From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org, akpm@linux-foundation.org,
torvalds@linux-foundation.org, stable@vger.kernel.org
Cc: lwn@lwn.net, jslaby@suse.cz,
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Subject: Linux 6.18.22
Date: Sat, 11 Apr 2026 14:53:51 +0200 [thread overview]
Message-ID: <2026041152-boaster-patrol-1918@gregkh> (raw)
I'm announcing the release of the 6.18.22 kernel.
All users of the 6.18 kernel series must upgrade.
The updated 6.18.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.18.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/devicetree/bindings/auxdisplay/holtek,ht16k33.yaml | 2
Documentation/devicetree/bindings/connector/usb-connector.yaml | 1
Documentation/devicetree/bindings/gpio/microchip,mpfs-gpio.yaml | 4
Makefile | 2
arch/arm64/kernel/pi/patch-scs.c | 8
arch/mips/lib/multi3.c | 6
arch/mips/mm/cache.c | 3
arch/mips/mm/tlb-r4k.c | 2
arch/mips/ralink/clk.c | 8
arch/riscv/kernel/kgdb.c | 7
arch/riscv/kernel/process.c | 4
arch/s390/kernel/perf_cpum_sf.c | 6
arch/x86/events/intel/core.c | 6
arch/x86/kernel/Makefile | 14
arch/x86/mm/Makefile | 2
crypto/af_alg.c | 53 --
crypto/algif_aead.c | 100 -----
crypto/algif_skcipher.c | 6
crypto/authencesn.c | 48 +-
crypto/deflate.c | 11
drivers/accel/qaic/qaic_control.c | 47 ++
drivers/acpi/riscv/rimt.c | 7
drivers/android/binder/page_range.rs | 8
drivers/android/binder/rust_binder_main.rs | 2
drivers/bluetooth/hci_h4.c | 3
drivers/comedi/drivers.c | 8
drivers/comedi/drivers/dt2815.c | 12
drivers/comedi/drivers/me4000.c | 16
drivers/comedi/drivers/me_daq.c | 35 -
drivers/comedi/drivers/ni_atmio16d.c | 3
drivers/counter/rz-mtu3-cnt.c | 67 +--
drivers/cpufreq/cpufreq_governor.c | 6
drivers/crypto/caam/caamalg_qi2.c | 3
drivers/crypto/caam/caamhash.c | 3
drivers/crypto/tegra/tegra-se-aes.c | 11
drivers/crypto/tegra/tegra-se-hash.c | 30 -
drivers/firmware/microchip/mpfs-auto-update.c | 10
drivers/gpio/gpio-aspeed.c | 6
drivers/gpio/gpio-mxc.c | 10
drivers/gpio/gpiolib-cdev.c | 12
drivers/gpio/gpiolib-sysfs.c | 14
drivers/gpio/gpiolib.c | 153 +++----
drivers/gpio/gpiolib.h | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8
drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 5
drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 7
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2
drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 3
drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4
drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 17
drivers/gpu/drm/amd/display/dc/resource/dce100/dce100_resource.c | 5
drivers/gpu/drm/amd/display/dc/resource/dce110/dce110_resource.c | 5
drivers/gpu/drm/amd/display/dc/resource/dce112/dce112_resource.c | 5
drivers/gpu/drm/amd/display/dc/resource/dce120/dce120_resource.c | 5
drivers/gpu/drm/amd/display/dc/resource/dce60/dce60_resource.c | 13
drivers/gpu/drm/amd/display/dc/resource/dce80/dce80_resource.c | 5
drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 1
drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c | 1
drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 33 +
drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 33 +
drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1
drivers/gpu/drm/ast/ast_dp501.c | 2
drivers/gpu/drm/drm_file.c | 5
drivers/gpu/drm/drm_ioc32.c | 2
drivers/gpu/drm/drm_mode_config.c | 9
drivers/gpu/drm/i915/display/g4x_dp.c | 2
drivers/gpu/drm/i915/display/icl_dsi.c | 4
drivers/gpu/drm/sysfb/efidrm.c | 46 +-
drivers/gpu/drm/xe/xe_pxp.c | 11
drivers/hid/hid-appletb-kbd.c | 5
drivers/hid/hid-core.c | 7
drivers/hid/hid-logitech-hidpp.c | 6
drivers/hid/hid-multitouch.c | 7
drivers/hid/wacom_wac.c | 10
drivers/hwmon/asus-ec-sensors.c | 7
drivers/hwmon/occ/common.c | 19
drivers/hwmon/pmbus/ltc4286.c | 1
drivers/hwmon/pmbus/pxe1610.c | 5
drivers/hwmon/pmbus/tps53679.c | 10
drivers/i2c/busses/Kconfig | 2
drivers/i2c/busses/i2c-tegra.c | 5
drivers/iio/accel/adxl313_core.c | 2
drivers/iio/accel/adxl355_core.c | 2
drivers/iio/accel/adxl380.c | 2
drivers/iio/adc/ade9000.c | 12
drivers/iio/adc/aspeed_adc.c | 1
drivers/iio/adc/ti-adc161s626.c | 41 +-
drivers/iio/adc/ti-ads1119.c | 11
drivers/iio/adc/ti-ads7950.c | 8
drivers/iio/dac/ad5770r.c | 2
drivers/iio/gyro/mpu3050-core.c | 32 +
drivers/iio/imu/adis16550.c | 8
drivers/iio/imu/bmi160/bmi160_core.c | 15
drivers/iio/imu/bno055/bno055.c | 2
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4
drivers/iio/light/vcnl4035.c | 18
drivers/iio/light/veml6070.c | 4
drivers/iio/orientation/hid-sensor-rotation.c | 24 +
drivers/input/joystick/xpad.c | 5
drivers/input/mouse/bcm5974.c | 42 ++
drivers/input/rmi4/rmi_f54.c | 4
drivers/input/serio/i8042-acpipnpio.h | 7
drivers/misc/fastrpc.c | 5
drivers/misc/mei/hw-me.c | 14
drivers/net/bonding/bond_main.c | 2
drivers/net/ethernet/airoha/airoha_eth.c | 18
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 10
drivers/net/ethernet/broadcom/tg3.c | 13
drivers/net/ethernet/cadence/macb_pci.c | 10
drivers/net/ethernet/faraday/ftgmac100.c | 28 +
drivers/net/ethernet/freescale/enetc/enetc.c | 13
drivers/net/ethernet/freescale/enetc/enetc_ethtool.c | 10
drivers/net/ethernet/freescale/fec_ptp.c | 3
drivers/net/ethernet/intel/ice/ice_ethtool.c | 11
drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 21 +
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4
drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c | 2
drivers/net/ethernet/mellanox/mlx5/core/fw.c | 53 +-
drivers/net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3
drivers/net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4
drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 6
drivers/net/ethernet/meta/fbnic/fbnic_txrx.h | 2
drivers/net/ethernet/microsoft/mana/mana_en.c | 13
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 14
drivers/net/ethernet/xilinx/xilinx_axienet.h | 4
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 9
drivers/net/phy/sfp.c | 7
drivers/net/virtio_net.c | 20 -
drivers/net/vxlan/vxlan_core.c | 6
drivers/net/wireless/ath/ath11k/dp_rx.c | 15
drivers/net/wireless/intel/iwlwifi/cfg/rf-fm.c | 1
drivers/net/wireless/intel/iwlwifi/cfg/rf-wh.c | 24 +
drivers/net/wireless/intel/iwlwifi/fw/acpi.h | 1
drivers/net/wireless/intel/iwlwifi/fw/api/cmdhdr.h | 4
drivers/net/wireless/intel/iwlwifi/fw/api/coex.h | 4
drivers/net/wireless/intel/iwlwifi/fw/api/commands.h | 5
drivers/net/wireless/intel/iwlwifi/fw/api/dbg-tlv.h | 14
drivers/net/wireless/intel/iwlwifi/fw/api/debug.h | 2
drivers/net/wireless/intel/iwlwifi/fw/api/location.h | 8
drivers/net/wireless/intel/iwlwifi/fw/api/power.h | 5
drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 88 ++--
drivers/net/wireless/intel/iwlwifi/fw/api/sta.h | 6
drivers/net/wireless/intel/iwlwifi/fw/api/stats.h | 39 +
drivers/net/wireless/intel/iwlwifi/fw/api/tx.h | 2
drivers/net/wireless/intel/iwlwifi/fw/error-dump.h | 4
drivers/net/wireless/intel/iwlwifi/fw/file.h | 74 ++-
drivers/net/wireless/intel/iwlwifi/fw/img.h | 12
drivers/net/wireless/intel/iwlwifi/fw/runtime.h | 22 +
drivers/net/wireless/intel/iwlwifi/iwl-config.h | 8
drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.h | 4
drivers/net/wireless/intel/iwlwifi/iwl-drv.h | 3
drivers/net/wireless/intel/iwlwifi/iwl-modparams.h | 4
drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c | 2
drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.h | 17
drivers/net/wireless/intel/iwlwifi/iwl-op-mode.h | 1
drivers/net/wireless/intel/iwlwifi/iwl-trans.h | 6
drivers/net/wireless/intel/iwlwifi/mld/iface.c | 101 +++--
drivers/net/wireless/intel/iwlwifi/mld/mac80211.c | 19
drivers/net/wireless/intel/iwlwifi/mld/mld.c | 1
drivers/net/wireless/intel/iwlwifi/mld/mlo.c | 4
drivers/net/wireless/intel/iwlwifi/mld/notif.c | 5
drivers/net/wireless/intel/iwlwifi/mld/scan.c | 30 +
drivers/net/wireless/intel/iwlwifi/mld/scan.h | 9
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2
drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 3
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 5
drivers/net/wireless/microchip/wilc1000/hif.c | 2
drivers/net/wireless/virtual/virt_wifi.c | 1
drivers/nfc/pn533/uart.c | 3
drivers/nvmem/imx-ocotp-ele.c | 1
drivers/nvmem/imx-ocotp.c | 1
drivers/nvmem/zynqmp_nvmem.c | 8
drivers/s390/crypto/zcrypt_msgtype6.c | 32 -
drivers/spi/spi-amlogic-spifc-a4.c | 12
drivers/spi/spi-cadence-quadspi.c | 17
drivers/spi/spi-geni-qcom.c | 9
drivers/spi/spi-stm32-ospi.c | 9
drivers/staging/gpib/Kconfig | 1
drivers/staging/gpib/common/gpib_os.c | 96 +++-
drivers/staging/gpib/include/gpib_types.h | 8
drivers/staging/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c | 4
drivers/target/loopback/tcm_loop.c | 52 ++
drivers/target/target_core_file.c | 2
drivers/thermal/thermal_core.c | 32 +
drivers/thunderbolt/nhi.c | 2
drivers/tty/vt/vt.c | 18
drivers/usb/cdns3/cdns3-gadget.c | 4
drivers/usb/class/cdc-acm.c | 9
drivers/usb/class/cdc-acm.h | 1
drivers/usb/class/usbtmc.c | 3
drivers/usb/common/ulpi.c | 5
drivers/usb/core/driver.c | 23 -
drivers/usb/core/offload.c | 102 +++--
drivers/usb/core/phy.c | 12
drivers/usb/core/quirks.c | 3
drivers/usb/core/usb.c | 1
drivers/usb/dwc2/gadget.c | 2
drivers/usb/gadget/function/f_ecm.c | 37 +
drivers/usb/gadget/function/f_eem.c | 59 +--
drivers/usb/gadget/function/f_hid.c | 19
drivers/usb/gadget/function/f_rndis.c | 51 +-
drivers/usb/gadget/function/f_subset.c | 63 +--
drivers/usb/gadget/function/f_uac1_legacy.c | 47 +-
drivers/usb/gadget/function/f_uvc.c | 39 +
drivers/usb/gadget/function/u_ecm.h | 21 -
drivers/usb/gadget/function/u_eem.h | 21 -
drivers/usb/gadget/function/u_ether.c | 16
drivers/usb/gadget/function/u_gether.h | 22 -
drivers/usb/gadget/function/u_rndis.h | 31 +
drivers/usb/gadget/function/uvc.h | 3
drivers/usb/gadget/function/uvc_v4l2.c | 5
drivers/usb/gadget/udc/dummy_hcd.c | 42 +-
drivers/usb/host/ehci-brcm.c | 4
drivers/usb/host/xhci-sideband.c | 18
drivers/usb/misc/usbio.c | 7
drivers/usb/serial/io_edgeport.c | 3
drivers/usb/serial/io_usbvend.h | 1
drivers/usb/serial/option.c | 4
drivers/usb/typec/altmodes/thunderbolt.c | 44 +-
drivers/usb/typec/ucsi/ucsi.c | 9
fs/btrfs/ioctl.c | 12
fs/btrfs/tree-checker.c | 17
fs/btrfs/zoned.c | 6
fs/smb/client/cifsglob.h | 6
fs/smb/client/file.c | 1
fs/smb/client/inode.c | 21 -
fs/smb/client/smb2ops.c | 20 -
fs/smb/server/smb2pdu.c | 121 ++++--
fs/smb/server/smbacl.c | 43 ++
fs/smb/server/smbacl.h | 2
include/crypto/if_alg.h | 5
include/linux/iio/iio.h | 12
include/linux/netdevice.h | 3
include/linux/netfilter/ipset/ip_set.h | 2
include/linux/skbuff.h | 1
include/linux/usb.h | 10
include/net/netfilter/nf_conntrack_expect.h | 20 -
io_uring/io_uring.c | 62 ++-
io_uring/io_uring.h | 34 +
io_uring/net.c | 4
io_uring/rsrc.c | 4
kernel/bpf/verifier.c | 10
kernel/kallsyms.c | 64 ++-
kernel/sched/ext.c | 70 ++-
kernel/sched/ext_idle.c | 33 +
kernel/sched/fair.c | 10
kernel/trace/bpf_trace.c | 4
lib/crypto/chacha-block-generic.c | 4
mm/gup.c | 10
mm/hmm.c | 2
mm/memory.c | 22 -
mm/mprotect.c | 2
mm/sparse-vmemmap.c | 2
mm/vmscan.c | 2
net/atm/lec.c | 72 ++-
net/atm/lec.h | 2
net/bluetooth/hci_conn.c | 8
net/bluetooth/hci_event.c | 33 +
net/bluetooth/hci_sync.c | 14
net/bluetooth/mgmt.c | 17
net/bluetooth/sco.c | 26 +
net/bluetooth/smp.c | 11
net/bridge/br_arp_nd_proxy.c | 18
net/core/dev.c | 38 +
net/core/skmsg.c | 13
net/hsr/hsr_device.c | 32 -
net/ipv6/addrconf.c | 6
net/ipv6/datagram.c | 10
net/ipv6/icmp.c | 3
net/ipv6/ioam6.c | 4
net/ipv6/ip6_flowlabel.c | 5
net/ipv6/ip6_tunnel.c | 5
net/ipv6/ndisc.c | 3
net/mac80211/tdls.c | 2
net/mptcp/protocol.c | 30 +
net/netfilter/ipset/ip_set_core.c | 4
net/netfilter/ipset/ip_set_hash_gen.h | 2
net/netfilter/ipset/ip_set_list_set.c | 4
net/netfilter/nf_conntrack_broadcast.c | 8
net/netfilter/nf_conntrack_expect.c | 25 +
net/netfilter/nf_conntrack_h323_main.c | 12
net/netfilter/nf_conntrack_helper.c | 13
net/netfilter/nf_conntrack_netlink.c | 87 +---
net/netfilter/nf_conntrack_sip.c | 4
net/netfilter/nf_flow_table_offload.c | 196 ++++++----
net/netfilter/nf_tables_api.c | 7
net/netfilter/nfnetlink_log.c | 2
net/netfilter/x_tables.c | 23 +
net/netfilter/xt_cgroup.c | 6
net/netfilter/xt_rateest.c | 5
net/qrtr/af_qrtr.c | 31 -
net/rds/ib_rdma.c | 7
net/sched/cls_api.c | 1
net/sched/cls_flow.c | 10
net/sched/cls_fw.c | 14
net/sched/sch_hfsc.c | 4
net/sched/sch_netem.c | 5
net/x25/x25_in.c | 9
net/x25/x25_subr.c | 1
sound/hda/codecs/realtek/alc269.c | 2
sound/pci/ctxfi/ctdaio.c | 1
sound/soc/cirrus/ep93xx-i2s.c | 34 +
sound/soc/intel/boards/Kconfig | 2
sound/soc/qcom/sdw.c | 11
sound/usb/caiaq/device.c | 2
sound/usb/qcom/qc_audio_offload.c | 10
sound/usb/quirks.c | 2
tools/objtool/check.c | 5
308 files changed, 3149 insertions(+), 1618 deletions(-)
Adam Crosser (1):
gpib: fix use-after-free in IO ioctl handlers
Aditya Garg (1):
HID: appletb-kbd: add .resume method in PM
Adrian Freund (1):
HID: logitech-hidpp: Enable MX Master 4 over bluetooth
Alan Stern (2):
USB: dummy-hcd: Fix locking/synchronization error
USB: dummy-hcd: Fix interrupt synchronization error
Aldo Conte (1):
iio: light: veml6070: fix veml6070_read() return value
Aleksandr Nogikh (1):
x86/kexec: Disable KCOV instrumentation after load_segments()
Alex Deucher (2):
drm/amdgpu/pm: drop SMU driver if version not matched messages
drm/amd/display: Fix DCE LVDS handling
Alexander Popov (1):
wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
Alexander Usyskin (1):
mei: me: reduce the scope on unexpected reset
Alexei Starovoitov (1):
bpf: Fix regsafe() for pointers to packet
Alexey Velichayshiy (1):
wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
Alice Ryhl (1):
rust_binder: use AssertSync for BINDER_VM_OPS
Andrea Righi (1):
sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
Andrei Kuchynski (1):
usb: typec: thunderbolt: Set enter_vdo during initialization
Anshuman Khandual (1):
mm: replace READ_ONCE() with standard page table accessors
Antoniu Miclaus (5):
iio: adc: ade9000: move mutex init before IRQ registration
iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0
iio: accel: adxl313: add missing error check in predisable
iio: dac: ad5770r: fix error return in ad5770r_read_raw()
iio: imu: adis16550: fix swapped gyro/accel filter functions
Asim Viladi Oglu Manizada (1):
ksmbd: fix OOB write in QUERY_INFO for compound requests
Barnabás Pőcze (1):
gpiolib: clear requested flag if line is invalid
Bart Van Assche (1):
Input: synaptics-rmi4 - fix a locking bug in an error path
Bartosz Golaszewski (1):
gpio: rename gpio_chip_hwgpio() to gpiod_hwgpio()
Benoît Sevens (1):
HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
Berk Cem Goksel (1):
ALSA: caiaq: fix stack out-of-bounds read in init_card
Billy Tsai (1):
iio: adc: aspeed: clear reference voltage bits before configuring vref
Buday Csaba (1):
net: fec: fix the PTP periodic output sysfs interface
Cen Zhang (1):
Bluetooth: SCO: fix race conditions in sco_sock_connect()
Changwoo Min (1):
sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU
Chen Ni (1):
drm/sysfb: Fix efidrm error handling and memory type mismatch
Cheng-Yang Chou (1):
sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl()
Christian Eggers (1):
nvmem: imx: assign nvmem_cell_info::raw_len
Christoffer Sandberg (1):
Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table
Conor Dooley (1):
firmware: microchip: fail auto-update probe if no flash found
Corey Hickey (1):
hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI
Cosmin Tanislav (2):
counter: rz-mtu3-cnt: prevent counter from being toggled multiple times
counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member
Dag Smedberg (1):
ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP
Daniele Ceraolo Spurio (3):
drm/xe/pxp: Clean up termination status on failure
drm/xe/pxp: Remove incorrect handling of impossible state during suspend
drm/xe/pxp: Clear restart flag in pxp_start after jumping back
Dave Penkler (1):
gpib: Fix fluke driver s390 compile issue
David Hildenbrand (Arm) (1):
mm/memory: fix PMD/PUD checks in follow_pfnmap_start()
David Lechner (7):
iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
iio: add IIO_DECLARE_QUATERNION() macro
iio: orientation: hid-sensor-rotation: fix quaternion alignment
iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace
iio: adc: ti-adc161s626: fix buffer read on big-endian
iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
iio: light: vcnl4035: fix scan buffer on big-endian
Deepanshu Kartikey (3):
wifi: mac80211: check tdls flag in ieee80211_tdls_oper
atm: lec: fix use-after-free in sock_def_readable()
comedi: dt2815: add hardware detection to prevent crash
Dimitri Daskalakis (2):
eth: fbnic: Account for page fragments when updating BDQ tail
eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64
Dipayaan Roy (1):
net: mana: Fix RX skb truesize accounting
Dmitry Torokhov (2):
iio: adc: ti-ads7950: normalize return value of gpio_get
iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get()
Donet Tom (1):
drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
Emanuele Ghidoli (1):
spi: cadence-qspi: Fix exec_mem_op error handling
Emmanuel Grumbach (2):
wifi: iwlwifi: mvm: don't send a 6E related command when not supported
wifi: iwlwifi: disable EHT if the device doesn't allow it
Eric Biggers (2):
lib/crypto: chacha: Zeroize permuted_state before it leaves scope
crypto: tegra - Add missing CRYPTO_ALG_ASYNC
Eric Dumazet (3):
ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
ipv6: avoid overflows in ip6_datagram_send_ctl()
Ernestas Kulik (1):
USB: serial: option: add MeiG Smart SRM825WN
Ethan Tidmore (4):
iio: gyro: mpu3050: Fix incorrect free_irq() variable
iio: gyro: mpu3050: Fix irq resource leak
iio: gyro: mpu3050: Move iio_device_register() to correct location
iio: gyro: mpu3050: Fix out-of-sequence free_irq()
Fedor Pchelkin (2):
net: macb: fix clk handling on PCI glue driver removal
net: macb: properly unregister fixed rate clocks
Felix Gu (7):
spi: stm32-ospi: Fix resource leak in remove() callback
spi: stm32-ospi: Fix reset control leak on probe error
spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback
iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion()
iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout()
iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD
usb: misc: usbio: Fix URB memory leak on submit failure
Filipe Manana (1):
btrfs: reserve enough transaction items for qgroup ioctls
Florian Westphal (3):
netfilter: nfnetlink_log: account for netlink header size
netfilter: x_tables: ensure names are nul-terminated
netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr
Francesco Lavra (1):
iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only
Frank Li (1):
dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning
Frej Drejhammar (1):
USB: serial: io_edgeport: add support for Blackbox IC135A
Gabor Juhos (1):
usb: core: phy: avoid double use of 'usb3-phy'
Geliang Tang (1):
mptcp: add eat_recv_skb helper
Geoffrey D. Bennett (1):
ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP
Giorgi Tchankvetadze (2):
iio: adc: ade9000: fix wrong return type in streaming push
iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power
Greg Kroah-Hartman (2):
drm/ioc32: stop speculation on the drm_compat_ioctl path
Linux 6.18.22
Guan-Yu Lin (2):
usb: host: xhci-sideband: delegate offload_usage tracking to class drivers
usb: core: use dedicated spinlock for offload state
Guangshuo Li (3):
usb: ulpi: fix double free in ulpi_register_interface() error path
cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
net: mana: fix use-after-free in add_adev() error path
Guoyu Su (1):
net: use skb_header_pointer() for TCPv4 GSO frag_off check
Harald Freudenberger (1):
s390/zcrypt: Fix memory leak with CCA cards used as accelerator
Heitor Alves de Siqueira (1):
usb: usbtmc: Flush anchored URBs in usbtmc_release
Herbert Xu (2):
crypto: algif_aead - Revert to operating out-of-place
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
Horia Geantă (2):
crypto: caam - fix DMA corruption on long hmac keys
crypto: caam - fix overflow on long hmac keys
Ian Abbott (4):
comedi: Reinit dev->spinlock between attachments to low-level drivers
comedi: ni_atmio16d: Fix invalid clean-up after failed attach
comedi: me_daq: Fix potential overrun of firmware buffer
comedi: me4000: Fix potential overrun of firmware buffer
Ian Rogers (1):
perf/x86: Fix potential bad container_of in intel_pmu_hw_config
Ivan Vera (1):
nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy
JP Hein (1):
USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam
Jamie Gibbons (1):
dt-bindings: gpio: fix microchip #interrupt-cells
Jens Axboe (1):
io_uring: protect remaining lockless ctx->rings accesses with RCU
Jiayuan Chen (1):
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
Jihed Chaibi (1):
ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure
Jimmy Hu (1):
usb: gadget: uvc: fix NULL pointer dereference during unbind race
Johan Hovold (1):
gpib: lpvo_usb: fix memory leak on disconnect
Johannes Berg (3):
wifi: iwlwifi: fix remaining kernel-doc warnings
wifi: iwlwifi: cfg: add new device names
wifi: iwlwifi: mld: correctly set wifi generation data
Johannes Thumshirn (1):
btrfs: don't take device_list_mutex when querying zone info
Jonathan Rissanen (1):
Bluetooth: hci_h4: Fix race during initialization
Josef Bacik (1):
scsi: target: tcm_loop: Drain commands in target_reset handler
Josh Poimboeuf (2):
objtool: Fix Clang jump table detection
iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()
Julian Braha (1):
ASoC: Intel: boards: fix unmet dependency on PINCTRL
Juno Choi (1):
usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()
Junrui Luo (1):
drm/amdgpu: validate doorbell_offset in user queue creation
Junxi Qian (1):
io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()
Justin Chen (1):
usb: ehci-brcm: fix sleep during atomic
Keenan Dong (2):
Bluetooth: MGMT: validate LTK enc_size on load
Bluetooth: MGMT: validate mesh send advertising payload length
Konrad Dybcio (1):
thunderbolt: Fix property read in nhi_wake_supported()
Kuen-Han Tsai (8):
usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
usb: gadget: f_rndis: Protect RNDIS options with mutex
usb: gadget: f_ecm: Fix net_device lifecycle with device_move
usb: gadget: f_eem: Fix net_device lifecycle with device_move
usb: gadget: f_subset: Fix net_device lifecycle with device_move
usb: gadget: f_rndis: Fix net_device lifecycle with device_move
Kuniyuki Iwashima (1):
bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
Lee Jones (3):
HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
HID: core: Mitigate potential OOB by removing bogus memset()
HID: multitouch: Check to ensure report responses match the request
Li Xiasong (1):
mptcp: fix soft lockup in mptcp_recvmsg()
Liam Mitchell (1):
Input: bcm5974 - recover from failed mode switch
Liav Mordouch (1):
vt: discard stale unicode buffer on alt screen exit after resize
Lijo Lazar (1):
drm/amdgpu: Fix wait after reset sequence in S4
Lorenzo Bianconi (1):
net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue()
Luka Gejak (1):
net: hsr: fix VLAN add unwind on slave errors
Maarten Lankhorst (1):
Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"
Maciej W. Rozycki (2):
MIPS: SiByte: Bring back cache initialisation
MIPS: Fix the GCC version check for `__multi3' workaround
Marek Behún (1):
net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta
Martin Schiller (2):
net/x25: Fix potential double free of skb
net/x25: Fix overflow when accumulating packets
Miao Li (1):
usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive
Michael Zimmermann (1):
usb: gadget: f_hid: move list and spinlock inits from bind to alloc
Michal Piekos (1):
net: stmmac: skip VLAN restore when VLAN hash ops are missing
Mikko Perttunen (1):
i2c: tegra: Don't mark devices with pins as IRQ safe
Mikulas Patocka (1):
crypto: deflate - fix spurious -ENOSPC
Nathan Rebello (1):
usb: typec: ucsi: validate connector number in ucsi_notify_common()
Nicolas Pitre (1):
vt: resize saved unicode buffer on alt screen exit after resize
Norbert Szetei (1):
crypto: af-alg - fix NULL pointer dereference in scatterwalk
Oleh Konko (2):
Bluetooth: SMP: derive legacy responder STK authentication from MITM state
Bluetooth: SMP: force responder MITM requirements before building the pairing response
Oliver Neukum (1):
cdc-acm: new quirk for EPSON HMD
Pablo Neira Ayuso (7):
netfilter: flowtable: strictly check for maximum number of actions
netfilter: nf_conntrack_expect: honor expectation helper field
netfilter: nf_conntrack_expect: use expect->helper
netfilter: nf_conntrack_expect: store netns and zone in expectation
netfilter: ctnetlink: ignore explicit helper on new expectations
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
netfilter: nf_tables: reject immediate NF_QUEUE verdict
Pagadala Yesu Anjaneyulu (1):
wifi: iwlwifi: mld: Fix MLO scan timing
Paolo Abeni (2):
ipv6: prevent possible UaF in addrconf_permanent_addr()
net: introduce mangleid_features
Paul SAGE (1):
tg3: replace placeholder MAC address with device property
Paul Walmsley (1):
riscv: kgdb: fix several debug register assignment bugs
Pauli Virtanen (3):
Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate
Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
Paulo Alcantara (1):
smb: client: fix generic/694 due to wrong ->i_blocks
Pavan Chebbi (1):
bnxt_en: Restore default stat ctxs for ULP when resource is available
Pengpeng Hou (3):
net/ipv6: ioam6: prevent schema length wraparound in trace fill
bnxt_en: set backing store type from query type
NFC: pn533: bound the UART receive buffer
Pepper Gray (1):
arm64/scs: Fix handling of advance_loc4
Peter Zijlstra (1):
sched/fair: Fix zero_vruntime tracking fix
Petr Mladek (4):
kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid()
kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid()
kallsyms: cleanup code for appending the module buildid
kallsyms: prevent module removal when printing module name and buildid
Praveen Talari (1):
spi: geni-qcom: Check DMA interrupts early in ISR
Prike Liang (1):
drm/amdgpu: fix the idr allocation flags
Qi Tang (4):
netfilter: nf_conntrack_helper: pass helper to expect cleanup
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
bpf: reject direct access to nullable PTR_TO_BUF pointers
io_uring/rsrc: reject zero-length fixed buffer import
Qingfang Deng (1):
netdevsim: fix build if SKB_EXTENSIONS=n
Rafael J. Wysocki (2):
thermal: core: Address thermal zone removal races with resume
thermal: core: Fix thermal zone device registration error path
Reshma Immaculate Rajkumar (1):
wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session
Saeed Mahameed (2):
net/mlx5: Avoid "No data available" when FW version queries fail
net/mlx5: Fix switchdev mode rollback in case of failure
Sanman Pradhan (6):
hwmon: (tps53679) Fix array access with zero-length block read
hwmon: (pxe1610) Check return value of page-select write in probe
hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")
hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()
hwmon: (occ) Fix missing newline in occ_show_extended()
hwmon: (occ) Fix division by zero in occ_show_power_1()
Sebastian Urban (1):
usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer
Shay Drory (1):
net/mlx5: lag: Check for LAG device before creating debugfs
Shengyu Qu (1):
Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode
Shenwei Wang (1):
gpio: mxc: map Both Edge pad wakeup to Rising Edge
Shiji Yang (1):
mips: ralink: update CPU clock index
Sourav Nayak (1):
ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx
Srinivas Kandagatla (1):
ASoC: qcom: sc7280: make use of common helpers
Srinivasan Shanmugam (1):
drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()
Srujana Challa (1):
virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN
Stefan Wiehler (1):
mips: mm: Allocate tlb_vpn array atomically
Sunil V L (1):
ACPI: RIMT: Add dependency between iommu and devices
Suraj Gupta (2):
net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec
net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets
Sven Eckelmann (Plasma Cloud) (1):
net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
Taegu Ha (1):
usb: gadget: f_uac1_legacy: validate control request size
Takashi Iwai (1):
ALSA: ctxfi: Fix missing SPDIFI1 index handling
Tejun Heo (1):
sched_ext: Refactor do_enqueue_task() local and global DSQ paths
Thinh Nguyen (1):
scsi: target: file: Use kzalloc_flex for aio_cmd
Thomas Bogendoerfer (1):
tg3: Fix race for querying speed/duplex
Thomas Richter (1):
s390/cpum_sf: Cap sampling rate to prevent lsctl exception
Thomas Zimmermann (1):
drm/ast: dp501: Fix initialization of SCU2C
Tzung-Bi Shih (1):
gpio: Fix resource leaks on errors in gpiochip_add_data_with_key()
Valek Andrej (1):
iio: accel: fix ADXL355 temperature signature value
Varun R Mallya (1):
bpf: Reject sleepable kprobe_multi programs at attach time
Ville Syrjälä (2):
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP
Wanquan Zhong (1):
USB: serial: option: add support for Rolling Wireless RW135R-GL
Wei Fang (3):
net: enetc: reset PIR and CIR if they are not equal when initializing TX ring
net: enetc: check whether the RSS algorithm is Toeplitz
net: enetc: do not allow VF to configure the RSS key
Weiming Shi (1):
rds: ib: reject FRMR registration before IB connection is established
Willem de Bruijn (1):
net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
Xiang Mei (4):
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
net: bonding: fix use-after-free in bond_xmit_broadcast()
net/sched: cls_fw: fix NULL pointer dereference on shared blocks
net/sched: cls_flow: fix NULL pointer dereference on shared blocks
Xingjing Deng (2):
misc: fastrpc: possible double-free of cctx->remote_heap
misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe
Xu Yang (1):
dt-bindings: connector: add pd-disable dependency
Yang Wang (1):
drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13
Yang Yang (3):
bridge: br_nd_send: linearize skb before parsing ND options
bridge: br_nd_send: validate ND option lengths
vxlan: validate ND option lengths in vxlan_na_create
Yasuaki Torimaru (1):
wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
Yifan Wu (1):
netfilter: ipset: drop logically empty buckets in mtype_del
Yochai Eisenrich (2):
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
Yongchao Wu (2):
usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
usb: cdns3: gadget: fix state inconsistency on gadget init failure
Youssef Samir (1):
accel/qaic: Handle DBC deactivation if the owner went away
Yucheng Lu (1):
net/sched: sch_netem: fix out-of-bounds access in packet corruption
Yufan Chen (1):
net: ftgmac100: fix ring allocation unwind on open failure
Zhang Heng (1):
ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15
ZhengYuan Huang (1):
btrfs: reject root items with drop_progress and zero drop_level
Zhengchuan Liang (1):
net: ipv6: flowlabel: defer exclusive option free until RCU teardown
Zilin Guan (1):
ice: Fix memory leak in ice_set_ringparam()
Zishun Yi (1):
riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set
Zoltan Illes (1):
Input: xpad - add support for Razer Wolverine V3 Pro
hkbinbin (1):
Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync
next reply other threads:[~2026-04-11 12:53 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-04-11 12:53 Greg Kroah-Hartman [this message]
2026-04-11 12:53 ` Linux 6.18.22 Greg Kroah-Hartman
2026-04-14 16:52 ` Regression Linux 6.18.22: ipsec stops working: reason: commit 153d5520c3f9 "crypto: authencesn - Do not place hiseq at end of dst for out-of-place d.cryption" Wolfgang Walter
2026-04-14 16:58 ` Sasha Levin
2026-04-14 17:41 ` Wolfgang Walter
2026-04-14 17:04 ` 6.18.22: a question to commit "crypto: algif_aead - Revert to operating out-of-place" Wolfgang Walter
2026-04-14 17:28 ` Sasha Levin
2026-04-14 23:39 ` [PATCH] crypto: authencesn - Fix src offset when decrypting in-place Herbert Xu
2026-04-15 19:54 ` Wolfgang Walter
2026-04-22 9:30 ` Fwd: " Wolfgang Walter
2026-04-23 4:56 ` Greg Kroah-Hartman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2026041152-boaster-patrol-1918@gregkh \
--to=gregkh@linuxfoundation.org \
--cc=akpm@linux-foundation.org \
--cc=jslaby@suse.cz \
--cc=linux-kernel@vger.kernel.org \
--cc=lwn@lwn.net \
--cc=stable@vger.kernel.org \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.