* [PATCH 6.6 0000/1266] 6.6.145-rc1 review
@ 2026-07-21 15:07 Greg Kroah-Hartman
2026-07-21 15:07 ` [PATCH 6.6 0001/1266] bpf, arm64: Reject out-of-range B.cond targets Greg Kroah-Hartman
` (998 more replies)
0 siblings, 999 replies; 1287+ messages in thread
From: Greg Kroah-Hartman @ 2026-07-21 15:07 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
This is the start of the stable review cycle for the 6.6.145 release.
There are 1266 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 23 Jul 2026 15:23:00 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.145-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 6.6.145-rc1
Danilo Krummrich <dakr@kernel.org>
driver core: Guard deferred probe timeout extension with delayed_work_pending()
Danilo Krummrich <dakr@kernel.org>
driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout()
Easwar Hariharan <eahariha@linux.microsoft.com>
jiffies: Cast to unsigned long in secs_to_jiffies() conversion
Easwar Hariharan <eahariha@linux.microsoft.com>
jiffies: Define secs_to_jiffies()
Baokun Li <libaokun@linux.alibaba.com>
writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()
Jan Kara <jack@suse.cz>
writeback: Fix use after free in inode_switch_wbs_work_fn()
Darrick J. Wong <djwong@kernel.org>
xfs: fix stupid compiler warning
Arnd Bergmann <arnd@arndb.de>
Bluetooth: btmtk: remove #ifdef around declarations
Arnd Bergmann <arnd@arndb.de>
Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder
Benjamin Tissoires <bentiss@kernel.org>
selftests/hid: ensure CKI can compile our new tests on old kernels
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd
Randy Dunlap <rdunlap@infradead.org>
seqlock: fix scoped_seqlock_read kernel-doc
Marc Zyngier <maz@kernel.org>
KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
Siwei Zhang <oss@fourdim.xyz>
Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
Cen Zhang <zzzccc427@gmail.com>
Bluetooth: hci_sync: annotate data-races around hdev->req_status
Pauli Virtanen <pav@iki.fi>
Bluetooth: separate CIS_LINK and BIS_LINK link types
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO
Qu Wenruo <wqu@suse.com>
btrfs: fix incorrect buffered IO fallback for append direct writes
Qu Wenruo <wqu@suse.com>
btrfs: fix false IO failure after falling back to buffered write
Rochan Avlur <rochan.avlur@gmail.com>
exfat: preserve benign secondary entries during rename and move
Yuezhang Mo <Yuezhang.Mo@sony.com>
exfat: move exfat_chain_set() out of __exfat_resolve_path()
Yuezhang Mo <Yuezhang.Mo@sony.com>
exfat: add exfat_get_dentry_set_by_ei() helper
Yuezhang Mo <Yuezhang.Mo@sony.com>
exfat: rename argument name for exfat_move_file and exfat_rename_file
Yuezhang Mo <Yuezhang.Mo@sony.com>
exfat: remove unnecessary read entry in __exfat_rename()
Yuezhang Mo <Yuezhang.Mo@sony.com>
exfat: move free cluster out of exfat_init_ext_entry()
Pedro Falcato <pfalcato@suse.de>
mm: do file ownership checks with the proper mount idmap
Wentao Liang <vulab@iscas.ac.cn>
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org>
regulator: scmi: Simplify with scoped for each OF child loop
Ricardo Robaina <rrobaina@redhat.com>
audit: fix potential integer overflow in audit_log_n_hex()
Ricardo Robaina <rrobaina@redhat.com>
audit: add audit_log_nf_skb helper function
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - fix restarting state leak on allocation failure
Qu Wenruo <wqu@suse.com>
btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
Neill Kapron <nkapron@google.com>
usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
Tianchu Chen <flynnnchen@tencent.com>
nvmet-auth: validate reply message payload bounds against transfer length
Hannes Reinecke <hare@kernel.org>
nvmet: return DHCHAP status codes from nvmet_setup_auth()
Chaitanya Kulkarni <kch@nvidia.com>
nvmet: remove superfluous initialization
Tyler Baker <tyler.baker@oss.qualcomm.com>
usb: gadget: f_fs: initialize reset_work at allocation time
Thorsten Blum <thorsten.blum@linux.dev>
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
Uwe Kleine-König <u.kleine-koenig@baylibre.com>
crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
Andy Yan <andyshrk@163.com>
usb: typec: tcpm: Fix VDM type for Enter Mode commands
Mauricio Faria de Oliveira <mfo@igalia.com>
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
Oliver Neukum <oneukum@suse.com>
usb: iowarrior: remove inherent race with minor number
Vlad Poenaru <vlad.wing@gmail.com>
bpf: Allow LPM map access from sleepable BPF programs
Andrii Nakryiko <andrii@kernel.org>
bpf: Consistently use bpf_rcu_lock_held() everywhere
Tristan Madani <tristan@talencesecurity.com>
hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
Viacheslav Dubeyko <slava@dubeyko.com>
hfs/hfsplus: prevent getting negative values of offset/length
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_mid: Disable DMA for selected platforms
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
serial: 8250_mid: Remove 8250_pci usage
Manish Khadka <maskmemanish@gmail.com>
HID: appleir: fix UAF on pending key_up_timer in remove()
Thomas Gleixner <tglx@linutronix.de>
treewide: Switch/rename to timer_delete[_sync]()
Jann Horn <jannh@google.com>
proc: protect ptrace_may_access() with exec_update_lock (part 1)
Oleg Nesterov <oleg@redhat.com>
seqlock: Change do_task_stat() to use scoped_seqlock_read()
Peter Zijlstra <peterz@infradead.org>
seqlock: Introduce scoped_seqlock_read()
Vlastimil Babka (SUSE) <vbabka@kernel.org>
mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
Trung Nguyen <trungnh@cystack.net>
HID: multitouch: fix out-of-bounds bit access on mt_io_flags
Angela Czubak <aczubak@google.com>
HID: add haptics page defines
Zide Chen <zide.chen@intel.com>
perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
Baokun Li <libaokun@linux.alibaba.com>
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
Jan Kara <jack@suse.cz>
writeback: Avoid contention on wb->list_lock when switching inodes
Guangshuo Li <lgs201920130244@gmail.com>
cpufreq: qcom-cpufreq-hw: Fix possible double free
Lizhe <sensor1010@163.com>
cpufreq: Make cpufreq_driver->exit() return void
Viresh Kumar <viresh.kumar@linaro.org>
cpufreq: pcc: Remove empty exit() callback
Jann Horn <jannh@google.com>
proc: protect ptrace_may_access() with exec_update_lock (FD links)
Christoph Hellwig <hch@lst.de>
proc: rename proc_setattr to proc_nochmod_setattr
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: track the connection owning a byte-range lock
DaeMyung Kang <charsyam@gmail.com>
ksmbd: centralize ksmbd_conn final release to plug transport leak
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: use opener credentials for FSCTL mutations
Michael Bommarito <michael.bommarito@gmail.com>
smb: client: resolve SWN tcon from live registrations
Markus Elfring <elfring@users.sourceforge.net>
smb: client: Improve unlocking of a mutex in cifs_get_swn_reg()
Siwei Zhang <oss@fourdim.xyz>
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
Pauli Virtanen <pav@iki.fi>
Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister
Runyu Xiao <runyu.xiao@seu.edu.cn>
Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
Florian Westphal <fw@strlen.de>
netfilter: ebtables: zero chainstack array
Qianfeng Rong <rongqianfeng@vivo.com>
netfilter: ebtables: Use vmalloc_array() to improve code
Xiaolei Wang <xiaolei.wang@windriver.com>
media: nxp: imx8-isi: Fix use-after-free on remove
Frank Li <Frank.Li@nxp.com>
media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
media: nxp: imx8-isi: Convert to platform remove callback returning void
Runyu Xiao <runyu.xiao@seu.edu.cn>
gpio: sch: use raw_spinlock_t in the irq startup path
Runyu Xiao <runyu.xiao@seu.edu.cn>
coresight: etb10: restore atomic_t for shared reading state
Shakeel Butt <shakeel.butt@linux.dev>
mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
Qi Zheng <zhengqi.arch@bytedance.com>
mm: shrinker: remove redundant shrinker_rwsem in debugfs operations
Marco Elver <elver@google.com>
Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
Nikolay Kulikov <nikolayof23@gmail.com>
staging: rtl8723bs: fix spaces around binary operators
William Hansen-Baird <william.hansen.baird@gmail.com>
staging: rtl8723bs: core: move constants to right side in comparison
Marco Nenciarini <mnencia@kcore.it>
PCI: Skip Resizable BAR restore on read error
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Move Resizable BAR code to rebar.c
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Add kerneldoc for pci_resize_resource()
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Fix restoring BARs on BAR resize rollback path
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Free saved list without holding pci_bus_sem
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Prevent resource tree corruption when BAR resize fails
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: mediatek: Fix IRQ domain leak when port fails to enable
Christian Marangi <ansuelsmth@gmail.com>
PCI: mediatek: Use generic MACRO for TPVPERL delay
Christian Marangi <ansuelsmth@gmail.com>
PCI: mediatek: Convert bool to single quirks entry and bitmap
Jiri Slaby (SUSE) <jirislaby@kernel.org>
PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
Richard Zhu <hongxing.zhu@nxp.com>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
Alex Williamson <alex.williamson@nvidia.com>
vfio/mlx5: Fix racy bitfields and tighten struct layout
Mahesh Vaidya <mahesh.vaidya@altera.com>
PCI: altera: Fix resource leaks on probe failure
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: aoa: check snd_ctl_new1() return value
Herman van Hazendonk <github.com@herrie.org>
iio: common: st_sensors: honour channel endianness in read_axis_data
Alexander Lobakin <aleksander.lobakin@intel.com>
bitops: make BYTES_TO_BITS() treewide-available
Biren Pandya <birenpandya@gmail.com>
iio: pressure: mpl115: fix runtime PM leak on read error
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: stabilized timestamp in interrupt
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: invensense: fix timestamp glitches when switching frequency
Colin Ian King <colin.i.king@gmail.com>
iio: invensense: remove redundant initialization of variable period
Zhang Lixu <lixu.zhang@intel.com>
iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
Runyu Xiao <runyu.xiao@seu.edu.cn>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: NFIT: core: Fix possible deadlock and missing notifications
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: NFIT: core: Use devm_acpi_install_notify_handler()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: bus: Introduce devm_acpi_install_notify_handler()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: driver: Check ACPI_COMPANION() against NULL during probe
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
Sandipan Das <sandipan.das@amd.com>
perf/x86/amd/brs: Fix kernel address leakage
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: rawnand: fsl_ifc: return errors for failed page reads
Runyu Xiao <runyu.xiao@seu.edu.cn>
mmc: vub300: defer reset until cmd_mutex is unlocked
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: mchp23k256: use SPI match data for chip caps
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: onenand: samsung: report DMA completion timeouts
Rafael Beims <rafael.beims@toradex.com>
wifi: mwifiex: fix permanently busy scans after multiple roam iterations
Zhiling Zou <roxy520tt@gmail.com>
wifi: mac80211: free ack status frame on TX header build failure
Junrui Luo <moonafterrain@outlook.com>
powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()
Zhao Dongdong <zhaodongdong@kylinos.cn>
reset: sunxi: fix memory region leak on ioremap failure
Robby Cai <robby.cai@nxp.com>
reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ
Florian Westphal <fw@strlen.de>
ipvs: reload ip header after head reallocation
Julian Anastasov <ja@ssi.bg>
ipvs: fix more places with wrong ipv6 transport offsets
Maoyi Xie <maoyixie.tju@gmail.com>
memstick: ms_block: reject a card that reports too many blocks
James Raphael Tiovalen <jamestiotio@gmail.com>
macsec: fix promiscuity refcount leak in macsec_dev_open()
Xuanqiang Luo <luoxuanqiang@kylinos.cn>
llc: fix SAP refcount leak when creating incoming sockets
Laxman Acharya Padhya <acharyalaxman8848@gmail.com>
Bluetooth: btrtl: validate firmware patch bounds
Asim Viladi Oglu Manizada <manizada@pm.me>
net: openvswitch: reject oversized nested action attrs
Abhishek Ojha <Abhishek.ojha@savoirfairelinux.com>
regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
Dawei Feng <dawei.feng@seu.edu.cn>
wifi: mac80211: fix memory leak in ieee80211_register_hw()
Runyu Xiao <runyu.xiao@seu.edu.cn>
wifi: rt2x00: avoid full teardown before work setup in probe
Thorsten Blum <thorsten.blum@linux.dev>
powerpc/pseries: fix memory leak on krealloc failure in papr_init
Peng Fan <peng.fan@nxp.com>
pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
Peng Fan <peng.fan@nxp.com>
pmdomain: imx: Fix i.MX8MP power notifier
Farhad Alemi <farhad.alemi@berkeley.edu>
cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
Crystal Wood <crwood@redhat.com>
tracing/osnoise: Call synchronize_rcu() when unregistering
Tao Liu <ltao@redhat.com>
riscv: Prevent NULL pointer dereference in machine_kexec_prepare()
Michael Bommarito <michael.bommarito@gmail.com>
drbd: reject data replies with an out-of-range payload size
Daehyeon Ko <4ncienth@gmail.com>
macsec: don't read an unset MAC header in macsec_encrypt()
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: use parsed transport offset in SCTP state lookup
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
llc: fix SAP refcount leak in llc_ui_autobind()
Yousef Alhouseen <alhouseenyousef@gmail.com>
mac802154: remove interfaces with RCU list deletion
Gerald Schaefer <gerald.schaefer@linux.ibm.com>
s390/monwriter: Reject buffer reuse with different data length
Martin Kaiser <martin@kaiser.cx>
riscv: probes: save original sp in rethook trampoline
HyeongJun An <sammiee5311@gmail.com>
hwmon: (asus_atk0110) Check package count before accessing element
Maoyi Xie <maoyixie.tju@gmail.com>
net: wwan: iosm: bound device offsets in the MUX downlink decoder
Wentao Liang <vulab@iscas.ac.cn>
ata: pata_pxa: Fix DMA channel leak on probe error
Bryam Vargas <hexlabsecurity@proton.me>
orangefs: keep the readdir entry size 64-bit in fill_from_part()
Masami Hiramatsu (Google) <mhiramat@kernel.org>
tracing/probes: Fix double addition of offset for @+FOFFSET
Bryam Vargas <hexlabsecurity@proton.me>
net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked
Bryam Vargas <hexlabsecurity@proton.me>
net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked
Andrea Righi <arighi@nvidia.com>
net: lan743x: Initialize eth_syslock spinlock before use
Haoxiang Li <haoxiang_li2024@163.com>
fsl/fman: Free init resources on KeyGen failure in fman_init()
Runyu Xiao <runyu.xiao@seu.edu.cn>
hwmon: (occ) unregister sysfs devices outside occ lock
Haoxiang Li <haoxiang_li2024@163.com>
net: liquidio: fix BAR resource leak on PF number failure
Pengpeng Hou <pengpeng@iscas.ac.cn>
hwmon: (w83793) remove vrm sysfs file on probe failure
Pengpeng Hou <pengpeng@iscas.ac.cn>
hwmon: (w83627hf) remove VID sysfs files on error and remove
Conor Dooley <conor.dooley@microchip.com>
rtc: mpfs: fix counter upload completion condition
Abdun Nihaal <nihaal@cse.iitm.ac.in>
bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
Sabrina Dubroca <sd@queasysnail.net>
espintcp: use sk_msg_free_partial to fix partial send
Hongchen Zhang <zhanghongchen@loongson.cn>
LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()
Sven Eckelmann <sven@narfation.org>
batman-adv: clean untagged VLAN on netdev registration failure
Sven Eckelmann <sven@narfation.org>
batman-adv: ensure minimal ethernet header on TX
Sven Eckelmann <sven@narfation.org>
batman-adv: retrieve ethhdr after potential skb realloc on RX
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants
Shitalkumar Gandhi <shital.gandhi45@gmail.com>
ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
Shitalkumar Gandhi <shital.gandhi45@gmail.com>
ieee802154: ca8210: fix cas_ctl leak on spi_async failure
Michael Bommarito <michael.bommarito@gmail.com>
ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation
Michael Bommarito <michael.bommarito@gmail.com>
ieee802154: admin-gate legacy LLSEC dump operations
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
Maoyi Xie <maoyixie.tju@gmail.com>
net: ipip: require CAP_NET_ADMIN in the device netns for changelink
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
Dawei Feng <dawei.feng@seu.edu.cn>
net: ena: clean up XDP TX queues when regular TX setup fails
Zihan Xi <xizh2024@lzu.edu.cn>
net/sched: act_ct: preserve tc_skb_cb across defragmentation
Haoxiang Li <haoxiang_li2024@163.com>
net: ixp4xx_hss: fix duplicate HDLC netdev allocation
Haoxiang Li <haoxiang_li2024@163.com>
net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
Maoyi Xie <maoyixie.tju@gmail.com>
net: sit: require CAP_NET_ADMIN in the device netns for changelink
Andreas Kemnade <andreas@kemnade.info>
gpios: palmas: add .get_direction() op
Paul Louvel <paul.louvel@bootlin.com>
gpio-f7188x: Add support for NCT6126D version B
Bradley Morgan <include@grrlz.net>
cpu: hotplug: Bound hotplug states sysfs output
Bradley Morgan <include@grrlz.net>
cpu: hotplug: Preserve per instance callback errors
Zhan Xusheng <zhanxusheng1024@gmail.com>
posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
Doruk Tan Ozturk <doruk@0sec.ai>
net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix type confusion in CDC union descriptor parsing
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix race condition in reset_device sysfs callback
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix DMA mapping violation in line setup
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - add response length checks
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - validate control endpoint type
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - release data interface on disconnect
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix use-after-free and double-free in disconnect
Haoxiang Li <haoxiang_li2024@163.com>
scsi: elx: efct: Fix I/O leak on unsupported additional CDB
WenTao Liang <vulab@iscas.ac.cn>
scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
Bryam Vargas <hexlabsecurity@proton.me>
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
Bryam Vargas <hexlabsecurity@proton.me>
scsi: target: Bound PR-OUT TransportID parsing to the received buffer
Michael Bommarito <michael.bommarito@gmail.com>
scsi: xen: scsiback: Free unsubmitted command instead of double-putting it
Michael Bommarito <michael.bommarito@gmail.com>
scsi: xen: scsiback: Free the command tag on the TMR submit-failure path
Xu Rao <raoxu@uniontech.com>
scsi: sg: Report request-table problems when any status is set
Abdun Nihaal <nihaal@cse.iitm.ac.in>
scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
Haoxiang Li <haoxiang_li2024@163.com>
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
Mikulas Patocka <mpatocka@redhat.com>
dm-verity: increase sprintf buffer size
Mikulas Patocka <mpatocka@redhat.com>
dm-verity: fix a possible NULL pointer dereference
Mikulas Patocka <mpatocka@redhat.com>
dm-integrity: don't increment hash_offset twice
Mikulas Patocka <mpatocka@redhat.com>
dm_early_create: fix freeing used table on dm_resume failure
Mikulas Patocka <mpatocka@redhat.com>
dm-stats: fix merge accounting
Mikulas Patocka <mpatocka@redhat.com>
dm-stats: fix dm_jiffies_to_msec64
Benjamin Marzinski <bmarzins@redhat.com>
dm-log: fix a bitset_size overflow on 32bit machines
Mikulas Patocka <mpatocka@redhat.com>
dm-ioctl: fix a possible overflow in list_version_get_info
Mikulas Patocka <mpatocka@redhat.com>
dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
Samuel Moelius <sam.moelius@trailofbits.com>
dm era: fix out-of-bounds memory access for non-zero start sector
Ming-Hung Tsai <mtsai@redhat.com>
dm thin metadata: fix metadata snapshot consistency on commit failure
Genjian Zhang <zhanggenjian@kylinos.cn>
dm thin metadata: fix superblock refcount leak on snapshot shadow failure
Haoxiang Li <haoxiang_li2024@163.com>
net: sparx5: unregister blocking notifier on init failure
Jiri Olsa <jolsa@kernel.org>
bpf: Add missing access_ok call to copy_user_syms
Jann Horn <jannh@google.com>
bpf,fork: wipe ->bpf_storage before bailouts that access it
Oliver Hartkopp <socketcan@hartkopp.net>
can: bcm: add missing rcu list annotations and operations
Oliver Hartkopp <socketcan@hartkopp.net>
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
Lee Jones <lee@kernel.org>
can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF
Oliver Hartkopp <socketcan@hartkopp.net>
can: isotp: use unconditional synchronize_rcu() in isotp_release()
Fan Wu <fanwu01@zju.edu.cn>
can: esd_usb: kill anchored URBs before freeing netdevs
Bryam Vargas <hexlabsecurity@proton.me>
nvmet-rdma: handle inline data with a nonzero offset
Weiming Shi <bestswngs@gmail.com>
sctp: validate STALE_COOKIE cause length before reading staleness
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
spi: uniphier: Fix completion initialization order before devm_request_irq()
Wang Yan <wangyan01@kylinos.cn>
time: Fix off-by-one in compat settimeofday() usec validation
Jaewon Yang <yong010301@gmail.com>
tpm: Make the TPM character devices non-seekable
Thorsten Blum <thorsten.blum@linux.dev>
tpm: fix event_size output in tpm1_binary_bios_measurements_show
Maoyi Xie <maoyixie.tju@gmail.com>
xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink
Sanman Pradhan <psanman@juniper.net>
xfrm: use compat translator only for u64 alignment mismatch
Wentao Liang <vulab@iscas.ac.cn>
xen/gntdev: fix error handling in ioctl
Paul Greenwalt <paul.greenwalt@intel.com>
ice: fix ice_init_link() error return preventing probe
Xuanqiang Luo <luoxuanqiang@kylinos.cn>
i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
Roman Vivchar <rva333@protonmail.com>
i2c: mediatek: fix WRRD for SoCs without auto_restart option
Joshua Crofts <joshua.crofts1@gmail.com>
hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig
Ibrahim Hashimov <security@auditcode.ai>
ksmbd: fix integer overflow in set_file_allocation_info()
Fredric Cover <fredric.cover.lkernel@gmail.com>
smb: client: use kvzalloc() for megabyte buffer in simple fallocate
Daniel Gibson <daniel@gibson.sh>
platform/x86/amd/pmc: Add delay_suspend module parameter
Daniel Gibson <daniel@gibson.sh>
platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops
Daniel Gibson <daniel@gibson.sh>
platform/x86/amd/pmc: Check for intermediate wakeup in function
Frank Li <Frank.Li@nxp.com>
dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
Kartik Rajput <kkartik@nvidia.com>
dmaengine: tegra: Fix burst size calculation
Jarkko Sakkinen <jarkko@kernel.org>
tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
Bhargav Joshi <j.bhargav.u@gmail.com>
irqchip/crossbar: Use correct index in crossbar_domain_free()
Florian Fuchs <fuchsfl@gmail.com>
mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: spi-nor: swp: Improve locking user experience
Sebastian Alba Vives <sebasjosue84@gmail.com>
fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()
Maoyi Xie <maoyixie.tju@gmail.com>
net: thunderbolt: Fix frags[] overflow by bounding frame_count
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path
Sebastian Alba Vives <sebasjosue84@gmail.com>
fpga: dfl: add bounds check in dfh_get_param_size()
Michael Bommarito <michael.bommarito@gmail.com>
ocfs2: reject non-inline dinodes with i_size and zero i_clusters
Michael Bommarito <michael.bommarito@gmail.com>
ocfs2: reject dinodes whose i_rdev disagrees with the file type
Michael Bommarito <michael.bommarito@gmail.com>
ocfs2: reject dinodes with non-canonical i_mode type
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
Ian Bridges <icb@fastmail.org>
ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
Kyle Zeng <kylebot@openai.com>
ocfs2: avoid moving extents to occupied clusters
Arseniy Krasnov <avkrasnov@rulkc.org>
mtd: rawnand: fix condition in 'nand_select_target()'
Vasiliy Kovalev <kovalev@altlinux.org>
net/9p: fix infinite loop in p9_client_rpc on fatal signal
Bastien Curutchet <bastien.curutchet@bootlin.com>
mtd: rawnand: pl353: fix probe resource allocation
Tristan Madani <tristan@talencesecurity.com>
ocfs2: use kzalloc for quota recovery bitmap allocation
Ionut Nechita <ionut.nechita@windriver.com>
scsi: sas: Skip opt_sectors when DMA reports no real optimization hint
Martin Wilck <martin.wilck@suse.com>
scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
Breno Leitao <leitao@debian.org>
9p: skip nlink update in cacheless mode to fix WARN_ON
Ruoyu Wang <ruoyuw560@gmail.com>
mtd: slram: remove failed entries from the device list
Muchun Song <muchun.song@linux.dev>
mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
Krzysztof Wilczyński <kwilczynski@kernel.org>
proc: only bump parent nlink when registering directories
SeongJae Park <sj@kernel.org>
mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error
SeongJae Park <sj@kernel.org>
mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()
Zishun Yi <vulab@iscas.ac.cn>
riscv: cacheinfo: Fix node reference leak in populate_cache_leaves
Aaron Tomlin <atomlin@atomlin.com>
mips: sched: Fix CPUMASK_OFFSTACK memory corruption
WenTao Liang <vulab@iscas.ac.cn>
power: supply: charger-manager: fix refcount leak in is_full_charged()
Tristan Madani <tristan@talencesecurity.com>
ntfs3: fix out-of-bounds read in decompress_lznt
Michael Bommarito <michael.bommarito@gmail.com>
ntfs3: validate split-point offset in indx_insert_into_buffer
Michael Bommarito <michael.bommarito@gmail.com>
ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
Michael Bommarito <michael.bommarito@gmail.com>
ntfs3: cap RESTART_TABLE free-chain walker at rt->used
Michael Bommarito <michael.bommarito@gmail.com>
fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
Michael Bommarito <michael.bommarito@gmail.com>
fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: validate lcns_follow in log_replay conversion
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: bound attr_off in UpdateResidentValue against data_off
Michael Bommarito <michael.bommarito@gmail.com>
fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: bound DeleteIndexEntryAllocation memmove length
Zhan Xusheng <zhanxusheng1024@gmail.com>
fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename
SeongJae Park <sj@kernel.org>
mm/damon/core: make charge_addr_from aware of end-address exclusivity
Ma Ke <make24@iscas.ac.cn>
power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
Johan Hovold <johan@kernel.org>
MIPS: ip22-gio: fix device reference leak in probe
Johan Hovold <johan@kernel.org>
MIPS: ip22-gio: fix kfree() of static object
Johan Hovold <johan@kernel.org>
MIPS: ip22-gio: fix gio device memory leak
Wasim Nazir <wasim.nazir@oss.qualcomm.com>
remoteproc: qcom: Fix leak when custom dump_segments addition fails
Chuck Lever <chuck.lever@oracle.com>
SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
Chuck Lever <chuck.lever@oracle.com>
lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
Chuck Lever <chuck.lever@oracle.com>
lockd: Plug nlm_file leak when nlm_do_fopen() fails
Chuck Lever <chuck.lever@oracle.com>
sunrpc: wait for in-flight TLS handshake callback when cancel loses race
Chris Mason <clm@meta.com>
sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
Abdun Nihaal <nihaal@cse.iitm.ac.in>
nvdimm/btt: Free arena sub-allocations on discover_arenas() error path
Abdun Nihaal <nihaal@cse.iitm.ac.in>
nvdimm/btt: Free arenas on btt_init() error paths
Junrui Luo <moonafterrain@outlook.com>
jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()
Pauli Virtanen <pav@iki.fi>
Bluetooth: SCO: hold sk properly in sco_conn_ready
Pauli Virtanen <pav@iki.fi>
Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready
Benoît Sevens <bsevens@google.com>
HID: playstation: validate num_touch_reports in DualShock 4 reports
Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
mfd: tps6586x: Fix OF node refcount
Shyam Prasad N <sprasad@microsoft.com>
cifs: invalidate cfid on unlink/rename/rmdir
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: prevent TVLV OOB check overflow
Sven Eckelmann <sven@narfation.org>
batman-adv: frag: fix primary_if leak on failed linearization
Sven Eckelmann <sven@narfation.org>
batman-adv: frag: free unfragmentable packet
Sven Eckelmann <sven@narfation.org>
batman-adv: fix VLAN priority offset
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: avoid request storms during pending request
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: fix tie-break for candidate selection
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: ensure accessible eth_hdr proto field
Sven Eckelmann <sven@narfation.org>
batman-adv: bla: reacquire gw address after skb realloc
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: acquire ARP hw source only after skb realloc
Sven Eckelmann <sven@narfation.org>
batman-adv: access unicast_ttvn skb->data only after skb realloc
Sven Eckelmann <sven@narfation.org>
batman-adv: gw: acquire ethernet header only after skb realloc
Sumanth Korikkar <sumanthk@linux.ibm.com>
s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()
Sandipan Das <sandipan.das@amd.com>
perf/x86/amd/lbr: Fix kernel address leakage
Thorsten Blum <thorsten.blum@linux.dev>
x86/boot: Reject too long acpi_rsdp= values
Thorsten Blum <thorsten.blum@linux.dev>
x86/boot: Validate console=uart8250 baud rate to fix early boot hang
Ali Ahmet MEMIS <dev@unknownbbqr.xyz>
tools/power/x86/intel-speed-select: Harden daemon pidfile open
Guangshuo Li <lgs201920130244@gmail.com>
mfd: sm501: Fix reference leak on failed device registration
Armin Wolf <W_Armin@gmx.de>
leds: uleds: Fix potential buffer overread
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix incorrect execmem checks on overlayfs
Stephen Smalley <stephen.smalley.work@gmail.com>
selinux: check connect-related permissions on TCP Fast Open
Wang Jun <1742789905@qq.com>
soc: fsl: qe: panic on ioremap() failure in qe_reset()
Siddharth Vadapalli <s-vadapalli@ti.com>
soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy
Guangshuo Li <lgs201920130244@gmail.com>
gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path
Xiang Mei (Microsoft) <xmei5@asu.edu>
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_nat: reject unsupported target families
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
netfilter: ecache: fix inverted time_after() check
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
netfilter: nf_conncount: fix zone comparison in tuple dedup
Xiang Mei <xmei5@asu.edu>
netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
Florian Westphal <fw@strlen.de>
netfilter: nf_nat_sip: reload possible stale data pointer
Haoze Xie <royenheart@gmail.com>
netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_cluster: reject template conntracks in hash match
David Carlier <devnexen@gmail.com>
netfilter: nfnl_cthelper: apply per-class values when updating policies
Muhammad Bilal <meatuni001@gmail.com>
netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
Srinivas Kandagatla <srinivas.kandagatla@oss.qualcomm.com>
ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ASoC: mediatek: mt8183: Release reserved memory on cleanup
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ASoC: mediatek: mt8192: Release reserved memory on cleanup
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: tridentfb: fix potential memory leak in trident_pci_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: vesafb: fix memory leak in vesafb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: s3fb: fix potential memory leak in s3_pci_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: i740fb: fix potential memory leak in i740fb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: radeon: fix potential memory leak in radeonfb_pci_register()
Li RongQing <lirongqing@baidu.com>
fbdev: sm712: Fix operator precedence in big_swap macro
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: hecubafb: fix potential memory leak in hecubafb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: metronomefb: fix potential memory leak in metronomefb_probe()
Sean Christopherson <seanjc@google.com>
KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
Matthew Rosato <mjrosato@linux.ibm.com>
KVM: s390: pci: Fix handling of AIF enable without AISB
Hyunwoo Kim <imv4bel@gmail.com>
KVM: arm64: vgic: Check the interrupt is still ours before migrating it
Haoxiang Li <haoxiang_li2024@163.com>
KVM: s390: pci: Fix GISC refcount leak on AIF enable failure
Nickolay Goppen <setotau@mainlining.org>
arm64: dts: qcom: sdm630: describe adsp_mem region properly
Mark Rutland <mark.rutland@arm.com>
arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()
Yong Wang <edragain@163.com>
net: ife: require ETH_HLEN to be pullable in ife_decode()
Zhengchuan Liang <zcliangcn@gmail.com>
net: atm: reject out-of-range traffic classes in QoS validation
Michael Bommarito <michael.bommarito@gmail.com>
net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ASoC: SOF: topology: validate vendor array size before parsing
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
Zhang Tianci <zhangtianci.1997@bytedance.com>
vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
Wentao Liang <vulab@iscas.ac.cn>
mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
Wentao Liang <vulab@iscas.ac.cn>
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
Guangshuo Li <lgs201920130244@gmail.com>
smb: client: fix overflow in passthrough ioctl bounds check
Harman Kalra <hkalra@marvell.com>
octeontx2-af: fix VF bringup affecting PF promiscuous state
Li RongQing <lirongqing@baidu.com>
net/mlx5: Fix L3 tunnel entropy refcount leak
Wang Yan <wangyan01@kylinos.cn>
selftests/net: fix EVP_MD_CTX leak in tcp_mmap
Timur Tabi <ttabi@nvidia.com>
regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
Cao Guanghui <caoguanghui@kylinos.cn>
dm era: fix NULL pointer dereference in metadata_open()
Chuck Lever <chuck.lever@oracle.com>
SUNRPC: pin upper rpc_clnt across the TLS connect_worker
Chuck Lever <chuck.lever@oracle.com>
SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED
Guangshuo Li <lgs201920130244@gmail.com>
cifs: validate DFS referral string offsets
Rongguang Wei <weirongguang@kylinos.cn>
s390/zcrypt: Remove the empty file
Julian Anastasov <ja@ssi.bg>
ipvs: ensure inner headers in ICMP errors are in headroom
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: use parsed transport offset in TCP state lookup
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: pass parsed transport offset to state handlers
Eric Dumazet <edumazet@google.com>
ipv6: mcast: Fix potential UAF in MLD delayed work
Kuniyuki Iwashima <kuniyu@google.com>
ipv6: mcast: Replace locking comments with lockdep annotations.
Eric Dumazet <edumazet@google.com>
ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
Suman Ghosh <sumang@marvell.com>
octeontx2-pf: check DMAC extraction support before filtering
Samuel Moelius <sam.moelius@trailofbits.com>
net/sched: cake: reject overhead values that underflow length
Enrico Pozzobon <enrico.pozzobon@dissecto.com>
net: usb: lan78xx: disable VLAN filter in promiscuous mode
Oleksij Rempel <o.rempel@pengutronix.de>
net: usb: lan78xx: move functions to avoid forward definitions
Chuck Lever <cel@kernel.org>
net/tls: Consume empty data records in tls_sw_read_sock()
Hui Wang <hui.wang@canonical.com>
ring-buffer: Fix event length with forced 8-byte alignment
Weiming Shi <bestswngs@gmail.com>
Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
Pauli Virtanen <pav@iki.fi>
Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
Cen Zhang <zzzccc427@gmail.com>
Bluetooth: MGMT: Fix adv monitor add failure cleanup
Cen Zhang <zzzccc427@gmail.com>
Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
Eric Dumazet <edumazet@google.com>
amt: fix size calculation in amt_get_size()
Xiang Mei <xmei5@asu.edu>
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload
Xiang Mei <xmei5@asu.edu>
net: qualcomm: rmnet: validate MAP frame length before ingress parsing
Shigeru Yoshida <syoshida@redhat.com>
qede: fix off-by-one in BD ring consumption on build_skb failure
Jens Emil Schulz Østergaard <jensemil.schulzostergaard@microchip.com>
net: microchip: vcap: fix races on the shared Super VCAP block
Feng Liu <feliu@nvidia.com>
net/mlx5e: Fix HV VHCA stats agent registration race
Feng Liu <feliu@nvidia.com>
net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_connmark: reject invalid shift parameters
Zhixing Chen <running910@gmail.com>
netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
Feng Wu <wufengwufengwufeng@gmail.com>
netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_u32: reject invalid shift counts
Qihang <q.h.hack.winter@gmail.com>
gue: validate REMCSUM private option length
Xiang Mei <xmei5@asu.edu>
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
Yiyang Chen <chenyy23@mails.tsinghua.edu.cn>
selftests/hid: Cover hid_bpf_get_data() size overflow
Benjamin Tissoires <bentiss@kernel.org>
selftests/hid: convert the hid_bpf selftests with struct_ops
Benjamin Tissoires <bentiss@kernel.org>
selftests/hid: force using our compiled libbpf headers
Benjamin Tissoires <bentiss@kernel.org>
selftests/hid: do not manually call headers_install
Benjamin Tissoires <bentiss@kernel.org>
selftests/hid: ensure we can compile the tests on kernels pre-6.3
Anshuman Khandual <anshuman.khandual@arm.com>
arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range()
Ryan Roberts <ryan.roberts@arm.com>
arm64/mm: convert ptep_clear() to ptep_get_and_clear()
Ryan Roberts <ryan.roberts@arm.com>
arm64/mm: convert set_pte_at() to set_ptes(..., 1)
Ryan Roberts <ryan.roberts@arm.com>
arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep)
Lee Jones <lee@kernel.org>
HID: core: Fix OOB read in hid_get_report for numbered reports
Georgiy Osokin <g.osokin@auroraos.dev>
HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
Myeonghun Pak <mhun512@gmail.com>
ata: sata_gemini: unwind clocks on IDE pinctrl errors
Michael Bommarito <michael.bommarito@gmail.com>
minix: avoid overflow in bitmap block count calculation
David Howells <dhowells@redhat.com>
afs: Fix unchecked-length string display in debug statement
David Howells <dhowells@redhat.com>
afs: Fix the volume AFS_VOLUME_RM_TREE is set on
David Howells <dhowells@redhat.com>
afs: Fix vllist leak
David Howells <dhowells@redhat.com>
afs: Fix callback service message parsers to pass through -EAGAIN
Zilin Guan <zilin@seu.edu.cn>
afs: use kvfree() to free memory allocated by kvcalloc()
Dan Carpenter <error27@gmail.com>
afs: Fix error code in afs_extract_vl_addrs()
Christian Brauner <brauner@kernel.org>
fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
Samuel Moelius <sam.moelius@trailofbits.com>
net/sched: hhf: clear heavy-hitter state on reset
Viacheslav Bocharov <v@baodeep.com>
pinctrl: meson: restore non-sleeping GPIO access
Vladimir Zapolskiy <vz@kernel.org>
gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
ZhangGuoDong <zhangguodong@kylinos.cn>
smb: move some duplicate definitions to common/cifsglob.h
Haofeng Li <lihaofeng@kylinos.cn>
ksmbd: reject undersized DACLs before parsing ACEs
Sechang Lim <rhkrqnwk98@gmail.com>
net/sched: act_bpf: use rcu_dereference_bh() to read the filter
Gleb Markov <markov.gi@npc-ksb.ru>
cxgb4: Fix decode strings dump for T6 adapters
Longjun Tang <tanglongjun@kylinos.cn>
virtio_net: disable cb when NAPI is busy-polled
Qingshuang Fu <fuqingshuang@kylinos.cn>
irqchip/ts4800: Fix missing chained handler cleanup on remove
Yuho Choi <dbgh9129@gmail.com>
irqchip/gic-v3-its: Fix OF node reference leak
Martin Kaiser <martin@kaiser.cx>
tracing: eprobe: read the complete FILTER_PTR_STRING pointer
Masami Hiramatsu (Google) <mhiramat@kernel.org>
tracing/events: Fix to check the simple_tsk_fn creation
Ido Schimmel <idosch@nvidia.com>
bridge: stp: Fix a potential use-after-free when deleting a bridge
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF
Rosen Penev <rosenp@gmail.com>
net: gianfar: dispose irq mappings on probe failure and device removal
Petr Wozniak <petr.wozniak@gmail.com>
net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
Xiang Mei <xmei5@asu.edu>
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
Guenter Roeck <linux@roeck-us.net>
hwmon: (pmbus) Fix passing events to regulator core
Matti Vaittinen <mazziesaccount@gmail.com>
hwmon: adm1275: Prevent reading uninitialized stack
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: DEC: Ensure RTC platform device deregistration upon failure
Yousef Alhouseen <alhouseenyousef@gmail.com>
sctp: fix SCTP_RESET_STREAMS stream list length limit
Wei Fang <wei.fang@nxp.com>
net: enetc: check the number of BDs needed for xdp_frame
Matvey Kovalev <matvey.kovalev@ispras.ru>
qede: fix out-of-bounds check for cqe->len_list[]
Nuoqi Gui <gnq25@mails.tsinghua.edu.cn>
seg6: validate SRH length before reading fixed fields
Pengpeng Hou <pengpeng@iscas.ac.cn>
gpio: htc-egpio: use managed gpiochip registration
Pengpeng Hou <pengpeng@iscas.ac.cn>
gpio: mvebu: fail probe if gpiochip registration fails
Pengpeng Hou <pengpeng@iscas.ac.cn>
spi: sh-msiof: abort transfers when reset times out
Martin Kaiser <martin@kaiser.cx>
tracing: probes: fix typo in a log message
Rob Herring (Arm) <robh@kernel.org>
dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback
Shengjiu Wang <shengjiu.wang@nxp.com>
ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count
Shitalkumar Gandhi <shital.gandhi45@gmail.com>
net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove
Ruoyu Wang <ruoyuw560@gmail.com>
net: sungem: fix probe error cleanup
Yun Zhou <yun.zhou@windriver.com>
net: mvneta: re-enable percpu interrupt on resume
Haoxiang Li <haoxiang_li2024@163.com>
rtc: cmos: unregister HPET IRQ handler on probe failure
Fredrik M Olsson <fredrik.m.olsson@axis.com>
rtc: ds1307: Fix off-by-one issue with wday for rx8130
Huiwen He <hehuiwen@kylinos.cn>
smb/client: preserve errors from smb2_set_sparse()
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in disable_policy sysctl
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in forwarding sysctl
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in ignore_routes_with_linkdown sysctl
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in disable_ipv6 sysctl
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
Eric Dumazet <edumazet@google.com>
veth: fix NAPI leak in XDP enable error path
Aleksandrova Alyona <aga@itb.spb.ru>
net: dsa: sja1105: round up PTP perout pin duration
Xiang Mei <xmei5@asu.edu>
net, bpf: check master for NULL in xdp_master_redirect()
Krzysztof Wilczyński <kwilczynski@kernel.org>
alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
Krzysztof Wilczyński <kwilczynski@kernel.org>
alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
Koichiro Den <den@valinux.co.jp>
NTB: epf: Fix doorbell bitmask and IRQ vector handling
Koichiro Den <den@valinux.co.jp>
NTB: epf: Report 0-based doorbell vector via ntb_db_event()
Koichiro Den <den@valinux.co.jp>
NTB: epf: Make db_valid_mask cover only real doorbell bits
Florian Westphal <fw@strlen.de>
netfilter: nft_compat: ebtables emulation must reject non-bridge targets
Runyu Xiao <runyu.xiao@seu.edu.cn>
netfilter: nft_synproxy: stop bypassing the priv->info snapshot
Fernando Fernandez Mancera <fmancera@suse.de>
netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
Mathias Krause <minipli@grsecurity.net>
netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
Bradley Morgan <include@grrlz.net>
bpf: Disable xfrm_decode_session hook attachment
Xu Kuohai <xukuohai@huawei.com>
bpf, lsm: Add disabled BPF LSM hook list
Kuniyuki Iwashima <kuniyu@google.com>
ipv4: fib: Don't ignore error route in local/main tables.
Xiang Mei <xmei5@asu.edu>
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
Stepan Ionichev <sozdayvek@gmail.com>
rtc: msc313: fix NULL deref in shared IRQ handler at probe
Mohamed Khalfella <mkhalfella@purestorage.com>
i40e: Fix i40e_debug() to use struct i40e_hw argument
Lukasz Czapnik <lukasz.czapnik@intel.com>
ice: fix AQ error code comparison in ice_set_pauseparam()
Dawid Osuchowski <dawid.osuchowski@linux.intel.com>
ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0
Xiang Mei <xmei5@asu.edu>
drm/edid: fix OOB read in drm_parse_tiled_block()
Amery Hung <ameryhung@gmail.com>
bpf: Fix effective prog array index with BPF_F_PREORDER
Avinash Duduskar <avinash.duduskar@gmail.com>
bpf: zero-initialize the fib lookup flow struct
Nuoqi Gui <gnq25@mails.tsinghua.edu.cn>
bpf: Fix stack slot index in nospec checks
Ronan Dalton <ronan.dalton@alliedtelesis.co.nz>
rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
Antoni Pokusinski <apokusinski01@gmail.com>
rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
Geetha sowjanya <gakula@marvell.com>
octeontx2-pf: mcs: Fix mcs resources free on PF shutdown
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-pf: Clear stats of all resources when freeing resources
Geetha sowjanya <gakula@marvell.com>
octeontx2-af: mcs: Fix unsupported secy stats read
Wayen Yan <win847@gmail.com>
net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths
Weiming Shi <bestswngs@gmail.com>
tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
Ruoyu Wang <ruoyuw560@gmail.com>
net: marvell: prestera: initialize err in prestera_port_sfp_bind
Aboorva Devarajan <aboorvad@linux.ibm.com>
selftests/mm: fix exclusive_cow test fork() handling
Sayali Patil <sayalip@linux.ibm.com>
selftests/mm: allow PUD-level entries in compound testcase of hmm tests
Sayali Patil <sayalip@linux.ibm.com>
selftests/mm: clarify alternate unmapping in compaction_test
Bhargav Joshi <j.bhargav.u@gmail.com>
irqchip/crossbar: Fix parent domain resource leak
Florian Westphal <fw@strlen.de>
netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
Florian Westphal <fw@strlen.de>
netfilter: nf_reject: skip iphdr options when looking for icmp header
Jozsef Kadlecsik <kadlec@netfilter.org>
netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
Jozsef Kadlecsik <kadlec@netfilter.org>
netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
Jozsef Kadlecsik <kadlec@netfilter.org>
netfilter: ipset: annotate "pos" for concurrent readers/writers
Jozsef Kadlecsik <kadlec@netfilter.org>
netfilter: ipset: Fix data race between add and dump in all hash types
Abd-Alrhman Masalkhi <abd.masalkhi@gmail.com>
md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry
Aleksandr Nogikh <nogikh@google.com>
ieee802154: fix kernel-infoleak in dgram_recvmsg()
Ivan Abramov <i.abramov@mt-integration.ru>
ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
Xu Rao <raoxu@uniontech.com>
ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ACPI: resource: Amend kernel-doc style
Ricardo Neri <ricardo.neri-calderon@linux.intel.com>
thermal: intel: Fix dangling resources on thermal_throttle_online() failure
Breno Leitao <leitao@debian.org>
arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS
Cen Zhang <zzzccc427@gmail.com>
ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints
Yun Zhou <yun.zhou@windriver.com>
flow_dissector: check device type before reading ETH_ADDRS
Cosmin Ratiu <cratiu@nvidia.com>
devlink: Fix parent ref leak in devl_rate_node_create()
Ioana Ciornei <ioana.ciornei@nxp.com>
dpaa2-switch: fix VLAN upper check not rejecting bridge join
Xiang Mei <xmei5@asu.edu>
virtio-net: fix len check in receive_big()
Quang Nguyen <quang.nguyen.wx@renesas.com>
spi: rpc-if: Use correct device for hardware reinitialization on resume
Mark Tomlinson <mark.tomlinson@alliedtelesis.co.nz>
PCI: iproc: Restore .map_irq() for the platform bus driver
Xin Long <lucien.xin@gmail.com>
sctp: hold socket lock when dumping endpoints in sctp_diag
Jakub Kicinski <kuba@kernel.org>
net: psample: fix info leak in PSAMPLE_ATTR_DATA
Ratheesh Kannoth <rkannoth@marvell.com>
octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
Thadeu Lima de Souza Cascardo <cascardo@igalia.com>
drm/amdgpu: initialize irq.lock spinlock earlier
Mario Limonciello <mario.limonciello@amd.com>
drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
Yunxiang Li <Yunxiang.Li@amd.com>
drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
Sen Wang <sen@ti.com>
ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode
Arnaldo Carvalho de Melo <acme@redhat.com>
perf cs-etm: Require full global header in auxtrace_info size check
Arnaldo Carvalho de Melo <acme@redhat.com>
perf cs-etm: Validate num_cpu before metadata allocation
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Use snprintf() for guestmount path construction
Eric Dumazet <edumazet@google.com>
xfrm: validate selector family and prefixlen during match
Eric Dumazet <edumazet@google.com>
xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]
Mike Yu <yumike@google.com>
xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path
Steffen Klassert <steffen.klassert@secunet.com>
xfrm: Use the XFRM_GRO to indicate a GRO call on input
Jisheng Zhang <jszhang@kernel.org>
spi: dw: fix wrong BAUDR setting after resume
Pengpeng Hou <pengpeng@iscas.ac.cn>
gpio: mlxbf3: fail probe if gpiochip registration fails
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Bounds-check array offsets in bpil_offs_to_addr()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Use snprintf() for root_dir path construction
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id()
Pengpeng Hou <pengpeng@iscas.ac.cn>
sparc: led: avoid trimming a newline from empty writes
John Johansen <john.johansen@canonical.com>
apparmor: fix label can not be immediately before a declaration
Adrian Hunter <adrian.hunter@intel.com>
i3c: master: Prevent reuse of dynamic address on device add failure
Zygmunt Krynicki <me@zygoon.pl>
apparmor: put secmark label after secid lookup
Zygmunt Krynicki <me@zygoon.pl>
apparmor: aa_getprocattr free procattr leak on format failure
Maxime Bélair <maxime.belair@canonical.com>
apparmor: fix potential UAF in aa_replace_profiles
Ryan Lee <ryan.lee@canonical.com>
apparmor: grab ns lock and refresh when looking up changehat child profiles
John Johansen <john.johansen@canonical.com>
apparmor: fix rawdata_f_data implicit flex array
Zygmunt Krynicki <me@zygoon.pl>
apparmor: aa_label_alloc use aa_label_free on alloc failure
Ruoyu Wang <ruoyuw560@gmail.com>
apparmor: check label build before no_new_privs test
Andrew Morton <akpm@linux-foundation.org>
security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
Yuanhe Shu <xiangzao@linux.alibaba.com>
Revert "PCI/MSI: Unmap MSI-X region on error"
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: mediatek: Use actual physical address instead of virt_to_phys()
Ryder Lee <ryder.lee@mediatek.com>
PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Add bounds checks to read_build_id() note iteration in minimal build
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Add bounds checks to elf_read_build_id() note iteration
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name()
Arnaldo Carvalho de Melo <acme@redhat.com>
tools lib api: Fix mount_overload() snprintf truncation and toupper range
Arnaldo Carvalho de Melo <acme@redhat.com>
tools lib api: Fix filename__write_int() writing uninitialized stack data
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Fix thread__set_comm_from_proc() on empty comm file
Arnaldo Carvalho de Melo <acme@redhat.com>
perf intel-pt: Fix snprintf size tracking bug in insn decoder
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Bounds-check .gnu_debuglink section data
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Fix signed overflow in sysfs__read_build_id() size check
Arnaldo Carvalho de Melo <acme@redhat.com>
tools lib api: Fix missing null termination in filename__read_int/ull()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file
Arnaldo Carvalho de Melo <acme@redhat.com>
perf pmu: Fix pmu_id() heap underwrite on empty identifier file
James Clark <james.clark@linaro.org>
perf cs-etm: Queue context packets for frontend
James Clark <james.clark@arm.com>
perf cs-etm: Create decoders after both AUX and HW_ID search passes
Besar Wicaksono <bwicaksono@nvidia.com>
perf cs-etm: Fix incorrect or missing decoder for raw trace
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Return sendctx slot after Send preparation failure
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Repost Receive buffers for malformed replies
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Sanitize the reply credit grant after parsing
Chris Mason <clm@meta.com>
xprtrdma: Fix bcall rep leak and unbounded peek
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Resize reply buffers before reposting receives
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Document and assert reply-handler invariants
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Check frwr_wp_create() during connect
Arnaldo Carvalho de Melo <acme@redhat.com>
perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf sched: Fix idle-hist callchain display using wrong rb_first variant
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
PCI: rcar-host: Remove unused LIST_HEAD(res)
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Use perf_env__get_cpu_topology() in machine__resolve()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Use scnprintf() in cpu_map__snprint() to prevent overflow
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Fix get_max_num() size_t underflow on empty sysfs file
Jamie Nguyen <jamien@nvidia.com>
fs/ntfs3: resize log->one_page_buf when adopting on-disk page size
Shuvam Pandey <shuvampandey1@gmail.com>
PCI: meson: Propagate devm_add_action_or_reset() failure
Li RongQing <lirongqing@baidu.com>
PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
Mike Snitzer <snitzer@kernel.org>
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write
Mike Snitzer <snitzer@kernel.org>
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors
Clark Wang <xiaoning.wang@nxp.com>
nfs: keep PG_UPTODATE clear after read errors in page groups
Dai Ngo <dai.ngo@oracle.com>
NFSv4/pnfs: defer return_range callbacks until after inode unlock
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Decouple req recycling from RPC completion
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Use sendctx DMA state for Send signaling
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Post receive buffers after RPC completion
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Avoid 250 ms delay on backlog wakeup
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Remove temp allocation of rpcrdma_rep objects
Sagi Grimberg <sagi@grimberg.me>
pNFS/filelayout: fix cheking if a layout is striped
Phillip Varney <pbvarney@protonmail.com>
clk: qcom: a53: Corrected frequency multiplier for 1152MHz
Nuno Sá <nuno.sa@analog.com>
dmaengine: Fix possible use after free
Icenowy Zheng <zhengxingda@iscas.ac.cn>
dmaengine: qcom: gpi: set DMA_PRIVATE capability
Arnaldo Carvalho de Melo <acme@redhat.com>
perf c2c: Fix use-after-free in he__get_c