From patchwork Sun Jul 5 22:48:11 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 91758 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8AC13C43458 for ; Sun, 5 Jul 2026 22:48:30 +0000 (UTC) Received: from mail-wr1-f48.google.com (mail-wr1-f48.google.com [209.85.221.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.140107.1783291709860902743 for ; Sun, 05 Jul 2026 15:48:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=rmBdweON; spf=pass (domain: smile.fr, ip: 209.85.221.48, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f48.google.com with SMTP id ffacd0b85a97d-47640541585so1417461f8f.1 for ; Sun, 05 Jul 2026 15:48:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1783291708; x=1783896508; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=CIX6BOHW7NFYH6GwB9/L3bRVq4rnXtDq6fT7jyq5FmQ=; b=rmBdweONLAgryF1IR/24I7Z2LJMPAMmuzJZ1LM957aZGjJT2ZAJKzbNaE8kSmZz5sS W73WZv01XdF7zeD/50RY3GCPzsogiCRrv0g91CyT1sMltRXmJzfPckpbDDiTD34wvE+K FPYtfbHm+n22tJNdyiflkxnNLkSwaqgfrQG+E= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783291708; x=1783896508; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=CIX6BOHW7NFYH6GwB9/L3bRVq4rnXtDq6fT7jyq5FmQ=; b=jNfjLcBevywfuYH5vgxrddVsQ4opWgphJ9KvzoYVqx5n0eo87NTWpc5rQ5zdomZWDI lma8J6FCyuVcqpo+Pc+qno7Tax7KUk3WAC/OC2A5Mu2xLLlF6GJu235tzbDLE+HYoERp ZTA4NtmycFXiR+pFiVvDB8lUZzygtuOyI+yqRPbd1WJNgWauilmr+LtbImBzdNUyWgsN bcUzOY88cX6Bay7EMPrpf31GS1YZ7c2JbT+ix0btRL17ee6LfrWJRzVuOgGcJvn8bFYx 4Qq2L0MU3Y4d90IzePE2Cf8asxaNhsVR7D7PwbIiI3lCqK36Gif0A+QRWVMVZCpUKx5R 6OPg== X-Gm-Message-State: AOJu0Yy11knpRh886PZ5InFe06gj2bdpcVZ+IEWo7pthXmx1Yv+P0j/U yVBWitwP41+RVrZB72PWx+xmGyGUFcPYIuLEAMssNm5JPnEufA7jxYdLjJQj3XT1kUOHh1ZGk34 dM7YT6R4= X-Gm-Gg: AfdE7cnj+tvnH4JAmK2YXy3nMnmG/ZPINo2rgsbaHVwxMmG2nhtOVImDTGWFnuSzQu9 Avpe3E75MLrUn/fBWIau8UJEyAnXQq40zG30CvZzDxvDhe68x0RE2dSq02NIM/wkhN1+SBy8EsE 7NqC7tM0I5reY7mgtLbHvKK7MonCvzDoAPOCzd10vx1dOhzH7Pe16IX1ELZdHvP6U3ni/j4JllE P9ocPIW36XvKkA0LRFj8X1q/gIotO9YzhXq4mTNwTHXpASRCb/9XsM7HWaM5eyUY3mlMw6LC40A BuF/mi+pRAnjMAf6Lak6cUCkR2+bO11yfc4o5xGkT0rGqsOpPjKIOUFwO0qQZALTQSo1ReZdPYM ddFb21woHg0Xakrv1iXoPQ/5mM6skbwP7vkg0JLMX3Lp1NnMoUhbhhxMlIuZAGtRaWFITOrNcSy xcNeOiK7Kz5bs2JqwzXI9XYzpwqg== X-Received: by 2002:a05:6000:41f0:b0:473:53b7:e390 with SMTP id ffacd0b85a97d-47aa96997f9mr8689252f8f.11.1783291708079; Sun, 05 Jul 2026 15:48:28 -0700 (PDT) Received: from FRSMI25-LASER.lan ([2001:861:8010:5750:6d3a:72ff:5857:d2a8]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-47a9de1d905sm19346073f8f.2.2026.07.05.15.48.27 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 05 Jul 2026 15:48:27 -0700 (PDT) From: Yoann Congal To: poky@lists.yoctoproject.org Subject: [meta-yocto][wrynose 1/7] yocto-bsps: update to v6.18.25 Date: Mon, 6 Jul 2026 00:48:11 +0200 Message-ID: <9f65139d96154f8a63d0cfc19200c4044a619f02.1783291504.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 05 Jul 2026 22:48:30 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/poky/message/13930 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: a256b1e6892e7 Linux 6.18.25 ce383ba615339 rxrpc: Fix missing validation of ticket length in non-XDR key preparsing 2937f17bbeefb crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed 051e51aa55fd4 crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed 111dcc6d0f016 crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed 28324a3b62d9c net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() 6473ed16df1fe ALSA: caiaq: take a reference on the USB device in create_card() f8397fc0ff9a4 ALSA: hda/realtek: Add quirk for Legion S7 15IMH 1d30e8d4a07c1 ALSA: usb-audio: apply quirk for MOONDROP JU Jiu c76cf339b8797 f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() 028103656b842 writeback: Fix use after free in inode_switch_wbs_work_fn() feefd5d5b5ee2 ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() 5e7b8f3c539d6 ksmbd: use check_add_overflow() to prevent u16 DACL size overflow 790304c02bf9b ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment 3e5360b422dd7 ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() 299db777ea0cf ksmbd: validate response sizes in ipc_validate_msg() 078fae8f50ade smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path 38a69f08ee82c smb: client: require a full NFS mode SID before reading mode bits 3943e4565aae7 smb: server: fix max_connections off-by-one in tcp accept path 283027aa93380 smb: server: fix active_num_conn leak on transport allocation failure 90089584b2e25 ksmbd: require minimum ACE size in smb_check_perm_dacl() 3fa185e320197 fuse: fuse_dev_ioctl_clone() should wait for device file to be initialized 9ef130452eaf1 fuse: quiet down complaints in fuse_conn_limit_write 1381635aeb7f8 fuse: Check for large folio with SPLICE_F_MOVE 0c7fca880a40a fuse: abort on fatal signal during sync init 7de93abfaae1b fuse: reject oversized dirents in page cache 59970b2586fef f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer 047c0aef6af37 f2fs: fix to avoid memory leak in f2fs_rename() 963d2e24d9d92 f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() 748c5d08f1a92 f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally 0112e6279420d fs/ntfs3: validate rec->used in journal-replay file record check f218fb82877b1 scripts/dtc: Remove unused dts_version in dtc-lexer.l c846ed5ac80fa lib/crypto: tests: Drop the default to CRYPTO_SELFTESTS ca47b87f24571 kunit: configs: Enable all crypto library tests in all_tests.config 95c05443aa34e lib/crypto: tests: Introduce CRYPTO_LIB_ENABLE_ALL_FOR_KUNIT b0ca42c018837 lib/crypto: tests: Add a .kunitconfig file 05f723be4d641 kunit: configs: Enable all CRC tests in all_tests.config 04c61029a3b76 lib/crc: tests: Add a .kunitconfig file 6897bdfa505f9 lib/crc: tests: Add CRC_ENABLE_ALL_FOR_KUNIT e70c01412893c lib/crc: tests: Make crc_kunit test only the enabled CRC variants 28f77fca44497 sched/debug: Fix avg_vruntime() usage c6c87a23de4bd arm64: errata: Work around early CME DVMSync acknowledgement ee5ce483d4280 arm64: cputype: Add C1-Pro definitions 456d6040bb3b2 arm64: tlb: Pass the corresponding mm to __tlbi_sync_s1ish() e785d2751b1db arm64: tlb: Introduce __tlbi_sync_s1ish_{kernel,batch}() for TLB maintenance 243cec136a748 arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI 609624576b6fd arm64: tlb: Allow XZR argument to TLBI ops 00ce8d6789dae ksmbd: validate owner of durable handle on reconnect 3d6682726c2d3 ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger 377bbec04e167 scripts: generate_rust_analyzer.py: define scripts 07cbb1bd42437 crypto: krb5enc - fix async decrypt skipping hash verification 41d151254caa7 crypto: krb5enc - fix sleepable flag handling in encrypt dispatch b7cddf6c01751 drm/amdgpu: replace PASID IDR with XArray e97593f32bd57 net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers c5cedee5d9738 ipv6: add NULL checks for idev in SRv6 paths ecc0eb147806f crypto: authencesn - Fix src offset when decrypting in-place Signed-off-by: Bruce Ashfield Signed-off-by: Richard Purdie (cherry picked from commit 2625f665127f17e0cae887462cbd4f12c57af10c) Signed-off-by: Yoann Congal --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend index 1a80c658..79cdb16d 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v6.18/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "b37320d600b3206435a10fa3c3d9fe9a574256b2" +SRCREV_machine:genericarm64 ?= "6ad892116f3c1cc17c0b9df907607b1b5fe02bb8" From patchwork Sun Jul 5 22:48:12 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 91761 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id F21D7C44503 for ; Sun, 5 Jul 2026 22:48:40 +0000 (UTC) Received: from mail-wr1-f51.google.com (mail-wr1-f51.google.com [209.85.221.51]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.140108.1783291710362214035 for ; Sun, 05 Jul 2026 15:48:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=uWZFd7T/; spf=pass (domain: smile.fr, ip: 209.85.221.51, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f51.google.com with SMTP id ffacd0b85a97d-474560436c3so2307690f8f.0 for ; Sun, 05 Jul 2026 15:48:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1783291708; x=1783896508; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=EGPX+c3La8b+NJRB3bdXfJIQnJMbRX64oZw7SjgZqO8=; b=uWZFd7T/1IfPfwQ6O1c8Kqx6/0+Tf28//G/A3v6HbgHN8cd/QSvAfNeEyKkSzo0JsR WVeNkGffNGvfNUxm1vOZT44MlZrUPut+u37qyN7y23bWQfdpVVWMDER0hhGtA05ew3vF PuTcQOeaQdWKXbNX2AZ676y0hzeB5yrDYoK2c= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783291708; x=1783896508; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=EGPX+c3La8b+NJRB3bdXfJIQnJMbRX64oZw7SjgZqO8=; b=NqfanxNZjMKyF34SbYdpEy/TGrFOr1aWzHM2s69gs1lIB4OcTIKv2b/lHXPYlFPUHc NSoxCsQ6vY0A/VNwzcwdArhVFiD/a5ZKIwaFKREd/liZemHg0Pg0WTQYu3pa6sPbgbL8 fwmMrrdJi78DLUzPkEyjvag7ZgHGob9i4HNDRiSsa3BiCZYaxA1pDMhCwWNHpxmsnmWu pdmvLRGn2l63VhzV3GgYBHPek9hC9gOFUqnKZGJNn2l08+yv5HGvlblLeYOLSgwrQ+lu sYFuDgqnegAN+VGktDVfcr2gXx8EZyt8RqqolDx4tGhEDzPGaal8AhDGRHn/RhTvhvVh 4geQ== X-Gm-Message-State: AOJu0YxHYujtnGonhvoUOhYrYq5lEinn7DICLZphFlYilFCZJ9+G1rXx 47xfHLrRaQ8Z8AimME+X8ndYCoykLwQNy3+CU8kgGb8nol5blbuGRjFamyVbYMeE4rdz2lozcM1 ueTraWCI= X-Gm-Gg: AfdE7cl0TV6GeKNvnFezZwB/po+WeAbewzLfshq0JCTg5P8eBvU+2Vwv3jv+DR1vI5r vv/DgulLIOFg/8yjHPWBByWbDOPEzKFAs2HqcOJcI5IstpaYfSH9efn0yOt2o+hH9tpIBW9WKFc 2BrmaefMo/4/0/PofH07xeJ9jk2m0V2oKb+vNAqPDwjJgSfDKd8rwxboNc8MH340ucxqKkThI46 LR1n8hDyAZMUamCP7+i+RzQ3Dexch/AiS9c26UgBnK1US3CEwO623oldhShTjHiTNrMqz9/6g8a dUTjKvOf2YSkZsVAFP4BW1cHjCu7BV3fmPn1TJGt+krgKLMrjErn3T2zyWRUX3VXHLVJnQ9d0hH KIRs4Twa/t49DhXoK27CVAQszkufuNRFyaRf/qtwHRtGgoVQ3TBBoy8K18GUtlStFuLmhe2rVQ8 T73E6boVoUoPB2iGyaz/YU6+mHDA== X-Received: by 2002:a05:6000:1863:b0:473:1ccc:15be with SMTP id ffacd0b85a97d-47aac6d94demr9709734f8f.39.1783291708573; Sun, 05 Jul 2026 15:48:28 -0700 (PDT) Received: from FRSMI25-LASER.lan ([2001:861:8010:5750:6d3a:72ff:5857:d2a8]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-47a9de1d905sm19346073f8f.2.2026.07.05.15.48.28 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 05 Jul 2026 15:48:28 -0700 (PDT) From: Yoann Congal To: poky@lists.yoctoproject.org Subject: [meta-yocto][wrynose 2/7] yocto-bsps: update to v6.18.26 Date: Mon, 6 Jul 2026 00:48:12 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 05 Jul 2026 22:48:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/poky/message/13931 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: 1fe06068166d4 Linux 6.18.26 d5f59216650c5 Buffer overflow in drivers/xen/sys-hypervisor.c 446ee446d9ae6 xen/privcmd: fix double free via VMA splitting Signed-off-by: Bruce Ashfield Signed-off-by: Richard Purdie (cherry picked from commit 015149c0401132d45a9ac44a073ffde47875d0cd) Signed-off-by: Yoann Congal --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend index 79cdb16d..458089ee 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v6.18/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "6ad892116f3c1cc17c0b9df907607b1b5fe02bb8" +SRCREV_machine:genericarm64 ?= "a75037479dab2b35403aeda227894ee36cd39941" From patchwork Sun Jul 5 22:48:13 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 91762 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E34C4C44502 for ; Sun, 5 Jul 2026 22:48:40 +0000 (UTC) Received: from mail-wm1-f54.google.com (mail-wm1-f54.google.com [209.85.128.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.139312.1783291711389923373 for ; Sun, 05 Jul 2026 15:48:31 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=wq37hqie; spf=pass (domain: smile.fr, ip: 209.85.128.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f54.google.com with SMTP id 5b1f17b1804b1-493b7612475so21183975e9.3 for ; Sun, 05 Jul 2026 15:48:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1783291710; x=1783896510; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=z8jCuuiWkF5b7Ihk2WCcN5MXpBk23gV+GCLmetqjX6U=; b=wq37hqie+G+Knnfim1BOGVpVOhGRPgP8r7tE9OIBkSXrRaZD0xCdRlTAr+4g4uYvm5 koEgQ02/KhHNJmA59zOjNyOHVXFwdrsY5AvaZJ0jGmxgZoKxc0glfs5e8fJEwegOjgyH uk/uyZRKfq7ICNZX4FSvo80DZZLln2TyyKxro= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783291710; x=1783896510; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=z8jCuuiWkF5b7Ihk2WCcN5MXpBk23gV+GCLmetqjX6U=; b=fMm7C8IG/zrvBdU46HraSQb90kDn726JWJoXJ716PGEpm7RVugfeybXea9QPD7oz1L uIlpQ+io28RhF9t9y4QXtFmHo6Tyi6vgmiAJ1YMLJfSyZwDuEFcXCpSwphU5y4zA6CNc v80MYp3doM94Kxs+GnQzPreg0EkW4OTFeMgAlCzd0nGBMMV1zpaU+APdzSp7Xfy8LLjL 47Ve/YY7s//49w7sWeIWXm9Nf6gArmDPhfj9cgd4rf3bQZM2H8NQc8HMZKfv2fyN0803 394nQ/7xgmtd+mRDJ1ani/T6OY31FjMYj68qgaHroNv+w1ZDNtmR9OLbZo+2Y63+FTLL cRWw== X-Gm-Message-State: AOJu0Yw27235gKsk9gcmbCmP9cRgmRwJXmJmx0mgvj2IwVBrUZ/8kEHt vvAN4Rru+qS0MfWtFpcFnw8hYkreJ1Y5t/30zwIQpdXcQbV9/dwYunVtxi47xzCT2wdRhptv2OL U0sPH1iQ= X-Gm-Gg: AfdE7ck1hHNvyUcYqnN7+wcfTqLtQ4YCZVOd728a0eRJ3YqWGkgiindR3WpMyRjcgn2 WzojruotWkVZhQYP6t50ZiC6stqBAbOERXL+d8zYuLwSsKKnUmPcjK9hU7YQxkXVrjt7LpRYETy mi8mNZM3hyO5nTTVqpo9fmbjIRqcNs14qpdpME88jknrU2GcPh90C38PNwRnuyekhIdNnMCTGw2 o+fkMiWEaiUahPTohs6CpLsoE7sJCr9FoEEaBL6sIOizIQZgqk+jo4wHyynzqTtrwxfraEyNboC 6sj0W0H8bhpAeN99C+D4SPmYhurb+YgEGqtadEvnR8Jvr1+wT3qjClfKEtHTmfC5bKPeC2PhmU/ 67XoRx2VkB5C39jzjb+29BKLOHDPzgxmlxG/IL07s8A1bCBY0CQ94D/fIfUfmCA7ZVaYjGOBc9c ozk0ntKy6+sShUnu+jYKoPuVG8qQ== X-Received: by 2002:a05:600c:8b6e:b0:492:40df:d49c with SMTP id 5b1f17b1804b1-493d11f373amr91885825e9.23.1783291709130; Sun, 05 Jul 2026 15:48:29 -0700 (PDT) Received: from FRSMI25-LASER.lan ([2001:861:8010:5750:6d3a:72ff:5857:d2a8]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-47a9de1d905sm19346073f8f.2.2026.07.05.15.48.28 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 05 Jul 2026 15:48:28 -0700 (PDT) From: Yoann Congal To: poky@lists.yoctoproject.org Subject: [meta-yocto][wrynose 3/7] yocto-bsps: update to v6.18.28 Date: Mon, 6 Jul 2026 00:48:13 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 05 Jul 2026 22:48:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/poky/message/13932 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: c31b94a4231c Linux 6.18.28 71a1d9d985d2 xfrm: esp: avoid in-place decrypt on shared skb frags ce685b6a03dc Linux 6.18.27 97d35052a816 ipmi:ssif: NULL thread on error 52a7c9a2823d ipmi:ssif: Remove unnecessary indention 6f820139d16a netfilter: reject zero shift in nft_bitwise b778b6d09542 net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels a8d95d274be2 mm/slab: return NULL early from kmalloc_nolock() in NMI on UP 05b4ed8bef30 mm/page_alloc: return NULL early from alloc_frozen_pages_nolock() in NMI on UP e9b057a44def vmalloc: fix buffer overflow in vrealloc_node_align() bdd9503c3d22 ALSA: aloop: Fix peer runtime UAF during format-change stop 6153878c5255 ALSA: caiaq: fix usb_dev refcount leak on probe failure 30c000a49094 drm/amdgpu: fix zero-size GDS range init on RDNA4 c261d07a8057 ipv6: rpl: reserve mac_len headroom when recompressed SRH grows 3d46009e2ad4 ALSA: caiaq: Don't abort when no input device is available 1d160e30aa42 ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path b8c5acce56e0 driver core: Add kernel-doc for DEV_FLAG_COUNT enum value b42821c15445 crypto: authencesn - reject short ahash digests during instance creation 5cf6d5e5e3b8 net: qrtr: ns: Limit the total number of nodes 20855cef7e65 net: qrtr: ns: Limit the maximum number of lookups 35fb4a0c077c net: qrtr: ns: Limit the maximum server registration per node 5e9f1bad26df iio: frequency: admv1013: fix NULL pointer dereference on str c772e9efe2b1 iio: frequency: admv1013: add dev variable 0adac0ee2c42 media: rc: igorplugusb: heed coherency rules 7ba734027b2b media: rc: ttusbir: respect DMA coherency rules 7d7863018f40 wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling 0bc155c4ca47 wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor 09e1c96594af phy: qcom: m31-eusb2: clear PLL_EN during init 37ef11ab2cf3 phy: qcom: m31-eusb2: Update init sequence to set PHY_ENABLE da4a33e739dc mei: me: add nova lake point H DID 09033be12a82 mei: me: use PCI_DEVICE_DATA macro 38f113f81d3f lib: test_hmm: evict device pages on file close to avoid use-after-free 1e67c82fb778 arm64: mm: Fix rodata=full block mapping support for realm guests 5e07126d7ab8 arm64: mm: Simplify check in arch_kfence_init_pool() 6f977b0472f7 mm: prevent droppable mappings from being locked bbc4bfae9e43 seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode 13e550fbfccd scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails 9da6e314ea5f sched_ext: Documentation: Clarify ops.dispatch() role in task lifecycle 43222ac484f9 rxgk: Fix potential integer overflow in length check 3fb7394a8377 rtmutex: Use waiter::task instead of current in remove_waiter() f1af27cec07a ntfs3: fix integer overflow in run_unpack() volume boundary check d3012690a706 ntfs3: add buffer boundary checks to run_unpack() 83e31039e0d7 NFSv4.1: Apply session size limits on clone path fc8d81f189f0 ktest: Fix the month in the name of the failure directory 9f4ba5966c78 IB/core: Fix zero dmac race in neighbor resolution 4db061a40543 gtp: disable BH before calling udp_tunnel_xmit_skb() b91e535f208c ceph: only d_add() negative dentries when they are unhashed 87c99a50e0fd dm mirror: fix integer overflow in create_dirty_log() a616126cb080 crypto: nx - Fix packed layout in struct nx842_crypto_header 354a27e28447 crypto: nx - fix context leak in nx842_crypto_free_ctx 5c07962fed66 crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx 2ae365e32998 crypto: atmel-sha204a - Fix uninitialized data access on OTP read error 1193c12126d3 crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path 64ea9dbf4c77 crypto: atmel-sha204a - Fix error codes in OTP reads 863d11b39277 crypto: atmel-tdes - fix DMA sync direction 910f335786a0 crypto: ccree - fix a memory leak in cc_mac_digest() 808685bfd124 crypto: hisilicon - Fix dma_unmap_single() direction 9c032781c2b1 crypto: atmel-ecc - Release client on allocation failure 61516b4a5b26 crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup 4d713333dd32 crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit 343a5bf68a8f crypto: acomp - fix wrong pointer stored by acomp_save_req() c524c124e309 can: ucan: fix devres lifetime 1656698656f6 bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays e08d75753db1 Bluetooth: hci_event: fix potential UAF in SSP passkey handlers b4339521bb43 apparmor: use target task's context in apparmor_getprocattr() b7a953374db9 mfd: core: Preserve OF node when ACPI handle is present e88827bb0399 taskstats: set version in TGID exit notifications 83bb57635d7c tcp: call sk_data_ready() after listener migration 69c4d137b22d wifi: rtl8xxxu: fix potential use of uninitialized value 4f3374c990fb x86/shstk: Prevent deadlock during shstk sigreturn ef7ce8f4a341 x86/cpu: Disable FRED when PTI is forced on fdaa42ca370d inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails 371f4dc80601 HID: apple: ensure the keyboard backlight is off if suspending ea43a34452a6 check-uapi: link into shared objects 73ce72edd113 md/raid5: validate payload size before accessing journal metadata 1985cb3247e8 md/raid5: fix soft lockup in retry_aligned_read() 9142f00a9287 md/md-llbitmap: raise barrier before state machine transition 98623c7e2a51 md/md-llbitmap: skip reading rdevs that are not in_sync f7d9d0e4a64f amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 ac858718219f mtd: spinand: winbond: Declare the QE bit on W25NxxJW 134975be170b mtd: spi-nor: sst: Fix write enable before AAI sequence 1e6b0a69bf2c ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() 537e06597702 ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access 6b4bf6519e50 ring-buffer: Do not double count the reader_page f9c279ffee6b ARM: 9472/1: fix race condition on PG_dcache_clean in __sync_icache_dcache() cd2689d625b0 perf annotate: Use jump__delete when freeing LoongArch jumps 5955e053ff00 KVM: nSVM: Always intercept VMMCALL when L2 is active 009c0f726abe KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 83f7e055c138 KVM: nSVM: Add missing consistency check for nCR3 validity 0d1f3fd2664b KVM: nSVM: Drop the non-architectural consistency check for NP_ENABLE aabd785f9565 KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS d79720fc9959 KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT b6656ba26525 KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT c2fad967e652 KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) d6f6371bbea6 KVM: nSVM: Triple fault if mapping VMCB12 fails on nested #VMEXIT 410ea5575c66 KVM: nSVM: Refactor writing vmcb12 on nested #VMEXIT as a helper 72fe7d04a669 KVM: nSVM: Refactor checking LBRV enablement in vmcb12 into a helper 49c8b2395bac KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN 2b922a42b531 KVM: SVM: Add missing save/restore handling of LBR MSRs 18ff4ab16412 KVM: SVM: Switch svm_copy_lbrs() to a macro a5ea402844f1 KVM: nSVM: Delay setting soft IRQ RIP tracking fields until vCPU run a3f0981a5a0e KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 88572f9d83d7 KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT 3a95eb7c6950 KVM: nSVM: Delay stuffing L2's current RIP into NextRIP until vCPU run 3428ed1529a1 KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN 46b3827abc44 KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode 8302e9be9f9c KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts c15392ed9e49 KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 497f6af9679f KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 076ab13fe321 KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 e07ad47e53e9 KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state c098979293da KVM: x86: Defer non-architectural deliver of exception payload to userspace read 26f01d03775e LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() fe06ea2f7b7f userfaultfd: allow registration of ranges below mmap_min_addr 0fedd09ef952 mm/damon/core: use time_in_range_open() for damos quota window start b09958e235f2 mm/damon/core: validate damos_quota_goal->nid for node_mem_{used,free}_bp 8a62c58411cb mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start() c42a7efb9060 mm/mempolicy: fix memory leaks in weighted_interleave_auto_store() 687ccdf58216 mm/vmalloc: take vmap_purge_lock in shrinker 5184e2c065e3 rtc: ntxec: fix OF node reference imbalance b5856e85a1f0 tpm: tpm_tis: stop transmit if retries are exhausted 6503775a5c41 tpm: tpm_tis: add error logging for data transfer 53e6d2d834df tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() 726ce5042359 tpm: Fix auth session leak in tpm2_get_random() error path f8775d9d9062 tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public() 82aa32a4d697 pwm: imx-tpm: Count the number of enabled channels in probe dedaa897b9d7 crypto: talitos - rename first/last to first_desc/last_desc 4861d6cd923f crypto: talitos - fix SEC1 32k ahash request limitation 75d40ccf38ca firmware: google: framebuffer: Do not unregister platform device 5c293a1e1ef0 xfs: fix a resource leak in xfs_alloc_buftarg() fe570daa5193 xfs: start gc on zonegc_low_space attribute updates 27f561bf894e crypto: qat - fix IRQ cleanup on 6xxx probe failure 6d8087a7d0f3 arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins 52e1a80bacc6 mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration d73c3a4070dc mmc: block: use single block write in retry d780f24a4939 randomize_kstack: Maintain kstack_offset per task 95d48e37a130 hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() 6b11dfb3c517 ASoC: Intel: avs: replace strcmp with sysfs_streq 77eb3e79a3e7 drm/amd: Fix set but not used warnings b3166d165753 fs: prepare for adding LSM blob to backing_file b69a8729f84a hwmon: (isl28022) Fix integer overflow in power calculation on 32-bit bff7dbfc326a power: supply: axp288_charger: Do not cancel work before initializing it 988eff645be4 LoongArch: Show CPU vulnerabilites correctly c5dfddc57f1b tpm: avoid -Wunused-but-set-variable 80f54d6f9142 extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' 11baa8b24bcb spi: fix resource leaks on device setup failure 016bc6636573 libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() c2178ff1c70e ipv4: icmp: validate reply type before using icmp_pointers 9b924f3a26b2 RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv f344f04e33bf tracing/fprobe: Reject registration of a registered fprobe before init 38387ccc0fbe slub: fix data loss and overflow in krealloc() 9eed57e9defd drm/arcpgu: fix device node leak e9be7d2fb0b1 net: ks8851: Avoid excess softirq scheduling f826f0000100 net: mctp: fix don't require received header reserved bits to be zero 20ba739bd627 netconsole: avoid out-of-bounds access on empty string in trim_newline() 5424e678f9b3 net: bridge: use a stable FDB dst snapshot in RCU readers be8aad558b46 net: ks8851: Reinstate disabling of BHs around IRQ handler ea0b5d0fe963 net/smc: avoid early lgr access in smc_clc_wait_msg 1c2afc4a1dd1 net: txgbe: fix firmware version check 033370ffb3c9 net: rds: fix MR cleanup on copy error 154fc7fe3f62 net: qrtr: ns: Free the node during ctrl_cmd_bye() 7ef5b521785b arm64: dts: marvell: uDPU: add ethernet aliases d29cafc7e4ee net: txgbe: fix RTNL assertion warning when remove module 491344b826a5 tools/accounting: handle truncated taskstats netlink messages ff591df2cd7f EDAC/versalnet: Fix memory leak in remove and probe error paths 761c37b761ed rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets 76cb9a2d2522 rxrpc: Fix re-decryption of RESPONSE packets 293095ef6188 rxrpc: Fix error handling in rxgk_extract_token() f0d3efd03b2a rxrpc: Fix rxkad crypto unalignment handling ca71ac2de389 rxrpc: Fix conn-level packet handling to unshare RESPONSE packets 861b9a0a1823 rxrpc: Fix memory leaks in rxkad_verify_response() 996b0487b3cd rxrpc: Fix potential UAF after skb_unshare() failure d42d5404782f iio: adc: ad7768-1: remove switch to one-shot mode 4ca3746d9492 iio: adc: ad7768-1: fix one-shot mode data acquisition 54af1a51bb8b ALSA: pcmtest: Fix resource leaks in module init error paths 91c8e75ba1f1 ALSA: pcmtest: fix reference leak on failed device registration 89ed38540e6b ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa2xxx 1ac67f49ae2c ALSA: 6fire: Fix input volume change detection e59ecd4ee3a4 ALSA: caiaq: Handle probe errors properly 30bd9ed68c84 ALSA: caiaq: Fix control_put() result and cache rollback 33df74673674 ALSA: core: Fix potential data race at fasync handling 9678e1b7f512 io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE ea0697129807 io_uring/poll: fix signed comparison in io_poll_get_ownership() 23b4b18bac28 iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() 8661370e0865 block: relax pgmap check in bio_add_page for compatible zone device pages dd154d768db5 io_uring/timeout: check unused sqe fields 81880f84cb36 block: fix zone write plugs refcount handling in disk_zone_wplug_schedule_bio_work() ad0126ffcba8 rbd: fix null-ptr-deref when device_add_disk() fails 4d79d0cf6538 selftests/landlock: Skip stale records in audit_match_record() 127ae2e73e61 selftests/landlock: Fix snprintf truncation checks in audit helpers 1e85a1ae1452 selftests/landlock: Fix format warning for __u64 in net_test a496488e1702 selftests/landlock: Drain stale audit records on init 2fcde49092aa landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() df865a3bb91b selftests/mqueue: Fix incorrectly named file 558aa1e2cd11 sched: Use u64 for bandwidth ratio calculations 961db0b89200 reset: rzv2h-usb2phy: Keep PHY clock enabled for entire device lifetime 06d0bed2552f remoteproc: xlnx: Only access buffer information if IPI is buffered 8ba804869382 RDMA/mana_ib: Disable RX steering on RSS QP destroy dffdcbeabaac PCI: cadence: Use cdns_pcie_read_sz() for byte or word read access 1fe317364cb5 parisc: Drop ip_fast_csum() inline assembly implementation e6e3724c7870 parisc: _llseek syscall is only available for 32-bit userspace c2462d54af3c nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set 8bcc66896e01 nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 d89044889ecd mtd: docg3: fix use-after-free in docg3_release() 2774bcf71473 mm/hugetlb: fix early boot crash on parameters without '=' separator 2691332ad88b mm/damon/core: fix damon_call() vs kdamond_fn() exit race d5b495ba9de0 mm/alloc_tag: clear codetag for pages allocated before page_ext initialization 3c52d0946977 mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused 377f5ad257fb io_uring/register: fix ring resizing with mixed/large SQEs/CQEs cac2106bb9a2 md/raid10: fix deadlock with check operation and nowait requests bdf33ba450af KVM: selftests: Fix reserved value WRMSR testcase for multi-feature MSRs 2b2fee890250 jbd2: fix deadlock in jbd2_journal_cancel_revoke() 858bc8b9edb6 ipmi:ssif: Clean up kthread on errors 8ebb951a284b erofs: fix the out-of-bounds nameoff handling for trailing dirents 33074b1e6c18 ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes 09496158f6eb ALSA: ctxfi: Add fallback to default RSR for S/PDIF 8d3124290a03 ALSA: aoa: Skip devices with no codecs in i2sbus_resume() df462e82e82c ALSA: aoa: i2sbus: fix OF node lifetime handling e79427ee11a8 ALSA: aoa: i2sbus: clear stale prepared state 0ae7d28dda5c mm/zsmalloc: copy KMSAN metadata in zs_page_migrate() 2dde6377ab2e ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() 2e127ceb1c41 net: qrtr: ns: Fix use-after-free in driver remove() da47f8a5958c media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() 4d3a4638e9d2 lib/ts_kmp: fix integer overflow in pattern length calculation dca29d20ab23 PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete 127a1fe59c78 Revert "ALSA: usb: Increase volume range that triggers a warning" 65fc57c8b8f0 PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown 4ca4351d269f crypto: atmel-sha204a - Fix OTP sysfs read and error handling 26506a30e0e2 media: mtk-jpeg: fix use-after-free in release path due to uncancelled work 19ca9475f18f net: strparser: fix skb_head leak in strp_abort_strp() 63d21a3aa010 net: caif: clear client service pointer on teardown 654c818a69c2 ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() fdc150dac1ad media: amphion: Fix race between m2m job_abort and device_run e0a621459c61 PCI: imx6: Skip waiting for L2/L3 Ready on i.MX6SX b6e61356ad24 EDAC/versalnet: Fix device_node leak in mc_probe() b6cb07f02253 hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt 5b6122a67a29 of: unittest: fix use-after-free in testdrv_probe() 7f0f0926f301 of: unittest: fix use-after-free in of_unittest_changeset() 824897e69d7a dt-bindings: display: ti, am65x-dss: Fix AM62L DSS reg and clock constraints 77d55bc8675e crypto: pcrypt - Fix handling of MAY_BACKLOG requests ebc235675f24 crypto: algif_aead - snapshot IV for async AEAD requests efc52947247a mm: call ->free_folio() directly in folio_unmap_invalidate() ff8a7996dc8b spi: ch341: fix memory leaks on probe failures 132e47030b0b spi: imx: fix use-after-free on unbind 75f8f3c3e091 thermal: core: Fix thermal zone governor cleanup issues 2810fc760aaf um: drivers: call kernel_strrchr() explicitly in cow_user.c 5d6c349c9823 vfio/cdx: Fix NULL pointer dereference in interrupt trigger path 7b436ade16cc vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex 08da3594c8ba vfio/virtio: Convert list_lock from spinlock to mutex 7aa27b20e938 vfio: selftests: Fix VLA initialisation in vfio_pci_irq_set() 4e179a60a60c wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() 000134a20bbf wifi: rtw88: check for PCI upstream bridge existence a02363f71a79 zram: do not forget to endio for partial discard requests a516d4388662 Input: edt-ft5x06 - fix use-after-free in debugfs teardown 3c636a3edca9 ocfs2: split transactions in dio completion to avoid credit exhaustion 944a6864aa06 mm: migrate: requeue destination folio on deferred split queue 3f8805b8ca23 arm64/mm: Enable batched TLB flush in unmap_hotplug_range() ecb3e4fa31ff firmware: google: framebuffer: Do not mark framebuffer as busy f51f85c04480 fs: afs: revert mmap_prepare() change d4d0c91a0afc kbuild: rust: allow `clippy::uninlined_format_args` 5447be57b311 rust: dma: remove DMA_ATTR_NO_KERNEL_MAPPING from public attrs 4404d7d2dda4 drm/nouveau: fix nvkm_device leak on aperture removal failure fa9a4c5e69aa device property: Make modifications of fwnode "flags" thread safe 3e8fefd2997c driver core: Don't let a device probe until it's ready c1c2417c60db ibmasm: fix heap over-read in ibmasm_send_i2o_message() ee5737891464 ibmasm: fix OOB reads in command_file_write due to missing size checks 22a16d3eafee misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() b2801647c203 greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames() fb91d4e49fcb greybus: gb-beagleplay: bound bootloader receive buffering 438e357b3cc6 leds: qcom-lpg: Check for array overflow when selecting the high resolution 332884f5eb79 drm/nouveau: fix u32 overflow in pushbuf reloc bounds check 85cbf7fb568a LoongArch: Add spectre boundry for syscall dispatch table c578b48b9fdf ALSA: usb-audio: Evaluate packsize caps at the right place b216de91c0c0 usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change 6f480aa64d4d usb: chipidea: otg: not wait vbus drop if use role_switch 49340680d41f usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() f28a8281792b ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch 9bbbbbd404d3 ALSA: usb-audio: Avoid false E-MU sample-rate notifications 4d7893a137ea ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES Signed-off-by: Bruce Ashfield Signed-off-by: Richard Purdie (cherry picked from commit 0247a9ac12ffbb645d84c671ef34858c3307f01e) Signed-off-by: Yoann Congal --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend index 458089ee..2debe537 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v6.18/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "a75037479dab2b35403aeda227894ee36cd39941" +SRCREV_machine:genericarm64 ?= "5cd75b0b5da06045acdd0c66e50656ab82cb880f" From patchwork Sun Jul 5 22:48:14 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 91763 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C6B07C44500 for ; Sun, 5 Jul 2026 22:48:40 +0000 (UTC) Received: from mail-wr1-f47.google.com (mail-wr1-f47.google.com [209.85.221.47]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.140109.1783291711948495672 for ; Sun, 05 Jul 2026 15:48:32 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=Tgcxx2yv; spf=pass (domain: smile.fr, ip: 209.85.221.47, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f47.google.com with SMTP id ffacd0b85a97d-47d70879764so428580f8f.2 for ; Sun, 05 Jul 2026 15:48:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1783291710; x=1783896510; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=aDI/HvUTcmGorGH99WnlMT7Zdggym+bNSeRBYPlJ5zM=; b=Tgcxx2yvSns76jYh+NRO1mNpzsR0BY74EzY4ONeNlq4nUAAb7NIZTK4oMcGcsTyFOJ DkbsjMmIdHENSyE08zIOd8aP0FPJ8CSXH4vZi0ickZ6dMN25HxwH88+SOoS3BqZvlBmw 8OTPWaf9HxomcGhl1mpwP4d0k0SzX50k8x7rI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783291710; x=1783896510; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=aDI/HvUTcmGorGH99WnlMT7Zdggym+bNSeRBYPlJ5zM=; b=rXhltCkYLIyP4MUUYyc5GDBjLwNuoPUIXuO/R2WX9ZIidYi2DPwuJ34TV6fMtR4u8q voYLexbHhPsWp8OYxUzqqh9Zq0kDf8HNSHOoSDaToWkaHGSY6x0OxRNBssVN+ieot3fq T/IJj+x/H29iN5klDWvQAnDrkoQIs9yGCd+f3XqMGe+8rmDOJ0X1tnsQlF5uWP3QJRrD E9ouIfHLgsV9+hGJEiOXn7arklTdtH28EJc5JEMn5jLlz882X2TpwBYZLnfBpz1m7MA5 Bx1bN8bgb3NPVGD1avxxnKFK8FGpLfN35ET181o0c1EbU12LME48MNBLhkHHYn0doqMn 1w4w== X-Gm-Message-State: AOJu0YxhWu7GqFXp2IZ1G/JtPDywkBdc1pM9m92mRCGjMpUPsRyke1fw +W1kSjkOt6fBaIbYqiRjV/UGY3VQwy69mSTV+NbxBe1FPqNoaBhUWwaC7ar7Ev6fXOB0UPlcQTD PSbLqBfw= X-Gm-Gg: AfdE7ckOWh5ktOzsjuHfhiiZDNB+TTF2ZOIe07Ui9YJ7Uqghc8bxYOKp6Gv+KH1q2g9 dm0toSAgcoetB1fNSgOt7AUOsw8mxirRdd5mpl+mubmZ7K96XLgVkqwoH7roFyMGSzzwT653KvO B0hb2HE7DK5EiTenWFY97FXRU8KWW1Tttmpv+mvZthQLqcpD6sdD3mlwiD1kuF8APtPqAVOBtXI 1rTCP8fkJzf6v7wKOk+eUyERnu10qieptNlcQJcNeCAXnRVRw3fH/VTQbTolT3XZ40HrtsWpS4o Qmb/0UPhG2Etxg3+4peStJADv4cRsONU3hS0d1IUhg7gc8CMyGUI89Sx4B7yuWMPsB8sTY7ejfb o6AJEd5eMeTNJgCJTj7h+x188h2vqUn3FlkYXj2sf6tkmFRR2AyT24j3thG1gHH6lLVQyBPSFfQ DfxvZnlxrMtPnnEUUNQL2Bn1AMXQ== X-Received: by 2002:a05:6000:2c12:b0:460:70ae:f1af with SMTP id ffacd0b85a97d-47aa9c6f3d1mr9609401f8f.27.1783291709691; Sun, 05 Jul 2026 15:48:29 -0700 (PDT) Received: from FRSMI25-LASER.lan ([2001:861:8010:5750:6d3a:72ff:5857:d2a8]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-47a9de1d905sm19346073f8f.2.2026.07.05.15.48.29 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 05 Jul 2026 15:48:29 -0700 (PDT) From: Yoann Congal To: poky@lists.yoctoproject.org Subject: [meta-yocto][wrynose 4/7] yocto-bsps: update to v6.18.31 Date: Mon, 6 Jul 2026 00:48:14 +0200 Message-ID: <7687d6648c177945645bff40856fcf89705b27eb.1783291504.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 05 Jul 2026 22:48:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/poky/message/13933 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: 52386a7b1beb Linux 6.18.32 271cd5429513 drm/amdgpu/vcn4: Avoid overflow on msg bound check 016b64a0313e drm/amdgpu/vcn3: Avoid overflow on msg bound check e9edf9893cf2 vsock/virtio: fix accept queue count leak on transport mismatch 52da6a74ca3d vsock/virtio: fix empty payload in tap skb for non-linear buffers a534e1f985b6 vsock/virtio: fix length and offset in tap skb for split packets 2602f7bb5818 vsock: fix buffer size clamping order 8be786053797 batman-adv: tp_meter: fix tp_num leak on kmalloc failure 5e9dfc07d061 tracing/fprobe: Remove fprobe from hash in failure path a2181464a4a7 tracing/fprobe: Unregister fprobe even if memory allocation fails d83e51202fec tracing: fprobe: optimization for entry only case 52277410cbed tracing: fprobe: use rhltable for fprobe_ip_table 5d12e0ab009a btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak dfd05a16b5c9 btrfs: fix double free in create_space_info_sub_group() error path a4b5c5d2f8c5 btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() d784865ce48f usb: dwc3: Move GUID programming after PHY initialization 476ee6389120 usb: dwc3: Add dwc pointer to dwc3_readl/writel e63942da5e96 usb: dwc3: Remove of dep->regs ce9aaa3af445 sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters 30cf8e05d635 sched/ext: Implement cgroup_set_idle() callback dc34f8d8240f Bluetooth: hci_conn: fix potential UAF in create_big_sync c0a8dca8d556 spi: zynq-qspi: fix controller deregistration ed822a569645 spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() 33e5ce64b817 spi: tegra114: fix controller deregistration 65eafad7a600 spi: tegra20-sflash: fix controller deregistration fafa9a4e831b spi: uniphier: fix controller deregistration b0a97cb0b9ba spi: uniphier: Simplify clock handling with devm_clk_get_enabled() 6542e180fa6e pseries/papr-hvpipe: Fix race with interrupt handler 09c15bbbed53 papr-hvpipe: convert papr_hvpipe_dev_create_handle() to FD_PREPARE() 24d2912962d0 EDAC/versalnet: Fix device name memory leak d281f3ac0d00 block: fix zone write plug removal 7105d9f1387d fbcon: Avoid OOB font access if console rotation fails 1817dd0c350f fbcon: Rename struct fbcon_ops to struct fbcon_par f0d3bb6f5125 drm/amdgpu: rework how we handle TLB fences 13e9ea445191 Revert "drm/amdgpu: don't attach the tlb fence for SI" 576b73b24656 drm/amdgpu: Fix validating flush_gpu_tlb_pasid() fd78e63459ab drm/amdgpu: validate the flush_gpu_tlb_pasid() a9591e4083cc mm/damon/core: disallow time-quota setting zero esz 377c3d5dc952 usb: typec: tcpm: reset internal port states on soft reset AMS d893804e9e3b mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values 4697ed7be9b9 mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values 679e65ae721c mm/damon/core: implement damon_kdamond_pid() 20048f0b38cd LoongArch: KVM: Compile switch.S directly into the kernel f49a00180dfc io_uring/zcrx: warn on freelist violations 1a516d19100e io_uring/zcrx: use guards for locking 0baf4b659cdc batman-adv: bla: put backbone reference on failed claim hash insert b65365d2b1e6 batman-adv: bla: only purge non-released claims 00155f336a5e batman-adv: bla: prevent use-after-free when deleting claims 09dc0d1a1222 batman-adv: stop caching unowned originator pointers in BAT IV 03660dab86f9 batman-adv: stop tp_meter sessions during mesh teardown e1e2194cc725 batman-adv: reject new tp_meter sessions during teardown bf872db54f91 batman-adv: fix integer overflow on buff_pos c9dadb31f360 sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL cd39452498e2 arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 3eb7d0e2d4a0 arm64: dts: qcom: lemans: Correct QUP interrupt numbers f8f546883e87 drm/amdgpu/pm: align Hawaii mclk workaround with radeon 6fed6e9f1062 drm/amdgpu/pm: add missing revision check for CI 0b91ea46bb68 drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission 6fbd52d210c1 drm/amdkfd: Make all TLB-flushes heavy-weight 46bc180e6ede drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds 73af14be7645 drm/bridge: tda998x: Use __be32 for audio port OF property pointer 71614ab2a683 drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ f6dbec5bee72 drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds ed21d6e4ce03 drm/exynos: remove bridge when component_add fails b17175d0a375 drm/amdgpu: zero-initialize GART table on allocation 264ee64cf867 drm/radeon: add missing revision check for CI 672464dd5323 drm: Set old handle to NULL before prime swap in change_handle 87f9b1528e1f drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise fa449b88706e drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() 0afa8b1ef582 drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() cd38e1503e67 drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() f9ad21b90162 drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure 2b5ba326f9d0 drm/udl: Increase GET_URB_TIMEOUT db9530a9873a drm/amdkfd: validate SVM ioctl nattr against buffer size a7735b491a2d drm/appletbdrm: Use kvzalloc for big allocations 1a17ea9861e8 drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() 158def957199 drm/amd/display: Change dither policy for 10 bpc output back to dithering 638e48ee39d0 drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg 63b51e8a9d54 drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg b3d1a0a45c4a drm/amdgpu/vce: Prevent partial address patches a6d5563ba1f0 drm/amdgpu/vcn4: Prevent OOB reads when parsing IB fec8b11b55e5 drm/amdgpu: Add bounds checking to ib_{get,set}_value 44d5a450c04d drm/amdkfd: Add upper bound check for num_of_nodes de137adccf7a drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x f34eda3ff33d drm/amdgpu: gate VM CPU HDP flush on reset lock 2795d325bb5c drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. 77d0b5d11387 drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure 48fb2213e2c2 drm/i915/psr: Init variable to avoid early exit from et alignment loop 132b8d51f0ff drm/msm: always recover the gpu c5b5a0e418b1 drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property c57c861956b8 drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() e9ae6590405d spi: cadence: fix clock imbalance on probe failure 6ac380a0071d spi: cadence: fix unclocked access on unbind 59701f07b19e spi: cadence: fix controller deregistration 6c3e413919a1 spi: mpc52xx: fix use-after-free on unbind 28f28a0f4e32 spi: mpc52xx: fix controller deregistration 336d9ad7560b spi: mpc52xx: fix use-after-free on registration failure 07dc76d31be4 spi: orion: fix clock imbalance on registration failure b809b8d2a114 spi: orion: fix runtime pm leak on unbind ec7a4cff8355 spi: orion: fix controller deregistration 5c03d52ee6ce spi: mxic: fix controller deregistration 2a2973cb3682 spi: imx: fix runtime pm leak on probe deferral 6a405d594207 spi: mpfs: fix controller deregistration b2bdbe293012 spi: img-spfi: fix controller deregistration 4b0fe572a8ea spi: slave-mt27xx: fix controller deregistration 0df72db5a13c spi: sh-msiof: fix controller deregistration aee76c1dd189 spi: rspi: fix controller deregistration 229cc70e4e90 spi: sprd: fix controller deregistration cdbf6baefff0 spi: pic32-sqi: fix controller deregistration 82a95eca235b spi: cavium-thunderx: fix controller deregistration e84a84209b3f spi: npcm-pspi: fix controller deregistration ee2100d08094 spi: coldfire-qspi: fix controller deregistration 047f939c602c spi: bcmbca-hsspi: fix controller deregistration ca3195c7b883 spi: fsl: fix controller deregistration d78c5ca1563c spi: sh-hspi: fix controller deregistration 4422fc2411cb spi: ch341: fix devres lifetime af4f58c18c4c spi: pl022: fix controller deregistration cc8a904cbe6d spi: mtk-nor: fix controller deregistration 894d761a3a85 spi: pic32: fix controller deregistration 4ed7de898bbb spi: omap2-mcspi: fix controller deregistration 09ceedcebc77 spi: fsl-espi: fix controller deregistration b99939bccae9 spi: s3c64xx: fix controller deregistration c74ba7340010 spi: dln2: fix controller deregistration 724520793a2e spi: mt65xx: fix controller deregistration cc525debdfc8 spi: mxs: fix controller deregistration 22ee38cbf536 media: qcom: camss: Add missing clocks for VFE lite on sa8775p 696ac7c49c27 media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init() 095c51bc86d3 media: venus: fix QCOM_MDT_LOADER dependency e56a25247860 media: qcom: iris: increase H265D_MAX_SLICE to fix H.265 decoding on SC7280 9d6217429cd4 media: qcom: camss: Fix csid IRQ offset for sa8775p 8744fd0835dd media: qcom: camss: Fix csid clock configuration for sa8775p dd24998a4a40 media: iris: Fix use-after-free in iris_release_internal_buffers() 1920b4602ec9 media: iris: fix QCOM_MDT_LOADER dependency d172bb82f70c media: omap3isp: drop the use count of v4l2 pipeline cedfde9f45b1 media: i2c: ov08d10: fix runtime PM handling in probe d9e678e8c633 media: i2c: ov08d10: fix image vertical start setting ea91dee38b4e media: staging: imx: request mbus_config in csi_start 731d7ab8dfa2 media: i2c: imx412: Assert reset GPIO during probe 34fe9c3c594e media: dib8000: avoid division by 0 in dib8000_set_dds() def939175ab8 media: pci: zoran: fix potential memory leak in zoran_probe() 84d781069294 arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt 65d7b2aecdfe arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon 5167575b79e2 vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy 75c38af4d919 platform/x86: hp-wmi: Ignore backlight and FnLock events 45890a035e2b spi: aspeed-smc: fix controller deregistration 07938829cc11 spi: amlogic-spisg: fix controller deregistration 6047dc542fa4 media: saa7164: add ioremap return checks and cleanups d6f56e66e8f4 spi: at91-usart: fix controller deregistration 5d707cf9c138 spi: qup: fix controller deregistration 4eccd83f228f spi: meson-spicc: fix controller deregistration 6ca3eaa82812 spi: lantiq-ssc: fix controller deregistration 184dcecc9521 regulator: bd9571mwv: fix OF node reference imbalance 037bcca27835 regulator: s2dos05: fix OF node reference imbalance 890a8bcef309 regulator: act8945a: fix OF node reference imbalance 41ef27dcaa12 media: i2c: imx283: Fix hang when going from large to small resolution f43e30646fc9 media: intel/ipu6: fix error pointer dereference 21fade52ab9f media: videobuf2: Set vma_flags in vb2_dma_sg_mmap dd681c102b4b regulator: rk808: fix OF node reference imbalance e7374c142169 regulator: bq257xx: fix OF node reference imbalance 6c5d4c819d92 media: i2c: imx283: Enter full standby when stopping streaming ecd0c501bd63 media: rc: streamzap: Error handling in probe 63a960b39de9 media: rc: xbox_remote: heed DMA restrictions a8ada5b76115 regulator: max77650: fix OF node reference imbalance 8993d307cf2c spi: st-ssc4: fix controller deregistration 2d51cfca8482 regulator: mt6357: fix OF node reference imbalance c7848b67ef10 staging: media: atomisp: Disallow all private IOCTLs af2dc8b8460c arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux 72972aba49df spi: atmel: fix controller deregistration c66a6f226a5f spi: bcm63xx: fix controller deregistration 7fbb3b4bef02 drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages ea28b33e1b15 media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change() d71fc6874fce media: chips-media: wave5: add missing spinlock protection for send_eos_event() b40ec65e0926 media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init() 6261d5fd172b media: dt-bindings: rockchip,vdec: Mark reg-names required for RK35{76,88} 361e66fb431d media: dt-bindings: rockchip,vdec: Add alternative reg-names order for RK35{76,88} 791598484fd5 media: i2c: ov8856: free control handler on error in ov8856_init_controls() b6e5c80cc2b2 media: renesas: vin: Fix RAW8 (again) bfb2081ba00a media: renesas: vsp1: Fix NULL pointer deref on module unload 4d6e8496486d media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 0ac9ec121d89 drm/msm/hdmi: Fix wrong CTRL1 register used in writing info frames 06d99af8db11 media: uvcvideo: Enable VB2_DMABUF for metadata stream 80d8cc29d3b6 HID: pidff: Fix integer overflow in pidff_rescale 5c0830323689 HID: appletb-kbd: run inactivity autodim from workqueues 59a79938ca55 HID: appletb-kbd: fix UAF in inactivity-timer cleanup path 7812694752a5 HID: playstation: Clamp num_touch_reports 6c1de6e6aa8c Linux 6.18.31 2a93a4fac7b6 ptrace: slightly saner 'get_dumpable()' logic 52dc660c85db Linux 6.18.30 1aa60fea7f63 ksmbd: validate inherited ACE SID length 28f5ed477eef x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache a0e560d15ff1 rust: pin-init: fix incorrect accessor reference lifetime 4af2e62cbcda net: stmmac: Prevent NULL deref when RX memory exhausted 9d1774b33e10 net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() 5cffe3c13689 crypto: caam - guard HMAC key hex dumps in hash_digest_key ef63ef44e86c printk: add print_hex_dump_devel() c9ce18e6bb2c erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() 24da4cc6bf27 erofs: tidy up z_erofs_lz4_handle_overlap() d309d3308de6 hfsplus: fix held lock freed on hfsplus_fill_super() a42090445096 hfsplus: fix uninit-value by validating catalog record size 23b814ec96a8 firmware: exynos-acpm: Drop fake 'const' on handle pointer bbcef208c5da mm, swap: speed up hibernation allocation and writeout 4d7b42941c9b crypto: qat - fix firmware loading failure for GEN6 devices fb6616806f3d crypto: qat - fix indentation of macros in qat_hal.c afece4e3f2cd mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs f597ab044bea mmc: core: Add quirk for incorrect manufacturing date ebad72308271 mmc: core: Adjust MDT beyond 2025 b0f4711b426a octeon_ep_vf: add NULL check for napi_build_skb() 1869da3efe70 hwmon: (powerz) Avoid cacheline sharing for DMA buffer 609936df7ce1 dma-mapping: add __dma_from_device_group_begin()/end() 25c2b77bc463 fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info 1de2db19a602 mm/damon/core: disallow non-power of two min_region_sz on damon_start() d18099f19e53 bpf: Fix use-after-free in arena_vm_close on fork 737adda64f51 io_uring/tw: serialize ctx->retry_llist with ->uring_lock 2563d7880c4d io_uring/kbuf: support min length left for incremental buffers 23900db3787a LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup aaaf41aee5ac LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() 3d44ed6dd219 LoongArch: KVM: Move unconditional delay into timer clear scenery b715ceb72ed9 LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software 1c32824fbdec LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry e50d8573534f LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS 9e1aed63a555 LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() 7d3c27b54253 KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() 931c9c777e35 KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer 7e9f5f62f8d1 KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer 81e7907fe542 KVM: arm64: Fix initialisation order in __pkvm_init_finalise() 7b99369b2c7a KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value 837db0777792 KVM: arm64: Wake-up from WFI when iqrchip is in userspace 8be551f538dc f2fs: fix fsck inconsistency caused by FGGC of node block 03806ec9c4cd f2fs: fix inline data not being written to disk in writeback path 4bdc05b2032b f2fs: refactor f2fs_move_node_folio function 8d269aae6f73 f2fs: fix uninitialized kobject put in f2fs_init_sysfs() b0e4395870eb f2fs: fix node_cnt race between extent node destroy and writeback d438a9fb20d0 f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() f37012cc7c27 f2fs: fix incorrect file address mapping when inline inode is unwritten bedb710b63ae f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage 63c2d2ad40d1 f2fs: fix fiemap boundary handling when read extent cache is incomplete 060029ed542e f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() 464747eae483 mptcp: pm: ADD_ADDR rtx: return early if no retrans 107e956ce544 mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker b74ad2019865 mptcp: pm: ADD_ADDR rtx: free sk if last acd3d3562315 mptcp: pm: ADD_ADDR rtx: always decrease sk refcount 2ad56e434199 mptcp: pm: ADD_ADDR rtx: fix potential data-race cffc6fc446a2 mptcp: pm: ADD_ADDR rtx: allow ID 0 07c2f3c29a8a mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 6f5ba49da8b1 mptcp: pm: prio: skip closed subflows 8a005fe451c7 mptcp: fix scheduling with atomic in timestamp sockopt e6ad28d9d5bf mptcp: fix rx timestamp corruption on fastopen e083d1d8bbec mptcp: sockopt: increase seq in mptcp_setsockopt_all_sf c7362eef3b70 mptcp: sockopt: set timestamp flags on subflow socket, not msk e74f33c8a2c7 mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure fa26c8deed61 mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure 4f269fc3c73a mptcp: fastclose msk when linger time is 0 2146145d6dd6 selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl 2efd6bd0e9b1 selftests: mptcp: check output: catch cmd errors a8f4a82e5629 sched_ext: idle: Recheck prev_cpu after narrowing allowed mask 0c63333ff97b RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path 006a3a5f7534 RDMA/rxe: Reject unknown opcodes before ICRC processing 105bf79a23b8 RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads 8832626a4834 RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() b087913ae882 RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() e01b8c9286c4 RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() 1e2a44875b6a RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() 012796f9541f RDMA/mana: Validate rx_hash_key_len 9ef65af26b2a RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() bb9cb36eaefa RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() ab64c63b460b RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() d886bcdcd00d RDMA/ionic: Fix typo in format string 61df14f306f1 RDMA/ionic: bound node_desc sysfs read with %.64s 44905248dd87 perf/x86/intel: Always reprogram ACR events to prevent stale masks 2546fb8c9acc powerpc/xive: fix kmemleak caused by incorrect chip_data lookup 4b6886ca8114 power: supply: max17042: avoid overflow when determining health 1bf238ead7cc PCI/ASPM: Fix pci_clear_and_set_config_dword() usage 24582f5044bf PCI/AER: Stop ruling out unbound devices as error source 70a5d28dd273 PCI/AER: Clear only error bits in PCIe Device Status 185d51ec3a54 PCI: Update saved_config_space upon resource assignment eafd6f5372d2 mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock cb825c22c002 mm/damon/stat: detect and use fresh enabled value bb1703949dca KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty d6f4e217d663 KVM: x86: check for nEPT/nNPT in slow flush hypercalls c688f3ed73d3 smb: client: validate dacloffset before building DACL pointers be1ef9512a3f smb: client: use kzalloc to zero-initialize security descriptor buffer b8c8a704f0bc smb/client: fix out-of-bounds read in symlink_data() 512d33bc8ea4 smb/client: fix out-of-bounds read in smb2_compound_op() 45dcc815fc55 scsi: mpt3sas: Limit NVMe request size to 2 MiB cf90a96b7a2d s390/debug: Reject zero-length input before trimming a newline e3eee7ea5ec5 s390/debug: Reject zero-length input in debug_input_flush_fn() bd62c0f61bc7 riscv: kvm: fix vector context allocation leak 1912f7879850 RDMA/hns: Fix unlocked call to hns_roce_qp_remove() ac4bf66686bb psp: strip variable-length PSP header in psp_dev_rcv() 51a7dd9cbae9 pmdomain: core: Fix detach procedure for virtual devices in genpd 3df75fff46b1 openvswitch: vport: fix self-deadlock on release of tunnel ports 781f47d64143 nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free 67e1aaf93b49 nvmet-tcp: fix race between ICReq handling and queue teardown c77c82935c0a nvme-apple: drop invalid put of admin queue reference count 913d556e4bd1 md/raid10: fix divide-by-zero in setup_geo() with zero far_copies b7df9fbd4869 libceph: Fix slab-out-of-bounds access in auth message processing 7cdf18608302 lib/scatterlist: fix temp buffer in extract_user_to_sg() 8fbba6829057 lib/scatterlist: fix length calculations in extract_kvec_to_sg 8637dfb4c1d8 lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() cbb032fc7432 iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update 3ea9ce757bd3 iommu/vt-d: Block PASID attachment to nested domain with dirty tracking 0d96652adc8f iommufd: Fix return value of iommufd_fault_fops_write() afbafeddf23d isofs: validate block number from NFS file handle in isofs_export_iget e69da8eeab74 isofs: validate Rock Ridge CE continuation extent against volume size 1919acc5876c dm-verity-fec: correctly reject too-small hash devices 9a484c8149b2 dm-verity-fec: correctly reject too-small FEC devices 52b109f1b875 eventfs: Hold eventfs_mutex and SRCU when remount walks events 5af6a879e915 dm: fix a buffer overflow in ioctl processing cb7c6a89e5d8 dm: don't report warning when doing deferred remove 85311a585a26 dm-thin: fix metadata refcount underflow fb388eb58c1b btrfs: fix missing last_unlink_trans update when removing a directory 9a060970fd7b btrfs: fix double free in create_space_info() error path 48102d889090 ASoC: qcom: q6apm: remove child devices when apm is removed 7cab9f2ad51c ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens 6d43355a5b9e ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop 4e550b59315d ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error 846fcce3a6bb ASoC: fsl_easrc: fix comment typo 3a5287c47b13 ASoC: ES8389: convert to devm_clk_get_optional() to get clock 65aabf889668 ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table 54a44bbead39 cpuidle: powerpc: avoid double clear when breaking snooze a0780aeea166 clk: microchip: mpfs-ccc: fix out of bounds access during output registration 9eccdb76ad5e clk: imx: imx8-acm: fix flags for acm clocks b528c7ffdc3e tracing/probes: Limit size of event probe to 3K d50ef3553acb spi: topcliff-pch: fix use-after-free on unbind b3bdc7a8dd44 spi: topcliff-pch: fix controller deregistration 4b16c06da763 thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp 3933dfb360e0 thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata eb295d2b6e70 thermal: core: Free thermal zone ID later during removal 1873eb81c65d udf: reject descriptors with oversized CRC length b1040af58771 tracefs: Fix default permissions not being applied on initial mount 998f43196d73 spi: microchip-core-qspi: control built-in cs manually ec9d0ddbde60 spi: microchip-core-qspi: don't attempt to transmit during emulated read-only dual/quad operations d945d71bbad5 spi: microchip-core-qspi: fix controller deregistration 121d1f253aed ice: fix double free in ice_sf_eth_activate() error path c1f261863e65 ibmveth: Disable GSO for packets with small MSS 4f82f046f913 hv_sock: Return -EIO for malformed/short packets 317e434e26af hv_sock: Report EOF instead of -EIO for FIN d1b9424f7393 hv_sock: fix ARM64 support cb028f72fb3b hv: Select CONFIG_SYSFB only for CONFIG_HYPERV_VMBUS 5b958822126d gpio: of: clear OF_POPULATED on hog nodes in remove path bbf63275d4a5 extcon: ptn5150: handle pending IRQ events during system resume 196efa8b254b cifs: change_conf needs to be called for session setup 064f2e49199c cifs: abort open_cached_dir if we don't request leases 281a0014f46f block: only read from sqe on initial invocation of blkdev_uring_cmd() f17d52107532 block: add pgmap check to biovec_phys_mergeable cb27e43c0511 pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy() 8aacf87718b9 arm64/fpsimd: ptrace: zero target's fpsimd_state, not the tracer's c34c41446acf af_unix: Reject SIOCATMARK on non-stream sockets aa4d6fee0449 hwmon: (corsair-psu) Close HID device on probe errors 370d4deba194 clk: rk808: fix OF node reference imbalance 13a0f0204d54 hwmon: (ltc2992) Fix u32 overflow in power read path 357ef14bfde2 hwmon: (ltc2992) Clamp threshold writes to hardware range 22b365ba1af3 x86/efi: Fix graceful fault handling after FPU softirq changes c9b620425fd0 parisc: Fix IRQ leak in LASI driver 23ae72e8c2f1 platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration 2b56d7903ab8 net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler 14ef6fd18db2 net/rds: handle zerocopy send cleanup before the message is queued 3d47d62c1348 netpoll: pass buffer size to egress_dev() to avoid MAC truncation 1bca036fe360 net: libwx: use request_irq for VF misc interrupt e70cfb40c3a9 ip6_gre: Use cached t->net in ip6erspan_changelink(). 33c5bb50b9c4 net: libwx: fix VF illegal register access 62951b49754a pseries/papr-hvpipe: Fix the usage of copy_to_user() 2b1335edaac5 pseries/papr-hvpipe: Fix & simplify error handling in papr_hvpipe_init() 0479b6e9f999 pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace 0ff2b713f406 sound: ua101: fix division by zero at probe aab56b95bee3 perf/x86/intel: Improve validation and configuration of ACR masks 4bf22a0afb27 mptcp: pm: ADD_ADDR rtx: skip inactive subflows fbe0e6197225 net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo 52070a91956f LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT 8f75597dfc67 mm/hugetlb_cma: round up per_node before logging it 10c252577ccd arm64: signal: Preserve POR_EL0 if poe_context is missing 34bdcfb496b2 mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() 83b131a214f1 KVM: arm64: Fix kvm_vcpu_initialized() macro parameter 7baa02b0ae9d fanotify: fix false positive on permission events d71240d2609b staging: vme_user: fix root device leak on init failure 1b66f16a571a spi: s3c64xx: fix NULL-deref on driver unbind 4f0dd529990d spi: zynqmp-gqspi: fix controller deregistration 93f83b3a50ef spi: sun6i: fix controller deregistration 9df7d2530412 spi: ti-qspi: fix controller deregistration 9aea3d4f23ca spi: sun4i: fix controller deregistration 40db1bd1ffc6 spi: syncuacer: fix controller deregistration ca488ac3b083 rust: allow `clippy::collapsible_if` globally 16a7e845c3a0 rust: allow `clippy::collapsible_match` globally 4ea3b2e469fc rust: drm: gem: clean up GEM state in init failure case 32bd343803d4 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() 1810e42ff671 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() 741e6024e315 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() 77981a507aa0 Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt 624fb79dadc1 Bluetooth: btmtk: validate WMT event SKB length before struct access 3485c7236c59 Bluetooth: virtio_bt: validate rx pkt_type header length b40cdd1b1370 Bluetooth: virtio_bt: clamp rx length before skb_put 53ad20efd20a LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() 05b63fbddfca selinux: prune /sys/fs/selinux/user 058a5e705424 selinux: prune /sys/fs/selinux/disable 52a5d9608da5 selinux: prune /sys/fs/selinux/checkreqprot e5c12a115ed5 selinux: shrink critical section in sel_write_load() 71e68e863a7e selinux: don't reserve xattr slot when we won't fill it d350fef4bc24 selinux: use sk blob accessor in socket permission helpers e3e722ea88e0 selinux: fix avdcache auditing 7db99a09b3bc xfrm: ah: account for ESN high bits in async callbacks 9d5047782f9b ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() 4980162de555 xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete 0fe995ac77a8 xfrm: provide message size for XFRM_MSG_MAPPING c73fdf2e911d x86/efi: Restore IRQ state in EFI page fault handler ef49059fce11 powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o 9ef79d48f137 ALSA: seq: Fix UMP group 16 filtering 878c19dd4fbe ALSA: core: Serialize deferred fasync state checks d761428f6cc7 ALSA: firewire-tascam: Do not drop unread control events d829caccb426 ALSA: hda/realtek: Fix speaker silence after S3 resume on Xiaomi Mi Laptop Pro 15 ac3e9b55b7da ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger f8ad9ef77156 ALSA: hda: cs35l56: Propagate ASP TX source control errors 0c1c186f8f48 usb: typec: tcpm: fix debug accessory mode detection for sink ports 2a71e01b2cf9 usb: ulpi: fix memory leak on ulpi_register() error paths 6ef872d157f4 USB: serial: option: add Telit Cinterion LE910Cx compositions 52a0cf7cde26 USB: omap_udc: DMA: Don't enable burst 4 mode 411f2f7274e3 ALSA: usb-audio: Fix UAC3 cluster descriptor size check be09b47ed867 ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() 00e095dc5787 ALSA: usb-audio: midi2: Restart output URBs on resume 762a6ccf391d usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl 8247f52d8221 usb: usblp: fix heap leak in IEEE 1284 device ID via short response 658d2e46c2e9 wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task d7029879bafd wifi: b43: enforce bounds check on firmware key index in b43_rx() 9e28654f79f4 wifi: mac80211: remove station if connection prep fails e9f1081bc775 wifi: ath5k: do not access array OOB 7577a4b8a10f wifi: mac80211: use safe list iteration in radar detect work 4f9a4ae8d2c1 wifi: rsi: fix kthread lifetime race between self-exit and external-stop e131562d6f2b wifi: mac80211: drop stray 'static' from fast-RX rx_result 9d1bc1558029 wifi: b43legacy: enforce bounds check on firmware key index in RX path 6d55948a62ab wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work 0aa63d33742b wifi: mt76: mt7921: fix a potential clc buffer length underflow 6fc7c8b414ce wifi: mt76: mt7925: fix incorrect length field in txpower command 5860ab3ddeaa wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr 6f49f94f3b11 exit: prevent preemption of oopsing TASK_DEAD task 8d09618840b9 net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked 33fe95663d10 net: stmmac: Disable EEE RX clock stop when VLAN is enabled 53e821fd9bae KVM: SVM: check validity of VMCB controls when returning from SMM edd446ee7cd3 net: af_key: zero aligned sockaddr tail in PF_KEY exports 9dea2aeabc86 smb: client/smbdirect: fix MR registration for coalesced SG lists ff9e4d5e9bba mptcp: sync the msk->sndbuf at accept() time 0d00b9015069 flow_dissector: do not dissect PPPoE PFC frames 6200f41d6fcf ceph: fix num_ops off-by-one when crypto allocation fails 738ec97b1855 KVM: x86: Fix shadow paging use-after-free due to unexpected GFN ccee9833e33b ksmbd: rewrite stop_sessions() with restartable iteration 21a316f27095 spi: rockchip: fix controller deregistration 8c4339dbab49 wifi: mt76: mt7925: fix incorrect TLV length in CLC command 0f0c0c1397a4 ASoC: SOF: Don't allow pointer operations on unconfigured streams 9a2d03d324b2 iommufd: Fix a race with concurrent allocation and unmap 2c5b8eeea006 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() 540fa6a86b91 ACPI: video: force native backlight on HP OMEN 16 (8A44) 70446f52251f ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug 42f83350394a ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770 AIO 7f0a53c2b94c ACPI: scan: Use acpi_dev_put() in object add error paths da9b065cedfd fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free bc13fce9eeec ipmi:si: Return state to normal if message allocation fails 42432b579a59 ipmi: Check event message buffer response for bad data 3d37d2165df9 ipmi: Add limits to event and receive message requests 00d91bfdce50 scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() d31a849ff501 Linux 6.18.29 3eae0f4f9f72 rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present Signed-off-by: Bruce Ashfield Signed-off-by: Richard Purdie (cherry picked from commit 6b8be50d58d22b3ad80c57a6b0ef938046c0bb3a) Signed-off-by: Yoann Congal --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend index 2debe537..c0ca3aef 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v6.18/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "5cd75b0b5da06045acdd0c66e50656ab82cb880f" +SRCREV_machine:genericarm64 ?= "3acde948b7470a96df7e730a2119ffaee380d6b1" From patchwork Sun Jul 5 22:48:15 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 91764 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A5B62C44501 for ; Sun, 5 Jul 2026 22:48:40 +0000 (UTC) Received: from mail-wr1-f49.google.com (mail-wr1-f49.google.com [209.85.221.49]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.139313.1783291713057827000 for ; Sun, 05 Jul 2026 15:48:33 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=jtlEUCgC; spf=pass (domain: smile.fr, ip: 209.85.221.49, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f49.google.com with SMTP id ffacd0b85a97d-45fd464d51fso1154441f8f.3 for ; Sun, 05 Jul 2026 15:48:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1783291711; x=1783896511; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=tXWxh1stz6ksySHuF0f9WzQwCtYvB8HtxqLFbtwqLmg=; b=jtlEUCgCUUFDKKlqH27JCkcJvWrq2SjGZTpJocJesHMPfZ3PvyVi94RwdEySb4VGqr jQCzfyGzqVbwz+pY0px4uI87k10uY/HOd3MiKBLmltRpjs/LDCnTuwnaqe7CqkG2x/bd dCxycZn/DOiE3od2/LcKSRnugtbjce6efHl3k= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783291711; x=1783896511; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=tXWxh1stz6ksySHuF0f9WzQwCtYvB8HtxqLFbtwqLmg=; b=bMu4+kupid7c+tuIaDv64cSZXjX3bmk82Bh7IoDiynaJ/DNo03Xa4vs5W9Doxrcw/U 75+Lrz6EviEfZ9RwBDf0E22H6Kuo3AMAIC87YBgKUBhtaxB2a+kuySdpkSfLoZK4TRxn +hDJpM4+9WVt1HztMkAtGOSmdq74ZGUXpNNjGkrK/mLbBBaqQbi+ArrCC62fRp1Qil6F 2O4J43R2ByclNjimELbrKZ0+/XSEJkY+oFpBzx2GrQ3AYsE6he5irnRbG5u7rXIIknyv 0tKUb19jZBmFGt60ldknG8HqMLrlfq7X4EaOURu4WKkxHSg9lRGqTJG2WciCkIXebQYa sTPw== X-Gm-Message-State: AOJu0YxjeJ0Xvj7I9fgXzt7NOUoX4jHritgR7UWvvXa4cSUlepV7LFd/ /EZyAkXOIwh8XwiL+oRK92/PLDATG45vEWzMXvuEcqmmle1eabrEXDi16RInaKKOZmjc6Rg4RDZ In755B9U= X-Gm-Gg: AfdE7ckbxru+jq+O5C6nNc+WHta56/tsfFItAFWADEE0IWgxYAcq1NyNAJmuPx7wsyW ekDmIglfVFJT1q1uD5R+Qm3jPgyg+OitBtxlInGATttBHS+wp6svdyfw3TojzZquAdE9kml2zxd 5v/r037gQJt55myj0+WJ3VuBN1HWWUQ9oYaK8ajzj2ZNkqKPAI7ZxXWkQ15sPrBPLmmWo6sNyp4 GGg1FbzAQ62yQNls62HLBdgs6R4DMwGoXBr/8xAY2KmXUBKtxTq7JaCmqaj9eLw9t+QbJh3ZKMt fr2W8XEoQGAAuH4YCuZmZpL4phvvs6obwpVlAoTjE/cbvXctOg+BvlhM/cq6OiZ7ZdnF7xf/oHM ae2m0Ijn2dDy3TG+TSsW33g6FSR96N8Sv+qOjE2YU7oAuenEko/v/CPGSCwp7LsT6JZEELHHhnu rWXGdQQ94vETvHmVWHLfjQipBP1pXNk4Yhjv7m X-Received: by 2002:a05:6000:184a:b0:474:cd60:115a with SMTP id ffacd0b85a97d-47aa9791148mr10786381f8f.18.1783291710396; Sun, 05 Jul 2026 15:48:30 -0700 (PDT) Received: from FRSMI25-LASER.lan ([2001:861:8010:5750:6d3a:72ff:5857:d2a8]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-47a9de1d905sm19346073f8f.2.2026.07.05.15.48.29 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 05 Jul 2026 15:48:29 -0700 (PDT) From: Yoann Congal To: poky@lists.yoctoproject.org Subject: [meta-yocto][wrynose 5/7] yocto-bsps: update to v6.18.33 Date: Mon, 6 Jul 2026 00:48:15 +0200 Message-ID: <45f160bedcad0dcf2961ad6a8b9399246e3183b9.1783291504.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 05 Jul 2026 22:48:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/poky/message/13934 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: 83657f418961 Linux 6.18.33 664736cc1f95 netfs: Fix potential uninitialised var in netfs_extract_user_iter() e9a23ec9461e selftests/bpf: Remove test_access_variable_array ff375cc75f91 net: skbuff: propagate shared-frag marker through frag-transfer helpers 3bd9e113d500 net: skbuff: preserve shared-frag marker during coalescing 640e37f58f99 net/rds: reset op_nents when zerocopy page pin fails 6bf4253af814 spi: sifive: fix controller deregistration 27fcf3dd04df spi: sifive: Simplify clock handling with devm_clk_get_enabled() fac9cfad2f90 f2fs: fix false alarm of lockdep on cp_global_sem lock a4a0340d20ab sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before 255c3998dae8 sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new a3c44e77f379 perf/x86/intel: Disable PMI for self-reloaded ACR events b6437e6f8f3d btrfs: do not mark inode incompressible after inline attempt fails 2647b8fe2f1f smb: client: Use FullSessionKey for AES-256 encryption key derivation 244575d0c695 eventfs: Use list_add_tail_rcu() for SRCU-protected children list 4fa42a249e8c drm/v3d: Reject empty multisync extension to prevent infinite loop 4e003e2fb6d3 drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init ab9256936b58 drm/gma500/oaktrail_lvds: fix hang on init failure 6d835a99474c drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup 9a34b94832c3 drm/ttm: Convert -EAGAIN from dmem_cgroup_try_charge to -ENOSPC 39fdac6be02e drm/xe/dma-buf: fix UAF with retry loop 20a99ea1e2fd drm/xe/dma-buf: handle empty bo and UAF races c76273c3eba9 drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() 65a3a1cf29eb drm/i915: skip __i915_request_skip() for already signaled requests 9022cb9ac0c2 iommu/vt-d: Avoid NULL pointer dereference or refcount corruption 88397fad7914 iommu/vt-d: Fix oops due to out of scope access 637b7ce89e54 iommu/vt-d: Disable DMAR for Intel Q35 IGFX 4d2b37abda95 libceph: handle rbtree insertion error in decode_choose_args() 0f3604cbe4df libceph: Fix potential out-of-bounds access in crush_decode() f2f95e6d4b97 libceph: Fix potential null-ptr-deref in decode_choose_args() 48df98d12b15 libceph: Fix potential out-of-bounds access in osdmap_decode() 0de5cb2d61d0 irqchip/gic-v5: Allocate ITS parent LPIs as a range 2cbd4abe413e irqchip/gic-v5: Support range allocation for LPIs e6550b17cc0e irqchip/gic-v5: Move LPI allocation into the LPI domain 84ff9ae64d9b irqchip/meson-gpio: Use the correct register in meson_s4_gpio_irq_set_type() 5b0756b6b757 irqchip/riscv-imsic: Clear interrupt move state during CPU offlining 42558732af4a nfsd: fix file change detection in CB_GETATTR fc6db1e47c55 netfs: fix error handling in netfs_extract_user_iter() 1a78bea6a5e9 powerpc/warp: Fix error handling in pika_dtm_thread 3f6fb0211b39 virt: sev-guest: Do not use host-controlled page order in cleanup path 690b7ca1f9b3 xfs: fix memory leak on error in xfs_alloc_zone_info() b0bd7a850e1f x86/kexec: Push kjump return address even for non-kjump kexec f0a0f01787ec iommu/amd: Bounds-check devid in __rlookup_amd_iommu() 252c5051dba9 io-wq: check that the predecessor is hashed in io_wq_remove_pending() d5bd8b4e39cf ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size 3fa13ceefbc5 ceph: fix a buffer leak in __ceph_setxattr() 9ebb7eba1237 btrfs: only release the dirty pages io tree after successful writes d7b2de5d9862 ALSA: usb-audio: qcom: Check offload mapping failures 09141583bd97 ALSA: usb-audio: Bound MIDI endpoint descriptor scans f9c184a83574 ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans 651760f57fe0 ALSA: hda/realtek: Add quirk for Samsung Galaxy Book5 360 headphone a424946e00f2 ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Laptop 16-ag0xxx d3e03c25d520 accel/rocket: Fix prep_bo ioctl leaking positive return from dma_resv_wait_timeout() 9b718ebe0e97 platform/x86: lenovo-wmi-other: Fix tunable_attr_01 struct members b6c0f545c8f9 platform/x86: lenovo-wmi-helpers: Move gamezone enums to wmi-helpers 1b2dca1f9b5a platform/x86: intel: Move debugfs register before creating devices d25b863e2dff drm/i915/dp: Fix VSC dynamic range signaling for RGB formats 318b995cffcf drm: Replace old pointer to new idr d31c6b334215 drm/loongson: Use managed KMS polling 97a05b0ae9ea smb/client: fix possible infinite loop and oob read in symlink_data() 0ea9d6e036be nvme-apple: Reset q->sq_tail during queue init 527cb4a55155 Bluetooth: btmtk: accept too short WMT FUNC_CTRL events 151cfe527f0a media: staging: imx: configure src_mux in csi_start 7c96f2e5b6fb ata: libata-scsi: fix requeue of deferred ATA PASS-THROUGH commands d92229dfa3f9 fuse: avoid 0x10 fault in fuse_readahead when max_pages == 0 3ab135238832 HID: core: Fix size_t specifier in hid_report_raw_event() 301338b8edad HID: core: introduce hid_safe_input_report() 509c26050650 HID: pass the buffer size to hid_report_raw_event 8adc988e9f20 KVM: x86: Fix Xen hypercall tracepoint argument assignment b22a2da8792a KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic 0d419c23bb11 KVM: Reject wrapped offset in kvm_reset_dirty_gfn() d9017d233258 audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV e029cbd8c06d net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled 1dced0725e2f netfilter: nft_ct: fix missing expect put in obj eval a9f76de38ba3 Revert "ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn" 722b91d5086a idpf: fix double free and use-after-free in aux device error paths c4a8998aafb8 cgroup/dmem: Return -ENOMEM on failed pool preallocation bddf59818ae5 net: ena: PHC: Check return code before setting timestamp output e35f3550c5b4 audit: fix incorrect inheritable capability in CAPSET records 430b05f6c918 netfilter: nf_conntrack_sip: get helper before allocating expectation 95e8ae9af2a6 net: ena: PHC: Fix potential use-after-free in get_timestamp 10addc25fa17 workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path f43240068791 i40e: Cleanup PTP pins on probe failure a1c5672faf8e crypto: af_alg - Cap AEAD AD length to 0x80000000 b4e1c03b876c sched/fair: Revert force wakeup preemption ec4f6da3373d sched/fair: Fix wakeup_preempt_fair() for not waking up task ce8ac8432fd7 net: mana: Init gf_stats_work before potential error paths in probe 45d6c6c10b8b net: mana: Fix use-after-free in reset service rescan path 80c025618524 net: airoha: Fix VIP configuration for AN7583 SoC 81a2a3607866 net: airoha: Use gdm port enum value whenever possible 106581064439 net: airoha: Remove code duplication in airoha_regs.h db9af8a2efad net/sched: sch_pie: annotate more data-races in pie_dump_stats() 90619fdedfb9 net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() 7645ead02939 net: airoha: Move entries to queue head in case of DMA mapping failure in airoha_dev_xmit() 95fdee73c39c rtla: Fix parse_cpu_set() bug introduced by strtoi() 26b4ea23f511 net: airoha: Fix a copy and paste bug in probe() dbbd60129f79 bpf: Fix sync_linked_regs regarding BPF_ADD_CONST32 zext propagation 22f72b1dccfe PCI: Initialize temporary device in new_id_store() 735439394dde Revert "papr-hvpipe: convert papr_hvpipe_dev_create_handle() to FD_PREPARE()" d66dc9505935 Revert "pseries/papr-hvpipe: Fix race with interrupt handler" 1dcd36420af2 futex: Drop CLONE_THREAD requirement for private default hash alloc dcb89deed40b arm64: Reserve an extra page for early kernel mapping b9d854388988 kselftest/arm64: Include for user_gcs definition 5704a90c0970 net/sched: cls_flower: revert unintended changes 3f4a3f740c23 sfc: fix error code in efx_devlink_info_running_versions() 9c54e76f8d6e net: tls: fix strparser anchor skb leak on offload RX setup failure f5c5692a61f7 ice: add dpll peer notification for paired SMA and U.FL pins f5f1b59bdb12 dpll: export __dpll_pin_change_ntf() for use under dpll_lock 47e53940451c dpll: Add notifier chain for dpll events 8bcfd78bbc32 dpll: Allow associating dpll pin with a firmware node a723643ee055 ice: fix missing dpll notifications for SW pins 3b3aab57e33f ice: fix SMA and U.FL pin state changes affecting paired pin 0c56810ce1ba ice: fix missing SMA pin initialization in DPLL subsystem c3cad2ae8088 ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw 1e9185b13ce5 ice: fix NULL pointer dereference in ice_reset_all_vfs() b166453d8d01 iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler e469b1ff3319 iavf: wait for PF confirmation before removing VLAN filters b0173c36977c iavf: stop removing VLAN filters from PF on interface down 033fa40dff77 iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING 864577384d72 page_pool: fix memory-provider leak in page_pool_create_percpu() error path c169c5837525 bonding: 3ad: implement proper RCU rules for port->aggregator f2edb41645bf bonding: print churn state via netlink c1e0b5eccdf0 net: airoha: Do not return err in ndo_stop() callback aaad53a55812 net: airoha: fix BQL imbalance in TX path d1469eb93af7 drm/xe/gsc: Fix BO leak on error in query_compatibility_version() bebce43f34b5 drm/xe/eustall: Fix drm_dev_put called before stream disable in close 753b149d5a43 drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() 2d8656c27ff6 drm/xe/debugfs: Correct printing of register whitelist ranges 8b85ffe52052 drm/amd/display: Read EDID from VBIOS embedded panel info 07822f1d9bdb drm/amd/display: Allow constructing DCE8 link encoder without DDC e0f874f209d4 drm/amd/display: Allow constructing DCE6 link encoder without DDC 9b84d67ce8c9 drm/amd/display: Allow DCE link encoder without AUX registers 69a7cfc66405 futex: Prevent lockup in requeue-PI during signal/ timeout wakeup 24c22c644ea5 ALSA: hda/tas2781: Fix incorrect bit update for non-book-zero or book 0 pages >1 7e6f7ac79abe ALSA: hda: cs35l56: Fix uninitialized value in cs35l56_hda_read_acpi() f837c7b85143 ALSA: hda/conexant: Fix missing error check for jack detection 47984e9db9ca netconsole: propagate device name truncation in dev_name_store() b19a6804d498 net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) cd0401593b2d net/sched: sch_cake: annotate data-races in cake_dump_stats() (III) 74a02921c48f bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() ea9b4f07da5d sctp: discard stale INIT after handshake completion 50c450bae38d netfilter: skip recording stale or retransmitted INIT 841133395b42 ASoC: codecs: ab8500: Fix casting of private data aa1a08a4632a net: psp: require admin permission for dev-set and key-rotate d90df5ce6deb net: psp: check for device unregister when creating assoc 39767f944a8c io_uring/napi: cap busy_poll_to 10 msec d0f6ae14c045 drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring a7e63bb93a7f drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring f26e3f7186cd drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring 8549b3933038 drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring 6876d05b8991 drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring 5ada37d7f736 drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring 3a96fee676fc drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring b41248d1c183 drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring 081ef0e46c9c drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring 139a8a52ef43 drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring 6d9a98c5ed65 drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring 9076a83e5ade drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring 1286b6872de0 drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring 2d6525e7b250 drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings 602d4c5872b2 drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings ac06ce5cac9e drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings fb128a905f7a net: phy: dp83869: fix setting CLK_O_SEL field. 1c07b968a5d7 s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() 0f5bca930f8d md/md-bitmap: add a none backend for bitmap grow 7035caaa1b6f md/md-bitmap: split bitmap sysfs groups 4d4814310391 md: factor bitmap creation away from sysfs handling 00d5ae2b3b0f md: add fallback to correct bitmap_ops on version mismatch d934a2bbed53 md/raid1,raid10: don't fail devices for invalid IO errors 8252ae66cfc4 net: mctp i2c: check length before marking flow active f3c16e1f4a31 sched/fair: Clear rel_deadline when initializing forked entities 63273472430e sched/fair: Fix wakeup_preempt_fair() vs delayed dequeue 7ce7a08cde16 sched/fair: Reimplement NEXT_BUDDY to align with EEVDF goals 67bdf14af6b8 ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams f9e6b2f22b1f netpoll: fix IPv6 local-address corruption 9544ca41e1ec tcp: make probe0 timer handle expired user timeout 63063ba60d2d neigh: let neigh_xmit take skb ownership 48b26d48e762 net/sched: taprio: fix NULL pointer dereference in class dump cca14c404c0e NFC: trf7970a: Ignore antenna noise when checking for RF field 3dc58085988b spi: amlogic-spisg: initialize completion before requesting IRQ 81fc967bf476 net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit 6999d70e0eda net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() a7a97f2303e6 vrf: Fix a potential NPD when removing a port from a VRF 02495cc4a33e net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() 10c242aa0c54 net/sched: sch_choke: annotate data-races in choke_dump_stats() f670fa4b19ce net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit() f4b7ed23fae6 net: airoha: Do not wake all netdev TX queues in airoha_qdma_wake_netdev_txqs() 546d998978dc net: airoha: fix typo in function name b48399bc63ff net: airoha: stop net_device TX queue before updating CPU index 7a72efd11722 net/sched: netem: check for negative latency and jitter fabf2b2bbfa1 net/sched: netem: fix slot delay calculation overflow 2e2a8b077699 net/sched: netem: validate slot configuration 33cc6a26898a net/sched: netem: only reseed PRNG when seed is explicitly provided 8450462eaf91 net/sched: netem: fix queue limit check to include reordered packets 1633087d8a76 net/sched: netem: fix probability gaps in 4-state loss model 750d0091bebf netdevsim: zero initialize struct iphdr in dummy sk_buff c9553e0567b0 cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() 156f410cafa2 ACPI: APEI: EINJ: Fix EINJV2 memory error injection f6553cca1775 ACPICA: Provide #defines for EINJV2 error types b69f420c98b2 arm64/scs: Fix potential sign extension issue of advance_loc4 793bae6ce71c drm/color-mgmt: Typo s/R332/RGB332/ df332876455c drm/sysfb: ofdrm: fix PCI device reference leaks f4343ddee93b ASoC: tas2770: Fix order of operations for temperature calculation 6c06e9ba8753 ASoC: tas2764: Mark die temp register as volatile 9834d8cc89fe spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ 6c554462a6ad ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED 7df9863bf538 netfilter: nf_conntrack_sip: don't use simple_strtoul 938867e870fb netfilter: xt_policy: fix strict mode inbound policy matching e0805ccf7917 drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) 6d6cd5652c86 drm/amdgpu/uvd3.1: Don't validate the firmware when already validated a31c3feb54b1 drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG 24c55a9aa298 drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM 616af8df424c nvme-pci: fix missed admin queue sq doorbell write 0bd93ce4f3c3 netfilter: nf_tables: use list_del_rcu for netlink hooks 1c55053f8ffd netfilter: arp_tables: fix IEEE1394 ARP payload parsing c2a11441538b nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers 119e84719f98 tracing: branch: Fix inverted check on stat tracer registration 1aa08e1fd60a cgroup: Increment nr_dying_subsys_* from rmdir context 64a5a3dfa8fd btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() b740cc86816b fsnotify: fix inode reference leak in fsnotify_recalc_mask() f7f5d83b0dc2 mailbox: mailbox-test: make data_ready a per-instance variable 3c791f6fb791 mailbox: mailbox-test: initialize struct earlier 82f6dcea46cf mailbox: mailbox-test: don't free the reused channel 9dd748994332 mailbox: add sanity check for channel array 8d5e39df95ed cgroup/rdma: fix integer overflow in rdmacg_try_charge() 03dc070fa0fc sched/psi: fix race between file release and pressure write 742001919653 mailbox: mailbox-test: free channels on probe error d3da3c85cdd6 mailbox: mtk-cmdq: Fix CURR and END addr for task insert case d07bc4ce8e24 kbuild: Never respect CONFIG_WERROR / W=e to fixdep 4d837117d45d tools/power turbostat: Fix unrecognized option '-P' 262187aa6981 tools/power turbostat: Fix and document --header_iterations 481dbda367f4 tools/power turbostat: Use strtoul() for iteration parsing 8adeeef75597 tools/power turbostat.8: Document the "--force" option c7a9cde132bf fbdev: offb: fix PCI device reference leak on probe failure 4b238fb04bd2 kbuild: builddeb - avoid recompiles for non-cross-compiles 03a817755611 rtc: abx80x: Disable alarm feature if no interrupt attached a3fd5dc1c7b0 fs/adfs: validate nzones in adfs_validate_bblk() ef4ca02e9536 eventpoll: fix ep_remove struct eventpoll / struct file UAF eb206b8f55e1 eventpoll: move epi_fget() up e644f892e1f2 eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() e084713397a4 eventpoll: kill __ep_remove() 416b491cd289 eventpoll: split __ep_remove() 9348f4763aa9 eventpoll: use hlist_is_singular_node() in __ep_remove() bd501c86407d nstree: fix func. parameter kernel-doc warnings 70f788e22693 vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() 1d5e58905588 tipc: fix double-free in tipc_buf_append() 671f743d2dd5 tcp: send a challenge ACK on SEG.ACK > SND.NXT b5992dbb3bc5 nfp: fix swapped arguments in nfp_encode_basic_qdr() calls 1abf8c202caf virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change via VQ_PAIRS_SET 6af1736b5810 vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting c60545ffb920 net: mana: Fix EQ leak in mana_remove on NULL port fb9f98e1041a net: mana: Implement ndo_tx_timeout and serialize queue resets per port. 2c345eb03d2f net: mana: Handle hardware recovery events when probing the device e0596009873e net: mana: Handle SKB if TX SGEs exceed hardware limit 577441de1983 net: mana: Don't overwrite port probe error with add_adev result 95e4598b6805 net: mana: Add standard counter rx_missed_errors 8804f00ea028 net: mana: Move hardware counter stats from per-port to per-VF context a1ddfd2c0b7a net: mana: Guard mana_remove against double invocation 8709d4457faf net: mana: Init link_change_work before potential error paths in probe 5a90c4cfd8b7 net: airoha: Add size check for TX NAPIs in airoha_qdma_cleanup() d8ad264e9a01 net: airoha: Rework the code flow in airoha_remove() and in airoha_probe() error path 4d4acfa348a1 net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() b707f3109f1a net: dsa: realtek: rtl8365mb: fix mode mask calculation c0cfce4d7670 net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue() ad02cb61c52c net: airoha: Add the capability to consume out-of-order DMA tx descriptors b7c1bbf78b09 net: airoha: Add AN7583 SoC support 8d913ab01419 net: airoha: Refactor src port configuration in airhoha_set_gdm2_loopback 1a21910e32d7 net: airoha: ppe: Move PPE memory info in airoha_eth_soc_data struct 56b99327a451 net: airoha: ppe: Dynamically allocate foe_check_time array in airoha_ppe struct ae68eb4f2fdd net/sched: sch_sfb: annotate data-races in sfb_dump_stats() 910213de955e net/sched: sch_red: annotate data-races in red_dump_stats() 1dbe52b6a0af net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() 796fb2037d85 net/sched: sch_pie: annotate data-races in pie_dump_stats() 48de5f5f0f7b net_sched: sch_hhf: annotate data-races in hhf_dump_stats() 7846f1e20f9a ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g 9fb0d0528177 ice: fix ready bitmap check for non-E822 devices 77803e30cdd0 ice: perform PHY soft reset for E825C ports at initialization 2496a593c6e3 ice: fix timestamp interrupt configuration for E825C 91ce1bb6e419 net/rds: zero per-item info buffer before handing it to visitors 1269a7d38577 bnge: remove unsupported backing store type a2b26c4ade3e bnge: fix initial HWRM sequence 20e3b61e21c7 net: validate skb->napi_id in RX tracepoints 2cc8a4db633b ksmbd: scope conn->binding slowpath to bound sessions only 06f709d0e531 ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open 9c3936515a52 ksmbd: destroy async_ida in ksmbd_conn_free() 6237cc0f7a4c ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() 9c59c79788e8 pwm: atmel-tcb: Cache clock rates and mark chip as atomic 83cc775fc8fd arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number 3a6dfd9f2cdb arm64: dts: amlogic: meson-axg: Add missing cache information to cpu0 86cf2eba2056 net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change() 0511ecb00e61 slip: bound decode() reads against the compressed packet length 9e1ff0eead07 slip: reject VJ receive packets on instances with no rstate array 79b90a96688e netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check 21883587593d netfilter: nfnetlink_osf: fix out-of-bounds read on option matching 5b73746bd85f ipvs: fix MTU check for GSO packets in tunnel mode 32fdd2e38e74 netfilter: nat: use kfree_rcu to release ops 76160e04440c netfilter: xtables: restrict several matches to inet family 8e3be0d12615 netfilter: conntrack: remove sprintf usage fb965b1cfe92 netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO 6e9038e7b394 netfilter: nft_osf: restrict it to ipv4 8d298ece6db7 net: airoha: Fix possible TX queue stall in airoha_qdma_tx_napi_poll() fa6e90bc443b openvswitch: cap upcall PID array size and pre-size vport replies d17830d050f7 net/mlx5: Fix HCA caps leak on notifier init failure 0cab5d077dd1 pppoe: drop PFC frames 70a089cc9590 sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks 7c66b368c6ff ipv6: fix possible UAF in icmpv6_rcv() d77baa6214b7 e1000e: Unroll PTP in probe error handling 15c666a99626 iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 3c29ddd46aba i40e: don't advertise IFF_SUPP_NOFCS 3c5c3ac308a7 ice: fix ICE_AQ_LINK_SPEED_M for 200G 7cb19ec8ac08 ice: fix double-free of tx_buf skb 55500245ec04 ice: Remove jumbo_remove step from TX path 05fd391f9065 ice: update PCS latency settings for E825 10G/25Gb modes 722fcf831107 ice: fix 'adjust' timer programming for E830 devices 1b579c2001d0 tcp: annotate data-races around tp->plb_rehash 4d1ea8a2c6ac tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) 37f33454b284 tcp: annotate data-races around tp->timeout_rehash 0edffaf11267 tcp: annotate data-races around tp->srtt_us cd6011dc4c33 tcp: better handle TCP_TX_DELAY on established flows 3955bfec74ab tcp: annotate data-races around tp->reord_seen 7fc9ef56acfe tcp: annotate data-races around tp->dsack_dups b20898430984 tcp: annotate data-races around tp->bytes_retrans d0ae38a0ee95 tcp: annotate data-races around tp->bytes_sent 5987cec30473 tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE 4215a5c7b079 tcp: annotate data-races around tp->delivered and tp->delivered_ce d8068252f043 tcp: annotate data-races around tp->snd_ssthresh 9bce4d9c6da1 tcp: add data-races annotations around tp->reordering, tp->snd_cwnd 9eb93126c012 tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans 2962660dc75a tcp: annotate data-races in tcp_get_info_chrono_stats() c67c9032ce56 tcp: inline tcp_chrono_start() 8e8a7c72a24f tcp: move tp->chrono_type next tp->chrono_stat[] ce2e164c1c51 ksmbd: fix use-after-free in smb2_open during durable reconnect ff3e8515c1d9 smb: move smb_version_values to common/smbglob.h 37c8933064be net: enetc: fix NTMP DMA use-after-free issue 1f379216ccc8 net: enetc: correct the command BD ring consumer index 74d64ae4254e net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops 4c078a699a8c net: dsa: append ethtool counters of all hidden ports to conduit 87bbc2e86439 net: dsa: use kernel data types for ethtool ops on conduit f128f04a893d net: dsa: cpu_dp->orig_ethtool_ops might be NULL b73235da5dde net/sched: taprio: fix use-after-free in advance_sched() on schedule switch 75b6c361f417 net: airoha: Wait for NPU PPE configuration to complete in airoha_ppe_offload_setup() 613c8f4a5014 nexthop: fix IPv6 route referencing IPv4 nexthop 7ad66185052d net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys b6b7154e9f5d macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF 7db3e4e03032 net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir 7b5501a62214 pwm: stm32: Fix rounding issue for requests with inverted polarity ad5dc433b34e arm64: dts: marvell: armada-37xx: use 'usb2-phy' in USB3 controller's phy-names 5b5f8ff0a2e8 arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT 8002eb9b60a6 arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT 33d043815ccc arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT cde69482d2e6 reset: amlogic: t7: Fix null reset ops 4790bd29d626 PCMCIA: Fix garbled log messages for KERN_CONT 9e8087ac4636 arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT 2b7db3e83f78 arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT d8d75e113532 arm64: dts: imx8mp-ultra-mach-sbc: Correct PAD settings for PMIC_nINT e754961b2655 arm64: dts: imx8mp-sr-som: Correct PAD settings for PMIC_nINT 4ff0003fabd7 arm64: dts: imx8mp-nitrogen-som: Correct PAD settings for PMIC_nINT 9011a6128935 arm64: dts: imx8mp-aristainetos3a-som-v1: Correct PAD settings for PMIC_nINT dde47488fb19 arm64: dts: imx8mp-edm-g: Correct PAD settings for PMIC_nINT 91c150b3760d arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT 3a958f45a676 arm64: dts: imx8mp-navqp: Correct PAD settings for PMIC_nINT e821e5e0c61b arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT 4a259bb36702 arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT 858e4d98a86a erofs: unify lcn as u64 for 32-bit platforms df9784bb5b63 crypto: ccp - copy IV using skcipher ivsize d05ebf0d3f8c crypto: sa2ul - Fix AEAD fallback algorithm names fc9310d79fdb crypto: eip93 - fix hmac setkey algo selection c6efc77954d8 virt: arm-cca-guest: fix error check for RSI_INCOMPLETE 60a6842061b4 drm/i915/wm: Verify the correct plane DDB entry d0e877810baf f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() 2b0ae4b59ff5 f2fs: allow empty mount string for Opt_usr|grp|projjquota 1c5973c84ab4 clk: visconti: pll: initialize clk_init_data to zero cccefa34c09a clk: qcom: gcc-x1e80100: Keep GCC USB QTB clock always ON a841167c1ef7 f2fs: fix to preserve previous reserve_{blocks,node} value when remount ef72360aa88a f2fs: expand scalability of f2fs mount option 480307ffa289 lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() 3547f6b9a110 clk: qcom: gdsc: Fix error path on registration of multiple pm subdomains 4623c251496b f2fs: avoid reading already updated pages during GC fa18659f883e f2fs: use f2fs_filemap_get_folio() instead of f2fs_pagecache_get_page() da99d0302d3c clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() 16472129ffd7 clk: qcom: dispcc-sc7180: Add missing MDSS resets 28e796ac0279 dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets a0195eab4ed5 clk: xgene: Fix mapping leak in xgene_pllclk_init() 558b2eb623f2 clk: qoriq: avoid format string warning 074105928626 x86/um: fix vDSO installation 0f548ecd2d78 x86/um/vdso: Drop VDSO64-y from Makefile b55d2128faf5 clk: imx8mq: Correct the CSI PHY sels e3d41039263d clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() 3cb3f533424b clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() 8ae85245632c clk: qcom: dispcc-sm8250: Enable parents for pixel clocks d7f633fc6e4d clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk d79e6ca14c55 clk: qcom: gcc-sc8180x: Use retention for PCIe power domains a263813276f9 clk: qcom: gcc-sc8180x: Use retention for USB power domains ed9ca2c4dc02 clk: qcom: gcc-sc8180x: Add missing GDSCs 841d49517768 dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs a2fb7c42ab9b scsi: ufs: rockchip,rk3576-ufshc: dt-bindings: Add new mphy reset item 51075df70c46 scsi: target: core: Fix integer overflow in UNMAP bounds check ac0411865e3e clk: renesas: r9a09g057: Remove entries for WDT{0,2,3} 3c0a96358c13 clk: renesas: r9a09g057: Fix ordering of module clocks array 21aae9f766a3 clk: renesas: r9a09g057: Add entries for RSCIs 34e869e21080 clk: renesas: r9a09g057: Add clock and reset entries for RTC 87534f2a3842 clk: qcom: dispcc[01]-sa8775p: Fix DSI byte clock rate setting b92a29da9f7e clk: qcom: dispcc-sm4450: Fix DSI byte clock rate setting b0015d7752af clk: qcom: dispcc-milos: Fix DSI byte clock rate setting 0c7a14a3d580 clk: qcom: dispcc-glymur: Fix DSI byte clock rate setting 6c87b3a371fa clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers 1afd963fcd96 scsi: sg: Resolve soft lockup issue when opening /dev/sgX 6a4ccbb9b40e scsi: sg: Fix sysctl sg-big-buff register during sg_init() b9ab6cf1c2ef clk: sunxi-ng: sun55i-a523-r: Add missing r-spi module clock e906a312ee06 clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source 89715e519ab7 clk: qcom: dispcc-glymur: use RCG2 ops for DPTX1 AUX clock source 1e56e335bc86 clk: qcom: gcc-glymur: Add video axi clock resets for glymur 927c8a511c2a dt-bindings: clock: qcom: Add GCC video axi reset clock for Glymur f2c7b39dde2e RDMA/core: Prefer NLA_NUL_STRING c5683ca4949a platform/x86: dell-wmi-sysman: bound enumeration string aggregation 58688eeaa307 platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() 6136bbb054f7 fs/ntfs3: terminate the cached volume label after UTF-8 conversion c44ad02d591b tty: serial: ip22zilog: Fix section mispatch warning bfd3e5309503 platform/x86: asus-wmi: fix screenpad brightness range 38a9aa192ef7 platform/x86: asus-wmi: adjust screenpad power/brightness handling 4584229395d0 NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg 248e4b9cc719 nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() ac8551a4254d mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() cc7716bd050b platform/x86: barco-p50-gpio: normalize return value of gpio_get e4a666652dae platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup 37a3d1b68277 usb: typec: ps883x: Fix Oops at unbind 3104a3f40feb tty: hvc_iucv: fix off-by-one in number of supported devices 19951118fb22 usb: typec: Fix error pointer dereference 099494e4499d leds: lgm-sso: Remove duplicate assignments for priv->mmap 34be68c52af8 platform/surface: surfacepro3_button: Drop wakeup source on remove 834dece8ced2 backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() 7d88f2e1a972 i3c: mipi-i3c-hci: fix IBI payload length calculation for final status 1c70c5b933e2 i3c: master: adi: Fix error propagation for CCCs b5a2893ce6fd i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers() 1b6a7e94be67 i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers() c192859f2775 i3c: master: dw-i3c: Fix missing reset assertion in remove() callback b0cdbc690dae perf util: Kill die() prototype, dead for a long time e97cc0120390 perf maps: Fix copy_from that can break sorted by name order def6cd4271e7 perf maps: Fix fixup_overlap_and_insert that can break sorted by name order 59a58ada259c pinctrl: sophgo: pinctrl-sg2044: Fix wrong module description c98c71ed8834 pinctrl: sophgo: pinctrl-sg2042: Fix wrong module description 2db35db04c03 perf cgroup: Update metric leader in evlist__expand_cgroup e21bac135220 ipmi: ssif_bmc: change log level to dbg in irq callback ca4d0555000f ipmi: ssif_bmc: fix message desynchronization after truncated response 3cce2a3f8f60 ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure e62ac39eb2ce perf expr: Return -EINVAL for syntax error in expr__find_ids() 131e9cb0b932 perf tools: Fix module symbol resolution for non-zero .text sh_addr 7377e48f9ca8 memblock: reserve_mem: fix end caclulation in reserve_mem_release_by_name() 3fb038e078ec perf stat: Fix opt->value type for parse_cache_level 206ac6c702ca perf lock: Fix option value type in parse_max_stack 509d342d02ff pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT} registers 71e13d4c1d77 pinctrl: abx500: Fix type of 'argument' variable bb548a3c26a1 pinctrl: realtek: Fix function signature for config argument 6476aac13805 pinctrl: pinconf-generic: Fully validate 'pinmux' property be787fea6c66 perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace 9878e6ed7ec5 perf branch: Avoid incrementing NULL 518ae2a82efe pinctrl: cy8c95x0: Avoid returning positive values to user space df50e63cdf15 pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() 815a7b8af68d pinctrl: cy8c95x0: remove duplicate error message dbfb30248dbe perf trace: Avoid an ERR_PTR in syscall_stats 4d994ff45727 pinctrl: pinctrl-pic32: Fix resource leak dc3ece1d92e6 perf trace: Fix IS_ERR() vs NULL check bug 02c06e764fe5 bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT e15900888c09 bpf: Validate node_id in arena_alloc_pages() e8bd8274ae56 libbpf: Prevent double close and leak of btf objects 8abad856e2a5 bpf: allow UTF-8 literals in bpf_bprintf_prepare() 6982653ce5f1 bpf: Fix NULL deref in map_kptr_match_type for scalar regs 5c04f89f9557 bpf: Fix precedence bug in convert_bpf_ld_abs alignment check 921920c34cb5 bpf, sockmap: Take state lock for af_unix iter 041eb6348d73 bpf, sockmap: Fix af_unix null-ptr-deref in proto update 527057ebe807 bpf, sockmap: Fix af_unix iter deadlock 77ad43af2642 bpf, riscv: Remove redundant bpf_flush_icache() after pack allocator finalize ca51684db023 bpf, arm64: Remove redundant bpf_flush_icache() after pack allocator finalize 1a113b549729 bpf, arm64: Fix off-by-one in check_imm signed range check 07793ce19221 ext4: fix possible null-ptr-deref in mbt_kunit_exit() c7abd0e6c874 HID: usbhid: fix deadlock in hid_post_reset() c3a6ee43246d mtd: spinand: winbond: Clarify when to enable the HS bit 52aaa647b02d mtd: spinand: Give the bus interface to the configuration helper 6a5f5c25fb1f mtd: spinand: Add support for setting a bus interface d4e22374b9b0 mtd: spinand: Gather all the bus interface steps in one single function a602b7efb876 mtd: spinand: winbond: Configure the IO mode after the dummy cycles a5d27efc8e4f mtd: spinand: winbond: Rename IO_MODE register macro 729833537104 mtd: spinand: Create an array of operation templates d5de6d39a3bb mtd: spinand: Decouple write enable and write disable operations b5804b3ae4b8 mtd: spinand: Add missing check 34e666a256de mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob 84688b608f01 cxl/pci: Check memdev driver binding status in cxl_reset_done() 5a282a6f8129 mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions c92dc1b31a1d mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path 5549c3f88dd7 mtd: spi-nor: swp: check SR_TB flag when getting tb_mask 53d7a4e1b041 mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation 0173aca3e4b1 mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook 6278713f55d4 mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook ad41b585f0e4 mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations 756afec88e85 dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range b6766b171a5c ima_fs: Correctly create securityfs files for unsupported hash algos e4e0bd721b92 mtd: physmap_of_gemini: Fix disabled pinctrl state check fb9364ba4fa6 HID: asus: do not abort probe when not necessary 59601f0e83d4 HID: asus: make asus_resume adhere to linux kernel coding standards 148e4f7ece72 ima: check return value of crypto_shash_final() in boot aggregate 5bfc58588ae0 remoteproc: imx_rproc: Check return value of regmap_attach_dev() in imx_rproc_mmio_detect_mode() 28122fcd7bcc stop_machine: Fix the documentation for a NULL cpus argument 405c94550c68 remoteproc: xlnx: Fix sram property parsing 514f1eb75ffb hte: tegra194: remove Kconfig dependency on Tegra194 SoC 0402c60abe76 tracing: Rebuild full_name on each hist_field_name() call d7338f4dde91 tracing: move __printf() attribute on __ftrace_vbprintk() 2be24b87a474 tracing: move tracing declarations from kernel.h to a dedicated header d09b029f639c tracing: remove size parameter in __trace_puts() 1e78af701976 soundwire: cadence: Clear message complete before signaling waiting thread 8995ef2dbebc dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() 4cafee50af44 soundwire: Intel: test bus.bpt_stream before assigning it 03d56c4c3861 soundwire: bus: demote UNATTACHED state warnings to dev_dbg() 8cedbb75f70e dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function aed87e866d1a ocfs2: validate group add input before caching 4c2d62ddde89 ocfs2: validate bg_bits during freefrag scan 2685df8577a3 ocfs2: fix listxattr handling when the buffer is full a28f56988c8e fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal a3879c708a60 firmware: arm_ffa: Use the correct buffer size during RXTX_MAP 28a547af4432 ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended 6eab9741965b lib: kunit_iov_iter: fix memory leaks 3bf5e19c804d slab: Introduce kmalloc_obj() and family 9777d7e6fc58 arm64/xor: fix conflicting attributes for xor_block_template 8f466be889a2 ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX 42fbb173e855 arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP 9dd9d748c5a0 soc: qcom: aoss: compare against normalized cooling state 611d9e46bdc6 soc: qcom: llcc: fix v1 SB syndrome register offset 1fb7f356547d ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison 3f474c33ebc2 ocfs2/dlm: validate qr_numregions in dlm_match_regions() a261fccdb4ac unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure c892d0d4fe5e soc/tegra: cbb: Fix cross-fabric target timeout lookup f46870b451f7 soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables 9dc2462a7595 soc/tegra: cbb: Set ERD on resume for err interrupt aabc9baae9a7 arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual bf9a33944d7d arm64: dts: imx8qm-mek: switch Type-C connector power-role to dual 3341ca45d280 arm64: dts: lx2160a: complete pinmux for rcwsr12 configuration word 857dbf1f51fe arm64: dts: lx2160a: change zeros to hexadecimal in pinmux nodes e77a86d883b5 arm64: dts: lx2160a: add sda gpio references for i2c bus recovery ce85b22e556a arm64: dts: lx2160a: rename pinmux nodes for readability b165c477175b arm64: dts: lx2160a: remove duplicate pinmux nodes 69f4d9ce27d8 arm64: dts: lx2160a: change i2c0 (iic1) pinmux mask to one bit 5f2ca479f0f3 arm64: dts: imx8dxl-evk: Use audio-graph-card2 for wm8960-2 and wm8960-3 7fedcbedec65 arm64: dts: imx8mp-kontron: Fix boot order for PMIC and RTC 85163323ab36 arm64: dts: freescale: imx8mp-tqma8mpql-mba8mp-ras314: fix UART1 RTS/CTS muxing 4675ae61aa63 arm64: dts: ti: k3-am62-verdin: Fix SPI_1 GPIO CS pinctrl label 45669e3578ac arm64: dts: ti: k3-am62-lp-sk: Enable internal pulls for MMC0 data pins 5f852e9baea0 arm64: dts: ti: k3-am62p5-sk: Disable MMC1 internal pulls on data pins 8caadf4fef50 arm64: dts: qcom: msm8917-xiaomi-riva: Fix board-id for all bootloader bf30d3790340 arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot 7f8365e8ff82 arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl 1327f28e4775 arm64: dts: qcom: sm8650: Enable UHS-I SDR50 and SDR104 SD card modes 3578d41b7ef0 arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes 2ea7bfce0024 arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes 6360bcaf5727 arm64: dts: qcom: hamoa: Fix xo clock supply of platform SD host controller 168ec540bdfd arm64: dts: qcom: sm8650: Fix xo clock supply of SD host controller cd2894362390 arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller c1b5e85c88fb arm64: dts: qcom: sm8750: Fix GIC_ITS range length 000d5533f451 arm64: dts: qcom: sm8650: Fix GIC_ITS range length 6670dc96864b arm64: dts: qcom: sm8550: Fix GIC_ITS range length 1de0b109aaa7 arm64: dts: qcom: sm8450: Fix GIC_ITS range length 3bb7be86f4c0 arm64: dts: qcom: sm8650: correct Iris corners for the MXC rail 16771dd53aa9 arm64: dts: qcom: sm8550: correct Iris corners for the MXC rail 14ec98366e30 arm64: dts: qcom: monaco: correct Iris corners for the MXC rail e589b6c38265 arm64: dts: qcom: lemans: correct Iris corners for the MXC rail c0040375fec7 arm64: dts: qcom: hamoa: correct Iris corners for the MXC rail 8344cd62b825 bus: rifsc: fix RIF configuration check for peripherals 8bfa413a1bd8 arm64: dts: rockchip: Add mphy reset to ufshc node 835d16955dd7 arm64: dts: rockchip: Fix RK3562 EVB2 model name 2fea83507b4c soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available c10e14863b62 soc: qcom: ocmem: register reasons for probe deferrals 702ee8e9821b soc: qcom: ocmem: make the core clock optional 99eb1df4acd4 arm64: dts: rockchip: Correct Joystick Axes on Gameforce Ace fd16a9e05b48 arm64: dts: rockchip: Correct Fan Supply for Gameforce Ace 6db6534abfe1 Revert "arm64: dts: rockchip: add SPDIF audio to Beelink A1" 31d145a54f16 arm64: dts: rockchip: Fix Bluetooth stability on LCKFB TaiShan Pi 2fda9b3776e0 arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight 151c29b6952c arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value 1ab2769df3de arm64: dts: imx8mp-hummingboard-pulse: fix mini-hdmi dsi port reference 6c5178dd6036 arm64: dts: imx8mp-kontron: Drop vmmc-supply to fix SD card on SMARC eval carrier 7e6420179e21 arm64: dts: imx8mp-kontron: Fix touch reset configuration on DL devices a5f56ff8573f iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy} d02f10e74fe2 arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count 1cda0e4ef9c4 arm64: dts: mediatek: mt7981b: Fix gpio-ranges pin count 1a94d799de9e arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count a2475c0a2bbb arm64: dts: qcom: talos: Add missing clock-names to GCC c4620dad9f1b arm64: dts: qcom: sm6125-xiaomi-ginkgo: Fix reserved gpio ranges 449023f22c11 arm64: dts: qcom: sm6125-xiaomi-ginkgo: Remove extcon e849632c0988 arm64: dts: qcom: sm6125-xiaomi-ginkgo: Correct reserved memory ranges 6256ef55fe90 arm64: dts: qcom: sm6125-xiaomi-ginkgo: Remove board-id 4e3f607c3b99 arm64: dts: qcom: sm6125-ginkgo: Fix missing msm-id subtype 643af7b85459 iommufd: vfio compatibility extension check for noiommu mode 982b56bf7c7d arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) 8e7ff76becce arm64: dts: rockchip: Make Jaguar PCIe-refclk pin use pull-up config e483129ae513 arm64: dts: imx91-11x11-evk: change usdhc tuning step for eMMC and SD a028d9919f46 arm64: dts: imx8-apalis: Fix LEDs name collision 86b77735cb4c memory: tegra30-emc: Fix dll_change check 1793249c067a memory: tegra124-emc: Fix dll_change check 6dd527eb8b70 ARM: dts: mediatek: mt7623: fix efuse fallback compatible e2b1e633257e arm64: dts: mediatek: mt8365: Describe infracfg-nao as a pure syscon 7164b3953cef ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine e0e6b14995fd efi/capsule-loader: fix incorrect sizeof in phys array reallocation d8ffae016c4a gfs2: prevent NULL pointer dereference during unmount 49d9be0722da gfs2: add some missing log locking 3f90bfd31f16 vfio: unhide vdev->debug_root fdd424d7c356 quota: Fix race of dquot_scan_active() with quota deactivation d05d4a6ee877 gfs2: less aggressive low-memory log flushing 2c57d6c0afcd rtla/utils: Fix resource leak in set_comm_sched_attr() 6a815bb366c9 rtla: Replace atoi() with a robust strtoi() dac3f0a68ec2 rtla: Fix -C/--cgroup interface 0a7a4ab3be8e ktest: Run POST_KTEST hooks on failure and cancellation 9b798ad99692 ktest: Honor empty per-test option overrides f68e24b9697a ktest: Avoid undef warning when WARNINGS_FILE is unset 14dee7a3441f fanotify: call fanotify_events_supported() before path_permission() and security_path_notify() 27c95204b518 fanotify: avoid/silence premature LSM capability checks 0d19bce16932 gfs2: Call unlock_new_inode before d_instantiate ac25916e75ca ALSA: hda/realtek - fixed speaker no sound update 457369880110 ALSA: usb-audio: Exclude Scarlett 18i20 1st Gen from SKIP_IFACE_SETUP ff734dbd9e24 crypto: jitterentropy - replace long-held spinlock with mutex 3ab9ab2dc188 sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking b60a90bf7cde sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask 9769c143015c dm cache: fix missing return in invalidate_committed's error path 9a0f6c048554 ALSA: sc6000: Keep the programmed board state in card-private data e0b049bd7b27 spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback b059a41bdd5b PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on 4e7a00aeb091 PCI: tegra194: Disable L1.2 capability of Tegra234 EP 2914977cb75e PCI: tegra194: Remove unnecessary L1SS disable code 9daf2a8d9cc1 PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well 5cb649c27024 PCI: tegra194: Use DWC IP core version 1e877168b0e7 PCI: tegra194: Free up Endpoint resources during remove() e697ea9ecdeb PCI: tegra194: Allow system suspend when the Endpoint link is not up 849068f0129c PCI: tegra194: Set LTR message request before PCIe link up in Endpoint mode e463beb1e130 PCI: tegra194: Disable direct speed change for Endpoint mode f4556f70f00a PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" 89b7185833db PCI: tegra194: Disable PERST# IRQ only in Endpoint mode 871d9a6bf21b PCI: tegra194: Don't force the device into the D0 state before L2 fb08535d374c PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down 8626b64c37c9 PCI: tegra194: Increase LTSSM poll time on surprise link down f38e0c5f377a PCI: tegra194: Fix polling delay for L2 state feac3db37d14 ALSA: usb-audio: qcom: Fix incorrect type in enable_audio_stream 19ad2384ce5e PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports 989ccfcc920e ASoC: SOF: compress: return the configured codec from get_params 12d76d99e845 ALSA: scarlett2: Add missing sentinel initializer field 2fdb6c1e743d selftest: memcg: skip memcg_sock test if address family not supported 0619073fd082 Documentation: fix a hugetlbfs reservation statement fc1ca4f0d6be kho: make debugfs interface optional 43106160a00b selftests/mm: skip migration tests if NUMA is unavailable fa123b901eb6 gpu: nova-core: bitfield: fix broken Default implementation af46044d1671 gpu: nova-core: bitfield: Move bitfield-specific code from register! into new macro e6b0e1f74d35 gpu: nova-core: register: use field type for Into implementation 0a2d60edc3e5 PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found db805e9399c8 PCI: Enable AtomicOps only if Root Port supports them 134c61925e9e ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] 254091c91767 crypto: qat - use swab32 macro 8d77cf260535 crypto: iaa - fix per-node CPU counter reset in rebalance_wq_table() 52906bb0f636 crypto: qat - fix type mismatch in RAS sysfs show functions 684bd5404f9c crypto: qat - fix compression instance leak 06b30beb9104 crypto: qat - disable 420xx AE cluster when lead engine is fused off 6aef8e6fdf4d crypto: qat - disable 4xxx AE cluster when lead engine is fused off 44faf7ea013c PCI: dwc: Fix type mismatch for kstrtou32_from_user() return value a1a24d4b8c96 ASoC: qcom: qdsp6: topology: check widget type before accessing data 9f0632b0d424 iommu/riscv: Remove overflows on the invalidation path 20b3c566e270 iommu/amd: Fix clone_alias() to use the original device's devid 715d7b1e1af8 ASoC: fsl_easrc: Change the type for iec958 channel status controls 9f8304abcd7e ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() cbf3693ddf5a ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() 15ff6da3e9bd ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() 4ab351b4b785 ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() 4095fa1c8ed9 ASoC: fsl_micfil: Fix event generation in micfil_quality_set() fe6e720bf2a0 ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() 79acc3ea6fb6 ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() 891c51e19d3a ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() 2a6a72a0beab ASoC: fsl_micfil: Add access property for "VAD Detected" 1140626eb6f5 drm/msm/dpu: drop INTF_0 on MSM8953 507cc9ab1e8c PM: domains: De-constify fields in struct dev_pm_domain_attach_data 2ba2e8ce483c pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() 2d9cb1f588ce pmdomain: ti: omap_prm: Fix a reference leak on device node 9232d70f98cd ALSA: hda/cmedia: Remove duplicate pin configuration parsing 70f694e0bb87 drm/msm/a6xx: Use barriers while updating HFI Q headers 4180d90a4054 drm/msm/a6xx: Fix dumping A650+ debugbus blocks 279fde87aa70 drm/msm/shrinker: Fix can_block() logic 6a83ea4da004 drm/msm/a6xx: Fix HLSQ register dumping 206f812ef140 drm/msm: Fix VM_BIND UNMAP locking 8cf18974284f drm/msm: Reject fb creation from _NO_SHARE objs 30b8a3f88c59 drm/msm/vma: Avoid lock in VM_BIND fence signaling path d0b28251ca44 ASoC: SOF: Intel: hda: Place check before dereference c87f914822c2 ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') f329dccceb76 hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove callback 06fed91296f8 PCI/DPC: Log AER error info for DPC/EDR uncorrectable errors 0a84e210daec drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled 2381d4c5cc1e drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board c140492d0bbe drm/amd/pm/ci: Fill DW8 fields from SMC 1de9639b50db drm/amd/pm/ci: Clear EnabledForActivity field for memory levels 9d92707b43f7 drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 432fdc0141b5 drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock c829b4633041 drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs 21e8dd9906bf drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled 67e582c86ab1 ASoC: amd: acp: update dmic_num logic for acp pdm dmic edfa91bb652e ALSA: core: Validate compress device numbers without dynamic minors 3c349995e51e iommu/riscv: Fix signedness bug e3fae61f4799 iommu/riscv: Skip IRQ count check when using MSI interrupts ccd4c3e5c907 PCI: Fix alignment calculation for resource size larger than align b375c3c7209c crypto: hisilicon/sec2 - prevent req used-after-free for sec 2d18cf09f2b0 PCI: Fix premature removal from realloc_head list during resource assignment 34678c978888 PCI: Use res_to_dev_res() in reassign_resources_sorted() f176c47683bf PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support cd3938c12bda drm/panel: simple: Correct G190EAN01 prepare timing 31b2d7be7540 drm/panel: sharp-ls043t1le01: make use of prepare_prev_first 131e01ba249f ASoC: rockchip: rockchip_sai: Set slot width for non-TDM mode 9c47a36ceaf0 drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 a303f8863c97 drm/msm/dsi: fix hdisplay calculation for CMD mode panel e82ef4ef320c drm/msm/dsi: fix bits_per_pclk 94e021272c45 drm/msm/dpu: don't try using 2 LMs if only one DSC is available acde37cb798d drm/msm/dsi: add the missing parameter description 0f7dd5839cfa drm/msm/dpu: fix mismatch between power and frequency c7d586c6348d drm/msm: add missing MODULE_DEVICE_ID definitions 3441e4b70cf9 iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement 86c8d5cdadd9 iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() 3a8d94405fd5 drm/imagination: Switch reset_reason fields from enum to u32 3d0ef0567d21 spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo eae672a7ec8a drm/amdgpu/gfx11: look at the right prop for gfx queue priority 0cd9d5878b3c drm/amdgpu/gfx10: look at the right prop for gfx queue priority db201e6fab1e PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per the documentation 5a9f29a3e076 padata: Put CPU offline callback in ONLINE section to allow failure 8e26246dc104 padata: Remove cpu online check from cpu add and removal 3ffcd6c5dca9 crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs f4b747f0755e crypto: atmel - Use unregister_{aeads,ahashes,skciphers} 9458a6513fe7 crypto: tegra - Disable softirqs before finalizing request 4a894ba48fa5 fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break 57a1079af3ee dm init: ensure device probing has finished in dm-mod.waitfor= c695257f6b8d drm/amdgpu: Add default case in DVI mode validation 0d3b392b0f2c iommu/riscv: Stop polling when CQCSR reports an error 380698b43f07 iommu/riscv: Add missing GENERIC_MSI_IRQ 3f917d9bff68 iommu/riscv: Add IOTINVAL after updating DDT/PDT entries b6263eb2b188 crypto: inside-secure/eip93 - register hash before authenc algorithms 4ad705f5e889 drm/sun4i: Fix resource leaks 555eb897a455 drm/v3d: Handle error from drm_sched_entity_init() cb54064705ad selftests/sched_ext: Add missing error check for exit__load() 75849e13e428 drm/amd/pm: Fix xgmi max speed reporting 9b614ddf3185 media: i2c: og01a1b: Fix V4L2 subdevice data initialization on probe 1de12fc4b943 spi: fsl-qspi: Use reinit_completion() for repeated operations c1c2871f3336 spi: nxp-fspi: Use reinit_completion() for repeated operations d7b0489d9955 drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check 1a9bef10f894 drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs cf2ac2cac8b3 drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() 3149c4f7f26f iopoll: fix function parameter names in read_poll_timeout_atomic() b455903eed45 dm log: fix out-of-bounds write due to region_count overflow 322a3b70368d dm cache metadata: fix memory leak on metadata abort retry a3c61bd4e943 PCI: dwc: Perform cleanup in the error path of dw_pcie_resume_noirq() 104a6e53484e PCI: dwc: Invoke post_init in dw_pcie_resume_noirq() a763a53d648d PCI: dwc: ep: Fix MSI-X Table Size configuration in dw_pcie_ep_set_msix() b7ed10f2d8b5 platform/chrome: chromeos_tbmc: Drop wakeup source on remove 7f3e53990ad3 dm-mpath: don't stop probing paths at presuspend 21c503d60a25 dm cache: fix dirty mapping checking in passthrough mode switching cb8b250b4277 dm cache: fix concurrent write failure in passthrough mode c348ae47d8e6 dm cache policy smq: fix missing locks in invalidating cache blocks b8ace9e96983 dm cache: fix write hang in passthrough mode 788ac6c94d04 dm cache: fix write path cache coherency in passthrough mode 25dcc1989c19 dm cache: fix null-deref with concurrent writes in passthrough mode a3f3c332882c ASoC: sti: use managed regmap_field allocations 17584bdc7247 ASoC: sti: Return errors from regmap_field_alloc() 7ed07c9ce525 crypto: inside-secure/eip93 - fix register definition 1f2e41bd668f ASoC: SDCA: Update counting of SU/GE DAPM routes 36a0dcd0077b PCI: imx6: Fix device node reference leak in imx_pcie_probe() 47038159c559 drm/sun4i: backend: fix error pointer dereference 175717cfc06c PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double alloc b13984f0212f PCI: endpoint: pci-epf-test: Don't free doorbell IRQ unless requested 511c093d9ef4 PCI/TPH: Allow TPH enable for RCiEPs e14de2cb819f ASoC: soc-compress: use function to clear symmetric params 1f7687123d38 drm/virtio: Allow importing prime buffers when 3D is enabled fe1f80f8f6e8 drm/komeda: fix integer overflow in AFBC framebuffer size check 60a90d853fca selftests/futex: Fix incorrect result reporting of futex_requeue test item f98084d97864 net: airoha: Add missing PPE configurations in airoha_ppe_hw_init() 7bad93e99737 net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master 6a7139084973 sctp: fix missing encap_port propagation for GSO fragments c5a1cb8ff82b tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init(). 81cfd603c0bd udp: Force compute_score to always inline 1218bfe2ad6f net: phy: qcom: at803x: Use the correct bit to disable extended next page b28b3bd9c42f Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec dc89961b76f1 Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp 385b2d0468a0 Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER 3daa5818e473 Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error 4ae187c7915d Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU 8042240412de bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb afdc8516213e net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() ef6d5a068811 net/mlx5e: Fix features not applied during netdev registration 15a9928f8a93 net: phy: fix a return path in get_phy_c45_ids() d7637c455a92 dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 a3be96c7b1e5 net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ 65c7f0bf8ca3 net: ipa: Fix programming of QTIME_TIMESTAMP_CFG 5013be175c7f ppp: require CAP_NET_ADMIN in target netns for unattached ioctls 6086079e6d1c bpf: Fix OOB in pcpu_init_value a7494479757d net/rds: Restrict use of RDS/IB to the initial network namespace d3f880a6eb44 net/rds: Optimize rds_ib_laddr_check bc678fa87552 selftests/bpf: Fix reg_bounds to match new tnum-based refinement cddf2bde8420 bpf: Allow instructions with arena source and non-arena dest registers 9d51c86355d9 net: airoha: Add missing RX_CPU_IDX() configuration in airoha_qdma_cleanup_rx_queue() 3ddf6523957a net: mana: Move current_speed debugfs file to mana_init_port() 90ebf3e9c12f net: mana: Support HW link state events 34dbd7b81954 net: mana: Use pci_name() for debugfs directory naming 64daf391198c selftests: netfilter: nft_tproxy.sh: adjust to socat changes 4c727c6967a4 net/sched: act_ct: Only release RCU read lock after ct_ft 8e1387216d66 selftests/bpf: fix __jited_unpriv tag name 691adf738817 bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars adaee08e711b bpf: Relax scalar id equivalence for state pruning 0df9abbb138f net: airoha: Fix FE_PSE_BUF_SET configuration if PPE2 is available 83d6371570ba net: airoha: Generalize airoha_ppe2_is_enabled routine 4ea17f5e5126 net: airoha: Add airoha_eth_soc_data struct ae1b40d3abc1 net: airoha: Add airoha_ppe_get_num_stats_entries() and airoha_ppe_get_num_total_stats_entries() 987af7625ceb net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf e1ed678855e3 bpf: Fix RCU stall in bpf_fd_array_map_clear() 592226d13837 bpf: return VMA snapshot from task_vma iterator 3745834cf761 bpf: switch task_vma iterator from mmap_lock to per-VMA locks d0862de7c866 bpf: fix mm lifecycle in open-coded task_vma iterator b79d567fbc53 netfilter: nft_fwd_netdev: check ttl/hl before forwarding 35a38df4085b netfilter: xt_socket: enable defrag after all other checks b9ee2c6c0761 eth: fbnic: Use wake instead of start 6d28910c5194 net: airoha: Add dma_rmb() and READ_ONCE() in airoha_qdma_rx_process() c270e2bec3e5 net: bcmgenet: fix racing timeout handler 25ff3a3e47ea net: bcmgenet: fix leaking free_bds 4cab761fc51c net: bcmgenet: fix off-by-one in bcmgenet_put_txcb 0d8726af877e macsec: Support VLAN-filtering lower devices f33fb701ab7e arm64: kexec: Remove duplicate allocation for trans_pgd bcfdf159d128 ACPI: AGDI: fix missing newline in error message 73ae96e2be4e arm64: entry: Don't preempt with SError or Debug masked d88e8e4a3b52 bpf: Fix linked reg delta tracking when src_reg == dst_reg 9f88b29b79a0 bpf: Support negative offsets, BPF_SUB, and alu32 for linked register tracking 254633506626 wifi: ath10k: fix station lookup failure during disconnect 76f2ebaf79a9 bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() 281f2a214565 bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks a9937a3ac585 wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode() cbea71b44803 wifi: brcmfmac: Fix error pointer dereference a710df104abb net: ethernet: ti-cpsw: fix linking built-in code to modules 2bbe3d5c9353 net: ethernet: ti-cpsw:: rename soft_reset() function 059525cf18e6 bpf: Fix stale offload->prog pointer after constant blinding 32ce55d42439 bpf: fix end-of-list detection in cgroup_storage_get_next_key() d3d3d2791c59 macvlan: annotate data-races around port->bc_queue_len_used b312cf41b9e4 bpf: Fix abuse of kprobe_write_ctx via freplace d41508adff01 selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 9103787054c6 powerpc/crash: Update backup region offset in elfcorehdr on memory hotplug eef879190a1f powerpc/crash: fix backup region offset update to elfcorehdr 50c601805fe3 r8152: fix incorrect register write to USB_UPHY_XTAL ae5f83c0809f drivers/vfio_pci_core: Change PXD_ORDER check from switch case to if/else block fa3b3e43e883 vfio: refactor vfio_pci_mmap_huge_fault function 6b9694702c37 wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() 97757d231bc6 bpf,arc_jit: Fix missing newline in pr_err messages 1391ecf3a99a bpf: Fix variable length stack write over spilled pointers d4c4bd231eba bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path 0b69217310ee bpf: Fix refcount check in check_struct_ops_btf_id() a1a8a8bdfa21 wifi: mt76: mt7996: fix RRO EMU configuration dc34c01521bf wifi: mt76: support upgrading passive scans to active a2cde15af378 wifi: mt76: fix multi-radio on-channel scanning 98e0118ab51c wifi: mt76: mt7996: Decrement sta counter removing the link in mt7996_mac_reset_sta_iter() e54c6440114d wifi: mt76: mt7996: Switch to the secondary link if the default one is removed d6f6b3a65660 wifi: mt76: mt7996: use correct link_id when filling TXD and TXP 5a3353b06387 wifi: mt76: mt7996: Remove link pointer dependency in mt7996_mac_sta_remove_links() 7da35e2d2fb7 wifi: mt76: mt7996: Add missing CHANCTX_STA_CSA property 1e0f3e5e2835 wifi: mt76: mt7921: fix 6GHz regulatory update on connection aa4a31cd89f4 wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() 6b7cbb13c838 wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() 419babee9b5c wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event ae94ef093a15 wifi: mt76: mt7996: fix wrong DMAD length when using MAC TXP 612bfcfdb993 arm64: cpufeature: Make PMUVer and PerfMon unsigned 5fc8c5d45e44 wifi: mt76: fix deadlock in remain-on-channel 35180c772f5e wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync 153bcba36c87 wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync e125def8b380 wifi: mt76: mt7925: drop puncturing handling from BSS change path a1a59bd3cd1e wifi: mt76: mt7925: cqm rssi low/high event notify dcbc13d19bef wifi: mt76: Fix memory leak destroying device 35835ff71e6e wifi: mt76: mt7921: Place upper limit on station AID e00c27608536 wifi: mt76: mt7996: fix FCS error flag check in RX descriptor 815db7fd57aa wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi 93d0694fb56d wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() b81a93dc0aed wifi: mt76: mt7915: fix use_cts_prot support 729b4adad191 wifi: mt76: mt7615: fix use_cts_prot support 9aa3b49e1c5b wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control 3880639cec09 wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() 1e16b0a9b988 wifi: mt76: mt7996: Reset ampdu_state state in case of failure in mt7996_tx_check_aggr() 455a48685fee wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link() 6d7f231d5fff wifi: mt76: mt7996: Reset mtxq->idx if primary link is removed in mt7996_vif_link_remove() 15205c72f1ec wifi: mt76: mt7996: Set mtxq->wcid just for primary link 900579479395 wifi: mt76: mt7996: fix iface combination for different chipsets 096b74331df2 wifi: mt76: mt7996: fix the behavior of radar detection d902905cb708 tools/nolibc/printf: Move snprintf length check to callback ea23d00b98f5 tools/nolibc/printf: Change variables 'c' to 'ch' and 'tmpbuf[]' to 'outbuf[]' ca5b2452d6f1 tools/nolibc: implement %m if errno is not defined 00c0317cebf4 wifi: libertas: don't kill URBs in interrupt context a761a1539a55 wifi: libertas: use USB anchors for tracking in-flight URBs d538795ea2ef module: Fix freeing of charp module parameters when CONFIG_SYSFS=n 8f32c95a5678 params: Replace __modinit with __init_or_module c8b710655012 powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy 366b0e05ee24 s390/bpf: Zero-extend bpf prog return values and kfunc arguments 3849f0ee39ea dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n eebe930e785d dpaa2: add independent dependencies for FSL_DPAA2_SWITCH 0ee803fc4787 wifi: ieee80211: fix definition of EHT-MCS 15 in MRU dd827cff429d wifi: ieee80211: split EHT definitions out df5720d35848 wifi: ieee80211: split HE definitions out f8d1e8038bc7 wifi: ieee80211: split VHT definitions out 4d5caab09dab wifi: ieee80211: split HT definitions out 3f459076b2d8 wifi: ieee80211: split mesh definitions out 5500913516e0 bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap aa10a452e348 wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet 9fe48cacab63 wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() b4f0a37724de sched/rt: Skip group schedulable check with rt_group_sched=0 4bd99f4f86b1 firmware: dmi: Correct an indexing error in dmi.h e5bdb8404df4 x86/vdso: Clean up remnants of VDSO32_NOTE_MASK d739426c2fd1 ASoC: Intel: avs: Include CPUID header at file scope 7e16c122695c ASoC: Intel: avs: Check maximum valid CPUID leaf e2a2781d1ae6 irqchip/renesas-rzg2l: Fix error path in rzg2l_irqc_common_probe() b5232c2f04e1 sched/topology: Fix sched_domain_span() 87800a0bd2fe sched/topology: Compute sd_weight considering cpuset partitions 5fbefcd7c38e locking: Fix rwlock support in 8e1be8f79fca scripts/gdb: timerlist: Adapt to move of tk_core 6adc01405605 sparc64: vdso: Link with -z noexecstack bec2fa23eaf2 rust: sync: atomic: Remove bound `T: Sync` for `Atomic::from_ptr()` 90e8cfcd217c x86/tdx: Fix the typo in TDX_ATTR_MIGRTABLE 2783ed2442ce perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler aaf2712f7674 perf/amd/ibs: Preserve PhyAddrVal bit when clearing PhyAddr MSR e017f5b69b76 hrtimer: Reduce trace noise in hrtimer_start() a8759eef4951 hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() 6b05c427a638 irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter 8139ce66b52a bus: fsl-mc: use generic driver_override infrastructure 2081957d8c32 s390/cio: use generic driver_override infrastructure 654ef9c33e13 vdpa: use generic driver_override infrastructure 2c5507010fc3 platform/wmi: use generic driver_override infrastructure 58a42be0d703 PCI: use generic driver_override infrastructure e52830bf37a2 cpufreq: Pass the policy to cpufreq_driver->adjust_perf() e6210630b24e amd-pstate: Update cppc_req_cached in fast_switch case 539aabbab190 amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() 187c8be0c48f soundwire: debugfs: initialize firmware_file to empty string bfe63c16fefb debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() 172b40b1468e debugfs: check for NULL pointer in debugfs_create_str() 5b4604cd5a9d thermal/drivers/spear: Fix error condition for reading st,thermal-flags 01cdbf3dcf89 devres: fix missing node debug info in devm_krealloc() ae04d2e67f9a ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver 9f8a61db50a8 ACPI: x86: cmos_rtc: Clean up address space handler driver 265ab7e7d40d OPP: Move break out of scoped_guard in dev_pm_opp_xlate_required_opp() 7cbabc3411a7 OPP: debugfs: Use performance level if available to distinguish between rates 9a24f0000876 btrfs: fix deadlock between reflink and transaction commit when using flushoncommit ff6b93410192 md: wake raid456 reshape waiters before suspend f8b799e4fd97 md: remove unused static md_wq workqueue 3f1e2902b5ec dm: add WQ_PERCPU to alloc_workqueue users d5559ac21f4a erofs: handle 48-bit blocks/uniaddr for extra devices 62c44566da74 md: fix array_state=clear sysfs deadlock 46194b5ba93b erofs: include the trailing NUL in FS_IOC_GETFSLABEL 5263ed3dd13b pstore/ram: fix resource leak when ioremap() fails b3e005f16cd9 blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() e5ff0ba4b698 nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() 37466ec483ea loop: fix partition scan race between udev and loop_reread_partitions() 996d279f2c98 drbd: Balance RCU calls in drbd_adm_dump_devices() c3ec2db64bfe md/raid1: fix the comparing region of interval tree 0e4eff315d79 fs/mbcache: cancel shrink work before destroying the cache 6561afc38398 fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START 93383b668107 blk-cgroup: wait for blkcg cleanup before initializing new disk 52386a7b1beb Linux 6.18.32 271cd5429513 drm/amdgpu/vcn4: Avoid overflow on msg bound check 016b64a0313e drm/amdgpu/vcn3: Avoid overflow on msg bound check e9edf9893cf2 vsock/virtio: fix accept queue count leak on transport mismatch 52da6a74ca3d vsock/virtio: fix empty payload in tap skb for non-linear buffers a534e1f985b6 vsock/virtio: fix length and offset in tap skb for split packets 2602f7bb5818 vsock: fix buffer size clamping order 8be786053797 batman-adv: tp_meter: fix tp_num leak on kmalloc failure 5e9dfc07d061 tracing/fprobe: Remove fprobe from hash in failure path a2181464a4a7 tracing/fprobe: Unregister fprobe even if memory allocation fails d83e51202fec tracing: fprobe: optimization for entry only case 52277410cbed tracing: fprobe: use rhltable for fprobe_ip_table 5d12e0ab009a btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak dfd05a16b5c9 btrfs: fix double free in create_space_info_sub_group() error path a4b5c5d2f8c5 btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() d784865ce48f usb: dwc3: Move GUID programming after PHY initialization 476ee6389120 usb: dwc3: Add dwc pointer to dwc3_readl/writel e63942da5e96 usb: dwc3: Remove of dep->regs ce9aaa3af445 sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters 30cf8e05d635 sched/ext: Implement cgroup_set_idle() callback dc34f8d8240f Bluetooth: hci_conn: fix potential UAF in create_big_sync c0a8dca8d556 spi: zynq-qspi: fix controller deregistration ed822a569645 spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() 33e5ce64b817 spi: tegra114: fix controller deregistration 65eafad7a600 spi: tegra20-sflash: fix controller deregistration fafa9a4e831b spi: uniphier: fix controller deregistration b0a97cb0b9ba spi: uniphier: Simplify clock handling with devm_clk_get_enabled() 6542e180fa6e pseries/papr-hvpipe: Fix race with interrupt handler 09c15bbbed53 papr-hvpipe: convert papr_hvpipe_dev_create_handle() to FD_PREPARE() 24d2912962d0 EDAC/versalnet: Fix device name memory leak d281f3ac0d00 block: fix zone write plug removal 7105d9f1387d fbcon: Avoid OOB font access if console rotation fails 1817dd0c350f fbcon: Rename struct fbcon_ops to struct fbcon_par f0d3bb6f5125 drm/amdgpu: rework how we handle TLB fences 13e9ea445191 Revert "drm/amdgpu: don't attach the tlb fence for SI" 576b73b24656 drm/amdgpu: Fix validating flush_gpu_tlb_pasid() fd78e63459ab drm/amdgpu: validate the flush_gpu_tlb_pasid() a9591e4083cc mm/damon/core: disallow time-quota setting zero esz 377c3d5dc952 usb: typec: tcpm: reset internal port states on soft reset AMS d893804e9e3b mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values 4697ed7be9b9 mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values 679e65ae721c mm/damon/core: implement damon_kdamond_pid() 20048f0b38cd LoongArch: KVM: Compile switch.S directly into the kernel f49a00180dfc io_uring/zcrx: warn on freelist violations 1a516d19100e io_uring/zcrx: use guards for locking 0baf4b659cdc batman-adv: bla: put backbone reference on failed claim hash insert b65365d2b1e6 batman-adv: bla: only purge non-released claims 00155f336a5e batman-adv: bla: prevent use-after-free when deleting claims 09dc0d1a1222 batman-adv: stop caching unowned originator pointers in BAT IV 03660dab86f9 batman-adv: stop tp_meter sessions during mesh teardown e1e2194cc725 batman-adv: reject new tp_meter sessions during teardown bf872db54f91 batman-adv: fix integer overflow on buff_pos c9dadb31f360 sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL cd39452498e2 arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 3eb7d0e2d4a0 arm64: dts: qcom: lemans: Correct QUP interrupt numbers f8f546883e87 drm/amdgpu/pm: align Hawaii mclk workaround with radeon 6fed6e9f1062 drm/amdgpu/pm: add missing revision check for CI 0b91ea46bb68 drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission 6fbd52d210c1 drm/amdkfd: Make all TLB-flushes heavy-weight 46bc180e6ede drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds 73af14be7645 drm/bridge: tda998x: Use __be32 for audio port OF property pointer 71614ab2a683 drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ f6dbec5bee72 drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds ed21d6e4ce03 drm/exynos: remove bridge when component_add fails b17175d0a375 drm/amdgpu: zero-initialize GART table on allocation 264ee64cf867 drm/radeon: add missing revision check for CI 672464dd5323 drm: Set old handle to NULL before prime swap in change_handle 87f9b1528e1f drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise fa449b88706e drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() 0afa8b1ef582 drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() cd38e1503e67 drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() f9ad21b90162 drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure 2b5ba326f9d0 drm/udl: Increase GET_URB_TIMEOUT db9530a9873a drm/amdkfd: validate SVM ioctl nattr against buffer size a7735b491a2d drm/appletbdrm: Use kvzalloc for big allocations 1a17ea9861e8 drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() 158def957199 drm/amd/display: Change dither policy for 10 bpc output back to dithering 638e48ee39d0 drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg 63b51e8a9d54 drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg b3d1a0a45c4a drm/amdgpu/vce: Prevent partial address patches a6d5563ba1f0 drm/amdgpu/vcn4: Prevent OOB reads when parsing IB fec8b11b55e5 drm/amdgpu: Add bounds checking to ib_{get,set}_value 44d5a450c04d drm/amdkfd: Add upper bound check for num_of_nodes de137adccf7a drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x f34eda3ff33d drm/amdgpu: gate VM CPU HDP flush on reset lock 2795d325bb5c drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. 77d0b5d11387 drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure 48fb2213e2c2 drm/i915/psr: Init variable to avoid early exit from et alignment loop 132b8d51f0ff drm/msm: always recover the gpu c5b5a0e418b1 drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property c57c861956b8 drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() e9ae6590405d spi: cadence: fix clock imbalance on probe failure 6ac380a0071d spi: cadence: fix unclocked access on unbind 59701f07b19e spi: cadence: fix controller deregistration 6c3e413919a1 spi: mpc52xx: fix use-after-free on unbind 28f28a0f4e32 spi: mpc52xx: fix controller deregistration 336d9ad7560b spi: mpc52xx: fix use-after-free on registration failure 07dc76d31be4 spi: orion: fix clock imbalance on registration failure b809b8d2a114 spi: orion: fix runtime pm leak on unbind ec7a4cff8355 spi: orion: fix controller deregistration 5c03d52ee6ce spi: mxic: fix controller deregistration 2a2973cb3682 spi: imx: fix runtime pm leak on probe deferral 6a405d594207 spi: mpfs: fix controller deregistration b2bdbe293012 spi: img-spfi: fix controller deregistration 4b0fe572a8ea spi: slave-mt27xx: fix controller deregistration 0df72db5a13c spi: sh-msiof: fix controller deregistration aee76c1dd189 spi: rspi: fix controller deregistration 229cc70e4e90 spi: sprd: fix controller deregistration cdbf6baefff0 spi: pic32-sqi: fix controller deregistration 82a95eca235b spi: cavium-thunderx: fix controller deregistration e84a84209b3f spi: npcm-pspi: fix controller deregistration ee2100d08094 spi: coldfire-qspi: fix controller deregistration 047f939c602c spi: bcmbca-hsspi: fix controller deregistration ca3195c7b883 spi: fsl: fix controller deregistration d78c5ca1563c spi: sh-hspi: fix controller deregistration 4422fc2411cb spi: ch341: fix devres lifetime af4f58c18c4c spi: pl022: fix controller deregistration cc8a904cbe6d spi: mtk-nor: fix controller deregistration 894d761a3a85 spi: pic32: fix controller deregistration 4ed7de898bbb spi: omap2-mcspi: fix controller deregistration 09ceedcebc77 spi: fsl-espi: fix controller deregistration b99939bccae9 spi: s3c64xx: fix controller deregistration c74ba7340010 spi: dln2: fix controller deregistration 724520793a2e spi: mt65xx: fix controller deregistration cc525debdfc8 spi: mxs: fix controller deregistration 22ee38cbf536 media: qcom: camss: Add missing clocks for VFE lite on sa8775p 696ac7c49c27 media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init() 095c51bc86d3 media: venus: fix QCOM_MDT_LOADER dependency e56a25247860 media: qcom: iris: increase H265D_MAX_SLICE to fix H.265 decoding on SC7280 9d6217429cd4 media: qcom: camss: Fix csid IRQ offset for sa8775p 8744fd0835dd media: qcom: camss: Fix csid clock configuration for sa8775p dd24998a4a40 media: iris: Fix use-after-free in iris_release_internal_buffers() 1920b4602ec9 media: iris: fix QCOM_MDT_LOADER dependency d172bb82f70c media: omap3isp: drop the use count of v4l2 pipeline cedfde9f45b1 media: i2c: ov08d10: fix runtime PM handling in probe d9e678e8c633 media: i2c: ov08d10: fix image vertical start setting ea91dee38b4e media: staging: imx: request mbus_config in csi_start 731d7ab8dfa2 media: i2c: imx412: Assert reset GPIO during probe 34fe9c3c594e media: dib8000: avoid division by 0 in dib8000_set_dds() def939175ab8 media: pci: zoran: fix potential memory leak in zoran_probe() 84d781069294 arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt 65d7b2aecdfe arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon 5167575b79e2 vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy 75c38af4d919 platform/x86: hp-wmi: Ignore backlight and FnLock events 45890a035e2b spi: aspeed-smc: fix controller deregistration 07938829cc11 spi: amlogic-spisg: fix controller deregistration 6047dc542fa4 media: saa7164: add ioremap return checks and cleanups d6f56e66e8f4 spi: at91-usart: fix controller deregistration 5d707cf9c138 spi: qup: fix controller deregistration 4eccd83f228f spi: meson-spicc: fix controller deregistration 6ca3eaa82812 spi: lantiq-ssc: fix controller deregistration 184dcecc9521 regulator: bd9571mwv: fix OF node reference imbalance 037bcca27835 regulator: s2dos05: fix OF node reference imbalance 890a8bcef309 regulator: act8945a: fix OF node reference imbalance 41ef27dcaa12 media: i2c: imx283: Fix hang when going from large to small resolution f43e30646fc9 media: intel/ipu6: fix error pointer dereference 21fade52ab9f media: videobuf2: Set vma_flags in vb2_dma_sg_mmap dd681c102b4b regulator: rk808: fix OF node reference imbalance e7374c142169 regulator: bq257xx: fix OF node reference imbalance 6c5d4c819d92 media: i2c: imx283: Enter full standby when stopping streaming ecd0c501bd63 media: rc: streamzap: Error handling in probe 63a960b39de9 media: rc: xbox_remote: heed DMA restrictions a8ada5b76115 regulator: max77650: fix OF node reference imbalance 8993d307cf2c spi: st-ssc4: fix controller deregistration 2d51cfca8482 regulator: mt6357: fix OF node reference imbalance c7848b67ef10 staging: media: atomisp: Disallow all private IOCTLs af2dc8b8460c arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux 72972aba49df spi: atmel: fix controller deregistration c66a6f226a5f spi: bcm63xx: fix controller deregistration 7fbb3b4bef02 drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages ea28b33e1b15 media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change() d71fc6874fce media: chips-media: wave5: add missing spinlock protection for send_eos_event() b40ec65e0926 media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init() 6261d5fd172b media: dt-bindings: rockchip,vdec: Mark reg-names required for RK35{76,88} 361e66fb431d media: dt-bindings: rockchip,vdec: Add alternative reg-names order for RK35{76,88} 791598484fd5 media: i2c: ov8856: free control handler on error in ov8856_init_controls() b6e5c80cc2b2 media: renesas: vin: Fix RAW8 (again) bfb2081ba00a media: renesas: vsp1: Fix NULL pointer deref on module unload 4d6e8496486d media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 0ac9ec121d89 drm/msm/hdmi: Fix wrong CTRL1 register used in writing info frames 06d99af8db11 media: uvcvideo: Enable VB2_DMABUF for metadata stream 80d8cc29d3b6 HID: pidff: Fix integer overflow in pidff_rescale 5c0830323689 HID: appletb-kbd: run inactivity autodim from workqueues 59a79938ca55 HID: appletb-kbd: fix UAF in inactivity-timer cleanup path 7812694752a5 HID: playstation: Clamp num_touch_reports Signed-off-by: Bruce Ashfield Signed-off-by: Richard Purdie (cherry picked from commit d13ca2a2e0f478046d920b8fc7dd3098952b5ad8) Signed-off-by: Yoann Congal --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend index c0ca3aef..ec18aba2 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v6.18/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "3acde948b7470a96df7e730a2119ffaee380d6b1" +SRCREV_machine:genericarm64 ?= "6bf211598fd7bc81856d3d84b0cc610e2bbe81db" From patchwork Sun Jul 5 22:48:16 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 91760 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7D706C43458 for ; Sun, 5 Jul 2026 22:48:40 +0000 (UTC) Received: from mail-wm1-f45.google.com (mail-wm1-f45.google.com [209.85.128.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.139314.1783291713408151176 for ; Sun, 05 Jul 2026 15:48:33 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=BuF/lPPx; spf=pass (domain: smile.fr, ip: 209.85.128.45, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f45.google.com with SMTP id 5b1f17b1804b1-493b77b150aso22268835e9.2 for ; Sun, 05 Jul 2026 15:48:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1783291712; x=1783896512; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=ieLaBgMG+QyFbyOo7UafUB5Gb6VCWqOnqMhUd6ScaBQ=; b=BuF/lPPxangJuJ9/8cvEp2Hjc3Eljekkn2neJ5pSgchn6z5xEqwN6eihyiMCKkbM/D uN/dcydqC/3AKPHVSprY+8gIQab4+2xY3rL8c/kBOdKxvzhi1z9Q+y16nyX6LbZpjMZV TtP3KSuyNWkIyOV3eOJMcaOre2RXWHoD4YBP8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783291712; x=1783896512; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=ieLaBgMG+QyFbyOo7UafUB5Gb6VCWqOnqMhUd6ScaBQ=; b=GTu9VgbzR/pbILR42e1k81Emunviqmoeq5ZcZHyGaP25+Jv6l0Wvs/EwmXT+vtQwBz qcCtwUpQilIPaFjgg7R5K9/nCJK9OSLgLFFlS/TjrT4dwLzFWrTaVlZF7ZXsLdtS9aZI mB0c/5vyJvr0neUyioSRwGAAAbOVtCOB7NObT3qAxK/1SQBAEuJ0KdJ+RrmBBtK16Q2e 0/kwIDSd3YKTXtqW7PR7IIiVDR9ff1i7vImfx7KiP0K+1Qv/6oAoTiZFqEUeMtQHcrgJ oLsGNJyoIA34BKlpmcLwTVyc1fl0+gCdMMcNNOax7ZSQmQgAxTLUysiaI6itm5zTMqDB S46Q== X-Gm-Message-State: AOJu0YzyvnOCGL7E6plwkf1mNJf/J+WtjWDPmKmCayADQf2ykymThozj eGwnc/kWeQBvy7vjPHqYB6oQthxMwvreGcvYWaE1GC7iDLjSX20dl5kYtV5ik3AeUlC42iiBM5P HPfO28H8= X-Gm-Gg: AfdE7ckl7zRYAOKhEbOjNPUeKbr6wAmBUp0TaqsYYuGGRPdzdAmZqr2ckkeAap1GbBq j78Kfyc/ht8XniLoTV8ZLRJD/QjFQ46ocnfF26AdV7Q8q3khjyt02CShZShWxItg7YgrzV+OjV2 cO89KSeS+8X1BbcLku5yUzq2/Uj7NzsRRqewh6+D+GRDp3CDOK0X4+k80PjkT46gruW28ZrvsnY Gl/Owsn90rmrwBmCj+Mp340kp1KllacxxVCMGwHoGa6iEjUSzebOMT3u4mdGIxyBsDPOfLAFvJh yE1czy4J5sAS415QqO7Get9XjAApHkqcziXgm7B+Y1OiXLIhTzTptxGwNxCW/WQtv3GieTUJMkk /pf/WFe5ELumAR/1G1795AaTNuhh/fx+lCxpoVAM1SuiWLFjOmZJtZPpfimfrzfTRfg39+Iw+zG POAyfRyOLMqMtoR7mYo3c5UHAMOQ== X-Received: by 2002:a05:600c:6592:b0:492:490b:a604 with SMTP id 5b1f17b1804b1-493d11fed8fmr84234015e9.37.1783291711300; Sun, 05 Jul 2026 15:48:31 -0700 (PDT) Received: from FRSMI25-LASER.lan ([2001:861:8010:5750:6d3a:72ff:5857:d2a8]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-47a9de1d905sm19346073f8f.2.2026.07.05.15.48.30 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 05 Jul 2026 15:48:30 -0700 (PDT) From: Yoann Congal To: poky@lists.yoctoproject.org Subject: [meta-yocto][wrynose 6/7] yocto-bsps: update to v6.18.34 Date: Mon, 6 Jul 2026 00:48:16 +0200 Message-ID: <1cf433f2a31cbc595d8864e8449e0194e375945c.1783291504.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 05 Jul 2026 22:48:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/poky/message/13935 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: 18ad16ce4a6b Linux 6.18.34 50bb3435a5e6 security/keys: fix missed RCU read section on lookup 239172639075 drm/msm: Restore second parameter name in purge() and evict() 306ba9d0e5aa LoongArch: kprobes: Fix handling of fatal unrecoverable recursions a1a39f227c80 ksmbd: fix durable reconnect error path file lifetime 6836f694126e io_uring/nop: pass all errors to userspace e334cbf3388f net: gro: don't merge zcopy skbs 8129611d4ede pds_core: ensure null-termination for firmware version strings d1d76bbb6d7a net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback 719007c3492f tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR fa627a5eaa83 net: mana: validate rx_req_idx to prevent out-of-bounds array access bc0020490f88 octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs 76dd50b7888d selftests: net: Fix checksums in xdp_native 04ef7592eaad drm/xe/oa: Fix exec_queue leak on width check in stream open db86ac6d8daf ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() decacc6308c5 gpio: aggregator: lock device when calling device_is_bound() 3e657619cf72 gpio: aggregator: remove the software node when deactivating the aggregator 80d94cf1773a gpio: aggregator: stop using dev-sync-probe ea28b286649b gpio: aggregator: fix a potential use-after-free 4669f84adcb1 gpio: cdev: check if uAPI v2 config attributes are correctly zeroed e47f7060eaf6 tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction 1861d369efd6 bpf, skmsg: fix verdict sk_data_ready racing with ktls rx 26f1d4522060 net: ag71xx: check error for platform_get_irq 585f9f6aef5c crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks 2417df5e7bb4 net: shaper: rework the VALID marking (again) 5a2c2aa139c8 net: shaper: annotate the data races b5bd4249e430 net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA a0f5268c77eb Bluetooth: btmtk: fix urb->setup_packet leak in error paths c7860b6a6d2d Bluetooth: btintel_pcie: Fix incorrect MAC access programming d6c8b3ebdcdb tracing: Avoid NULL return from hist_field_name() on truncation 8bf00d3ac425 cgroup: rstat: relax NMI guard after switch to try_cmpxchg 3aab4a58d23f ALSA: seq: Serialize UMP output teardown with event_input 95c82d498d74 wifi: wilc1000: fix dma_buffer leak on bus acquire failure 55c479aae99b wifi: mac80211: fix MLE defragmentation 2d8379834800 wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs 425d32d6288d erofs: fix managed cache race for unaligned extents 91d13e92b983 pds_core: fix debugfs_lookup dentry leak and error handling 784dd2bdc622 pds_core: fix error handling in pdsc_devcmd_wait ce23832071af net: airoha: Fix NPU RX DMA descriptor bits 0c277d203684 net: phy: honor eee_disabled_modes in phy_advertise_eee_all() bd731994cff1 net: phy: honor eee_disabled_modes in phy_support_eee() a9224862d597 bridge: mcast: Fix a possible use-after-free when removing a bridge port 981aea209977 net: bridge: Flush multicast groups when snooping is disabled eae62c5451e6 RDMA/rtrs: Fix use-after-free in path file creation cleanup 8c63698737b4 RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port d5b11e15ee67 ASoC: soc-utils: Add missing va_end in snd_soc_ret() 09deb063eecf platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL f6dfd64bfd9b platform/x86: intel-hid: Check ACPI_HANDLE() against NULL ed864a7b881c platform/x86: hp_accel: Check ACPI_COMPANION() against NULL 7ea5aad8d351 platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL 098419a4b062 platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7 09ec063d87c2 net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer f71fc35b5e45 net: dsa: mt7530: preserve VLAN tags on trapped link-local frames 89bed786f231 net: dsa: mt7530: fix FDB entries not aging out with short timeout f1739debda62 kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme ad8e3d096fa1 drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP 1f83545f432d igc: set tx buffer type for SMD frames 89964ddb322a ice: ptp: use primary NAC semaphore on E825 0010296879df ice: ptp: serialize E825 PHY timer start with PTP lock 6a01413a4e8f cgroup/rstat: validate cpu before css_rstat_cpu() access 83b8a0f72ecc drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable 8ea34da68964 drm/mediatek: mtk_cec: Fix non-static global variable 926a08cf19be wifi: ath11k: fix peer resolution on rx path when peer_id=0 6c9e9272bc37 drm/xe/pf: Fix CFI failure in debugfs access dc26e00860a1 drm/xe/vf: Fix signature of print functions 2c890e71ae26 drm/xe/gsc: Fix double-free of managed BO in error path 181e67bc11c5 dma-mapping: move dma_map_resource() sanity check into debug code 3a74aaad0473 wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it 9e360e610a73 wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled bed1fc32e0eb hwmon: (lm90) Add lock protection to lm90_alert c98107817b0f hwmon: (lm90) Stop work before releasing hwmon device cdd1aaf0ee96 drm/msm/snapshot: fix dumping of the unaligned regions 0c9e4d9484cc ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5 df19b6af1716 netfilter: nft_inner: release local_lock before re-enabling softirqs 0fa225896f4b spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() fecfed41da73 ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging 7e91d3a1a98a btrfs: fix squota accounting during enable generation ca56ffdb017b btrfs: check for subvolume before deleting squota qgroup b422609291f6 btrfs: relax squota parent qgroup deletion rule 22d558df51d9 btrfs: check squota parent usage on membership change a1296bb9f44a btrfs: remaining BTRFS_PATH_AUTO_FREE conversions 76ad957a72c7 btrfs: don't search back for dir inode item in INO_LOOKUP_USER 16141bef6fb1 btrfs: use the key format macros when printing keys 35f69e993d00 btrfs: add macros to facilitate printing of keys 76b995bc57bd vsock/virtio: fix zerocopy completion for multi-skb sends 782693eb53f8 io_uring/net: punt IORING_OP_BIND async if it needs file create c53cac053d62 ALSA: scarlett2: Add missing error check when initialise Autogain Status 1ddf678bb75b ASoC: codecs: fs210x: fix possible buffer overflow 36de63965464 scsi: sd: Fix return code handling in sd_spinup_disk() b4dc0056397f net/mlx5: Do not restore destination-less TC rules 81c8a9f75a42 tls: Preserve sk_err across recvmsg() when data has been copied 1370acb8bc39 ovpn: disable BHs when updating device stats f7808b7ddcf2 x86/xen: Fix xen_e820_swap_entry_with_ram() 2378d25675da gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE 097d62df3831 ovpn: fix race between deleting interface and adding new peer 8298834912d7 ovpn: respect peer refcount in CMD_NEW_PEER error path e5460eb7238c ovpn: tcp - use cached peer pointer in ovpn_tcp_close() 2bc34520ce5c net: phy: DP83TC811: add reading of abilities af855f4c966a net: tls: prevent chain-after-chain in plain text SG eca989eab4b2 net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring afa9036b8c99 net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot 6dcd072a5ae3 powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() f4e37f3df436 drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN eea43d5ed450 drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx 3a7b59d2385d Documentation: intel_pstate: Fix description of asymmetric packing with SMT 3ad2d8be6e4d x86/mce: Restore MCA polling interval halving 15dba511d569 selftests: ublk: cap nthreads to kernel's actual nr_hw_queues ff58e5ef1b46 drm/msm/dpu: don't mix devm and drmm functions a184aec79013 drm/msm/dsi: don't dump registers past the mapped region d235f8f7b264 ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics d2ea0b8aef87 net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint 97a8e89cdef3 accel/qaic: Add overflow check to remap_pfn_range during mmap 76410790f149 block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() 086695145000 HID: quirks: really enable the intended work around for appledisplay 0943f81e1b31 block: recompute nr_integrity_segments in blk_insert_cloned_request 0d48654af4d1 block: don't overwrite bip_vcnt in bio_integrity_copy_user() a52486394493 net: shaper: reject QUEUE scope handle with missing id 77ec90d41c59 net: shaper: enforce singleton NETDEV scope with id 0 d7c2bbbaa2c4 net: shaper: fix undersized reply skb allocation in GROUP command f817ce8d1943 net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit 5098b223f0f0 net: shaper: reject duplicate leaves in GROUP request d6128451c591 net: shaper: fix trivial ordering issue in net_shaper_commit() d947e6685ff4 net: shaper: flip the polarity of the valid flag e1b429d8e712 wifi: ath10k: skip WMI and beacon transmission when device is wedged d94127d04017 wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() acde4692afcd wifi: ath11k: fix error path leaks in some WMI WOW calls 9bc70fe995da net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference c373b34877af net: ethernet: cortina: Carry over frag counter 3cd05250a2df net: ethernet: cortina: Drop half-assembled SKB cfd62907f3cd net: ethernet: cortina: Make RX SKB per-port 77bb293049d6 netfs, afs: Fix write skipping in dir/link writepages f17b9121bb99 netfs: Fix netfs_read_folio() to wait on writeback 551b5c71ee31 netfs: Fix folio->private handling in netfs_perform_write() 3d9601c029b9 netfs: Fix partial invalidation of streaming-write folio 6080fa3ecfbb netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() 22ae28aae436 netfs: Fix leak of request in netfs_write_begin() error handling d4f4bc87c765 netfs: Fix early put of sink folio in netfs_read_gaps() 616578e40dcb netfs: Fix write streaming disablement if fd open O_RDWR 0b18cd70ebab netfs: Fix read-gaps to remove netfs_folio from filled folio 003aa0dd26c9 netfs: Fix potential deadlock in write-through mode ef9b521212e4 netfs: Fix streaming write being overwritten 185ded4112cd netfs: Defer the emission of trace_netfs_folio() fb6ec883b48b netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone afeb32d9bf9a netfs: Fix overrun check in netfs_extract_user_iter() b63971238beb netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call 884c4c4f35e5 netfs: Fix netfs_read_to_pagecache() to pause on subreq failure 5366199be46f netfs: Fix cancellation of a DIO and single read subrequests 9c6f23cf3a07 powerpc: fix dead default for GUEST_STATE_BUFFER_TEST 822bb1614ec4 powerpc: 82xx: fix uninitialized pointers with free attribute aed60070ed7b ASoC: SOF: amd: Fix error code handling in psp_send_cmd() 510db031ba6e tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). eba8af785fde zonefs: handle integer overflow in zonefs_fname_to_fno 9525e3a6fbb1 nvme-pci: fix use-after-free in nvme_free_host_mem() fea4b46f84c5 nvme: fix bio leak on mapping failure 18c0456ea261 irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT 06ee55f78fbe nsfs: fix wrong error code returned for pidns ioctls d168a71fc1d6 ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation 617a2564d863 irqchip/ath79-cpu: Remove unused function ace6b3e033c6 fs: Fix return in jfs_mkdir and orangefs_mkdir e37ea2c6f17f fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap 56b4cfcf1518 fprobe: Fix unregister_fprobe() to wait for RCU grace period 36dc0cea30db ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC 5afefecfe054 ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC fe59ae27d734 NFSD: Fix infinite loop in layout state revocation e9405f704127 phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access 994358adc098 net: ti: icssm-prueth: fix eth_ports_node leak in probe 7df3e1dfee53 net: lan966x: avoid unregistering netdev on register failure d91a9a049698 ice: fix locking in ice_dcb_rebuild() 34ad3c782644 ice: fix setting RSS VSI hash for E830 eb5991d4c8ba idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() a248793f00ab net: shaper: Reject reparenting of existing nodes bfe08fe5624b net: napi: Avoid gro timer misfiring at end of busypoll 77e7818eb347 tcp: Fix imbalanced icsk_accept_queue count. 1c24cf1fd67f test_kprobes: clear kprobes between test runs ae8a5c6b0316 kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() c647e2a21bbb netfilter: bridge: eb_tables: close module init race 524b6337277a netfilter: x_tables: close dangling table module init race cc989ef1c044 netfilter: ebtables: close dangling table module init race 739d5dac7b2d netfilter: ebtables: move to two-stage removal scheme 86ee5bc9c0f0 netfilter: x_tables: add and use xtables_unregister_table_exit 89ebafe7910d netfilter: x_tables: add and use xt_unregister_table_pre_exit a9b2f73f6ba7 netfilter: x_tables: unregister the templates first c32a7e0e3c73 btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() 373f65b448ed ALSA: hda: cs35l41: Put ACPI device on missing physical node fecae8b1fb2d ALSA: hda: cs35l56: Put ACPI device after setting companion e984dc22e2c2 ARM: integrator: Fix early initialization 9e472874c954 firmware: arm_ffa: Fix sched-recv callback partition lookup d1e38551fade firmware: arm_ffa: Snapshot notifier callbacks under lock 419cef661ae8 firmware: arm_ffa: Align RxTx buffer size before mapping 3c51d99449dc firmware: arm_ffa: Validate framework notification message layout 0a5dbac5ef53 firmware: arm_ffa: Keep framework RX release under lock f39bc7ebe75e firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies fd2b01637e56 pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 3f4d82780001 kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS 91e4446b35f6 kunit: config: Enable KUNIT_DEBUGFS by default 96b8b9d0dead riscv: mm: Fixup no5lvl failure when vaddr is invalid f3216d930c0f riscv: errata: Fix bitwise vs logical AND in MIPS errata patching 1aa01b46fe3b firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 07907b897bb7 firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue 1418765d28ab firmware: arm_ffa: Skip free_pages on RX buffer alloc failure 820245d86ce5 firmware: arm_ffa: Check for NULL FF-A ID table while driver registration 4894847fcec1 HID: uclogic: Fix regression of input name assignment e912d5dc0096 HID: intel-thc-hid: Intel-quickspi: Fix some error codes 1fce9dcb3a66 pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615 e917713f0134 pinctrl: meson: amlogic-a4: fix deadlock issue 8d1c6b603327 pinctrl: renesas: rzg2l: Fix SMT register cache handling c4cfa8ee7737 pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume a7fee1322683 ARM: dts: renesas: rskrza1: Drop superfluous cells d27b29e474a6 ARM: dts: renesas: genmai: Drop superfluous cells 00aca89f5e34 pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function eb3cd9bb5904 hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors dd12c6dbe2ac hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() a203125c0e81 hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() b2998ae90331 hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple fa7ca363069a hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR 97a9cf2a8217 hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer 2279c342d94e hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer 75c862adf3d3 hwmon: (pmbus/adm1266) reject implausible blackbox record_count e9b8f85daebf hwmon: (pmbus/adm1266) seed timestamp from the real-time clock e37dbe150515 batman-adv: tt: prevent TVLV entry number overflow 730de8733dd9 batman-adv: tt: fix negative tt_buff_len 179eb62506a0 batman-adv: tt: fix negative last_changeset_len b93ca6012712 batman-adv: tt: avoid empty VLAN responses 7cac9c9ef4b7 batman-adv: tt: reject oversized local TVLV buffers 4cc85aec8d3c batman-adv: tt: fix TOCTOU race for reported vlans 2d2d365d0b9d batman-adv: tp_meter: avoid role confusion in tp_list 72d670d7a492 batman-adv: tp_meter: fix race condition in send error reporting b285bc0a97f4 batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown 770bf0a35f06 batman-adv: tp_meter: directly shut down timer on cleanup dc2ae5fbd2da batman-adv: tp_meter: avoid use of uninit sender vars 6921a7683ae9 batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface 45384612f296 batman-adv: bla: avoid double decrement of bla.num_requests c6de1a5a9c40 batman-adv: bla: fix report_work leak on backbone_gw purge 5895ad21c705 batman-adv: frag: disallow unicast fragment in fragment 90ae3eae06b7 batman-adv: fix tp_meter counter underflow during shutdown 3eb8bcb82339 batman-adv: fix fragment reassembly length accounting 9cceea8eeba7 batman-adv: dat: handle forward allocation error ae7aeb0ce3c0 batman-adv: clear current gateway during teardown 8a3707653ab6 batman-adv: mcast: fix use-after-free in orig_node RCU release ca3ff3d2a0af batman-adv: iv: recover OGM scheduling after forward packet error ede47988ac56 batman-adv: tvlv: reject oversized TVLV packets 23d4ce84df4d batman-adv: tvlv: abort OGM send on tvlv append failure 1be1e99cbd5b batman-adv: v: stop OGMv2 on disabled interface 1ecde19bfce6 drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async 7ca695b31222 drm/amd/display: Validate GPIO pin LUT table size before iterating 6bbd703ea1c1 drm/amd/display: Fix integer overflow in bios_get_image() d35563813296 drm/bridge: megachips: remove bridge when irq request fails 95306db11956 drm/bridge: it66121: acquire reset GPIO in probe 3ed448c1dc78 drm/amdgpu/vpe: Force collaborate sync after TRAP 8fadd01cf461 drm/virtio: use uninterruptible resv lock for plane updates 35671087a272 drm/v3d: Release indirect CSD GEM reference on CPU job free 0f8efc45740b drm/v3d: Fix use-after-free of CPU job query arrays on error path 942968260e61 drm/msm: Fix shrinker deadlock 508fd8ab158a device property: set fwnode->secondary to NULL in fwnode_init() 22d9b9739b8e LoongArch: Remove unused code to avoid build warning f27a3b9aadfb LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions 9e3f18883a98 fwctl: pds: Validate RPC input size before parsing 1012896f4225 RDMA/siw: Reject MPA FPDU length underflow before signed receive math d7a076fb596c spi: ti-qspi: fix use-after-free after DMA setup failure be409d2bbe9c spi: sprd: fix error pointer deref after DMA setup failure 8e027db9fa31 spi: ep93xx: fix error pointer deref after DMA setup failure b9ff86310062 scsi: isci: Fix use-after-free in device removal path 78a369a065f1 phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix 58f4a7bd8d73 phy: tegra: xusb: Fix per-pad high-speed termination calibration a1f50f5aaa69 phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870 4bb4764f2c51 spi: qup: fix error pointer deref after DMA setup failure ecdf21536c6d drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe bee400ad4f42 virt: sev-guest: Explicitly leak pages in unknown state 4f087193b5ff riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM 77071943c752 riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM 94ade38f317e KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) 7023900b4988 KVM: arm64: vgic: Free private_irqs when init fails after allocation 0680f5119265 KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits 240373425e2d arm64: probes: Handle probes on hinted conditional branch instructions 798183376d9d tracing: Do not call map->ops->elt_free() if elt_alloc() fails 5e7d9d0805e5 cifs: Fix busy dentry used after unmounting 2dd9304727c7 wifi: mac80211: consume only present negotiated TTLM maps acdff9907478 af_unix: Fix UAF read of tail->len in unix_stream_data_wait() 6cfae4914439 wifi: cfg80211: advance loop vars in cfg80211_merge_profile() 50884c2afd7a ice: restore PTP Rx timestamp config after ethtool set-channels 0b9431b972a0 ice: fix setting promisc mode while adding VID filter 9c9d00d81b41 ice: fix locking around wait_event_interruptible_locked_irq f1bafd35f11b igc: fix potential skb leak in igc_fpe_xmit_smd_frame() 8864b664d044 octeontx2-pf: fix double free in rvu_rep_rsrc_init() 47a4cf2229be octeontx2-af: CGX: add bounds check to cgx_speed_mbps index 5b906f31e977 lsm: hold cred_guard_mutex for lsm_set_self_attr() 9dcd4f5c99b4 rbd: eliminate a race in lock_dwork draining on unmap dfef79e09ed2 ixgbevf: fix use-after-free in VEPA multicast source pruning 7725cd3b4717 ipv4: raw: reject IP_HDRINCL packets with ihl < 5 dc31c6947652 wifi: iwlwifi: mld: stop TX during firmware restart 6fe92651b44f wifi: iwlwifi: mvm: fix driver-set TX rates on old devices 614cacec60fe wifi: ath11k: clear shared SRNG pointer state on restart a3529032afe2 ice: fix VF queue configuration with low MTU values c618cf8926c0 vsock/virtio: reset connection on receiving queue overflow 440447699c68 vsock/vmci: fix UAF when peer resets connection during handshake 29b643351012 mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient abdd03229414 ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() 2bc60c175568 ring-buffer: Flush and stop persistent ring buffer on panic 610ff6bc2f44 ring-buffer: Fix reporting of missed events in iterator 0e47fc1c9181 qed: fix double free in qed_cxt_tables_alloc() e0c3dd7b30cc l2tp: use list_del_rcu in l2tp_session_unhash d73dcd1520d6 fs/ntfs3: handle attr_set_size() errors when truncating files 358692462555 net: ethtool: phy: avoid NULL deref when PHY driver is unbound 61f53c1e58d6 net: ethtool: fix NULL pointer dereference in phy_reply_size 752ea4a105e6 cgroup/cpuset: Reset DL migration state on can_attach() failure 1aed73795392 tracing/fprobe: Check the same type fprobe on table as the unregistered one f0ad68d2f0ad tracing/fprobe: Avoid kcalloc() in rcu_read_lock section bb92f356d2b7 tracing: fprobe: use ftrace if CONFIG_DYNAMIC_FTRACE_WITH_ARGS 52cc572c9565 tracing: fprobe: Remove unused local variable 45c7c4e3db8b sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path 6e73ec10b2a3 sched_ext: Fix missing warning in scx_set_task_state() default case 689bbf48c1f4 netfilter: nft_inner: Fix IPv6 inner_thoff desync 952e988163c2 netfilter: ipset: stop hash:* range iteration at end 15d464265120 netfilter: nf_queue: hold bridge skb->dev while queued 57b0ac5e1b46 netfilter: ip6t_hbh: reject oversized option lists dac025c4e8f9 net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis() f8a5a76b4a68 net: ifb: report ethtool stats over num_tx_queues 1604a2d68414 net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover 49eff79967fd net: phy: skip EEE advertisement write when autoneg is disabled 3d4ef05266ab net: bcmgenet: keep RBUF EEE/PM disabled 84bc87beb4cd phonet/pep: disable BH around forwarded sk_receive_skb() 8b4c412e001b Bluetooth: serialize accept_q access f1febe93ef07 Bluetooth: MGMT: validate Add Extended Advertising Data length 051922ab709c Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer 192cb0f1ca70 Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths 5506aec79513 Bluetooth: bnep: Fix UAF read of dev->name 61f2410a96de Bluetooth: ISO: drop ISO_END frames received without prior ISO_START added1213395 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() ffb6dbb49c96 net: wwan: iosm: fix potential memory leaks in ipc_imem_init() 0fa24311bd42 selftests/mm: run_vmtests.sh: fix destructive tests invocation 738d18f1da35 mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free 09ce923071e7 mm/memory_hotplug: fix memory block reference leak on remove 62153767e8fc mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() 2fff0cdd9422 mm/memory: fix spurious warning when unmapping device-private/exclusive pages 24de676da63c ipv6: ioam: refresh hdr pointer before ioam6_event() 24840b3139d7 drivers/base/memory: fix memory block reference leak in poison accounting b737c6612c60 io_uring/waitid: clear waitid info before copying it to userspace 5fb947ddae55 spi: amd: Set correct bus number in ACPI probe path c32a1fbe0f9a efi: Allocate runtime workqueue before ACPI init fcbd0a5fd812 ALSA: scarlett2: Allow flash writes ending at segment boundary 61c5017c64e2 ALSA: asihpi: Fix potential OOB array access at reading cache feff0251386a ALSA: pcm: Don't setup bogus iov_iter for silencing cba8dab72e9b ALSA: ua101: Reject too-short USB descriptors ca560f7566df hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX 9803e75c9813 smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close d65104a4a815 smb: client: use data_len for SMB2 READ encrypted folioq copy bf4ebdb19ff9 smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() a8d17d22db59 smb: client: require net admin for CIFS SWN netlink 6827647fd2dc regulator: tps65219: fix irq_data.rdev not being assigned 18d8db24b0a5 ksmbd: validate SID in parent security descriptor during ACL inheritance 0e198f09cb2a ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow cd5c1b75d2f4 ksmbd: fix null pointer dereference in compare_guid_key() 302e02f9ba49 mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() 48fa96538bd2 sysfs: don't remove existing directory on update failure 141ffb83abe9 drm/vblank: Fix kernel docs for vblank timer ed39ecd3a96c drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks() a0582cc92398 drm/vkms: Convert to DRM's vblank timer 60918357456d drm/vblank: Add CRTC helpers for simple use cases fa4b91eea433 drm/vblank: Add vblank timer 18a08b87db71 Revert "ice: Remove jumbo_remove step from TX path" 523cd0ea0324 Revert "ice: fix double-free of tx_buf skb" 515de0a3b6c1 ata: libata-scsi: do not needlessly defer commands when using PMP with FBS 4e6eada8de38 ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS f207ebd5656e ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT 62ee00c1042c ata: libata-scsi: improve readability of ata_scsi_qc_issue() 9d11e4b1db1c mfd: bcm2835-pm: Add support for BCM2712 ed915823d469 arm64: dts: broadcom: bcm2712: Add watchdog DT node 375d5a17dc8d dt-bindings: soc: bcm: Add bcm2712 compatible 91f89c1d83e8 smb: client: reject userspace cifs.spnego descriptions 5da69a65b282 ksmbd: close durable scavenger races against m_fp_list lookups aae4a47073b1 spi: spi-dw-dma: fix print error log when wait finish transaction e8ec80430bfa bridge: mrp: reject zero test interval to avoid OOM panic 0638bf16b7a7 sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting 3f0543bdf446 sched: Employ sched_change guards dc184ac2f0ba cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() da3d241c5b92 fuse: fix uninit-value in fuse_dentry_revalidate() 488d2c76bd9f iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs b9a4184271b9 iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs 814326e86e92 drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() Signed-off-by: Bruce Ashfield Signed-off-by: Richard Purdie (cherry picked from commit a95d45bfc9ae9ca2bfd1e0d79ab726e7647f44c5) Signed-off-by: Yoann Congal --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend index ec18aba2..90e7c10b 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v6.18/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "6bf211598fd7bc81856d3d84b0cc610e2bbe81db" +SRCREV_machine:genericarm64 ?= "3bf75f8b9c97212d54aac12c3575b42cc504b4d8" From patchwork Sun Jul 5 22:48:17 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 91759 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 68AB3C43602 for ; Sun, 5 Jul 2026 22:48:40 +0000 (UTC) Received: from mail-wr1-f49.google.com (mail-wr1-f49.google.com [209.85.221.49]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.139315.1783291714133120176 for ; Sun, 05 Jul 2026 15:48:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=XlMbDhw+; spf=pass (domain: smile.fr, ip: 209.85.221.49, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f49.google.com with SMTP id ffacd0b85a97d-4758b2a9e2aso1396939f8f.2 for ; Sun, 05 Jul 2026 15:48:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1783291712; x=1783896512; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=MYtND05Yn4NcyfUITz6x00DFmWnssBjZCiPrkX5SS+U=; b=XlMbDhw+M1B78XxKLrAPaCh6FHpGc/Zgt4fzyPhhESKxonT9KkF9TLphqUg6gxkZHM KSRvRAf/Z6CAbvpoDxA9oqkhku9MqbiKCwDzk0mC0QNjwfTxq6WntwvzOMNqMw02NKyF Fb122UOQL5/FxzwFQPr8H5DDZparyTdH+X+Qg= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783291712; x=1783896512; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=MYtND05Yn4NcyfUITz6x00DFmWnssBjZCiPrkX5SS+U=; b=Zo41LVGStpxJBTq/lMkwkkGpkOI+UXtFOEFicqrJNJPAD0it87wlvX9ogp7GrJ4gfr OqFVF2WjSk8FL/vko2h9dcMsexWRXVd6j6wzTK4zWLif4TjxkaLXWh4qhqc5kPrBQfzw IQYGCO82MZlly6jWKsstn+rJmhiKuk59+lUTvmgABwpGalH6hyFkfeaO7SDMZPiBPo4j ZLMNFocwPNRqJXCWACBn1Jwf3L1Maiwt4Rn6tHywxRDganS3nNb3Q9cp5ZjaON0a4Ux/ cTWCoW4LkeVjQ+r4Zih1RlsIh6NH3htgMAAF3cwLlGsSEXucKckZAJaEbQCP+qZJ74xL qDLw== X-Gm-Message-State: AOJu0YxAwRlYxfYeuFYOoDbFElvlGg5N7SNt1UnG6zqTZgONuozzrbu2 jfJ4UkCMK+1ny7nx0vgOxtiZLqUX1OSiBMr17SBvM8xT8jMvjglaivWWskQ4GzkOdNqaMBHCM1h UxsWsCeE= X-Gm-Gg: AfdE7claNe4gcU/eWbpLQD8OznQUitWnXhr85WxG1MYWiMwG4KFQbY1OB6HWo7LeYu5 eUTXeNLFriwwNlAIQKoPj1ZNn2/BsCWHaELUVa73iizez2AgHzZuYGEBCg5IIjh3Spfeuqr9I5E mYNfFwM0T0jr/SDqcah6BAMPH65yaApBZKhEHvBfLmzuATazVQbECPXzaSoXt5DB6i0gUDS+bXT tw2Ra77hiy8VuyN9a9R3SYfYCNjLWmo6CPt3w5hQ9HQmjmhSiRCuepU3i9aJuZHYKqZtXGvgm1d qIo0hllG4wP8yMd9HwprfBnm9EnQ9P0B3U3z62i6h5mXsNsxBrqzDH7Z6U3HB3ftTVu65KS+ejU hX3fve3UxtuCaot15h74k560M7SzUnKsugS3d4NbXeg5apoKmXMVt5WrPfzUV6PV/vmvmSklIiB 4bHJVOBpDdHcc8dfUD1TilJ9ETOA== X-Received: by 2002:adf:e391:0:b0:475:f0c2:5b07 with SMTP id ffacd0b85a97d-47aad8304d0mr6877518f8f.61.1783291711957; Sun, 05 Jul 2026 15:48:31 -0700 (PDT) Received: from FRSMI25-LASER.lan ([2001:861:8010:5750:6d3a:72ff:5857:d2a8]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-47a9de1d905sm19346073f8f.2.2026.07.05.15.48.31 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 05 Jul 2026 15:48:31 -0700 (PDT) From: Yoann Congal To: poky@lists.yoctoproject.org Subject: [meta-yocto][wrynose 7/7] yocto-bsps: update to v6.18.35 Date: Mon, 6 Jul 2026 00:48:17 +0200 Message-ID: <824795b885b25e074a2880fbcd54e1a6c875d47d.1783291504.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 05 Jul 2026 22:48:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/poky/message/13936 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: acb7cf4c1184 Linux 6.18.35 918450ad6010 KVM: arm64: Reassign nested_mmus array behind mmu_lock 2bbc395e81bd KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry adc6fc240a61 tools: ynl: add scope qualifier for definitions f54b30f3316a usb: core: Fix SuperSpeed root hub wMaxPacketSize 830c8a9b467e thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() 21bfa15a89d8 drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable 00869f2320dc mailbox: Fix NULL message support in mbox_send_message() 5372f6f10b0a xhci: tegra: Fix ghost USB device on dual-role port unplug 58b2c0f096b3 net: phy: micrel: fix LAN8814 QSGMII soft reset 972ea882d4bf mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache() 56857385f313 hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with pmbus_lock 6b94f9f5fe28 hwmon: (pmbus/adm1266) serialize sequencer_state debugfs read with pmbus_lock 192516d72774 hwmon: (pmbus) Add support for guarded PMBus lock d8fdf33d6fcf USB: serial: mct_u232: fix memory corruption with small endpoint 062dcc0b324a USB: serial: digi_acceleport: fix memory corruption with small endpoints 284105c40fc3 USB: serial: cypress_m8: fix memory corruption with small endpoint c73c62a4bd52 usb: dwc3: xilinx: fix error handling in zynqmp init error paths 9327252e0462 xfrm: iptfs: reset runtime state when cloning SAs bb50838a2a06 cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E 7cb2daed3509 cpufreq: intel_pstate: Add and use hybrid_get_cpu_type() 8f72a2509163 mptcp: reset rcv wnd on disconnect 82e742b9d2cc mptcp: cleanup fallback dummy mapping generation 0d9b9d7dbef9 octeontx2-pf: avoid double free of pool->stack on AQ init failure fe93e907b1af arm64: tlb: Flush walk cache when unsharing PMD tables bb37498a99e4 mptcp: do not drop partial packets a84164847b1e mptcp: borrow forward memory from subflow c67f986fc02c mptcp: handle first subflow closing consistently 134c517dfa63 net: devmem: reject dma-buf bind with non-page-aligned size or SG length b2beed6ad149 selftests: mptcp: drop nanoseconds width specifier c5e7d4865292 Bluetooth: hci_qca: Convert timeout from jiffies to ms 8264178afb5c Bluetooth: hci_qca: Migrate to serdev specific shutdown function 0acba63d7d46 serdev: Provide a bustype shutdown function 8bf7dbb741dd rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer 46cb765e2e5a rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg fed725cace3a x86/mm: Disable broadcast TLB flush when PCID is disabled 81181a39bde9 platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery 1730c91a8b9a platform/x86/intel/vsec: Make driver_data info const 4b0e87f9b50f platform/x86/intel/vsec: Refactor base_addr handling 71b88acec0a7 serial: 8250_dw: dispatch SysRq character in dw8250_handle_irq() 7f8b194ed720 serial: 8250: dispatch SysRq character in serial8250_handle_irq() 5f2172d799f3 serial: core: introduce guard(uart_port_lock_check_sysrq_irqsave) 237dc8c08de3 serial: zs: Convert to use a platform device 81984447eac4 serial: zs: Switch to using channel reset b1ceeaef4fbc serial: zs: Fix bootconsole handover lockup 2ff0401ffdda serial: dz: Convert to use a platform device 2c5b693d918c serial: dz: Fix bootconsole handover lockup 24b7be239b0b serial: dz: Fix bootconsole message clobbering at chip reset f059b4c493df drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO fa372f4e8aef drm/amdgpu: fix calling VM invalidation in amdgpu_hmm_invalidate_gfx 1eb86334e391 drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO 275396bf71c4 drm/amdkfd: Check for pdd drm file first in CRIU restore path 5cf4a41aa0d7 drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger 2f9c3c161692 drm/amdkfd: fix NULL pointer bug in svm_range_set_attr 348e01e64a87 serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma 8e39badab090 serial: zs: Fix swapped RI/DSR modem line transition counting 10ddd1a320e1 serial: sh-sci: fix memory region release in error path 654f45a8569f serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ 78d0d6f69bd6 serial: qcom-geni: fix UART_RX_PAR_EN bit position 9a91692fae5c serial: altera_jtaguart: handle uart_add_one_port() failures ffa7dce35b64 drm/amd/pm/si: Disregard vblank time when no displays are connected c9ae7e7e3bc9 drm/i915: Fix potential UAF in TTM object purge fed64e47a32f drm/i915/psr: Block DC states on vblank enable when Panel Replay supported 0dfa42cfe4db drm/gem: fix race between change_handle and handle_delete 164dc7bf1760 drm/hyperv: validate VMBus packet size in receive callback 9c698b2c43c2 drm/hyperv: validate resolution_count and fix WIN8 fallback 4a3a19c98a82 scsi: target: iscsi: Validate CHAP_R length before base64 decode 594a40360012 scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf 89c81d1228c0 scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() 35461d237441 scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 14dd80a20a72 scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker d548179adcc8 thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow 31b98e503ecc thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() c7d421123b98 usb: gadget: f_fs: serialize DMABUF cancel against request completion 607730a41477 usb: gadget: f_fs: copy only received bytes on short ep0 read 5933063935e8 usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports f8f5a8f48c7c usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling f928630f450b usb: gadget: f_hid: fix device reference leak in hidg_alloc() e6f8be12f030 usb: gadget: net2280: Fix double free in probe error path caec0145e597 usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind f06bcaba2970 USB: serial: mct_u232: fix missing interrupt-in transfer sanity check 6c0cf56f00f2 USB: serial: mxuport: fix memory corruption with small endpoint ea2b792330b4 USB: serial: keyspan: fix missing indat transfer sanity check ae03453f2c80 USB: serial: cypress_m8: validate interrupt packet headers 22823a319fb2 USB: serial: belkin_sa: validate interrupt status length f7c3fcd63405 USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL 38ba1a464c0d USB: serial: option: add MeiG SRM813Q 62fbc1396108 usb: typec: ucsi: Don't update power_supply on power role change if not connected d62d97c9c8c2 usb: typec: ucsi: Check if power role change actually happened before handling f34effb0b545 usb: typec: tcpm: improve handling of DISCOVER_MODES failures 02d9d8b79e18 usb: typec: tipd: Fix error code in tps6598x_probe() a90139ff1eba usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize 75f6d3da2cc6 usb: usbtmc: check URB actual_length for interrupt-IN notifications 88d459e5b5a4 usbip: vudc: Fix use after free bug in vudc_remove due to race condition 5b78d8b9a832 usb: storage: Add quirks for PNY Elite Portable SSD 94b05aec1985 USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers 69f9f2b30af0 usb: musb: omap2430: Fix use-after-free in omap2430_probe() 3bc65566331a usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval 7118304b1a77 usb: chipidea: core: convert ci_role_switch to local variable 9fd48937046e tty: serial: samsung: Remove redundant port lock acquisition in rx helpers 66f8bfea055b tty: serial: pch_uart: add check for dma_alloc_coherent() b4bebb6e0a44 counter: Fix refcount leak in counter_alloc() error path c7e670cb2538 comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() 269f5be6a6e4 comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() fdb74898d91d Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 7f95f4792c0d Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem 639fa8af506e misc: rp1: Send IACK on IRQ activate to fix kdump/kexec 94215d55b094 ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops 6617ee91062b Input: xpad - add support for ASUS ROG RAIKIRI II 3d63b8077f5b Input: xpad - add "Nova 2 Lite" from GameSir 2ffd8b0dd448 ALSA: hda/realtek: Fix speaker output on ASUS ROG Strix G615LP c093468aea82 xfrm: esp: restore combined single-frag length gate c4609fff0665 ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks 35be14ea8298 ASoC: qcom: q6asm-dai: close stream only when running b98ab51c45c5 netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check b9027ff112b6 ALSA: firewire-motu: Protect register DSP event queue positions befcb15c1f05 ALSA: scarlett2: Fix 2i2 Gen 4 direct monitor gain on firmware 2417 aa0c7e59192b xfrm: ah: use skb_to_full_sk in async output callbacks dc6dcba80d72 xfrm: ipcomp: Free destination pages on acomp errors 448bb92ca101 xfrm: route MIGRATE notifications to caller's netns 22d41b176b99 nfc: hci: fix out-of-bounds read in HCP header parsing 8b1f4f618fd8 iommu, debugobjects: avoid gcc-16.1 section mismatch warnings b8338111e141 HID: wacom: Fix OOB write in wacom_hid_set_device_mode() 59139473a7a7 spi: spi-mem: avoid mutating op template in spi_mem_supports_op() 96a4713ae041 net: skbuff: fix missing zerocopy reference in pskb_carve helpers fc32be9ac278 ip6: vti: Use ip6_tnl.net in vti6_changelink(). 947013fd7c8c l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname 9f7ebb45a83a xfrm: input: hold netns during deferred transport reinjection a35daeabb433 ipv6: validate extension header length before copying to cmsg 853f6ea482df ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). 751db1b802a0 ipv6: exthdrs: refresh nh after handling HAO option 90983f841dfa ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params c512e1c819df ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() 6d00f5c7e5ff macsec: fix replay protection at XPN lower-PN wrap 5e1902866796 bpf: sockmap: fix tail fragment offset in bpf_msg_push_data e4892b1ecd73 wireguard: send: append trailer after expanding head d59cc66b7027 x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines 3f43865cb64d i2c: davinci: fix division by zero on missing clock-frequency bf769358419e Input: elan_i2c - validate firmware size before use 84ea928ed584 usb: dwc2: Fix use after free in debug code 94c92f9c886c usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles 459c4fa089f7 usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure b2723bd468c5 usb: cdns3: gadget: fix request skipping after clearing halt 0fee0ccac29e USB: serial: omninet: fix memory corruption with small endpoint 3412a95afaa5 iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() a3763ae33476 iio: buffer: hw-consumer: fix use-after-free in error path 390254cf509b iio: light: cm3323: fix reg_conf not being initialized correctly 5e4d34092a5e iio: chemical: scd30: fix division by zero in write_raw a5a05410cb34 iio: chemical: mhz19b: reject oversized serial replies cbd2d7e6bd4f iio: Fix iio_multiply_value use in iio_read_channel_processed_scale 8d4daa614440 iio: light: veml6070: Fix resource leak in probe error path ae01ec83841d iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL aefc19ca3dd3 iio: temperature: tsys01: fix broken PROM checksum validation 04a4d9822210 iio: ssp_sensors: cancel delayed work_refresh on remove aaf9d640e9ae iio: gyro: adis16260: fix division by zero in write_raw 15a0b3f33ffb iio: gyro: itg3200: fix i2c read into the wrong stack location 5cb8cede8baf iio: adc: ad4695: Fix call ordering in offload buffer postenable 7155e7fce429 iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw 944082fdb028 iio: adc: mt6359: fix unchecked return value in mt6358_read_imp 991d359faa95 iio: dac: ad5686: fix powerdown control on dual-channel devices 31de336a2c0d iio: dac: ad5686: acquire lock when doing powerdown control f541c9a1eb89 iio: dac: ad5686: fix input raw value check 69f7d101976c iio: dac: ad5686: fix ref bit initialization for single-channel parts 684bfd655b80 iio: dac: max5821: fix return value check in powerdown sync 88c9dd5170e0 iio: dac: ad3530r: Fix AD3531/AD3531R powerdown mode strings 2ce5ca7824a1 iio: adc: npcm: fix unbalanced clk_disable_unprepare() 0ee771fff32e iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux bb1b43e8a7ed Disable -Wattribute-alias for clang-23 and newer bbd989d6fd36 KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() b1dfaa6f7a95 KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer 75c8d1d72912 KVM: SEV: Check PSC request indices against the actual size of the buffer 9f0a9e780f02 KVM: SEV: Compute the correct max length of the in-GHCB scratch area 5300aedbee56 KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 e4ab26f81a63 KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests 2254972d4d69 KVM: SEV: Ignore Port I/O requests of length '0' c9b4198fbc6e KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use ec62e8480e82 KVM: SVM: Flush the current TLB when transitioning from xAVIC => x2AVIC b1fc4a83dd44 KVM: arm64: PMU: Preserve AArch32 counter low bits 625153b917bc USB: cdc-acm: Fix bit overlap and move quirk definitions to header 667599e71832 rust_binder: avoid calling pending_oneway_finished() on TF_UPDATE_TXN f2f2671e32c5 rust_binder: Avoid holding lock when dropping delivered_death 74d6aae1df45 parport: Fix race between port and client registration 9749db57233b Input: xpad - fix out-of-bounds access for Share button d9019210c8c3 Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync 2b7651f58670 Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM loading e6b78019664d Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() bc08c15746f2 Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock c318aa51830a Bluetooth: ISO: fix UAF in iso_recv_frame 6348dfed5b0f Bluetooth: HIDP: fix missing length checks in hidp_input_report() e8a5baff5be2 Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn 859d3ace791e Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() 388051f7389a smb: client: fix uninitialized variable in smb2_writev_callback 197476b12601 auxdisplay: line-display: fix OOB read on zero-length message_store() 0fcc34d0d8fe mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one 0995d1f79aed memfd: deny writeable mappings when implying SEAL_WRITE f1f0cdca932b mm: memcontrol: propagate NMI slab stats to memcg vmstats a3cc795129e5 ipc: limit next_id allocation to the valid ID range 0ba6c05156d9 mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() 0886c6f257fe hpfs: fix a crash if hpfs_map_dnode_bitmap fails 4064a30381fa Bluetooth: btusb: Allow firmware re-download when version matches 6728e80c9d29 HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse 8735a28f2dcd Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() f33b5a61673b media: rc: igorplugusb: fix control request setup packet f793b67d41e5 USB: serial: safe_serial: fix memory corruption with small endpoint 0edd1e21587b usb: typec: ucsi: validate connector number in ucsi_connector_change() 9b496e3371c0 usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT e94933dc41b8 usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() b10eff5abe6a usb: typec: altmodes/displayport: validate count before reading Status Update VDO 052dbef45cb3 usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO 4505f33dab56 usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() f9d787fbe831 usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers a38ed87818b2 usb: typec: ucsi: ccg: reject firmware images without a ':' record header a58400f58f82 iio: pressure: bmp280: fix stack leak in bmp580 trigger handler ce582b22dd2f iio: imu: adis16550: fix stack leak in trigger handler e6bb3a49c5f9 iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer 278b0df1f736 phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X 487393023feb drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used c058cf6b84c1 drm/i915/psr: Read Intel DPCD workaround register dd4cbab2a446 drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register 600ad63124de s390/cio: Restore GFP_DMA for CHSC allocation 0171e01de47a Revert "x86/fpu: Refine and simplify the magic number check during signal return" ff0ca46b13b9 smb: client: validate the whole DACL before rewriting it in cifsacl efacf63ed087 media: rc: ttusbir: fix inverted error logic e250b672d40a media: rc: fix race between unregister and urb/irq callbacks 814be4a0924b net: skbuff: fix pskb_carve leaking zcopy pages ab9a10969a90 ipv6: fix possible infinite loop in fib6_select_path() dc36a04621dc ipv6: fix possible infinite loop in rt6_fill_node() b62e2b2b4a50 vsock/virtio: bind uarg before filling zerocopy skb 68667ee4c7da sctp: fix race between sctp_wait_for_connect and peeloff c4152b4e28b3 net: mana: Skip redundant detach on already-detached port da87896f34e0 net: mana: Add NULL guards in teardown path to prevent panic on attach failure 7f945f7f10f4 gpio: rockchip: teardown bugs and resource leaks e2fabb984bfd gpio: rockchip: convert bank->clk to devm_clk_get_enabled() 5d43c71fa8e1 gpio: virtuser: Fix uninitialized data bug in gpio_virtuser_direction_do_write() b6cdbb681ce1 gpio: adnp: fix flow control regression caused by scoped_guard() ae2eac5e9cfe Bluetooth: hci_sync: Reset device counters in hci_dev_close_sync() 47330cc875b3 Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close 41e29548b5e8 Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp f39049304ba6 Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success 1d4dcfe60fe1 net/handshake: Pass negative errno through handshake_complete() 25b2fcdea6f6 nvme-tcp: store negative errno in queue->tls_err 0866569fc36a net/handshake: Use spin_lock_bh for hn_lock c35064294eca net: hibmcge: disable Relaxed Ordering to fix RX packet corruption 7f97b8352ce5 net/sched: Revert "net/sched: Restrict conditions for adding duplicating netems to qdisc tree" 6fe1cb312038 ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() fd0de51c54fa ethtool: eeprom: add more safeties to EEPROM Netlink fallback c944cab3df82 ethtool: eeprom: add missing ethnl_ops_begin() / _complete() during fallback 3e656023a649 ethtool: strset: fix header attribute index in ethnl_req_get_phydev() 2008f9bb1ede ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure ab94e0d6664d ethtool: tsinfo: fix uninitialized stats on the by-PHC path d02342d9bb4f ethtool: tsconfig: fix missing ethnl_ops_complete() 912f8b23bc4b ethtool: pse-pd: fix missing ethnl_ops_complete() 49455e27838a ethtool: linkstate: fix unbalanced ethnl_ops_complete() on PHY lookup error d11c98484485 ethtool: tsconfig: fix reply error handling 0c02c190bcd9 ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES e976e3f2f200 bridge: Fix sleep in atomic context in sysfs path c9c2e609e839 bridge: Fix sleep in atomic context in netlink path 9ea8a648d912 bonding: refuse to enslave CAN devices e673889a35a5 Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() 75cf24709037 drm/xe: Restore IDLEDLY regiter on engine reset 164dcbec9632 ASoC: codecs: simple-mux: Fix enum control bounds check de9eb0b44fa9 ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE 43368636c663 tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() 5303925e3605 vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() 6dff77899b9e tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() 2a8c9994406b cxl/test: Update mock dev array before calling platform_device_add() 41d2dc766bf8 ethtool: cmis: validate fw->size against start_cmd_payload_size 0696709e951b ethtool: cmis: validate start_cmd_payload_size from module 0cbce444db75 ethtool: cmis: fix u16-to-u8 truncation of msleep_pre_rpl 4d42fb88ec61 ethtool: cmis: require exact CDB reply length e1dd697094f1 ethtool: module: fix cleanup if socket used for flashing multiple devices 9e70c8efb0ca ethtool: module: check fw_flash_in_progress under rtnl_lock 9f5108f5ee27 ethtool: module: avoid racy updates to dev->ethtool bitfield 61848c83b913 ethtool: module: avoid leaking a netdev ref on module flash errors d9defbf8b62b ethtool: module: call ethnl_ops_complete() on module flash errors 7877d8fbbec2 ethtool: rss: avoid device context leak on reply-build failure 7ddc3b3ddee8 ethtool: rss: fix hkey leak when indir_size is 0 33d05c22d6f2 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure 39c01c405063 ethtool: rss: fix falsely ignoring indir table updates 6a775ec73210 ethtool: rss: add missing errno on RSS context delete f23e4d7324b8 ethtool: rss: avoid modifying the RSS context response 48fd840a26d3 net: Avoid checksumming unreadable skb tail on trim 03e9405c518c net: team: fix NULL pointer dereference in team_xmit during mode change c2af23b48f93 net: team: Rename port_disabled team mode op to port_tx_disabled a20e6ae5f05e net: team: Remove unused team_mode_op, port_enabled f2e077e8979f gpio: mxc: fix irq_high handling fbd0662f9c9a net: hsr: fix potential OOB access in supervision frame handling 2a15a03e58b0 net/mlx5: HWS: Reject unsupported remove-header action f0ac76e3d55e ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors e13922bb97b4 ALSA: pcm: oss: Fix setup list UAF on proc write error a7f4eefb6e14 ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() 475f2b37a78f scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues 981736924338 net/iucv: fix locking in .getsockopt 55cba6b883b4 net/smc: Do not re-initialize smc hashtables bcd0d19db3e6 net: netlink: don't set nsid on local notifications ca5e36629641 net: netlink: fix sending unassigned nsid after assigned one ef3b3ea864d0 vsock: keep poll shutdown state consistent aa308e9dbb9a tun: free page on build_skb failure in tun_xdp_one() 37a1c268c2c8 tun: free page on short-frame rejection in tun_xdp_one() 96bea2a7baac netfilter: nf_tables: fix dst corruption in same register operation bf8e8eac7ede netfilter: ebtables: fix OOB read in compat_mtw_from_user 052468b1c93b netfilter: xt_cpu: prefer raw_smp_processor_id f0fea2b6d545 netfilter: synproxy: refresh tcphdr after skb_ensure_writable 18abd88d19ea accel/rocket: fix UAF via dangling GEM handle in create_bo 45564a16a24f kunit: fix use-after-free in debugfs when using kunit.filter e1b8a53834dc HID: remove duplicate hid_warn_ratelimited definition bebc7dc0fb4b tools/bootconfig: Fix buf leaks in apply_xbc b4702049417f nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems 82ac903e0b51 xfrm: Check for underflow in xfrm_state_mtu 650bdd8fdfab nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() 912ebc49d440 nfc: llcp: Fix use-after-free in llcp_sock_release() 8b733ee4aecd bcache: fix uninitialized closure object dbc560858da8 net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked 91cc13978ab0 xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit 54ed418de62a net: mctp: ensure our nlmsg responses are initialised 41845bc5bb64 net/sched: cls_fw: fix NULL dereference of "old" filters before change() 0ca809ea8e03 Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size Signed-off-by: Bruce Ashfield Signed-off-by: Richard Purdie (cherry picked from commit f49de2f33e37ca971d64215cc1a3669312e1e7c3) Signed-off-by: Yoann Congal --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend index 90e7c10b..75059468 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v6.18/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "3bf75f8b9c97212d54aac12c3575b42cc504b4d8" +SRCREV_machine:genericarm64 ?= "d6f3a955dcf77a71454a2d70f291bd39d06422ff"