From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org, akpm@linux-foundation.org,
torvalds@linux-foundation.org, stable@vger.kernel.org
Cc: lwn@lwn.net, jslaby@suse.cz,
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Subject: Linux 5.10.261
Date: Fri, 24 Jul 2026 17:05:31 +0200 [thread overview]
Message-ID: <2026072432-recess-fetal-2bf1@gregkh> (raw)
I'm announcing the release of the 5.10.261 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/pm/cpufreq.rst | 6
Documentation/crypto/userspace-if.rst | 31
Documentation/driver-api/pci/pci.rst | 3
Makefile | 2
arch/alpha/kernel/pci-sysfs.c | 13
arch/arm/boot/dts/am335x-sl50.dts | 4
arch/arm/mach-davinci/board-da850-evm.c | 12
arch/arm/mach-imx/cpu-imx31.c | 9
arch/arm/mach-imx/mm-imx3.c | 2
arch/arm64/boot/dts/qcom/sdm630.dtsi | 9
arch/arm64/kernel/hw_breakpoint.c | 9
arch/arm64/kvm/vgic/vgic-its.c | 15
arch/arm64/kvm/vgic/vgic.c | 11
arch/mips/dec/int-handler.S | 2
arch/mips/dec/prom/init.c | 6
arch/mips/dec/setup.c | 6
arch/mips/fw/lib/call_o32.S | 2
arch/mips/include/asm/dec/prom.h | 15
arch/mips/mm/init.c | 12
arch/mips/sgi-ip22/ip22-gio.c | 7
arch/powerpc/kexec/core_64.c | 4
arch/powerpc/perf/core-fsl-emb.c | 3
arch/powerpc/platforms/cell/spufs/file.c | 6
arch/powerpc/platforms/powernv/setup.c | 3
arch/riscv/kernel/stacktrace.c | 2
arch/sparc/kernel/led.c | 2
arch/x86/boot/compressed/acpi.c | 7
arch/x86/boot/early_serial_console.c | 11
arch/x86/events/amd/core.c | 6
arch/x86/kernel/cpu/mce/therm_throt.c | 7
arch/x86/kvm/vmx/vmx.c | 3
arch/x86/mm/numa_emulation.c | 17
arch/x86/platform/olpc/olpc-xo15-sci.c | 1
block/partitions/aix.c | 9
certs/common.c | 2
crypto/af_alg.c | 54
crypto/algif_skcipher.c | 49
crypto/asymmetric_keys/verify_pefile.c | 2
crypto/drbg.c | 4
crypto/ecc.c | 31
crypto/ecrdsa.c | 2
crypto/pcrypt.c | 4
crypto/rng.c | 11
drivers/acpi/acpi_ipmi.c | 2
drivers/acpi/nfit/core.c | 15
drivers/acpi/resource.c | 6
drivers/android/binder.c | 19
drivers/ata/pata_pxa.c | 1
drivers/ata/sata_gemini.c | 2
drivers/base/firmware_loader/main.c | 3
drivers/base/power/main.c | 6
drivers/base/property.c | 4
drivers/block/drbd/drbd_receiver.c | 5
drivers/bluetooth/bpa10x.c | 8
drivers/bluetooth/btintel.c | 105
drivers/bluetooth/btintel.h | 5
drivers/bluetooth/btrtl.c | 5
drivers/bluetooth/btusb.c | 44
drivers/bluetooth/hci_intel.c | 7
drivers/bus/mhi/host/main.c | 3
drivers/bus/sunxi-rsb.c | 3
drivers/char/hw_random/virtio-rng.c | 23
drivers/char/tlclk.c | 4
drivers/char/tpm/eventlog/tpm1.c | 4
drivers/char/tpm/tpm-dev.c | 2
drivers/char/tpm/tpmrm-dev.c | 2
drivers/clk/clk-scmi.c | 4
drivers/clk/imx/clk.c | 2
drivers/clk/qcom/a53-pll.c | 2
drivers/cpufreq/cpufreq.c | 2
drivers/cpufreq/cpufreq_conservative.c | 12
drivers/cpufreq/intel_pstate.c | 6
drivers/cpufreq/pcc-cpufreq.c | 2
drivers/crypto/amcc/crypto4xx_alg.c | 114
drivers/crypto/amcc/crypto4xx_core.c | 148
drivers/crypto/amcc/crypto4xx_core.h | 15
drivers/crypto/amcc/crypto4xx_reg_def.h | 19
drivers/crypto/amcc/crypto4xx_sa.h | 18
drivers/crypto/amcc/crypto4xx_trng.h | 2
drivers/crypto/amlogic/amlogic-gxl-core.c | 2
drivers/crypto/atmel-ecc.c | 2
drivers/crypto/atmel-sha204a.c | 29
drivers/crypto/caam/caamalg.c | 12
drivers/crypto/caam/caamalg_qi.c | 12
drivers/crypto/caam/caamalg_qi2.c | 12
drivers/crypto/caam/caamhash.c | 4
drivers/crypto/caam/key_gen.c | 4
drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4
drivers/crypto/ccp/sev-dev.c | 3
drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4
drivers/crypto/qat/qat_common/adf_accel_devices.h | 2
drivers/crypto/qat/qat_common/adf_aer.c | 7
drivers/crypto/qat/qat_common/adf_common_drv.h | 4
drivers/crypto/qat/qat_common/adf_isr.c | 18
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 22
drivers/crypto/qat/qat_common/adf_sriov.c | 38
drivers/crypto/qat/qat_common/qat_asym_algs.c | 10
drivers/crypto/talitos.c | 26
drivers/dma-buf/udmabuf.c | 5
drivers/dma/dmaengine.c | 3
drivers/gpio/gpio-eic-sprd.c | 8
drivers/gpio/gpio-htc-egpio.c | 6
drivers/gpio/gpio-mvebu.c | 5
drivers/gpio/gpio-palmas.c | 19
drivers/gpio/gpio-pca953x.c | 11
drivers/gpio/gpio-timberdale.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 4
drivers/gpu/drm/drm_edid.c | 8
drivers/gpu/drm/i2c/sil164_drv.c | 7
drivers/gpu/drm/msm/dp/dp_display.c | 4
drivers/gpu/drm/msm/dp/dp_reg.h | 4
drivers/gpu/drm/radeon/radeon_ring.c | 4
drivers/gpu/drm/tegra/dc.c | 4
drivers/gpu/drm/tidss/tidss_kms.c | 2
drivers/gpu/host1x/bus.c | 2
drivers/hid/hid-appleir.c | 45
drivers/hid/hid-core.c | 7
drivers/hid/hid-lg-g15.c | 16
drivers/hid/hid-logitech-hidpp.c | 1
drivers/hid/hid-multitouch.c | 32
drivers/hid/hid-picolcd_core.c | 3
drivers/hid/hid-sensor-hub.c | 77
drivers/hid/wacom_sys.c | 12
drivers/hwmon/asus_atk0110.c | 3
drivers/hwmon/pmbus/adm1275.c | 2
drivers/hwmon/w83627hf.c | 4
drivers/hwmon/w83793.c | 1
drivers/hwspinlock/qcom_hwspinlock.c | 5
drivers/hwtracing/coresight/coresight-cti-platform.c | 1
drivers/hwtracing/coresight/coresight-etb10.c | 6
drivers/i2c/busses/i2c-mlxbf.c | 4
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-stm32f7.c | 9
drivers/i2c/i2c-core-base.c | 82
drivers/i3c/master.c | 19
drivers/iio/accel/bmc150-accel-core.c | 2
drivers/iio/accel/kxsd9.c | 5
drivers/iio/accel/mma8452.c | 2
drivers/iio/adc/lpc32xx_adc.c | 4
drivers/iio/adc/spear_adc.c | 4
drivers/iio/adc/ti-ads124s08.c | 3
drivers/iio/chemical/scd30_core.c | 19
drivers/iio/common/Kconfig | 1
drivers/iio/common/Makefile | 1
drivers/iio/common/inv_sensors/Kconfig | 7
drivers/iio/common/inv_sensors/Makefile | 6
drivers/iio/common/inv_sensors/inv_sensors_timestamp.c | 191
drivers/iio/common/st_sensors/st_sensors_core.c | 23
drivers/iio/gyro/bmg160_core.c | 16
drivers/iio/imu/adis_trigger.c | 2
drivers/iio/imu/bmi160/bmi160_core.c | 3
drivers/iio/imu/inv_icm42600/Kconfig | 1
drivers/iio/imu/inv_icm42600/Makefile | 1
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 35
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 61
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 3
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 24
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 35
drivers/iio/imu/inv_icm42600/inv_icm42600_timestamp.c | 195 -
drivers/iio/imu/inv_icm42600/inv_icm42600_timestamp.h | 85
drivers/iio/imu/inv_mpu6050/Kconfig | 1
drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 30
drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 18
drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 83
drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 11
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21
drivers/iio/industrialio-event.c | 5
drivers/iio/light/al3010.c | 2
drivers/iio/light/gp2ap002.c | 2
drivers/iio/light/opt3001.c | 6
drivers/iio/light/si1133.c | 14
drivers/iio/light/veml6030.c | 8
drivers/iio/magnetometer/ak8975.c | 15
drivers/iio/orientation/hid-sensor-rotation.c | 40
drivers/iio/temperature/ltc2983.c | 5
drivers/infiniband/hw/hns/hns_roce_hem.c | 8
drivers/infiniband/hw/hns/hns_roce_main.c | 2
drivers/infiniband/hw/mlx4/mlx4_ib.h | 1
drivers/infiniband/hw/mlx4/mr.c | 9
drivers/infiniband/hw/mlx4/sysfs.c | 45
drivers/infiniband/hw/mlx5/devx.c | 30
drivers/infiniband/hw/mlx5/qp.c | 11
drivers/infiniband/sw/siw/siw_qp_rx.c | 9
drivers/infiniband/ulp/srpt/ib_srpt.c | 5
drivers/input/joystick/iforce/iforce-packets.c | 18
drivers/input/joystick/maplecontrol.c | 3
drivers/input/keyboard/maple_keyb.c | 4
drivers/input/misc/ims-pcu.c | 115
drivers/input/mouse/elan_i2c_core.c | 36
drivers/input/mouse/maplemouse.c | 9
drivers/input/rmi4/rmi_bus.c | 4
drivers/input/rmi4/rmi_f30.c | 2
drivers/input/rmi4/rmi_f3a.c | 2
drivers/input/touchscreen/goodix.c | 3
drivers/input/touchscreen/mms114.c | 2
drivers/input/touchscreen/touchwin.c | 15
drivers/iommu/amd/amd_iommu_types.h | 11
drivers/irqchip/irq-crossbar.c | 10
drivers/leds/leds-lm3601x.c | 11
drivers/leds/leds-lm3697.c | 4
drivers/leds/uleds.c | 3
drivers/md/dm-bufio.c | 4
drivers/md/dm-era-target.c | 10
drivers/md/dm-ioctl.c | 7
drivers/md/dm-log.c | 3
drivers/md/dm-stats.c | 10
drivers/md/dm-thin-metadata.c | 67
drivers/md/dm-verity-target.c | 2
drivers/media/platform/qcom/venus/helpers.c | 4
drivers/media/platform/rockchip/rga/rga-hw.c | 2
drivers/media/platform/rockchip/rga/rga-hw.h | 2
drivers/media/usb/uvc/uvc_video.c | 30
drivers/memstick/core/ms_block.c | 4
drivers/mfd/cros_ec_dev.c | 3
drivers/mfd/sm501.c | 4
drivers/mfd/tps6586x.c | 2
drivers/mmc/host/renesas_sdhi_core.c | 1
drivers/mmc/host/vub300.c | 26
drivers/mtd/devices/slram.c | 22
drivers/mtd/maps/vmu-flash.c | 1
drivers/mtd/nand/onenand/onenand_samsung.c | 7
drivers/mtd/nand/raw/fsl_ifc_nand.c | 9
drivers/mtd/nand/raw/lpc32xx_mlc.c | 12
drivers/mtd/nand/raw/lpc32xx_slc.c | 12
drivers/mtd/nand/raw/nand_base.c | 2
drivers/mtd/spi-nor/Kconfig | 1
drivers/net/bonding/bond_3ad.c | 1
drivers/net/dsa/sja1105/sja1105_ptp.c | 2
drivers/net/ethernet/amazon/ena/ena_netdev.c | 23
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3
drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c | 18
drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8
drivers/net/ethernet/freescale/fman/fman.c | 4
drivers/net/ethernet/marvell/mvneta.c | 3
drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 1
drivers/net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3
drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c | 1
drivers/net/ethernet/qlogic/qede/qede_fp.c | 5
drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c | 5
drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h | 20
drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 53
drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 22
drivers/net/ethernet/qualcomm/rmnet/rmnet_map_command.c | 11
drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 334 +
drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.c | 9
drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.h | 1
drivers/net/ethernet/sun/sungem.c | 13
drivers/net/ieee802154/ca8210.c | 9
drivers/net/macsec.c | 7
drivers/net/usb/gl620a.c | 6
drivers/net/usb/kalmia.c | 8
drivers/net/usb/lan78xx.c | 18
drivers/net/usb/net1080.c | 2
drivers/net/virtio_net.c | 3
drivers/net/wan/hdlc_ppp.c | 15
drivers/net/wireless/ath/ath9k/xmit.c | 5
drivers/net/wireless/ath/wcn36xx/smd.c | 6
drivers/net/wireless/marvell/mwifiex/join.c | 1
drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12
drivers/net/wireless/realtek/rtw88/pci.c | 5
drivers/nvdimm/btt.c | 14
drivers/nvme/host/core.c | 2
drivers/nvme/target/rdma.c | 18
drivers/nvme/target/tcp.c | 33
drivers/pci/Makefile | 2
drivers/pci/controller/dwc/pci-imx6.c | 5
drivers/pci/controller/dwc/pcie-designware-host.c | 2
drivers/pci/controller/mobiveil/pcie-mobiveil-host.c | 8
drivers/pci/controller/pci-host-common.c | 4
drivers/pci/controller/pcie-altera-msi.c | 2
drivers/pci/controller/pcie-altera.c | 32
drivers/pci/controller/pcie-mediatek.c | 115
drivers/pci/controller/pcie-rcar-host.c | 1
drivers/pci/controller/pcie-xilinx-nwl.c | 2
drivers/pci/pci.c | 135
drivers/pci/pci.h | 4
drivers/pci/rebar.c | 217 +
drivers/pci/setup-bus.c | 100
drivers/pci/setup-res.c | 53
drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2
drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2
drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2
drivers/platform/x86/xo15-ebook.c | 7
drivers/power/supply/charger-manager.c | 6
drivers/pwm/pwm-imx27.c | 8
drivers/rapidio/devices/tsi721.c | 3
drivers/regulator/core.c | 33
drivers/regulator/ltc3676.c | 10
drivers/reset/reset-sunxi.c | 4
drivers/rtc/rtc-abx80x.c | 3
drivers/rtc/rtc-cmos.c | 6
drivers/rtc/rtc-ds1307.c | 30
drivers/s390/char/monwriter.c | 3
drivers/s390/net/qeth_l3_main.c | 6
drivers/scsi/hpsa.c | 4
drivers/scsi/pm8001/pm8001_ctl.c | 5
drivers/scsi/scsi_scan.c | 2
drivers/scsi/scsi_transport_sas.c | 60
drivers/scsi/sg.c | 7
drivers/scsi/smartpqi/smartpqi_init.c | 2
drivers/soc/fsl/qe/qe.c | 3
drivers/soc/ti/k3-ringacc.c | 4
drivers/spi/spi-ep93xx.c | 1
drivers/spi/spi-fsl-lpspi.c | 18
drivers/spi/spi-sh-msiof.c | 10
drivers/spi/spi-uniphier.c | 4
drivers/spi/spi-xilinx.c | 11
drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6
drivers/staging/media/atomisp/pci/atomisp_compat_css20.c | 2
drivers/staging/media/atomisp/pci/runtime/isys/src/virtual_isys.c | 12
drivers/staging/media/atomisp/pci/sh_css.c | 1946 ++++------
drivers/staging/media/ipu3/ipu3-css-params.c | 8
drivers/staging/media/sunxi/cedrus/cedrus.c | 4
drivers/staging/most/video/video.c | 7
drivers/staging/nvec/nvec.c | 4
drivers/staging/rtl8723bs/core/rtw_ap.c | 31
drivers/staging/rtl8723bs/core/rtw_cmd.c | 96
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 22
drivers/staging/rtl8723bs/core/rtw_ioctl_set.c | 4
drivers/staging/rtl8723bs/core/rtw_mlme.c | 16
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 345 -
drivers/staging/rtl8723bs/core/rtw_recv.c | 4
drivers/staging/rtl8723bs/core/rtw_security.c | 6
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 14
drivers/staging/rtl8723bs/hal/hal_com_phycfg.c | 34
drivers/staging/rtl8723bs/hal/odm.c | 30
drivers/staging/rtl8723bs/hal/odm.h | 3
drivers/staging/rtl8723bs/hal/odm_EdcaTurboCheck.c | 4
drivers/staging/rtl8723bs/hal/rtl8723b_hal_init.c | 1
drivers/staging/rtl8723bs/hal/sdio_halinit.c | 10
drivers/staging/rtl8723bs/include/hal_phy.h | 3
drivers/staging/rtl8723bs/include/ieee80211.h | 22
drivers/staging/rtl8723bs/include/rtw_mlme_ext.h | 6
drivers/staging/rtl8723bs/include/wifi.h | 1
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 118
drivers/staging/rtl8723bs/os_dep/ioctl_linux.c | 41
drivers/staging/rtl8723bs/os_dep/os_intfs.c | 6
drivers/target/target_core_pr.c | 8
drivers/thermal/thermal_hwmon.c | 5
drivers/tty/serial/8250/8250_mid.c | 31
drivers/tty/serial/8250/8250_omap.c | 3
drivers/tty/serial/msm_serial.c | 3
drivers/usb/atm/ueagle-atm.c | 36
drivers/usb/class/cdc-acm.c | 3
drivers/usb/common/ulpi.c | 23
drivers/usb/core/quirks.c | 6
drivers/usb/gadget/composite.c | 5
drivers/usb/gadget/function/f_fs.c | 5
drivers/usb/gadget/function/f_printer.c | 10
drivers/usb/gadget/function/rndis.c | 20
drivers/usb/host/ehci-sched.c | 11
drivers/usb/host/fotg210-hcd.c | 6
drivers/usb/host/max3421-hcd.c | 8
drivers/usb/host/sl811-hcd.c | 1
drivers/usb/host/xhci.c | 11
drivers/usb/misc/chaoskey.c | 1
drivers/usb/misc/idmouse.c | 45
drivers/usb/misc/iowarrior.c | 21
drivers/usb/misc/ldusb.c | 38
drivers/usb/misc/legousbtower.c | 37
drivers/usb/misc/uss720.c | 5
drivers/usb/mtu3/mtu3_gadget.c | 1
drivers/usb/serial/digi_acceleport.c | 43
drivers/usb/serial/option.c | 16
drivers/usb/storage/ene_ub6250.c | 3
drivers/usb/storage/usb.c | 2
drivers/usb/typec/tcpm/tcpm.c | 7
drivers/usb/typec/ucsi/displayport.c | 7
drivers/usb/typec/ucsi/ucsi_ccg.c | 2
drivers/usb/usbip/vudc.h | 1
drivers/usb/usbip/vudc_dev.c | 4
drivers/vfio/pci/vfio_pci.c | 1
drivers/vhost/vdpa.c | 29
drivers/video/fbdev/aty/radeon_base.c | 1
drivers/video/fbdev/carminefb.c | 1
drivers/video/fbdev/core/fbcon.c | 7
drivers/video/fbdev/i740fb.c | 1
drivers/video/fbdev/nvidia/nvidia.c | 1
drivers/video/fbdev/s3fb.c | 1
drivers/video/fbdev/sm501fb.c | 16
drivers/video/fbdev/sm712.h | 2
drivers/video/fbdev/tdfxfb.c | 1
drivers/video/fbdev/tridentfb.c | 1
drivers/video/fbdev/uvesafb.c | 4
drivers/virtio/virtio_mmio.c | 26
drivers/watchdog/sprd_wdt.c | 5
drivers/xen/gntdev.c | 8
fs/afs/cell.c | 2
fs/afs/cmservice.c | 2
fs/afs/rxrpc.c | 11
fs/afs/super.c | 3
fs/afs/vl_list.c | 10
fs/btrfs/extent-tree.c | 17
fs/cifs/cifs_debug.c | 2
fs/cifs/cifsacl.c | 2
fs/cifs/cifsfs.c | 1
fs/cifs/cifsglob.h | 5
fs/cifs/cifsproto.h | 2
fs/cifs/connect.c | 17
fs/cifs/misc.c | 4
fs/cifs/netmisc.c | 2
fs/cifs/readdir.c | 6
fs/cifs/smb2maperror.c | 16
fs/cifs/smb2misc.c | 123
fs/cifs/smb2ops.c | 107
fs/cifs/smb2pdu.c | 114
fs/cifs/smb2pdu.h | 365 -
fs/cifs/smb2proto.h | 4
fs/cifs/smb2transport.c | 36
fs/configfs/dir.c | 54
fs/efs/file.c | 21
fs/exfat/dir.c | 13
fs/ext4/ioctl.c | 12
fs/f2fs/checkpoint.c | 13
fs/f2fs/data.c | 29
fs/f2fs/debug.c | 2
fs/f2fs/f2fs.h | 1
fs/f2fs/file.c | 17
fs/f2fs/gc.c | 4
fs/f2fs/inode.c | 13
fs/f2fs/segment.c | 14
fs/f2fs/segment.h | 8
fs/f2fs/xattr.c | 4
fs/fs-writeback.c | 20
fs/fuse/cuse.c | 4
fs/fuse/dev.c | 2
fs/hfs/bfind.c | 2
fs/hfs/bnode.c | 56
fs/hfs/brec.c | 2
fs/hfs/btree.c | 2
fs/hfs/btree.h | 71
fs/hfs/hfs_fs.h | 83
fs/hfs/inode.c | 2
fs/hfsplus/bfind.c | 2
fs/hfsplus/bnode.c | 62
fs/hfsplus/brec.c | 2
fs/hfsplus/btree.c | 2
fs/hfsplus/hfsplus_fs.h | 40
fs/isofs/rock.c | 11
fs/lockd/svcsubs.c | 4
fs/nfs/callback_proc.c | 9
fs/nfs/dir.c | 2
fs/nfs/filelayout/filelayout.c | 2
fs/nfs/flexfilelayout/flexfilelayout.c | 33
fs/nfs/flexfilelayout/flexfilelayout.h | 16
fs/nfs/pnfs.c | 4
fs/nfsd/nfs4layouts.c | 4
fs/nfsd/nfs4recover.c | 120
fs/nfsd/nfs4state.c | 22
fs/nfsd/vfs.c | 9
fs/nilfs2/segment.c | 22
fs/ocfs2/alloc.c | 2
fs/ocfs2/aops.c | 13
fs/ocfs2/buffer_head_io.c | 7
fs/ocfs2/dlm/dlmdebug.c | 16
fs/ocfs2/dlmglue.c | 17
fs/ocfs2/inode.c | 150
fs/ocfs2/journal.c | 13
fs/ocfs2/move_extents.c | 4
fs/ocfs2/ocfs2.h | 2
fs/ocfs2/quota_local.c | 2
fs/ocfs2/stack_user.c | 10
fs/ocfs2/super.c | 2
fs/ocfs2/sysfile.c | 9
fs/orangefs/dir.c | 7
fs/proc/array.c | 6
fs/proc/base.c | 182
fs/proc/fd.c | 31
fs/proc/generic.c | 9
fs/proc/internal.h | 4
fs/proc/namespaces.c | 16
fs/proc/proc_net.c | 1
fs/smbfs_common/smb2pdu.h | 318 +
fs/sysfs/file.c | 4
fs/udf/balloc.c | 5
fs/udf/super.c | 11
fs/userfaultfd.c | 14
fs/xfs/libxfs/xfs_format.h | 2
fs/xfs/libxfs/xfs_sb.c | 64
fs/xfs/libxfs/xfs_sb.h | 1
fs/xfs/xfs_dquot.c | 16
fs/xfs/xfs_log_recover.c | 6
fs/xfs/xfs_mount.c | 1
fs/xfs/xfs_mount.h | 75
fs/xfs/xfs_rtalloc.c | 3
include/crypto/drbg.h | 18
include/linux/audit.h | 8
include/linux/bitops.h | 2
include/linux/device.h | 5
include/linux/glob.h | 1
include/linux/hid-sensor-hub.h | 25
include/linux/hid.h | 29
include/linux/if_rmnet.h | 70
include/linux/iio/common/inv_sensors_timestamp.h | 94
include/linux/pci.h | 4
include/linux/platform_data/pca953x.h | 2
include/linux/skmsg.h | 22
include/net/addrconf.h | 12
include/net/bluetooth/hci.h | 5
include/net/bluetooth/l2cap.h | 2
include/net/fib_rules.h | 5
include/net/gue.h | 2
include/net/if_inet6.h | 37
include/net/ip_fib.h | 7
include/net/ip_vs.h | 3
include/net/mld.h | 3
include/net/ndisc.h | 4
include/net/rtnetlink.h | 2
include/net/sctp/sctp.h | 3
include/net/sock.h | 2
include/net/xfrm.h | 7
include/uapi/linux/if_link.h | 1
io_uring/io-wq.c | 2
kernel/audit.c | 85
kernel/bpf/verifier.c | 3
kernel/cgroup/cpuset.c | 7
kernel/cpu.c | 8
kernel/locking/rtmutex.c | 16
kernel/sched/fair.c | 2
kernel/sched/features.h | 8
kernel/time/posix-cpu-timers.c | 3
kernel/time/time.c | 2
kernel/trace/ring_buffer.c | 3
kernel/trace/trace_events_filter.c | 6
kernel/trace/trace_probe.c | 3
kernel/trace/trace_probe.h | 2
kernel/workqueue.c | 2
lib/debugobjects.c | 17
lib/glob.c | 31
lib/test_meminit.c | 2
net/6lowpan/nhc.c | 2
net/9p/trans_rdma.c | 19
net/atm/common.c | 2
net/batman-adv/distributed-arp-table.c | 30
net/batman-adv/fragmentation.c | 8
net/batman-adv/gateway_client.c | 3
net/batman-adv/main.c | 22
net/batman-adv/multicast.c | 6
net/batman-adv/routing.c | 3
net/batman-adv/soft-interface.c | 11
net/batman-adv/soft-interface.h | 2
net/batman-adv/translation-table.c | 5
net/batman-adv/types.h | 7
net/bluetooth/af_bluetooth.c | 17
net/bluetooth/bnep/core.c | 27
net/bluetooth/l2cap_core.c | 125
net/bluetooth/l2cap_sock.c | 4
net/bridge/netfilter/ebtables.c | 22
net/bridge/netfilter/nft_meta_bridge.c | 4
net/can/bcm.c | 90
net/can/isotp.c | 9
net/core/fib_rules.c | 6
net/core/filter.c | 38
net/core/lwt_bpf.c | 12
net/core/rtnetlink.c | 8
net/core/skbuff.c | 23
net/core/skmsg.c | 2
net/ieee802154/core.c | 2
net/ieee802154/header_ops.c | 9
net/ieee802154/ieee802154.h | 17
net/ieee802154/netlink.c | 36
net/ife/ife.c | 2
net/ipv4/igmp.c | 1
net/ipv4/ip_gre.c | 6
net/ipv4/ip_vti.c | 3
net/ipv4/netfilter/nf_log_ipv4.c | 4
net/ipv4/sysctl_net_ipv4.c | 10
net/ipv4/tcp_output.c | 4
net/ipv6/addrconf.c | 38
net/ipv6/addrconf_core.c | 2
net/ipv6/af_inet6.c | 2
net/ipv6/icmp.c | 4
net/ipv6/ip6_gre.c | 6
net/ipv6/ip6_vti.c | 3
net/ipv6/mcast.c | 1184 +++---
net/ipv6/netfilter.c | 4
net/ipv6/netfilter/ip6t_ah.c | 5
net/ipv6/netfilter/ip6t_hbh.c | 1
net/ipv6/netfilter/ip6t_rt.c | 3
net/ipv6/netfilter/nf_conntrack_reasm.c | 3
net/ipv6/netfilter/nf_log_ipv6.c | 4
net/ipv6/route.c | 9
net/ipv6/seg6.c | 3
net/ipv6/sit.c | 3
net/kcm/kcmsock.c | 8
net/key/af_key.c | 1
net/llc/af_llc.c | 1
net/llc/llc_conn.c | 1
net/mac80211/main.c | 3
net/mac80211/tx.c | 17
net/mac802154/iface.c | 2
net/netfilter/ipset/ip_set_core.c | 12
net/netfilter/ipvs/ip_vs_app.c | 10
net/netfilter/ipvs/ip_vs_conn.c | 4
net/netfilter/ipvs/ip_vs_core.c | 36
net/netfilter/ipvs/ip_vs_proto_sctp.c | 18
net/netfilter/ipvs/ip_vs_proto_tcp.c | 11
net/netfilter/ipvs/ip_vs_proto_udp.c | 3
net/netfilter/nf_conncount.c | 23
net/netfilter/nf_conntrack_core.c | 18
net/netfilter/nf_conntrack_irc.c | 6
net/netfilter/nf_conntrack_seqadj.c | 2
net/netfilter/nf_nat_sip.c | 9
net/netfilter/nfnetlink_cthelper.c | 4
net/netfilter/nfnetlink_osf.c | 6
net/netfilter/nft_log.c | 58
net/netfilter/nft_synproxy.c | 9
net/netfilter/xt_AUDIT.c | 58
net/netfilter/xt_cluster.c | 2
net/netfilter/xt_nat.c | 9
net/netfilter/xt_rateest.c | 2
net/netfilter/xt_u32.c | 12
net/openvswitch/conntrack.c | 2
net/psample/psample.c | 6
net/qrtr/af_qrtr.c | 2
net/sched/cls_bpf.c | 10
net/sched/sch_cake.c | 5
net/sched/sch_codel.c | 48
net/sched/sch_drr.c | 8
net/sched/sch_fq_codel.c | 41
net/sched/sch_hfsc.c | 24
net/sched/sch_hhf.c | 27
net/sched/sch_htb.c | 8
net/sched/sch_multiq.c | 2
net/sctp/diag.c | 67
net/sctp/sm_make_chunk.c | 10
net/sctp/sm_statefuns.c | 23
net/sctp/socket.c | 29
net/smc/smc_cdc.c | 15
net/socket.c | 2
net/tipc/bcast.c | 22
net/tipc/bcast.h | 2
net/tipc/bearer.c | 1
net/tipc/netlink.c | 12
net/tipc/node.c | 15
net/tipc/socket.c | 3
net/tipc/udp_media.c | 2
net/tls/tls_sw.c | 4
net/xfrm/xfrm_interface_core.c | 3
net/xfrm/xfrm_policy.c | 3
net/xfrm/xfrm_state.c | 11
net/xfrm/xfrm_user.c | 2
samples/trace_events/trace-events-sample.c | 4
scripts/kconfig/conf.c | 6
security/apparmor/domain.c | 58
security/apparmor/include/policy_unpack.h | 19
security/apparmor/label.c | 2
security/apparmor/lsm.c | 18
security/apparmor/net.c | 1
security/apparmor/policy.c | 14
security/apparmor/procattr.c | 2
security/keys/keyring.c | 2
sound/aoa/fabrics/layout.c | 6
sound/firewire/isight.c | 3
sound/pci/es1938.c | 2
sound/soc/fsl/fsl_audmix.c | 6
sound/soc/tegra/tegra210_ahub.c | 4
sound/usb/caiaq/input.c | 2
sound/usb/mixer_quirks.c | 101
sound/usb/mixer_scarlett.c | 4
sound/usb/mixer_us16x08.c | 127
tools/bpf/bpftool/net.c | 4
tools/bpf/resolve_btfids/main.c | 17
tools/include/linux/bitops.h | 2
tools/lib/api/fs/fs.c | 19
tools/perf/util/probe-finder.c | 4
tools/testing/selftests/vm/compaction_test.c | 3
tools/testing/selftests/vm/hmm-tests.c | 32
tools/usb/usbip/libsrc/usbip_common.c | 2
tools/usb/usbip/libsrc/usbip_device_driver.c | 4
tools/usb/usbip/libsrc/vhci_driver.c | 1
tools/virtio/vringh_test.c | 5
tools/vm/slabinfo.c | 4
virt/kvm/eventfd.c | 12
virt/kvm/kvm_main.c | 16
675 files changed, 8691 insertions(+), 5984 deletions(-)
Abdun Nihaal (11):
fbdev: radeon: fix potential memory leak in radeonfb_pci_register()
fbdev: i740fb: fix potential memory leak in i740fb_probe()
fbdev: s3fb: fix potential memory leak in s3_pci_probe()
fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()
fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
fbdev: tridentfb: fix potential memory leak in trident_pci_probe()
nvdimm/btt: Free arenas on btt_init() error paths
nvdimm/btt: Free arena sub-allocations on discover_arenas() error path
bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
Abhishek Ojha (1):
regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
Aboorva Devarajan (3):
powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del
powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down
powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus
Adam Li (1):
sched/fair: Only update stats for allowed CPUs when looking for dst group
Aditya Srivastava (2):
crypto: amcc - fix incorrect kernel-doc comment syntax in files
media: atomisp: replace boolean comparison of values with bool variables
Adrian Hunter (1):
i3c: master: Prevent reuse of dynamic address on device add failure
Ahsan Atta (1):
crypto: qat - fix restarting state leak on allocation failure
Al Viro (1):
configfs: fix lockless traversals of ->s_children
Alan Stern (1):
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
Alberto Ruiz (1):
fuse: fix device node leak in cuse_process_init_reply()
Aleksandr Nogikh (2):
ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
ieee802154: fix kernel-infoleak in dgram_recvmsg()
Aleksandrova Alyona (1):
net: dsa: sja1105: round up PTP perout pin duration
Alex Elder (4):
net: qualcomm: rmnet: simplify some byte order logic
net: qualcomm: rmnet: kill RMNET_MAP_GET_*() accessor macros
net: qualcomm: rmnet: use masks instead of C bit-fields
net: qualcomm: rmnet: don't use C bit-fields in rmnet checksum header
Alex Williamson (1):
vfio/pci: Release the VGA arbiter client on register_device() failure
Alexander Chesnokov (1):
RDMA/hns: Fix arithmetic overflow in calc_hem_config()
Alexander Lobakin (1):
bitops: make BYTES_TO_BITS() treewide-available
Alexander Potapenko (1):
lib/test_meminit: use && for bools
Alexandru Hossu (4):
staging: nvec: fix use-after-free in nvec_rx_completed()
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
Alexey Nepomnyashih (1):
xfs: fix unreachable BIGTIME check in dquot flush validation
Anastasia Tishchenko (1):
crypto: ecc - Fix carry overflow in vli multiplication
Andreas Kemnade (1):
gpios: palmas: add .get_direction() op
Andreas Kempe (1):
iio: imu: st_lsm6dsx: deselect shub page before reading whoami
Andrei Kuchynski (2):
mfd: cros_ec: Delay dev_set_drvdata() until probe success
usb: typec: ucsi: Invert DisplayPort role assignment
Andrzej Pietrasiewicz (1):
usb: gadget: function: Simplify diagnostic messaging in printer
Andy Shevchenko (3):
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
ACPI: resource: Amend kernel-doc style
serial: 8250_mid: Disable DMA for selected platforms
Andy Yan (1):
usb: typec: tcpm: Fix VDM type for Enter Mode commands
Angela Czubak (1):
HID: add haptics page defines
Antoni Pokusinski (1):
rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
Armin Wolf (1):
leds: uleds: Fix potential buffer overread
Arnaldo Carvalho de Melo (3):
tools lib api: Fix missing null termination in filename__read_int/ull()
tools lib api: Fix filename__write_int() writing uninitialized stack data
tools lib api: Fix mount_overload() snprintf truncation and toupper range
Arnd Bergmann (1):
staging: media: atomisp: reduce load_primary_binaries() stack usage
Arseniy Krasnov (1):
mtd: rawnand: fix condition in 'nand_select_target()'
Badhri Jagan Sridharan (1):
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
Baokun Li (1):
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
Bartosz Golaszewski (1):
mfd: tps6586x: Fix OF node refcount
Benjamin Coddington (1):
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
Benjamin Marzinski (1):
dm-log: fix a bitset_size overflow on 32bit machines
Bhargav Joshi (2):
irqchip/crossbar: Fix parent domain resource leak
irqchip/crossbar: Use correct index in crossbar_domain_free()
Biren Pandya (2):
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
iio: light: gp2ap002: fix runtime PM leak on read error
Bradley Morgan (1):
cpu: hotplug: Preserve per instance callback errors
Brendan Jackman (1):
tools/resolve_btfids: Fix some error messages
Breno Leitao (2):
workqueue: drop spurious '*' from print_worker_info() fn declaration
arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS
Bryam Vargas (17):
apparmor: mediate the implicit connect of TCP fast open sendmsg
f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
iio: accel: bmc150: clamp the device-reported FIFO frame count
udf: validate VAT header length against the VAT inode size
udf: validate sparing table length as an entry count, not a byte count
partitions: aix: bound the pp_count scan to the ppe array
isofs: bound Rock Ridge symlink components to the SL record
exfat: bound uniname advance in exfat_find_dir_entry()
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
Input: goodix - clamp the device-reported contact count
Input: iforce - bound the device-reported force-feedback effect index
Input: touchwin - reset the packet index on every complete packet
nvmet-rdma: handle inline data with a nonzero offset
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked
orangefs: keep the readdir entry size 64-bit in fill_from_part()
Cao Guanghui (1):
dm era: fix NULL pointer dereference in metadata_open()
Carlos Llamas (2):
binder: fix UAF in binder_thread_release()
binder: fix UAF in binder_free_transaction()
Carlos Song (2):
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
Chaitanya Kulkarni (1):
nvmet-tcp: fix race between ICReq handling and queue teardown
Chi Wang (1):
audit: Fix data races of skb_queue_len() readers on audit_queue
Chris Mason (1):
nfsd: release layout stid on setlease failure
Christian Marangi (1):
PCI: mediatek: Convert bool to single quirks entry and bitmap
Christoph Hellwig (1):
proc: rename proc_setattr to proc_nochmod_setattr
Chuck Lever (2):
lockd: Plug nlm_file leak when nlm_do_fopen() fails
lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
Colin Ian King (1):
iio: invensense: remove redundant initialization of variable period
Cristian Marussi (1):
clk: scmi: Fix clock rate rounding
Cássio Gabriel (5):
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
ALSA: usb-audio: Roll back quirk control caches on write errors
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
Dai Ngo (1):
NFSv4/pnfs: defer return_range callbacks until after inode unlock
Dan Carpenter (3):
rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
scsi: pm8001: Fix error code in non_fatal_log_show()
afs: Fix error code in afs_extract_vl_addrs()
Daniele Palmas (1):
net: qualcomm: rmnet: add tx packets aggregation
Danilo Krummrich (1):
driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
Darvell Long (1):
ALSA: usb-audio: avoid kobject path lookup in DualSense match
Dave Chinner (1):
xfs: reflect sb features in xfs_mount
David Carlier (1):
netfilter: nfnl_cthelper: apply per-class values when updating policies
David Howells (5):
afs: Fix netns teardown to cancel the preallocation charger
afs: Fix further netns teardown to cancel the preallocation charger
afs: Fix callback service message parsers to pass through -EAGAIN
afs: Fix vllist leak
afs: Fix unchecked-length string display in debug statement
David Laight (1):
fbdev: sm501fb: Fix buffer errors in OF binding code
Davidlohr Bueso (1):
locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
Dawei Feng (4):
crypto: amlogic - avoid double cleanup in meson_crypto_probe()
net: ena: clean up XDP TX queues when regular TX setup fails
wifi: mac80211: fix memory leak in ieee80211_register_hw()
usb: free iso schedules on failed submit
Deepanshu Kartikey (1):
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
Dmitry Antipov (1):
ocfs2: fix buffer head management in ocfs2_read_blocks()
Dmitry Torokhov (12):
Input: mms114 - fix multi-touch slot corruption
Input: maple_keyb - set driver data before registering input device
Input: maplemouse - set driver data before registering input device
Input: maplecontrol - set driver data before registering input device
Input: ims-pcu - fix use-after-free and double-free in disconnect
Input: ims-pcu - release data interface on disconnect
Input: ims-pcu - validate control endpoint type
Input: ims-pcu - add response length checks
Input: ims-pcu - fix DMA mapping violation in line setup
Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
Input: ims-pcu - fix type confusion in CDC union descriptor parsing
Dmitry Vyukov (1):
firmware_loader: Fix recursive lock in device_cache_fw_images()
Douglas Anderson (1):
regulator: core: Make regulator_lock_two() logic easier to follow
Enrico Pozzobon (1):
net: usb: lan78xx: disable VLAN filter in promiscuous mode
Enzo Matsumiya (2):
smb2: small refactor in smb2_check_message()
cifs: remove unused server parameter from calc_smb_size()
Eric Biggers (5):
crypto: drbg - Fix returning success on failure in CTR_DRBG
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
crypto: drbg - Fix the fips_enabled priority boost
crypto: af_alg - Remove zero-copy support from skcipher and aead
crypto: crypto4xx - Remove insecure and unused rng_alg
Eric Dumazet (12):
skmsg: convert struct sk_msg_sg::copy to a bitmap
net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()
net/sched: sch_htb: annotate data-races (I)
net/sched: sch_drr: annotate data-races around cl->deficit
ipv6: guard against possible NULL deref in __in6_dev_stats_get()
tipc: fix UAF in tipc_l2_send_msg()
tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
xfrm: validate selector family and prefixlen during match
ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()
ipv6: mcast: Fix potential UAF in MLD delayed work
ipv6: fix lockdep splat in in6_dump_addrs()
ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
Erich E. Hoover (1):
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
Fabio Aiuto (7):
staging: rtl8723bs: split too long line
staging: rtl8723bs: remove commented out RT_ASSERT occurrences
staging: rtl8723bs: remove all 5Ghz network types
staging: rtl8723bs: remove 5Ghz code related to channel plan definition
staging: rtl8723bs: remove 5Ghz code blocks
staging: rtl8723bs: remove commented out condition
staging: rtl8723bs: remove DBG_871X log argument
Fabio Porcedda (1):
USB: serial: option: add Telit Cinterion FE990D50 compositions
Fan Wu (2):
hdlc_ppp: sync per-proto timers before freeing hdlc state
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
Farhad Alemi (1):
cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
Felix Gu (6):
watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure
pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path
drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()
spi: ep93xx: fix double-free of zeropage on DMA setup failure
crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
crypto: cavium/cpt - fix DMA cleanup using wrong loop index
Feng Wu (1):
netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
Fernando Fernandez Mancera (7):
netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
ipv6: fix error handling in disable_ipv6 sysctl
ipv6: fix error handling in ignore_routes_with_linkdown sysctl
ipv6: fix error handling in forwarding sysctl
ipv6: fix error handling in disable_policy sysctl
Filipe Manana (1):
btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
Florian Fuchs (2):
Input: maplemouse - fix NULL pointer dereference in open()
mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
Florian Westphal (5):
netfilter: ebtables: module names must be null-terminated
netfilter: nf_conncount: callers must hold rcu read lock
netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
netfilter: nf_nat_sip: reload possible stale data pointer
netfilter: ebtables: zero chainstack array
Franziska Naepelt (1):
staging: rtl8723bs: Fix space issues
Fredrik M Olsson (1):
rtc: ds1307: Fix off-by-one issue with wday for rx8130
Fushuai Wang (1):
cpufreq: intel_pstate: Sync policy->cur during CPU offline
Genjian Zhang (1):
dm thin metadata: fix superblock refcount leak on snapshot shadow failure
Georgiy Osokin (1):
HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
Gerald Schaefer (1):
s390/monwriter: Reject buffer reuse with different data length
Giovanni Cabiddu (2):
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
crypto: qat - validate RSA CRT component lengths
Gleb Markov (1):
cxgb4: Fix decode strings dump for T6 adapters
Greg Kroah-Hartman (2):
sysfs: clamp show() return value in sysfs_kf_read()
Linux 5.10.261
Griffin Kroah-Hartman (2):
usb: gadget: function: rndis: add length check to response query
usb: gadget: function: rndis: add length check for header
Guangshuo Li (5):
IB/mlx4: Fix refcount leak in add_port() error path
staging: most: video: avoid double free on video register failure
smb: client: fix overflow in passthrough ioctl bounds check
gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path
mfd: sm501: Fix reference leak on failed device registration
Gui-Dong Han (1):
KEYS: Use acquire when reading state in keyring search
Guillermo Rodríguez (1):
i2c: stm32f7: truncate clock period instead of rounding it
Haoxiang Li (7):
usb: mtu3: unmap request DMA on queue failure
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
rtc: cmos: unregister HPET IRQ handler on probe failure
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
net: liquidio: fix BAR resource leak on PF number failure
fsl/fman: Free init resources on KeyGen failure in fman_init()
smb: client: Fix next buffer leak in receive_encrypted_standard()
Hengqi Chen (1):
tools/resolve_btfids: Emit warnings and patch zero id for missing symbols
Herbert Xu (2):
crypto: rng - Free default RNG on module exit
crypto: crypto4xx - Remove ahash-related code
Herman van Hazendonk (1):
iio: common: st_sensors: honour channel endianness in read_axis_data
Hui Wang (1):
ring-buffer: Fix event length with forced 8-byte alignment
Huihui Huang (1):
tracing: Prevent out-of-bounds read in glob matching
Huiwen He (1):
smb/client: preserve errors from smb2_set_sparse()
HyeongJun An (3):
ASoC: fsl: fsl_audmix: Validate written enum values
ASoC: tegra: tegra210_ahub: Validate written enum value
hwmon: (asus_atk0110) Check package count before accessing element
Hyunwoo Kim (2):
KVM: arm64: vgic: Check the interrupt is still ours before migrating it
Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
Ian Bridges (1):
ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
Ignat Korchagin (1):
ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()
Ilpo Järvinen (6):
PCI: Prevent resource tree corruption when BAR resize fails
PCI: Free saved list without holding pci_bus_sem
PCI: Fix restoring BARs on BAR resize rollback path
PCI: Add kerneldoc for pci_resize_resource()
PCI: Move Resizable BAR code to rebar.c
serial: 8250_mid: Remove 8250_pci usage
Ivan Abramov (1):
ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
Jaegeuk Kim (1):
f2fs: adjust zone capacity when considering valid block count
Jaewon Yang (1):
tpm: Make the TPM character devices non-seekable
Jakob Koschel (1):
cifs: remove check of list iterator against head past the loop body
Jakub Kicinski (1):
net: psample: fix info leak in PSAMPLE_ATTR_DATA
James Kim (1):
char: tlclk: fix use-after-free in tlclk_cleanup()
James Raphael Tiovalen (1):
macsec: fix promiscuity refcount leak in macsec_dev_open()
Jann Horn (2):
proc: protect ptrace_may_access() with exec_update_lock (FD links)
proc: protect ptrace_may_access() with exec_update_lock (part 1)
Jared Baldridge (1):
usb: cdc_acm: Add quirk for Uniden BC125AT scanner
Jason Gunthorpe (1):
IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified
Javier Carrasco (1):
iio: light: veml6030: fix channel type when pushing events
Jean-Baptiste Maneyrol (10):
iio: imu: inv_icm42600: make timestamp module chip independent
iio: move inv_icm42600 timestamp module in common
iio: make invensense timestamp module generic
iio: imu: inv_mpu6050: use the common inv_sensors timestamp module
iio: invensense: fix timestamp glitches when switching frequency
iio: imu: inv_icm42600: stabilized timestamp in interrupt
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
iio: imu: inv_mpu6050: fix frequency setting when chip is off
iio: invensense: fix odr switching to same value
iio: imu: inv_icm42600: fix timestamp clock period by using lower value
Jeff Layton (1):
nfsd: reset write verifier on deferred writeback errors
Jessica Zhang (2):
drm/msm/dp: fix HPD state status bit shift value
drm/msm/dp: Fix the ISR_* enum values
Jiakai Xu (1):
PM: sleep: Use complete() in device_pm_sleep_init()
Jiasheng Jiang (1):
clk: imx: Add check for kcalloc
Jiayuan Chen (1):
net/sched: cls_bpf: prevent unbounded recursion in offload rollback
Jihed Chaibi (1):
ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint
Jiri Slaby (SUSE) (1):
PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
Joanne Koong (1):
fuse: re-lock request before returning from fuse_ref_folio()
Johan Hovold (20):
i2c: core: fix irq domain leak on adapter registration failure
i2c: core: fix hang on adapter registration failure
i2c: core: fix NULL-deref on adapter registration failure
i2c: core: fix adapter debugfs creation
i2c: core: fix adapter registration race
Bluetooth: btusb: fix use-after-free on registration failure
virtio-mmio: fix device release warning on module unload
USB: idmouse: fix use-after-free on disconnect race
USB: ldusb: fix use-after-free on disconnect race
USB: iowarrior: fix use-after-free on disconnect
USB: legousbtower: fix use-after-free on disconnect race
USB: serial: digi_acceleport: fix broken rx after throttle
USB: serial: digi_acceleport: fix hard lockup on disconnect
USB: ulpi: fix memory leak on registration failure
MIPS: ip22-gio: fix gio device memory leak
MIPS: ip22-gio: fix kfree() of static object
MIPS: ip22-gio: fix device reference leak in probe
Bluetooth: btusb: fix use-after-free on marvell probe failure
Bluetooth: btusb: fix wakeup source leak on probe failure
USB: serial: digi_acceleport: fix write buffer corruption
John Johansen (1):
apparmor: fix label can not be immediately before a declaration
Joseph Qi (1):
ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()
Joshua Crofts (4):
iio: light: opt3001: fix missing state reset on timeout
iio: light: si1133: reset counter to prevent race condition
iio: light: si1133: prevent race condition on timeout
iio: magnetometer: ak8975: fix potential kernel stack memory leak
Jozsef Kadlecsik (1):
netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
Julian Anastasov (2):
ipvs: ensure inner headers in ICMP errors are in headroom
ipvs: fix more places with wrong ipv6 transport offsets
Junrui Luo (1):
powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()
Keenan Dong (1):
rtmutex: Use waiter::task instead of current in remove_waiter()
Keshav Verma (1):
f2fs: fix listxattr handling of corrupted xattr entries
Kiran K (1):
Bluetooth: btintel: Fix offset calculation boot address parameter
Kiryl Shutsemau (1):
userfaultfd: gate must_wait writability check on pte_present()
Krishna chaitanya chundru (1):
bus: mhi: host: Add alignment check for event ring read pointer
Kristian Evensen (1):
net: ethernet: rmnet: Always subtract MAP header
Krzysztof Kozlowski (1):
crypto: atmel-sha204a - Mark OF related data as maybe unused
Krzysztof Wilczyński (3):
alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
proc: only bump parent nlink when registering directories
Kunihiko Hayashi (1):
spi: uniphier: Fix completion initialization order before devm_request_irq()
Kuniyuki Iwashima (3):
net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
ipv4: fib: Don't ignore error route in local/main tables.
ipv6: mcast: Replace locking comments with lockdep annotations.
Kyle Zeng (1):
ocfs2: avoid moving extents to occupied clusters
Lad Prabhakar (2):
mmc: renesas_sdhi: Add quirk entry for RZ/G2H SoC
PCI: rcar-host: Remove unused LIST_HEAD(res)
Lars Pöschel (1):
spi: xilinx: use FIFO occupancy register to determine buffer size
Lars-Peter Clausen (1):
iio: event: Fix event FIFO reset race
Laxman Acharya Padhya (1):
Bluetooth: btrtl: validate firmware patch bounds
Lee Jones (1):
HID: core: Fix OOB read in hid_get_report for numbered reports
Leon Hwang (1):
bpf: Update transport_header when encapsulating UDP tunnel in lwt
Li RongQing (3):
PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
net/mlx5: Fix L3 tunnel entropy refcount leak
fbdev: sm712: Fix operator precedence in big_swap macro
Lianfa Weng (1):
RDMA/hns: Fix warning in poll cq direct mode
Lifeng Zheng (1):
cpufreq: conservative: Simplify frequency limit handling
Linmao Li (1):
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
Liviu Stan (2):
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
Longjun Tang (1):
virtio_net: disable cb when NAPI is busy-polled
Lothar Rubusch (1):
crypto: atmel-sha204a - fix blocking and non-blocking rng logic
Louis Scalbert (1):
bonding: 3ad: fix mux port state on oper down
Luca Leonardo Scorcia (2):
pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39
pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39
Luiz Augusto von Dentz (3):
Bluetooth: btintel: Check firmware version before download
Bluetooth: L2CAP: Fix not tracking outstanding TX ident
Bluetooth: L2CAP: Fix regressions caused by reusing ident
Lukas Wunner (1):
X.509: Fix validation of ASN.1 certificate header
Maciej W. Rozycki (3):
MIPS: Fix big-endian stack argument fetching in o32 wrapper
MIPS: DEC: Remove do_IRQ() call indirection
MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
Madhu M (1):
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
Maher Sanalla (1):
RDMA/mlx5: Fix undefined shift of user RQ WQE size
Mahesh Vaidya (2):
PCI: altera: Do not dispose parent IRQ mapping
PCI: altera: Fix resource leaks on probe failure
Manish Khadka (1):
HID: appleir: fix UAF on pending key_up_timer in remove()
Manivannan Sadhasivam (2):
PCI: mediatek: Use actual physical address instead of virt_to_phys()
PCI: mediatek: Fix IRQ domain leak when port fails to enable
Maoyi Xie (12):
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
ALSA: firewire: isight: bound the sample count to the packet payload
HID: lg-g15: cancel pending work on remove to fix a use-after-free
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink
net: sit: require CAP_NET_ADMIN in the device netns for changelink
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
memstick: ms_block: reject a card that reports too many blocks
Marc Zyngier (1):
KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
Marco Nenciarini (1):
PCI: Skip Resizable BAR restore on read error
Martin Kaiser (1):
tracing: probes: fix typo in a log message
Martin Wilck (2):
scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"
scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
Martiros Shakhzadyan (4):
media: staging: media: atomisp: Fix sh_css.c brace coding style issues
media: staging: media: atomisp: Fix the rest of sh_css.c brace issues
media: staging: media: atomisp: Replace if else clause with a ternary
media: staging: media: atomisp: Fix alignment and line length issues
Masami Hiramatsu (Google) (2):
tracing/events: Fix to check the simple_tsk_fn creation
tracing/probes: Fix double addition of offset for @+FOFFSET
Matthias Feser (1):
serial: 8250_omap: clear rx_running on zero-length DMA completes
Matti Vaittinen (1):
hwmon: adm1275: Prevent reading uninitialized stack
Matvey Kovalev (1):
afs: fix NULL pointer dereference in afs_get_tree()
Mauricio Faria de Oliveira (1):
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
Maxime Bélair (1):
apparmor: fix potential UAF in aa_replace_profiles
Maxwell Doose (4):
iio: adc: lpc32xx: Initialize completion before requesting IRQ
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
iio: adc: spear: Initialize completion before requesting IRQ
fs: efs: remove unneeded debug prints
Michael Bommarito (13):
NFSv4/flexfiles: reject zero filehandle version count
hwrng: virtio: clamp device-reported used.len at copy_data()
udf: validate free block extents against the partition length
RDMA/siw: bound Read Response placement to the RREAD length
tipc: require net admin for TIPCv2 netlink mutators
tipc: prevent snt_unacked underflow on CONN_ACK
net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
ocfs2: reject dinodes with non-canonical i_mode type
ocfs2: reject dinodes whose i_rdev disagrees with the file type
ocfs2: reject non-inline dinodes with i_size and zero i_clusters
ieee802154: admin-gate legacy LLSEC dump operations
ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation
drbd: reject data replies with an out-of-range payload size
Michael Straube (1):
staging: rtl8723bs: clean up comparsions to NULL
Michal Kosiorek (1):
xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
Mike Snitzer (2):
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write
Mikhail Gavrilov (1):
udmabuf: fix DMA direction mismatch in release_udmabuf()
Mikulas Patocka (6):
dm-ioctl: report an error if a device has no table
dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
dm-stats: fix dm_jiffies_to_msec64
dm-stats: fix merge accounting
dm_early_create: fix freeing used table on dm_resume failure
dm-verity: increase sprintf buffer size
Ming-Hung Tsai (1):
dm thin metadata: fix metadata snapshot consistency on commit failure
Mingyu Wang (1):
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
Miquel Raynal (1):
mtd: spi-nor: Drop duplicate Kconfig dependency
Muhammad Bilal (2):
Bluetooth: L2CAP: validate option length before reading conf opt value
netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
Muhammet Kaan KILINÇ (1):
crypto: algif_skcipher - force synchronous processing on trees without ctx->state
Myeonghun Pak (4):
HID: wacom: stop hardware after post-start probe failures
usb: sl811-hcd: disable controller wakeup on remove
USB: misc: uss720: unregister parport on probe failure
ata: sata_gemini: unwind clocks on IDE pinctrl errors
NeilBrown (2):
nfsd: move name lookup out of nfsd4_list_rec_dir()
nfsd: change nfs4_client_to_reclaim() to allocate data
Neill Kapron (1):
usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
Nickolay Goppen (1):
arm64: dts: qcom: sdm630: describe adsp_mem region properly
Nikita Zhandarovich (1):
ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
Nilay Shroff (1):
nvme-multipath: fix flex array size in struct nvme_ns_head
Norbert Manthey (1):
smb: client: mask server-provided mode to 07777 in modefromsid
Nuno Sá (1):
dmaengine: Fix possible use after free
Nuoqi Gui (2):
bpf: Fix stack slot index in nospec checks
seg6: validate SRH length before reading fixed fields
Oliver Hartkopp (3):
can: isotp: use unconditional synchronize_rcu() in isotp_release()
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
can: bcm: add missing rcu list annotations and operations
Oliver Neukum (1):
usb: iowarrior: remove inherent race with minor number
Pablo Neira Ayuso (1):
netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
Paul Louvel (1):
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
Pauli Virtanen (1):
Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
Pengjie Zhang (2):
cpufreq: Documentation: fix sampling_down_factor range
cpufreq: Documentation: fix conservative governor freq_step description
Pengpeng Hou (11):
iio: adc: ti-ads124s08: Return reset GPIO lookup errors
sparc: led: avoid trimming a newline from empty writes
spi: sh-msiof: abort transfers when reset times out
gpio: mvebu: fail probe if gpiochip registration fails
gpio: htc-egpio: use managed gpiochip registration
hwmon: (w83627hf) remove VID sysfs files on error and remove
hwmon: (w83793) remove vrm sysfs file on probe failure
mtd: onenand: samsung: report DMA completion timeouts
mtd: rawnand: fsl_ifc: return errors for failed page reads
mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
Phillip Varney (1):
clk: qcom: a53: Corrected frequency multiplier for 1152MHz
Prathamesh Deshpande (1):
RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
Qianfeng Rong (1):
netfilter: ebtables: Use vmalloc_array() to improve code
Qihang (1):
gue: validate REMCSUM private option length
Qihang Tang (1):
vhost/vdpa: validate virtqueue index in mmap and fault paths
Qu Wenruo (1):
btrfs: do not trim a device which is not writeable
Rafael Beims (1):
wifi: mwifiex: fix permanently busy scans after multiple roam iterations
Rafael J. Wysocki (4):
thermal: hwmon: Fix critical temperature attribute removal
x86/platform/olpc: xo15: Drop wakeup source on driver removal
platform/x86: xo15-ebook: Fix wakeup source and GPE handling
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
Ranjan Kumar (1):
Input: elan_i2c - prevent division by zero and arithmetic underflow
Ratheesh Kannoth (2):
PCI: host-common: Request bus reassignment when not probe-only
octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
Renjiang Han (1):
media: qcom: venus: drop extra padding in NV12 raw size calculation
Ricardo Neri (1):
thermal: intel: Fix dangling resources on thermal_throttle_online() failure
Ricardo Ribalda (3):
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
media: uvcvideo: Avoid partial metadata buffers
media: uvcvideo: Fix buffer sequence in frame gaps
Ricardo Robaina (2):
audit: add audit_log_nf_skb helper function
audit: fix potential integer overflow in audit_log_n_hex()
Richard Zhu (1):
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
Rodrigo Lugathe da Conceição Alves (1):
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
Roman Vivchar (1):
i2c: mediatek: fix WRRD for SoCs without auto_restart option
Ronaldo Nunez (1):
pwm: imx27: Fix variable truncation in .apply()
Ronan Dalton (1):
rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
Ronnie Sahlberg (1):
cifs: Create a new shared file holding smb2 pdu definitions
Rosen Penev (1):
HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter
Rui Qi (1):
riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe
Ruijie Li (1):
crypto: pcrypt - restore callback for non-parallel fallback
Ruipeng Qi (1):
f2fs: fix potential deadlock in f2fs_balance_fs()
Runyu Xiao (10):
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
gpio: eic-sprd: use raw_spinlock_t in the irq startup path
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
kcm: use WRITE_ONCE() when changing lower socket callbacks
netfilter: nft_synproxy: stop bypassing the priv->info snapshot
wifi: rt2x00: avoid full teardown before work setup in probe
mmc: vub300: defer reset until cmd_mutex is unlocked
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
coresight: etb10: restore atomic_t for shared reading state
Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
Ruoyu Wang (3):
apparmor: check label build before no_new_privs test
net: sungem: fix probe error cleanup
mtd: slram: remove failed entries from the device list
Ruslan Valiyev (1):
apparmor: fix use-after-free in rawdata dedup loop
Ryan Lee (1):
apparmor: grab ns lock and refresh when looking up changehat child profiles
Ryder Lee (1):
PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()
Sagi Grimberg (1):
pNFS/filelayout: fix cheking if a layout is striped
Sam Day (1):
usbip: vudc: fix NULL deref in vep_dequeue()
Samuel Holland (2):
media: cedrus: Fix failure to clean up hardware on probe failure
bus: sunxi-rsb: Always check register address validity
Samuel Moelius (3):
net/sched: hhf: clear heavy-hitter state on reset
net/sched: cake: reject overhead values that underflow length
dm era: fix out-of-bounds memory access for non-zero start sector
Samuel Page (1):
tipc: fix out-of-bounds read in broadcast Gap ACK blocks
Sandipan Das (1):
perf/x86/amd/core: Always use the NMI latency mitigation
Sang-Heon Jeon (1):
mm/fake-numa: fix under-allocation detection in uniform split
Sanjay Chitroda (1):
iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
Sanman Pradhan (1):
xfrm: use compat translator only for u64 alignment mismatch
Sara Venkatesh (1):
RDMA/srpt: fix integer overflow in immediate data length check
Sayali Patil (2):
selftests/mm: clarify alternate unmapping in compaction_test
selftests/mm: allow PUD-level entries in compound testcase of hmm tests
Sean Christopherson (4):
KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
iommu/amd: Fix a stale comment about which legacy mode is user visible
crypto: ccp - Treat zero-length cert chain as query for blob lengths
Sebastian Andrzej Siewior (1):
net: Drop the lock in skb_may_tx_timestamp()
Sechang Lim (1):
bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
Seungjin Bae (2):
usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()
usb: host: max3421: Reject hub port requests for non-existent ports
Sharath Chandra Vurukala (1):
net: ethernet: rmnet: Support for ingress MAPv5 checksum offload
Shigeru Yoshida (1):
qede: fix off-by-one in BD ring consumption on build_skb failure
Shitalkumar Gandhi (2):
ieee802154: ca8210: fix cas_ctl leak on spi_async failure
ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
Shivam Kumar (1):
nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
Shoichiro Miyamoto (1):
smb: client: restrict implied bcc[0] exemption to responses without data area
Shuangpeng Bai (1):
llc: fix SAP refcount leak in llc_ui_autobind()
Siddharth Vadapalli (1):
soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy
Srinivas Pandruvada (1):
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
Stepan Ionichev (3):
iio: gyro: bmg160: bail out when bandwidth/filter is not in table
iio: gyro: bmg160: wait full startup time after mode change at probe
device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()
Stephan Gerhold (1):
serial: msm: Disable DMA for kernel console UART
Steven Rostedt (1):
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
Sunmin Jeong (1):
f2fs: fix to round down start offset of fallocate for pin file
Sven Eckelmann (14):
batman-adv: gw: acquire ethernet header only after skb realloc
batman-adv: access unicast_ttvn skb->data only after skb realloc
batman-adv: dat: acquire ARP hw source only after skb realloc
batman-adv: bla: reacquire gw address after skb realloc
batman-adv: dat: ensure accessible eth_hdr proto field
batman-adv: dat: fix tie-break for candidate selection
batman-adv: tt: avoid request storms during pending request
batman-adv: fix VLAN priority offset
batman-adv: frag: free unfragmentable packet
batman-adv: frag: fix primary_if leak on failed linearization
batman-adv: tt: prevent TVLV OOB check overflow
batman-adv: retrieve ethhdr after potential skb realloc on RX
batman-adv: ensure minimal ethernet header on TX
batman-adv: clean untagged VLAN on netdev registration failure
Sven Püschel (1):
media: rockchip: rga: fix too small buffer size
Taehee Yoo (10):
mld: convert from timer to delayed work
mld: get rid of inet6_dev->mc_lock
mld: convert ipv6_mc_socklist->sflist to RCU
mld: convert ip6_sf_list to RCU
mld: convert ifmcaddr6 to RCU
mld: add new workqueues for process mld events
mld: add mc_lock for protecting per-interface mld data
mld: change lockdep annotation for ip6_sf_socklist and ipv6_mc_socklist
net: mld: fix reference count leak in mld_{query | report}_work()
mld: fix suspicious RCU usage in __ipv6_dev_mc_dec()
Tetsuo Handa (1):
ocfs2: kill osb->system_file_mutex lock
Thomas Gleixner (1):
debugobjects: Plug race against a concurrent OOM disable
Thomas Weißschuh (1):
proc: use generic setattr() for /proc/$PID/net
Thorsten Blum (7):
crypto: caam - use print_hex_dump_devel to guard key hex dumps
crypto: caam - use print_hex_dump_devel to guard key hex dumps again
crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
x86/boot: Validate console=uart8250 baud rate to fix early boot hang
x86/boot: Reject too long acpi_rsdp= values
tpm: fix event_size output in tpm1_binary_bios_measurements_show
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
Tianxiang Chen (1):
cpufreq: Fix hotplug-suspend race during reboot
Timur Tabi (1):
regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
Tomi Valkeinen (1):
drm/tidss: Drop extra drm_mode_config_reset() call
Tristan Madani (6):
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
wifi: ath9k: fix OOB access from firmware tx status queue ID
wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
ocfs2: use kzalloc for quota recovery bitmap allocation
hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
Trung Nguyen (1):
HID: multitouch: fix out-of-bounds bit access on mt_io_flags
Tyler Baker (1):
usb: gadget: f_fs: initialize reset_work at allocation time
Uwe Kleine-König (5):
drm/i2c/sil164: Drop no-op remove function
leds: lm3697: Remove duplicated error reporting in .remove()
leds: lm3601x: Improve error reporting for problems during .remove()
gpio: pca953x: Make platform teardown callback return void
crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
Viacheslav Dubeyko (1):
hfs/hfsplus: prevent getting negative values of offset/length
Victor Nogueira (3):
net/sched: sch_hfsc: Don't make class passive twice
net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
Vidhu Sarwal (1):
iio: light: al3010: fix incorrect scale for the highest gain range
Vladimir Zapolskiy (1):
gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe
Wang Jun (1):
soc: fsl: qe: panic on ioremap() failure in qe_reset()
Wang Yan (1):
time: Fix off-by-one in compat settimeofday() usec validation
Weiming Shi (4):
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
sctp: validate STALE_COOKIE cause length before reading staleness
WenTao Liang (2):
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
power: supply: charger-manager: fix refcount leak in is_full_charged()
Wenjie Qi (1):
f2fs: validate orphan inode entry count
Wentao Liang (3):
mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
xen/gntdev: fix error handling in ioctl
ata: pata_pxa: Fix DMA channel leak on probe error
Wolfram Sang (1):
hwspinlock: qcom: avoid uninitialized struct members
Woojin Ji (1):
bpftool: Use libbpf error code for flow dissector query
Wyatt Feng (4):
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
netfilter: xt_u32: reject invalid shift counts
netfilter: xt_cluster: reject template conntracks in hash match
netfilter: xt_nat: reject unsupported target families
Xiang Mei (10):
netfilter: nf_log: validate MAC header was set before dumping it
netfilter: ipset: fix race between dump and ip_set_list resize
netfilter: ebtables: terminate table name before find_table_lock()
drm/edid: fix OOB read in drm_parse_tiled_block()
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
net: qualcomm: rmnet: validate MAP frame length before ingress parsing
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
Xiang Mei (Microsoft) (1):
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
Xin Long (2):
sctp: validate embedded address parameter length
sctp: hold socket lock when dumping endpoints in sctp_diag
Xingjing Deng (1):
kconfig: fix potential NULL pointer dereference in conf_askvalue
Xu Rao (4):
USB: storage: include US_FL_NO_SAME in quirks mask
USB: usb-storage: ene_ub6250: restore media-ready check
scsi: sg: Report request-table problems when any status is set
usb: gadget: f_printer: take kref only for successful open
Xuanqiang Luo (2):
i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
llc: fix SAP refcount leak when creating incoming sockets
Yadan Fan (1):
MIPS: mm: Fix out-of-bounds write in maar_res_walk()
Yichong Chen (2):
usbip: tools: support SuperSpeedPlus devices
tools/mm/slabinfo: fix total_objects attribute name
Yiming Qian (1):
net: skmsg: preserve sg.copy across SG transforms
Yingchao Deng (1):
coresight: cti: Fix DT filter signals silently ignored
Yizhou Zhao (8):
6lowpan: fix NHC entry use-after-free on error path
net/9p: fix race condition on rdma->state in trans_rdma.c
ipvs: pass parsed transport offset to state handlers
ipvs: use parsed transport offset in TCP state lookup
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
netfilter: nf_conncount: fix zone comparison in tuple dedup
ipvs: use parsed transport offset in SCTP state lookup
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
Yong Wang (1):
net: ife: require ETH_HLEN to be pullable in ife_decode()
Yousef Alhouseen (4):
Bluetooth: bnep: pin L2CAP connection during netdev registration
Bluetooth: fix UAF in bt_accept_dequeue()
mac802154: remove interfaces with RCU list deletion
xfs: use null daddr for unset first bad log block
Yue Haibing (1):
ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
Yuho Choi (5):
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
ARM: imx3: Fix CCM node reference leak
ARM: imx31: Fix IIM mapping leak in revision check
ACPI: IPMI: Fix message kref handling on dead device
Yun Zhou (1):
net: mvneta: re-enable percpu interrupt on resume
Yuyang Huang (1):
ipv4: igmp: remove multicast group from hash table on device destruction
Zhan Xusheng (1):
posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
Zhang Cen (3):
ocfs2: rebase copied fsdlm LVB pointers in locking_state
ocfs2: reject FITRIM ranges shorter than a cluster
ocfs2/dlm: require a ref for locking_state debugfs open
Zhang Lixu (1):
iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
Zhang Yi (1):
ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback
Zhao Dongdong (3):
ALSA: es1938: check snd_ctl_new1() return value
reset: sunxi: fix memory region leak on ioremap failure
ALSA: aoa: check snd_ctl_new1() return value
ZhengYuan Huang (1):
ocfs2: don't BUG_ON an invalid journal dinode
Zhengchuan Liang (1):
net: atm: reject out-of-range traffic classes in QoS validation
Zhiling Zou (1):
wifi: mac80211: free ack status frame on TX header build failure
Zhixing Chen (1):
netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
Zihan Xi (2):
smb: client: use unaligned reads in parse_posix_ctxt()
smb: client: harden POSIX SID length parsing
Zijing Yin (1):
net: af_key: initialize alg_key_len for IPComp states
Zilin Guan (1):
media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
Zygmunt Krynicki (3):
apparmor: aa_label_alloc use aa_label_free on alloc failure
apparmor: aa_getprocattr free procattr leak on format failure
apparmor: put secmark label after secid lookup
longlong yan (1):
tools/virtio: check mmap return value in vringh_test
胡连勤 (1):
usb: xhci: Fix sleep in atomic context in xhci_free_streams()
next reply other threads:[~2026-07-24 15:05 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-07-24 15:05 Greg Kroah-Hartman [this message]
2026-07-24 15:05 ` Linux 5.10.261 Greg Kroah-Hartman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2026072432-recess-fetal-2bf1@gregkh \
--to=gregkh@linuxfoundation.org \
--cc=akpm@linux-foundation.org \
--cc=jslaby@suse.cz \
--cc=linux-kernel@vger.kernel.org \
--cc=lwn@lwn.net \
--cc=stable@vger.kernel.org \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.