From: Paolo Abeni <pabeni@redhat.com>
To: torvalds@linux-foundation.org
Cc: kuba@kernel.org, davem@davemloft.net, netdev@vger.kernel.org,
linux-kernel@vger.kernel.org
Subject: [GIT PULL] Networking for v7.1-rc4
Date: Thu, 14 May 2026 16:27:03 +0200 [thread overview]
Message-ID: <20260514142703.267609-1-pabeni@redhat.com> (raw)
Hi Linus!
The following changes since commit fcee7d82f27d6a8b1ddc5bbefda59b4e441e9bc0:
Merge tag 'net-7.1-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2026-05-07 10:32:03 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git net-7.1-rc4
for you to fetch changes up to c78bdba7b9666020c0832150a4fc4c0aebc7c6ac:
net: phy: DP83TC811: add reading of abilities (2026-05-14 15:17:12 +0200)
----------------------------------------------------------------
Including fixes from netfilter.
Previous releases - regressions:
- ethtool: fix NULL pointer dereference in phy_reply_size
- netfilter:
- allocate hook ops while under mutex
- close dangling table module init race
- restore nf_conntrack helper propagation via expectation
- tcp:
- fix potential UAF in reqsk_timer_handler().
- fix out-of-bounds access for twsk in tcp_ao_established_key().
- vsock: fix empty payload in tap skb for non-linear buffers
- hsr: fix NULL pointer dereference in hsr_get_node_data()
- eth: cortina: fix RX drop accounting
- eth: ice: fix locking in ice_dcb_rebuild()
Previous releases - always broken:
- napi: avoid gro timer misfiring at end of busypoll
- sched:
- dualpi2: initialize timer earlier in dualpi2_init()
- sch_cbs: Call qdisc_reset for child qdisc
- shaper:
- fix ordering issue in net_shaper_commit()
- reject handle IDs exceeding internal bit-width
- ipv6: flowlabel: enforce per-netns limit for unprivileged callers
- tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring
- smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
- batman-adv:
- reject new tp_meter sessions during teardown
- purge non-released claims
- eth: i40e: cleanup PTP registration on probe failure
- eth: idpf: fix double free and use-after-free in aux device error paths
- eth: ena: fix potential use-after-free in get_timestamp
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
----------------------------------------------------------------
Alice Ryhl (1):
genetlink: free the skb on 'group >= family->n_mcgrps'
Allison Henderson (1):
net/rds: reset op_nents when zerocopy page pin fails
Arthur Kiyanovski (2):
net: ena: PHC: Fix potential use-after-free in get_timestamp
net: ena: PHC: Check return code before setting timestamp output
Bart Van Assche (1):
ice: fix locking in ice_dcb_rebuild()
Ben Morris (1):
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
Chenguang Zhao (1):
ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics
David Carlier (1):
net: ethtool: phy: avoid NULL deref when PHY driver is unbound
Davide Caratti (1):
net/sched: dualpi2: initialize timer earlier in dualpi2_init()
Dragos Tatulea (1):
net: napi: Avoid gro timer misfiring at end of busypoll
Emil Tantilov (1):
idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()
Ethan Nelson-Moore (1):
net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference
Evgenii Burenchev (1):
qed: fix division by zero in qed_init_wfq_param when all vports are configured
Faicker Mo (1):
net: net_failover: Fix the deadlock in slave register
Florian Westphal (9):
netfilter: x_tables: allow initial table replace without emitting audit log message
netfilter: x_tables: allocate hook ops while under mutex
netfilter: x_tables: add and use xt_unregister_table_pre_exit
netfilter: x_tables: unregister the templates first
netfilter: x_tables: add and use xtables_unregister_table_exit
netfilter: ebtables: move to two-stage removal scheme
netfilter: ebtables: close dangling table module init race
netfilter: x_tables: close dangling table module init race
netfilter: bridge: eb_tables: close module init race
Greg Kroah-Hartman (1):
idpf: fix double free and use-after-free in aux device error paths
Holger Brunck (1):
net: wan: fsl_ucc_hdlc: free tx_skbuff in uhdlc_memclean
Ilya Maximets (1):
net: nsh: fix incorrect header length macros
Ivan Vecera (2):
ice: dpll: fix rclk pin state get for E810
ice: dpll: fix misplaced header macros
Jakub Kicinski (18):
Merge branch 'tcp-two-fixes-for-socket-migration-in-reqsk_timer_handler'
Merge branch 'ipv6-flowlabel-per-netns-budget-for-unprivileged-callers'
Merge branch 'intel-wired-lan-driver-updates-2026-05-04-i40e-ice-idpf'
Merge tag 'nf-26-05-08' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf
Merge tag 'batadv-net-pullrequest-20260508' of https://git.open-mesh.org/batadv
net: shaper: flip the polarity of the valid flag
net: shaper: fix trivial ordering issue in net_shaper_commit()
net: shaper: reject duplicate leaves in GROUP request
selftests: drv-net: add shaper test for duplicate leaves
net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit
net: shaper: fix undersized reply skb allocation in GROUP command
tools: ynl: add scope qualifier for definitions
net: shaper: reject handle IDs exceeding internal bit-width
net: shaper: enforce singleton NETDEV scope with id 0
net: shaper: reject QUEUE scope handle with missing id
Merge branch 'macsec-use-rcu_work-to-fix-crypto-cleanup-in-softirq-context'
net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring
net: tls: prevent chain-after-chain in plain text SG
Jamal Hadi Salim (1):
net/sched: sch_cbs: Call qdisc_reset for child qdisc
Jiexun Wang (3):
batman-adv: reject new tp_meter sessions during teardown
batman-adv: stop tp_meter sessions during mesh teardown
batman-adv: stop caching unowned originator pointers in BAT IV
Jinliang Zheng (3):
macsec: introduce dedicated workqueue for SA crypto cleanup
macsec: use rcu_work to defer RX SA crypto cleanup out of softirq
macsec: use rcu_work to defer TX SA crypto cleanup out of softirq
Kuniyuki Iwashima (3):
tcp: Fix potential UAF in reqsk_timer_handler().
tcp: Fix imbalanced icsk_accept_queue count.
tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().
Li Xiasong (2):
netfilter: nf_conntrack_sip: get helper before allocating expectation
netfilter: nft_ct: fix missing expect put in obj eval
Linus Walleij (3):
net: ethernet: cortina: No mapping is a dropped rx
net: ethernet: cortina: Make RX SKB per-port
net: ethernet: cortina: Carry over frag counter
Lyes Bourennani (1):
batman-adv: fix integer overflow on buff_pos
Maciej W. Rozycki (2):
MAINTAINERS: Add self for the 3c509 network driver
FDDI: defza: Sanitise the reset safety timer
Maoyi Xie (2):
ipv6: flowlabel: take ip6_fl_lock across mem_check and fl_intern
ipv6: flowlabel: enforce per-netns limit for unprivileged callers
Marcin Szycik (1):
ice: fix setting RSS VSI hash for E830
Matt Vollrath (2):
i40e: Cleanup PTP registration on probe failure
i40e: Cleanup PTP pins on probe failure
Mohsin Bashir (1):
net: shaper: Reject reparenting of existing nodes
Myeonghun Pak (1):
net: lan966x: avoid unregistering netdev on register failure
Nicolas Ferre (1):
MAINTAINERS: change maintainers for macb Ethernet driver
Nicolò Coccia (1):
net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS
Niklas Söderlund (1):
net: ethernet: ravb: Do not check URAM suspension when WoL is active
Pablo Neira Ayuso (2):
netfilter: nf_conntrack_expect: restore helper propagation via expectation
netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue
Paolo Abeni (3):
Merge branch 'vsock-virtio-fix-vsockmon-tap-skb-construction'
Merge branch 'net-ethernet-cortina-fix-various-rx-bugs'
Merge branch 'net-shaper-fix-various-minor-bugs'
Quan Sun (2):
net: ethtool: fix NULL pointer dereference in phy_reply_size
net: hsr: fix NULL pointer dereference in hsr_get_node_data()
Shitalkumar Gandhi (2):
net: ti: icssm-prueth: fix eth_ports_node leak in probe
net: xgene: fix mdio_np leak in xgene_mdiobus_register()
Stanislav Fomichev (1):
tools/ynl: add missing uapi header deps in Makefile.deps
Stefano Garzarella (2):
vsock/virtio: fix length and offset in tap skb for split packets
vsock/virtio: fix empty payload in tap skb for non-linear buffers
Sukhdeep Singh (1):
MAINTAINERS: update atlantic driver maintainer
Sven Eckelmann (4):
batman-adv: tp_meter: fix tp_num leak on kmalloc failure
batman-adv: bla: prevent use-after-free when deleting claims
batman-adv: bla: only purge non-released claims
batman-adv: bla: put backbone reference on failed claim hash insert
Sven Schuchmann (1):
net: phy: DP83TC811: add reading of abilities
Victor Nogueira (1):
selftests/tc-testing: Add QFQ/CBS qlen underflow test
Wei Yang (1):
net: atm: fix skb leak in sigd_send() default branch
Xiang Mei (2):
net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot
Zoran Ilievski (1):
net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled
Documentation/netlink/genetlink-c.yaml | 9 ++
Documentation/netlink/genetlink-legacy.yaml | 9 ++
Documentation/netlink/genetlink.yaml | 9 ++
Documentation/netlink/netlink-raw.yaml | 9 ++
Documentation/netlink/specs/net_shaper.yaml | 7 +
MAINTAINERS | 14 +-
drivers/net/ethernet/amazon/ena/ena_com.c | 7 +-
drivers/net/ethernet/amazon/ena/ena_phc.c | 5 +-
drivers/net/ethernet/apm/xgene/xgene_enet_hw.c | 4 +-
.../net/ethernet/aquantia/atlantic/aq_pci_func.c | 2 +-
drivers/net/ethernet/cirrus/cs89x0.c | 2 -
drivers/net/ethernet/cortina/gemini.c | 18 ++-
drivers/net/ethernet/intel/i40e/i40e.h | 1 +
drivers/net/ethernet/intel/i40e/i40e_main.c | 2 +
drivers/net/ethernet/intel/i40e/i40e_ptp.c | 3 +-
drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 4 +-
drivers/net/ethernet/intel/ice/ice_dpll.c | 5 +
drivers/net/ethernet/intel/ice/ice_dpll.h | 32 ++--
drivers/net/ethernet/intel/ice/ice_main.c | 2 +-
drivers/net/ethernet/intel/idpf/idpf_idc.c | 6 +
drivers/net/ethernet/intel/idpf/idpf_ptp.c | 4 +-
.../net/ethernet/microchip/lan966x/lan966x_main.c | 8 +-
drivers/net/ethernet/qlogic/qed/qed_dev.c | 7 +
drivers/net/ethernet/renesas/ravb_main.c | 9 +-
drivers/net/ethernet/ti/icssm/icssm_prueth.c | 1 +
drivers/net/fddi/defza.c | 11 +-
drivers/net/macsec.c | 39 +++--
drivers/net/net_failover.c | 12 +-
drivers/net/phy/dp83tc811.c | 1 +
drivers/net/wan/fsl_ucc_hdlc.c | 7 +
include/linux/netfilter/x_tables.h | 4 +-
include/linux/netfilter_arp/arp_tables.h | 1 -
include/linux/netfilter_ipv4/ip_tables.h | 1 -
include/linux/netfilter_ipv6/ip6_tables.h | 1 -
include/net/genetlink.h | 4 +-
include/net/macsec.h | 7 +-
include/net/netfilter/nf_conntrack_expect.h | 5 +-
include/net/netns/ipv6.h | 1 +
include/net/nsh.h | 4 +-
net/atm/signaling.c | 1 +
net/batman-adv/bat_iv_ogm.c | 85 +++++++---
net/batman-adv/bridge_loop_avoidance.c | 11 +-
net/batman-adv/main.c | 1 +
net/batman-adv/tp_meter.c | 116 +++++++++++---
net/batman-adv/tp_meter.h | 1 +
net/batman-adv/types.h | 4 +
net/bridge/netfilter/ebtable_broute.c | 14 +-
net/bridge/netfilter/ebtable_filter.c | 14 +-
net/bridge/netfilter/ebtable_nat.c | 12 +-
net/bridge/netfilter/ebtables.c | 71 +++++----
net/core/dev.c | 21 +--
net/core/failover.c | 6 +-
net/ethtool/bitset.c | 8 +-
net/ethtool/phy.c | 36 ++++-
net/hsr/hsr_framereg.c | 5 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/netfilter/arp_tables.c | 53 +-----
net/ipv4/netfilter/arptable_filter.c | 27 ++--
net/ipv4/netfilter/ip_tables.c | 59 +------
net/ipv4/netfilter/iptable_filter.c | 27 ++--
net/ipv4/netfilter/iptable_mangle.c | 29 ++--
net/ipv4/netfilter/iptable_nat.c | 6 +-
net/ipv4/netfilter/iptable_raw.c | 26 +--
net/ipv4/netfilter/iptable_security.c | 27 ++--
net/ipv4/tcp_ao.c | 3 +-
net/ipv6/ip6_flowlabel.c | 46 ++++--
net/ipv6/netfilter/ip6_tables.c | 56 +------
net/ipv6/netfilter/ip6table_filter.c | 26 +--
net/ipv6/netfilter/ip6table_mangle.c | 27 ++--
net/ipv6/netfilter/ip6table_nat.c | 6 +-
net/ipv6/netfilter/ip6table_raw.c | 24 +--
net/ipv6/netfilter/ip6table_security.c | 27 ++--
net/netfilter/nf_conntrack_broadcast.c | 1 +
net/netfilter/nf_conntrack_core.c | 7 +-
net/netfilter/nf_conntrack_expect.c | 1 +
net/netfilter/nf_conntrack_h323_main.c | 12 +-
net/netfilter/nf_conntrack_helper.c | 5 +
net/netfilter/nf_conntrack_netlink.c | 21 ++-
net/netfilter/nf_conntrack_sip.c | 10 +-
net/netfilter/nft_ct.c | 2 +
net/netfilter/x_tables.c | 177 +++++++++++++++++----
net/netlink/genetlink.c | 8 +-
net/rds/message.c | 1 +
net/sched/sch_cbs.c | 16 +-
net/sched/sch_dualpi2.c | 4 +-
net/sctp/socket.c | 9 ++
net/shaper/shaper.c | 166 +++++++++++++------
net/shaper/shaper_nl_gen.c | 7 +-
net/shaper/shaper_nl_gen.h | 2 +
net/smc/af_smc.c | 20 +--
net/smc/smc_tracepoint.h | 2 +-
net/tls/tls_sw.c | 26 ++-
net/vmw_vsock/virtio_transport_common.c | 47 ++----
tools/net/ynl/Makefile.deps | 4 +-
tools/net/ynl/pyynl/ynl_gen_c.py | 31 +++-
tools/testing/selftests/drivers/net/shaper.py | 24 ++-
.../tc-testing/tc-tests/infra/qdiscs.json | 41 +++++
97 files changed, 1182 insertions(+), 618 deletions(-)
next reply other threads:[~2026-05-14 14:27 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-05-14 14:27 Paolo Abeni [this message]
2026-05-14 16:40 ` [GIT PULL] Networking for v7.1-rc4 pr-tracker-bot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260514142703.267609-1-pabeni@redhat.com \
--to=pabeni@redhat.com \
--cc=davem@davemloft.net \
--cc=kuba@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=netdev@vger.kernel.org \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox