stable.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2026-09-04 05:42:41 to 2026-09-04 05:52:02 UTC [more...]

[PATCH 6.18 000/552] 6.18.50-rc1 review
 2026-09-04  4:57 UTC  (200+ messages)
` [PATCH 6.18 070/552] staging: greybus: hid: fix SET_REPORT return value
` [PATCH 6.18 073/552] usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed
` [PATCH 6.18 074/552] USB: phy: fsl-usb: fix missing static keywords
` [PATCH 6.18 075/552] usb: typec: tcpci: pass correct rx_type to tcpm_pd_receive()
` [PATCH 6.18 076/552] usb: typec: thunderbolt: Disable work before freeing tbt on remove
` [PATCH 6.18 077/552] usb: typec: ucsi: use UCSI_TIMEOUT_MS for sync command completion
` [PATCH 6.18 078/552] usb: gadget: u_audio: Fix use-after-free on sound card disconnect
` [PATCH 6.18 079/552] usb: gadget: snps_udc_plat: clean up PHY on probe deferral
` [PATCH 6.18 100/552] NFSD: Encode only the status in NFS-ACL v2 GETACL error replies
` [PATCH 6.18 101/552] NFSD: Fix off-by-one in DRC bucket pruning limit
` [PATCH 6.18 102/552] NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock
` [PATCH 6.18 103/552] NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check
` [PATCH 6.18 104/552] nfsd: guard nfsd_serv deref in nfsd_file_net_dispose
` [PATCH 6.18 105/552] NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
` [PATCH 6.18 106/552] pNFS: Fix EBUSY check in pnfs_layout_need_return
` [PATCH 6.18 107/552] nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
` [PATCH 6.18 108/552] nfsd: release path refs on follow_down() error
` [PATCH 6.18 109/552] nfsd: Reset write verifier when async COPY writeback fails
` [PATCH 6.18 110/552] nfsd: return NFS4ERR_NOTSUPP for unsupported netloc4 types
` [PATCH 6.18 111/552] nfsd: sample writeback error cursor before async COPY loop
` [PATCH 6.18 112/552] nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations
` [PATCH 6.18 113/552] nfsd: size fh_verify server sockaddr slot by xpt_locallen
` [PATCH 6.18 114/552] nfsd: validate nseconds in TIME_DELEG decode paths
` [PATCH 6.18 115/552] nfsd: validate sockaddr length per family in listener_set
` [PATCH 6.18 116/552] nfsd: validate symlink target length in NFSv4 CREATE
` [PATCH 6.18 117/552] nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
` [PATCH 6.18 118/552] nfsd: add filehandle match check to nfsd4_delegreturn()
` [PATCH 6.18 119/552] nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry
` [PATCH 6.18 120/552] nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
` [PATCH 6.18 121/552] nfsd: check client ownership when cancelling a copy-notify stateid
` [PATCH 6.18 122/552] nfsd: clear CALLBACK_RUNNING on failed delegation recall queue
` [PATCH 6.18 123/552] nfsd: clear opcnt on compound arg release to prevent OOB read
` [PATCH 6.18 124/552] nfsd: defer setting NFSD4_CALLBACK_RUNNING in deleg_reaper
` [PATCH 6.18 125/552] nfsd: defer vfree of compound ops to fix rpc_status UAF
` [PATCH 6.18 126/552] nfsd: dont free session slots that are still in use
` [PATCH 6.18 127/552] nfsd: drop the stateid, not the stateowner, on seqid_op replay retry
` [PATCH 6.18 128/552] nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
` [PATCH 6.18 129/552] nfsd: fix cpntf publish race in nfs4_init_cp_state
` [PATCH 6.18 130/552] nfsd: fix dentry ref leak on V4ROOT export filehandle lookup
` [PATCH 6.18 131/552] nfsd: fix FL_SLEEP being set unconditionally for all LOCK types
` [PATCH 6.18 132/552] nfsd: fix netlink dumpit error handling for rpc_status_get
` [PATCH 6.18 133/552] nfsd: fix nfsd_file leak on inter-server COPY setup failure
` [PATCH 6.18 134/552] nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs
` [PATCH 6.18 135/552] nfsd: fix refcount leak in nfsd_file_lru_add on insertion failure
` [PATCH 6.18 136/552] nfsd: fix reply size estimate for GET_DIR_DELEGATION
` [PATCH 6.18 137/552] nfsd: fix stale s2s_cp_stateids IDR entry for async COPY
` [PATCH 6.18 138/552] nfsd: fix version mismatch loops in nfsd_acl_init_request()
` [PATCH 6.18 139/552] nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget
` [PATCH 6.18 140/552] nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
` [PATCH 6.18 141/552] nfsd: gate nfs2 setacl by argp->mask
` [PATCH 6.18 142/552] nfsd: gate nfs3 "
` [PATCH 6.18 143/552] nfsd: hold rcu across localio cmpxchg retry
` [PATCH 6.18 144/552] nfsd: initialize copy-notify stateid before publishing it
` [PATCH 6.18 145/552] nfsd: initialize DRC hash table before registering shrinker
` [PATCH 6.18 146/552] nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
` [PATCH 6.18 147/552] nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops
` [PATCH 6.18 148/552] nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE
` [PATCH 6.18 149/552] nfsd: reject reclaim LOCK after RECLAIM_COMPLETE
` [PATCH 6.18 150/552] nfsd: revoke copy-notify stateids before dropping their reference
` [PATCH 6.18 151/552] NFSD: Prevent lock owner use-after-free during client teardown
` [PATCH 6.18 152/552] NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup
` [PATCH 6.18 153/552] libceph: validate OSD extent maps before cursor advance
` [PATCH 6.18 154/552] libceph: reject buckets with mismatched CRUSH ids
` [PATCH 6.18 155/552] ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
` [PATCH 6.18 156/552] ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
` [PATCH 6.18 157/552] ceph: bound copied dentry name length in NFS export get_name
` [PATCH 6.18 158/552] ceph: bound MDSCapAuth path and fs_name decode in handle_session()
` [PATCH 6.18 159/552] ceph: bound num_export_targets array for mds info v2/v3
` [PATCH 6.18 160/552] ceph: bound xattr value length in __build_xattrs()
` [PATCH 6.18 161/552] ceph: do not repeat ceph_trim_dentries() if no progress possible
` [PATCH 6.18 162/552] ceph: fix leaked inode reference on writeback abort at umount
` [PATCH 6.18 163/552] btrfs: drop recovered reloc root refs on recovery failure
` [PATCH 6.18 164/552] btrfs: fix extent map leak in NOCOW direct I/O write
` [PATCH 6.18 165/552] btrfs: do not overwrite NODATASUM flag when removing NODATACOW flag
` [PATCH 6.18 166/552] audit: avoid dropping live tree ref on fsnotify rule autoremove
` [PATCH 6.18 167/552] cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()
` [PATCH 6.18 168/552] cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0
` [PATCH 6.18 169/552] cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC
` [PATCH 6.18 170/552] smb: client: clear ce->tgthint in free_tgts()
` [PATCH 6.18 171/552] smb: client: fix ALIGN() overflow in symlink_data() error context loop
` [PATCH 6.18 172/552] smb: client: fix copy-paste error in WSL EA length accounting for $LXDEV
` [PATCH 6.18 173/552] smb: client: harden DFS cache against invalid target hints
` [PATCH 6.18 174/552] HID: apple: preserve keyboard backlight across T2 resume
` [PATCH 6.18 175/552] HID: corsair-void: Check size of status and firmware events before reading them
` [PATCH 6.18 176/552] HID: picolcd: clamp eeprom debugfs read to bytes actually received
` [PATCH 6.18 177/552] HID: roccat: free buffered reports when destroying device
` [PATCH 6.18 178/552] HID: sensor: custom: Fix field sysfs group cleanup on failure
` [PATCH 6.18 179/552] HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
` [PATCH 6.18 180/552] HID: universal-pidff: stop the device when force-feedback init fails
` [PATCH 6.18 181/552] HID: mcp2221: stop device IO before hid_hw_stop
` [PATCH 6.18 182/552] HID: mcp2221: validate report size in mcp2221_raw_event()
` [PATCH 6.18 183/552] HID: intel-thc-hid: intel-quickspi: validate report size before copy
` [PATCH 6.18 184/552] HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer
` [PATCH 6.18 185/552] HID: intel-thc-hid: intel-quicki2c: fix autosuspend cleanup during teardown
` [PATCH 6.18 186/552] HID: intel-thc-hid: intel-quickspi: "
` [PATCH 6.18 187/552] eventfs: Initialize ei->children and ei->list in init_ei()
` [PATCH 6.18 188/552] fs/ntfs3: validate dirty page table on log replay
` [PATCH 6.18 189/552] fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()
` [PATCH 6.18 190/552] fs/ntfs3: bound page_lcns[] index by the log record
` [PATCH 6.18 191/552] eCryptfs: bound the packet-length peek to the user buffer
` [PATCH 6.18 192/552] ecryptfs: fix tag 11 packet exact-fit size check
` [PATCH 6.18 193/552] ecryptfs: hold msg ctx list lock when cleaning daemon queue
` [PATCH 6.18 194/552] ecryptfs: pass packet set buffer size to parser
` [PATCH 6.18 195/552] ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
` [PATCH 6.18 196/552] ecryptfs: reject too-small tag 70 packets
` [PATCH 6.18 197/552] ecryptfs: release message context on send failure
` [PATCH 6.18 198/552] ecryptfs: show filename encryption options
` [PATCH 6.18 199/552] efivarfs: Rate limit statfs() handler
` [PATCH 6.18 200/552] fanotify: fix use-after-free of file range info
` [PATCH 6.18 201/552] fat: restore original value when fat_ent_write failed
` [PATCH 6.18 202/552] fbdev: omapfb: panel-dsi-cm: initialize lock before registering display
` [PATCH 6.18 203/552] fbdev: pvr2fb: correct user pointer annotation and sentinel initializer
` [PATCH 6.18 204/552] fbdev: ssd1307fb: defer I2C transfers from damage callbacks
` [PATCH 6.18 205/552] fbdev: uvesafb: unregister connector callback on init failure
` [PATCH 6.18 206/552] forcedeth: fix off-by-one when saving/restoring non-PCI config space
` [PATCH 6.18 207/552] fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration
` [PATCH 6.18 208/552] hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device
` [PATCH 6.18 209/552] hugetlb: only adjust reservation during unmapping if mapcount is 0
` [PATCH 6.18 210/552] accel/rocket: fix NULL dereference and integer overflow in rocket_job_push()
` [PATCH 6.18 211/552] accel/rocket: initialize job domain before cleanup paths
` [PATCH 6.18 212/552] accel/rocket: Fix error path handling in rocket_job_run()
` [PATCH 6.18 213/552] acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks
` [PATCH 6.18 214/552] ACPI: APEI: Fix ERST timeout unit conversion
` [PATCH 6.18 215/552] ACPI: APEI: GHES: fix ARM section length accounting after header
` [PATCH 6.18 216/552] ACPI: pfr_update: fix stack buffer overflow in query_capability()
` [PATCH 6.18 217/552] alpha/PCI: Fix I/O port accessor argument order in pci_legacy_write()
` [PATCH 6.18 218/552] alpha: marvel: Fix irq_set_status_flags to use correct IRQ number
` [PATCH 6.18 219/552] alpha: marvel: Fix lock ordering in init_io7_irqs()
` [PATCH 6.18 220/552] ARM: 9477/1: Disable broken eBPF JIT on the Risc PC
` [PATCH 6.18 221/552] ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes
` [PATCH 6.18 222/552] auxdisplay: charlcd: cancel backlight work on registration failure
` [PATCH 6.18 223/552] block: set QUEUE_FLAG_DYING unconditionally in blk_mark_disk_dead()
` [PATCH 6.18 224/552] Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU
` [PATCH 6.18 225/552] Bluetooth: btusb: Add ASUS USB-BT600 "
` [PATCH 6.18 226/552] Bluetooth: btusb: limit RTL8761B BROKEN_EXT_SCAN quirk to 0bda:a728
` [PATCH 6.18 227/552] Bluetooth: eir: Fix OOB read in eir_get_service_data()
` [PATCH 6.18 228/552] bnx2x: fix double free in bnx2x_init_firmware() error path
` [PATCH 6.18 229/552] bnxt_en: Write doorbell when linearizing skb fails
` [PATCH 6.18 230/552] bpf, x86: Fix per-CPU address resolution into an extended register
` [PATCH 6.18 231/552] bpf: Disable preemption in __bpf_get_stack
` [PATCH 6.18 232/552] buffer: avoid tail commit walk for uptodate folios
` [PATCH 6.18 233/552] bpf: Harden bloom filter sizing and indexing on 32-bit kernels
` [PATCH 6.18 234/552] dm-io: clone the source bio instead of copying its biovec
` [PATCH 6.18 235/552] dm-io: report non-retryable errors separatedly
` [PATCH 6.18 236/552] dm-era: fix shadowed superblock leak on take-snap failure
` [PATCH 6.18 237/552] dm raid1: reserve space for NUL-terminator in build_constructor_string()
` [PATCH 6.18 238/552] dm array: validate array block headers on read
` [PATCH 6.18 239/552] dm array: reject an array block whose value size is not the callers
` [PATCH 6.18 240/552] coresight: etm3x: Fix cntr_val_show() to match cntr_val_store() behavior
` [PATCH 6.18 241/552] cpufreq: schedutil: Fix rate limit overflow
` [PATCH 6.18 242/552] cxl/features: bound fwctl command payload to the input buffer
` [PATCH 6.18 243/552] cxl/pmem: Format the nvdimm serial number as unsigned decimal
` [PATCH 6.18 244/552] Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4378
` [PATCH 6.18 245/552] Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative
` [PATCH 6.18 246/552] Bluetooth: hci_uart: Fix false success return in hci_uart_setup()
` [PATCH 6.18 247/552] Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
` [PATCH 6.18 248/552] Bluetooth: RFCOMM: serialize security confirmation handling
` [PATCH 6.18 249/552] Bluetooth: hci_conn: re-enable advertising only for peripheral role
` [PATCH 6.18 250/552] Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb
` [PATCH 6.18 251/552] Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection
` [PATCH 6.18 252/552] Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative
` [PATCH 6.18 253/552] Bluetooth: hci_intel: "
` [PATCH 6.18 255/552] kasan: fix cache shrink race with CPU hotplug
` [PATCH 6.18 256/552] jbd2: bound shrinker scans by examined checkpoint buffers
` [PATCH 6.18 257/552] jbd2: check need_resched() when skipping busy "
` [PATCH 6.18 258/552] ipip: fix skb leak in collect_md mode when metadata_dst allocation fails
` [PATCH 6.18 264/552] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
` [PATCH 6.18 265/552] libnvdimm/labels: Prevent integer overflow in __nd_label_validate()
` [PATCH 6.18 266/552] mailbox: qcom-ipcc: fix duplicate channel allocation across holes
` [PATCH 6.18 267/552] md/raid10: fix still_degraded being inverted in raid10_sync_request()
` [PATCH 6.18 268/552] md: do overflow check for sb->bblog_shift in super_1_load()
` [PATCH 6.18 269/552] module: validate string table section types
` [PATCH 6.18 270/552] mpls: reload header after pskb_may_pull()
` [PATCH 6.18 271/552] mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction
` [PATCH 6.18 272/552] module/kallsyms: fix nextval for data symbol lookup
` [PATCH 6.18 273/552] nouveau/gem: reserve the bo in the info ioctl around the vma lookup
` [PATCH 6.18 274/552] params: fix charp corruption on allocation failure
` [PATCH 6.18 275/552] phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
` [PATCH 6.18 276/552] SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow
` [PATCH 6.18 277/552] SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
` [PATCH 6.18 278/552] SUNRPC: svcauth_gss: enforce krb5 token minimum length
` [PATCH 6.18 279/552] sunrpc: route to a populated pool in svc_pool_for_cpu()
` [PATCH 6.18 280/552] SUNRPC: Restore NUMA_NO_NODE for svc thread allocations in global mode
` [PATCH 6.18 281/552] SUNRPC: always drain cache_cleaner before destroying a cache_detail
` [PATCH 6.18 282/552] SUNRPC: Check svc pool percpu counter allocation
` [PATCH 6.18 283/552] sunrpc: defer rq_argp and rq_resp free until after RCU grace period
` [PATCH 6.18 284/552] sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
` [PATCH 6.18 285/552] SUNRPC: Guard svcauth_gss_release() dispatch on rq_auth_stat
` [PATCH 6.18 286/552] SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
` [PATCH 6.18 287/552] SUNRPC: harden gss_unwrap_resp_priv length checks
` [PATCH 6.18 288/552] sunrpc: init gssp_lock before publishing proc entry
` [PATCH 6.18 289/552] SUNRPC: reject duplicate CREDS_VALUE options
` [PATCH 6.18 290/552] SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field
` [PATCH 6.18 291/552] SUNRPC: wait for in-flight client TLS handshake callback
` [PATCH 6.18 292/552] svcrdma: Fix offset arithmetic in read_chunk_range
` [PATCH 6.18 293/552] svcrdma: Fix pcl_for_each_segment for empty chunks
` [PATCH 6.18 294/552] svcrdma: Fix unmatched rn_unregister on failed accept
` [PATCH 6.18 295/552] svcrdma: Reject connection when transport allocation fails
` [PATCH 6.18 296/552] svcrdma: Reject inline replies that overflow the pull-up buffer

[PATCH] ipmi: si: shut down timer during interface removal
 2026-09-04  5:49 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).