From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: stable@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
patches@lists.linux.dev, linux-kernel@vger.kernel.org,
torvalds@linux-foundation.org, akpm@linux-foundation.org,
linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org,
lkft-triage@lists.linaro.org, pavel@nabladev.com,
jonathanh@nvidia.com, f.fainelli@gmail.com,
sudipm.mukherjee@gmail.com, rwarsow@gmx.de, conor@kernel.org,
hargar@microsoft.com, broonie@kernel.org, achill@achill.org,
sr@sladewatkins.com
Subject: [PATCH 7.1 000/533] 7.1.4-rc2 review
Date: Fri, 17 Jul 2026 12:41:50 +0200 [thread overview]
Message-ID: <20260717101912.682013354@linuxfoundation.org> (raw)
This is the start of the stable review cycle for the 7.1.4 release.
There are 533 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sun, 19 Jul 2026 10:18:26 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.4-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 7.1.4-rc2
Darrick J. Wong <djwong@kernel.org>
xfs: use rtrefcount btree cursor in xchk_xref_is_rt_cow_staging
Darrick J. Wong <djwong@kernel.org>
xfs: write the rg superblock when fixing it
Darrick J. Wong <djwong@kernel.org>
xfs: fix off-by-one error when calling xchk_xref_has_rt_owner
Darrick J. Wong <djwong@kernel.org>
xfs: don't zap bmbt forks if they are MAXLEVELS tall
Darrick J. Wong <djwong@kernel.org>
xfs: fully check the parent handle when it points to the rootdir
Darrick J. Wong <djwong@kernel.org>
xfs: clamp timestamp nanoseconds correctly
Darrick J. Wong <djwong@kernel.org>
xfs: handle non-inode owners for rtrmap record checking
Darrick J. Wong <djwong@kernel.org>
xfs: set xfarray killable sort correctly
Darrick J. Wong <djwong@kernel.org>
xfs: use the rt version of the cow staging checker
Darrick J. Wong <djwong@kernel.org>
xfs: grab rtrmap btree when checking rgsuper
Darrick J. Wong <djwong@kernel.org>
xfs: don't wrap around quota ids in dqiterate
Darrick J. Wong <djwong@kernel.org>
xfs: resample the data fork mapping after cycling ILOCK
Weiming Shi <bestswngs@gmail.com>
xfs: fail recovery on a committed log item with no regions
Andrey Albershteyn <aalbersh@kernel.org>
xfs: fix null pointer dereference in tracepoint
Shoichiro Miyamoto <shoichiro.miyamoto@gmail.com>
smb: client: reject overlapping data areas in SMB2 responses
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
Mikhail Gavrilov <mikhail.v.gavrilov@gmail.com>
timekeeping: Register default clocksource before taking tk_core.lock
Rong Zhang <i@rong.moe>
ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_IFB_SILENCE_ON_EMPTY
Joanne Koong <joannelkoong@gmail.com>
fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref
Bernd Schubert <bernd@bsbernd.com>
fuse-uring: make a fuse_req on SQE commit only findable after memcpy
Bernd Schubert <bernd@bsbernd.com>
fuse-uring: Avoid queue->stopped races and set/read that value under lock
Bernd Schubert <bernd@bsbernd.com>
fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues
Chris Mason <clm@meta.com>
fuse-uring: end fuse_req on io-uring cancel task work
Joanne Koong <joannelkoong@gmail.com>
fuse-uring: fix moving cancelled entry to ent_in_userspace list
Chris Mason <clm@meta.com>
fuse-uring: fix data races on ring->ready
Chris Mason <clm@meta.com>
fuse-uring: fix EFAULT clobber in fuse_uring_commit
Ji'an Zhou <eilaimemedsnaimel@gmail.com>
fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
Joanne Koong <joannelkoong@gmail.com>
fuse: don't block in fuse_get_dev() for non-sync_init case
Joanne Koong <joannelkoong@gmail.com>
fuse: fix io-uring background queue dispatch on request completion
Joanne Koong <joannelkoong@gmail.com>
fuse: re-lock request before returning from fuse_ref_folio()
Miklos Szeredi <mszeredi@redhat.com>
fuse: do not use start_removing_noperm()
Alberto Ruiz <aruiz@redhat.com>
fuse: fix device node leak in cuse_process_init_reply()
Miklos Szeredi <mszeredi@redhat.com>
Revert "fuse: fix conversion of fuse_reverse_inval_entry() to start_removing()"
Samuel Moelius <sam.moelius@trailofbits.com>
fuse: avoid 32-bit prune notification count wrap
Matthew R. Ochs <mochs@nvidia.com>
fuse: back uncached readdir buffers with pages
Michael Bommarito <michael.bommarito@gmail.com>
RDMA/siw: bound Read Response placement to the RREAD length
Maher Sanalla <msanalla@nvidia.com>
RDMA/core: Fix broadcast address falsely detected as local
Zhenhao Wan <whi4ed0g@gmail.com>
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: maplecontrol - set driver data before registering input device
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: maplemouse - set driver data before registering input device
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: maple_keyb - set driver data before registering input device
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: mms114 - fix multi-touch slot corruption
Florian Fuchs <fuchsfl@gmail.com>
Input: maplemouse - fix NULL pointer dereference in open()
Xu Rao <raoxu@uniontech.com>
Input: gscps2 - advance receive buffer write index
Bryam Vargas <hexlabsecurity@proton.me>
Input: mms114 - reject an oversized device packet size
Bryam Vargas <hexlabsecurity@proton.me>
Input: touchwin - reset the packet index on every complete packet
Kris Bahnsen <kris@embeddedTS.com>
Input: ads7846 - don't use scratch for tx_buf when clearing register
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: mms114 - fix touch indexing for MMS134S and MMS136
Bryam Vargas <hexlabsecurity@proton.me>
Input: iforce - bound the device-reported force-feedback effect index
Bryam Vargas <hexlabsecurity@proton.me>
Input: goodix - clamp the device-reported contact count
Ranjan Kumar <kumarranja@chromium.org>
Input: elan_i2c - prevent division by zero and arithmetic underflow
Bryam Vargas <hexlabsecurity@proton.me>
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
Bryam Vargas <hexlabsecurity@proton.me>
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
Haoxiang Li <haoxiang_li2024@163.com>
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
Mingyu Wang <25181214217@stu.xidian.edu.cn>
i2c: i801: fix hardware state machine corruption in error path
Carlos Song <carlos.song@nxp.com>
i2c: imx-lpi2c: mark I2C adapter when hardware is powered down
Guillermo Rodríguez <guille.rodriguez@gmail.com>
i2c: stm32f7: truncate clock period instead of rounding it
Haoxiang Li <haoxiang_li2024@163.com>
i2c: davinci: Unregister cpufreq notifier on probe failure
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
i2c: mpc: Fix timeout calculations
Johan Hovold <johan@kernel.org>
i2c: core: fix adapter deregistration race
Johan Hovold <johan@kernel.org>
i2c: core: fix adapter debugfs creation
Johan Hovold <johan@kernel.org>
i2c: core: fix NULL-deref on adapter registration failure
Johan Hovold <johan@kernel.org>
i2c: core: fix irq domain leak on adapter registration failure
Johan Hovold <johan@kernel.org>
i2c: core: fix adapter probe deferral loop
Sebastian Alba Vives <sebasjosue84@gmail.com>
fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
Chuck Lever <chuck.lever@oracle.com>
Revert "svcrdma: Use contiguous pages for RDMA Read sink buffers"
Chuck Lever <chuck.lever@oracle.com>
svcrdma: wake sq waiters when the transport closes
Mikhail Gavrilov <mikhail.v.gavrilov@gmail.com>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
Mikhail Gavrilov <mikhail.v.gavrilov@gmail.com>
udmabuf: fix DMA direction mismatch in release_udmabuf()
Oliver Upton <oupton@kernel.org>
KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier
Sean Christopherson <seanjc@google.com>
KVM: x86: Add dedicated API for getting mask of accelerated x2APIC MSRs
Sean Christopherson <seanjc@google.com>
KVM: guest_memfd: Treat memslot binding offset+size as unsigned values
Sean Christopherson <seanjc@google.com>
KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
Sean Christopherson <seanjc@google.com>
KVM: TDX: Account all non-transient page allocations for per-TD structures
Xuanqing Shi <1356292400@qq.com>
KVM: VMX: Handle bad values on proxied writes to LBR MSRs
Sean Christopherson <seanjc@google.com>
KVM: SEV: Don't terminate SNP VMs on #VMGEXIT without a registered GHCB
Sean Christopherson <seanjc@google.com>
KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
Sean Christopherson <seanjc@google.com>
KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that are accelerated
Sean Christopherson <seanjc@google.com>
KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM actually supports
Sean Christopherson <seanjc@google.com>
KVM: SEV: Pin source page for write when adding CPUID data for SNP guest
Hyunwoo Kim <imv4bel@gmail.com>
KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
Hyunwoo Kim <imv4bel@gmail.com>
KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
Zeng Chi <zengchi@kylinos.cn>
LoongArch: KVM: Add missing slots_lock for device register/unregister
Marc Zyngier <maz@kernel.org>
KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
Mickaël Salaün <mic@digikod.net>
selftests/landlock: Increase default audit socket timeout
Mickaël Salaün <mic@digikod.net>
selftests/landlock: Filter dealloc records in audit_count_records()
Mickaël Salaün <mic@digikod.net>
landlock: Account all audit data allocations to user space
Maximilian Heyne <mheyne@amazon.de>
selftests/landlock: Explicitly disable audit in teardowns
Mickaël Salaün <mic@digikod.net>
landlock: Set audit_net.sk for socket access checks
Ricardo Robaina <rrobaina@redhat.com>
audit: fix removal of dangling executable rules
Nicolin Chen <nicolinc@nvidia.com>
iommufd: Set upper bounds on cache invalidation entry_num and entry_len
Nicolin Chen <nicolinc@nvidia.com>
iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read()
Nicolin Chen <nicolinc@nvidia.com>
iommufd: Break the loop on failure in iommufd_fault_fops_read()
Nicolin Chen <nicolinc@nvidia.com>
iommufd: Reject invalid read count in iommufd_fault_fops_read()
Nicolin Chen <nicolinc@nvidia.com>
iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch()
Nicolin Chen <nicolinc@nvidia.com>
iommufd: Reject invalid read count in iommufd_veventq_fops_read()
Nicolin Chen <nicolinc@nvidia.com>
iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails
Nicolin Chen <nicolinc@nvidia.com>
iommufd: Set veventq_depth upper bound
Nicolin Chen <nicolinc@nvidia.com>
iommufd: Move vevent memory allocation outside spinlock
Nicolin Chen <nicolinc@nvidia.com>
iommufd: Fix data_len byte-count vs element-count mismatch
Kai Aizen <kai.aizen.dev@gmail.com>
iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read
Weinan Liu <wnliu@google.com>
iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
Lu Baolu <baolu.lu@linux.intel.com>
iommu/vt-d: Avoid WARNING in sva unbind path
Matt Bobrowski <mattbobrowski@google.com>
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
Dave Airlie <airlied@redhat.com>
nouveau/vmm: fix another SPT/LPT race
Sarthak Sharma <sarthak.sharma@arm.com>
selftests/mm: fix ksft_process_madv.sh test category
Zenghui Yu <zenghui.yu@linux.dev>
selftests/mm: pagemap_ioctl: use the correct page size for transact_test()
Pedro Falcato <pfalcato@suse.de>
mm: do file ownership checks with the proper mount idmap
Ketan <ketan.kishore@oss.qualcomm.com>
mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access
David Hildenbrand (Arm) <david@kernel.org>
selftests: mm: fix and speedup "droppable" test
Anthony Yznaga <anthony.yznaga@oracle.com>
mm: fix mmap errno value when MAP_DROPPABLE is not supported
Hao Ge <hao.ge@linux.dev>
lib/test_hmm: use kvfree() to free kvcalloc() allocations
Vivian Wang <wangruikang@iscas.ac.cn>
riscv: mm: Unconditionally sfence.vma for spurious fault
Vivian Wang <wangruikang@iscas.ac.cn>
riscv: mm: Define DIRECT_MAP_PHYSMEM_END
Koichiro Den <den@valinux.co.jp>
NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
Bryam Vargas <hexlabsecurity@proton.me>
exfat: bound uniname advance in exfat_find_dir_entry()
Rochan Avlur <rochan.avlur@gmail.com>
exfat: preserve benign secondary entries during rename and move
Nicolas Pitre <npitre@baylibre.com>
vt: fix spurious modifier in CSI/cursor key sequences
Andrii Kuchmenko <capyenglishlite@gmail.com>
module: decompress: check return value of module_extend_max_pages()
Gabriele Monaco <gmonaco@redhat.com>
rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow schedule
Benjamin Coddington <ben.coddington@hammerspace.com>
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
Ricardo Robaina <rrobaina@redhat.com>
audit: fix potential integer overflow in audit_log_n_hex()
Huihui Huang <hhhuang@smu.edu.sg>
tracing: Prevent out-of-bounds read in glob matching
Luca Boccassi <luca.boccassi@gmail.com>
selftests/liveupdate: add test cases for LIVEUPDATE_IOCTL_CREATE_SESSION calls with invalid length
Luca Boccassi <luca.boccassi@gmail.com>
liveupdate: reject LIVEUPDATE_IOCTL_CREATE_SESSION with invalid name length
Lee Jia Jie <jiajie.lee@starlabs.sg>
perf/aux: Fix page UAF in map_range()
Johan Hovold <johan@kernel.org>
i2c: core: fix hang on adapter registration failure
Wentao Liang <vulab@iscas.ac.cn>
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
Janne Grunau <j@jannau.net>
watchdog: apple: Add "apple,t8103-wdt" compatible
Vasily Khoruzhick <vasilykh@arista.com>
EDAC/i10nm: Don't fail probing if ADXL is missing
David Hildenbrand (Arm) <david@kernel.org>
x86/mm: Fix freeing of PMD-sized vmemmap pages
Carlos Song <carlos.song@nxp.com>
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
Carlos Song <carlos.song@nxp.com>
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
Mark Rutland <mark.rutland@arm.com>
arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos/hash - remove useless wrapper
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos/hash - drop workqueue mechanism for SEC1
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - move code in current_desc_hdr() into a standalone function
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - factor out AER reset helpers
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - validate RSA CRT component lengths
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - skip restart for down devices
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - protect service table iterations with service_lock
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - notify fatal error before AER reset preparation
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - keep VFs enabled during reset
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - handle sysfs-triggered reset callbacks
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - fix restarting state leak on allocation failure
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - centralize bus master enable
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix the fips_enabled priority boost
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix ineffective sanity check
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix misaligned writes in CTR_DRBG and HASH_DRBG
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix returning success on failure in CTR_DRBG
Tycho Andersen (AMD) <tycho@kernel.org>
crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
Tycho Andersen (AMD) <tycho@kernel.org>
crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
Tycho Andersen (AMD) <tycho@kernel.org>
crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
Tycho Andersen (AMD) <tycho@kernel.org>
crypto: ccp - Do not initialize SNP for SEV ioctls
Eric Biggers <ebiggers@kernel.org>
crypto: loongson - Remove broken and unused loongson-rng
Eric Biggers <ebiggers@kernel.org>
crypto: loongson - Select CRYPTO_RNG
Wentao Liang <vulab@iscas.ac.cn>
crypto: tegra - fix refcount leak in tegra_se_host1x_submit()
Ruijie Li <ruijieli51@gmail.com>
crypto: pcrypt - restore callback for non-parallel fallback
Eric Biggers <ebiggers@kernel.org>
crypto: hisi-trng - Remove crypto_rng interface
Anastasia Tishchenko <sv3iry@gmail.com>
crypto: ecc - Fix carry overflow in vli multiplication
Eric Biggers <ebiggers@kernel.org>
crypto: crypto4xx - Remove insecure and unused rng_alg
Xiaonan Zhao <ngochuongbui67@gmail.com>
crypto: chacha20poly1305 - validate poly1305 template argument
Thorsten Blum <thorsten.blum@linux.dev>
crypto: caam - use print_hex_dump_devel to guard key hex dumps again
Thorsten Blum <thorsten.blum@linux.dev>
crypto: caam - use print_hex_dump_devel to guard key hex dumps
Eric Biggers <ebiggers@kernel.org>
crypto: af_alg - Remove zero-copy support from skcipher and aead
Bryam Vargas <hexlabsecurity@proton.me>
isofs: bound Rock Ridge symlink components to the SL record
Qu Wenruo <wqu@suse.com>
btrfs: fix incorrect buffered IO fallback for append direct writes
Bryam Vargas <hexlabsecurity@proton.me>
partitions: aix: bound the pp_count scan to the ppe array
Qu Wenruo <wqu@suse.com>
btrfs: do not trim a device which is not writeable
Qu Wenruo <wqu@suse.com>
btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
Tianchu Chen <flynnnchen@tencent.com>
nvmet-auth: validate reply message payload bounds against transfer length
Qu Wenruo <wqu@suse.com>
btrfs: fix false IO failure after falling back to buffered write
Bryam Vargas <hexlabsecurity@proton.me>
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
Achkinazi, Igor <Igor.Achkinazi@dell.com>
nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
Mikulas Patocka <mpatocka@redhat.com>
dm-ioctl: report an error if a device has no table
Wentao Liang <vulab@iscas.ac.cn>
block: partitions: fix of_node refcount leak in of_partition()
Wentao Liang <vulab@iscas.ac.cn>
nvme: target: rdma: fix ndev refcount leak on queue connect
Thorsten Blum <thorsten.blum@linux.dev>
crypto: atmel-sha204a - fail on hwrng registration error in probe path
Thorsten Blum <thorsten.blum@linux.dev>
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
Wentao Liang <vulab@iscas.ac.cn>
hwrng: jh7110 - fix refcount leak in starfive_trng_read()
Bryam Vargas <hexlabsecurity@proton.me>
udf: validate sparing table length as an entry count, not a byte count
Bryam Vargas <hexlabsecurity@proton.me>
udf: validate VAT header length against the VAT inode size
Michael Bommarito <michael.bommarito@gmail.com>
udf: validate free block extents against the partition length
Arjan van de Ven <arjan@linux.intel.com>
wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon
Chao Shi <coshi036@gmail.com>
block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
Neill Kapron <nkapron@google.com>
usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
Neill Kapron <nkapron@google.com>
usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
Paul Cercueil <paul@crapouillou.net>
usb: gadget: f_fs: Fix DMA fence leak
Tyler Baker <tyler.baker@oss.qualcomm.com>
usb: gadget: f_fs: initialize reset_work at allocation time
Paul Menzel <pmenzel@molgen.mpg.de>
usb: typec: ucsi: cancel pending work on system suspend
Fan Wu <fanwu01@zju.edu.cn>
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
Madhu M <madhu.m@intel.com>
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
Andrei Kuchynski <akuchynski@chromium.org>
usb: typec: ucsi: Invert DisplayPort role assignment
Badhri Jagan Sridharan <badhri@google.com>
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
Andy Yan <andyshrk@163.com>
usb: typec: tcpm: Fix VDM type for Enter Mode commands
Stephan Gerhold <stephan.gerhold@linaro.org>
usb: typec: ps883x: Fix DP+USB3 configuration
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
usb: typec: class: drop PD lookup reference
Myeonghun Pak <mhun512@gmail.com>
usb: typec: anx7411: use devm_pm_runtime_enable()
Sam Day <me@samcday.com>
usbip: vudc: fix NULL deref in vep_dequeue()
Yichong Chen <chenyichong@uniontech.com>
usbip: tools: support SuperSpeedPlus devices
Xu Rao <raoxu@uniontech.com>
USB: usb-storage: ene_ub6250: restore media-ready check
Johan Hovold <johan@kernel.org>
USB: ulpi: fix memory leak on registration failure
Johan Hovold <johan@kernel.org>
USB: serial: digi_acceleport: fix write buffer corruption
Johan Hovold <johan@kernel.org>
USB: serial: digi_acceleport: fix hard lockup on disconnect
Johan Hovold <johan@kernel.org>
USB: serial: digi_acceleport: fix broken rx after throttle
Fabio Porcedda <fabio.porcedda@gmail.com>
USB: serial: option: add Telit Cinterion FE990D50 compositions
Johan Hovold <johan@kernel.org>
USB: serial: keyspan_pda: fix information leak
Haoxiang Li <haoxiang_li2024@163.com>
usb: mtu3: unmap request DMA on queue failure
Myeonghun Pak <mhun512@gmail.com>
USB: misc: uss720: unregister parport on probe failure
HE WEI (ギカク) <skyexpoc@gmail.com>
usb: misc: usbio: bound bulk IN response length to the received transfer
Xu Rao <raoxu@uniontech.com>
USB: storage: include US_FL_NO_SAME in quirks mask
Myeonghun Pak <mhun512@gmail.com>
usb: sl811-hcd: disable controller wakeup on remove
Johan Hovold <johan@kernel.org>
USB: legousbtower: fix use-after-free on disconnect race
Erich E. Hoover <erich.e.hoover@gmail.com>
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix use-after-free on disconnect race
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix use-after-free on disconnect
Johan Hovold <johan@kernel.org>
USB: ldusb: fix use-after-free on disconnect race
Johan Hovold <johan@kernel.org>
USB: idmouse: fix use-after-free on disconnect race
Xu Rao <raoxu@uniontech.com>
usb: gadget: f_printer: take kref only for successful open
Jimmy Hu <hhhuuu@google.com>
usb: gadget: udc: Fix use-after-free in gadget_match_driver
Maoyi Xie <maoyixie.tju@gmail.com>
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
Dawei Feng <dawei.feng@seu.edu.cn>
usb: free iso schedules on failed submit
WenTao Liang <vulab@iscas.ac.cn>
usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
Ben Dooks <ben.dooks@codethink.co.uk>
usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()
Rodrigo Lugathe da Conceição Alves <lugathe2@gmail.com>
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
Haoxiang Li <haoxiang_li2024@163.com>
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
Jared Baldridge <jrb@expunge.us>
usb: cdc_acm: Add quirk for Uniden BC125AT scanner
Jens Glathe <jens.glathe@oldschoolsolutions.biz>
Revert "usb: typec: mux: avoid duplicated mux switches"
Maoyi Xie <maoyixie.tju@gmail.com>
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
Vlad Poenaru <vlad.wing@gmail.com>
bpf: Allow LPM map access from sleepable BPF programs
Nuoqi Gui <gnq25@mails.tsinghua.edu.cn>
bpf: Keep dynamic inner array lookups nullable
Paul Moses <p@1g4.org>
bpf: Validate BTF repeated field counts before expansion
Dawei Feng <dawei.feng@seu.edu.cn>
bpf: Restore sysctl new-value from 1 to 0
Zhao Zhang <zzhan461@ucr.edu>
bpf: Reject fragmented frames in devmap
Dawei Feng <dawei.feng@seu.edu.cn>
xfs: fix memory leak in xfs_dqinode_metadir_create()
Yingjie Gao <gaoyingjie@uniontech.com>
xfs: fix exchmaps reservation limit check
Darrick J. Wong <djwong@kernel.org>
xfs: fix pointer arithmetic error on 32-bit systems
Alexey Nepomnyashih <sdl@nppct.ru>
xfs: fix unreachable BIGTIME check in dquot flush validation
Christoph Hellwig <hch@lst.de>
xfs: initialize iomap->flags earlier in xfs_bmbt_to_iomap
Christoph Hellwig <hch@lst.de>
xfs: only log freed extents for the current RTG in zoned growfs
Christoph Hellwig <hch@lst.de>
xfs: pass back updated nb from xfs_growfs_compute_deltas
Yingjie Gao <gaoyingjie@uniontech.com>
xfs: release dquot buffer after dqflush failure
Yousef Alhouseen <alhouseenyousef@gmail.com>
xfs: use null daddr for unset first bad log block
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_mid: Disable DMA for selected platforms
Louis-Alexis Eyraud <louisalexis.eyraud@collabora.com>
media: mtk-jpeg: cancel workqueue on release for supported platforms only
Deepanshu Kartikey <kartikey406@gmail.com>
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
Tristan Madani <tristan@talencesecurity.com>
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
Tristan Madani <tristan@talencesecurity.com>
hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
Maoyi Xie <maoyixie.tju@gmail.com>
HID: lg-g15: cancel pending work on remove to fix a use-after-free
Manish Khadka <maskmemanish@gmail.com>
HID: appleir: fix UAF on pending key_up_timer in remove()
Trung Nguyen <trungnh@cystack.net>
HID: multitouch: fix out-of-bounds bit access on mt_io_flags
Manish Khadka <maskmemanish@gmail.com>
HID: letsketch: fix UAF on inrange_timer at driver unbind
Jinmo Yang <jinmo44.yang@gmail.com>
HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()
Jinmo Yang <jinmo44.yang@gmail.com>
HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert
Manish Khadka <maskmemanish@gmail.com>
HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove()
Oleg Makarenko <oleg@makarenk.ooo>
HID: pidff: Use correct effect type in effect update
Myeonghun Pak <mhun512@gmail.com>
HID: wacom: stop hardware after post-start probe failures
Carlos Llamas <cmllamas@google.com>
HID: uhid: convert to hid_safe_input_report()
Tianchu Chen <flynnnchen@tencent.com>
HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
Yichong Chen <chenyichong@uniontech.com>
tools/mm/slabinfo: fix total_objects attribute name
Xuewen Wang <wangxuewen@kylinos.cn>
tools/mm/slabinfo: Fix trace disable logic inversion
Vlastimil Babka (SUSE) <vbabka@kernel.org>
mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
Lukas Wunner <lukas@wunner.de>
X.509: Fix validation of ASN.1 certificate header
Robin Murphy <robin.murphy@arm.com>
perf/arm-cmn: Fix DVM node events
Heiko Carstens <hca@linux.ibm.com>
s390: Revert support for DCACHE_WORD_ACCESS
Kartik Rajput <kkartik@nvidia.com>
clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
Thomas Gleixner <tglx@kernel.org>
time/jiffies: Register jiffies clocksource before usage
WenTao Liang <vulab@iscas.ac.cn>
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
Jann Horn <jannh@google.com>
proc: protect ptrace_may_access() with exec_update_lock (part 1)
Yuho Choi <dbgh9129@gmail.com>
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
Tianxiang Chen <nanmu@xiaomi.com>
cpufreq: Fix hotplug-suspend race during reboot
Steven Rostedt <rostedt@goodmis.org>
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
Fushuai Wang <wangfushuai@baidu.com>
cpufreq: intel_pstate: Sync policy->cur during CPU offline
Zide Chen <zide.chen@intel.com>
perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
Jann Horn <jannh@google.com>
proc: protect ptrace_may_access() with exec_update_lock (FD links)
John Hubbard <jhubbard@nvidia.com>
libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()
Guangshuo Li <lgs201920130244@gmail.com>
firmware_loader: fix device reference leak in firmware_upload_register()
Guangshuo Li <lgs201920130244@gmail.com>
cpufreq: qcom-cpufreq-hw: Fix possible double free
Abdun Nihaal <nihaal@cse.iitm.ac.in>
OPP: of: Fix potential memory leak in opp_parse_supplies()
Baokun Li <libaokun@linux.alibaba.com>
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
ChenXiaoSong <chenxiaosong@kylinos.cn>
smb/server: do not require delete access for non-replacing links
Norbert Manthey <nmanthey@amazon.de>
smb: client: mask server-provided mode to 07777 in modefromsid
Xu Rao <raoxu@uniontech.com>
smb: client: fix atime clamp check in read completion
Zihan Xi <xizh2024@lzu.edu.cn>
smb: client: harden POSIX SID length parsing
Zihan Xi <xizh2024@lzu.edu.cn>
smb: client: use unaligned reads in parse_posix_ctxt()
Haoxiang Li <haoxiang_li2024@163.com>
smb: client: Fix next buffer leak in receive_encrypted_standard()
Henrique Carvalho <henrique.carvalho@suse.com>
smb: client: fix double-free in SMB2_close() replay
Henrique Carvalho <henrique.carvalho@suse.com>
smb: client: fix double-free in SMB2_open() replay
Zhao Zhang <zzhan461@ucr.edu>
smb: client: fix double-free in SMB2_flush() replay
Henrique Carvalho <henrique.carvalho@suse.com>
smb: client: fix change notify replay double-free
Henrique Carvalho <henrique.carvalho@suse.com>
smb: client: fix double-free in SMB2_ioctl() replay
Henrique Carvalho <henrique.carvalho@suse.com>
smb: client: fix query_info() replay double-free
Henrique Carvalho <henrique.carvalho@suse.com>
smb: client: fix query directory replay double-free
Ralph Boehme <slow@samba.org>
smb/client: fix chown/chgrp with SMB3 POSIX Extensions
Haofeng Li <lihaofeng@kylinos.cn>
ksmbd: validate NTLMv2 response before updating session key
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: track the connection owning a byte-range lock
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: use opener credentials for ADS I/O
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: use opener credentials for delete-on-close
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: run set info with opener credentials
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: require source read access for duplicate extents
Davide Ornaghi <d.ornaghi97@gmail.com>
ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: serialize QUERY_DIRECTORY requests per file
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: prevent path traversal bypass by restricting caseless retry
Dan Carpenter <error27@gmail.com>
smb/client: Fix error code in smb2_aead_req_alloc()
Michael Bommarito <michael.bommarito@gmail.com>
smb: client: resolve SWN tcon from live registrations
Junrui Luo <moonafterrain@outlook.com>
coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
Muhammad Bilal <meatuni001@gmail.com>
Bluetooth: L2CAP: validate option length before reading conf opt value
Runyu Xiao <runyu.xiao@seu.edu.cn>
Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
Muhammad Bilal <meatuni001@gmail.com>
Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
Pauli Virtanen <pav@iki.fi>
Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
Siwei Zhang <oss@fourdim.xyz>
Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
Yousef Alhouseen <alhouseenyousef@gmail.com>
Bluetooth: fix UAF in bt_accept_dequeue()
Maoyi Xie <maoyixie.tju@gmail.com>
Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
Yousef Alhouseen <alhouseenyousef@gmail.com>
Bluetooth: bnep: pin L2CAP connection during netdev registration
Sergey Senozhatsky <senozhatsky@chromium.org>
Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: flowtable: IPIP tunnel hardware offload is not yet support
Adrian Bente <adibente@gmail.com>
netfilter: flowtable: fix offloaded ct timeout never being extended
Xiang Mei <xmei5@asu.edu>
netfilter: ebtables: terminate table name before find_table_lock()
Florian Westphal <fw@strlen.de>
netfilter: ebtables: module names must be null-terminated
Florian Westphal <fw@strlen.de>
netfilter: ebtables: zero chainstack array
Florian Westphal <fw@strlen.de>
netfilter: handle unreadable frags
Pratham Gupta <pratham36gupta@gmail.com>
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
Zijiang Huang <huangzjsmile@gmail.com>
mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup
Jose Fernandez (Anthropic) <jose.fernandez@linux.dev>
mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host
Qi Zheng <qi.zheng@linux.dev>
mm: shrinker: fix NULL pointer dereference in debugfs
Qi Zheng <qi.zheng@linux.dev>
mm: shrinker: fix shrinker_info teardown race with expansion
Shakeel Butt <shakeel.butt@linux.dev>
mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
Andrei Kuchynski <akuchynski@chromium.org>
mfd: cros_ec: Delay dev_set_drvdata() until probe success
Xiaolei Wang <xiaolei.wang@windriver.com>
media: nxp: imx8-isi: Fix use-after-free on remove
Wyatt Feng <bronzed_45_vested@icloud.com>
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
Yuyang Huang <yuyanghuang@google.com>
ipv4: igmp: remove multicast group from hash table on device destruction
Breno Leitao <leitao@debian.org>
netpoll: fix a use-after-free on shutdown path
Michael Wigham <michael@wigham.net>
io_uring/rw: preserve partial result for iopoll
Runyu Xiao <runyu.xiao@seu.edu.cn>
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
Vasileios Almpanis <vasilisalmpanis@gmail.com>
io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
HyeongJun An <sammiee5311@gmail.com>
HID: logitech-dj: Fix maxfield check in DJ short report validation
Runyu Xiao <runyu.xiao@seu.edu.cn>
gpio: sch: use raw_spinlock_t in the irq startup path
Runyu Xiao <runyu.xiao@seu.edu.cn>
gpio: eic-sprd: use raw_spinlock_t in the irq startup path
Koichiro Den <den@valinux.co.jp>
NTB: epf: Avoid calling pci_irq_vector() from hardirq context
Valeriy Yashnikov <yashnikov.valeriy@gmail.com>
ntfs: avoid calling post_write_mst_fixup() for invalid index_block
Yunpeng Tian <shionthanatos@gmail.com>
fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
Thomas Gleixner <tglx@kernel.org>
debugobjects: Plug race against a concurrent OOM disable
Runyu Xiao <runyu.xiao@seu.edu.cn>
coresight: etb10: restore atomic_t for shared reading state
Samuel Page <sam@bynar.io>
Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
Marco Elver <elver@google.com>
Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
Chi Wang <wangchi@kylinos.cn>
audit: Fix data races of skb_queue_len() readers on audit_queue
Zijing Yin <yzjaurora@gmail.com>
net: af_key: initialize alg_key_len for IPComp states
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
Michael Bommarito <michael.bommarito@gmail.com>
crypto: krb5 - filter out async aead implementations at alloc
Dawei Feng <dawei.feng@seu.edu.cn>
crypto: amlogic - avoid double cleanup in meson_crypto_probe()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB write in HT_caps_handler()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
Christopher Mackle <christophermackle01@gmail.com>
staging: rtl8723bs: don't drop short TX frames in _rtw_pktfile_read()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: media: ipu7: fix double-free and use-after-free in error paths
Arnd Bergmann <arnd@arndb.de>
staging: media: atomisp: reduce load_primary_binaries() stack usage
Ricardo Ribalda <ribalda@chromium.org>
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
Hao-Qun Huang <alvinhuang0603@gmail.com>
staging: vme_user: fix location monitor leak in tsi148 bridge
Hao-Qun Huang <alvinhuang0603@gmail.com>
staging: vme_user: fix location monitor leak in fake bridge
Shoichiro Miyamoto <shoichiro.miyamoto@gmail.com>
smb: client: restrict implied bcc[0] exemption to responses without data area
Michael Tautschnig <tautschn@amazon.com>
staging: vme_user: bound slave read/write to the kern_buf size
Samuel Page <sam@bynar.io>
tipc: fix out-of-bounds read in broadcast Gap ACK blocks
Yuanhe Shu <xiangzao@linux.alibaba.com>
tracing: Fix NULL pointer dereference in func_set_flag()
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
6lowpan: fix NHC entry use-after-free on error path
Cen Zhang <zzzccc427@gmail.com>
usb: misc: usbio: fix disconnect UAF in client teardown
Runyu Xiao <runyu.xiao@seu.edu.cn>
usb: dwc3: run gadget disconnect from sleepable suspend context
Alan Stern <stern@rowland.harvard.edu>
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
Michael Bommarito <michael.bommarito@gmail.com>
hwrng: virtio: clamp device-reported used.len at copy_data()
Johan Hovold <johan@kernel.org>
virtio-mmio: fix device release warning on module unload
Ammar Faizi <ammarfaizi2@openresty.com>
virtio_pci: fix vq info pointer lookup via wrong index
Xiang Mei <xmei5@asu.edu>
netfilter: ipset: fix race between dump and ip_set_list resize
SeongJae Park <sj@kernel.org>
mm/damon/ops-common: handle extreme intervals in damon_hot_score()
Michael Bommarito <michael.bommarito@gmail.com>
tcp: restore RCU grace period in tcp_ao_destroy_sock
Marco Nenciarini <mnencia@kcore.it>
PCI/IOV: Skip VF Resizable BAR restore on read error
Marco Nenciarini <mnencia@kcore.it>
PCI: Skip Resizable BAR restore on read error
Yadu M G <yadu.mg@oss.qualcomm.com>
PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM hosts
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: mediatek: Fix IRQ domain leak when port fails to enable
Richard Zhu <hongxing.zhu@nxp.com>
PCI: imx6: Assert ref_clk_en after reference clock stabilizes on i.MX95
Richard Zhu <hongxing.zhu@nxp.com>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
Richard Zhu <hongxing.zhu@nxp.com>
PCI: imx6: Configure REF_USE_PAD before PHY reset for i.MX95
Ratheesh Kannoth <rkannoth@marvell.com>
PCI: host-common: Request bus reassignment when not probe-only
Maciej W. Rozycki <macro@orcam.me.uk>
PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
Mahesh Vaidya <mahesh.vaidya@altera.com>
PCI: altera: Fix resource leaks on probe failure
Mahesh Vaidya <mahesh.vaidya@altera.com>
PCI: altera: Do not dispose parent IRQ mapping
Ziyao Li <liziyao@uniontech.com>
PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series
Han Gao <gaohan@iscas.ac.cn>
riscv: dts: sophgo: Add dma-coherent to SG2042 PCIe controllers
Myeonghun Pak <mhun512@gmail.com>
usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
Xu Rao <raoxu@uniontech.com>
xhci: sideband: fix ring sg table pages leak
胡连勤 <hulianqin@vivo.com>
usb: xhci: Fix sleep in atomic context in xhci_free_streams()
Alice Ryhl <aliceryhl@google.com>
rust_binder: clear freeze listener on node removal
Keshav Verma <iganschel@gmail.com>
rust_binder: synchronize Rust Binder stats with freeze commands
Keshav Verma <iganschel@gmail.com>
rust_binder: reject context manager self-transaction
Alice Ryhl <aliceryhl@google.com>
rust_binder: fix BINDER_GET_EXTENDED_ERROR
Hyunwoo Kim <imv4bel@gmail.com>
rust_binder: use a u64 stride when cleaning up the offsets array
Carlos Llamas <cmllamas@google.com>
binder: fix UAF in binder_free_transaction()
Carlos Llamas <cmllamas@google.com>
binder: fix UAF in binder_thread_release()
Johan Hovold <johan@kernel.org>
Bluetooth: btusb: fix wakeup source leak on probe failure
Johan Hovold <johan@kernel.org>
Bluetooth: btusb: fix use-after-free on marvell probe failure
Johan Hovold <johan@kernel.org>
Bluetooth: btusb: fix use-after-free on registration failure
Zenm Chen <zenmchen@gmail.com>
Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
Alex Williamson <alex.williamson@nvidia.com>
vfio/mlx5: Fix racy bitfields and tighten struct layout
Alex Williamson <alex.williamson@nvidia.com>
vfio: Remove device debugfs before releasing devres
Junrui Luo <moonafterrain@outlook.com>
vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
Alex Williamson <alex.williamson@nvidia.com>
vfio/pci: Fix racy bitfields and tighten struct layout
Alex Williamson <alex.williamson@nvidia.com>
vfio/pci: Release the VGA arbiter client on register_device() failure
Alex Williamson <alex.williamson@nvidia.com>
vfio/pci: Latch disable_idle_d3 per device
Raghavendra Rao Ananta <rananta@google.com>
vfio/pci: Use a private flag to prevent power state change with VFs
Reinette Chatre <reinette.chatre@intel.com>
x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Roll back quirk control caches on write errors
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
Darvell Long <contact@darvell.me>
ALSA: usb-audio: avoid kobject path lookup in DualSense match
Gordon Chen <chengordon326@gmail.com>
ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer Flow 8
WenTao Liang <vulab@iscas.ac.cn>
ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission
HyeongJun An <sammiee5311@gmail.com>
ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: ice1712: check snd_ctl_new1() return value
Aaron Erhardt <aer@tuxedocomputers.com>
ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW
Huacai Chen <chenhuacai@kernel.org>
ALSA: hda/hdmi: Use 'AC_PINSENSE_ELDV' to detect pinsense for Loongson
Cameron Graham <cam.graham@gmail.com>
ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800 G5 Mini
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: hda/cs35l41: Fix firmware load work teardown
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: gus: check snd_ctl_new1() return value
Maoyi Xie <maoyixie.tju@gmail.com>
ALSA: firewire: isight: bound the sample count to the packet payload
Geoffrey D. Bennett <g@b4.vu>
ALSA: FCP: Add Focusrite ISA C8X support
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: es1938: check snd_ctl_new1() return value
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: compress: Fix task creation error unwind
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: cmipci: check snd_ctl_new1() return value
Maoyi Xie <maoyixie.tju@gmail.com>
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: aoa: check snd_ctl_new1() return value
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: ymfpci: check snd_ctl_new1() return value
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: virtio: Validate control metadata from the device
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: virtio: Add missing 384 kHz PCM rate mapping
HyeongJun An <sammiee5311@gmail.com>
ALSA: usx2y: us144mkii: fix work UAF on disconnect
Stepan Ionichev <sozdayvek@gmail.com>
iio: temperature: tmp006: use devm_iio_trigger_register
Liviu Stan <liviu.stan@analog.com>
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
Liviu Stan <liviu.stan@analog.com>
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
Pengpeng Hou <pengpeng@iscas.ac.cn>
iio: temperature: Build mlx90635 with CONFIG_MLX90635
Stepan Ionichev <sozdayvek@gmail.com>
iio: resolver: ad2s1210: notify trigger and clear state on fault read error
Stepan Ionichev <sozdayvek@gmail.com>
iio: proximity: vl53l0x: notify trigger and clear IRQ on error paths
Biren Pandya <birenpandya@gmail.com>
iio: pressure: mpl115: fix runtime PM leak on read error
David Carlier <devnexen@gmail.com>
iio: pressure: bmp280: zero-init bmp580 trigger handler buffer
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
Javier Carrasco <javier.carrasco.cruz@gmail.com>
iio: light: veml6030: fix channel type when pushing events
Stepan Ionichev <sozdayvek@gmail.com>
iio: light: tsl2591: return actual error from probe IRQ failure
Joshua Crofts <joshua.crofts1@gmail.com>
iio: light: opt3001: fix missing state reset on timeout
Biren Pandya <birenpandya@gmail.com>
iio: light: gp2ap002: fix runtime PM leak on read error
Alexander A. Klimov <grandmaster@al2klimov.de>
iio: light: al3320a: read both ALS ADC registers again
Joshua Crofts <joshua.crofts1@gmail.com>
iio: light: al3320a: add missing REGMAP_I2C to Kconfig
Alexander A. Klimov <grandmaster@al2klimov.de>
iio: light: al3010: read both ALS ADC registers again
Vidhu Sarwal <vidhu.linux@gmail.com>
iio: light: al3010: fix incorrect scale for the highest gain range
Joshua Crofts <joshua.crofts1@gmail.com>
iio: light: al3010: add missing REGMAP_I2C to Kconfig
Joshua Crofts <joshua.crofts1@gmail.com>
iio: light: al3000a: add missing REGMAP_I2C to Kconfig
Andreas Kempe <andreas.kempe@actia.se>
iio: imu: st_lsm6dsx: deselect shub page before reading whoami
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: fix timestamp clock period by using lower value
Runyu Xiao <runyu.xiao@seu.edu.cn>
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
Runyu Xiao <runyu.xiao@seu.edu.cn>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
Stepan Ionichev <sozdayvek@gmail.com>
iio: gyro: bmg160: wait full startup time after mode change at probe
Stepan Ionichev <sozdayvek@gmail.com>
iio: gyro: bmg160: bail out when bandwidth/filter is not in table
Lars-Peter Clausen <lars@metafoo.de>
iio: event: Fix event FIFO reset race
Dan Carpenter <error27@gmail.com>
iio: dac: ad3552r-hs: fix uninitialized data ni ad3552r_hs_write_data_source()
Dan Carpenter <error27@gmail.com>
iio: core: fix uninitialized data in debugfs
Herman van Hazendonk <github.com@herrie.org>
iio: common: st_sensors: honour channel endianness in read_axis_data
Maxwell Doose <m32285159@gmail.com>
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
Felix Gu <ustc.gu@gmail.com>
iio: buffer: hw-consumer: free scan_mask on buffer release
Dan Carpenter <error27@gmail.com>
iio: backend: fix uninitialized data in debugfs
Pengpeng Hou <pengpeng@iscas.ac.cn>
iio: adc: ti-ads124s08: Return reset GPIO lookup errors
Guangshuo Li <lgs201920130244@gmail.com>
iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
Maxwell Doose <m32285159@gmail.com>
iio: adc: spear: Initialize completion before requesting IRQ
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for()
Maxwell Doose <m32285159@gmail.com>
iio: adc: lpc32xx: Initialize completion before requesting IRQ
Radu Sabau <radu.sabau@analog.com>
iio: adc: ad_sigma_delta: fix CS held asserted and state leaks
Radu Sabau <radu.sabau@analog.com>
iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices
Joshua Crofts <joshua.crofts1@gmail.com>
iio: adc: ad7779: add missing 'select IIO_TRIGGERED_BUFFER' to Kconfig
Jonathan Cameron <jic23@kernel.org>
iio: adc: ad7768-1: Select GPIOLIB
Samuel Moelius <samuel.moelius@trailofbits.com>
iio: adc: ad7380: select REGMAP
Arnd Bergmann <arnd@arndb.de>
iio: adc: ad4062: add GPIOLIB dependency
Biren Pandya <birenpandya@gmail.com>
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
Bryam Vargas <hexlabsecurity@proton.me>
iio: accel: bmc150: clamp the device-reported FIFO frame count
Griffin Kroah-Hartman <griffin@kroah.com>
usb: gadget: function: rndis: add length check for header
Griffin Kroah-Hartman <griffin@kroah.com>
usb: gadget: function: rndis: add length check to response query
Po-Hao Huang <phhuang@realtek.com>
wifi: rtw89: correct drop logic for malformed AMPDU frames
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
bpf: Prefer dirty packs for eBPF allocations
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
bpf: Prefer packs that won't trigger an IBPB flush on allocation
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
bpf: Skip redundant IBPB in pack allocator
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
bpf: Restrict JIT predictor flush to cBPF
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
x86/bugs: Enable IBPB flush on BPF JIT allocation
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
bpf: Support for hardening against JIT spraying
Taeyang Lee <0wn@theori.io>
perf/core: Detach event groups during remove_on_exec
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock""
Alice Ryhl <aliceryhl@google.com>
rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER
Gary Guo <gary@garyguo.net>
rust: doctest: fix incorrect pattern in replacement
Haoze Xie <royenheart@gmail.com>
rust: block: fix GenDisk cleanup paths
Danilo Krummrich <dakr@kernel.org>
rust: pci: use 'static lifetime for PCI BAR resource names
Alice Ryhl <aliceryhl@google.com>
rust: kasan: KASAN+RUST requires clang
Miguel Ojeda <ojeda@kernel.org>
rust: cpufreq: clean new `clippy::map_or_identity` lint for Rust 1.98.0
Huacai Chen <chenhuacai@kernel.org>
LoongArch: Add PIO for early access before ACPI PCI root register
HyeongJun An <sammiee5311@gmail.com>
platform/x86: intel-hid: Protect ACPI notify handler against recursion
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: NFIT: core: Fix possible NULL pointer dereference
Jeremy Linton <jeremy.linton@arm.com>
ACPI: CPPC: Suppress UBSAN warning caused by field misuse
Carlos López <clopez@suse.de>
KVM: x86: Unconditionally recompute CR8 intercept on PPR update
Sean Christopherson <seanjc@google.com>
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
Sean Christopherson <seanjc@google.com>
KVM: x86: Move update_cr8_intercept() to lapic.c
Florian Fainelli <florian.fainelli@broadcom.com>
perf trace beauty fcntl: Fix build with older kernel headers
Randy Dunlap <rdunlap@infradead.org>
slab: recognize @GFP parameter as optional in kernel-doc
Pedro Falcato <pfalcato@suse.de>
mm/khugepaged: write all dirty file folios when collapsing
Xingquan Liu <b1n@b1n.io>
net/sched: dualpi2: fix GSO backlog accounting
Kiryl Shutsemau <kas@kernel.org>
userfaultfd: gate must_wait writability check on pte_present()
Miguel Ojeda <ojeda@kernel.org>
rust: str: clean unused import for Rust >= 1.98
Miguel Ojeda <ojeda@kernel.org>
rust: str: use the "kernel vertical" imports style
-------------
Diffstat:
Documentation/crypto/userspace-if.rst | 31 +-
Documentation/sound/alsa-configuration.rst | 6 +
MAINTAINERS | 1 -
Makefile | 7 +-
arch/arm64/include/asm/kvm_hyp.h | 1 +
arch/arm64/kernel/entry-fpsimd.S | 8 +-
arch/arm64/kvm/arm.c | 2 +
arch/arm64/kvm/hyp/nvhe/hyp-main.c | 12 +
arch/arm64/kvm/nested.c | 40 +-
arch/arm64/net/bpf_jit_comp.c | 4 +-
arch/loongarch/configs/loongson32_defconfig | 1 -
arch/loongarch/configs/loongson64_defconfig | 1 -
arch/loongarch/include/asm/acpi.h | 2 +
arch/loongarch/kernel/acpi.c | 28 +
arch/loongarch/kernel/setup.c | 2 +
arch/loongarch/kvm/intc/eiointc.c | 6 +
arch/loongarch/kvm/intc/ipi.c | 2 +
arch/loongarch/kvm/intc/pch_pic.c | 2 +
arch/loongarch/net/bpf_jit.c | 5 +-
arch/loongarch/pci/acpi.c | 2 +
arch/powerpc/net/bpf_jit_comp.c | 4 +-
arch/riscv/boot/dts/sophgo/sg2042.dtsi | 4 +
arch/riscv/include/asm/pgtable.h | 10 +
arch/riscv/kernel/entry.S | 7 +-
arch/riscv/net/bpf_jit_comp64.c | 2 +-
arch/riscv/net/bpf_jit_core.c | 3 +-
arch/s390/Kconfig | 1 -
arch/s390/include/asm/asm-extable.h | 4 -
arch/s390/include/asm/word-at-a-time.h | 22 -
arch/s390/mm/extable.c | 18 -
arch/x86/events/intel/uncore_snb.c | 7 -
arch/x86/include/asm/nospec-branch.h | 4 +
arch/x86/kernel/cpu/bugs.c | 50 +-
arch/x86/kernel/cpu/resctrl/monitor.c | 5 +
arch/x86/kvm/lapic.c | 49 +-
arch/x86/kvm/lapic.h | 3 +-
arch/x86/kvm/svm/avic.c | 47 +-
arch/x86/kvm/svm/sev.c | 10 +-
arch/x86/kvm/svm/svm.c | 3 +
arch/x86/kvm/vmx/pmu_intel.c | 6 +-
arch/x86/kvm/vmx/tdx.c | 16 +-
arch/x86/kvm/vmx/vmx.c | 44 +-
arch/x86/kvm/x86.c | 38 +-
arch/x86/mm/init_64.c | 40 +-
arch/x86/net/bpf_jit_comp.c | 5 +-
block/bdev.c | 8 +-
block/partitions/aix.c | 9 +
block/partitions/of.c | 5 +-
crypto/af_alg.c | 69 +--
crypto/algif_aead.c | 8 +-
crypto/asymmetric_keys/x509_loader.c | 2 +-
crypto/chacha20poly1305.c | 11 +-
crypto/df_sp80090a.c | 7 +-
crypto/drbg.c | 16 +-
crypto/ecc.c | 31 +-
crypto/krb5/krb5_api.c | 2 +-
crypto/pcrypt.c | 4 +
drivers/acpi/cppc_acpi.c | 11 +-
drivers/acpi/nfit/core.c | 21 +-
drivers/android/binder.c | 19 +-
drivers/android/binder/allocation.rs | 5 +-
drivers/android/binder/error.rs | 13 +-
drivers/android/binder/freeze.rs | 11 +-
drivers/android/binder/node.rs | 10 +-
drivers/android/binder/process.rs | 18 +-
drivers/android/binder/rust_binder_events.c | 7 +-
drivers/android/binder/stats.rs | 4 +-
drivers/android/binder/thread.rs | 65 ++-
drivers/android/binder/transaction.rs | 15 +-
drivers/base/firmware_loader/sysfs_upload.c | 8 +-
drivers/bluetooth/btmtksdio.c | 2 +-
drivers/bluetooth/btnxpuart.c | 6 +
drivers/bluetooth/btusb.c | 39 +-
drivers/bluetooth/hci_ldisc.c | 14 +-
drivers/char/hw_random/jh7110-trng.c | 13 +-
drivers/char/hw_random/virtio-rng.c | 23 +-
drivers/clocksource/timer-tegra186.c | 3 +-
drivers/cpufreq/cpufreq.c | 2 +
drivers/cpufreq/intel_pstate.c | 6 +-
drivers/cpufreq/pcc-cpufreq.c | 2 +
drivers/cpufreq/qcom-cpufreq-hw.c | 1 -
drivers/crypto/Kconfig | 2 -
drivers/crypto/Makefile | 1 -
drivers/crypto/amcc/crypto4xx_core.c | 88 ----
drivers/crypto/amcc/crypto4xx_core.h | 4 -
drivers/crypto/amcc/crypto4xx_reg_def.h | 11 -
drivers/crypto/amlogic/amlogic-gxl-core.c | 2 +-
drivers/crypto/atmel-sha204a.c | 27 +-
drivers/crypto/caam/caamalg.c | 12 +-
drivers/crypto/caam/caamalg_qi.c | 12 +-
drivers/crypto/caam/caamalg_qi2.c | 12 +-
drivers/crypto/caam/caamhash.c | 4 +-
drivers/crypto/caam/key_gen.c | 4 +-
drivers/crypto/ccp/sev-dev.c | 70 +--
drivers/crypto/hisilicon/Kconfig | 1 -
drivers/crypto/hisilicon/trng/trng.c | 296 +----------
drivers/crypto/intel/qat/qat_420xx/adf_drv.c | 2 -
drivers/crypto/intel/qat/qat_4xxx/adf_drv.c | 2 -
drivers/crypto/intel/qat/qat_6xxx/adf_drv.c | 2 -
drivers/crypto/intel/qat/qat_c3xxx/adf_drv.c | 1 -
drivers/crypto/intel/qat/qat_c3xxxvf/adf_drv.c | 1 -
drivers/crypto/intel/qat/qat_c62x/adf_drv.c | 1 -
drivers/crypto/intel/qat/qat_c62xvf/adf_drv.c | 1 -
.../intel/qat/qat_common/adf_accel_devices.h | 2 +
drivers/crypto/intel/qat/qat_common/adf_aer.c | 109 ++--
.../crypto/intel/qat/qat_common/adf_common_drv.h | 3 +
drivers/crypto/intel/qat/qat_common/adf_init.c | 18 +
drivers/crypto/intel/qat/qat_common/adf_isr.c | 39 ++
drivers/crypto/intel/qat/qat_common/adf_sriov.c | 32 +-
.../crypto/intel/qat/qat_common/qat_asym_algs.c | 10 +-
drivers/crypto/intel/qat/qat_dh895xcc/adf_drv.c | 1 -
drivers/crypto/intel/qat/qat_dh895xccvf/adf_drv.c | 1 -
drivers/crypto/loongson/Kconfig | 5 -
drivers/crypto/loongson/Makefile | 1 -
drivers/crypto/loongson/loongson-rng.c | 209 --------
drivers/crypto/talitos.c | 561 +++++++++++----------
drivers/crypto/talitos.h | 12 +
drivers/crypto/tegra/tegra-se-main.c | 2 +-
drivers/dma-buf/udmabuf.c | 9 +-
drivers/edac/i10nm_base.c | 14 +-
drivers/fpga/dfl-afu-main.c | 3 +
drivers/gpio/gpio-eic-sprd.c | 8 +-
drivers/gpio/gpio-sch.c | 32 +-
drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.c | 31 +-
drivers/hid/hid-appleir.c | 45 +-
drivers/hid/hid-goodix-spi.c | 3 +
drivers/hid/hid-lenovo-go.c | 9 +
drivers/hid/hid-letsketch.c | 36 +-
drivers/hid/hid-lg-g15.c | 16 +
drivers/hid/hid-logitech-dj.c | 9 +-
drivers/hid/hid-multitouch.c | 32 +-
drivers/hid/hid-sensor-hub.c | 77 ++-
drivers/hid/uhid.c | 8 +-
drivers/hid/usbhid/hid-pidff.c | 2 +-
drivers/hid/wacom_sys.c | 20 +-
drivers/hwtracing/coresight/coresight-etb10.c | 6 +-
drivers/hwtracing/coresight/ultrasoc-smb.c | 1 +
drivers/i2c/busses/i2c-davinci.c | 4 +-
drivers/i2c/busses/i2c-i801.c | 2 +-
drivers/i2c/busses/i2c-imx-lpi2c.c | 15 +-
drivers/i2c/busses/i2c-mpc.c | 2 +-
drivers/i2c/busses/i2c-stm32f7.c | 9 +-
drivers/i2c/i2c-core-base.c | 81 +--
drivers/iio/accel/bmc150-accel-core.c | 2 +
drivers/iio/accel/kxsd9.c | 5 +-
drivers/iio/adc/Kconfig | 4 +
drivers/iio/adc/ad_sigma_delta.c | 39 +-
drivers/iio/adc/lpc32xx_adc.c | 4 +-
drivers/iio/adc/nxp-sar-adc.c | 4 +-
drivers/iio/adc/spear_adc.c | 3 +-
drivers/iio/adc/ti-ads1119.c | 6 +-
drivers/iio/adc/ti-ads124s08.c | 3 +-
drivers/iio/buffer/industrialio-hw-consumer.c | 2 +
drivers/iio/chemical/scd30_core.c | 19 +-
drivers/iio/common/st_sensors/st_sensors_core.c | 23 +-
drivers/iio/dac/ad3552r-hs.c | 2 +-
drivers/iio/gyro/bmg160_core.c | 16 +-
drivers/iio/imu/adis_trigger.c | 2 +-
drivers/iio/imu/bmi160/bmi160_core.c | 3 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 4 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 9 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 1 +
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 4 +-
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 +-
drivers/iio/industrialio-backend.c | 2 +-
drivers/iio/industrialio-core.c | 2 +-
drivers/iio/industrialio-event.c | 5 +-
drivers/iio/light/Kconfig | 3 +
drivers/iio/light/al3010.c | 10 +-
drivers/iio/light/al3320a.c | 8 +-
drivers/iio/light/gp2ap002.c | 2 +-
drivers/iio/light/opt3001.c | 6 +-
drivers/iio/light/tsl2591.c | 6 +-
drivers/iio/light/veml6030.c | 8 +-
drivers/iio/magnetometer/ak8975.c | 1 +
drivers/iio/pressure/bmp280-core.c | 2 +-
drivers/iio/pressure/mpl115.c | 4 +-
drivers/iio/proximity/vl53l0x-i2c.c | 7 +-
drivers/iio/resolver/ad2s1210.c | 2 +-
drivers/iio/temperature/Makefile | 2 +-
drivers/iio/temperature/ltc2983.c | 5 +-
drivers/iio/temperature/tmp006.c | 2 +-
drivers/infiniband/core/addr.c | 2 +-
drivers/infiniband/sw/siw/siw_qp_rx.c | 9 +
drivers/infiniband/ulp/rtrs/rtrs-srv.c | 5 +-
drivers/input/joystick/iforce/iforce-packets.c | 18 +-
drivers/input/joystick/maplecontrol.c | 3 +-
drivers/input/keyboard/maple_keyb.c | 4 +-
drivers/input/mouse/elan_i2c_core.c | 36 +-
drivers/input/mouse/maplemouse.c | 9 +-
drivers/input/rmi4/rmi_bus.c | 4 +-
drivers/input/rmi4/rmi_f30.c | 2 +-
drivers/input/rmi4/rmi_f3a.c | 2 +-
drivers/input/serio/gscps2.c | 1 +
drivers/input/touchscreen/ads7846.c | 5 +-
drivers/input/touchscreen/goodix.c | 3 +-
drivers/input/touchscreen/mms114.c | 26 +-
drivers/input/touchscreen/touchwin.c | 15 +-
drivers/iommu/amd/iommu.c | 3 +-
drivers/iommu/intel/iommu.h | 11 +
drivers/iommu/intel/svm.c | 12 +-
drivers/iommu/iommufd/driver.c | 13 +-
drivers/iommu/iommufd/eventq.c | 36 +-
drivers/iommu/iommufd/hw_pagetable.c | 11 +-
drivers/iommu/iommufd/iommufd_private.h | 2 +-
drivers/md/dm-ioctl.c | 5 +-
.../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 3 +-
.../media/platform/nxp/imx8-isi/imx8-isi-core.c | 2 +-
drivers/mfd/cros_ec_dev.c | 3 +-
drivers/net/usb/kalmia.c | 8 +
drivers/net/wireless/mediatek/mt76/mt7921/main.c | 3 +
drivers/net/wireless/mediatek/mt76/mt7925/main.c | 3 +
drivers/net/wireless/realtek/rtw89/core.c | 3 +-
drivers/net/wireless/realtek/rtw89/mac80211.c | 3 +-
drivers/ntb/hw/epf/ntb_hw_epf.c | 14 +-
drivers/nvme/host/multipath.c | 6 +
drivers/nvme/target/discovery.c | 23 +-
drivers/nvme/target/fabrics-cmd-auth.c | 15 +-
drivers/nvme/target/rdma.c | 6 +-
drivers/opp/of.c | 3 +-
drivers/pci/controller/dwc/pci-imx6.c | 65 ++-
drivers/pci/controller/dwc/pcie-qcom.c | 6 +
drivers/pci/controller/pci-host-common.c | 4 +
drivers/pci/controller/pci-loongson.c | 36 ++
drivers/pci/controller/pcie-altera.c | 36 +-
drivers/pci/controller/pcie-mediatek.c | 65 ++-
drivers/pci/iov.c | 6 +
drivers/pci/quirks.c | 51 +-
drivers/pci/rebar.c | 6 +
drivers/perf/arm-cmn.c | 23 +-
drivers/platform/x86/intel/hid.c | 9 +
drivers/regulator/scmi-regulator.c | 4 +-
drivers/spi/spi-fsl-lpspi.c | 18 +-
drivers/staging/media/atomisp/pci/sh_css.c | 6 +-
drivers/staging/media/ipu3/ipu3-css-params.c | 8 +-
drivers/staging/media/ipu7/ipu7.c | 22 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 +
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 20 +-
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 23 +-
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 8 +
drivers/staging/rtl8723bs/os_dep/xmit_linux.c | 6 +-
drivers/staging/vme_user/vme_fake.c | 8 +
drivers/staging/vme_user/vme_tsi148.c | 8 +
drivers/staging/vme_user/vme_user.c | 22 +
drivers/tty/serial/8250/8250_mid.c | 13 +-
drivers/tty/vt/keyboard.c | 12 +-
drivers/usb/cdns3/cdnsp-mem.c | 2 +
drivers/usb/class/cdc-acm.c | 3 +
drivers/usb/common/ulpi.c | 23 +-
drivers/usb/core/quirks.c | 6 +
drivers/usb/dwc3/core.c | 4 +-
drivers/usb/dwc3/dwc3-meson-g12a.c | 14 +-
drivers/usb/dwc3/gadget.c | 43 +-
drivers/usb/fotg210/fotg210-hcd.c | 6 +-
drivers/usb/gadget/composite.c | 5 +-
drivers/usb/gadget/function/f_fs.c | 9 +-
drivers/usb/gadget/function/f_printer.c | 3 +-
drivers/usb/gadget/function/rndis.c | 20 +-
drivers/usb/gadget/udc/core.c | 29 +-
drivers/usb/host/ehci-sched.c | 11 +-
drivers/usb/host/sl811-hcd.c | 1 +
drivers/usb/host/xhci-sideband.c | 2 +
drivers/usb/host/xhci.c | 11 +-
drivers/usb/misc/chaoskey.c | 1 -
drivers/usb/misc/idmouse.c | 45 +-
drivers/usb/misc/iowarrior.c | 61 +--
drivers/usb/misc/ldusb.c | 38 +-
drivers/usb/misc/legousbtower.c | 37 +-
drivers/usb/misc/usbio.c | 8 +-
drivers/usb/misc/uss720.c | 5 +-
drivers/usb/mtu3/mtu3_gadget.c | 1 +
drivers/usb/serial/digi_acceleport.c | 43 +-
drivers/usb/serial/keyspan_pda.c | 2 +-
drivers/usb/serial/option.c | 16 +
drivers/usb/storage/ene_ub6250.c | 3 +-
drivers/usb/storage/usb.c | 2 +-
drivers/usb/typec/anx7411.c | 4 +-
drivers/usb/typec/class.c | 1 +
drivers/usb/typec/mux.c | 13 +-
drivers/usb/typec/mux/ps883x.c | 6 +-
drivers/usb/typec/tcpm/tcpci_rt1711h.c | 13 +-
drivers/usb/typec/tcpm/tcpm.c | 9 +-
drivers/usb/typec/ucsi/displayport.c | 7 +-
drivers/usb/typec/ucsi/ucsi.c | 20 +
drivers/usb/typec/ucsi/ucsi.h | 1 +
drivers/usb/typec/ucsi/ucsi_acpi.c | 10 +-
drivers/usb/typec/ucsi/ucsi_ccg.c | 2 +-
drivers/usb/usbip/vudc.h | 1 -
drivers/usb/usbip/vudc_dev.c | 4 +-
drivers/vfio/debugfs.c | 1 +
drivers/vfio/pci/mlx5/cmd.h | 15 +-
drivers/vfio/pci/vfio_pci_core.c | 37 +-
drivers/vfio/vfio_main.c | 11 +-
drivers/virtio/virtio_mmio.c | 26 +-
drivers/virtio/virtio_pci_common.c | 10 +-
drivers/watchdog/apple_wdt.c | 1 +
fs/btrfs/btrfs_inode.h | 2 +
fs/btrfs/direct-io.c | 60 ++-
fs/btrfs/extent-tree.c | 12 +-
fs/btrfs/file.c | 25 +-
fs/btrfs/inode.c | 67 ++-
fs/btrfs/ordered-data.c | 12 +
fs/btrfs/ordered-data.h | 2 +
fs/btrfs/reflink.c | 4 +-
fs/exfat/dir.c | 63 ++-
fs/exfat/exfat_fs.h | 5 +-
fs/exfat/namei.c | 89 +++-
fs/fs-writeback.c | 31 +-
fs/fuse/cuse.c | 4 +-
fs/fuse/dev.c | 66 ++-
fs/fuse/dev_uring.c | 93 ++--
fs/fuse/dev_uring_i.h | 10 +-
fs/fuse/dir.c | 36 +-
fs/fuse/fuse_dev_i.h | 1 +
fs/fuse/notify.c | 434 ++++++++++++++++
fs/fuse/readdir.c | 85 +++-
fs/hfs/bnode.c | 4 +-
fs/hfsplus/bnode.c | 2 +
fs/hfsplus/hfsplus_fs.h | 2 +-
fs/isofs/rock.c | 11 +
fs/libfs.c | 1 +
fs/nfs/dir.c | 2 +
fs/nilfs2/segment.c | 22 +
fs/ntfs/index.c | 5 +-
fs/ntfs3/fslog.c | 20 +-
fs/proc/array.c | 6 +
fs/proc/base.c | 162 +++---
fs/proc/fd.c | 25 +-
fs/proc/internal.h | 2 +-
fs/proc/namespaces.c | 12 +
fs/resctrl/monitor.c | 37 +-
fs/smb/client/cifs_swn.c | 316 ++++++++++--
fs/smb/client/cifsacl.c | 2 +-
fs/smb/client/file.c | 2 +-
fs/smb/client/inode.c | 3 +-
fs/smb/client/smb2misc.c | 52 +-
fs/smb/client/smb2ops.c | 18 +-
fs/smb/client/smb2pdu.c | 22 +-
fs/smb/client/trace.h | 2 +
fs/smb/server/auth.c | 20 +-
fs/smb/server/smb2pdu.c | 117 +++--
fs/smb/server/vfs.c | 20 +-
fs/smb/server/vfs_cache.c | 28 +-
fs/smb/server/vfs_cache.h | 3 +
fs/udf/balloc.c | 5 +-
fs/udf/super.c | 11 +-
fs/userfaultfd.c | 20 +
fs/xfs/libxfs/xfs_ag.c | 10 +-
fs/xfs/libxfs/xfs_ag.h | 2 +-
fs/xfs/libxfs/xfs_bmap_btree.h | 2 +-
fs/xfs/libxfs/xfs_defer.c | 2 +-
fs/xfs/libxfs/xfs_dquot_buf.c | 14 +-
fs/xfs/libxfs/xfs_exchmaps.c | 2 +-
fs/xfs/scrub/dirtree.c | 16 +-
fs/xfs/scrub/dqiterate.c | 2 +-
fs/xfs/scrub/inode_repair.c | 4 +-
fs/xfs/scrub/rgsuper.c | 14 +-
fs/xfs/scrub/rtbitmap.c | 2 +-
fs/xfs/scrub/rtrefcount.c | 2 +-
fs/xfs/scrub/rtrmap.c | 8 +-
fs/xfs/scrub/scrub.h | 6 +-
fs/xfs/scrub/xfarray.c | 3 +-
fs/xfs/xfs_dquot.c | 16 +-
fs/xfs/xfs_fsops.c | 2 +-
fs/xfs/xfs_iomap.c | 2 +-
fs/xfs/xfs_log_recover.c | 15 +-
fs/xfs/xfs_qm.c | 5 +-
fs/xfs/xfs_reflink.c | 36 ++
fs/xfs/xfs_rtalloc.c | 8 +-
include/asm-generic/rqspinlock.h | 14 +-
include/crypto/drbg.h | 18 +-
include/crypto/internal/drbg.h | 18 -
include/linux/bpf_lsm.h | 4 +
include/linux/damon.h | 8 +-
include/linux/filter.h | 15 +-
include/linux/fs.h | 5 +
include/linux/glob.h | 1 +
include/linux/hid-sensor-hub.h | 25 +
include/linux/kvm_host.h | 3 +-
include/linux/page_ext.h | 19 +-
include/linux/slab.h | 6 +-
include/linux/sunrpc/svc_rdma.h | 1 +
include/linux/vfio_pci_core.h | 15 +-
include/net/bluetooth/hci_core.h | 1 +
include/net/bluetooth/l2cap.h | 1 +
include/net/netfilter/nf_flow_table.h | 2 +
include/net/tcp_ao.h | 1 +
include/sound/hda_codec.h | 1 +
init/Kconfig | 1 +
io_uring/io-wq.c | 2 +-
io_uring/nop.c | 8 +-
io_uring/rw.c | 12 +-
kernel/audit.c | 21 +-
kernel/audit_fsnotify.c | 4 -
kernel/bpf/bpf_inode_storage.c | 9 +
kernel/bpf/btf.c | 9 +-
kernel/bpf/cgroup.c | 2 +-
kernel/bpf/core.c | 68 ++-
kernel/bpf/devmap.c | 7 +
kernel/bpf/dispatcher.c | 2 +-
kernel/bpf/lpm_trie.c | 8 +-
kernel/bpf/verifier.c | 15 +-
kernel/events/core.c | 19 +-
kernel/futex/requeue.c | 6 -
kernel/liveupdate/luo_session.c | 4 +
kernel/module/decompress.c | 2 +
kernel/sched/features.h | 8 +
kernel/time/jiffies.c | 11 +-
kernel/time/posix-cpu-timers.c | 1 +
kernel/time/timekeeping.c | 7 +-
kernel/trace/trace_events_filter.c | 6 +-
kernel/trace/trace_functions.c | 8 +-
lib/debugobjects.c | 17 +
lib/glob.c | 31 +-
lib/test_hmm.c | 4 +-
mm/damon/ops-common.c | 1 +
mm/filemap.c | 2 +-
mm/khugepaged.c | 41 +-
mm/madvise.c | 3 +-
mm/mincore.c | 3 +-
mm/mmap.c | 2 +-
mm/shrinker.c | 13 +-
mm/shrinker_debug.c | 14 +-
mm/slub.c | 18 +-
mm/swap_cgroup.c | 2 +
mm/swapfile.c | 1 +
net/6lowpan/nhc.c | 2 +-
net/bluetooth/6lowpan.c | 18 +-
net/bluetooth/af_bluetooth.c | 17 +-
net/bluetooth/bnep/core.c | 27 +-
net/bluetooth/hci_conn.c | 21 +-
net/bluetooth/hci_sync.c | 137 ++++-
net/bluetooth/iso.c | 13 +-
net/bluetooth/l2cap_core.c | 80 +--
net/bluetooth/l2cap_sock.c | 4 +-
net/bluetooth/mgmt.c | 3 +
net/bridge/netfilter/ebtables.c | 12 +-
net/core/netpoll.c | 9 +-
net/ipv4/igmp.c | 1 +
net/ipv4/sysctl_net_ipv4.c | 10 +-
net/ipv4/tcp_ao.c | 5 +-
net/ipv4/tcp_output.c | 4 +-
net/ipv6/netfilter/nf_conntrack_reasm.c | 2 +-
net/key/af_key.c | 1 +
net/netfilter/ipset/ip_set_core.c | 8 +-
net/netfilter/nf_conntrack_netlink.c | 2 +-
net/netfilter/nf_flow_table_core.c | 20 +-
net/netfilter/nf_flow_table_offload.c | 22 +-
net/netfilter/nfnetlink_log.c | 26 +-
net/netfilter/nfnetlink_queue.c | 16 +-
net/netfilter/xt_u32.c | 16 +-
net/sched/sch_dualpi2.c | 11 +-
net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 4 +-
net/sunrpc/xprtrdma/svc_rdma_rw.c | 229 +--------
net/sunrpc/xprtrdma/svc_rdma_sendto.c | 6 +-
net/sunrpc/xprtrdma/svc_rdma_transport.c | 30 +-
net/tipc/bcast.c | 22 +-
net/tipc/bcast.h | 2 +-
net/tipc/node.c | 15 +-
rust/kernel/block/mq/gen_disk.rs | 20 +-
rust/kernel/cpufreq.rs | 2 +-
rust/kernel/pci/io.rs | 6 +-
rust/kernel/str.rs | 23 +-
scripts/rustdoc_test_builder.rs | 16 +-
security/bpf/hooks.c | 3 +
security/landlock/domain.c | 9 +-
security/landlock/domain.h | 5 +-
security/landlock/net.c | 1 +
sound/aoa/fabrics/layout.c | 6 +
sound/core/compress_offload.c | 13 +-
sound/core/seq/seq_memory.c | 2 +-
sound/firewire/isight.c | 3 +-
sound/hda/codecs/hdmi/hdmi.c | 9 +-
sound/hda/codecs/realtek/alc269.c | 1 +
sound/hda/codecs/side-codecs/cs35l41_hda.c | 77 ++-
sound/hda/codecs/side-codecs/cs35l41_hda.h | 5 +
sound/hda/common/jack.c | 6 +
sound/isa/gus/gus_pcm.c | 2 +
sound/pci/cmipci.c | 6 +
sound/pci/es1938.c | 2 +
sound/pci/ice1712/aureon.c | 2 +
sound/pci/ice1712/ice1712.c | 8 +
sound/pci/ice1712/ice1724.c | 6 +
sound/pci/ymfpci/ymfpci_main.c | 6 +
sound/usb/caiaq/input.c | 2 +-
sound/usb/endpoint.c | 10 +-
sound/usb/mixer_quirks.c | 102 ++--
sound/usb/mixer_scarlett.c | 4 +-
sound/usb/mixer_us16x08.c | 127 +++--
sound/usb/quirks.c | 3 +
sound/usb/usbaudio.h | 8 +
sound/usb/usx2y/us144mkii.c | 17 +-
sound/usb/usx2y/us144mkii_capture.c | 2 +-
sound/virtio/virtio_kctl.c | 50 ++
sound/virtio/virtio_pcm.c | 3 +-
sound/virtio/virtio_pcm_ops.c | 3 +-
tools/mm/slabinfo.c | 6 +-
tools/perf/trace/beauty/fcntl.c | 16 +
tools/testing/selftests/landlock/audit.h | 140 +++--
tools/testing/selftests/landlock/audit_test.c | 6 +-
tools/testing/selftests/landlock/net_test.c | 62 +++
tools/testing/selftests/landlock/ptrace_test.c | 1 +
.../selftests/landlock/scoped_abstract_unix_test.c | 1 +
tools/testing/selftests/liveupdate/liveupdate.c | 42 ++
tools/testing/selftests/mm/droppable.c | 48 +-
tools/testing/selftests/mm/ksft_process_madv.sh | 2 +-
tools/testing/selftests/mm/pagemap_ioctl.c | 12 +-
tools/usb/usbip/libsrc/usbip_common.c | 2 +
tools/usb/usbip/libsrc/usbip_device_driver.c | 4 +
tools/usb/usbip/libsrc/vhci_driver.c | 1 +
virt/kvm/guest_memfd.c | 14 +-
virt/kvm/kvm_mm.h | 7 +-
512 files changed, 5927 insertions(+), 3401 deletions(-)
next reply other threads:[~2026-07-17 10:41 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-07-17 10:41 Greg Kroah-Hartman [this message]
2026-07-17 10:55 ` [PATCH 7.1 000/533] 7.1.4-rc2 review Brett A C Sheffield
2026-07-17 11:30 ` Ronald Warsow
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260717101912.682013354@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=achill@achill.org \
--cc=akpm@linux-foundation.org \
--cc=broonie@kernel.org \
--cc=conor@kernel.org \
--cc=f.fainelli@gmail.com \
--cc=hargar@microsoft.com \
--cc=jonathanh@nvidia.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux@roeck-us.net \
--cc=lkft-triage@lists.linaro.org \
--cc=patches@kernelci.org \
--cc=patches@lists.linux.dev \
--cc=pavel@nabladev.com \
--cc=rwarsow@gmx.de \
--cc=shuah@kernel.org \
--cc=sr@sladewatkins.com \
--cc=stable@vger.kernel.org \
--cc=sudipm.mukherjee@gmail.com \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.