messages from 2026-09-04 05:40:42 to 2026-09-04 05:50:05 UTC [more...]
[PATCH 6.18 000/552] 6.18.50-rc1 review
2026-09-04 4:56 UTC (201+ messages)
` [PATCH 6.18 024/552] rust: bug: fix warn_on macro build error on UML
` [PATCH 6.18 028/552] apparmor: fix cred UAF caused by begin_current_label_crit_section()
` [PATCH 6.18 029/552] apparmor: fix out-of-bounds write when null terminating a label vec
` [PATCH 6.18 030/552] include/linux/list.h: mark list_add and __list_add as __always_inline
` [PATCH 6.18 031/552] mm, swap: ratelimit bad swap entry reports
` [PATCH 6.18 032/552] mm/gup: fix always draining LRU caches in collect_longterm_unpinnable_folios()
` [PATCH 6.18 033/552] mm/kmemleak: avoid soft lockup when scanning task stacks
` [PATCH 6.18 057/552] hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start()
` [PATCH 6.18 058/552] tracing/user_events: Clear copied tracing state before fork duplication
` [PATCH 6.18 059/552] tracing: Fix crash passing ERR_PTR to kthread_stop()
` [PATCH 6.18 060/552] tracing: Fix logged instance name on creation failure
` [PATCH 6.18 061/552] tracing: Fix use-after-free in trace_pipe read on sub-buffer order change
` [PATCH 6.18 062/552] tracing: Fix use-after-free with same-name named triggers
` [PATCH 6.18 063/552] cdx: Fix double free when sysfs file creation fails
` [PATCH 6.18 064/552] device property: fix infinite loop in fwnode_for_each_child_node()
` [PATCH 6.18 065/552] misc: nsm: bound the device-reported response length
` [PATCH 6.18 066/552] powerpc/powermac: fix OF node refcount
` [PATCH 6.18 067/552] rapidio: mport_cdev: fix use-after-free in dma_req_free()
` [PATCH 6.18 068/552] Revert "media: v4l2-dev: fix error handling in __video_register_device()"
` [PATCH 6.18 069/552] serial: imx: serialize imx_uart_ports[] lifetime
` [PATCH 6.18 070/552] staging: greybus: hid: fix SET_REPORT return value
` [PATCH 6.18 071/552] usb: dwc2: gadget: Exit partial power down state when changing USB pull-up
` [PATCH 6.18 072/552] usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition
` [PATCH 6.18 073/552] usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed
` [PATCH 6.18 074/552] USB: phy: fsl-usb: fix missing static keywords
` [PATCH 6.18 075/552] usb: typec: tcpci: pass correct rx_type to tcpm_pd_receive()
` [PATCH 6.18 076/552] usb: typec: thunderbolt: Disable work before freeing tbt on remove
` [PATCH 6.18 077/552] usb: typec: ucsi: use UCSI_TIMEOUT_MS for sync command completion
` [PATCH 6.18 078/552] usb: gadget: u_audio: Fix use-after-free on sound card disconnect
` [PATCH 6.18 079/552] usb: gadget: snps_udc_plat: clean up PHY on probe deferral
` [PATCH 6.18 080/552] usb: gadget: midi2: remove default configfs groups on teardown
` [PATCH 6.18 081/552] usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
` [PATCH 6.18 082/552] usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()
` [PATCH 6.18 083/552] usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()
` [PATCH 6.18 084/552] usb: gadget: f_fs: Prevent deadlock during ep0 read loop
` [PATCH 6.18 085/552] fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write
` [PATCH 6.18 086/552] HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature
` [PATCH 6.18 087/552] lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()
` [PATCH 6.18 088/552] media: cec: stm32: prevent out-of-bounds write on RX overflow
` [PATCH 6.18 089/552] media: vicodec: fix out-of-bounds write in FWHT encoder
` [PATCH 6.18 090/552] nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation
` [PATCH 6.18 091/552] of: fix out-of-bounds read in of_alias_scan() stem parser
` [PATCH 6.18 092/552] PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()
` [PATCH 6.18 093/552] phy: rockchip-samsung-dcphy: fix out-of-range max_register
` [PATCH 6.18 094/552] ubifs: fix out-of-bounds read in signature length check
` [PATCH 6.18 095/552] zram: validate deflate params
` [PATCH 6.18 096/552] zsmalloc: account for handle size in class lookup
` [PATCH 6.18 097/552] NFS/localio: fix ref leak on nfs_uuid_add_file failure
` [PATCH 6.18 098/552] NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails
` [PATCH 6.18 099/552] NFSD: check truncate permission under inode lock
` [PATCH 6.18 100/552] NFSD: Encode only the status in NFS-ACL v2 GETACL error replies
` [PATCH 6.18 101/552] NFSD: Fix off-by-one in DRC bucket pruning limit
` [PATCH 6.18 102/552] NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock
` [PATCH 6.18 103/552] NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check
` [PATCH 6.18 104/552] nfsd: guard nfsd_serv deref in nfsd_file_net_dispose
` [PATCH 6.18 105/552] NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
` [PATCH 6.18 106/552] pNFS: Fix EBUSY check in pnfs_layout_need_return
` [PATCH 6.18 107/552] nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
` [PATCH 6.18 108/552] nfsd: release path refs on follow_down() error
` [PATCH 6.18 109/552] nfsd: Reset write verifier when async COPY writeback fails
` [PATCH 6.18 110/552] nfsd: return NFS4ERR_NOTSUPP for unsupported netloc4 types
` [PATCH 6.18 111/552] nfsd: sample writeback error cursor before async COPY loop
` [PATCH 6.18 112/552] nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations
` [PATCH 6.18 113/552] nfsd: size fh_verify server sockaddr slot by xpt_locallen
` [PATCH 6.18 114/552] nfsd: validate nseconds in TIME_DELEG decode paths
` [PATCH 6.18 115/552] nfsd: validate sockaddr length per family in listener_set
` [PATCH 6.18 116/552] nfsd: validate symlink target length in NFSv4 CREATE
` [PATCH 6.18 117/552] nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
` [PATCH 6.18 118/552] nfsd: add filehandle match check to nfsd4_delegreturn()
` [PATCH 6.18 119/552] nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry
` [PATCH 6.18 120/552] nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
` [PATCH 6.18 121/552] nfsd: check client ownership when cancelling a copy-notify stateid
` [PATCH 6.18 122/552] nfsd: clear CALLBACK_RUNNING on failed delegation recall queue
` [PATCH 6.18 123/552] nfsd: clear opcnt on compound arg release to prevent OOB read
` [PATCH 6.18 124/552] nfsd: defer setting NFSD4_CALLBACK_RUNNING in deleg_reaper
` [PATCH 6.18 125/552] nfsd: defer vfree of compound ops to fix rpc_status UAF
` [PATCH 6.18 126/552] nfsd: dont free session slots that are still in use
` [PATCH 6.18 127/552] nfsd: drop the stateid, not the stateowner, on seqid_op replay retry
` [PATCH 6.18 128/552] nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
` [PATCH 6.18 129/552] nfsd: fix cpntf publish race in nfs4_init_cp_state
` [PATCH 6.18 130/552] nfsd: fix dentry ref leak on V4ROOT export filehandle lookup
` [PATCH 6.18 131/552] nfsd: fix FL_SLEEP being set unconditionally for all LOCK types
` [PATCH 6.18 132/552] nfsd: fix netlink dumpit error handling for rpc_status_get
` [PATCH 6.18 133/552] nfsd: fix nfsd_file leak on inter-server COPY setup failure
` [PATCH 6.18 134/552] nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs
` [PATCH 6.18 135/552] nfsd: fix refcount leak in nfsd_file_lru_add on insertion failure
` [PATCH 6.18 136/552] nfsd: fix reply size estimate for GET_DIR_DELEGATION
` [PATCH 6.18 137/552] nfsd: fix stale s2s_cp_stateids IDR entry for async COPY
` [PATCH 6.18 138/552] nfsd: fix version mismatch loops in nfsd_acl_init_request()
` [PATCH 6.18 139/552] nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget
` [PATCH 6.18 140/552] nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
` [PATCH 6.18 141/552] nfsd: gate nfs2 setacl by argp->mask
` [PATCH 6.18 142/552] nfsd: gate nfs3 "
` [PATCH 6.18 143/552] nfsd: hold rcu across localio cmpxchg retry
` [PATCH 6.18 144/552] nfsd: initialize copy-notify stateid before publishing it
` [PATCH 6.18 145/552] nfsd: initialize DRC hash table before registering shrinker
` [PATCH 6.18 146/552] nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
` [PATCH 6.18 147/552] nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops
` [PATCH 6.18 148/552] nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE
` [PATCH 6.18 149/552] nfsd: reject reclaim LOCK after RECLAIM_COMPLETE
` [PATCH 6.18 150/552] nfsd: revoke copy-notify stateids before dropping their reference
` [PATCH 6.18 151/552] NFSD: Prevent lock owner use-after-free during client teardown
` [PATCH 6.18 152/552] NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup
` [PATCH 6.18 153/552] libceph: validate OSD extent maps before cursor advance
` [PATCH 6.18 154/552] libceph: reject buckets with mismatched CRUSH ids
` [PATCH 6.18 155/552] ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
` [PATCH 6.18 156/552] ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
` [PATCH 6.18 157/552] ceph: bound copied dentry name length in NFS export get_name
` [PATCH 6.18 158/552] ceph: bound MDSCapAuth path and fs_name decode in handle_session()
` [PATCH 6.18 159/552] ceph: bound num_export_targets array for mds info v2/v3
` [PATCH 6.18 160/552] ceph: bound xattr value length in __build_xattrs()
` [PATCH 6.18 161/552] ceph: do not repeat ceph_trim_dentries() if no progress possible
` [PATCH 6.18 162/552] ceph: fix leaked inode reference on writeback abort at umount
` [PATCH 6.18 163/552] btrfs: drop recovered reloc root refs on recovery failure
` [PATCH 6.18 164/552] btrfs: fix extent map leak in NOCOW direct I/O write
` [PATCH 6.18 165/552] btrfs: do not overwrite NODATASUM flag when removing NODATACOW flag
` [PATCH 6.18 166/552] audit: avoid dropping live tree ref on fsnotify rule autoremove
` [PATCH 6.18 167/552] cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()
` [PATCH 6.18 168/552] cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0
` [PATCH 6.18 169/552] cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC
` [PATCH 6.18 170/552] smb: client: clear ce->tgthint in free_tgts()
` [PATCH 6.18 171/552] smb: client: fix ALIGN() overflow in symlink_data() error context loop
` [PATCH 6.18 172/552] smb: client: fix copy-paste error in WSL EA length accounting for $LXDEV
` [PATCH 6.18 173/552] smb: client: harden DFS cache against invalid target hints
` [PATCH 6.18 174/552] HID: apple: preserve keyboard backlight across T2 resume
` [PATCH 6.18 175/552] HID: corsair-void: Check size of status and firmware events before reading them
` [PATCH 6.18 176/552] HID: picolcd: clamp eeprom debugfs read to bytes actually received
` [PATCH 6.18 177/552] HID: roccat: free buffered reports when destroying device
` [PATCH 6.18 178/552] HID: sensor: custom: Fix field sysfs group cleanup on failure
` [PATCH 6.18 179/552] HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
` [PATCH 6.18 180/552] HID: universal-pidff: stop the device when force-feedback init fails
` [PATCH 6.18 181/552] HID: mcp2221: stop device IO before hid_hw_stop
` [PATCH 6.18 182/552] HID: mcp2221: validate report size in mcp2221_raw_event()
` [PATCH 6.18 183/552] HID: intel-thc-hid: intel-quickspi: validate report size before copy
` [PATCH 6.18 184/552] HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer
` [PATCH 6.18 185/552] HID: intel-thc-hid: intel-quicki2c: fix autosuspend cleanup during teardown
` [PATCH 6.18 186/552] HID: intel-thc-hid: intel-quickspi: "
` [PATCH 6.18 187/552] eventfs: Initialize ei->children and ei->list in init_ei()
` [PATCH 6.18 188/552] fs/ntfs3: validate dirty page table on log replay
` [PATCH 6.18 189/552] fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()
` [PATCH 6.18 190/552] fs/ntfs3: bound page_lcns[] index by the log record
` [PATCH 6.18 191/552] eCryptfs: bound the packet-length peek to the user buffer
` [PATCH 6.18 192/552] ecryptfs: fix tag 11 packet exact-fit size check
` [PATCH 6.18 193/552] ecryptfs: hold msg ctx list lock when cleaning daemon queue
` [PATCH 6.18 194/552] ecryptfs: pass packet set buffer size to parser
` [PATCH 6.18 195/552] ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
` [PATCH 6.18 196/552] ecryptfs: reject too-small tag 70 packets
` [PATCH 6.18 197/552] ecryptfs: release message context on send failure
` [PATCH 6.18 198/552] ecryptfs: show filename encryption options
` [PATCH 6.18 199/552] efivarfs: Rate limit statfs() handler
` [PATCH 6.18 200/552] fanotify: fix use-after-free of file range info
` [PATCH 6.18 201/552] fat: restore original value when fat_ent_write failed
` [PATCH 6.18 202/552] fbdev: omapfb: panel-dsi-cm: initialize lock before registering display
` [PATCH 6.18 203/552] fbdev: pvr2fb: correct user pointer annotation and sentinel initializer
` [PATCH 6.18 204/552] fbdev: ssd1307fb: defer I2C transfers from damage callbacks
` [PATCH 6.18 205/552] fbdev: uvesafb: unregister connector callback on init failure
` [PATCH 6.18 206/552] forcedeth: fix off-by-one when saving/restoring non-PCI config space
` [PATCH 6.18 207/552] fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration
` [PATCH 6.18 209/552] hugetlb: only adjust reservation during unmapping if mapcount is 0
` [PATCH 6.18 210/552] accel/rocket: fix NULL dereference and integer overflow in rocket_job_push()
` [PATCH 6.18 211/552] accel/rocket: initialize job domain before cleanup paths
` [PATCH 6.18 212/552] accel/rocket: Fix error path handling in rocket_job_run()
` [PATCH 6.18 213/552] acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks
` [PATCH 6.18 214/552] ACPI: APEI: Fix ERST timeout unit conversion
` [PATCH 6.18 218/552] alpha: marvel: Fix irq_set_status_flags to use correct IRQ number
` [PATCH 6.18 219/552] alpha: marvel: Fix lock ordering in init_io7_irqs()
` [PATCH 6.18 220/552] ARM: 9477/1: Disable broken eBPF JIT on the Risc PC
` [PATCH 6.18 221/552] ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes
` [PATCH 6.18 222/552] auxdisplay: charlcd: cancel backlight work on registration failure
` [PATCH 6.18 223/552] block: set QUEUE_FLAG_DYING unconditionally in blk_mark_disk_dead()
` [PATCH 6.18 224/552] Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU
` [PATCH 6.18 225/552] Bluetooth: btusb: Add ASUS USB-BT600 "
` [PATCH 6.18 226/552] Bluetooth: btusb: limit RTL8761B BROKEN_EXT_SCAN quirk to 0bda:a728
` [PATCH 6.18 227/552] Bluetooth: eir: Fix OOB read in eir_get_service_data()
` [PATCH 6.18 228/552] bnx2x: fix double free in bnx2x_init_firmware() error path
` [PATCH 6.18 229/552] bnxt_en: Write doorbell when linearizing skb fails
` [PATCH 6.18 230/552] bpf, x86: Fix per-CPU address resolution into an extended register
` [PATCH 6.18 231/552] bpf: Disable preemption in __bpf_get_stack
` [PATCH 6.18 232/552] buffer: avoid tail commit walk for uptodate folios
` [PATCH 6.18 233/552] bpf: Harden bloom filter sizing and indexing on 32-bit kernels
` [PATCH 6.18 234/552] dm-io: clone the source bio instead of copying its biovec
` [PATCH 6.18 235/552] dm-io: report non-retryable errors separatedly
` [PATCH 6.18 236/552] dm-era: fix shadowed superblock leak on take-snap failure
` [PATCH 6.18 237/552] dm raid1: reserve space for NUL-terminator in build_constructor_string()
` [PATCH 6.18 238/552] dm array: validate array block headers on read
` [PATCH 6.18 239/552] dm array: reject an array block whose value size is not the callers
` [PATCH 6.18 240/552] coresight: etm3x: Fix cntr_val_show() to match cntr_val_store() behavior
` [PATCH 6.18 241/552] cpufreq: schedutil: Fix rate limit overflow
` [PATCH 6.18 242/552] cxl/features: bound fwctl command payload to the input buffer
` [PATCH 6.18 243/552] cxl/pmem: Format the nvdimm serial number as unsigned decimal
` [PATCH 6.18 244/552] Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4378
` [PATCH 6.18 245/552] Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative
` [PATCH 6.18 246/552] Bluetooth: hci_uart: Fix false success return in hci_uart_setup()
` [PATCH 6.18 247/552] Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
` [PATCH 6.18 248/552] Bluetooth: RFCOMM: serialize security confirmation handling
` [PATCH 6.18 249/552] Bluetooth: hci_conn: re-enable advertising only for peripheral role
` [PATCH 6.18 250/552] Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb
` [PATCH 6.18 251/552] Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection
` [PATCH 6.18 252/552] Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative
` [PATCH 6.18 253/552] Bluetooth: hci_intel: "
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox