* [PATCH 6.6 0000/1424] 6.6.157-rc1 review
@ 2026-09-12 6:40 Greg Kroah-Hartman
2026-09-12 6:40 ` [PATCH 6.6 0001/1424] Revert "arm64: mm: Dont remap pgtables for allocate vs populate" Greg Kroah-Hartman
` (998 more replies)
0 siblings, 999 replies; 1437+ messages in thread
From: Greg Kroah-Hartman @ 2026-09-12 6:40 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
This is the start of the stable review cycle for the 6.6.157 release.
There are 1424 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Mon, 14 Sep 2026 06:54:17 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.157-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 6.6.157-rc1
Xixin Liu <liuxixin@kylinos.cn>
nvmet-rdma: fix queue leak when connect backlog is exceeded
Sandipan Das <sandipan.das@amd.com>
perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error
Eric Dumazet <edumazet@google.com>
net: hsr: must allocate more bytes for RedBox support
Dan Carpenter <dan.carpenter@linaro.org>
pinctrl: mediatek: common-v1: Fix error checking in mtk_eint_init()
Tomas Glozar <tglozar@redhat.com>
tools/build: Use SYSTEM_BPFTOOL for system bpftool
Takashi Iwai <tiwai@suse.de>
ALSA: control: Fix unannotated kfree() cleanup
Eric Dumazet <edumazet@google.com>
net: hsr: init prune_proxy_timer sooner
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
net: hsr: Use the seqnr lock for frames received via interlink port.
MD Danish Anwar <danishanwar@ti.com>
net: hsr: enable promiscuous mode on interlink port with fwd offload
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event()
Matvey Kovalev <matvey.kovalev@ispras.ru>
wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Roll back partial protocol table registration
Thomas Gleixner <tglx@linutronix.de>
irqdomain: Make build work for CONFIG_GENERIC_IRQ_CHIP=n
Wentao Liang <vulab@iscas.ac.cn>
nvme: target: rdma: fix ndev refcount leak on queue connect
Catalin Marinas <catalin.marinas@arm.com>
kselftest/arm64: mte: Use the correct naming for tag check modes in check_hugetlb_options.c
Catalin Marinas <catalin.marinas@arm.com>
kselftest/arm64: mte: Skip the hugetlb tests if MTE not supported on such mappings
e.kubanski <e.kubanski@partner.samsung.com>
xsk: Fix offset calculation in unaligned mode
Nick Chan <towinchenmi@gmail.com>
nvme-apple: Reset q->sq_tail during queue init
Nick Chan <towinchenmi@gmail.com>
nvme-apple: Prevent shared tags across queues on Apple A11
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: processor: Update cpuidle driver check in __acpi_processor_start()
Tony W Wang-oc <TonyWWang-oc@zhaoxin.com>
ACPI: processor: Add cpuidle driver check in acpi_processor_register_idle_driver()
Huisong Li <lihuisong@huawei.com>
ACPI: processor: idle: Remove redundant static variable and rename cstate check function
Huisong Li <lihuisong@huawei.com>
ACPI: processor: idle: Move max_cstate update out of the loop
Huisong Li <lihuisong@huawei.com>
ACPI: processor: idle: Remove redundant cstate check in acpi_processor_power_init
Chen-Yu Tsai <wenst@chromium.org>
pinctrl: mediatek: common-v1: Fix EINT breakage on older controllers
Hao Chang <ot_chhao.chang@mediatek.com>
pinctrl: mediatek: Fix new design debounce issue
Chen-Yu Tsai <wenst@chromium.org>
pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask()
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: sch_htb: limit htb_classify inner-class filter hops
Jiayuan Chen <jiayuan.chen@linux.dev>
tcp: fix corruption of urgent data on multi-segment retransmit
Deepanshu Kartikey <kartikey406@gmail.com>
usb: atm: usbatm: fix invalid ci_range initialization
bui duc phuc <phucduc.bui@gmail.com>
net: fec: only stop PTP if it was initialized
Eric Dumazet <edumazet@google.com>
slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup
Maxime Chevallier <maxime.chevallier@bootlin.com>
net: stmmac: selftests: Account for the UC filter list for filtering tests
Maxime Chevallier <maxime.chevallier@bootlin.com>
net: stmmac: dwxgmac: Account for the primary MAC address for UC filtering
Maxime Chevallier <maxime.chevallier@bootlin.com>
net: stmmac: dwmac4: Account for the primary MAC address for UC filtering
Maxime Chevallier <maxime.chevallier@bootlin.com>
net: stmmac: dwmac1000: Account for the primary MAC address for UC filtering
Maxime Chevallier <maxime.chevallier@bootlin.com>
net: stmmac: selftests: Check multiple MMC counters
Muhammad Usama Anjum <usama.anjum@arm.com>
selftests/arm64: Treat KSM merge_across_nodes as optional
Muhammad Usama Anjum <usama.anjum@arm.com>
selftests/arm64: Print missing MTE TAP headers
Yang Shi <yang@os.amperecomputing.com>
selftests: arm64: add hugetlb mte tests
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited()
Marino Dzalto <marino.dzalto@gmail.com>
netfilter: xt_HL: add pr_fmt and checkentry validation
Michal Koutný <mkoutny@suse.com>
netfilter: xt_cgroup: Make it independent from net_cls
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nf_tables: move hardware offload step after building the chain blob
Alice Mikityanska <alice@isovalent.com>
virtio-net: Ensure that TCP packets don't overflow gso_segs
Maxime Chevallier <maxime.chevallier@bootlin.com>
net: stmmac: selftests: Pass the IP proto mask in the TC selftest
bui duc phuc <phucduc.bui@gmail.com>
net: ethernet: sun4i-emac: Fix IRQ error handling
Haotian Zhang <vulab@iscas.ac.cn>
samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
Haotian Zhang <vulab@iscas.ac.cn>
samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-modify
Aleksandr Nogikh <nogikh@google.com>
libceph: validate banner payload length
Xiubo Li <xiubo.li@clyso.com>
ceph: revalidate ki_pos for O_APPEND writes after cap acquisition
HyeongJun An <sammiee5311@gmail.com>
ASoC: dapm: Fix off-by-one check on the second enum channel
John Johansen <john.johansen@canonical.com>
apparmor: policy_int make sure list heads are initialized before fail path
Thorsten Blum <thorsten.blum@linux.dev>
apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init
Ruoyu Wang <ruoyuw560@gmail.com>
tpm: st33zp24: Validate locality read result
Ruoyu Wang <ruoyuw560@gmail.com>
tpm: st33zp24: Return zero on status read failure
Victor Nogueira <victor@mojatatu.com>
net/sched: sch_teql: restore skb->dev on the slave failure path
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: sfq: clamp quantum to avoid signed overflow soft lockup
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: hhf: clamp quantum before hhf_change() to avoid overflow
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: fq_pie: clamp default quantum to avoid signed overflow
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: sch_codel: clamp default mtu to avoid disabling CoDel
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: fq_codel: clamp default quantum and mtu
Eric Dumazet <edumazet@google.com>
net/sched: act_skbmod: fix length calculations and avoid invalid header warnings
Eric Dumazet <edumazet@google.com>
net_sched: act_skbmod: use RCU in tcf_skbmod_dump()
Liam R. Howlett (Oracle) <liam@infradead.org>
maple_tree: fix argument name in header
Muhammad Usama Anjum <usama.anjum@arm.com>
selftests/mm: skip COW tmpfile cases when fallocate() is unsupported
Mark Brown <broonie@kernel.org>
selftests/mm: report unique test names for each cow test
Hao Ge <gehao@kylinos.cn>
selftests/mm/cow: modify the incorrect checking parameters
David Hildenbrand <david@redhat.com>
selftests: mm: cow: flag vmsplice() hugetlb tests as XFAIL
Ryan Roberts <ryan.roberts@arm.com>
selftests/mm/cow: generalize do_run_with_thp() helper
Frank Sorenson <sorenson@redhat.com>
cifs: fix clearing stats for fastest execution of each smb2 command
Allison Henderson <achender@kernel.org>
net/rds: use wq_has_sleeper() in rds_cong_map_updated()
Naveen Mamindlapalli <naveenm@marvell.com>
octeontx2-af: Fix TL3/TL2 link config ENA clearing
Xiang Mei <xmei5@asu.edu>
net: qualcomm: rmnet: restore skb->dev on deaggregated frames
Cen Zhang (Microsoft) <blbllhy@gmail.com>
gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
Hyunwoo Kim <imv4bel@gmail.com>
Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop
Chris Lu <chris.lu@mediatek.com>
Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path
Chris Lu <chris.lu@mediatek.com>
Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX
Ismail Tarim <ismailtarim7@gmail.com>
Bluetooth: btmtk: Do not discard the subsystem reset timeout
Pauli Virtanen <pav@iki.fi>
Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
Pavel Shpakovskiy <pashpakovskii@salutedevices.com>
Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference
Pauli Virtanen <pav@iki.fi>
Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
Geert Uytterhoeven <geert+renesas@glider.be>
erofs: Fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS default logic
Dan Carpenter <error27@gmail.com>
scsi: qla2xxx: Fix an loop timeout test
Cosmo Chou <chou.cosmo@gmail.com>
rtc: pcf85363: Add error checking to regmap calls in probe()
Junrui Luo <moonafterrain@outlook.com>
NFSv4/pnfs: key the data server cache on the NFS version
Jeff Layton <jlayton@kernel.org>
nfs: move the nfs4_data_server_cache into struct nfs_net
Junrui Luo <moonafterrain@outlook.com>
NFSv4.2: fix LAYOUTSTATS send buffer exhaustion
Mahanta Jambigi <mjambigi@linux.ibm.com>
net/smc: free pending qentry in smc_llc_flow_stop() before memset
Mahanta Jambigi <mjambigi@linux.ibm.com>
net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition
Eric Dumazet <edumazet@google.com>
inetpeer: randomize RB-tree node comparison using SipHash
Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
net: add missing ref_tracker_dir_exit() to net_passive_dec()
Ruoyu Wang <ruoyuw560@gmail.com>
net: ipa: balance runtime PM reference on remove error
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
net: ipa: Convert to platform remove callback returning void
Marek Czernohous <marek@czernohous.de>
forcedeth: stop the tx_timeout register dump past the requested window
Fan Ye <fy15309206903@gmail.com>
net: thunderbolt: Count delivered packets in rx_packets and rx_bytes
Ruoyu Wang <ruoyuw560@gmail.com>
net: bridge: Reject descending VLAN tunnel ranges
Cen Zhang (Microsoft) <blbllhy@gmail.com>
xsk: fix NULL pointer dereference in __xsk_rcv()
Maciej Fijalkowski <maciej.fijalkowski@intel.com>
xsk: avoid double checking against rx queue being full
Maciej Fijalkowski <maciej.fijalkowski@intel.com>
xsk: Get rid of xdp_buff_xsk::orig_addr
Serhat Kumral <serhatkumral1@gmail.com>
RDMA/ucma: Allow path records to exactly fit the output buffer
Haotian Zhang <vulab@iscas.ac.cn>
ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: core: Add scoped cleanup helper for card references
Takashi Iwai <tiwai@suse.de>
ALSA: control: Use guard() for locking
Takashi Iwai <tiwai@suse.de>
ALSA: control: Use automatic cleanup of kfree()
Geert Uytterhoeven <geert+renesas@glider.be>
clk: visconti: Make sure clk_init_data is fully initialized
Geert Uytterhoeven <geert+renesas@glider.be>
clk: ti: Make sure clk_init_data is fully initialized
Bradley Morgan <include@grrlz.net>
prctl: fix PR_SET_MM_AUXV losing the forced AT_NULL terminator
Linkai Gong <gonglinkai@kylinos.cn>
rtc: gamecube: check return value of devm_rtc_register_device()
Ruoyu Wang <ruoyuw560@gmail.com>
i2c: ocores: Disable clock on failed resume
Biju Das <biju.das.jz@bp.renesas.com>
irqchip/renesas-rzg2l: Fix loss of interrupt
Pengpeng Hou <pengpeng@iscas.ac.cn>
rtc: zynqmp: Return optional clock lookup errors
Christopher Lusk <clusk@northecho.dev>
smb: client: fix request buffer leak in smb2_new_read_req()
Yi Ding <yi.s.ding@gmail.com>
rtc: pcf8563: fix clock provider leak on unbind
Li RongQing <lirongqing@baidu.com>
vdpa/mlx5: fix wrong list iterated in add_direct_chain error path
Linfeng Sun <linfeng.sun.dev@gamil.com>
vdpa_sim: fix cleanup after worker creation failure
Michael S. Tsirkin <mst@redhat.com>
virtio_balloon: disable indirect descriptors
Jian-Ming Liao <Jm_Liao@asmedia.com.tw>
i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode
Adrian Hunter <adrian.hunter@intel.com>
i3c: mipi-i3c-hci: Refactor PIO register initialization
Adrian Hunter <adrian.hunter@intel.com>
i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc()
Adrian Hunter <adrian.hunter@intel.com>
i3c: mipi-i3c-hci: Quieten initialization messages
Jarkko Nikula <jarkko.nikula@linux.intel.com>
i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1
Jarkko Nikula <jarkko.nikula@linux.intel.com>
i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes
Ruoyu Wang <ruoyuw560@gmail.com>
bonding: initialize err for empty target lists
Nikolay Kulikov <nikolayof23@gmail.com>
mlxbf-bootctl: fix the build error with FIELD_PREP()
Guangshuo Li <lgs201920130244@gmail.com>
platform/x86: hp-bioscfg: fix password encoding bounds check
Nguyen Dinh Phi <phind.uet@gmail.com>
vsock: use sock_error() to consume sk_err after a failed connect
HyeongJun An <sammiee5311@gmail.com>
platform/x86: dell-wmi-sysman: Fix instance ID bounds
Mahanta Jambigi <mjambigi@linux.ibm.com>
net/smc: hash socket only after full initialisation in smc_sk_init()
Karl Mehltretter <kmehltretter@gmail.com>
8139cp: fix Rx and Tx not being disabled in cp_suspend
Baul Lee <baul.lee@xbow.com>
vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()
Ido Schimmel <idosch@nvidia.com>
vxlan: mdb: Add MDB bulk deletion support
Ido Schimmel <idosch@nvidia.com>
net: Add MDB bulk deletion device operation
Ido Schimmel <idosch@nvidia.com>
bridge: add MDB state mask uAPI attribute
Ido Schimmel <idosch@nvidia.com>
vxlan: mdb: Add MDB get support
Ido Schimmel <idosch@nvidia.com>
net: Add MDB get device operation
Ido Schimmel <idosch@nvidia.com>
bridge: add MDB get uAPI attributes
Ido Schimmel <idosch@nvidia.com>
vxlan: mdb: Factor out a helper for remote entry size calculation
Ido Schimmel <idosch@nvidia.com>
vxlan: mdb: Adjust function arguments
Xu Rao <raoxu@uniontech.com>
ALSA: hda: Fix connection list comparison in proc output
Baokun Li <libaokun@linux.alibaba.com>
fuse: check for NULL root inode in fuse_fill_super_submount
Zhang Tianci <zhangtianci.1997@bytedance.com>
fuse: check attributes staleness on fuse_iget()
Joanne Koong <joannelkoong@gmail.com>
fuse: convert readdir to use folios
Joanne Koong <joannelkoong@gmail.com>
fuse: support folios in struct fuse_args_pages and fuse_copy_pages()
Miklos Szeredi <mszeredi@redhat.com>
fuse: use FUSE_ROOT_ID in fuse_get_root_inode()
Jeff Layton <jlayton@kernel.org>
fuse: convert to new timestamp accessors
Weiming Shi <bestswngs@gmail.com>
fs/ntfs3: validate ef->size covers the record's name and value
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
Baokun Li <libaokun@linux.alibaba.com>
cuse: wait for pending RCU callbacks on module exit
Nikolay Aleksandrov <razor@blackwall.org>
net: bridge: vlan: fix inverted default vlan notification
Maximilian Immanuel Brandtner <maxbr@linux.ibm.com>
tls: fix RX desync on overlapping skbs
Ruoyu Wang <ruoyuw560@gmail.com>
net: dsa: mv88e6xxx: Fix PCS link check on CMODE read error
Xiang Mei <xmei5@asu.edu>
vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes
Joas Antonio dos Santos <joasantonio108@gmail.com>
ipvs: fix integer overflow in ftp helper port/address parsing
Xin Xie <xiexinet@gmail.com>
net: hsr: free learned nodes on device setup failure
Lukasz Majewski <lukma@denx.de>
net: hsr: Provide RedBox support (HSR-SAN)
Lukasz Majewski <lukma@denx.de>
net: hsr: Use full string description when opening HSR network device
Qingfang Deng <qingfang.deng@linux.dev>
pppox: drain queued packets on channel handoff
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: b53: fix error propagation from b53_fdb_dump()
Junseo Lim <zirajs7@gmail.com>
net: kcm: Hold RCU read lock while running BPF parser
Karl Mehltretter <kmehltretter@gmail.com>
octeontx2-af: initialize lmac_bmap in rvu_mcs_set_lmac_bmap()
Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
clk: ti: mux: resolve parent clocks by DT index, not by name
Ethan Carter Edwards <ethan@ethancedwards.com>
clk: ti: use kcalloc() instead of kzalloc()
Ruoyu Wang <ruoyuw560@gmail.com>
NFSv4: remove callback IDR entry on client allocation failure
Arnaud Bonnet <abo@medichon.fr>
nfs: refactor pNFS functions using clear_and_wake_up_bit
Arnaud Bonnet <abo@medichon.fr>
nfs: replace atomic bitops sequence with clear_and_wake_up_bit helper
Hang Nan <2122295973@qq.com>
ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: disconnect on SMB3 decryption failure
Junseo Lim <zirajs7@gmail.com>
bpf: Reject negative optlen in cgroup getsockopt hook
Andreas Schwab <schwab@linux-m68k.org>
m68k: nfcon: Do not call console_is_registered() in nfcon_device()
Junseo Lim <zirajs7@gmail.com>
lwt_bpf: Restore reserved headroom after xmit program
ZhangGuoDong <zhangguodong@kylinos.cn>
smb/server: preserve error status in smb2_handle_negotiate()
ZhangGuoDong <zhangguodong@kylinos.cn>
smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: free preauth sessions on connection teardown
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: do not advertise unimplemented CA support
Yunseong Kim <yunseong.kim@est.tech>
ksmbd: validate ipc response length before dereferencing its fields
Enzo Matsumiya <ematsumiya@suse.de>
smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer
Guangshuo Li <lgs201920130244@gmail.com>
ksmbd: Do not skip lock checks for single-byte ranges
Marius Cristea <marius.cristea@microchip.com>
hwmon: (emc1403) Drop hysteresis for low limit temperature
Guenter Roeck <linux@roeck-us.net>
hwmon: (emc1403) Rely on subsystem locking
Lars Petter Mostad <larspm@gmail.com>
hwmon: (emc1403) Add support for EMC1428 and EMC1438.
Guenter Roeck <linux@roeck-us.net>
hwmon: (emc1403) Support 11 bit accuracy
Guenter Roeck <linux@roeck-us.net>
hwmon: (emc1403) Convert to with_info API
Delphine CC Chiu <Delphine_CC_Chiu@wiwynn.com>
hwmon: (emc1403) Add support for EMC1442
Hongyan Xu <getshell@seu.edu.cn>
block: mtip32xx: synchronize ioctls with device removal
Niklas Cassel <cassel@kernel.org>
null_blk: serialize configfs attribute updates with device setup
Zizhi Wo <wozizhi@huawei.com>
null_blk: serialize configfs attribute stores with the lock
Zizhi Wo <wozizhi@huawei.com>
null_blk: reject per-device queue resize for shared tag set
Zizhi Wo <wozizhi@huawei.com>
null_blk: free global tag_set on init error path
Zizhi Wo <wozizhi@huawei.com>
null_blk: register configfs subsystem after creating default devices
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
null_blk: add configfs variable shared_tags
Zizhi Wo <wozizhi@huawei.com>
null_blk: use DEFINE_MUTEX for the file-scope mutex
Huisong Li <lihuisong@huawei.com>
mailbox: pcc: Fix command timeout due to missed interrupt
Sudeep Holla <sudeep.holla@arm.com>
Revert "mailbox/pcc: support mailbox management of the shared buffer"
Adam Young <admiyo@os.amperecomputing.com>
mailbox/pcc: support mailbox management of the shared buffer
Sudeep Holla <sudeep.holla@arm.com>
mailbox: pcc: Always map the shared memory communication address
Linmao Li <lilinmao@kylinos.cn>
mailbox: rockchip: disable pclk on probe failure and unbind
Arnaldo Carvalho de Melo <acme@redhat.com>
perf dso: Guard against cache underflow on short reads in dso_cache__memcpy()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf dso: Guard close() against invalid fd in dso__decompress_kmodule_path()
Zhushuai Yin <yinzhushuai@huawei.com>
crypto: hisilicon/sec2 - fix CCM algorithm long packet failure
Israel Téllez García <i.tellez@btesa.com>
bpf: Fix pending_pos walk on 32-bit ring position wrap
Hongyan Xu <getshell@seu.edu.cn>
ACPI: scan: fix bus ID cleanup on device_add() failures
Pengpeng Hou <pengpeng@iscas.ac.cn>
ASoC: SOF: validate topology volume range before allocation
Steven Rostedt <rostedt@goodmis.org>
tracing: Have trace_event_update_all() only handle module that is loading
Masami Hiramatsu (Google) <mhiramat@kernel.org>
tracing: Remove "__attribute__()" from the type field of event format
Aleksandr Nogikh <nogikh@google.com>
ALSA: core: Fix use-after-free in snd_card_do_free()
Zhan Xusheng <zhanxusheng1024@gmail.com>
fs/ntfs3: reject out-of-range evcn in mi_enum_attr()
Zhan Xusheng <zhanxusheng1024@gmail.com>
fs/ntfs3: fix integer overflow in MFT cluster validation
Bart Van Assche <bvanassche@acm.org>
scsi: ufs: core: Set task state before io_schedule_timeout()
Avri Altman <avri.altman@wdc.com>
scsi: ufs: core: Remove redundant host_lock calls around UTMRLDBR
Andrew Halaney <ahalaney@redhat.com>
scsi: ufs: core: Remove unnecessary wmb() after ringing doorbell
Chandrakanth Patil <chandrakanth.patil@broadcom.com>
scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers
Eduard Zingerman <eddyz87@gmail.com>
selftests/bpf: Fix for veristat file/prog filters processing
Phillip Lougher <phillip@squashfs.org.uk>
Squashfs: check block offset is not negative
Krystian Kaniewski <krystianmkaniewski@gmail.com>
ocfs2: fix circular locking dependency in ocfs2_init_acl()
Yuan Chen <chenyuan@kylinos.cn>
bpftool: Fix double close in map dump
Bijan Tabatabai <btabatabai@wisc.edu>
x86/pkeys: Fix pkey_alloc() return value when pkeys are not supported
John Keeping <jkeeping@inmusicbrands.com>
ALSA: seq: midi: Serialize input teardown with event_input
Takashi Iwai <tiwai@suse.de>
ALSA: seq: midi: Optimize event_input locking with RCU
Yuho Choi <dbgh9129@gmail.com>
clocksource/drivers/armada: Unwind timer clock on init failure
Guangshuo Li <lgs201920130244@gmail.com>
clocksource/drivers/clps711x: Do not unmap clocksource MMIO
Peter Oberparleiter <oberpar@linux.ibm.com>
s390/debug: Fix deadlock during unregister
Yuho Choi <dbgh9129@gmail.com>
xenbus: Unregister reboot notifier on init failure
Henrik Grimler <henrik.grimler@axis.com>
power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address
Henrik Grimler <henrik.grimler@axis.com>
power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address
Henrik Grimler <henrik.grimler@axis.com>
power: supply: bq27xxx: bq27520g4: fix REG_TTES address
Matti Vaittinen <mazziesaccount@gmail.com>
power: supply: bd99954: Drop bad register fields
Felix Gu <ustc.gu@gmail.com>
spi: img-spfi: don't disable runtime PM on DMA deferred probe
Vineet Gupta <vineet.gupta@linux.dev>
selftests/bpf: vmtest.sh: Preserve command quoting when running in the VM
Pu Lehui <pulehui@huawei.com>
selftests/bpf: Add description for running vmtest on RV64
Pu Lehui <pulehui@huawei.com>
selftests/bpf: Support local rootfs image for vmtest
Pu Lehui <pulehui@huawei.com>
selftests/bpf: Limit URLS parsing logic to actual scope in vmtest
Mohammad Abu-Khader <mohammad.abukhader@hotmail.com>
kunit: tool: fix _list_tests filtering wrong variable when list has TAP prefix
Ran Hongyun <ranhongyun1@huawei.com>
UBI: fix two issues in the ubi.mtd MODULE_PARM_DESC
Rosen Penev <rosenp@gmail.com>
ASoC: xilinx: formatter_pcm: fix stream_data leak on open error
Yuho Choi <dbgh9129@gmail.com>
ubi: Fix rollback for explicit UBI device numbers
Zhihao Cheng <chengzhihao1@huawei.com>
ubi: fastmap: Add module parameter to control reserving filling pool PEBs
Zhihao Cheng <chengzhihao1@huawei.com>
ubi: fastmap: Fix lapsed wear leveling for first 64 PEBs
Zhihao Cheng <chengzhihao1@huawei.com>
ubi: fastmap: Wait until there are enough free PEBs before filling pools
Zhihao Cheng <chengzhihao1@huawei.com>
UBI: fastmap: Pass to_be_tortured when reusing old fastmap PEBs
Zhihao Cheng <chengzhihao1@huawei.com>
UBI: Preserve torture flag when rescheduling failed erasures
Zhihao Cheng <chengzhihao1@huawei.com>
ubi: Replace erase_block() with sync_erase()
Zhihao Cheng <chengzhihao1@huawei.com>
ubi: fastmap: Allocate memory with GFP_NOFS in ubi_update_fastmap
Zhihao Cheng <chengzhihao1@huawei.com>
ubi: fastmap: erase_block: Get erase counter from wl_entry rather than flash
Zhihao Cheng <chengzhihao1@huawei.com>
ubi: fastmap: Fix missed ec updating after erasing old fastmap data block
LiangCheng Wang <zaq14760@gmail.com>
ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready
bui duc phuc <phucduc.bui@gmail.com>
ASoC: pxa: Use devm_clk_get_optional() for extclk clock
Petr Oros <poros@redhat.com>
ice: clear the default forwarding VSI rule when releasing a VSI
Zhu Yanjun <yanjun.zhu@linux.dev>
RDMA/cma: Fix WARNING in res_to_rt
Fan Wu <fanwu01@zju.edu.cn>
RDMA/cxgb4: Free debugfs on registration failure
Guangshuo Li <lgs201920130244@gmail.com>
dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal
Yun Zhou <yun.zhou@windriver.com>
nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing
Linmao Li <lilinmao@kylinos.cn>
nfc: digital: Do not dump a NULL response in command completion
Yinhao Hu <dddddd@hust.edu.cn>
nfc: pn533: hold a reference to the request skb during send_frame
Doruk Tan Ozturk <doruk@0sec.ai>
nfc: llcp: bound SNL TLV parsing to the skb and add length checks
Zhenghang Xiao <kipreyyy@gmail.com>
nfc: nci: fix double completion race in nci_data_exchange_complete
Breno Leitao <leitao@debian.org>
nfc: llcp: read llcp_sock->local under the socket lock in getsockopt
Breno Leitao <leitao@debian.org>
nfc: llcp: avoid userspace overflow on invalid optlen
Chao Shi <coshi036@gmail.com>
nvme: reject passthrough of driver-managed Set Features
Yang Xiuwei <yangxiuwei@kylinos.cn>
nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
Guixin Liu <kanie@linux.alibaba.com>
nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()
Sven Peter <sven@kernel.org>
nvme-apple: Drop the PRP null check chicken bit
Nick Chan <towinchenmi@gmail.com>
nvme: apple: Add Apple A11 support
Sven Peter <sven@kernel.org>
nvme-apple: Never set the opcode in the NVMMU TCB
Sven Peter <sven@kernel.org>
nvme-apple: Don't set a DMA direction for commands without a data transfer
Sven Peter <sven@kernel.org>
nvme-apple: Destroy the admin queue on removal
Guixin Liu <kanie@linux.alibaba.com>
nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()
Alistair Francis <alistair.francis@wdc.com>
nvme: Add the DHCHAP maximum HD IDs
Guixin Liu <kanie@linux.alibaba.com>
nvme: introduce change ptpl and iekey definition
Guixin Liu <kanie@linux.alibaba.com>
nvme: add reservation command's defines
Jorijn van der Graaf <jorijnvdgraaf@catcrafts.net>
ASoC: qcom: q6apm: keep the graph start count in sync with the DSP
Babanpreet Singh <bbnpreetsingh@gmail.com>
spi: sprd-adi: Fix probe succeeding without registering the controller
Esteban Urrutia <esteuwu@proton.me>
phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs
Michael Walle <mwalle@kernel.org>
powerpc/configs: enable CONFIG_RAS to fix EDAC support
Runyu Xiao <runyu.xiao@seu.edu.cn>
sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
Weiming Shi <bestswngs@gmail.com>
SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6
Marco Elver <elver@google.com>
arm64: Disable KCSAN instrumentation in delay.o
Karl Mehltretter <kmehltretter@gmail.com>
m68k: Fix backtraces for non-running tasks
Desnes Nunes <desnesn@redhat.com>
iommu/vt-d: Fix UCTP context table slot when copying root entries
Danila Chernetsov <listdansp@mail.ru>
fbdev: kyro: Validate overlay viewport coordinates
Myeonghun Pak <mhun512@gmail.com>
fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device()
Ian Rogers <irogers@google.com>
perf synthetic-events: Fix divide by zero in perf_event__synthesize_threads
Ian Rogers <irogers@google.com>
perf synthetic-events: Fix uninitialized pthread_join
Ian Rogers <irogers@google.com>
perf stat: Fix evsel_list leak in cmd_stat
Rosen Penev <rosenp@gmail.com>
ARM: dts: helios4: add SATA regulator supplies
Rosen Penev <rosenp@gmail.com>
ARM: dts: helios4: add vcc-supply to GPIO expander
Rosen Penev <rosenp@gmail.com>
ARM: dts: helios4: add vcc-supply to EEPROM
Tomáš Macholda <tomas.macholda@nic.cz>
arm64: dts: turris-mox: fix usb3 phys
Guodong Xu <guodong@riscstar.com>
riscv: cpufeature: Clarify ISA spec version for canonical order
Victor Nogueira <victor@mojatatu.com>
net/sched: cls_api: fix teardown of an adopted proto on insert-race loss
Nikhil Gautam <nikhilgtr@gmail.com>
iio: light: gp2ap002: re-enable irq if runtime suspend fails
Nikhil Gautam <nikhilgtr@gmail.com>
iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes
Ali Ahmet Memis <ali@iusegentoo.com>
Bluetooth: MSFT: validate evt_prefix_len against the response length
Linmao Li <lilinmao@kylinos.cn>
Bluetooth: MGMT: free the mesh send cancel command when it is cancelled
Linmao Li <lilinmao@kylinos.cn>
Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths
Linmao Li <lilinmao@kylinos.cn>
Bluetooth: hci_conn: fix the SCO setup context lifetime
Zijun Hu <zijun.hu@oss.qualcomm.com>
Bluetooth: btintel: Fix diagnostics event detection
HyeongJun An <sammiee5311@gmail.com>
Bluetooth: virtio_bt: avoid OOB read of build info string
Yichong Chen <chenyichong@uniontech.com>
btrfs: retry verity reads for not-uptodate Merkle folios
Yang Xiuwei <yangxiuwei@kylinos.cn>
scsi: sd: Fix sd_done() sense handling condition
Tanushree Shah <tshah@linux.ibm.com>
perf trace-event: Fix integer truncation in do_read() and skip()
Zijun Hu <zijun.hu@oss.qualcomm.com>
Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices
Zijun Hu <zijun.hu@oss.qualcomm.com>
Bluetooth: btusb: Record matched usb_device_id into btusb_data
Johan Hovold <johan@kernel.org>
Bluetooth: btusb: refactor endpoint lookup
Zijun Hu <zijun.hu@oss.qualcomm.com>
Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855()
Zijun Hu <zijun.hu@oss.qualcomm.com>
Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event
Ricardo Neri <ricardo.neri-calderon@linux.intel.com>
sched/fair: Check CPU capacity before comparing group types during load balance
Yuho Choi <dbgh9129@gmail.com>
ACPI: video: Release PCI device reference after lookup
Kamal Wadhwa <kamal.wadhwa@oss.qualcomm.com>
regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling
Yeoreum Yun <yeoreum.yun@arm.com>
coresight: etm4x: fix leaked trace id
Yeoreum Yun <yeoreum.yun@arm.com>
coresight: etm4x: fix underflow for usage of (nrseqstate - 1)
James Clark <james.clark@linaro.org>
coresight: Change syncfreq to be a u8
Yeoreum Yun <yeoreum.yun@arm.com>
coresight: etm4x: fix wrong check of etm4x_sspcicrn_present()
Bruce Johnston <bjohnsto@redhat.com>
md/raid1: don't set array_frozen in raid1_takeover()
Yu Kuai <yukuai@fygo.io>
md: avoid stale clone I/O accounting timestamps
Yu Kuai <yukuai@fygo.io>
md/raid5: round bitmap stripes with sector division
Loic Poulain <loic.poulain@oss.qualcomm.com>
phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend
Loic Poulain <loic.poulain@oss.qualcomm.com>
phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend
Loic Poulain <loic.poulain@oss.qualcomm.com>
phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend
Mohd Ayaan Anwar <mohd.anwar@oss.qualcomm.com>
phy: qcom: sgmii-eth: vote for both voltage rails with correct current loads
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
phy: qcom-sgmii-eth: relax order of .power_on() vs .set_mode*()
Linkai Gong <gonglinkai@kylinos.cn>
soc: fsl: qe: check platform_driver_register() in qe_ic_of_init()
Yichong Chen <chenyichong@uniontech.com>
hugetlbfs: release subpool on fill_super failure
Simon Glass <sjg@chromium.org>
pinctrl: rockchip: Reset the pin count when recalculating SoC data
Mukesh Ojha <mukesh.ojha@oss.qualcomm.com>
firmware_loader: do not queue completed sysfs fallback requests
Manish Rangankar <mrangankar@marvell.com>
scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
Timur Kristóf <timur.kristof@gmail.com>
drm/amdgpu/gfx6: Use PFP on the compute queues too
Timur Kristóf <timur.kristof@gmail.com>
drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets
Tanushree Shah <tshah@linux.ibm.com>
perf trace-event: Fix buffer overflow in read_string()
Gerald Loacker <gerald.loacker@wolfvision.net>
phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table
Felix Gu <ustc.gu@gmail.com>
phy: sunplus: fix error handling in sp_uphy_init()
Meghana Malladi <m-malladi@ti.com>
arm64: dts: ti: k3-am64: Fix MDIO clock reference for ICSSG0 node
Jan Kara <jack@suse.cz>
ext4: fix spurious message about orphan cleanup on RO fs
Timur Kristóf <timur.kristof@gmail.com>
drm/amdgpu/gfx6: Fixup emit_cntxcntl()
Pengpeng Hou <pengpeng@iscas.ac.cn>
mfd: iqs62x: Reject zero-length firmware records
Pengpeng Hou <pengpeng@iscas.ac.cn>
mfd: rave-sp: validate received frame payload lengths
Vladimir Murzin <vladimir.murzin@arm.com>
arm64: hibernate: Restore DAIF state on error
Ada Couprie Diaz <ada.coupriediaz@arm.com>
arm64: hibernate: mask DAIF before restoring hibernated kernel
Felix Fietkau <nbd@nbd.name>
wifi: mac80211: skip default WMM setup for AP_VLAN links
Leon Romanovsky <leon@kernel.org>
RDMA/erdma: restrict the driver to little-endian systems
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
RDMA/siw: Fix use-after-free in siw_accept()
Guoqing Jiang <guoqing.jiang@linux.dev>
RDMA/siw: Introduce siw_free_cm_id
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
IB/isert: post the full-feature receive buffers after session registration
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
IB/isert: delay the final Login Response until the session is registered
Karl Mehltretter <kmehltretter@gmail.com>
cpufreq: imx6q: fix out-of-bounds write when probed more than once
Karl Mehltretter <kmehltretter@gmail.com>
cpufreq: imx6q: fix devres accumulation across driver rebind
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: dw-hdmi: Drop TCON TOP port reference
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: tcon: Drop remote endpoint reference
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: crtc: Propagate layer initialization error
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: tcon: Drop TCON TOP device reference
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: tcon: Set output mux for DSI and LVDS
Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
of: property: add of_graph_get_next_port_endpoint()
Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
of: property: add of_graph_get_next_port()
Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
of: property: use unsigned int return on of_graph_get_endpoint_count()
Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
of: property: add missing kerneldoc for of_graph_get_endpoint_count()
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: vi scaler: Fix coefficient selection
Cen Zhang <zzzccc427@gmail.com>
ocfs2: synchronize heartbeat callbacks with o2net teardown
Xie Yuanbin <xieyuanbin1@huawei.com>
ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ
Cheng Xu <chengyou@linux.alibaba.com>
RDMA/erdma: Hold CQ references when processing EQ events
Robertus Diawan Chris <robertusdchris@gmail.com>
modpost: prevent leak when early return no suffix .o in read_symbols()
Sergei Litvin <litvindev@gmail.com>
scripts/tags.sh: Prevent binary files appearing in cscope.files
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
arm64: dts: qcom: sm7225-fairphone-fp4: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
Sayali Patil <sayalip@linux.ibm.com>
selftests/mm: fix ternary operator precedence in ksm_tests
Sayali Patil <sayalip@linux.ibm.com>
selftests/mm: fix ksm NUMA merge test for systems with memoryless NUMA nodes
Mike Rapoport (Microsoft) <rppt@kernel.org>
selftests/mm: ksm_tests: use kselftest framework
Li Wang <liwang@redhat.com>
ksm_tests: skip hugepage test when Transparent Hugepages are disabled
Donet Tom <donettom@linux.ibm.com>
selftests/mm: add new test cases to the migration test
Baolin Wang <baolin.wang@linux.alibaba.com>
selftests: mm: support shmem mTHP collapse testing
Ryan Roberts <ryan.roberts@arm.com>
selftests/mm/khugepaged: enlighten for multi-size THP
Ryan Roberts <ryan.roberts@arm.com>
selftests/mm: support multi-size THP interface in thp_settings
Ryan Roberts <ryan.roberts@arm.com>
selftests/mm: factor out thp settings management
Ryan Roberts <ryan.roberts@arm.com>
selftests/mm/kugepaged: restore thp settings at exit
Pu Lehui <pulehui@huawei.com>
bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed
Mukesh Ojha <mukesh.ojha@oss.qualcomm.com>
remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry()
Mukesh Ojha <mukesh.ojha@oss.qualcomm.com>
remoteproc: use rsc_table_for_each_entry() in rproc_handle_resources()
Mukesh Ojha <mukesh.ojha@oss.qualcomm.com>
remoteproc: Move resource table data structure to its own header
Andreas Kemnade <andreas@kemnade.info>
drm/omap: dsi: Do not copy isr table
Yichong Chen <chenyichong@uniontech.com>
fat: release buffer head after rebuilding parent
Guangshuo Li <lgs201920130244@gmail.com>
rapidio: clear mport->net when rio_add_net() fails
Calvin Owens <calvin@wbinvd.org>
pps-gpio: remove dead capture_clear code
Michael Byczkowski <by@by-online.de>
pps: pps-gpio: split IRQ handler into hardirq timestamper + threaded handler
Bastien Curutchet <bastien.curutchet@bootlin.com>
pps: clients: gpio: Bypass edge's direction check when not needed
Calvin Owens <calvin@wbinvd.org>
pps: don't try to wait for negative timeouts in PPS_FETCH
Bradley Morgan <include@grrlz.net>
lib/string: fix memchr_inv() for large ranges
Caleb Sander Mateos <csander@purestorage.com>
ublk: check for ublk_unmap_io() returning 0
Tao Cui <cuitao@kylinos.cn>
block/kyber-iosched: flush per-cpu latency buckets over possible CPUs
Tao Cui <cuitao@kylinos.cn>
block/blk-iocost: collect per-cpu latency stats over possible CPUs
Tao Cui <cuitao@kylinos.cn>
block/blk-stat: drain per-cpu callback stats over possible CPUs
Zheng Qixing <zhengqixing@huawei.com>
blk-cgroup: skip dying blkg in blkcg_activate_policy()
Breno Leitao <leitao@debian.org>
phonet: pep: do not write beyond optlen in getsockopt
Sang-Heon Jeon <ekffu200098@gmail.com>
iio: light: tsl2583: return zero in write_raw() on success
Sang-Heon Jeon <ekffu200098@gmail.com>
iio: light: isl29028: return zero in write_raw() on success
Yuanshen Cao <alex.caoys@gmail.com>
iio: light: tsl2772: fix ALS calibscale readback
Arnaldo Carvalho de Melo <acme@redhat.com>
perf intel-bts: Fix off-by-one in auxtrace_info minimum size check
Arnaldo Carvalho de Melo <acme@redhat.com>
perf intel-pt: Fix off-by-one in auxtrace_info minimum size check
Arnaldo Carvalho de Melo <acme@redhat.com>
perf auxtrace: Fix queue grow overflow and old array leak
Arnaldo Carvalho de Melo <acme@redhat.com>
perf thread-stack: Fix heap buffer overflow on branch stack wrap copy
Jiancheng Huang <jchuang@seu.edu.cn>
HID: lg4ff: validate report length before fixed offsets
Chao Huang <huangchao@kylinos.cn>
HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure
Ai Chao <aichao@kylinos.cn>
HID: i2c-hid: Fix "(null)" output when reading report descriptor fails
Kenny Levinsen <kl@kl.wtf>
HID: i2c-hid: Revert to await reset ACK before reading report descriptor
Hans de Goede <hdegoede@redhat.com>
HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor
Hans de Goede <hdegoede@redhat.com>
HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling
Hans de Goede <hdegoede@redhat.com>
HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions
Hans de Goede <hdegoede@redhat.com>
HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset()
Yousef Alhouseen <alhouseenyousef@gmail.com>
HID: synchronize input before cleaning up a failed probe
谢致邦 (XIE Zhibang) <Yeking@Red54.com>
HID: i2c-hid: Refactor _DSM helper and add i2c-hid-acpi-prp0001 driver
Karl Mehltretter <kmehltretter@gmail.com>
tty: clear cdev pointer after cdev_add() failure
Karl Mehltretter <kmehltretter@gmail.com>
serial: amba-pl011: unprepare console clock on unregister
Thomas Bogendoerfer <tsbogend@alpha.franken.de>
MIPS: ptrace: Fix syscall skipping via PTRACE_SYSCALL
Saket Kumar Bhaskar <skb99@linux.ibm.com>
powerpc/irq: Fix missing r2 clobber in PCREL inline assembly
Gou Hao <gouhao@uniontech.com>
powerpc/smp: add NULL guard for cause_ipi in smp_muxed_ipi_message_pass
Laxman Acharya Padhya <acharyalaxman8848@gmail.com>
firmware: coreboot: Validate table bounds
Titouan Ameline de Cadeville <titouan.ameline@gmail.com>
firmware: google: Add bounds checks in coreboot_table_populate()
Zhao Li <enderaoelyther@gmail.com>
wifi: mac80211: skip unused probe response countdown offsets
Slawomir Stepien <sst@poczta.fm>
wifi: zd1211rw: reject secondary interfaces to prevent conflicts
Zhao Li <enderaoelyther@gmail.com>
wifi: mac80211: send TWT teardown to peer after setup TX failure
Davidlohr Bueso <dave@stgolabs.net>
perf/cxlpmu: Fix 64-bit write to 32-bit HDM filter register
Pranjal Shrivastava <praan@google.com>
iommu/arm-smmu-v3: Convert to use atomic poll timeout
Linghui Wu <linghui.wu@oss.qualcomm.com>
wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7915: report RX chain signal for all RX paths
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1
StanleyYP Wang <StanleyYP.Wang@mediatek.com>
wifi: mt76: mt7996: fix reg addr remap when addr is 0
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7915: release hif2 reference on probe IRQ failure
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7915: fix ext PHY use-after-free on register error path
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7915: fix double hif2 init on the non-WED path
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Check snprintf truncation for guest kallsyms path
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Free scandir entries in guest kernel map creation
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Reset errno before strtol in guest kernel map creation
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Don't abort guest map creation on first inaccessible dir
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Check snprintf truncation in machines__findnew()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Use snprintf() for guestmount path construction
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Guard against NULL strlist in machines__findnew()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Fix NULL parent dereference in fork event processing
Joy Zou <joy.zou@oss.nxp.com>
regulator: core: use system_freezable_wq for init complete work
Jeff Johnson <jeff.johnson@oss.qualcomm.com>
wifi: ath11k: fix leak in ath11k_service_ready_ext_event()
Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
drm/msm/dsi: Drop dev_pm_opp_set_rate(0)
Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0)
Leo Yan <leo.yan@arm.com>
perf: arm_spe: Make wakeup range check overflow safe
Can Peng <pengcan@kylinos.cn>
ACPI: processor: Unregister cpufreq notifier on init failure
Huisong Li <lihuisong@huawei.com>
ACPI: processor: idle: Optimize ACPI idle driver registration
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7996: don't report a zero TX bitrate
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset
Eason Lai <Eason.Lai@mediatek.com>
wifi: mt76: mt792x: Fix memory leak in SDIO TX path
Zhi-Jun You <hujy652@gmail.com>
wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986
Laxman Acharya Padhya <acharyalaxman8848@gmail.com>
wifi: mt76: mt7921: validate CLC firmware records
Devin Wittmayer <lucid_duck@justthetip.ca>
wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length
Yichong Chen <chenyichong@uniontech.com>
fanotify: report full event length for FIONREAD
Abdun Nihaal <nihaal@cse.iitm.ac.in>
misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe()
Naveen Kumar Chaudhary <naveen.osdev@gmail.com>
locking/lockdep: Fix NULL pointer dereference in __lock_set_class()
Adrian Hunter <adrian.hunter@intel.com>
i3c: master: Fix device_register() error path
Jakub Kicinski <kuba@kernel.org>
i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices
Aneesh Kumar K.V (Arm) <aneesh.kumar@kernel.org>
swiotlb: Preserve allocation virtual address for dynamic pools
Aneesh Kumar K.V (Arm) <aneesh.kumar@kernel.org>
iommu/dma: Check atomic pool allocation result directly
Vladimir Zapolskiy <vz@kernel.org>
clk: qcom: Return expected ENOMEM error on dynamic allocation failure
Stanislav Kinsburskii <skinsburskii@linux.microsoft.com>
lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone
Pu Lehui <pulehui@huawei.com>
bpf: Fix potential UAF when reading bpf link info
Pu Lehui <pulehui@huawei.com>
bpf: Fix potential UAF in bpf_netns_link_update_prog
Hongyan Xu <getshell@seu.edu.cn>
power: supply: sc2731_charger: cancel work on remove
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
power: supply: sc2731_charger: Convert to platform remove callback returning void
Hongyan Xu <getshell@seu.edu.cn>
power: supply: isp1704_charger: cancel work on remove
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
arm64: dts: qcom: sm8550: Fix the PCIe iommu-map entries
Manivannan Sadhasivam <mani@kernel.org>
arm64: dts: qcom: sm8550: Fix the msi-map entries
Neil Armstrong <neil.armstrong@linaro.org>
arm64: dts: qcom: sm8550: Use GIC-ITS for PCIe0 and PCIe1
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
arm64: dts: qcom: sm8450: Fix the PCIe iommu-map entries
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
arm64: dts: qcom: sm8350: Fix the PCIe iommu-map entries
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
arm64: dts: qcom: sm8250: Fix the PCIe iommu-map entries
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
arm64: dts: qcom: sm8150: Fix the PCIe iommu-map entries
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
arm64: dts: qcom: sdm845: Fix the PCIe iommu-map entries
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
arm64: dts: qcom: sc8180x: Fix the PCIe iommu-map entries
Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org>
arm64: dts: qcom: sc8180x: drop duplicated PCI iommus property
Dawid Wróbel <me@dawidwrobel.com>
arm64: dts: qcom: sm8250-xiaomi-elish: correct the board ID
Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
arm64: dts: qcom: sc8280xp-crd: Fix the pin index for misc_3p3_reg_en
Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
clk: qcom: gcc-qcm2290: don't park QUP RCGs upon registration
Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
arm64: dts: qcom: sdm632-motorola-ocean: Fix LED default trigger property
Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
arm64: dts: qcom: msm8998: Don't pull-up I2C pins by default in sleep
Itai Handler <itai.handler@gmail.com>
rcu: Mark accesses to ->rcu_urgent_qs and ->rcu_need_heavy_qs
Valentin Schneider <vschneid@redhat.com>
rcu: Rename rcu_momentary_dyntick_idle() into rcu_momentary_eqs()
Yue Haibing <yuehaibing@huawei.com>
rcu: Remove unused function declaration rcu_eqs_special_set()
Cheng-Han Wu <hank20010209@gmail.com>
selftests/zram: fix kernel_gte() for POSIX sh
Thomas Weißschuh <thomas.weissschuh@linutronix.de>
tools/nolibc/powerpc: mark ctr and xer as clobbered by system call
Sajal Gupta <sajal2005gupta@gmail.com>
md/raid5-ppl: fix use-after-free in ppl_do_flush()
Chen Cheng <chencheng@fnnas.com>
md/raid5: protect bitmap batch counters aka seq_flush/seq_write consistency
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET
Abdun Nihaal <nihaal@cse.iitm.ac.in>
wifi: rtlwifi: pci: fix error path in rtl_pci_probe()
Hongyan Xu <getshell@seu.edu.cn>
platform/chrome: cros_ec_debugfs: Unregister panic notifier
Hongyan Xu <getshell@seu.edu.cn>
platform/chrome: cros_ec_debugfs: Clean up console log on probe failure
Jeff Johnson <jeff.johnson@oss.qualcomm.com>
wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()
Kang Yang <quic_kangyang@quicinc.com>
wifi: ath11k: implement handling of P2P NoA event
Dmitry Antipov <dmantipov@yandex.ru>
wifi: ath11k: refactor ath11k_wmi_tlv_parse_alloc()
Anilkumar Kolli <quic_akolli@quicinc.com>
wifi: ath11k: add firmware-2.bin support
Kalle Valo <quic_kvalo@quicinc.com>
wifi: ath11k: qmi: refactor ath11k_qmi_m3_load()
Fan Wu <fanwu01@zju.edu.cn>
spi: davinci: switch to managed controller allocation
Bastien Curutchet <bastien.curutchet@bootlin.com>
spi: davinci: Unset POWERDOWN bit when releasing resources
Li Zetao <lizetao1@huawei.com>
spi: davinci: Use helper function devm_clk_get_enabled()
Guixin Liu <kanie@linux.alibaba.com>
nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
IB/isert: reject login PDUs declaring more data than was received
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
IB/isert: reject PDUs declaring more data than was received
Leon Romanovsky <leon@kernel.org>
RDMA/cxgb4: free STAG index when TPT entry write fails
Leon Romanovsky <leon@kernel.org>
RDMA/mlx5: Send cong param changes to the resolved port mdev
Leon Romanovsky <leon@kernel.org>
RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs
David Strahan <David.Strahan@microchip.com>
scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches.
Ryusuke Konishi <konishi.ryusuke@gmail.com>
nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch
Matthew Wilcox (Oracle) <willy@infradead.org>
nilfs2: convert nilfs_page_bug() to nilfs_folio_bug()
Matthew Wilcox (Oracle) <willy@infradead.org>
nilfs2: convert nilfs_btnode_commit_change_key to use a folio
Matthew Wilcox (Oracle) <willy@infradead.org>
nilfs2: convert nilfs_btnode_prepare_change_key to use a folio
Matthew Wilcox (Oracle) <willy@infradead.org>
nilfs2: convert to nilfs_folio_buffers_clean()
Matthew Wilcox (Oracle) <willy@infradead.org>
nilfs2: convert nilfs_forget_buffer to use a folio
Matthew Wilcox (Oracle) <willy@infradead.org>
nilfs2: add nilfs_end_folio_io()
David Lee <david.lee@trailofbits.com>
nilfs2: prevent out-of-bounds read in super root block parsing
Joshua Crofts <joshua.crofts1@gmail.com>
nilfs2: fix infinite loop in nilfs_clean_segments()
Alexey Charkov <alchark@flipper.net>
clk: rockchip: Fix the fractional part denominator on RK3588/RK3576 PLLs
Akari Tsuyukusa <akkun11.open@gmail.com>
clk: mediatek: mt8135: Fix inverted gate control for devapc_ck
longlong yan <yanlonglong@kylinos.cn>
clk/x86: pmc_atom: add kasprintf return value check
Myeonghun Pak <mhun512@gmail.com>
clk: palmas: Manage external-control prepare with devm
Guangshuo Li <lgs201920130244@gmail.com>
clk: tegra: tegra124-emc: put EMC node on register failure
Ondrej Jirman <megi@xff.cz>
arm64: dts: allwinner: sun50i-a64-pinephone: Fix mpu6050 mount matrix
Yonatan Nachum <ynachum@amazon.com>
RDMA/efa: Fix PBL chunk length computation
Weiming Shi <bestswngs@gmail.com>
fs/ntfs3: reject restart table growth beyond U16_MAX entries
Ivy Lopez <skunkolee@gmail.com>
staging: rtl8723bs: use kfree_sensitive() for key material
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
remoteproc: Prevent crash handling to race with rproc_del()
Jingyi Wang <jingyi.wang@oss.qualcomm.com>
remoteproc: core: Attach rproc asynchronously in rproc_add() path via schedule_work()
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
remoteproc: Allow shutdown of crashed processors
Peng Fan <peng.fan@nxp.com>
remoteproc: core: Drop redundant initialization of 'ret' in rproc_shutdown()
Babanpreet Singh <bbnpreetsingh@gmail.com>
w1: ds2482: Fix signedness bug in ds2482_w1_triplet()
Yichong Chen <chenyichong@uniontech.com>
isofs: release zisofs block pointer buffer head
Maher Sanalla <msanalla@nvidia.com>
RDMA/mlx5: Fix integer overflow of user QP buffer size
Can Peng <pengcan@kylinos.cn>
crypto: keembay - publish OF module alias for OCS AES/SM4
Linmao Li <lilinmao@kylinos.cn>
crypto: keembay - Initialize completion before requesting IRQ
Li Qiang <liqiang01@kylinos.cn>
scsi: ufs: debugfs: Reserve space for a string terminator
Babanpreet Singh <bbnpreetsingh@gmail.com>
power: supply: sbs-battery: Use a per-device serial number buffer
James Clark <james.clark@linaro.org>
tools/build: Allow versioning of all LLVM tools defined in Makefile.include
Tomas Glozar <tglozar@redhat.com>
tools/build: Add bpftool-skeletons feature test
Justin Yeh <justin.yeh@mediatek.com>
pinctrl: mediatek: free EINT resources on unbind
Nícolas F. R. A. Prado <nfraprado@collabora.com>
pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms
Hao Chang <ot_chhao.chang@mediatek.com>
pinctrl: mediatek: Fix the invalid conditions
Hao Chang <ot_chhao.chang@mediatek.com>
pinctrl: mediatek: Add EINT support for multiple addresses
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
pinctrl: mediatek: Use C99 initializers in PINCTRL_PIN_GROUP()
Alison Schofield <alison.schofield@intel.com>
cxl/region: Fix use-after-free in find_pos_and_ways() error path
Feng Yang <yangfeng@kylinos.cn>
selftests/bpf: Fix memory leak on subtest_states reallocation
Feng Yang <yangfeng@kylinos.cn>
selftests/bpf: Fix incorrect error checking for pthread_create
Karl Mehltretter <kmehltretter@gmail.com>
ARM: lpc32xx: only run SoC init on LPC32xx hardware
Fabio Estevam <festevam@gmail.com>
arm64: dts: rockchip: Fix Gru WLAN sideband interrupt
Weiming Wu <weiming3@asu.edu>
fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init
Florian Westphal <fw@strlen.de>
netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet
Can Peng <pengcan@kylinos.cn>
drm/tve200: add OF module alias for autoloading
Cosmo Chou <chou.cosmo@gmail.com>
leds: pca9532: Fix phantom device registration on missing hardware
Malaya Kumar Rout <malayarout91@gmail.com>
PM: hibernate: Fix memory leak in snapshot_write_next() error path
Sanghyun Park <sanghyun.park.cnu@gmail.com>
xfrm: Fix skb double-free in xfrm_dev_direct_output()
Leo Yan <leo.yan@arm.com>
perf cs-etm: Avoid truncating AUX buffer sizes to int
Leo Yan <leo.yan@arm.com>
perf cs-etm: Flush thread stacks after decoder reset
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Unrequest devices if driver registration fails
Cristian Marussi <cristian.marussi@arm.com>
firmware: arm_scmi: Add multiple protocols registration support
Andre Przywara <andre.przywara@arm.com>
ARM: dts: allwinner: a10: Fix PMU interrupt
Xiang Mei <xmei5@asu.edu>
ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()
Guanghui Yang <3497809730@qq.com>
ext4: fix buffer_head leak in ext4_init_orphan_info
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap
Jeff Johnson <jeff.johnson@oss.qualcomm.com>
wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx()
Jeff Johnson <jeff.johnson@oss.qualcomm.com>
wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx()
Jeff Johnson <jeff.johnson@oss.qualcomm.com>
wifi: ath11k: Correctly copy the hint BSSID in WMI scan request
Jeff Johnson <jeff.johnson@oss.qualcomm.com>
wifi: ath12k: Correctly copy the hint BSSID in WMI scan request
Jeff Johnson <jeff.johnson@oss.qualcomm.com>
wifi: ath6kl: avoid buffer overreads in WMI event handlers
Baokun Li <libaokun@linux.alibaba.com>
ext4: drain in-flight DIO before buffered write fallback
Gerald Yang <gerald.yang@canonical.com>
ext4: clear stale xarray tags on folios skipped during writeback
Pengpeng Hou <pengpeng@iscas.ac.cn>
thermal: intel: int3400: clean up ODVP on probe failures
Mukesh Ojha <mukesh.ojha@oss.qualcomm.com>
iommu/qcom: Fix inverted fault report check in qcom_iommu_fault()
Haoxiang Li <haoxiang_li2024@163.com>
iommu/qcom: Remove sysfs device on probe failure path
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Fix requested device removal race
Patrisious Haddad <phaddad@nvidia.com>
RDMA/core: Fix potential use after free in ib_dealloc_pd_user()
Patrisious Haddad <phaddad@nvidia.com>
RDMA/core: Fix potential use after free in ib_free_cq()
Mark Zhang <markzhang@nvidia.com>
RDMA/core: Add driver APIs pre_destroy_cq() and post_destroy_cq()
Patrisious Haddad <phaddad@nvidia.com>
RDMA/core: Fix potential use after free in counter_release()
Patrisious Haddad <phaddad@nvidia.com>
RDMA/core: Fix potential use after free in ib_destroy_srq_user()
Patrisious Haddad <phaddad@nvidia.com>
RDMA/core: Fix potential use after free in ib_destroy_cq_user()
Patrisious Haddad <phaddad@nvidia.com>
RDMA/core: Fix use after free in ib_query_qp()
Patrisious Haddad <phaddad@nvidia.com>
RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations
Jason Gunthorpe <jgg@ziepe.ca>
RDMA/nldev: Fix locking when accessing mr->pd
Kalesh AP <kalesh-anakkur.purayil@broadcom.com>
RDMA/restrack: Fix typos in the comments
Chiara Meiohas <cmeiohas@nvidia.com>
RDMA/core: Add an option to display driver-specific QPs in the rdmatool
Patrisious Haddad <phaddad@nvidia.com>
RDMA/core: Add support to set privileged QKEY parameter
Myeonghun Pak <mhun512@gmail.com>
RDMA/erdma: Fix CEQ tasklet use-after-free on removal
Takuma Fujiwara <t-fujiwara1@ti.com>
PCI: j721e: Fix incorrect max_lanes for J7200
Leon Romanovsky <leon@kernel.org>
RDMA/srpt: Pass the mapped task attribute to target_init_cmd()
Ricardo B. Marlière <rbm@suse.com>
libbpf: Search /lib64 and /lib in resolve_full_path()
Yun Zhou <yun.zhou@windriver.com>
ext4: skip extra isize expansion during mount to prevent deadlock
Xiang Mei <xmei5@asu.edu>
ext4: fix out-of-bounds read in ext4_read_inline_dir()
Yun Zhou <yun.zhou@windriver.com>
ext4: fix circular lock dependency in ext4_ext_migrate
Chen Pei <cp0613@linux.alibaba.com>
ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root
Pengpeng Hou <pengpeng@iscas.ac.cn>
ACPI: processor: validate MADT IOAPIC entry bounds
Zhu Ling <zhuling2709@phytium.com.cn>
ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer
Pengpeng Hou <pengpeng@iscas.ac.cn>
RDMA/nldev: validate dynamic counter attribute length
Kemeng Shi <shikemeng@huaweicloud.com>
irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
Viktor Malik <vmalik@redhat.com>
selftests/bpf: Silence array bounds warning in global_map_resize
Marco Elver <elver@google.com>
kcsan: avoid unintended access checking in NMIs
TanZheng <tanzheng@kylinos.cn>
RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters
Ibrahim Hashimov <security@auditcode.ai>
RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]
Danila Chernetsov <listdansp@mail.ru>
RDMA/hfi1: Propagate sdma_txinit_ahg() errors
Jun Yan <jerrysteve1101@gmail.com>
arm64: dts: amlogic: meson-axg-s400: enable mipi_pcie_analog_dphy for PCIe
Can Peng <pengcan@kylinos.cn>
phy: starfive: Fix runtime PM cleanup in JH7110 DPHY RX probe
Linmao Li <lilinmao@kylinos.cn>
ASoC: meson: Keep link pointers valid on realloc failure
Koichiro Den <den@valinux.co.jp>
dmaengine: dw-edma: Clear stale requests on termination
Koichiro Den <den@valinux.co.jp>
dmaengine: dw-edma: Serialize channel state checks
Koichiro Den <den@valinux.co.jp>
dmaengine: dw-edma: Serialize abort state updates
Koichiro Den <den@valinux.co.jp>
dmaengine: dw-edma: Terminate all descriptors without callbacks
Yuho Choi <dbgh9129@gmail.com>
driver core: soc: Unregister bus on early device registration failure
Alban Bedel <alban.bedel@lht.dlh.de>
software node: Fix software_node_get_reference_args() with index -1
Ian Rogers <irogers@google.com>
perf ui hists: Fix uninitialized stack memory free on pstack allocation failure
zhouminqiang <zhouminqiang2@huawei.com>
mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()
Ruoyu Wang <ruoyuw560@gmail.com>
mtd: mtdswap: Avoid freeing registered blktrans device twice
Pengpeng Hou <pengpeng@iscas.ac.cn>
soc: ti: knav_qmss: Remove debugfs file on teardown
Md Shofiqul Islam <shofiqtest@gmail.com>
soc: ti: knav_qmss_queue: Implement resource cleanup in remove()
Xiang Mei <xmei5@asu.edu>
vfio/pci: clear vdev->msi_perm after freeing it on init failure
Myeonghun Pak <mhun512@gmail.com>
char: xilinx_hwicap: unregister class on init errors
Pei Xiao <xiaopei01@kylinos.cn>
ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove
Jiri Slaby (SUSE) <jirislaby@kernel.org>
tty: ipoctal: convert to u8 and size_t
Linmao Li <lilinmao@kylinos.cn>
ppdev: prevent overflow when setting port timeout
Breno Leitao <leitao@debian.org>
cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64)
Pengpeng Hou <pengpeng@iscas.ac.cn>
misc: ad525x_dpot: use driver core groups for sysfs files
Gleb Markov <markov.gi@npc-ksb.ru>
misc: rtsx: add missing write register handling
Gui-Dong Han <hanguidong02@gmail.com>
misc: bcm-vk: Use acquire/release for msgq_inited
Pavel Zhigulin <Pavel.Zhigulin@kaspersky.com>
speakup: keyhelp: guard letter_offsets possible out-of-range indexing
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status()
Yuho Choi <dbgh9129@gmail.com>
uio: Fix stale info pointer in failed registration path
David Lee <david.lee@trailofbits.com>
UDF symlink pathComponent header OOB read
Karl Mehltretter <kmehltretter@gmail.com>
tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64
Xu Yang <xu.yang_2@nxp.com>
usb: gadget: f_uac1_legacy: remove broken string configfs attributes
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: processor: idle: Expand _LPI package sanity checks
Thorsten Blum <thorsten.blum@linux.dev>
crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping
Pu Lehui <pulehui@huawei.com>
bpf: Sync tail_call_reachable with callee state on entry
Shivam Rawat <shivrawa@qti.qualcomm.com>
drm/msm/a6xx: Fix stale rpmh votes after suspend
Mikko Perttunen <mperttunen@nvidia.com>
gpu: host1x: Avoid stack over-read in debug output helpers
Mikko Perttunen <mperttunen@nvidia.com>
gpu: host1x: Fix offset calculation in trace_write_gather
Avraham Stern <avraham.stern@intel.com>
wifi: iwlwifi: mei: pass correct argument to function
Emmanuel Grumbach <emmanuel.grumbach@intel.com>
wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments
Avraham Stern <avraham.stern@intel.com>
wifi: iwlwifi: mei: check SAP message length before reading it
Avraham Stern <avraham.stern@intel.com>
wifi: iwlwifi: mei: add support for SAP version 4
Emmanuel Grumbach <emmanuel.grumbach@intel.com>
wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser
Emmanuel Grumbach <emmanuel.grumbach@intel.com>
wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs
Ian Rogers <irogers@google.com>
perf jevents: Add more components to the metric sorting order
Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
arm64: dts: qcom: sm8250: correct frequencies in the Iris OPP table
Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
arm64: dts: qcom: sm8250: sort out Iris power domains
Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
arm64: dts: qcom: msm8996-xiaomi-gemini: Fix up ti,drv2604 enable GPIO
Maoyi Xie <maoyixie.tju@gmail.com>
drm/bridge: tc358767: clamp the reported AUX read size to the request
Uday Khare <udaykhare77@gmail.com>
remoteproc: qcom: Fix glink->node reference leak in qcom_add_glink_subdev
Zhongqiu Han <zhongqiu.han@oss.qualcomm.com>
cpufreq: schedutil: Fix self-contradictory comment in sugov_iowait_apply()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
cpufreq: intel_pstate: Fix setting minimum P-state at init time
Biren Pandya <birenpandya@gmail.com>
media: i2c: rdacm21: Fix missing media_entity_cleanup()
Qingshuang Fu <fuqingshuang@kylinos.cn>
irqchip/renesas-irqc: Fix generic interrupt chip leak on remove
Herve Codina <herve.codina@bootlin.com>
irqdomain: Add support for generic irq chips creation before publishing a domain
Herve Codina <herve.codina@bootlin.com>
genirq/generic_chip: Introduce irq_domain_{alloc,remove}_generic_chips()
Herve Codina <herve.codina@bootlin.com>
irqdomain: Introduce init() and exit() hooks
Herve Codina <herve.codina@bootlin.com>
irqdomain: Handle domain hierarchy parent in irq_domain_instantiate()
Herve Codina <herve.codina@bootlin.com>
irqdomain: Handle additional domain flags in irq_domain_instantiate()
Herve Codina <herve.codina@bootlin.com>
irqdomain: Introduce irq_domain_instantiate()
Herve Codina <herve.codina@bootlin.com>
irqdomain: Introduce irq_domain_free()
Yuho Choi <dbgh9129@gmail.com>
PCI: xgene: Drop unnecessary OF node reference
Marc Zyngier <maz@kernel.org>
PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN
Dan Carpenter <error27@gmail.com>
cpufreq: spear: Fix an IS_ERR() vs NULL bug in spear1340_set_cpu_rate()
John Groves <John@Groves.net>
dax: read holder_ops once in dax_holder_notify_failure()
Bryam Vargas <hexlabsecurity@proton.me>
libnvdimm/labels: Bound the on-media label size before the shift
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Drop handle on protocol bind failures
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Protect device request lookup with RCU
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Use channel ID for transport teardown
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Reject out of range DT protocol IDs
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Avoid IDR updates while cleaning channels
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Free transport channel on IDR failure
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Unregister device notifier before IDR teardown
Baochen Qiang <baochen.qiang@oss.qualcomm.com>
wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate
Kyle Zeng <kylebot@openai.com>
hfsplus: validate thread record before delete key rebuild
HE WEI（ギカク） <skyexpoc@gmail.com>
fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
Nirbhay Sharma <nirbhay.lkd@gmail.com>
fs/ntfs3: fix KMSAN uninit-value in ni_create_attr_list
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: Add more checks in mi_enum_attr (part 2)
Dave Jiang <dave.jiang@intel.com>
cxl/pci: Honor -EPROBE_DEFER from component register setup
Robert Richter <rrichter@amd.com>
cxl/pci: Store the endpoint's Component Register mappings in struct cxl_dev_state
Dave Jiang <dave.jiang@intel.com>
cxl/mbox: Break poison list loop on an empty payload
Vishnu Santhosh <vishnu.santhosh@oss.qualcomm.com>
rpmsg: glink: fix deadlock in endpoint destroy during driver detach
Srinivas Kandagatla <srinivas.kandagatla@oss.qualcomm.com>
rpmsg: glink: remove duplicate code for rpmsg device remove
Hans Verkuil <hverkuil+cisco@kernel.org>
media: v4l2-async: Unregister sub-device if asc_list is empty
Sebastian Reichel <sre@kernel.org>
media: v4l: async: Drop useless list move operation
Xiang Mei <xmei5@asu.edu>
isofs: fix out-of-bounds page array access on empty zisofs block
James Calligeros <jcalligeros99@gmail.com>
ASoC: apple: mca: increase SERDES reset delay
Leon Romanovsky <leon@kernel.org>
RDMA/hfi1: Initialize debugfs after probe completes
Leon Romanovsky <leon@kernel.org>
RDMA/hfi1: Stop flushing the global IB workqueue
Leon Romanovsky <leon@kernel.org>
RDMA/hfi1: Create workqueues before device initialization
Leon Romanovsky <leon@kernel.org>
RDMA/hfi1: Remove redundant PCI device ID validation
Leon Romanovsky <leon@kernel.org>
RDMA/hfi1: Free RX data on late probe failure
Leon Romanovsky <leon@kernel.org>
RDMA/hfi1: Preserve unit 0 on allocation failure
Sean Rhodes <sean@starlabs.systems>
misc: rtsx_usb: avoid USB I/O in runtime autosuspend
Pengpeng Hou <pengpeng@iscas.ac.cn>
pmdomain: bcm: bcm2835: handle genpd provider registration errors
Evgenii Burenchev <evg28bur@yandex.ru>
ALSA: hpi: Check transport errors during HPI6000 adapter initialization
Xiang Mei <xmei5@asu.edu>
xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full
Yuho Choi <dbgh9129@gmail.com>
hwrng: ks-sa - Fix runtime PM cleanup on registration failure
Martin Kaiser <martin@kaiser.cx>
hwrng: ks-sa - access private data via struct hwrng
Allison Henderson <achender@kernel.org>
RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state
Leon Romanovsky <leon@kernel.org>
RDMA/ipoib: Drain RCU callbacks during module teardown
Leon Romanovsky <leon@kernel.org>
RDMA/mlx5: Drain RCU callbacks during module teardown
Leon Romanovsky <leon@kernel.org>
RDMA/core: Wait for RCU callbacks before unloading ib_core
Mert Seftali <mertsftl@gmail.com>
iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE
Pengpeng Hou <pengpeng@iscas.ac.cn>
bus: qcom-ebi2: use managed resources for clocks and children
Pengpeng Hou <pengpeng@iscas.ac.cn>
soc: qcom: rpmh-rsc: manage PM notifiers with devres
Yu Peng <pengyu@kylinos.cn>
perf metricgroup: Fix metric expression copy leaks
Laxman Acharya Padhya <acharyalaxman8848@gmail.com>
drm/panel: samsung-s6d16d0: Power off on prepare failure
Biju Das <biju.das.jz@bp.renesas.com>
usb: renesas_usbhs: Fix power-off ordering on unbind
Fei Shao <fshao@chromium.org>
usb: mtu3: allow system suspend during active gadget connection
Linmao Li <lilinmao@kylinos.cn>
platform/surface: acpi-notify: Check ACPI companion before use
Linmao Li <lilinmao@kylinos.cn>
platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL
Gary Guo <gary@garyguo.net>
usb: fix UAF when probe runs concurrent to dyn ID removal
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
USB: make to_usb_driver() use container_of_const()
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
USB: make single lock for all usb dynamic id lists
Yajun Deng <yajun.deng@linux.dev>
USB: core: Use device_driver directly in struct usb_driver and usb_device_driver
Ruoyu Wang <ruoyuw560@gmail.com>
usb: gadget: aspeed_udc: check endpoint DMA allocation
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
usb: gadget: aspeed_udc: Convert to platform remove callback returning void
Michael Bommarito <michael.bommarito@gmail.com>
usb: gadget: configfs: fix out-of-bounds read of qw_sign
Yuho Choi <dbgh9129@gmail.com>
serial: ma35d1: Fix OF node reference leaks in console init
Wolfram Sang <wsa+renesas@sang-engineering.com>
hwspinlock: propagate errno when registering single lock
Felix Gu <gu_0233@qq.com>
remoteproc: qcom_q6v5_adsp: Fix reference leak for device node
Armin Wolf <W_Armin@gmx.de>
platform/x86: dell-wmi-base: Fix resource leak on module load failure
Armin Wolf <W_Armin@gmx.de>
platform/x86: dell-privacy: Fix race condition
Cosmo Chou <chou.cosmo@gmail.com>
leds: pca9532: Fix inverted GPIO output polarity
Wei Wang <wei.w.wang@hotmail.com>
iommu/amd: Fix false positive in SB IOAPIC IVRS validation
Fu Hao <fuhao@open-hieco.net>
iommu/amd: Add support for Hygon family 18h model 4h IOAPIC
Wei Wang <wei.w.wang@hotmail.com>
iommu/amd: Prevent SB IOAPIC from overriding IVRS validation errors
Vladimir Zapolskiy <vz@kernel.org>
iommu/msm: Return -ENOMEM on memory allocation failure in probe
Akari Tsuyukusa <akkun11.open@gmail.com>
iommu/mediatek-v1: Fix off-by-one in MT2701_LARB_NR_MAX
Yuho Choi <dbgh9129@gmail.com>
bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation
Sanghyun Park <sanghyun.park.cnu@gmail.com>
bpf: Fix use-after-free on mm_struct in bpf_find_vma()
Breno Leitao <leitao@debian.org>
efi: fix stale reference to efi_recover_from_page_fault()
Daniel Borkmann <daniel@iogearbox.net>
bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux
Aleksandr Nogikh <nogikh@google.com>
udf: Mark LVID buffer as uptodate before marking it dirty
Hongyan Xu <getshell@seu.edu.cn>
usb: gadget: r8a66597: avoid double free of ep0_req in probe error path
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
usb: typec: ucsi: unregister debugfs entries on teardown
Dan Carpenter <error27@gmail.com>
thermal/drivers/rcar: Fix error checking in probe()
Tanushree Shah <tshah@linux.ibm.com>
perf data convert json: Fix trace_seq memory leak in process_sample_event()
Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
arm64: dts: qcom: sc8180x-lenovo-flex-5g: Rename regulator nodes
Bjorn Andersson <quic_bjorande@quicinc.com>
arm64: dts: qcom: sc8180x: Enable the power key
Anton Bambura <jenneron@postmarketos.org>
arm64: dts: qcom: sc8180x-lenovo-flex-5g: move pinctrl to appropriate nodes
Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
arm64: dts: qcom: sc8180x-primus: Rename regulator nodes
Herman van Hazendonk <github.com@herrie.org>
clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()
Herman van Hazendonk <github.com@herrie.org>
clk: qcom: gdsc: propagate gdsc_enable() failure for ALWAYS_ON domains
Herman van Hazendonk <github.com@herrie.org>
clk: qcom: gdsc: propagate gdsc_check_status() errors from gdsc_poll_status
David Woodhouse <dwmw@amazon.co.uk>
timekeeping: Account for monotonicity adjustment in ntp_error
Thomas Weißschuh <thomas.weissschuh@linutronix.de>
y2038: uapi: Use 64-bit __kernel_old_timespec::tv_nsec on x32
Yuho Choi <dbgh9129@gmail.com>
clocksource: Unregister subsystem on device registration failure
Jiangshan Yi <yijiangshan@kylinos.cn>
selftests: timers: leap-a-day: Fix -w option and update usage comment
Kemeng Shi <shikemeng@huaweicloud.com>
irqchip/gic-v3-its: Fix its node leak in gic_acpi_parse_madt_its()
Kemeng Shi <shikemeng@huaweicloud.com>
irqchip/gic-v3-its: Fix memleak in its_probe_one()
Feng Yang <yangfeng@kylinos.cn>
selftests/bpf: Fix memory leak in msg_alloc_iov
Malaya Kumar Rout <malayarout91@gmail.com>
selftests/bpf: Fix memory leak in msg_alloc_iov error path
Evgenii Burenchev <evg28bur@yandex.ru>
ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer()
Dawei Feng <dawei.feng@seu.edu.cn>
staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()
Ayush Mukkanwar <ayushmukkanwar@gmail.com>
staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown
Ayush Mukkanwar <ayushmukkanwar@gmail.com>
staging: octeon: replace pr_warn with dev_warn in fill and rx paths
Ayush Mukkanwar <ayushmukkanwar@gmail.com>
staging: octeon: ethernet-mem: replace pr_warn with dev_warn in free functions
Yuvraj Singh Chauhan <ysinghcin@gmail.com>
staging: octeon: fix free_irq dev_id mismatch in cvm_oct_rx_shutdown
Ayush Mukkanwar <ayushmukkanwar@gmail.com>
staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown
Dan Carpenter <error27@gmail.com>
staging: fbtft: Use sysfs_emit_at() to print to sysfs file
Bryam Vargas <hexlabsecurity@proton.me>
greybus: audio: bound the topology section sizes against the fetched size
Ahmet Sezgin Duran <ahmet@sezginduran.net>
staging: sm750fb: gate dualview dataflow using g_dualview
Alexander A. Klimov <grandmaster@al2klimov.de>
staging: greybus: audio: correct sscanf() return value check
Cen Zhang <zzzccc427@gmail.com>
wifi: mac80211_hwsim: avoid NULL skb in stop queue drain
Ruoyu Wang <ruoyuw560@gmail.com>
bus: qcom-ebi2: Fix clock leak on probe failure
Krzysztof Kozlowski <krzysztof.kozlowski@oss.qualcomm.com>
bus: qcom-ebi2: Simplify with scoped for each OF child loop
Luca Weiss <luca.weiss@fairphone.com>
arm64: dts: qcom: sm7225-fairphone-fp4: Fix address in fb node name
Haowen Tu <tuhaowen@uniontech.com>
PM: sleep: Fix off-by-one in wakelocks number limit check
Yuho Choi <dbgh9129@gmail.com>
bus: ti-sysc: Fix /chosen node reference leak
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
nvmet-rdma: fix response resource leak on queue teardown
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
nvmet-rdma: factor out response resource cleanup
Guixin Liu <kanie@linux.alibaba.com>
nvmet-rdma: use sbitmap to replace rsp free list
Hannes Reinecke <hare@suse.de>
nvmet-rdma: avoid circular locking dependency on install_queue()
Gui-Dong Han <hanguidong02@gmail.com>
nvme-apple: Use acquire/release for queue enabled state
Myeonghun Pak <mhun512@gmail.com>
crypto: keembay - Fix AEAD unregister count in error path
Pengpeng Hou <pengpeng@iscas.ac.cn>
crypto: rk3288 - fail ahash requests on HASH idle timeout
Pengpeng Hou <pengpeng@iscas.ac.cn>
crypto: sa2ul - stop probe if context pool creation fails
Lothar Rubusch <l.rubusch@gmail.com>
crypto: atmel-sha204a - fix heap info leak on I2C transfer failure
Thorsten Blum <thorsten.blum@linux.dev>
crypto: atmel-ecc - reject hardware ECDH without a public key
Thorsten Blum <thorsten.blum@linux.dev>
crypto: atmel-ecc - clean up and improve ECDH comments
Thorsten Blum <thorsten.blum@linux.dev>
crypto: atmel-ecc - replace min_t with min
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - clear AES key schedule from stack
Sandipan Das <sandipan.das@amd.com>
perf/x86/amd/uncore: Add group validation
Sandipan Das <sandipan.das@amd.com>
perf/x86/amd/uncore: Refactor uncore management
Leo Yan <leo.yan@arm.com>
perf cs-etm: Fix thread leaks on trace queue init failure
James Clark <james.clark@linaro.org>
perf cs-etm: Queue context packets for frontend
James Clark <james.clark@arm.com>
perf cs-etm: Create decoders after both AUX and HW_ID search passes
Besar Wicaksono <bwicaksono@nvidia.com>
perf cs-etm: Fix incorrect or missing decoder for raw trace
Pengpeng Hou <pengpeng@iscas.ac.cn>
wifi: rtw89: fix HE extended capability length check
Tzung-Bi Shih <tzungbi@kernel.org>
platform/chrome: sensorhub: Fix memory overread in ring handler
Hisam Mehboob <hisamshar@gmail.com>
selftests/rseq: Replace glibc-specific __GNUC_PREREQ with portable check
Hanlin Song <pgeorge8929@gmail.com>
csky: Fix a4/a5 restoration in syscall trace path
Sanjay Chitroda <sanjayembeddedse@gmail.com>
iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure
Srinivas Kandagatla <srinivas.kandagatla@oss.qualcomm.com>
soundwire: qcom: Fix port exhaustion check in stream_alloc_ports
Vladimir Zapolskiy <vz@kernel.org>
dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe
Suraj Gupta <suraj.gupta2@amd.com>
dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers
Vladimir Zapolskiy <vz@kernel.org>
dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure
Leon Hwang <leon.hwang@linux.dev>
bpf: Copy per-CPU map value padding in copy_map_value_long()
Yichong Chen <chenyichong@uniontech.com>
tools/bpf/bpftool: Reset vmlinux BTF after struct_ops commands
Yichong Chen <chenyichong@uniontech.com>
tools/bpf/bpftool: Reset vmlinux BTF after map commands
Asad Kamal <asad.kamal@amd.com>
drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
Asad Kamal <asad.kamal@amd.com>
drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup
Uday Khare <udaykhare77@gmail.com>
regulator: tps6594: Fix device node reference leaks in multiphase loop
Michael Walle <mwalle@kernel.org>
regulator: tps6594-regulator: refactor variant descriptions
Michael Walle <mwalle@kernel.org>
regulator: tps6594-regulator: remove hardcoded buck config
Michael Walle <mwalle@kernel.org>
regulator: tps6594-regulator: remove interrupt_count
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
regulator: tps6594-regulator: Constify struct tps6594_regulator_irq_type
Thomas Richard <thomas.richard@bootlin.com>
regulator: tps6594-regulator: Fix the number of irqs for TPS65224 and TPS6594
Nirmala Devi Mal Nadar <m.nirmaladevi@ltts.com>
regulator: tps6594-regulator: Add TI TPS65224 PMIC regulators
Nirmala Devi Mal Nadar <m.nirmaladevi@ltts.com>
mfd: tps6594: Add register definitions for TI TPS65224 PMIC
Ian Rogers <irogers@google.com>
perf tests: Fix flakiness in BPF counters test on hybrid systems
Namhyung Kim <namhyung@kernel.org>
perf test: Fix perf stat --bpf-counters on hybrid machines
Tengda Wu <wutengda@huaweicloud.com>
perf test: Use sqrtloop workload to test bperf event
Veronika Molnarova <vmolnaro@redhat.com>
perf test stat_bpf_counter.sh: Stabilize the test results
Ian Rogers <irogers@google.com>
perf test bpf-counters: Add test for BPF event modifier
Thomas Richter <tmricht@linux.ibm.com>
perf test: raise limit to 20 percent for perf_stat_--bpf-counters_test
Ian Rogers <irogers@google.com>
perf tests: Skip metrics validation if system-wide recording lacks permission
Namhyung Kim <namhyung@kernel.org>
perf test: Do not skip when some metrics tests succeeded
Ian Rogers <irogers@google.com>
perf test all metrics: Fully ignore Default metric failures
Ian Rogers <irogers@google.com>
perf test metrics: Update all metrics for possibly failing default metrics
Ian Rogers <irogers@google.com>
perf tests metrics: Permission related fixes
Ian Rogers <irogers@google.com>
perf test stat_all_metrics: Ensure missing events fail test
Namhyung Kim <namhyung@kernel.org>
perf test: Update all metrics test like metricgroups test
Weilin Wang <weilin.wang@intel.com>
perf test: Simplify metric value validation test final report
Sean Young <sean@mess.org>
media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define
Sean Young <sean@mess.org>
media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define
Daniel McCarthy <daniel@dragonzap.com>
pinctrl: bcm2835: Don't remove an unregistered GPIO chip
Zide Chen <zide.chen@intel.com>
perf/x86/intel/uncore: Keep PCI PMUs working when MMIO/MSR setup fails
Chen, Yu C <yu.c.chen@intel.com>
sched/fair: Fix overflow in update_tg_cfs_runnable()
Wei Yang <richard.weiyang@gmail.com>
mm/mm_init: fix incorrect node_spanned_pages
Henrik Grimler <henrik.grimler@axis.com>
drm/lima: call drm_mm_init() with a valid allocation range
Brian Masney <bmasney@redhat.com>
clk: imx: scu: drop redundant init.ops variable assignment
Weigang He <geoffreyhe2@gmail.com>
ARM: imx: fix device_node refcount leaks in imx7_src_init()
Weigang He <geoffreyhe2@gmail.com>
ARM: imx: fix device_node refcount leak in imx_src_init()
Min zhang <zhangmin2026@yeah.net>
clk: hisilicon: reset: Use devm_kzalloc to initialize hisi_reset_controller
Shengjiu Wang <shengjiu.wang@nxp.com>
ASoC: fsl_audmix: rework runtime PM handling in probe
Runyu Xiao <runyu.xiao@seu.edu.cn>
ASoC: rt700-sdw: always drain jack work on remove
Joey Lu <a0987203069@gmail.com>
clk: nuvoton: ma35d1: fix ma35d1_clk_pll_determine_rate logic
Brian Masney <bmasney@redhat.com>
clk: nuvoton: ma35d1-pll: convert from round_rate() to determine_rate()
Joey Lu <a0987203069@gmail.com>
clk: nuvoton: ma35d1: fix PLL_CTL1_FRAC bit field width and fractional calc
Joey Lu <a0987203069@gmail.com>
clk: nuvoton: ma35d1: fix ignored div_u64 return values in PLL freq calculation
Alexander A. Klimov <grandmaster@al2klimov.de>
clk: moxart: remove unused variables, fix refcount leak
Myeonghun Pak <mhun512@gmail.com>
clk: versaclock7: Fix APLL clock leak on probe failure
Gui-Dong Han <hanguidong02@gmail.com>
media: cec-pin: Fix event FIFO ordering
Weigang He <geoffreyhe2@gmail.com>
soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap()
Michael Bommarito <michael.bommarito@gmail.com>
HID: roccat: bound device-supplied profile index
Christos Maragkos <whitetowersoftware@gmail.com>
HID: nintendo: Fix imu_timestamp_us double increment per report
Philipp Weber <kernel@phwe.de>
HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
Maoyi Xie <maoyixie.tju@gmail.com>
platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
Jens Remus <jremus@linux.ibm.com>
x86/cfi: Use symmetric SYM_START and SYM_END in __CFI_TYPE()
Konstantin Andreev <andreev@swemel.ru>
smack: restrict smackfs/{direct,mapped} values to 0-255
Konstantin Andreev <andreev@swemel.ru>
smack: deduplicate smackfs/{direct,mapped} file_operations
Dmitry Antipov <dmantipov@yandex.ru>
smack: simplify write handlers of sysfs entries
Konstantin Andreev <andreev@swemel.ru>
smack: fix incorrect task context in smack_msg_queue_msgrcv
Maxime Ripard <mripard@kernel.org>
drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure
Nicolas Frattaroli <nicolas.frattaroli@collabora.com>
drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format
Paul Kocialkowski <paulk@sys-base.io>
drm: lcdif: Wait for vblank before disabling DMA
Yicong Hui <yiconghui@gmail.com>
drm: Remove unused header in drm_dumb_buffers.c
SJ Park <sj@kernel.org>
mm/damon/core: skip aging from repeated aggressive merging
Huang Wei <huangwei@kylinos.cn>
usb: typec: ucsi: use UCSI_TIMEOUT_MS for sync command completion
Martin Blumenstingl <martin.blumenstingl@googlemail.com>
clk: meson: align gxbb_32k_clk_sel number of parents with actual count
Arnaldo Carvalho de Melo <acme@redhat.com>
perf sched: Fix register_pid() overflow, strcpy, and BUG_ON
Sven Eckelmann <sven@narfation.org>
batman-adv: bla: avoid CRC corruption due to parallel claim add
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: atomically update mac addresses
Viacheslav Dubeyko <Slava.Dubeyko@ibm.com>
ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size
Junyi Liu <moss80199@gmail.com>
ksmbd: fix durable reconnect error path file lifetime
Akif <akif.sait111@gmail.com>
ksmbd: fix use-after-free in smb2_open during durable reconnect
Jiayuan Chen <jiayuan.chen@linux.dev>
bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops
Xiang Mei <xmei5@asu.edu>
bridge: mrp: reject zero test interval to avoid OOM panic
Brian Witte <brianwitte@mailfence.com>
netfilter: nft_counter: serialize reset with spinlock
Paul Chaignon <paul.chaignon@gmail.com>
bpf: Reject narrower access to pointer ctx fields
Daniel Vogelbacher <daniel@chaospixel.com>
ceph: fix oops due to invalid pointer for kfree() in parse_longname()
Al Viro <viro@zeniv.linux.org.uk>
parse_longname(): strrchr() expects NUL-terminated string
Jonathan Currier <dullfire@yahoo.com>
net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
Norbert Szetei <norbert@doyensec.com>
ksmbd: fix overflow in dacloffset bounds check
Jiawen Wu <jiawenwu@trustnetic.com>
net: libwx: fix Tx L4 checksum
Su Yue <glass.su@suse.com>
md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb
Manivannan Sadhasivam <mani@kernel.org>
wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path
Jie Wang <wangjie125@huawei.com>
net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
Jian Shen <shenjian15@huawei.com>
net: hns3: don't auto enable misc vector
SJ Park <sj@kernel.org>
mm/damon/tests/core-kunit: catch test failure in test_merge_regions_of()
SJ Park <sj@kernel.org>
mm/damon/core-kunit: handle region split failure in filter_out()
SJ Park <sj@kernel.org>
mm/damon/vaddr-kunit: check region count in three_regions test
SJ Park <sj@kernel.org>
mm/damon/paddr: drop last same folio access check reuse optimization
SJ Park <sj@kernel.org>
mm/damon/vaddr: drop last same folio access check optimization
SJ Park <sj@kernel.org>
mm/damon/core-kunit: check region count before testing in split_at()
Kazuki Hanai <hnkz.64@gmail.com>
nvmet-auth: Synchronize timeout work during SQ teardown
Dragos Tatulea <dtatulea@nvidia.com>
net/mlx5e: xsk: Fix unlocked writing to ICOSQ
Sechang Lim <rhkrqnwk98@gmail.com>
tcp: clear sock_ops cb flags before force-closing a child socket
Arthur Gautier <baloo@superbaloo.net>
xhci: fix lost bounce buffers on TDs spanning several ring segments
Zhenhao Wan <whi4ed0g@gmail.com>
drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE
Zhenhao Wan <whi4ed0g@gmail.com>
drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
Faith Ekstrand <faith.ekstrand@collabora.com>
drm/nouveau: Use write-combined maps for coherent
Sunday Clement <Sunday.Clement@amd.com>
drm/amdkfd: Reject zero-sized AQL queue allocations after size halving
Sunil Khatri <sunil.khatri@amd.com>
drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT
Guangshuo Li <lgs201920130244@gmail.com>
drm/amdgpu: fix autosuspend cleanup during removal
Yang Wang <kevinyang.wang@amd.com>
drm/amdgpu: check thunderbolt before switcheroo registration
Thadeu Lima de Souza Cascardo <cascardo@igalia.com>
drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used
Kavan Smith <kavansmith82@gmail.com>
drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value
Tao Yu <tao1.yu@intel.com>
drm/gud: validate TV mode names before creating enum property
Deepanshu Kartikey <kartikey406@gmail.com>
drm/gud: NUL-terminate TV mode names read from the device
David (Ming Qiang) Wu <David.Wu3@amd.com>
drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
Harry Wentland <harry.wentland@amd.com>
drm/amd/display: avoid divide-by-zero in __is_lut_linear()
Thomas Zimmermann <tzimmermann@suse.de>
drm/hibmc: Use drm_atomic_helper_check_plane_state()
Thomas Zimmermann <tzimmermann@suse.de>
drm/hibmc: Fix list of formats on the primary plane
Wentao Liang <vulab@iscas.ac.cn>
drm/sun4i: fix refcount leak in sun4i_backend_init_sat()
Deepanshu Kartikey <kartikey406@gmail.com>
drm/i915: Guard against NULL driver_data in i915_pci_probe()
Danilo Krummrich <dakr@kernel.org>
drm: fix race between partial drm_dev_register() failure and ioctl
Johan Hovold <johan@kernel.org>
drm/panel-edp: fix i2c adapter leak on probe failure
Johan Hovold <johan@kernel.org>
drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure
Chao Yu <chao@kernel.org>
f2fs: fix to zero post-EOF data when extending file size
Chao Yu <chao@kernel.org>
f2fs: fix to off-by-one issue in f2fs_zero_post_eof_page()
Zhan Xusheng <zhanxusheng1024@gmail.com>
f2fs: fix i_size when pinned fallocate partially fails
Wenjie Qi <qwjhust@gmail.com>
f2fs: return writeback error from collapse range
Zhan Xusheng <zhanxusheng1024@gmail.com>
f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()
Hao-Qun Huang <alvinhuang0603@gmail.com>
f2fs: reject overlapping move range after len expansion
Wenjie Qi <qwjhust@gmail.com>
f2fs: return symlink writeback errors
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Drop vport reference under lock in report ID acquisition
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Avoid double completion in async IOCB timeout
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Quiesce response IRQ before freeing request queue
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Don't query firmware state while chip is down
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Serialize flash version read in reset handler
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config()
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Initialize NVMe abort_work once at submission
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Bound i2c->length in I2C bsg handlers
Nilesh Javali <njavali@marvell.com>
scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
Ruoyu Wang <ruoyuw560@gmail.com>
media: zoran: Avoid freeing a registered video_device twice
Arash Golgol <arash.golgol@gmail.com>
media: vimc: fix pixel format lookup in enum_framesizes
Uday Khare <udaykhare77@gmail.com>
media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure
Mohammed EL Kadiri <med08elkadiri@gmail.com>
media: venus: fix payload size calculation in parse_raw_formats()
Mohammed EL Kadiri <med08elkadiri@gmail.com>
media: venus: fix payload size returned by parse_caps() and parse_alloc_mode()
Biren Pandya <birenpandya@gmail.com>
media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
Ming Qian <ming.qian@oss.nxp.com>
media: v4l2-ctrls: Allow unknown HDR10 white point and luminance
Xu Rao <raoxu@uniontech.com>
media: v4l2-async: avoid deleting unlinked ASC entry on link error
Ilya Krutskih <devsec@tpz.ru>
media: tda18250: fix possible integer overflow
Guangshuo Li <lgs201920130244@gmail.com>
media: saa7164: fix cleanup on resource allocation failure
Lei Huang <huanglei@kylinos.cn>
media: s2255: check firmware size before reading trailing marker
HyeongJun An <sammiee5311@gmail.com>
media: s2255: bound JPEG frame size before copying into the buffer
Valery Borovsky <vebohr@gmail.com>
media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure
Valery Borovsky <vebohr@gmail.com>
media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak
Myeonghun Pak <mhun512@gmail.com>
media: rc: sunxi-cir: Unregister rc device on probe failure
Guoniu Zhou <guoniu.zhou@oss.nxp.com>
media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks
Guoniu Zhou <guoniu.zhou@oss.nxp.com>
media: nxp: imx8-isi: Correct color map between V4L2 and ISI
Guoniu Zhou <guoniu.zhou@oss.nxp.com>
media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing
Christian Hewitt <christianshewitt@gmail.com>
media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common
Biren Pandya <birenpandya@gmail.com>
media: i2c: ov7740: fix use-after-destroy in remove
Biren Pandya <birenpandya@gmail.com>
media: i2c: ov02a10: fix endpoint parsing use-after-free
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
media: go7007: defer the ALSA v4l2 put until card release
Jiangong.Han <jiangong.han@windriver.com>
media: em28xx: fix use-after-free of dev_next->devlist on disconnect
Diego Fernando Mancera Gomez <diegomancera.dev@gmail.com>
media: em28xx: defer audio-only extension registration
Fan Wu <fanwu01@zju.edu.cn>
media: cx23885: cancel NetUP CI work before teardown
Bryam Vargas <hexlabsecurity@proton.me>
media: cx231xx: reject geometry changes while the VBI queue is busy
Ruoyu Wang <ruoyuw560@gmail.com>
media: cobalt: Avoid freeing ALSA private data twice
Dawei Feng <dawei.feng@seu.edu.cn>
media: cedrus: fix memory leak in cedrus_init_ctrls()
Ruoyu Wang <ruoyuw560@gmail.com>
media: cec: Serialize exclusive follower delivery
Yi Ding <yi.s.ding@gmail.com>
media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash
Jonas Karlman <jonas@kwiboo.se>
media: cec: core: Fix kmemleak due to missed rc_free_device() call
Valery Borovsky <vebohr@gmail.com>
media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
LoongArch: Avoid preempt count underflow without probe
Wentao Guan <guanwentao@uniontech.com>
LoongArch: Do not save/restore percpu base register in rethook trampoline
Christian Borntraeger <borntraeger@linux.ibm.com>
KVM: s390: Restore sigset on error path
Christian Borntraeger <borntraeger@linux.ibm.com>
KVM: s390: pv: Fix rc/rrc offset for PVM_DUMP
Christian Borntraeger <borntraeger@linux.ibm.com>
KVM: s390: Zero initialize irq in reinject_machine_check
Christian Borntraeger <borntraeger@linux.ibm.com>
KVM: s390: Take srcu when importing watchpoint data
Christian Borntraeger <borntraeger@linux.ibm.com>
KVM: s390: Free guest debug data on vcpu destroy
Christian Borntraeger <borntraeger@linux.ibm.com>
KVM: s390: Fix old_data leak in guest debug error path
Christian Borntraeger <borntraeger@linux.ibm.com>
KVM: s390: Fix memory leak in guest debug handling
Christian Borntraeger <borntraeger@linux.ibm.com>
KVM: s390: Fix length check __import_wp_info()
Carlos López <clopez@suse.de>
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
Yosry Ahmed <yosry@kernel.org>
KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
Yosry Ahmed <yosry@kernel.org>
KVM: nVMX: Always flush vpid02 on first use
Nikhil Gautam <nikhilgtr@gmail.com>
iio: light: opt4001: Fix reversed GENMASK() arguments in fault count mask
Nikhil Gautam <nikhilgtr@gmail.com>
iio: light: opt4001: Reject integration times with a non-zero seconds part
Nikhil Gautam <nikhilgtr@gmail.com>
iio: light: opt4001: Fix incompatible pointer type passed to div_u64_rem()
Nikhil Gautam <nikhilgtr@gmail.com>
iio: light: opt4001: Fix power down clearing bits of the wrong register
Sanjay Chitroda <sanjayembeddedse@gmail.com>
iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register()
Cong Nguyen <congnt264@gmail.com>
iio: srf04: fix pm_runtime handling on probe error path
Can Peng <pengcan@kylinos.cn>
iio: pressure: mpl115: Fix runtime PM cleanup
Rupesh Majhi <zoone.rupert@gmail.com>
iio: pressure: dps310: fix NULL pointer dereference on ACPI probe
Laxman Acharya Padhya <acharyalaxman8848@gmail.com>
iio: light: gp2ap002: Disable regulators on resume failure
Giorgi Tchankvetadze <giorgi@tchankvetadze.com>
iio: light: cm32181: return zero after writing calibscale
Cong Nguyen <congnt264@gmail.com>
iio: gyro: mpu3050: fix sign of raw angular velocity readings
Erick Henrique <erick.henrique.rodrigues@usp.br>
iio: dac: m62332: Fix regulator reference count imbalance
Linmao Li <lilinmao@kylinos.cn>
iio: chemical: sgp30: Handle IAQ thread creation failure
Fan Wu <fanwu01@zju.edu.cn>
iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
Moksh Panicker <mokshpanicker.7@gmail.com>
iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable
WenTao Liang <vulab@iscas.ac.cn>
ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get
Haoxiang Li <haoxiang_li2024@163.com>
AsoC: intel: sst: fix PCI device reference leak on probe failure
Haoxiang Li <haoxiang_li2024@163.com>
ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure
Runyu Xiao <runyu.xiao@seu.edu.cn>
ASoC: cs35l34: drain threaded IRQ before runtime suspend
Runyu Xiao <runyu.xiao@seu.edu.cn>
ASoC: cs35l33: drain threaded IRQ before runtime suspend
Linkai Gong <gonglinkai@kylinos.cn>
i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure
Stephan Gerhold <stephan.gerhold@linaro.org>
clk: qcom: gcc-mdm9607: Drop incorrect BIMC PLL and related clocks
Stephan Gerhold <stephan.gerhold@linaro.org>
clk: qcom: gcc-mdm9607: Fix halt_reg for gcc_apss_axi_clk
Stephan Gerhold <stephan@gerhold.net>
clk: qcom: gcc-mdm9607: Fix enable_reg for gcc_blsp1_sleep_clk
Stephan Gerhold <stephan@gerhold.net>
clk: qcom: gcc-mdm9607: Drop incorrect system_noc_bfdcd_clk_src
Stephan Gerhold <stephan@gerhold.net>
clk: qcom: gcc-mdm9607: Drop incorrect apss_tcu_clk_src
Heiko Stuebner <heiko.stuebner@cherry.de>
clk: rockchip: rk3588: Don't change PLL rates when setting dclk_vop2_src
Stephan Gerhold <stephan.gerhold@linaro.org>
clk: qcom: gcc-msm8939: Fix enable_reg for gcc_blsp1_sleep_clk
Stephan Gerhold <stephan.gerhold@linaro.org>
clk: qcom: gcc-msm8916: Fix enable_reg for gcc_blsp1_sleep_clk
Sven Eckelmann <sven@narfation.org>
batman-adv: bla: prevent CRC corruptions after claim flush
Sven Eckelmann <sven@narfation.org>
batman-adv: bla: fix freeing of claims on meshif deletion
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: avoid unaligned fault in IP extraction
Zhiling Zou <zhilinz@nebusec.ai>
batman-adv: fix stale receive device on merged fragments
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: rawnand: validate ONFI extended parameter page sections
Xu Rao <raoxu@uniontech.com>
mtd: mtdoops: free page bitmap when the backing MTD is removed
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: afs: validate v2 image info bounds
Anthony Krowiak <akrowiak@linux.ibm.com>
s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object
Anthony Krowiak <akrowiak@linux.ibm.com>
s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap
Anthony Krowiak <akrowiak@linux.ibm.com>
s390/vfio-ap: Fix NULL deref in status_show() during queue probe
Anthony Krowiak <akrowiak@linux.ibm.com>
s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
Anthony Krowiak <akrowiak@linux.ibm.com>
s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL
Anthony Krowiak <akrowiak@linux.ibm.com>
s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
Anthony Krowiak <akrowiak@linux.ibm.com>
s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove
Anthony Krowiak <akrowiak@linux.ibm.com>
s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
Sourabh Jain <sourabhjain@linux.ibm.com>
powerpc/crash: stop watchdogs before booting kdump kernel
Sourabh Jain <sourabhjain@linux.ibm.com>
powerpc/pseries: Move H_WATCHDOG definitions to a common header
Sourabh Jain <sourabhjain@linux.ibm.com>
powerpc/pseries: Handle and log pseries-wdt registration failures
Muchun Song <muchun.song@linux.dev>
powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
Helge Deller <deller@gmx.de>
parisc: Fix alignment of asm statements in head.S
Pei Xiao <xiaopei01@kylinos.cn>
parisc: eisa: Fix infinite loop when parsing invalid IRQ value
Bryam Vargas <hexlabsecurity@proton.me>
nvdimm/btt: reject an arena whose nfree is below the lane count
Wupeng Ma <mawupeng1@huawei.com>
mm/hugetlb: fix missing migratable flag on same-node hugetlb migration
caina <caina@uniontech.com>
Revert "irqchip/mbigen: Fix mbigen node address layout"
Shivam Kumar <kumar.shivam43666@gmail.com>
nvmet-tcp: reject unsolicited H2CData PDUs
Shivam Kumar <kumar.shivam43666@gmail.com>
nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
nvme-tcp: check the data direction of a C2HData PDU
Takashi Iwai <tiwai@suse.de>
ALSA: pcm: Fix race between non-atomic ops and trigger-start
Runyu Xiao <runyu.xiao@seu.edu.cn>
ALSA: harmony: initialize locks before requesting IRQ
Karl Mehltretter <kmehltretter@gmail.com>
arm64: mm: Fix the lockless page-table walk in show_pte()
Ahmad Byagowi <ahmadexp@gmail.com>
i2c: mux: Fix channel node leak on adapter add failure
Vasileios Almpanis <vasilisalmpanis@gmail.com>
i2c: core: fix debugfs UAF on adapter removal
Sizhe Liu <liusizhe5@huawei.com>
perf hisi-ptt: Fix PTT trace TLP header parsing
Dapeng Mi <dapeng1.mi@linux.intel.com>
perf/x86/intel: Fix kernel address leakages in LBR stack
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
rtc: rzn1: Fix weekday underflow when alarm crosses month boundary
Pengpeng Hou <pengpeng@iscas.ac.cn>
Input: aiptek - validate raw macro indices before updating state
Masami Hiramatsu (Google) <mhiramat@kernel.org>
kprobes: Protect kprobe_blacklist with RCU
Bradley Morgan <brads@mainlining.org>
ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
Hajo Noerenberg <hajo-linux-ide@noerenberg.de>
ata: ahci: work around lost interrupts on Marvell 88SE61xx
Damien Le Moal <dlemoal@kernel.org>
block: flag zoned disks with GENHD_FL_NO_PART
Linkai Gong <gonglinkai@kylinos.cn>
cpuidle: dt_idle_genpd: kfree() the original name allocation
Koichiro Den <den@valinux.co.jp>
dmaengine: dw-edma: Initialize IRQ data before requesting IRQs
Koichiro Den <den@valinux.co.jp>
dmaengine: dw-edma: Complete descriptors before pausing
Koichiro Den <den@valinux.co.jp>
dmaengine: dw-edma: Fix HDMA channel status register access
Mikulas Patocka <mpatocka@redhat.com>
dm: fix resume-vs-remove race
Mikulas Patocka <mpatocka@redhat.com>
dm: fix race when loading and unloading a table
Ibrahim Hashimov <security@auditcode.ai>
HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
Wei Jie Law <98lawweijie@gmail.com>
HID: rmi: fix OOB access with undersized RMI reports
Yao Kai <yaokai34@huawei.com>
futex: Prevent rcuwait use-after-free during requeue PI
SJ Park <sj@kernel.org>
mm/damon/sysfs: kobject_del() target (normal), context and kdamond dirs
SJ Park <sj@kernel.org>
mm/damon/sysfs: kobject_del() region and target (error) dirs
SJ Park <sj@kernel.org>
mm/damon/sysfs-schemes: kobject_del() scheme region dirs
SJ Park <sj@kernel.org>
mm/damon/sysfs-schemes: kobject_del() scheme filter dirs
SJ Park <sj@kernel.org>
mm/damon/sysfs-schemes: kobject_del() scheme dirs
Runyu Xiao <runyu.xiao@seu.edu.cn>
scsi: pm8001: Use rollback index when freeing MSI-X vectors
Sujal Tuladhar <sujaltuladhar1231@gmail.com>
scsi: target: iscsi: Reserve a terminator byte for the login payload
Can Peng <pengcan@kylinos.cn>
spi: bcmbca-hsspi: disable clocks on resume failure
Can Peng <pengcan@kylinos.cn>
spi: bcm63xx: disable clock on resume failure
Can Peng <pengcan@kylinos.cn>
spi: bcm63xx-hsspi: disable clocks on resume failure
Kanishka De Silva <kpskanna1915@gmail.com>
ublk: clear VM_MAYWRITE on read-only ublk char device mmap
Can Peng <pengcan@kylinos.cn>
thermal/drivers/qoriq: Disable clock on resume failure
Can Peng <pengcan@kylinos.cn>
thermal/drivers/imx: Disable clock on runtime resume failure
Muhammad Bilal <meatuni001@gmail.com>
staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()
Muhammad Bilal <meatuni001@gmail.com>
staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
Jeffin Philip <jeffinphilip14@gmail.com>
usb: gadget: fix null pointer dereference in usb_put_function_instance()
Lovekesh Solanki <lovekeshsolanki00@gmail.com>
USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
Ivy Lopez <skunkolee@gmail.com>
usb: gadget: f_midi2: fix use-after-free in string attribute show path
Aleksandr Nogikh <nogikh@google.com>
usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
Jameson Thies <jthies@google.com>
usb: typec: ucsi: displayport: Fix OOB altmode array index
Fan Wu <fanwu01@zju.edu.cn>
usb: typec: qcom-pmic: cancel reset_work on stop
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns()
Liu Qi <liuqi@longcheer.com>
usb-storage: ene_ub6250: fix race between scan work and probe
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
media: usbtv: keep device alive while ALSA card exists
Stephan Gerhold <stephan@gerhold.net>
clk: qcom: gcc-mdm9607: Increase delay for USB PHY reset
HyeongJun An <sammiee5311@gmail.com>
ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
Griffin Kroah-Hartman <griffin@kroah.com>
usb: image: mdc800: change kmalloc() to kzalloc()
Hari Mishal <harimishal1@gmail.com>
drm/amd/display: