From patchwork Thu Sep 17 05:16:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 98510 X-Patchwork-Delegate: yoann.congal@smile.fr Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E193BC982D0 for ; Thu, 17 Sep 2026 05:16:07 +0000 (UTC) Received: from mail-qk2-f13.google.com (mail-qk2-f13.google.com [74.125.230.205]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.32825.1789622165307922377 for ; Wed, 16 Sep 2026 22:16:05 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=emjfJsD3; spf=pass (domain: gmail.com, ip: 74.125.230.205, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qk2-f13.google.com with SMTP id af79cd13be357-93910cadeb0so26692185a.3 for ; Wed, 16 Sep 2026 22:16:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1789622164; x=1790226964; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=DW9wIrf936AOIqnmZe+zB09t2I0hbUvIFHHtQaVHUpo=; b=emjfJsD38dOPqyoaLlz4kfIxD9uuCt5+aX4ZRN6Ov2LC7afGvQQMIKWfIEqAiKLPmV Bhgh2zxL+CLIK2kHRumj5vvrN64/L+t0pyH5LS/Q+0u98f/BK9eHk9/AsFCf4YrODifl 4vn7oU7fL6nSKSz3Fej5mSARmfpb+/j3B0KYFflROhVJLHqVsFrh92chgrdLh1b0z0/l bey+awX7wQkroWORAMzMcrFbRnVkgHgEHvHkKpjw96FUcf6IxZO4mnCTK3rN1bk28GDb NNaw/oc7j/x2YN0kX2neqp3PcYL0gpitQUSaMLnSjL9dI4d0Y0WV0J9mXo+sbnZeJMVL dVlw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1789622164; x=1790226964; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=DW9wIrf936AOIqnmZe+zB09t2I0hbUvIFHHtQaVHUpo=; b=Dk4HNoLxO3szkVUmcz8qDniETHUr8R9NAAEi2YD2xMtrX65qmGb3gR9QSIFq7dkvmq QUxoNM4dZQzf/hi9wuqG88sGPfg7IqOb8QGdIZYtbQIvEUfTFxTGy+FeC1Rch1enyzQR lGD+VOKnVQS8eaB+ELOXM5klrZn6QL11JUIET0UA6spwUaowvq1MUamRQzNlGhoFCnQU C9Z4AAmaIrZyApjLR2KS/fmpn/FF6ylJPNgT6+5qer18hC4Z6JwkpEF0dyUoeHQtx4Fo w/yxzG69LcZLaJYQER6vHoKVYR/W6rfkVVVnJN91ZsIlvccSbmyOOK6suacz6q/Ep+SZ GEvA== X-Gm-Message-State: AFuF++mLN0OxN3WCH4MYFf5EPWyLmRsKlGnslCsIksW/HQNbz07CQVT/ yssbSFN/hK8eGBTx4/V2z06PanRcrcghi7+XZNjAV9ZbZrRgOadno/qtsfEsLkGW X-Gm-Gg: AYBFou0UHZ+6vyukEIjPBz6o2aLP8fVpJr4oDuZRDuJRILIoI6Y7amnL4TSY4ARLrfF tN2+Rs4awOZJd+NKvbgqEL/uQXAPRDbN54LuWoxjpGly0QkpNZbbdODGOOxhigszZsfoJNTqkQq 0mFgr4HwSSpXo0j6wTRnhAlg7EFTDr6nsuirVxKrfmfHvwqviE82KZ893usFLTfgNCk0wF92+Qi sCFohrqOI9qboRPC8JHEFgkiQj92RfKY5yG74zHknyf4hmMoYdVeb9gNXt5iB5G260KW5Ej6Zk1 ysqDVs14Sq7q32f128E1KfCAcjlCtq+8E4+l/K1MCk/gx45cnhbP4aSm8doorehbLF2Sfq9QBj3 X+0y3Fu3cZsUXuG2z8KBHTpuHv3CagLQH4/WNlVBNfBEXzh4sebg+0fTxi1J905FNNpDWvsKzm3 TyUeErU2vhVPnjG4S9o9dAkU++bjAMi/SCWCdbGZfiIozNj5w6XwLXIJJ0zXzfMf2ZsmT8r2Wr5 gs8NrmBS0tkkNVU46lwzPPBMC++lgf80jTEuhZzXKwlhZlda+gdpbz4of52pGwMHXIg3JI6z3TV Xw/muO9cFgsuqF9jBNQb/tNo2pQV3ZN/SsVsG+WdEEc4R5HeZGlm84gnlVExO+2mp9gUnxZb/yz +T69kwtgBv1Cq4tk= X-Received: by 2002:a05:620a:318b:b0:939:2c5c:7977 with SMTP id af79cd13be357-93bb774bc6fmr885994785a.20.1789622162621; Wed, 16 Sep 2026 22:16:02 -0700 (PDT) Received: from bruce-XPS-8940.localdomain (pool-174-112-62-108.cpe.net.cable.rogers.com. [174.112.62.108]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-9123bef592esm41702546d6.49.2026.09.16.22.16.01 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 16 Sep 2026 22:16:01 -0700 (PDT) From: bruce.ashfield@gmail.com To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap] linux-yocto/6.6: update to v6.6.157 Date: Thu, 17 Sep 2026 01:16:00 -0400 Message-ID: <20260917051600.1472502-1-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 17 Sep 2026 05:16:07 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/246017 From: Bruce Ashfield Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 79643295eba17 Linux 6.6.157 32e598324edc3 nvmet-rdma: fix queue leak when connect backlog is exceeded 6536d707ed924 perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error a77a45fbadd9c net: hsr: must allocate more bytes for RedBox support 4cad6ecdfee8c pinctrl: mediatek: common-v1: Fix error checking in mtk_eint_init() dfda4aabd3213 tools/build: Use SYSTEM_BPFTOOL for system bpftool 1fb06c7a5d307 ALSA: control: Fix unannotated kfree() cleanup 42ddedd71536d net: hsr: init prune_proxy_timer sooner 2ea73f9a1fe72 net: hsr: Use the seqnr lock for frames received via interlink port. 4cdb74d35b0e0 net: hsr: enable promiscuous mode on interlink port with fwd offload 7840a2c9c797c wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() 7554d498e4283 wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() ee556d118b11c firmware: arm_scmi: Roll back partial protocol table registration 6f5fb111a0a72 irqdomain: Make build work for CONFIG_GENERIC_IRQ_CHIP=n 712f3268a62d0 nvme: target: rdma: fix ndev refcount leak on queue connect b93f47d5c0288 kselftest/arm64: mte: Use the correct naming for tag check modes in check_hugetlb_options.c 6a22da9752591 kselftest/arm64: mte: Skip the hugetlb tests if MTE not supported on such mappings 08aaba219793b xsk: Fix offset calculation in unaligned mode 85316d624f565 nvme-apple: Reset q->sq_tail during queue init 073b9238fac4d nvme-apple: Prevent shared tags across queues on Apple A11 0f0a317dd9e66 ACPI: processor: Update cpuidle driver check in __acpi_processor_start() a8adb672758fb ACPI: processor: Add cpuidle driver check in acpi_processor_register_idle_driver() d607e038f1024 ACPI: processor: idle: Remove redundant static variable and rename cstate check function 6da7c7a29009f ACPI: processor: idle: Move max_cstate update out of the loop 60e5299f552d4 ACPI: processor: idle: Remove redundant cstate check in acpi_processor_power_init 49457494d5d97 pinctrl: mediatek: common-v1: Fix EINT breakage on older controllers 944b7b366ce5d pinctrl: mediatek: Fix new design debounce issue d6ba3a2ca3c9d pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask() 010d05df52cec net/sched: sch_htb: limit htb_classify inner-class filter hops 4fd2ee4ac154c tcp: fix corruption of urgent data on multi-segment retransmit 7baa0c92be39e usb: atm: usbatm: fix invalid ci_range initialization 7566789664813 net: fec: only stop PTP if it was initialized a2dbac3fb03b4 slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() 82fdbf49b9f75 net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup e4570c6556d47 net: stmmac: selftests: Account for the UC filter list for filtering tests 556b55a209ea0 net: stmmac: dwxgmac: Account for the primary MAC address for UC filtering ee22ca41efdcb net: stmmac: dwmac4: Account for the primary MAC address for UC filtering b7be75bb83add net: stmmac: dwmac1000: Account for the primary MAC address for UC filtering 6315e468ef7e6 net: stmmac: selftests: Check multiple MMC counters 81dd9ed216358 selftests/arm64: Treat KSM merge_across_nodes as optional 3e0e4275b4b12 selftests/arm64: Print missing MTE TAP headers 2c75d9087a8e7 selftests: arm64: add hugetlb mte tests 6030f45bd0656 netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited() 87f49ea98c88f netfilter: xt_HL: add pr_fmt and checkentry validation 4fc6882b18350 netfilter: xt_cgroup: Make it independent from net_cls 79eafe22ab0a6 netfilter: nf_tables: move hardware offload step after building the chain blob 339f47ae04dcc virtio-net: Ensure that TCP packets don't overflow gso_segs ae7173188ab06 net: stmmac: selftests: Pass the IP proto mask in the TC selftest 96a4696f8b74c net: ethernet: sun4i-emac: Fix IRQ error handling 7a96b9f6d5ba2 samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify 1630774d81d06 samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-modify 3b2e62a7655d3 libceph: validate banner payload length 7a64106070d4b ceph: revalidate ki_pos for O_APPEND writes after cap acquisition faf539af1a595 ASoC: dapm: Fix off-by-one check on the second enum channel 0664c75afe87a apparmor: policy_int make sure list heads are initialized before fail path fc75c2c7001c6 apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init 93c6fe34f22da tpm: st33zp24: Validate locality read result 1bfd5c54e4070 tpm: st33zp24: Return zero on status read failure aa39a790d56b4 net/sched: sch_teql: restore skb->dev on the slave failure path 9d782c662879c net/sched: sfq: clamp quantum to avoid signed overflow soft lockup dea2789a9d5ff net/sched: hhf: clamp quantum before hhf_change() to avoid overflow 435da3734a8e6 net/sched: fq_pie: clamp default quantum to avoid signed overflow 19bc715de421b net/sched: sch_codel: clamp default mtu to avoid disabling CoDel 397e2b1f71d9f net/sched: fq_codel: clamp default quantum and mtu 0675cff3c2924 net/sched: act_skbmod: fix length calculations and avoid invalid header warnings d9a8113a5c152 maple_tree: fix argument name in header bc8be70fdeb94 selftests/mm: skip COW tmpfile cases when fallocate() is unsupported 4498f617a4948 selftests/mm: report unique test names for each cow test 328256478e9f3 selftests/mm/cow: modify the incorrect checking parameters bdd5574a636f9 selftests: mm: cow: flag vmsplice() hugetlb tests as XFAIL d10b6f53483bb selftests/mm/cow: generalize do_run_with_thp() helper 8086709b7f87e cifs: fix clearing stats for fastest execution of each smb2 command 42884bd8b8fd0 net/rds: use wq_has_sleeper() in rds_cong_map_updated() 573c088b6d479 octeontx2-af: Fix TL3/TL2 link config ENA clearing 4bcef54e4a335 net: qualcomm: rmnet: restore skb->dev on deaggregated frames e3b9aa0773abd gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free fc4851ff8dfb5 Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop 0b71a6caaf284 Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path 89d23a0fd43e7 Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX 8765eb64f9deb Bluetooth: btmtk: Do not discard the subsystem reset timeout 7c7ac736b50fa Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan bbd262d2d750b Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference 491e4c6001796 Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN 0911a5e777e3b erofs: Fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS default logic 74e4a43e1b0ea scsi: qla2xxx: Fix an loop timeout test d3c55dcc863f3 rtc: pcf85363: Add error checking to regmap calls in probe() dd5bd091daa48 NFSv4/pnfs: key the data server cache on the NFS version 0faf682964678 nfs: move the nfs4_data_server_cache into struct nfs_net 5aca000630c0f NFSv4.2: fix LAYOUTSTATS send buffer exhaustion 957dba2b8b5ae net/smc: free pending qentry in smc_llc_flow_stop() before memset 056395acb7041 net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition 5f127e3cc9647 inetpeer: randomize RB-tree node comparison using SipHash 9b0a36df7f443 net: add missing ref_tracker_dir_exit() to net_passive_dec() be9ed08140dee net: ipa: balance runtime PM reference on remove error c1ac60ad8c182 net: ipa: Convert to platform remove callback returning void 95428d7d2c712 forcedeth: stop the tx_timeout register dump past the requested window 93c413d953e19 net: thunderbolt: Count delivered packets in rx_packets and rx_bytes 4b0f5b25f1146 net: bridge: Reject descending VLAN tunnel ranges aaebce297efc3 xsk: fix NULL pointer dereference in __xsk_rcv() b9d97ecb89576 xsk: avoid double checking against rx queue being full ba95f77c98687 xsk: Get rid of xdp_buff_xsk::orig_addr e4746c6e60ab1 RDMA/ucma: Allow path records to exactly fit the output buffer c5c7c7b6cfae7 ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup da3c2437df2c6 ALSA: core: Add scoped cleanup helper for card references c2a2036209b37 ALSA: control: Use guard() for locking 478cfdb6844fe ALSA: control: Use automatic cleanup of kfree() 9f756f1965bad clk: visconti: Make sure clk_init_data is fully initialized 73f4671d68193 clk: ti: Make sure clk_init_data is fully initialized 5f74a6e9afc90 prctl: fix PR_SET_MM_AUXV losing the forced AT_NULL terminator 6945acee8677b rtc: gamecube: check return value of devm_rtc_register_device() 68bf51c58479d i2c: ocores: Disable clock on failed resume b5ba8b861b5d8 irqchip/renesas-rzg2l: Fix loss of interrupt 321ef4e8f74e6 rtc: zynqmp: Return optional clock lookup errors 58066940076b9 smb: client: fix request buffer leak in smb2_new_read_req() 7afb8db47c4f1 rtc: pcf8563: fix clock provider leak on unbind eeac2ea4ad265 vdpa/mlx5: fix wrong list iterated in add_direct_chain error path feafa109f031e vdpa_sim: fix cleanup after worker creation failure f20ade5e9739b virtio_balloon: disable indirect descriptors ad22f0605c2d3 i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode fa47845df3626 i3c: mipi-i3c-hci: Refactor PIO register initialization 25c99c36760ec i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() 31d1e6df88c0f i3c: mipi-i3c-hci: Quieten initialization messages 2011e714e5f99 i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 b5e40cceb591c i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes 18a4463528f09 bonding: initialize err for empty target lists 4c2ffe2bbfdb9 mlxbf-bootctl: fix the build error with FIELD_PREP() c224759555a13 platform/x86: hp-bioscfg: fix password encoding bounds check 35364a037c2df vsock: use sock_error() to consume sk_err after a failed connect 93808d9572d40 platform/x86: dell-wmi-sysman: Fix instance ID bounds 48796058a5cd1 net/smc: hash socket only after full initialisation in smc_sk_init() 4944ed85a0e8a 8139cp: fix Rx and Tx not being disabled in cp_suspend f8a9b988e7a7b vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() 7c197d96f053f vxlan: mdb: Add MDB bulk deletion support 2e4fe6c423379 net: Add MDB bulk deletion device operation 94d8313ba1aaa bridge: add MDB state mask uAPI attribute 75ee201a1303f vxlan: mdb: Add MDB get support 88f464358411e net: Add MDB get device operation c9a5c400dfc59 bridge: add MDB get uAPI attributes c2a7f6064dfb5 vxlan: mdb: Factor out a helper for remote entry size calculation 8e4be8729f256 vxlan: mdb: Adjust function arguments 9cf0fc4bb6296 ALSA: hda: Fix connection list comparison in proc output 17120c5bfb168 fuse: check for NULL root inode in fuse_fill_super_submount dc925f22df8ad fuse: check attributes staleness on fuse_iget() 051eaaa875f50 fuse: convert readdir to use folios 358640784ba10 fuse: support folios in struct fuse_args_pages and fuse_copy_pages() a3713498429e4 fuse: use FUSE_ROOT_ID in fuse_get_root_inode() be829860d1dbb fuse: convert to new timestamp accessors d585ed0830890 fs/ntfs3: validate ef->size covers the record's name and value 700973cc65db4 fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() ac5c499413385 cuse: wait for pending RCU callbacks on module exit 9c59ee8d63c42 net: bridge: vlan: fix inverted default vlan notification 59f4ad9b3d1e8 tls: fix RX desync on overlapping skbs 7df3271df8678 net: dsa: mv88e6xxx: Fix PCS link check on CMODE read error 47bfcc871576e vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes deaa88fa010ba ipvs: fix integer overflow in ftp helper port/address parsing 0a340ffd96943 net: hsr: free learned nodes on device setup failure d90e4f72e8d46 net: hsr: Provide RedBox support (HSR-SAN) 9baf4bf4763ce net: hsr: Use full string description when opening HSR network device f3d74ab3f49ea pppox: drain queued packets on channel handoff cbb0879aeaa13 net: dsa: b53: fix error propagation from b53_fdb_dump() b0e94ea63dbdc net: kcm: Hold RCU read lock while running BPF parser 5d6c3f6e90d73 octeontx2-af: initialize lmac_bmap in rvu_mcs_set_lmac_bmap() 642d3bc08c731 clk: ti: mux: resolve parent clocks by DT index, not by name 6b9aedc0b998b clk: ti: use kcalloc() instead of kzalloc() fc95ca82d5ae5 NFSv4: remove callback IDR entry on client allocation failure 788b59a395434 nfs: refactor pNFS functions using clear_and_wake_up_bit a49d54e6cb560 nfs: replace atomic bitops sequence with clear_and_wake_up_bit helper a2051ffe452af ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size 6bf378cfea2de ksmbd: disconnect on SMB3 decryption failure e6fbf0eba87f5 bpf: Reject negative optlen in cgroup getsockopt hook 7d3f15a664d11 m68k: nfcon: Do not call console_is_registered() in nfcon_device() de2b2004e16f2 lwt_bpf: Restore reserved headroom after xmit program ca119d4a6b19e smb/server: preserve error status in smb2_handle_negotiate() 3f8651f6bb521 smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger() effcf48d79d8a ksmbd: free preauth sessions on connection teardown c3a8100dbf6bc ksmbd: do not advertise unimplemented CA support 17b7d1a2b4d54 ksmbd: validate ipc response length before dereferencing its fields 4d6fe49fa3e7f smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer 993e0158331d3 ksmbd: Do not skip lock checks for single-byte ranges 9281eb1e4ea31 hwmon: (emc1403) Drop hysteresis for low limit temperature e43ba8be636ab hwmon: (emc1403) Rely on subsystem locking 5efc8eeb33183 hwmon: (emc1403) Add support for EMC1428 and EMC1438. 5eee537872d86 hwmon: (emc1403) Support 11 bit accuracy e33dc202fb6f6 hwmon: (emc1403) Convert to with_info API b92949bc1a099 hwmon: (emc1403) Add support for EMC1442 8283049aa5fcb block: mtip32xx: synchronize ioctls with device removal 7de792b4c48fb null_blk: serialize configfs attribute updates with device setup 88d806d0e1d36 null_blk: serialize configfs attribute stores with the lock fcd53f3e8b758 null_blk: reject per-device queue resize for shared tag set 665c94554ff0d null_blk: free global tag_set on init error path dbcedbe4819ae null_blk: register configfs subsystem after creating default devices b6869f48ddec2 null_blk: add configfs variable shared_tags 349903f7ee72f null_blk: use DEFINE_MUTEX for the file-scope mutex 09372aa5774e3 mailbox: pcc: Fix command timeout due to missed interrupt 81e2b32d1d11d Revert "mailbox/pcc: support mailbox management of the shared buffer" dc14620fe268d mailbox/pcc: support mailbox management of the shared buffer 871b0bf25cc7e mailbox: pcc: Always map the shared memory communication address 82aa56d548f68 mailbox: rockchip: disable pclk on probe failure and unbind 606cbd749ff33 perf dso: Guard against cache underflow on short reads in dso_cache__memcpy() d3231c74c9a9f perf dso: Guard close() against invalid fd in dso__decompress_kmodule_path() 4536ff6a67ea9 crypto: hisilicon/sec2 - fix CCM algorithm long packet failure 595dd1c0e1c47 bpf: Fix pending_pos walk on 32-bit ring position wrap f30379b8a4e24 ACPI: scan: fix bus ID cleanup on device_add() failures cd63a1eb677e9 ASoC: SOF: validate topology volume range before allocation 60d98480caafc tracing: Have trace_event_update_all() only handle module that is loading 11755741ff074 tracing: Remove "__attribute__()" from the type field of event format 03c5dabc8f16b ALSA: core: Fix use-after-free in snd_card_do_free() 0441e34ce098c fs/ntfs3: reject out-of-range evcn in mi_enum_attr() f77a8d9fdf58e fs/ntfs3: fix integer overflow in MFT cluster validation b51535ca5eb90 scsi: ufs: core: Set task state before io_schedule_timeout() 5d602d4ebb58c scsi: ufs: core: Remove redundant host_lock calls around UTMRLDBR 7612b5d2c00aa scsi: ufs: core: Remove unnecessary wmb() after ringing doorbell afedf35df054b scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers 5b37a7c2270cb selftests/bpf: Fix for veristat file/prog filters processing 3d2f0cb66c909 Squashfs: check block offset is not negative 8d88f52fbbbcc ocfs2: fix circular locking dependency in ocfs2_init_acl() 340821bc169bc bpftool: Fix double close in map dump 23e5b485da229 x86/pkeys: Fix pkey_alloc() return value when pkeys are not supported 89d986897aff7 ALSA: seq: midi: Serialize input teardown with event_input 679087a7acdc4 ALSA: seq: midi: Optimize event_input locking with RCU a3efa5d4eed38 clocksource/drivers/armada: Unwind timer clock on init failure 3cac7e8adb006 clocksource/drivers/clps711x: Do not unmap clocksource MMIO a08b70ed2d1ec s390/debug: Fix deadlock during unregister 57ec8827f414b xenbus: Unregister reboot notifier on init failure 3a6b43ebc0c2e power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address c86a998bd46da power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address 60e5d928081b7 power: supply: bq27xxx: bq27520g4: fix REG_TTES address f1b4447402fca power: supply: bd99954: Drop bad register fields 49e717f3f3d20 spi: img-spfi: don't disable runtime PM on DMA deferred probe 6746ba44cd04d selftests/bpf: vmtest.sh: Preserve command quoting when running in the VM a4e68a4f68c2a selftests/bpf: Add description for running vmtest on RV64 bfeb336e48a96 selftests/bpf: Support local rootfs image for vmtest c4579f1b7fe17 selftests/bpf: Limit URLS parsing logic to actual scope in vmtest 47a7a4443c6e7 kunit: tool: fix _list_tests filtering wrong variable when list has TAP prefix 620549b2775e5 UBI: fix two issues in the ubi.mtd MODULE_PARM_DESC 8c38ae4a46569 ASoC: xilinx: formatter_pcm: fix stream_data leak on open error 552e565ed8846 ubi: Fix rollback for explicit UBI device numbers 3f617214c81a2 ubi: fastmap: Add module parameter to control reserving filling pool PEBs d99591caca984 ubi: fastmap: Fix lapsed wear leveling for first 64 PEBs 2d55fd6170613 ubi: fastmap: Wait until there are enough free PEBs before filling pools 087d820d4bc48 UBI: fastmap: Pass to_be_tortured when reusing old fastmap PEBs 3c5599d3cf1ab UBI: Preserve torture flag when rescheduling failed erasures 3996be3f5b8a9 ubi: Replace erase_block() with sync_erase() d8307a8bc986b ubi: fastmap: Allocate memory with GFP_NOFS in ubi_update_fastmap 4e0ab4f291a76 ubi: fastmap: erase_block: Get erase counter from wl_entry rather than flash 2a623a56b513b ubi: fastmap: Fix missed ec updating after erasing old fastmap data block eaaeabf566c3c ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready 48cece7b287ec ASoC: pxa: Use devm_clk_get_optional() for extclk clock 30c48da114915 ice: clear the default forwarding VSI rule when releasing a VSI 2a63cb9ea862a RDMA/cma: Fix WARNING in res_to_rt f98e894ec029a RDMA/cxgb4: Free debugfs on registration failure 8980385438975 dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal 5487f04c1ccbf nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing c001abaaa35bc nfc: digital: Do not dump a NULL response in command completion 753bdaf3220fe nfc: pn533: hold a reference to the request skb during send_frame 02030f95820c4 nfc: llcp: bound SNL TLV parsing to the skb and add length checks 9030a1bbe2c6b nfc: nci: fix double completion race in nci_data_exchange_complete fe65727a4a21b nfc: llcp: read llcp_sock->local under the socket lock in getsockopt 35573c6cb081a nfc: llcp: avoid userspace overflow on invalid optlen 7084caabc0370 nvme: reject passthrough of driver-managed Set Features c35cd98eed1a8 nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() ff28a93a89591 nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() ca6b14f01d099 nvme-apple: Drop the PRP null check chicken bit 7256eed48ce7d nvme: apple: Add Apple A11 support eb86b1844a1b4 nvme-apple: Never set the opcode in the NVMMU TCB 5ce74613edd36 nvme-apple: Don't set a DMA direction for commands without a data transfer 5f6f4777b7a86 nvme-apple: Destroy the admin queue on removal 89ff11b72f389 nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() cefb177da32fe nvme: Add the DHCHAP maximum HD IDs ac6c240e0f448 nvme: introduce change ptpl and iekey definition cef6c15f8b54d nvme: add reservation command's defines c26fa54201acb ASoC: qcom: q6apm: keep the graph start count in sync with the DSP cd12a36c77fdd spi: sprd-adi: Fix probe succeeding without registering the controller d10e4173d8c2a phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs c653b97b9fefc powerpc/configs: enable CONFIG_RAS to fix EDAC support ed80d009b154a sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE 12bf3e0182ccd SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 3cee888393f6e arm64: Disable KCSAN instrumentation in delay.o e3405bf334b02 m68k: Fix backtraces for non-running tasks 071ac1722fe2e iommu/vt-d: Fix UCTP context table slot when copying root entries e8d4e4cf388da fbdev: kyro: Validate overlay viewport coordinates f3222a7a5e65c fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() 3d0f487661a69 perf synthetic-events: Fix divide by zero in perf_event__synthesize_threads e7a3768a295a0 perf synthetic-events: Fix uninitialized pthread_join ba7a7e1a41c8e perf stat: Fix evsel_list leak in cmd_stat 518c47e2c59f3 ARM: dts: helios4: add SATA regulator supplies 0fb9acbc7fbd3 ARM: dts: helios4: add vcc-supply to GPIO expander 9f8e9aa4b1231 ARM: dts: helios4: add vcc-supply to EEPROM fb9043b5ce0c8 arm64: dts: turris-mox: fix usb3 phys d9ea72c04a1df riscv: cpufeature: Clarify ISA spec version for canonical order bee2208276c8e net/sched: cls_api: fix teardown of an adopted proto on insert-race loss 83db3f0d7982e iio: light: gp2ap002: re-enable irq if runtime suspend fails 8e76ab8131985 iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes e804d54a5a99d Bluetooth: MSFT: validate evt_prefix_len against the response length 416fabca9b723 Bluetooth: MGMT: free the mesh send cancel command when it is cancelled 193182c6467f5 Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths 9a2ba69cebe3f Bluetooth: hci_conn: fix the SCO setup context lifetime 50dae81942575 Bluetooth: btintel: Fix diagnostics event detection 0e388d805233a Bluetooth: virtio_bt: avoid OOB read of build info string 90e9eae1b5907 btrfs: retry verity reads for not-uptodate Merkle folios a5add36fd9908 scsi: sd: Fix sd_done() sense handling condition 2cd80d83cc1a2 perf trace-event: Fix integer truncation in do_read() and skip() 5317d73c7876c Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices af6f77f20510d Bluetooth: btusb: Record matched usb_device_id into btusb_data 9b0b4fbb8c863 Bluetooth: btusb: refactor endpoint lookup 61df5d818baf3 Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() 32be97642c514 Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event e60f304c65013 sched/fair: Check CPU capacity before comparing group types during load balance 7ac16ee2d3766 ACPI: video: Release PCI device reference after lookup f1bea8cf618b3 regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling ea4fe6a450210 coresight: etm4x: fix leaked trace id be7b2de5b9a96 coresight: etm4x: fix underflow for usage of (nrseqstate - 1) b822e5966d5a3 coresight: Change syncfreq to be a u8 885d831237337 coresight: etm4x: fix wrong check of etm4x_sspcicrn_present() 668d99ba47210 md/raid1: don't set array_frozen in raid1_takeover() cfb75fae75c96 md: avoid stale clone I/O accounting timestamps 9d7490007707f md/raid5: round bitmap stripes with sector division 9b28287c5dea7 phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend 3ddf41938fee3 phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend 602059c5128a7 phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend 9e7448bb0e2f0 phy: qcom: sgmii-eth: vote for both voltage rails with correct current loads c9f829195f84a phy: qcom-sgmii-eth: relax order of .power_on() vs .set_mode*() cf2f1cee7080e soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() 5b7fc7a1ce2a5 hugetlbfs: release subpool on fill_super failure e36eee4fc56cf pinctrl: rockchip: Reset the pin count when recalculating SoC data 5a250bff75a44 firmware_loader: do not queue completed sysfs fallback requests 9b6325fc58ab8 scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path b5d1d3e4519dc drm/amdgpu/gfx6: Use PFP on the compute queues too 0d567a5cb347e drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets d5f170189b07a perf trace-event: Fix buffer overflow in read_string() dd9fee2b29e2f phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table 1fce81a40e3b3 phy: sunplus: fix error handling in sp_uphy_init() ba56017b0c04e arm64: dts: ti: k3-am64: Fix MDIO clock reference for ICSSG0 node 9e1efab410a4a ext4: fix spurious message about orphan cleanup on RO fs 4b7623e92545d drm/amdgpu/gfx6: Fixup emit_cntxcntl() e92a83a9a7617 mfd: iqs62x: Reject zero-length firmware records f943448aeae0a mfd: rave-sp: validate received frame payload lengths ad3839fe2114b arm64: hibernate: Restore DAIF state on error 5370853041a3c arm64: hibernate: mask DAIF before restoring hibernated kernel 0ab5739f1f448 wifi: mac80211: skip default WMM setup for AP_VLAN links f82e13c16da63 RDMA/erdma: restrict the driver to little-endian systems b9e7d3d9fdb2b RDMA/siw: Fix use-after-free in siw_accept() b8d5015db908a RDMA/siw: Introduce siw_free_cm_id 9c21a43302221 IB/isert: post the full-feature receive buffers after session registration f84e9adf4d9f4 IB/isert: delay the final Login Response until the session is registered 55864b26c22cb cpufreq: imx6q: fix out-of-bounds write when probed more than once 92e53a5274276 cpufreq: imx6q: fix devres accumulation across driver rebind 53e08b89f7620 drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz 0a3a149d5ac1d drm/sun4i: dw-hdmi: Drop TCON TOP port reference 543cc7dd263b9 drm/sun4i: tcon: Drop remote endpoint reference 1882112124a64 drm/sun4i: crtc: Propagate layer initialization error 4fa22218c2351 drm/sun4i: tcon: Drop TCON TOP device reference 539817f22063d drm/sun4i: tcon: Set output mux for DSI and LVDS f0f5441126f31 of: property: add of_graph_get_next_port_endpoint() afb9faa721d43 of: property: add of_graph_get_next_port() 89a89f7bb2fcc of: property: use unsigned int return on of_graph_get_endpoint_count() 217340d0ebd0f of: property: add missing kerneldoc for of_graph_get_endpoint_count() 24790c3b0d99a drm/sun4i: vi scaler: Fix coefficient selection cbb4efc2f99d6 ocfs2: synchronize heartbeat callbacks with o2net teardown 63e3c958a602d ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults 0e7ba61751490 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ c0a83f29a24c7 RDMA/erdma: Hold CQ references when processing EQ events d7ef87c7daa9e modpost: prevent leak when early return no suffix .o in read_symbols() 16667c8cabe18 scripts/tags.sh: Prevent binary files appearing in cscope.files 81e425fbd8115 arm64: dts: qcom: sm7225-fairphone-fp4: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies f54b00b223954 selftests/mm: fix ternary operator precedence in ksm_tests 1f53972a5bd40 selftests/mm: fix ksm NUMA merge test for systems with memoryless NUMA nodes bdef4a404fab5 selftests/mm: ksm_tests: use kselftest framework 6b117e23481d9 ksm_tests: skip hugepage test when Transparent Hugepages are disabled 46f5382b4eeb9 selftests/mm: add new test cases to the migration test 7eb85d07c15ae selftests: mm: support shmem mTHP collapse testing c2b8653d571e8 selftests/mm/khugepaged: enlighten for multi-size THP 7db5a1d597213 selftests/mm: support multi-size THP interface in thp_settings 750575653bd6c selftests/mm: factor out thp settings management e1e07344d8e19 selftests/mm/kugepaged: restore thp settings at exit e26db0d636e4c bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed c82241a9454b2 remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry() 9ca46a1a3e510 remoteproc: use rsc_table_for_each_entry() in rproc_handle_resources() 829c24afec9ce remoteproc: Move resource table data structure to its own header 542a6a3ec77cd drm/omap: dsi: Do not copy isr table e38587d98d1ce fat: release buffer head after rebuilding parent 332591a245de9 rapidio: clear mport->net when rio_add_net() fails a1b1ff469e573 pps-gpio: remove dead capture_clear code c66eb07d65a26 pps: pps-gpio: split IRQ handler into hardirq timestamper + threaded handler 9ee5b718b2cbd pps: clients: gpio: Bypass edge's direction check when not needed 6bc73694cbee5 pps: don't try to wait for negative timeouts in PPS_FETCH 4957320f54311 lib/string: fix memchr_inv() for large ranges 43b18869f8c8f ublk: check for ublk_unmap_io() returning 0 364030e3eefce block/kyber-iosched: flush per-cpu latency buckets over possible CPUs 92865833e8d81 block/blk-iocost: collect per-cpu latency stats over possible CPUs 28104b1636296 block/blk-stat: drain per-cpu callback stats over possible CPUs 1a267295b1ea6 blk-cgroup: skip dying blkg in blkcg_activate_policy() 056eea1a2068a phonet: pep: do not write beyond optlen in getsockopt cf62dd07b08e9 iio: light: tsl2583: return zero in write_raw() on success d7c5a80939e12 iio: light: isl29028: return zero in write_raw() on success 3f701835d082a iio: light: tsl2772: fix ALS calibscale readback 7ac69e177dffe perf intel-bts: Fix off-by-one in auxtrace_info minimum size check 1bdb0e48e9d87 perf intel-pt: Fix off-by-one in auxtrace_info minimum size check 2d31a6271975a perf auxtrace: Fix queue grow overflow and old array leak aa3045fb5faa0 perf thread-stack: Fix heap buffer overflow on branch stack wrap copy 6be9b1284d0c3 HID: lg4ff: validate report length before fixed offsets 178c369b465b5 HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure d3ccef6fb7133 HID: i2c-hid: Fix "(null)" output when reading report descriptor fails d9caf658694d9 HID: i2c-hid: Revert to await reset ACK before reading report descriptor 0cab98ab1f57a HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor a8a1892d18faf HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling c1e5bbba94e16 HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions 69345da556293 HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() 9a3da56aae28e HID: synchronize input before cleaning up a failed probe f54c3219db759 HID: i2c-hid: Refactor _DSM helper and add i2c-hid-acpi-prp0001 driver d331c63570af6 tty: clear cdev pointer after cdev_add() failure 8369acce013b1 serial: amba-pl011: unprepare console clock on unregister 0ef4365a01cf7 MIPS: ptrace: Fix syscall skipping via PTRACE_SYSCALL dcc442a49c0f5 powerpc/irq: Fix missing r2 clobber in PCREL inline assembly f89cccf6f5f4f powerpc/smp: add NULL guard for cause_ipi in smp_muxed_ipi_message_pass 88027241c1d2c firmware: coreboot: Validate table bounds f8808b7440c72 firmware: google: Add bounds checks in coreboot_table_populate() 5fc32f53f8486 wifi: mac80211: skip unused probe response countdown offsets a749ab2498238 wifi: zd1211rw: reject secondary interfaces to prevent conflicts aa5ff84ca8c39 wifi: mac80211: send TWT teardown to peer after setup TX failure 11b75fc02d842 perf/cxlpmu: Fix 64-bit write to 32-bit HDM filter register a6f2a2d867863 iommu/arm-smmu-v3: Convert to use atomic poll timeout eb946595a58de wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump 04d8fd716d0ee wifi: mt76: mt7915: report RX chain signal for all RX paths 6b3d02b422a5d wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 426825d50c700 wifi: mt76: mt7996: fix reg addr remap when addr is 0 2a434d2637b9c wifi: mt76: mt7915: release hif2 reference on probe IRQ failure ad706fcf62554 wifi: mt76: mt7915: fix ext PHY use-after-free on register error path 927fe8c0eb8c1 wifi: mt76: mt7915: fix double hif2 init on the non-WED path 1bd5c4ed2b904 wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement 4f4fada2d3594 perf machine: Check snprintf truncation for guest kallsyms path 718773cdea4ac perf machine: Free scandir entries in guest kernel map creation 6c903f77f50f7 perf machine: Reset errno before strtol in guest kernel map creation cae1adeb69b94 perf machine: Don't abort guest map creation on first inaccessible dir ac436ad9d47dd perf machine: Check snprintf truncation in machines__findnew() 091cd722190cf perf machine: Use snprintf() for guestmount path construction c8b41333e2c89 perf machine: Guard against NULL strlist in machines__findnew() 3d1f6a9f7f300 perf machine: Fix NULL parent dereference in fork event processing 6d0a2c5e210f2 regulator: core: use system_freezable_wq for init complete work 1296cae530528 wifi: ath11k: fix leak in ath11k_service_ready_ext_event() d3e8355a63cea drm/msm/dsi: Drop dev_pm_opp_set_rate(0) e52a884ecbf3c drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) 78c2c2ae9a8f4 perf: arm_spe: Make wakeup range check overflow safe ccee078503097 ACPI: processor: Unregister cpufreq notifier on init failure 0306624c843dd ACPI: processor: idle: Optimize ACPI idle driver registration 4052a0367fa92 wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields 1d348f96623ec wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV 3106f62809d45 wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config a4587f1098c97 wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie 953357433053a wifi: mt76: mt7996: don't report a zero TX bitrate e63c6291ecddf wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss 9fc7b406a7e5e wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset c2c7f16f2c62f wifi: mt76: mt792x: Fix memory leak in SDIO TX path 8eae5e5aa09da wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 b6e7958602bd1 wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length 1f3e5f4b779d6 fanotify: report full event length for FIONREAD adbdf4837c434 misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() 5c3bff6cf26e6 locking/lockdep: Fix NULL pointer dereference in __lock_set_class() d22ad96f1a0c8 i3c: master: Fix device_register() error path 111f559e5b646 i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices 68bf3ebd8e702 swiotlb: Preserve allocation virtual address for dynamic pools 06dffc9669308 iommu/dma: Check atomic pool allocation result directly 9a5a5eafbf168 clk: qcom: Return expected ENOMEM error on dynamic allocation failure 2636569ea7c19 lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone a5c936ac90476 bpf: Fix potential UAF when reading bpf link info f4ce6803df409 bpf: Fix potential UAF in bpf_netns_link_update_prog 972d88069050d power: supply: sc2731_charger: cancel work on remove dcc6995b17d11 power: supply: sc2731_charger: Convert to platform remove callback returning void c22a9a539c761 power: supply: isp1704_charger: cancel work on remove 76c695d6e9236 arm64: dts: qcom: sm8550: Fix the PCIe iommu-map entries 5c28583f58a48 arm64: dts: qcom: sm8550: Fix the msi-map entries 28bfcbc9b7694 arm64: dts: qcom: sm8550: Use GIC-ITS for PCIe0 and PCIe1 de01d783368c5 arm64: dts: qcom: sm8450: Fix the PCIe iommu-map entries 4a2efff1ebdbe arm64: dts: qcom: sm8350: Fix the PCIe iommu-map entries 9dedefe9d949a arm64: dts: qcom: sm8250: Fix the PCIe iommu-map entries 796fcf46d7551 arm64: dts: qcom: sm8150: Fix the PCIe iommu-map entries 3c9cbf39055fa arm64: dts: qcom: sdm845: Fix the PCIe iommu-map entries 31db9b8610e3f arm64: dts: qcom: sc8180x: Fix the PCIe iommu-map entries a331e43e9b78f arm64: dts: qcom: sc8180x: drop duplicated PCI iommus property ab813e51988d6 arm64: dts: qcom: sm8250-xiaomi-elish: correct the board ID bb7206ebdb1f5 arm64: dts: qcom: sc8280xp-crd: Fix the pin index for misc_3p3_reg_en 5a430485d1310 clk: qcom: gcc-qcm2290: don't park QUP RCGs upon registration ee4eb4b0db3de arm64: dts: qcom: sdm632-motorola-ocean: Fix LED default trigger property 1c3d2e50e7bc4 arm64: dts: qcom: msm8998: Don't pull-up I2C pins by default in sleep 29c9c4801f539 rcu: Mark accesses to ->rcu_urgent_qs and ->rcu_need_heavy_qs d5ba53140ee78 rcu: Rename rcu_momentary_dyntick_idle() into rcu_momentary_eqs() 1d1903d64ba52 rcu: Remove unused function declaration rcu_eqs_special_set() 11d327f0911d3 selftests/zram: fix kernel_gte() for POSIX sh 590d690a9f668 tools/nolibc/powerpc: mark ctr and xer as clobbered by system call e77c80670f2c2 md/raid5-ppl: fix use-after-free in ppl_do_flush() 3018d86da10b4 md/raid5: protect bitmap batch counters aka seq_flush/seq_write consistency 55ee71cb96bd3 bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET aef178ffae542 wifi: rtlwifi: pci: fix error path in rtl_pci_probe() 56989e2a9c292 platform/chrome: cros_ec_debugfs: Unregister panic notifier 5ebfc68217b5a platform/chrome: cros_ec_debugfs: Clean up console log on probe failure f760b7d7e4358 wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() 1130f6f42f62b wifi: ath11k: implement handling of P2P NoA event 5ddc08ef072db wifi: ath11k: refactor ath11k_wmi_tlv_parse_alloc() 98e373dc08187 wifi: ath11k: add firmware-2.bin support aff7ced31b937 wifi: ath11k: qmi: refactor ath11k_qmi_m3_load() 29e37f768f355 spi: davinci: switch to managed controller allocation 5db5c788048eb spi: davinci: Unset POWERDOWN bit when releasing resources 27b0a735ca9f8 spi: davinci: Use helper function devm_clk_get_enabled() acc173608ca7a nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request 44fe800ec1338 IB/isert: reject login PDUs declaring more data than was received 2a6b8f88fb7ee IB/isert: reject PDUs declaring more data than was received 5a21e5114cec4 RDMA/cxgb4: free STAG index when TPT entry write fails 08c4a0dede170 RDMA/mlx5: Send cong param changes to the resolved port mdev 0b0122fcc923a RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs f42f0cb6be2e8 scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches. 5166a21b12f54 nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch aaee7ff47a47a nilfs2: convert nilfs_page_bug() to nilfs_folio_bug() 25a07d5d97a19 nilfs2: convert nilfs_btnode_commit_change_key to use a folio 62cff5341dfde nilfs2: convert nilfs_btnode_prepare_change_key to use a folio 6fe7f8240fa83 nilfs2: convert to nilfs_folio_buffers_clean() 0787197a858dd nilfs2: convert nilfs_forget_buffer to use a folio 14b101d829fc1 nilfs2: add nilfs_end_folio_io() 7029e70cf86d5 nilfs2: prevent out-of-bounds read in super root block parsing d7afca8e4efbf nilfs2: fix infinite loop in nilfs_clean_segments() b9dd1e691cea8 clk: rockchip: Fix the fractional part denominator on RK3588/RK3576 PLLs d9057cb059a50 clk: mediatek: mt8135: Fix inverted gate control for devapc_ck f7bf9b82c77fd clk/x86: pmc_atom: add kasprintf return value check 297b278cc4fd1 clk: palmas: Manage external-control prepare with devm e86e11c11251a clk: tegra: tegra124-emc: put EMC node on register failure 5dbefaa1bbbb2 arm64: dts: allwinner: sun50i-a64-pinephone: Fix mpu6050 mount matrix aadf3f9b5edb7 RDMA/efa: Fix PBL chunk length computation ecde45cd81dc2 fs/ntfs3: reject restart table growth beyond U16_MAX entries aeb16d9686b35 staging: rtl8723bs: use kfree_sensitive() for key material 47de033918cd7 remoteproc: Prevent crash handling to race with rproc_del() 15673e7195681 remoteproc: core: Attach rproc asynchronously in rproc_add() path via schedule_work() 166bc60c8d1db remoteproc: Allow shutdown of crashed processors 48cba5968c148 remoteproc: core: Drop redundant initialization of 'ret' in rproc_shutdown() 5f25e5c95117b w1: ds2482: Fix signedness bug in ds2482_w1_triplet() 5677737c2cedf isofs: release zisofs block pointer buffer head 42fb8aefffff5 RDMA/mlx5: Fix integer overflow of user QP buffer size 0afd2a1d8fd3d crypto: keembay - publish OF module alias for OCS AES/SM4 d52a15c4559b6 crypto: keembay - Initialize completion before requesting IRQ 587be18e09356 scsi: ufs: debugfs: Reserve space for a string terminator cd522340b777c power: supply: sbs-battery: Use a per-device serial number buffer 3b1fa32b00fbf tools/build: Allow versioning of all LLVM tools defined in Makefile.include a241079c175c5 tools/build: Add bpftool-skeletons feature test 903a7cdf63a81 pinctrl: mediatek: free EINT resources on unbind e578bbff98582 pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms e858183aa84e0 pinctrl: mediatek: Fix the invalid conditions 7586766229354 pinctrl: mediatek: Add EINT support for multiple addresses d626407251868 pinctrl: mediatek: Use C99 initializers in PINCTRL_PIN_GROUP() 68edf359b0b45 cxl/region: Fix use-after-free in find_pos_and_ways() error path dd60d57b1fe73 selftests/bpf: Fix memory leak on subtest_states reallocation 123d67513c828 selftests/bpf: Fix incorrect error checking for pthread_create 3f609fc97f22f ARM: lpc32xx: only run SoC init on LPC32xx hardware cf2e767ba2693 arm64: dts: rockchip: Fix Gru WLAN sideband interrupt 94fce1d3e74fe fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init 810da5a635495 netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet 4f10b305da832 drm/tve200: add OF module alias for autoloading 72e12a20e2fe0 leds: pca9532: Fix phantom device registration on missing hardware 0f36ce5987d1f PM: hibernate: Fix memory leak in snapshot_write_next() error path 621871b696b10 xfrm: Fix skb double-free in xfrm_dev_direct_output() 795e59c83c97c perf cs-etm: Avoid truncating AUX buffer sizes to int c2039be327081 perf cs-etm: Flush thread stacks after decoder reset 524e57035af2d firmware: arm_scmi: Unrequest devices if driver registration fails 41714150f3d14 firmware: arm_scmi: Add multiple protocols registration support e75816535da42 ARM: dts: allwinner: a10: Fix PMU interrupt e94676a08af63 ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() 74637f7fef030 ext4: fix buffer_head leak in ext4_init_orphan_info 5361fb1e5bc24 RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap 2677fc48dd10d wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() 9784faa6afd26 wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() 6ba901a05ca17 wifi: ath11k: Correctly copy the hint BSSID in WMI scan request a7918f70784a7 wifi: ath12k: Correctly copy the hint BSSID in WMI scan request ea2a77682f9f9 wifi: ath6kl: avoid buffer overreads in WMI event handlers 74eee4ff9698a ext4: drain in-flight DIO before buffered write fallback f82a4929d0ef7 ext4: clear stale xarray tags on folios skipped during writeback 08df725b92751 thermal: intel: int3400: clean up ODVP on probe failures 20068f9cce6d4 iommu/qcom: Fix inverted fault report check in qcom_iommu_fault() 4f408943e79c5 iommu/qcom: Remove sysfs device on probe failure path 2ff7713b7308c firmware: arm_scmi: Fix requested device removal race 7647363fa0204 RDMA/core: Fix potential use after free in ib_dealloc_pd_user() 76f2cb4f72181 RDMA/core: Fix potential use after free in ib_free_cq() 6318be2f1bdd1 RDMA/core: Add driver APIs pre_destroy_cq() and post_destroy_cq() d5cc211e8c39e RDMA/core: Fix potential use after free in counter_release() d3d0eabe6e39b RDMA/core: Fix potential use after free in ib_destroy_srq_user() 253c2ed71a532 RDMA/core: Fix potential use after free in ib_destroy_cq_user() a608af8cde3dd RDMA/core: Fix use after free in ib_query_qp() 2001cb7bf6864 RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations 7a0cbb5721a1d RDMA/nldev: Fix locking when accessing mr->pd e61ac671304bc RDMA/restrack: Fix typos in the comments d08cfae802141 RDMA/core: Add an option to display driver-specific QPs in the rdmatool 7670a3a09cd1b RDMA/core: Add support to set privileged QKEY parameter 6e129c1310abf RDMA/erdma: Fix CEQ tasklet use-after-free on removal 7d90d2b7bd961 PCI: j721e: Fix incorrect max_lanes for J7200 74fc33e4fbe93 RDMA/srpt: Pass the mapped task attribute to target_init_cmd() b21c003c8a78b libbpf: Search /lib64 and /lib in resolve_full_path() 7ba09330d9ea6 ext4: skip extra isize expansion during mount to prevent deadlock 1a1dea633b724 ext4: fix out-of-bounds read in ext4_read_inline_dir() 452950461241d ext4: fix circular lock dependency in ext4_ext_migrate 6aaf6dbf54fdf ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root 8e67b58c04990 ACPI: processor: validate MADT IOAPIC entry bounds 13a1ba508507a ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer f8e9315236c8b RDMA/nldev: validate dynamic counter attribute length c4643bcb3bdda irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() 47e59177bfcee selftests/bpf: Silence array bounds warning in global_map_resize e967bde356a8a kcsan: avoid unintended access checking in NMIs f65f45dfa1e6e RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters 750bba6ce9bb0 RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] fd6dee13f3857 RDMA/hfi1: Propagate sdma_txinit_ahg() errors 7987dd37eaeae arm64: dts: amlogic: meson-axg-s400: enable mipi_pcie_analog_dphy for PCIe afa5719047522 phy: starfive: Fix runtime PM cleanup in JH7110 DPHY RX probe 41e92e0caa1fe ASoC: meson: Keep link pointers valid on realloc failure 351eceec64355 dmaengine: dw-edma: Clear stale requests on termination b6293a8a38f4d dmaengine: dw-edma: Serialize channel state checks 075de95d7a7cd dmaengine: dw-edma: Serialize abort state updates 65e387b95d385 dmaengine: dw-edma: Terminate all descriptors without callbacks fe644b89b0a8e driver core: soc: Unregister bus on early device registration failure 4ebf96d5f834a software node: Fix software_node_get_reference_args() with index -1 b604d3f453c99 perf ui hists: Fix uninitialized stack memory free on pstack allocation failure a536eb57be584 mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() 0ce48c6ddea1a mtd: mtdswap: Avoid freeing registered blktrans device twice 25cdd2a492d86 vfio/pci: clear vdev->msi_perm after freeing it on init failure ce6c3dd9f1ce7 char: xilinx_hwicap: unregister class on init errors c92ef8fd83452 ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove 5246bf384f74b tty: ipoctal: convert to u8 and size_t f53e742743c46 ppdev: prevent overflow when setting port timeout ec713896189fb cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) 0394902df3827 misc: ad525x_dpot: use driver core groups for sysfs files 362f5e6f8edf3 misc: rtsx: add missing write register handling f7a8f4cbc8ced misc: bcm-vk: Use acquire/release for msgq_inited 2e91ab73f9beb speakup: keyhelp: guard letter_offsets possible out-of-range indexing c5e4c36df3e6a accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() 15340b00e665a uio: Fix stale info pointer in failed registration path 57371e743398e UDF symlink pathComponent header OOB read 0b94b2d1ab3fa tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 fd43eae7d539e usb: gadget: f_uac1_legacy: remove broken string configfs attributes f593c55e3c125 ACPI: processor: idle: Expand _LPI package sanity checks 22a5cf7a4b733 crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping 079e64469bd21 drm/msm/a6xx: Fix stale rpmh votes after suspend 4f9f0afdbdf51 gpu: host1x: Avoid stack over-read in debug output helpers cfe1b2fa40d24 gpu: host1x: Fix offset calculation in trace_write_gather f22ad9d1077c8 wifi: iwlwifi: mei: pass correct argument to function 11dde137f1258 wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments b90ebae632318 wifi: iwlwifi: mei: check SAP message length before reading it 2541d4f165960 wifi: iwlwifi: mei: add support for SAP version 4 5bcc933c6d47d wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser 8d74cb5fbb7a0 wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs c862282b5f4c3 perf jevents: Add more components to the metric sorting order 489765bfa715e arm64: dts: qcom: sm8250: correct frequencies in the Iris OPP table 533a26a2d6b29 arm64: dts: qcom: sm8250: sort out Iris power domains 91b0528b4220a arm64: dts: qcom: msm8996-xiaomi-gemini: Fix up ti,drv2604 enable GPIO 982caa744fce7 drm/bridge: tc358767: clamp the reported AUX read size to the request 61b393c2de9d8 remoteproc: qcom: Fix glink->node reference leak in qcom_add_glink_subdev 63d929c6035ca cpufreq: schedutil: Fix self-contradictory comment in sugov_iowait_apply() e9c60c62b3fa8 cpufreq: intel_pstate: Fix setting minimum P-state at init time dbe2842194426 media: i2c: rdacm21: Fix missing media_entity_cleanup() 3d39757ef791f irqchip/renesas-irqc: Fix generic interrupt chip leak on remove aafec4a897d54 irqdomain: Add support for generic irq chips creation before publishing a domain 917c6432f7272 genirq/generic_chip: Introduce irq_domain_{alloc,remove}_generic_chips() b359b1fe21434 irqdomain: Introduce init() and exit() hooks 6e6a1e3f3c3f6 irqdomain: Handle domain hierarchy parent in irq_domain_instantiate() c2a5d22b10f42 irqdomain: Handle additional domain flags in irq_domain_instantiate() 2a8a3c8867f08 irqdomain: Introduce irq_domain_instantiate() 804e2374b4cc2 irqdomain: Introduce irq_domain_free() 572624cc59dc4 PCI: xgene: Drop unnecessary OF node reference bff8e14aa442f PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN dc40f9f4f21c6 cpufreq: spear: Fix an IS_ERR() vs NULL bug in spear1340_set_cpu_rate() 0a42180d5410c dax: read holder_ops once in dax_holder_notify_failure() 1c94430cab25f libnvdimm/labels: Bound the on-media label size before the shift 0f860db24ee95 firmware: arm_scmi: Drop handle on protocol bind failures 0f4edd93d7089 firmware: arm_scmi: Protect device request lookup with RCU fe2aeb5c50683 firmware: arm_scmi: Use channel ID for transport teardown 8eb2ab2095705 firmware: arm_scmi: Reject out of range DT protocol IDs aed24a3c63920 firmware: arm_scmi: Avoid IDR updates while cleaning channels ae7980c9af698 firmware: arm_scmi: Free transport channel on IDR failure 70a26b3738984 firmware: arm_scmi: Unregister device notifier before IDR teardown fb7b9a7209f83 wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate e20f3b749ad24 hfsplus: validate thread record before delete key rebuild 7e9aee7e4d976 fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() 1083c7dca912a fs/ntfs3: fix KMSAN uninit-value in ni_create_attr_list 4ff4b6b9e85cf fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr() e3256df116f0a fs/ntfs3: Add more checks in mi_enum_attr (part 2) 5b8d40df72c55 cxl/pci: Honor -EPROBE_DEFER from component register setup 4347681957c55 cxl/pci: Store the endpoint's Component Register mappings in struct cxl_dev_state 86771c105293c cxl/mbox: Break poison list loop on an empty payload 48f55b90f0d71 rpmsg: glink: fix deadlock in endpoint destroy during driver detach db196a8962a53 rpmsg: glink: remove duplicate code for rpmsg device remove c7201bd08cad7 media: v4l2-async: Unregister sub-device if asc_list is empty 601eb7f556810 media: v4l: async: Drop useless list move operation 85904076cece7 isofs: fix out-of-bounds page array access on empty zisofs block 648cdd16d633d ASoC: apple: mca: increase SERDES reset delay 554261c9858a4 RDMA/hfi1: Initialize debugfs after probe completes 506e333b1410c RDMA/hfi1: Stop flushing the global IB workqueue 3f5e501f1ac47 RDMA/hfi1: Create workqueues before device initialization 3471c19584d0d RDMA/hfi1: Remove redundant PCI device ID validation 10e5e37495096 RDMA/hfi1: Free RX data on late probe failure 3f1e196eb66b8 RDMA/hfi1: Preserve unit 0 on allocation failure 695562587466d misc: rtsx_usb: avoid USB I/O in runtime autosuspend b0c8786242a77 pmdomain: bcm: bcm2835: handle genpd provider registration errors 0f34ac40201e8 ALSA: hpi: Check transport errors during HPI6000 adapter initialization bdcda866c89f9 xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full 9e76202a1befe hwrng: ks-sa - Fix runtime PM cleanup on registration failure 2016f01404c7d hwrng: ks-sa - access private data via struct hwrng c319b986a88ce RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state 7bc08d7f9338c RDMA/ipoib: Drain RCU callbacks during module teardown 2f946e7839f67 RDMA/mlx5: Drain RCU callbacks during module teardown 7853af5f15738 RDMA/core: Wait for RCU callbacks before unloading ib_core 39bb722b7e2c9 iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE 682cb826b1ec5 bus: qcom-ebi2: use managed resources for clocks and children fb9738bf09514 soc: qcom: rpmh-rsc: manage PM notifiers with devres a8e5a6cff427c perf metricgroup: Fix metric expression copy leaks c582d79c8559a drm/panel: samsung-s6d16d0: Power off on prepare failure 02e4a3088f21a usb: renesas_usbhs: Fix power-off ordering on unbind b76061c76d8c6 usb: mtu3: allow system suspend during active gadget connection f276b62f2ce1c platform/surface: acpi-notify: Check ACPI companion before use bf1e0cc5cc1d4 platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL 44904468e58d3 usb: fix UAF when probe runs concurrent to dyn ID removal 767ccd38e02eb USB: make to_usb_driver() use container_of_const() 6ee22ab55856e USB: make single lock for all usb dynamic id lists 85c8cb5c0be4a USB: core: Use device_driver directly in struct usb_driver and usb_device_driver 4aaad88f85749 usb: gadget: aspeed_udc: check endpoint DMA allocation bdac0e8594a0c usb: gadget: aspeed_udc: Convert to platform remove callback returning void a28c486434634 usb: gadget: configfs: fix out-of-bounds read of qw_sign 52c423309d461 serial: ma35d1: Fix OF node reference leaks in console init 84a286a72228f hwspinlock: propagate errno when registering single lock a73cfa80f1ec6 remoteproc: qcom_q6v5_adsp: Fix reference leak for device node 62b24e1c338f5 platform/x86: dell-wmi-base: Fix resource leak on module load failure a22beeb90475b platform/x86: dell-privacy: Fix race condition 374e8007ba86c leds: pca9532: Fix inverted GPIO output polarity 6347259f70172 iommu/amd: Fix false positive in SB IOAPIC IVRS validation 9f06a7264aeda iommu/amd: Add support for Hygon family 18h model 4h IOAPIC ae2acdee5f8cf iommu/amd: Prevent SB IOAPIC from overriding IVRS validation errors c9dfb82df6fee iommu/msm: Return -ENOMEM on memory allocation failure in probe b201d43112589 iommu/mediatek-v1: Fix off-by-one in MT2701_LARB_NR_MAX 51ddb831a3610 bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation 8e1101fc41180 bpf: Fix use-after-free on mm_struct in bpf_find_vma() 68f2007738db7 efi: fix stale reference to efi_recover_from_page_fault() 978524ecfc1c5 bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux 8034ddf4751d9 udf: Mark LVID buffer as uptodate before marking it dirty 150d3f3c46134 usb: gadget: r8a66597: avoid double free of ep0_req in probe error path fb7393519908b usb: typec: ucsi: unregister debugfs entries on teardown 810875c5996f7 thermal/drivers/rcar: Fix error checking in probe() 78c5da6150ded perf data convert json: Fix trace_seq memory leak in process_sample_event() 4f65a8939518d arm64: dts: qcom: sc8180x-lenovo-flex-5g: Rename regulator nodes 30dfa367086be arm64: dts: qcom: sc8180x: Enable the power key 574a1124ab6fd arm64: dts: qcom: sc8180x-lenovo-flex-5g: move pinctrl to appropriate nodes f43f9bd3ece31 arm64: dts: qcom: sc8180x-primus: Rename regulator nodes 0f4733f5fc6b6 clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister() 3b110cd72a534 clk: qcom: gdsc: propagate gdsc_enable() failure for ALWAYS_ON domains ed07e0adfed4a clk: qcom: gdsc: propagate gdsc_check_status() errors from gdsc_poll_status 0c3104e7ada4d timekeeping: Account for monotonicity adjustment in ntp_error dd29cd572958e y2038: uapi: Use 64-bit __kernel_old_timespec::tv_nsec on x32 4d76e99010940 clocksource: Unregister subsystem on device registration failure 98ea7a6cffa01 selftests: timers: leap-a-day: Fix -w option and update usage comment 8aa8e8f5e236d irqchip/gic-v3-its: Fix its node leak in gic_acpi_parse_madt_its() 8c701506a3896 irqchip/gic-v3-its: Fix memleak in its_probe_one() 36d2cf0a9044d selftests/bpf: Fix memory leak in msg_alloc_iov fb17bee6b42c6 selftests/bpf: Fix memory leak in msg_alloc_iov error path dd4454dbe038d ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() 4520d673d49da staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() 98f9036b2254c staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown 65374d46e5507 staging: octeon: replace pr_warn with dev_warn in fill and rx paths a082526531f19 staging: octeon: ethernet-mem: replace pr_warn with dev_warn in free functions 03725a114fb42 staging: octeon: fix free_irq dev_id mismatch in cvm_oct_rx_shutdown b6365e4186322 staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown b631de4efcc17 staging: fbtft: Use sysfs_emit_at() to print to sysfs file 52daf9de692eb greybus: audio: bound the topology section sizes against the fetched size 6ddc6239b80de staging: sm750fb: gate dualview dataflow using g_dualview 7b34f757e63c9 staging: greybus: audio: correct sscanf() return value check c40ba47f2ba19 wifi: mac80211_hwsim: avoid NULL skb in stop queue drain c2d446de9c7d0 bus: qcom-ebi2: Fix clock leak on probe failure aca12925ca316 bus: qcom-ebi2: Simplify with scoped for each OF child loop c75aed7464f63 arm64: dts: qcom: sm7225-fairphone-fp4: Fix address in fb node name 8d89d53927ca2 PM: sleep: Fix off-by-one in wakelocks number limit check 9118429571290 bus: ti-sysc: Fix /chosen node reference leak 9584b3c30e4ee nvmet-rdma: fix response resource leak on queue teardown 3220b338d5c79 nvmet-rdma: factor out response resource cleanup d130a12a80ca8 nvmet-rdma: use sbitmap to replace rsp free list 85a79da286b65 nvmet-rdma: avoid circular locking dependency on install_queue() 86782a72c6d8c nvme-apple: Use acquire/release for queue enabled state 27ec91c29ee15 crypto: keembay - Fix AEAD unregister count in error path a22dc48d58ef4 crypto: rk3288 - fail ahash requests on HASH idle timeout 04c46784ec249 crypto: sa2ul - stop probe if context pool creation fails 28cc179252347 crypto: atmel-sha204a - fix heap info leak on I2C transfer failure 6457162f74f45 crypto: atmel-ecc - reject hardware ECDH without a public key 70933a1cac1fc crypto: atmel-ecc - clean up and improve ECDH comments c0615c85eabf9 crypto: atmel-ecc - replace min_t with min 892f34dc1819c crypto: qat - clear AES key schedule from stack a8aa89686e705 perf/x86/amd/uncore: Add group validation e0e7c57c8f654 perf/x86/amd/uncore: Refactor uncore management 64463f1901d33 perf cs-etm: Fix thread leaks on trace queue init failure 99d3245941659 perf cs-etm: Queue context packets for frontend 8e5df43a45788 perf cs-etm: Create decoders after both AUX and HW_ID search passes 96d80b8319b3d perf cs-etm: Fix incorrect or missing decoder for raw trace 655c4401c18d7 wifi: rtw89: fix HE extended capability length check 7780d93ae28f3 platform/chrome: sensorhub: Fix memory overread in ring handler c3d0e87485242 selftests/rseq: Replace glibc-specific __GNUC_PREREQ with portable check e71a3dc5b8d2e csky: Fix a4/a5 restoration in syscall trace path 8d32795f0a49f iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure f80c31231f85e soundwire: qcom: Fix port exhaustion check in stream_alloc_ports aaff22cc321a3 dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe fdaf297ab275c dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers 2c6bb2f286369 dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure 953e85da53541 bpf: Copy per-CPU map value padding in copy_map_value_long() 9004fc411a4c5 tools/bpf/bpftool: Reset vmlinux BTF after struct_ops commands c2dae438fe530 tools/bpf/bpftool: Reset vmlinux BTF after map commands b349dcf061a6d drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup 745297208d312 drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup 28f70e0aa767a regulator: tps6594: Fix device node reference leaks in multiphase loop 017cee438fff6 regulator: tps6594-regulator: refactor variant descriptions e8d3e15b9dd68 regulator: tps6594-regulator: remove hardcoded buck config 23a18b7506a10 regulator: tps6594-regulator: remove interrupt_count 75ab28f275538 regulator: tps6594-regulator: Constify struct tps6594_regulator_irq_type ac25127d2f353 regulator: tps6594-regulator: Fix the number of irqs for TPS65224 and TPS6594 54308f24ce510 regulator: tps6594-regulator: Add TI TPS65224 PMIC regulators d9c48f4e68615 mfd: tps6594: Add register definitions for TI TPS65224 PMIC 1f27602b20119 perf tests: Fix flakiness in BPF counters test on hybrid systems a223216745ed4 perf test: Fix perf stat --bpf-counters on hybrid machines c292f2c183254 perf test: Use sqrtloop workload to test bperf event ff43d641b3bfb perf test stat_bpf_counter.sh: Stabilize the test results 30db36f6e1503 perf test bpf-counters: Add test for BPF event modifier a04531eb40eb9 perf test: raise limit to 20 percent for perf_stat_--bpf-counters_test 203514384ea3c perf tests: Skip metrics validation if system-wide recording lacks permission 6ccaa141be258 perf test: Do not skip when some metrics tests succeeded db1ce7949a1cc perf test all metrics: Fully ignore Default metric failures ce09d02a597cb perf test metrics: Update all metrics for possibly failing default metrics e386dedc41094 perf tests metrics: Permission related fixes 1437d124d2ede perf test stat_all_metrics: Ensure missing events fail test a379a49b88d14 perf test: Update all metrics test like metricgroups test 361c06583eb3b perf test: Simplify metric value validation test final report 3db8b4f7f4eaf media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define 68f283e4d2202 media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define 3b978fd0a3092 pinctrl: bcm2835: Don't remove an unregistered GPIO chip ff48a41a242f2 perf/x86/intel/uncore: Keep PCI PMUs working when MMIO/MSR setup fails 69fafae4eb2c9 sched/fair: Fix overflow in update_tg_cfs_runnable() f5ec164e733b9 mm/mm_init: fix incorrect node_spanned_pages 788917ba77f5d drm/lima: call drm_mm_init() with a valid allocation range 0c90fe8d8039f clk: imx: scu: drop redundant init.ops variable assignment 3f0ebe8f8ae31 ARM: imx: fix device_node refcount leaks in imx7_src_init() 01a854226f5d1 ARM: imx: fix device_node refcount leak in imx_src_init() d3d51e874f7c0 clk: hisilicon: reset: Use devm_kzalloc to initialize hisi_reset_controller 1bb23c9d68312 ASoC: rt700-sdw: always drain jack work on remove b550b77f34f19 clk: nuvoton: ma35d1: fix ma35d1_clk_pll_determine_rate logic 25f46d2536332 clk: nuvoton: ma35d1-pll: convert from round_rate() to determine_rate() 418401f2a872d clk: nuvoton: ma35d1: fix PLL_CTL1_FRAC bit field width and fractional calc 828a90dadda6c clk: nuvoton: ma35d1: fix ignored div_u64 return values in PLL freq calculation 6956464d233a7 clk: moxart: remove unused variables, fix refcount leak 909f1b54d5a09 clk: versaclock7: Fix APLL clock leak on probe failure b37e82a046e73 media: cec-pin: Fix event FIFO ordering 111f1311bbdbe soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() 4b29be4b23bc2 HID: roccat: bound device-supplied profile index e45631bf607fa HID: nintendo: Fix imu_timestamp_us double increment per report 92cca302a4eaf HID: core: quiesce input in hid_hw_stop() to prevent use-after-free 4e37371cb4e3b platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count c0e090bd67085 x86/cfi: Use symmetric SYM_START and SYM_END in __CFI_TYPE() 02e095247f0a9 smack: restrict smackfs/{direct,mapped} values to 0-255 c7bb74fa9c382 smack: deduplicate smackfs/{direct,mapped} file_operations 6d4addf839b94 smack: simplify write handlers of sysfs entries ec47f4177046d smack: fix incorrect task context in smack_msg_queue_msgrcv 139460b7723ca drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure a008506e55e33 drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format 8504b0e1acef9 drm: lcdif: Wait for vblank before disabling DMA 9ed9a94c1a41d drm: Remove unused header in drm_dumb_buffers.c 6d79a939e284e mm/damon/core: skip aging from repeated aggressive merging a886ad5f6348f usb: typec: ucsi: use UCSI_TIMEOUT_MS for sync command completion 404079d124d75 clk: meson: align gxbb_32k_clk_sel number of parents with actual count 29639f00bfa49 perf sched: Fix register_pid() overflow, strcpy, and BUG_ON a3e07db74f22a batman-adv: bla: avoid CRC corruption due to parallel claim add 1674855a5b6ea batman-adv: dat: atomically update mac addresses d161c4456672f ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size 5e641e4ee0bc1 ksmbd: fix durable reconnect error path file lifetime f0ff7f12398e8 ksmbd: fix use-after-free in smb2_open during durable reconnect 64eaf4ecda007 bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops 2120bd8546cd6 bridge: mrp: reject zero test interval to avoid OOM panic de6601f1374fa netfilter: nft_counter: serialize reset with spinlock e2e9599f3503d bpf: Reject narrower access to pointer ctx fields c9a129c82ddf8 ceph: fix oops due to invalid pointer for kfree() in parse_longname() 4b9aee707c458 parse_longname(): strrchr() expects NUL-terminated string 0afd48b173beb net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads 97aabdbf7ba82 ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" 73f074fb5e139 ksmbd: fix overflow in dacloffset bounds check 9c6c85ae77efb net: libwx: fix Tx L4 checksum 5eaf57fdfa37c md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb 7493b9baf0e54 wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path 9d213ca0cb49e net: hns3: fix kernel crash when 1588 is sent on HIP08 devices 7f1fe43907a63 net: hns3: don't auto enable misc vector 2b844d952e23d mm/damon/tests/core-kunit: catch test failure in test_merge_regions_of() 1acb6d1ece3bc mm/damon/core-kunit: handle region split failure in filter_out() 9b7cf02158d93 mm/damon/vaddr-kunit: check region count in three_regions test 072d538e9d8c5 mm/damon/paddr: drop last same folio access check reuse optimization 2b48a84d31dc3 mm/damon/vaddr: drop last same folio access check optimization 94c4828bee3da mm/damon/core-kunit: check region count before testing in split_at() c3c126a6142a1 nvmet-auth: Synchronize timeout work during SQ teardown f3d8c2fd591bb net/mlx5e: xsk: Fix unlocked writing to ICOSQ 9fffa6465851a tcp: clear sock_ops cb flags before force-closing a child socket 43239fc6dfb62 xhci: fix lost bounce buffers on TDs spanning several ring segments a129b2b875c14 drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE ba42d8a1c2c76 drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE f02aefbc43bd7 drm/nouveau: Use write-combined maps for coherent 0f47c47b45738 drm/amdkfd: Reject zero-sized AQL queue allocations after size halving b4c90c78f420c drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT 5d501f7279451 drm/amdgpu: fix autosuspend cleanup during removal 84a8012601b9a drm/amdgpu: check thunderbolt before switcheroo registration e2f27b5ed9084 drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used 4f966558c188b drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value 082e378886547 drm/gud: validate TV mode names before creating enum property 89210cb5ff8fd drm/gud: NUL-terminate TV mode names read from the device 6dceaeceaa7c8 drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check 4d5ee095a5846 drm/amd/display: avoid divide-by-zero in __is_lut_linear() 6fa33b32783e9 drm/hibmc: Use drm_atomic_helper_check_plane_state() 1f0b71afd81de drm/hibmc: Fix list of formats on the primary plane 5296c567cbacc drm/sun4i: fix refcount leak in sun4i_backend_init_sat() 4a0236fe97732 drm/i915: Guard against NULL driver_data in i915_pci_probe() a0a7e2e177f2f drm: fix race between partial drm_dev_register() failure and ioctl 8d9e6dffaea9b drm/panel-edp: fix i2c adapter leak on probe failure c0cbdb43e0c65 drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure 6882d458d2e40 f2fs: fix to zero post-EOF data when extending file size d7a07c9ac1e71 f2fs: fix to off-by-one issue in f2fs_zero_post_eof_page() e601926015e03 f2fs: fix i_size when pinned fallocate partially fails 694565c0c14c9 f2fs: return writeback error from collapse range 4c0c610b480cf f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set() ca1a602d4f73c f2fs: reject overlapping move range after len expansion 4aa12ba10cbff f2fs: return symlink writeback errors 2935b730211c5 scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started 947c6bfcf7f5e scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak 9c00b89160406 scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics e8f1b0cb97823 scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition e72c9eb93c5f1 scsi: qla2xxx: Drop vport reference under lock in report ID acquisition af8650037eec2 scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort d79376fbd2a07 scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() be75ab791c9b3 scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read 6e217a9482eab scsi: qla2xxx: Avoid double completion in async IOCB timeout 7ac5be2a86096 scsi: qla2xxx: Quiesce response IRQ before freeing request queue 6e3f129538c32 scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() 8f0e31e7a4137 scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path b6a30baa29695 scsi: qla2xxx: Don't query firmware state while chip is down 5762d992dddaf scsi: qla2xxx: Fix FCE trace enable parsing in debugfs 2f847f06bb223 scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() 6003e79148eca scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump ae09260be7454 scsi: qla2xxx: Fix cs84xx use-after-free on host teardown 9cef42a073a0b scsi: qla2xxx: Serialize flash version read in reset handler e80adfeac61b4 scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation 7eb618877503e scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject 047f1f7ee6f85 scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() 5b8ed910c392c scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config() b403700ac62fb scsi: qla2xxx: Initialize NVMe abort_work once at submission f8d2eb510c063 scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() 55f8698a6caf8 scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters de0c8ef3b900c scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check 9a756f277eb89 scsi: qla2xxx: Bound i2c->length in I2C bsg handlers 84bde5ce4038d scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers c4acac8cdc005 media: zoran: Avoid freeing a registered video_device twice ca87a19381ae6 media: vimc: fix pixel format lookup in enum_framesizes 3d1b10d81fe54 media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure 7c0212041fab2 media: venus: fix payload size calculation in parse_raw_formats() fdf1eb47a60db media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() ef609b3ce456f media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link ea5a921d4d277 media: v4l2-ctrls: Allow unknown HDR10 white point and luminance d273571e53140 media: v4l2-async: avoid deleting unlinked ASC entry on link error 593b1172e5d54 media: tda18250: fix possible integer overflow 77f216f8de622 media: saa7164: fix cleanup on resource allocation failure 5626785b0e466 media: s2255: check firmware size before reading trailing marker 79f58f900dd22 media: s2255: bound JPEG frame size before copying into the buffer c91e8ae2b39c6 media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure 053581d4657c6 media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak 826763adbd8bd media: rc: sunxi-cir: Unregister rc device on probe failure c817f24410626 media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks e9fe8e3f758f8 media: nxp: imx8-isi: Correct color map between V4L2 and ISI 94666ec4ae770 media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing 680a89683197c media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common 7512838a19af0 media: i2c: ov7740: fix use-after-destroy in remove 4c2988bf1ad27 media: i2c: ov02a10: fix endpoint parsing use-after-free 1c9fdd9465211 media: go7007: defer the ALSA v4l2 put until card release 20aacd87550be media: em28xx: fix use-after-free of dev_next->devlist on disconnect 4e11c45dfdc72 media: em28xx: defer audio-only extension registration ec82b0cf7f75f media: cx23885: cancel NetUP CI work before teardown 54ac6df8b8d97 media: cx231xx: reject geometry changes while the VBI queue is busy 42e00371f83c3 media: cobalt: Avoid freeing ALSA private data twice 22441be29ec27 media: cedrus: fix memory leak in cedrus_init_ctrls() 271e57a936dcd media: cec: Serialize exclusive follower delivery cf3bf86f32371 media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash 954ee95a03b4d media: cec: core: Fix kmemleak due to missed rc_free_device() call 6e4ea90fdc660 media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref ff40e597d5d98 LoongArch: Avoid preempt count underflow without probe a03b5e7483ad2 LoongArch: Do not save/restore percpu base register in rethook trampoline 9c55a7d4e521c KVM: s390: Restore sigset on error path 1914499556464 KVM: s390: pv: Fix rc/rrc offset for PVM_DUMP 934b7b2b76d34 KVM: s390: Zero initialize irq in reinject_machine_check f8e3a9997d5ec KVM: s390: Take srcu when importing watchpoint data 544a5a665019c KVM: s390: Free guest debug data on vcpu destroy 5fbf319137735 KVM: s390: Fix old_data leak in guest debug error path 5940418e4232a KVM: s390: Fix memory leak in guest debug handling fec89d327d9b2 KVM: s390: Fix length check __import_wp_info() 8e19ded843368 KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock 312cdb6d89408 KVM: nVMX: Service local TLB flushes on failed nested VM-Enter 62604376c3131 KVM: nVMX: Always flush vpid02 on first use ee2d20a386668 iio: light: opt4001: Fix reversed GENMASK() arguments in fault count mask 7a1be6e7a857e iio: light: opt4001: Reject integration times with a non-zero seconds part 0f9f6d0ee5a59 iio: light: opt4001: Fix incompatible pointer type passed to div_u64_rem() 170904917dc8d iio: light: opt4001: Fix power down clearing bits of the wrong register 9b75d89fd1e3d iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() e44b2af0c14e2 iio: srf04: fix pm_runtime handling on probe error path d97f4e012ba37 iio: pressure: mpl115: Fix runtime PM cleanup a32a39da18e01 iio: pressure: dps310: fix NULL pointer dereference on ACPI probe da41c3e0e67a3 iio: light: gp2ap002: Disable regulators on resume failure 82c27dabc391b iio: light: cm32181: return zero after writing calibscale 7dfbbb2f219fd iio: gyro: mpu3050: fix sign of raw angular velocity readings f5acb824277a9 iio: dac: m62332: Fix regulator reference count imbalance 3462c13bb0f50 iio: chemical: sgp30: Handle IAQ thread creation failure f64b437641b5a iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF 72daa7eb7fc62 iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable ed43e34f431d1 ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get 4dc91d0dadfe2 AsoC: intel: sst: fix PCI device reference leak on probe failure 6150b04ce8474 ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure f4bfd755c52df ASoC: cs35l34: drain threaded IRQ before runtime suspend 614c2616ea677 ASoC: cs35l33: drain threaded IRQ before runtime suspend 52f7ce8896d6e i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure 0c4c642b4d03e clk: qcom: gcc-mdm9607: Drop incorrect BIMC PLL and related clocks ad3436ad31b83 clk: qcom: gcc-mdm9607: Fix halt_reg for gcc_apss_axi_clk c93a8c7064b33 clk: qcom: gcc-mdm9607: Fix enable_reg for gcc_blsp1_sleep_clk 0c0609c1da0df clk: qcom: gcc-mdm9607: Drop incorrect system_noc_bfdcd_clk_src 0944e2cd198f6 clk: qcom: gcc-mdm9607: Drop incorrect apss_tcu_clk_src 1e2465ee57a3a clk: rockchip: rk3588: Don't change PLL rates when setting dclk_vop2_src ce6f40f8dc66b clk: qcom: gcc-msm8939: Fix enable_reg for gcc_blsp1_sleep_clk a2c156d22c3db clk: qcom: gcc-msm8916: Fix enable_reg for gcc_blsp1_sleep_clk b89701e1fae14 batman-adv: bla: prevent CRC corruptions after claim flush 76aedcde5a248 batman-adv: bla: fix freeing of claims on meshif deletion c74a4acf41d19 batman-adv: dat: avoid unaligned fault in IP extraction 6df64825f8b19 batman-adv: fix stale receive device on merged fragments ddb6ddf5be742 mtd: rawnand: validate ONFI extended parameter page sections f25c804947e0a mtd: mtdoops: free page bitmap when the backing MTD is removed da740539e8f37 mtd: afs: validate v2 image info bounds 58f6f9125e74d s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object 4ba8a08f5f26e s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap 31fa0a8a3c337 s390/vfio-ap: Fix NULL deref in status_show() during queue probe 3a9b049bbdc40 s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed 5e932abfcce61 s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL 02e72909453de s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove 1f54efd800320 s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove eb6cc898501a0 s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm() 114b6ce2cf864 powerpc/crash: stop watchdogs before booting kdump kernel 9c8e0e526b769 powerpc/pseries: Move H_WATCHDOG definitions to a common header b0cf5aceafb4b powerpc/pseries: Handle and log pseries-wdt registration failures b96be860673f9 powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population f5e9bea0d7c15 parisc: Fix alignment of asm statements in head.S 62d88e93ef5e1 parisc: eisa: Fix infinite loop when parsing invalid IRQ value f9bf05c63b77d nvdimm/btt: reject an arena whose nfree is below the lane count 6eddedb1a3009 mm/hugetlb: fix missing migratable flag on same-node hugetlb migration 0fb7c549357c1 Revert "irqchip/mbigen: Fix mbigen node address layout" 9fb527103e53f nvmet-tcp: reject unsolicited H2CData PDUs cf5f39d2b58f9 nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU 0673a2affe45c nvme-tcp: check the data direction of a C2HData PDU ad29779736cfd ALSA: pcm: Fix race between non-atomic ops and trigger-start 7dc239edb6d58 ALSA: harmony: initialize locks before requesting IRQ 08d931a0a850a arm64: mm: Fix the lockless page-table walk in show_pte() 0927153f2abf4 i2c: mux: Fix channel node leak on adapter add failure f9094ace03e0a i2c: core: fix debugfs UAF on adapter removal ca19a175e89b7 perf/x86/intel: Fix kernel address leakages in LBR stack 341ec28243f16 rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers 5548f41e2f8dc rtc: rzn1: Fix weekday underflow when alarm crosses month boundary a098e2cecd9d2 Input: aiptek - validate raw macro indices before updating state 630ed8734a02b kprobes: Protect kprobe_blacklist with RCU 30b5c0e17dcad ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() 23a969a2df8de ata: ahci: work around lost interrupts on Marvell 88SE61xx 642b76f92bc42 block: flag zoned disks with GENHD_FL_NO_PART a38caa9ed0d5c cpuidle: dt_idle_genpd: kfree() the original name allocation 17ef63843c0fc dmaengine: dw-edma: Initialize IRQ data before requesting IRQs 8bc87a50fd0ea dmaengine: dw-edma: Complete descriptors before pausing 718ee263a60d5 dmaengine: dw-edma: Fix HDMA channel status register access 94f3d399c1ddb dm: fix resume-vs-remove race 0ea6e5ad4a581 dm: fix race when loading and unloading a table 96dd0af7597ab HID: wacom: validate report length in wacom_intuos_pro2_bt_irq a8be8bbf0952b HID: rmi: fix OOB access with undersized RMI reports 81aadbd09bf1d futex: Prevent rcuwait use-after-free during requeue PI 2bf705699fd72 mm/damon/sysfs: kobject_del() target (normal), context and kdamond dirs c97ded32334d9 mm/damon/sysfs: kobject_del() region and target (error) dirs ffab414fc5e06 mm/damon/sysfs-schemes: kobject_del() scheme region dirs 0e4aa31ab32a3 mm/damon/sysfs-schemes: kobject_del() scheme filter dirs b33f9b0184159 mm/damon/sysfs-schemes: kobject_del() scheme dirs 2853ce9c88e0e scsi: pm8001: Use rollback index when freeing MSI-X vectors 6b589ef9d5f6c scsi: target: iscsi: Reserve a terminator byte for the login payload 635b2bddea565 spi: bcmbca-hsspi: disable clocks on resume failure d45f27903f945 spi: bcm63xx: disable clock on resume failure 5597b4ffd0bec spi: bcm63xx-hsspi: disable clocks on resume failure be41733c24be5 ublk: clear VM_MAYWRITE on read-only ublk char device mmap d3018aaa5e3b1 thermal/drivers/qoriq: Disable clock on resume failure 03ff03e5c95a5 thermal/drivers/imx: Disable clock on runtime resume failure 0b7f64c7bb966 staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() fd5e24ea83733 staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() 7a4f4ca7ff32a usb: gadget: fix null pointer dereference in usb_put_function_instance() 162178ca83c3d USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() f9bdf4c4f6410 usb: gadget: f_midi2: fix use-after-free in string attribute show path 51ddc55c75087 usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs 58e0ee293ec5e usb: typec: ucsi: displayport: Fix OOB altmode array index 0b69b166852db usb: typec: qcom-pmic: cancel reset_work on stop dbbb3bb0bf2f3 usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() 9481bc04a8c35 usb-storage: ene_ub6250: fix race between scan work and probe 67374e3a00814 media: usbtv: keep device alive while ALSA card exists d91993f4c7635 clk: qcom: gcc-mdm9607: Increase delay for USB PHY reset 1d4add2b832b5 ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() 553c375e86a49 usb: image: mdc800: change kmalloc() to kzalloc() 4c5b61b9df6ab drm/amd/display: fix division by zero in get_estimated_bw() 28ed5343666ff scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables() 2df964d141270 tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions 517ed2f9ea7d9 tracing/mmiotrace: Remove reference to unused per CPU data pointer 7ab40f7577d88 net: ntb_netdev: Fix TX busy and drop handling 23001ee5d8631 entry: Fix seccomp bypass after ptrace with TSYNC cd644e6dc72ee tcp: fix potential race in tcp_v6_syn_recv_sock() 343ae18e960f6 fsnotify: Fix stale object mask after concurrent mark updates b4bf67cc0871b wifi: mt76: mt7996: validate default EEPROM firmware size dfb10d9890561 landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation 680f20d5937fa openvswitch: Fix CT limit teardown use-after-free d7c2b66bc5527 net: openvswitch: fix kernel-doc warnings in internal headers 8069643ae64df net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() e34ff3f882292 platform/chrome: sensorhub: Fix dropped timestamp events and log spam 8395cff0b286d udf: Fix i_lenExtents truncation on 32-bit kernels 51e368f723aa5 timer: Keep debugobjects state consistent in migrate_timer_list() 2252f8ccc3085 taskstats: fix cpumask parsing cutting off the last character f9c7b1f2b9d8f smack: fix cred UAF in smack_file_send_sigiotask() 6b1de022304ef signal: avoid shared siginfo namespace rewrites 262b805219157 sticon/parisc: Detect default STI graphics card for console output b0dc3f18af01b tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout 6c1a8685be6a7 xarray: honor XA_FLAGS_ACCOUNT in xas_split_alloc() 0f6496b34cc29 w1: ds28e17: reject an oversize length on an I2C block read b9cb4e8ba71c9 vsock/virtio: flush works in dependency order ef2ec8b537c3a wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex c86199357a93b wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() 2610885f70861 wifi: rtl818x: initialize eeprom_93cx6 struct to zero f2134d6ff30cd wifi: mwifiex: Detach sync cmd buffer on interrupted wait 7704f6ba2a8c4 wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() 35aa6730b8c56 i3c: master: svc: bound IBI payload to the requested max_payload_len ef72ff6650c4e i3c: master: Fix info leak and UAF in device unregister path 42ea423a50ae1 dm-switch: use WRITE_ONCE() in switch_region_table_write() 389a50d094e13 dm-stats: fix a crash if allocation of per-cpu data fails d1361d4a42bbd arch_numa: avoid false positive fortify warning in setup_node_to_cpumask_map() d18bbf8262516 x86/tdx: Fix zero-extension for 32-bit port I/O 0444f2803b963 PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip 342d8d63f653c cgroup/cpuset: Fix misplaced DL migration reset 368c521503e38 ALSA: virmidi: Check card index validity at probe 487ede9b648fc ALSA: serial-u16550: Check card index validity at probe 64898e9bd8b7b ALSA: portman2x4: Check card index validity at probe ede25b7fea0d7 ALSA: pcxhr: initialize mutexes before requesting threaded IRQ 9cd7c59a106e7 ALSA: mts64: Check card index validity at probe 26a25fb4ef4ba ALSA: mpu401: Check card index validity at probe 6c07aad8a7c9e ALSA: bcd2000: clear the URB pointers on disconnect 6fe7d13608a9d ALSA: aloop: Check card index validity at probe 00e84a9ff2d43 ALSA: 6fire: bound the MIDI event length from the device 96c74420ac929 seg6: reset IP6CB after IPv6 decapsulation 6ec22afc82a3c net: skbuff: don't touch shared zerocopy state in skb_tx_error() bfb1c9e6297b4 net: fix spurious TX timeout after dev_activate() 84783961cb8bd net: cap advertised IP tunnel headroom b6b6ac713ee82 net/smc: unregister the connection before draining the rx tasklet df441f3efbb50 net/smc: fix use-after-free in smc_rx_pipe_buf_release() 09d7a9e162ee1 net/smc: fix socket refcount leak in smc_switch_conns() ab26e12dd5d2f net/smc: do not dereference an unset send buffer on the SMC-D teardown path 746681f9e8773 net: ntb_netdev: Count packets dropped on RX refill failure 965c4452bfe34 net: ntb_netdev: Avoid double-accounting netif_rx() drops b6db88cde0fb5 NTB: ntb_transport: Reject oversized TX buffers e6cc541fab010 NTB: ntb_transport: Fail TX enqueue when the QP link is down 81fbd4021ca93 NTB: ntb_transport: Recycle TX entries before client callbacks e0d4a17afde5a net: thunderbolt: Mark the connection down when bringing it up fails 47981eb66461b net: thunderbolt: Release the Rx HopID that was handed out on mismatch bf3308416a2be net: ravb: avoid dereferencing an invalid PTP clock 06323666c4e2b net: openvswitch: fix nf_connlabels leak in ovs_ct_init 64051fe200c7c net: openvswitch: fix flow mask use-after-free on flow deletion 010eee265d6bd net: tun: bound receive headroom 98610769784d0 net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition 70e20456bcbf7 slip: fix use-after-free in sl_sync() 6de17275b3ccd xdp: fix zero-copy frame layout 0a5af67e7184c net/iucv: filter frames in afiucv_hs_rcv() by ingress device d377bf743f29b ipmi: si: Fix NULL pointer dereference after failed registration 7d66d54b974cf ipmi: ipmb: validate write message length fedea72e8f312 interconnect: Fix use after free in icc_get() and of_icc_get_by_index() dfdee7ceff6a5 platform/x86: hp-bioscfg: warn on element type mismatch instead of failing 467e53f231f77 platform/x86: hp-bioscfg: pass validated element count to package parsers fe837a99e4e31 platform/x86: hp-bioscfg: fix ORD_LIST_ELEMENTS never being parsed 8f5aa1506cddd platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() 62f6f04abc64a platform/x86: hp-bioscfg: fix new_password_store() overwriting current_password 21243c15e1d31 platform/x86: hp-bioscfg: fix heap OOB read on empty password write 81db79fed1156 platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() 1bf0a07a2ea4b platform/x86: hp-bioscfg: bound ordered-list parsing by the package count 27a93d0fe2398 platform/x86: hp-bioscfg: advance elem past consumed array elements d8690d44f1b0d platform/x86: hp-bioscfg: accept reduced ACPI packages from older HP BIOS d1b4add68dabf platform/chrome: sensorhub: Bound the EC-reported sensor number f2a9289a65d35 platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path 0d601126c7afd platform/x86: ISST: Validate logical CPU id and clos id 649024043d23f platform/x86: ISST: Just allow 2 bits for SST feature enable dde5b9c91e9fc mmc: via-sdmmc: stop card-detect handling on probe failure c847ea4851ecf platform/x86: ISST: Validate socket ID in clos_assoc ioctl beb22ebf76c04 platform/x86: ISST: Validate level in perf mask ioctls 44ec7f1113309 platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer 579eb867d3da6 iommu/vt-d: Force requesting ACS when tboot is enabled d5db80b68ee5c iommu/vt-d: Fix no_iommu to disable platform opt-in a6a4cee09b154 PCI/proc: Warn on writes to kernel-exclusive config space regions e7730acd6a01c PCI/proc: Use file_ns_capable() when checking config space read access d6895710703ea PCI/proc: Avoid spurious runtime PM wakeup on config space accesses d0631a0ab18ad PCI/MSI: Enable memory decoding before restoring MSI-X messages 131900a246137 PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses 838e146ae4cd8 PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] 5a072fc80a753 PCI: meson: Fix GPIO state while requesting PERST# dcaf13f2f4688 PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk f735b9710f0c8 s390/dasd: Propagate partial completion length across ERP recovery 57db27ccc162a s390/dasd: Guard sysfs discipline callbacks against unallocated private data 55f4df40178cd s390/dasd: Do not complete a failed ESE read as successful 991be92489bc7 s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks 23783db5642a7 power: supply: max17040: synchronize work cancellation on suspend f46465aefa911 power: supply: max17040: drop incorrect I2C functionality check 2ec4d203ecb06 power: supply: ucs1002: fix use-after-free on remove c46c205bab0df power: supply: twl4030_charger: cancel workers via devm 442c60c08ec23 power: supply: rt9455: quiesce delayed work before teardown c06028db62085 power: supply: qcom_battmgr: terminate the strings from firmware 6f0ce09d60a0e power: supply: lp8727: fix use-after-free in lp8727_release_irq() 3262977a05b23 power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS 2746d502b12b3 power: supply: cros_usbpd-charger: bound the EC-reported port count 976c10d883a02 power: supply: bq25890: Fix power_supply reference leak 2cfb59dc9df8b power: supply: bq256xx: drain usb_work before freeing the charger 6d2eb93975c07 power: supply: bq24257: fix use-after-free on remove 092acd3c55a40 sctp: fix stream->outcnt underflow on duplicate RECONF responses b55c2561d3fec sctp: distinguish sequence zero from wildcard in reconf lookup b2d6d873b4dfb sctp: fix NULL deref on untransmitted RECONF completion 928fd7920ba37 sctp: drop a chunk if its transport was removed 5c0b2dbbdafc9 sctp: stop processing a packet once its association is deleted fca3ebb63e5c8 nvme-tcp: reject a read that transferred too few bytes bc4013c7cce58 nvme-tcp: fix host memory disclosure on R2T for a read command b96e1ff75e5c0 nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone 313b05de246a1 nvme-pci: disable controller on admin queue IRQ setup failure 66b5af23b6f95 nvme: zero the discard fallback page da7555248e9bb nvme: nvme-fc: Fix nvme_fc_create_hw_io_queues() queue deletion in error path 350087f231c11 lockd: pin next file across nlm_inspect_file lock-drop 697d946853e7e hwmon: (max6621) fix temperature clamp range 7d69a2747441f hwmon: (max6621) fix negative temperature offset and crit readings 213a32146337d ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC 9df45b83d6f68 arm64: compat: Fix decrementing LDM/STM alignment emulation 8a2ec0eb2c5b3 ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion 4d5c460ef8754 openvswitch: only skb_tx_error() a packet we are about to drop 574ae2ac2b314 openrisc: fix arbitrary kernel memory access via or1k_atomic syscall f9dd5cad8d091 ocfs2: fix readdir position truncation on 32-bit kernels 1507c5586ebd3 ocfs2: cluster: fix o2hb_dependent_users leak on pin failure da279037473ae ocfs2: cluster: avoid lock order inversion in o2hb_region_pin() from drop_item c9be4de77f97f ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() 97584e93fc49a ocfs2: validate rl_used against rl_count in refcount block validator 77686fa5bba13 ocfs2: validate lengths in dlm_mig_lockres_handler 24989909d3413 ocfs2: bound namelen in dlm_migrate_request_handler a4adaa722977f ocfs2: always run deallocs on copy-on-write completion ce748ae1181d0 orangefs: skip leading spaces before parsing client debug masks 9c9eacc47c618 orangefs: fix double-free of trailer_buf on readdir copy failure c4c338dcd38b9 regulator: qcom-refgen: correct the regulator type to CURRENT c998890091065 regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata eda08b6bd64f0 regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer 71dc206f2e2a6 RDMA/ucma: Lock the handler in ucma_set_ib_path() 3265d558dfafa RDMA/cxgb4: Cancel reg_work before freeing device on remove a5e1fdc126ab3 qede: Fix NULL pointer dereference in TPA fragment processing 6ca338cf2d386 remoteproc: scp: Fix device reference leak on failed lookup a2e0e01a7fbf0 arm64: dts: rockchip: Fix rk3399-roc-pc-plus analog audio bfc3e5fe778c9 arm64: dts: rockchip: fix eMMC reset polarity on PX30 Ringneck 28cf91db44ce1 rpmsg: glink: smem: order FIFO read after availability check 46101fb96aff2 staging: media: tegra-video: vi: fix probe failure on skipped last port a3783800c9475 staging: media: tegra-video: fix of_node_put() on VIP parse errors 6deb4d7a0c3d9 wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets b77b83f5529a2 udf: reject VAT indexes equal to the entry count 06d0390c37fa6 svcrdma: Fix pcl_for_each_segment for empty chunks cba8543c18cf4 svcrdma: Fix offset arithmetic in read_chunk_range fb43997407bc1 SUNRPC: wait for in-flight client TLS handshake callback 4abb44a29bb51 SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field 89c8e0733e8c4 sunrpc: init gssp_lock before publishing proc entry 81fd7654a8429 SUNRPC: harden gss_unwrap_resp_priv length checks f2591660e0eb2 SUNRPC: harden gss_krb5_unwrap_v2 against short tokens ef948257d1211 SUNRPC: Guard svcauth_gss_release() dispatch on rq_auth_stat 57ac7d899409b SUNRPC: Check svc pool percpu counter allocation 6d74ecc2be120 SUNRPC: always drain cache_cleaner before destroying a cache_detail edb20e8c03aeb sunrpc: route to a populated pool in svc_pool_for_cpu() 0ea5b0c7f212c SUNRPC: svcauth_gss: enforce krb5 token minimum length 56b29d62017c7 SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry 4bf59cb0ea5b0 SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow e05c28bd6043d nouveau/gem: reserve the bo in the info ioctl around the vma lookup 9df36a4846375 mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction d9640239827d6 mpls: reload header after pskb_may_pull() 0a03f9541c06f md: do overflow check for sb->bblog_shift in super_1_load() 792515b2b77cc mailbox: qcom-ipcc: fix duplicate channel allocation across holes 93967bfb17dab libnvdimm/labels: Prevent integer overflow in __nd_label_validate() 3665abc3d2ae8 ipv6: use RCU iterator to dump route exceptions c3457a5aae5fb ip6_gre: fix hardware header length for NBMA tunnels defa0adeff132 ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() c4dc23de4cc75 ipip: fix skb leak in collect_md mode when metadata_dst allocation fails 7cd164f0e1bab kasan: fix cache shrink race with CPU hotplug d90a166ac55c1 Bluetooth: hci_sync: Clear HCI_CMD_PENDING when dropping the last request faf331d3f2145 Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative 7df825df95cf9 Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative 6ebb6d1756820 Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection d5eef07470719 Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb ff76a63e9524b Bluetooth: hci_conn: re-enable advertising only for peripheral role 82425b14f0fb2 Bluetooth: RFCOMM: serialize security confirmation handling d47b8f8c02a3d Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready 1a7196c4fffb3 Bluetooth: hci_uart: Fix false success return in hci_uart_setup() 1c4b02a810329 Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative 1353679268b3c cxl/pmem: Format the nvdimm serial number as unsigned decimal aa436b021e505 cpufreq: schedutil: Fix rate limit overflow 522fa26da24cc dm array: reject an array block whose value size is not the caller's 01a0276706c7b dm raid1: reserve space for NUL-terminator in build_constructor_string() dc731d7fddfd6 dm-era: fix shadowed superblock leak on take-snap failure 80551bf8912c4 bpf: Harden bloom filter sizing and indexing on 32-bit kernels ac280f6872e75 bnx2x: fix double free in bnx2x_init_firmware() error path 1a28aae7f1fc8 Bluetooth: eir: Fix OOB read in eir_get_service_data() 0725f93b395f7 Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU 1b5fb9c40e301 Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU 958cfdc655f7c block: set QUEUE_FLAG_DYING unconditionally in blk_mark_disk_dead() 6eaed64a32e55 auxdisplay: charlcd: cancel backlight work on registration failure 977554ed91b54 ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes 3a6f8d3adbd6f ARM: 9477/1: Disable broken eBPF JIT on the Risc PC 1712e99ddeb19 alpha: marvel: Fix lock ordering in init_io7_irqs() 748d3e1dcecf5 alpha: marvel: Fix irq_set_status_flags to use correct IRQ number a12408ff9a948 alpha/PCI: Fix I/O port accessor argument order in pci_legacy_write() c5a31b4e7e37c ACPI: pfr_update: fix stack buffer overflow in query_capability() 9963a65be2bef hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device 827ded884dbd6 fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration c4d5953582463 forcedeth: fix off-by-one when saving/restoring non-PCI config space 9eb7b3cbe99c9 fbdev: uvesafb: unregister connector callback on init failure 237924f5b9afc fbdev: ssd1307fb: defer I2C transfers from damage callbacks 74de052b4399d fbdev: pvr2fb: correct user pointer annotation and sentinel initializer 302d19fbc7dc7 fbdev: omapfb: panel-dsi-cm: initialize lock before registering display 35b3334800103 fat: restore original value when fat_ent_write failed 3cd611c9f1dbc efivarfs: Rate limit statfs() handler a980ac04ada51 ecryptfs: show filename encryption options 30845ed227475 ecryptfs: release message context on send failure 414a0f04feb06 ecryptfs: reject too-small tag 70 packets 33e050cac8414 ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet 749fa08d8f1b3 ecryptfs: pass packet set buffer size to parser ec1627bcb5b51 ecryptfs: hold msg ctx list lock when cleaning daemon queue 7abf2992c61e8 ecryptfs: fix tag 11 packet exact-fit size check 70fa0cf82e435 eCryptfs: bound the packet-length peek to the user buffer 61ca8cbbf68f7 fs/ntfs3: bound page_lcns[] index by the log record 77d8efd04745c fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame() d23155634a4bc fs/ntfs3: validate dirty page table on log replay 069729282fbec eventfs: Initialize ei->children and ei->list in init_ei() c1c508e892391 HID: mcp2221: validate report size in mcp2221_raw_event() 85d963499f1fe HID: mcp2221: stop device IO before hid_hw_stop 2409779f3096f HID: sensor: custom: Fix field sysfs group cleanup on failure 4cb3ff31d237a HID: roccat: free buffered reports when destroying device 4daf432c94a42 HID: picolcd: clamp eeprom debugfs read to bytes actually received 6cb7f9fed8f40 smb: client: harden DFS cache against invalid target hints 735abe4932355 smb: client: fix copy-paste error in WSL EA length accounting for $LXDEV b89d678f9eafc smb: client: fix ALIGN() overflow in symlink_data() error context loop 3ff9462bb7a06 smb: client: clear ce->tgthint in free_tgts() 7f62817fe049b cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 01b0ec8c397be audit: avoid dropping live tree ref on fsnotify rule autoremove 61f085cb8976c ceph: bound xattr value length in __build_xattrs() eb3e1a1cb1634 ceph: bound num_export_targets array for mds info v2/v3 a294064e0e0f8 ceph: bound copied dentry name length in NFS export get_name c4addccd05bac ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode 19f16f04c2b01 ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock 6e5c6ce252b1e libceph: reject buckets with mismatched CRUSH ids 94ae5145c5206 libceph: validate OSD extent maps before cursor advance 1ce74d1b7770e NFSD: Prevent lock owner use-after-free during client teardown caddbeffab1ea nfsd: revoke copy-notify stateids before dropping their reference 70290db6c9802 nfsd: reject reclaim LOCK after RECLAIM_COMPLETE 1db456ffc22e0 nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE 9caad13b7cfe9 nfsd: initialize copy-notify stateid before publishing it 3be1d8611dae4 nfsd: gate nfs3 setacl by argp->mask 8e4422b05f410 nfsd: gate nfs2 setacl by argp->mask 88bce7e326c36 nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo bee826c00ac90 nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget 59416992d1f58 nfsd: fix version mismatch loops in nfsd_acl_init_request() bfeac42d9074e nfsd: fix cpntf publish race in nfs4_init_cp_state 75268f6cfe26b nfsd: check client ownership when cancelling a copy-notify stateid 977e6f006a7a3 nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref 9e8924bef5b50 nfsd: add filehandle match check to nfsd4_delegreturn() d823bf9285cdf nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() 3ef5e7a01a4d7 nfsd: validate symlink target length in NFSv4 CREATE 322422d66d1a0 nfsd: sample writeback error cursor before async COPY loop f8914ba102d7e nfsd: return NFS4ERR_NOTSUPP for unsupported netloc4 types 6b13d26cc21b6 nfsd: Reset write verifier when async COPY writeback fails 085cfde7c2186 nfsd: release path refs on follow_down() error a080bb69d30f1 NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path 2ef1313239995 NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check 60680ae7243b2 NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock bfd1004ab1237 NFSD: Fix off-by-one in DRC bucket pruning limit 07615c1eb1d00 NFSD: Encode only the status in NFS-ACL v2 GETACL error replies 37a9d25a563f5 ubifs: fix out-of-bounds read in signature length check da7a80ddc610a of: fix out-of-bounds read in of_alias_scan() stem parser b313edfbc0c2a nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation e21cccc29b840 media: vicodec: fix out-of-bounds write in FWHT encoder 1b4fdefd788db media: cec: stm32: prevent out-of-bounds write on RX overflow 60c74f42f5abd lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() c5c60260a07e6 HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature 8f3365ed2a5db fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write b0a6bfac0c3c3 usb: gadget: f_fs: Prevent deadlock during ep0 read loop bec7708eb3b52 usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() eef3e62f90d86 usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() 79dbedf40ad93 usb: gadget: midi2: remove default configfs groups on teardown 95cf1b50ba6b7 usb: gadget: snps_udc_plat: clean up PHY on probe deferral 891a8d11f4d5e usb: gadget: u_audio: Fix use-after-free on sound card disconnect d82cfb853c5d4 USB: phy: fsl-usb: fix missing static keywords f09b3f48ff650 usb: dwc2: gadget: Exit partial power down state when changing USB pull-up c881f5b175fdb staging: greybus: hid: fix SET_REPORT return value 2ac009a65d238 Revert "media: v4l2-dev: fix error handling in __video_register_device()" bd8881c24a952 rapidio: mport_cdev: fix use-after-free in dma_req_free() 261c958b6acb1 powerpc/powermac: fix OF node refcount f4ae79b5f0013 device property: fix infinite loop in fwnode_for_each_child_node() 3a8534664426c tracing: Fix use-after-free with same-name named triggers ceb1707aef582 tracing: Fix crash passing ERR_PTR to kthread_stop() 33ce55b368b64 tracing/user_events: Clear copied tracing state before fork duplication 3eaf78e6571d2 hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() f3ed36a608d8b x86/insn-eval: Move assign_register() out of KVM as insn_assign_reg() 220011fe95fc7 x86/tdx: Fix off-by-one in port I/O handling f668affa147a5 tools/compiler: match glibc 2.42 definition of __attribute_const__ 8bf21ad365730 mm: memcg: stop reclaim when a limit update is superseded 029c9408049f7 mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() 4757542649af5 mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() f93f15541f224 include/linux/list.h: mark list_add and __list_add as __always_inline bdfda99c57638 timers/itimer: Zero-init old itimerval before copy to userspace da268a44d773a powerpc/pseries/iommu: switch to Default DMA window during kdump ebba4d0aeba0e clocksource/drivers/timer-sun4i: Advertise a real minimum delta 7b5771d0bf176 alpha: don't leak hardware-fabricated FP exception bits to user space e5038d7f36037 alpha: fix ieee_swcr_to_fpcr setting FPCR_DNOD unconditionally 184870af0e73f perf/x86/intel/uncore: Fix die ID init and look up bugs d258cdce50ff3 ALSA: aloop: Fix peer runtime UAF during format-change stop 0e6245b2424d1 ALSA: aloop: Fix racy access at PCM trigger e150f273cd8ed ipv4: start using dst_dev_rcu() 40acb0537963f net: dst: introduce dst->dev_rcu 49b02a9d11c73 ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] 19ccd78a4e7c0 net: dst: add four helpers to annotate data-races around dst->dev 73b7a11814838 Revert "arm64: mm: Don't remap pgtables for allocate vs populate" Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_6.6.bb | 6 ++-- .../linux/linux-yocto-tiny_6.6.bb | 6 ++-- meta/recipes-kernel/linux/linux-yocto_6.6.bb | 28 +++++++++---------- 3 files changed, 20 insertions(+), 20 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb b/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb index e8d1f9da07..8a31bbfd09 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb @@ -14,13 +14,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "f92c1779022032aac8134ccb9e75365b19f6c596" -SRCREV_meta ?= "be02dc16fd11e7575782a0e13db080d122a8989a" +SRCREV_machine ?= "9b87590f4fb1e0d54ae9153f9e4fe84cec61f13e" +SRCREV_meta ?= "0d175695cbfd92999ee910a0535f01cbcbe7a0f8" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.6;destsuffix=${KMETA};protocol=https" -LINUX_VERSION ?= "6.6.156" +LINUX_VERSION ?= "6.6.157" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb index 03889d329e..3904ba1d1c 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb @@ -8,7 +8,7 @@ require recipes-kernel/linux/linux-yocto.inc # CVE exclusions include recipes-kernel/linux/cve-exclusion_6.6.inc -LINUX_VERSION ?= "6.6.156" +LINUX_VERSION ?= "6.6.157" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -17,8 +17,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "d9da23dffd2dea6dcfa986e0aad77898a7b373da" -SRCREV_meta ?= "be02dc16fd11e7575782a0e13db080d122a8989a" +SRCREV_machine ?= "a56c1dbe33dcd7b71df3b2703ceb95692edd9579" +SRCREV_meta ?= "0d175695cbfd92999ee910a0535f01cbcbe7a0f8" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_6.6.bb b/meta/recipes-kernel/linux/linux-yocto_6.6.bb index 2632a4ef2f..da3c5dd6ea 100644 --- a/meta/recipes-kernel/linux/linux-yocto_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto_6.6.bb @@ -18,25 +18,25 @@ KBRANCH:qemux86-64 ?= "v6.6/standard/base" KBRANCH:qemuloongarch64 ?= "v6.6/standard/base" KBRANCH:qemumips64 ?= "v6.6/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "f05eb652ce405932e2f47a78f721d1c2c5859e80" -SRCREV_machine:qemuarm64 ?= "2f7ef6e4d70eadf8f8b110cd81cfcafb2bb038fb" -SRCREV_machine:qemuloongarch64 ?= "64e13e9d84c0eb6c16b39081300b49b9862b64f5" -SRCREV_machine:qemumips ?= "1434d63083252688215ad6f5f6af122ead5865ee" -SRCREV_machine:qemuppc ?= "fc69e9d8f99c5c151415f6ba9f1e0428bb7e8e84" -SRCREV_machine:qemuriscv64 ?= "64e13e9d84c0eb6c16b39081300b49b9862b64f5" -SRCREV_machine:qemuriscv32 ?= "64e13e9d84c0eb6c16b39081300b49b9862b64f5" -SRCREV_machine:qemux86 ?= "64e13e9d84c0eb6c16b39081300b49b9862b64f5" -SRCREV_machine:qemux86-64 ?= "64e13e9d84c0eb6c16b39081300b49b9862b64f5" -SRCREV_machine:qemumips64 ?= "7969f6574cf5b126fa6eb28f33d0f2bcd8e7da5e" -SRCREV_machine ?= "64e13e9d84c0eb6c16b39081300b49b9862b64f5" -SRCREV_meta ?= "be02dc16fd11e7575782a0e13db080d122a8989a" +SRCREV_machine:qemuarm ?= "f762f9a437240aebfb663b9f08166b6978411ad3" +SRCREV_machine:qemuarm64 ?= "efde6579b1968f396f4718ad939aeb6859f17012" +SRCREV_machine:qemuloongarch64 ?= "a353a9563cf1625b98d7f33ec845d25cbdef12b6" +SRCREV_machine:qemumips ?= "d7bc8d3db82714ebe46bde3e69f9dcbef7ae6e48" +SRCREV_machine:qemuppc ?= "b8bafdf6f040163a1fe0eb91c7b419452e3590b4" +SRCREV_machine:qemuriscv64 ?= "a353a9563cf1625b98d7f33ec845d25cbdef12b6" +SRCREV_machine:qemuriscv32 ?= "a353a9563cf1625b98d7f33ec845d25cbdef12b6" +SRCREV_machine:qemux86 ?= "a353a9563cf1625b98d7f33ec845d25cbdef12b6" +SRCREV_machine:qemux86-64 ?= "a353a9563cf1625b98d7f33ec845d25cbdef12b6" +SRCREV_machine:qemumips64 ?= "fa48e020815730c4ff228c0e8d42836d68ac4b4b" +SRCREV_machine ?= "a353a9563cf1625b98d7f33ec845d25cbdef12b6" +SRCREV_meta ?= "0d175695cbfd92999ee910a0535f01cbcbe7a0f8" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "8b73de7da85fde281a385e0b26eda9bffd3ca477" +SRCREV_machine:class-devupstream ?= "79643295eba17affbd16ca97f3ef04c90266b28c" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v6.6/base" @@ -44,7 +44,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.6;destsuffix=${KMETA};protocol=https" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "6.6.156" +LINUX_VERSION ?= "6.6.157" PV = "${LINUX_VERSION}+git"