From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id F2C5C2147F9; Sat, 11 Apr 2026 12:54:07 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1775912048; cv=none; b=PhAw5T/1hNCEHvr95byHLV0vaW2LjkoagdfTkC79qmsUZgbl006BHaQZB+fFzencbdyqEypG6csuvRiVeNDeFzFEhKsYqsTu7R4z5mHxjpW2RUiolqswj2dH1dtQXCUinrfwXZuBVeNwxyXwmyBX98x79GwzfydWFdjIAHUR1oc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1775912048; c=relaxed/simple; bh=QTlMHn4MZALZGsdMK2fAPNCZMgs8PwowUOVO4a31reE=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=X5Of6L4VMlUnflmJsr88LS1Swogo6xK3deMOLi+/doKfdWwEqRS6NBm8gWfZrDJXXDhlyKaPkvH23WjiRuUSfDM5iyjj+SphyN7nO7HwxGhlZYtkNj/Hxewi1jbIhlg8rotCT1ViMSY5oA/YTzjxS8L4HhickdtdOX5PIpYH1aY= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=CvcVpRWS; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="CvcVpRWS" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 23FF7C4CEF7; Sat, 11 Apr 2026 12:54:06 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1775912047; bh=QTlMHn4MZALZGsdMK2fAPNCZMgs8PwowUOVO4a31reE=; h=From:To:Cc:Subject:Date:From; b=CvcVpRWSyU42LqGNCo+rslTZahPPSzdTqyTf/6adUkxCc5LOvwdiOCOmKxOjxuHvO ZctVSHpBAAtBrCFpOQZpbftIkeyrGeihijF7RauIRqTM3QUtZy6WcrbmDcGpIW9CFI g5ivr3AByNYZweea4jYAc/6OOcyiKxwiHXZ4PCwM= From: Greg Kroah-Hartman To: linux-kernel@vger.kernel.org, akpm@linux-foundation.org, torvalds@linux-foundation.org, stable@vger.kernel.org Cc: lwn@lwn.net, jslaby@suse.cz, Greg Kroah-Hartman Subject: Linux 6.19.12 Date: Sat, 11 Apr 2026 14:53:59 +0200 Message-ID: <2026041100-stick-reshape-6754@gregkh> X-Mailer: git-send-email 2.53.0 Precedence: bulk X-Mailing-List: stable@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit I'm announcing the release of the 6.19.12 kernel. All users of the 6.19 kernel series must upgrade. The updated 6.19.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.19.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/auxdisplay/holtek,ht16k33.yaml | 2 Documentation/devicetree/bindings/connector/usb-connector.yaml | 1 Documentation/devicetree/bindings/gpio/microchip,mpfs-gpio.yaml | 4 Makefile | 2 arch/arm64/kernel/pi/patch-scs.c | 8 arch/mips/lib/multi3.c | 6 arch/mips/mm/cache.c | 3 arch/mips/mm/tlb-r4k.c | 2 arch/mips/ralink/clk.c | 8 arch/riscv/kernel/kgdb.c | 7 arch/riscv/kernel/process.c | 4 arch/s390/kernel/perf_cpum_sf.c | 6 arch/x86/events/intel/core.c | 6 arch/x86/kernel/Makefile | 14 arch/x86/mm/Makefile | 2 crypto/af_alg.c | 53 -- crypto/algif_aead.c | 100 ----- crypto/algif_skcipher.c | 6 crypto/authencesn.c | 48 +- crypto/deflate.c | 11 drivers/accel/qaic/qaic_control.c | 47 ++ drivers/acpi/riscv/rimt.c | 7 drivers/android/binder/page_range.rs | 8 drivers/android/binder/rust_binder_main.rs | 2 drivers/auxdisplay/line-display.c | 2 drivers/bluetooth/hci_h4.c | 3 drivers/comedi/comedi_fops.c | 8 drivers/comedi/drivers.c | 8 drivers/comedi/drivers/dt2815.c | 12 drivers/comedi/drivers/me4000.c | 16 drivers/comedi/drivers/me_daq.c | 35 - drivers/comedi/drivers/ni_atmio16d.c | 3 drivers/counter/rz-mtu3-cnt.c | 67 +-- drivers/cpufreq/cpufreq_governor.c | 6 drivers/crypto/caam/caamalg_qi2.c | 3 drivers/crypto/caam/caamhash.c | 3 drivers/crypto/tegra/tegra-se-aes.c | 11 drivers/crypto/tegra/tegra-se-hash.c | 30 - drivers/firmware/microchip/mpfs-auto-update.c | 10 drivers/gpib/Kconfig | 1 drivers/gpib/common/gpib_os.c | 96 +++- drivers/gpib/include/gpib_types.h | 8 drivers/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c | 4 drivers/gpio/gpio-mxc.c | 10 drivers/gpio/gpio-qixis-fpga.c | 4 drivers/gpio/gpiolib-shared.c | 57 ++ drivers/gpio/gpiolib-shared.h | 11 drivers/gpio/gpiolib.c | 113 ++--- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 5 drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 7 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 3 drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_colorop.c | 6 drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 17 drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 1 drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c | 1 drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 33 + drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 33 + drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1 drivers/gpu/drm/ast/ast_dp501.c | 2 drivers/gpu/drm/drm_bridge.c | 16 drivers/gpu/drm/drm_file.c | 5 drivers/gpu/drm/drm_ioc32.c | 2 drivers/gpu/drm/drm_mode_config.c | 9 drivers/gpu/drm/i915/display/g4x_dp.c | 2 drivers/gpu/drm/i915/display/icl_dsi.c | 4 drivers/gpu/drm/i915/display/intel_cdclk.c | 54 ++ drivers/gpu/drm/sysfb/efidrm.c | 46 +- drivers/gpu/drm/xe/xe_pagefault.c | 6 drivers/gpu/drm/xe/xe_pxp.c | 11 drivers/hid/hid-appletb-kbd.c | 5 drivers/hid/hid-core.c | 7 drivers/hid/hid-logitech-hidpp.c | 6 drivers/hid/hid-multitouch.c | 7 drivers/hid/wacom_wac.c | 10 drivers/hv/mshv_regions.c | 6 drivers/hwmon/asus-ec-sensors.c | 7 drivers/hwmon/occ/common.c | 19 drivers/hwmon/pmbus/ltc4286.c | 1 drivers/hwmon/pmbus/pxe1610.c | 5 drivers/hwmon/pmbus/tps53679.c | 10 drivers/i2c/busses/Kconfig | 2 drivers/i2c/busses/i2c-tegra.c | 5 drivers/iio/accel/adxl313_core.c | 2 drivers/iio/accel/adxl355_core.c | 2 drivers/iio/accel/adxl380.c | 2 drivers/iio/adc/ade9000.c | 12 drivers/iio/adc/aspeed_adc.c | 1 drivers/iio/adc/ti-adc161s626.c | 41 +- drivers/iio/adc/ti-ads1119.c | 11 drivers/iio/adc/ti-ads7950.c | 8 drivers/iio/dac/ad5770r.c | 2 drivers/iio/gyro/mpu3050-core.c | 32 + drivers/iio/imu/adis16550.c | 8 drivers/iio/imu/bmi160/bmi160_core.c | 15 drivers/iio/imu/bno055/bno055.c | 2 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 15 drivers/iio/light/vcnl4035.c | 18 drivers/iio/light/veml6070.c | 4 drivers/iio/orientation/hid-sensor-rotation.c | 24 + drivers/input/joystick/xpad.c | 5 drivers/input/mouse/bcm5974.c | 42 ++ drivers/input/rmi4/rmi_f54.c | 4 drivers/input/serio/i8042-acpipnpio.h | 7 drivers/interconnect/qcom/sm8450.c | 4 drivers/iommu/generic_pt/fmt/amdv1.h | 2 drivers/iommu/generic_pt/iommu_pt.h | 2 drivers/irqchip/irq-riscv-aplic-main.c | 4 drivers/misc/fastrpc.c | 5 drivers/misc/mei/hw-me.c | 14 drivers/net/bonding/bond_main.c | 2 drivers/net/ethernet/airoha/airoha_eth.c | 18 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 76 ++- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 5 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 5 drivers/net/ethernet/broadcom/tg3.c | 13 drivers/net/ethernet/cadence/macb_pci.c | 10 drivers/net/ethernet/faraday/ftgmac100.c | 28 + drivers/net/ethernet/freescale/enetc/enetc.c | 13 drivers/net/ethernet/freescale/enetc/enetc4_hw.h | 11 drivers/net/ethernet/freescale/enetc/enetc4_pf.c | 118 +++++- drivers/net/ethernet/freescale/enetc/enetc_ethtool.c | 10 drivers/net/ethernet/freescale/fec_ptp.c | 3 drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 21 + drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4 drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c | 2 drivers/net/ethernet/mellanox/mlx5/core/fw.c | 53 +- drivers/net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 3 drivers/net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 6 drivers/net/ethernet/meta/fbnic/fbnic_txrx.h | 2 drivers/net/ethernet/microsoft/mana/mana_en.c | 13 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 14 drivers/net/ethernet/ti/icssg/icssg_common.c | 2 drivers/net/ethernet/xilinx/xilinx_axienet.h | 4 drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 9 drivers/net/phy/sfp.c | 7 drivers/net/virtio_net.c | 20 - drivers/net/vxlan/vxlan_core.c | 6 drivers/net/wireless/ath/ath11k/dp_rx.c | 15 drivers/net/wireless/intel/iwlwifi/fw/api/commands.h | 5 drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 10 drivers/net/wireless/intel/iwlwifi/mld/iface.c | 101 +++-- drivers/net/wireless/intel/iwlwifi/mld/mac80211.c | 19 drivers/net/wireless/intel/iwlwifi/mld/mld.c | 1 drivers/net/wireless/intel/iwlwifi/mld/mlo.c | 4 drivers/net/wireless/intel/iwlwifi/mld/notif.c | 5 drivers/net/wireless/intel/iwlwifi/mld/scan.c | 30 + drivers/net/wireless/intel/iwlwifi/mld/scan.h | 9 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 3 drivers/net/wireless/microchip/wilc1000/hif.c | 2 drivers/net/wireless/virtual/virt_wifi.c | 1 drivers/nfc/pn533/uart.c | 3 drivers/nvmem/imx-ocotp-ele.c | 1 drivers/nvmem/imx-ocotp.c | 1 drivers/nvmem/zynqmp_nvmem.c | 8 drivers/reset/core.c | 1 drivers/s390/crypto/zcrypt_msgtype6.c | 32 - drivers/spi/spi-amlogic-spifc-a4.c | 12 drivers/spi/spi-cadence-quadspi.c | 17 drivers/spi/spi-geni-qcom.c | 9 drivers/spi/spi-stm32-ospi.c | 9 drivers/target/loopback/tcm_loop.c | 52 ++ drivers/target/target_core_file.c | 2 drivers/thermal/thermal_core.c | 32 + drivers/thunderbolt/nhi.c | 2 drivers/tty/vt/vt.c | 18 drivers/usb/cdns3/cdns3-gadget.c | 4 drivers/usb/class/cdc-acm.c | 9 drivers/usb/class/cdc-acm.h | 1 drivers/usb/class/usbtmc.c | 3 drivers/usb/common/ulpi.c | 5 drivers/usb/core/driver.c | 23 - drivers/usb/core/offload.c | 102 +++-- drivers/usb/core/phy.c | 12 drivers/usb/core/quirks.c | 3 drivers/usb/core/usb.c | 1 drivers/usb/dwc2/gadget.c | 2 drivers/usb/gadget/function/f_ecm.c | 37 + drivers/usb/gadget/function/f_eem.c | 59 +-- drivers/usb/gadget/function/f_hid.c | 19 drivers/usb/gadget/function/f_rndis.c | 51 +- drivers/usb/gadget/function/f_subset.c | 63 +-- drivers/usb/gadget/function/f_uac1_legacy.c | 47 +- drivers/usb/gadget/function/f_uvc.c | 39 + drivers/usb/gadget/function/u_ecm.h | 21 - drivers/usb/gadget/function/u_eem.h | 21 - drivers/usb/gadget/function/u_ether.c | 16 drivers/usb/gadget/function/u_gether.h | 22 - drivers/usb/gadget/function/u_rndis.h | 31 + drivers/usb/gadget/function/uvc.h | 3 drivers/usb/gadget/function/uvc_v4l2.c | 5 drivers/usb/gadget/udc/dummy_hcd.c | 42 +- drivers/usb/host/ehci-brcm.c | 4 drivers/usb/host/xhci-sideband.c | 18 drivers/usb/misc/usbio.c | 7 drivers/usb/serial/io_edgeport.c | 3 drivers/usb/serial/io_usbvend.h | 1 drivers/usb/serial/option.c | 4 drivers/usb/typec/altmodes/thunderbolt.c | 44 +- drivers/usb/typec/ucsi/ucsi.c | 9 fs/btrfs/ioctl.c | 12 fs/btrfs/tree-checker.c | 17 fs/btrfs/zoned.c | 6 fs/smb/client/cifsglob.h | 6 fs/smb/client/file.c | 1 fs/smb/client/inode.c | 21 - fs/smb/client/smb2ops.c | 20 - fs/smb/server/smb2pdu.c | 121 ++++-- fs/smb/server/smbacl.c | 43 ++ fs/smb/server/smbacl.h | 2 fs/xfs/libxfs/xfs_attr_leaf.c | 22 + fs/xfs/libxfs/xfs_attr_leaf.h | 3 fs/xfs/libxfs/xfs_da_btree.c | 53 ++ fs/xfs/libxfs/xfs_da_btree.h | 2 fs/xfs/xfs_attr_inactive.c | 95 ++-- fs/xfs/xfs_inode.c | 3 include/crypto/if_alg.h | 5 include/linux/cgroup-defs.h | 3 include/linux/iio/iio.h | 12 include/linux/netdevice.h | 3 include/linux/netfilter/ipset/ip_set.h | 2 include/linux/skbuff.h | 1 include/linux/usb.h | 10 include/net/bluetooth/bluetooth.h | 39 + include/net/bluetooth/hci.h | 9 include/net/bluetooth/hci_core.h | 1 include/net/bluetooth/hci_sync.h | 3 include/net/netfilter/nf_conntrack_expect.h | 20 - include/net/netns/mpls.h | 1 io_uring/io_uring.c | 62 ++- io_uring/io_uring.h | 34 + io_uring/net.c | 4 io_uring/rsrc.c | 4 kernel/bpf/verifier.c | 37 + kernel/cgroup/cgroup.c | 88 ++++ kernel/kallsyms.c | 64 ++- kernel/power/em_netlink.c | 2 kernel/sched/debug.c | 4 kernel/sched/ext.c | 144 +++++-- kernel/sched/ext_idle.c | 33 + kernel/sched/fair.c | 10 kernel/sched/sched.h | 3 kernel/trace/bpf_trace.c | 4 lib/crypto/chacha-block-generic.c | 4 net/atm/lec.c | 72 ++- net/atm/lec.h | 2 net/bluetooth/hci_conn.c | 113 +++++ net/bluetooth/hci_event.c | 153 ++++--- net/bluetooth/hci_sync.c | 152 ++++++- net/bluetooth/l2cap_sock.c | 20 - net/bluetooth/mgmt.c | 17 net/bluetooth/sco.c | 26 + net/bluetooth/smp.c | 11 net/bridge/br_arp_nd_proxy.c | 18 net/bridge/br_mrp_netlink.c | 4 net/core/dev.c | 38 + net/core/skmsg.c | 13 net/hsr/hsr_device.c | 32 - net/ipv6/addrconf.c | 6 net/ipv6/datagram.c | 10 net/ipv6/icmp.c | 3 net/ipv6/ioam6.c | 4 net/ipv6/ip6_flowlabel.c | 5 net/ipv6/ip6_tunnel.c | 5 net/ipv6/ndisc.c | 3 net/mac80211/tdls.c | 2 net/mpls/af_mpls.c | 29 + net/mptcp/protocol.c | 30 + net/netfilter/ipset/ip_set_core.c | 4 net/netfilter/ipset/ip_set_hash_gen.h | 2 net/netfilter/ipset/ip_set_list_set.c | 4 net/netfilter/nf_conntrack_broadcast.c | 8 net/netfilter/nf_conntrack_expect.c | 25 + net/netfilter/nf_conntrack_h323_main.c | 12 net/netfilter/nf_conntrack_helper.c | 13 net/netfilter/nf_conntrack_netlink.c | 87 +--- net/netfilter/nf_conntrack_sip.c | 4 net/netfilter/nf_flow_table_offload.c | 196 ++++++---- net/netfilter/nf_tables_api.c | 7 net/netfilter/nfnetlink_log.c | 2 net/netfilter/x_tables.c | 23 + net/netfilter/xt_cgroup.c | 6 net/netfilter/xt_rateest.c | 5 net/qrtr/af_qrtr.c | 31 - net/rds/ib_rdma.c | 7 net/sched/cls_api.c | 1 net/sched/cls_flow.c | 10 net/sched/cls_fw.c | 14 net/sched/sch_hfsc.c | 4 net/sched/sch_netem.c | 5 net/x25/x25_in.c | 9 net/x25/x25_subr.c | 1 sound/hda/codecs/realtek/alc269.c | 12 sound/pci/ctxfi/ctatc.c | 10 sound/pci/ctxfi/ctdaio.c | 86 ++-- sound/soc/cirrus/ep93xx-i2s.c | 34 + sound/soc/intel/boards/Kconfig | 2 sound/usb/caiaq/device.c | 2 sound/usb/qcom/qc_audio_offload.c | 10 sound/usb/quirks.c | 2 tools/objtool/check.c | 5 tools/objtool/elf.c | 23 - tools/testing/selftests/cgroup/lib/cgroup_util.c | 15 tools/testing/selftests/cgroup/lib/include/cgroup_util.h | 2 tools/testing/selftests/cgroup/test_core.c | 3 tools/testing/selftests/cgroup/test_kill.c | 7 311 files changed, 3899 insertions(+), 1749 deletions(-) Adam Crosser (1): gpib: fix use-after-free in IO ioctl handlers Aditya Garg (1): HID: appletb-kbd: add .resume method in PM Adrian Freund (1): HID: logitech-hidpp: Enable MX Master 4 over bluetooth Alan Stern (2): USB: dummy-hcd: Fix locking/synchronization error USB: dummy-hcd: Fix interrupt synchronization error Aldo Conte (1): iio: light: veml6070: fix veml6070_read() return value Aleksandr Nogikh (1): x86/kexec: Disable KCOV instrumentation after load_segments() Alex Deucher (1): drm/amdgpu/pm: drop SMU driver if version not matched messages Alex Hung (1): drm/amd/display: Fix gamma 2.2 colorop TFs Alexander Popov (1): wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Alexander Usyskin (1): mei: me: reduce the scope on unexpected reset Alexei Starovoitov (1): bpf: Fix regsafe() for pointers to packet Alexey Velichayshiy (1): wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() Alice Ryhl (1): rust_binder: use AssertSync for BINDER_VM_OPS Andrea Righi (1): sched_ext: Fix stale direct dispatch state in ddsp_dsq_id Andrei Kuchynski (1): usb: typec: thunderbolt: Set enter_vdo during initialization Antoniu Miclaus (5): iio: adc: ade9000: move mutex init before IRQ registration iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 iio: accel: adxl313: add missing error check in predisable iio: dac: ad5770r: fix error return in ad5770r_read_raw() iio: imu: adis16550: fix swapped gyro/accel filter functions Asim Viladi Oglu Manizada (1): ksmbd: fix OOB write in QUERY_INFO for compound requests Barnabás Pőcze (1): gpiolib: clear requested flag if line is invalid Bart Van Assche (1): Input: synaptics-rmi4 - fix a locking bug in an error path Bartosz Golaszewski (3): gpio: shared: call gpio_chip::of_xlate() if set gpio: shared: handle pins shared by child nodes of devices gpio: shared: shorten the critical section in gpiochip_setup_shared() Benoît Sevens (1): HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq Berk Cem Goksel (1): ALSA: caiaq: fix stack out-of-bounds read in init_card Billy Tsai (1): iio: adc: aspeed: clear reference voltage bits before configuring vref Buday Csaba (1): net: fec: fix the PTP periodic output sysfs interface Cen Zhang (1): Bluetooth: SCO: fix race conditions in sco_sock_connect() Changwoo Min (2): PM: EM: Fix NULL pointer dereference when perf domain ID is not found sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU Chen Ni (1): drm/sysfb: Fix efidrm error handling and memory type mismatch Cheng-Yang Chou (1): sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl() Christian Eggers (1): nvmem: imx: assign nvmem_cell_info::raw_len Christoffer Sandberg (1): Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table Conor Dooley (1): firmware: microchip: fail auto-update probe if no flash found Corey Hickey (1): hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI Cosmin Tanislav (2): counter: rz-mtu3-cnt: prevent counter from being toggled multiple times counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member Dag Smedberg (1): ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP Daniel Borkmann (1): bpf: Fix incorrect pruning due to atomic fetch precision tracking Daniele Ceraolo Spurio (3): drm/xe/pxp: Clean up termination status on failure drm/xe/pxp: Remove incorrect handling of impossible state during suspend drm/xe/pxp: Clear restart flag in pxp_start after jumping back Dave Penkler (1): gpib: Fix fluke driver s390 compile issue David Carlier (1): net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch David Lechner (7): iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one iio: add IIO_DECLARE_QUATERNION() macro iio: orientation: hid-sensor-rotation: fix quaternion alignment iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace iio: adc: ti-adc161s626: fix buffer read on big-endian iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() iio: light: vcnl4035: fix scan buffer on big-endian Deepanshu Kartikey (3): wifi: mac80211: check tdls flag in ieee80211_tdls_oper atm: lec: fix use-after-free in sock_def_readable() comedi: dt2815: add hardware detection to prevent crash Dimitri Daskalakis (2): eth: fbnic: Account for page fragments when updating BDQ tail eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64 Dipayaan Roy (1): net: mana: Fix RX skb truesize accounting Dmitry Torokhov (2): iio: adc: ti-ads7950: normalize return value of gpio_get iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get() Donet Tom (1): drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Edward Adam Davis (1): comedi: runflags cannot determine whether to reclaim chanlist Emanuele Ghidoli (1): spi: cadence-qspi: Fix exec_mem_op error handling Emmanuel Grumbach (1): wifi: iwlwifi: mvm: don't send a 6E related command when not supported Eric Biggers (2): lib/crypto: chacha: Zeroize permuted_state before it leaves scope crypto: tegra - Add missing CRYPTO_ALG_ASYNC Eric Dumazet (3): ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() ip6_tunnel: clear skb2->cb[] in ip4ip6_err() ipv6: avoid overflows in ip6_datagram_send_ctl() Ernestas Kulik (1): USB: serial: option: add MeiG Smart SRM825WN Ethan Tidmore (4): iio: gyro: mpu3050: Fix incorrect free_irq() variable iio: gyro: mpu3050: Fix irq resource leak iio: gyro: mpu3050: Move iio_device_register() to correct location iio: gyro: mpu3050: Fix out-of-sequence free_irq() Fedor Pchelkin (2): net: macb: fix clk handling on PCI glue driver removal net: macb: properly unregister fixed rate clocks Felix Gu (8): gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() spi: stm32-ospi: Fix resource leak in remove() callback spi: stm32-ospi: Fix reset control leak on probe error spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD usb: misc: usbio: Fix URB memory leak on submit failure Filipe Manana (1): btrfs: reserve enough transaction items for qgroup ioctls Florian Westphal (3): netfilter: nfnetlink_log: account for netlink header size netfilter: x_tables: ensure names are nul-terminated netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr Francesco Lavra (2): iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only Frank Li (1): dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning Frej Drejhammar (1): USB: serial: io_edgeport: add support for Blackbox IC135A Gabor Juhos (1): usb: core: phy: avoid double use of 'usb3-phy' Geliang Tang (1): mptcp: add eat_recv_skb helper Geoffrey D. Bennett (1): ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP Giorgi Tchankvetadze (2): iio: adc: ade9000: fix wrong return type in streaming push iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power Greg Kroah-Hartman (2): drm/ioc32: stop speculation on the drm_compat_ioctl path Linux 6.19.12 Guan-Yu Lin (2): usb: host: xhci-sideband: delegate offload_usage tracking to class drivers usb: core: use dedicated spinlock for offload state Guangshuo Li (5): net: mana: fix use-after-free in add_adev() error path usb: ulpi: fix double free in ulpi_register_interface() error path auxdisplay: line-display: fix NULL dereference in linedisp_release reset: gpio: fix double free in reset_add_gpio_aux_device() error path cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path Guoyu Su (1): net: use skb_header_pointer() for TCPv4 GSO frag_off check Harald Freudenberger (1): s390/zcrypt: Fix memory leak with CCA cards used as accelerator Heitor Alves de Siqueira (1): usb: usbtmc: Flush anchored URBs in usbtmc_release Herbert Xu (2): crypto: algif_aead - Revert to operating out-of-place crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption Horia Geantă (2): crypto: caam - fix DMA corruption on long hmac keys crypto: caam - fix overflow on long hmac keys Ian Abbott (4): comedi: Reinit dev->spinlock between attachments to low-level drivers comedi: ni_atmio16d: Fix invalid clean-up after failed attach comedi: me_daq: Fix potential overrun of firmware buffer comedi: me4000: Fix potential overrun of firmware buffer Ian Rogers (1): perf/x86: Fix potential bad container_of in intel_pmu_hw_config Ivan Vera (1): nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy JP Hein (1): USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam Jamie Gibbons (1): dt-bindings: gpio: fix microchip #interrupt-cells Jason Gunthorpe (1): iommupt: Fix short gather if the unmap goes into a large mapping Jens Axboe (1): io_uring: protect remaining lockless ctx->rings accesses with RCU Jessica Liu (1): irqchip/riscv-aplic: Restrict genpd notifier to device tree only Jiayuan Chen (1): net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak Jihed Chaibi (1): ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure Jimmy Hu (1): usb: gadget: uvc: fix NULL pointer dereference during unbind race Joe Lawrence (1): objtool/klp: fix mkstemp() failure with long paths Johan Hovold (1): gpib: lpvo_usb: fix memory leak on disconnect Johannes Berg (1): wifi: iwlwifi: mld: correctly set wifi generation data Johannes Thumshirn (1): btrfs: don't take device_list_mutex when querying zone info Jonathan Cavitt (1): drm/xe/xe_pagefault: Disallow writes to read-only VMAs Jonathan Rissanen (1): Bluetooth: hci_h4: Fix race during initialization Josef Bacik (1): scsi: target: tcm_loop: Drain commands in target_reset handler Josh Poimboeuf (2): objtool: Fix Clang jump table detection iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() Julian Braha (1): ASoC: Intel: boards: fix unmet dependency on PINCTRL Juno Choi (1): usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() Junrui Luo (1): drm/amdgpu: validate doorbell_offset in user queue creation Junxi Qian (1): io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() Justin Chen (1): usb: ehci-brcm: fix sleep during atomic Keenan Dong (2): Bluetooth: MGMT: validate LTK enc_size on load Bluetooth: MGMT: validate mesh send advertising payload length Konrad Dybcio (1): thunderbolt: Fix property read in nhi_wake_supported() Kuen-Han Tsai (8): usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo usb: gadget: f_subset: Fix unbalanced refcnt in geth_free usb: gadget: f_rndis: Protect RNDIS options with mutex usb: gadget: f_ecm: Fix net_device lifecycle with device_move usb: gadget: f_eem: Fix net_device lifecycle with device_move usb: gadget: f_subset: Fix net_device lifecycle with device_move usb: gadget: f_rndis: Fix net_device lifecycle with device_move Kuniyuki Iwashima (1): bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). Lee Jones (3): HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure HID: core: Mitigate potential OOB by removing bogus memset() HID: multitouch: Check to ensure report responses match the request Li Xiasong (1): mptcp: fix soft lockup in mptcp_recvmsg() Liam Mitchell (1): Input: bcm5974 - recover from failed mode switch Liav Mordouch (1): vt: discard stale unicode buffer on alt screen exit after resize Lijo Lazar (1): drm/amdgpu: Fix wait after reset sequence in S4 Liu Ying (1): drm/bridge: Fix refcount shown via debugfs for encoder_bridges_show() Long Li (4): xfs: only assert new size for datafork during truncate extents xfs: factor out xfs_attr3_node_entry_remove xfs: factor out xfs_attr3_leaf_init xfs: close crash window in attr dabtree inactivation Lorenzo Bianconi (1): net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() Luiz Augusto von Dentz (2): Bluetooth: L2CAP: Add support for setting BT_PHY Bluetooth: hci_sync: Fix UAF in le_read_features_complete Luka Gejak (1): net: hsr: fix VLAN add unwind on slave errors Maarten Lankhorst (1): Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" Maciej W. Rozycki (2): MIPS: SiByte: Bring back cache initialisation MIPS: Fix the GCC version check for `__multi3' workaround Marek Behún (1): net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta Martin Schiller (2): net/x25: Fix potential double free of skb net/x25: Fix overflow when accumulating packets Miao Li (1): usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive Michael Chan (2): bnxt_en: Refactor some basic ring setup and adjustment logic bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode() Michael Zimmermann (1): usb: gadget: f_hid: move list and spinlock inits from bind to alloc Michal Piekos (1): net: stmmac: skip VLAN restore when VLAN hash ops are missing Mikko Perttunen (1): i2c: tegra: Don't mark devices with pins as IRQ safe Mikulas Patocka (1): crypto: deflate - fix spurious -ENOSPC Nathan Rebello (1): usb: typec: ucsi: validate connector number in ucsi_notify_common() Nicolas Pitre (1): vt: resize saved unicode buffer on alt screen exit after resize Norbert Szetei (1): crypto: af-alg - fix NULL pointer dereference in scatterwalk Oleh Konko (3): Bluetooth: SMP: derive legacy responder STK authentication from MITM state Bluetooth: SMP: force responder MITM requirements before building the pairing response Bluetooth: hci_event: move wake reason storage into validated event handlers Oliver Neukum (1): cdc-acm: new quirk for EPSON HMD Pablo Neira Ayuso (7): netfilter: flowtable: strictly check for maximum number of actions netfilter: nf_conntrack_expect: honor expectation helper field netfilter: nf_conntrack_expect: use expect->helper netfilter: nf_conntrack_expect: store netns and zone in expectation netfilter: ctnetlink: ignore explicit helper on new expectations netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP netfilter: nf_tables: reject immediate NF_QUEUE verdict Pagadala Yesu Anjaneyulu (1): wifi: iwlwifi: mld: Fix MLO scan timing Paolo Abeni (2): ipv6: prevent possible UaF in addrconf_permanent_addr() net: introduce mangleid_features Paul SAGE (1): tg3: replace placeholder MAC address with device property Paul Walmsley (1): riscv: kgdb: fix several debug register assignment bugs Pauli Virtanen (5): Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Paulo Alcantara (1): smb: client: fix generic/694 due to wrong ->i_blocks Pavan Chebbi (1): bnxt_en: Restore default stat ctxs for ULP when resource is available Pengpeng Hou (3): net/ipv6: ioam6: prevent schema length wraparound in trace fill bnxt_en: set backing store type from query type NFC: pn533: bound the UART receive buffer Pepper Gray (1): arm64/scs: Fix handling of advance_loc4 Peter Zijlstra (2): sched/fair: Fix zero_vruntime tracking fix sched/debug: Fix avg_vruntime() usage Petr Mladek (4): kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid() kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() kallsyms: cleanup code for appending the module buildid kallsyms: prevent module removal when printing module name and buildid Praveen Talari (1): spi: geni-qcom: Check DMA interrupts early in ISR Prike Liang (1): drm/amdgpu: fix the idr allocation flags Qi Tang (4): netfilter: nf_conntrack_helper: pass helper to expect cleanup netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent bpf: reject direct access to nullable PTR_TO_BUF pointers io_uring/rsrc: reject zero-length fixed buffer import Qingfang Deng (1): netdevsim: fix build if SKB_EXTENSIONS=n Rafael J. Wysocki (2): thermal: core: Address thermal zone removal races with resume thermal: core: Fix thermal zone device registration error path Reshma Immaculate Rajkumar (1): wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session Sabrina Dubroca (1): mpls: add seqcount to protect the platform_label{,s} pair Saeed Mahameed (2): net/mlx5: Avoid "No data available" when FW version queries fail net/mlx5: Fix switchdev mode rollback in case of failure Sanman Pradhan (6): hwmon: (tps53679) Fix array access with zero-length block read hwmon: (pxe1610) Check return value of page-select write in probe hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() hwmon: (occ) Fix missing newline in occ_show_extended() hwmon: (occ) Fix division by zero in occ_show_power_1() Sebastian Urban (1): usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer Shay Drory (1): net/mlx5: lag: Check for LAG device before creating debugfs Shengyu Qu (1): Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode Shenwei Wang (1): gpio: mxc: map Both Edge pad wakeup to Rising Edge Sherry Yang (1): iommupt/amdv1: mark amdv1pt_install_leaf_entry as __always_inline Shiji Yang (1): mips: ralink: update CPU clock index Sourav Nayak (1): ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx Srinivasan Shanmugam (1): drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() Srujana Challa (1): virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN Stanislav Kinsburskii (1): mshv: Fix error handling in mshv_region_pin Stefan Wiehler (1): mips: mm: Allocate tlb_vpn array atomically Sunil V L (1): ACPI: RIMT: Add dependency between iommu and devices Suraj Gupta (2): net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets Sven Eckelmann (Plasma Cloud) (1): net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled Taegu Ha (1): usb: gadget: f_uac1_legacy: validate control request size Takashi Iwai (3): ALSA: ctxfi: Check the error for index mapping ALSA: ctxfi: Fix missing SPDIFI1 index handling ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization Tejun Heo (4): cgroup: Wait for dying tasks to leave on rmdir selftests/cgroup: Don't require synchronous populated update on task exit cgroup: Fix cgroup_drain_dying() testing the wrong condition sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback Thinh Nguyen (1): scsi: target: file: Use kzalloc_flex for aio_cmd Thomas Bogendoerfer (1): tg3: Fix race for querying speed/duplex Thomas Richter (1): s390/cpum_sf: Cap sampling rate to prevent lsctl exception Thomas Zimmermann (1): drm/ast: dp501: Fix initialization of SCU2C Tzung-Bi Shih (1): gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() Valek Andrej (1): iio: accel: fix ADXL355 temperature signature value Varun R Mallya (1): bpf: Reject sleepable kprobe_multi programs at attach time Ville Syrjälä (3): drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP drm/i915/cdclk: Do the full CDCLK dance for min_voltage_level changes Vladimir Zapolskiy (1): interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes() Wanquan Zhong (1): USB: serial: option: add support for Rolling Wireless RW135R-GL Wei Fang (5): net: enetc: reset PIR and CIR if they are not equal when initializing TX ring net: enetc: add graceful stop to safely reinitialize the TX Ring net: enetc: do not access non-existent registers on pseudo MAC net: enetc: check whether the RSS algorithm is Toeplitz net: enetc: do not allow VF to configure the RSS key Weiming Shi (1): rds: ib: reject FRMR registration before IB connection is established Willem de Bruijn (1): net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback Xiang Mei (5): net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() net: bonding: fix use-after-free in bond_xmit_broadcast() bridge: mrp: reject zero test interval to avoid OOM panic net/sched: cls_fw: fix NULL pointer dereference on shared blocks net/sched: cls_flow: fix NULL pointer dereference on shared blocks Xingjing Deng (2): misc: fastrpc: possible double-free of cctx->remote_heap misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe Xu Yang (1): dt-bindings: connector: add pd-disable dependency Yang Wang (1): drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 Yang Yang (3): bridge: br_nd_send: linearize skb before parsing ND options bridge: br_nd_send: validate ND option lengths vxlan: validate ND option lengths in vxlan_na_create Yasuaki Torimaru (1): wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation Yifan Wu (1): netfilter: ipset: drop logically empty buckets in mtype_del Yochai Eisenrich (2): net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak Yongchao Wu (2): usb: cdns3: gadget: fix NULL pointer dereference in ep_queue usb: cdns3: gadget: fix state inconsistency on gadget init failure Youssef Samir (1): accel/qaic: Handle DBC deactivation if the owner went away Yucheng Lu (1): net/sched: sch_netem: fix out-of-bounds access in packet corruption Yufan Chen (1): net: ftgmac100: fix ring allocation unwind on open failure Zhang Heng (3): ALSA: hda/realtek: add quirk for Acer Swift SFG14-73 ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15 ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxx ZhengYuan Huang (1): btrfs: reject root items with drop_progress and zero drop_level Zhengchuan Liang (1): net: ipv6: flowlabel: defer exclusive option free until RCU teardown Zishun Yi (1): riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set Zoltan Illes (1): Input: xpad - add support for Razer Wolverine V3 Pro hkbinbin (1): Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync