[PATCH 6.6 00/72] 6.6.123-rc1 review

Greg Kroah-Hartman
2026-02-04T15:19:31Z

This is the start of the stable review cycle for the 6.6.123 release.
There are 72 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 06 Feb 2026 14:38:23 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.123-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 6.6.123-rc1

Alexis Lothoré (eBPF Foundation) <alexis.lothore@bootlin.com>
bpf/selftests: test_select_reuseport_kern: Remove unused header

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Revert "net: Remove conditional threaded-NAPI wakeup based on task state."

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Revert "net: Allow to use SMP threads for backlog NAPI."

Alex Deucher <alexander.deucher@amd.com>
drm/amd/display: use udelay rather than fsleep

Eric Dumazet <edumazet@google.com>
ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Marios Makassikis <mmakassikis@freebox.fr>
ksmbd: fix recursive locking in RPC handle list access

e.kubanski <e.kubanski@partner.samsung.com>
xsk: Fix race condition in AF_XDP generic RX path

Jon Doron <jond@wiz.io>
drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove

Philip Yang <Philip.Yang@amd.com>
drm/amdkfd: Don't use sw fault filter if retry cam enabled

Krzysztof Kozlowski <krzysztof.kozlowski@oss.qualcomm.com>
pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins

Matthieu Baerts (NGI0) <matttbe@kernel.org>
mptcp: avoid dup SUB_CLOSED events after disconnect

Laveesh Bansal <laveeshb@laveeshbansal.com>
writeback: fix 100% CPU usage when dirtytime_expire_interval is 0

Steven Rostedt <rostedt@goodmis.org>
perf: sched: Fix perf crash with new is_user_task() helper

Johan Hovold <johan@kernel.org>
drm/msm/a6xx: fix bogus hwcg register updates

Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver

Takashi Iwai <tiwai@suse.de>
ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check

Chen Ni <nichen@iscas.ac.cn>
net/sched: act_ife: convert comma to semicolon

JP Kobryn <inwardvessel@gmail.com>
btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()

Robert McClinton <rbmccav@gmail.com>
drm/radeon: delete radeon_fence_process in is_signaled, no deadlock

Nikola Z. Ivanov <zlatistiv@gmail.com>
team: Move team device type change at the end of team_port_add

Kang Yang <quic_kangyang@quicinc.com>
wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode

Johannes Berg <johannes.berg@intel.com>
wifi: mac80211: move TDLS work to wiphy work

Yunseong Kim <ysk@kzalloc.com>
ksmbd: Fix race condition in RPC handle list access

Srinivasan Shanmugam <srinivasan.shanmugam@amd.com>
drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV

Thomas Fourier <fourier.thomas@gmail.com>
ksmbd: smbd: fix dma_unmap_sg() nents

Alexander Usyskin <alexander.usyskin@intel.com>
mei: trace: treat reg parameter as string

Mark Rutland <mark.rutland@arm.com>
arm64/fpsimd: signal: Fix restoration of SVE context

Mark Rutland <mark.rutland@arm.com>
arm64/fpsimd: signal: Consistently read FPSIMD context

Mark Rutland <mark.rutland@arm.com>
arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state

Pimyn Girgis <pimyn@google.com>
mm/kfence: randomize the freelist on initialization

Robin Murphy <robin.murphy@arm.com>
gpio: rockchip: Stop calling pinctrl for set_direction

Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gfx11: fix wptr reset in KGQ init

Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gfx10: fix wptr reset in KGQ init

Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/soc21: fix xclk for APUs

Johan Hovold <johan@kernel.org>
drm/imx/tve: fix probe device leak

Tamir Duberstein <tamird@kernel.org>
scripts: generate_rust_analyzer: Add compiler_builtins -> core dep

Jan Kara <jack@suse.cz>
flex_proportions: make fprop_new_period() hardirq safe

Matthieu Baerts (NGI0) <matttbe@kernel.org>
selftests: mptcp: join: fix local endp not being tracked

Matthieu Baerts (NGI0) <matttbe@kernel.org>
selftests: mptcp: check subflow errors in close events

Matthieu Baerts (NGI0) <matttbe@kernel.org>
selftests: mptcp: check no dup close events after error

Matthieu Baerts (NGI0) <matttbe@kernel.org>
mptcp: only reset subflow errors when propagated

Kohei Enju <kohei@enjuk.jp>
efivarfs: fix error propagation in efivar_entry_get()

Thomas Fourier <fourier.thomas@gmail.com>
scsi: qla2xxx: edif: Fix dma_free_coherent() size

Martin Larsson <martin.larsson@actia.se>
gpio: pca953x: mask interrupts in irq shutdown

Zhang Heng <zhangheng@kylinos.cn>
ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO

Haoxiang Li <lihaoxiang@isrc.iscas.ac.cn>
scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()

Fabio Estevam <festevam@gmail.com>
ASoC: fsl: imx-card: Do not force slot width to sample width

Miguel Ojeda <ojeda@kernel.org>
rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target

Han Gao <gaohan@iscas.ac.cn>
riscv: compat: fix COMPAT_UTS_MACHINE definition

Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
pinctrl: meson: mark the GPIO controller as sleeping

Sai Sree Kartheek Adivi <s-adivi@ti.com>
dma/pool: distinguish between missing and exhausted atomic pools

Denis Sergeev <denserg.edu@gmail.com>
gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler

Tagir Garaev <tgaraev653@gmail.com>
ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion

Kery Qi <qikeyu2017@gmail.com>
scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()

Jianbo Liu <jianbol@nvidia.com>
net/mlx5e: Skip ESN replay window setup for IPsec crypto offload

Martin Kaiser <martin@kaiser.cx>
net: bridge: fix static key check

Kuniyuki Iwashima <kuniyu@google.com>
nfc: nci: Fix race between rfkill and nci_unregister_device().

Gal Pressman <gal@nvidia.com>
net/mlx5e: Account for netdev stats in ndo_get_stats64

Yafang Shao <laoar.shao@gmail.com>
net/mlx5e: Report rx_discards_phy via rx_dropped

Mark Bloch <mbloch@nvidia.com>
net/mlx5e: TC, delete flows only for existing peers

Jesse Brandeburg <jbrandeburg@cloudflare.com>
ice: stop counting UDP csum mismatch as rx_errors

Kuniyuki Iwashima <kuniyu@google.com>
nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().

Kery Qi <qikeyu2017@gmail.com>
rocker: fix memory leak in rocker_world_port_post_fini()

Kery Qi <qikeyu2017@gmail.com>
net: wwan: t7xx: fix potential skb->frags overflow in RX path

Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: use the right ifindex when replying to icmpv6 from localhost

Zilin Guan <zilin@seu.edu.cn>
net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()

Eric Dumazet <edumazet@google.com>
bonding: annotate data-races around slave->last_rx

Zilin Guan <zilin@seu.edu.cn>
octeon_ep: Fix memory leak in octep_device_setup()

Justin Chen <justin.chen@broadcom.com>
net: bcmasp: fix early exit leak with fixed phy

Marc Kleine-Budde <mkl@pengutronix.de>
can: gs_usb: gs_usb_receive_bulk_callback(): fix error message

Zilin Guan <zilin@seu.edu.cn>
net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()

Jia-Hong Su <s11242586@gmail.com>
Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work

-------------

Diffstat:

Makefile | 4 +-
arch/arm64/kernel/signal.c | 92 ++++++-----
arch/riscv/include/asm/compat.h | 2 +-
drivers/bluetooth/hci_ldisc.c | 4 +-
drivers/gpio/gpio-pca953x.c | 2 +
drivers/gpio/gpio-rockchip.c | 8 -
drivers/gpio/gpiolib-acpi.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 10 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 3 +-
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/soc21.c | 8 +-
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 2 +-
drivers/gpu/drm/imx/ipuv3/imx-tve.c | 13 ++
drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 2 -
drivers/gpu/drm/radeon/radeon_fence.c | 8 -
drivers/misc/mei/mei-trace.h | 18 +--
drivers/net/bonding/bond_main.c | 18 ++-
drivers/net/bonding/bond_options.c | 8 +-
drivers/net/can/usb/gs_usb.c | 4 +-
drivers/net/ethernet/broadcom/asp2/bcmasp_intf.c | 5 +-
drivers/net/ethernet/intel/ice/ice_main.c | 1 -
drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +-
.../net/ethernet/marvell/octeon_ep/octep_main.c | 2 +-
.../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 3 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 19 ++-
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 19 ++-
.../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +-
drivers/net/ethernet/rocker/rocker_main.c | 5 +-
drivers/net/tap.c | 6 +-
drivers/net/team/team.c | 23 ++-
drivers/net/tun.c | 6 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 10 +-
drivers/net/wwan/t7xx/t7xx_hif_dpmaif_rx.c | 9 +-
drivers/pinctrl/meson/pinctrl-meson.c | 2 +-
drivers/pinctrl/pinctrl-rockchip.c | 9 +-
drivers/pinctrl/qcom/Kconfig | 15 +-
drivers/pinctrl/qcom/Makefile | 1 -
drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 ++
drivers/pinctrl/qcom/pinctrl-sc7280-lpass-lpi.c | 3 +
drivers/pinctrl/qcom/pinctrl-sm8350-lpass-lpi.c | 167 --------------------
drivers/scsi/be2iscsi/be_mgmt.c | 1 +
drivers/scsi/qla2xxx/qla_os.c | 2 +-
drivers/target/sbp/sbp_target.c | 4 +-
fs/btrfs/relocation.c | 13 ++
fs/efivarfs/vars.c | 2 +-
fs/fs-writeback.c | 14 +-
fs/smb/server/mgmt/user_session.c | 21 ++-
fs/smb/server/smb2pdu.c | 9 +-
fs/smb/server/transport_ipc.c | 12 ++
fs/smb/server/transport_rdma.c | 15 +-
include/linux/ptr_ring.h | 17 +-
include/linux/sched.h | 5 +
include/linux/skb_array.h | 14 +-
include/net/bonding.h | 13 +-
include/net/nfc/nfc.h | 2 +
include/net/xdp_sock.h | 3 -
include/net/xsk_buff_pool.h | 2 +
kernel/dma/pool.c | 7 +-
kernel/events/callchain.c | 2 +-
kernel/events/core.c | 6 +-
lib/flex_proportions.c | 5 +-
mm/kfence/core.c | 23 ++-
net/bridge/br_input.c | 2 +-
net/core/dev.c | 172 +++++++--------------
net/ipv6/icmp.c | 4 +-
net/mac80211/ieee80211_i.h | 4 +-
net/mac80211/mlme.c | 7 +-
net/mac80211/tdls.c | 11 +-
net/mptcp/protocol.c | 13 +-
net/nfc/core.c | 27 +++-
net/nfc/llcp_commands.c | 17 +-
net/nfc/llcp_core.c | 4 +-
net/nfc/nci/core.c | 4 +-
net/sched/act_ife.c | 6 +-
net/sched/sch_generic.c | 4 +-
net/xdp/xsk.c | 6 +-
net/xdp/xsk_buff_pool.c | 1 +
scripts/Makefile.build | 2 +-
scripts/generate_rust_analyzer.py | 2 +-
sound/soc/amd/yc/acp6x-mach.c | 8 +
sound/soc/fsl/imx-card.c | 1 -
sound/soc/intel/boards/sof_es8336.c | 2 +-
sound/usb/endpoint.c | 3 +-
.../bpf/progs/test_select_reuseport_kern.c | 1 -
tools/testing/selftests/net/mptcp/mptcp_join.sh | 81 +++++++++-
88 files changed, 576 insertions(+), 543 deletions(-)