* [PATCH 5.15 000/843] 5.15.212-rc1 review
@ 2026-07-21 15:13 Greg Kroah-Hartman
2026-07-21 15:21 ` [PATCH 5.15 458/843] rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Greg Kroah-Hartman
` (3 more replies)
0 siblings, 4 replies; 5+ messages in thread
From: Greg Kroah-Hartman @ 2026-07-21 15:13 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
This is the start of the stable review cycle for the 5.15.212 release.
There are 843 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 23 Jul 2026 15:23:00 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.212-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.15.212-rc1
HyeongJun An <sammiee5311@gmail.com>
ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: fix timestamp clock period by using lower value
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Check UMP support for midi_version change
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Skip event type filtering for UMP events
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: invensense: fix odr switching to same value
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_mpu6050: fix frequency setting when chip is off
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Avoid confusion of aligned read size
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: L2CAP: Fix regressions caused by reusing ident
Marc Zyngier <maz@kernel.org>
KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
Zhan Xusheng <zhanxusheng1024@gmail.com>
posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
Wentao Liang <vulab@iscas.ac.cn>
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
Ricardo Robaina <rrobaina@redhat.com>
audit: fix potential integer overflow in audit_log_n_hex()
Ricardo Robaina <rrobaina@redhat.com>
audit: add audit_log_nf_skb helper function
Qu Wenruo <wqu@suse.com>
btrfs: fix incorrect buffered IO fallback for append direct writes
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - validate RSA CRT component lengths
Qu Wenruo <wqu@suse.com>
btrfs: fix false IO failure after falling back to buffered write
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - fix restarting state leak on allocation failure
Qu Wenruo <wqu@suse.com>
btrfs: do not trim a device which is not writeable
Neill Kapron <nkapron@google.com>
usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
Thorsten Blum <thorsten.blum@linux.dev>
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
Uwe Kleine-König <u.kleine-koenig@baylibre.com>
crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org>
crypto: atmel-sha204a - Mark OF related data as maybe unused
Tyler Baker <tyler.baker@oss.qualcomm.com>
usb: gadget: f_fs: initialize reset_work at allocation time
Andy Yan <andyshrk@163.com>
usb: typec: tcpm: Fix VDM type for Enter Mode commands
Mauricio Faria de Oliveira <mfo@igalia.com>
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
Fan Wu <fanwu01@zju.edu.cn>
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
gpio: pca953x: Make platform teardown callback return void
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
leds: lm3601x: Improve error reporting for problems during .remove()
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
leds: lm3697: Remove duplicated error reporting in .remove()
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
drm/i2c/sil164: Drop no-op remove function
Oliver Neukum <oneukum@suse.com>
usb: iowarrior: remove inherent race with minor number
Vlad Poenaru <vlad.wing@gmail.com>
bpf: Allow LPM map access from sleepable BPF programs
Andrii Nakryiko <andrii@kernel.org>
bpf: Consistently use bpf_rcu_lock_held() everywhere
Kumar Kartikeya Dwivedi <memxor@gmail.com>
bpf: Convert lpm_trie.c to rqspinlock
Zhao Zhang <zzhan461@ucr.edu>
bpf: Reject fragmented frames in devmap
Lorenzo Bianconi <lorenzo@kernel.org>
xdp: introduce flags field in xdp_buff/xdp_frame
Tristan Madani <tristan@talencesecurity.com>
hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
Viacheslav Dubeyko <slava@dubeyko.com>
hfs/hfsplus: prevent getting negative values of offset/length
Yousef Alhouseen <alhouseenyousef@gmail.com>
xfs: use null daddr for unset first bad log block
Jiapeng Chong <jiapeng.chong@linux.alibaba.com>
xfs: Remove dead code
Jiapeng Chong <jiapeng.chong@linux.alibaba.com>
xfs: Remove redundant assignment of mp
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_mid: Disable DMA for selected platforms
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
serial: 8250_mid: Remove 8250_pci usage
Manish Khadka <maskmemanish@gmail.com>
HID: appleir: fix UAF on pending key_up_timer in remove()
Thomas Gleixner <tglx@linutronix.de>
treewide: Switch/rename to timer_delete[_sync]()
Jann Horn <jannh@google.com>
proc: protect ptrace_may_access() with exec_update_lock (part 1)
Trung Nguyen <trungnh@cystack.net>
HID: multitouch: fix out-of-bounds bit access on mt_io_flags
Angela Czubak <aczubak@google.com>
HID: add haptics page defines
Jann Horn <jannh@google.com>
proc: protect ptrace_may_access() with exec_update_lock (FD links)
Christoph Hellwig <hch@lst.de>
proc: rename proc_setattr to proc_nochmod_setattr
Tyler Hicks (Microsoft) <code@tyhicks.com>
proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission operation
Thomas Weißschuh <linux@weissschuh.net>
proc: use generic setattr() for /proc/$PID/net
Lukas Wunner <lukas@wunner.de>
X.509: Fix validation of ASN.1 certificate header
Zide Chen <zide.chen@intel.com>
perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: track the connection owning a byte-range lock
DaeMyung Kang <charsyam@gmail.com>
ksmbd: centralize ksmbd_conn final release to plug transport leak
DaeMyung Kang <charsyam@gmail.com>
ksmbd: destroy async_ida in ksmbd_conn_free()
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
Zihan Xi <xizh2024@lzu.edu.cn>
smb: client: harden POSIX SID length parsing
Zihan Xi <xizh2024@lzu.edu.cn>
smb: client: use unaligned reads in parse_posix_ctxt()
Norbert Manthey <nmanthey@amazon.de>
smb: client: mask server-provided mode to 07777 in modefromsid
Michael Bommarito <michael.bommarito@gmail.com>
smb: client: resolve SWN tcon from live registrations
David Howells <dhowells@redhat.com>
cifs: Add tracing for the cifs_tcon struct refcounting
Haoxiang Li <haoxiang_li2024@163.com>
smb: client: Fix next buffer leak in receive_encrypted_standard()
Runyu Xiao <runyu.xiao@seu.edu.cn>
Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
Hyunwoo Kim <imv4bel@gmail.com>
Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: L2CAP: Fix not tracking outstanding TX ident
Florian Westphal <fw@strlen.de>
netfilter: ebtables: zero chainstack array
Qianfeng Rong <rongqianfeng@vivo.com>
netfilter: ebtables: Use vmalloc_array() to improve code
Runyu Xiao <runyu.xiao@seu.edu.cn>
gpio: sch: use raw_spinlock_t in the irq startup path
Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
gpio: sch: use new GPIO line value setter callbacks
Runyu Xiao <runyu.xiao@seu.edu.cn>
coresight: etb10: restore atomic_t for shared reading state
Marco Nenciarini <mnencia@kcore.it>
PCI: Skip Resizable BAR restore on read error
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Move Resizable BAR code to rebar.c
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Add kerneldoc for pci_resize_resource()
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Fix restoring BARs on BAR resize rollback path
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Free saved list without holding pci_bus_sem
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Prevent resource tree corruption when BAR resize fails
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
Nikolay Kulikov <nikolayof23@gmail.com>
staging: rtl8723bs: fix spaces around binary operators
William Hansen-Baird <william.hansen.baird@gmail.com>
staging: rtl8723bs: core: move constants to right side in comparison
Sevinj Aghayeva <sevinj.aghayeva@gmail.com>
staging: rtl8723bs: remove redundant braces in if statements
Sevinj Aghayeva <sevinj.aghayeva@gmail.com>
staging: rtl8723bs: Remove redundant else branches.
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: mediatek: Fix IRQ domain leak when port fails to enable
Christian Marangi <ansuelsmth@gmail.com>
PCI: mediatek: Convert bool to single quirks entry and bitmap
Jiri Slaby (SUSE) <jirislaby@kernel.org>
PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
Franziska Naepelt <franziska.naepelt@googlemail.com>
staging: rtl8723bs: Fix space issues
Franziska Naepelt <franziska.naepelt@googlemail.com>
staging: rtl8723bs: Fix indentation issues
Richard Zhu <hongxing.zhu@nxp.com>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
Shoichiro Miyamoto <shoichiro.miyamoto@gmail.com>
smb: client: restrict implied bcc[0] exemption to responses without data area
Enzo Matsumiya <ematsumiya@suse.de>
cifs: remove unused server parameter from calc_smb_size()
Enzo Matsumiya <ematsumiya@suse.de>
smb2: small refactor in smb2_check_message()
Jakob Koschel <jakobkoschel@gmail.com>
cifs: remove check of list iterator against head past the loop body
Ronnie Sahlberg <lsahlber@redhat.com>
cifs: Create a new shared file holding smb2 pdu definitions
Mahesh Vaidya <mahesh.vaidya@altera.com>
PCI: altera: Fix resource leaks on probe failure
Alex Williamson <alex.williamson@nvidia.com>
vfio/pci: Release the VGA arbiter client on register_device() failure
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: aoa: check snd_ctl_new1() return value
Herman van Hazendonk <github.com@herrie.org>
iio: common: st_sensors: honour channel endianness in read_axis_data
Alexander Lobakin <aleksander.lobakin@intel.com>
bitops: make BYTES_TO_BITS() treewide-available
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: stabilized timestamp in interrupt
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: invensense: fix timestamp glitches when switching frequency
Colin Ian King <colin.i.king@gmail.com>
iio: invensense: remove redundant initialization of variable period
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_mpu6050: use the common inv_sensors timestamp module
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: make invensense timestamp module generic
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: move inv_icm42600 timestamp module in common
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: make timestamp module chip independent
Zhang Lixu <lixu.zhang@intel.com>
iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
Runyu Xiao <runyu.xiao@seu.edu.cn>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
Jeremy Linton <jeremy.linton@arm.com>
ACPI: CPPC: Suppress UBSAN warning caused by field misuse
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: rawnand: fsl_ifc: return errors for failed page reads
Runyu Xiao <runyu.xiao@seu.edu.cn>
mmc: vub300: defer reset until cmd_mutex is unlocked
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: mchp23k256: use SPI match data for chip caps
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: onenand: samsung: report DMA completion timeouts
Rafael Beims <rafael.beims@toradex.com>
wifi: mwifiex: fix permanently busy scans after multiple roam iterations
Zhiling Zou <roxy520tt@gmail.com>
wifi: mac80211: free ack status frame on TX header build failure
Junrui Luo <moonafterrain@outlook.com>
powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()
Zhao Dongdong <zhaodongdong@kylinos.cn>
reset: sunxi: fix memory region leak on ioremap failure
Robby Cai <robby.cai@nxp.com>
reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ
Julian Anastasov <ja@ssi.bg>
ipvs: fix more places with wrong ipv6 transport offsets
Maoyi Xie <maoyixie.tju@gmail.com>
memstick: ms_block: reject a card that reports too many blocks
James Raphael Tiovalen <jamestiotio@gmail.com>
macsec: fix promiscuity refcount leak in macsec_dev_open()
Xuanqiang Luo <luoxuanqiang@kylinos.cn>
llc: fix SAP refcount leak when creating incoming sockets
Laxman Acharya Padhya <acharyalaxman8848@gmail.com>
Bluetooth: btrtl: validate firmware patch bounds
Asim Viladi Oglu Manizada <manizada@pm.me>
net: openvswitch: reject oversized nested action attrs
Abhishek Ojha <Abhishek.ojha@savoirfairelinux.com>
regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
Dawei Feng <dawei.feng@seu.edu.cn>
wifi: mac80211: fix memory leak in ieee80211_register_hw()
Runyu Xiao <runyu.xiao@seu.edu.cn>
wifi: rt2x00: avoid full teardown before work setup in probe
Farhad Alemi <farhad.alemi@berkeley.edu>
cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
Tao Liu <ltao@redhat.com>
riscv: Prevent NULL pointer dereference in machine_kexec_prepare()
Michael Bommarito <michael.bommarito@gmail.com>
drbd: reject data replies with an out-of-range payload size
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: use parsed transport offset in SCTP state lookup
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
llc: fix SAP refcount leak in llc_ui_autobind()
Yousef Alhouseen <alhouseenyousef@gmail.com>
mac802154: remove interfaces with RCU list deletion
Gerald Schaefer <gerald.schaefer@linux.ibm.com>
s390/monwriter: Reject buffer reuse with different data length
HyeongJun An <sammiee5311@gmail.com>
hwmon: (asus_atk0110) Check package count before accessing element
Wentao Liang <vulab@iscas.ac.cn>
ata: pata_pxa: Fix DMA channel leak on probe error
Bryam Vargas <hexlabsecurity@proton.me>
orangefs: keep the readdir entry size 64-bit in fill_from_part()
Masami Hiramatsu (Google) <mhiramat@kernel.org>
tracing/probes: Fix double addition of offset for @+FOFFSET
Bryam Vargas <hexlabsecurity@proton.me>
net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked
Haoxiang Li <haoxiang_li2024@163.com>
fsl/fman: Free init resources on KeyGen failure in fman_init()
Haoxiang Li <haoxiang_li2024@163.com>
net: liquidio: fix BAR resource leak on PF number failure
Pengpeng Hou <pengpeng@iscas.ac.cn>
hwmon: (w83793) remove vrm sysfs file on probe failure
Pengpeng Hou <pengpeng@iscas.ac.cn>
hwmon: (w83627hf) remove VID sysfs files on error and remove
Abdun Nihaal <nihaal@cse.iitm.ac.in>
bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
Sven Eckelmann <sven@narfation.org>
batman-adv: clean untagged VLAN on netdev registration failure
Sven Eckelmann <sven@narfation.org>
batman-adv: ensure minimal ethernet header on TX
Sven Eckelmann <sven@narfation.org>
batman-adv: retrieve ethhdr after potential skb realloc on RX
Shivam Kumar <kumar.shivam43666@gmail.com>
nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
Shitalkumar Gandhi <shital.gandhi45@gmail.com>
ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
Shitalkumar Gandhi <shital.gandhi45@gmail.com>
ieee802154: ca8210: fix cas_ctl leak on spi_async failure
Michael Bommarito <michael.bommarito@gmail.com>
ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation
Michael Bommarito <michael.bommarito@gmail.com>
ieee802154: admin-gate legacy LLSEC dump operations
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
Dawei Feng <dawei.feng@seu.edu.cn>
net: ena: clean up XDP TX queues when regular TX setup fails
Maoyi Xie <maoyixie.tju@gmail.com>
net: sit: require CAP_NET_ADMIN in the device netns for changelink
Andreas Kemnade <andreas@kemnade.info>
gpios: palmas: add .get_direction() op
Bradley Morgan <include@grrlz.net>
cpu: hotplug: Bound hotplug states sysfs output
Bradley Morgan <include@grrlz.net>
cpu: hotplug: Preserve per instance callback errors
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix type confusion in CDC union descriptor parsing
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix DMA mapping violation in line setup
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - add response length checks
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - validate control endpoint type
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - release data interface on disconnect
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix use-after-free and double-free in disconnect
Haoxiang Li <haoxiang_li2024@163.com>
scsi: elx: efct: Fix I/O leak on unsupported additional CDB
WenTao Liang <vulab@iscas.ac.cn>
scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
Bryam Vargas <hexlabsecurity@proton.me>
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
Bryam Vargas <hexlabsecurity@proton.me>
scsi: target: Bound PR-OUT TransportID parsing to the received buffer
Michael Bommarito <michael.bommarito@gmail.com>
scsi: xen: scsiback: Free unsubmitted command instead of double-putting it
Michael Bommarito <michael.bommarito@gmail.com>
scsi: xen: scsiback: Free the command tag on the TMR submit-failure path
Xu Rao <raoxu@uniontech.com>
scsi: sg: Report request-table problems when any status is set
Haoxiang Li <haoxiang_li2024@163.com>
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
Mikulas Patocka <mpatocka@redhat.com>
dm-verity: increase sprintf buffer size
Mikulas Patocka <mpatocka@redhat.com>
dm_early_create: fix freeing used table on dm_resume failure
Mikulas Patocka <mpatocka@redhat.com>
dm-stats: fix merge accounting
Mikulas Patocka <mpatocka@redhat.com>
dm-stats: fix dm_jiffies_to_msec64
Benjamin Marzinski <bmarzins@redhat.com>
dm-log: fix a bitset_size overflow on 32bit machines
Mikulas Patocka <mpatocka@redhat.com>
dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
Samuel Moelius <sam.moelius@trailofbits.com>
dm era: fix out-of-bounds memory access for non-zero start sector
Ming-Hung Tsai <mtsai@redhat.com>
dm thin metadata: fix metadata snapshot consistency on commit failure
Genjian Zhang <zhanggenjian@kylinos.cn>
dm thin metadata: fix superblock refcount leak on snapshot shadow failure
Haoxiang Li <haoxiang_li2024@163.com>
net: sparx5: unregister blocking notifier on init failure
Oliver Hartkopp <socketcan@hartkopp.net>
can: bcm: add missing rcu list annotations and operations
Oliver Hartkopp <socketcan@hartkopp.net>
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
Oliver Hartkopp <socketcan@hartkopp.net>
can: isotp: use unconditional synchronize_rcu() in isotp_release()
Bryam Vargas <hexlabsecurity@proton.me>
nvmet-rdma: handle inline data with a nonzero offset
Weiming Shi <bestswngs@gmail.com>
sctp: validate STALE_COOKIE cause length before reading staleness
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
spi: uniphier: Fix completion initialization order before devm_request_irq()
Wang Yan <wangyan01@kylinos.cn>
time: Fix off-by-one in compat settimeofday() usec validation
Jaewon Yang <yong010301@gmail.com>
tpm: Make the TPM character devices non-seekable
Thorsten Blum <thorsten.blum@linux.dev>
tpm: fix event_size output in tpm1_binary_bios_measurements_show
Maoyi Xie <maoyixie.tju@gmail.com>
xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink
Sanman Pradhan <psanman@juniper.net>
xfrm: use compat translator only for u64 alignment mismatch
Wentao Liang <vulab@iscas.ac.cn>
xen/gntdev: fix error handling in ioctl
Xuanqiang Luo <luoxuanqiang@kylinos.cn>
i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
Roman Vivchar <rva333@protonmail.com>
i2c: mediatek: fix WRRD for SoCs without auto_restart option
Joshua Crofts <joshua.crofts1@gmail.com>
hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig
Bhargav Joshi <j.bhargav.u@gmail.com>
irqchip/crossbar: Use correct index in crossbar_domain_free()
Florian Fuchs <fuchsfl@gmail.com>
mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
Michael Bommarito <michael.bommarito@gmail.com>
ocfs2: reject non-inline dinodes with i_size and zero i_clusters
Michael Bommarito <michael.bommarito@gmail.com>
ocfs2: reject dinodes whose i_rdev disagrees with the file type
Michael Bommarito <michael.bommarito@gmail.com>
ocfs2: reject dinodes with non-canonical i_mode type
Ian Bridges <icb@fastmail.org>
ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
Kyle Zeng <kylebot@openai.com>
ocfs2: avoid moving extents to occupied clusters
Arseniy Krasnov <avkrasnov@rulkc.org>
mtd: rawnand: fix condition in 'nand_select_target()'
Vasiliy Kovalev <kovalev@altlinux.org>
net/9p: fix infinite loop in p9_client_rpc on fatal signal
Bastien Curutchet <bastien.curutchet@bootlin.com>
mtd: rawnand: pl353: fix probe resource allocation
Tristan Madani <tristan@talencesecurity.com>
ocfs2: use kzalloc for quota recovery bitmap allocation
Martin Wilck <martin.wilck@suse.com>
scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
Ruoyu Wang <ruoyuw560@gmail.com>
mtd: slram: remove failed entries from the device list
Krzysztof Wilczyński <kwilczynski@kernel.org>
proc: only bump parent nlink when registering directories
Aaron Tomlin <atomlin@atomlin.com>
mips: sched: Fix CPUMASK_OFFSTACK memory corruption
WenTao Liang <vulab@iscas.ac.cn>
power: supply: charger-manager: fix refcount leak in is_full_charged()
Tristan Madani <tristan@talencesecurity.com>
ntfs3: fix out-of-bounds read in decompress_lznt
Michael Bommarito <michael.bommarito@gmail.com>
ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
Michael Bommarito <michael.bommarito@gmail.com>
ntfs3: cap RESTART_TABLE free-chain walker at rt->used
Michael Bommarito <michael.bommarito@gmail.com>
fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
Michael Bommarito <michael.bommarito@gmail.com>
fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: validate lcns_follow in log_replay conversion
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: bound attr_off in UpdateResidentValue against data_off
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: bound DeleteIndexEntryAllocation memmove length
Zhan Xusheng <zhanxusheng1024@gmail.com>
fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
Johan Hovold <johan@kernel.org>
MIPS: ip22-gio: fix device reference leak in probe
Johan Hovold <johan@kernel.org>
MIPS: ip22-gio: fix kfree() of static object
Johan Hovold <johan@kernel.org>
MIPS: ip22-gio: fix gio device memory leak
Chuck Lever <chuck.lever@oracle.com>
lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
Chuck Lever <chuck.lever@oracle.com>
lockd: Plug nlm_file leak when nlm_do_fopen() fails
Abdun Nihaal <nihaal@cse.iitm.ac.in>
nvdimm/btt: Free arena sub-allocations on discover_arenas() error path
Abdun Nihaal <nihaal@cse.iitm.ac.in>
nvdimm/btt: Free arenas on btt_init() error paths
Junrui Luo <moonafterrain@outlook.com>
jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()
Pauli Virtanen <pav@iki.fi>
Bluetooth: SCO: hold sk properly in sco_conn_ready
Pauli Virtanen <pav@iki.fi>
Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready
Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
mfd: tps6586x: Fix OF node refcount
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: prevent TVLV OOB check overflow
Sven Eckelmann <sven@narfation.org>
batman-adv: frag: fix primary_if leak on failed linearization
Sven Eckelmann <sven@narfation.org>
batman-adv: frag: free unfragmentable packet
Sven Eckelmann <sven@narfation.org>
batman-adv: fix VLAN priority offset
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: avoid request storms during pending request
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: fix tie-break for candidate selection
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: ensure accessible eth_hdr proto field
Sven Eckelmann <sven@narfation.org>
batman-adv: bla: reacquire gw address after skb realloc
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: acquire ARP hw source only after skb realloc
Sven Eckelmann <sven@narfation.org>
batman-adv: access unicast_ttvn skb->data only after skb realloc
Sven Eckelmann <sven@narfation.org>
batman-adv: gw: acquire ethernet header only after skb realloc
Thorsten Blum <thorsten.blum@linux.dev>
x86/boot: Reject too long acpi_rsdp= values
Thorsten Blum <thorsten.blum@linux.dev>
x86/boot: Validate console=uart8250 baud rate to fix early boot hang
Guangshuo Li <lgs201920130244@gmail.com>
mfd: sm501: Fix reference leak on failed device registration
Armin Wolf <W_Armin@gmx.de>
leds: uleds: Fix potential buffer overread
Wang Jun <1742789905@qq.com>
soc: fsl: qe: panic on ioremap() failure in qe_reset()
Siddharth Vadapalli <s-vadapalli@ti.com>
soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy
Guangshuo Li <lgs201920130244@gmail.com>
gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path
Xiang Mei (Microsoft) <xmei5@asu.edu>
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_nat: reject unsupported target families
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
netfilter: nf_conncount: fix zone comparison in tuple dedup
Xiang Mei <xmei5@asu.edu>
netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
Florian Westphal <fw@strlen.de>
netfilter: nf_nat_sip: reload possible stale data pointer
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_cluster: reject template conntracks in hash match
David Carlier <devnexen@gmail.com>
netfilter: nfnl_cthelper: apply per-class values when updating policies
Muhammad Bilal <meatuni001@gmail.com>
netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: tridentfb: fix potential memory leak in trident_pci_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: s3fb: fix potential memory leak in s3_pci_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: i740fb: fix potential memory leak in i740fb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: radeon: fix potential memory leak in radeonfb_pci_register()
Li RongQing <lirongqing@baidu.com>
fbdev: sm712: Fix operator precedence in big_swap macro
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: hecubafb: fix potential memory leak in hecubafb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: metronomefb: fix potential memory leak in metronomefb_probe()
Hyunwoo Kim <imv4bel@gmail.com>
KVM: arm64: vgic: Check the interrupt is still ours before migrating it
Nickolay Goppen <setotau@mainlining.org>
arm64: dts: qcom: sdm630: describe adsp_mem region properly
Yong Wang <edragain@163.com>
net: ife: require ETH_HLEN to be pullable in ife_decode()
Zhengchuan Liang <zcliangcn@gmail.com>
net: atm: reject out-of-range traffic classes in QoS validation
Michael Bommarito <michael.bommarito@gmail.com>
net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
Zhang Tianci <zhangtianci.1997@bytedance.com>
vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
Wentao Liang <vulab@iscas.ac.cn>
mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
Guangshuo Li <lgs201920130244@gmail.com>
smb: client: fix overflow in passthrough ioctl bounds check
Li RongQing <lirongqing@baidu.com>
net/mlx5: Fix L3 tunnel entropy refcount leak
Timur Tabi <ttabi@nvidia.com>
regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
Douglas Anderson <dianders@chromium.org>
regulator: core: Make regulator_lock_two() logic easier to follow
Cao Guanghui <caoguanghui@kylinos.cn>
dm era: fix NULL pointer dereference in metadata_open()
Julian Anastasov <ja@ssi.bg>
ipvs: ensure inner headers in ICMP errors are in headroom
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: use parsed transport offset in TCP state lookup
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: pass parsed transport offset to state handlers
Eric Dumazet <edumazet@google.com>
ipv6: mcast: Fix potential UAF in MLD delayed work
Kuniyuki Iwashima <kuniyu@google.com>
ipv6: mcast: Replace locking comments with lockdep annotations.
Suman Ghosh <sumang@marvell.com>
octeontx2-pf: check DMAC extraction support before filtering
Suman Ghosh <sumang@marvell.com>
octeontx2-pf: Add additional checks while configuring ucast/bcast/mcast rules
Suman Ghosh <sumang@marvell.com>
octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support
Ratheesh Kannoth <rkannoth@marvell.com>
octeontx2-af: Drop rules for NPC MCAM
Ratheesh Kannoth <rkannoth@marvell.com>
octeontx2-af: FLR handler for exact match table.
Ratheesh Kannoth <rkannoth@marvell.com>
octeontx2-af: devlink configuration support
Ratheesh Kannoth <rkannoth@marvell.com>
octeontx2-af: Exact match scan from kex profile
Ratheesh Kannoth <rkannoth@marvell.com>
octeontx2-af: Exact match support
Ratheesh Kannoth <rkannoth@marvell.com>
octeontx2-af: Use hashed field in MCAM key
Rakesh Babu <rsaladi2@marvell.com>
octeontx2-af: debugfs: Add channel and channel mask.
Samuel Moelius <sam.moelius@trailofbits.com>
net/sched: cake: reject overhead values that underflow length
Enrico Pozzobon <enrico.pozzobon@dissecto.com>
net: usb: lan78xx: disable VLAN filter in promiscuous mode
Hui Wang <hui.wang@canonical.com>
ring-buffer: Fix event length with forced 8-byte alignment
Weiming Shi <bestswngs@gmail.com>
Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
Pauli Virtanen <pav@iki.fi>
Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
Xiang Mei <xmei5@asu.edu>
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
Xiang Mei <xmei5@asu.edu>
net: qualcomm: rmnet: validate MAP frame length before ingress parsing
Daniele Palmas <dnlplm@gmail.com>
net: qualcomm: rmnet: add tx packets aggregation
Shigeru Yoshida <syoshida@redhat.com>
qede: fix off-by-one in BD ring consumption on build_skb failure
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_connmark: reject invalid shift parameters
Zhixing Chen <running910@gmail.com>
netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
Feng Wu <wufengwufengwufeng@gmail.com>
netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_u32: reject invalid shift counts
Qihang <q.h.hack.winter@gmail.com>
gue: validate REMCSUM private option length
Xiang Mei <xmei5@asu.edu>
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
Anshuman Khandual <anshuman.khandual@arm.com>
arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range()
Lee Jones <lee@kernel.org>
HID: core: Fix OOB read in hid_get_report for numbered reports
Georgiy Osokin <g.osokin@auroraos.dev>
HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
Myeonghun Pak <mhun512@gmail.com>
ata: sata_gemini: unwind clocks on IDE pinctrl errors
David Howells <dhowells@redhat.com>
afs: Fix unchecked-length string display in debug statement
David Howells <dhowells@redhat.com>
afs: Fix the volume AFS_VOLUME_RM_TREE is set on
David Howells <dhowells@redhat.com>
afs: Fix vllist leak
David Howells <dhowells@redhat.com>
afs: Fix callback service message parsers to pass through -EAGAIN
Dan Carpenter <error27@gmail.com>
afs: Fix error code in afs_extract_vl_addrs()
Samuel Moelius <sam.moelius@trailofbits.com>
net/sched: hhf: clear heavy-hitter state on reset
Vladimir Zapolskiy <vz@kernel.org>
gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe
Sechang Lim <rhkrqnwk98@gmail.com>
net/sched: act_bpf: use rcu_dereference_bh() to read the filter
Gleb Markov <markov.gi@npc-ksb.ru>
cxgb4: Fix decode strings dump for T6 adapters
Longjun Tang <tanglongjun@kylinos.cn>
virtio_net: disable cb when NAPI is busy-polled
Yuho Choi <dbgh9129@gmail.com>
irqchip/gic-v3-its: Fix OF node reference leak
Martin Kaiser <martin@kaiser.cx>
tracing: eprobe: read the complete FILTER_PTR_STRING pointer
Masami Hiramatsu (Google) <mhiramat@kernel.org>
tracing/events: Fix to check the simple_tsk_fn creation
Ido Schimmel <idosch@nvidia.com>
bridge: stp: Fix a potential use-after-free when deleting a bridge
Rosen Penev <rosenp@gmail.com>
net: gianfar: dispose irq mappings on probe failure and device removal
Xiang Mei <xmei5@asu.edu>
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
Pengfei Zhang <zhangfeionline@gmail.com>
ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
Eric Dumazet <edumazet@google.com>
ipv6: remove RTNL protection from inet6_dump_fib()
Eric Dumazet <edumazet@google.com>
inet: allow ip_valid_fib_dump_req() to be called with RTNL or RCU
Eric Dumazet <edumazet@google.com>
rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
Eric Dumazet <edumazet@google.com>
rtnetlink: change nlk->cb_mutex role
Matti Vaittinen <mazziesaccount@gmail.com>
hwmon: adm1275: Prevent reading uninitialized stack
Matvey Kovalev <matvey.kovalev@ispras.ru>
qede: fix out-of-bounds check for cqe->len_list[]
Nuoqi Gui <gnq25@mails.tsinghua.edu.cn>
seg6: validate SRH length before reading fixed fields
Pengpeng Hou <pengpeng@iscas.ac.cn>
gpio: htc-egpio: use managed gpiochip registration
Pengpeng Hou <pengpeng@iscas.ac.cn>
gpio: mvebu: fail probe if gpiochip registration fails
Pengpeng Hou <pengpeng@iscas.ac.cn>
spi: sh-msiof: abort transfers when reset times out
Martin Kaiser <martin@kaiser.cx>
tracing: probes: fix typo in a log message
Ruoyu Wang <ruoyuw560@gmail.com>
net: sungem: fix probe error cleanup
Yun Zhou <yun.zhou@windriver.com>
net: mvneta: re-enable percpu interrupt on resume
Haoxiang Li <haoxiang_li2024@163.com>
rtc: cmos: unregister HPET IRQ handler on probe failure
Fredrik M Olsson <fredrik.m.olsson@axis.com>
rtc: ds1307: Fix off-by-one issue with wday for rx8130
Huiwen He <hehuiwen@kylinos.cn>
smb/client: preserve errors from smb2_set_sparse()
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in disable_policy sysctl
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in forwarding sysctl
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in ignore_routes_with_linkdown sysctl
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in disable_ipv6 sysctl
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
Eric Dumazet <edumazet@google.com>
veth: fix NAPI leak in XDP enable error path
Aleksandrova Alyona <aga@itb.spb.ru>
net: dsa: sja1105: round up PTP perout pin duration
Xiang Mei <xmei5@asu.edu>
net, bpf: check master for NULL in xdp_master_redirect()
Krzysztof Wilczyński <kwilczynski@kernel.org>
alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
Krzysztof Wilczyński <kwilczynski@kernel.org>
alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
Koichiro Den <den@valinux.co.jp>
NTB: epf: Make db_valid_mask cover only real doorbell bits
Runyu Xiao <runyu.xiao@seu.edu.cn>
netfilter: nft_synproxy: stop bypassing the priv->info snapshot
Fernando Fernandez Mancera <fmancera@suse.de>
netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
Kuniyuki Iwashima <kuniyu@google.com>
ipv4: fib: Don't ignore error route in local/main tables.
Xiang Mei <xmei5@asu.edu>
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0
Xiang Mei <xmei5@asu.edu>
drm/edid: fix OOB read in drm_parse_tiled_block()
Avinash Duduskar <avinash.duduskar@gmail.com>
bpf: zero-initialize the fib lookup flow struct
Nuoqi Gui <gnq25@mails.tsinghua.edu.cn>
bpf: Fix stack slot index in nospec checks
Ronan Dalton <ronan.dalton@alliedtelesis.co.nz>
rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
Antoni Pokusinski <apokusinski01@gmail.com>
rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
Aboorva Devarajan <aboorvad@linux.ibm.com>
selftests/mm: fix exclusive_cow test fork() handling
Sayali Patil <sayalip@linux.ibm.com>
selftests/mm: allow PUD-level entries in compound testcase of hmm tests
Sayali Patil <sayalip@linux.ibm.com>
selftests/mm: clarify alternate unmapping in compaction_test
Bhargav Joshi <j.bhargav.u@gmail.com>
irqchip/crossbar: Fix parent domain resource leak
Florian Westphal <fw@strlen.de>
netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
Florian Westphal <fw@strlen.de>
netfilter: nf_reject: skip iphdr options when looking for icmp header
Jozsef Kadlecsik <kadlec@netfilter.org>
netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
Aleksandr Nogikh <nogikh@google.com>
ieee802154: fix kernel-infoleak in dgram_recvmsg()
Ivan Abramov <i.abramov@mt-integration.ru>
ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ACPI: resource: Amend kernel-doc style
Ricardo Neri <ricardo.neri-calderon@linux.intel.com>
thermal: intel: Fix dangling resources on thermal_throttle_online() failure
Breno Leitao <leitao@debian.org>
arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS
Ioana Ciornei <ioana.ciornei@nxp.com>
dpaa2-switch: fix VLAN upper check not rejecting bridge join
Xin Long <lucien.xin@gmail.com>
sctp: hold socket lock when dumping endpoints in sctp_diag
Jakub Kicinski <kuba@kernel.org>
net: psample: fix info leak in PSAMPLE_ATTR_DATA
Ratheesh Kannoth <rkannoth@marvell.com>
octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Use snprintf() for guestmount path construction
Eric Dumazet <edumazet@google.com>
xfrm: validate selector family and prefixlen during match
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Use snprintf() for root_dir path construction
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id()
Pengpeng Hou <pengpeng@iscas.ac.cn>
sparc: led: avoid trimming a newline from empty writes
John Johansen <john.johansen@canonical.com>
apparmor: fix label can not be immediately before a declaration
Adrian Hunter <adrian.hunter@intel.com>
i3c: master: Prevent reuse of dynamic address on device add failure
Zygmunt Krynicki <me@zygoon.pl>
apparmor: put secmark label after secid lookup
Zygmunt Krynicki <me@zygoon.pl>
apparmor: aa_getprocattr free procattr leak on format failure
Maxime Bélair <maxime.belair@canonical.com>
apparmor: fix potential UAF in aa_replace_profiles
Ryan Lee <ryan.lee@canonical.com>
apparmor: grab ns lock and refresh when looking up changehat child profiles
Zygmunt Krynicki <me@zygoon.pl>
apparmor: aa_label_alloc use aa_label_free on alloc failure
Ruoyu Wang <ruoyuw560@gmail.com>
apparmor: check label build before no_new_privs test
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: mediatek: Use actual physical address instead of virt_to_phys()
Ryder Lee <ryder.lee@mediatek.com>
PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Add bounds checks to read_build_id() note iteration in minimal build
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Add bounds checks to elf_read_build_id() note iteration
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name()
Arnaldo Carvalho de Melo <acme@redhat.com>
tools lib api: Fix mount_overload() snprintf truncation and toupper range
Arnaldo Carvalho de Melo <acme@redhat.com>
tools lib api: Fix filename__write_int() writing uninitialized stack data
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Fix thread__set_comm_from_proc() on empty comm file
Arnaldo Carvalho de Melo <acme@redhat.com>
perf intel-pt: Fix snprintf size tracking bug in insn decoder
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Bounds-check .gnu_debuglink section data
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Fix signed overflow in sysfs__read_build_id() size check
Arnaldo Carvalho de Melo <acme@redhat.com>
tools lib api: Fix missing null termination in filename__read_int/ull()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file
Arnaldo Carvalho de Melo <acme@redhat.com>
perf pmu: Fix pmu_id() heap underwrite on empty identifier file
Chris Mason <clm@meta.com>
xprtrdma: Fix bcall rep leak and unbounded peek
Arnaldo Carvalho de Melo <acme@redhat.com>
perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf sched: Fix idle-hist callchain display using wrong rb_first variant
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
PCI: rcar-host: Remove unused LIST_HEAD(res)
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Use perf_env__get_cpu_topology() in machine__resolve()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Fix get_max_num() size_t underflow on empty sysfs file
Li RongQing <lirongqing@baidu.com>
PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
Mike Snitzer <snitzer@kernel.org>
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write
Mike Snitzer <snitzer@kernel.org>
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors
Dai Ngo <dai.ngo@oracle.com>
NFSv4/pnfs: defer return_range callbacks until after inode unlock
Sagi Grimberg <sagi@grimberg.me>
pNFS/filelayout: fix cheking if a layout is striped
Phillip Varney <pbvarney@protonmail.com>
clk: qcom: a53: Corrected frequency multiplier for 1152MHz
Nuno Sá <nuno.sa@analog.com>
dmaengine: Fix possible use after free
Icenowy Zheng <zhengxingda@iscas.ac.cn>
dmaengine: qcom: gpi: set DMA_PRIVATE capability
Arnaldo Carvalho de Melo <acme@redhat.com>
perf c2c: Fix use-after-free in he__get_c2c_hists() error path
Arnaldo Carvalho de Melo <acme@redhat.com>
perf mmap: Fix NULL deref in aio cleanup on alloc failure
Arnaldo Carvalho de Melo <acme@redhat.com>
perf sched: Replace BUG_ON and add NULL checks in replay event helpers
Arnaldo Carvalho de Melo <acme@redhat.com>
perf sched: Clean up idle_threads entry on init failure
Arnaldo Carvalho de Melo <acme@redhat.com>
perf mmap: Guard cpu__get_node() return in aio_bind()
Rui Qi <qirui.001@bytedance.com>
perf: Fix off-by-one stack buffer overflow in kallsyms__parse()
Srinivasan Shanmugam <srinivasan.shanmugam@amd.com>
drm/amd/display: Add missing kdoc for ALLM parameters
Rosen Penev <rosenp@gmail.com>
HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter
Sanjay Chitroda <sanjayembeddedse@gmail.com>
iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
Joshua Crofts <joshua.crofts1@gmail.com>
iio: magnetometer: ak8975: fix potential kernel stack memory leak
Joshua Crofts <joshua.crofts1@gmail.com>
iio: light: si1133: prevent race condition on timeout
Joshua Crofts <joshua.crofts1@gmail.com>
iio: light: si1133: reset counter to prevent race condition
Arnaldo Carvalho de Melo <acme@redhat.com>
perf header: Sanity check HEADER_EVENT_DESC attr.size before swap
James Kim <james010kim@gmail.com>
char: tlclk: fix use-after-free in tlclk_cleanup()
Seungjin Bae <eeodqql09@gmail.com>
usb: host: max3421: Reject hub port requests for non-existent ports
Seungjin Bae <eeodqql09@gmail.com>
usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()
Guangshuo Li <lgs201920130244@gmail.com>
staging: most: video: avoid double free on video register failure
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
phy: phy-can-transceiver: Check driver match and driver data against NULL
Ian Rogers <irogers@google.com>
perf sched: Add missing mmap2 handler in timehist
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
platform/x86: xo15-ebook: Fix wakeup source and GPE handling
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
x86/platform/olpc: xo15: Drop wakeup source on driver removal
Leo Yan <leo.yan@arm.com>
coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore
Yingchao Deng <yingchao.deng@oss.qualcomm.com>
coresight: cti: Fix DT filter signals silently ignored
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: nvec: fix use-after-free in nvec_rx_completed()
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
net/9p: fix race condition on rdma->state in trans_rdma.c
Aleksandr Nogikh <nogikh@google.com>
ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
Guangshuo Li <lgs201920130244@gmail.com>
ksmbd: fix use-after-free in same_client_has_lease()
Eric Dumazet <edumazet@google.com>
tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
Eric Dumazet <edumazet@google.com>
tipc: fix UAF in tipc_l2_send_msg()
Gui-Dong Han <hanguidong02@gmail.com>
KEYS: Use acquire when reading state in keyring search
Aboorva Devarajan <aboorvad@linux.ibm.com>
powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus
Aboorva Devarajan <aboorvad@linux.ibm.com>
powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down
Aboorva Devarajan <aboorvad@linux.ibm.com>
powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del
Yadan Fan <ydfan@suse.com>
MIPS: mm: Fix out-of-bounds write in maar_res_walk()
Sechang Lim <rhkrqnwk98@gmail.com>
bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
Weiming Shi <bestswngs@gmail.com>
bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
Huiwen He <hehuiwen@kylinos.cn>
smb/client: always return a value for FS_IOC_GETFLAGS
Florian Westphal <fw@strlen.de>
netfilter: nf_conncount: callers must hold rcu read lock
Runyu Xiao <runyu.xiao@seu.edu.cn>
kcm: use WRITE_ONCE() when changing lower socket callbacks
Sun Jian <sun.jian.kdev@gmail.com>
bpf: Run generic devmap egress prog on private skb
Aditya Garg <gargaditya@linux.microsoft.com>
net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check
Aditya Garg <gargaditya@linux.microsoft.com>
net: mana: initialize gdma queue id to INVALID_QUEUE_ID
Victor Nogueira <victor@mojatatu.com>
net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
Victor Nogueira <victor@mojatatu.com>
net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
Guangshuo Li <lgs201920130244@gmail.com>
ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO
Lars Pöschel <lars.poeschel@edag.com>
spi: xilinx: use FIFO occupancy register to determine buffer size
Herbert Xu <herbert@gondor.apana.org.au>
crypto: rng - Free default RNG on module exit
Felix Gu <ustc.gu@gmail.com>
crypto: cavium/cpt - fix DMA cleanup using wrong loop index
Felix Gu <ustc.gu@gmail.com>
crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
Michael Bommarito <michael.bommarito@gmail.com>
tipc: reject inverted service ranges from peer bindings
Michael Bommarito <michael.bommarito@gmail.com>
tipc: prevent snt_unacked underflow on CONN_ACK
Michael Bommarito <michael.bommarito@gmail.com>
tipc: require net admin for TIPCv2 netlink mutators
Victor Nogueira <victor@mojatatu.com>
net/sched: sch_hfsc: Don't make class passive twice
Xin Long <lucien.xin@gmail.com>
sctp: validate embedded address parameter length
Xiang Mei <xmei5@asu.edu>
bridge: cfm: reject invalid CCM interval at configuration time
Kuniyuki Iwashima <kuniyu@google.com>
net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
HyeongJun An <sammiee5311@gmail.com>
ASoC: tegra: tegra210_ahub: Validate written enum value
HyeongJun An <sammiee5311@gmail.com>
ASoC: fsl: fsl_audmix: Validate written enum values
HyeongJun An <sammiee5311@gmail.com>
ASoC: codecs: hdac_hdmi: Validate written enum value
Maher Sanalla <msanalla@nvidia.com>
RDMA/mlx5: Fix undefined shift of user RQ WQE size
Patrisious Haddad <phaddad@nvidia.com>
RDMA/mlx5: Remove raw RSS QP restrack tracking
Maxwell Doose <m32285159@gmail.com>
fs: efs: remove unneeded debug prints
Heiko Carstens <hca@linux.ibm.com>
s390/process: Fix kernel thread function pointer type
Daniel Borkmann <daniel@iogearbox.net>
bpf: Tighten cgroup storage cookie checks for prog arrays
Yonghong Song <yonghong.song@linux.dev>
selftests/bpf: Fix bpf_iter/task_vma test
Louis Scalbert <louis.scalbert@6wind.com>
bonding: 3ad: fix mux port state on oper down
longlong yan <yanlonglong@kylinos.cn>
tools/virtio: check mmap return value in vringh_test
Zhang Tianci <zhangtianci.1997@bytedance.com>
vduse: Requeue failed read to send_list head
Qihang Tang <q.h.hack.winter@gmail.com>
vhost/vdpa: validate virtqueue index in mmap and fault paths
Qihang Tang <q.h.hack.winter@gmail.com>
vduse: hold vduse_lock across IDR lookup in open path
Jason Gunthorpe <jgg@ziepe.ca>
IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified
David Laight <david.laight.linux@gmail.com>
fbdev: sm501fb: Fix buffer errors in OF binding code
Filipe Manana <fdmanana@suse.com>
btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
Wolfram Sang <wsa+renesas@sang-engineering.com>
hwspinlock: qcom: avoid uninitialized struct members
Hui Zhu <zhuhui@kylinos.cn>
vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
Luca Leonardo Scorcia <l.scorcia@gmail.com>
pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39
Luca Leonardo Scorcia <l.scorcia@gmail.com>
pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39
Yuho Choi <dbgh9129@gmail.com>
watchdog: unregister PM notifier on watchdog unregister
Al Viro <viro@zeniv.linux.org.uk>
configfs: fix lockless traversals of ->s_children
Dmitry Vyukov <dvyukov@google.com>
firmware_loader: Fix recursive lock in device_cache_fw_images()
Felix Gu <ustc.gu@gmail.com>
spi: ep93xx: fix double-free of zeropage on DMA setup failure
Jason Gunthorpe <jgg@ziepe.ca>
IB/mlx5: Properly support implicit ODP rereg_mr
Jason Gunthorpe <jgg@ziepe.ca>
IB/mlx5: Don't take the rereg_mr fallback without a new translation
Pengjie Zhang <zhangpengjie2@huawei.com>
cpufreq: Documentation: fix conservative governor freq_step description
Yuho Choi <dbgh9129@gmail.com>
ACPI: IPMI: Fix message kref handling on dead device
Kyle Zeng <kylebot@openai.com>
ALSA: seq: Clear variable event pointer on read
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Add UMP support
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Introduce SNDRV_SEQ_IOCTL_USER_PVERSION ioctl
Rui Qi <qirui.001@bytedance.com>
riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe
Tristan Madani <tristan@talencesecurity.com>
wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
Leon Hwang <leon.hwang@linux.dev>
bpf: Update transport_header when encapsulating UDP tunnel in lwt
Jacob Moroni <jmoroni@google.com>
RDMA/irdma: Fix OOB read during CQ MR registration
Jason Gunthorpe <jgg@ziepe.ca>
IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
Fernando Fernandez Mancera <fmancera@suse.de>
netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
Fernando Fernandez Mancera <fmancera@suse.de>
netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()
Zhang Cen <rollkingzzc@gmail.com>
ocfs2/dlm: require a ref for locking_state debugfs open
Zhang Cen <rollkingzzc@gmail.com>
ocfs2: reject FITRIM ranges shorter than a cluster
Dmitry Antipov <dmantipov@yandex.ru>
ocfs2: fix buffer head management in ocfs2_read_blocks()
Zhang Cen <rollkingzzc@gmail.com>
ocfs2: rebase copied fsdlm LVB pointers in locking_state
Sandipan Das <sandipan.das@amd.com>
perf/x86/amd/core: Always use the NMI latency mitigation
Woojin Ji <random6.xyz@gmail.com>
bpftool: Use libbpf error code for flow dissector query
Al Viro <viro@zeniv.linux.org.uk>
configfs_lookup(): don't leave ->s_dentry dangling on failure
Alexander Potapenko <glider@google.com>
lib/test_meminit: use && for bools
Sang-Heon Jeon <ekffu200098@gmail.com>
mm/fake-numa: fix under-allocation detection in uniform split
Deepanshu Kartikey <kartikey406@gmail.com>
bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
Dan Carpenter <error27@gmail.com>
scsi: pm8001: Fix error code in non_fatal_log_show()
Martin Wilck <martin.wilck@suse.com>
scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"
Yuho Choi <dbgh9129@gmail.com>
ARM: imx31: Fix IIM mapping leak in revision check
Yuho Choi <dbgh9129@gmail.com>
ARM: imx3: Fix CCM node reference leak
Zhang Yi <yi.zhang@huawei.com>
ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback
Chen Cheng <chencheng@fnnas.com>
md/raid10: reset read_slot when reusing r10bio for discard
Renjiang Han <renjiang.han@oss.qualcomm.com>
media: qcom: venus: relax encoder frame/blur step size on v6
Renjiang Han <renjiang.han@oss.qualcomm.com>
media: qcom: venus: relax encoder frame/blur dimension steps on v4
Renjiang Han <renjiang.han@oss.qualcomm.com>
media: qcom: venus: drop extra padding in NV12 raw size calculation
zhoumin <teczm@foxmail.com>
EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info
Jessica Zhang <jessica.zhang@oss.qualcomm.com>
drm/msm/dp: Fix the ISR_* enum values
Jessica Zhang <jessica.zhang@oss.qualcomm.com>
drm/msm/dp: fix HPD state status bit shift value
Weili Qian <qianweili@huawei.com>
crypto: hisilicon/qm - disable error report before flr
Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
ocfs2: kill osb->system_file_mutex lock
ZhengYuan Huang <gality369@gmail.com>
ocfs2: don't BUG_ON an invalid journal dinode
Dan Carpenter <error27@gmail.com>
rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
Davidlohr Bueso <dave@stgolabs.net>
dax/kmem: account for partial discontiguous resource upon removal
Carlos Llamas <cmllamas@google.com>
libbpf: Fix UAF in strset__add_str()
Timur Tabi <ttabi@nvidia.com>
drm/nouveau/bios: specify correct display fuse register for Ampere and Ada
Mikko Perttunen <mperttunen@nvidia.com>
drm/tegra: Fix iommu_map_sgtable() return value check
Felix Gu <ustc.gu@gmail.com>
drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()
Jiayuan Chen <jiayuan.chen@linux.dev>
net/sched: cls_bpf: prevent unbounded recursion in offload rollback
Eric Dumazet <edumazet@google.com>
ipv6: guard against possible NULL deref in __in6_dev_stats_get()
Breno Leitao <leitao@debian.org>
workqueue: drop spurious '*' from print_worker_info() fn declaration
Nilay Shroff <nilay@linux.ibm.com>
nvme-multipath: fix flex array size in struct nvme_ns_head
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: spi-nor: Drop duplicate Kconfig dependency
Rosen Penev <rosenp@gmail.com>
mips: n64: add __iomem for writel call
Rosen Penev <rosenp@gmail.com>
mips: ralink: mt7621: add missing __iomem
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: DEC: Remove do_IRQ() call indirection
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix big-endian stack argument fetching in o32 wrapper
Jiakai Xu <xujiakai24@mails.ucas.ac.cn>
PM: sleep: Use complete() in device_pm_sleep_init()
Lianfa Weng <wenglianfa@huawei.com>
RDMA/hns: Fix warning in poll cq direct mode
Guangshuo Li <lgs201920130244@gmail.com>
IB/mlx4: Fix refcount leak in add_port() error path
Jacob Moroni <jmoroni@google.com>
RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
Samuel Holland <samuel@sholland.org>
bus: sunxi-rsb: Always check register address validity
Ronaldo Nunez <rnunez@baylibre.com>
pwm: imx27: Fix variable truncation in .apply()
Lifeng Zheng <zhenglifeng1@huawei.com>
cpufreq: conservative: Simplify frequency limit handling
Pengjie Zhang <zhangpengjie2@huawei.com>
cpufreq: Documentation: fix sampling_down_factor range
Stepan Ionichev <sozdayvek@gmail.com>
device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()
Geert Uytterhoeven <geert+renesas@glider.be>
firmware: arm_scmi: Fix OOB in scmi_power_name_get()
Sven Püschel <s.pueschel@pengutronix.de>
media: rockchip: rga: fix too small buffer size
Eric Dumazet <edumazet@google.com>
net/sched: sch_drr: annotate data-races around cl->deficit
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
sysfs: clamp show() return value in sysfs_kf_read()
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Read sensor config as 32-bit value
Zilin Guan <zilin@seu.edu.cn>
media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
Sara Venkatesh <sarajvenkatesh@gmail.com>
RDMA/srpt: fix integer overflow in immediate data length check
Prathamesh Deshpande <prathameshdeshpande7@gmail.com>
RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
Alexander Chesnokov <Alexander.Chesnokov@kaspersky.com>
RDMA/hns: Fix arithmetic overflow in calc_hem_config()
Linmao Li <lilinmao@kylinos.cn>
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
Eric Dumazet <edumazet@google.com>
net/sched: sch_htb: annotate data-races (I)
Eric Dumazet <edumazet@google.com>
net/sched: sch_htb: do not change sch->flags in htb_dump()
Sean Christopherson <seanjc@google.com>
crypto: ccp - Treat zero-length cert chain as query for blob lengths
Eric Dumazet <edumazet@google.com>
net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
thermal: hwmon: Fix critical temperature attribute removal
Pengpeng Hou <pengpeng@iscas.ac.cn>
evm: terminate and bound the evm_xattrs read buffer
Lin He <helin52@huawei.com>
drm/hisilicon/hibmc: use clock to look up the PLL value
Lin He <helin52@huawei.com>
drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
Cristian Marussi <cristian.marussi@arm.com>
clk: scmi: Fix clock rate rounding
Sean Christopherson <seanjc@google.com>
iommu/amd: Fix a stale comment about which legacy mode is user visible
Weiming Shi <bestswngs@gmail.com>
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
Thorsten Blum <thorsten.blum@linux.dev>
crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
Lothar Rubusch <l.rubusch@gmail.com>
crypto: atmel-sha204a - fix blocking and non-blocking rng logic
Felix Gu <ustc.gu@gmail.com>
pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path
Samuel Holland <samuel@sholland.org>
media: cedrus: Fix failure to clean up hardware on probe failure
Felix Gu <ustc.gu@gmail.com>
watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure
Yingjie Gao <gaoyingjie@uniontech.com>
watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
Jihed Chaibi <jihed.chaibi.dev@gmail.com>
ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint
Tristan Madani <tristan@talencesecurity.com>
wifi: ath9k: fix OOB access from firmware tx status queue ID
Xingjing Deng <micro6947@gmail.com>
kconfig: fix potential NULL pointer dereference in conf_askvalue
Tristan Madani <tristan@talencesecurity.com>
wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
Danilo Krummrich <dakr@kernel.org>
driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
Yuho Choi <dbgh9129@gmail.com>
drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
Tomi Valkeinen <tomi.valkeinen@ideasonboard.com>
drm/tidss: Drop extra drm_mode_config_reset() call
Ian Bridges <icb@fastmail.org>
fbcon: fix NULL pointer dereference for a console without vc_data
David Howells <dhowells@redhat.com>
afs: Fix further netns teardown to cancel the preallocation charger
Matvey Kovalev <matvey.kovalev@ispras.ru>
afs: fix NULL pointer dereference in afs_get_tree()
David Howells <dhowells@redhat.com>
afs: Fix netns teardown to cancel the preallocation charger
Matthias Feser <mfe@KBSgmbhfr.onmicrosoft.com>
serial: 8250_omap: clear rx_running on zero-length DMA completes
Stephan Gerhold <stephan.gerhold@linaro.org>
serial: msm: Disable DMA for kernel console UART
Chen-Yu Tsai <wens@kernel.org>
dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Fix buffer sequence in frame gaps
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Avoid partial metadata buffers
Eric Biggers <ebiggers@kernel.org>
crypto: hisi-trng - Remove crypto_rng interface
Eric Biggers <ebiggers@kernel.org>
crypto: crypto4xx - Remove insecure and unused rng_alg
Herbert Xu <herbert@gondor.apana.org.au>
crypto: crypto4xx - Remove ahash-related code
Eric Biggers <ebiggers@kernel.org>
crypto: sun4i-ss - Remove insecure and unused rng_alg
Eric Biggers <ebiggers@kernel.org>
crypto: af_alg - Remove zero-copy support from skcipher and aead
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: tag_ksz: do not rely on skb_mac_header() in TX paths
Yichong Chen <chenyichong@uniontech.com>
tools/mm/slabinfo: fix total_objects attribute name
Muhammet Kaan KILINÇ <muhammetkaankilinc@gmail.com>
crypto: algif_skcipher - force synchronous processing on trees without ctx->state
Adam Li <adamli@os.amperecomputing.com>
sched/fair: Only update stats for allowed CPUs when looking for dst group
Darrick J. Wong <djwong@kernel.org>
xfs: resample the data fork mapping after cycling ILOCK
Weiming Shi <bestswngs@gmail.com>
xfs: fail recovery on a committed log item with no regions
Joanne Koong <joannelkoong@gmail.com>
fuse: re-lock request before returning from fuse_ref_folio()
Alberto Ruiz <aruiz@redhat.com>
fuse: fix device node leak in cuse_process_init_reply()
Michael Bommarito <michael.bommarito@gmail.com>
RDMA/siw: bound Read Response placement to the RREAD length
Zhenhao Wan <whi4ed0g@gmail.com>
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: maplecontrol - set driver data before registering input device
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: maplemouse - set driver data before registering input device
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: maple_keyb - set driver data before registering input device
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: mms114 - fix multi-touch slot corruption
Florian Fuchs <fuchsfl@gmail.com>
Input: maplemouse - fix NULL pointer dereference in open()
Bryam Vargas <hexlabsecurity@proton.me>
Input: touchwin - reset the packet index on every complete packet
Bryam Vargas <hexlabsecurity@proton.me>
Input: iforce - bound the device-reported force-feedback effect index
Bryam Vargas <hexlabsecurity@proton.me>
Input: goodix - clamp the device-reported contact count
Ranjan Kumar <kumarranja@chromium.org>
Input: elan_i2c - prevent division by zero and arithmetic underflow
Bryam Vargas <hexlabsecurity@proton.me>
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
Bryam Vargas <hexlabsecurity@proton.me>
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
Haoxiang Li <haoxiang_li2024@163.com>
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
Guillermo Rodríguez <guille.rodriguez@gmail.com>
i2c: stm32f7: truncate clock period instead of rounding it
Johan Hovold <johan@kernel.org>
i2c: core: fix adapter deregistration race
Mikhail Gavrilov <mikhail.v.gavrilov@gmail.com>
udmabuf: fix DMA direction mismatch in release_udmabuf()
Sean Christopherson <seanjc@google.com>
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
Koichiro Den <den@valinux.co.jp>
NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
Bryam Vargas <hexlabsecurity@proton.me>
exfat: bound uniname advance in exfat_find_dir_entry()
Benjamin Coddington <ben.coddington@hammerspace.com>
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
Huihui Huang <hhhuang@smu.edu.sg>
tracing: Prevent out-of-bounds read in glob matching
Carlos Song <carlos.song@nxp.com>
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
Carlos Song <carlos.song@nxp.com>
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix the fips_enabled priority boost
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix returning success on failure in CTR_DRBG
Ruijie Li <ruijieli51@gmail.com>
crypto: pcrypt - restore callback for non-parallel fallback
Anastasia Tishchenko <sv3iry@gmail.com>
crypto: ecc - Fix carry overflow in vli multiplication
Thorsten Blum <thorsten.blum@linux.dev>
crypto: caam - use print_hex_dump_devel to guard key hex dumps again
Thorsten Blum <thorsten.blum@linux.dev>
crypto: caam - use print_hex_dump_devel to guard key hex dumps
Bryam Vargas <hexlabsecurity@proton.me>
isofs: bound Rock Ridge symlink components to the SL record
Bryam Vargas <hexlabsecurity@proton.me>
partitions: aix: bound the pp_count scan to the ppe array
Achkinazi, Igor <Igor.Achkinazi@dell.com>
nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
Mikulas Patocka <mpatocka@redhat.com>
dm-ioctl: report an error if a device has no table
Bryam Vargas <hexlabsecurity@proton.me>
udf: validate sparing table length as an entry count, not a byte count
Bryam Vargas <hexlabsecurity@proton.me>
udf: validate VAT header length against the VAT inode size
Michael Bommarito <michael.bommarito@gmail.com>
udf: validate free block extents against the partition length
Liviu Stan <liviu.stan@analog.com>
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
Madhu M <madhu.m@intel.com>
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
Andrei Kuchynski <akuchynski@chromium.org>
usb: typec: ucsi: Invert DisplayPort role assignment
Badhri Jagan Sridharan <badhri@google.com>
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
Sam Day <me@samcday.com>
usbip: vudc: fix NULL deref in vep_dequeue()
Yichong Chen <chenyichong@uniontech.com>
usbip: tools: support SuperSpeedPlus devices
Xu Rao <raoxu@uniontech.com>
USB: usb-storage: ene_ub6250: restore media-ready check
Johan Hovold <johan@kernel.org>
USB: ulpi: fix memory leak on registration failure
Johan Hovold <johan@kernel.org>
USB: serial: digi_acceleport: fix write buffer corruption
Johan Hovold <johan@kernel.org>
USB: serial: digi_acceleport: fix hard lockup on disconnect
Johan Hovold <johan@kernel.org>
USB: serial: digi_acceleport: fix broken rx after throttle
Fabio Porcedda <fabio.porcedda@gmail.com>
USB: serial: option: add Telit Cinterion FE990D50 compositions
Johan Hovold <johan@kernel.org>
USB: serial: keyspan_pda: fix information leak
Haoxiang Li <haoxiang_li2024@163.com>
usb: mtu3: unmap request DMA on queue failure
Myeonghun Pak <mhun512@gmail.com>
USB: misc: uss720: unregister parport on probe failure
Xu Rao <raoxu@uniontech.com>
USB: storage: include US_FL_NO_SAME in quirks mask
Myeonghun Pak <mhun512@gmail.com>
usb: sl811-hcd: disable controller wakeup on remove
Johan Hovold <johan@kernel.org>
USB: legousbtower: fix use-after-free on disconnect race
Erich E. Hoover <erich.e.hoover@gmail.com>
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix use-after-free on disconnect
Johan Hovold <johan@kernel.org>
USB: ldusb: fix use-after-free on disconnect race
Johan Hovold <johan@kernel.org>
USB: idmouse: fix use-after-free on disconnect race
Jimmy Hu <hhhuuu@google.com>
usb: gadget: udc: Fix use-after-free in gadget_match_driver
Maoyi Xie <maoyixie.tju@gmail.com>
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
WenTao Liang <vulab@iscas.ac.cn>
usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
Rodrigo Lugathe da Conceição Alves <lugathe2@gmail.com>
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
Haoxiang Li <haoxiang_li2024@163.com>
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
Jared Baldridge <jrb@expunge.us>
usb: cdc_acm: Add quirk for Uniden BC125AT scanner
Maoyi Xie <maoyixie.tju@gmail.com>
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
Alexey Nepomnyashih <sdl@nppct.ru>
xfs: fix unreachable BIGTIME check in dquot flush validation
Deepanshu Kartikey <kartikey406@gmail.com>
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
Tristan Madani <tristan@talencesecurity.com>
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
Maoyi Xie <maoyixie.tju@gmail.com>
HID: lg-g15: cancel pending work on remove to fix a use-after-free
Myeonghun Pak <mhun512@gmail.com>
HID: wacom: stop hardware after post-start probe failures
WenTao Liang <vulab@iscas.ac.cn>
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
Yuho Choi <dbgh9129@gmail.com>
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
Tianxiang Chen <nanmu@xiaomi.com>
cpufreq: Fix hotplug-suspend race during reboot
Steven Rostedt <rostedt@goodmis.org>
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
Fushuai Wang <wangfushuai@baidu.com>
cpufreq: intel_pstate: Sync policy->cur during CPU offline
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
net: Drop the lock in skb_may_tx_timestamp()
Muhammad Bilal <meatuni001@gmail.com>
Bluetooth: L2CAP: validate option length before reading conf opt value
Yousef Alhouseen <alhouseenyousef@gmail.com>
Bluetooth: fix UAF in bt_accept_dequeue()
Yousef Alhouseen <alhouseenyousef@gmail.com>
Bluetooth: bnep: pin L2CAP connection during netdev registration
Xiang Mei <xmei5@asu.edu>
netfilter: ebtables: terminate table name before find_table_lock()
Florian Westphal <fw@strlen.de>
netfilter: ebtables: module names must be null-terminated
Andrei Kuchynski <akuchynski@chromium.org>
mfd: cros_ec: Delay dev_set_drvdata() until probe success
Wyatt Feng <bronzed_45_vested@icloud.com>
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
Yuyang Huang <yuyanghuang@google.com>
ipv4: igmp: remove multicast group from hash table on device destruction
Runyu Xiao <runyu.xiao@seu.edu.cn>
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
Runyu Xiao <runyu.xiao@seu.edu.cn>
gpio: eic-sprd: use raw_spinlock_t in the irq startup path
Koichiro Den <den@valinux.co.jp>
NTB: epf: Avoid calling pci_irq_vector() from hardirq context
Yunpeng Tian <shionthanatos@gmail.com>
fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
Thomas Gleixner <tglx@kernel.org>
debugobjects: Plug race against a concurrent OOM disable
Chi Wang <wangchi@kylinos.cn>
audit: Fix data races of skb_queue_len() readers on audit_queue
Zijing Yin <yzjaurora@gmail.com>
net: af_key: initialize alg_key_len for IPComp states
Dawei Feng <dawei.feng@seu.edu.cn>
crypto: amlogic - avoid double cleanup in meson_crypto_probe()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB write in HT_caps_handler()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
Arnd Bergmann <arnd@arndb.de>
staging: media: atomisp: reduce load_primary_binaries() stack usage
Ricardo Ribalda <ribalda@chromium.org>
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
Samuel Page <sam@bynar.io>
tipc: fix out-of-bounds read in broadcast Gap ACK blocks
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
6lowpan: fix NHC entry use-after-free on error path
Runyu Xiao <runyu.xiao@seu.edu.cn>
usb: dwc3: run gadget disconnect from sleepable suspend context
Alan Stern <stern@rowland.harvard.edu>
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
Michael Bommarito <michael.bommarito@gmail.com>
hwrng: virtio: clamp device-reported used.len at copy_data()
Johan Hovold <johan@kernel.org>
virtio-mmio: fix device release warning on module unload
Xiang Mei <xmei5@asu.edu>
netfilter: ipset: fix race between dump and ip_set_list resize
Ratheesh Kannoth <rkannoth@marvell.com>
PCI: host-common: Request bus reassignment when not probe-only
Mahesh Vaidya <mahesh.vaidya@altera.com>
PCI: altera: Do not dispose parent IRQ mapping
胡连勤 <hulianqin@vivo.com>
usb: xhci: Fix sleep in atomic context in xhci_free_streams()
Carlos Llamas <cmllamas@google.com>
binder: fix UAF in binder_free_transaction()
Carlos Llamas <cmllamas@google.com>
binder: fix UAF in binder_thread_release()
Johan Hovold <johan@kernel.org>
Bluetooth: btusb: fix wakeup source leak on probe failure
Johan Hovold <johan@kernel.org>
Bluetooth: btusb: fix use-after-free on marvell probe failure
Johan Hovold <johan@kernel.org>
Bluetooth: btusb: fix use-after-free on registration failure
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Roll back quirk control caches on write errors
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
Darvell Long <contact@darvell.me>
ALSA: usb-audio: avoid kobject path lookup in DualSense match
Maoyi Xie <maoyixie.tju@gmail.com>
ALSA: firewire: isight: bound the sample count to the packet payload
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: es1938: check snd_ctl_new1() return value
Maoyi Xie <maoyixie.tju@gmail.com>
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: virtio: Add missing 384 kHz PCM rate mapping
Liviu Stan <liviu.stan@analog.com>
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
Javier Carrasco <javier.carrasco.cruz@gmail.com>
iio: light: veml6030: fix channel type when pushing events
Stepan Ionichev <sozdayvek@gmail.com>
iio: light: tsl2591: return actual error from probe IRQ failure
Joshua Crofts <joshua.crofts1@gmail.com>
iio: light: opt3001: fix missing state reset on timeout
Biren Pandya <birenpandya@gmail.com>
iio: light: gp2ap002: fix runtime PM leak on read error
Vidhu Sarwal <vidhu.linux@gmail.com>
iio: light: al3010: fix incorrect scale for the highest gain range
Andreas Kempe <andreas.kempe@actia.se>
iio: imu: st_lsm6dsx: deselect shub page before reading whoami
Runyu Xiao <runyu.xiao@seu.edu.cn>
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
Stepan Ionichev <sozdayvek@gmail.com>
iio: gyro: bmg160: wait full startup time after mode change at probe
Stepan Ionichev <sozdayvek@gmail.com>
iio: gyro: bmg160: bail out when bandwidth/filter is not in table
Lars-Peter Clausen <lars@metafoo.de>
iio: event: Fix event FIFO reset race
Maxwell Doose <m32285159@gmail.com>
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
Pengpeng Hou <pengpeng@iscas.ac.cn>
iio: adc: ti-ads124s08: Return reset GPIO lookup errors
Maxwell Doose <m32285159@gmail.com>
iio: adc: spear: Initialize completion before requesting IRQ
Maxwell Doose <m32285159@gmail.com>
iio: adc: lpc32xx: Initialize completion before requesting IRQ
Biren Pandya <birenpandya@gmail.com>
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
Bryam Vargas <hexlabsecurity@proton.me>
iio: accel: bmc150: clamp the device-reported FIFO frame count
Griffin Kroah-Hartman <griffin@kroah.com>
usb: gadget: function: rndis: add length check for header
Griffin Kroah-Hartman <griffin@kroah.com>
usb: gadget: function: rndis: add length check to response query
Davidlohr Bueso <dave@stgolabs.net>
locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
Keenan Dong <keenanat2000@gmail.com>
rtmutex: Use waiter::task instead of current in remove_waiter()
Taeyang Lee <0wn@theori.io>
perf/core: Detach event groups during remove_on_exec
Hem Parekh <hemparekh1596@gmail.com>
ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
Michael Bommarito <michael.bommarito@gmail.com>
NFSv4/flexfiles: reject zero filehandle version count
Mingyu Wang <25181214217@stu.xidian.edu.cn>
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
Johan Hovold <johan@kernel.org>
i2c: core: fix adapter registration race
Johan Hovold <johan@kernel.org>
i2c: core: fix adapter debugfs creation
Johan Hovold <johan@kernel.org>
i2c: core: fix NULL-deref on adapter registration failure
Johan Hovold <johan@kernel.org>
i2c: core: fix hang on adapter registration failure
Johan Hovold <johan@kernel.org>
i2c: core: fix irq domain leak on adapter registration failure
Denis Arefev <arefev@swemel.ru>
block: Avoid mounting the bdev pseudo-filesystem in userspace
Keshav Verma <iganschel@gmail.com>
f2fs: fix listxattr handling of corrupted xattr entries
Chao Yu <chao@kernel.org>
f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
Ruipeng Qi <ruipengqi3@gmail.com>
f2fs: fix potential deadlock in f2fs_balance_fs()
Bryam Vargas <hexlabsecurity@proton.me>
f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
Wenjie Qi <qwjhust@gmail.com>
f2fs: validate orphan inode entry count
Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
device property: initialize the remaining fields of fwnode_handle in fwnode_init()
Sunmin Jeong <s_min.jeong@samsung.com>
f2fs: fix to round down start offset of fallocate for pin file
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: adjust zone capacity when considering valid block count
Wenjie Qi <qwjhust@gmail.com>
f2fs: validate compress cache inode only when enabled
Chao Yu <chao@kernel.org>
f2fs: fix to detect corrupted meta ino
Bryam Vargas <hexlabsecurity@proton.me>
apparmor: mediate the implicit connect of TCP fast open sendmsg
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
Ruslan Valiyev <linuxoid@gmail.com>
apparmor: fix use-after-free in rawdata dedup loop
Yiming Qian <yimingqian591@gmail.com>
net: skmsg: preserve sg.copy across SG transforms
Eric Dumazet <edumazet@google.com>
skmsg: convert struct sk_msg_sg::copy to a bitmap
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nf_tables: restore set elements when delete set fails
Florian Fainelli <florian.fainelli@broadcom.com>
perf trace beauty fcntl: Fix build with older kernel headers
Sean Christopherson <seanjc@google.com>
KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
NeilBrown <neil@brown.name>
nfsd: change nfs4_client_to_reclaim() to allocate data
NeilBrown <neilb@ownmail.net>
nfsd: move name lookup out of nfsd4_list_rec_dir()
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
slimbus: Convert to platform remove callback returning void
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
slimbus: qcom-ngd-ctrl: Fix probe error path ordering
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
slimbus: qcom-ngd-ctrl: Fix up platform_driver registration
Tudor Ambarus <tudor.ambarus@linaro.org>
dma-buf: remove unused dma-fence-unwrap.c (stable/linux-5.15.y only)
Pedro Tammela <pctammela@mojatatu.com>
net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys
Jiasheng Jiang <jiasheng@iscas.ac.cn>
clk: imx: Add check for kcalloc
Kiryl Shutsemau <kas@kernel.org>
userfaultfd: gate must_wait writability check on pte_present()
Jeff Layton <jlayton@kernel.org>
nfsd: reset write verifier on deferred writeback errors
Chris Mason <clm@meta.com>
nfsd: release layout stid on setlease failure
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
nfc: llcp: protect nfc_llcp_sock_unlink() calls
Chaitanya Kulkarni <kch@nvidia.com>
nvmet-tcp: fix race between ICReq handling and queue teardown
-------------
Diffstat:
Documentation/admin-guide/pm/cpufreq.rst | 6 +-
Documentation/crypto/userspace-if.rst | 31 +-
.../media/allwinner,sun4i-a10-video-engine.yaml | 10 +
Documentation/driver-api/pci/pci.rst | 3 +
Makefile | 4 +-
arch/alpha/kernel/pci-sysfs.c | 13 +-
arch/arm/boot/dts/am335x-sl50.dts | 4 +-
arch/arm/configs/sunxi_defconfig | 1 -
arch/arm/mach-davinci/board-da850-evm.c | 12 +-
arch/arm/mach-imx/cpu-imx31.c | 9 +-
arch/arm/mach-imx/mm-imx3.c | 2 +
arch/arm64/boot/dts/qcom/sdm630.dtsi | 9 +-
arch/arm64/kernel/hw_breakpoint.c | 9 +
arch/arm64/kvm/vgic/vgic-its.c | 2 +
arch/arm64/kvm/vgic/vgic.c | 11 +-
arch/arm64/mm/mmu.c | 11 +-
arch/mips/dec/int-handler.S | 2 +-
arch/mips/dec/prom/init.c | 6 +-
arch/mips/dec/setup.c | 6 -
arch/mips/fw/lib/call_o32.S | 2 +-
arch/mips/include/asm/dec/prom.h | 15 +-
arch/mips/kernel/mips-mt-fpaff.c | 28 +-
arch/mips/mm/init.c | 12 +-
arch/mips/n64/init.c | 2 +-
arch/mips/ralink/mt7621.c | 2 +-
arch/mips/sgi-ip22/ip22-gio.c | 7 +-
arch/powerpc/kexec/core_64.c | 4 +-
arch/powerpc/perf/core-fsl-emb.c | 3 +-
arch/powerpc/platforms/cell/spufs/file.c | 6 +-
arch/powerpc/platforms/powernv/setup.c | 3 +-
arch/riscv/kernel/machine_kexec.c | 3 +
arch/riscv/kernel/stacktrace.c | 2 +-
arch/s390/kernel/process.c | 2 +-
arch/sparc/kernel/led.c | 2 +-
arch/x86/boot/compressed/acpi.c | 7 +-
arch/x86/boot/early_serial_console.c | 11 +-
arch/x86/events/amd/core.c | 6 +-
arch/x86/events/intel/uncore_snb.c | 7 -
arch/x86/kvm/vmx/vmx.c | 3 +-
arch/x86/mm/numa_emulation.c | 17 +-
arch/x86/platform/olpc/olpc-xo15-sci.c | 1 +
block/bdev.c | 4 -
block/partitions/aix.c | 9 +
certs/common.c | 2 +-
crypto/af_alg.c | 54 +-
crypto/algif_skcipher.c | 49 +-
crypto/asymmetric_keys/verify_pefile.c | 2 +
crypto/drbg.c | 4 +-
crypto/ecc.c | 31 +-
crypto/ecrdsa.c | 2 +-
crypto/pcrypt.c | 4 +
crypto/rng.c | 11 +
drivers/acpi/acpi_ipmi.c | 2 +-
drivers/acpi/cppc_acpi.c | 11 +-
drivers/acpi/nfit/core.c | 15 +-
drivers/acpi/resource.c | 6 +-
drivers/android/binder.c | 19 +-
drivers/ata/pata_pxa.c | 1 +
drivers/ata/sata_gemini.c | 2 +-
drivers/base/firmware_loader/main.c | 3 +-
drivers/base/power/main.c | 6 +-
drivers/base/property.c | 4 +-
drivers/block/drbd/drbd_receiver.c | 5 +
drivers/bluetooth/bpa10x.c | 8 +-
drivers/bluetooth/btrtl.c | 5 +-
drivers/bluetooth/btusb.c | 37 +-
drivers/bus/sunxi-rsb.c | 3 +
drivers/char/hw_random/virtio-rng.c | 23 +-
drivers/char/tlclk.c | 4 +
drivers/char/tpm/eventlog/tpm1.c | 4 +-
drivers/char/tpm/tpm-dev.c | 2 +-
drivers/char/tpm/tpmrm-dev.c | 2 +-
drivers/clk/clk-scmi.c | 4 +-
drivers/clk/imx/clk.c | 2 +
drivers/clk/qcom/a53-pll.c | 2 +-
drivers/cpufreq/cpufreq.c | 2 +
drivers/cpufreq/cpufreq_conservative.c | 12 +-
drivers/cpufreq/intel_pstate.c | 6 +-
drivers/cpufreq/pcc-cpufreq.c | 2 +
drivers/crypto/allwinner/Kconfig | 8 -
drivers/crypto/allwinner/sun4i-ss/Makefile | 1 -
drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 -
drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 -
drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 -
drivers/crypto/amcc/crypto4xx_alg.c | 106 --
drivers/crypto/amcc/crypto4xx_core.c | 130 +-
drivers/crypto/amcc/crypto4xx_core.h | 11 -
drivers/crypto/amcc/crypto4xx_reg_def.h | 11 -
drivers/crypto/amlogic/amlogic-gxl-core.c | 2 +-
drivers/crypto/atmel-ecc.c | 2 +-
drivers/crypto/atmel-sha204a.c | 29 +-
drivers/crypto/caam/caamalg.c | 12 +-
drivers/crypto/caam/caamalg_qi.c | 12 +-
drivers/crypto/caam/caamalg_qi2.c | 12 +-
drivers/crypto/caam/caamhash.c | 4 +-
drivers/crypto/caam/key_gen.c | 4 +-
drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +-
drivers/crypto/ccp/sev-dev.c | 3 +-
drivers/crypto/hisilicon/Kconfig | 1 -
drivers/crypto/hisilicon/qm.c | 4 +-
drivers/crypto/hisilicon/trng/trng.c | 298 +---
drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +-
drivers/crypto/qat/qat_common/adf_accel_devices.h | 2 +
drivers/crypto/qat/qat_common/adf_aer.c | 7 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 4 +
drivers/crypto/qat/qat_common/adf_isr.c | 18 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 27 +
drivers/crypto/qat/qat_common/adf_sriov.c | 27 +-
drivers/crypto/qat/qat_common/qat_asym_algs.c | 10 +-
drivers/crypto/talitos.c | 26 +-
drivers/dax/kmem.c | 6 +
drivers/dma-buf/dma-fence-unwrap.c | 176 ---
drivers/dma-buf/udmabuf.c | 5 +-
drivers/dma/dmaengine.c | 3 +-
drivers/dma/qcom/gpi.c | 1 +
drivers/edac/skx_common.c | 3 +
drivers/firmware/arm_scmi/power.c | 6 +-
drivers/firmware/arm_scmi/sensors.c | 2 +-
drivers/gpio/gpio-eic-sprd.c | 8 +-
drivers/gpio/gpio-htc-egpio.c | 6 +-
drivers/gpio/gpio-mvebu.c | 5 +-
drivers/gpio/gpio-palmas.c | 19 +
drivers/gpio/gpio-pca953x.c | 11 +-
drivers/gpio/gpio-sch.c | 32 +-
drivers/gpio/gpio-timberdale.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 4 +-
.../amd/display/modules/info_packet/info_packet.c | 2 +
drivers/gpu/drm/drm_edid.c | 8 +
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 +-
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 11 +
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 22 -
drivers/gpu/drm/i2c/sil164_drv.c | 7 -
drivers/gpu/drm/msm/dp/dp_display.c | 4 +-
drivers/gpu/drm/msm/dp/dp_reg.h | 4 +-
.../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +-
drivers/gpu/drm/radeon/radeon_ring.c | 4 +-
drivers/gpu/drm/tegra/dc.c | 4 +-
drivers/gpu/drm/tegra/gem.c | 9 +-
drivers/gpu/drm/tidss/tidss_kms.c | 2 -
drivers/gpu/host1x/bus.c | 2 +-
drivers/hid/hid-appleir.c | 45 +-
drivers/hid/hid-core.c | 7 +
drivers/hid/hid-lg-g15.c | 16 +
drivers/hid/hid-logitech-hidpp.c | 1 -
drivers/hid/hid-multitouch.c | 32 +-
drivers/hid/hid-picolcd_core.c | 3 +-
drivers/hid/hid-sensor-hub.c | 77 +-
drivers/hid/wacom_sys.c | 12 +-
drivers/hwmon/Kconfig | 1 +
drivers/hwmon/asus_atk0110.c | 3 +
drivers/hwmon/pmbus/adm1275.c | 2 +-
drivers/hwmon/w83627hf.c | 4 +
drivers/hwmon/w83793.c | 1 +
drivers/hwspinlock/qcom_hwspinlock.c | 5 +-
.../hwtracing/coresight/coresight-cti-platform.c | 1 +
drivers/hwtracing/coresight/coresight-etb10.c | 6 +-
drivers/hwtracing/coresight/coresight-etm4x-core.c | 4 +-
drivers/i2c/busses/i2c-mlxbf.c | 4 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-stm32f7.c | 9 +-
drivers/i2c/i2c-core-base.c | 85 +-
drivers/i3c/master.c | 19 +-
drivers/iio/accel/bmc150-accel-core.c | 2 +
drivers/iio/accel/kxsd9.c | 5 +-
drivers/iio/accel/mma8452.c | 2 +
drivers/iio/adc/lpc32xx_adc.c | 4 +-
drivers/iio/adc/spear_adc.c | 3 +-
drivers/iio/adc/ti-ads124s08.c | 3 +-
drivers/iio/chemical/scd30_core.c | 19 +-
drivers/iio/common/Kconfig | 1 +
drivers/iio/common/Makefile | 1 +
drivers/iio/common/inv_sensors/Kconfig | 7 +
drivers/iio/common/inv_sensors/Makefile | 6 +
.../inv_sensors/inv_sensors_timestamp.c} | 120 +-
drivers/iio/common/st_sensors/st_sensors_core.c | 23 +-
drivers/iio/gyro/bmg160_core.c | 16 +-
drivers/iio/imu/adis_trigger.c | 2 +-
drivers/iio/imu/bmi160/bmi160_core.c | 3 +-
drivers/iio/imu/inv_icm42600/Kconfig | 1 +
drivers/iio/imu/inv_icm42600/Makefile | 1 -
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 35 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 61 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 3 +
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 24 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 35 +-
.../iio/imu/inv_icm42600/inv_icm42600_timestamp.h | 85 -
drivers/iio/imu/inv_mpu6050/Kconfig | 1 +
drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 30 +-
drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 18 +-
drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 85 +-
drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 11 +-
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 +-
drivers/iio/industrialio-event.c | 5 +-
drivers/iio/light/al3010.c | 2 +-
drivers/iio/light/gp2ap002.c | 2 +-
drivers/iio/light/opt3001.c | 6 +-
drivers/iio/light/si1133.c | 14 +-
drivers/iio/light/tsl2591.c | 6 +-
drivers/iio/light/veml6030.c | 8 +-
drivers/iio/magnetometer/ak8975.c | 15 +
drivers/iio/orientation/hid-sensor-rotation.c | 40 +-
drivers/iio/temperature/ltc2983.c | 5 +-
drivers/infiniband/core/cm.c | 13 +-
drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +-
drivers/infiniband/hw/hns/hns_roce_main.c | 2 +-
drivers/infiniband/hw/irdma/verbs.c | 18 +-
drivers/infiniband/hw/irdma/verbs.h | 1 -
drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 +
drivers/infiniband/hw/mlx4/mr.c | 9 +-
drivers/infiniband/hw/mlx4/sysfs.c | 45 +-
drivers/infiniband/hw/mlx5/devx.c | 30 +-
drivers/infiniband/hw/mlx5/mr.c | 17 +-
drivers/infiniband/hw/mlx5/qp.c | 12 +-
drivers/infiniband/sw/siw/siw_qp_rx.c | 9 +
drivers/infiniband/ulp/rtrs/rtrs-srv.c | 5 +-
drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +-
drivers/input/joystick/iforce/iforce-packets.c | 18 +-
drivers/input/joystick/maplecontrol.c | 3 +-
drivers/input/keyboard/maple_keyb.c | 4 +-
drivers/input/misc/ims-pcu.c | 115 +-
drivers/input/mouse/elan_i2c_core.c | 36 +-
drivers/input/mouse/maplemouse.c | 9 +-
drivers/input/rmi4/rmi_bus.c | 4 +-
drivers/input/rmi4/rmi_f30.c | 2 +-
drivers/input/rmi4/rmi_f3a.c | 2 +-
drivers/input/touchscreen/goodix.c | 3 +-
drivers/input/touchscreen/mms114.c | 2 +-
drivers/input/touchscreen/touchwin.c | 15 +-
drivers/iommu/amd/amd_iommu_types.h | 11 +-
drivers/irqchip/irq-crossbar.c | 10 +-
drivers/irqchip/irq-gic-v3-its.c | 6 +-
drivers/leds/flash/leds-lm3601x.c | 11 +-
drivers/leds/leds-lm3697.c | 4 +-
drivers/leds/uleds.c | 3 +-
drivers/md/dm-bufio.c | 4 +-
drivers/md/dm-era-target.c | 10 +-
drivers/md/dm-ioctl.c | 7 +-
drivers/md/dm-log.c | 3 +
drivers/md/dm-stats.c | 10 +-
drivers/md/dm-thin-metadata.c | 67 +-
drivers/md/dm-verity-target.c | 2 +-
drivers/md/raid10.c | 1 +
drivers/media/platform/qcom/venus/helpers.c | 4 +-
.../media/platform/qcom/venus/hfi_platform_v4.c | 20 +-
.../media/platform/qcom/venus/hfi_platform_v6.c | 16 +-
drivers/media/platform/rockchip/rga/rga-hw.c | 2 +-
drivers/media/platform/rockchip/rga/rga-hw.h | 2 +-
drivers/media/usb/uvc/uvc_video.c | 30 +-
drivers/memstick/core/ms_block.c | 4 +
drivers/mfd/cros_ec_dev.c | 3 +-
drivers/mfd/sm501.c | 4 +-
drivers/mfd/tps6586x.c | 2 +-
drivers/mmc/host/vub300.c | 26 +-
drivers/mtd/devices/mchp23k256.c | 2 +-
drivers/mtd/devices/slram.c | 22 +-
drivers/mtd/maps/vmu-flash.c | 1 +
drivers/mtd/nand/onenand/onenand_samsung.c | 7 +-
drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +-
drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +-
drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +-
drivers/mtd/nand/raw/nand_base.c | 2 +-
drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +-
drivers/mtd/spi-nor/Kconfig | 1 -
drivers/net/bonding/bond_3ad.c | 1 +
drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +-
drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +-
.../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 -
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +-
drivers/net/ethernet/freescale/fman/fman.c | 4 +-
drivers/net/ethernet/freescale/gianfar.c | 16 +-
drivers/net/ethernet/marvell/mvneta.c | 3 +
drivers/net/ethernet/marvell/octeontx2/af/Makefile | 2 +-
drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 28 +
drivers/net/ethernet/marvell/octeontx2/af/npc.h | 30 +
drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 16 +
drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 25 +-
.../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 1 +
.../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 8 +
.../ethernet/marvell/octeontx2/af/rvu_devlink.c | 71 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 73 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 307 +++-
.../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.h | 17 +
.../ethernet/marvell/octeontx2/af/rvu_npc_hash.c | 1645 ++++++++++++++++++++
.../ethernet/marvell/octeontx2/af/rvu_npc_hash.h | 214 +++
.../net/ethernet/marvell/octeontx2/af/rvu_reg.h | 15 +
.../ethernet/marvell/octeontx2/nic/otx2_flows.c | 27 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 44 +-
.../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +-
.../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 +
.../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 +
drivers/net/ethernet/microsoft/mana/mana_en.c | 3 +-
drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +-
drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c | 5 +
drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h | 20 +
.../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 23 +-
drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 7 +
.../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 269 +++-
drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.c | 9 +-
drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.h | 1 +
drivers/net/ethernet/sun/sungem.c | 13 +-
drivers/net/ieee802154/ca8210.c | 9 +-
drivers/net/macsec.c | 7 +-
drivers/net/usb/gl620a.c | 6 +-
drivers/net/usb/kalmia.c | 8 +
drivers/net/usb/lan78xx.c | 18 +-
drivers/net/usb/net1080.c | 2 +-
drivers/net/veth.c | 2 +
drivers/net/virtio_net.c | 3 +
drivers/net/wireless/ath/ath9k/xmit.c | 5 +
drivers/net/wireless/ath/wcn36xx/smd.c | 6 +
drivers/net/wireless/marvell/mwifiex/join.c | 1 -
drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +-
drivers/net/wireless/realtek/rtw88/pci.c | 5 +
drivers/ntb/hw/epf/ntb_hw_epf.c | 20 +-
drivers/nvdimm/btt.c | 14 +-
drivers/nvme/host/core.c | 2 +-
drivers/nvme/host/multipath.c | 6 +
drivers/nvme/target/rdma.c | 18 +-
drivers/nvme/target/tcp.c | 33 +-
drivers/pci/Makefile | 2 +-
drivers/pci/controller/dwc/pci-imx6.c | 5 +-
drivers/pci/controller/dwc/pcie-designware-host.c | 2 +-
.../pci/controller/mobiveil/pcie-mobiveil-host.c | 8 +-
drivers/pci/controller/pci-host-common.c | 4 +
drivers/pci/controller/pcie-altera-msi.c | 2 +-
drivers/pci/controller/pcie-altera.c | 32 +-
drivers/pci/controller/pcie-mediatek-gen3.c | 2 +-
drivers/pci/controller/pcie-mediatek.c | 125 +-
drivers/pci/controller/pcie-rcar-host.c | 1 -
drivers/pci/controller/pcie-xilinx-nwl.c | 2 +-
drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +-
drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 +-
drivers/pci/pci.c | 136 --
drivers/pci/pci.h | 4 +
drivers/pci/rebar.c | 218 +++
drivers/pci/setup-bus.c | 101 +-
drivers/pci/setup-res.c | 53 -
drivers/phy/phy-can-transceiver.c | 3 +
drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +-
drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +-
drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +-
drivers/platform/x86/xo15-ebook.c | 7 +-
drivers/power/supply/charger-manager.c | 6 +-
drivers/pwm/pwm-imx27.c | 8 +-
drivers/rapidio/devices/tsi721.c | 3 +-
drivers/regulator/core.c | 29 +-
drivers/regulator/ltc3676.c | 10 +-
drivers/regulator/scmi-regulator.c | 1 +
drivers/reset/reset-imx7.c | 6 +
drivers/reset/reset-sunxi.c | 4 +-
drivers/rtc/rtc-abx80x.c | 3 +-
drivers/rtc/rtc-cmos.c | 6 +
drivers/rtc/rtc-ds1307.c | 30 +-
drivers/s390/char/monwriter.c | 3 +
drivers/scsi/elx/efct/efct_hw.c | 2 +
drivers/scsi/elx/efct/efct_unsol.c | 1 +
drivers/scsi/hpsa.c | 4 +
drivers/scsi/pm8001/pm8001_ctl.c | 5 +-
drivers/scsi/scsi_scan.c | 2 +-
drivers/scsi/scsi_transport_sas.c | 60 +-
drivers/scsi/sg.c | 7 +-
drivers/scsi/smartpqi/smartpqi_init.c | 2 +-
drivers/slimbus/qcom-ctrl.c | 5 +-
drivers/slimbus/qcom-ngd-ctrl.c | 107 +-
drivers/soc/fsl/qe/qe.c | 3 +
drivers/soc/ti/k3-ringacc.c | 4 +-
drivers/spi/spi-ep93xx.c | 1 +
drivers/spi/spi-fsl-lpspi.c | 18 +-
drivers/spi/spi-sh-msiof.c | 10 +-
drivers/spi/spi-uniphier.c | 4 +-
drivers/spi/spi-xilinx.c | 11 +-
drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +-
drivers/staging/media/atomisp/pci/sh_css.c | 6 +-
drivers/staging/media/ipu3/ipu3-css-params.c | 8 +-
drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +-
drivers/staging/most/video/video.c | 7 +-
drivers/staging/nvec/nvec.c | 4 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 129 +-
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 20 +-
drivers/staging/rtl8723bs/core/rtw_security.c | 2 +-
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 23 +-
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 88 +-
drivers/target/target_core_fabric_lib.c | 89 +-
drivers/target/target_core_internal.h | 3 +-
drivers/target/target_core_pr.c | 12 +-
drivers/thermal/intel/therm_throt.c | 7 +-
drivers/thermal/thermal_hwmon.c | 5 +-
drivers/tty/serial/8250/8250_mid.c | 31 +-
drivers/tty/serial/8250/8250_omap.c | 3 +-
drivers/tty/serial/msm_serial.c | 3 +-
drivers/usb/atm/ueagle-atm.c | 36 +-
drivers/usb/cdns3/cdnsp-mem.c | 2 +
drivers/usb/class/cdc-acm.c | 3 +
drivers/usb/common/ulpi.c | 23 +-
drivers/usb/core/quirks.c | 6 +
drivers/usb/dwc3/dwc3-meson-g12a.c | 14 +-
drivers/usb/dwc3/gadget.c | 43 +-
drivers/usb/gadget/composite.c | 5 +-
drivers/usb/gadget/function/f_fs.c | 5 +-
drivers/usb/gadget/function/rndis.c | 20 +-
drivers/usb/gadget/udc/core.c | 29 +-
drivers/usb/host/max3421-hcd.c | 8 +
drivers/usb/host/sl811-hcd.c | 1 +
drivers/usb/host/xhci.c | 11 +-
drivers/usb/misc/chaoskey.c | 1 -
drivers/usb/misc/idmouse.c | 45 +-
drivers/usb/misc/iowarrior.c | 21 +-
drivers/usb/misc/ldusb.c | 38 +-
drivers/usb/misc/legousbtower.c | 37 +-
drivers/usb/misc/uss720.c | 5 +-
drivers/usb/mtu3/mtu3_gadget.c | 1 +
drivers/usb/serial/digi_acceleport.c | 43 +-
drivers/usb/serial/keyspan_pda.c | 2 +-
drivers/usb/serial/option.c | 16 +
drivers/usb/storage/ene_ub6250.c | 3 +-
drivers/usb/storage/usb.c | 2 +-
drivers/usb/typec/tcpm/tcpm.c | 7 +-
drivers/usb/typec/ucsi/displayport.c | 7 +-
drivers/usb/typec/ucsi/ucsi_ccg.c | 2 +-
drivers/usb/usbip/vudc.h | 1 -
drivers/usb/usbip/vudc_dev.c | 4 +-
drivers/vdpa/vdpa_user/vduse_dev.c | 72 +-
drivers/vfio/pci/vfio_pci_core.c | 1 +
drivers/vhost/vdpa.c | 29 +-
drivers/video/fbdev/aty/radeon_base.c | 1 +
drivers/video/fbdev/broadsheetfb.c | 8 +-
drivers/video/fbdev/carminefb.c | 1 +
drivers/video/fbdev/core/fbcon.c | 14 +-
drivers/video/fbdev/hecubafb.c | 6 +-
drivers/video/fbdev/i740fb.c | 1 +
drivers/video/fbdev/metronomefb.c | 8 +-
drivers/video/fbdev/nvidia/nvidia.c | 1 +
drivers/video/fbdev/s3fb.c | 1 +
drivers/video/fbdev/sm501fb.c | 16 +-
drivers/video/fbdev/sm712.h | 2 +-
drivers/video/fbdev/tdfxfb.c | 1 +
drivers/video/fbdev/tridentfb.c | 1 +
drivers/video/fbdev/uvesafb.c | 4 +-
drivers/virtio/virtio_mmio.c | 26 +-
drivers/watchdog/sp5100_tco.c | 3 +-
drivers/watchdog/sprd_wdt.c | 5 +-
drivers/watchdog/watchdog_core.c | 3 +
drivers/xen/gntdev.c | 8 +-
drivers/xen/xen-scsiback.c | 30 +-
fs/afs/cell.c | 2 +
fs/afs/cmservice.c | 2 -
fs/afs/rxrpc.c | 11 +-
fs/afs/super.c | 3 +-
fs/afs/vl_list.c | 10 +-
fs/afs/volume.c | 2 +-
fs/btrfs/extent-tree.c | 17 +-
fs/btrfs/inode.c | 77 +-
fs/btrfs/ordered-data.c | 13 +
fs/btrfs/ordered-data.h | 2 +
fs/cifs/cifs_debug.c | 2 +-
fs/cifs/cifs_swn.c | 333 +++-
fs/cifs/cifsacl.c | 2 +-
fs/cifs/cifsfs.c | 3 +-
fs/cifs/cifsglob.h | 6 +-
fs/cifs/cifsproto.h | 11 +-
fs/cifs/connect.c | 38 +-
fs/cifs/dfs_cache.c | 2 +-
fs/cifs/ioctl.c | 12 +-
fs/cifs/misc.c | 14 +-
fs/cifs/netmisc.c | 2 +-
fs/cifs/readdir.c | 6 +-
fs/cifs/smb2maperror.c | 16 +-
fs/cifs/smb2misc.c | 130 +-
fs/cifs/smb2ops.c | 118 +-
fs/cifs/smb2pdu.c | 118 +-
fs/cifs/smb2pdu.h | 373 +----
fs/cifs/smb2proto.h | 4 +-
fs/cifs/smb2transport.c | 38 +-
fs/cifs/trace.h | 95 +-
fs/configfs/dir.c | 57 +-
fs/efs/file.c | 21 +-
fs/exfat/dir.c | 13 +-
fs/ext4/ioctl.c | 12 +-
fs/f2fs/checkpoint.c | 13 +-
fs/f2fs/data.c | 29 +
fs/f2fs/debug.c | 2 +-
fs/f2fs/f2fs.h | 1 +
fs/f2fs/file.c | 15 +-
fs/f2fs/gc.c | 4 +-
fs/f2fs/inode.c | 39 +-
fs/f2fs/segment.c | 14 +-
fs/f2fs/segment.h | 8 +-
fs/f2fs/xattr.c | 4 +-
fs/fuse/cuse.c | 4 +-
fs/fuse/dev.c | 2 +-
fs/hfs/bfind.c | 2 +-
fs/hfs/bnode.c | 56 +-
fs/hfs/brec.c | 2 +-
fs/hfs/btree.c | 2 +-
fs/hfs/btree.h | 71 +-
fs/hfs/hfs_fs.h | 85 +-
fs/hfs/inode.c | 2 +-
fs/hfsplus/bfind.c | 2 +-
fs/hfsplus/bnode.c | 62 +-
fs/hfsplus/brec.c | 2 +-
fs/hfsplus/btree.c | 2 +-
fs/hfsplus/hfsplus_fs.h | 40 +-
fs/isofs/rock.c | 11 +
fs/jbd2/journal.c | 2 +
fs/ksmbd/connection.c | 49 +-
fs/ksmbd/connection.h | 3 +
fs/ksmbd/oplock.c | 10 +-
fs/ksmbd/smb2pdu.c | 23 +-
fs/ksmbd/smbacl.c | 4 +-
fs/ksmbd/vfs_cache.c | 30 +-
fs/ksmbd/vfs_cache.h | 1 +
fs/lockd/svcsubs.c | 4 +-
fs/nfs/callback_proc.c | 9 +-
fs/nfs/dir.c | 2 +
fs/nfs/filelayout/filelayout.c | 2 +
fs/nfs/flexfilelayout/flexfilelayout.c | 33 +
fs/nfs/flexfilelayout/flexfilelayout.h | 16 +
fs/nfs/pnfs.c | 4 +-
fs/nfsd/nfs4layouts.c | 4 +-
fs/nfsd/nfs4recover.c | 120 +-
fs/nfsd/nfs4state.c | 22 +-
fs/nfsd/vfs.c | 9 +-
fs/nilfs2/segment.c | 22 +
fs/ntfs3/fslog.c | 97 +-
fs/ntfs3/index.c | 31 +-
fs/ntfs3/lznt.c | 2 +-
fs/ntfs3/namei.c | 2 +-
fs/ocfs2/alloc.c | 2 +-
fs/ocfs2/aops.c | 13 +-
fs/ocfs2/buffer_head_io.c | 7 +-
fs/ocfs2/dlm/dlmdebug.c | 16 +-
fs/ocfs2/dlmglue.c | 17 +
fs/ocfs2/inode.c | 150 +-
fs/ocfs2/journal.c | 13 +-
fs/ocfs2/move_extents.c | 4 +-
fs/ocfs2/ocfs2.h | 2 -
fs/ocfs2/quota_local.c | 2 +-
fs/ocfs2/stack_user.c | 10 +-
fs/ocfs2/super.c | 2 -
fs/ocfs2/sysfile.c | 9 +-
fs/orangefs/dir.c | 7 +-
fs/proc/array.c | 6 +
fs/proc/base.c | 184 +--
fs/proc/fd.c | 71 +-
fs/proc/generic.c | 9 +-
fs/proc/internal.h | 6 +-
fs/proc/namespaces.c | 16 +-
fs/proc/proc_net.c | 1 +
fs/smbfs_common/smb2pdu.h | 318 ++++
fs/sysfs/file.c | 4 +
fs/udf/balloc.c | 5 +-
fs/udf/super.c | 11 +-
fs/userfaultfd.c | 14 +-
fs/xfs/xfs_dquot.c | 16 +-
fs/xfs/xfs_log_recover.c | 76 +-
fs/xfs/xfs_reflink.c | 36 +
include/crypto/drbg.h | 18 +-
include/linux/audit.h | 8 +
include/linux/bitops.h | 2 +
include/linux/bpf.h | 4 +
include/linux/device.h | 5 +-
include/linux/fwnode.h | 2 +
include/linux/glob.h | 1 +
include/linux/hid-sensor-hub.h | 25 +
include/linux/hid.h | 29 +
include/linux/iio/common/inv_sensors_timestamp.h | 94 ++
include/linux/netlink.h | 2 +
include/linux/pci.h | 4 +-
include/linux/platform_data/pca953x.h | 2 +-
include/linux/skmsg.h | 22 +-
include/linux/vmalloc.h | 4 +-
include/net/addrconf.h | 10 +-
include/net/bluetooth/hci.h | 5 +-
include/net/bluetooth/l2cap.h | 2 +-
include/net/fib_rules.h | 5 +
include/net/gue.h | 2 +-
include/net/ip_fib.h | 8 +-
include/net/ip_vs.h | 3 +-
include/net/rtnetlink.h | 3 +
include/net/sctp/sctp.h | 3 +-
include/net/sock.h | 2 +-
include/net/xdp.h | 29 +
include/net/xfrm.h | 7 +
include/sound/asequencer.h | 4 +
include/sound/seq_kernel.h | 8 +
include/uapi/sound/asequencer.h | 54 +-
io_uring/io-wq.c | 2 +-
kernel/audit.c | 85 +-
kernel/bpf/core.c | 2 +-
kernel/bpf/devmap.c | 19 +
kernel/bpf/hashtab.c | 21 +-
kernel/bpf/helpers.c | 9 +-
kernel/bpf/inode.c | 13 +-
kernel/bpf/lpm_trie.c | 10 +-
kernel/bpf/verifier.c | 3 +-
kernel/cgroup/cpuset.c | 7 +-
kernel/cpu.c | 20 +-
kernel/events/core.c | 14 +-
kernel/locking/rtmutex.c | 14 +-
kernel/locking/rtmutex_api.c | 2 +-
kernel/sched/fair.c | 2 +-
kernel/sched/features.h | 8 +
kernel/time/posix-cpu-timers.c | 3 +-
kernel/time/time.c | 2 +-
kernel/trace/ring_buffer.c | 3 +-
kernel/trace/trace_eprobe.c | 2 +-
kernel/trace/trace_events_filter.c | 6 +-
kernel/trace/trace_probe.c | 3 +-
kernel/trace/trace_probe.h | 2 +-
kernel/workqueue.c | 2 +-
lib/debugobjects.c | 17 +
lib/glob.c | 31 +-
lib/test_meminit.c | 2 +-
net/6lowpan/nhc.c | 2 +-
net/9p/client.c | 2 +
net/9p/trans_rdma.c | 19 +-
net/atm/common.c | 2 +
net/batman-adv/distributed-arp-table.c | 30 +-
net/batman-adv/fragmentation.c | 8 +-
net/batman-adv/gateway_client.c | 3 +-
net/batman-adv/main.c | 13 +-
net/batman-adv/routing.c | 3 +-
net/batman-adv/soft-interface.c | 17 +-
net/batman-adv/soft-interface.h | 2 +
net/batman-adv/translation-table.c | 5 +-
net/bluetooth/af_bluetooth.c | 17 +-
net/bluetooth/bnep/core.c | 27 +-
net/bluetooth/l2cap_core.c | 123 +-
net/bluetooth/l2cap_sock.c | 4 +-
net/bluetooth/sco.c | 62 +-
net/bridge/br_cfm.c | 6 +
net/bridge/br_cfm_netlink.c | 4 +-
net/bridge/br_if.c | 3 +
net/bridge/br_stp.c | 3 +-
net/bridge/netfilter/ebtables.c | 22 +-
net/bridge/netfilter/nft_meta_bridge.c | 4 +-
net/can/bcm.c | 90 +-
net/can/isotp.c | 9 +-
net/core/fib_rules.c | 6 +-
net/core/filter.c | 44 +-
net/core/lwt_bpf.c | 12 +
net/core/rtnetlink.c | 10 +
net/core/skbuff.c | 23 +-
net/core/skmsg.c | 2 +
net/dsa/tag_ksz.c | 18 +-
net/ieee802154/core.c | 2 +-
net/ieee802154/header_ops.c | 9 +-
net/ieee802154/ieee802154.h | 17 +
net/ieee802154/netlink.c | 36 +-
net/ife/ife.c | 2 +-
net/ipv4/fib_frontend.c | 15 +-
net/ipv4/igmp.c | 1 +
net/ipv4/ip_gre.c | 6 +
net/ipv4/ip_vti.c | 3 +
net/ipv4/ipmr.c | 4 +-
net/ipv4/netfilter/nf_reject_ipv4.c | 2 +-
net/ipv4/sysctl_net_ipv4.c | 10 +-
net/ipv4/tcp_output.c | 4 +-
net/ipv6/addrconf.c | 23 +-
net/ipv6/ip6_fib.c | 73 +-
net/ipv6/ip6_gre.c | 6 +
net/ipv6/ip6_vti.c | 3 +
net/ipv6/ip6mr.c | 4 +-
net/ipv6/mcast.c | 165 +-
net/ipv6/netfilter.c | 4 +-
net/ipv6/netfilter/ip6t_ah.c | 5 +
net/ipv6/netfilter/ip6t_hbh.c | 1 +
net/ipv6/netfilter/ip6t_rt.c | 3 +-
net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +-
net/ipv6/route.c | 9 +-
net/ipv6/seg6.c | 3 +
net/ipv6/sit.c | 3 +
net/kcm/kcmsock.c | 8 +-
net/key/af_key.c | 1 +
net/llc/af_llc.c | 1 +
net/llc/llc_conn.c | 1 -
net/mac80211/main.c | 3 +-
net/mac80211/tx.c | 17 +-
net/mac802154/iface.c | 2 +-
net/mpls/af_mpls.c | 4 +-
net/netfilter/ipset/ip_set_core.c | 12 +-
net/netfilter/ipvs/ip_vs_app.c | 10 +-
net/netfilter/ipvs/ip_vs_conn.c | 4 +-
net/netfilter/ipvs/ip_vs_core.c | 36 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +-
net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +-
net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +-
net/netfilter/nf_conncount.c | 23 +-
net/netfilter/nf_conntrack_core.c | 18 +-
net/netfilter/nf_conntrack_irc.c | 6 +-
net/netfilter/nf_conntrack_seqadj.c | 2 +
net/netfilter/nf_nat_sip.c | 9 +
net/netfilter/nf_tables_api.c | 41 +-
net/netfilter/nfnetlink_cthelper.c | 4 +-
net/netfilter/nfnetlink_osf.c | 6 +-
net/netfilter/nft_log.c | 58 +-
net/netfilter/nft_set_bitmap.c | 4 +-
net/netfilter/nft_set_hash.c | 8 +-
net/netfilter/nft_set_pipapo.c | 5 +-
net/netfilter/nft_set_rbtree.c | 4 +-
net/netfilter/nft_synproxy.c | 9 +-
net/netfilter/xt_AUDIT.c | 58 +-
net/netfilter/xt_cluster.c | 2 +-
net/netfilter/xt_connmark.c | 14 +-
net/netfilter/xt_nat.c | 9 +
net/netfilter/xt_rateest.c | 2 +-
net/netfilter/xt_u32.c | 12 +-
net/netlink/af_netlink.c | 35 +-
net/netlink/af_netlink.h | 5 +-
net/nfc/llcp_sock.c | 14 +-
net/openvswitch/conntrack.c | 2 +-
net/openvswitch/flow_netlink.c | 201 ++-
net/psample/psample.c | 6 +-
net/qrtr/af_qrtr.c | 2 +-
net/sched/act_bpf.c | 2 +-
net/sched/act_pedit.c | 11 +-
net/sched/cls_api.c | 3 +
net/sched/cls_bpf.c | 10 +-
net/sched/sch_cake.c | 5 +-
net/sched/sch_codel.c | 48 +-
net/sched/sch_drr.c | 8 +-
net/sched/sch_fq_codel.c | 41 +-
net/sched/sch_hfsc.c | 24 +-
net/sched/sch_hhf.c | 27 +
net/sched/sch_htb.c | 14 +-
net/sched/sch_multiq.c | 2 +-
net/sctp/diag.c | 67 +-
net/sctp/sm_make_chunk.c | 10 +-
net/sctp/sm_statefuns.c | 23 +-
net/sctp/socket.c | 29 +-
net/smc/smc_cdc.c | 15 +-
net/socket.c | 2 +-
net/sunrpc/xprtrdma/rpc_rdma.c | 4 +-
net/tipc/bcast.c | 22 +-
net/tipc/bcast.h | 2 +-
net/tipc/bearer.c | 1 +
net/tipc/name_distr.c | 13 +-
net/tipc/netlink.c | 12 +
net/tipc/node.c | 15 +-
net/tipc/socket.c | 3 +
net/tls/tls_sw.c | 4 +
net/xfrm/xfrm_interface_core.c | 3 +
net/xfrm/xfrm_policy.c | 3 +
net/xfrm/xfrm_state.c | 2 +-
net/xfrm/xfrm_user.c | 2 +-
samples/trace_events/trace-events-sample.c | 4 +
scripts/kconfig/conf.c | 6 +-
security/apparmor/domain.c | 58 +-
security/apparmor/include/policy_unpack.h | 19 +
security/apparmor/label.c | 2 +-
security/apparmor/lsm.c | 16 +-
security/apparmor/net.c | 1 +
security/apparmor/policy.c | 14 +-
security/apparmor/procattr.c | 2 +
security/integrity/evm/evm_secfs.c | 16 +-
security/keys/keyring.c | 2 +-
sound/aoa/fabrics/layout.c | 6 +
sound/core/seq/Kconfig | 7 +
sound/core/seq/seq_clientmgr.c | 174 ++-
sound/core/seq/seq_clientmgr.h | 2 +
sound/core/seq/seq_compat.c | 1 +
sound/core/seq/seq_memory.c | 10 +-
sound/core/seq/seq_memory.h | 19 +-
sound/firewire/isight.c | 3 +-
sound/pci/es1938.c | 2 +
sound/soc/codecs/adau1372.c | 5 +
sound/soc/codecs/hdac_hdmi.c | 4 +-
sound/soc/fsl/fsl_audmix.c | 6 +
sound/soc/tegra/tegra210_ahub.c | 4 +-
sound/usb/caiaq/input.c | 2 +-
sound/usb/mixer_quirks.c | 101 +-
sound/usb/mixer_scarlett.c | 4 +-
sound/usb/mixer_us16x08.c | 127 +-
sound/virtio/virtio_pcm.c | 3 +-
sound/virtio/virtio_pcm_ops.c | 3 +-
tools/bpf/bpftool/net.c | 4 +-
tools/include/linux/bitops.h | 2 +
tools/lib/api/fs/fs.c | 19 +-
tools/lib/bpf/strset.c | 62 +-
tools/lib/symbol/kallsyms.c | 5 +-
tools/perf/builtin-c2c.c | 1 +
tools/perf/builtin-sched.c | 37 +-
tools/perf/trace/beauty/fcntl.c | 16 +
tools/perf/util/bpf-event.c | 18 +-
tools/perf/util/cpumap.c | 6 +
tools/perf/util/event.c | 15 +-
tools/perf/util/header.c | 54 +
tools/perf/util/hist.c | 7 +-
.../util/intel-pt-decoder/intel-pt-insn-decoder.c | 11 +-
tools/perf/util/machine.c | 10 +-
tools/perf/util/mmap.c | 18 +-
tools/perf/util/pmu.c | 10 +-
tools/perf/util/probe-finder.c | 4 +-
tools/perf/util/symbol-elf.c | 48 +-
tools/perf/util/symbol-minimal.c | 11 +-
tools/perf/util/symbol.c | 2 +-
tools/perf/util/thread.c | 5 +
.../selftests/bpf/progs/bpf_iter_task_vma.c | 2 +-
tools/testing/selftests/vm/compaction_test.c | 3 +
tools/testing/selftests/vm/hmm-tests.c | 63 +-
tools/usb/usbip/libsrc/usbip_common.c | 2 +
tools/usb/usbip/libsrc/usbip_device_driver.c | 4 +
tools/usb/usbip/libsrc/vhci_driver.c | 1 +
tools/virtio/vringh_test.c | 5 +
tools/vm/slabinfo.c | 4 +-
virt/kvm/eventfd.c | 12 +-
virt/kvm/kvm_main.c | 16 +-
810 files changed, 11262 insertions(+), 5387 deletions(-)
^ permalink raw reply [flat|nested] 5+ messages in thread* [PATCH 5.15 458/843] rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 2026-07-21 15:13 [PATCH 5.15 000/843] 5.15.212-rc1 review Greg Kroah-Hartman @ 2026-07-21 15:21 ` Greg Kroah-Hartman 2026-07-21 15:22 ` [PATCH 5.15 516/843] arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Greg Kroah-Hartman ` (2 subsequent siblings) 3 siblings, 0 replies; 5+ messages in thread From: Greg Kroah-Hartman @ 2026-07-21 15:21 UTC (permalink / raw) To: stable Cc: Greg Kroah-Hartman, patches, Ronan Dalton, linux-rtc, linux-kernel, Alexandre Belloni, Tyler Hicks, Sasha Levin, Meagan Lloyd, Rodolfo Giometti, Chris Packham 5.15-stable review patch. If anyone has any objections, please let me know. ------------------ From: Ronan Dalton <ronan.dalton@alliedtelesis.co.nz> [ Upstream commit a091e1ba3b68cabc9caedafc6f81d9fe9b3b2200 ] Prior to commit 48458654659c ("rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe"), the oscillator stop flag (OSF) bit was checked during device probe for the ds1337, ds1339, ds1341, and ds3231 chips; if it was set, it would be cleared and a warning would be logged saying "SET TIME!". Since that commit, the OSF bit is no longer cleared, but the warning is still printed. Directly following that commit, there was no way to get rid of this warning because nothing cleared the OSF bit on these chips. The commit associated with the previous commit, 523923cfd5d6 ("rtc: ds1307: handle oscillator stop flag (OSF) for ds1341"), made proper use of the OSF when getting and setting the time in the RTC. However, the other RTC variants ds1337, ds1339 and ds3231 didn't have a corresponding change made. Given that the OSF bit is no longer cleared at probe time when it is set, the remaining three chips should have the same handling as the ds1341 chip has for the OSF bit. Fix the issue on the ds1337, ds1339 and ds3231 chips by applying the same logic as the ds1341 has to these chips. Note that any devices brought up between the first referenced commit and this one may begin mistrusting the time reported by the RTC until it is set again, if the bit was never explicitly cleared. Note that only the ds1339 was tested with this change, but the datasheets for the other chips contain essentially identical descriptions of the OSF bit so the same change should work. Signed-off-by: Ronan Dalton <ronan.dalton@alliedtelesis.co.nz> Cc: linux-rtc@vger.kernel.org Cc: linux-kernel@vger.kernel.org Cc: Alexandre Belloni <alexandre.belloni@bootlin.com> Cc: Tyler Hicks <code@tyhicks.com> Cc: Sasha Levin <sashal@kernel.org> Cc: Meagan Lloyd <meaganlloyd@linux.microsoft.com> Cc: Rodolfo Giometti <giometti@enneenne.com> Cc: Chris Packham <chris.packham@alliedtelesis.co.nz> Fixes: 48458654659c ("rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe") Reviewed-by: Meagan Lloyd <meaganlloyd@linux.microsoft.com> Reviewed-by: Tyler Hicks <code@tyhicks.com> Link: https://patch.msgid.link/20260508032518.3696705-2-ronan.dalton@alliedtelesis.co.nz Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Sasha Levin <sashal@kernel.org> --- drivers/rtc/rtc-ds1307.c | 28 +++++++++++++++++----------- 1 file changed, 17 insertions(+), 11 deletions(-) diff --git a/drivers/rtc/rtc-ds1307.c b/drivers/rtc/rtc-ds1307.c index e02bc2a2e77f79..d01c420bc229a0 100644 --- a/drivers/rtc/rtc-ds1307.c +++ b/drivers/rtc/rtc-ds1307.c @@ -263,6 +263,16 @@ static int ds1307_get_time(struct device *dev, struct rtc_time *t) if (tmp & DS1338_BIT_OSF) return -EINVAL; break; + case ds_1337: + case ds_1339: + case ds_1341: + case ds_3231: + ret = regmap_read(ds1307->regmap, DS1337_REG_STATUS, &tmp); + if (ret) + return ret; + if (tmp & DS1337_BIT_OSF) + return -EINVAL; + break; case ds_1340: if (tmp & DS1340_BIT_nEOSC) return -EINVAL; @@ -273,13 +283,6 @@ static int ds1307_get_time(struct device *dev, struct rtc_time *t) if (tmp & DS1340_BIT_OSF) return -EINVAL; break; - case ds_1341: - ret = regmap_read(ds1307->regmap, DS1337_REG_STATUS, &tmp); - if (ret) - return ret; - if (tmp & DS1337_BIT_OSF) - return -EINVAL; - break; case ds_1388: ret = regmap_read(ds1307->regmap, DS1388_REG_FLAG, &tmp); if (ret) @@ -374,14 +377,17 @@ static int ds1307_set_time(struct device *dev, struct rtc_time *t) regmap_update_bits(ds1307->regmap, DS1307_REG_CONTROL, DS1338_BIT_OSF, 0); break; - case ds_1340: - regmap_update_bits(ds1307->regmap, DS1340_REG_FLAG, - DS1340_BIT_OSF, 0); - break; + case ds_1337: + case ds_1339: case ds_1341: + case ds_3231: regmap_update_bits(ds1307->regmap, DS1337_REG_STATUS, DS1337_BIT_OSF, 0); break; + case ds_1340: + regmap_update_bits(ds1307->regmap, DS1340_REG_FLAG, + DS1340_BIT_OSF, 0); + break; case ds_1388: regmap_update_bits(ds1307->regmap, DS1388_REG_FLAG, DS1388_BIT_OSF, 0); -- 2.53.0 ^ permalink raw reply related [flat|nested] 5+ messages in thread
* [PATCH 5.15 516/843] arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() 2026-07-21 15:13 [PATCH 5.15 000/843] 5.15.212-rc1 review Greg Kroah-Hartman 2026-07-21 15:21 ` [PATCH 5.15 458/843] rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Greg Kroah-Hartman @ 2026-07-21 15:22 ` Greg Kroah-Hartman 2026-07-21 16:35 ` [PATCH 5.15 000/843] 5.15.212-rc1 review Florian Fainelli 2026-07-21 22:20 ` Brett A C Sheffield 3 siblings, 0 replies; 5+ messages in thread From: Greg Kroah-Hartman @ 2026-07-21 15:22 UTC (permalink / raw) To: stable Cc: Greg Kroah-Hartman, patches, Catalin Marinas, Will Deacon, Ryan Roberts, David Hildenbrand, linux-arm-kernel, linux-kernel, Ben Hutchings, Anshuman Khandual, Sasha Levin 5.15-stable review patch. If anyone has any objections, please let me know. ------------------ From: Anshuman Khandual <anshuman.khandual@arm.com> [ Upstream commit ff4c5a0de1f2ef7737a8688a86e19301e567020d ] Commit 48478b9f7913 ("arm64/mm: Enable batched TLB flush in unmap_hotplug_range") inadvertently introduced redundant TLB invalidation when clearing a block entry, resulting in unnecessary broadcast invalidation on CPUs without support for range-based invalidation. Re-introduce the old behaviour, along with some expanded comments to help people working in this area next time around. Cc: Catalin Marinas <catalin.marinas@arm.com> Cc: Will Deacon <will@kernel.org> Cc: Ryan Roberts <ryan.roberts@arm.com> Cc: David Hildenbrand <david@kernel.org> Cc: linux-arm-kernel@lists.infradead.org Cc: linux-kernel@vger.kernel.org Reported-by: Ben Hutchings <ben@decadent.org.uk> Closes: https://lore.kernel.org/all/b0d5836032ce3135bfc473f6bff791306d086925.camel@decadent.org.uk/ Fixes: 48478b9f7913 ("arm64/mm: Enable batched TLB flush in unmap_hotplug_range()") Signed-off-by: Anshuman Khandual <anshuman.khandual@arm.com> Reviewed-by: David Hildenbrand (Arm) <david@kernel.org> Reviewed-by: Catalin Marinas <catalin.marinas@arm.com> [will: Reword comments and commit message] Signed-off-by: Will Deacon <will@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> --- arch/arm64/mm/mmu.c | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/arch/arm64/mm/mmu.c b/arch/arm64/mm/mmu.c index 739d00a69be103..8e5fcfc282bcd5 100644 --- a/arch/arm64/mm/mmu.c +++ b/arch/arm64/mm/mmu.c @@ -917,7 +917,13 @@ static void unmap_hotplug_pmd_range(pud_t *pudp, unsigned long addr, if (free_mapped) { /* CONT blocks are not supported in the vmemmap */ WARN_ON(pmd_cont(pmd)); - flush_tlb_kernel_range(addr, addr + PMD_SIZE); + /* + * Invalidating a block entry requires just + * a single overlapping TLB invalidation, + * so limit the range of the flush to a single + * page. + */ + flush_tlb_kernel_range(addr, addr + PAGE_SIZE); free_hotplug_page_range(pmd_page(pmd), PMD_SIZE, altmap); } @@ -947,7 +953,8 @@ static void unmap_hotplug_pud_range(p4d_t *p4dp, unsigned long addr, if (pud_sect(pud)) { pud_clear(pudp); if (free_mapped) { - flush_tlb_kernel_range(addr, addr + PUD_SIZE); + /* See comment in unmap_hotplug_pmd_range(). */ + flush_tlb_kernel_range(addr, addr + PAGE_SIZE); free_hotplug_page_range(pud_page(pud), PUD_SIZE, altmap); } -- 2.53.0 ^ permalink raw reply related [flat|nested] 5+ messages in thread
* Re: [PATCH 5.15 000/843] 5.15.212-rc1 review 2026-07-21 15:13 [PATCH 5.15 000/843] 5.15.212-rc1 review Greg Kroah-Hartman 2026-07-21 15:21 ` [PATCH 5.15 458/843] rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Greg Kroah-Hartman 2026-07-21 15:22 ` [PATCH 5.15 516/843] arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Greg Kroah-Hartman @ 2026-07-21 16:35 ` Florian Fainelli 2026-07-21 22:20 ` Brett A C Sheffield 3 siblings, 0 replies; 5+ messages in thread From: Florian Fainelli @ 2026-07-21 16:35 UTC (permalink / raw) To: Greg Kroah-Hartman, stable Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches, lkft-triage, pavel, jonathanh, sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr On 7/21/26 08:13, Greg Kroah-Hartman wrote: > This is the start of the stable review cycle for the 5.15.212 release. > There are 843 patches in this series, all will be posted as a response > to this one. If anyone has any issues with these being applied, please > let me know. > > Responses should be made by Thu, 23 Jul 2026 15:23:00 +0000. > Anything received after that time might be too late. > > The whole patch series can be found in one patch at: > https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.212-rc1.gz > or in the git tree and branch at: > git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y > and the diffstat can be found below. > > thanks, > > greg k-h Same "perf" build issue with 5.15.212-rc1 here with the following signature: CC /local/users/fainelli/buildroot/output/arm/build/linux-custom/tools/perf/util/symbol_fprintf.o util/event.c: In function 'machine__resolve': util/event.c:700:32: warning: implicit declaration of function 'perf_env__get_cpu_topology'; did you mean 'perf_env__read_cpu_topology_map'? [-Wimplicit-function-declaration] 700 | topo = perf_env__get_cpu_topology(env, (struct perf_cpu){ al->cpu }); | ^~~~~~~~~~~~~~~~~~~~~~~~~~ | perf_env__read_cpu_topology_map util/event.c:700:83: warning: excess elements in struct initializer 700 | topo = perf_env__get_cpu_topology(env, (struct perf_cpu){ al->cpu }); | ^~ util/event.c:700:83: note: (near initialization for '(anonymous)') util/event.c:700:81: error: invalid use of undefined type 'struct perf_cpu' 700 | topo = perf_env__get_cpu_topology(env, (struct perf_cpu){ al->cpu }); | ^ CC /local/users/fainelli/buildroot/output/arm/build/linux-custom/tools/perf/util/color_config.o make[6]: *** [/local/users/fainelli/buildroot/output/arm/build/linux-custom/tools/build/Makefile.build:97: /local/users/fainelli/buildroot/output/arm/build/linux-custom/tools/perf/util/event.o] Error 1 make[6]: *** Waiting for unfinished jobs.... -- Florian ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [PATCH 5.15 000/843] 5.15.212-rc1 review 2026-07-21 15:13 [PATCH 5.15 000/843] 5.15.212-rc1 review Greg Kroah-Hartman ` (2 preceding siblings ...) 2026-07-21 16:35 ` [PATCH 5.15 000/843] 5.15.212-rc1 review Florian Fainelli @ 2026-07-21 22:20 ` Brett A C Sheffield 3 siblings, 0 replies; 5+ messages in thread From: Brett A C Sheffield @ 2026-07-21 22:20 UTC (permalink / raw) To: gregkh Cc: stable, patches, linux-kernel, torvalds, akpm, linux, shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr, Brett A C Sheffield # Librecast Test Results 020/020 [ OK ] liblcrq 010/010 [ OK ] libmld 120/120 [ OK ] liblibrecast CPU/kernel: Linux auntie 5.15.212-rc1-00844-ga3775374bb5c #1 SMP Tue Jul 21 20:29:55 -00 2026 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux Tested-by: Brett A C Sheffield <bacs@librecast.net> ^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2026-07-21 22:21 UTC | newest] Thread overview: 5+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2026-07-21 15:13 [PATCH 5.15 000/843] 5.15.212-rc1 review Greg Kroah-Hartman 2026-07-21 15:21 ` [PATCH 5.15 458/843] rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Greg Kroah-Hartman 2026-07-21 15:22 ` [PATCH 5.15 516/843] arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Greg Kroah-Hartman 2026-07-21 16:35 ` [PATCH 5.15 000/843] 5.15.212-rc1 review Florian Fainelli 2026-07-21 22:20 ` Brett A C Sheffield
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox