* [PATCH 6.18 000/276] 6.18.22-rc2 review
@ 2026-04-09 9:27 Greg Kroah-Hartman
2026-04-09 15:53 ` Miguel Ojeda
` (4 more replies)
0 siblings, 5 replies; 6+ messages in thread
From: Greg Kroah-Hartman @ 2026-04-09 9:27 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
This is the start of the stable review cycle for the 6.18.22 release.
There are 276 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 11 Apr 2026 09:26:30 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.22-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 6.18.22-rc2
Andrea Righi <arighi@nvidia.com>
sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
Tejun Heo <tj@kernel.org>
sched_ext: Refactor do_enqueue_task() local and global DSQ paths
David Hildenbrand (Arm) <david@kernel.org>
mm/memory: fix PMD/PUD checks in follow_pfnmap_start()
Anshuman Khandual <anshuman.khandual@arm.com>
mm: replace READ_ONCE() with standard page table accessors
Josef Bacik <josef@toxicpanda.com>
scsi: target: tcm_loop: Drain commands in target_reset handler
Thinh Nguyen <Thinh.Nguyen@synopsys.com>
scsi: target: file: Use kzalloc_flex for aio_cmd
Willem de Bruijn <willemb@google.com>
net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
Guangshuo Li <lgs201920130244@gmail.com>
net: mana: fix use-after-free in add_adev() error path
Alex Deucher <alexander.deucher@amd.com>
drm/amd/display: Fix DCE LVDS handling
Yang Wang <kevinyang.wang@amd.com>
drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13
Alexander Popov <alex.popov@linux.com>
wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
Petr Mladek <pmladek@suse.com>
kallsyms: prevent module removal when printing module name and buildid
Petr Mladek <pmladek@suse.com>
kallsyms: cleanup code for appending the module buildid
Petr Mladek <pmladek@suse.com>
kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid()
Petr Mladek <pmladek@suse.com>
kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid()
Taegu Ha <hataegu0826@gmail.com>
usb: gadget: f_uac1_legacy: validate control request size
Michael Zimmermann <sigmaepsilon92@gmail.com>
usb: gadget: f_hid: move list and spinlock inits from bind to alloc
Kuen-Han Tsai <khtsai@google.com>
usb: gadget: f_rndis: Fix net_device lifecycle with device_move
Kuen-Han Tsai <khtsai@google.com>
usb: gadget: f_subset: Fix net_device lifecycle with device_move
Kuen-Han Tsai <khtsai@google.com>
usb: gadget: f_eem: Fix net_device lifecycle with device_move
Kuen-Han Tsai <khtsai@google.com>
usb: gadget: f_ecm: Fix net_device lifecycle with device_move
Kuen-Han Tsai <khtsai@google.com>
usb: gadget: f_rndis: Protect RNDIS options with mutex
Kuen-Han Tsai <khtsai@google.com>
usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
Jimmy Hu <hhhuuu@google.com>
usb: gadget: uvc: fix NULL pointer dereference during unbind race
Kuen-Han Tsai <khtsai@google.com>
usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
Kuen-Han Tsai <khtsai@google.com>
usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
Zilin Guan <zilin@seu.edu.cn>
ice: Fix memory leak in ice_set_ringparam()
Aditya Garg <gargaditya08@live.com>
HID: appletb-kbd: add .resume method in PM
Nathan Rebello <nathan.c.rebello@gmail.com>
usb: typec: ucsi: validate connector number in ucsi_notify_common()
Sebastian Urban <surban@surban.net>
usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer
Alan Stern <stern@rowland.harvard.edu>
USB: dummy-hcd: Fix interrupt synchronization error
Alan Stern <stern@rowland.harvard.edu>
USB: dummy-hcd: Fix locking/synchronization error
Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
thunderbolt: Fix property read in nhi_wake_supported()
Andrei Kuchynski <akuchynski@chromium.org>
usb: typec: thunderbolt: Set enter_vdo during initialization
Xingjing Deng <micro6947@gmail.com>
misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe
Xingjing Deng <micro6947@gmail.com>
misc: fastrpc: possible double-free of cctx->remote_heap
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
thermal: core: Fix thermal zone device registration error path
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
thermal: core: Address thermal zone removal races with resume
Tzung-Bi Shih <tzungbi@kernel.org>
gpio: Fix resource leaks on errors in gpiochip_add_data_with_key()
Shenwei Wang <shenwei.wang@nxp.com>
gpio: mxc: map Both Edge pad wakeup to Rising Edge
Changwoo Min <changwoo@igalia.com>
sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU
Guangshuo Li <lgs201920130244@gmail.com>
cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
Srujana Challa <schalla@marvell.com>
virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN
Sven Eckelmann (Plasma Cloud) <se@simonwunderlich.de>
net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
Yufan Chen <yufan.chen@linux.dev>
net: ftgmac100: fix ring allocation unwind on open failure
Yang Yang <n05ec@lzu.edu.cn>
vxlan: validate ND option lengths in vxlan_na_create
Eric Biggers <ebiggers@kernel.org>
crypto: tegra - Add missing CRYPTO_ALG_ASYNC
Cosmin Tanislav <cosmin-gabriel.tanislav.xa@renesas.com>
counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member
Cosmin Tanislav <cosmin-gabriel.tanislav.xa@renesas.com>
counter: rz-mtu3-cnt: prevent counter from being toggled multiple times
Nicolas Pitre <nico@fluxnic.net>
vt: resize saved unicode buffer on alt screen exit after resize
Liav Mordouch <liavmordouch@gmail.com>
vt: discard stale unicode buffer on alt screen exit after resize
Dave Penkler <dpenkler@gmail.com>
gpib: Fix fluke driver s390 compile issue
Yifan Wu <yifanwucs@gmail.com>
netfilter: ipset: drop logically empty buckets in mtype_del
Ivan Vera <ivanverasantos@gmail.com>
nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy
Christian Eggers <ceggers@arri.de>
nvmem: imx: assign nvmem_cell_info::raw_len
Thomas Richter <tmricht@linux.ibm.com>
s390/cpum_sf: Cap sampling rate to prevent lsctl exception
Harald Freudenberger <freude@linux.ibm.com>
s390/zcrypt: Fix memory leak with CCA cards used as accelerator
Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
spi: cadence-qspi: Fix exec_mem_op error handling
Xu Yang <xu.yang_2@nxp.com>
dt-bindings: connector: add pd-disable dependency
Conor Dooley <conor.dooley@microchip.com>
firmware: microchip: fail auto-update probe if no flash found
Ian Abbott <abbotti@mev.co.uk>
comedi: me4000: Fix potential overrun of firmware buffer
Ian Abbott <abbotti@mev.co.uk>
comedi: me_daq: Fix potential overrun of firmware buffer
Ian Abbott <abbotti@mev.co.uk>
comedi: ni_atmio16d: Fix invalid clean-up after failed attach
Ian Abbott <abbotti@mev.co.uk>
comedi: Reinit dev->spinlock between attachments to low-level drivers
Deepanshu Kartikey <kartikey406@gmail.com>
comedi: dt2815: add hardware detection to prevent crash
Oliver Neukum <oneukum@suse.com>
cdc-acm: new quirk for EPSON HMD
Yang Yang <n05ec@lzu.edu.cn>
bridge: br_nd_send: validate ND option lengths
Srinivas Kandagatla <srinivas.kandagatla@oss.qualcomm.com>
ASoC: qcom: sc7280: make use of common helpers
Jens Axboe <axboe@kernel.dk>
io_uring: protect remaining lockless ctx->rings accesses with RCU
Guan-Yu Lin <guanyulin@google.com>
usb: core: use dedicated spinlock for offload state
Yongchao Wu <yongchao.wu@autochips.com>
usb: cdns3: gadget: fix state inconsistency on gadget init failure
Yongchao Wu <yongchao.wu@autochips.com>
usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
Gabor Juhos <j4g8y7@gmail.com>
usb: core: phy: avoid double use of 'usb3-phy'
Juno Choi <juno.choi@lge.com>
usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()
Justin Chen <justin.chen@broadcom.com>
usb: ehci-brcm: fix sleep during atomic
Guan-Yu Lin <guanyulin@google.com>
usb: host: xhci-sideband: delegate offload_usage tracking to class drivers
Felix Gu <ustc.gu@gmail.com>
usb: misc: usbio: Fix URB memory leak on submit failure
Heitor Alves de Siqueira <halves@igalia.com>
usb: usbtmc: Flush anchored URBs in usbtmc_release
Guangshuo Li <lgs201920130244@gmail.com>
usb: ulpi: fix double free in ulpi_register_interface() error path
Miao Li <limiao@kylinos.cn>
usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive
Johan Hovold <johan@kernel.org>
gpib: lpvo_usb: fix memory leak on disconnect
Alexander Usyskin <alexander.usyskin@intel.com>
mei: me: reduce the scope on unexpected reset
Ethan Tidmore <ethantidmore06@gmail.com>
iio: gyro: mpu3050: Fix out-of-sequence free_irq()
Ethan Tidmore <ethantidmore06@gmail.com>
iio: gyro: mpu3050: Move iio_device_register() to correct location
Ethan Tidmore <ethantidmore06@gmail.com>
iio: gyro: mpu3050: Fix irq resource leak
Ethan Tidmore <ethantidmore06@gmail.com>
iio: gyro: mpu3050: Fix incorrect free_irq() variable
Francesco Lavra <flavra@baylibre.com>
iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only
Josh Poimboeuf <jpoimboe@kernel.org>
iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()
Aldo Conte <aldocontelk@gmail.com>
iio: light: veml6070: fix veml6070_read() return value
David Lechner <dlechner@baylibre.com>
iio: light: vcnl4035: fix scan buffer on big-endian
Antoniu Miclaus <antoniu.miclaus@analog.com>
iio: imu: adis16550: fix swapped gyro/accel filter functions
Antoniu Miclaus <antoniu.miclaus@analog.com>
iio: dac: ad5770r: fix error return in ad5770r_read_raw()
Antoniu Miclaus <antoniu.miclaus@analog.com>
iio: accel: adxl313: add missing error check in predisable
Antoniu Miclaus <antoniu.miclaus@analog.com>
iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0
Valek Andrej <andrej.v@skyrain.eu>
iio: accel: fix ADXL355 temperature signature value
Billy Tsai <billy_tsai@aspeedtech.com>
iio: adc: aspeed: clear reference voltage bits before configuring vref
Antoniu Miclaus <antoniu.miclaus@analog.com>
iio: adc: ade9000: move mutex init before IRQ registration
Giorgi Tchankvetadze <giorgitchankvetadze1997@gmail.com>
iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power
Giorgi Tchankvetadze <giorgitchankvetadze1997@gmail.com>
iio: adc: ade9000: fix wrong return type in streaming push
Dmitry Torokhov <dmitry.torokhov@gmail.com>
iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get()
Dmitry Torokhov <dmitry.torokhov@gmail.com>
iio: adc: ti-ads7950: normalize return value of gpio_get
Zoltan Illes <zoliviragh@gmail.com>
Input: xpad - add support for Razer Wolverine V3 Pro
Shengyu Qu <wiagn233@outlook.com>
Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode
Liam Mitchell <mitchell.liam@gmail.com>
Input: bcm5974 - recover from failed mode switch
Christoffer Sandberg <cs@tuxedo.de>
Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table
Bart Van Assche <bvanassche@acm.org>
Input: synaptics-rmi4 - fix a locking bug in an error path
JP Hein <jp@jphein.com>
USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam
Wanquan Zhong <wanquan.zhong@fibocom.com>
USB: serial: option: add support for Rolling Wireless RW135R-GL
Frej Drejhammar <frej@stacken.kth.se>
USB: serial: io_edgeport: add support for Blackbox IC135A
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/pm: drop SMU driver if version not matched messages
Donet Tom <donettom@linux.ibm.com>
drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
Junrui Luo <moonafterrain@outlook.com>
drm/amdgpu: validate doorbell_offset in user queue creation
Lijo Lazar <lijo.lazar@amd.com>
drm/amdgpu: Fix wait after reset sequence in S4
Ville Syrjälä <ville.syrjala@linux.intel.com>
drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP
Ville Syrjälä <ville.syrjala@linux.intel.com>
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
Thomas Zimmermann <tzimmermann@suse.de>
drm/ast: dp501: Fix initialization of SCU2C
Felix Gu <ustc.gu@gmail.com>
iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD
Felix Gu <ustc.gu@gmail.com>
iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout()
Felix Gu <ustc.gu@gmail.com>
iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion()
David Lechner <dlechner@baylibre.com>
iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
David Lechner <dlechner@baylibre.com>
iio: adc: ti-adc161s626: fix buffer read on big-endian
David Lechner <dlechner@baylibre.com>
iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace
David Lechner <dlechner@baylibre.com>
iio: orientation: hid-sensor-rotation: fix quaternion alignment
David Lechner <dlechner@baylibre.com>
iio: add IIO_DECLARE_QUATERNION() macro
Adam Crosser <adam.crosser@praetorian.com>
gpib: fix use-after-free in IO ioctl handlers
Prike Liang <Prike.Liang@amd.com>
drm/amdgpu: fix the idr allocation flags
Aleksandr Nogikh <nogikh@google.com>
x86/kexec: Disable KCOV instrumentation after load_segments()
Stefan Wiehler <stefan.wiehler@nokia.com>
mips: mm: Allocate tlb_vpn array atomically
Sanman Pradhan <psanman@juniper.net>
hwmon: (occ) Fix division by zero in occ_show_power_1()
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix the GCC version check for `__multi3' workaround
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: SiByte: Bring back cache initialisation
Asim Viladi Oglu Manizada <manizada@pm.me>
ksmbd: fix OOB write in QUERY_INFO for compound requests
hkbinbin <hkbinbinbin@gmail.com>
Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync
Oleh Konko <security@1seal.org>
Bluetooth: SMP: force responder MITM requirements before building the pairing response
Oleh Konko <security@1seal.org>
Bluetooth: SMP: derive legacy responder STK authentication from MITM state
Junxi Qian <qjx1298677004@gmail.com>
io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()
Sourav Nayak <nonameblank007@gmail.com>
ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx
Zhang Heng <zhangheng@kylinos.cn>
ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15
Takashi Iwai <tiwai@suse.de>
ALSA: ctxfi: Fix missing SPDIFI1 index handling
Berk Cem Goksel <berkcgoksel@gmail.com>
ALSA: caiaq: fix stack out-of-bounds read in init_card
Eric Biggers <ebiggers@kernel.org>
lib/crypto: chacha: Zeroize permuted_state before it leaves scope
Cheng-Yang Chou <yphbchou0911@gmail.com>
sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl()
Srinivasan Shanmugam <srinivasan.shanmugam@amd.com>
drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()
Ernestas Kulik <ernestas.k@iconn-networks.com>
USB: serial: option: add MeiG Smart SRM825WN
Alexey Velichayshiy <a.velichayshiy@ispras.ru>
wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
Yasuaki Torimaru <yasuakitorimaru@gmail.com>
wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
Alice Ryhl <aliceryhl@google.com>
rust_binder: use AssertSync for BINDER_VM_OPS
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drm/ioc32: stop speculation on the drm_compat_ioctl path
Sunil V L <sunilvl@oss.qualcomm.com>
ACPI: RIMT: Add dependency between iommu and devices
Zishun Yi <vulab@iscas.ac.cn>
riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set
Paul Walmsley <pjw@kernel.org>
riscv: kgdb: fix several debug register assignment bugs
Ian Rogers <irogers@google.com>
perf/x86: Fix potential bad container_of in intel_pmu_hw_config
Peter Zijlstra <peterz@infradead.org>
sched/fair: Fix zero_vruntime tracking fix
Shiji Yang <yangshiji66@outlook.com>
mips: ralink: update CPU clock index
Corey Hickey <bugfood-c@fatooh.org>
hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI
Chen Ni <nichen@iscas.ac.cn>
drm/sysfb: Fix efidrm error handling and memory type mismatch
Sanman Pradhan <psanman@juniper.net>
hwmon: (occ) Fix missing newline in occ_show_extended()
Felix Gu <ustc.gu@gmail.com>
spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback
Sanman Pradhan <psanman@juniper.net>
hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()
Daniele Ceraolo Spurio <daniele.ceraolospurio@intel.com>
drm/xe/pxp: Clear restart flag in pxp_start after jumping back
Daniele Ceraolo Spurio <daniele.ceraolospurio@intel.com>
drm/xe/pxp: Remove incorrect handling of impossible state during suspend
Daniele Ceraolo Spurio <daniele.ceraolospurio@intel.com>
drm/xe/pxp: Clean up termination status on failure
Felix Gu <ustc.gu@gmail.com>
spi: stm32-ospi: Fix reset control leak on probe error
Felix Gu <ustc.gu@gmail.com>
spi: stm32-ospi: Fix resource leak in remove() callback
Jamie Gibbons <jamie.gibbons@microchip.com>
dt-bindings: gpio: fix microchip #interrupt-cells
Sanman Pradhan <psanman@juniper.net>
hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")
Sanman Pradhan <psanman@juniper.net>
hwmon: (pxe1610) Check return value of page-select write in probe
Sanman Pradhan <psanman@juniper.net>
hwmon: (tps53679) Fix array access with zero-length block read
Qi Tang <tpluszz77@gmail.com>
io_uring/rsrc: reject zero-length fixed buffer import
Youssef Samir <youssef.abdulrahman@oss.qualcomm.com>
accel/qaic: Handle DBC deactivation if the owner went away
Barnabás Pőcze <pobrn@protonmail.com>
gpiolib: clear requested flag if line is invalid
Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
gpio: rename gpio_chip_hwgpio() to gpiod_hwgpio()
David Lechner <dlechner@baylibre.com>
iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
Maarten Lankhorst <dev@lankhorst.se>
Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"
Varun R Mallya <varunrmallya@gmail.com>
bpf: Reject sleepable kprobe_multi programs at attach time
Qi Tang <tpluszz77@gmail.com>
bpf: reject direct access to nullable PTR_TO_BUF pointers
Dimitri Daskalakis <daskald@meta.com>
eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64
Eric Dumazet <edumazet@google.com>
ipv6: avoid overflows in ip6_datagram_send_ctl()
Luka Gejak <luka.gejak@linux.dev>
net: hsr: fix VLAN add unwind on slave errors
Xiang Mei <xmei5@asu.edu>
net/sched: cls_flow: fix NULL pointer dereference on shared blocks
Xiang Mei <xmei5@asu.edu>
net/sched: cls_fw: fix NULL pointer dereference on shared blocks
Martin Schiller <ms@dev.tdt.de>
net/x25: Fix overflow when accumulating packets
Martin Schiller <ms@dev.tdt.de>
net/x25: Fix potential double free of skb
Pavan Chebbi <pavan.chebbi@broadcom.com>
bnxt_en: Restore default stat ctxs for ULP when resource is available
Saeed Mahameed <saeedm@nvidia.com>
net/mlx5: Fix switchdev mode rollback in case of failure
Saeed Mahameed <saeedm@nvidia.com>
net/mlx5: Avoid "No data available" when FW version queries fail
Shay Drory <shayd@nvidia.com>
net/mlx5: lag: Check for LAG device before creating debugfs
Fedor Pchelkin <pchelkin@ispras.ru>
net: macb: properly unregister fixed rate clocks
Fedor Pchelkin <pchelkin@ispras.ru>
net: macb: fix clk handling on PCI glue driver removal
Yucheng Lu <kanolyc@gmail.com>
net/sched: sch_netem: fix out-of-bounds access in packet corruption
Kuniyuki Iwashima <kuniyu@google.com>
bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
Weiming Shi <bestswngs@gmail.com>
rds: ib: reject FRMR registration before IB connection is established
Keenan Dong <keenanat2000@gmail.com>
Bluetooth: MGMT: validate mesh send advertising payload length
Pauli Virtanen <pav@iki.fi>
Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
Pauli Virtanen <pav@iki.fi>
Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
Keenan Dong <keenanat2000@gmail.com>
Bluetooth: MGMT: validate LTK enc_size on load
Jonathan Rissanen <jonathan.rissanen@axis.com>
Bluetooth: hci_h4: Fix race during initialization
Cen Zhang <zzzccc427@gmail.com>
Bluetooth: SCO: fix race conditions in sco_sock_connect()
Pauli Virtanen <pav@iki.fi>
Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nf_tables: reject immediate NF_QUEUE verdict
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: ctnetlink: ignore explicit helper on new expectations
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nf_conntrack_expect: store netns and zone in expectation
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nf_conntrack_expect: use expect->helper
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nf_conntrack_expect: honor expectation helper field
Qi Tang <tpluszz77@gmail.com>
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
Qi Tang <tpluszz77@gmail.com>
netfilter: nf_conntrack_helper: pass helper to expect cleanup
Florian Westphal <fw@strlen.de>
netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr
Florian Westphal <fw@strlen.de>
netfilter: x_tables: ensure names are nul-terminated
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_log: account for netlink header size
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: flowtable: strictly check for maximum number of actions
Geoffrey D. Bennett <g@b4.vu>
ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP
Michal Piekos <michal.piekos@mmpsystems.pl>
net: stmmac: skip VLAN restore when VLAN hash ops are missing
Li Xiasong <lixiasong1@huawei.com>
mptcp: fix soft lockup in mptcp_recvmsg()
Geliang Tang <geliang@kernel.org>
mptcp: add eat_recv_skb helper
Zhengchuan Liang <zcliangcn@gmail.com>
net: ipv6: flowlabel: defer exclusive option free until RCU teardown
Alexei Starovoitov <ast@kernel.org>
bpf: Fix regsafe() for pointers to packet
Julian Braha <julianbraha@gmail.com>
ASoC: Intel: boards: fix unmet dependency on PINCTRL
Suraj Gupta <suraj.gupta2@amd.com>
net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets
Suraj Gupta <suraj.gupta2@amd.com>
net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec
Pengpeng Hou <pengpeng@iscas.ac.cn>
NFC: pn533: bound the UART receive buffer
Xiang Mei <xmei5@asu.edu>
net: bonding: fix use-after-free in bond_xmit_broadcast()
Herbert Xu <herbert@gondor.apana.org.au>
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
Herbert Xu <herbert@gondor.apana.org.au>
crypto: algif_aead - Revert to operating out-of-place
Pengpeng Hou <pengpeng@iscas.ac.cn>
bnxt_en: set backing store type from query type
Yochai Eisenrich <echelonh@gmail.com>
net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
Guoyu Su <yss2813483011xxl@gmail.com>
net: use skb_header_pointer() for TCPv4 GSO frag_off check
Paolo Abeni <pabeni@redhat.com>
net: introduce mangleid_features
Lorenzo Bianconi <lorenzo@kernel.org>
net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue()
Paolo Abeni <pabeni@redhat.com>
ipv6: prevent possible UaF in addrconf_permanent_addr()
Jihed Chaibi <jihed.chaibi.dev@gmail.com>
ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure
Dag Smedberg <dag@dsmedberg.se>
ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP
Wei Fang <wei.fang@nxp.com>
net: enetc: do not allow VF to configure the RSS key
Wei Fang <wei.fang@nxp.com>
net: enetc: check whether the RSS algorithm is Toeplitz
Marek Behún <kabel@kernel.org>
net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta
Xiang Mei <xmei5@asu.edu>
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
Yang Yang <n05ec@lzu.edu.cn>
bridge: br_nd_send: linearize skb before parsing ND options
Dimitri Daskalakis <daskald@meta.com>
eth: fbnic: Account for page fragments when updating BDQ tail
Eric Dumazet <edumazet@google.com>
ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
Eric Dumazet <edumazet@google.com>
ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
Thomas Bogendoerfer <tbogendoerfer@suse.de>
tg3: Fix race for querying speed/duplex
Pengpeng Hou <pengpeng@iscas.ac.cn>
net/ipv6: ioam6: prevent schema length wraparound in trace fill
Yochai Eisenrich <echelonh@gmail.com>
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
Jiayuan Chen <jiayuan.chen@shopee.com>
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
Wei Fang <wei.fang@nxp.com>
net: enetc: reset PIR and CIR if they are not equal when initializing TX ring
Buday Csaba <buday.csaba@prolan.hu>
net: fec: fix the PTP periodic output sysfs interface
Qingfang Deng <dqfext@gmail.com>
netdevsim: fix build if SKB_EXTENSIONS=n
Dipayaan Roy <dipayanroy@linux.microsoft.com>
net: mana: Fix RX skb truesize accounting
Norbert Szetei <norbert@doyensec.com>
crypto: af-alg - fix NULL pointer dereference in scatterwalk
Mikulas Patocka <mpatocka@redhat.com>
crypto: deflate - fix spurious -ENOSPC
Horia Geantă <horia.geanta@nxp.com>
crypto: caam - fix overflow on long hmac keys
Horia Geantă <horia.geanta@nxp.com>
crypto: caam - fix DMA corruption on long hmac keys
Reshma Immaculate Rajkumar <reshma.rajkumar@oss.qualcomm.com>
wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session
Johannes Berg <johannes.berg@intel.com>
wifi: iwlwifi: mld: correctly set wifi generation data
Emmanuel Grumbach <emmanuel.grumbach@intel.com>
wifi: iwlwifi: disable EHT if the device doesn't allow it
Johannes Berg <johannes.berg@intel.com>
wifi: iwlwifi: cfg: add new device names
Emmanuel Grumbach <emmanuel.grumbach@intel.com>
wifi: iwlwifi: mvm: don't send a 6E related command when not supported
Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu@intel.com>
wifi: iwlwifi: mld: Fix MLO scan timing
Johannes Berg <johannes.berg@intel.com>
wifi: iwlwifi: fix remaining kernel-doc warnings
Frank Li <Frank.Li@nxp.com>
dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning
Praveen Talari <praveen.talari@oss.qualcomm.com>
spi: geni-qcom: Check DMA interrupts early in ISR
Paulo Alcantara <pc@manguebit.org>
smb: client: fix generic/694 due to wrong ->i_blocks
ZhengYuan Huang <gality369@gmail.com>
btrfs: reject root items with drop_progress and zero drop_level
Mikko Perttunen <mperttunen@nvidia.com>
i2c: tegra: Don't mark devices with pins as IRQ safe
Filipe Manana <fdmanana@suse.com>
btrfs: reserve enough transaction items for qgroup ioctls
Lee Jones <lee@kernel.org>
HID: multitouch: Check to ensure report responses match the request
Lee Jones <lee@kernel.org>
HID: core: Mitigate potential OOB by removing bogus memset()
Lee Jones <lee@kernel.org>
HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
Josh Poimboeuf <jpoimboe@kernel.org>
objtool: Fix Clang jump table detection
Paul SAGE <paul.sage@42.fr>
tg3: replace placeholder MAC address with device property
Johannes Thumshirn <johannes.thumshirn@wdc.com>
btrfs: don't take device_list_mutex when querying zone info
Deepanshu Kartikey <kartikey406@gmail.com>
atm: lec: fix use-after-free in sock_def_readable()
Benoît Sevens <bsevens@google.com>
HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
Deepanshu Kartikey <kartikey406@gmail.com>
wifi: mac80211: check tdls flag in ieee80211_tdls_oper
Adrian Freund <adrian@freund.io>
HID: logitech-hidpp: Enable MX Master 4 over bluetooth
Pepper Gray <hello@peppergray.xyz>
arm64/scs: Fix handling of advance_loc4
-------------
Diffstat:
.../bindings/auxdisplay/holtek,ht16k33.yaml | 2 +-
.../bindings/connector/usb-connector.yaml | 1 +
.../bindings/gpio/microchip,mpfs-gpio.yaml | 4 +-
Makefile | 4 +-
arch/arm64/kernel/pi/patch-scs.c | 8 +
arch/mips/lib/multi3.c | 6 +-
arch/mips/mm/cache.c | 3 +-
arch/mips/mm/tlb-r4k.c | 2 +-
arch/mips/ralink/clk.c | 8 +-
arch/riscv/kernel/kgdb.c | 7 +-
arch/riscv/kernel/process.c | 4 +-
arch/s390/kernel/perf_cpum_sf.c | 6 +-
arch/x86/events/intel/core.c | 6 +-
arch/x86/kernel/Makefile | 14 ++
arch/x86/mm/Makefile | 2 +
crypto/af_alg.c | 53 ++----
crypto/algif_aead.c | 100 ++---------
crypto/algif_skcipher.c | 6 +-
crypto/authencesn.c | 50 +++---
crypto/deflate.c | 11 +-
drivers/accel/qaic/qaic_control.c | 47 ++++-
drivers/acpi/riscv/rimt.c | 7 +
drivers/android/binder/page_range.rs | 8 +-
drivers/android/binder/rust_binder_main.rs | 2 +-
drivers/bluetooth/hci_h4.c | 3 -
drivers/comedi/drivers.c | 8 +
drivers/comedi/drivers/dt2815.c | 12 ++
drivers/comedi/drivers/me4000.c | 16 +-
drivers/comedi/drivers/me_daq.c | 35 ++--
drivers/comedi/drivers/ni_atmio16d.c | 3 +-
drivers/counter/rz-mtu3-cnt.c | 67 +++----
drivers/cpufreq/cpufreq_governor.c | 6 +-
drivers/crypto/caam/caamalg_qi2.c | 3 +-
drivers/crypto/caam/caamhash.c | 3 +-
drivers/crypto/tegra/tegra-se-aes.c | 11 +-
drivers/crypto/tegra/tegra-se-hash.c | 30 ++--
drivers/firmware/microchip/mpfs-auto-update.c | 10 +-
drivers/gpio/gpio-aspeed.c | 6 +-
drivers/gpio/gpio-mxc.c | 10 +-
drivers/gpio/gpiolib-cdev.c | 12 +-
drivers/gpio/gpiolib-sysfs.c | 14 +-
drivers/gpio/gpiolib.c | 175 +++++++++---------
drivers/gpio/gpiolib.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 7 +
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 +-
drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 3 +-
drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 +-
.../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 17 +-
.../display/dc/resource/dce100/dce100_resource.c | 5 +-
.../display/dc/resource/dce110/dce110_resource.c | 5 +-
.../display/dc/resource/dce112/dce112_resource.c | 5 +-
.../display/dc/resource/dce120/dce120_resource.c | 5 +-
.../amd/display/dc/resource/dce60/dce60_resource.c | 13 +-
.../amd/display/dc/resource/dce80/dce80_resource.c | 5 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 1 -
drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c | 1 -
.../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 33 +++-
.../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 33 +++-
drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1 -
drivers/gpu/drm/ast/ast_dp501.c | 2 +-
drivers/gpu/drm/drm_file.c | 5 +-
drivers/gpu/drm/drm_ioc32.c | 2 +
drivers/gpu/drm/drm_mode_config.c | 9 +-
drivers/gpu/drm/i915/display/g4x_dp.c | 2 +-
drivers/gpu/drm/i915/display/icl_dsi.c | 4 +-
drivers/gpu/drm/sysfb/efidrm.c | 46 +++--
drivers/gpu/drm/xe/xe_pxp.c | 11 +-
drivers/hid/hid-appletb-kbd.c | 5 +-
drivers/hid/hid-core.c | 7 +-
drivers/hid/hid-logitech-hidpp.c | 6 +-
drivers/hid/hid-multitouch.c | 7 +
drivers/hid/wacom_wac.c | 10 ++
drivers/hwmon/asus-ec-sensors.c | 7 +-
drivers/hwmon/occ/common.c | 19 +-
drivers/hwmon/pmbus/ltc4286.c | 1 +
drivers/hwmon/pmbus/pxe1610.c | 5 +-
drivers/hwmon/pmbus/tps53679.c | 10 +-
drivers/i2c/busses/Kconfig | 2 +
drivers/i2c/busses/i2c-tegra.c | 5 +-
drivers/iio/accel/adxl313_core.c | 2 +
drivers/iio/accel/adxl355_core.c | 2 +-
drivers/iio/accel/adxl380.c | 2 +-
drivers/iio/adc/ade9000.c | 12 +-
drivers/iio/adc/aspeed_adc.c | 1 +
drivers/iio/adc/ti-adc161s626.c | 41 +++--
drivers/iio/adc/ti-ads1119.c | 11 +-
drivers/iio/adc/ti-ads7950.c | 8 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/mpu3050-core.c | 32 ++--
drivers/iio/imu/adis16550.c | 8 +-
drivers/iio/imu/bmi160/bmi160_core.c | 15 +-
drivers/iio/imu/bno055/bno055.c | 2 +-
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4 +
drivers/iio/light/vcnl4035.c | 18 +-
drivers/iio/light/veml6070.c | 4 +-
drivers/iio/orientation/hid-sensor-rotation.c | 24 ++-
drivers/input/joystick/xpad.c | 5 +
drivers/input/mouse/bcm5974.c | 42 ++++-
drivers/input/rmi4/rmi_f54.c | 4 +-
drivers/input/serio/i8042-acpipnpio.h | 7 +
drivers/misc/fastrpc.c | 5 +-
drivers/misc/mei/hw-me.c | 14 +-
drivers/net/bonding/bond_main.c | 2 +-
drivers/net/ethernet/airoha/airoha_eth.c | 18 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 10 +-
drivers/net/ethernet/broadcom/tg3.c | 13 +-
drivers/net/ethernet/cadence/macb_pci.c | 10 +-
drivers/net/ethernet/faraday/ftgmac100.c | 28 ++-
drivers/net/ethernet/freescale/enetc/enetc.c | 13 +-
.../net/ethernet/freescale/enetc/enetc_ethtool.c | 10 +-
drivers/net/ethernet/freescale/fec_ptp.c | 3 -
drivers/net/ethernet/intel/ice/ice_ethtool.c | 11 +-
drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 21 ++-
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 +-
.../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 2 +
drivers/net/ethernet/mellanox/mlx5/core/fw.c | 49 ++++--
.../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 +
.../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +-
drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 6 +-
drivers/net/ethernet/meta/fbnic/fbnic_txrx.h | 2 +-
drivers/net/ethernet/microsoft/mana/mana_en.c | 13 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 14 +-
drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 +-
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 9 +-
drivers/net/phy/sfp.c | 7 +-
drivers/net/virtio_net.c | 20 +--
drivers/net/vxlan/vxlan_core.c | 6 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 15 +-
drivers/net/wireless/intel/iwlwifi/cfg/rf-fm.c | 1 +
drivers/net/wireless/intel/iwlwifi/cfg/rf-wh.c | 24 +++
drivers/net/wireless/intel/iwlwifi/fw/acpi.h | 1 +
drivers/net/wireless/intel/iwlwifi/fw/api/cmdhdr.h | 4 +-
drivers/net/wireless/intel/iwlwifi/fw/api/coex.h | 4 +-
.../net/wireless/intel/iwlwifi/fw/api/commands.h | 5 +
.../net/wireless/intel/iwlwifi/fw/api/dbg-tlv.h | 14 +-
drivers/net/wireless/intel/iwlwifi/fw/api/debug.h | 2 +-
.../net/wireless/intel/iwlwifi/fw/api/location.h | 8 +-
drivers/net/wireless/intel/iwlwifi/fw/api/power.h | 5 +-
drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 88 +++++----
drivers/net/wireless/intel/iwlwifi/fw/api/sta.h | 6 +-
drivers/net/wireless/intel/iwlwifi/fw/api/stats.h | 39 ++--
drivers/net/wireless/intel/iwlwifi/fw/api/tx.h | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/error-dump.h | 4 +-
drivers/net/wireless/intel/iwlwifi/fw/file.h | 74 ++++++--
drivers/net/wireless/intel/iwlwifi/fw/img.h | 12 +-
drivers/net/wireless/intel/iwlwifi/fw/runtime.h | 22 ++-
drivers/net/wireless/intel/iwlwifi/iwl-config.h | 8 +-
drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.h | 4 +-
drivers/net/wireless/intel/iwlwifi/iwl-drv.h | 3 +-
drivers/net/wireless/intel/iwlwifi/iwl-modparams.h | 4 +-
drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c | 2 +-
drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.h | 17 +-
drivers/net/wireless/intel/iwlwifi/iwl-op-mode.h | 1 +
drivers/net/wireless/intel/iwlwifi/iwl-trans.h | 6 +-
drivers/net/wireless/intel/iwlwifi/mld/iface.c | 101 +++++++----
drivers/net/wireless/intel/iwlwifi/mld/mac80211.c | 19 ++
drivers/net/wireless/intel/iwlwifi/mld/mld.c | 1 +
drivers/net/wireless/intel/iwlwifi/mld/mlo.c | 4 +-
drivers/net/wireless/intel/iwlwifi/mld/notif.c | 5 +
drivers/net/wireless/intel/iwlwifi/mld/scan.c | 30 +++-
drivers/net/wireless/intel/iwlwifi/mld/scan.h | 9 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 3 +-
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 5 +
drivers/net/wireless/microchip/wilc1000/hif.c | 2 +-
drivers/net/wireless/virtual/virt_wifi.c | 1 -
drivers/nfc/pn533/uart.c | 3 +
drivers/nvmem/imx-ocotp-ele.c | 1 +
drivers/nvmem/imx-ocotp.c | 1 +
drivers/nvmem/zynqmp_nvmem.c | 8 +-
drivers/s390/crypto/zcrypt_msgtype6.c | 32 ++--
drivers/spi/spi-amlogic-spifc-a4.c | 12 ++
drivers/spi/spi-cadence-quadspi.c | 17 +-
drivers/spi/spi-geni-qcom.c | 9 +-
drivers/spi/spi-stm32-ospi.c | 9 +-
drivers/staging/gpib/Kconfig | 1 +
drivers/staging/gpib/common/gpib_os.c | 96 +++++++---
drivers/staging/gpib/include/gpib_types.h | 8 +
drivers/staging/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c | 4 +-
drivers/target/loopback/tcm_loop.c | 52 +++++-
drivers/target/target_core_file.c | 2 +-
drivers/thermal/thermal_core.c | 32 +++-
drivers/thunderbolt/nhi.c | 2 +-
drivers/tty/vt/vt.c | 18 ++
drivers/usb/cdns3/cdns3-gadget.c | 4 +
drivers/usb/class/cdc-acm.c | 9 +
drivers/usb/class/cdc-acm.h | 1 +
drivers/usb/class/usbtmc.c | 3 +
drivers/usb/common/ulpi.c | 5 +-
drivers/usb/core/driver.c | 23 ++-
drivers/usb/core/offload.c | 102 ++++++-----
drivers/usb/core/phy.c | 12 +-
drivers/usb/core/quirks.c | 3 +
drivers/usb/core/usb.c | 1 +
drivers/usb/dwc2/gadget.c | 2 +
drivers/usb/gadget/function/f_ecm.c | 35 ++--
drivers/usb/gadget/function/f_eem.c | 59 ++++---
drivers/usb/gadget/function/f_hid.c | 19 +-
drivers/usb/gadget/function/f_rndis.c | 49 ++++--
drivers/usb/gadget/function/f_subset.c | 63 ++++---
drivers/usb/gadget/function/f_uac1_legacy.c | 47 +++--
drivers/usb/gadget/function/f_uvc.c | 39 +++-
drivers/usb/gadget/function/u_ecm.h | 21 ++-
drivers/usb/gadget/function/u_eem.h | 21 ++-
drivers/usb/gadget/function/u_ether.c | 16 +-
drivers/usb/gadget/function/u_gether.h | 22 ++-
drivers/usb/gadget/function/u_rndis.h | 31 +++-
drivers/usb/gadget/function/uvc.h | 3 +
drivers/usb/gadget/function/uvc_v4l2.c | 5 +-
drivers/usb/gadget/udc/dummy_hcd.c | 42 +++--
drivers/usb/host/ehci-brcm.c | 4 +-
drivers/usb/host/xhci-sideband.c | 18 +-
drivers/usb/misc/usbio.c | 7 +-
drivers/usb/serial/io_edgeport.c | 3 +
drivers/usb/serial/io_usbvend.h | 1 +
drivers/usb/serial/option.c | 4 +
drivers/usb/typec/altmodes/thunderbolt.c | 44 ++---
drivers/usb/typec/ucsi/ucsi.c | 9 +-
fs/btrfs/ioctl.c | 12 +-
fs/btrfs/tree-checker.c | 17 ++
fs/btrfs/zoned.c | 6 +-
fs/smb/client/cifsglob.h | 6 +
fs/smb/client/file.c | 1 -
fs/smb/client/inode.c | 21 +--
fs/smb/client/smb2ops.c | 20 +--
fs/smb/server/smb2pdu.c | 121 +++++++++----
fs/smb/server/smbacl.c | 43 +++++
fs/smb/server/smbacl.h | 2 +
include/crypto/if_alg.h | 5 +-
include/linux/iio/iio.h | 12 ++
include/linux/netdevice.h | 3 +
include/linux/netfilter/ipset/ip_set.h | 2 +-
include/linux/skbuff.h | 1 +
include/linux/usb.h | 10 +-
include/net/netfilter/nf_conntrack_expect.h | 20 ++-
io_uring/io_uring.c | 62 ++++---
io_uring/io_uring.h | 34 +++-
io_uring/net.c | 4 +
io_uring/rsrc.c | 4 +
kernel/bpf/verifier.c | 10 +-
kernel/kallsyms.c | 64 +++++--
kernel/sched/ext.c | 70 +++++---
kernel/sched/ext_idle.c | 33 ++--
kernel/sched/fair.c | 10 +-
kernel/trace/bpf_trace.c | 4 +
lib/crypto/chacha-block-generic.c | 4 +
mm/gup.c | 10 +-
mm/hmm.c | 2 +-
mm/memory.c | 22 ++-
mm/mprotect.c | 2 +-
mm/sparse-vmemmap.c | 2 +-
mm/vmscan.c | 2 +-
net/atm/lec.c | 72 +++++---
net/atm/lec.h | 2 +-
net/bluetooth/hci_conn.c | 8 +-
net/bluetooth/hci_event.c | 33 ++--
net/bluetooth/hci_sync.c | 14 +-
net/bluetooth/mgmt.c | 17 +-
net/bluetooth/sco.c | 30 +++-
net/bluetooth/smp.c | 11 +-
net/bridge/br_arp_nd_proxy.c | 18 +-
net/core/dev.c | 38 +++-
net/core/skmsg.c | 13 +-
net/hsr/hsr_device.c | 32 ++--
net/ipv6/addrconf.c | 6 +-
net/ipv6/datagram.c | 10 ++
net/ipv6/icmp.c | 3 +
net/ipv6/ioam6.c | 4 +-
net/ipv6/ip6_flowlabel.c | 5 -
net/ipv6/ip6_tunnel.c | 5 +
net/ipv6/ndisc.c | 3 +
net/mac80211/tdls.c | 2 +-
net/mptcp/protocol.c | 30 ++--
net/netfilter/ipset/ip_set_core.c | 4 +-
net/netfilter/ipset/ip_set_hash_gen.h | 2 +-
net/netfilter/ipset/ip_set_list_set.c | 4 +-
net/netfilter/nf_conntrack_broadcast.c | 8 +-
net/netfilter/nf_conntrack_expect.c | 25 ++-
net/netfilter/nf_conntrack_h323_main.c | 12 +-
net/netfilter/nf_conntrack_helper.c | 13 +-
net/netfilter/nf_conntrack_netlink.c | 87 +++------
net/netfilter/nf_conntrack_sip.c | 4 +-
net/netfilter/nf_flow_table_offload.c | 196 ++++++++++++++-------
net/netfilter/nf_tables_api.c | 7 +-
net/netfilter/nfnetlink_log.c | 2 +-
net/netfilter/x_tables.c | 23 +++
net/netfilter/xt_cgroup.c | 6 +
net/netfilter/xt_rateest.c | 5 +
net/qrtr/af_qrtr.c | 31 ++--
net/rds/ib_rdma.c | 7 +-
net/sched/cls_api.c | 1 +
net/sched/cls_flow.c | 10 +-
net/sched/cls_fw.c | 14 +-
net/sched/sch_hfsc.c | 4 +-
net/sched/sch_netem.c | 5 +-
net/x25/x25_in.c | 9 +-
net/x25/x25_subr.c | 1 +
sound/hda/codecs/realtek/alc269.c | 2 +
sound/pci/ctxfi/ctdaio.c | 1 +
sound/soc/cirrus/ep93xx-i2s.c | 34 ++--
sound/soc/intel/boards/Kconfig | 2 -
sound/soc/qcom/sdw.c | 11 ++
sound/usb/caiaq/device.c | 2 +-
sound/usb/qcom/qc_audio_offload.c | 10 +-
sound/usb/quirks.c | 2 +
tools/objtool/check.c | 5 +-
308 files changed, 3160 insertions(+), 1629 deletions(-)
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PATCH 6.18 000/276] 6.18.22-rc2 review
2026-04-09 9:27 [PATCH 6.18 000/276] 6.18.22-rc2 review Greg Kroah-Hartman
@ 2026-04-09 15:53 ` Miguel Ojeda
2026-04-09 17:15 ` Jon Hunter
` (3 subsequent siblings)
4 siblings, 0 replies; 6+ messages in thread
From: Miguel Ojeda @ 2026-04-09 15:53 UTC (permalink / raw)
To: gregkh
Cc: achill, akpm, broonie, conor, f.fainelli, hargar, jonathanh,
linux-kernel, linux, lkft-triage, patches, patches, pavel,
rwarsow, shuah, sr, stable, sudipm.mukherjee, torvalds,
Miguel Ojeda
On Thu, 09 Apr 2026 11:27:43 +0200 Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 6.18.22 release.
> There are 276 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sat, 11 Apr 2026 09:26:30 +0000.
> Anything received after that time might be too late.
Boot-tested under QEMU for Rust x86_64, arm64 and riscv64; built-tested
for loongarch64:
Tested-by: Miguel Ojeda <ojeda@kernel.org>
(arm 32-bit seems to build-test fine as well. Same for UML x86_64 on
a non-debug configuration.)
Thanks!
Cheers,
Miguel
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PATCH 6.18 000/276] 6.18.22-rc2 review
2026-04-09 9:27 [PATCH 6.18 000/276] 6.18.22-rc2 review Greg Kroah-Hartman
2026-04-09 15:53 ` Miguel Ojeda
@ 2026-04-09 17:15 ` Jon Hunter
2026-04-09 17:39 ` Peter Schneider
` (2 subsequent siblings)
4 siblings, 0 replies; 6+ messages in thread
From: Jon Hunter @ 2026-04-09 17:15 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr,
linux-tegra, stable
On Thu, 09 Apr 2026 11:27:43 +0200, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.18.22 release.
> There are 276 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sat, 11 Apr 2026 09:26:30 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.22-rc2.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
All tests passing for Tegra ...
Test results for stable-v6.18:
11 builds: 11 pass, 0 fail
28 boots: 28 pass, 0 fail
120 tests: 120 pass, 0 fail
Linux version: 6.18.22-rc2-ga63e494538a2
Boards tested: tegra124-jetson-tk1, tegra186-p2771-0000,
tegra186-p3509-0000+p3636-0001, tegra194-p2972-0000,
tegra194-p3509-0000+p3668-0000, tegra20-ventana,
tegra210-p2371-2180, tegra210-p3450-0000,
tegra234-p3737-0000+p3701-0000,
tegra234-p3768-0000+p3767-0005, tegra30-cardhu-a04
Tested-by: Jon Hunter <jonathanh@nvidia.com>
Jon
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PATCH 6.18 000/276] 6.18.22-rc2 review
2026-04-09 9:27 [PATCH 6.18 000/276] 6.18.22-rc2 review Greg Kroah-Hartman
2026-04-09 15:53 ` Miguel Ojeda
2026-04-09 17:15 ` Jon Hunter
@ 2026-04-09 17:39 ` Peter Schneider
2026-04-09 18:26 ` Florian Fainelli
2026-04-09 22:17 ` Mark Brown
4 siblings, 0 replies; 6+ messages in thread
From: Peter Schneider @ 2026-04-09 17:39 UTC (permalink / raw)
To: Greg Kroah-Hartman, stable
Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee,
rwarsow, conor, hargar, broonie, achill, sr
Am 09.04.2026 um 11:27 schrieb Greg Kroah-Hartman:
> This is the start of the stable review cycle for the 6.18.22 release.
> There are 276 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
Builds, boots and works on my 2-socket Ivy Bridge Xeon E5-2697 v2 server. No dmesg oddities or regressions found.
Tested-by: Peter Schneider <pschneider1968@googlemail.com>
Beste Grüße,
Peter Schneider
--
Climb the mountain not to plant your flag, but to embrace the challenge,
enjoy the air and behold the view. Climb it so you can see the world,
not so the world can see you. -- David McCullough Jr.
OpenPGP: 0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244
Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc
https://keys.mailvelope.com/pks/lookup?op=get&search=pschneider1968@googlemail.com
https://keys.mailvelope.com/pks/lookup?op=get&search=pschneider1968@gmail.com
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PATCH 6.18 000/276] 6.18.22-rc2 review
2026-04-09 9:27 [PATCH 6.18 000/276] 6.18.22-rc2 review Greg Kroah-Hartman
` (2 preceding siblings ...)
2026-04-09 17:39 ` Peter Schneider
@ 2026-04-09 18:26 ` Florian Fainelli
2026-04-09 22:17 ` Mark Brown
4 siblings, 0 replies; 6+ messages in thread
From: Florian Fainelli @ 2026-04-09 18:26 UTC (permalink / raw)
To: Greg Kroah-Hartman, stable
Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, sudipm.mukherjee, rwarsow, conor,
hargar, broonie, achill, sr
On 4/9/26 02:27, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.18.22 release.
> There are 276 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sat, 11 Apr 2026 09:26:30 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.22-rc2.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on
BMIPS_GENERIC:
Tested-by: Florian Fainelli <florian.fainelli@broadcom.com>
--
Florian
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PATCH 6.18 000/276] 6.18.22-rc2 review
2026-04-09 9:27 [PATCH 6.18 000/276] 6.18.22-rc2 review Greg Kroah-Hartman
` (3 preceding siblings ...)
2026-04-09 18:26 ` Florian Fainelli
@ 2026-04-09 22:17 ` Mark Brown
4 siblings, 0 replies; 6+ messages in thread
From: Mark Brown @ 2026-04-09 22:17 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: stable, patches, linux-kernel, torvalds, akpm, linux, shuah,
patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, achill, sr
[-- Attachment #1: Type: text/plain, Size: 346 bytes --]
On Thu, Apr 09, 2026 at 11:27:43AM +0200, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.18.22 release.
> There are 276 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
Tested-by: Mark Brown <broonie@kernel.org>
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2026-04-09 22:17 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-04-09 9:27 [PATCH 6.18 000/276] 6.18.22-rc2 review Greg Kroah-Hartman
2026-04-09 15:53 ` Miguel Ojeda
2026-04-09 17:15 ` Jon Hunter
2026-04-09 17:39 ` Peter Schneider
2026-04-09 18:26 ` Florian Fainelli
2026-04-09 22:17 ` Mark Brown
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox