Archive-only list for patches
 help / color / mirror / Atom feed
 messages from 2026-09-04 05:45:36 to 2026-09-04 05:54:59 UTC [more...]

[PATCH 6.18 000/552] 6.18.50-rc1 review
 2026-09-04  4:58 UTC  (201+ messages)
` [PATCH 6.18 116/552] nfsd: validate symlink target length in NFSv4 CREATE
` [PATCH 6.18 121/552] nfsd: check client ownership when cancelling a copy-notify stateid
` [PATCH 6.18 122/552] nfsd: clear CALLBACK_RUNNING on failed delegation recall queue
` [PATCH 6.18 123/552] nfsd: clear opcnt on compound arg release to prevent OOB read
` [PATCH 6.18 124/552] nfsd: defer setting NFSD4_CALLBACK_RUNNING in deleg_reaper
` [PATCH 6.18 125/552] nfsd: defer vfree of compound ops to fix rpc_status UAF
` [PATCH 6.18 160/552] ceph: bound xattr value length in __build_xattrs()
` [PATCH 6.18 161/552] ceph: do not repeat ceph_trim_dentries() if no progress possible
` [PATCH 6.18 162/552] ceph: fix leaked inode reference on writeback abort at umount
` [PATCH 6.18 163/552] btrfs: drop recovered reloc root refs on recovery failure
` [PATCH 6.18 164/552] btrfs: fix extent map leak in NOCOW direct I/O write
` [PATCH 6.18 165/552] btrfs: do not overwrite NODATASUM flag when removing NODATACOW flag
` [PATCH 6.18 166/552] audit: avoid dropping live tree ref on fsnotify rule autoremove
` [PATCH 6.18 167/552] cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()
` [PATCH 6.18 168/552] cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0
` [PATCH 6.18 169/552] cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC
` [PATCH 6.18 170/552] smb: client: clear ce->tgthint in free_tgts()
` [PATCH 6.18 171/552] smb: client: fix ALIGN() overflow in symlink_data() error context loop
` [PATCH 6.18 172/552] smb: client: fix copy-paste error in WSL EA length accounting for $LXDEV
` [PATCH 6.18 173/552] smb: client: harden DFS cache against invalid target hints
` [PATCH 6.18 174/552] HID: apple: preserve keyboard backlight across T2 resume
` [PATCH 6.18 175/552] HID: corsair-void: Check size of status and firmware events before reading them
` [PATCH 6.18 176/552] HID: picolcd: clamp eeprom debugfs read to bytes actually received
` [PATCH 6.18 177/552] HID: roccat: free buffered reports when destroying device
` [PATCH 6.18 178/552] HID: sensor: custom: Fix field sysfs group cleanup on failure
` [PATCH 6.18 179/552] HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
` [PATCH 6.18 180/552] HID: universal-pidff: stop the device when force-feedback init fails
` [PATCH 6.18 181/552] HID: mcp2221: stop device IO before hid_hw_stop
` [PATCH 6.18 182/552] HID: mcp2221: validate report size in mcp2221_raw_event()
` [PATCH 6.18 183/552] HID: intel-thc-hid: intel-quickspi: validate report size before copy
` [PATCH 6.18 184/552] HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer
` [PATCH 6.18 185/552] HID: intel-thc-hid: intel-quicki2c: fix autosuspend cleanup during teardown
` [PATCH 6.18 186/552] HID: intel-thc-hid: intel-quickspi: "
` [PATCH 6.18 187/552] eventfs: Initialize ei->children and ei->list in init_ei()
` [PATCH 6.18 188/552] fs/ntfs3: validate dirty page table on log replay
` [PATCH 6.18 189/552] fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()
` [PATCH 6.18 190/552] fs/ntfs3: bound page_lcns[] index by the log record
` [PATCH 6.18 191/552] eCryptfs: bound the packet-length peek to the user buffer
` [PATCH 6.18 192/552] ecryptfs: fix tag 11 packet exact-fit size check
` [PATCH 6.18 193/552] ecryptfs: hold msg ctx list lock when cleaning daemon queue
` [PATCH 6.18 194/552] ecryptfs: pass packet set buffer size to parser
` [PATCH 6.18 195/552] ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
` [PATCH 6.18 196/552] ecryptfs: reject too-small tag 70 packets
` [PATCH 6.18 197/552] ecryptfs: release message context on send failure
` [PATCH 6.18 198/552] ecryptfs: show filename encryption options
` [PATCH 6.18 199/552] efivarfs: Rate limit statfs() handler
` [PATCH 6.18 200/552] fanotify: fix use-after-free of file range info
` [PATCH 6.18 201/552] fat: restore original value when fat_ent_write failed
` [PATCH 6.18 202/552] fbdev: omapfb: panel-dsi-cm: initialize lock before registering display
` [PATCH 6.18 203/552] fbdev: pvr2fb: correct user pointer annotation and sentinel initializer
` [PATCH 6.18 204/552] fbdev: ssd1307fb: defer I2C transfers from damage callbacks
` [PATCH 6.18 205/552] fbdev: uvesafb: unregister connector callback on init failure
` [PATCH 6.18 206/552] forcedeth: fix off-by-one when saving/restoring non-PCI config space
` [PATCH 6.18 207/552] fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration
` [PATCH 6.18 208/552] hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device
` [PATCH 6.18 209/552] hugetlb: only adjust reservation during unmapping if mapcount is 0
` [PATCH 6.18 210/552] accel/rocket: fix NULL dereference and integer overflow in rocket_job_push()
` [PATCH 6.18 211/552] accel/rocket: initialize job domain before cleanup paths
` [PATCH 6.18 212/552] accel/rocket: Fix error path handling in rocket_job_run()
` [PATCH 6.18 213/552] acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks
` [PATCH 6.18 214/552] ACPI: APEI: Fix ERST timeout unit conversion
` [PATCH 6.18 215/552] ACPI: APEI: GHES: fix ARM section length accounting after header
` [PATCH 6.18 216/552] ACPI: pfr_update: fix stack buffer overflow in query_capability()
` [PATCH 6.18 217/552] alpha/PCI: Fix I/O port accessor argument order in pci_legacy_write()
` [PATCH 6.18 218/552] alpha: marvel: Fix irq_set_status_flags to use correct IRQ number
` [PATCH 6.18 219/552] alpha: marvel: Fix lock ordering in init_io7_irqs()
` [PATCH 6.18 220/552] ARM: 9477/1: Disable broken eBPF JIT on the Risc PC
` [PATCH 6.18 221/552] ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes
` [PATCH 6.18 222/552] auxdisplay: charlcd: cancel backlight work on registration failure
` [PATCH 6.18 223/552] block: set QUEUE_FLAG_DYING unconditionally in blk_mark_disk_dead()
` [PATCH 6.18 224/552] Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU
` [PATCH 6.18 225/552] Bluetooth: btusb: Add ASUS USB-BT600 "
` [PATCH 6.18 226/552] Bluetooth: btusb: limit RTL8761B BROKEN_EXT_SCAN quirk to 0bda:a728
` [PATCH 6.18 227/552] Bluetooth: eir: Fix OOB read in eir_get_service_data()
` [PATCH 6.18 228/552] bnx2x: fix double free in bnx2x_init_firmware() error path
` [PATCH 6.18 229/552] bnxt_en: Write doorbell when linearizing skb fails
` [PATCH 6.18 230/552] bpf, x86: Fix per-CPU address resolution into an extended register
` [PATCH 6.18 231/552] bpf: Disable preemption in __bpf_get_stack
` [PATCH 6.18 232/552] buffer: avoid tail commit walk for uptodate folios
` [PATCH 6.18 233/552] bpf: Harden bloom filter sizing and indexing on 32-bit kernels
` [PATCH 6.18 234/552] dm-io: clone the source bio instead of copying its biovec
` [PATCH 6.18 235/552] dm-io: report non-retryable errors separatedly
` [PATCH 6.18 236/552] dm-era: fix shadowed superblock leak on take-snap failure
` [PATCH 6.18 237/552] dm raid1: reserve space for NUL-terminator in build_constructor_string()
` [PATCH 6.18 238/552] dm array: validate array block headers on read
` [PATCH 6.18 239/552] dm array: reject an array block whose value size is not the callers
` [PATCH 6.18 240/552] coresight: etm3x: Fix cntr_val_show() to match cntr_val_store() behavior
` [PATCH 6.18 241/552] cpufreq: schedutil: Fix rate limit overflow
` [PATCH 6.18 242/552] cxl/features: bound fwctl command payload to the input buffer
` [PATCH 6.18 243/552] cxl/pmem: Format the nvdimm serial number as unsigned decimal
` [PATCH 6.18 244/552] Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4378
` [PATCH 6.18 245/552] Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative
` [PATCH 6.18 246/552] Bluetooth: hci_uart: Fix false success return in hci_uart_setup()
` [PATCH 6.18 247/552] Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
` [PATCH 6.18 248/552] Bluetooth: RFCOMM: serialize security confirmation handling
` [PATCH 6.18 249/552] Bluetooth: hci_conn: re-enable advertising only for peripheral role
` [PATCH 6.18 250/552] Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb
` [PATCH 6.18 251/552] Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection
` [PATCH 6.18 252/552] Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative
` [PATCH 6.18 253/552] Bluetooth: hci_intel: "
` [PATCH 6.18 254/552] Bluetooth: hci_sync: Clear HCI_CMD_PENDING when dropping the last request
` [PATCH 6.18 255/552] kasan: fix cache shrink race with CPU hotplug
` [PATCH 6.18 256/552] jbd2: bound shrinker scans by examined checkpoint buffers
` [PATCH 6.18 257/552] jbd2: check need_resched() when skipping busy "
` [PATCH 6.18 258/552] ipip: fix skb leak in collect_md mode when metadata_dst allocation fails
` [PATCH 6.18 259/552] ip: orphan prefetched skbs before multicast forwarding
` [PATCH 6.18 260/552] ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()
` [PATCH 6.18 261/552] ip6_gre: fix hardware header length for NBMA tunnels
` [PATCH 6.18 262/552] ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()
` [PATCH 6.18 263/552] ipv6: use RCU iterator to dump route exceptions
` [PATCH 6.18 264/552] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
` [PATCH 6.18 265/552] libnvdimm/labels: Prevent integer overflow in __nd_label_validate()
` [PATCH 6.18 266/552] mailbox: qcom-ipcc: fix duplicate channel allocation across holes
` [PATCH 6.18 267/552] md/raid10: fix still_degraded being inverted in raid10_sync_request()
` [PATCH 6.18 268/552] md: do overflow check for sb->bblog_shift in super_1_load()
` [PATCH 6.18 269/552] module: validate string table section types
` [PATCH 6.18 270/552] mpls: reload header after pskb_may_pull()
` [PATCH 6.18 271/552] mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction
` [PATCH 6.18 272/552] module/kallsyms: fix nextval for data symbol lookup
` [PATCH 6.18 273/552] nouveau/gem: reserve the bo in the info ioctl around the vma lookup
` [PATCH 6.18 274/552] params: fix charp corruption on allocation failure
` [PATCH 6.18 275/552] phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
` [PATCH 6.18 276/552] SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow
` [PATCH 6.18 277/552] SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
` [PATCH 6.18 278/552] SUNRPC: svcauth_gss: enforce krb5 token minimum length
` [PATCH 6.18 279/552] sunrpc: route to a populated pool in svc_pool_for_cpu()
` [PATCH 6.18 280/552] SUNRPC: Restore NUMA_NO_NODE for svc thread allocations in global mode
` [PATCH 6.18 281/552] SUNRPC: always drain cache_cleaner before destroying a cache_detail
` [PATCH 6.18 282/552] SUNRPC: Check svc pool percpu counter allocation
` [PATCH 6.18 283/552] sunrpc: defer rq_argp and rq_resp free until after RCU grace period
` [PATCH 6.18 284/552] sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
` [PATCH 6.18 285/552] SUNRPC: Guard svcauth_gss_release() dispatch on rq_auth_stat
` [PATCH 6.18 286/552] SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
` [PATCH 6.18 287/552] SUNRPC: harden gss_unwrap_resp_priv length checks
` [PATCH 6.18 288/552] sunrpc: init gssp_lock before publishing proc entry
` [PATCH 6.18 289/552] SUNRPC: reject duplicate CREDS_VALUE options
` [PATCH 6.18 290/552] SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field
` [PATCH 6.18 291/552] SUNRPC: wait for in-flight client TLS handshake callback
` [PATCH 6.18 292/552] svcrdma: Fix offset arithmetic in read_chunk_range
` [PATCH 6.18 293/552] svcrdma: Fix pcl_for_each_segment for empty chunks
` [PATCH 6.18 294/552] svcrdma: Fix unmatched rn_unregister on failed accept
` [PATCH 6.18 295/552] svcrdma: Reject connection when transport allocation fails
` [PATCH 6.18 296/552] svcrdma: Reject inline replies that overflow the pull-up buffer
` [PATCH 6.18 297/552] svcrdma: Reject Write/Reply chunks with segcount 0
` [PATCH 6.18 298/552] svcrdma: Use svc_xprt_put to free listener on create failure
` [PATCH 6.18 299/552] svcrdma: Validate Read chunk positions before reconstruction
` [PATCH 6.18 300/552] udf: reject VAT indexes equal to the entry count
` [PATCH 6.18 301/552] wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets
` [PATCH 6.18 302/552] wifi: mt76: mt7925: cancel pending mlo_pm_work
` [PATCH 6.18 303/552] staging: media: tegra-video: fix of_node_put() on VIP parse errors
` [PATCH 6.18 304/552] staging: media: tegra-video: vi: fix probe failure on skipped last port
` [PATCH 6.18 305/552] media: staging/ipu7: fix async notifier UAF on probe error path
` [PATCH 6.18 306/552] scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()
` [PATCH 6.18 307/552] rpmsg: glink: smem: order FIFO read after availability check
` [PATCH 6.18 308/552] Revert "arm64: dts: rockchip: Further describe the WiFi for the Pinephone Pro"
` [PATCH 6.18 309/552] arm64: dts: qcom: sm6115-pro1x: Correct touchscreen GPIO flags
` [PATCH 6.18 310/552] arm64: dts: qcom: x1-dell-thena: mark l12b and l15b always-on
` [PATCH 6.18 311/552] arm64: dts: rockchip: fix eMMC reset polarity on PP-1516
` [PATCH 6.18 312/552] arm64: dts: rockchip: fix eMMC reset polarity on PX30 Ringneck
` [PATCH 6.18 313/552] arm64: dts: rockchip: fix emmc reset polarity on px30-cobra
` [PATCH 6.18 314/552] arm64: dts: rockchip: Fix rk3399-roc-pc-plus analog audio
` [PATCH 6.18 315/552] arm64: dts: rockchip: Fix rk3588s-roc-pc audio description
` [PATCH 6.18 316/552] riscv: acpi: Handle LPI architectural context loss flags
` [PATCH 6.18 317/552] riscv: unaligned: stop using kthread for check_vector_unaligned_access()
` [PATCH 6.18 318/552] remoteproc: scp: Fix device reference leak on failed lookup
` [PATCH 6.18 319/552] ptp: vmclock: prevent read-only mappings from becoming writable
` [PATCH 6.18 320/552] qede: Fix NULL pointer dereference in TPA fragment processing
` [PATCH 6.18 321/552] RDMA/cxgb4: Cancel reg_work before freeing device on remove
` [PATCH 6.18 322/552] RDMA/ionic: Cap eq_count to the eth drivers interrupt vector budget
` [PATCH 6.18 323/552] RDMA/ucma: Lock the handler in ucma_set_ib_path()
` [PATCH 6.18 324/552] RDMA/ucma: Lock the handler in ucma_write_cm_event()
` [PATCH 6.18 325/552] RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR
` [PATCH 6.18 326/552] regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
` [PATCH 6.18 327/552] regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata
` [PATCH 6.18 328/552] regulator: qcom-refgen: correct the regulator type to CURRENT
` [PATCH 6.18 329/552] ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()
` [PATCH 6.18 330/552] ring-buffer: Free cpu_buffer::free_page with subbuf_order
` [PATCH 6.18 331/552] ring-buffer: Hold cpu_buffer::lock when resizing a subbuf
` [PATCH 6.18 332/552] PM: sleep: Unblock runtime PM when device prepare fails
` [PATCH 6.18 333/552] orangefs: fix double-free of trailer_buf on readdir copy failure
` [PATCH 6.18 334/552] orangefs: skip leading spaces before parsing client debug masks
` [PATCH 6.18 335/552] ocfs2: always run deallocs on copy-on-write completion
` [PATCH 6.18 336/552] ocfs2: bound namelen in dlm_migrate_request_handler
` [PATCH 6.18 337/552] ocfs2: validate lengths in dlm_mig_lockres_handler
` [PATCH 6.18 338/552] ocfs2: validate rl_used against rl_count in refcount block validator
` [PATCH 6.18 339/552] ocfs2: cluster: dont sleep while holding o2hb_live_lock in o2hb_region_pin()
` [PATCH 6.18 340/552] ocfs2: cluster: avoid lock order inversion in o2hb_region_pin() from drop_item
` [PATCH 6.18 341/552] ocfs2: cluster: fix o2hb_dependent_users leak on pin failure
` [PATCH 6.18 342/552] ocfs2: fix readdir position truncation on 32-bit kernels
` [PATCH 6.18 343/552] openrisc: fix arbitrary kernel memory access via or1k_atomic syscall
` [PATCH 6.18 344/552] openvswitch: only skb_tx_error() a packet we are about to drop
` [PATCH 6.18 345/552] ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion
` [PATCH 6.18 347/552] arm64: proton-pack: Restore the nospectre_bhb command-line option
` [PATCH 6.18 356/552] nvme: zero the discard fallback page
` [PATCH 6.18 357/552] nvme-pci: disable controller on admin queue IRQ setup failure
` [PATCH 6.18 358/552] nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone
` [PATCH 6.18 359/552] nvme-tcp: fix host memory disclosure on R2T for a read command
` [PATCH 6.18 360/552] nvme-tcp: reject a read that transferred too few bytes
` [PATCH 6.18 361/552] sctp: stop processing a packet once its association is deleted
` [PATCH 6.18 362/552] sctp: drop a chunk if its transport was removed


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox