* [PATCH 6.12 000/670] 6.12.118-rc1 review
@ 2026-11-13 15:42 Greg Kroah-Hartman
2026-11-13 15:42 ` [PATCH 6.12 001/670] smb: client: validate the data area in SMB2_read() Greg Kroah-Hartman
` (671 more replies)
0 siblings, 672 replies; 673+ messages in thread
From: Greg Kroah-Hartman @ 2026-11-13 15:42 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
This is the start of the stable review cycle for the 6.12.118 release.
There are 670 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sun, 15 Nov 2026 15:36:17 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.118-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 6.12.118-rc1
Johan Hovold <johan+linaro@kernel.org>
media: qcom: camss: vfe: suppress VFE version log spam
José Miguel Castellanos Valladolid <josstamy@gmail.com>
ALSA: hda/realtek: Enable mute LEDs on HP OmniBook X Flip 14-fm0xxx
Gianluca Balboni <gianluca.balboni06@gmail.com>
ASoC: amd: yc: Add DMI quirk for HP OmniBook 3 Laptop 16-by0xxx
Armaan Sandhu <armaan.sandhu0504@gmail.com>
lib/cmdline: fix get_options() count and overflow with large ranges
Shuvam Pandey <shuvampandey1@gmail.com>
lib/tests: extend cmdline KUnit with next_arg() tests
Brandon Williams <turbine.bmw@gmail.com>
power: supply: qcom_battmgr: Notify charger supplies of online changes
Mario Limonciello <mario.limonciello@amd.com>
platform/x86/amd/pmf: Add AMDI0112 ACPI ID
Myeonghun Pak <mhun512@gmail.com>
fbdev: nvidia: Release write-combining handle on probe failure
Shixiong Ou <oushixiong@kylinos.cn>
fbdev: nvidia: Convert to managed PCI and ioremap API
Maurizio Casciano <mauriziocasciano7@gmail.com>
power: supply: core: Honor supplied-from with CONFIG_OF=y
Sebastian Reichel <sebastian.reichel@collabora.com>
power: supply: core: get rid of of_node
Thomas Weißschuh <linux@weissschuh.net>
power: supply: core: use power_supply_for_each_psy()
Thomas Weißschuh <linux@weissschuh.net>
power: supply: core: introduce power_supply_for_each_psy()
Francesco Orlando <francesco.orlando99@libero.it>
Input: xpad - add GameSir Nova Lite support
Wentao Liang <vulab@iscas.ac.cn>
power: supply: ltc2941: Fix of_node reference leak in ltc294x_i2c_probe()
Olivier Kaloudoff <olivier.kaloudoff@gmail.com>
ALSA: usb-audio: Add mic resolution quirk for Logitech Webcam C200
Pauli Virtanen <pav@iki.fi>
ALSA: usb-audio: add volume quirks for MS LifeChat LX-3000
Cryolitia PukNgae <cryolitia@uniontech.com>
ALSA: usb-audio: rename QUIRK_FLAG_MIXER_MIN_MUTE to QUIRK_FLAG_MIXER_PLAYBACK_MIN_MUTE
Guangshuo Li <lgs201920130244@gmail.com>
crypto: omap-sham - fix crypto engine cleanup
Thorsten Blum <thorsten.blum@linux.dev>
crypto: omap - add omap_sham_unregister_algs helper
Ricardo Neri <ricardo.neri-calderon@linux.intel.com>
hwmon: (coretemp) Return -ENODATA for invalid temperature readings
Andrea Parri <parri.andrea@gmail.com>
iommufd/iova_bitmap: Ensure that iova_bitmap_set() handles the full IOVA
Henrik Enquist <henrik.enquist@gmail.com>
ALSA: aloop: Don't constrain playback params in notify mode
Takashi Iwai <tiwai@suse.de>
ALSA: aloop: Use guard() for mutex locks
Lorenzo Stoakes (ARM) <ljs@kernel.org>
mm/vma: avoid broken uffd merge on mremap
David Carlier <devnexen@gmail.com>
media: ipu6: Fix firmware config leak on stream start
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: always accept EV_SYN in input_event()
Daeho Jeong <daehojeong@google.com>
f2fs: release a removed xattr node in roll-forward recovery
Miquel Raynal <miquel.raynal@bootlin.com>
clk: nuvoton: ma35d1: Add missing WDT/WWDT parent clocks
Miquel Raynal <miquel.raynal@bootlin.com>
dt-bindings: clock: ma35d1: Add missing WDT/WWDT parent clocks
Miquel Raynal <miquel.raynal@bootlin.com>
dt-bindings: clock: ma35d1: Drop CLK_MAX_IDX define
Miquel Raynal <miquel.raynal@bootlin.com>
clk: nuvoton: ma35d1: Keep the clock count in the driver
Sumit Kumar <sumit.kumar@oss.qualcomm.com>
PCI: dwc: Set DMA_BYPASS bit in outbound IATU CTRL2 register
Lorenzo Stoakes (ARM) <ljs@kernel.org>
mm/mremap: correctly uncharge accountable VMAs in error path
David Hildenbrand (Arm) <david@kernel.org>
mm/huge_memory: split huge PUDs when adjusting VMA boundaries
Jianyun Gao <jianyungao89@gmail.com>
dax: fix wrong error code returned from dax_dedupe_file_range_compare()
Hung-Jui Lin <alex.lin.programmer@gmail.com>
posix-timers: Report zero remaining time for disarmed SIGEV_NONE timers
Breno Leitao <leitao@debian.org>
ACPI: APEI: accumulate the queued flag across error sections
Bradley Morgan <brads@mainlining.org>
panic: restore variable arguments to nmi_panic()
Steve Wahl <steve.wahl@hpe.com>
watchdog/hpwdt: Refine hpwdt message for UV platform
Nam Cao <namcao@linutronix.de>
panic: Add vpanic()
Sravan Kumar Gundu <sravankumarlpu@gmail.com>
kernel/panic.c: format kernel-doc comments
Bradley Morgan <brads@mainlining.org>
panic: flatten nmi_panic control flow
Jinchao Wang <wangjinchao600@gmail.com>
panic: use panic_try_start() in nmi_panic()
Adrian Ambrozewicz <aambrozewicz@nvidia.com>
gpiolib: cdev: don't set GPIOD_FLAG_IS_OUT
Yingjie Wang <1075151112@qq.com>
nvme-tcp: validate the TLS handshake timeout
Sean Young <sean@mess.org>
media: serial_ir: Fix race condition where timer can be re-armed
Huacai Chen <chenhuacai@kernel.org>
LoongArch: Don't init & online empty nodes
Chao Yu <chao@kernel.org>
f2fs: fix to invalidate curseg if change_curseg() fails
Christian Brauner <brauner@kernel.org>
iomap: don't mark unwritten parts of a folio uptodate
Hitesh Patel <hitesh@ebytelogic.com>
media: qcom: camss: vfe-17x: Fix write master selection for RDI lines
Depeng Shao <quic_depengs@quicinc.com>
media: qcom: camss: vfe: Move common code into vfe core
Linmao Li <lilinmao@kylinos.cn>
PCI: cadence: Store the core controller in platform drvdata
Giorgi Kobakhia <gkobakhi@asu.edu>
ocfs2: fix array out of bound access in __ocfs2_find_path()
Edward Adam Davis <eadavis@qq.com>
ocfs2: fix oob in __ocfs2_find_path
Caleb Kan <ckan@cloudflare.com>
stackdepot: stop preallocating after the final pool
Tiezhu Yang <yangtiezhu@loongson.cn>
LoongArch: Fix one-shot limitation for perf hardware breakpoints
Nikolaos Karaolidis <nick@karaolidis.com>
fs: don't lose inodes that another LRU walker is isolating
Qi Xi <xiqi2@huawei.com>
mm/page_isolation: fix UBSAN shift-out-of-bounds warning
Longlong Xia <xialonglong@kylinos.cn>
mm/zswap: publish the initial pool with list_add_rcu()
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: hdac_hda: Restore the codec device type on unbind
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: hdac_hda: Allocate the private data at codec driver bind
Jinmeng Zhou <jinmengzhou22@gmail.com>
mm/hugetlb: charge folios to the target mm's memcg
Josef Bacik <josef@toxicpanda.com>
mm/vma: don't leak the commit charge on mmap failure
Joanne Koong <joannelkoong@gmail.com>
fuse: don't drop destination page cache on a zero byte copy reply
Daniel Phillips <daniel.phillips@amd.com>
amdkfd: Fix memory availability double accounting of kfd pinned objects
Nikolaos Karaolidis <nick@karaolidis.com>
fs: rotate inodes whose page cache could not be dropped
Kevin Wang <kevin.wang@amd.com>
drm/amd/pm: reapply umd profile state after recovery
Lijo Lazar <lijo.lazar@amd.com>
drm/amd/pm: Revert state if force level fails
Fan Wu <fanwu01@zju.edu.cn>
power: supply: bq27xxx: Ensure poll work is cancelled on remove
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
power: supply: Use devm_mutex_init()
Thomas Weißschuh <linux@weissschuh.net>
power: supply: bq27xxx_battery: register power supply with power_supply_register()
Thomas Weißschuh <linux@weissschuh.net>
power: supply: core: add wakeup source inhibit by power_supply_config
Alexander Sverdlin <alexander.sverdlin@siemens.com>
tpm: tpm2_probe: propagate transport errors
Maciej Kucharek <qchcio@gmail.com>
drm/amdgpu: reset SI ASIC on MacBookPros with VRAM at 0
Armin Wolf <W_Armin@gmx.de>
hwmon: (acpi_power_meter) Fix 18.45 TW bug
Alexey Charkov <alchark@flipper.net>
nvmem: rockchip-otp: Serialize reads
Rosen Penev <rosenp@gmail.com>
nvmem: rockchip-otp: alloc clks with main struct
Ming Lei <tom.leiming@gmail.com>
ublk: mark the io command cancelable before publishing it
Andrew Pam <andrew@fastmailteam.com>
power: supply: cros_charge-control: restore EC state on resume
Jesse Zhang <Jesse.Zhang@amd.com>
drm/amdgpu: reject CS chunks too large for kvmalloc()
Tvrtko Ursulin <tvrtko.ursulin@igalia.com>
drm/amdgpu: Use (v)memdup_array_user in amdgpu_cs_pass1
Gregory Price <gourry@gourry.net>
mm/mempolicy: use vm_normal_folio_pmd() in queue_folios_pmd()
Wentao Liang <vulab@iscas.ac.cn>
xen/gntdev: Fix gntdev_dmabuf ref leak in dmabuf_exp_wait_released()
Yao Yiqi <yaoyiqi3@huawei.com>
fbcon: Retry rotated font allocation after failure
Marc Zyngier <maz@kernel.org>
KVM: arm64: vgic: Stop the target vcpu when disabling LPIs
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ALSA: hda/hdmi: clamp num_cvts against cvt_nids[] in hdmi_read_pin_conn
Takashi Iwai <tiwai@suse.de>
ALSA: emux: Fix UAF of soundfont zones at note-on
Takashi Iwai <tiwai@suse.de>
ALSA: synth: Use guard() for spin locks
Runyu Xiao <runyu.xiao@seu.edu.cn>
block: amiflop: synchronize flush timer before track flush
Joanne Koong <joannelkoong@gmail.com>
fuse: don't launder folios of a bad inode
Art O Cathain <art.home@gmail.com>
ASoC: amd: acp-config: force SoundWire probe on Dell 14S DS14265
Sehat Mahde <hskmahde@gmail.com>
ASoC: amd: acp-config: force SoundWire probe on HP OmniBook X Flip 16
Jackie Dong <xy-jackie@139.com>
ASoC: amd: acp: Add DMI quirk for Lenovo Yoga Pro 7 15ASH11
Jasper Smet <josbeir@gmail.com>
ASoC: amd: acp: Add DMI quirk for ASUS Zenbook S16 UM5606GA
Hasun Park <hasunpark@gmail.com>
ASoC: amd: acp: add DMI override for ACP70 flag
Devin Wittmayer <lucid_duck@justthetip.ca>
wifi: mt76: move the channel survey when the channel changes
Stanley Jhu <stanleyjhu@google.com>
scsi: ufs: core: Add a helper for clearing hba->outstanding_reqs
Chao Yu <chao@kernel.org>
f2fs: fix to use bio_in_atomic() in f2fs_read_end_io()
Tal Zussman <tz2294@columbia.edu>
block: introduce bio_in_atomic()
Kaixuan Li <kaixuanli0131@gmail.com>
f2fs: bound the SIT/NAT bitmaps by the checkpoint pack
Paolo Abeni <pabeni@redhat.com>
mptcp: fix subflow bitfield misuse
Chi Zhiling <chizhiling@kylinos.cn>
exfat: advance valid_size to EOF for append writes
Elena Sakhnovitch <Elena.Sakhnovitch@amd.com>
drm/amdgpu/gmc9: add extra type-2 TLB flush for gfx942/gfx950
Apurv Mishra <Apurv.Mishra@amd.com>
drm/amdkfd: Drop workaround for GC v9.4.3 revID 0
Alex Sierra <alex.sierra@amd.com>
drm/amd: update mtype flags for gfx 9.5.0
Alex Sierra <alex.sierra@amd.com>
drm/amd: define gc ip version local variable
Andrea Parri <parri.andrea@gmail.com>
iomap: don't lose a failed direct I/O bio's error when zeroing the tail
Janne Grunau <j@jannau.net>
wifi: brcmfmac: cfg80211: Report port_authorized for 4-way HS offload
Runyu Xiao <runyu.xiao@seu.edu.cn>
IB/hfi1: Shutdown self-rearming timers before freeing
Jiaming Zhang <r772577952@gmail.com>
nilfs2: force clear dirty state when restoring from the shadow map
Matthew Wilcox (Oracle) <willy@infradead.org>
nilfs2: convert nilfs_page_count_clean_buffers() to take a folio
Matthew Wilcox (Oracle) <willy@infradead.org>
nilfs2: remove nilfs_writepage
Vladyslav Tymoshchuk <tvlad744@gmail.com>
ASoC: qcom: q6apm-dai: wrap the position of a full ring to 0
Mikulas Patocka <mpatocka@redhat.com>
dm-bufio: fix non-working memory limit
Geraldo Nascimento <geraldogabriel@gmail.com>
PCI: rockchip: Drive at 2.5 GT/s, error other speeds
Martin Fuzzey <martin.fuzzey@flowbird.group>
serial: sc16is7xx: fix data corruption due to unexpected xon/xoff
Karl Mehltretter <kmehltretter@gmail.com>
irqchip/atmel-aic[5]: Disable interrupts in the irq_pm_shutdown() callbacks
Luxiao Xu <rakukuip@gmail.com>
mm/memory: constrain generic_access_phys() to page boundary
Zhiling Zou <roxy520tt@gmail.com>
mm/page_table_check: skip zero pages
Sung Byeongchan <tjdqudcks0424@naver.com>
virtiofs: validate fixed-output response length
Yuto Ohnuki <ytohnuki@amazon.com>
virtiofs: add FUSE protocol validation
Hugo Villeneuve <hvilleneuve@dimonoff.com>
serial: sc16is7xx: declare MCR and IER as volatile registers
Hugo Villeneuve <hvilleneuve@dimonoff.com>
serial: sc16is7xx: add comments for lock requirements
Hugo Villeneuve <hvilleneuve@dimonoff.com>
serial: sc16is7xx: declare SPR/TLR/XOFF2 register as volatile
Joe Damato <joe@dama.to>
mm: memcontrol: raise MEMCG_MAX for charges that fail without reclaiming
Runyu Xiao <runyu.xiao@seu.edu.cn>
ALSA: mpu401: shut down timer before freeing MPU
Tobias Schumacher <ts@linux.ibm.com>
s390/pci: Add error cleanup in zpci_directed_irq_init()
Andrey Misiurov <andrey.misyrov@gmail.com>
fbdev: core: Initialize modelist in framebuffer_alloc()
Darrick J. Wong <djwong@kernel.org>
xfarray: don't crash when sorting if array element crosses a folio
Fan Wu <fanwu01@zju.edu.cn>
media: rockchip: rga: quiesce IRQ before releasing m2m state
Sven Püschel <s.pueschel@pengutronix.de>
media: rockchip: rga: use clk_bulk api
Marc Zyngier <maz@kernel.org>
KVM: arm64: Move IN_GUEST_MODE ahead of state being loaded
David Hildenbrand (Arm) <david@kernel.org>
mm: disallow ioremap'ing ordinary RAM in generic_access_phys()
Marco Scardovi <scardracs@disroot.org>
platform/x86: asus-wmi: Serialize WMI method evaluations with a mutex
Ma Ke <make_ruc2021@163.com>
ALSA: hda: cs35l41: Fix ACPI device reference leak on probe failure
Takashi Iwai <tiwai@suse.de>
ALSA: hda: cs35l41: Use auto-cleanup for put_device()
Runyu Xiao <runyu.xiao@seu.edu.cn>
mailbox: altera: shut down RX polling timer on channel teardown
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ALSA: hda/hdmi: clamp sad_count in ELD proc write handler
Myeonghun Pak <mhun512@gmail.com>
mfd: twl-core: Unregister the auxiliary platform device on unbind
Thorsten Blum <thorsten.blum@linux.dev>
mfd: twl-core: Use i2c_check_functionality as boolean value
Kenneth Feng <kenneth.feng@amd.com>
drm/amd/pm:restate all customized OD features on every table upload for smu 13.0.0/smu 14.0.2
Daeho Jeong <daehojeong@google.com>
f2fs: return -EIO for a lost inode block after cp_error
Ridong Chen <chenridong@xiaomi.com>
mm/mglru: fix ineffective memory protection for non-kswapd reclaim
Chao Yu <chao@kernel.org>
f2fs: zone: fix to avoid bio split on sequential zone
Takashi Iwai <tiwai@suse.de>
ALSA: line6: Handle period elapsed calls outside the locks
Takashi Iwai <tiwai@suse.de>
ALSA: line6: Use guard() for spin locks
Ethan Nelson-Moore <enelsonmoore@gmail.com>
ata: sata_inic162x: remove dangerous broken driver
Bart Van Assche <bvanassche@acm.org>
ata: libata: Add an argument to ata_eh_reset()
Damien Le Moal <dlemoal@kernel.org>
ata: libata-eh: Simplify reset operation management
Damien Le Moal <dlemoal@kernel.org>
ata: libata-eh: Remove ata_do_eh()
Damien Le Moal <dlemoal@kernel.org>
ata: libata-eh: Rename and make ata_set_mode() static
Vincent Donnefort <vdonnefort@google.com>
KVM: arm64: Fix MMFR0 TGRAN advertisement for pVMs
Wentao Liang <vulab@iscas.ac.cn>
drm/msm/dsi: Fix VM leak in dsi_tx_buf_alloc_6g()
Jiale Yao <yaojiale02@163.com>
iio: dac: mcp4821: reject devices without match data
Myeonghun Pak <mhun512@gmail.com>
ASoC: stm: stm32_i2s: request IRQ after regmap initialization
bui duc phuc <phucduc.bui@gmail.com>
ASoC: stm: stm32_i2s: Drop redundant error messages
Linmao Li <lilinmao@kylinos.cn>
media: chips-media: wave5: Handle polling IRQ thread failure
Ryusuke Konishi <konishi.ryusuke@gmail.com>
nilfs2: ignore non-fatal signals during synchronous log write wait
Ryusuke Konishi <konishi.ryusuke@gmail.com>
nilfs2: correct return value kernel-doc descriptions for the rest
Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
dmaengine: qcom: bam_dma: free interrupt before the clock in error path
Vishnu Santhosh <vishnu.santhosh@oss.qualcomm.com>
dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree
Tom Verdonck <tom.verdonck@inspiral.be>
hwmon: (tmp108) Fix jiffies wraparound in conversion-ready check
Yunpeng Tian <shionthanatos@gmail.com>
udf: validate the device specification EA before using it
Hungyu Lin <dennylin0707@gmail.com>
mm/page-writeback: avoid 32-bit overflow in dirty threshold shares
Marek Czernohous <marek@czernohous.de>
drm/nouveau/pci: use config-space MSI rearm on MCP79/MCP7A (NVAC)
Mehmet Fide <mehmet.fide@screeningeagle.com>
wifi: rtw88: widen the ATIM window while an AP interface is up
Mehmet Fide <mehmet.fide@screeningeagle.com>
wifi: rtw88: usb: only let the frames a dozing station needs use the after-DTIM queue
Mehmet Fide <mehmet.fide@screeningeagle.com>
wifi: rtw88: usb: bound what the driver feeds the after-DTIM queue
Mehmet Fide <mehmet.fide@screeningeagle.com>
wifi: rtw88: usb: route bmc frames via the high queue only for DTIM delivery
Martin Belanger <martin.belanger@dell.com>
nvme-tcp: skip TLS control records while waiting for the ICResp
Guanglei Zhu <zhugl3@xiaopeng.com>
apparmor: check accept index + 1 is in bounds
Yeoreum Yun <yeoreum.yun@arm.com>
coresight/etm4: fix missing disable active config
Zhiling Zou <zhilinz@nebusec.ai>
ipmr: only copy pktinfo to cache reports
Eric Dumazet <edumazet@google.com>
ipmr: prevent info-leak in pmr_cache_report()
Weibin Liu <liuwb@xiaopeng.com>
spi: cadence-xspi: reject SDMA transfers larger than the requested length
Jisheng Zhang <jszhang@kernel.org>
spi: cadence-xspi: group marvell support code together
Hans Zhang <18255117159@163.com>
spi: cadence-xspi: Use FIELD_MODIFY()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
spi: cadence-xspi: Replace ACPI specifics by agnostic APIs
Luo Jie <quic_luoj@quicinc.com>
bitfield: Add FIELD_MODIFY() helper
Chris Mason <mason@kernel.org>
mm/shmem: honour F_SEAL_EXEC when an ACL is set
Kyle Zeng <kylebot@openai.com>
mm/page_vma_mapped: continue past nonmatching huge PMDs
Jiangshan Yi <yijiangshan@kylinos.cn>
ceph: fix longname buffer overflow in ceph_fname_to_usr()
Ido Schimmel <idosch@nvidia.com>
ipmr, ip6mr: validate packets injected into the register vif on xmit
Kuniyuki Iwashima <kuniyu@google.com>
ipmr: Call ipmr_fib_lookup() under RCU.
David Hildenbrand (Arm) <david@kernel.org>
mm/userfaultfd: only allocate anon_vma in CoW mappings
Josef Bacik <josef@toxicpanda.com>
mm/hugetlb: unmap the page where the other VMA maps it
Sinan Turunc <enscrpt@pm.me>
ALSA: usb-audio: Bound packet copies by the PCM buffer size
Fuad Tabba <fuad.tabba@linux.dev>
KVM: arm64: Validate the host vCPU's VM before reading it under pKVM
Michal Pecio <michal.pecio@gmail.com>
usb: xhci: Fix bounce buffer overflow
Yuejie Shi <syjcnss@gmail.com>
fs/ntfs3: validate the EA value length in ntfs_read_ea()
Vaibhav Nagare <vnagare@redhat.com>
bnxt_en: don't leave an XDP program installed when the open fails
Cen Zhang (Microsoft) <cenzhang@linux.microsoft.com>
userfaultfd: fix UFFDIO_MOVE livelock on large folio with extra references
Jun Yang <junvyyang@tencent.com>
sctp: re-point retained control chunks on association migration
David Lee <david.lee@trailofbits.com>
sctp: hold shkey across socket migration
Seungjin Bae <eeodqql09@gmail.com>
usb: typec: ucsi: ccg: Validate altmode index in GET_CURRENT_CAM response
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
crypto: ecc - Handle exceptional points in Shamir multiplication
Yifei Gao <gyf161023@gmail.com>
misc: fastrpc: fix double-free in fastrpc_map_attach() error path
Kumari Pallavi <kumari.pallavi@oss.qualcomm.com>
misc: fastrpc: Rename phys to dma_addr for clarity
Sean Christopherson <seanjc@google.com>
KVM: guest_memfd: Establish memslot<=>guest_memfd bindings *after* memslot is ready
Ge Yang <yangge1116@126.com>
mm/hugetlb: remove unnecessary holding of hugetlb_lock
Lucas De Marchi <lucas.demarchi@intel.com>
drm/panel: Fix build error on !CONFIG_OF
Runyu Xiao <runyu.xiao@seu.edu.cn>
hte: tegra194-test: shut down timer before GPIO release
Guangshuo Li <lgs201920130244@gmail.com>
media: i2c: ov5647: fix power cleanup on remove
Thomas Zimmermann <tzimmermann@suse.de>
drm/panic: Do not use un-escaped URL as format string
Sakari Ailus <sakari.ailus@linux.intel.com>
platform/x86: int3472: Fix uninitialised variable warning
Casey Connolly <casey.connolly@linaro.org>
drm/panel: ebbg-ft8719: Set prepare_prev_first
Anusha Srivatsa <asrivats@redhat.com>
panel/ebbg-ft8719: Use refcounted allocation in place of devm_kzalloc()
Anusha Srivatsa <asrivats@redhat.com>
drm/panel: Add new helpers for refcounted panel allocatons
Sean Young <sean@mess.org>
media: redrat3: Error path leaves device in transmitting state
Esben Haabendal <esben@geanix.com>
iio: light: ltr501: Power down chip if request irq fails
Chao Yu <chao@kernel.org>
f2fs: fix to check continuousness in f2fs_sync_meta_pages() correctly
Sean Young <sean@mess.org>
media: ene_ir: Ensure teardown is done in the correct order
Gaurav Batra <gbatra@linux.ibm.com>
powerpc/pseries/iommu: Add TCEs for 16GB pages when RAM is pre-mapped
Christopher Lusk <clusk@northecho.dev>
m68k: Fix seccomp filtering on ColdFire and 68000
Daniel Palmer <daniel@0x0f.com>
m68k: Fix task info flags handling for 68000
Guangshuo Li <lgs201920130244@gmail.com>
media: i2c: og01a1b: power off sensor on remove
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
media: i2c: og01a1b: Switch from .s_stream to .enable_streams/.disable_streams
Jiaming Zhang <r772577952@gmail.com>
gfs2: reject invalid inode sizes
Tom Verdonck <tom.verdonck@inspiral.be>
hwmon: (tmp102) Fix jiffies wraparound in conversion-ready check
Ali Resool Tuama <aliresool567@gmail.com>
USB: quirks: add USB_QUIRK_WINDOWS_CONFIG_REQ_SIZE for GameSir G7 SE
Nikhil Solanke <nikhilsolanke5@gmail.com>
usb: core: Add quirk for 255-bytes initial config read
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: restrict OCFS2_INVALID_SLOT suballoc slot to system inodes
Runyu Xiao <runyu.xiao@seu.edu.cn>
ALSA: usb-audio: Protect Roland control activation
Robin Snyders <robin@snyders.xyz>
power: supply: qcom_smbx: validate battery float voltage
Casey Connolly <casey.connolly@linaro.org>
power: supply: pmi8998_charger: rename to qcom_smbx
Fuad Tabba <fuad.tabba@linux.dev>
KVM: arm64: timers: Compute an offset-applied CVAL from the current count
Danish Khateeb <danishkhateeb03@gmail.com>
ALSA: timer: Handle userspace-driven timer ioctls from 32-bit tasks
bui duc phuc <phucduc.bui@gmail.com>
ALSA: core: Clean up file_operations definitions
Jiale Yao <yaojiale02@163.com>
iio: adc: ad7192: reject devices without match data
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
iio: adc: ad7192: Revert "properly check spi_get_device_match_data()"
Guangshuo Li <lgs201920130244@gmail.com>
crypto: omap-des - fix crypto engine cleanup
Ryo Takakura <ryotkkr98@gmail.com>
crypto: omap - convert from tasklet to BH workqueue
Kathiravan Thirumoorthy <kathiravan.thirumoorthy@oss.qualcomm.com>
arm64: dts: qcom: ipq9574: Wire up USB3 PHY PIPE clock to GCC
Qi Xi <xiqi2@huawei.com>
mm/page_isolation: guard compound_order() against racing
David Hildenbrand <david@redhat.com>
mm/page_alloc: reject unreasonable folio/compound page sizes in alloc_contig_range_noprof()
Balakrishnan Sambath <balakrishnan.s@microchip.com>
media: microchip-isc: fix SBGGR10 Bayer pattern
Balakrishnan Sambath <balakrishnan.s@microchip.com>
media: microchip-isc: fix ISC_PFG_CFG0_BPS macro name typo
Balakrishnan Sambath <balakrishnan.s@microchip.com>
media: microchip-isc: store the unshifted PFE_CFG0 BPS value
Wei-Lin Chang <weilin.chang@arm.com>
KVM: arm64: ptdump: Check the page tables aren't freed when accessing
Fabio Cesari <fabio.cesari@gmail.com>
iio: light: isl29028: fix runtime PM reference leak on error paths
Sean Christopherson <seanjc@google.com>
KVM: guest_memfd: Split bind() into prepare()+commit() phases
Judith Mendez <jm@ti.com>
arm64: dts: ti: k3-am625-sk-common: Set eMMC clock pin as OUTPUT
Anshul Dalal <anshuld@ti.com>
arm64: dts: ti: k3-am62*: remove SoC dtsi from common dtsi
Andrew Davis <afd@ti.com>
arm64: dts: ti: k3-am625-sk: Remove M4 mailbox node redefinition
Koichiro Den <den@valinux.co.jp>
PCI: endpoint: pci-epf-vntb: Manage virtual NTB and PCI bus lifetime
Abel Vesa <abel.vesa@linaro.org>
soc: qcom: pmic_glink: Fix device access from worker during suspend
Jakub Szczudlo <jakubszczudlo40@gmail.com>
iio: adc: ti-ads1100: Fix incorrect reading when datarate changed in single mode
Valentin Kindschi <valentin.kindschi@fiveco.ch>
Bluetooth: hci_sync: pause advertising for the scan address update
Josef Bacik <josef@toxicpanda.com>
blk-mq: end the request if getting a keyslot fails
Ge Yang <yangge1116@126.com>
mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios
yangge <yangge1116@126.com>
mm: replace free hugepage folios after migration
Eric Biggers <ebiggers@kernel.org>
lib/crypto: mips: Disable Octeon SHA code on little-endian kernels
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: don't drop local events queued during TVLV update
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: only update flags for TT events
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: ignore ROAM flag of received ADD changes
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: send ROAM_ADV on each roamed back client
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: clear ROAM flag when re-adding a pending local client
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: only transmit local ROAM flag together with DEL
Sven Eckelmann <sven@narfation.org>
batman-adv: tpmeter: fix u32 truncation of reported bytes
Chengfeng Ye <nicoyip.dev@gmail.com>
batman-adv: Close OGM aggregation before transmission
Sven Eckelmann <sven@narfation.org>
batman-adv: Limit number of aggregated packets directly
Abhishek Dubey <adubey@linux.ibm.com>
powerpc/bpf: fix buffer overflow in JIT for large BPF programs
Suravee Suthikulpanit <suravee.suthikulpanit@amd.com>
iommu/amd: Force device table to maximum size
Samiullah Khawaja <skhawaja@google.com>
mm/gup: check folio->mapping under folio lock in memfd_pin_folios()
Zhao Gongyi <zhaogongyi@bytedance.com>
ata: libata-scsi: reject data-in commands with a data-out buffer
Michal Blaszczyk <michalblk@google.com>
sched_ext: Reset runnable_at when a task leaves its scheduler
Oliver Hartkopp <socketcan@hartkopp.net>
can: raw, isotp: copy socket options outside of lock_sock()
SJ Park <sj@kernel.org>
mm/damon/core: move static variable last_nr_regions to damon_ctx
Ido Schimmel <idosch@nvidia.com>
vxlan: Stop rejecting dynamic FDB entries with a nexthop ID
Ramin Moussavi <ramin.moussavi@yacoub.de>
microblaze: restore the ABI argument home area below pt_regs (PTO)
Kiryl Shutsemau (Meta) <kas@kernel.org>
arm64: sdei: Preserve the interrupted context's exception registers
Kiryl Shutsemau (Meta) <kas@kernel.org>
arm64: sdei: Run the event handler on the kernel vectors
Hamid Nassiby <hamid.nassiby@nokia.com>
Revert "mm/page_owner: fix memory leak in page_owner_stack_fops->release()"
Guanglei Zhu <zhugl3@xiaopeng.com>
ceph: clamp the inline data length in ceph_fill_inline_data()
Oliver Hartkopp <socketcan@hartkopp.net>
can: protect the receive lists with a per-device lock
Oliver Hartkopp <socketcan@hartkopp.net>
can: replace ARPHRD_CAN type checks with can_get_ml_priv()
Marco Ziliani <rylos78@gmail.com>
ata: libata-pmp: disable the SEMB port on Marvell 88SM9705
Thorsten Blum <blum@kernel.org>
x86/boot: Fix off-by-one error in sme_clear_pgd()
Jinjie Ruan <ruanjinjie@huawei.com>
arm64: kexec_file: Fix elf_headers memory leak in retry loop
Akshay Jindal <Akshay.Jindal@amd.com>
iommu/amd: Skip non-IVMD entries when parsing IVRS memory definitions
Breno Leitao <leitao@debian.org>
x86/nmi: Ignore negative NMI handler durations
Danish Khateeb <danishkhateeb03@gmail.com>
perf/core: Don't send SIGTRAP after exec removed the event
Shao Mingyin <shao.mingyin@zte.com.cn>
nvmet: bound the traddr and trsvcid configfs writes
Qiliang Yuan <odys.yuan@gmail.com>
nvme: wait for SRCU readers before splicing the namespace list
Qiliang Yuan <odys.yuan@gmail.com>
srcu: Add list_splice_init_srcu()
Imre Kaloz <kaloz@kernel.org>
MIPS: sgi-ip32: Leave MACE PCI control alone in config accesses
Imre Kaloz <kaloz@kernel.org>
MIPS: sgi-ip32: Mask MACE PCI interrupts in CRIME only
Imre Kaloz <kaloz@kernel.org>
MIPS: mm: Fix the cache error vector jump for XKPHYS kernels
Matthias Goergens <matthias.goergens@gmail.com>
udf: don't use eloc after the end of the unallocated space table
Matthias Goergens <matthias.goergens@gmail.com>
udf: fix preallocation discarding before an empty allocation extent
Matthias Goergens <matthias.goergens@gmail.com>
udf: check the unallocated space table when it is loaded
Matthias Goergens <matthias.goergens@gmail.com>
udf: don't let the extent type hide an exhausted free-space table extent
Kyle Zeng <kylebot@openai.com>
mptcp: pm: kernel: use RCU to free endpoint listeners
Christian Gmeiner <cgmeiner@igalia.com>
drm/etnaviv: Flush the tile status cache through both the PE and BLT
James Clark <jjc@jclark.com>
net: ethernet: ti: am65-cpsw-nuss: Enable timestamping of unicast PTP packets
Ray Zhang <sgzhang@google.com>
net: count last skb of each sk_backlog pass in __release_sock()
Bryam Vargas <hexlabsecurity@proton.me>
net/smc: don't spin in smc_rx_recvmsg() while a pipe holds spliced data
Hungyu Lin <dennylin0707@gmail.com>
ext2: preserve IOMAP_F_DIRTY for extending direct writes
Sinan Turunc <enscrpt@pm.me>
ALSA: usx2y: Guard the playback copy
Sinan Turunc <enscrpt@pm.me>
ALSA: usx2y: Require a buffer of two URBs
Wentao Liang <vulab@iscas.ac.cn>
ALSA: caiaq: free the EP4 URB when input setup fails
Sinan Turunc <enscrpt@pm.me>
ALSA: line6: Reject capture buffers smaller than two packets
YuanZhe Liu <25031212351@stu.xidian.edu.cn>
ALSA: usx2y: Refuse a retried DSP load after a failure
YuanZhe Liu <25031212351@stu.xidian.edu.cn>
ALSA: bcd2000: Fix use-after-free of MIDI URBs on file close
Alex Kazinsky <a.kazinsky@ideco.ru>
ALSA: cs46xx: Handle SCB creation failures before dereferencing
Chris Simpson <chris@nilk.net>
ALSA: hda/realtek: Enable bass speakers on Alienware m17 R3
HyeongJun An <sammiee5311@gmail.com>
ALSA: ump: Fix dropped data bytes at UMP System message conversion
Ilia Mirkin <imirkin@alum.mit.edu>
drm/nouveau/devinit/gf100-: try to avoid double-running vbios scripts
Rosen Penev <rosenp@gmail.com>
drm/nouveau/nvkm: clear use.enabled when subdev init fails
Hengyu Liang <hengyul@cs.unc.edu>
l2tp: only return sessions of the given tunnel in l2tp_session_get()
Chris Mason <mason@kernel.org>
ovl: look up the index by the decoded origin
Sasha Levin <sashal@kernel.org>
nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for KIOXIA XG10d
Zhao Gongyi <zhaogongyi@bytedance.com>
arm64: mm: validate /dev/mem mmap ranges without overflow
Wei Wang <wvw@google.com>
arm64: suspend: Save and restore TPIDR2_EL0 across CPU suspend
Ewan D. Milne <emilne@redhat.com>
nvmet: don't return memory contents beyond valid data when reading ANA log page
Jesse Zhang <Jesse.Zhang@amd.com>
drm/amdgpu: don't drop the gang dependency fence twice
renpanpan <renpanpan@kylinos.cn>
drm/amdgpu: Only enable HDMI audio if display supports it
Jesse Zhang <Jesse.Zhang@amd.com>
drm/amdgpu: drop the dma-buf reference when a KFD import fails
Erhan Bilgili <erhan.bilgili@gmail.com>
drm/amdgpu: Report MES ring wait timeouts.
Erhan Bilgili <erhan.bilgili@gmail.com>
drm/amdgpu: Fix duplicate dependency fence releases
Kylie C <kyliepc@proton.me>
drm/amd/display: Don't select zero V_TOTAL_MIN/MAX on seamless boot
Misha Nasledov <misha@nasledov.com>
drm/amd/display: Drop clock requirements on DCN32 when no displays are active
Roman Demidov <roman.demidov.nn@gmail.com>
drm/amd/display: Fix NULL deref in dcn401_update_clocks_update_dtb_dto
Jesse Zhang <Jesse.Zhang@amd.com>
drm/amdgpu/gfx12: disallow GFXOFF while updating the SPM VMID
Alex Hung <alex.hung@amd.com>
drm/amd/display: Avoid closing unowned DDC pins
Milan Milicevic <Milan.Milicevic@amd.com>
drm/amdgpu: publish IH enabled before PSP programs IH_RB_CNTL
Milan Milicevic <Milan.Milicevic@amd.com>
drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for navi10_ih
Jesse Zhang <Jesse.Zhang@amd.com>
drm/amdgpu: keep the CS user fence BO in GTT
Jesse Zhang <Jesse.Zhang@amd.com>
drm/amdgpu: parse CS IBs at the BO offset their VA mapping starts at
Jarkko Sakkinen <jarkko@kernel.org>
nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup()
Yitang Yang <yi1tang.yang@gmail.com>
ublk: add missing DEL_DEV_ASYNC to unprivileged permission check
Yilin Zhang <yilinzhang@moonshot.ai>
mptcp: do not use Fast Open on MP_JOIN subflows
Daehyeon Ko <4ncienth@gmail.com>
vhost/vsock: size receive SKBs from declared payload
Alexei Starovoitov <ast@kernel.org>
net: reject a negative TCP header offset in qdisc_pkt_len_segs_init()
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: clamp skb->queue_mapping before indexing the tx queue
Xia Yan <yanxia@cmss.chinamobile.com>
ipv6: fix device binding after failed datagram connect
David Hildenbrand (Arm) <david@kernel.org>
mm/ksm: reset the unstable trees of all nodes
Chris Mason <mason@kernel.org>
mm: fix unkillable fault loop on MAP_DROPPABLE memory
Josef Bacik <josef@toxicpanda.com>
mm: fix unmap_mapping_range() beyond 4 GiB on 32-bit
Chris Mason <mason@kernel.org>
mm/memory: reject remote COW faults on PFN mappings
David Hildenbrand (Arm) <david@kernel.org>
mm/madvise: fix data loss from MADV_FREE on a KSM page
Chris Mason <mason@kernel.org>
mm/mmu_notifier: set ->mm only after mmgrab()
Josef Bacik <josef@toxicpanda.com>
mm/mmu_notifier: finish non-blocking interval invalidation on error
Josef Bacik <josef@toxicpanda.com>
mm/mmu_gather: fix flushing ranges with 4 GiB or larger
David Hildenbrand (Arm) <david@kernel.org>
mm/gup: check for overflow when converting nr_pages to bytes in GUP-fast
Chris Mason <mason@kernel.org>
mm/gup: fix out-of-bounds write for nr_pages == 0 in GUP-fast
Chris Mason <mason@kernel.org>
mm/gup: fix clearing folios in memfd_pin_folios()
Liu Changjie <liucj1228@outlook.com>
can: peak_usb: pcan_usb_fd_decode_buf(): accept short uCAN end-of-list records
ChunYuZhiQiang <chunyuzhiqiang@yinhe.ht>
can: dev: can_fill_info(): don't wake up controller if interface is down
Oliver Hartkopp <socketcan@hartkopp.net>
can: proc: skip stats calculation after reset in can_stat_update()
Runyu Xiao <runyu.xiao@seu.edu.cn>
can: proc: reset pkg_stats atomics individually
Oliver Hartkopp <socketcan@hartkopp.net>
can: isotp: check the return values of can_rx_register() in isotp_bind()
Cunhao Lu <1579567540@qq.com>
can: dev: can_put_echo_skb(): free skb on invalid echo index
Kaixuan Li <kaixuanli0131@gmail.com>
can: isotp: check the frame type, not just the length
Christoph Hellwig <hch@lst.de>
xfs: fix recovery of partial attr removals
Hyunwoo Kim <imv4bel@gmail.com>
net: restore refcount ordering for lockless socket access
Daejun Park <daejun7.park@samsung.com>
xfs: clamp the pNFS layout range to the maximum file size
Daejun Park <daejun7.park@samsung.com>
xfs: cap the block count of xfs_iomap_write_direct() at one extent
Daejun Park <daejun7.park@samsung.com>
xfs: clamp a pNFS LAYOUTCOMMIT extent before computing its end
Daejun Park <daejun7.park@samsung.com>
xfs: mark the inode preallocated for pNFS write layouts past EOF
Zhe Liu <liuzhe1@kylinos.cn>
blk-iocost: account flush sequence latency only once
Reid Downing <skibletz@gmail.com>
xfs: fix wrong compat fields in xfs_ioctl32_bstat_copyin()
Hungyu Lin <dennylin0707@gmail.com>
block: Return the soft block size for compat BLKBSZGET
Hungyu Lin <dennylin0707@gmail.com>
inotify: do not coalesce rename events
chenglong.ma <longpareto@gmail.com>
vduse: fix VA/PA confusion in the coherent page fault path
Thorsten Blum <blum@kernel.org>
hwrng: virtio - prevent use-after-free after a failed restore
Esben Haabendal <esben@geanix.com>
drm/bridge: nwl-dsi: Limit LCDIF specific sync override
Esben Haabendal <esben@geanix.com>
drm/bridge: nwl-dsi: Cleanup endpoint mux control selection
Yuho Choi <oss.patchbox@gmail.com>
vdpa/snet: Don't discard the DPU error in snet_send_ctrl_msg()
Yuho Choi <oss.patchbox@gmail.com>
iommu/virtio: Reset device before deleting virtqueues on probe failure
Kyle Zeng <kylebot@openai.com>
net/sched: sch_qfq: prevent aggregate self-replacement
Jianyun Gao <jianyungao89@gmail.com>
xfs: fix temporary cursor leak in btree shift corruption paths
Naman Jain <namjain@linux.microsoft.com>
x86/init: Initialize wall clock in get_rtc_noop()
Cen Zhang <zzzccc427@gmail.com>
ocfs2: cache the mount context for dentry lock callbacks
Cen Zhang <zzzccc427@gmail.com>
ocfs2: wait for filecheck kobject release after a failed add
Cen Zhang <zzzccc427@gmail.com>
ocfs2/cluster: unlink socket containers before releasing resources
Cen Zhang <zzzccc427@gmail.com>
ocfs2: stop recovery before shutting down local allocators
Cen Zhang <zzzccc427@gmail.com>
ocfs2/dlm: serialize migration MLE cleanup on failure
Cen Zhang <zzzccc427@gmail.com>
ocfs2: keep locking_state within the cluster connection lifetime
Matheus Alves de Almeida <matheus.aalmeida@inf.ufrgs.br>
fat: hold truncate_lock in fat_write_failed()
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: do not read the entry array of an empty xattr block
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: do not index before the entry array when dividing an empty bucket
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: do not read the entry array of an empty xattr bucket
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: find the xattr entry again after converting a block to a bucket
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: find the xattr entry again after defragmenting a bucket
Andrew Morton <akpm@linux-foundation.org>
openrisc: export __mulsi3 for modules
T.J. Mercier <tjmercier@google.com>
mm: memcontrol: fix NULL pointer deref and UAF from high_work_func() on dying memcg
Yafang Shao <laoar.shao@gmail.com>
mm/migrate: snapshot the source nid before the misplaced migration
Hungyu Lin <dennylin0707@gmail.com>
mm/migrate: untag addresses when querying page nodes
Chris Down <chris@chrisdown.name>
mm: make swapoff interruptible when unusing mms/shmem
Hengyu Liang <hengyul@cs.unc.edu>
fs/proc/task_mmu: return -ENOTTY for unknown pagemap ioctls
Samarth Narang <samarth.colleges@gmail.com>
mm/ksm: keep soft-dirty when merging a page
Zenghui Yu (Huawei) <zenghui.yu@linux.dev>
mm/page_alloc: mark pages freed by __free_pages_core() as not tagged
Li Zhe <lizhe.67@bytedance.com>
mm/hugetlb: fix mremap move length truncation
Kyle Zeng <kylebot@openai.com>
mm/khugepaged: flush deferred unmaps before dropping a failed folio
Mohit Sharma <mohit.sharma@oss.qualcomm.com>
ASoC: qcom: q6apm: Guard callbacks until probe data is ready
Valentin Kindschi <valentin.kindschi@fiveco.ch>
Bluetooth: hci_sync: re-enable legacy advertising on resume
Zack Rusin <zack.rusin@broadcom.com>
x86/vmware: Fix i386 high-bandwidth hypercall arguments
Yingjie Wang <1075151112@qq.com>
ipv6: reject wrapped temporary address preferred lifetimes
Sean Christopherson <seanjc@google.com>
KVM: x86: Unconditionally reset MMU context when emulating INIT
Sean Christopherson <seanjc@google.com>
KVM: x86/mmu: Cap number of parent PTEs per SP at 1000 (the arbitrary rmap limit)
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Process each host MSR entry at most once when unwinding failed VM-Entry
Sean Christopherson <seanjc@google.com>
KVM: x86: Conditionally resched when restarting REP string emulation
Sean Christopherson <seanjc@google.com>
KVM: x86/mmu: Conditionally resched when retrying gPTE walk on A/D update failure
Vas Zayarskiy <contact@vasily.cc>
hwmon: (aquacomputer_d5next) Avoid truncating scaled sensor readings
Guenter Roeck <linux@roeck-us.net>
hwmon: (coretemp) Check for NULL platform device in hotplug callbacks
Guenter Roeck <linux@roeck-us.net>
hwmon: (pmbus) Fix return value check from thermal zone registration
Guenter Roeck <linux@roeck-us.net>
hwmon: (pmbus) Release devres allocated memory after devm_thermal_of_zone_register error
Guenter Roeck <linux@roeck-us.net>
hwmon: (pmbus) Check return value from pmbus_thermal_add_sensor()
Guenter Roeck <linux@roeck-us.net>
hwmon: (pmbus/q54sj108a2) Add missing NULL pointer check
Guenter Roeck <linux@roeck-us.net>
hwmon: (peci/dimmtemp) Fix devres leak and UAF on concurrent unbind
Guenter Roeck <linux@roeck-us.net>
hwmon: (nct6683) Fix incorrect struct cast in show_pwm() and store_pwm()
Guenter Roeck <linux@roeck-us.net>
hwmon: (lm87) Fix drvdata type confusion in vrm_show() and vrm_store()
Guenter Roeck <linux@roeck-us.net>
hwmon: (hp-wmi-sensors) Fix unbounded loops in scale_numeric_sensor()
Guenter Roeck <linux@roeck-us.net>
hwmon: (hp-wmi-sensors) Avoid global struct mutation
Guenter Roeck <linux@roeck-us.net>
hwmon: (asus_wmi_sensors) Avoid global struct mutation
Guenter Roeck <linux@roeck-us.net>
hwmon: (aquacomputer_d5next) Check maxcollection when probing AQUAERO devices
Javier Carrasco <javier.carrasco.cruz@gmail.com>
hwmon: chipcap2: do not discard pending alarms on disable
Javier Carrasco <javier.carrasco.cruz@gmail.com>
hwmon: chipcap2: balance regulator state
Javier Carrasco <javier.carrasco.cruz@gmail.com>
hwmon: chipcap2: enable IRQ processing when regulator is already enabled
Javier Carrasco <javier.carrasco.cruz@gmail.com>
hwmon: chipcap2: defer probe when IRQs are unavailable
Javier Carrasco <javier.carrasco.cruz@gmail.com>
hwmon: chipcap2: fix be16 handling
Javier Carrasco <javier.carrasco.cruz@gmail.com>
hwmon: chipcap2: fix off-by-one in command mode retry loop
Javier Carrasco <javier.carrasco.cruz@gmail.com>
hwmon: chipcap2: fix command error diagnostics
Jiale Yao <yaojiale02@163.com>
hwmon: (aquacomputer_d5next) reject short status reports
Baek Kyu, Kim <pocj8ur4in@gmail.com>
hwmon: (corsair-cpro) Cache fan target only after a successful command
Xia Yan <yana06070@163.com>
veth: keep carrier off when resizing channels with a down peer
Fang Xieyan <fangxy@xiaopeng.com>
vringh: reject empty / undersized indirect descriptor tables
Fang Xieyan <fangxy@xiaopeng.com>
vringh: bound top-level re-entry into indirect tables
Tal Zussman <tz2294@columbia.edu>
vhost-vdpa: fix pinned page leak in vhost_vdpa_pa_map() error path
Qihang <q.h.hack.winter@gmail.com>
cipso: fix optlen corruption in cipso_v4_delopt()
Jose Maria Casanova Crespo <jmcasanova@igalia.com>
drm/v3d: Initialize timedout_batches when running a CSD job
Daejun Park <daejun7.park@samsung.com>
xfs: don't skip free extents of the longest length in a whole-AG FITRIM
Daejun Park <daejun7.park@samsung.com>
xfs: don't skip free extents in later batches of a whole-AG FITRIM
Hungyu Lin <dennylin0707@gmail.com>
ext2: preserve completed DIO bytes when buffered fallback fails
David Hildenbrand (Arm) <david@kernel.org>
mm/filemap: finish fault cleanup before dropping the fault lock
Josef Bacik <josef@toxicpanda.com>
mm/filemap: don't lose a folio lock wakeup to a signal
Josef Bacik <josef@toxicpanda.com>
mm/memfd: make f_pos accesses atomic
Josef Bacik <josef@toxicpanda.com>
mm/mglru: don't use stack pointers when walking PUD and PMD tables
David Hildenbrand (Arm) <david@kernel.org>
mm/shmem: fix truncation of files containing only swapin-error markers
David Hildenbrand (Arm) <david@kernel.org>
mm/shmem: fix truncate loop after boundary swapin failure
David Hildenbrand (Arm) <david@kernel.org>
mm/shmem: fix truncate hang in large swap entry
David Hildenbrand (Arm) <david@kernel.org>
mm/shmem: discard whole new large folios on fallocate rollback
Chris Mason <mason@kernel.org>
mm/shmem: preserve data in clean folios when splitting fails
Chris Mason <mason@kernel.org>
mm/shmem: stop retrying folios that cannot be split
Josef Bacik <josef@toxicpanda.com>
tmpfs: preserve explicitly disabled quota limits
Josef Bacik <josef@toxicpanda.com>
tmpfs: keep the quota soft limits of an unused id
Chris Mason <mason@kernel.org>
mm/mempolicy: charge shared policy nodes
Ian Bridges <icb@fastmail.org>
ksmbd: grant a POSIX ACL group entry only to the group's members
Federico Musto <federico@rimpianto.com>
net: atl1c: drop oversized RX frames instead of panicking
Lu Yao <yaolu@kylinos.cn>
drm/i915/gem: Reset err for each fence entry
Jouni Högander <jouni.hogander@intel.com>
drm/i915/psr: Don't clip plane state destination rectangle
Ian Bridges <icb@fastmail.org>
ksmbd: require DELETE access for delete-on-close opens
Jamal Hadi Salim <jhs@mojatatu.com>
bpf: Fix skb_pull() BUG in __bpf_redirect_neigh()
YuanZhe Liu <25031212351@stu.xidian.edu.cn>
ALSA: hwdep: Serialize DSP load requests
YuanZhe Liu <25031212351@stu.xidian.edu.cn>
ALSA: usx2y: Initialize idle URBs before submitting streams
YuanZhe Liu <25031212351@stu.xidian.edu.cn>
ALSA: us122l: Fix NULL dereference at hwdep open and release
YuanZhe Liu <25031212351@stu.xidian.edu.cn>
ALSA: us122l: Add missing NULL check in usb_stream_hwdep_mmap()
Evanshenf <archwse@gmail.com>
drm/loongson: Handle buffer mapping failures when clearing a BO
Evanshenf <archwse@gmail.com>
drm/loongson: Fix double free on BO initialization failure
Evanshenf <archwse@gmail.com>
drm/loongson: Fix framebuffer selection in async cursor updates
Shao Mingyin <shao.mingyin@zte.com.cn>
scsi: target: tcmu: Fix divide-by-zero in data_pages_per_blk store
Yuanhe Shu <xiangzao@linux.alibaba.com>
scsi: target: Verify the iSCSI ISID is null-terminated
Yingjie Wang <x-professor@outlook.com>
scsi: bsg: Report synchronous data copyback failures
Yu Zhang <yuz08559@gmail.com>
ptp: fix use-after-free in extts_fifo_show() reading tsevqs unlocked
guolingxing <guolingxing@tju.edu.cn>
btrfs: sysfs: restore NOFS context on early return in btrfs_sysfs_add_block_group_type()
Masafumi Suzuki <shengshilingmu97@gmail.com>
sctp: account for chunk padding in sctp_init_cause()
Lucas Tanure <lucas.tanure@neat.no>
drm/vc4: hdmi: enable scrambling before the TMDS clock starts
Lucas Tanure <lucas.tanure@neat.no>
drm/vc4: hdmi: always cancel the scrambling work synchronously
Zhou Qiuyue <n0ps1edzz@gmail.com>
ipv6: raw: fix use-after-free in rawv6_send_hdrinc()
Franck Baur <franck.baur.67@gmail.com>
net: jme: keep RX MAC clock enabled for WoL
Sven Eckelmann <sven@narfation.org>
batman-adv: stop originator purge worker before freeing TT
Sven Eckelmann <sven@narfation.org>
batman-adv: fix skb leak when hard_iface is being released
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: initialize orig_node of unfilled candidate slots
Kyle Zeng <kylebot@openai.com>
batman-adv: mcast: validate tracker padding before forwarding
Yuanfu Xie <yuanfuxie@stu.pku.edu.cn>
9p: don't decrement a server-owned zero nlink
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
9p/xen: validate the response size from the backend
Andrew Luebke <andrew.luebke@gmail.com>
scsi: aic79xx: Fix NULL pointer dereference in device reset
Imre Kaloz <kaloz@kernel.org>
scsi: aic7xxx: Use default settings on the SGI O2 onboard controller