_sb.c | 17 +- fs/xfs/xfs_buf_item.c | 299 +- fs/xfs/xfs_buf_item.h | 3 +- fs/xfs/xfs_fsmap.c | 2 +- fs/xfs/xfs_icache.c | 8 + fs/xfs/xfs_inode.c | 2 +- fs/xfs/xfs_ioctl.c | 2 +- fs/xfs/xfs_iops.c | 2 +- fs/xfs/xfs_log_recover.c | 13 +- include/acpi/acpi_bus.h | 6 + include/acpi/battery.h | 4 +- include/clocksource/samsung_pwm.h | 2 +- include/drm/gpu_scheduler.h | 29 +- include/linux/blkdev.h | 1 + include/linux/bpf.h | 42 +- include/linux/can/skb.h | 2 + include/linux/cgroup-defs.h | 5 +- include/linux/cgroup.h | 1 + include/linux/compiler_attributes.h | 13 + include/linux/device-mapper.h | 23 +- include/linux/device.h | 3 + include/linux/dm-dirty-log.h | 2 +- include/linux/dm-region-hash.h | 6 +- include/linux/dma-buf.h | 1 + include/linux/dma/k3-udma-glue.h | 3 +- include/linux/dmaengine.h | 7 + include/linux/f2fs_fs.h | 1 + include/linux/fb.h | 115 + include/linux/fs.h | 2 + include/linux/fsnotify_backend.h | 1 + include/linux/ftrace.h | 5 +- include/linux/futex.h | 14 +- include/linux/hid.h | 10 +- include/linux/highmem.h | 44 + include/linux/hw_random.h | 2 + include/linux/i2c.h | 1 + include/linux/i3c/master.h | 3 + include/linux/ieee80211.h | 12 +- include/linux/if_team.h | 3 +- include/linux/if_vlan.h | 3 + include/linux/iio/common/st_sensors.h | 4 - include/linux/ima.h | 1 + include/linux/io_uring.h | 2 + include/linux/iommu.h | 2 + include/linux/ism.h | 23 + include/linux/kasan.h | 6 +- include/linux/key-type.h | 1 + include/linux/key.h | 5 + include/linux/libata.h | 3 + include/linux/list.h | 15 + include/linux/lockd/bind.h | 12 +- include/linux/lockd/lockd.h | 2 +- include/linux/memory_hotplug.h | 2 +- include/linux/mlx5/cq.h | 1 + include/linux/mlx5/driver.h | 1 - include/linux/mlx5/mlx5_ifc.h | 13 +- include/linux/mlx5/vport.h | 6 +- include/linux/mm.h | 2 +- include/linux/mm_types.h | 3 + include/linux/mount.h | 2 +- include/linux/mtd/mtd.h | 2 +- include/linux/netdevice.h | 4 + include/linux/netfilter.h | 12 + include/linux/nfs_xdr.h | 1 - include/linux/ntb.h | 24 + include/linux/nvme.h | 4 +- include/linux/of.h | 6 + include/linux/of_device.h | 11 - include/linux/of_platform.h | 5 + include/linux/pagemap.h | 48 + include/linux/pci.h | 7 +- include/linux/perf/riscv_pmu.h | 5 +- include/linux/perf_event.h | 1 - include/linux/power_supply.h | 6 +- include/linux/psi.h | 4 +- include/linux/qcom-geni-se.h | 15 +- include/linux/sched.h | 2 +- include/linux/sched/signal.h | 27 +- include/linux/sched/user.h | 11 +- include/linux/scmi_protocol.h | 5 - include/linux/seq_buf.h | 27 +- include/linux/skbuff.h | 22 +- include/linux/stmmac.h | 1 - include/linux/sunrpc/svc_rdma.h | 1 + include/linux/sunrpc/xdr.h | 1 - include/linux/trace_recursion.h | 9 + include/linux/trace_seq.h | 2 + include/linux/tty.h | 4 +- include/linux/tty_driver.h | 6 + include/linux/tty_port.h | 22 +- include/linux/unicode.h | 1 + include/linux/usb/gadget.h | 2 + include/linux/usb/serial.h | 3 +- include/linux/userfaultfd_k.h | 7 + include/linux/virtio.h | 2 +- include/media/v4l2-mem2mem.h | 21 + include/net/af_vsock.h | 3 + include/net/amt.h | 4 - include/net/ax25.h | 1 - include/net/bluetooth/hci.h | 9 + include/net/bluetooth/hci_core.h | 5 +- include/net/bluetooth/l2cap.h | 1 + include/net/bluetooth/mgmt.h | 2 +- include/net/bluetooth/rfcomm.h | 1 + include/net/cfg80211.h | 105 +- include/net/codel_impl.h | 1 + include/net/dropreason.h | 3 + include/net/dsa.h | 1 + include/net/inet_connection_sock.h | 11 +- include/net/ip.h | 17 +- include/net/ip6_route.h | 2 +- include/net/ip_vs.h | 2 +- include/net/netfilter/nf_conntrack_expect.h | 16 +- include/net/netfilter/nf_conntrack_timeout.h | 27 +- include/net/netfilter/nf_queue.h | 1 + include/net/netfilter/nf_tables.h | 16 +- include/net/netfilter/nft_fib.h | 2 +- include/net/netfilter/nft_meta.h | 4 +- include/net/netfilter/nft_reject.h | 3 +- include/net/netns/mpls.h | 1 + include/net/netns/xfrm.h | 1 + include/net/nexthop.h | 6 +- include/net/pkt_cls.h | 45 +- include/net/pkt_sched.h | 3 +- include/net/route.h | 2 +- include/net/sch_generic.h | 21 +- include/net/secure_seq.h | 47 +- include/net/sock.h | 19 +- include/net/strparser.h | 10 +- include/net/tc_act/tc_pedit.h | 18 +- include/net/tcp.h | 14 +- include/net/tls.h | 12 +- include/scsi/scsi_host.h | 9 +- include/trace/events/btrfs.h | 4 +- include/trace/events/rv.h | 76 +- include/uapi/linux/ioprio.h | 100 +- include/uapi/linux/netfilter/nf_conntrack_common.h | 1 + include/uapi/linux/nexthop.h | 7 +- include/uapi/linux/stddef.h | 5 + include/uapi/linux/virtio_crypto.h | 1 + include/xen/events.h | 4 +- io_uring/cancel.c | 33 +- io_uring/cancel.h | 2 + io_uring/io-wq.c | 96 +- io_uring/io-wq.h | 4 +- io_uring/io_uring.c | 108 +- io_uring/io_uring.h | 44 +- io_uring/poll.c | 42 +- io_uring/rsrc.c | 7 +- io_uring/rw.c | 18 - io_uring/sqpoll.c | 7 + io_uring/tctx.c | 1 + io_uring/timeout.c | 46 +- kernel/audit_tree.c | 36 +- kernel/bpf/arraymap.c | 30 +- kernel/bpf/bpf_struct_ops.c | 75 +- kernel/bpf/btf.c | 5 + kernel/bpf/cgroup.c | 23 + kernel/bpf/core.c | 1 + kernel/bpf/hashtab.c | 63 +- kernel/bpf/helpers.c | 102 +- kernel/bpf/mmap_unlock_work.h | 51 +- kernel/bpf/queue_stack_maps.c | 8 +- kernel/bpf/stackmap.c | 85 +- kernel/bpf/syscall.c | 93 +- kernel/bpf/task_iter.c | 14 +- kernel/bpf/trampoline.c | 54 +- kernel/bpf/verifier.c | 104 +- kernel/cgroup/Makefile | 2 +- kernel/cgroup/cgroup.c | 53 +- kernel/cgroup/cpuset-internal.h | 222 ++ kernel/cgroup/cpuset-v1.c | 3 + kernel/cgroup/cpuset.c | 222 +- kernel/cgroup/rstat.c | 19 +- kernel/dma/direct.c | 56 +- kernel/events/core.c | 111 +- kernel/exit.c | 51 +- kernel/fork.c | 38 +- kernel/futex/core.c | 49 +- kernel/kprobes.c | 8 +- kernel/params.c | 61 +- kernel/pid_namespace.c | 5 +- kernel/rcu/tasks.h | 82 +- kernel/rcu/tree.h | 13 +- kernel/rcu/tree_plugin.h | 42 +- kernel/sched/core.c | 50 + kernel/sched/deadline.c | 7 +- kernel/sched/psi.c | 69 +- kernel/sched/rt.c | 52 +- kernel/sched/sched.h | 1 + kernel/signal.c | 4 + kernel/time/namespace.c | 5 + kernel/trace/blktrace.c | 3 +- kernel/trace/bpf_trace.c | 6 +- kernel/trace/fgraph.c | 1 + kernel/trace/ftrace.c | 76 +- kernel/trace/trace.c | 103 +- kernel/trace/trace.h | 4 +- kernel/trace/trace_events_filter.c | 6 + kernel/trace/trace_events_hist.c | 102 +- kernel/trace/trace_events_synth.c | 10 + kernel/trace/trace_events_user.c | 26 +- kernel/trace/trace_functions.c | 2 +- kernel/trace/trace_seq.c | 6 +- kernel/trace/trace_stack.c | 2 +- kernel/trace/trace_synth.h | 1 + kernel/watch_queue.c | 11 +- kernel/workqueue.c | 24 +- lib/Kconfig.debug | 2 + lib/seq_buf.c | 52 +- lib/test_kprobes.c | 28 +- mm/damon/core.c | 32 +- mm/filemap.c | 2 +- mm/huge_memory.c | 17 + mm/hugetlb.c | 56 +- mm/kasan/quarantine.c | 39 +- mm/kasan/report.c | 4 +- mm/kasan/shadow.c | 111 +- mm/khugepaged.c | 3 + mm/kmemleak.c | 190 +- mm/memcontrol.c | 2 +- mm/memory_hotplug.c | 3 +- mm/mempolicy.c | 2 + mm/migrate.c | 27 +- mm/mlock.c | 2 +- mm/mmap.c | 100 +- mm/mremap.c | 70 +- mm/page_alloc.c | 14 +- mm/page_table_check.c | 20 +- mm/pagewalk.c | 8 + mm/ptdump.c | 7 + mm/readahead.c | 13 - mm/rmap.c | 6 +- mm/secretmem.c | 119 +- mm/shmem.c | 13 +- mm/slab.h | 5 + mm/slub.c | 9 +- mm/userfaultfd.c | 22 +- mm/vmalloc.c | 4 +- mm/vmscan.c | 18 +- net/8021q/vlan.c | 7 +- net/8021q/vlan_dev.c | 65 +- net/9p/trans_fd.c | 1 + net/9p/trans_xen.c | 79 +- net/ax25/af_ax25.c | 30 +- net/ax25/ax25_route.c | 74 - net/bluetooth/6lowpan.c | 49 +- net/bluetooth/af_bluetooth.c | 10 +- net/bluetooth/hci_conn.c | 98 +- net/bluetooth/hci_core.c | 45 +- net/bluetooth/hci_debugfs.c | 2 +- net/bluetooth/hci_event.c | 129 +- net/bluetooth/hci_request.c | 2 +- net/bluetooth/hci_sock.c | 2 + net/bluetooth/hci_sync.c | 43 +- net/bluetooth/iso.c | 129 +- net/bluetooth/l2cap_core.c | 64 +- net/bluetooth/l2cap_sock.c | 59 +- net/bluetooth/mgmt.c | 273 +- net/bluetooth/mgmt_util.c | 46 + net/bluetooth/mgmt_util.h | 3 + net/bluetooth/rfcomm/core.c | 134 +- net/bluetooth/rfcomm/sock.c | 5 +- net/bluetooth/rfcomm/tty.c | 9 +- net/bluetooth/sco.c | 6 +- net/bridge/br_arp_nd_proxy.c | 24 +- net/bridge/br_cfm.c | 11 +- net/bridge/br_device.c | 1 - net/bridge/br_input.c | 35 +- net/bridge/br_mrp.c | 13 +- net/bridge/br_multicast.c | 45 +- net/bridge/br_private.h | 26 +- net/bridge/netfilter/ebt_dnat.c | 4 +- net/bridge/netfilter/ebt_redirect.c | 16 +- net/bridge/netfilter/ebtable_broute.c | 2 +- net/bridge/netfilter/ebtable_filter.c | 2 +- net/bridge/netfilter/ebtable_nat.c | 2 +- net/bridge/netfilter/ebtables.c | 71 +- net/can/af_can.c | 6 +- net/can/bcm.c | 2 + net/can/isotp.c | 11 +- net/can/j1939/socket.c | 1 + net/can/j1939/transport.c | 2 + net/can/raw.c | 7 +- net/ceph/auth_x.c | 5 + net/ceph/messenger.c | 1 + net/core/bpf_sk_storage.c | 2 - net/core/dev.c | 75 +- net/core/dst.c | 8 + net/core/filter.c | 4 +- net/core/flow_dissector.c | 26 +- net/core/netpoll.c | 10 +- net/core/page_pool.c | 3 +- net/core/pktgen.c | 5 +- net/core/secure_seq.c | 80 +- net/core/skmsg.c | 22 +- net/core/sock.c | 30 +- net/dccp/timer.c | 4 +- net/dsa/dsa2.c | 35 +- net/ethtool/channels.c | 9 +- net/ethtool/ioctl.c | 11 +- net/hsr/hsr_framereg.c | 4 +- net/ieee802154/core.c | 8 +- net/ife/ife.c | 14 +- net/ipv4/af_inet.c | 1 + net/ipv4/esp4.c | 8 +- net/ipv4/fib_semantics.c | 5 +- net/ipv4/fib_trie.c | 2 - net/ipv4/igmp.c | 14 +- net/ipv4/inet_connection_sock.c | 10 +- net/ipv4/inet_diag.c | 4 +- net/ipv4/ipconfig.c | 90 +- net/ipv4/ipmr.c | 6 +- net/ipv4/ipmr_base.c | 2 +- net/ipv4/netfilter/iptable_nat.c | 4 +- net/ipv4/netfilter/nft_dup_ipv4.c | 3 +- net/ipv4/nexthop.c | 115 +- net/ipv4/route.c | 9 +- net/ipv4/syncookies.c | 10 +- net/ipv4/tcp.c | 18 +- net/ipv4/tcp_cong.c | 4 +- net/ipv4/tcp_dctcp.c | 4 +- net/ipv4/tcp_fastopen.c | 7 +- net/ipv4/tcp_input.c | 70 +- net/ipv4/tcp_ipv4.c | 43 +- net/ipv4/tcp_metrics.c | 6 +- net/ipv4/tcp_minisocks.c | 16 +- net/ipv4/tcp_output.c | 8 +- net/ipv4/tcp_timer.c | 5 +- net/ipv4/udp.c | 65 + net/ipv4/udp_bpf.c | 9 + net/ipv4/udp_tunnel_nic.c | 32 +- net/ipv4/xfrm4_input.c | 5 +- net/ipv6/esp6.c | 8 +- net/ipv6/exthdrs.c | 26 +- net/ipv6/ioam6.c | 32 +- net/ipv6/ioam6_iptunnel.c | 9 +- net/ipv6/ip6_flowlabel.c | 20 + net/ipv6/ip6_gre.c | 5 - net/ipv6/ip6_input.c | 1 + net/ipv6/ip6_output.c | 30 +- net/ipv6/ip6mr.c | 5 +- net/ipv6/netfilter/ip6table_nat.c | 4 +- net/ipv6/netfilter/nft_dup_ipv6.c | 3 +- net/ipv6/route.c | 6 +- net/ipv6/rpl_iptunnel.c | 9 +- net/ipv6/seg6_iptunnel.c | 2 +- net/ipv6/syncookies.c | 11 +- net/ipv6/tcp_ipv6.c | 43 +- net/ipv6/udp.c | 50 + net/ipv6/xfrm6_input.c | 5 +- net/iucv/af_iucv.c | 42 +- net/kcm/kcmsock.c | 21 +- net/l2tp/l2tp_core.c | 16 +- net/l2tp/l2tp_core.h | 3 +- net/l2tp/l2tp_debugfs.c | 4 + net/l2tp/l2tp_netlink.c | 20 +- net/l2tp/l2tp_ppp.c | 151 +- net/mac80211/agg-rx.c | 2 +- net/mac80211/chan.c | 37 +- net/mac80211/fils_aead.c | 8 + net/mac80211/ibss.c | 9 +- net/mac80211/mesh_pathtbl.c | 16 +- net/mac80211/mlme.c | 10 +- net/mac80211/rc80211_minstrel_ht.c | 30 +- net/mac80211/sta_info.c | 85 +- net/mac80211/tx.c | 11 + net/mctp/device.c | 21 +- net/mctp/route.c | 43 +- net/mpls/af_mpls.c | 40 +- net/mptcp/options.c | 70 +- net/mptcp/pm_netlink.c | 10 +- net/mptcp/pm_userspace.c | 37 +- net/mptcp/protocol.c | 45 +- net/mptcp/protocol.h | 11 +- net/ncsi/ncsi-manage.c | 2 + net/netfilter/core.c | 6 +- net/netfilter/ipset/ip_set_bitmap_gen.h | 2 +- net/netfilter/ipvs/ip_vs_conn.c | 3 + net/netfilter/ipvs/ip_vs_core.c | 11 +- net/netfilter/ipvs/ip_vs_lblc.c | 4 + net/netfilter/ipvs/ip_vs_lblcr.c | 3 + net/netfilter/ipvs/ip_vs_sync.c | 33 +- net/netfilter/ipvs/ip_vs_xmit.c | 49 +- net/netfilter/nf_conntrack_bpf.c | 85 +- net/netfilter/nf_conntrack_core.c | 39 +- net/netfilter/nf_conntrack_expect.c | 148 +- net/netfilter/nf_conntrack_h323_main.c | 4 +- net/netfilter/nf_conntrack_helper.c | 10 +- net/netfilter/nf_conntrack_netlink.c | 24 +- net/netfilter/nf_conntrack_sip.c | 13 +- net/netfilter/nf_conntrack_timeout.c | 27 +- net/netfilter/nf_flow_table_ip.c | 3 + net/netfilter/nf_nat_bpf.c | 3 + net/netfilter/nf_nat_core.c | 15 +- net/netfilter/nf_synproxy_core.c | 40 +- net/netfilter/nf_tables_api.c | 149 +- net/netfilter/nf_tables_core.c | 6 +- net/netfilter/nf_tables_trace.c | 2 +- net/netfilter/nfnetlink_cttimeout.c | 114 +- net/netfilter/nfnetlink_log.c | 23 +- net/netfilter/nfnetlink_queue.c | 186 +- net/netfilter/nft_bitwise.c | 21 +- net/netfilter/nft_byteorder.c | 16 +- net/netfilter/nft_cmp.c | 9 +- net/netfilter/nft_compat.c | 33 +- net/netfilter/nft_connlimit.c | 3 +- net/netfilter/nft_counter.c | 3 +- net/netfilter/nft_ct.c | 24 +- net/netfilter/nft_dup_netdev.c | 3 +- net/netfilter/nft_dynset.c | 28 +- net/netfilter/nft_exthdr.c | 9 +- net/netfilter/nft_fib.c | 11 +- net/netfilter/nft_fib_netdev.c | 29 +- net/netfilter/nft_flow_offload.c | 14 +- net/netfilter/nft_fwd_netdev.c | 6 +- net/netfilter/nft_hash.c | 4 +- net/netfilter/nft_immediate.c | 3 +- net/netfilter/nft_last.c | 3 +- net/netfilter/nft_limit.c | 5 +- net/netfilter/nft_log.c | 3 +- net/netfilter/nft_lookup.c | 17 +- net/netfilter/nft_masq.c | 3 +- net/netfilter/nft_meta.c | 5 +- net/netfilter/nft_nat.c | 3 +- net/netfilter/nft_numgen.c | 6 +- net/netfilter/nft_objref.c | 6 +- net/netfilter/nft_osf.c | 3 +- net/netfilter/nft_payload.c | 6 +- net/netfilter/nft_queue.c | 6 +- net/netfilter/nft_quota.c | 3 +- net/netfilter/nft_range.c | 3 +- net/netfilter/nft_redir.c | 3 +- net/netfilter/nft_reject.c | 3 +- net/netfilter/nft_rt.c | 2 +- net/netfilter/nft_set_bitmap.c | 4 +- net/netfilter/nft_set_hash.c | 8 +- net/netfilter/nft_set_pipapo.c | 26 +- net/netfilter/nft_set_rbtree.c | 10 +- net/netfilter/nft_socket.c | 2 +- net/netfilter/nft_synproxy.c | 3 +- net/netfilter/nft_tproxy.c | 2 +- net/netfilter/nft_tunnel.c | 2 +- net/netfilter/nft_xfrm.c | 2 +- net/netfilter/xt_CT.c | 2 +- net/netfilter/xt_IDLETIMER.c | 52 +- net/netlink/af_netlink.c | 6 +- net/netlink/genetlink.c | 28 +- net/nfc/nci/core.c | 9 + net/openvswitch/actions.c | 7 +- net/openvswitch/conntrack.c | 71 +- net/openvswitch/datapath.c | 8 + net/packet/af_packet.c | 103 +- net/phonet/socket.c | 10 +- net/qrtr/mhi.c | 61 +- net/rds/rdma_transport.c | 38 +- net/rds/tcp.c | 66 +- net/rxrpc/ar-internal.h | 9 +- net/rxrpc/call_accept.c | 5 + net/rxrpc/conn_event.c | 34 +- net/rxrpc/output.c | 12 +- net/rxrpc/peer_event.c | 17 +- net/rxrpc/proc.c | 4 +- net/rxrpc/recvmsg.c | 16 +- net/rxrpc/rxkad.c | 5 +- net/sched/act_api.c | 46 +- net/sched/act_ife.c | 32 +- net/sched/act_mirred.c | 14 +- net/sched/act_pedit.c | 11 +- net/sched/cls_api.c | 93 +- net/sched/cls_basic.c | 6 +- net/sched/cls_bpf.c | 8 +- net/sched/cls_cgroup.c | 2 +- net/sched/cls_flow.c | 2 +- net/sched/cls_flower.c | 34 +- net/sched/cls_fw.c | 4 +- net/sched/cls_matchall.c | 6 +- net/sched/cls_route.c | 4 +- net/sched/cls_u32.c | 23 +- net/sched/em_text.c | 3 + net/sched/sch_cake.c | 2 +- net/sched/sch_codel.c | 14 +- net/sched/sch_drr.c | 2 +- net/sched/sch_ets.c | 2 +- net/sched/sch_fifo.c | 13 +- net/sched/sch_fq.c | 18 +- net/sched/sch_fq_codel.c | 18 +- net/sched/sch_fq_pie.c | 14 +- net/sched/sch_generic.c | 47 +- net/sched/sch_gred.c | 4 +- net/sched/sch_hfsc.c | 2 +- net/sched/sch_hhf.c | 12 +- net/sched/sch_htb.c | 2 +- net/sched/sch_multiq.c | 2 +- net/sched/sch_netem.c | 5 +- net/sched/sch_pie.c | 12 +- net/sched/sch_plug.c | 2 +- net/sched/sch_prio.c | 2 +- net/sched/sch_qfq.c | 2 +- net/sched/sch_sfb.c | 2 +- net/sched/sch_sfq.c | 2 +- net/sctp/bind_addr.c | 11 +- net/sctp/inqueue.c | 6 +- net/sctp/ipv6.c | 10 +- net/sctp/protocol.c | 5 +- net/sctp/sm_make_chunk.c | 17 +- net/sctp/sm_statefuns.c | 36 +- net/sctp/socket.c | 39 +- net/smc/af_smc.c | 117 +- net/smc/smc.h | 6 +- net/strparser/strparser.c | 6 +- net/sunrpc/auth_gss/gss_krb5_mech.c | 17 +- net/sunrpc/auth_gss/gss_krb5_unseal.c | 3 + net/sunrpc/auth_gss/gss_rpc_xdr.c | 15 +- net/sunrpc/auth_gss/svcauth_gss.c | 193 +- net/sunrpc/clnt.c | 22 +- net/sunrpc/svc.c | 13 +- net/sunrpc/svcsock.c | 3 + net/sunrpc/xdr.c | 7 - net/sunrpc/xprtrdma/svc_rdma_pcl.c | 2 +- net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 22 +- net/sunrpc/xprtrdma/svc_rdma_rw.c | 36 +- net/sunrpc/xprtrdma/svc_rdma_sendto.c | 47 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 125 +- net/sunrpc/xprtsock.c | 29 +- net/tipc/core.c | 4 +- net/tipc/crypto.c | 20 +- net/tipc/node.c | 12 +- net/tipc/topsrv.c | 80 +- net/tipc/udp_media.c | 75 +- net/tls/tls_device.c | 4 +- net/tls/tls_sw.c | 2 + net/vmw_vsock/af_vsock.c | 55 +- net/vmw_vsock/virtio_transport_common.c | 3 +- net/wireless/core.c | 39 +- net/wireless/core.h | 4 +- net/wireless/lib80211_crypt_tkip.c | 13 +- net/wireless/nl80211.c | 13 +- net/wireless/pmsr.c | 6 +- net/wireless/scan.c | 38 +- net/wireless/sme.c | 6 +- net/xfrm/espintcp.c | 1 + net/xfrm/xfrm_device.c | 19 +- net/xfrm/xfrm_input.c | 15 +- net/xfrm/xfrm_policy.c | 21 +- net/xfrm/xfrm_state.c | 144 +- net/xfrm/xfrm_user.c | 10 +- samples/ftrace/ftrace-direct-multi-modify.c | 13 +- samples/pidfd/Makefile | 2 +- security/apparmor/domain.c | 27 +- security/apparmor/include/cred.h | 6 +- security/apparmor/include/label.h | 6 +- security/apparmor/include/match.h | 12 +- security/apparmor/include/policy.h | 2 + security/apparmor/include/task.h | 17 +- security/apparmor/match.c | 22 +- security/apparmor/policy.c | 21 +- security/apparmor/task.c | 32 +- security/integrity/ima/ima_appraise.c | 21 +- security/integrity/ima/ima_kexec.c | 35 + security/keys/key.c | 19 +- security/keys/keyctl.c | 15 +- security/keys/keyring.c | 150 +- security/keys/persistent.c | 55 +- security/keys/process_keys.c | 5 +- security/keys/trusted-keys/trusted_tpm1.c | 6 +- security/keys/trusted-keys/trusted_tpm2.c | 2 +- security/landlock/fs.c | 10 +- security/selinux/avc.c | 5 +- security/selinux/hooks.c | 9 +- security/selinux/selinuxfs.c | 40 +- security/selinux/ss/policydb.c | 4 + sound/core/oss/mixer_oss.c | 32 + sound/core/oss/pcm_oss.c | 29 +- sound/core/seq/oss/seq_oss_event.c | 6 +- sound/core/seq/oss/seq_oss_event.h | 3 +- sound/core/seq/oss/seq_oss_ioctl.c | 5 +- sound/core/seq/oss/seq_oss_midi.c | 6 +- sound/core/seq/oss/seq_oss_midi.h | 2 +- sound/core/seq/oss/seq_oss_readq.c | 85 +- sound/core/seq/oss/seq_oss_rw.c | 5 +- sound/core/seq/seq_clientmgr.c | 60 +- sound/core/seq/seq_compat.c | 4 +- sound/core/seq/seq_fifo.c | 98 +- sound/core/seq/seq_fifo.h | 1 + sound/drivers/mtpav.c | 6 +- sound/pci/hda/cs35l41_hda.c | 74 +- sound/pci/hda/cs35l41_hda.h | 4 + sound/soc/amd/acp/acp-mach-common.c | 371 ++- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/adau1372.c | 18 +- sound/soc/codecs/cs42l52.c | 2 +- sound/soc/codecs/cs42l56.c | 2 +- sound/soc/codecs/hdac_hda.c | 4 +- sound/soc/codecs/max98371.c | 2 +- sound/soc/codecs/nau8822.c | 4 +- sound/soc/codecs/pcm3168a.c | 2 +- sound/soc/codecs/rt274.c | 4 +- sound/soc/codecs/rt286.c | 2 +- sound/soc/codecs/tas2562.c | 8 +- sound/soc/codecs/wm8903.c | 2 +- sound/soc/codecs/wm8978.c | 4 +- sound/soc/intel/avs/pcm.c | 6 +- sound/soc/qcom/lpass-cdc-dma.c | 2 +- sound/soc/qcom/lpass-cpu.c | 4 +- sound/soc/qcom/qdsp6/q6asm.c | 5 + sound/soc/samsung/i2s.c | 8 + sound/soc/soc-topology.c | 37 +- sound/soc/sof/intel/hda.c | 5 + sound/soc/sof/ipc4-pcm.c | 17 +- sound/soc/sof/ipc4-topology.c | 7 +- sound/soc/stm/stm32_spdifrx.c | 2 +- sound/soc/tegra/tegra186_asrc.c | 2 +- sound/usb/caiaq/device.c | 3 + sound/usb/card.h | 3 +- sound/usb/endpoint.c | 16 +- sound/usb/line6/playback.c | 7 + sound/usb/misc/ua101.c | 9 + sound/usb/pcm.c | 3 +- sound/usb/quirks.c | 4 +- tools/gpio/Makefile | 6 + tools/perf/tests/bpf.c | 3 +- tools/perf/util/parse-events.c | 2 +- tools/testing/cxl/test/cxl.c | 14 +- tools/testing/selftests/bpf/progs/bpf_iter_tcp4.c | 4 +- tools/testing/selftests/bpf/progs/bpf_iter_tcp6.c | 4 +- .../selftests/bpf/progs/test_global_func16.c | 2 +- .../selftests/bpf/verifier/atomic_cmpxchg.c | 11 - tools/testing/selftests/bpf/verifier/basic_stack.c | 12 +- tools/testing/selftests/bpf/verifier/calls.c | 4 +- tools/testing/selftests/bpf/verifier/raw_stack.c | 8 +- tools/testing/selftests/bpf/verifier/var_off.c | 57 +- .../test.d/filter/event-filter-incomplete.tc | 24 + .../testing/selftests/net/forwarding/tc_actions.sh | 3 - tools/testing/selftests/net/tls.c | 584 ++++ tools/testing/selftests/vm/memfd_secret.c | 30 +- virt/kvm/kvm_main.c | 3 +- 1911 files changed, 31056 insertions(+), 45393 deletions(-)