From patchwork Thu Oct 29 03:25:16 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102294 Received: from mail-qv1-f49.google.com (mail-qv1-f49.google.com [209.85.219.49]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4404.1793244333055917575 for ; Wed, 28 Oct 2026 20:25:33 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=YmUY8YHG; spf=pass (domain: gmail.com, ip: 209.85.219.49, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qv1-f49.google.com with SMTP id 6a1803df08f44-91bb5795792so18879086d6.2 for ; Wed, 28 Oct 2026 20:25:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244332; x=1793849132; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=Lf9ARqYj9sGFTpfa6snRMLYH+zjbAkzUcr9IBqmGd3Y=; b=YmUY8YHGF8+96zpedJUgwr+Km2Q9fdQOft9L617AiRBP+ajO+cQ1tp+S2H9amCLhhI 0ALqUZ8ajcGW9VARz1mMkKhW+L1osyJNiC2NPpSNQLWNWGYEsBXlkLOG3jtCF0RkFYcc htastu6KJoNw8rqeTfHnrIRQwt/6Dtnxw17RQ3p/3EREdDuVMWRabsJh8NkVdykcM4a6 UcCPw+/JGHmXGvLd5QXHAjIciUq8SsTg85DBHYNwa8/0pjF7fXm3ZKL0Bap4twqAhJSa Ep6RhZbEnLOlIANWZHuLQBJDlJ4jU0SxOsoDnRl0aVb7ES6Pp7WLqy0fLh/EXxTjjAZh 6fkg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244332; x=1793849132; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=Lf9ARqYj9sGFTpfa6snRMLYH+zjbAkzUcr9IBqmGd3Y=; b=K4rfJEELucrP1Bkxg5LUtVCuhkQ77Ht68wDsQmscL3dJHplfVRFqw+XOgzt1BXmQ9U ZrPI6uPkCDJFINK9J/mH/nmoW0vJ9KFrA8RJArSD0xG2y2F2X6w/Ol0oUocDWTbK06CB QNszcnH8zdPASvIRVZy+S8BzHdlHXcvyztQaEkkGn3JvDLXinft2Y0V2l5b7be9fQUR9 FX4hMEVxUeW+9iqZ3AxYwzdspPwUnx40tzx9VUnxyEpKFeAQPzo1ot14Px38dicIDng5 1ic85/UDaM3P2ydZNGJvdbqlGs1MAd4pFLfxgD5j2x7Xkb8ioE2bwSfeX5pd+lvQCaT0 ADUg== X-Gm-Message-State: AFq9FYIvprkMPsELRDaKcER5++L/OTR8IkdhW9PxQAi5lO82CfMaNo9E sc6zEKu/do4q5K6AKeLaD8OmUgKyds3nbW+yk8lXQsraPxPaRxNZlun4cSjxJPmG X-Gm-Gg: AYBFou20vERNYJaPIerzp0KEZEUuswIFOX5AnGWnN1PKmI/lDR9F14fVUHVPiXfuqFF 71ZX6NWldBu1mTt15l7gBOrZ8gTHbl2qkfSLq9fMemNIgj2+QXnneJJ9SEkZjZoGIXAT8gtqe+4 8vDAqGZyU3K6BYJR5HnyCsKxx2YlxjJlMlOowQ4imCgMhvn27Wo5AihA6UmzIph0wuaFCIbneXZ snp0NPye+kCwef5X+xj7Ikk4xT2BZeUukIkgbV2bwY98Oa/rCzRhwBJoFPdnxthlVRK9ATgsvas 4ikrrzErhFiYlLIvZ2cehE2vPjKUXKrMuvgGX3G5sc9td+mClnPDsMiyq/6wMfgVvyOcD+PPew8 XkWtGQclXu4KWu/VoQCzFzfwZFoEhUyMh45Uyda3n2os7VlE1ak4UdRDvB6gmlL7Ek/7OH6n0MX kZGQXQxwVwNo7EdV/Thfw0WWnY5Yl9T7L2kAphgl6t7ftJp5JDkMp9rdOdA8PQGEQ8FL+s2Fkbx CImPkKjv//kkDjQCmtrbSru3u+fIQg532zeWWdfccRiY3vDtyFf/pvY5qsCeuIkxMEtouU1RoHE hp9QWke5RESGh1XBznkFraToOt79TpjYzfPuDXsGeUtBPPIwcVv1B/Us1Ln5t3oWCg4venzLExr qym3NL3jStPzO/13NfQu0sMg1XCz3Lf9c+05BQXOY7GC1TjLmXSQ95pumDLli3wsQy3pdxpUYNf 5+N+QX1KGfDgcjaSks3puaTpgtKeqpzZwqVm3vM2jY7bV3ug== X-Received: by 2002:ad4:5aa6:0:b0:91b:8d97:123 with SMTP id 6a1803df08f44-91c7d201fe3mr69395286d6.47.1793244331818; Wed, 28 Oct 2026 20:25:31 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:30 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta][PATCH 01/11] linux-yocto/6.18: aufs: refresh to upstream aufs6.18 Date: Wed, 28 Oct 2026 23:25:16 -0400 Message-ID: <20261029032527.3150782-2-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:25:41 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248858 From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/6.18: 1/2 [ Author: Bruce Ashfield Email: bruce.ashfield@gmail.com Subject: aufs: update to upstream aufs6.18 (latest) Date: Sat, 3 Oct 2026 22:06:19 -0400 Refresh the in-tree aufs to the current upstream aufs-standalone aufs6.18 snapshot (f8b3fda5). Brings in accumulated upstream aufs bugfixes plus the x86 CONFIG_PREEMPT_RT support, superseding the standalone backport posted to the linux-yocto list. Signed-off-by: Bruce Ashfield ] 2/2 [ Author: Bruce Ashfield Email: bruce.ashfield@gmail.com Subject: fs/aufs: route the FUSE mnt-ns check back through is_current_mnt_ns Date: Sat, 3 Oct 2026 23:54:11 -0400 The aufs6.18 refresh moved fs/aufs to the native upstream snapshot, whose vfsub.c calls our_mnt() directly. Upstream exports our_mnt() via its own standalone integration patch; our integration instead exports a small is_current_mnt_ns() wrapper. The refresh delta reverted that carried adaptation, leaving the aufs module with an unexported our_mnt() reference that fails to link whenever aufs is compiled. Restore the adaptation: route the CONFIG_AUFS_BR_FUSE mnt-ns check back through is_current_mnt_ns(). Unlike v7.x, 6.18 does not need the open-coded rename-lock helpers -- lock_rename()/unlock_rename() are still exported in the 6.18 kernel (the unexport landed upstream in v7.1), so the native vfsub.c rename-locking links as-is here. Signed-off-by: Bruce Ashfield ] Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_6.18.bb | 4 ++-- .../linux/linux-yocto-tiny_6.18.bb | 4 ++-- meta/recipes-kernel/linux/linux-yocto_6.18.bb | 20 +++++++++---------- 3 files changed, 14 insertions(+), 14 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb b/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb index 5db966af1e..ac97f340da 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb @@ -15,8 +15,8 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "f892d97a3d660b9e7f4dc0618e0737f6e23906a7" -SRCREV_meta ?= "366edfd67e22da481a7e6beb6386e1f7d19e71cf" +SRCREV_machine ?= "64ebedd888ed53620df352f568a8b55c5620d169" +SRCREV_meta ?= "b505aeae4f62715ec4801e292b32ad68593b3341" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.18;destsuffix=${KMETA};protocol=https" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb index ef90b3db19..4cbcfc0084 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb @@ -18,8 +18,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "8372c22a7d24c8fa15b62e13c1b5524a94caf9dc" -SRCREV_meta ?= "366edfd67e22da481a7e6beb6386e1f7d19e71cf" +SRCREV_machine ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" +SRCREV_meta ?= "b505aeae4f62715ec4801e292b32ad68593b3341" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_6.18.bb b/meta/recipes-kernel/linux/linux-yocto_6.18.bb index 8bf35579cd..95cae43557 100644 --- a/meta/recipes-kernel/linux/linux-yocto_6.18.bb +++ b/meta/recipes-kernel/linux/linux-yocto_6.18.bb @@ -17,18 +17,18 @@ KBRANCH:qemux86-64 ?= "v6.18/standard/base" KBRANCH:qemuloongarch64 ?= "v6.18/standard/base" KBRANCH:qemumips64 ?= "v6.18/standard/mti-malta" -SRCREV_machine:qemuarm ?= "16672075f0d625c2a7186a00a0d47b34f8ac1e36" -SRCREV_machine:qemuarm64 ?= "8372c22a7d24c8fa15b62e13c1b5524a94caf9dc" -SRCREV_machine:qemuloongarch64 ?= "8372c22a7d24c8fa15b62e13c1b5524a94caf9dc" +SRCREV_machine:qemuarm ?= "f271f5b5cce5f2c67c00ccb5b4bf60502d4ddc0b" +SRCREV_machine:qemuarm64 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" +SRCREV_machine:qemuloongarch64 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" SRCREV_machine:qemumips ?= "62ea92a539f58803a222be98b81118403074206e" -SRCREV_machine:qemuppc ?= "8372c22a7d24c8fa15b62e13c1b5524a94caf9dc" -SRCREV_machine:qemuriscv64 ?= "8372c22a7d24c8fa15b62e13c1b5524a94caf9dc" -SRCREV_machine:qemuriscv32 ?= "8372c22a7d24c8fa15b62e13c1b5524a94caf9dc" -SRCREV_machine:qemux86 ?= "8372c22a7d24c8fa15b62e13c1b5524a94caf9dc" -SRCREV_machine:qemux86-64 ?= "8372c22a7d24c8fa15b62e13c1b5524a94caf9dc" +SRCREV_machine:qemuppc ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" +SRCREV_machine:qemuriscv64 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" +SRCREV_machine:qemuriscv32 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" +SRCREV_machine:qemux86 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" +SRCREV_machine:qemux86-64 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" SRCREV_machine:qemumips64 ?= "9fb4ff0187c85426f21fd40d4c61b742800f65c4" -SRCREV_machine ?= "8372c22a7d24c8fa15b62e13c1b5524a94caf9dc" -SRCREV_meta ?= "366edfd67e22da481a7e6beb6386e1f7d19e71cf" +SRCREV_machine ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" +SRCREV_meta ?= "b505aeae4f62715ec4801e292b32ad68593b3341" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same From patchwork Thu Oct 29 03:25:17 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102295 Received: from mail-qv1-f53.google.com (mail-qv1-f53.google.com [209.85.219.53]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4405.1793244334473713846 for ; Wed, 28 Oct 2026 20:25:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=VD2tVc9t; spf=pass (domain: gmail.com, ip: 209.85.219.53, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qv1-f53.google.com with SMTP id 6a1803df08f44-91b9e758c50so4251126d6.1 for ; Wed, 28 Oct 2026 20:25:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244333; x=1793849133; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=1MzCk26lbBErW+PLhIH/n2s8TQnLfO9zHMKBZzLUvbo=; b=VD2tVc9tIMEakxPmkgHNZaQJBenXkuS5VdP3S1XQs3KRbS9yUrDtbDB4Wl+OX64O/W WtxzEYaX6L+IymYgSlFEcymZIjleDmRIOUkadGR9+jxX6L0/gxZkaehH55IfF4jDLgnE KYWM4VBPoU5EtKf7sJI3zHxyhThV3pbwZSsKYDy3gKPWM6Tyv6Zerx3re/gbkhAh7XrA uUFI7GfaQ3YRl24P7i+k15I22EnBFPG8HKcrgka9/EOCmY91zO0akxEcmqqQgrYdhf13 AMIVQ4kFKR6zNkB4EyPMVxb0vvZ68wt5bvhxlqdMYJG1AU0iOeApGKYJrqUnwlUuSXqp xubQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244333; x=1793849133; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=1MzCk26lbBErW+PLhIH/n2s8TQnLfO9zHMKBZzLUvbo=; b=XwMbtpfkh/3yUrS3RGeCdMtmynGkGOHeCMvBOAkIkWVxP+1zt4ntQfGfAH+Tj6jfYZ MhiB/lA4xHSlc98KzQaTSiyTE5YRXNlwIWldBXJ4bocH4LdSIUOZUNVR6f9AKs5/WV4b x0PBIrcRvSzTFYSHqBoxjMXjGFYMqAYrN+uLGUt2xDuk8QCvN1E6rJT0tzsMWo1udaih 7C/GcJELgOmGswH80UhOdtFy/getl7YsvKvUPYoOROH4xaBysyNoAMf1nQSRIN09Wskl f2oQVmRQhd+TrxNDjuEoxuBN7YzVxW65loazl5l2jcAn5owbSchOj9YBYs0PRVASIS+e 1+dA== X-Gm-Message-State: AFq9FYJNTdI5Fuwms8lnZ/vGLvew25SAV71wX1GGRp1YCcxfKRpOVTlE vjnwFIw+rbJp9UxH3J3qQGIo5yVnVeofvHtNsaJ+fSFDyjBLz03I4F+DDtmia/SW X-Gm-Gg: AYBFou09RhmoarY6suyNLSfUrbTvNHzFksqh1Owr8GBqd/AnnkgY9lyb7lhOzG7q4ZC C2L5v1FGIq/n1N1FQJH7hixLlFTnFHmhSmgUeiZQFq2zc6XyekkBHdE3pBjcNE7uDzuwbfK1nKI QhvTx1YmFOjzdhf1madIpuUu3QsAVyGZEBXzVS3WlynN/BDFnPHosatqFaS65WkuK3y8WOTi+MO JkTyCR7uTwCg1qJi2xN61q+3HbJqR3KqWnJ01fPnT/OVv9hRQDccHs8oIaVbYDsl4XMVHL12GV4 n7ixIkkrV6NmaMMqFgMZXcm4tmd3AEzSlVuhgXKV7QYFxyxdwHgFjvLp0Z/SDkRm9VwSJM6RGbw TKUSKc5y1u0Qogx/TOChINQpnssN3pCx5m9L/gcnNEa3YT3acEkRvwWIJpSQUidssCKDpZ+5tJs zvUyufdVGB+7UbCJGyLvquOH9EV9hEmisZT6mwh/CGgmn36oleXf3ju+W7YnIlGZhmBHHq5C09T 2tDquy32bo43/ikdA0wdi2aJ7D1oLnUrgBTnNxfdZTi+qSCJyB6P4/RQ5WmAS5/gRrAU6veVdja WrTRUjVGle9mVzKZO+WUh331YXD4jmlvOb7vTYipXXwKVweTjPSlzk/C79xlHBrVvfZ1LgDMF/n 07iN+/NzXluBbcgW1PbOnykUiDj1E2RcMhGEk9MvoCFhcgHzLf5Y3UEk6Q1N2otlQloodSzhPP1 zbaoFCPnnnc8qKdxJc8BvBxL6WeSMLWvstFuxTB5GXQ7/u5Q== X-Received: by 2002:a05:6214:5085:b0:90c:c1eb:ae42 with SMTP id 6a1803df08f44-91c904153b9mr21861366d6.13.1793244333152; Wed, 28 Oct 2026 20:25:33 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.31 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:32 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta][PATCH 02/11] linux-yocto/7.2: aufs: refresh to upstream aufs7.2 Date: Wed, 28 Oct 2026 23:25:17 -0400 Message-ID: <20261029032527.3150782-3-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:25:42 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248859 From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/7.2: 1/2 [ Author: Bruce Ashfield Email: bruce.ashfield@gmail.com Subject: aufs: update to upstream aufs7.2 (latest) Date: Sat, 3 Oct 2026 22:19:28 -0400 Refresh the in-tree aufs to the current upstream aufs-standalone aufs7.2 snapshot (3b79c0b). This moves to the native aufs7.2, which handles the 7.x VFS APIs directly (superseding our carried v7.0/v7.1 port adaptations), and brings in the x86 CONFIG_PREEMPT_RT support. Signed-off-by: Bruce Ashfield ] 2/2 [ Author: Bruce Ashfield Email: bruce.ashfield@gmail.com Subject: fs/aufs: preserve open-coded lock_rename and is_current_mnt_ns across refresh Date: Sat, 3 Oct 2026 23:48:17 -0400 The aufs7.2 refresh moved fs/aufs to the native upstream snapshot, whose vfsub.c calls lock_rename()/unlock_rename() and our_mnt() directly. Upstream makes those callable through its own base/standalone integration patches (un-static + EXPORT_SYMBOL). Our integration differs: we keep lock_rename() static and open-code the rename-locking in aufs, and we export a small is_current_mnt_ns() wrapper rather than our_mnt(). The mechanical refresh delta reverted both of those carried adaptations, which breaks the aufs module build (implicit lock_rename(), and an unexported our_mnt()) whenever aufs is compiled. Restore them on top of the native refresh: re-open-code the rename-lock helpers (au_lock_rename/au_unlock_rename, mirroring the in-tree v7.2 implementations bit-for-bit) and route the FUSE mnt-ns check back through is_current_mnt_ns(). The create-excl / a_ops swap_rw adaptations remain genuinely superseded by native aufs; only these two integration-coupled ones must be carried. Signed-off-by: Bruce Ashfield ] Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_7.2.bb | 4 ++-- .../linux/linux-yocto-tiny_7.2.bb | 4 ++-- meta/recipes-kernel/linux/linux-yocto_7.2.bb | 20 +++++++++---------- 3 files changed, 14 insertions(+), 14 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb b/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb index ecce6498f4..e808315955 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb @@ -15,8 +15,8 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "6e3aff84e18e0a58ae185f48365bce087aa25319" -SRCREV_meta ?= "f26871a964ee3984a78f5e8fa1001cf43e551a20" +SRCREV_machine ?= "e1ac915949f84df75ab979843a0c16c0355d5d60" +SRCREV_meta ?= "409e37cf5194730ea597a1c18f3475c7e5661f4e" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-7.2;destsuffix=${KMETA};protocol=https" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb index c6ab5544bc..67580a5aca 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb @@ -18,8 +18,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "864d1a112ea46c71a55e62cd5e1eac9ef9a4ea6e" -SRCREV_meta ?= "f26871a964ee3984a78f5e8fa1001cf43e551a20" +SRCREV_machine ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" +SRCREV_meta ?= "409e37cf5194730ea597a1c18f3475c7e5661f4e" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_7.2.bb b/meta/recipes-kernel/linux/linux-yocto_7.2.bb index 39759329ef..eb14bdc17f 100644 --- a/meta/recipes-kernel/linux/linux-yocto_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto_7.2.bb @@ -17,18 +17,18 @@ KBRANCH:qemux86-64 ?= "v7.2/standard/base" KBRANCH:qemuloongarch64 ?= "v7.2/standard/base" KBRANCH:qemumips64 ?= "v7.2/standard/mti-malta" -SRCREV_machine:qemuarm ?= "2fd911abf4b675ed9f8904b8a57b087323bfa2cc" -SRCREV_machine:qemuarm64 ?= "864d1a112ea46c71a55e62cd5e1eac9ef9a4ea6e" -SRCREV_machine:qemuloongarch64 ?= "864d1a112ea46c71a55e62cd5e1eac9ef9a4ea6e" +SRCREV_machine:qemuarm ?= "8d67eedc20fc5238eb546ececf7eef7f5dce22db" +SRCREV_machine:qemuarm64 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" +SRCREV_machine:qemuloongarch64 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" SRCREV_machine:qemumips ?= "ab0e33fefa2a3d0366b2b8deb7cfb3be2d8dc436" -SRCREV_machine:qemuppc ?= "864d1a112ea46c71a55e62cd5e1eac9ef9a4ea6e" -SRCREV_machine:qemuriscv64 ?= "864d1a112ea46c71a55e62cd5e1eac9ef9a4ea6e" -SRCREV_machine:qemuriscv32 ?= "864d1a112ea46c71a55e62cd5e1eac9ef9a4ea6e" -SRCREV_machine:qemux86 ?= "864d1a112ea46c71a55e62cd5e1eac9ef9a4ea6e" -SRCREV_machine:qemux86-64 ?= "864d1a112ea46c71a55e62cd5e1eac9ef9a4ea6e" +SRCREV_machine:qemuppc ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" +SRCREV_machine:qemuriscv64 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" +SRCREV_machine:qemuriscv32 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" +SRCREV_machine:qemux86 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" +SRCREV_machine:qemux86-64 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" SRCREV_machine:qemumips64 ?= "ab0e33fefa2a3d0366b2b8deb7cfb3be2d8dc436" -SRCREV_machine ?= "864d1a112ea46c71a55e62cd5e1eac9ef9a4ea6e" -SRCREV_meta ?= "f26871a964ee3984a78f5e8fa1001cf43e551a20" +SRCREV_machine ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" +SRCREV_meta ?= "409e37cf5194730ea597a1c18f3475c7e5661f4e" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same From patchwork Thu Oct 29 03:25:18 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102296 Received: from mail-qv1-f47.google.com (mail-qv1-f47.google.com [209.85.219.47]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4407.1793244337223114528 for ; Wed, 28 Oct 2026 20:25:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=DecD77ZF; spf=pass (domain: gmail.com, ip: 209.85.219.47, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qv1-f47.google.com with SMTP id 6a1803df08f44-91c79f306e9so17667536d6.3 for ; Wed, 28 Oct 2026 20:25:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244336; x=1793849136; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=axUS4ZW4RdzEnvSWVBs4b3SsmWwe1tf66OYOmYGD4y8=; b=DecD77ZFzmZZ2b1T4IDell9GvDcXHsdTr87bJskzy2bNVrFJeMwvWKNVwecDkbyyHo qZusfX48dxPU/IvIJEb33aNDQfmUjjfJqSs709qx0jXBaUvSijODoiwawYpUnnxVDLvN nWl1rIciZS3MAXLQmEKHtpJGkXksaq8CGdHi9pt269ygwXdImzWIsbtlT0yUM2bqd9fy 9t3w7B5v3UUFgmiJaZKiA7JWCWONA59w71LMLo7RK/+cvDdvnY8c4yVzBo1vCar84oxM TXippZfkkY3TrhFHRKROQyEFQWIPobuU7dcsRqXMUBnPwZmb85WQbSBACiQt+KGrwxrs g5zw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244336; x=1793849136; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=axUS4ZW4RdzEnvSWVBs4b3SsmWwe1tf66OYOmYGD4y8=; b=20datb4CkpD7cIS25nlIxj80UVZECfRX3KZECYmTWP6dYSX+4a35xrkSAsNrRtBvv2 yRRvkLIpr9pEw7V4A2Fy485tHw/m3iZK7c+Zrp7oh1fJ3+agdQp6yHzPJ6JmPoTFDoBg d+iZqYb+7G4Q1/6L/iPsnUIMFMGrZZECRP7Bz7gNkTkJcW6l4r1f+fbt/NYEaZFTFGC3 bsAtm3kl2wHde1yukxhllfO6Ots1g7tysKB01vjpdhjQ/eyR5FhuLh7KvJS5ZBXTYLUP VLZqnl0NHIYvAPEuLLGK8/v9hQIuBvhYx7+NLv4UyZST4FCJ5DnS8EDD6NN9YtlR5Fc4 GLGA== X-Gm-Message-State: AFq9FYLaESEWC8J351oJ+dsvDMKrFX00cqaqq1oe1lvzuM3kLTNj0KwK +gRGhn8JnGcCH/AcsUoZgYaMSUPoVOE+7MOrJAn7aIunKBUpGaWrYJv43Zu6VmfU X-Gm-Gg: AYBFou1H8bv04btfObRlHIEzqIbG3EgDZu26gUA7MXhn3eofrRHflihErPfTx6pJ/Zj 4K2UcA782qpEUBBo+1LxSgHMSUDCUJXqISSA11PTl31zwX+C4AuXIhHfnNgcaGQQdEwZtWpKUma 9LQ0E0V+fiiOMMOgzNUQN7rtMSJfgm4GfXgTjQV7mDSTHyNMDMRECLgLI8mOfbO+ozjmz31hiVM +sFxRQncgUbEGRXJfcPQ6ESZ2isq2VtRi0Jxbvi4eP3FxSlsG35l8gFliwZoCS2XTR9vPl37pPP ZksKv9B/t6txWWi3MF1Sz8+H35tg9HdQlb6eTNDhaVbgLY6aI/yorPzX3GlM0BUUs9WhESoUTH0 DX9MJXBM3o9akRE1JXE1eKgE+WtwRWcxGw1dIBRzrKR1ntRshHPDT5i8pJrBxLHcSCvnRHuvdoN +1lBRYbcloUDmphtQqO6Z81WjuIuEd9zIwEtbHeUIyL8w0J96Sd1Grq6OTrjDZ9OfAv8oUs93tS T92QRKIntotU6/hGtzxLab7OZ1mOp8HcirNPKwPm2h5bGM80KnoFYXaP1kHyKPeEcqnGuDiqXZY 26d880b75q6rkKJW41hDAVcTqDc98j4HE0xO/PUUuRP7pD74vHx/sh6dFPpV+L694NBYS/qGdFu voaI4oxCB7bW695ZJbkaz29rH5CNB7Wyk72vpVt8ngoQUM0QUZ7Kn+q6/S9pmR4jZ/yBPzLJeCf FNi3xYQOHcr6KBPg13S5VjEUCNCgTceyI50qn/xM2BBoOmpw== X-Received: by 2002:a0c:e018:0:b0:91c:7daf:6fb0 with SMTP id 6a1803df08f44-91c7daf71e0mr61726326d6.9.1793244335113; Wed, 28 Oct 2026 20:25:35 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.33 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:33 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta][PATCH 03/11] linux-yocto/6.18: update to v6.18.57 Date: Wed, 28 Oct 2026 23:25:18 -0400 Message-ID: <20261029032527.3150782-4-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:25:42 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248860 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: 2ff600d29ee47 Linux 6.18.57 d1e095c75d127 HID: steam: Clean up locking cf71a6ee1d4e3 HID: steam: Refactor registration 86724f4bcf604 HID: steam: Rearrange teardown sequence 05d39902539a3 HID: steam: Fully unregister controller when hidraw is opened 3142648c952d6 sched_ext: Generate qseq from a per-task counter f94a12ddd3184 drm/amd/display: Don't replace a sink mode that shares the native totals 82ac8c4939bdb regulator: of: fill in supply names in of_regulator_bulk_get_all() 32642616a8d73 SUNRPC: Add Kconfig dependency on CRYPTO_KRB5 69bf8d145ee1b can: fix unique skb identifier regression under RPS cf32eb20dfacf xfs: fix exchange-range-to-eof file size exchange 7d3b9b2c9dc57 xfs: stop exchanging reflink flags when exchanging mappings 87655adb5ddb1 xfs: remove duplicate INO1_WRITTEN check 30e08c92118cc ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons d0813c7c09dfa ACPI: scan: Do not mark button ACPI devices as wakeup-capable 5e9c814ee4da9 workqueue: Annotate alloc_workqueue_va() with __printf(1, 0) 2d2c32b1b9e32 accel/amdxdna: Fix crash when destroying a suspended hardware context a82142af837f6 accel/amdxdna: Fix race condition when checking rpm_on 27f52d4089ade accel/amdxdna: Resume power for creating and destroying hardware context 44e61f1834831 s390/zcrypt: Pad trailing CCA or EP11 message with zeros 00a44ff06bcff s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing f463f474773aa s390/zcrypt: Improve EP11 CPRB length and overflow checks 584400144020f s390/zcrypt: Improve CCA CPRB length and overflow checks 7673661a8adc0 workqueue: fix devm_alloc_workqueue() va_list misuse 5c03da7451714 netfs: Fix missing alloc tagging of direct mempool allocations 22adb6751bcf9 net: fix backlog_unlock_irq_restore() vs CONFIG_PREEMPT_RT 07861e84b766c media: verisilicon: Fix kernel panic due to __initconst misuse a582e7391fe35 netfs, afs: Fix symlink reading 4719852d14db2 cifs: consolidate time_last_write stamp into _cifsFileInfo_put() 8f7285d608ed0 btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock fdee3570b282a drm/panthor: validate userspace queue count against initialized firmware slot count e3e6779f77ab6 x86/CPU/AMD: Fix AMD TLBI Erratum #1718 bf0f3412d5a0d drm/vc4: Fix binner slot allocation failing on an idle GPU 4835dbcde5cc3 vsock: Fix memory leak in vmci_transport_recv_dgram_cb() 2594795fd832f net: openvswitch: validate transport header presence in set_ipv6_addr 0849ecf1c65e8 ptp: ocp: fix PCIe delay estimation calculation 3938430f0237c mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() 5b1fb3b105ff6 net/mlx5e: Order ICOSQ cc update after CQ doorbell e241465838e26 veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down 9caa2eca5cc83 drm/imagination: Fix reference and vm_bo handling in remap() cc18eb0e99411 flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() cb0d55754b4f9 bnxt_en: Re-write the BARs following any type of PCIe errors fd6a2b055dbc8 bnxt_en: Drop pci_save_state() after pci_restore_state() 5026c5070b825 bnxt_en: Delay for 5 seconds after AER DPC for all chips f41becbee8fc6 bnxt_en: Fix driver init in kdump kernel 8ef2b3ce6d142 bnxt_en: Add bnxt_clear_bars() helper b18a649649549 pfcp: make sure the SEID is linear before reading it 75e7f850cabd5 net: bcmgenet: if UMAC was suspended in SW_RESET, restore it to SW_RESET e378bd8705659 Revert "net/mlx5: E-Switch, preserve max tx speed on vport state modification" 972b9285ae530 net/sched: cls_route: reject change with no routing attribute 8de57bfec3825 devlink: fix devlink_rel reference leak when notify work is pending 27748588c9310 net: sparx5: start the TOD counters on non-PTP lan969x variants 9993e6a0ac1b5 flow_dissector: avoid u16 truncation of skb->len when computing thoff 0bcebf2c4305c cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug() 1194fd4c6dd1d spi: sg2044-nor: Honor SPI clock limits f3e80f5132dc4 spi: sg2044-nor: Return transfer errors 64bb35079dcbc ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM ef15a51966ee1 ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes 47c0c7a051b70 ASoC: adau1372: allow sleepy powerdown GPIOs 1bee950630df0 Revert "wifi: ath12k: add panic handler" e3f7cc4ef04d1 wifi: mt76: mt792x: pick the SAR table layout from the table itself 83ec70a640fe1 wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit 7fb2d37329c62 wifi: mt76: mt7925: don't put the band auto marker in TGID 0f9afe238eeb7 wifi: mt76: mt7915: disable rx napi when removing device f240282165821 wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout 0ed29ec00eb33 wifi: mt76: mt7925: restore the legacy BSS after MLO teardown 69aae4146191f wifi: mt76: use ALTX queue for packets to disassociated stations a18f68c1e72c8 wifi: mt76: route nullfunc frames to PSD/ALTX queue 9f28f50465086 wifi: mt76: account non-AQL frames per peer rather than per link 65b080310077c wifi: mt76: add PS buffering support for HW-managed TIM drivers 12b467683be5f wifi: mac80211: add ieee80211_txq_aql_pending() 09c6284b21f2e wifi: mac80211: add AQL support for multicast packets aafd1724f65ef wifi: mt76: don't return TXQ when exceeding max non-AQL packets 0cf84535c031a riscv: vector: Fix output operands in context save b56f9e11ac9f1 riscv: vector: Fix data pointer constraints in context save/restore 2c77af8bb5dc1 net: make dev_xdp_sb_prog_count() see programs attached through a link 63bc3cf8d7dd9 drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums 36d7e2da7a873 btrfs: fix lost error return value in btrfs_listxattr() a97114b9b00ed btrfs: fix xattr replace when multiple xattrs are packed in the same item 2797eb38773a9 btrfs: unlock inode and extent in caller when io_uring read extent fails 7a3addbdc5ad1 btrfs: free iov when btrfs_uring_read_extent() fails 033dda5b321f0 btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio 77de9adf46f5b zloop: zero out only the unread tail of short reads 7057b683922fc arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 ce79a6c5cc1b8 nvmet: use the local P2P device on metadata allocation failure e76979e27f0c5 nvmet: return Invalid Field for invalid NSIDs feature 82h b7725acf9c574 ice: Restore Ordered MMIO Writes for Tx Doorbells cbab667ef8b5d tee: optee: ffa: support shared memory offsets on large-page kernels c83bf3973da6f tee: optee: fix kernel-doc warnings 7110c7f70c59e cxgb4/ch_ktls: disable softirqs around tid_list erases 181cb48c1e9af amt: send the relay's General Query directly from the receive path 85e5512369d4f net/sched: em_text: reject unterminated algo before autoload bea10b84e22ef drm/vc4: Free the BO cache size list on teardown 742619c8637b9 drm/aspeed: Balance the display clock enable on teardown 01318927a9055 gpio: exar: initialize the ID before registering its cleanup 5b26dbb27c0cb drm/dp: don't mark the AUX backlight enabled when enabling failed 73e8503fac49c Bluetooth: btintel_pcie: Add shared HW reset for clean start 39ab048cce70d Bluetooth: btintel_pcie: fix TX descriptor bounds check 62a167e7e6d8c fs: don't let a migrating task hide its reference from do_umount() 6850385e26bf2 fs: move mntput_no_expire() slowpath into a dedicated routine 7505f139d8995 mount: refuse MOVE_MOUNT_SET_GROUP on an unbindable mount cc21cda4cac5d arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value 5a673697e4a3e arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single ab0f32981ce39 arm64: dts: lx2160a: fix incorrect pinmux fea9c705bbc61 smb/server: fix tree connection leak in smb2_tree_connect() 46a431c0a25a8 ksmbd: convert tree_conns_lock to rw_semaphore 0af43b52fe4b1 printk: Don't WARN on kthread_run failure. 9bf96b4347f54 bpf: check_cond_jmp_op(): properly infer if register is null 8a3257f142ae5 net: stmmac: fix dma mapping leak in stmmac_tso_xmit() afca229b39acc ipv6: mcast: use rcu_assign_pointer() for __rcu list updates 45462e5ba345a ipv6: mcast: annotate data-races around mca_users a0cd9e22f8fae bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge 3a39bc9707fbd bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks 65f636322ac40 bpf: Mark syscall helpers as sleepable 364a31052aa9e ring-buffer: Add checking nr_subbufs to persistent ring buffer validation 5b40198a0c69e ring-buffer: Skip invalid sub-buffers when validating persistent ring buffer 6bb6ae5ab1bef bpf: zero extend the result of an arena 32-bit cmpxchg c4d3bdb3ab211 bpf: don't rewrite bpf_fastcall patterns entered by a jump 65bea674f43c0 bpf: Don't infer non-NULL from a pointer with an unbounded offset 8d19e2cdfba9b bpf: Keep refcount_acquire nullable for borrowed RCU kptrs bb667eb575c90 bpf: Mark NULL kptr stores precise 08b534bafdd9d bpf: Preserve inner map identity in callback frames 3f30b2cd4eba4 tracing: Fix subbuf resize races with trace_pipe_raw readers b1fe6379e401b bpf: mark a NULL call argument precise 787405e9e7bdc iommu/riscv: Serialize command queue publishing 3e6400e3b8b85 virtio_ring: fix stale descriptor flags after a failed packed add 831dab9b9bcc1 vduse: validate virtqueue alignment 7f8ee0b8f6324 vhost: invalidate vring access on IOTLB transitions d9232a90c6f7d tracing: Take trace_array reference when opening a tracer options file 30dacb56f0728 drm/amdgpu: skip the VMID 0 flush for VRAM 6ac7a29691558 smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid 2be31f252ade7 smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() 28289d880e6d1 ksmbd: fix maximum allowed access checks eb2e3bb27e78c ksmbd: remove redundant DACL check in smb_check_perm_dacl 2e7e39bb81913 remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 5c9ab0c9cede9 powerpc/xive: propagate IPI init errors to prevent use-after-free e3388edec1fff powerpc/xive: add error return value to xive_smp_probe() ebdd932dc24c1 ACPI: bus: Introduce acpi_bus_get_primary_device() 041cce629a08d drm/xe: don't WARN on kernel job timeout when device already wedged 40bab0da844c1 nfsd: convert nfsd_net boolean flags to unsigned long flags word 65aa0a4c4c1bf nfsd: use workqueue enable/disable APIs for v4_end_grace sync 96d4b275281b4 dm-pcache: validate seg_id fields from persistent memory 3d8391d3149a1 drm/amd/display: Fix dangling pointer in plane reset function 3a03827bb3cda drm/amd/display: Fix dangling pointer in CRTC reset function f786e7b3adbf3 dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout 7abc9b49ad01a uprobes/x86: Move optimized uprobe from nop5 to nop10 cf08ff2255de9 bpf: Reject MEM_ALLOC BTF accesses past object bounds 644cf4e77c277 bpf: Reject writes through untrusted BTF pointers 16a82add1918d platform/x86: dell-wmi-base: Fix handling of ultra performance key 93a20b14f8627 bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max 0203146ad4509 usb: gadget: uac: validate rate list length before storing 8410cd2690d46 platform/x86: asus-wmi: fix resource leaks on probe failure 1ad6456898f6e esp: do not unref managed frag pages in esp_ssg_unref() 80968b42d1308 RDMA/rvt: Return NULL after port allocation failure 6a2e023429a41 fs/resctrl: Fix UAF from worker threads when domains are removed c6492e1741204 cxl/features: Serialize multi-part Get/Set Feature transfers a60bc2df2d323 firmware: arm_scmi: Fix SCMI device destroy lifetimes f85333284fcb6 firmware: arm_scmi: Fix OF node reference handling 21bc07293ec4f firmware: arm_scmi: Clear SystemPower flag on create failure 074d062040197 ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() 094f0a895cf97 bpf: Fix WARNING in bpf_tracing_link_release 01b5fcdc30c0a pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip f3480c59f4ce9 scsi: ufs: core: Validate string descriptors 9d39f6dda00f6 scsi: ufs: core: Convert string descriptor format macros to enum 268cbe3a36ae5 iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() c36816feff47f PCI: Fix UAF when probe runs concurrent to dyn ID removal 5e81d109f2e24 PCI: Fix dyn_id add TOCTOU 0787e34b894bd PCI: Make pci_match_one_device() match on ID instead of device 2fcd26f468014 RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() ffd56ada81f97 nvmet: fix return status of RMI log page on allocation failure f2be47fa8e225 drm/panthor: Add vm_bind region with kbo range overlap check 23bed4ef132c5 wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() ffcc9ea4e4d12 md: remove REQ_NOWAIT support from raid1/10/456 7a1b971b799ea wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx() 2aa3d3b9fac91 wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete aca0cd273b486 wifi: mt76: cancel reset and rc work on device unregister 9a9e902bd0556 bpf: Reject >8 byte return values on return-reading trampoline paths e512823aabbdc wifi: mt76: mt7996: clear stale link state on full reset e9e2854fcff57 arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry 0ec1d14cf302a wifi: nl80211: clean up color-change beacon data on errors f334b26b884df wifi: brcmfmac: fix P2P action frame handling without device vif 9260a92ce90e6 serial: core: do fallible allocations before the console can be registered ddf51d74ee9f9 serial: core: clear freed pointers on uart_register_driver() failure 2af4c46b42990 tty: skip cdev_del() when no cdev is registered 2fd9c8112907c HID: logitech-hidpp: Fix FF device cleanup on init failure 8397942b67128 ublk: validate auto buf reg before taking uring_cmd f81972b235f3e bpf: Invalidate RCU pointers after final spin unlock 3556caa31a2bf PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers 9b405b3e7e131 thermal: hwmon: Remove hwmon class device along with its parent 9d44822ba34d6 ocfs2: o2hb: quiesce negotiate handlers and timeout work bf4bd72020f33 ocfs2/heartbeat: fix slot mapping rollback leaks on error paths 1f0f61573ba4c bpf: Clear buf on error in __bpf_get_task_stack 35ef785b25ee2 bpf: Remove trace_in argument from __bpf_get_stack 63669625833c4 bpf: Factor callchain_finalize function from __bpf_get_stack 8c30d9fd61ebf bpf: Factor callchain_store function from __bpf_get_stack 562d24ac214ba drm/amd/display: Resize MST HDCP per-connector arrays to 32 b5896fc269e9f drm/amd/display: disable replay when crc source is enabled d5f3dae82705d coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable e90f746f4ca38 scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails fcee001f57bdb scsi: sd: Move the sd_config_discard() function definition ce8103676f4d4 btrfs: check if root is readonly when setting posix acl 172f349f2c59b btrfs: apply the AUTO_K(V)FREE macros throughout the code 58b0ab0340ce0 btrfs: zoned: flush active metadata block group at btree_writepages() start 243bf1e45e40b iommu/vt-d: Fix iopf_refcount leak on RID domain replacement 11dfe2896ea23 iommu: Pass in old domain to attach_dev callback functions 6822ba1ae9b6d NFS: Return a delegation the client fails to record e4ab436d5ba61 bpf: Compare iterator types during state pruning a25ea67a913f9 clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type 6e6f8e3bfc66d nvmet: fix max_qid race between configfs and controller allocation 5c6593422eb3c blk-iolatency: clear delay state when freeing policy data b399a88eb8b16 blk-iocost: clear delay state when freeing policy data f4ca62414f4fb blk-cgroup: delay freeing policy data after rcu grace period d4ba9d888ac0a bpf: Check pointer type for all atomic RMW paths 272c05a51285f ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() dc1e34f78dfab ksmbd: serialize oplock close with pending break ownership ff6870cf3b7ec ksmbd: defer publishing granted locks to prevent UAF/double-free race 52b91bc5253bb ksmbd: safely discard unregistered deferred locks f77d2accafca5 ksmbd: detach blocked lock requests before freeing 1ff0e41afbe73 ksmbd: scope session state changes to bound connections d39da3ff8d39c dpll: fix NULL deref in dpll_device_ops() during teardown race 5235abdb760bb virtio_net: Fix resize of the RX ring 0887d41abf766 irqchip/gic-v5: Clear per-CPU IRS data on teardown f57b0fd1c62e1 ip6mr: do not clone dst in ip6mr_cache_report() 884cbf15ccd39 net: bridge: arp/nd proxy: fix reading neigh ha f43ef9a3f9c12 vxlan: fix reading neigh ha f4d23937e1c41 NFSv4.1: zero referring call lists before decoding 68fb30607169c net/sched: account classifier filter allocations to memcg 1ca1df82d9248 fuse: Fix the condition to enable over-io-uring 8460dc49c9756 Bluetooth: L2CAP: access chan->conn safely in get/setsockopt 8a8585e421d06 Bluetooth: do not leak an hci_conn when a second LE connect is rejected 7b3e08eea1e8c net: mana: Cap MSI-X vectors to the device MSI-X table size c08314f917829 octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() c6b56b8d549a0 netfilter: nf_tables: skip double clone set expressions on element insert ef4dee4640c6a KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped 506f03b5f869c LoongArch: KVM: Validate MSI data before routing it to EIOINTC 34a2a7134fd66 LoongArch: KVM: Get VM PMU capability from HW GCFG register 56c2c5ad35614 media: chips-media: wave5: Resume device before setting EOS flag c26cbd5c33cd7 drm/amdgpu: force complete the KIQ ring fences on reset 7d722821e2f62 drm/amdgpu: force complete the MES ring fences on reset ef073edd7cfd3 zram: fix out-of-bounds access in writeback_store() 836ce2b99bcce lockd, nfsd: RCU-protect nlmsvc_ops dispatch df5500ab85df6 nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths 9646dfee88073 ceph: fix UAF in check_new_map() on session freed during unlock e1f692b6da3e6 cifs: call pagecache_isize_extended() in cifs_setsize() when extending 5481766125041 ext2: Fix lost inode updates for IS_SYNC inodes 0692a8fdf0222 kho: fix size calculation in kho_preserved_memory_reserve() 996dd15f60121 SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 5909f8f04e9b7 SUNRPC: Switch MIC token verification to crypto/krb5 ffb0423b4f4b0 SUNRPC: Switch MIC token generation to crypto/krb5 1e9125bb7948c SUNRPC: Switch wrap token decryption to crypto/krb5 5ec781a29eed1 SUNRPC: Switch wrap token encryption to crypto/krb5 6b4d0c9cf2b10 SUNRPC: Prepare crypto/krb5 encryption and checksum handles 5cf04fdbbf30e SUNRPC: Add errno-to-GSS status conversion helper 08efba8d62560 SUNRPC: Add crypto/krb5 enctype lookup to krb5_ctx 65f0f82f20334 svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails 35d5dd0c2fd1e svcrdma: wake sq waiters when the transport closes f35cf68b14422 svcrdma: Add Write chunk WRs to the RPC's Send WR chain ddbd71a378094 RISC-V: KVM: Fix PMU event info array size overflow 0d4316e30efc8 KVM: riscv: Fix Spectre-v1 in PMU counter access 0f035333e1994 ntb: Store original DMA address for future release b8cd3b632a0ce NTB: ntb_transport: Use ntb_get_dma_dev() for DMA buffers 6a01c4d3a3ae1 NTB: core: Add .get_dma_dev() callback to ntb_dev_ops 7672973957e3e tipc: avoid busy looping in tipc_exit_net() ed7e9715849ab fbdev: Wrap user-invoked calls to fb_set_var() in helper 69164d6bdad5d drm/amdkfd: Add bounds check for CRAT subtype length 39841db9322cd drm/amdkfd: Fix infinite loop parsing CRAT with zero subtype length 22c2169770ad3 bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie bea1f73ad69ee drm/amd/display: check if dml21_add_phantom_plane() is successful 63844dc03960b dmaengine: idxd: fix double free of wq, engine, and group structs e299b7d1334eb idpf: bound interrupt-vector register fill to the allocated array a4de6fc95b2f3 Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks e124f7b170337 soc: xilinx: Fix race condition in event registration afef4b0de4f3c drivers: firmware: xilinx: Switch to new family code in zynqmp_pm_get_family_info() a19c48d9f5a73 drivers: firmware: xilinx: Add unique family code for all platforms 547ea9f567498 netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag be7fb59512ffc btrfs: lzo: reject compressed segment that overflows the compressed input 0977a6f234396 optee: ffa: Add NULL check in optee_ffa_lend_protmem fdc93f4a80107 scsi: core: pair EH runtime PM get and put 5cea365559449 ovpn: defer key slot crypto freeing to workqueue eb81c8e758f49 ipvs: revalidate ihl to prevent out-of-bounds access d10e73572cda4 eth: bnxt: avoid deadlock when canceling IRQ affinity notifier 21f5381a57a5f eth: bnxt: decrease indent in bnxt_request_irq() bf3f37c2d40b5 gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock 868c478abce85 soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read 056876c9db1e9 btrfs: lzo: reject inline extents without valid headers 618fc8dc219c1 accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() b3d05a335cbd3 accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() 4af94462c0ca2 bpf: Fix netns reference imbalance in conntrack kfuncs b57164cdddb46 vhost_iotlb: bound map allocation in add_range 2b80707b9e276 eventfs: Use children field for rcu head and add memory barriers 969a96479add6 btrfs: skip global block reserve accounting for rescue mounts f5427cab06564 btrfs: warn about extent buffer that can not be released 23b0f4117e970 btrfs: only invalidate btree inode pages after all ebs are released a6f972c50552e btrfs: split btrfs_fs_closing() and change return type to bool f8e5715a37378 KVM: arm64: vgic: Fix race between LPI release and re-registration 4b296d176580a nexthop: take nh->lock for f6i_list walks in replace check and notify f97fae992155b nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush 2c0a8cc97a9d9 xsk: reclaim invalid Tx descriptors in ZC batch path 1ff789fdfa231 xsk: provide sufficient space in pool->tx_descs 9990cac513e8b net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds 15ed8a9b7c63e netfs: Fix folio_queue ENOMEM in writeback by adding a mempool ff5625d27415a Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback ff926f3ef6c80 Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs 946dc5835c8fb net: Convert proto_ops bind() callbacks to use sockaddr_unsized f1b4c6aaf7655 hdlc_ppp: fix potential null pointer in ppp_cp_event logging 68ffe4265775e Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback a76243488740a octeontx2-af: Block VFs from clobbering special CGX PKIND state 59adeedebf02a s390/zcrypt: Close speculative mem read possibility 20b0b0159390f s390/zcrypt: Rework domain processing within zcrypt device driver 2a25ddf0bf6dd s390/zcrypt: Move inline function rng_type6cprb_msgx from header to code 23a541c31b45f drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport 029b363c9b690 md/raid1,raid10: fix error-path detection with md_cloned_bio() bcf30e14d2bd5 md/raid1,raid10: fix bio accounting for split md cloned bios ea2d1d2ebf60b md/raid1,raid10: fix deadlock in read error recovery path e4a59511e1abd md: replace wait loop with wait_event() in md_handle_request() 55c6f05b66772 wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() c09314b8b4c62 wifi: ath12k: fix inconsistent arvif state in vdev_create error paths d94bf50756d7f ocfs2: validate fast symlink target during inode read b4059a1f57eff bpf: Reject sleepable BPF_LSM_CGROUP programs at load time 68cf46755894d wifi: mac80211: bound S1G TIM PVB walk to the TIM element 0901d2c894426 wifi: ieee80211: split S1G definitions out f488b83a38103 ixgbe: do not configure xps for XDP queues 29e07ec352f0a ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT 0bc97a4110e87 ext4: add mext_check_validity() to do basic check 6166cb1344f16 iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path 98c7e206af48b cxl/region: Block region delete during region creation 53fb46cf933dc netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them fcacd948b10a3 netfilter: nft_fwd_netdev: use recursion counter in neigh egress path 7d5a0dc8eaab4 netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding 33aed3ba04aa5 RDMA/bnxt_re: Free CQ toggle page after firmware teardown 2106c337905d7 RDMA/bnxt_re: Add a max slot check for SQ b422e3eff0edf net: serialize netif_running() check in enqueue_to_backlog() 9a6916a934277 net: fully inline backlog_unlock_irq_restore() 459536b3acf13 net: optimize enqueue_to_backlog() for the fast path 580896e330038 fs/ntfs3: call _ntfs_bad_inode() when failing to rename da6675b393516 fs/ntfs3: Reformat code and update terminology 308d7951ca221 i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() 7a45046068791 md/raid1: fix writes_pending and barrier reference leaks on write failures c642583adc136 md/raid10: fix writes_pending leak on write request failures 453f4f1e90de5 bpf: Guard conntrack opts error writes 644b4c05bd1a4 bpf: net: netfilter: drop dead NULL checks 3827ff67f9fbe tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() 9de9e8f279de0 drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock bc8f2d1c6f7cf xen/pvcalls: bound backend response req_id before indexing rsp[] 177d22d31a4eb iomap: release pages on atomic dio size mismatch 0be672071d6e8 net/mlx5: LAG, Fix off-by-one in single-FDB error rollback 31cc289d5b179 Bluetooth: 6lowpan: avoid untracked enable work 3dd12422653ad accel/amdxdna: Fix VMA access race 33819cca7b76d accel/amdxdna: Refactor GEM BO handling and add helper APIs for address retrieval bf63433873a06 accel/amdxdna: Fill invalid payload for failed command 08ff33dce6f91 net/liquidio: drop cached VF pci_dev LUT 241cf3b7455be accel/amdxdna: reject user command submission without a command BO 0a2c89d538fd4 ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD 4739b1b833cf2 ata: libata-core: Disable LPM on Silicon Motion MD619{H,G}XCLDE3TC 1c3d9c6bd5b79 wifi: mac80211: validate extension-frame layout before RX 9cbad9c8125f5 net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains c59a693fbd213 drm/amd/display: use kvzalloc to allocate struct dc c2ddd180bbee7 wifi: cfg80211: use wiphy work for socket owner autodisconnect 01f8a354497ba bpf: Fix UAF in sock clone early bailouts 0b2c44363432a bpf: Use rcu_read_lock_dont_migrate in bpf_sk_storage.c 88c38ff74f834 drm/xe/guc: Keep scheduler timeline name alive 81f70f130eff9 drm/xe/guc: Hold device ref until queue teardown completes 8549ac21ab503 bnxt_en: Handle partially initialized auxiliary devices e611403f30928 fwctl/bnxt_en: Refactor aux bus functions to be more generic 5d3cea7d41dc7 tipc: serialize udp bearer replicast list updates 6089f561e2c31 cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths 984ce52ea0e01 cifs: prevent readdir from changing file size due to stale directory metadata 0c07e046e6391 drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers 16656c3d73469 LoongArch: BPF: Zero-extend signed ALU32 div/mod results 08fffd2881e28 idpf: fix max_vport related crash on allocation error during init c174969f6af6c drm/i915/gt: Fix NULL deref on sched_engine alloc failure f7e744bac9a72 drm/amdgpu: Fix kernel panic during driver load failure cfb5a56c21888 ksmbd: prevent path traversal bypass by restricting caseless retry 3eaec47518e12 smb/client: fix chown/chgrp with SMB3 POSIX Extensions d16713c060066 wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon 3f9c0fdefa043 KVM: guest_memfd: Treat memslot binding offset+size as unsigned values 5afc2d9b86bed netfs: Fix zeropoint update where i_size > remote_i_size b76568c672184 drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() fcb23bb31508b erofs: fix metabuf leak in inode xattr initialization 48d09dea506de net: hsr: defer node table free until after RCU readers a2650f8461cd8 wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb 3899d6f924925 wifi: mac80211: fix missing RX bitrate update for mesh forwarding path f669571a2bf50 netfilter: x_tables: allocate hook ops while under mutex a014668cbd95b netfilter: x_tables: allow initial table replace without emitting audit log message f048f297d93fd netfs: Fix missing barriers when accessing stream->subrequests locklessly 93531bca46707 afs: Fix the locking used by afs_get_link() 86f4c1586418d cachefiles: Fix error return when vfs_mkdir() fails b9390aa62fdca nvme-pci: fix dma_vecs leak on p2p memory fba32257979dd nvme-pci: fix dma mapping leak on data setup error c85f325d9ec31 ACPI: button: Fix ACPI GPE handler leak during removal 78677084cd090 ACPI: button: Tweak acpi_button_remove() 38c79dacc8063 ACPI: button: Convert the driver to a platform one bad88022f8949 ACPI: button: Adjust event notification routines 4ec3a8ca97394 net/sched: fix packet loop on netem when duplicate is on b050fd0c2063b net: Introduce skb tc depth field to track packet loops 2090c1a236833 KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor fa34d3e14cb76 drm/amdgpu: fix amdgpu_hmm_range_get_pages 768daa9f4276b netfilter: nf_tables: add hook transactions for device deletions 7e4ab3907f44d f2fs: read COW data with the original inode during atomic write 8363c219d88e7 fbdev: omap2: fix use-after-free in omapfb_mmap 48ac6bab9999b fbdev: omap2: fix inconsistent lock returns in omapfb_mmap 4338663dfd21b power: supply: max77705: Free allocated workqueue and fix removal order 4e1af66d855f5 power: supply: max77705: Drop duplicated IRQ error message fa4be2054a3e2 workqueue: devres: Add device-managed allocate workqueue 5459933a799aa net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind a8c1480bb066c drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED afe815a67ec8f wifi: cfg80211: enforce HE/EHT cap/oper consistency daacc9d1430b6 ptp: ocp: fix resource freeing order 9446167bef89b ptp: ocp: Make ptp_ocp_unregister_ext() NULL-aware de05e37d02f3f ublk: reset per-IO canceled flag on each fetch 09207dc57ab4c powerpc/64s: Fix unmap race with PMD migration entries e72ffe59e48a7 greybus: raw: fix use-after-free on cdev close cb06a07d835ba f2fs: fix data loss caused by incorrect use of nat_entry flag 910e498613d5b ice: fix double-free of tx_buf skb c789649d4334a ice: fix potential NULL pointer deref in error path of ice_set_ringparam() e98cea6d5562f ice: fix race condition in TX timestamp ring cleanup cbfbc9d446d98 ice: reshuffle and group Rx and Tx queue fields by cachelines 349499a65b6b5 ceph: put folios not suitable for writeback 5df268406ef38 libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() d0ce7b07dafe4 drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure 060f8f3020516 drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure dc24e03be0e4b Revert "net/smc: Introduce TCP ULP support" 2da62dbb4169e drm/amdgpu/userq: fix access to stale wptr mapping b33d6f5da16e0 pseries/papr-hvpipe: Fix race with interrupt handler 51a321dec76f7 papr-hvpipe: convert papr_hvpipe_dev_create_handle() to FD_PREPARE() 1d15503e454bf drm/amd/display: Fix dc_link NULL handling in HPD init 96889fcdb0988 media: iris: fix use-after-free of fmt_src during MBPF check 46edfdcf95d2b media: iris: turn platform caps into constants b0eb0a8959ac2 KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT 73df74544b552 udf: fix partition descriptor append bookkeeping 4456be93464a5 gfs2: fix memory leaks in gfs2_fill_super error path 370154a83a835 gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn 1b6a9f81c4715 gfs2: Get rid of delayed withdraws dfd14e14772c6 gfs2: Asynchronous withdraw 604dca7c20a15 gfs2: Add clean argument to lm_unmount hook 74b981f0d3b90 gfs2: Clean up quotad timeout handling 9e0652e243ef4 gfs2/sysfs: Replace sprintf/snprintf with sysfs_emit e0e31a7ed1191 ASoC: amd: acp-mach-common: Add missing error check for clock acquisition 4097a2afe8acc scsi: qla2xxx: Completely fix fcport double free 57a79c5df057d soc/tegra: pmc: Fix unsafe generic_handle_irq() call 5133ef7c893c2 media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC 6c5d98f24f995 media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure 6ad4caadc6343 btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() 6311ee6daa9cc btrfs: remove 'reserved' argument from btrfs_pin_extent() 81e1ae665004b btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() 559f856b109c4 hfs: Replace BUG_ON with error handling for CNID count checks 3a409a64b2d61 ASoC: qcom: q6asm: drop DSP responses for closed data streams d9bf525dff80b ASoC: qcom: q6asm: handle the responses after closing 02b033e18e08a drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 203a9241a7384 drm/amd/display: Rename FAMS2 global control lock to DMUB HW control lock 28768bc7ea0b1 srcu: Use irq_work to start GP in tiny SRCU 37419fa1b0bc2 irqwork: Move data struct to a types header d14847cb7f65d mshv: Fix error handling in mshv_region_pin f33de03b47c14 mshv: Move region management to mshv_regions.c 06c0ce18055a5 mshv: Centralize guest memory region destruction 93ed80634288d mshv: Refactor and rename memory region handling functions a40a75df33267 static_call: allow using STATIC_CALL_TRAMP_STR() from assembly 5cfa4f537a056 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists 971854e7b6ddd ALSA: ctxfi: Check the error for index mapping 88cc09bb70651 ALSA: ctxfi: Refactor resource alloc for sparse mappings 1422b94887c5c ALSA: ctxfi: Use explicit output flag for DAIO resources c0904c424f7da ALSA: ctxfi: Add hw parameter to daio_mgr_dao_init() dbc8b8d33c9e1 Bluetooth: hci_event: move wake reason storage into validated event handlers c516c2e06fe58 net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path 2352d719cccfc net: ti: icssg-prueth: Make emac_run_xdp function independent of page 2157742f5c32f net: ti: icssg-prueth: Add functions to create and destroy Rx/Tx queues 41f3fa0d14bb8 ti: icssg: convert to ndo_hwtstamp API 6e5c3ddf17a2c blktrace: fix __this_cpu_read/write in preemptible context 6b3546e3a8c66 accel/amdxdna: Fix NULL pointer dereference of mgmt_chann 2f62f8be57882 PCI: endpoint: Add missing NULL check for alloc_workqueue() b0d908230b3d8 PCI: Add WQ_PERCPU to alloc_workqueue() users b569ff8a1bc1b accel/amdxdna: Fix potential NULL pointer dereference in context cleanup 09ed30edcfa1f accel/amdxdna: Add hardware specific attributes 3bdd26582d026 accel/amdxdna: Enhance runtime power management 5a7d0e2810891 ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands e01c79761c7b3 namespace: handle mount locking for automounts correctly 6b8dc3713a763 namespace: never expire a locked mount 494c57572d2d5 namespace: refuse an automount below a mount that is in no namespace fa75dae156df1 fcntl: refuse F_SET_RW_HINT on an immutable inode 5f97df8ca7fad namei: don't reveal overmounted entries in refwalk d29cd99db3db7 namespace: unhash a dentry before detaching the mounts on it 7e1c466011ba9 namespace: don't let a pseudo dentry become the root of a mount 390ddcea2a8ac dcache: don't put a mountpoint on a dentry that's being removed e3aba6900483f namespace: check the mounts before reading their parents in pivot_root() 888363d74c3b5 namespace: remove the fsnotify marks of a mount namespace in process context b9c40553f6ceb namespace: look at the topmost mount for a mount namespace file a0ba48256f5df namespace: check a recursive bind mount for mount namespace loops d73f04e92c1aa namespace: check a submount for references right before unmounting it acbe9e4418e2e namespace: queue a mount only once for mount notifications 33b4344f69013 namespace: check the target before walking it in do_mount_setattr() c44f5c30f0a97 fs: refuse fspick() on internal superblocks b47b40c4f0584 namespace: don't copy an unmounted mount tree eecc9cd0fc07d namespace: don't inherit MNT_UMOUNT in clone_mnt() 5e0a1f2c753a7 namespace: reset the old parent's ->overmount in mnt_change_mountpoint() bf2c8dec26fb7 fs: don't silently unmount busy mounts 9bd1181b36f2d mount: keep a copied mount unbindable c6307228af65a drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs d9da2f7bbbffb drm/amdgpu/userq: return the memdup_user() error for the user MQD 112dbe2b10d6d drm/amdgpu/userq: only accept doorbell BOs as queue doorbell 21aee7fc9310d drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks 1a5c03198ae86 drm/amdgpu: make Mac FB workaround generic 8d6f773d74790 drm/amdgpu: serialize vblank counter reads against GPU reset 3d4890b4ab04f drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info f009879ed9906 drm/amdkfd: align SDMA doorbell base for shader doorbell writes 3a11adcfd9a2d drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin 993c952e6832a drm/xe: Fix shrinker accounting double-subtraction on nested external pins 76e5ddd7d9822 drm/vmwgfx: validate pitch coming from userspace ea22f8a5d11a4 drm/vc4: Fix firmware reference leak in vc4_drm_bind() e61465d3e0292 drm/vc4: drain the hangcheck timer and works on V3D unbind f9b215b3e37a5 drm/imagination: Size page table preallocation by device address 0b4a0fb98b9ff drm/i915/gt: Unmask interrupts only when ACTIVE is true 152fb5083b933 drm/i915/gem: Prevent overstepping exec array boundary cd7bec509c180 drm/gud: don't keep a connector without a CRTC as connector_state 4e7b508c7c60d drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN a661f401f83b8 Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown 4f46de658ce61 Bluetooth: RFCOMM: free the skb when the DLC has no owner b108ea7ebba14 Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() ec227cddd13cd Bluetooth: MGMT: Fix status of pending commands flushed on power off c6489a3a0ac8c Bluetooth: ISO: Serialize concurrent connect calls 90b744066ca52 Bluetooth: ISO: Reject concurrent BIS listener setup 7db33b36213a3 Bluetooth: hci_sync: Fix command skb lifetime during scan setup c3d2799877906 Bluetooth: hci_sock: Serialize dead-device detachment c9c20d334cd5e Bluetooth: btintel_pcie: use managed IRQ teardown 71beae6f2e8bc riscv: hwprobe: use _BITULL() rather than BIT() in MIPS vendor uapi header 2e5c80bbc062a riscv: futex: untag the user pointer before the atomic access b86e88a3dc6e1 riscv: fix load_unaligned_zeropad() fixup for RV32 fa465a7819ecb riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE 7d1367a53137e riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp 8bfcbd5022818 scsi: qedi: Initialize callback state before registration ce2eee635fd3e pmdomain: rockchip: propagate subdomain add errors 1072890e6c1af pmdomain: rockchip: fix clock leak on domain probe failure 5874c0e2bd030 pmdomain: rockchip: don't ignore clock lookup errors on attach 28606d4d4dbe8 pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains f6fbe9c6b3996 regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 199a62d70314d regulator: ltc3676: don't read the write-only HRST and CLIRQ registers 681adbc9c7a82 optee: register TEE devices only once fully initialized 55f12552b00a3 openvswitch: fix soft lockup in the netlink flow dump 558a189ca357d nvme: fix swapped ZRASF zone state values for full and read only 961563117626f net: team: free skb when broadcast has no txable port 0c0568c9d35c4 net: team: stop reusing skb after queue override 5b144f83f2179 net: usb: ax88179_178a: fix rx frame length for non-last packets cc7cc5955d22e net: sparx5: free the matchall entry on destroy 5551399751e2c net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() d7fea7141036f net: dsa: microchip: fix KSZ8765 fiber detection d109141ba1465 net: bridge: avoid recursive multicast port cleanup 6a1833f0d7dc0 net/smc: protect clcsock lifetime in smc_getname 3efe0e0944157 net/packet: guard the ll header push in packet_rcv_spkt() 3a1caa886d41d mmc: sdhci-sprd: disable runtime PM on remove 46e75703ca3f0 mmc: mtk-sd: Cancel request timeout work on remove 9ac3fd9dc917d mmc: cavium-thunderx: destroy slot platform devices on remove 8668f432a9bf7 mmc: cavium-octeon: destroy slot platform devices on remove e3bf232c913b7 dm: fix reading free memory in do_resume c86f80cd246c0 dm-snap: reject the transient exception store for snapshot-merge 4f0ee735dc68e dm-integrity: fix buffer overflow in inline mode with large tag size a1a875614dae4 dm-crypt: reject the lmk IV mode with AEAD ciphers 7a25ca170c12a mm: don't schedule deferred kernel page table freeing while booting d7e811c3a49cd memstick: rtsx_usb_ms: complete requests after eject instead of dropping them f2795c50144d5 memstick: core: wait for request completion before freeing card 11516a0c402a6 KEYS: Fix add_key() race with keyring restriction 955b1f75c4001 keys: finalize persistent keyring timeout after link attempt beb05f484a1e4 ice: fix metadata_dst refcount handling on representor teardown ca8a6285b11d0 ice: fix use-after-free in dynamic port cleanup bb8f6b89587d0 ibmveth: fix TX LTB and filter unwind on open-fail a065bd31ec462 ibmveth: h_free logical LAN on open-fail after register 06656aaa7e43a gve: fix XSK buffer leak on error descriptor 506f9de069d07 gve: fix XSK buffer leak when rings are stopped 42935a6100192 gve: fix napi_disable deadlock when attempting to disable XSK pools a027e0d7765d1 gpio: xilinx: fix runtime PM leak on request error path 76390ac0bca7e gpio: mpsse: fix race when arming the IRQ poll worker 1eb70d10bbb8a EDAC/amd64: Mask UMC chip select to the four implemented selects 2d79ddc9a0cc0 sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute 5509d498e1b9e selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts 5a41bcc5057dc selinux: fix data race on AVC latest_notif 215c29f7f4606 Revert "wifi: libertas: reject short monitor TX frames" 1428c5f1d346a tipc: hold a reference to nodes found by link name 0af8780bdfdfc tipc: destroy topsrv workqueues before closing connections 1c7463ac0e99c tcp: reject net_iov in zerocopy receive mapping hints 3d555c31b0d27 swiotlb: fix default_swiotlb_limit() for non-growable default pool d2b5f637b9b67 strparser: make sure __strp_recv isn't running before tearing down the parser 65cb86860a80f tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() 086944c1c2cbb xen/netfront: don't leak the skb when xennet_fill_frags() fails b12a25fb2b9d5 workqueue: Fix NULL current_pwq deref in chained work check 4d64a3d6e96aa wireguard: noise: reject response consumption after intermediate initiation 38da24fd5c9d0 wireguard: queueing: preserve tstamp_type when encapsulating packet d730b466496ce wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init() dd117d17e8aa2 wifi: mt76: mt7603: initialize global station WCID eef16a74ff8ed wifi: brcmfmac: fix P2P device removal race in brcmf_detach() 38bad3930b118 vsock/virtio: account only unread bytes in read_skb() 6139c710d8bee usb: f81604: fix struct f81604_int_data size mismatch 5680b6fb30546 dm ioctl: don't let data_start run past the buffer 2200fe1d6148b cipso: adjust cached option offsets when removing CIPSO 8d88d3221204f cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() 12ba7d8b9cd45 btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() a768b88cd157b ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) 13bbcfe755d46 arm64: irq: exclude the softirq stack switch from KCOV 1ea7241101753 ALSA: hda/tas2781: Accept V1 calibration data without CRC f7dc71c1ce885 ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers 0b0278e760d7b Input: xpad - add support for Corsair Novablade Pro 2e4f80c023119 Input: xpad - add support for 8BitDo Pro 2 Wired Controller for Xbox d738e51bf2c21 Input: ati_remote2 - fix type confusion in device attribute handlers 4ac7d92a4698e ipv6: do not warn on route notification size race 7dfa7ca97f3ac ipv4: do not warn on route notification size race c1f48d1c2d5e9 ipv4: stop route notification sizing when nexthop group shrinks 21cba134c30c1 ipv4: stop exception dump when nexthop group shrinks c6d670ac656ba ipv4: stop PMTU walk when nexthop group shrinks 71cbad138969e rust_binder: reschedule node refcount update on thread exit f3e835af6226f ipv4: validate checksum_start before completing checksum fa1bceba169b1 ipv6: Fix redirect exception creation for UDP/RAW sockets 61a32face36f7 crypto: drbg - Fix ineffective sanity check af98611ad109e net: dsa: mt7530: fix .get_stats64 sleeping in atomic context 4d8ed219b1921 f2fs: fix to reset all pinned status during fggc b2cf17d39dd2c f2fs: fix to shrink gc_lock coverage in f2fs_gc_range() 3f63f071bf82b accel/amdxdna: Bound the sync_bo flush range to the BO size d7b9770a487e1 ynl: fix schema check errors 3a49853272bd3 doc/netlink: netlink-raw: Add max check 56760e83aa4e8 netfs: zero the tail of a short DIO/unbuffered read 61519a5a1d70f net: mana: Skip WQ object destruction for uninitialized RXQ b5aa7f1773f80 net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() 867119b4b5880 net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry 639522e5056ca net/mlx5e: Prevent stale XSK buffer release on refill retry 50cff3f112d64 fs: Free any excess xarray nodes in clear_inode() fbd977e513971 bnxt_en: fix DMA mapping length for padded small packets 17ad2612c11a7 Linux 6.18.56 a47406c769f72 ipv4: free inet_opt and ireq_opt after an RCU grace period b473ee29aa0d3 iio: adc: adi-axi-adc: Initialize state mutex bb29dd90885b4 iio: adc: adi-axi-adc: Make use of dev_err_probe() e05c55de819b4 iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs 845c959178cca net: mana: Sync page pool RX frags for CPU 55aa2774323e7 net: mana: remove double CQ cleanup in mana_create_rxq error path 72d2f54367895 xen/netfront: drop RX packets with a short Ethernet header 626deff23b544 net: usb: qmi_wwan: add Quectel EG120K-EA 525694a6021ec KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails 81d7875515906 KVM: x86: Add static calls for nested virtualization ops 69f1d46341c28 KVM: x86: Reject nested CAP enablement if nested virtualization is disabled 9a4605ac9045d KVM: move TSS constants from kvm_host.h to tss.h 318ef696fa3c7 KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted 267c586a090a4 KVM: arm64: Use stage-1 leaf size for VM_PFNMAP 1113374a17d7f KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT e4f086a7d7074 KVM: arm64: Always populate FGT masks at boot time a014b1a377e45 KVM: x86: Move IRQ-related helper declarations from kvm_host.h => irq.h cf0654248c87f arm64: errata: Add Cortex-A725 erratum 3821522 workaround 424e851050f47 arm64: errata: Factor out broken AMU const counter cap 277c4d8eac0ba arm64: mm: Fix the break-before-make flush range for erratum 2645198 e506333d1b9f4 perf: Require kernel access for text poke events 2581b43e162cf perf/core: Check kernel access when kernel callchains are requested a16986dac7be5 perf: Replace perf_event_header__init_id with full header init 624370942abd3 unwind: Shorten lines 08bf919f041af tty: fix saved termios reset race 9e8595cbd31db usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41 100f92cc90149 tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2 ba927133b3018 usb: dwc3: gadget: fix IRQ storm on invalid event buffer count 9b995b757a87d drm/amd/display: Fix fast updates on DCE 8.1 6f36088234647 drm/amdgpu: reset VI ASIC on MacBookPro14,3 d12b62677fb48 drm/amdgpu: reset VI ASIC on MacBookPro15,1 0e0fd96b26263 drm/amd/display: Preserve eDP mode on initial ASSR failure 8786c5bc77375 drm/amd/display: Mark DCE 6.4 as not APU 6b0cc4e32599f iio: adc: ad4030: fix invalid oversampling_ratio validation 23222e50948a2 iio: adc: ad4030: Use BIT macro to improve code readability 9c8158ef4ccce units: Add HZ_PER_GHZ a0a1929d66d6b smb: client: only require read lease for size-extending preallocate aec958676fb75 iio: adc: aspeed: propagate reset deassert errors 49c97ba1a3a3f iio: adc: aspeed: Simplify with dev_err_probe 74d723eee7296 smb: client: distinguish real EOF from a stale remote_i_size on read cecf4114069fc smb: client: flush dirty data before zeroing a range 405a969c0b335 thunderbolt: Don't access a DP tunnel after its DPRX read was canceled 9cedbfde14500 wifi: mac80211: set info->band for 802.3 encap offload frames cbdcf80683f53 wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() 03525b632908b wifi: mac80211: count only matching reservations in reserved switch 80e8b0ea73ba2 mtd: spinand: fix NULL pointer dereference with no ECC engine 2d86abd280714 nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known d3d6d7efdacc0 nvmet: copy the hostid into the ctrl before creating PR pc_refs dd053fc01eefa nvmet-tcp: Don't error if TLS is enabed on a reset 889c61e3d0f10 Bluetooth: Serialize SMP remote OOB data access e887e43bd5aa7 fsverity: add dependency on 64K or smaller pages b4c0c41b952c2 fs,fsverity: remove check for fsverity being enabled in setattr_prepare() 2efdeec99ca09 fs,fsverity: reject size changes on fsverity files in setattr_prepare 8f317daa50fe1 rust: irq: pass RegistrationInner as cookie to request_irq 333fa4bb5dbbe rust: devres: ensure revocation is complete before device finishes unbinding e7930d857cc79 rust: devres: fix race between concurrent revokers 5017fdcb5ad73 rust: devres: add 'static bound to Devres 8ae7e5dec4f34 rust: devres: fix race condition due to nesting 946ae2e1669b6 mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc 60f3b22d501dd mm/vma: rename __mmap_prepare() function to avoid confusion 98f6a4589e0f5 netfs: clear post-EOF pagecache when extending a file via write 4b8ce1686dea1 pfcp: fix socket lifetime on netdevice registration failure 8bed333470a1b mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages 0a6c9b3801903 drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read e68380710fc97 svcrdma: Use svc_xprt_put to free listener on create failure d1d9694ae47da mptcp: fix msk->timer_ival reset e64703280ce7a iio: trigger: cancel reenable_work before freeing trigger e113bac1d5e72 iio: proximity: vl53l0x-i2c: claim direct mode for raw reads 28e76a775c304 iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler a70d84d2f6c32 iio: proximity: sx9324: Correct proximity channel resolution 20ebd7f4e35c0 iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure 58237debc18dd iio: proximity: isl29501: Fix return type of isl29501_register_write 6501b032be217 iio: proximity: aw96103: validate firmware data length 493e743ea1b59 iio: pressure: rohm-bm1390: Return error when read fails 4fd5a61e61d68 iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup 10a958e76c737 iio: light: rohm-bu27034: Fix infinite delay on error cc71400bc965c iio: light: gp2ap020a00f: drain irq_work after free_irq ce308ce18dedc iio: imu: adis16480: fix unprotected debugfs reads 50e8d70ba0743 iio: imu: adis16400: fix unprotected debugfs reads 60699102827fd iio: health: max30102: fix NULL dereference in interrupt handler b53dc6e15aead iio: gyro: adis16136: fix unprotected debugfs reads 786f0162fe6d2 iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() d6a83a5015071 iio: cdc: ad7150: fix OF matching and publish module aliases b134ef820610b iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. b466db9e68b47 iio: buffer: serialize buffer teardown with mode claims 8aef1e8bdd86d iio: admv1013: initialize callback mutex before registering notifier a5fe2d1b55fab iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind f44e2ac2fb114 iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls d74c2489acc5f iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure 6dd3bf785d030 iio: adc: stm32-adc: fix possible division by zero in processed channel 2754d336af34b iio: adc: stm32-adc: fix check on internal channel availability 56e8e9d9992b4 iio: adc: rohm-bd79124: Fix rising alarm 2a3fd11fd0e19 iio: adc: rohm-bd79124: Fix GPIO mask check 02a9e6a95a3bf iio: adc: rohm-bd79124: Fix channel initialization 1d8beaae5a745 iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop 2eb7f097e15dc iio: adc: pac1934: check ACPI label duplication fe0ceff995d91 iio: adc: max1363: sign-extend bipolar differential channel reads f87d392bb4ebf iio: adc: axp288: Add TS bias override for Haier HV103H ed1a6230155fd iio: adc: ade9000: request interrupts after powering the device f73b94acc7ec8 iio: adc: ade9000: handle Phase C dip events in IRQ1 handler fddb6cc28134b iio: adc: ade9000: fix overlapping scan_index for current and voltage channels d2400175228fb iio: adc: ade9000: fix NULL pointer dereference in clkout registration f20b94a7dc1ff iio: adc: ad_sigma_delta: fix use-after-free on unbind 0633f83c4caa9 iio: adc: ad7173: Fix digital filter configuration d2261795797bc iio: accel: sca3000: fix frequency divider condition check 3365209e758c8 iio: accel: kxcjk-1013: reject duplicate event disable 5c7ca8fe72064 iio: accel: kionix-kx022a: Prevent memory leak and fix state 4165641d06ef4 smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races f82242fe3109a smb: client: flush and commit data before querying allocated ranges dce9bca8afcbd smb: client: discard post-EOF pagecache when extending a file via copy range b75dadb50a25e smb: client: discard post-EOF pagecache when extending a file via zero range 2f97f929dad9e thunderbolt: Reject oversized XDomain properties responses 58cb2aa1d29f7 thunderbolt: Disable CL states for the Anker Prime TB5 dock 2f5893172fc61 thunderbolt: Fix domain reference leak when DPRX read is canceled 34a6e27c954e5 thunderbolt: Tear down inactive DP tunnels when the domain is stopped e09cbad4db58a thunderbolt: Mark discovered tunnels as active c444d2c17dc23 thunderbolt: Hold a router reference for each allocated HopID f18faa3d3b810 thunderbolt: Fix KASAN reported use-after-free when request is canceled 29664699216c6 USB: serial: option: add Compal EXC-T1 support af4224809ea1b USB: serial: option: add Quectel RG660QB 3ef1b5c9a7194 USB: serial: option: add Compal EXM-G1x support 8b495843267b9 USB: serial: option: add Quectel EG060W 02e1112182d8a USB: serial: option: add support for SIMCom SIM8260C 4597ddd6168ae USB: serial: fix ioctl hangup race a1aa474768f69 USB: serial: fix driver deregistration order 4d6da6867b4ac USB: serial: fix dynamic id driver deregistration race 02fc7a87f0291 USB: serial: ssu100: fix baud rate overflow 4e18c175cea26 USB: serial: quatech2: fix baud rate overflow 25a5f7239a43a USB: serial: cp210x: add Corsair AX1500i Power Supply 452f1c9b76f7a wifi: mac80211: handle empty FILS association request payload 128e800a41270 wifi: mac80211: fix mesh fast xmit path deletion UAF a613c891906b5 wifi: mac80211: release mesh path quota on failed additions 1892e71aa2e5e wifi: mac80211: reject invalid 320 MHz CSA bandwidth 42aa9feb27b60 wifi: mac80211: minstrel_ht: validate fixed rate index d0183cd1f6a2d wifi: mac80211: keep fallback association elements alive 3b75831ceee76 wifi: mac80211: account proxy paths against the mesh path limit 772bd89304ecf wifi: mac80211: drain PS delivery work during station teardown 481f9230284c2 wifi: mac80211: shut down RX BA session timer on teardown 1c82d0c5d5091 wifi: mac80211: keep paired old chanctx alive cd8f8f45d81aa wifi: iwlegacy: 3945: free EEPROM data on remove b0e97bd40e0c2 wifi: cw1200: fix TX padding OOB read leaking heap data to device 4c9a32a808104 wifi: cfg80211: fix RTS threshold setting for single-radio PHY 98abf374e5096 KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor b37ae6e65a1dc KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs 97c1dcce17ef2 KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy 8b7d4f68fef96 KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state b1de3ebf59507 KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it f6189e26d0237 KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified 1a62eb293f60a mtd: spinand: Do not update the QE bit on devices without one b28120197cc15 mtd: spinand: fix zero oobavail when no ECC engine is used 23cef33571b19 mtd: spinand: Enable QE on all dies 2bbaa3f8df83f mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive() 875c57f2df09f mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB 1ed0ccd564915 mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ cadf42f22438f mtd: mtd_intel_dg: reset poll counter for each erase a991c28066e7b mtd: block2mtd: Fix divide error when erase_size is zero 2423a05dd0f21 nvmet: pci-epf: reject too-short SGL segments 7fd3c363eba4f nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() 21ffcae171d11 nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT 49e8a3224c91f nvme-multipath: fix underflow in ANA log bounds checks e30a2406408d2 tpm: fix off-by-four bounds check in tpm2_get_random() aa480f05aed7a net: extend IPv6 exthdr detection of tunneled packets 6316d17324bd4 ipvs: bound LBLCR and LBLC cache growth 891bd8335a0de io_uring: fix task_work add use-after-free with SQPOLL a85d0f00671b4 fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() bdbc8e78aa96d tracing: fprobe: fix suspicious rcu usage in fprobe_entry b0f76d4cb9be5 mm/damon/core: do non-safe region walk on kdamond_apply_schemes() d3c2d2692bdf4 x86/mm: Drop unnecessary PMD page copy when freeing fe23680e6f1d5 x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h 84df222de86ea Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() c3b5e6da4ba64 Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() c42ce5373405c Bluetooth: btintel: fix buffer over-read in btintel_hw_error() 708cdd203d0bb Bluetooth: hci_core: Serialize fragmented ISO packet queueing 1681f97afdf92 Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown 86e9708f9d19a Bluetooth: hci_core: Serialize ACL scheduling with channel deletion dd4db9f808ac2 Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems cabd58d9bb66d Bluetooth: hci_conn: Lock parent access during enhanced SCO setup 333257e6e4a7b Bluetooth: hci_sync: Fix inquiry cache use-after-free 0a554901bd227 Bluetooth: RFCOMM: Fix initial port reference race 4230d65032fcf i2c: xiic: don't clobber msg->len to signal block-read completion 51e1125ff7d63 i2c: xiic: preserve PEC byte length in SMBus block read setup ba0632683728e EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup 865f3bdebbc9b EDAC/altera: Fix use-after-free in error paths 74eeb95c0478b EDAC/altera: Fix memory leak on dci allocation failure 9846b85c2eb8b EDAC/altera: Drop __init from ECC setup paths for re-probe safety 0c03cb91b5698 EDAC/altera: Do not allow driver unbinding 9d2d3b3dfe897 EDAC/versalnet: Drop remote processor handle refcount on driver removal e561c2740b628 ALSA: hda/realtek: Fix silent speaker on Higole F9B d8986de05cc6c ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR eb0c7fda59cf6 ALSA: ua101: reject mismatched capture/playback packet sizes fc5c52848e405 ALSA: seq: Serialize compat port-info ioctls 9590d16791625 ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 69d2b7a4c1151 ASoC: qcom: lpass-cpu: use DAI table index for playback constraints d195c8c763fdd ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type 7df8c39a50f36 ASoC: codecs: max98363: fix uninitialized stream_config->type 2bce6f006cfe0 arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems 1c17db14f2c23 serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL 8f9103651d6ab serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around 48e09369839fb serial: vt8500: Fix clock reference leak in vt8500_serial_probe() f895ed664cb7a serial: tegra: don't clear the Tx FIFO on an Rx-only reset d8233d6b391b4 serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() 7019a84c23c1f serial: fix TIOCMIWAIT race 3f151c2e86f5d serial: revert guards in uart_wait_modem_status() c3ba14c29d55b serial: 8250_omap: fix wake irq cleared during suspend e32440fa536af serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() 2c8614981d3e6 tty: serial: max3100: shut down timer before freeing port 94af6cd832e9b tty: abort break signalling on hangup c110c6eed54fb tty: serial: qcom_geni_serial: Keep console RX functional after deep idle 6b7be3b9b8579 tty: port: fix tty_port_tty_vhangup() race 7021acc84c2e0 tty: tty_port: restore TTY_IO_ERROR on activation failure 821050631750e tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup 4335278d0e753 tty: vcc: zero-initialize control packet in vcc_send_ctl() 3551bdf843a1f tty: amiserial: fix broken TIOCMIWAIT e8615dfe80cf5 tty: vt: fix memory leak in vc_allocate() d16046f1ace26 usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe 95160fe606e68 usb: cdns3: fix use-after-free in cdns3_gadget_exit() 072535f26dc5c usb: typec: ucsi: displayport: Current CAM OOB index fixup f5ed186d0cf38 usb: typec: ucsi: Get the connector fwnode based on reg value 41934f92e7a54 usb: typec: ucsi: glink: fix use-after-free of ucsi on remove 75dc6cb377efd usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() 282be6ae8be79 usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() 30dbaf3c6696b usb: typec: tipd: don't send GAID when probe fails in APP mode b2ed8643face2 usb: typec: tcpm: recover after failure to start the frs ams 4333174ea52c8 USB: dwc2: shut down wakeup timer before freeing HCD state 1da16c46b8d71 usb: core: clear both ep_in and ep_out for non-ep0 control endpoints bd89c4f42f564 usb: chipidea: tegra: disable runtime PM on resume failure 7811d8e26c77f usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC 5298c96bf0068 USB: gadget: dummy-hcd: Fix wait for outstanding request completions 474e9e1852fb5 usb: gadget: aspeed-vhub: cancel wake work on device removal 9f0321e8e9afb usb: dwc3: am62: Fix runtime PM usage count leak on probe error path 7b5ed2d30ccc6 usb: typec: port-mapper: Only match USB4 port if host interface is available 50a92c02551c1 usb: typec: anx7411 - stop the IRQ before destroying the workqueue 8c611876c002d usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd 87f2185423e01 usb: gadget: midi2: Fix the jack descriptor array sizes 772149e7badba usb: ohci-st: disable controller wakeup on removal ec69932b45585 usb: ohci-spear: disable controller wakeup on removal dc1b196ad5956 usb: ohci-s3c2410: disable controller wakeup on removal 83e8bd42bd17b usb: ohci-da8xx: disable controller wakeup on cleanup a12e803d22551 usb: octeon-hcd: fix the FIFO-flush timeout computation e9545dd8bc625 usb: hub: use shorter 120ms post resume hold for SS root hubs e2d62928f2666 usb: storage: sierra_ms: reject short SWoC info transfers 5e8980a81af19 USB: serial: fix port tear down use-after-free a0ed07b5bbb2d USB: cdc-acm: skip URB restart in port_shutdown if disconnected 108af6f585ddc USB: cdc-acm: fix racy TIOCMIWAIT implementation 9b5b83ca2a668 soc: qcom: geni-se: Correct QUP Core ICC vote constants d54df2de22f9a rust_binder: cancel deferred work items in thread exit f7fb6c2835ede nitro_enclaves: fix use-after-free on SLOT_ALLOC failure c5504e179135d Input: synaptics - limit T440p InterTouch quirk to LEN0036 fc92d4499f3fa Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 95e8d0a7b22fa Input: s6sy761 - fix resume ordering and restore sensing d79caaf07875c Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 bcfd26841471a Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 0278c68c59b94 kgdboc: Fix tty driver reference leak in configure_kgdboc() 1299cb3fb0615 binder: fix leaked fd fixups on TF_UPDATE_TXN supersede 86cdcc87d4ba6 binder: fix is_failure flag for superseded transaction cleanup 5b113e8ee3268 drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU 587469076e4ff drm/amdgpu: fix ACP MFD device leak on init failure 7ca44cb14d024 drm/amdgpu: fix IP instance memory leak on kobject add failure b84f1386d84b3 drm/mediatek: Fix pdev reference leak in mtk_drm_bind() 629458b7e4955 drm/mediatek: Fix ovl adaptor platform device leak 88f8a92dcb0cb drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device 4d12b763c2c55 drm/radeon: Read the VRAM VBIOS signature with readb() 652f631e2e3a8 drm/amdgpu/gfx6: fix firmware leak on teardown 36fa4159d0054 drm/amd/pm/si: Fix updating clock limits on AC/DC e67aef159f430 drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC 197946faa1b79 drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend f3db2853e2a28 PCI: Accept AtomicOps already enabled by the hypervisor f3eaf31910087 spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260 d5a81039adc6a ALSA: ice1712: Fix the error handling via auto-cleanup at probe fc34dd95d3baa ALSA: core: Define auto-cleanup for snd_card_free() 524063fea29f8 perf: Fix race between perf_event_exit_task() and perf_pending_task() 7648757145aa9 i2c: at91: release DMA channels when probe defers efd0d161b0cb7 net: mvneta: clear XDP pfmemalloc flag between frames 53b21bc2df6e8 ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() f81d40e2eb695 net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference 9a76ae59fd637 net: sparx5: make ports inherit the switch base mac address type e3630ff89b777 of: Put coreboot node after compatibility check 47c5ac61e6fb6 net: microchip: vcap: stop scanning after deleting key field 4033e1a9262c5 netfilter: flowtable: generalize pending status bit f6143ae109df5 netfilter: bpf: reject invalid NAT manipulation types 55d033324f67a ipvs: filter some flags received in the backup server 7151f14d59155 ipvs: do not create invisible templates 60e9a6e2ba718 ipvs: fix missing counter decrement in lblc e5633d81b2daf tcp: refresh TS.Recent for accepted old ACKs 35c706d6eb196 net: sparx5: skip ptp deinit if init was skipped 297769d75dc67 net: sparx5: move PTP IRQ handling out of sparx5_start() 728138dcfc92f net: sparx5: move stats initialization and add deinit function 387478e9e9861 net: sparx5: move MAC table initialization and add deinit function a0a8687eb7878 net: sparx5: move VCAP initialization to probe ebb164ae76ad9 net: sparx5: move netdev and notifier block registration to probe a01c71ab74ea4 net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values 82be3d08de9e1 net: ethernet: mtk_eth_soc: allocate dummy netdev sooner 2f581814e4e3e net: cap skb->queue_mapping when the tx queue is picked 2294b62eaec6f net: bcmgenet: fix NULL dereference in set_coalesce before first open 507c895019a81 net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence a4b63808f99a5 virtio_blk: set the zone write granularity ac4827cf96532 net/sched: sch_codel: match the no-drop threshold to the packet size ab6842a1c7bdd net/sched: fq_codel: match the no-drop threshold to the packet size e94970076d293 gve: DQO: accept TSO packets with non-protocol gso_type bits 5069ce898148b net: restrict SO_RESERVE_MEM to TCP sockets and cap max value 358d5ac5a5d57 net: stmmac: fix rx Scatter-Gather support 5847b60561a31 net: stmmac: convert priv->sph* to boolean and rename f78d45d5f1ac4 net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() f74f100e49588 tipc: prevent GCM nonce reuse on peer key changes adad3ff80e50c octeontx2-af: mcs: Fix SC resource cleanup loop 3a6e67ff267af net/mlx5: Fix slab-out-of-bounds when handling team device events 8438b4f65a179 net: systemport: Fix RUNT MIB counter register offset calculation 96d8b26be5bc4 net: systemport: Fix buffer overflow in bcm_sysport_get_stats() 7f16443a30f4e Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister 70d2afb554015 netfilter: ipset: do not update comments from kernel-side adds e50eaba0b34be ipv6: fix prefix route expiry in modify_prefix_route() 6598215a1d8e2 net: bcmgenet: allocate RX buffers as page fragments ebc9611ab154c net/sched: cls_api: reclaim an empty proto on the error path 63120572edde8 net/mctp: publish the mctp_dev only after it is initialised 380acb097059c ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer a85823b074f9f arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz b0fce76873a5e Bluetooth: btintel: validate DDC record lengths 8ba754621f105 Bluetooth: hci_core: free the HCI ID if naming fails 790730e4d95de blk-mq: set RQF_USE_SCHED when the operation is known 2e8f3fdb0825c blk-mq: factor out a helper blk_mq_limit_depth() c97ef13ad96be block: reject polled dio with user integrity metadata ed389554fe22c ASoC: codecs: rt274: Fix format setting for 44100 rate eb04ba7d97809 ASoC: codecs: rt286: Revert delay value for jack setup 88e96d902efee wifi: mac80211: prevent AP VLAN tx from other interfaces 227ebe48704be wifi: mac80211: Add 802.3 multicast encapsulation offload support 9f4e5abe6bf72 wifi: mac80211: Add multicast to unicast support for 802.3 path dd7973a4130b0 wifi: cfg80211: preserve hidden-group beacon IE ownership cfd70c9b19846 rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() 9cff19ddd7f90 rtc: ac100: Fix clock provider use-after-free on probe failure 00dc50cede967 rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak 345ce265cf604 wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE e0c21130c1c77 wifi: ath9k: reject short WMI command responses 9a9467f7cc633 wifi: ath11k: reset ar->num_stations on hardware start 9338b2dea74cb wifi: mac80211: drop oversized fragments to avoid extra_len overflow f9d075fa9fba9 wifi: mac80211: remove RX_DROP f41735133943b ASoC: tegra: Fix ASRC Stream6 input threshold control 71d140099165d wifi: wfx: validate MIB read length before copying to caller 9091199beced3 ASoC: wm8903: Move the DRC QR threshold to the register that holds it b8cbeda043e47 of/overlay: don't create "//" paths for fragments targeting the root 7a46f1917b320 of/overlay: don't leak fragment references when changeset init fails 2222a8b7dfeb3 random: fix vgetrandom_opaque_params kernel-doc 541d61d59f19a nvmet: preserve device path on allocation failure f971f1c63cf71 mtd: core: call _get_device() with the master MTD 4c73c1859fa64 iio: accel: kionix-kx022a: Fix array boundary check 489e51034910f iio: light: rohm-bu27034: Fix error return 09a9a2a9548f2 iio: dac: rohm-bd79703: Do not allow writing SCALE 7899d0530b411 mm/damon/core: don't skip damos_adjust_quota() while esz is not zero 122b8541f511d random: vDSO: avoid call to memset() when zeroing reserved parameter 3f75da1e4ee69 ALSA: line6: reject oversized playback packets 84727facd8506 ALSA: caiaq: unregister the input device when probe fails 9cec23424c598 wifi: wlcore: Fix runtime PM leak in wlcore_remove() ad06f7312d3f6 vt: skip screen update for DEC alignment test on backgroup consoles 037d7e3ca5c59 vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() 233a2e190b128 vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF 90c29158159e4 net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone 7d2ff870f0cf1 rds_tcp: close NULL deref window in rds_tcp_set_callbacks dc87b56b43c91 mm/huge_memory: initialise workingset state before folio split 9ebb974773bfa mm: shmem: ignore sysfs configs for shmem forced collapse 7a1e8daeaa466 virt: vmgenid: set driver_data before registering notification handlers 0af47cb2575d4 virt: vmgenid: remap memory as decrypted 258310d59a82e module: fix lost error code from codetag_load_module() 512eaf01ffabf netfs: zero gaps in read-gaps folio to avoid writing back stale data 96c46c75b0d47 tpm: Disable TPM on null key name mismatch e701345d886e8 sctp: check RCV_SHUTDOWN after the sendmsg connect wait e0cabda9b6f4d rtc: spear: initialize IRQ state before requesting alarm IRQ 160619b387072 rtc: ac100: Assign .num before accessing .hws 37286a49cc744 r8169: disable EEE on RTL8168h/8111h 69ca64bbb5288 net/packet: prevent TX_RING byte count overflow c5f91098edee9 netfilter: nft_flow_offload: drop flowtable reference on init error path ba56d6f9f1a8d net: phy: aquantia: fix system interface type not updated in forced mode ed997f875d03d net: fix checksum offsets in skb_splice_from_iter() 0d1525fdcd335 of/overlay: only treat a positive changeset id as registered 7dc6a769153c0 of/overlay: put property on deadprops only after changeset add succeeds 42f6d682e0ab5 of/irq: Fix remaining refcount leaks in of_irq_init() f7ea1916e8a80 octeontx2-pf: Fix RSS indirection table size 6745fa65f4115 kprobes: Skip disarmed probes when checking optkprobe overlap c2733ea2c15a1 kasan: unpoison task stack below watermark only in generic mode 2ebeba4f9e815 io_uring/zcrx: requeue multishot receives stopped by a local resource 4e9e016c4f498 io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full 0c19a6c1d25fd HID: multitouch: stop the release timer from being rearmed on remove 97be6396817bd HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request 308db93de666a crypto: x86/aes-gcm - fix always true check for last AAD segment 88633025f20ba audit: fix exe mark UAF in kill_rules() 745e83328dd69 ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices 224b56b7c02b2 smb: client: close completed creates on compound wait errors 78e718c5aa146 cifs: Remove the RFC1002 header from smb_hdr f09875ff901e9 smb: client: close handle after create-context parsing failure 080573f419506 smb/client: pass cifs_open_info_data to SMB2_open() 7bdc4b7d99a82 smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() 605ef5bd74d02 cifs: on replayable errors back-off before replay, not after 178820984f2cd Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table 60ba99f910b76 ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture f44d5d3b7e344 neighbour: Annotate access to neigh_parms fields. 3b91cdacb16b7 neighbour: Use RCU list helpers for neigh_parms.list writers. df057d89e0cc2 RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_has_attr() b15c79fca2806 xfs: don't let memory failures leak blocks and kill repairs 70a7918fda54a smb: client: use finish_no_open() for non-regular inodes 677aeec9783c8 mm/execmem: make the populate and alloc atomic 7ad8b185dd7e9 selftests/mm: hugetlb-mremap: add setup of HugeTLB pages 22e82acec93a6 KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction 81e3f065a6485 KVM: arm64: nv: Fix life cycle of the nested_mmus array e18b8236c57fc btrfs: initialize inode mapping flags for cached inodes 725bd2f3c81d5 Linux 6.18.55 fa047f2a02500 bpf: Reject key-less BTF for hash maps 98fd50aaaeb2a rose: don't warn on stray CALL_ACCEPTED/CLEAR_CONFIRMATION in state 3 5454ea6e22e7d rose: use timer_shutdown_sync() for t0timer teardown bcf4c43f797ce rose: guard rose_transmit_link() against a NULL neighbour 7d10439345e2b rose: keep the route needed for routing loop detection 6c401ae426e20 sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags d3c8fb7094c53 hfsplus: avoid double unload_nls() on mount failure 500c9259f5a66 mm/damon/core: fix unconditionally skip last region f6660e9a3e1e6 rust: net: phy: fix off-by-one bit positions in device status accessors d50418db3b862 Revert "rust: net: phy: fix off-by-one bit positions in device status accessors" c525772c304c9 RISC-V: KVM: Serialize IMSIC attributes with vCPU migration 5fdc644a4fea4 RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_rw_attr() 4a04ed9157581 net/sched: act_ct: avoid modifying shared unconfirmed ct entry 812c16a255e77 net/sched: act_ct: fix helper UAF due to extensions realloc 9ba16ce8f3faa x86/sev: Make vTPM SVSM calls preemption-safe e43d42bd711e7 x86/sev: Remove redundant ghcbs_initialized checks around __sev_{get,put}_ghcb() 524becfebcd0f x86/sev: Carve out the SVSM code into a separate compilation unit b2a9d6ff593b5 x86/sev: Add internal header guards 1cad4f235e150 x86/sev: Move the internal header 99607d955be3b perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints 7ba97aa16778e perf/x86/intel: Update event constraints and cache_extra_regsfor LNL edc0309282aab perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification 51199c793bc05 perf/x86/intel: Update event constraints and cache_extra_regsfor ADL 24e79508b237d net: ipconfig: bound DHCP option construction 8fbfa861dfd4f net: ipconfig: Remove outdated comment and indent code block bda487567d0b7 net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths aa4845a710ae9 HID: alps: unregister DualPoint Stick input device on remove 48c5c02bf6fde HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM d0f6244f4af44 PCI: Fix BAR resize for devices on a root bus 85b1112945f21 super: make iterate_supers_type() deletion-safe ccf96a4b8626a mm/hugetlb: do not dissolve gigantic pages without runtime support 2ab4b6815d10e mm/hugetlb: create hstate_is_gigantic_no_runtime helper 4cef512a955e4 mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish a56e5bcc43310 mm/rmap: allocate anon_vma_chain objects unlocked when possible fcbedba553a9c drm/client: fix restore of partially initialized client 933145e2bbb4c drm/client: Pass force parameter to client restore 0589706ace3bd drm/client: Remove holds_console_lock parameter from suspend/resume 817dd706ee616 drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc() 13f299763f6c0 drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1 97e40aa29c10c drm/i915/psr: Disable PSR2 on Xiaomi Book Pro 14 2026 as a quirk 66f814e8af462 drm/i915/psr: Fixes for Dell XPS DA14260 quirk 782b5210e89e7 drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk 5815329988acf i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL f42562dd027dc vlan: require the MAC header to be present in __vlan_insert_inner_tag() 241e67b60308c cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict d186e0171c8a4 cgroup/cpuset: Ensure domain isolated CPUs stay in root or isolated partition 8a64ac9f03fc9 cgroup/cpuset: Move up prstate_housekeeping_conflict() helper 438bf73ca9775 net: tls: fix silent data drop under pipe back-pressure 66a2179d02668 xfs: fix cursor and pointer handling when recovering iunlink buckets 86b17699bd0c2 xfs: fix blockgc group quota scanning when usrquota isn't enforced 930a9c1c321ef xfs: don't let hidden_space go negative in xfs_metafile_resv_init 09ebf777ad4e2 xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits d46492fb8018d xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots 543bc5fd7d8ec xfs: fix rtgroup repair estimations 6aabf4f351cd8 xfs: check di_forkoff correctly in scrub f99c672471797 xfs: use the correct reservations for rtrmap/refcount recovery adb80d620dabe xfs: don't call xfs_exchange_range_finish for a dry run 770d21b52c91b xfs: check padding field in xfs_ioc_commit_range 09b7a63e11c7c xfs: use correct jiffies comparison function in xchk_maybe_relax 6a65a68097a19 xfs: release orphanage dir inode if chown fails ac76f8df55980 xfs: fix attr fork block count checks in xrep_inode_blockcounts ef7a56c6630ff xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption c2ac475ddd737 smb: client: validate POSIX create context length 31107f79ad33b smb: client: preserve create-context parsing errors abab661eed00f smb: client: clean up failed cached directory opens 05a7fd80024ff smb: client: fix create context out-of-bounds reads 8f5b30cc12c40 Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO 416546cd6a54e Bluetooth: mgmt: fix race in read_unconf_index_list() c6a288e6001bc Bluetooth: L2CAP: validate frame length before control and FCS access ed4c026cc4094 Bluetooth: ISO: release unused CIS holds after channel attach 4e49206d9574a Bluetooth: ISO: balance the parent hold in hci_bind_bis() 173457fa3e99e Bluetooth: hci_sock: reject out-of-range OCF values f894f6292d512 Bluetooth: hci_sock: validate event length before filtering 3ff5a8d949e3a Bluetooth: hci_conn: fix CIS hold ownership on reuse 57ccaa818307b RISC-V: KVM: Fix HSM hart status error propagation 5567ce11304db RISC-V: KVM: Propagate interrupted G-stage faults ea91f05a55b80 RISC-V: KVM: Synchronize hrtimer callback during teardown e5dd2a91a7ae3 KVM: arm64: Transfer the hyp stack pages out of the host stage-2 970de111c0874 KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race c23ed110d27ba KVM: arm64: Fix spurious warning for benign stage 2 teardown race 8530a05b304d3 KVM: arm64: Fix AArch32 DBGBXVR handling 37dfb676fafd1 KVM: SEV: Do cache maintenance on the source VM during intra-host migration 6aef7cf800098 KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV 066a53a0bc19e KVM: Don't treat reserved xarray entries as having memory attributes 7dcaf0107523f KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg cf441a0db681d s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config af295f0eab683 s390/pci: Don't report recovery success on skipped recovery eef5c8e1cca6f s390/pci: Report SCLP status on error events when no pdev is associated 743a8458978d1 s390/pci: Fix missing device lock in zpci_report_status() dd5ed64dadb07 s390/pci: Fix leak of struct pci_dev reference in zpci_report_status() 748ec2f7f5df9 s390/cmf: Fix virtual vs physical address confusion c3bbcb32deecc s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() 02664a8d8d592 pinctrl: sunxi: keep a shadow copy of the data register output latches 1deeeca89ea12 pinctrl: single: free the IRQ on domain creation failure a23f9f9b56b79 perf/core: Run sched_task() for PMUs with only CPU-wide events 249a2bd87a0e5 perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() 5023c70853ad9 parisc: Increase kernel stack size to 32kb ee56b5e18f566 scsi: libiscsi_tcp: Check the data direction of a Data-In PDU cc444e4ad4346 nfc: trf7970a: power down on startup RX gain failure 14b1467cfc663 nfc: port100: reject frames whose declared length exceeds the received data 810f204ef8f61 nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() 841af260ff477 nfc: fix use-after-free in nfc_get_local_general_bytes 12cf803edfffe netfilter: nf_tables: skip expired catchall elements on insert and delete 191239b093969 netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read eafe081ea77d2 netfilter: ip6t_rpfilter: reject routes without inet6_dev 8a611f33216f4 net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() 7d2377868feb7 net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist 43ff11501ea6a net: txgbe: fix FDIR filter restore for VF rules 9447ddd8b9242 net: phy: micrel: Advance register data pointer in write loop 30ff01b4c7e41 net: ena: fix MMIO read buffer leak on probe failure e8a2f48bbff1f net: ena: fix PHC cleanup on probe failure ab3c4a4c85f2e net: bridge: mdb: restart port group walk after deletion 4b7161804d8f3 net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read 586847400b116 net: atl1c: fix soft lockup on out-of-range tpd_cons read 5f23080a625dd net: openvswitch: conntrack: fix helper UAF due to extensions realloc caefcd433ecb2 net: openvswitch: conntrack: remove 'add_helper' dead code e2829ae5459dd net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry 729737267e7c1 net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() 0f573b0576252 net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read ba664d8363864 net: arp: terminate device name before lookup aca91d8fa0ecb net: airoha: npu: cancel wdt_work after releasing the WDT IRQ 968550a439f64 net/sched: reject IDR error pointers when deleting actions 3803dc8477f08 net/mlx5e: fix swapped IPv6 IPsec policy masks 0c336ecabaf9d net/mlx5e: advertise MACsec offload only when supported 99d8dc5166374 net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() c3129e6f26e18 HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() 5695ec5339d4d HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard 925da1d2a2478 HID: alps: fix use-after-free on input2 registration failure eda9bcb721f15 packet: use ubuf_info completion for TX_RING packets 879c911f77b8a PCI: of_property: Omit bus properties without a subordinate bus e59cb7eda7c06 mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() 850cc4a84b36a mm/hugetlb: preserve mremap address delta when skipping page tables b1db1ec5c8941 gpio: tps65219: Fix TPS65214 GPIO direction programming ac3c7eb6a44ba gpio: tps65219: Use the variant-specific direction callback fabe897e61e45 gpio: tps65219: Fix GPIO input value reads f2f1683955b95 drm/virtio: fix NULL pointer dereference on fence allocation failure 8fa78900fd242 drm/virtio: fix memory leak of fence event on execbuffer failure c2d4689c3ea92 drm/xe: Keep walking on SVM eviction failure c306b6419fd00 drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV 2bcbfc5e7bfa9 drm/xe: harden adjust_idledly() against divide-by-zero and overflow ba678c2b02e0d drm/xe/vm: nuke PTs only after unlinking contested VMAs 19f5a5839b308 drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() 35151e9a82741 drm/nouveau: RCU-free the scheduler-containing nouveau_sched 59aa1f8c95941 drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() 030e93fc91d55 drm/nouveau: Fix gem reference leak in validate_init() 109a8d2d5b7d2 drm/nouveau: fix double-free in nvif_vmm_dtor 6d497216c10af drm/nouveau: Fix bridge reference leak in nv1a_ram_new() 9132215d2c90e drm/nouveau: fix autosuspend cleanup during teardown 0d29bf51f8ddd drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM c83261854e19a drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() c28e74395ab09 drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() 0bfb0419a1480 drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() d197b15d4beb9 drm/amd/display: Bump frame warning limit for clang builds of dml 89a11c7efe387 drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() fe933dda0bb18 drm/i915/dp_mst: Fix configuring TUs for a disconnected stream 369f4e3264374 drm/i915/dp_mst: Fix configuring FEC for a disconnected stream cc890d3f1b15b drm/i915: fix incorrect RCU teardown order bbef7450e2b42 drm/imagination: Fix page count for page table for map() interface afe5b4d66d45b drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() e2ee061626008 rds: ib: Clear the sg list when mapping an MR fails e35cb500dd148 mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() e06f8b6e27cc6 llc: reserve device headroom for allocated frames 58a417a19d801 gpio: zynq: fix runtime PM leak on request error path cf3d043582e10 gpio: cdev: fix kernel stack leak to user-space in error path a9f738487c11f gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() 6fcfc362344ed ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST 1d42828565889 ipv6: do not let ipv6_find_hdr() return an offset past the packet end 599d0498a3931 ipe: protect the dm-verity root hash with RCU 48f7d0233c3cc ipe: fix use-after-free when auditing a newly loaded policy c2a5e59185862 fsl/fman: Fix clk reference leak in read_dts_node() fd3bf32279df9 writeback: report a Tasks-RCU quiescent state per cgwb drain pass 1dccf5dc2f8fe workqueue: Fix NULL current_pwq deref in flush dependency check dd4b920672387 writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes 37ec7353f4ac4 fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga b1229b210ef5a fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT 2f7042429a8e9 cgroup/pids: Restore pids.events notifications in local mode caf8b2d9b30c3 crypto: s390/hmac - Generate intermediate CV for API partial block handling 7504b677c4370 bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir 4d97a141e85a0 bna: prevent IOC timer rearm during teardown 1603abb0c5042 ata: libata-scsi: bound the ATA passthru sense descriptor writes cdccb760be1f1 arm64: errata: match the target implementation CPU's own MIDR 071f51188a5d8 arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 6279211e7d245 af_packet: fix integer overflow in prb_calc_retire_blk_tmo() ec23855274a73 sctp: discard the rest of the packet on a stale-cookie error 7ba87509c54cd tcp: prevent collapsing skbs across boundary in rtx queue 12cc3a1eac5a2 tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow ca40f4df4ab2f virtio_net: copy zerocopy frags in start_xmit without NAPI 33da1ff56f955 x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 f50d2e8cc1f1d x86/mce: Fix hardware debug register corruption on task migration a557816c6e38e netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase 7b32eba3fad84 rculist: add list_splice_rcu() for private lists 162bf5f73f1b4 mptcp: return sk_wait_data() errors from recvmsg() 9fe317b999aa8 sched/core: Account PSI IRQ time to the execution context, not the scheduling context 23250517cd475 perf/core: Fix a refcount leak in attach_perf_ctx_data() 654fc8445ca8d perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs() 0688289753450 perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused 8cb5a01cb5f12 perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED c205e3fc9962c perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits 4bcb371019097 autofs: fix sbi->pipe file reference leak in autofs_kill_sb() c7ee4bea64f55 vlan: ensure sufficient headroom in vlan_dev_hard_header() 7f8b56c82919c net/sched: sch_teql: fix shadowed err in __teql_resolve() 15d00994a1bd2 bridge: check llc_mac_hdr_init() return value in br_send_bpdu() 41dcae82bece9 llc: fix skb UAF and leaks on llc_mac_hdr_init() failure 2dc3ae3942e15 gve: DQO: reject TSO packets with an out of range MSS 089e04db44754 gve: fix TX drop when GSO MSS is too small for hw feab3880a72b4 gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO 2f855c52a2e1d gve: add support for UDP GSO for DQO format 6d4a5ce75b6e3 gve: Enable hw-gro by default if device supported adbfc707ff6b9 gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO 6c7937db1d561 gve: Allow ethtool to configure rx_buf_len bcaedb514a5d2 gve: Use extack to log xdp config verification errors a0d644b8ff883 gve: Consolidate and persist ethtool ring changes 5f86408eba31b net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails d990b786abfd6 tipc: Fix a data race on mon->peer_cnt in mon_timeout() 3d65a2eb4449f net/smc: fix UAF on lgr list traversal in smcr_port_err() 8468d05aa08dc nfp: hold IPsec RX state under the XArray lock 4e7a4af364c20 net: phylink: record the PHY only once bringup cannot fail 631aa4cb45099 tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() 2357c682f6eaf net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq 62c0e38b2e503 net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 2b42adf3b8ee9 macsec: initialize SecY before registering the netdevice dc106fe25e9a8 bonding: crypto offload enabled, non-offload slave failover, rekey failed e0560db0ea6e1 drm/imagination: clamp freelist reconstruction requests 2cc1c3977acbf net: xps: reject an out of range traffic class a3c5eb6e382dd vxlan: use one headroom snapshot for neighbour replies bdd41b96e8143 ip_gre: Reject enabling collect metadata through changelink c3fab2f1d8a6e net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT d68899b50caf8 net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr b3ebe8983d86f net: bcmgenet: do not skip WoL power up on GENET V1 21a0de4858779 net: bcmgenet: initialize u64 stats seq counter for all queues aefa837c26674 net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems 501baaeca7d12 net: stmmac: clear stale buf->page after recycling on skb build failure 0f7ed27586acf tg3: use random MAC address when tg3_get_device_address fails e40990861074a bpf: Fix BSWAP 32 and 16 on MIPS64 876ef04c75c27 bpf: Fix immediate JMP JEQ/JNE on MIPS32 6d76ddce4f1ba vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets cfa643f2ca36c net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() 25bb7c3622522 veth: manage XDP program pointers during channel resize 63bcc2fee6419 net: bcmgenet: stop Tx NAPI before disabling the queues 284166f34b8fb net/sched: act_gate: budget the per-entry list in get_fill_size e72cbedc4596e nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() 8978dff632519 nfc: llcp: fix slab-out-of-bounds reads when logging service names f234197f3bda3 nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() 2386d107df6d2 nfc: llcp: fix -ENOMEM on connect with zero-length service name fdd95e819d828 nfc: st21nfca: validate ISO15693 inventory length cbde7f5d32617 nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure 0b32dcc8a3f94 nfc: virtual_ncidev: Add missing ioctl compat handler 27cf04ba4e7ef selftests/nci: Fix out-of-bounds store on thread join f9cbe5c68d93a selftests: nci: Fix uninitialized family ID on missing attribute da8a077573836 nfc: llcp: Fix race condition in accept_queue lifecycle 3316903fdc3a3 selftests: nci: Correct pthread_create return value check b94cf09720543 nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() 57919d0662d88 nfc: st21nfca: validate received frame size ed2e00bb22c73 nfc: nfcmrvl: validate helper command length before pull 940b626854de2 bpf: Reject dev-bound-only programs on other devices 9923e1c537f91 net/sched: fix potential stack infoleak in em_text_dump() 92c9f2ea634d9 eth: fbnic: Avoid rounding zero ring sizes 3ea177bdba25f net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test b17959fb4d55f net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K 4c4217aaa5e4b net: stmmac: selftests: Capture all packets for vlan checks e7a8bbb6149b4 net: stmmac: selftests: Check the dev->features for S-TAG offload testing 74da0c1cede8a net: stmmac: selftests: Support running selftests on DSA conduits d18cb8fd1b6ba sctp: hold asoc or transport before mod_timer() in timer handlers 650dcd938e563 net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports cdeca5de4e186 net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports cea597519b9ca bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc d95dd5a6c6cd0 bpf: Fix bpf_sock context code generation 1196903a27cac bpf: Fix bounds check for skb-backed dynptrs fb1e2df8e2e28 thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds 0f5d8953cb63a net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure 54e98316ce5c1 genetlink: report the real command id for dump-only ops in policy dumps 41e444535c60f net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error ca9986cc824f2 net: spacemit: clear TX descriptor on fragment mapping failure 9c6af88fbefbe s390/debug: Fix NULL pointer dereference in debug_info_copy() 36831afe8eba0 s390/debug: Do not register views for failed static debug areas 8b661a045082c drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable 6515c41503eef tg3: clean up PHYLIB resources on probe failure c21daf37d5ce9 udp: remove a disconnected socket from the 4-tuple hash table 7a0bbe5654ecb udp: relocate a connected socket in the 4-tuple hash table on re-connect ed902d5546fb9 ipv6: Fix dst leak for uncached routes. 6ab6c9d120b30 net: usb: sr9700: include receive overhead in the length check e3c21e8b53906 dpll: use exact lookup for reference sync pin id 649ffc76ed548 ipv6: Prevent rt6_insert_exception() for dying fib6_info. ff8cff3aff673 octeontx2-af: Fix memory scaling limitation in SR-IOV mode be00deee60044 Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() 8ec5838a35b03 Bluetooth: btintel_pcie: validate device-supplied DMA indices 8f31031326994 Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough a8f3a829f3a53 ovpn: reject invalid peer VPN addresses 7efbc134253c1 ovpn: reject multipeer peers without VPN addresses daab972893aec ovpn: reject duplicate peer VPN addresses 12ee72319805a ovpn: always unhash old VPN addresses before rehashing c44a04722f7da ovpn: replace bind when clearing stale local source 21dbc9f4d0bdd ovpn: replace bind when learning local endpoint 324ebbde06cd5 ovpn: validate peer state before caching UDP dst db97cfe9a5070 ovpn: track UDP socket route key for peer dst cache ba3877bdcc9aa ovpn: skip UDP source validation for unspecified addresses 8c1d7994a18ec ovpn: preserve IPv6 scope id for netlink peer endpoints ebffd70e4877b drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach d6b59a9fece4d drm/virtio: sync shmem backing on guest-bound transfers e7df00bb036e0 Revert "drm/virtio: Allow importing prime buffers when 3D is enabled" 5c2cb3dd14477 drm/virtio: release the GEM object on virtio_gpu_vram_create() errors 81c6769e069d7 drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() b516446a25bf3 drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() a93dce15dfef2 drm/virtio: fix object leak when drm_gem_handle_create() fails 0fa25ba50a382 net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget cd12d3e086202 bpf: Check params size before reading reserved fields dd9c6f8f05170 net: usb: catc: bound the RX packet length in catc_rx_done() 9c11e543fec32 bpf: Bound ownership depth through local kptrs and graph roots c9338057df102 sctp: avoid livelock while updating retransmit path c7a254c16c6fb eth: fbnic: Handle FW mailbox completions flagged with an error a85a019b3011a eth fbnic: Add debugfs hooks for firmware mailbox 6a112552d3055 eth: fbnic: Reuse RX mailbox pages 8a052cd4b2cae eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox c5b5aee41b9f5 eth: fbnic: reset num_napi when the napi vectors are freed 6c903188b6761 eth: fbnic: Handle maximum standalone channels 8dc5667770912 ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). 7254b702e5561 net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure 40aeafbcbc7bc net: gue: reject invalid REMCSUM offsets 00734f3684fce net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure ca29834c8c146 drm/nouveau/disp: don't reject HDMI config on cards without SCDC 40afa1f7a5c77 drm/nouveau/clk: don't clobber reclock status when restoring volt/fan 0d096a7f7d792 drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update f2e9005aadb67 ocfs2: make ocfs2_calc_xattr_init() return void b17aa4955e3a6 arm64: io: Reject non-user protection in ioremap_prot() 0994c3e3b4e3e netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name f100578039b31 ipvs: revalidate ihl before icmp_send 302477c9ffefa netfilter: nft_synproxy: use the family-aware checksum helper 07a3ec8fdc5a1 netfilter: nfnetlink_queue: hold nfnl mutex in event notifier b0ef9450e93f2 netfilter: flowtable: publish HW_DEAD after worker is done 1363c71be27a7 ipv4: fib: fix data-race and stale genid check around nh->nh_saddr 5be5ccd3a5563 libbpf: Reject truncated ldimm64 CO-RE relocations 2d7d04357c41a bpf: Restrict CO-RE poisoning to relocatable instructions 2fe1569e32ddf net/mlx5: devcom, Base component size on linked devices 8ebfd34fef750 octeontx2-af: use seq_file for rsrc_alloc debugfs 6127164efa94e net: pcs: rzn1-miic: Fix config array initialization f6696481eedfd net/sched: cls_u32: fix manual hash table handle IDR aliasing f4277b19edbc6 eth: fbnic: Fix payload page pool error cleanup 6e271f093d15d bpf: Skip unsettled links in link iterator b5c0cff0c5331 xsk: Use a 32-bit compare in xsk_map_gen_lookup e4f3e476cd406 fs: avoid repeated scans in evict_inodes() 22225cd612b26 s390/cio: Guard PMCW field accesses with dnv check 5eae708cca8f4 s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points 591ba131193ee s390/cio: Fix cio_update_schib() to not cache invalid schib 8bd9905dfbd97 s390/pci/docs: Fix sriov_numvfs attribute name e163f1dccede7 docs: s390/pci: Improve and update PCI documentation 6675f801b0d60 scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume() 0117e731435bd selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode 2189a219397d8 Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel 8a36598050cd1 Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() 6fdabd654578e Bluetooth: SMP: reject Security Request over BR/EDR 9c051b12ca106 pinctrl: sunxi: A523: fix voltage withstand encoding 0af16d8be3ec7 scsi: sd_zbc: Reject disks with too many zones 0cb85377daaef squashfs: Add dictionary size range check to prevent shift-out-of-bounds 5d54693bc457c KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP cb68b5589318f KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0 4efda20408714 KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 f126952167146 KVM: arm64: Include VM type when checking VM capabilities in pKVM bbcd7e851d57d KVM: arm64: Fix MTE flag initialization for protected VMs c142034ad3a84 KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode bd46b41f412fb KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure faf66e55e8749 KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() 65bffaf100df8 KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save 80a6b712dc193 KVM: arm64: vgic-its: Free the caches when GITS_BASER changes c2230cd149507 RISC-V: KVM: Fix perf-backed counter accounting across stop and read f6f1d27e0c893 RISC-V: KVM: Report snapshot write failure to the guest f4363eede3e74 RISC-V: KVM: Preserve firmware counter value across stop/start d6de766d8d26d KVM: riscv: Fix NACL hfence entry update order 5c221f33a5183 HID: bpf: fix __hid_bpf_hw_check_params report length 5f9e2ecb725ad HID: amd_sfh: Validate PCI BAR size before mapping 905d1a40f34f7 pinctrl: meson: Fix typo in s4 group name b67b4c763f211 bpf, arm64: set up the frame pointer for the exception callback ae1ffd04e98be bpf, sockmap: Fix self-redirect copied_seq double-counting 1d6581b544a88 bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk 51a17f0ce19c4 bpf: Register dtor for freeing special fields 6785313d4fac9 bpf: Fix out-of-bounds read of rtt_min in sock_ops 44f9bcb5ab2b2 bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() 5ad116c23f149 KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() 08a4d55b26724 HID: elecom: fix bus type for M-XGL20DLBK 49688a0d1ac69 HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio 55bbebf2829c3 tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context 91a482a81eabd bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() 8eb4cd72daad3 bpf: Fix divide-by-zero in btf_struct_walk() 5334c609bf927 selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc 37b18688cd18f bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL 69fe51a3bd78d bpf: Fix bpf_skb_change_tail wrt csum partial skbs 04bb5b2eb9f1d s390/uv: Prevent potential out-of-bounds read 018e137ac1da2 s390/uv: Fix loop condition in uv_find_secrets a379ac504fcb8 KVM: s390: Fix IRQ injection with SIGP Stop and Store Status 7c7a6ba6128f2 remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage 50d844aead62c ALSA: hda/realtek: Add StarFighter HDA SSID 56b321df2863d ALSA: hda/realtek: Limit Star Labs internal mic boost 2945d3eb73d61 drm/amd/display: Atomize IRQ register read/modify/write ops d1079deec828d erofs: fix large folio race in erofs_fscache_req_complete 14ae74db795ab xfs: don't stash removename operations with unknown ftype Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_6.18.bb | 6 ++--- .../linux/linux-yocto-tiny_6.18.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_6.18.bb | 24 +++++++++---------- 3 files changed, 18 insertions(+), 18 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb b/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb index ac97f340da..9690d312b8 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb @@ -15,13 +15,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "64ebedd888ed53620df352f568a8b55c5620d169" -SRCREV_meta ?= "b505aeae4f62715ec4801e292b32ad68593b3341" +SRCREV_machine ?= "f87ce4ad0a7f6290a8fd961a63fd1653c7308a14" +SRCREV_meta ?= "5978c5f530b91cfb62213506ee6f157897432ba3" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.18;destsuffix=${KMETA};protocol=https" -LINUX_VERSION ?= "6.18.54" +LINUX_VERSION ?= "6.18.57" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb index 4cbcfc0084..939ca9c5b8 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb @@ -9,7 +9,7 @@ require recipes-kernel/linux/linux-yocto.inc include recipes-kernel/linux/cve-exclusion.inc include recipes-kernel/linux/cve-exclusion_6.18.inc -LINUX_VERSION ?= "6.18.54" +LINUX_VERSION ?= "6.18.57" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -18,8 +18,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" -SRCREV_meta ?= "b505aeae4f62715ec4801e292b32ad68593b3341" +SRCREV_machine ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" +SRCREV_meta ?= "5978c5f530b91cfb62213506ee6f157897432ba3" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_6.18.bb b/meta/recipes-kernel/linux/linux-yocto_6.18.bb index 95cae43557..ce4878d0f2 100644 --- a/meta/recipes-kernel/linux/linux-yocto_6.18.bb +++ b/meta/recipes-kernel/linux/linux-yocto_6.18.bb @@ -17,25 +17,25 @@ KBRANCH:qemux86-64 ?= "v6.18/standard/base" KBRANCH:qemuloongarch64 ?= "v6.18/standard/base" KBRANCH:qemumips64 ?= "v6.18/standard/mti-malta" -SRCREV_machine:qemuarm ?= "f271f5b5cce5f2c67c00ccb5b4bf60502d4ddc0b" -SRCREV_machine:qemuarm64 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" -SRCREV_machine:qemuloongarch64 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" +SRCREV_machine:qemuarm ?= "3881e81dea81f6aea84ea28b22899708f3fef903" +SRCREV_machine:qemuarm64 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" +SRCREV_machine:qemuloongarch64 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" SRCREV_machine:qemumips ?= "62ea92a539f58803a222be98b81118403074206e" -SRCREV_machine:qemuppc ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" -SRCREV_machine:qemuriscv64 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" -SRCREV_machine:qemuriscv32 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" -SRCREV_machine:qemux86 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" -SRCREV_machine:qemux86-64 ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" +SRCREV_machine:qemuppc ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" +SRCREV_machine:qemuriscv64 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" +SRCREV_machine:qemuriscv32 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" +SRCREV_machine:qemux86 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" +SRCREV_machine:qemux86-64 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" SRCREV_machine:qemumips64 ?= "9fb4ff0187c85426f21fd40d4c61b742800f65c4" -SRCREV_machine ?= "aa6a6669031c1e6a30eaa9d8abf4d25ce447acb9" -SRCREV_meta ?= "b505aeae4f62715ec4801e292b32ad68593b3341" +SRCREV_machine ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" +SRCREV_meta ?= "5978c5f530b91cfb62213506ee6f157897432ba3" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "1b357ecb321392158d507b04672ffee57bfa071d" +SRCREV_machine:class-devupstream ?= "2ff600d29ee478d0a8d46ef8a58afb5e038fe692" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v6.18/base" @@ -43,7 +43,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.18;destsuffix=${KMETA};protocol=https" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "6.18.54" +LINUX_VERSION ?= "6.18.57" PV = "${LINUX_VERSION}+git" From patchwork Thu Oct 29 03:25:19 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102297 Received: from mail-qv1-f43.google.com (mail-qv1-f43.google.com [209.85.219.43]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4362.1793244339666681351 for ; Wed, 28 Oct 2026 20:25:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=YYJ5JBbS; spf=pass (domain: gmail.com, ip: 209.85.219.43, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qv1-f43.google.com with SMTP id 6a1803df08f44-91c6ce60697so23571126d6.3 for ; Wed, 28 Oct 2026 20:25:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244338; x=1793849138; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=mIWcIxzNJj0Kmm+vqW1OSxdcmcSXDcQYbhm3J6/wT5o=; b=YYJ5JBbSLHcqx1dN84yCSjWo/RS6URzGmBDdtXcBZMutJAsifdNEz0qr2FHDRkVh2g n4Rp7jqwOlHnrHBQOA0oqh1pvEyG32mjkZ2yQKK5auSJBAVUg0QtBi3Mv09WhUZswRlx 67+JiHjs8AfZ1IHWnZnyYdjSRPv8IQuzrOarXroSrDefPIAqV26U5uDKL2P9uG+S8XMI dx4Xr3Q2W74O1wUVtEd83lFzDmv1ckVwmfzqIBVP7lTKPghlKOnEiUA50x/DX3vLjqoW mi3pCKjJMAGYIaX/O2QcnJJZ+hmDl8KaEYPdLr8IQ8IrZwLF46L+zjip01+FV+ZyHYoR 0ARg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244338; x=1793849138; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=mIWcIxzNJj0Kmm+vqW1OSxdcmcSXDcQYbhm3J6/wT5o=; b=A3BSXSH6y3Tw5K39y7LfK9UiBIz5xzINUflNXnaKFJJ3hEzSJdSKz5pajLk4D/Eg5I RKsgeD199I5rjH45fXY7rDnX08uSjHCObKwdA2/19XEHzJMA4z/nxJpCbB4272I7JBpv KmG1wDcMLSo0pPSTkjFsJY+5ZFLtASD0I8V8PXjdfVQuVokTiX9GE2duvSf/NDpXFrNT QbdluozRcKKL52NW0DcEyhXkdv6l0Dia+zzn46uHZTIuk2aNs+C76c87yq9dA4AKXbQE QU34LC7P1+uN0QKvDSc7vzb687Cj2x+RjoEiHqIqrv13FEmx5cJmZt9GzvEBfaES7pez uETg== X-Gm-Message-State: AFq9FYLRqLjNV6K3ZpzTzbkryiZVC2Fkso5jiJ2UUCNUS+HyFmnegXA9 E6Qb0hTfb6mdfdhhuJx3LUZad/H8MneDoZUv0CiZQMC14oa8nOxId7PzvX1jOqEX X-Gm-Gg: AYBFou2S2YXSKoB32mT68rAXMpEcihxxfrjtSVOIvM1AUoE5KDppWIrewPH9P0JnMm3 IGNVJRElqRLxN2iTTjJEyZMzB5ulDtC8QcaB7TQgiZ3/8AUQM5INlNGepVsjLqFB8wn3cIJRoby KIoybD9ayV/4pMroWlH7FfZOeYXuQY8moBealxaqotwAs7V1fEQx8KXt81bBBNM0IdAeuDIlrxg rWc9OtA8rebfR/zdoL0sWIZZ2ujXMsQptreO1C/wj+LgXEwKPJqWxp4tIt8BdcEP9BLHkPh3wad 1QHiDQ5Odf37m+w71SEkkG+6tiJY1+F47Mh0ocJ2Hink3OV1dpG335nitgsHrxro//TMhIPbhVz CSB7tkn8u9cWzsuZZGzqCCeFnteqdeZNZeFnRSAmSr+/4SaE/b9Xr3g+BDYbfuuf2d951hBC4oq bsJZZTlFh8MOS3tEbyB3VXAEq6CehlDwVzSuW4bsmdBBDD58GPt7zm486+VKhcDB49d4xyfbiiD nJ+/+Xf7jam1md86zO5fPnUKMa+cFzmHL8xB62MZUfM1akxDUKb9cVAksqg7UpgJG1v7iOUpUVg +19rHmiB4+PFn2pVXuII9WDkT0zJOT7a4BJrGDZvbrihX0JqBwANa+v0+JzonlKzxeyClxKvhbR J/FB3gPEOry9sJvAPb0Z29TT1nf5yWHClkytKJtFD4vbR9k5100Tm/EmgvKaCjnjvFjPbqLApXc TbpEu9UlRzsAMH5OgSwTDwNNzWYM/dBSGEcvuHZWdA0had2g== X-Received: by 2002:a05:6214:48d:b0:91b:5d39:e130 with SMTP id 6a1803df08f44-91c7d247597mr73832456d6.57.1793244337456; Wed, 28 Oct 2026 20:25:37 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.35 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:35 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta][PATCH 04/11] linux-yocto/7.2: update to v7.2.11 Date: Wed, 28 Oct 2026 23:25:19 -0400 Message-ID: <20261029032527.3150782-5-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:25:42 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248861 From: Bruce Ashfield Updating linux-yocto/7.2 to the latest korg -stable release that comprises the following commits: a2de78ee6ed8b Linux 7.2.11 6c714d6691515 HID: steam: Clean up locking c06cf54fe99b8 HID: steam: Refactor registration b5ea938ff7763 HID: steam: Rearrange teardown sequence 7511a6696ba17 HID: steam: Fully unregister controller when hidraw is opened 2f807570bc045 mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge 1f62b83e94338 io_uring/kbuf: don't charge provided buffer rings to RLIMIT_MEMLOCK 061c25b5e45d8 io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCK 0879e115d2e89 io_uring/memmap: account the pages a compound region really uses 9d7715bf742b8 drm/amd/display: Don't replace a sink mode that shares the native totals 85653fed87b3f sched_ext: Call ops.dequeue() when a task arrives on a remote local DSQ db83b53b580ae sched_ext: Generate qseq from a per-task counter bf8940f1c0eb3 drm/vc4: Fix binner slot allocation failing on an idle GPU e81402c3d4204 drm/vc4: Disable the V3D interrupt across runtime suspend 9907db2b8e7ba vsock: Fix memory leak in vmci_transport_recv_dgram_cb() 6b8897ba0733f net: openvswitch: validate transport header presence in set_ipv6_addr 59abc1b61026e ptp: ocp: fix PCIe delay estimation calculation b1dadf6847bee net/packet: call packet_parse_headers after virtio_net_hdr_to_skb 4eaf1285b5c1e mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() b8171b764a4af net/mlx5e: Order ICOSQ cc update after CQ doorbell 9d136b7ce24e7 veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down 784356aa88b82 drm/imagination: Fix reference and vm_bo handling in remap() 7363e10ad2448 bareudp: set the inner protocol to the protocol of the packet 61b43a51a5592 flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() fabecda2b0c17 bnxt_en: Re-write the BARs following any type of PCIe errors de8b85ac09707 bnxt_en: Fix driver init in kdump kernel c6d6dfda4a52c bnxt_en: Add bnxt_clear_bars() helper 89fc70d73f4ac riscv: ptrace: Zero-initialize regset buffers before copyin fd6898cdd7a8d riscv: fix NR_CPUS range leaking 64-bit default onto 32-bit builds bf7a3ce1d563a ASoC: sdw_utils: Switch CS35L56/57/62/63 to use OT25 DAI 8962696f8dd20 ASoC: sdw_utils: Add codec info for CS35L62 2fb6d05f706d7 pfcp: make sure the SEID is linear before reading it 454593bcd6c4a net: bcmgenet: if UMAC was suspended in SW_RESET, restore it to SW_RESET 88efb0fe529ce Revert "net/mlx5: E-Switch, preserve max tx speed on vport state modification" 6260143fcc2cf net/sched: cls_route: reject change with no routing attribute dc2e787b5fb47 devlink: fix devlink_rel reference leak when notify work is pending 21cbe0b3a30e5 net: sparx5: start the TOD counters on non-PTP lan969x variants 5f4dfdf007773 net: always dissect GSO packets in __virtio_net_hdr_to_skb() 52efce4755a4b flow_dissector: avoid u16 truncation of skb->len when computing thoff 34a84a76d7837 cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug() c1a1338fe01ef spi: sg2044-nor: Honor SPI clock limits 25bb46843d20c spi: sg2044-nor: Return transfer errors a728c12f8bd89 ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM eca70d840cbe5 ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes 65cd0e21746b8 ASoC: adau1372: allow sleepy powerdown GPIOs aa5cb877716ba Revert "wifi: ath12k: add panic handler" 9d40dbf8d45e3 drm/xe/sysctrl: Fix mailbox header handling b21596ace95fc wifi: mt76: mt792x: pick the SAR table layout from the table itself 9208b32b10826 wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit b07c47a189f7a wifi: mt76: mt7925: don't put the band auto marker in TGID 7199ee4b47de0 wifi: mt76: mt7915: disable rx napi when removing device 75b3051db5332 wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout 5ac236af9e036 wifi: mt76: mt7925: restore the legacy BSS after MLO teardown eb6d2f82d01ff wifi: mt76: use ALTX queue for packets to disassociated stations e0f2ae4a75394 wifi: mt76: account non-AQL frames per peer rather than per link 2ee38971c0902 wifi: mt76: add PS buffering support for HW-managed TIM drivers ee50d5027dba5 wifi: mac80211: add ieee80211_txq_aql_pending() b17568ba7ee64 wifi: mac80211: add AQL support for multicast packets d9fc220b9b411 wifi: mt76: mt7996: take over connection monitoring 3c26759269fd4 scsi: ufs: mediatek: Handle mPHY power-on failures c428a7f1ea01e Revert "net: stmmac: propagate PTP addend and system time programming errors" e2be0d537c158 riscv: vector: Fix output operands in context save e1a0f618f986f riscv: vector: Fix data pointer constraints in context save/restore 50a84d34700d0 net: airoha: Add retry mechanism to airoha_qdma_set_trtcm_param() d10437cf17800 net: stmmac: Disable S-Tag processing on dwmac4 83846f0e0bb41 net: stmmac: Do not advertise S-VLAN stripping when it is disabled 27747cc19f40e net/mlx5: Lag, split aggregate speed into oper and max helpers 1365f994de94e net: make dev_xdp_sb_prog_count() see programs attached through a link 75e2ecc1e9dda drm/xe: Do not emit Wa_16010904313 twice 7e1a34f648bc7 drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums 607a6d0be341f btrfs: fix lost error return value in btrfs_listxattr() c1803697a60f2 btrfs: fix xattr replace when multiple xattrs are packed in the same item 4d9c1e0a7fb2c btrfs: don't stash io_uring encoded data across -EAGAIN ada1fc725a4db btrfs: unlock inode and extent in caller when io_uring read extent fails 578ef51714242 btrfs: free iov when btrfs_uring_read_extent() fails a449433b0e3d4 btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio a7d6c89f51fd0 zloop: zero out only the unread tail of short reads 4b572dcb2ad38 spi: spi-nxp-fspi: exit stop mode before waiting for DLL lock 17aa3eb1fc09f arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 73bf0f9579633 nvmet: use the local P2P device on metadata allocation failure 4e01c6e28f1ad nvmet: return Invalid Field for invalid NSIDs feature 82h f94ab1fffd009 ice: Restore Ordered MMIO Writes for Tx Doorbells bba6b1b086f9f bonding: fix the program leak when XDP is replaced 5537e902da640 tee: optee: ffa: support shared memory offsets on large-page kernels 5d3bd67674c86 net: stmmac: propagate PTP addend and system time programming errors a9f81c99a0f47 wifi: mt76: mt7996: program a link again if the driver holds it bea736a2b8c6d cxgb4/ch_ktls: disable softirqs around tid_list erases 865eb579b33dc lib/dim: fix 32-bit overflow in dim_calc_stats() rates e7ea63b4195a1 amt: send the relay's General Query directly from the receive path b627c6ba20be2 net/sched: em_text: reject unterminated algo before autoload 7ecb0f6be0a74 drm/vc4: Use kvmalloc_objs() for the BO cache size list 40870a0290cd9 drm/vc4: Free the BO cache size list on teardown e281dd69236d3 drm/aspeed: Balance the display clock enable on teardown f7ec4dbd2a073 gpio: exar: initialize the ID before registering its cleanup d4a6ad9fc6e94 drm/dp: don't mark the AUX backlight enabled when enabling failed 988bf67a13890 cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() a258d8af2bb88 drm/bridge: Fix unlocked list access in drm_bridge_attach() f469d85085410 drm/bridge: Fix unlocked list_del in drm_bridge_add() dcf617c90ea69 Bluetooth: btintel_pcie: Add shared HW reset for clean start 2669567615215 Bluetooth: btintel_pcie: fix TX descriptor bounds check ab664eb1ce6e4 scsi: ufs: core: Hold a clock reference across the probe 24d098f915234 fs: don't let a migrating task hide its reference from do_umount() c141e6c5d2a8f mount: refuse MOVE_MOUNT_SET_GROUP on an unbindable mount a010ae1a9afca iommu/dma: skip swiotlb bounce for DMA_ATTR_MMIO in iommu_dma_map_phys 8f86e3a595af0 arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value a3f8afd546789 arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single 9b4a665e53000 arm64: dts: lx2160a: fix incorrect pinmux c86077791d779 clk: qcom: gpucc-kaanapali: Mark the GPU CX GDSC as votable 43fd38cf1441f clk: qcom: gpucc-glymur: Mark the GPU CX GDSC as votable 836b36b0b2745 clk: qcom: gcc-kaanapali: Fix always-enabling PCIE_RSCC clocks 4751652e44f41 clk: qcom: gcc-eliza: Fix always-enabling PCIE_RSCC clocks 952b5c99a840c xfs: fix exchange-range-to-eof file size exchange 4756c94260e69 xfs: stop exchanging reflink flags when exchanging mappings f1f0c24ca701d namespace: keep the lock on a mount that a propagated copy is moved beneath 6ab37fae14196 namespace: handle mount locking for automounts correctly d23265a12e499 namespace: never expire a locked mount 2d498080c02d1 nullfs: don't update the access time 776e20e4fdc23 namespace: refuse an automount below a mount that is in no namespace aaabd31085506 fcntl: refuse F_SET_RW_HINT on an immutable inode b43ff2deef482 namei: don't reveal overmounted entries in refwalk 8300de4aa5d09 namespace: unhash a dentry before detaching the mounts on it 00287afa7cd98 namespace: don't let a pseudo dentry become the root of a mount 56fe03a0c05db unshare: don't drop active namespace references that were never taken 30a1625022411 dcache: don't put a mountpoint on a dentry that's being removed 3dad2330c8934 namespace: check the mounts before reading their parents in pivot_root() 9e820a6becdd9 namespace: remove the fsnotify marks of a mount namespace in process context 5a1310bd90cdc namespace: don't reconfigure internal superblocks via remount and umount 87ecd4c6da146 namespace: look at the topmost mount for a mount namespace file b8a94a405ddcf namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE 37a82f400efa4 namespace: check a recursive bind mount for mount namespace loops 18902a23ef36f namespace: check a submount for references right before unmounting it 702ff3fe49987 namespace: queue a mount only once for mount notifications f8fceeef1e1fe namespace: check the target before walking it in do_mount_setattr() fc100afdd0630 fs: refuse fspick() on internal superblocks 8d3527457e183 namespace: don't copy an unmounted mount tree 5077b52e9e4d7 namespace: don't inherit MNT_UMOUNT in clone_mnt() 98fc6c7b6ca67 statmount: read the parent of an unmounted mount under mount_lock 08d575ee89393 namespace: reset the old parent's ->overmount in mnt_change_mountpoint() a210ac218c307 fs: don't silently unmount busy mounts da408eb521702 mount: keep a copied mount unbindable 04ee82fec4891 drm/amd/display: disable self-refresh on tearing flips ab13a7b90d8b0 drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs 1fb745806e9be drm/amdgpu/userq: return the memdup_user() error for the user MQD 8640b3f961d74 drm/amdgpu/userq: only accept doorbell BOs as queue doorbell 24285f4eb2686 drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks cb4425e1474f0 drm/amdgpu: make Mac FB workaround generic f4a0a1ce147d1 drm/amdgpu: serialize vblank counter reads against GPU reset 68b9a10821cc2 drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info b8809ff3c3846 drm/amdkfd: align SDMA doorbell base for shader doorbell writes d7cd43c2f5461 drm/bridge: th1520-dw-hdmi: Fix remove() callback 7642255eed9a0 drm/bridge: th1520-dw-hdmi: Fix error check on dw_hdmi_probe() return value b3eaff982839e drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin ab39bc55cf082 drm/xe: Fix shrinker accounting double-subtraction on nested external pins 175d654cd4832 drm/xe/i2c: cancel the client work on remove fcb137f6e7ed7 drm/vmwgfx: validate pitch coming from userspace 981eb78f7fa44 drm/vc4: Fix firmware reference leak in vc4_drm_bind() ade226dfd28cf drm/vc4: drain the hangcheck timer and works on V3D unbind 9be126be5f78b drm/panthor: validate userspace queue count against initialized firmware slot count 7f73da0facf86 drm/imagination: Size page table preallocation by device address 49d349c42cf5e drm/i915/gt: Unmask interrupts only when ACTIVE is true 72d5cbb10d491 drm/i915/gem: Prevent overstepping exec array boundary ad3cf897bd6b1 drm/gud: don't keep a connector without a CRTC as connector_state d510ed2738541 drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN d0aef0b037467 Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown f492de11b3254 Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex b8814161b14c6 Bluetooth: RFCOMM: free the skb when the DLC has no owner 8a98d58f6cfe7 Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() 07976405a3c71 Bluetooth: MGMT: Fix status of pending commands flushed on power off 3728f6b0d5990 Bluetooth: ISO: Serialize concurrent connect calls 79993e9919a87 Bluetooth: ISO: Reject concurrent BIS listener setup 762850c203fab Bluetooth: hci_sync: Fix command skb lifetime during scan setup e660a22402944 Bluetooth: hci_sock: Serialize dead-device detachment 3c5d12a2c6f33 Bluetooth: btintel_pcie: use managed IRQ teardown 8123990c45fec riscv: ptrace: reject CFI regset access when extensions are absent f71d6ea3843c8 riscv: patch: fix handling of bpf-jit execmem addresses 4a62302698c92 riscv: lib: Fix ZBB strnlen wrap-around regression on huge counts 3a6d3d20ef246 riscv: hwprobe: use _BITULL() rather than BIT() in MIPS vendor uapi header 8e48d8d51ab37 riscv: futex: untag the user pointer before the atomic access 958034078c5f6 riscv: fix load_unaligned_zeropad() fixup for RV32 7fee577a2fa78 riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE 37b4401ee6fa0 riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp b84bc3a64d8bf scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ 96b1ae2c7db19 scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock() 991f3527a635a scsi: qedi: Initialize callback state before registration 1d35a17f1c2ed scsi: ch: Do not keep references to data transfer element devices 9ff26d26973e2 pmdomain: rockchip: propagate subdomain add errors a2f3e21d58f79 pmdomain: rockchip: fix clock leak on domain probe failure ca26c42fa30f3 pmdomain: rockchip: don't ignore clock lookup errors on attach 70db811ddb55d pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains f3423b56be122 regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 a3384ec2516a7 regulator: of: fill in supply names in of_regulator_bulk_get_all() ca5d85335a8fa regulator: ltc3676: don't read the write-only HRST and CLIRQ registers 5cd2354ebfbd3 power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all() 2f7240f0a6fd8 optee: register TEE devices only once fully initialized 80db24f3c16fd openvswitch: fix soft lockup in the netlink flow dump 1b472d00b274a nvme: fix swapped ZRASF zone state values for full and read only f34b1bcac4581 net: team: free skb when broadcast has no txable port bed63353341d2 net: team: stop reusing skb after queue override 5e5cf3ad7c099 net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop c336fe2a40442 net: usb: ax88179_178a: fix rx frame length for non-last packets 44efb6d92dd5a net: sparx5: free the matchall entry on destroy 39d1a6b601831 net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() 283caf4406e21 net: dsa: microchip: fix KSZ8765 fiber detection 7931fb9181421 net: bridge: avoid recursive multicast port cleanup c223da71abfae net/smc: protect clcsock lifetime in smc_getname 00fbf71e74115 net/packet: guard the ll header push in packet_rcv_spkt() dbad91a31c482 mmc: sdhci-sprd: disable runtime PM on remove edef1355224c0 mmc: mtk-sd: Cancel request timeout work on remove 56ead289265fe mmc: cavium-thunderx: destroy slot platform devices on remove 167251cac699f mmc: cavium-octeon: destroy slot platform devices on remove 301691c32b8ad dm: fix reading free memory in do_resume 6d8bb768a865b dm-snap: reject the transient exception store for snapshot-merge f49cd7820cd0a dm-integrity: fix buffer overflow in inline mode with large tag size 40ea7dfa8cd5f dm-crypt: reject the lmk IV mode with AEAD ciphers df6c704a08bc0 mm: don't schedule deferred kernel page table freeing while booting badefd43eca32 mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP 5616da0f92339 memstick: rtsx_usb_ms: complete requests after eject instead of dropping them 3af81770e2011 memstick: core: wait for request completion before freeing card da0b595d8e6e2 KEYS: Fix add_key() race with keyring restriction 5e6fb00b0c35d keys: finalize persistent keyring timeout after link attempt 8f27260b989f4 ip6_gre: remove obsolete ERSPAN PMTU update 596a955d2d01b io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6 f55c240192ded io_uring/register: don't exempt disabled rings from task restrictions 5e4d20db5179e ice: fix metadata_dst refcount handling on representor teardown b98eb58ba2f8f ice: fix use-after-free in dynamic port cleanup bca153f1d0754 ibmveth: fix TX LTB and filter unwind on open-fail d24fdec1413c6 ibmveth: h_free logical LAN on open-fail after register 889f763874855 gve: fix XSK buffer leak on error descriptor 7a7e6bbbf0586 gve: fix XSK buffer leak when rings are stopped 3d377911ce81f gve: fix napi_disable deadlock when attempting to disable XSK pools 0bc91eda694a1 iavf: send MAC change request synchronously 2fd6ecda5d1f4 gpio: xilinx: fix runtime PM leak on request error path c0071ee496e12 gpio: mpsse: fix race when arming the IRQ poll worker fa84f091a8e7f fsverity: RCU-delay the freeing of struct fsverity_info 79da5abcac1c8 EDAC/amd64: Mask UMC chip select to the four implemented selects 31729932c72c3 e1000e: add system to disable K1 list fb10c9c606611 selftests/mm: cleanup -Wformat issues in hugetlb-mmap c4867092976f6 sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute c997832414f1d selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts 36a559b3f40ba selinux: fix data race on AVC latest_notif b8d5c678a405e Revert "wifi: libertas: reject short monitor TX frames" 3c3b308ee6e25 tipc: hold a reference to nodes found by link name fb717c536af2a tipc: destroy topsrv workqueues before closing connections 3aa6f536a95eb tcp: reject net_iov in zerocopy receive mapping hints 753d4c15d9f85 swiotlb: fix default_swiotlb_limit() for non-growable default pool eaa3a29004c06 strparser: make sure __strp_recv isn't running before tearing down the parser c2a97703359e2 tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() 84e3ea6502b5f xen/netfront: don't leak the skb when xennet_fill_frags() fails 098d80b04d0fe x86/CPU/AMD: Fix AMD TLBI Erratum #1718 1a2668682e998 workqueue: Fix NULL current_pwq deref in chained work check 3bec3d32c2a3a wireguard: noise: reject response consumption after intermediate initiation c8b60ba3bc870 wireguard: queueing: preserve tstamp_type when encapsulating packet e4ce326b4ce27 wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init() 19d6fa087dcf2 wifi: mt76: mt7603: initialize global station WCID 47ca6395a1d91 wifi: brcmfmac: fix P2P device removal race in brcmf_detach() dd4b2f88ee517 vsock/virtio: account only unread bytes in read_skb() 2ae87402e6748 usb: f81604: fix struct f81604_int_data size mismatch 725b49c689bbb dm ioctl: don't let data_start run past the buffer 6e49d611a9cfb cipso: adjust cached option offsets when removing CIPSO a21c255159bfe cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() 1c2e571e4caeb can: fix unique skb identifier regression under RPS 8078375dfd0ba can: dev: init_can_skb(): restore skb header initialization a7e5992bc3708 btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() 28dd88c4a4c21 ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands fda141e41f524 ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) cc5511324044b arm64: irq: exclude the softirq stack switch from KCOV c1b708f712f57 ALSA: hda/tas2781: Accept V1 calibration data without CRC 0919d8dd19f92 ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers 6c2772fa311fd Input: xpad - add support for Corsair Novablade Pro 2b0c5671e858e Input: xpad - add support for 8BitDo Pro 2 Wired Controller for Xbox 2caae9d1977be Input: ati_remote2 - fix type confusion in device attribute handlers 291fe0bafee78 ipv6: do not warn on route notification size race 221ef5e1e44a0 ipv4: do not warn on route notification size race ad2b3a68b8a7d ipv4: stop route notification sizing when nexthop group shrinks b9a30bb7b831e ipv4: stop exception dump when nexthop group shrinks f27483f9975b5 ipv4: stop PMTU walk when nexthop group shrinks fb0f8dfc5a030 rust_binder: reschedule node refcount update on thread exit c3e3346474616 ipv4: validate checksum_start before completing checksum 8c9b310c958be ipv6: udp: Create exceptions before socket matching be4fd05398f2b ipv4: udp: Create exceptions before socket matching 4446752655c98 ipv6: Fix redirect exception creation for UDP/RAW sockets 3d73a1164a8c6 net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry 655f47477054d net/mlx5e: Prevent stale XSK buffer release on refill retry 43f830e2bb84b fs: Free any excess xarray nodes in clear_inode() 5213f65a9667d bnxt_en: fix DMA mapping length for padded small packets 7b20d05fd38de Linux 7.2.10 26d4c36d318cf ipv4: free inet_opt and ireq_opt after an RCU grace period 593ca827e1676 iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs e2b721bc30f40 xen/netfront: drop RX packets with a short Ethernet header b5c0c7fc55718 net: usb: qmi_wwan: add Quectel EG120K-EA 4cb916d6060e3 smb: client: only require read lease for size-extending preallocate 0916566923c98 arm64: errata: Add Cortex-A725 erratum 3821522 workaround c1dff02ab4532 arm64: errata: Factor out broken AMU const counter cap 677d0b51ac1a0 perf: Require kernel access for text poke events 6e187281f978a perf/core: Check kernel access when kernel callchains are requested 63501889a8034 drm/amdgpu: reset VI ASIC on MacBookPro14,3 026b93f7eb799 drm/amdgpu: reset VI ASIC on MacBookPro15,1 d422a66847a9c drm/amd/display: map PWM brightness through custom backlight curve 9a7931e847f33 rust: irq: pass RegistrationInner as cookie to request_irq 719c40d4fb6fe mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages 44d0619fa4e5a mptcp: fix msk->timer_ival reset 882d0011c59ff iio: trigger: cancel reenable_work before freeing trigger e79dded3084e1 iio: proximity: vl53l0x-i2c: claim direct mode for raw reads ecb9bed69f61d iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler ce109a2619ada iio: proximity: sx9324: Correct proximity channel resolution e462b47b9637b iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure dd5dfd033cc9d iio: proximity: isl29501: Fix return type of isl29501_register_write 815ae0b73b69a iio: proximity: aw96103: validate firmware data length 6280d15f08603 iio: pressure: rohm-bm1390: Return error when read fails 7dbb518f3328e iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup 6a27402a8ff1f iio: light: rohm-bu27034: Fix infinite delay on error a1769877ff52a iio: light: gp2ap020a00f: drain irq_work after free_irq 396b83106f5e7 iio: imu: adis16480: fix unprotected debugfs reads f501302ebb9e1 iio: imu: adis16400: fix unprotected debugfs reads 8d6f98972fe2b iio: health: max30102: fix NULL dereference in interrupt handler b05e768420352 iio: gyro: adis16136: fix unprotected debugfs reads 7e3a09c3a1bcb iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() 6564f394a4a95 iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data 50174e873f897 iio: cdc: ad7150: fix OF matching and publish module aliases 3a87212b1a09a iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. e63188d77e10c iio: buffer: serialize buffer teardown with mode claims 4aa2f001807cf iio: admv1013: initialize callback mutex before registering notifier 49ea8a359e362 iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind 4c17cd7cdf9ed iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls feae7e0f40d60 iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure ab4e57adead25 iio: adc: stm32-adc: fix possible division by zero in processed channel b92e7e373e8d9 iio: adc: stm32-adc: fix check on internal channel availability 0695ee7b8febd iio: adc: rohm-bd79124: Fix rising alarm bb4a68d3ef19c iio: adc: rohm-bd79124: Fix GPIO mask check b2a23b732aaf0 iio: adc: rohm-bd79124: Fix channel initialization 1a904eb70107f iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop 7996557c6b7d3 iio: adc: pac1934: check ACPI label duplication efcd55eff289c iio: adc: max1363: sign-extend bipolar differential channel reads 4d72c397c160b iio: adc: axp288: Add TS bias override for Haier HV103H 4884f4a5dec83 iio: adc: aspeed: propagate reset deassert errors dec6193cef07e iio: adc: adi-axi-adc: Initialize state mutex c99350a1ebc6b iio: adc: ade9000: request interrupts after powering the device d338af069f086 iio: adc: ade9000: handle Phase C dip events in IRQ1 handler 7b565e5ac9557 iio: adc: ade9000: fix overlapping scan_index for current and voltage channels 134aa31a8d4e7 iio: adc: ade9000: fix NULL pointer dereference in clkout registration 5663c72bf4002 iio: adc: ad_sigma_delta: fix use-after-free on unbind e96490d30d040 iio: adc: ad7173: Fix digital filter configuration 6ca6dcbaa68c5 iio: adc: ad4030: fix invalid oversampling_ratio validation 28c561b537064 iio: accel: sca3000: fix frequency divider condition check aa94a37b5a3e5 iio: accel: kxcjk-1013: reject duplicate event disable 2ef953f7b54e1 iio: accel: kionix-kx022a: Prevent memory leak and fix state d9d23d115610e smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races 1b9334c2e0854 smb: client: require stable pages for signed connections dc71660f11ef2 smb: client: drain and invalidate before server-side copy/clone c33261ffbf525 smb: client: distinguish real EOF from a stale remote_i_size on read e8ba21c7e6ef3 smb: client: flush dirty data before zeroing a range 8f21e4b79507f smb: client: only require read lease for size-extending zero range bf84e44ff0ed8 smb: client: flush and commit data before querying allocated ranges 15bb9f1d3e967 smb: client: discard post-EOF pagecache when extending a file via clone range fbbb399f4c7a7 smb: client: discard post-EOF pagecache when extending a file via copy range 6a8279c98ad28 smb: client: discard post-EOF pagecache when extending a file via zero range 737a1d2e9642d thunderbolt: Reject oversized XDomain properties responses 733aba776a5c9 thunderbolt: Disable CL states for the Anker Prime TB5 dock 2f4cd43faa9d6 thunderbolt: Fix NULL dereference in tb_remove_work() 2c2fd6a7fd5e1 thunderbolt: Don't access a DP tunnel after its DPRX read was canceled 7739b02129b22 thunderbolt: Fix domain reference leak when DPRX read is canceled cbd2abb85ea32 thunderbolt: Tear down inactive DP tunnels when the domain is stopped 4cca0a5250ee7 thunderbolt: Mark discovered tunnels as active 47d60ea801fc3 thunderbolt: Make the DP tunnel activation callback mandatory 2b5f976119d8f thunderbolt: Hold a router reference for each allocated HopID 08287212b6220 thunderbolt: Fix KASAN reported use-after-free when request is canceled 4c4f7cde6a023 USB: serial: option: add Compal EXC-T1 support 5d34ced50e772 USB: serial: option: add Quectel RG660QB 83b932375b911 USB: serial: option: add Compal EXM-G1x support 602a7ea0fb3c3 USB: serial: option: add Quectel EG060W 63b813fa112f9 USB: serial: option: add support for SIMCom SIM8260C 7912a95d1345c USB: serial: fix ioctl hangup race 428d479a0d314 USB: serial: fix driver deregistration order 380f57cd58e26 USB: serial: fix dynamic id driver deregistration race b77880815b9c7 USB: serial: ssu100: fix baud rate overflow 1600930b81e7a USB: serial: quatech2: fix baud rate overflow 0917201017b63 USB: serial: cp210x: add Corsair AX1500i Power Supply 20f939b0c151d wifi: mac80211: handle empty FILS association request payload 93da3ec938bfd wifi: mac80211: fix mesh fast xmit path deletion UAF 2d9c5525bbc1a wifi: mac80211: set info->band for 802.3 encap offload frames a59eca4557c74 wifi: mac80211: release mesh path quota on failed additions 79b3ce0d881cd wifi: mac80211: reject invalid 320 MHz CSA bandwidth 43082d604a993 wifi: mac80211: minstrel_ht: validate fixed rate index 0878594c5806d wifi: mac80211: keep fallback association elements alive 5a32409ed34a1 wifi: mac80211: account proxy paths against the mesh path limit 097460fcdd8ab wifi: mac80211: drain PS delivery work during station teardown 09b7d5e4f8850 wifi: mac80211: shut down RX BA session timer on teardown afd1cdd16a25c wifi: mac80211: keep paired old chanctx alive 5cc54a000960b wifi: mac80211: count only matching reservations in reserved switch 89f9d6186dc74 wifi: iwlegacy: 3945: free EEPROM data on remove 678c8f4ba2856 wifi: cw1200: fix TX padding OOB read leaking heap data to device 58ddd8e3ed6d3 wifi: cfg80211: fix RTS threshold setting for single-radio PHY 31c399c94b2e5 KVM: arm64: Use stage-1 leaf size for VM_PFNMAP 91e28dd8eedb9 KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor 8b25393d16a5c KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq 9ce6c9ebc56a8 KVM: arm64: vgic: Allow last_lr_irq to be NULL when LRs are not overflowing af3300b3a6bac KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT 3da3279a44df1 KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs 8676b29d186fc KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded fd873c3d1b524 KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN 55865b3ae0370 KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted 681e31f03ec92 KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy de83ff6a4d8f3 KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state 0fbc7fec2242d KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it 1e497e3bdab69 KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified d1de1703fe36f mtd: spinand: Do not update the QE bit on devices without one fc278060f5d6f mtd: spinand: fix zero oobavail when no ECC engine is used fc2f651f52039 mtd: spinand: fix NULL pointer dereference with no ECC engine ecc0f73dbe83d mtd: spinand: Enable QE on all dies d8147cc0c8c2e mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive() 1ac34039fd394 mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB bbd87eca54072 mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ a07073946e94b mtd: mtd_intel_dg: reset poll counter for each erase 21d0f05989bf0 mtd: block2mtd: Fix divide error when erase_size is zero 23194531595c5 nvmet: copy the hostid into the ctrl before creating PR pc_refs 472df1d103dbe nvmet: pci-epf: reject too-short SGL segments 8a9b4c0eef19c nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() 02cd0d372b161 nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT e5cdb0c0a51e8 nvme-multipath: fix underflow in ANA log bounds checks 8b85838c1fdba nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known 42bb6216b861e tpm: fix off-by-four bounds check in tpm2_get_random() f38c57a28ebbd x86/mm: Drop unnecessary PMD page copy when freeing b46b2e2de47ca x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h 9806a748f9ab2 Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() b2cb5ea1dc8cf Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() 673f707518e8e Bluetooth: btintel: fix buffer over-read in btintel_hw_error() a7161730a3ab3 Bluetooth: hci_core: Serialize fragmented ISO packet queueing ecdb1c66d8e14 Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown 4fda8f0abeea9 Bluetooth: hci_core: Serialize ACL scheduling with channel deletion f2e7bd6baf660 Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems 93a737e4e042f Bluetooth: hci_conn: Lock parent access during enhanced SCO setup a642f498f0b08 Bluetooth: hci_sync: Fix inquiry cache use-after-free df5162eeb10e6 Bluetooth: Serialize SMP remote OOB data access e5aa7fbf7a444 Bluetooth: RFCOMM: Fix initial port reference race 314a2c63879e0 i2c: xiic: don't clobber msg->len to signal block-read completion 5d1f0adecdfbe i2c: xiic: preserve PEC byte length in SMBus block read setup a68979b6ceb48 EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup 87364b19b3fe4 EDAC/altera: Fix use-after-free in error paths 552bb479027e7 EDAC/altera: Fix memory leak on dci allocation failure 4ec26cb798474 EDAC/altera: Drop __init from ECC setup paths for re-probe safety 97c1f5b482c31 EDAC/altera: Do not allow driver unbinding 9f86099af05a4 EDAC/versalnet: Drop remote processor handle refcount on driver removal 07a97fba1c842 ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72 3e148e498d82f ALSA: hda/realtek: Fix silent speaker on Higole F9B 25219d1fc75e4 ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR 4294fe5704859 ALSA: ua101: reject mismatched capture/playback packet sizes 702d92f361f65 ALSA: seq: Serialize compat port-info ioctls 9e3d43a1c6441 ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 f11336e6d3cd9 ASoC: qcom: lpass-cpu: use DAI table index for playback constraints 7791ebf56eb4a ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type f44ba04c7a32b ASoC: codecs: max98363: fix uninitialized stream_config->type c374d710a3b76 ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks 4ceb275ce192d arm64: mm: Fix the break-before-make flush range for erratum 2645198 88c1c611552b2 arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems 04a77b14f0b13 serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL 0e0d96bd980d4 serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around 16abbcd15adb9 serial: vt8500: Fix clock reference leak in vt8500_serial_probe() 0c4a277aac263 serial: tegra: don't clear the Tx FIFO on an Rx-only reset 1b303d383089a serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() 298b4e3c65d2c serial: fix TIOCMIWAIT race cbe4709d4d0c8 serial: revert guards in uart_wait_modem_status() 54abbb862366d serial: core: fix NULL pointer dereference in serial_core_unregister_port() 4673adec2c639 serial: 8250_omap: fix wake irq cleared during suspend 0794ba5332754 serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() 9acf2e564d3df perf: Replace perf_event_header__init_id with full header init 247b8f6808763 tty: serial: max3100: shut down timer before freeing port dcaf0251f847a tty: fix saved termios reset race c8ccd3b2013da tty: abort break signalling on hangup ce9fa23576941 tty: serial: qcom_geni_serial: Keep console RX functional after deep idle 017b18addbe8d tty: port: fix tty_port_tty_vhangup() race 6388409b711eb tty: tty_port: restore TTY_IO_ERROR on activation failure 26a885ecfd026 tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2 1a9fb9eaeb69b tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup 399aa38af1d78 tty: vcc: zero-initialize control packet in vcc_send_ctl() 7d81a8dc947e5 tty: amiserial: fix broken TIOCMIWAIT 390b28153a932 tty: vt: fix memory leak in vc_allocate() 45b606418bae7 usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe 159dada48ee2d usb: cdns3: fix use-after-free in cdns3_gadget_exit() 2c9e8d1527fe3 usb: typec: ucsi: displayport: Current CAM OOB index fixup d4fef69d4171f usb: typec: ucsi: Get the connector fwnode based on reg value de7b557b25846 usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41 ee8577de01c6b usb: typec: ucsi: glink: fix use-after-free of ucsi on remove 5414144e202a3 usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() dac0c073c6ad5 usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() a2b95607926d5 usb: typec: tipd: don't send GAID when probe fails in APP mode d6b0cce612636 usb: typec: tcpm: recover after failure to start the frs ams 79ba37dd38a32 USB: dwc2: shut down wakeup timer before freeing HCD state c50413ecb662e usb: core: clear both ep_in and ep_out for non-ep0 control endpoints c0d23c4201bcb usb: chipidea: tegra: disable runtime PM on resume failure 35ab269602e1f usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC 3070806a7bc7b USB: gadget: dummy-hcd: Fix wait for outstanding request completions c81504dfd2d93 usb: gadget: aspeed-vhub: cancel wake work on device removal f51cadb02b439 usb: dwc3: gadget: fix IRQ storm on invalid event buffer count f80ec4a636af5 usb: dwc3: am62: Fix runtime PM usage count leak on probe error path 5a8809025c43b usb: typec: port-mapper: Only match USB4 port if host interface is available cb6bf2c707805 usb: typec: anx7411 - stop the IRQ before destroying the workqueue 697cfe6e53b66 usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd 223c3bd02a582 usb: gadget: midi2: Fix the jack descriptor array sizes 136bac9724d19 usb: ohci-st: disable controller wakeup on removal 0f4673de449fe usb: ohci-spear: disable controller wakeup on removal af9b5552c80d7 usb: ohci-s3c2410: disable controller wakeup on removal 523814cea1e33 usb: ohci-da8xx: disable controller wakeup on cleanup 0cb708e252b8d usb: octeon-hcd: fix the FIFO-flush timeout computation d7c4a49b41583 usb: hub: use shorter 120ms post resume hold for SS root hubs db9d3be156bac usb: storage: sierra_ms: reject short SWoC info transfers e80ee74206f26 USB: serial: fix port tear down use-after-free 420ca35af891d USB: cdc-acm: skip URB restart in port_shutdown if disconnected 24e98de44d24b USB: cdc-acm: fix racy TIOCMIWAIT implementation 0b293e202bfda soc: qcom: geni-se: Correct QUP Core ICC vote constants 98dc9fababd1b rust_binder: cancel deferred work items in thread exit 43f78b328f390 nitro_enclaves: fix use-after-free on SLOT_ALLOC failure 984c35ee7085d Input: synaptics - limit T440p InterTouch quirk to LEN0036 2449f5c9c8439 Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 4cd725b0eaa0b Input: s6sy761 - fix resume ordering and restore sensing 5042665c52c91 Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 35085bb734ead Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 e491fc201d4fb kgdboc: Fix tty driver reference leak in configure_kgdboc() 52332a61bf47f hrtimer: Use the mask to clear TIF_HRTIMER_REARM from the exit work e826e849e00e3 clk: spacemit: k3: add CPU PLL rate tables 885bbbe52d318 binderfs: fix UAF write in binder_add_device 6673f4f21e2fd binder: fix leaked fd fixups on TF_UPDATE_TXN supersede 1ab671b50714a binder: fix is_failure flag for superseded transaction cleanup 6b28918f2b28c drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU abf854513bc19 drm/amdgpu: fix ACP MFD device leak on init failure 109e0005bd680 drm/amdgpu: drop userq callback assignment for sdma 7.1 13074da71ad8c drm/amdgpu: implement workaround for sdma dcc corruption c05bbcc263d67 drm/amdgpu: fix IP instance memory leak on kobject add failure cb3e0244514d1 drm/mediatek: Fix pdev reference leak in mtk_drm_bind() 8e3a350075b55 drm/mediatek: Fix ovl adaptor platform device leak aeef8a8537bcf drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device 85d8c3c0ccc1c drm/radeon: Read the VRAM VBIOS signature with readb() 1c05065255652 drm/i915/vrr: Disable DC balance by default 67d68622668d6 drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub() 7a4e35a054699 drm/amdgpu/gmc12.1: properly pass flush_type to gmc_v12_1_flush_vm_hub() 4b70c6b34912c drm/amdgpu/gfx6: fix firmware leak on teardown 7f94a706aa473 drm/amd/pm/si: Fix updating clock limits on AC/DC 4e0482f7d9d6e drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC 2b383a50e8f63 drm/amd/display: Mark DCE 6.4 as not APU 8f88350943414 drm/amd/display: Fix stale replay_events after mod_power stream removal 32059834642c6 drm/amd/display: Fix fast updates on DCE 8.1 b8cbda33632d2 drm/amd/display: Fix fast updates on DCE 6.x 7283b78ca07ce drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend b1e1884a45639 drm/amd/display: Preserve eDP mode on initial ASSR failure daa0437fe5e45 drm/amd/display: guard dc_sink dereferences in MST mode validation f7451f59990c4 PCI: Accept AtomicOps already enabled by the hypervisor 94f41ec5fa578 bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() 5d5dc18b3a9ac futex: Fix private hash use-after-free on resize fbba0b7a4c9c2 drm/mediatek: Fix runtime PM leak in mtk_hdmi_ddc_v2_probe() 33d0a5d2fee06 bpf: Fix objects stuck in free_by_rcu_ttrace b9818bd1a592d bpf: Factor out __do_call_rcu_ttrace() b73c20cd7b870 spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260 ba6cd9f0b337c ALSA: ice1712: Fix the error handling via auto-cleanup at probe f01cfe7e81748 ALSA: core: Define auto-cleanup for snd_card_free() 81e61e3f8befa perf: Fix race between perf_event_exit_task() and perf_pending_task() cee25e14333b6 i2c: at91: release DMA channels when probe defers 4d6a628c671ca net: mvneta: clear XDP pfmemalloc flag between frames 086e8acb3a0e5 ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() 63df0ef4c6e31 net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference b4d6ab56b27d9 net: sparx5: make ports inherit the switch base mac address type 796f49e745531 of: Put coreboot node after compatibility check 59cb923a82c38 net: microchip: vcap: stop scanning after deleting key field a2cac45848d1c netfilter: flowtable: generalize pending status bit 58108f05b0502 netfilter: bpf: reject invalid NAT manipulation types 45a93111835cc ipvs: filter some flags received in the backup server ea397f425be14 ipvs: do not create invisible templates f9abe0a0befb1 ipvs: fix missing counter decrement in lblc 07188a3c2baf7 tcp: refresh TS.Recent for accepted old ACKs 2879b65bfa548 net: sparx5: skip ptp deinit if init was skipped 8b4a790ef9be3 net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values 17eafd74de5a3 net: ethernet: mtk_eth_soc: allocate dummy netdev sooner f99de42f5c6f8 net: cap skb->queue_mapping when the tx queue is picked d870102b54253 net: bcmgenet: fix NULL dereference in set_coalesce before first open a616189d75c74 net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence f583cfe64bd37 virtio_blk: set the zone write granularity c60e775d235b2 ALSA: usb-audio: Apply boot quirk for Behringer models generically e2f7470717823 ALSA: usb-audio: Add boot quirk for Behringer CM1A 269a62e242b84 net/sched: sch_codel: match the no-drop threshold to the packet size 172dff7703d4a net/sched: fq_codel: match the no-drop threshold to the packet size f91817a8d54af gve: DQO: accept TSO packets with non-protocol gso_type bits 967566ad325b4 bpf: Skip detached progs in trampoline images that are still in use 40955f6512a03 bpf: Wait for an RCU tasks grace period before freeing trampoline progs a467b05b201b5 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value dce32bd7d8879 net: ethtool: let tsconfig reach a PHY-only timestamp provider e9141fdb7a2ea seg6: ensure packet data is writable before modifying SRH and IPv6 DA a7cff44543f66 net: stmmac: fix rx Scatter-Gather support 0b105f4eb78e5 net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() 60e0c2aeaa605 tipc: prevent GCM nonce reuse on peer key changes 2f21aaec8373f octeontx2-af: mcs: Fix SC resource cleanup loop 59fbbded05e55 octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled 8117cbc504cb0 net/mlx5: Fix slab-out-of-bounds when handling team device events df8e7029aea62 net: systemport: Fix RUNT MIB counter register offset calculation faba9fdde4803 net: systemport: Fix buffer overflow in bcm_sysport_get_stats() d01a52060063b drm/mediatek: mtk_hdmi_v2: fix VID_DOWNSAMPLE_CONFIG register offset e8ba8c9c74d10 Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister dd6c3da23d54c drm/xe/pf: Keep VF LMEM BAR size low if no VFs enabled e7602a7c34ea6 drm/xe/pf: Refactor VF LMEM BAR resize helper function 6ec39ab6be542 ALSA: hda/realtek - Add headset mode for Dell Pro QC1255 63e7064b4c1c4 wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() 5ffc2f704d88f netfilter: ipset: do not update comments from kernel-side adds 0498e7abd9560 ipv6: fix prefix route expiry in modify_prefix_route() f4f6340985932 net: bcmgenet: allocate RX buffers as page fragments 570141625d212 net/sched: cls_api: reclaim an empty proto on the error path f37f42e6e039a net/mctp: publish the mctp_dev only after it is initialised b506f5699e145 bpf: Hold map BTF for the memory allocator destructor record 351d1c47e45b2 nvme: fix command effects log lifetime for multipath heads 45d16ffbc9b65 nvme: work around -Wformat-security warning 98b09ad793448 nvme: fix cdev lifetime 3fc78337706a8 nvme: add nvme_get_ns_head() 9bc8fe8af3797 ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer 443328237113e bpf: Fix overflow of jump offset in constant blinding 1107c7e29a0f2 drbd: remove unused drbd_nl_mcgrps[] array 1f90c62a2412b ASoC: SDCA: Add better pm_runtime error handling in func probe 1769d8924848d ASoC: SDCA: Set suspended flag after resuming within system suspend 48eb9ee6f52c6 arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz 46545c86b54ff mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() e26322e44c66a mm/slab: handle the !allow_spin case in kfree_rcu_sheaf() f3617369fbb30 Bluetooth: btintel: validate DDC record lengths 4235764580013 Bluetooth: hci_core: free the HCI ID if naming fails 2c47ebc27fa72 blk-mq: set RQF_USE_SCHED when the operation is known dd33c03cefccd block: reject polled dio with user integrity metadata 64804ed8fad4b ASoC: codecs: rt274: Fix format setting for 44100 rate 9446cc221e098 ASoC: codecs: rt286: Revert delay value for jack setup ad61b9a5febb4 wifi: mac80211: prevent AP VLAN tx from other interfaces 5f27581c176f8 wifi: cfg80211: preserve hidden-group beacon IE ownership b1961a61ab6fb wifi: mac80211: validate TX status rate metadata 8a03f8422fa08 rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() 55ca60ba33663 rtc: ac100: Fix clock provider use-after-free on probe failure 2838d7bbb5518 rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak e73a619f91b6c wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE a3b0137c855a6 wifi: ath9k: reject short WMI command responses 5fde5e25f5126 wifi: ath9k: Clean up device initialisation guards c27779d3679c6 wifi: ath11k: reset ar->num_stations on hardware start 870b8cb9baa9b wifi: mac80211: drop oversized fragments to avoid extra_len overflow f3405fe6e1073 ASoC: tegra: Fix ASRC Stream6 input threshold control 7acb36fd60a3e wifi: wfx: validate MIB read length before copying to caller ce05ab5fb6ec2 ASoC: wm8903: Move the DRC QR threshold to the register that holds it 4ec22c9b8c0fe of/overlay: don't create "//" paths for fragments targeting the root 3a23fb158ba51 of/overlay: don't leak fragment references when changeset init fails 39b9f41496382 random: fix vgetrandom_opaque_params kernel-doc 9fcf4317384ce blk-cgroup: save IRQ state in blkg_tryget_closest() f4274a918bb57 nvmet: preserve device path on allocation failure dc482a281a19a mtd: core: call _get_device() with the master MTD cecf007418b93 mtd: core: avoid double-free of OTP NVMEM device 22d377178de28 iio: accel: kionix-kx022a: Fix array boundary check 43d294b02c88e iio: light: rohm-bu27034: Fix error return 3781cb06b787e iio: dac: rohm-bd79703: Do not allow writing SCALE 40554d1221e3d ext4: don't enable large folios on encrypted inodes b78748424f29f ALSA: line6: reject oversized playback packets 1a0a0d881e043 ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270) 2e5a413cc2a48 ALSA: caiaq: unregister the input device when probe fails e45e93538da14 wifi: wlcore: Fix runtime PM leak in wlcore_remove() 0ee53081425a1 vt: skip screen update for DEC alignment test on backgroup consoles 619c6d7dd76ff vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() 9dfcadc5e003f vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF ebf22e2ac2c8e mm: shmem: ignore sysfs configs for shmem forced collapse a0375b5e51d07 mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc 35104391d566a mm/damon/core: don't skip damos_adjust_quota() while esz is not zero 8f42954ad8bf9 virt: vmgenid: set driver_data before registering notification handlers 88752b97fe69b virt: vmgenid: remap memory as decrypted bfc721eef5c13 module: fix lost error code from codetag_load_module() 915be8668c60d netfs: zero the tail of a short DIO/unbuffered read 2a62fe628a877 netfs: zero gaps in read-gaps folio to avoid writing back stale data a7036a73671fc netfs: clear post-EOF pagecache when extending a file via write f6599d8830fe7 tpm: Disable TPM on null key name mismatch 54fd86bb49265 time/jiffies: Saturate in mult_hz() instead of wrapping e68ac524e9383 sysctl: Negate before converting in the int read path 222c41e0f50f1 sctp: check RCV_SHUTDOWN after the sendmsg connect wait cb6d6a7fbff04 rtc: spear: initialize IRQ state before requesting alarm IRQ ad1bf77039cba rtc: ac100: Assign .num before accessing .hws b36052c457079 random: vDSO: avoid call to memset() when zeroing reserved parameter c5c096b134450 r8169: disable EEE on RTL8168h/8111h 2cee3603ec1d9 pfcp: fix socket lifetime on netdevice registration failure 9fd63d284e251 net/packet: prevent TX_RING byte count overflow 4cd378423a331 netfilter: nft_flow_offload: drop flowtable reference on init error path 65812d6a5aee4 net: phy: aquantia: fix system interface type not updated in forced mode dd2b3e0a5f968 net: fix checksum offsets in skb_splice_from_iter() cabacdf98e09e net: extend IPv6 exthdr detection of tunneled packets c949646c900e8 net: gso: limit recursive IP-in-IP segmentation c875407c34dad of/overlay: only treat a positive changeset id as registered 5857035a3b53a of/overlay: put property on deadprops only after changeset add succeeds 239fa8196b518 of/irq: Fix remaining refcount leaks in of_irq_init() b0825e3a52474 octeontx2-pf: Fix RSS indirection table size 526fac219e8b7 kprobes: Skip disarmed probes when checking optkprobe overlap c59b210af84da kasan: unpoison task stack below watermark only in generic mode 16c83c047ecfa ipvs: bound LBLCR and LBLC cache growth 395b25968fe85 io_uring: fix task_work add use-after-free with SQPOLL 5e508d304f2a1 io_uring/zcrx: requeue multishot receives stopped by a local resource 7cac9ee939e49 io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full a0125ca86e405 HID: multitouch: stop the release timer from being rearmed on remove f9f808227554b HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request dd4a0d4993633 fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() fa392baf00e66 crypto: x86/aes-gcm - fix always true check for last AAD segment f2cc5462b7855 audit: fix exe mark UAF in kill_rules() 3b0860792282a ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices 0a6d9e67aeaff KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths f7c8620546091 Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table ea219e93ca752 ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture 942192dbcd3a0 KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails 43457bf655004 sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task fe499ae9da46e sched_ext: Don't run ops.dequeue() with a DSQ lock held 5f950cfce1ef8 sched_ext: Add a size argument to scx_bpf_cid_topo() so struct scx_cid_topo can grow 0e1a74369bdbc sched_ext: Build the cid tables privately and publish them with RCU 08513d9985814 sched/cache: Skip kernel threads for cache aware scheduling to rubustify the code 9436130e6da72 sched/cache: Introduce task_struct->sched_cache_grp to fix UAF d3bb1bfc83f37 sched/cache: Honor migrate_llc_task semantics in active load balance, to fix LLC mis-scheduling bug 450d1d9e046da sched/cache: Keep nr_pref_llc_running in the runnable domain, to fix LLC mis-scheduling bug 6f7d978dc7cf4 sched/fair: Avoid creating misfits during cache-aware balancing ce4fb8d3e21b8 selftests/cgroup: account for zswap shrinker writeback d85a1f2851518 drm/xe/i2c: Keep the i2c controller always enabled 1044970320007 dm-pcache: bound the logical key offset from persistent memory 96e2863b1f81e dm-pcache: reject a kset that overruns its segment 5fce161649b4d Linux 7.2.9 82339215fc00b i2c: qcom-geni: release DMA channels on probe error f0c1fb7e96b3c accel/ivpu: Drop IRQF_ONESHOT to allow IPC IRQ threading on PREEMPT_RT bf5266d912c07 KVM: x86: Add static calls for nested virtualization ops 7f0a727723a0e KVM: x86: Reject nested CAP enablement if nested virtualization is disabled ac1dc205accae KVM: move TSS constants from kvm_host.h to tss.h 42dd578c3c8fb KVM: x86/mmu: Move kvm_mmu_do_page_fault() from mmu_internal.h => mmu.c d54c173828ea1 KVM: x86/mmu: Move kvm_arch_async_page_ready() below kvm_tdp_page_fault() a0d29482f3ff8 KVM: x86: Move IRQ-related helper declarations from kvm_host.h => irq.h 5bf1c9175e657 KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction 512c93f4461b9 KVM: arm64: nv: Fix life cycle of the nested_mmus array b097d9d7a5b09 net/sched: act_ct: avoid modifying shared unconfirmed ct entry 8988f4d11f3fb net/sched: act_ct: fix helper UAF due to extensions realloc 9355bf2b26a65 drm/amd/display: Relax DML frame limit with UBSAN 93664ce254c78 super: make iterate_supers_type() deletion-safe e4c644e2ef8eb super: take lock after last reference count 499f144ae5d1d super: convert s_count to refcount_t s_passive 139efdb3ee6e4 i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL 6c3420d6ba34d i2c: qcom-geni: Store of_device_id data in driver private struct 4edab037132b8 i2c: qcom-geni: Move resource initialization to separate function fb54df3645d8a i2c: qcom-geni: Isolate serial engine setup 3aede00c681a9 accel/ivpu: Use separate flag for job timeout a19900a0ed08e accel/ivpu: Use threaded IRQ for IPC callback processing 63fc6312d39d5 landlock: Work around gcc-16 -Wuninitialized warning d6efcfd5cd8f8 drm/xe: Add wa_14025941587 to xe2, xe3 and xe3p platforms 961c717e6bf0e xfs: fix cursor and pointer handling when recovering iunlink buckets b39ce66ab47cb xfs: fix blockgc group quota scanning when usrquota isn't enforced 41bc624377f08 xfs: drop dquot flush lock when we can't find a buffer to flush f1f7bc739a891 xfs: don't merge different file IO error types 0e0d3372a8402 xfs: don't let memory failures leak blocks and kill repairs f0d8352a39f4a xfs: don't let hidden_space go negative in xfs_metafile_resv_init b4b9928ee54f4 xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits 2703b954d306e xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots 26ba0c5482d95 xfs: fix rtgroup repair estimations 0f3f707b5478d xfs: check di_forkoff correctly in scrub 1fd8a33bbd0ba xfs: use the correct reservations for rtrmap/refcount recovery 34e600858fc35 xfs: only flag zero padding for dir3 data blocks, not dir3 block blocks 445cb918169a5 xfs: don't call xfs_exchange_range_finish for a dry run dfb84f25e7750 xfs: check padding field in xfs_ioc_commit_range fbf850345ff74 xfs: use correct jiffies comparison function in xchk_maybe_relax f813aefd9e09c xfs: release orphanage dir inode if chown fails 4cb89cd1ac1d3 xfs: fix attr fork block count checks in xrep_inode_blockcounts da172e10613d0 xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption 70783946f3b5d smb: client: delete compound mids on send failure before unlock 253612499ce9b smb: client: close completed creates on compound wait errors b01f4f85817c6 smb: client: validate POSIX create context length 3c07deb262731 smb: client: use finish_no_open() for non-regular inodes f09b5f972eca1 smb: client: preserve create-context parsing errors 7c1509598a4fd smb: client: clean up failed cached directory opens cdb36b09fb1f8 smb: client: close handle after create-context parsing failure cecc5399987e7 smb: client: fix create context out-of-bounds reads 005b23d9e324f Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO 2e8bba0360d13 Bluetooth: mgmt: fix race in read_unconf_index_list() f557274af7b94 Bluetooth: L2CAP: validate frame length before control and FCS access e5fcca51177f2 Bluetooth: ISO: release unused CIS holds after channel attach bbcd723ee7a84 Bluetooth: ISO: balance the parent hold in hci_bind_bis() 47d67ec424e63 Bluetooth: hci_sock: reject out-of-range OCF values 1a92763c2ba72 Bluetooth: hci_sock: validate event length before filtering 947eb2f41f70d Bluetooth: hci_conn: fix CIS hold ownership on reuse df59474a0a857 sched/cache: Refresh LLC capacity across CPU hotplug, to fix capacity underestimation bug 852ecb6bc0bc0 sched/cache: Decouple sched_cache_group from mm to fix UAF 3fdf2ceb31e8a sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags c942d0d46049d RISC-V: KVM: Fix HSM hart status error propagation e9c89ca5f145c RISC-V: KVM: Propagate interrupted G-stage faults f475f4d78def6 RISC-V: KVM: Release unused page after MMU invalidation 3cc6184bd5920 RISC-V: KVM: Synchronize hrtimer callback during teardown 71acbea44e786 RISC-V: KVM: Serialize IMSIC attributes with vCPU migration 22df195bff843 KVM: arm64: Transfer the hyp stack pages out of the host stage-2 3cefc1ab511fa KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race 330346dda3bf5 KVM: arm64: Fix spurious warning for benign stage 2 teardown race af6813d16ace2 KVM: arm64: Fix AArch32 DBGBXVR handling cc53eb5c6515e KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode d4cc2dff12116 KVM: SEV: Do cache maintenance on the source VM during intra-host migration 9784e5ca91b37 KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV 4e4d2ae5ad394 KVM: Don't treat reserved xarray entries as having memory attributes 9a5eec7bdd3fc KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg 3c3433657c82f s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config fa0cccea92502 s390/pci: Don't report recovery success on skipped recovery d47272ceaab8f s390/pci: Report SCLP status on error events when no pdev is associated 1b957d5c2f737 s390/pci: Fix missing device lock in zpci_report_status() 1cd0b7a08dc83 s390/pci: Fix leak of struct pci_dev reference in zpci_report_status() 7f78226eb743b s390/cmf: Fix virtual vs physical address confusion 44b16b0260805 s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() 7274abc88dda6 pinctrl: sunxi: keep a shadow copy of the data register output latches db451df3dc17e pinctrl: single: free the IRQ on domain creation failure 742be6976ebd6 pinctrl: qcom: nord: Split QUP1 SE2/SE3 into lane-pair functions ff77310ea0bf7 pinctrl: mpfs-mssio: use correct regmap function to set bank voltage 897e39973c26a pinctrl: mpfs-mssio: fix width of unused bank voltage setting c45b783d57c23 perf/x86/intel: Constrain Panther Cove UOPS_DISPATCHED events to PMCs 0-3 991113857d31a perf/x86/intel: Remove incorrect Panther Cove PEBS data-source constraints 6ec90c2a7bd97 perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints 40f6fd75cc22a perf/x86/intel: Fix Panther Cove PEBS data-source snoop states eefb89f251873 perf/x86/intel: Fix DKT PEBS load/store direction for latency events, to fix sample classification 684a72b20c006 perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification d07b3fd6df84e perf/x86/intel: Fix CMT PEBS load/store direction for latency events, to fix sample classification f0be081114dae perf/core: Run sched_task() for PMUs with only CPU-wide events ec15f6a50183f perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() 8a20dbb31020d parisc: parse early parameters in setup_arch() db45f02b7a5f7 parisc: Increase kernel stack size to 32kb b92d5f31d4667 scsi: ufs: pltfrm: Add quirk for R-Car S4 lacking lanes-per-direction 9f6f4840def93 scsi: ufs: core: Keep internal commands dispatchable during error handling 24ffc919467d2 scsi: libiscsi_tcp: Check the data direction of a Data-In PDU 6ef70d790425e nfc: trf7970a: power down on startup RX gain failure 035056e07ea65 nfc: port100: reject frames whose declared length exceeds the received data 744e61bd06188 nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() 9ede11e12f965 nfc: fix use-after-free in nfc_get_local_general_bytes 4fb8b1ccc4756 netfilter: nf_tables: skip expired catchall elements on insert and delete d9cf4ac6f3263 netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read 3a7384bc2e662 netfilter: ip6t_rpfilter: reject routes without inet6_dev e27b51822681a net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() f2379110d05df net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist b03b8ed983df1 net: txgbe: fix FDIR filter restore for VF rules f0105a92289d8 net: phy: micrel: Advance register data pointer in write loop a0cb48c6418d1 net: phy: intel-xway: workaround 100BASE-TX Link-Up issue 47785f9f638b0 net: ena: fix MMIO read buffer leak on probe failure e32f6c0e0d626 net: ena: fix PHC cleanup on probe failure fe2a42789c12e net: bridge: mdb: restart port group walk after deletion 3a7d9271b37c8 net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read d4ab263e40fcf net: atl1c: fix soft lockup on out-of-range tpd_cons read e02a83bb0b7a2 net: openvswitch: conntrack: fix helper UAF due to extensions realloc ec8f12f46f07b net: openvswitch: conntrack: remove 'add_helper' dead code 457e0df1b5711 net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry 259e6cbb6a097 net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths cbaad2922bd5d net: ipconfig: bound DHCP option construction deed332a8dd6b net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() 6285919d4c062 net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read 35e716a707334 net: arp: terminate device name before lookup da9d42531f3a6 net: airoha: npu: cancel wdt_work after releasing the WDT IRQ a9551f26287de net/sched: reject IDR error pointers when deleting actions e73f832f0a7b2 net/mlx5e: fix swapped IPv6 IPsec policy masks 2b2a207ef975b net/mlx5e: advertise MACsec offload only when supported 1f13989a0704b net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() 4b09b7c84b863 HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() 723983a774f14 HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard eed737d89fa36 HID: hid-oxp: use cancel_delayed_work_sync() in remove 443f6b93442b1 HID: alps: fix use-after-free on input2 registration failure 978e801750c7b HID: alps: unregister DualPoint Stick input device on remove 2a0c9afefc0ec packet: use ubuf_info completion for TX_RING packets aee774588abd7 PCI: of_property: Omit bus properties without a subordinate bus 75be9cc462134 PCI: Fix BAR resize for devices on a root bus 655690f370e2d mm/damon/core: reset invalid quota->charge_target_from 27adca087f25c mm/damon/core: allow esz to be set to zero 2ecc56fb6a58a mm/damon/core: fix unconditionally skip last region d5208de0799c5 mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold() 6e74ffc9ecf6e mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() 480a39b0a12c9 mm/hugetlb: preserve mremap address delta when skipping page tables 443628f755b35 mm/hugetlb: do not dissolve gigantic pages without runtime support d348a715380bf mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish fcedc256a1eb7 gpio: tps65219: Fix TPS65214 GPIO direction programming d5313d51c6e62 gpio: tps65219: Use the variant-specific direction callback eafce3255b271 gpio: tps65219: Fix GPIO input value reads ecced0076b700 drm/virtio: fix NULL pointer dereference on fence allocation failure ae583668f16d4 drm/virtio: fix memory leak of fence event on execbuffer failure 9f71d6b6bdb7a drm/xe: Keep walking on SVM eviction failure 599c17ac1c6ac drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV 531d4cd031182 drm/xe: harden adjust_idledly() against divide-by-zero and overflow bddaa5e4094c1 drm/xe/vm: nuke PTs only after unlinking contested VMAs 189ffc7b6cad6 drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() cd6e11b6ebe04 drm/nouveau: RCU-free the scheduler-containing nouveau_sched 780ad8e4df9f7 drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() 9e13c398a2344 drm/nouveau: Fix gem reference leak in validate_init() 872a5473c02a2 drm/nouveau: fix double-free in nvif_vmm_dtor 3e0861ebb9ecf drm/nouveau: Fix bridge reference leak in nv1a_ram_new() eed63b6137255 drm/nouveau: fix autosuspend cleanup during teardown 5b2fffbba290e drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM 06c69c64686a3 drm/nouveau/dmem: pin VRAM for the whole registered range 18f1cb48a7992 drm/amdgpu: move userq fence wait out of signalling section 8372eea98082e drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() 2556dd3a36beb drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() d9bc9e5a356c6 drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() 25901f180bde2 drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc() 7963b4d2445af drm/amdgpu/vcn5.0.1: fix video_timeout unit mismatch in jpeg reset wait ca51e225a554f drm/amdgpu/vcn4.0.3: fix video_timeout unit mismatch in jpeg reset wait 545a1c8792893 drm/amdgpu/userq: fix double jiffies conversion in hang detect timeout 707474d1d8619 drm/amd/display: Bump frame warning limit for clang builds of dml d111fde7b12f8 drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() 02b74891624e0 drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping 168e41173a9e6 drm/i915/dp_mst: Fix configuring TUs for a disconnected stream 67da63b54ced3 drm/i915/dp_mst: Fix configuring FEC for a disconnected stream a9047237769cc drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1 2dd0190e397ec drm/i915: fix incorrect RCU teardown order eb4af14672870 drm/imagination: Fix page count for page table for map() interface d30ea27471649 drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() a69c4b678db80 drm/client: fix restore of partially initialized client b36d32f30c3f1 rds: ib: Clear the sg list when mapping an MR fails f178300e2f56c mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() 3361c93e41738 llc: reserve device headroom for allocated frames 6e20dabffbcd7 gpio: zynq: fix runtime PM leak on request error path 60a466f231905 gpio: cdev: fix kernel stack leak to user-space in error path 39748357db26b gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() f05a01fc7d4f7 kprobes: Fix permanent hang when flushing the kprobe optimizer 94214cf0a08dd ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST 4254d5878c320 ipv6: do not let ipv6_find_hdr() return an offset past the packet end d7c5bd3159235 ipe: protect the dm-verity root hash with RCU e9015d32752fa ipe: fix use-after-free when auditing a newly loaded policy cb52f9f188c31 fsl/fman: Fix clk reference leak in read_dts_node() 260f586a80e7f writeback: report a Tasks-RCU quiescent state per cgwb drain pass f97e6d0572d1b workqueue: Fix NULL current_pwq deref in flush dependency check 9dac137bf77e0 writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes 37a2042748bc8 netfs: Fix missing alloc tagging of direct mempool allocations 1ae2a242c15b0 fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga b7459fddcb27a fprobe: Terminate the fgraph_data list when the reservation is not filled 520cf06b8ea0b fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT dfacf401f83dc cgroup/pids: Restore pids.events notifications in local mode 0751ab665cb3d cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict 9daa00445928d crypto: s390/hmac - Generate intermediate CV for API partial block handling 640d37fbd34d0 bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir e09d1c6729ee4 bna: prevent IOC timer rearm during teardown 80fbb0bc4d116 ata: libata-scsi: bound the ATA passthru sense descriptor writes 590395db53594 arm64: errata: match the target implementation CPU's own MIDR ce71865bf43f8 arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 218a944b9e035 af_packet: fix integer overflow in prb_calc_retire_blk_tmo() 6df536c5acbc0 sctp: discard the rest of the packet on a stale-cookie error 08e835f5ec6e2 tcp: prevent collapsing skbs across boundary in rtx queue b0e517961f09b tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow 31e3ef800705a virtio_net: copy zerocopy frags in start_xmit without NAPI 0f035ce43acd3 vsock: ignore empty child namespace mode writes 64da377e83d75 x86/sev: Make vTPM SVSM calls preemption-safe 61d4c3b002505 x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 51c17a944e3f0 x86/mce: Fix hardware debug register corruption on task migration 59af43ccece4d vlan: require the MAC header to be present in __vlan_insert_inner_tag() 415f5a755cec5 drm/pagemap: dma-unmap pages before handling migration errors 283550b74db33 mptcp: return sk_wait_data() errors from recvmsg() ee4d5818a9ecc sched/core: Account PSI IRQ time to the execution context, not the scheduling context c7de8521947a5 perf/core: Fill branch entries with a single assignment 5286d4eb5cd7e perf/core: Fix a refcount leak in attach_perf_ctx_data() 841410754a71c perf/x86/intel: Delete dead NVL PEBS data-source initcall 074eee0bf0d6d perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs() 050c4b962184e perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused 67f0ef3b5ff6e perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED 23e769520fb8e perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits fc4fd0281ac80 autofs: fix sbi->pipe file reference leak in autofs_kill_sb() 719bd33ab359c ovl: fix UAF in ovl_do_mkdir() debug print 90d51095371d9 vlan: ensure sufficient headroom in vlan_dev_hard_header() 43e3c3773b435 net/sched: sch_teql: fix shadowed err in __teql_resolve() 39de64a284fe5 bridge: check llc_mac_hdr_init() return value in br_send_bpdu() cb3528ad8bb46 llc: fix skb UAF and leaks on llc_mac_hdr_init() failure c517e8755960c gve: DQO: reject TSO packets with an out of range MSS 4de58b27f3ada gve: fix TX drop when GSO MSS is too small for hw dc9e8964a21f2 gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO c68f415746344 net: flush skb_defer_nodes in dev_cpu_dead() 1993c8745f852 net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails 24ca932b612b6 tipc: Fix a data race on mon->peer_cnt in mon_timeout() a9b968e42690d net/smc: fix UAF on lgr list traversal in smcr_port_err() 670f303169d2d net/rds: size a connection's path set by the transport it ends up with fe6c8ea8bfd5d nfp: hold IPsec RX state under the XArray lock e78b95cfd5df2 net: libwx: fix races in Tx timestamp handling e461e9e495643 net: wangxun: implement soft quiesce for PCIe error recovery 671a68654a9d3 net: phylink: record the PHY only once bringup cannot fail 0f87720c7e4bc tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() f306e465b5a20 net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq aae2a1f1e3a0a net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 9173f503c9591 bpf: Zero-fill other CPUs when BPF_F_CPU creates a per-cpu hash element c664cca8f622e net: emac: move setting of netops to fix crash 062b56c0986fd net/sched: act_ife: validate metadata length before decoding b07bea42bf590 macsec: initialize SecY before registering the netdevice fa1bdd972dd76 bonding: crypto offload enabled, non-offload slave failover, rekey failed eabd0ae361176 drm/imagination: clamp freelist reconstruction requests 930318290d850 net: xps: reject an out of range traffic class ff022fd9d0f02 vxlan: use one headroom snapshot for neighbour replies 63c5e48d6f7f5 ip_gre: Reject enabling collect metadata through changelink 027d9debeaede net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT 81c38c7426519 net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr 780f373ae5d04 net: bcmgenet: do not skip WoL power up on GENET V1 006c7cce35e35 net: bcmgenet: initialize u64 stats seq counter for all queues eeed00e40e24d net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems 36c07127924f1 net: ipv6: keep room for the mac header in dst_dev_overhead() 298673397ea3f net: stmmac: clear stale buf->page after recycling on skb build failure 8b7aae8f0e96f tg3: use random MAC address when tg3_get_device_address fails b3373c33c7b7d bpf: Fix BSWAP 32 and 16 on MIPS64 1bd91670966a7 bpf: Fix immediate JMP JEQ/JNE on MIPS32 ee17e21bc4964 net: mdio: realtek-rtl9300: fix RTL931x C22 extended page selection c8dad411b82da net: dsa: mv88e6xxx: 88E6191X and 88E6193X have no PTP 06f8310798ece vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets d7f4742268094 net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() 43f6b647f2095 veth: manage XDP program pointers during channel resize f329d42423089 net: bcmgenet: stop Tx NAPI before disabling the queues 7cdbc5768b932 net/sched: act_gate: budget the per-entry list in get_fill_size 2450a38836723 nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() 4262b12277a3e nfc: llcp: fix slab-out-of-bounds reads when logging service names 0a0412745c86a nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() 9e51b24f684ff nfc: llcp: fix -ENOMEM on connect with zero-length service name a86987d03a4d3 nfc: st21nfca: validate ISO15693 inventory length 0b01a946b0f23 nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure 779e13c0fa7fa nfc: virtual_ncidev: Add missing ioctl compat handler 6c488ec3e0106 selftests/nci: Fix out-of-bounds store on thread join 1aefc05d7bcf5 selftests: nci: Fix uninitialized family ID on missing attribute d5e1c92d09cae nfc: llcp: Fix race condition in accept_queue lifecycle ead3daa724a81 selftests: nci: Correct pthread_create return value check 320a2ff49bdce nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() 7b996cc06dda5 nfc: st21nfca: validate received frame size 6a17a5806e9fc nfc: nfcmrvl: validate helper command length before pull bb375f3c5990e bpf: Reject dev-bound-only programs on other devices 0b160417826d2 net/sched: fix potential stack infoleak in em_text_dump() 491aa3167ae02 eth: fbnic: Avoid rounding zero ring sizes 212d21e669212 net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test ec351284780a8 net: stmmac: size the RX buffers from the frame length, not the MTU fa47a0487b48d net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K 849cb2ba03418 net: stmmac: selftests: Capture all packets for vlan checks adff25039a1f5 net: stmmac: selftests: Check the dev->features for S-TAG offload testing ca0f523acf36c net: stmmac: selftests: Validate EEE based on the actual LPI timer value 2efadd72b95f9 net: stmmac: selftests: Support running selftests on DSA conduits 35bf3b23c9a87 sctp: hold asoc or transport before mod_timer() in timer handlers 25e31481f739d net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports b5b3fcb335e09 net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports ee1df60a0d0e8 firewire: cdev: fix back-transition for iso_resource_auto client resource ba7d627dbc67d bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc 0b6b2bb9b90ad bpf: Reject pkt arguments in mutating subprogs 84ebb991ae985 bpf: Fix bpf_sock context code generation 39ffceaddb107 bpf: Fix bounds check for skb-backed dynptrs 37dbcadd7683e thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds 1aca79e5cda2e PM: hibernate: Freeze kernel threads after image preallocation 61ee40a3f2c0d net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure 45b4701ab2626 genetlink: report the real command id for dump-only ops in policy dumps 986ec9602ee8c net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error 3001a103a367c net: spacemit: clear TX descriptor on fragment mapping failure c593f38e1cdb9 s390/debug: Fix NULL pointer dereference in debug_info_copy() b42ca15649e73 s390/debug: Do not register views for failed static debug areas 9cb99c37d03a4 drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable b6c0c757c6589 tg3: clean up PHYLIB resources on probe failure d1b5fd969cc53 udp: remove a disconnected socket from the 4-tuple hash table f7b3d38dd7c47 udp: relocate a connected socket in the 4-tuple hash table on re-connect f9722746df13a ipv6: Fix dst leak for uncached routes. 05b442709bd52 net: usb: sr9700: include receive overhead in the length check 0ad83979a0fd2 dpll: use exact lookup for reference sync pin id 3950b9ec5e125 net: don't require the hwtstamp NDOs when a PHY provides timestamping e03e77071e75c ipv6: Prevent rt6_insert_exception() for dying fib6_info. 696baf868e230 octeontx2-af: Fix memory scaling limitation in SR-IOV mode 89a7241fc7ecc bpf: Reject non-negative offsets in stack_slot_obj_get_spi() 9240fc1f2cde5 Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() b29b70bfa1213 Bluetooth: btintel_pcie: validate device-supplied DMA indices ad0d2d4ada513 Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough c777431395a4a drm/xe/gt_throttle: Report power brake as a throttle reason on CRI 7f9ba0b023876 ovpn: reject invalid peer VPN addresses 57fd86c10acbd ovpn: reject multipeer peers without VPN addresses 47dd2b6819118 ovpn: reject duplicate peer VPN addresses 2b09b0b13a8be ovpn: always unhash old VPN addresses before rehashing 72bd1bea37ea2 ovpn: replace bind when clearing stale local source e283009151d3d ovpn: replace bind when learning local endpoint 400f3cd8ff053 ovpn: validate peer state before caching UDP dst 2149f81ffd4c6 ovpn: track UDP socket route key for peer dst cache 5cdb2076fbe2b ovpn: skip UDP source validation for unspecified addresses ae754c2b702a9 ovpn: preserve IPv6 scope id for netlink peer endpoints 9b796251c3cca drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach 8910994f4d12f pinctrl: tegra238: Fix register bank for AON pin groups 49762b1b881b9 drm/virtio: sync shmem backing on guest-bound transfers bed76f2c0f9e4 Revert "drm/virtio: Allow importing prime buffers when 3D is enabled" 7c8deb77d05bc drm/virtio: release the GEM object on virtio_gpu_vram_create() errors 02df4e24dc4c0 drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() 749d8bb964b34 drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() f75066c79d1ee drm/virtio: fix object leak when drm_gem_handle_create() fails 1301a1292c674 net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget 86a0e945fb645 bpf: Check params size before reading reserved fields 9d4be026bdff2 net: usb: catc: bound the RX packet length in catc_rx_done() 4105870a4b8af bpf: Bound ownership depth through local kptrs and graph roots b34ae23eb7818 net: allow IFLA_INET_CONF messages when NLA_F_NESTED unset ddc34cc0834c8 sctp: avoid livelock while updating retransmit path ce93f8561f87a eth: fbnic: Handle FW mailbox completions flagged with an error a969db6548a1b eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox 4f4b767ffea76 eth: fbnic: reset num_napi when the napi vectors are freed 1fb569cf3bf97 eth: fbnic: use the Rx queue napi pointer to find the napi vector 16ff1023213cc eth: fbnic: Handle maximum standalone channels 4ca1503491f1f net: ethtool: keep rtnl_lock for the ioctl self test b0afb7c7ca272 ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). 0fdb944d4df02 net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure c20f755338ca2 net: gue: reject invalid REMCSUM offsets 650787233c2fd net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure cdf9203b168ab drm/nouveau/disp: don't reject HDMI config on cards without SCDC b862c332bfa81 drm/nouveau/clk: don't clobber reclock status when restoring volt/fan 391517da7fd54 drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update 253a27ae7afee pinctrl: qcom: ipq5210: Publish the OF module alias 9f80910a87a9e ocfs2: make ocfs2_calc_xattr_init() return void 9b583795feb51 arm64: io: Reject non-user protection in ioremap_prot() 0321f3c891f3a netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name 5ad109938f0d5 ipvs: revalidate ihl before icmp_send 70a725baef910 netfilter: nft_synproxy: use the family-aware checksum helper 8137a39e08e83 netfilter: nfnetlink_queue: hold nfnl mutex in event notifier f26652e99f519 netfilter: flowtable: publish HW_DEAD after worker is done e2ccbbb270f87 gpiolib: use of_node_name if line-name is missing 06b78f3c925fe ipv4: fib: fix data-race and stale genid check around nh->nh_saddr 0d449edab5b17 libbpf: Reject truncated ldimm64 CO-RE relocations 8e4cbcca1e0a2 bpf: Restrict CO-RE poisoning to relocatable instructions 091b40845bd3c bpf: Preserve packet pointer class displacement in regsafe() 56dc616d7a1f7 bpf: Make post-verification instruction rewrites killable 688fd49e2dfec net/mlx5: LAG, reload IB reps of LAG master before the rest efa4cfabced0f net/mlx5: SD, unload reps on shared FDB create error path bd4dcb9955746 net/mlx5: devcom, Base component size on linked devices 5d2f913258ba7 octeontx2-af: use seq_file for rsrc_alloc debugfs ab14b5bbb871e net: pcs: rzn1-miic: Fix config array initialization 2f898f9ec7c73 net/sched: cls_u32: fix manual hash table handle IDR aliasing 4bab07f7b74e5 eth: fbnic: Fix payload page pool error cleanup 87ce4b53b7436 bpf: Skip unsettled links in link iterator 3c1e0a4bc156b xsk: Use a 32-bit compare in xsk_map_gen_lookup 3cdc6e12ff79f fs: avoid repeated scans in evict_inodes() 9a86ff5e1bf32 netfs, afs: Fix symlink reading 71ab3046a73b9 netfs: Fix netfs_read_gaps() to use separate sink folios 5af61cd2b5958 s390/cio: Guard PMCW field accesses with dnv check 7b0ae882b8618 s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points 1b8e7661d07bd s390/cio: Fix cio_update_schib() to not cache invalid schib 704f1ce7fe7f4 s390/pci/docs: Fix sriov_numvfs attribute name 09d610f7a9720 scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume() 2ef65974d0401 selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode 03ced4687fb79 Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel edcb84ee607a9 Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() 800c28b0c25d0 Bluetooth: SMP: reject Security Request over BR/EDR 7ed50d2b2fc0a pinctrl: sunxi: A523: fix voltage withstand encoding 3ddf8383b5445 scsi: sd_zbc: Reject disks with too many zones ca688bb207957 scsi: block: Fix zones_cond out-of-bounds write on zone report e1ca4e3a380ef squashfs: Add dictionary size range check to prevent shift-out-of-bounds bb79f2334ab8d KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP 33135c7653f62 KVM: selftests: fix steal_time for arm64 with host page size > 4K 7a6b9d829f13a KVM: arm64: Match hyp text by physical address in fix_host_ownership() 166d27b5908d8 KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0 7b5e99d286747 KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 f0cd8ffae092c KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure bae3e4493046d KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() 0895f04f763dd KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save 318354021fea3 KVM: arm64: vgic-its: Free the caches when GITS_BASER changes f3514b599eeae RISC-V: KVM: Fix perf-backed counter accounting across stop and read ca5f939b49b58 RISC-V: KVM: Report snapshot write failure to the guest c4ff5b02120c5 RISC-V: KVM: Preserve firmware counter value across stop/start 6da4665026213 KVM: riscv: Fix NACL hfence entry update order 650b2606b1343 RISC-V: KVM: Fix the conversion between vsip and hvip 0b69a3c24a06c HID: bpf: fix __hid_bpf_hw_check_params report length ee25833f037fa HID: amd_sfh: Validate PCI BAR size before mapping f3a0ceb68003a pinctrl: generic: serialise pinctrl_generic_dt_node_to_map() 0602f3e9eebda pinctrl: meson: Fix typo in s4 group name d7cd5ebe13989 bpf, arm64: set up the frame pointer for the exception callback cb3f6c0c211e9 bpf: Fix u32 overflow issue in map batch operations 8894205419118 bpf, sockmap: Fix self-redirect copied_seq double-counting f101602415fb3 bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk cba54d142c43e bpf: Fix out-of-bounds read of rtt_min in sock_ops 4e48fe9b1c779 bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() 413f72ce8c829 bpf: Allow terminal gotox instructions 032d037c42c05 KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() 45f3f248297c4 HID: elecom: fix bus type for M-XGL20DLBK 2b25f11ec52ea HID: winwing: fix use-after-free in force feedback teardown 86ed8ca0bb3db HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio ee7246bccb9da tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context 2534a5e5d360c bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() b8fa56722e9c4 bpf: Fix divide-by-zero in btf_struct_walk() ff94a50f1eb14 selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc fca71ead7a202 bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL 707567d2edf6b bpf: Fix bpf_skb_change_tail wrt csum partial skbs 116bba758533a s390/uv: Prevent potential out-of-bounds read 91867f46cfb6c s390/uv: Fix loop condition in uv_find_secrets 90bd832b2bc36 KVM: s390: Fix race in _destroy_pages_crste() c958f04988912 KVM: s390: Fix potential races in dat skey functions 75867536746ab KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key() 7a33007b95c89 KVM: s390: Add missing srcu in kvm_s390_set_irq_state() d0e3bf633f058 KVM: s390: Fix IRQ injection with SIGP Stop and Store Status 94c43c7df4643 KVM: s390: Fix _gaccess_shadow_fault() 66db037037f67 KVM: s390: Fix dirty marking in adapter_indicators_set*() 63d2ecad81aa5 remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage 0b1eebd359685 drm/amd/display: Remove sink usage from DPMS df064aea8f239 ALSA: hda/realtek: Add StarFighter HDA SSID 84332282a7ea9 ALSA: hda/realtek: Limit Star Labs internal mic boost d55c308af33f9 drm/amd/display: Atomize IRQ register read/modify/write ops Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_7.2.bb | 6 ++--- .../linux/linux-yocto-tiny_7.2.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_7.2.bb | 24 +++++++++---------- 3 files changed, 18 insertions(+), 18 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb b/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb index e808315955..49b25c4f7f 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb @@ -15,13 +15,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "e1ac915949f84df75ab979843a0c16c0355d5d60" -SRCREV_meta ?= "409e37cf5194730ea597a1c18f3475c7e5661f4e" +SRCREV_machine ?= "df7d59ac69dd0ac9cdf01d6dfe564b93aba28eb2" +SRCREV_meta ?= "151b1edb05843ae2225eedce202a0cca1419b7b5" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-7.2;destsuffix=${KMETA};protocol=https" -LINUX_VERSION ?= "7.2.8" +LINUX_VERSION ?= "7.2.11" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb index 67580a5aca..b1aee530f3 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb @@ -9,7 +9,7 @@ require recipes-kernel/linux/linux-yocto.inc include recipes-kernel/linux/cve-exclusion.inc include recipes-kernel/linux/cve-exclusion_7.2.inc -LINUX_VERSION ?= "7.2.8" +LINUX_VERSION ?= "7.2.11" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -18,8 +18,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" -SRCREV_meta ?= "409e37cf5194730ea597a1c18f3475c7e5661f4e" +SRCREV_machine ?= "7684a4089e8abbbee88c7692655575402c59a80a" +SRCREV_meta ?= "151b1edb05843ae2225eedce202a0cca1419b7b5" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_7.2.bb b/meta/recipes-kernel/linux/linux-yocto_7.2.bb index eb14bdc17f..0fd97a3fdb 100644 --- a/meta/recipes-kernel/linux/linux-yocto_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto_7.2.bb @@ -17,25 +17,25 @@ KBRANCH:qemux86-64 ?= "v7.2/standard/base" KBRANCH:qemuloongarch64 ?= "v7.2/standard/base" KBRANCH:qemumips64 ?= "v7.2/standard/mti-malta" -SRCREV_machine:qemuarm ?= "8d67eedc20fc5238eb546ececf7eef7f5dce22db" -SRCREV_machine:qemuarm64 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" -SRCREV_machine:qemuloongarch64 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" +SRCREV_machine:qemuarm ?= "70fb9bc7222f957d2f1ae2287af7bd2e24a9b05c" +SRCREV_machine:qemuarm64 ?= "7684a4089e8abbbee88c7692655575402c59a80a" +SRCREV_machine:qemuloongarch64 ?= "7684a4089e8abbbee88c7692655575402c59a80a" SRCREV_machine:qemumips ?= "ab0e33fefa2a3d0366b2b8deb7cfb3be2d8dc436" -SRCREV_machine:qemuppc ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" -SRCREV_machine:qemuriscv64 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" -SRCREV_machine:qemuriscv32 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" -SRCREV_machine:qemux86 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" -SRCREV_machine:qemux86-64 ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" +SRCREV_machine:qemuppc ?= "7684a4089e8abbbee88c7692655575402c59a80a" +SRCREV_machine:qemuriscv64 ?= "7684a4089e8abbbee88c7692655575402c59a80a" +SRCREV_machine:qemuriscv32 ?= "7684a4089e8abbbee88c7692655575402c59a80a" +SRCREV_machine:qemux86 ?= "7684a4089e8abbbee88c7692655575402c59a80a" +SRCREV_machine:qemux86-64 ?= "7684a4089e8abbbee88c7692655575402c59a80a" SRCREV_machine:qemumips64 ?= "ab0e33fefa2a3d0366b2b8deb7cfb3be2d8dc436" -SRCREV_machine ?= "48b9e9647133d8d71348e0ec1f9da415abd14b8a" -SRCREV_meta ?= "409e37cf5194730ea597a1c18f3475c7e5661f4e" +SRCREV_machine ?= "7684a4089e8abbbee88c7692655575402c59a80a" +SRCREV_meta ?= "151b1edb05843ae2225eedce202a0cca1419b7b5" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "9a66fdc0d7fd55f54235524a73435af99051e46f" +SRCREV_machine:class-devupstream ?= "a2de78ee6ed8bf8cd99d177c74865a6e8c3cb6ea" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v7.2/base" @@ -43,7 +43,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-7.2;destsuffix=${KMETA};protocol=https" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "7.2.8" +LINUX_VERSION ?= "7.2.11" PV = "${LINUX_VERSION}+git" From patchwork Thu Oct 29 03:25:20 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102298 Received: from mail-qt1-f181.google.com (mail-qt1-f181.google.com [209.85.160.181]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4410.1793244341761026234 for ; Wed, 28 Oct 2026 20:25:42 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=yow8eUvj; spf=pass (domain: gmail.com, ip: 209.85.160.181, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qt1-f181.google.com with SMTP id d75a77b69052e-53381e53b80so19777251cf.1 for ; Wed, 28 Oct 2026 20:25:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244341; x=1793849141; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=AvKaGz1bU52maWNaXcSzy+PkP6Lpbu/huxz5JXyWUmo=; b=yow8eUvjTn80PHSChjDgvTWNVSExQvRQO5AEgblsicr1alyONh5q8PwjtRoGSW9+uM pnHPQ2c96UtHrl17U0503sRSZeHxmWEVX0fsYM5Xcdp5LUYKUASCNOrMrUov8Iag3ppC lro7BO96WCXJjVIgNvtHKvYlChkfNUgj2If5nA3dVKYi1pB8H7w3osAXSj7XLKdEZKvE 7CrbhT+QmMrrGe6822q7Qc2ujLdwyfHZVjuytkWqOC8wVT0KeHADCIA495GzrqLokcrn wBmkYiLm9yIUWs9ugEP+0zudrfjkX0/R5Jy20YVQlOSiAexhPmdztezDpYS6n2aKqg0a ZieQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244341; x=1793849141; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=AvKaGz1bU52maWNaXcSzy+PkP6Lpbu/huxz5JXyWUmo=; b=KvhR+wKEV8x9hX22WD/ckON2QDYLsmw0gs8xbOlKA0Ek9aaLAa+1lGRvULddDPuODH VzTJA+fSNFii4EMZtNHEqIrvj4dpjwWQrgJcKzvHigat0ODn31nMw1f5pL06jb7ci7iR t7mbxE7DwvkhHqLRLaJrPUNHDhWusnv3/8aH6Dj0Mk++O7Jft0uNXVLZH45Jd5RyhoP7 YKXSfSodHOpdFmUna+my6crNsGCpYivmCMpEkOGuoo1AAotq/2kd37uJXOkyvkFwszMc PneYSnihRMhLyeoo1PyISNAo/jDDqWmJp+BoTvFGGGZRIp2QDUX/Xr90kQC9R7irmENj 6jag== X-Gm-Message-State: AFq9FYIx4feZFWCVTJGqCrcillnxFpvFiOmpLwa+sEbfrtg1kzjCoxpC OUQYLq5yydWuft9KS/lkOB5WIlJmRsEW81XzFPXc/afViwBlCxq4WNtH4VuUbr8g X-Gm-Gg: AYBFou1f2B5fcR1FUYNS9hzAWrbJ/Y+KjQgdlYNnc4nEztk+Dnwl3z5KT3lrEX+J/+E XotT8j8MfcAIeVSRV5hHboOUtOrmvyrnfhqI9FjGKpLkQucNdqSaizxexZ8Ej0KImvo+hEdYo7H cRJ9zibmwp2LGzSEP/FYXjqPEDzspBuoaNCNeMVQOie6I9fLekyzVBCY/OsbfJB9Z6TSH3cP6wM zBpv6I809CXe6QbC9aQ2aNNos850VcLBbWSBwWt0D5M0J51ddT/o3L9c+YQ7+Z1vquEM18JlEw9 /i4OC3QU6soSRVwp2awZYDQ5h5DU83J+ujIVQN1Fc3nVg61uT6CwK+6S2Hbn3rBxtidoPwUqJBu vhQBGbE/it8Ad5aKy3nWAmWlkTl3AVbrIMLGMlkhgzgElxfam0e02MNIqXBayZblYn0YY0Gdatf iNsi3OHSjpRxkPFKlLGQweebgp8VEwMVfd8MUGq4ZQH9tAFhHO90U8o5paUKWd20Br5VdFQdEO4 nZokUFjHVvEc5URtS0X4+RwrvadC34m94RTqYQGfSKOkvf2FZkRSDwuHMO5pvTY4UWp0CZCAtqk QscMoFoUNQ7DQJUAwuOOcylua6SPCzwYVFhr4feI/j0GpOl1tjd58WsXSErC22BtF+P2hHjTFzv /cRddrmKfVS0Vn+xDv8MVlBM19TihqXx1M3AdiNIt5WYFI+x/DuYbg2UPGja9ZLOucP1cfApuDf LAfd0oY+lbAWDxEpsHmPG6q54LtnEgie6vIdKcbEK4C3FpHyfFhrnPlzqoFaOApwkPnLY= X-Received: by 2002:ac8:5a16:0:b0:536:92a8:aa99 with SMTP id d75a77b69052e-53fcd38bc3emr69467121cf.71.1793244340372; Wed, 28 Oct 2026 20:25:40 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.37 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:38 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta][PATCH 05/11] linux-yocto/6.18: update to v6.18.59 Date: Wed, 28 Oct 2026 23:25:20 -0400 Message-ID: <20261029032527.3150782-6-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:25:42 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248862 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: 1253a6aa5d104 Linux 6.18.59 9a5d65b06dc33 smb: client: drain outstanding I/O before truncating on O_TRUNC open a4c584ea79d95 ice: fix crash in ethtool offline loopback test 9f158a9b10e1e ice: fix broken Rx on VFs f4a25618c3683 ice: switch to Page Pool 0026267561bc6 ice: drop page splitting and recycling c8bd04221f6a8 ice: remove legacy Rx and construct SKB 4d143608a0445 smb: client: fix data corruption with concurrent writes and O_TRUNC c027f8b429dbb vsock/vmci: validate packet source for connected sockets ecd7ead4bf05e ipv4: udp: Create exceptions before socket matching 6cd829de69efd vsock/virtio: validate packet source for connected sockets 569c34a35fbc9 virtio: set skb owner of virtio_transport_reset_no_sock() reply f320b85c90fe5 workqueue: Fix unbound pool lifetime for pending pwqs 299912bbc6455 workqueue: release pwq pools by pool type 94d13387b96e5 io_uring/cancel: don't spin on local work the task can't run 7123c79206e49 io_uring/cancel: move cancelation code from io_uring.c to cancel.c 76cb14d6f1433 io_uring/cancel: move __io_uring_cancel() into cancel.c 755e88e78beaf io_uring/cancel: move request/task cancelation logic into cancel.c de477667b890b cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() 242c7b3a71ddf smb/client: refresh allocation size after duplicate extents 8d891c218016b sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ 6ac46ae5ac561 drm/amdgpu: free the userptr ranges when a CS fails after parser_bos 2058a1fe791bb tracing: Keep the predicate limit separate from program capacity 07180a910e9d0 tracing: Fix ignored return value of resize_buffer_duplicate_size() a425e1c687595 sched_ext: idle: Respect task affinity in restricted CPU selection dfcfe2874e7c1 drm/i915/dmc: Harden DMC firmware payload parsing c8b1a48404679 ntfs3: free the sbi after a grace period d977b979081ef fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super() 129b0a64fe9ac ntfs3: fix double free of sbi->options->nls and clarify ownership of fc->fs_private e0ab437276575 ntfs3: fix use-after-free of sbi->options in cmp_fnames a1647b653549f scsi: st: Fix use-after-free race between st_remove() and st_open() d2f591e6c7304 smb: client: fix multiuser mount with krb5 d96f3365ce61c smb: client: fix heap overflow in cifs_do_set_acl() 45e60747a9db2 net/sched: cls_flower: validate mask pointer after nla_next() 898cb4f2e12a5 ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in d8c450ad0d089 ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION beba2ef6f66a7 ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION a9f14ea73e82d net: psp: do not inherit the Rx association on clone 8243d587a081e net: bridge: mcast: don't truncate the port group walk on teardown 80d5db1686b05 ext4: free the sbi after a grace period cad63a7798d6a ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture c17cc2027773e futex: Fix mm reuse handling for FUT_OFF_MMSHARED dce8f7f03a47b drm/amdgpu: keep the eviction fence until the last handle is closed 0caeefed99b37 KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes 7786dde1b5001 KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots dc29c0478b856 netfilter: nft_byteorder: remove multi-register support 61f376654fb9d drm/amdgpu: Fix VCE 3 ring align_mask d49fa454c2869 KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc 5dac5c7ba8f5f ipv4: avoid divide by zero in fib_rebalance ba5001db9bb23 s390/pci: Fix leak of uninitialized kernel data in SCLP report 34fa3607b7604 s390/ctcm: Prevent XID null dereference 813a72beaa5d3 page_pool: keep frag_offset aligned for odd-sized requests 40507f59f230d sctp: validate chunk length in the inqueue parser b8b7d28dc2b74 tipc: protect node reset trace dump with node lock f7e82f72b90ce workqueue: Annotate cb_lock nesting when draining a dead BH pool 6b26b3d39904c workqueue: Use raise_softirq() to trigger softirq in irq_work handler b6a0e5faf0dca netlink: specs: add missing mask attributes for conntrack dump 62ed32a1d4499 netlink: specs: fix the conntrack filter type e20e6b14e3b5c xfs: fix zoned write iomap flags assignments 19a1a22029ad3 xfs: fix capability check in xfs e5456dec79c71 xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf 8f2efa742f4cf net/iucv: fix the recvmsg window update 3cdd8b1abddeb mac802154: fix data race and NULL deref on local->assoc_dev c8922e7afb058 dm-integrity: require stable writes for internal hash modes fc512700f1413 dm-integrity: fix infinite loop on discard with large tag size 40791f07bad61 dm-ebs: fix incorrect device offset check in ebs_ctr() ac5d887ab9359 dm-crypt: fix a tiny race condition in crypt_dec_pending 73df2ff409f3d dm cache: fix issue with background work locking de9e8e587c07b dm cache: fix demotion stats in passthrough mode 04d020b3d0b58 cifs: don't update i_size in cifs_do_truncate without a cached handle 2f9dd8214d421 cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children 86814e5370068 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) c1804ef016392 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) f641066b0ddcd wifi: p54: validate firmware record lengths 09c7cce2e59e6 tracing: Fix hist trigger timestamps for buffered events 813e18881c647 tracing: Do not initialize tracefs work if tracing is disabled a866a8a753922 tracing: Check operator stack capacity before pushing 7c0c6d88a232a tracing: Take trace_types_lock when dropping the buffer_meta reference c4918c28b1baf tracing: Fix the shift out of bounds in the log2 histogram modifier 3a3c4503ba1b4 drm/xe: Bump LRU for external objects on exec and rebind ef82b4d5cb4a3 drm/i915/dmc: Add sanity check for DMC load address 22fd3f760845f drm/i915/cx0_phy: Fix ARL-S host bridge detection 96d9996e5dbcf drm/exec: don't immediately add prelocked obj to array of locked objs 07002a326c7cc drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES 652b1f26125fe drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr 05507b9b19f95 drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang 6cfc4a25d4f02 drm/amd/pm: add zero fan stop temperature support on smu 14.0.2 55a65ef61e277 scsi: libiscsi: Validate the task named by a management response 7215a69b6456f scsi: libiscsi: Validate the ITT reflected in a Reject PDU 6cadfa6f1f589 scsi: libiscsi: Reject a negative task index from parse_pdu_itt 1d91ec793d6c8 scsi: xen/scsifront: Check for a NULL shadow entry on a backend response 2effbe746452c scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies 029770f5baded ring-buffer: Fix false warning in ring_buffer_map_get_reader() 2f1248b728b56 ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx() 8512d0312cc0e ring-buffer: Do not show buffer_meta for CPUs without a buffer 29469305a9390 perf: Update cgroup time when rotating multiplexed events b67fb3955b07d perf: Track the perf mlock gift separately 5d476bb76b7d7 i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() d2cb4d7451491 i2c: qcom-cci: Fix HALT_ACK reset request being dropped 1f36e4ddd05d5 tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields 13735c2cf4849 tools: gpio: fix building from the top level with O= 77a63d1b813b0 sctp: revalidate output stream after association connect wait 6232e93c3036c pinctrl: amd: Clear S4 wake bits when firmware has _AEI 5f23e4e3a31da net: rds: fix uninitialized trans dereference in CM event handler 2465d27ef90de net/sched: fix use-after-free in __tcf_action_put() 568323cddd54f lib/crypto: poly1305: Use memzero_explicit() in poly1305_final() ae6584eaaa4f1 lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state 492c10662177f namei: test for a negative dentry the way traverse_mounts() does 4586ef24ce390 eventfs: Free the eventfs_inode after an rcu grace period too 2e10b8a74f55b pid_namespace: make zap_pid_ns_processes() freezable 952501bfc6e5e fsnotify: prevent mark additions during connector teardown d00d5f534a823 KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry b77e9622bbade x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context 811fb6d0b0760 watch_queue: Fix note pool publication race in watch_queue_set_size() 2b54d3c971a1e unicode: free the map after a grace period d518fc5cced10 bootconfig: give the footer size static_assert a message 1a177064f501e autofs: ignore notification errors from a replaced pipe debb0f36bfe3d afs: free the super info after a grace period 5078c91f5c84b accel/rocket: search every core slot when a core is removed 7249a442ab261 PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV 7595bacee48bc printk: Postpone kthread startup 3eb08f09bfb36 perf: Fix perf_pmu_migrate_context() leaving events behind d0ffb0dc01166 gpio: mxc: fix race between gpiochip registration and IRQ domain setup 238f93bd1d063 gpio: mxc: fix wakeup_pads bit operations dab5c228a8468 gpio: mxc: use BIT() macro 911f606dd05d7 gpio: mxc: fix both_edges bit operations 261802c14e1a3 gpio: mxc: fix race between chained IRQ handler install and probe completion 78189c0e35abb gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths 1c9fcfca51e3c calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() e221a7d6f7c91 net/ipv6: Introduce payload_len helpers 40c04abcbc34e net: bcmgenet: unshare the skb before writing the control block bdd55b8a8acbf netlink: avoid hashing the network namespace pointer c9fb89246d992 scsi: libsas: Fix SMP IO deadlock during HA resume fbb5a6f0b06fb tracing: probes: error if BTF is required but unavailable 4c42ce499ce4b pipe: preserve existing fasync readers on writer setup failure 7780f9e828da0 samples: pidfd: fix userprogs typo 04d4571c00db6 ocfs2/dlm: Protect the recovery list during debugfs reads de3923caf0772 drm/panthor: fix immortalis condition 9b07828b133b3 scsi: target: iscsi: Fix race in discovery auth updates 71e12d43ef37e scsi: st: Save the visited block for the partition the drive is in e3bf250a2fda6 nios2: fix __wsum type degradation in csum_fold() e4d45c651d19f spi: tegra114: assert CS GPIO for every transfer in a message 21f41b6daf0db drm/xe/oa: Zero OA buffer at allocation 6046bb9cb2859 drm/xe: skip eviction of a BO with no resource 8d15821aa2de1 ASoC: amd: yc: disable MSI on resume efe1393e783f2 net/mlx5: HWS, fix flow meter offset within its bulk a3516f0704b96 net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool 79071b67182e1 accel/rocket: clear rdev on device init failure 06791594274f8 netlink: reset skb headers before unicast and multicast filtering 4a9fb8122a19d regmap: Drop map lock during cache init and exit bae057687f615 regcache: Do not overwrite error code when finalizing cache after error b498b70a8174b regcache: Add ->populate() callback to separate from ->init() 0a9a172d4cbfc ASoC: nau8822: Fix the 128x oversampling switch bits 9a87917b8f3d5 ASoC: wm8978: Fix the 128x oversampling switch bits 9b1a72628f125 ASoC: max98371: Fix the Speaker DHT Min Volume bits 384e00dd8908b ASoC: pcm3168a: Fix the DAC zero flag polarity bit db3a7a70cc214 ASoC: cs42l52: Fix the NG Type Switch bit 856ecf3c600af ASoC: cs42l56: Put the Limiter Cushion control on the limiter register 4528f8d38d893 ASoC: stm32: spdifrx: fix synchronization state check d3239b8f4fc46 ASoC: Intel: avs: Reset the stream unless it is already prepared a7c7d0ff87637 net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure c2c5359ef2c33 vsock: treat TCP_CLOSING as once-established fb5fb74fb4fff gpio: nct6694: Mark the GPIO controller as sleeping 6b03e354526f6 drm/vc4: hdmi: Move packet RAM enable to PM runtime 47b725c17dcb2 pinctrl: sunxi: dt: do not accumulate npins across probe attempts 9d0508bcf6743 pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 2ac0256a28e15 power: supply: core: prevent unregistering a power supply while a callback runs dda0df37aabd8 power: supply: generic-adc-battery: Fix temperature IIO channel conversion 06e3e6dc2688f tools/power turbostat: Fix add_counter issue if > 24 counters. f573d257aad5a tools/power turbostat: Fix PMT error path fd handling b2af180dbc5f5 tools/power turbostat: Fix CWF PMT off-by-one e2c86984ccc0b tools/power turbostat: Fix fd_perf leak on reset e76e6284de2ba pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 54e54a690bf13 pinctrl: qcom: qcs8300: Fix intr_target_width f47ce27af80b8 Drivers: hv: Don't reset VMBus connection state on error/exit paths 2b561786c9076 x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() 7141331f2d245 Drivers: hv: Avoid infinite retry loop in init_vp_index() c3e5854b2e8b6 power: supply: ds2780: Fix ds2780_get_capacity() returning raw value 7de3a5a49410a power: supply: Fix maintenance charge table kernel-doc ea9c08c33d57c ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition 0992d03e55e5a soc/tegra: fuse: Add missing newline to APBMISC error message 07fa8baa78d64 kho: free phys_bits bitmaps using free_page() in __kho_abort() 96d2abaa2e328 i2c: qcom-geni: Restore the source-clock selection policy cd3c05651d04b rose: purge rose_neigh->queue on final teardown 6b450cf6dd419 ax25: bound REJ-driven fast retransmits with the existing N2 counter c7bdc88b27cc6 ALSA: ctxfi: Use correct DAIO type for da_desc fb5e2dd6565a9 ALSA: ctxfi: Rename SPDIFI1 to SPDIFI_BAY 7fca3600e79e9 ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization b48ebe399b4e7 drm/ttm: fix swapped-out resources never leaving their bulk_move range 2926d88bb7fc4 Linux 6.18.58 2566780c684c9 KVM: x86: Use active memslots for the per-vCPU MMIO cache 517404e157395 ksmbd: fix heap out-of-bounds write in krb5_authenticate() 88c7c3aa8d0ff wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" 5c0940abe76c9 bpf, sockmap: Account for receive queue in FIONREAD without a verdict program 8b7748e9904f8 kho: free chunks using free_page() instead of kfree() a6d84b420a848 io_uring/kbuf: don't charge provided buffer rings to RLIMIT_MEMLOCK e46794d1936ca io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCK 314b72d5e8273 rose: hold a reference on incoming sockets queued for accept() 30ec3025b7715 USB: iowarrior: fix use-after-free on disconnect race e8ed9a1dfc74f usb: iowarrior: remove inherent race with minor number c24d2e190b955 selinux: allow multiple opens of /sys/fs/selinux/policy 93a7f297362de mm/damon/core: fix damos_walk() vs kdamond_fn() exit race 7e54ed8a780c8 mm/damon/core: cancel damos_walk() before damon_ctx->kdamond reset 7ea3850b9ce00 xfs: close crash window in attr dabtree inactivation 4b963fddf470f xfs: factor out xfs_attr3_leaf_init 50144efd23ad9 xfs: factor out xfs_attr3_node_entry_remove 0f39d936a3493 ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec() 265ca3f6524be ima: Access decompressed kernel module to verify appended signature 7d6fd50746482 fat: stop reading directory entries past the end-of-directory marker f6c1e709a4f91 cifs: fix time_last_write stamp placement in setattr/truncate paths 2efa187fd4c9b drm/xe/i2c: cancel the client work on remove 97e736000731f scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock() ee01d48f0f086 scsi: ufs: core: Add a comment block above ufshcd_mcq_compl_all_cqes_lock() e36bac5923a3b scsi: ufs: core: Add debug log for MCQ command timeout d12c834b97c36 scsi: ufs: core: Move an assignment in ufshcd_mcq_process_cqe() a34a230ccea1b scsi: ch: Do not keep references to data transfer element devices 8176ec7e36987 scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ 9e8fc7972b398 riscv: patch: fix handling of bpf-jit execmem addresses 420bf39a22a73 riscv: patch: Avoid early phys_to_page() 08275dcfbfc3b net: mana: reserve RX buffer headroom to fix forwarding performance eececf7c3a679 net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop cc7732b8549ec Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex 638ee6bca1975 sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler 454b67fcc28c1 dm-integrity: validate the superblock on resume 2e25842f0e442 dm-integrity: fix NULL pointer dereference when the 'R' flag is used 0c9d4f9c66ca7 wifi: mt76: connac: tolerate inactive BSS deactivation 22732b0f290ac nfsd: fix all-zero stateid in CB_OFFLOAD for async COPY 0c5595cba7224 mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge 5720bf6b91295 mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP fdf4f011c6004 iavf: send MAC change request synchronously 5aa9efb559174 iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test b030fde644501 drm/amd: Create a device link between APU display and XHCI devices 2d06cb25a497d ip6_gre: remove obsolete ERSPAN PMTU update 903a2ab8325a2 PCI: dwc: Return -EIO from dw_pcie_wait_for_link() if device is not active adc0d81b4d415 PCI: dwc: Return -ENODEV from dw_pcie_wait_for_link() if device is not found e32aa1d85126e RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables 3c03f6f7c6f2d usb: gadget: f_hid: Add missing error code 7820bca8cb207 spi: mpc52xx: clean up interrupt handling Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_6.18.bb | 6 ++--- .../linux/linux-yocto-tiny_6.18.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_6.18.bb | 24 +++++++++---------- 3 files changed, 18 insertions(+), 18 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb b/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb index 9690d312b8..cf6ed368c5 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_6.18.bb @@ -15,13 +15,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "f87ce4ad0a7f6290a8fd961a63fd1653c7308a14" -SRCREV_meta ?= "5978c5f530b91cfb62213506ee6f157897432ba3" +SRCREV_machine ?= "582762f4ac66e79c16b088b3fbb5a67a57a15d88" +SRCREV_meta ?= "cf1eb35154969907fb08e980fe6d1881c97d6a97" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.18;destsuffix=${KMETA};protocol=https" -LINUX_VERSION ?= "6.18.57" +LINUX_VERSION ?= "6.18.59" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb index 939ca9c5b8..d117eb8a20 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_6.18.bb @@ -9,7 +9,7 @@ require recipes-kernel/linux/linux-yocto.inc include recipes-kernel/linux/cve-exclusion.inc include recipes-kernel/linux/cve-exclusion_6.18.inc -LINUX_VERSION ?= "6.18.57" +LINUX_VERSION ?= "6.18.59" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -18,8 +18,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" -SRCREV_meta ?= "5978c5f530b91cfb62213506ee6f157897432ba3" +SRCREV_machine ?= "0aa9c16e54e9a318d97bae25e0082d7807186232" +SRCREV_meta ?= "cf1eb35154969907fb08e980fe6d1881c97d6a97" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_6.18.bb b/meta/recipes-kernel/linux/linux-yocto_6.18.bb index ce4878d0f2..f579bacf7a 100644 --- a/meta/recipes-kernel/linux/linux-yocto_6.18.bb +++ b/meta/recipes-kernel/linux/linux-yocto_6.18.bb @@ -17,25 +17,25 @@ KBRANCH:qemux86-64 ?= "v6.18/standard/base" KBRANCH:qemuloongarch64 ?= "v6.18/standard/base" KBRANCH:qemumips64 ?= "v6.18/standard/mti-malta" -SRCREV_machine:qemuarm ?= "3881e81dea81f6aea84ea28b22899708f3fef903" -SRCREV_machine:qemuarm64 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" -SRCREV_machine:qemuloongarch64 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" +SRCREV_machine:qemuarm ?= "5d45ccb59e84ed3f8071c55eeba225af3d8ff987" +SRCREV_machine:qemuarm64 ?= "0aa9c16e54e9a318d97bae25e0082d7807186232" +SRCREV_machine:qemuloongarch64 ?= "0aa9c16e54e9a318d97bae25e0082d7807186232" SRCREV_machine:qemumips ?= "62ea92a539f58803a222be98b81118403074206e" -SRCREV_machine:qemuppc ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" -SRCREV_machine:qemuriscv64 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" -SRCREV_machine:qemuriscv32 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" -SRCREV_machine:qemux86 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" -SRCREV_machine:qemux86-64 ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" +SRCREV_machine:qemuppc ?= "0aa9c16e54e9a318d97bae25e0082d7807186232" +SRCREV_machine:qemuriscv64 ?= "0aa9c16e54e9a318d97bae25e0082d7807186232" +SRCREV_machine:qemuriscv32 ?= "0aa9c16e54e9a318d97bae25e0082d7807186232" +SRCREV_machine:qemux86 ?= "0aa9c16e54e9a318d97bae25e0082d7807186232" +SRCREV_machine:qemux86-64 ?= "0aa9c16e54e9a318d97bae25e0082d7807186232" SRCREV_machine:qemumips64 ?= "9fb4ff0187c85426f21fd40d4c61b742800f65c4" -SRCREV_machine ?= "cbba43337e083c0ace9a6cf998850eb1d3f4a0b0" -SRCREV_meta ?= "5978c5f530b91cfb62213506ee6f157897432ba3" +SRCREV_machine ?= "0aa9c16e54e9a318d97bae25e0082d7807186232" +SRCREV_meta ?= "cf1eb35154969907fb08e980fe6d1881c97d6a97" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "2ff600d29ee478d0a8d46ef8a58afb5e038fe692" +SRCREV_machine:class-devupstream ?= "1253a6aa5d104312bf0992afacc15220ae35bdf9" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v6.18/base" @@ -43,7 +43,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.18;destsuffix=${KMETA};protocol=https" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "6.18.57" +LINUX_VERSION ?= "6.18.59" PV = "${LINUX_VERSION}+git" From patchwork Thu Oct 29 03:25:21 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102299 Received: from mail-qt1-f169.google.com (mail-qt1-f169.google.com [209.85.160.169]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4364.1793244344392526795 for ; Wed, 28 Oct 2026 20:25:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=U3ZSH5Yd; spf=pass (domain: gmail.com, ip: 209.85.160.169, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qt1-f169.google.com with SMTP id d75a77b69052e-53fdd2fb171so17200121cf.2 for ; Wed, 28 Oct 2026 20:25:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244343; x=1793849143; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=Ut5RwSQ8ff/6VPFEA1zFkk1knYQcPrHPQnEZEP5HE2E=; b=U3ZSH5YdipYHuwY+2Ay9o3fTwZd9fF+cEcvYHHxOIpyvCMyseRVBsToreS/l/Y7DAt vHCP2z9J3s5Nmn9OwCHsMkzmBBb55fq48jSEXdGdi7bCkt8Y4hFIhqmWGP6uOGOa9gnH mahEisOS3+wXEAP7EksepBBdXb4M24A9WFCUenaoNmiO8DmKR1Fadm5cByDqgMP2BqOC YYOUJGMvqNSBxkfRAoNR+qtEHyQaLtwkqkCeB5GNB8AK7/kcmlui9M9jL8atdcLM4UDy sNVi0LLf6Q3qMP38fjYSO4ri1Fm8+7uwvyr19603W9OTlfICZt8e69sV0nV2caisYVrC J14A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244343; x=1793849143; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=Ut5RwSQ8ff/6VPFEA1zFkk1knYQcPrHPQnEZEP5HE2E=; b=XBS9qNKf/jPPQ+q/r4Ey4kmitVoAXmtY7AlDEJgXQPqzltmPX1a/YXZTwUntJel8n2 PE5Rnf+E+ChfyClB8KI86wvZzWUhZPGp5p/Z71NYlr7DJ+brjov31S4B5RJyCiCZ5zyK Vf3/tzy59rwhdCHOC4fwKz1oo04RB6NC3/upEOmXv/1X2Rx7Vdd4FnglXzNk/0gI5vRm dy333ZIhknM0ukyPULAYzt+G6IijR/kMecY2GjB9kZJnkLfuhhB39IIBlJSA3BOYrMiG 7GkdW7nMwM+vKyZ7a/6wcV5U0ld6Jt/KYusJxSbHAfnQjkwoIbX44FhIgHLRrxVRUF6y z/uQ== X-Gm-Message-State: AFq9FYKE8R1TgGcYWphqTEwJp/fqCc/beBJ8msfFID/iJPJQwWms1n94 qbzxrDikji7B33HV8OxuHEIe9s6VWFjQtBIN4E4ndOGuM36hkt2NKNiL15N2WzeP X-Gm-Gg: AYBFou2i0xVMolTQQ/Stj69iGEr88PUEkMiWES6lle53rQH948zk5k0AYy1Qg75ZM4o qyz3ls3CmWFG8kqws6W5P6geSYWNeryzAcycL83QRzOjqyt7UjRuRDoCI240oWoSzgkrRjqTRnn rHVm7fWZmHdExehbstDLUlS92VkGLY1XeshFgHaaWsTHr9Oi/bTI6/P5JOTZXD8HcemXF5K+1ej zXxX0Ki+aumMzz4pS7O0IGjgCry7visY54QLtImPvqahPA/z5QIlFrcPKDFR6OePZYC4F4AYId8 djBffBC4opRRlXIWBFJrBj8Z26xQT7OjJLmsPRU7UlB7/FFBrm5U5nM/gFT7I/ZxsQZbs8AgREG RAuSVq+d8fa1ykjB10kbZCx3fVWBlgh9iX+QAt0A7lh6hyEsqxEXRnR3Q5H/1bGg0csHmLjEHuy rqb1Y2RIckkjYlx2NA2yDTPEirKaGVRo8lDU6J6+wWObp/J3azPQBlDJjnoYATIZhr+Kri9n7vr UiLBkApxSe1XYg+VVuSCUtJnVYumAe+Hu98LrqWDj8V5QZ6/PwwTn24FQ/MRuqdf0L78VLWUcUX 9FJN37rFiTKW5JnT1XNqo8fkrCxKRIHrX1bm7XElbyNph52i88MEvBUiRGFCg1LDmsipVfBmHgV TeNcrehghNP+i3n4OuPiBCYj9IMWb/K+cJWlvGoRkoSd3o3D7Psx9aSrD/sYxSzkJAxottT1Z67 MRDQu+CV9ZUutkVVoOMBkE8vxkTLXF05NdZRx8aYv0R5ctIw== X-Received: by 2002:a05:622a:888f:b0:536:52ae:d91c with SMTP id d75a77b69052e-53fcc6c3598mr75567831cf.47.1793244342944; Wed, 28 Oct 2026 20:25:42 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.40 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:40 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta][PATCH 06/11] linux-yocto/7.2: update to v7.2.13 Date: Wed, 28 Oct 2026 23:25:21 -0400 Message-ID: <20261029032527.3150782-7-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:25:52 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248863 From: Bruce Ashfield Updating linux-yocto/7.2 to the latest korg -stable release that comprises the following commits: 3c172eede0d6b Linux 7.2.13 924fe47419fff smb: client: drain outstanding I/O before truncating on O_TRUNC open dedb4aa2c3a95 ntfs: fix memmove overlap in ntfs_new_attr_flags 7dc2c52460803 ntfs: move attribute payload before shrinking its record c5434e86d6c53 ntfs: fix resident conversion in ntfs_new_attr_flags f0b0738ba9573 ntfs: take invalidate_lock in ntfs_setattr_size() 5c581a59bcce3 ntfs: use pagecache_isize_extended() on size extension 3d2ef2b9f4c08 workqueue: Fix unbound pool lifetime for pending pwqs f0f18075e45d4 sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor 396ba6f04da3f sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ 2d9d24385201f drm/amdgpu: free the userptr ranges when a CS fails after parser_bos 62ebf3310eeb1 drm/amdgpu: Remove the bo list mutex 357061da006f2 genirq/proc: Fix missing CPU header in /proc/interrupts 2c4d5de1b6827 ntfs: fix undefined behavior in mft/index record size calculation 0a9122cada749 ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize 5e87da8ba8d3d ntfs: fix FITRIM range alignment ad096ce2923cf ntfs: handle signal interruption in fallocate 9efbd764ab80f smb: client: reject SetEA requests that do not fit the request buffer 23ee613f831b0 smb: client: fix multiuser mount with krb5 596b4062e6c75 smb: client: fix heap overflow in cifs_do_set_acl() ffa66fdc7d35b smb: client: fix data corruption with concurrent writes and O_TRUNC bb187146c7e5c net/sched: cls_flower: validate mask pointer after nla_next() 015fffa48e96c ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in 03bb4338c3a7c ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION ab057f271ef60 ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION c962695467d3a net: psp: do not inherit the Rx association on clone 7afab9846120c net: ntb_netdev: Fix statistics races b45e8c24608c9 net: bridge: mcast: don't truncate the port group walk on teardown 05f7a2f712f8b drm/i915/dmc: Harden DMC firmware payload parsing d1d6b859e89dd drm/amdgpu/userq: actually validate userq BOs 76acfb84973bd drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction d6e08ec2fff45 KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes ad50f41e4f047 drm/amdgpu: Fix VCE 3 ring align_mask d5520e815c4b1 ipv4: avoid divide by zero in fib_rebalance 90c423b62ec9b vsock/vmci: validate packet source for connected sockets e9bf92de436ba vsock/virtio: validate packet source for connected sockets 126a7c227d854 s390/pci: Fix leak of uninitialized kernel data in SCLP report cf348ec613f75 s390/pai: Handle multiple PMU stop callback invocations 8a2f7a4ad1d81 s390/ctcm: Prevent XID null dereference dca1b51693c81 page_pool: keep frag_offset aligned for odd-sized requests 9ac57e4c62e93 sctp: validate chunk length in the inqueue parser e1ef306ba20eb selinux: fix BPF token permission checks fa8c78c0e49aa tipc: protect node reset trace dump with node lock bc48075278e46 workqueue: Annotate cb_lock nesting when draining a dead BH pool 3c2928f1ed195 workqueue: Use raise_softirq() to trigger softirq in irq_work handler 3005459e0ddfc io_uring/cancel: don't spin on local work the task can't run a1b9b87f45ea6 netlink: specs: add missing mask attributes for conntrack dump 64a55488a3685 netlink: specs: fix the conntrack filter type fca6b33b8a607 xfs: fix zoned write iomap flags assignments 7809ac0161c7c xfs: fix capability check in xfs 6353e5cd8c43d xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf fe7393a627db2 net/iucv: fix the recvmsg window update a585901bb8cd2 mac802154: fix data race and NULL deref on local->assoc_dev 74e4ecc08c3d1 dm-integrity: require stable writes for internal hash modes 251b44b424920 dm-integrity: fix infinite loop on discard with large tag size 2fe1e2fe3170d dm-ebs: fix incorrect device offset check in ebs_ctr() 4f16bb982b27b dm-crypt: fix a tiny race condition in crypt_dec_pending 104f09e02038b dm cache: fix issue with background work locking 96fb82b38a555 dm cache: fix demotion stats in passthrough mode 88a51743cd809 cifs: don't update i_size in cifs_do_truncate without a cached handle bcd2ba4cc245f cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() 71154fc2e351f cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children 39aa489e85752 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) a8e45471afa23 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) 8c4f962f368d5 wifi: p54: validate firmware record lengths 135a0cdac6c96 tracing: Fix ignored return value of resize_buffer_duplicate_size() 89e90b16aadd6 tracing: Fix hist trigger timestamps for buffered events b1547c6ba93b8 tracing: Fix crash in print_graph_function_event() 7539c61f522ff tracing: Do not initialize tracefs work if tracing is disabled 75e894f924173 tracing: Check operator stack capacity before pushing 5f6175281ec22 tracing: Take trace_types_lock when dropping the buffer_meta reference 68ecc9510bb82 tracing: Keep the predicate limit separate from program capacity e0298fcb8555c tracing: Fix the shift out of bounds in the log2 histogram modifier 2f8b49b415cdc sched_ext: Propagate every bypass depth change to the descendants 3e6672f0a5a51 sched_ext: idle: Respect task affinity in restricted CPU selection 633f586329bfd sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue 135e998dd1e66 drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change 49e59f9bcc946 drm/xe: Bump LRU for external objects on exec and rebind 2fbd099b4e7c8 drm/i915/dmc: Add sanity check for DMC load address 326ceaa896972 drm/i915/cx0_phy: Fix ARL-S host bridge detection 7a10cd79c4d9a drm/exec: don't immediately add prelocked obj to array of locked objs ba76082b1b812 drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES 6467c4cc83b94 drm/amdgpu: keep the eviction fence until the last handle is closed 5d9c2d3e67f1e drm/amdgpu: fix sched entity leak in ttm buffer entity init 64a6d40156ae9 drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl 253555a9bacce drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr 42bd6e4538464 drm/amdgpu: destroy mutex when tearing down ttm buffer entity 123e1d47db26d drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set c65ea712a6918 drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang 1f1750d474643 drm/amd/pm: add zero fan stop temperature support on smu 14.0.2 4c8b5e5b9776a drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions f721487523d45 scsi: libiscsi: Validate the task named by a management response d79343ae3223b scsi: libiscsi: Validate the ITT reflected in a Reject PDU 35b60549a9562 scsi: libiscsi: Reject a negative task index from parse_pdu_itt 15791e57f57f7 scsi: xen/scsifront: Check for a NULL shadow entry on a backend response 18a0e3733ce38 scsi: st: Fix use-after-free race between st_remove() and st_open() 7a755f6d47b81 scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies 68e6ab180cfb6 ring-buffer: Fix false warning in ring_buffer_map_get_reader() 7469b3585ef5f ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx() ae670c1a24fb5 ring-buffer: Do not show buffer_meta for CPUs without a buffer 329e1a230741c perf: Update cgroup time when rotating multiplexed events 5c9a86256c559 perf: Track the perf mlock gift separately 47e105bdc863f i2c: xiic: restore non-managed runtime PM to fix clk WARN flood 1875de656370c i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() bb39720dbd05a i2c: qcom-cci: Fix HALT_ACK reset request being dropped 7f9eb6aaf9a3a gpio: shared: gracefully handle no-device lookup of shared GPIOs 8861491f85015 gpio: shared: fix use-after-free bug when adding shared proxies deb336ae7c7b3 tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields 425976fc4886e tools: gpio: fix building from the top level with O= 8163c6fdd510b tools/power turbostat: Read complete CPU lists 2777f6637da02 spi: imx: fix slab corruption from undersized DMA bounce buffers fd56ac95ec31a sctp: revalidate output stream after association connect wait e3318dd73b235 riscv: dts: microchip: beaglev-fire: remove double definition of gpio interrupts 1d7a731ddb163 power: sequencing: qcom-wcn: power off WLAN at probe db531fa89c775 pinctrl: amd: Clear S4 wake bits when firmware has _AEI ca14c289ed9ff net: rds: fix uninitialized trans dereference in CM event handler 2e012e431aa27 net/sched: fix use-after-free in __tcf_action_put() 5c0757b065fbd mshv_vtl: Check per-CPU register page before mmap 9b016f25f7178 lib/crypto: poly1305: Use memzero_explicit() in poly1305_final() 414e60bbca2e3 lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state 2855ddc6844f5 futex: Fix mm reuse handling for FUT_OFF_MMSHARED 92c9171f95eef namei: test for a negative dentry the way traverse_mounts() does bd71d33923b9d namespace: a mount that copy_tree() leaves out can't take over a lock 7abecef26a9be ntfs3: free the sbi after a grace period c0620b648321f ipc: drop the mqueue mount with kern_unmount() on setup failure 45fcfd5d9c10e eventfs: Free the eventfs_inode after an rcu grace period too 87d29b8b84973 ext4: free the sbi after a grace period 7deb577084033 pid_namespace: make zap_pid_ns_processes() freezable 472589eacdf10 fsnotify: prevent mark additions during connector teardown c9716f956216e KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry 184382f9852d4 KVM: SEV: Fix page dirtying in sev_gmem_post_populate() f45ee1ff6358a x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context 9e73a6754457f watch_queue: Fix note pool publication race in watch_queue_set_size() 6560c3d9a6925 unicode: free the map after a grace period 0fa258819abba bootconfig: give the footer size static_assert a message fb296391f685d autofs: ignore notification errors from a replaced pipe a761789d657a5 ASoC: SOF: sof-client: Use event-handler mutex consistently 5e1322787c5e4 ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture 7cd3019e8924c afs: free the super info after a grace period c137756469d5b accel/rocket: search every core slot when looking up a scheduler 134451cf95cb6 accel/rocket: search every core slot when a core is removed 69f9de644f9c7 9p: free the session after a grace period a8caee0e623ca firewire: core: fix race condition in split transaction handling 0efe927053f7e x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx() 581fb47389fc4 PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV 938ff9c0e8586 PCI: Ignore Immediate Readiness on Samsung 990 PRO and 990 EVO Plus NVMe 792acd173da08 printk: Postpone kthread startup f5f0028764de3 perf: Fix perf_pmu_migrate_context() leaving events behind cfc707a0a49f4 perf/x86/intel/uncore: Fix DMR CXL CM invert filter affc6d5729352 net: stmmac: dwmac1000: clear the RGMII status interrupt 21596ceb63749 ring-buffer: Use subbuf_order in available memory estimation 04228a1d47b87 gpio: mxc: fix race between gpiochip registration and IRQ domain setup 31a797762ca7c gpio: mxc: fix wakeup_pads bit operations df6395fe5d4cb gpio: mxc: fix both_edges bit operations 6c1e035d88157 gpio: mxc: fix race between chained IRQ handler install and probe completion 890c3bf08e0fc gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths 8ee0e03663826 calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() 7939ad3b4db9e net: bcmgenet: unshare the skb before writing the control block e7694aab7ad00 net: ti: icssm-prueth: Move setting of netops to fix crash 5293e376e9d6c net: ethernet: aeroflex: move setting of netops to fix crash c51b13299b4d4 net: ethoc: move setting of netops to fix crash cfc11024fc061 net: au1000: move setting of netops to fix crash bfb1ca89e9f6e net: mv643xx: move setting of netops to fix crash d2eca3a54f415 net: ethernet: actions: Move setting of netops to fix crash 1c2f9c3a63baa net: hisilicon: hip04_eth: Move setting of netops to fix crash 06ef5b084b150 net: hisilicon: hisi_femac: Move setting of netops to fix crash 078deff25f8a8 netlink: avoid hashing the network namespace pointer 08b95ef36a64c scsi: libsas: Fix SMP IO deadlock during HA resume dc6c7cf2090a3 tracing: probes: error if BTF is required but unavailable ef398f6715f41 ring-buffer: Skip si_mem_available() for persistent and remote buffers 17c424d9d28de tracing: Fix simple_ring_buffer undef check on sparc64 9f533ae516089 tracing: Fix simple_ring_buffer undef check on parisc 75a6278ddb38e tracing: Fix empty symbol names in simple_ring_buffer undef check 2259809e5b704 pipe: preserve existing fasync readers on writer setup failure 3d3a7390e24ce exit: fix lost-update race on the child_subreaper bitfields 460dbf8495212 samples: pidfd: fix userprogs typo 2bc426a32bfb7 ocfs2/dlm: Protect the recovery list during debugfs reads eabb519d45fc8 drm/panthor: fix immortalis condition 7cadb8d82ee43 iommupt/kunit: Use if_changed_rule for the kunit 2557eb2d8bfd0 entry: Account the deferred hrtimer rearm as hardirq context for lockdep ae89744c5ebf2 sched/core: Call wakeup_preempt() for queued tasks during class change 6caa2b3edb7da scsi: target: iscsi: Fix race in discovery auth updates 7563650522732 scsi: target: Disable interrupts while holding delayed_cmd_lock 67defb87a0a6c scsi: st: Save the visited block for the partition the drive is in c01068a1944be nios2: fix __wsum type degradation in csum_fold() c6ab64c4786a0 spi: tegra114: assert CS GPIO for every transfer in a message cd3e2918c247d drm/xe/oa: Zero OA buffer at allocation b6499d19ade1f drm/xe: skip eviction of a BO with no resource e01b5d143e241 ASoC: amd: yc: disable MSI on resume b993de8eb8931 net/mlx5: HWS, fix flow meter offset within its bulk 374b28a462392 net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool dd47a6c920083 accel/rocket: clear rdev on device init failure 06935da5de83a netlink: reset skb headers before unicast and multicast filtering a87481103d4f0 regmap: Drop map lock during cache init and exit f98e96f937a82 ASoC: nau8822: Fix the 128x oversampling switch bits 26beeefbce5d0 ASoC: wm8978: Fix the 128x oversampling switch bits 40cc9bf395c83 ASoC: max98371: Fix the Speaker DHT Min Volume bits f31f55e4823bf ASoC: pcm3168a: Fix the DAC zero flag polarity bit 784a5b8b91b5d ASoC: cs42l52: Fix the NG Type Switch bit 565a1a2f50dee ASoC: cs42l56: Put the Limiter Cushion control on the limiter register 5764664840732 ASoC: stm32: spdifrx: fix synchronization state check f92aa855f017b ASoC: Intel: avs: Reset the stream unless it is already prepared 20de4c4393643 accel/amdxdna: Fix Kconfig invalid configuration 91ece3efa064f net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure 44d1ca05d6094 vsock: treat TCP_CLOSING as once-established ac9132f3c0f26 gpio: nct6694: Mark the GPIO controller as sleeping 6a987992c78e2 drm/vc4: hdmi: Move packet RAM enable to PM runtime 4f2321b30670c pinctrl: sunxi: dt: do not accumulate npins across probe attempts 21ddf976f204e pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 45388e50d14bc power: supply: core: prevent unregistering a power supply while a callback runs 57ff289505fb0 power: supply: generic-adc-battery: Fix temperature IIO channel conversion 74784f1ead355 tools/power turbostat: Fix add_counter issue if > 24 counters. 429bcb67630dc tools/power turbostat: Fix PMT error path fd handling 0bea622befdf1 tools/power turbostat: Fix CWF PMT off-by-one 3513b9d7cc35a tools/power turbostat: Fix fd_perf leak on reset 35f1cce2ff382 tools/power turbostat: Warn, but don't Err on out-dated perf systems c8b8326aa5477 pinctrl: qcom: spmi-gpio: make direction changes exclusive 096e20372476c pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 51f935a7e9284 ARM: configs: sama5: enable current Microchip KSZ DSA symbols 6b662f6e6a562 pinctrl: qcom: qcs8300: Fix intr_target_width a723b4dd99f48 pinctrl: qcom: hawi: Fix intr_target_width d68d5e430b311 pinctrl: qcom: nord: fix GPIO interrupt target width 3195546a377c2 Drivers: hv: Don't reset VMBus connection state on error/exit paths bc8ca0f476962 x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() 95fec47cdbf74 Drivers: hv: Avoid infinite retry loop in init_vp_index() 43bc7d5707bbb soc/tegra: pmc: Fix uninitialised clock rate a6f95263d9f33 power: supply: ds2780: Fix ds2780_get_capacity() returning raw value f93a54e83e3f1 power: supply: Fix maintenance charge table kernel-doc cea6e3e7a9903 ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition 44f272f6cba06 soc/tegra: fuse: Add missing newline to APBMISC error message 2bd56a2de8312 i2c: qcom-geni: Restore the source-clock selection policy d41b9735881a3 ksmbd: exempt FSCTL_PIPE_TRANSCEIVE from the generic file-id lookup cc9de5d4b5ab6 Linux 7.2.12 e792a9ace39d2 KVM: x86: Use active memslots for the per-vCPU MMIO cache 4722d06b29075 ksmbd: fix heap out-of-bounds write in krb5_authenticate() 7ce5d94246de8 ASoC: cs35l56: Add DAI for SDCA OT25 stream 40c9216390eb0 wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" e2e2fc0663b38 net: mana: reserve RX buffer headroom to fix forwarding performance 5c380dfecbf9d net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch 6d30b399ae28e readdir: take no inode lock on an immutable directory e58253e87d0a9 nullfs: refuse file locks 173ff9d03ec63 sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler e9ec5cbbaf4dd dm-integrity: validate the superblock on resume 69ed43ed8a174 dm-integrity: fix NULL pointer dereference when the 'R' flag is used 8e42aeb5b39f7 nfsd: fix all-zero stateid in CB_OFFLOAD for async COPY Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_7.2.bb | 6 ++--- .../linux/linux-yocto-tiny_7.2.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_7.2.bb | 24 +++++++++---------- 3 files changed, 18 insertions(+), 18 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb b/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb index 49b25c4f7f..47485ec357 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb @@ -15,13 +15,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "df7d59ac69dd0ac9cdf01d6dfe564b93aba28eb2" -SRCREV_meta ?= "151b1edb05843ae2225eedce202a0cca1419b7b5" +SRCREV_machine ?= "b2410aefa90e15be14e40b6bccefe2ce851a4ab8" +SRCREV_meta ?= "51d958a0fd6defff09334b8f0b8153f08dd6d011" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-7.2;destsuffix=${KMETA};protocol=https" -LINUX_VERSION ?= "7.2.11" +LINUX_VERSION ?= "7.2.13" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb index b1aee530f3..ea8a041a78 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb @@ -9,7 +9,7 @@ require recipes-kernel/linux/linux-yocto.inc include recipes-kernel/linux/cve-exclusion.inc include recipes-kernel/linux/cve-exclusion_7.2.inc -LINUX_VERSION ?= "7.2.11" +LINUX_VERSION ?= "7.2.13" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -18,8 +18,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "7684a4089e8abbbee88c7692655575402c59a80a" -SRCREV_meta ?= "151b1edb05843ae2225eedce202a0cca1419b7b5" +SRCREV_machine ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" +SRCREV_meta ?= "51d958a0fd6defff09334b8f0b8153f08dd6d011" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_7.2.bb b/meta/recipes-kernel/linux/linux-yocto_7.2.bb index 0fd97a3fdb..a3722fae67 100644 --- a/meta/recipes-kernel/linux/linux-yocto_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto_7.2.bb @@ -17,25 +17,25 @@ KBRANCH:qemux86-64 ?= "v7.2/standard/base" KBRANCH:qemuloongarch64 ?= "v7.2/standard/base" KBRANCH:qemumips64 ?= "v7.2/standard/mti-malta" -SRCREV_machine:qemuarm ?= "70fb9bc7222f957d2f1ae2287af7bd2e24a9b05c" -SRCREV_machine:qemuarm64 ?= "7684a4089e8abbbee88c7692655575402c59a80a" -SRCREV_machine:qemuloongarch64 ?= "7684a4089e8abbbee88c7692655575402c59a80a" +SRCREV_machine:qemuarm ?= "dfbf2e8d1519edb0313dcc58694958e4f5cf7547" +SRCREV_machine:qemuarm64 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" +SRCREV_machine:qemuloongarch64 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" SRCREV_machine:qemumips ?= "ab0e33fefa2a3d0366b2b8deb7cfb3be2d8dc436" -SRCREV_machine:qemuppc ?= "7684a4089e8abbbee88c7692655575402c59a80a" -SRCREV_machine:qemuriscv64 ?= "7684a4089e8abbbee88c7692655575402c59a80a" -SRCREV_machine:qemuriscv32 ?= "7684a4089e8abbbee88c7692655575402c59a80a" -SRCREV_machine:qemux86 ?= "7684a4089e8abbbee88c7692655575402c59a80a" -SRCREV_machine:qemux86-64 ?= "7684a4089e8abbbee88c7692655575402c59a80a" +SRCREV_machine:qemuppc ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" +SRCREV_machine:qemuriscv64 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" +SRCREV_machine:qemuriscv32 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" +SRCREV_machine:qemux86 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" +SRCREV_machine:qemux86-64 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" SRCREV_machine:qemumips64 ?= "ab0e33fefa2a3d0366b2b8deb7cfb3be2d8dc436" -SRCREV_machine ?= "7684a4089e8abbbee88c7692655575402c59a80a" -SRCREV_meta ?= "151b1edb05843ae2225eedce202a0cca1419b7b5" +SRCREV_machine ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" +SRCREV_meta ?= "51d958a0fd6defff09334b8f0b8153f08dd6d011" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "a2de78ee6ed8bf8cd99d177c74865a6e8c3cb6ea" +SRCREV_machine:class-devupstream ?= "3c172eede0d6b889ead876f45cc843070209208f" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v7.2/base" @@ -43,7 +43,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-7.2;destsuffix=${KMETA};protocol=https" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "7.2.11" +LINUX_VERSION ?= "7.2.13" PV = "${LINUX_VERSION}+git" From patchwork Thu Oct 29 03:25:22 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102301 Received: from mail-qt1-f170.google.com (mail-qt1-f170.google.com [209.85.160.170]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4415.1793244347285196558 for ; Wed, 28 Oct 2026 20:25:47 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=JlrUSBjc; spf=pass (domain: gmail.com, ip: 209.85.160.170, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qt1-f170.google.com with SMTP id d75a77b69052e-53fdd2fb171so17200611cf.2 for ; Wed, 28 Oct 2026 20:25:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244346; x=1793849146; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=iu3jXj0445Z2IQjVjx18RtNXkWNNf2fl6bFvz5wBLqI=; b=JlrUSBjc1xhbhhKeBUsU8GabEbPwwvaEUAAVFsGDXCDaJSfRHtweKfJrcoPkKHy8IP FOQZSrBbuhqDrztESmzQjlcWZlrDwDtv7IiRGDUYnI+KPXWnpGoNCQuiHJOB9JCd1s0c r3ncRImzTtxG3HwZjGJSxvcAaGjifH9xTyJwOpY97za1xtVvOhzUCjRQj+G27uffqFZ2 D+YtW93Q38lzs9nraFx0jaqZ21Lh1llbqxKMbgChBBEzvNOh04GVs7LT8+vT5zLlEk9z q1nnsBKMRjN9uEEQiO9mFaYJXAmTUDWCJrvYSwC+9wlXrHgGsw62dGwRInkb9WqU0tNG vdrg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244346; x=1793849146; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=iu3jXj0445Z2IQjVjx18RtNXkWNNf2fl6bFvz5wBLqI=; b=gIFN+pZjLDgMgIKOMWh8RmGkvCPI+8GZ6Ddbhov1xgTnITvXVUfFgQ/Sl1OnClxxOs hfuVqyxKBMi0B5WIU/hxKP6kuoJDjTh5LRacFA9JPSyfDwLLL246stAP89U6ZtPUObJd F8PCN0iIPXNuJFGB3ZN2WmAWLZCY7mOW2Rav6F7gBW1hoJure4Jme4R7cI1W5S//3XVe Dg1ST0gP0BlpgtRpxupRsVDXU+XDaY4Wck9lAcAtSIS11rpULGYKTi1ujWJqB4UW7+qK O5uwSfALdEjnAf5NaGDJXLRb7tShCxiKY7kic1M46reXraZIYS7GveAWTbaZdFitlAPG cnGQ== X-Gm-Message-State: AFq9FYLe3psBWeWiCb+5NDFbw04c3Uwv1G6Zn9rIlNWG6FLivMWCkFCh h/cAo4ZB45lW4IQWub4dVxnPgoro6FG31TfhvyqrhQcCs/HtOmkpqox2x0UbyWhu X-Gm-Gg: AYBFou1Dji5UzsJE0BCZVZD/AVINt7uQbO8VdiLvZdsqyQ2/xAqT6MP8v4PUAJY1oF6 CgxjL/wWMAgM9Hn/B6SMlcLewxWTIhFXLGGw1Ow1WmntlsvS4gCj3NAI9+D/jM/e4S0/LH47yhJ 34EVT4yNlndxBjAxkaL34U16BhFiL0qUmouFfPaOQ0YMf+PWk72BSk2WODEs7rnt5MVXKYJ8wJO OWeoeD435WpbSkGhxdVcoi77qmbgrH4abvuM1pSzH3h/whChEeC8x4gqDsHRcKwaOcfwvBNzi0C 0GVLC/3QVSA9L0rYCbKxnAsL6tPn+wxIUAw9Q+pmDkG0nG8Cf80hzKGaLs1jVAzQD8XB4tknt+9 1Ko0pAau/OLFBzdRHzcSlAoHqUVCkbDkPKDlRGq03I/68Qm/T6gwaTmNoGhzkSeBJrvhqmzliA7 Myi5K76K5AUNa56QgkCOHMIjMw5gzXpchjrpdxCJlTuaCKHDMY8c9AkoZeS/Sg4SfoKGCInwhvD NnnmTJKmBOBuV69y9Y82DzTn6NvFCLNYu7lTy8JnCQhmOhh4fJBgy8/gGp/5qsrKo8pNWl5MC+b nvPocudwrtLfQQ3vzN6aEuqevPt1sxvH5+ujYUWp/WZDDxeH5ztqAzAglxAQWcNr38MNk327g7R MJmSpWCa7Arq9dMzWJ88FuaZH1wVKHCDkZ1mGCBbnVeBJjy0KNmeKVI3EVlS+LParIgQs5a6udn hIy62wLJZoCHTPHJbWHv5HaxfjdZhsxQWs1KxSdEf66jncVg== X-Received: by 2002:a05:622a:489:b0:537:83e9:b0e6 with SMTP id d75a77b69052e-53fcb509fe2mr73901551cf.26.1793244346005; Wed, 28 Oct 2026 20:25:46 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.43 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:43 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta][PATCH 07/11] linux-yocto/7.2: yaffs2: backport upstream fixes and restore remount handling Date: Wed, 28 Oct 2026 23:25:22 -0400 Message-ID: <20261029032527.3150782-8-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:25:52 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248864 From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/7.2: 1/7 [ Author: george pee Email: georgepee@gmail.com Subject: fs/yaffs2: hold gross lock across rename link-count update Date: Tue, 27 Oct 2026 12:08:20 -0400 yaffs_rename() dropped the yaffs gross lock before calling inode_dec_link_count() on the replaced target. Another thread can delete that inode in the window and NULL new_dentry->d_inode, giving: Unable to handle kernel NULL pointer dereference at virtual address 0000002c drop_nlink+0x4/0x3c yaffs_rename+0xd9/0x144 vfs_rename2+0x2d9/0x63c Keep the gross lock held until after the link count is updated, and drop it on both the success and -ENOTEMPTY paths. Backport of yaffs2 upstream commit 5b23c73940bab871c0b4c9d89be349a4e325ec92 ("Increase scope of yaffs gross lock to avoid race and kernel panic"), adapted to the single fs/yaffs2/yaffs_vfs.c in linux-yocto. Signed-off-by: Bruce Ashfield ] 2/7 [ Author: Charles Manning Email: cdhmanning@gmail.com Subject: fs/yaffs2: fix size of unmanaged temp buffer allocation Date: Tue, 27 Oct 2026 12:08:41 -0400 When all managed temp buffers are in use, yaffs_get_temp_buffer() falls back to kmalloc()ing an unmanaged one sized data_bytes_per_chunk. Callers such as yaffs_tags_marshall_read() read total_bytes_per_chunk into a temp buffer, which is larger when inband tags are in use, so the fallback buffer could be overrun. Allocate total_bytes_per_chunk to match the managed buffers. Backport of yaffs2 upstream commit c5d2e7ac441855236e39fff1f0de899e20676dc9 ("yaffs_guts.c Fix size of allocated buffer for unmanaged buffers"). Signed-off-by: Charles Manning Signed-off-by: Bruce Ashfield ] 3/7 [ Author: Charles Manning Email: cdhmanning@gmail.com Subject: fs/yaffs2: release temp buffers on read failure paths Date: Tue, 27 Oct 2026 12:08:42 -0400 yaffs_check_obj_details_loaded() and yaffs_tags_marshall_read() take a temp buffer but return early on a failed chunk read without releasing it, leaking a managed buffer slot (or an unmanaged allocation) on every I/O error. Release the buffer before returning. Backport of yaffs2 upstream commit 42909262aa6077a60cf18dac024fd21df3b4b18a ("Fix unmatched temporary buffer allocations"). Signed-off-by: Charles Manning Signed-off-by: Bruce Ashfield ] 4/7 [ Author: Charles Manning Email: cdhmanning@gmail.com Subject: fs/yaffs2: clear ll_init on deinitialise Date: Tue, 27 Oct 2026 12:08:55 -0400 yaffs_deinitialise() tears the device down and clears is_mounted, but leaves ll_init set, so a subsequent initialise can believe the low-level layer is still set up. Clear it alongside is_mounted. Backport of yaffs2 upstream commit 89c47bd92c6accf5955184ba65742b20523b05a9 ("Clear ll_init flag during de-initialisation"). Signed-off-by: Charles Manning Signed-off-by: Bruce Ashfield ] 5/7 [ Author: Charles Manning Email: cdhmanning@gmail.com Subject: fs/yaffs2: fix inverted tags_marshall_query_block return value Date: Tue, 27 Oct 2026 12:08:56 -0400 drv_check_bad_fn() returns YAFFS_OK for a good block, but yaffs_tags_marshall_query_block() treated 0 (YAFFS_FAIL) as success, so it reported YAFFS_FAIL for good blocks and YAFFS_OK for bad ones. No caller currently uses the return value (block state is passed back via *state), so this is benign, but return the check result directly. Backport of yaffs2 upstream commit b19d3c9f0ada46534e44308f72d7e70ab1e301ee ("Begign bug: Fix incorrect return value"). Signed-off-by: Charles Manning Signed-off-by: Bruce Ashfield ] 6/7 [ Author: Bruce Ashfield Email: bruce.ashfield@gmail.com Subject: fs/yaffs2: restore remount handling via fs_context reconfigure Date: Tue, 27 Oct 2026 12:09:34 -0400 The v7.0 conversion to the init_fs_context mount API removed .remount_fs from yaffs_super_ops but did not add a .reconfigure fs_context operation. As a result a remount (e.g. "mount -o remount,rw") never reached yaffs: dev->read_only kept its mount-time value, and yaffs_remount_fs() was left as an unused static function. Add yaffs_reconfigure() to yaffs_context_ops so a remount updates dev->read_only from fc->sb_flags, forcing SB_RDONLY when the MTD is not writeable (as the old remount_fs did), and drop the dead yaffs_remount_fs(). Use the already-attached MTD via yaffs_dev_to_mtd() instead of re-looking it up with get_mtd_device(), which leaked a reference on every remount. Fixes: 3fa3b91cc457 ("fs/yaffs2: convert to init_fs_context mount API for v7.0") Signed-off-by: Bruce Ashfield ] 7/7 [ Author: Charles Manning Email: cdhmanning@gmail.com Subject: fs/yaffs2: run deferred cleanup when remounting read-write Date: Tue, 27 Oct 2026 12:10:08 -0400 When yaffs is mounted read-only, the post-scan cleanup in yaffs_guts_initialise() (strip deleted objects, fix hanging objects, empty lost+found) is skipped because those helpers bail on read_only. Nothing ran it later on a remount to read-write, so the deferred cleanup never happened, and the background GC thread was not started (or stopped on a rw->ro remount). Factor the cleanup into yaffs_guts_cleanup() and, in the remount path, run it under the gross lock and start the background thread on a ro->rw transition; stop the background thread on rw->ro. Backport of yaffs2 upstream commit 334eb5fc4472c791e4c4ce6d50e650d2b2732f02 ("Handle cleanup when remounting rw after mounting read-only"), adapted from the old super_operations.remount_fs hook to the fs_context .reconfigure operation used since v7.0. Signed-off-by: Charles Manning Signed-off-by: Bruce Ashfield ] Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_7.2.bb | 4 ++-- .../linux/linux-yocto-tiny_7.2.bb | 4 ++-- meta/recipes-kernel/linux/linux-yocto_7.2.bb | 20 +++++++++---------- 3 files changed, 14 insertions(+), 14 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb b/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb index 47485ec357..57c0c0bed0 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb @@ -15,8 +15,8 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "b2410aefa90e15be14e40b6bccefe2ce851a4ab8" -SRCREV_meta ?= "51d958a0fd6defff09334b8f0b8153f08dd6d011" +SRCREV_machine ?= "ac271024979d3c7473f3222e7cf094c34a693865" +SRCREV_meta ?= "b4b30a9da6e99401a3e93f63887030b4bcd6e8c0" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-7.2;destsuffix=${KMETA};protocol=https" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb index ea8a041a78..3764ed259b 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb @@ -18,8 +18,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" -SRCREV_meta ?= "51d958a0fd6defff09334b8f0b8153f08dd6d011" +SRCREV_machine ?= "8413fe29e671d5cd6816897d2615a910f4cc9f36" +SRCREV_meta ?= "b4b30a9da6e99401a3e93f63887030b4bcd6e8c0" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_7.2.bb b/meta/recipes-kernel/linux/linux-yocto_7.2.bb index a3722fae67..770d748a7e 100644 --- a/meta/recipes-kernel/linux/linux-yocto_7.2.bb +++ b/meta/recipes-kernel/linux/linux-yocto_7.2.bb @@ -17,18 +17,18 @@ KBRANCH:qemux86-64 ?= "v7.2/standard/base" KBRANCH:qemuloongarch64 ?= "v7.2/standard/base" KBRANCH:qemumips64 ?= "v7.2/standard/mti-malta" -SRCREV_machine:qemuarm ?= "dfbf2e8d1519edb0313dcc58694958e4f5cf7547" -SRCREV_machine:qemuarm64 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" -SRCREV_machine:qemuloongarch64 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" +SRCREV_machine:qemuarm ?= "8fd75fc8ff0e240e41bcd79b6562a456af29eb58" +SRCREV_machine:qemuarm64 ?= "8413fe29e671d5cd6816897d2615a910f4cc9f36" +SRCREV_machine:qemuloongarch64 ?= "8413fe29e671d5cd6816897d2615a910f4cc9f36" SRCREV_machine:qemumips ?= "ab0e33fefa2a3d0366b2b8deb7cfb3be2d8dc436" -SRCREV_machine:qemuppc ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" -SRCREV_machine:qemuriscv64 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" -SRCREV_machine:qemuriscv32 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" -SRCREV_machine:qemux86 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" -SRCREV_machine:qemux86-64 ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" +SRCREV_machine:qemuppc ?= "8413fe29e671d5cd6816897d2615a910f4cc9f36" +SRCREV_machine:qemuriscv64 ?= "8413fe29e671d5cd6816897d2615a910f4cc9f36" +SRCREV_machine:qemuriscv32 ?= "8413fe29e671d5cd6816897d2615a910f4cc9f36" +SRCREV_machine:qemux86 ?= "8413fe29e671d5cd6816897d2615a910f4cc9f36" +SRCREV_machine:qemux86-64 ?= "8413fe29e671d5cd6816897d2615a910f4cc9f36" SRCREV_machine:qemumips64 ?= "ab0e33fefa2a3d0366b2b8deb7cfb3be2d8dc436" -SRCREV_machine ?= "d8a1dcb03afa51d75734c4a4646ba853bf3151b9" -SRCREV_meta ?= "51d958a0fd6defff09334b8f0b8153f08dd6d011" +SRCREV_machine ?= "8413fe29e671d5cd6816897d2615a910f4cc9f36" +SRCREV_meta ?= "b4b30a9da6e99401a3e93f63887030b4bcd6e8c0" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same From patchwork Thu Oct 29 03:25:23 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102300 Received: from mail-qv1-f53.google.com (mail-qv1-f53.google.com [209.85.219.53]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4367.1793244351244013774 for ; Wed, 28 Oct 2026 20:25:51 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=iQ++qvA3; spf=pass (domain: gmail.com, ip: 209.85.219.53, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qv1-f53.google.com with SMTP id 6a1803df08f44-91c75be77c4so18526036d6.3 for ; Wed, 28 Oct 2026 20:25:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244350; x=1793849150; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=V4Ovm7inm49hJuM1DCpw4QQAyDcw2QWuYoSOny66SYw=; b=iQ++qvA3UptRSfmQOKou4uQa5QFyCo/+v0uwrjFYvbNSP06A7AYVtgjPnPusg5hUV1 Zh4xbHgmbkl+NMSJtjJuZ9329a7br/ExRq7Ki940X02ixAPClIJ0dd7+GV8ldEw+KLQ2 mObwf3nIn8aXBDp30VfXg2GKgGq/SGVhkBqdSLvOsXFZqIi8zWRDlwEP6CmUXrAHxADl iOo8oTTWRRi5ZT2Whi/w+8Wm27ssvFH8XV+sWxRRBoM3hzJFsb6cW+wfLi9F2p8zPUD8 PZEKRy9qMHH/54g181l7An1qLLhlElk2kvE9bLoYJT+DYdIfJgi0tdQqhGaY14BMPukZ +fGQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244350; x=1793849150; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=V4Ovm7inm49hJuM1DCpw4QQAyDcw2QWuYoSOny66SYw=; b=cwYKuqcXFslv/IbeBh18Iy6XSvDBAxyHl8V3o6ryM9d9Kq/uMrP0IsRtEZepEk85Su k2d5zwM9d0BqX5vXxamr6iK5EBSaFUxS1RDTvwFGWRCCSbCYY0YSycBHsYnKa24vWzsJ 3XhAQmhsnxb95J7TkKS6PqiFGhEelatkyDs3nIQj2qD53Y5qjn+XEpZu+wEzERcW/Jzd +rcvgQGT1SF9VmAmrINBHcCNxas/LFCS5tG8+QSXGguntV3hneF0lKM6vK2+O62M96XM 2O0it9SsVwjLaCrscNMeyC5hlzEAO9Kc4mzG7RSltb6gcr46swVnQIfJfomtUERgYjrY 1kFg== X-Gm-Message-State: AFq9FYL3Z8YMgQCnakjsUb1etZ6j7BamuTMWgGt8punYoAmLGZ+ZS7U4 4OdVzcSxW5QF+GNiY59j6NW1+g8U5ECB/0RmaO1CkJTG0zrwxEApki1FTsT9VNCn X-Gm-Gg: AYBFou15raKWZrHMGJGAem+t7fgHbapD76fUkKWVLGB+GnPQUkV4HBrwsZROlWGfZlQ cdCV/TzuStAM8CDHDvodEunct8pgCbbIG6wCYgGw/zC1TkQDmlzIboU4dtuyRNrC0Mh6jBkenBS TnFupJ48Y3iTI+atgBxTwtRmbEISkR0opEtk37ntcLQuGRQBjVysi0/GyZ3V/DWk0E0rjFgHn6u sMVOvoUvYggfLQT+RxswhTlT+BuhVurWydfi1y3EL2UhSrI210bjMc3g1fGUrrDYl9VUwnNs6Iq 5W8QFo5azQLPl4dbKnA5/pk27KslJ6cjEKin529j9aOwoM1jU/ikn79JpPAb49MHy/nlL/eVsp9 Rz8NHzsWi0CbQPEe8qO5T1w0i2JiSrEKkFwzY1UKb6mSInGJlWn/QWM5IM+KgyhEWtcyuZ17LSp xKbctWsNNcxv28FBnDffwyyTxBfbDBo70ONPjoorVpzt02iaBmQWRtuL3siZd/ktCvC8VKpV3Xz UN3/kcshClZomThTo7JK34dmYuWWRxSQ+9DEYhwDjni54Oum/mdCtNnu/4qKYmvJb8wa/q8Fpzd T/IhGCxL5V7iK/Z/wChZzWK/t9wDh7mF4/YeTTk1pr1bzUsCu6kdd4f6sL0sxGjEoKCCL66/vOX DE4l3Luopvpcp4Iv8KKg2u8U2WpyiMRR4mXO348CZkttEY0M5WUIRKr0MqThBpmQGZgJxB0xP0L fsHe/XMq0xRkBqS/7Us6aIcgdsQtwPUwqSVHFFQUY0bZt4HA== X-Received: by 2002:a05:6214:21c5:b0:919:860d:3df9 with SMTP id 6a1803df08f44-91c7cf4c90fmr68664016d6.16.1793244349173; Wed, 28 Oct 2026 20:25:49 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.46 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:46 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta-yocto-bsp][PATCH 08/11] yocto-bsps: update to v6.18.57 Date: Wed, 28 Oct 2026 23:25:23 -0400 Message-ID: <20261029032527.3150782-9-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:25:52 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248865 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: 2ff600d29ee47 Linux 6.18.57 d1e095c75d127 HID: steam: Clean up locking cf71a6ee1d4e3 HID: steam: Refactor registration 86724f4bcf604 HID: steam: Rearrange teardown sequence 05d39902539a3 HID: steam: Fully unregister controller when hidraw is opened 3142648c952d6 sched_ext: Generate qseq from a per-task counter f94a12ddd3184 drm/amd/display: Don't replace a sink mode that shares the native totals 82ac8c4939bdb regulator: of: fill in supply names in of_regulator_bulk_get_all() 32642616a8d73 SUNRPC: Add Kconfig dependency on CRYPTO_KRB5 69bf8d145ee1b can: fix unique skb identifier regression under RPS cf32eb20dfacf xfs: fix exchange-range-to-eof file size exchange 7d3b9b2c9dc57 xfs: stop exchanging reflink flags when exchanging mappings 87655adb5ddb1 xfs: remove duplicate INO1_WRITTEN check 30e08c92118cc ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons d0813c7c09dfa ACPI: scan: Do not mark button ACPI devices as wakeup-capable 5e9c814ee4da9 workqueue: Annotate alloc_workqueue_va() with __printf(1, 0) 2d2c32b1b9e32 accel/amdxdna: Fix crash when destroying a suspended hardware context a82142af837f6 accel/amdxdna: Fix race condition when checking rpm_on 27f52d4089ade accel/amdxdna: Resume power for creating and destroying hardware context 44e61f1834831 s390/zcrypt: Pad trailing CCA or EP11 message with zeros 00a44ff06bcff s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing f463f474773aa s390/zcrypt: Improve EP11 CPRB length and overflow checks 584400144020f s390/zcrypt: Improve CCA CPRB length and overflow checks 7673661a8adc0 workqueue: fix devm_alloc_workqueue() va_list misuse 5c03da7451714 netfs: Fix missing alloc tagging of direct mempool allocations 22adb6751bcf9 net: fix backlog_unlock_irq_restore() vs CONFIG_PREEMPT_RT 07861e84b766c media: verisilicon: Fix kernel panic due to __initconst misuse a582e7391fe35 netfs, afs: Fix symlink reading 4719852d14db2 cifs: consolidate time_last_write stamp into _cifsFileInfo_put() 8f7285d608ed0 btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock fdee3570b282a drm/panthor: validate userspace queue count against initialized firmware slot count e3e6779f77ab6 x86/CPU/AMD: Fix AMD TLBI Erratum #1718 bf0f3412d5a0d drm/vc4: Fix binner slot allocation failing on an idle GPU 4835dbcde5cc3 vsock: Fix memory leak in vmci_transport_recv_dgram_cb() 2594795fd832f net: openvswitch: validate transport header presence in set_ipv6_addr 0849ecf1c65e8 ptp: ocp: fix PCIe delay estimation calculation 3938430f0237c mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() 5b1fb3b105ff6 net/mlx5e: Order ICOSQ cc update after CQ doorbell e241465838e26 veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down 9caa2eca5cc83 drm/imagination: Fix reference and vm_bo handling in remap() cc18eb0e99411 flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() cb0d55754b4f9 bnxt_en: Re-write the BARs following any type of PCIe errors fd6a2b055dbc8 bnxt_en: Drop pci_save_state() after pci_restore_state() 5026c5070b825 bnxt_en: Delay for 5 seconds after AER DPC for all chips f41becbee8fc6 bnxt_en: Fix driver init in kdump kernel 8ef2b3ce6d142 bnxt_en: Add bnxt_clear_bars() helper b18a649649549 pfcp: make sure the SEID is linear before reading it 75e7f850cabd5 net: bcmgenet: if UMAC was suspended in SW_RESET, restore it to SW_RESET e378bd8705659 Revert "net/mlx5: E-Switch, preserve max tx speed on vport state modification" 972b9285ae530 net/sched: cls_route: reject change with no routing attribute 8de57bfec3825 devlink: fix devlink_rel reference leak when notify work is pending 27748588c9310 net: sparx5: start the TOD counters on non-PTP lan969x variants 9993e6a0ac1b5 flow_dissector: avoid u16 truncation of skb->len when computing thoff 0bcebf2c4305c cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug() 1194fd4c6dd1d spi: sg2044-nor: Honor SPI clock limits f3e80f5132dc4 spi: sg2044-nor: Return transfer errors 64bb35079dcbc ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM ef15a51966ee1 ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes 47c0c7a051b70 ASoC: adau1372: allow sleepy powerdown GPIOs 1bee950630df0 Revert "wifi: ath12k: add panic handler" e3f7cc4ef04d1 wifi: mt76: mt792x: pick the SAR table layout from the table itself 83ec70a640fe1 wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit 7fb2d37329c62 wifi: mt76: mt7925: don't put the band auto marker in TGID 0f9afe238eeb7 wifi: mt76: mt7915: disable rx napi when removing device f240282165821 wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout 0ed29ec00eb33 wifi: mt76: mt7925: restore the legacy BSS after MLO teardown 69aae4146191f wifi: mt76: use ALTX queue for packets to disassociated stations a18f68c1e72c8 wifi: mt76: route nullfunc frames to PSD/ALTX queue 9f28f50465086 wifi: mt76: account non-AQL frames per peer rather than per link 65b080310077c wifi: mt76: add PS buffering support for HW-managed TIM drivers 12b467683be5f wifi: mac80211: add ieee80211_txq_aql_pending() 09c6284b21f2e wifi: mac80211: add AQL support for multicast packets aafd1724f65ef wifi: mt76: don't return TXQ when exceeding max non-AQL packets 0cf84535c031a riscv: vector: Fix output operands in context save b56f9e11ac9f1 riscv: vector: Fix data pointer constraints in context save/restore 2c77af8bb5dc1 net: make dev_xdp_sb_prog_count() see programs attached through a link 63bc3cf8d7dd9 drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums 36d7e2da7a873 btrfs: fix lost error return value in btrfs_listxattr() a97114b9b00ed btrfs: fix xattr replace when multiple xattrs are packed in the same item 2797eb38773a9 btrfs: unlock inode and extent in caller when io_uring read extent fails 7a3addbdc5ad1 btrfs: free iov when btrfs_uring_read_extent() fails 033dda5b321f0 btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio 77de9adf46f5b zloop: zero out only the unread tail of short reads 7057b683922fc arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 ce79a6c5cc1b8 nvmet: use the local P2P device on metadata allocation failure e76979e27f0c5 nvmet: return Invalid Field for invalid NSIDs feature 82h b7725acf9c574 ice: Restore Ordered MMIO Writes for Tx Doorbells cbab667ef8b5d tee: optee: ffa: support shared memory offsets on large-page kernels c83bf3973da6f tee: optee: fix kernel-doc warnings 7110c7f70c59e cxgb4/ch_ktls: disable softirqs around tid_list erases 181cb48c1e9af amt: send the relay's General Query directly from the receive path 85e5512369d4f net/sched: em_text: reject unterminated algo before autoload bea10b84e22ef drm/vc4: Free the BO cache size list on teardown 742619c8637b9 drm/aspeed: Balance the display clock enable on teardown 01318927a9055 gpio: exar: initialize the ID before registering its cleanup 5b26dbb27c0cb drm/dp: don't mark the AUX backlight enabled when enabling failed 73e8503fac49c Bluetooth: btintel_pcie: Add shared HW reset for clean start 39ab048cce70d Bluetooth: btintel_pcie: fix TX descriptor bounds check 62a167e7e6d8c fs: don't let a migrating task hide its reference from do_umount() 6850385e26bf2 fs: move mntput_no_expire() slowpath into a dedicated routine 7505f139d8995 mount: refuse MOVE_MOUNT_SET_GROUP on an unbindable mount cc21cda4cac5d arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value 5a673697e4a3e arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single ab0f32981ce39 arm64: dts: lx2160a: fix incorrect pinmux fea9c705bbc61 smb/server: fix tree connection leak in smb2_tree_connect() 46a431c0a25a8 ksmbd: convert tree_conns_lock to rw_semaphore 0af43b52fe4b1 printk: Don't WARN on kthread_run failure. 9bf96b4347f54 bpf: check_cond_jmp_op(): properly infer if register is null 8a3257f142ae5 net: stmmac: fix dma mapping leak in stmmac_tso_xmit() afca229b39acc ipv6: mcast: use rcu_assign_pointer() for __rcu list updates 45462e5ba345a ipv6: mcast: annotate data-races around mca_users a0cd9e22f8fae bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge 3a39bc9707fbd bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks 65f636322ac40 bpf: Mark syscall helpers as sleepable 364a31052aa9e ring-buffer: Add checking nr_subbufs to persistent ring buffer validation 5b40198a0c69e ring-buffer: Skip invalid sub-buffers when validating persistent ring buffer 6bb6ae5ab1bef bpf: zero extend the result of an arena 32-bit cmpxchg c4d3bdb3ab211 bpf: don't rewrite bpf_fastcall patterns entered by a jump 65bea674f43c0 bpf: Don't infer non-NULL from a pointer with an unbounded offset 8d19e2cdfba9b bpf: Keep refcount_acquire nullable for borrowed RCU kptrs bb667eb575c90 bpf: Mark NULL kptr stores precise 08b534bafdd9d bpf: Preserve inner map identity in callback frames 3f30b2cd4eba4 tracing: Fix subbuf resize races with trace_pipe_raw readers b1fe6379e401b bpf: mark a NULL call argument precise 787405e9e7bdc iommu/riscv: Serialize command queue publishing 3e6400e3b8b85 virtio_ring: fix stale descriptor flags after a failed packed add 831dab9b9bcc1 vduse: validate virtqueue alignment 7f8ee0b8f6324 vhost: invalidate vring access on IOTLB transitions d9232a90c6f7d tracing: Take trace_array reference when opening a tracer options file 30dacb56f0728 drm/amdgpu: skip the VMID 0 flush for VRAM 6ac7a29691558 smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid 2be31f252ade7 smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() 28289d880e6d1 ksmbd: fix maximum allowed access checks eb2e3bb27e78c ksmbd: remove redundant DACL check in smb_check_perm_dacl 2e7e39bb81913 remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 5c9ab0c9cede9 powerpc/xive: propagate IPI init errors to prevent use-after-free e3388edec1fff powerpc/xive: add error return value to xive_smp_probe() ebdd932dc24c1 ACPI: bus: Introduce acpi_bus_get_primary_device() 041cce629a08d drm/xe: don't WARN on kernel job timeout when device already wedged 40bab0da844c1 nfsd: convert nfsd_net boolean flags to unsigned long flags word 65aa0a4c4c1bf nfsd: use workqueue enable/disable APIs for v4_end_grace sync 96d4b275281b4 dm-pcache: validate seg_id fields from persistent memory 3d8391d3149a1 drm/amd/display: Fix dangling pointer in plane reset function 3a03827bb3cda drm/amd/display: Fix dangling pointer in CRTC reset function f786e7b3adbf3 dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout 7abc9b49ad01a uprobes/x86: Move optimized uprobe from nop5 to nop10 cf08ff2255de9 bpf: Reject MEM_ALLOC BTF accesses past object bounds 644cf4e77c277 bpf: Reject writes through untrusted BTF pointers 16a82add1918d platform/x86: dell-wmi-base: Fix handling of ultra performance key 93a20b14f8627 bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max 0203146ad4509 usb: gadget: uac: validate rate list length before storing 8410cd2690d46 platform/x86: asus-wmi: fix resource leaks on probe failure 1ad6456898f6e esp: do not unref managed frag pages in esp_ssg_unref() 80968b42d1308 RDMA/rvt: Return NULL after port allocation failure 6a2e023429a41 fs/resctrl: Fix UAF from worker threads when domains are removed c6492e1741204 cxl/features: Serialize multi-part Get/Set Feature transfers a60bc2df2d323 firmware: arm_scmi: Fix SCMI device destroy lifetimes f85333284fcb6 firmware: arm_scmi: Fix OF node reference handling 21bc07293ec4f firmware: arm_scmi: Clear SystemPower flag on create failure 074d062040197 ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() 094f0a895cf97 bpf: Fix WARNING in bpf_tracing_link_release 01b5fcdc30c0a pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip f3480c59f4ce9 scsi: ufs: core: Validate string descriptors 9d39f6dda00f6 scsi: ufs: core: Convert string descriptor format macros to enum 268cbe3a36ae5 iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() c36816feff47f PCI: Fix UAF when probe runs concurrent to dyn ID removal 5e81d109f2e24 PCI: Fix dyn_id add TOCTOU 0787e34b894bd PCI: Make pci_match_one_device() match on ID instead of device 2fcd26f468014 RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() ffd56ada81f97 nvmet: fix return status of RMI log page on allocation failure f2be47fa8e225 drm/panthor: Add vm_bind region with kbo range overlap check 23bed4ef132c5 wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() ffcc9ea4e4d12 md: remove REQ_NOWAIT support from raid1/10/456 7a1b971b799ea wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx() 2aa3d3b9fac91 wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete aca0cd273b486 wifi: mt76: cancel reset and rc work on device unregister 9a9e902bd0556 bpf: Reject >8 byte return values on return-reading trampoline paths e512823aabbdc wifi: mt76: mt7996: clear stale link state on full reset e9e2854fcff57 arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry 0ec1d14cf302a wifi: nl80211: clean up color-change beacon data on errors f334b26b884df wifi: brcmfmac: fix P2P action frame handling without device vif 9260a92ce90e6 serial: core: do fallible allocations before the console can be registered ddf51d74ee9f9 serial: core: clear freed pointers on uart_register_driver() failure 2af4c46b42990 tty: skip cdev_del() when no cdev is registered 2fd9c8112907c HID: logitech-hidpp: Fix FF device cleanup on init failure 8397942b67128 ublk: validate auto buf reg before taking uring_cmd f81972b235f3e bpf: Invalidate RCU pointers after final spin unlock 3556caa31a2bf PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers 9b405b3e7e131 thermal: hwmon: Remove hwmon class device along with its parent 9d44822ba34d6 ocfs2: o2hb: quiesce negotiate handlers and timeout work bf4bd72020f33 ocfs2/heartbeat: fix slot mapping rollback leaks on error paths 1f0f61573ba4c bpf: Clear buf on error in __bpf_get_task_stack 35ef785b25ee2 bpf: Remove trace_in argument from __bpf_get_stack 63669625833c4 bpf: Factor callchain_finalize function from __bpf_get_stack 8c30d9fd61ebf bpf: Factor callchain_store function from __bpf_get_stack 562d24ac214ba drm/amd/display: Resize MST HDCP per-connector arrays to 32 b5896fc269e9f drm/amd/display: disable replay when crc source is enabled d5f3dae82705d coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable e90f746f4ca38 scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails fcee001f57bdb scsi: sd: Move the sd_config_discard() function definition ce8103676f4d4 btrfs: check if root is readonly when setting posix acl 172f349f2c59b btrfs: apply the AUTO_K(V)FREE macros throughout the code 58b0ab0340ce0 btrfs: zoned: flush active metadata block group at btree_writepages() start 243bf1e45e40b iommu/vt-d: Fix iopf_refcount leak on RID domain replacement 11dfe2896ea23 iommu: Pass in old domain to attach_dev callback functions 6822ba1ae9b6d NFS: Return a delegation the client fails to record e4ab436d5ba61 bpf: Compare iterator types during state pruning a25ea67a913f9 clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type 6e6f8e3bfc66d nvmet: fix max_qid race between configfs and controller allocation 5c6593422eb3c blk-iolatency: clear delay state when freeing policy data b399a88eb8b16 blk-iocost: clear delay state when freeing policy data f4ca62414f4fb blk-cgroup: delay freeing policy data after rcu grace period d4ba9d888ac0a bpf: Check pointer type for all atomic RMW paths 272c05a51285f ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() dc1e34f78dfab ksmbd: serialize oplock close with pending break ownership ff6870cf3b7ec ksmbd: defer publishing granted locks to prevent UAF/double-free race 52b91bc5253bb ksmbd: safely discard unregistered deferred locks f77d2accafca5 ksmbd: detach blocked lock requests before freeing 1ff0e41afbe73 ksmbd: scope session state changes to bound connections d39da3ff8d39c dpll: fix NULL deref in dpll_device_ops() during teardown race 5235abdb760bb virtio_net: Fix resize of the RX ring 0887d41abf766 irqchip/gic-v5: Clear per-CPU IRS data on teardown f57b0fd1c62e1 ip6mr: do not clone dst in ip6mr_cache_report() 884cbf15ccd39 net: bridge: arp/nd proxy: fix reading neigh ha f43ef9a3f9c12 vxlan: fix reading neigh ha f4d23937e1c41 NFSv4.1: zero referring call lists before decoding 68fb30607169c net/sched: account classifier filter allocations to memcg 1ca1df82d9248 fuse: Fix the condition to enable over-io-uring 8460dc49c9756 Bluetooth: L2CAP: access chan->conn safely in get/setsockopt 8a8585e421d06 Bluetooth: do not leak an hci_conn when a second LE connect is rejected 7b3e08eea1e8c net: mana: Cap MSI-X vectors to the device MSI-X table size c08314f917829 octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() c6b56b8d549a0 netfilter: nf_tables: skip double clone set expressions on element insert ef4dee4640c6a KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped 506f03b5f869c LoongArch: KVM: Validate MSI data before routing it to EIOINTC 34a2a7134fd66 LoongArch: KVM: Get VM PMU capability from HW GCFG register 56c2c5ad35614 media: chips-media: wave5: Resume device before setting EOS flag c26cbd5c33cd7 drm/amdgpu: force complete the KIQ ring fences on reset 7d722821e2f62 drm/amdgpu: force complete the MES ring fences on reset ef073edd7cfd3 zram: fix out-of-bounds access in writeback_store() 836ce2b99bcce lockd, nfsd: RCU-protect nlmsvc_ops dispatch df5500ab85df6 nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths 9646dfee88073 ceph: fix UAF in check_new_map() on session freed during unlock e1f692b6da3e6 cifs: call pagecache_isize_extended() in cifs_setsize() when extending 5481766125041 ext2: Fix lost inode updates for IS_SYNC inodes 0692a8fdf0222 kho: fix size calculation in kho_preserved_memory_reserve() 996dd15f60121 SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 5909f8f04e9b7 SUNRPC: Switch MIC token verification to crypto/krb5 ffb0423b4f4b0 SUNRPC: Switch MIC token generation to crypto/krb5 1e9125bb7948c SUNRPC: Switch wrap token decryption to crypto/krb5 5ec781a29eed1 SUNRPC: Switch wrap token encryption to crypto/krb5 6b4d0c9cf2b10 SUNRPC: Prepare crypto/krb5 encryption and checksum handles 5cf04fdbbf30e SUNRPC: Add errno-to-GSS status conversion helper 08efba8d62560 SUNRPC: Add crypto/krb5 enctype lookup to krb5_ctx 65f0f82f20334 svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails 35d5dd0c2fd1e svcrdma: wake sq waiters when the transport closes f35cf68b14422 svcrdma: Add Write chunk WRs to the RPC's Send WR chain ddbd71a378094 RISC-V: KVM: Fix PMU event info array size overflow 0d4316e30efc8 KVM: riscv: Fix Spectre-v1 in PMU counter access 0f035333e1994 ntb: Store original DMA address for future release b8cd3b632a0ce NTB: ntb_transport: Use ntb_get_dma_dev() for DMA buffers 6a01c4d3a3ae1 NTB: core: Add .get_dma_dev() callback to ntb_dev_ops 7672973957e3e tipc: avoid busy looping in tipc_exit_net() ed7e9715849ab fbdev: Wrap user-invoked calls to fb_set_var() in helper 69164d6bdad5d drm/amdkfd: Add bounds check for CRAT subtype length 39841db9322cd drm/amdkfd: Fix infinite loop parsing CRAT with zero subtype length 22c2169770ad3 bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie bea1f73ad69ee drm/amd/display: check if dml21_add_phantom_plane() is successful 63844dc03960b dmaengine: idxd: fix double free of wq, engine, and group structs e299b7d1334eb idpf: bound interrupt-vector register fill to the allocated array a4de6fc95b2f3 Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks e124f7b170337 soc: xilinx: Fix race condition in event registration afef4b0de4f3c drivers: firmware: xilinx: Switch to new family code in zynqmp_pm_get_family_info() a19c48d9f5a73 drivers: firmware: xilinx: Add unique family code for all platforms 547ea9f567498 netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag be7fb59512ffc btrfs: lzo: reject compressed segment that overflows the compressed input 0977a6f234396 optee: ffa: Add NULL check in optee_ffa_lend_protmem fdc93f4a80107 scsi: core: pair EH runtime PM get and put 5cea365559449 ovpn: defer key slot crypto freeing to workqueue eb81c8e758f49 ipvs: revalidate ihl to prevent out-of-bounds access d10e73572cda4 eth: bnxt: avoid deadlock when canceling IRQ affinity notifier 21f5381a57a5f eth: bnxt: decrease indent in bnxt_request_irq() bf3f37c2d40b5 gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock 868c478abce85 soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read 056876c9db1e9 btrfs: lzo: reject inline extents without valid headers 618fc8dc219c1 accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() b3d05a335cbd3 accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() 4af94462c0ca2 bpf: Fix netns reference imbalance in conntrack kfuncs b57164cdddb46 vhost_iotlb: bound map allocation in add_range 2b80707b9e276 eventfs: Use children field for rcu head and add memory barriers 969a96479add6 btrfs: skip global block reserve accounting for rescue mounts f5427cab06564 btrfs: warn about extent buffer that can not be released 23b0f4117e970 btrfs: only invalidate btree inode pages after all ebs are released a6f972c50552e btrfs: split btrfs_fs_closing() and change return type to bool f8e5715a37378 KVM: arm64: vgic: Fix race between LPI release and re-registration 4b296d176580a nexthop: take nh->lock for f6i_list walks in replace check and notify f97fae992155b nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush 2c0a8cc97a9d9 xsk: reclaim invalid Tx descriptors in ZC batch path 1ff789fdfa231 xsk: provide sufficient space in pool->tx_descs 9990cac513e8b net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds 15ed8a9b7c63e netfs: Fix folio_queue ENOMEM in writeback by adding a mempool ff5625d27415a Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback ff926f3ef6c80 Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs 946dc5835c8fb net: Convert proto_ops bind() callbacks to use sockaddr_unsized f1b4c6aaf7655 hdlc_ppp: fix potential null pointer in ppp_cp_event logging 68ffe4265775e Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback a76243488740a octeontx2-af: Block VFs from clobbering special CGX PKIND state 59adeedebf02a s390/zcrypt: Close speculative mem read possibility 20b0b0159390f s390/zcrypt: Rework domain processing within zcrypt device driver 2a25ddf0bf6dd s390/zcrypt: Move inline function rng_type6cprb_msgx from header to code 23a541c31b45f drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport 029b363c9b690 md/raid1,raid10: fix error-path detection with md_cloned_bio() bcf30e14d2bd5 md/raid1,raid10: fix bio accounting for split md cloned bios ea2d1d2ebf60b md/raid1,raid10: fix deadlock in read error recovery path e4a59511e1abd md: replace wait loop with wait_event() in md_handle_request() 55c6f05b66772 wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() c09314b8b4c62 wifi: ath12k: fix inconsistent arvif state in vdev_create error paths d94bf50756d7f ocfs2: validate fast symlink target during inode read b4059a1f57eff bpf: Reject sleepable BPF_LSM_CGROUP programs at load time 68cf46755894d wifi: mac80211: bound S1G TIM PVB walk to the TIM element 0901d2c894426 wifi: ieee80211: split S1G definitions out f488b83a38103 ixgbe: do not configure xps for XDP queues 29e07ec352f0a ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT 0bc97a4110e87 ext4: add mext_check_validity() to do basic check 6166cb1344f16 iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path 98c7e206af48b cxl/region: Block region delete during region creation 53fb46cf933dc netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them fcacd948b10a3 netfilter: nft_fwd_netdev: use recursion counter in neigh egress path 7d5a0dc8eaab4 netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding 33aed3ba04aa5 RDMA/bnxt_re: Free CQ toggle page after firmware teardown 2106c337905d7 RDMA/bnxt_re: Add a max slot check for SQ b422e3eff0edf net: serialize netif_running() check in enqueue_to_backlog() 9a6916a934277 net: fully inline backlog_unlock_irq_restore() 459536b3acf13 net: optimize enqueue_to_backlog() for the fast path 580896e330038 fs/ntfs3: call _ntfs_bad_inode() when failing to rename da6675b393516 fs/ntfs3: Reformat code and update terminology 308d7951ca221 i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() 7a45046068791 md/raid1: fix writes_pending and barrier reference leaks on write failures c642583adc136 md/raid10: fix writes_pending leak on write request failures 453f4f1e90de5 bpf: Guard conntrack opts error writes 644b4c05bd1a4 bpf: net: netfilter: drop dead NULL checks 3827ff67f9fbe tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() 9de9e8f279de0 drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock bc8f2d1c6f7cf xen/pvcalls: bound backend response req_id before indexing rsp[] 177d22d31a4eb iomap: release pages on atomic dio size mismatch 0be672071d6e8 net/mlx5: LAG, Fix off-by-one in single-FDB error rollback 31cc289d5b179 Bluetooth: 6lowpan: avoid untracked enable work 3dd12422653ad accel/amdxdna: Fix VMA access race 33819cca7b76d accel/amdxdna: Refactor GEM BO handling and add helper APIs for address retrieval bf63433873a06 accel/amdxdna: Fill invalid payload for failed command 08ff33dce6f91 net/liquidio: drop cached VF pci_dev LUT 241cf3b7455be accel/amdxdna: reject user command submission without a command BO 0a2c89d538fd4 ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD 4739b1b833cf2 ata: libata-core: Disable LPM on Silicon Motion MD619{H,G}XCLDE3TC 1c3d9c6bd5b79 wifi: mac80211: validate extension-frame layout before RX 9cbad9c8125f5 net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains c59a693fbd213 drm/amd/display: use kvzalloc to allocate struct dc c2ddd180bbee7 wifi: cfg80211: use wiphy work for socket owner autodisconnect 01f8a354497ba bpf: Fix UAF in sock clone early bailouts 0b2c44363432a bpf: Use rcu_read_lock_dont_migrate in bpf_sk_storage.c 88c38ff74f834 drm/xe/guc: Keep scheduler timeline name alive 81f70f130eff9 drm/xe/guc: Hold device ref until queue teardown completes 8549ac21ab503 bnxt_en: Handle partially initialized auxiliary devices e611403f30928 fwctl/bnxt_en: Refactor aux bus functions to be more generic 5d3cea7d41dc7 tipc: serialize udp bearer replicast list updates 6089f561e2c31 cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths 984ce52ea0e01 cifs: prevent readdir from changing file size due to stale directory metadata 0c07e046e6391 drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers 16656c3d73469 LoongArch: BPF: Zero-extend signed ALU32 div/mod results 08fffd2881e28 idpf: fix max_vport related crash on allocation error during init c174969f6af6c drm/i915/gt: Fix NULL deref on sched_engine alloc failure f7e744bac9a72 drm/amdgpu: Fix kernel panic during driver load failure cfb5a56c21888 ksmbd: prevent path traversal bypass by restricting caseless retry 3eaec47518e12 smb/client: fix chown/chgrp with SMB3 POSIX Extensions d16713c060066 wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon 3f9c0fdefa043 KVM: guest_memfd: Treat memslot binding offset+size as unsigned values 5afc2d9b86bed netfs: Fix zeropoint update where i_size > remote_i_size b76568c672184 drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() fcb23bb31508b erofs: fix metabuf leak in inode xattr initialization 48d09dea506de net: hsr: defer node table free until after RCU readers a2650f8461cd8 wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb 3899d6f924925 wifi: mac80211: fix missing RX bitrate update for mesh forwarding path f669571a2bf50 netfilter: x_tables: allocate hook ops while under mutex a014668cbd95b netfilter: x_tables: allow initial table replace without emitting audit log message f048f297d93fd netfs: Fix missing barriers when accessing stream->subrequests locklessly 93531bca46707 afs: Fix the locking used by afs_get_link() 86f4c1586418d cachefiles: Fix error return when vfs_mkdir() fails b9390aa62fdca nvme-pci: fix dma_vecs leak on p2p memory fba32257979dd nvme-pci: fix dma mapping leak on data setup error c85f325d9ec31 ACPI: button: Fix ACPI GPE handler leak during removal 78677084cd090 ACPI: button: Tweak acpi_button_remove() 38c79dacc8063 ACPI: button: Convert the driver to a platform one bad88022f8949 ACPI: button: Adjust event notification routines 4ec3a8ca97394 net/sched: fix packet loop on netem when duplicate is on b050fd0c2063b net: Introduce skb tc depth field to track packet loops 2090c1a236833 KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor fa34d3e14cb76 drm/amdgpu: fix amdgpu_hmm_range_get_pages 768daa9f4276b netfilter: nf_tables: add hook transactions for device deletions 7e4ab3907f44d f2fs: read COW data with the original inode during atomic write 8363c219d88e7 fbdev: omap2: fix use-after-free in omapfb_mmap 48ac6bab9999b fbdev: omap2: fix inconsistent lock returns in omapfb_mmap 4338663dfd21b power: supply: max77705: Free allocated workqueue and fix removal order 4e1af66d855f5 power: supply: max77705: Drop duplicated IRQ error message fa4be2054a3e2 workqueue: devres: Add device-managed allocate workqueue 5459933a799aa net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind a8c1480bb066c drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED afe815a67ec8f wifi: cfg80211: enforce HE/EHT cap/oper consistency daacc9d1430b6 ptp: ocp: fix resource freeing order 9446167bef89b ptp: ocp: Make ptp_ocp_unregister_ext() NULL-aware de05e37d02f3f ublk: reset per-IO canceled flag on each fetch 09207dc57ab4c powerpc/64s: Fix unmap race with PMD migration entries e72ffe59e48a7 greybus: raw: fix use-after-free on cdev close cb06a07d835ba f2fs: fix data loss caused by incorrect use of nat_entry flag 910e498613d5b ice: fix double-free of tx_buf skb c789649d4334a ice: fix potential NULL pointer deref in error path of ice_set_ringparam() e98cea6d5562f ice: fix race condition in TX timestamp ring cleanup cbfbc9d446d98 ice: reshuffle and group Rx and Tx queue fields by cachelines 349499a65b6b5 ceph: put folios not suitable for writeback 5df268406ef38 libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() d0ce7b07dafe4 drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure 060f8f3020516 drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure dc24e03be0e4b Revert "net/smc: Introduce TCP ULP support" 2da62dbb4169e drm/amdgpu/userq: fix access to stale wptr mapping b33d6f5da16e0 pseries/papr-hvpipe: Fix race with interrupt handler 51a321dec76f7 papr-hvpipe: convert papr_hvpipe_dev_create_handle() to FD_PREPARE() 1d15503e454bf drm/amd/display: Fix dc_link NULL handling in HPD init 96889fcdb0988 media: iris: fix use-after-free of fmt_src during MBPF check 46edfdcf95d2b media: iris: turn platform caps into constants b0eb0a8959ac2 KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT 73df74544b552 udf: fix partition descriptor append bookkeeping 4456be93464a5 gfs2: fix memory leaks in gfs2_fill_super error path 370154a83a835 gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn 1b6a9f81c4715 gfs2: Get rid of delayed withdraws dfd14e14772c6 gfs2: Asynchronous withdraw 604dca7c20a15 gfs2: Add clean argument to lm_unmount hook 74b981f0d3b90 gfs2: Clean up quotad timeout handling 9e0652e243ef4 gfs2/sysfs: Replace sprintf/snprintf with sysfs_emit e0e31a7ed1191 ASoC: amd: acp-mach-common: Add missing error check for clock acquisition 4097a2afe8acc scsi: qla2xxx: Completely fix fcport double free 57a79c5df057d soc/tegra: pmc: Fix unsafe generic_handle_irq() call 5133ef7c893c2 media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC 6c5d98f24f995 media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure 6ad4caadc6343 btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() 6311ee6daa9cc btrfs: remove 'reserved' argument from btrfs_pin_extent() 81e1ae665004b btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() 559f856b109c4 hfs: Replace BUG_ON with error handling for CNID count checks 3a409a64b2d61 ASoC: qcom: q6asm: drop DSP responses for closed data streams d9bf525dff80b ASoC: qcom: q6asm: handle the responses after closing 02b033e18e08a drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 203a9241a7384 drm/amd/display: Rename FAMS2 global control lock to DMUB HW control lock 28768bc7ea0b1 srcu: Use irq_work to start GP in tiny SRCU 37419fa1b0bc2 irqwork: Move data struct to a types header d14847cb7f65d mshv: Fix error handling in mshv_region_pin f33de03b47c14 mshv: Move region management to mshv_regions.c 06c0ce18055a5 mshv: Centralize guest memory region destruction 93ed80634288d mshv: Refactor and rename memory region handling functions a40a75df33267 static_call: allow using STATIC_CALL_TRAMP_STR() from assembly 5cfa4f537a056 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists 971854e7b6ddd ALSA: ctxfi: Check the error for index mapping 88cc09bb70651 ALSA: ctxfi: Refactor resource alloc for sparse mappings 1422b94887c5c ALSA: ctxfi: Use explicit output flag for DAIO resources c0904c424f7da ALSA: ctxfi: Add hw parameter to daio_mgr_dao_init() dbc8b8d33c9e1 Bluetooth: hci_event: move wake reason storage into validated event handlers c516c2e06fe58 net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path 2352d719cccfc net: ti: icssg-prueth: Make emac_run_xdp function independent of page 2157742f5c32f net: ti: icssg-prueth: Add functions to create and destroy Rx/Tx queues 41f3fa0d14bb8 ti: icssg: convert to ndo_hwtstamp API 6e5c3ddf17a2c blktrace: fix __this_cpu_read/write in preemptible context 6b3546e3a8c66 accel/amdxdna: Fix NULL pointer dereference of mgmt_chann 2f62f8be57882 PCI: endpoint: Add missing NULL check for alloc_workqueue() b0d908230b3d8 PCI: Add WQ_PERCPU to alloc_workqueue() users b569ff8a1bc1b accel/amdxdna: Fix potential NULL pointer dereference in context cleanup 09ed30edcfa1f accel/amdxdna: Add hardware specific attributes 3bdd26582d026 accel/amdxdna: Enhance runtime power management 5a7d0e2810891 ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands e01c79761c7b3 namespace: handle mount locking for automounts correctly 6b8dc3713a763 namespace: never expire a locked mount 494c57572d2d5 namespace: refuse an automount below a mount that is in no namespace fa75dae156df1 fcntl: refuse F_SET_RW_HINT on an immutable inode 5f97df8ca7fad namei: don't reveal overmounted entries in refwalk d29cd99db3db7 namespace: unhash a dentry before detaching the mounts on it 7e1c466011ba9 namespace: don't let a pseudo dentry become the root of a mount 390ddcea2a8ac dcache: don't put a mountpoint on a dentry that's being removed e3aba6900483f namespace: check the mounts before reading their parents in pivot_root() 888363d74c3b5 namespace: remove the fsnotify marks of a mount namespace in process context b9c40553f6ceb namespace: look at the topmost mount for a mount namespace file a0ba48256f5df namespace: check a recursive bind mount for mount namespace loops d73f04e92c1aa namespace: check a submount for references right before unmounting it acbe9e4418e2e namespace: queue a mount only once for mount notifications 33b4344f69013 namespace: check the target before walking it in do_mount_setattr() c44f5c30f0a97 fs: refuse fspick() on internal superblocks b47b40c4f0584 namespace: don't copy an unmounted mount tree eecc9cd0fc07d namespace: don't inherit MNT_UMOUNT in clone_mnt() 5e0a1f2c753a7 namespace: reset the old parent's ->overmount in mnt_change_mountpoint() bf2c8dec26fb7 fs: don't silently unmount busy mounts 9bd1181b36f2d mount: keep a copied mount unbindable c6307228af65a drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs d9da2f7bbbffb drm/amdgpu/userq: return the memdup_user() error for the user MQD 112dbe2b10d6d drm/amdgpu/userq: only accept doorbell BOs as queue doorbell 21aee7fc9310d drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks 1a5c03198ae86 drm/amdgpu: make Mac FB workaround generic 8d6f773d74790 drm/amdgpu: serialize vblank counter reads against GPU reset 3d4890b4ab04f drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info f009879ed9906 drm/amdkfd: align SDMA doorbell base for shader doorbell writes 3a11adcfd9a2d drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin 993c952e6832a drm/xe: Fix shrinker accounting double-subtraction on nested external pins 76e5ddd7d9822 drm/vmwgfx: validate pitch coming from userspace ea22f8a5d11a4 drm/vc4: Fix firmware reference leak in vc4_drm_bind() e61465d3e0292 drm/vc4: drain the hangcheck timer and works on V3D unbind f9b215b3e37a5 drm/imagination: Size page table preallocation by device address 0b4a0fb98b9ff drm/i915/gt: Unmask interrupts only when ACTIVE is true 152fb5083b933 drm/i915/gem: Prevent overstepping exec array boundary cd7bec509c180 drm/gud: don't keep a connector without a CRTC as connector_state 4e7b508c7c60d drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN a661f401f83b8 Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown 4f46de658ce61 Bluetooth: RFCOMM: free the skb when the DLC has no owner b108ea7ebba14 Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() ec227cddd13cd Bluetooth: MGMT: Fix status of pending commands flushed on power off c6489a3a0ac8c Bluetooth: ISO: Serialize concurrent connect calls 90b744066ca52 Bluetooth: ISO: Reject concurrent BIS listener setup 7db33b36213a3 Bluetooth: hci_sync: Fix command skb lifetime during scan setup c3d2799877906 Bluetooth: hci_sock: Serialize dead-device detachment c9c20d334cd5e Bluetooth: btintel_pcie: use managed IRQ teardown 71beae6f2e8bc riscv: hwprobe: use _BITULL() rather than BIT() in MIPS vendor uapi header 2e5c80bbc062a riscv: futex: untag the user pointer before the atomic access b86e88a3dc6e1 riscv: fix load_unaligned_zeropad() fixup for RV32 fa465a7819ecb riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE 7d1367a53137e riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp 8bfcbd5022818 scsi: qedi: Initialize callback state before registration ce2eee635fd3e pmdomain: rockchip: propagate subdomain add errors 1072890e6c1af pmdomain: rockchip: fix clock leak on domain probe failure 5874c0e2bd030 pmdomain: rockchip: don't ignore clock lookup errors on attach 28606d4d4dbe8 pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains f6fbe9c6b3996 regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 199a62d70314d regulator: ltc3676: don't read the write-only HRST and CLIRQ registers 681adbc9c7a82 optee: register TEE devices only once fully initialized 55f12552b00a3 openvswitch: fix soft lockup in the netlink flow dump 558a189ca357d nvme: fix swapped ZRASF zone state values for full and read only 961563117626f net: team: free skb when broadcast has no txable port 0c0568c9d35c4 net: team: stop reusing skb after queue override 5b144f83f2179 net: usb: ax88179_178a: fix rx frame length for non-last packets cc7cc5955d22e net: sparx5: free the matchall entry on destroy 5551399751e2c net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() d7fea7141036f net: dsa: microchip: fix KSZ8765 fiber detection d109141ba1465 net: bridge: avoid recursive multicast port cleanup 6a1833f0d7dc0 net/smc: protect clcsock lifetime in smc_getname 3efe0e0944157 net/packet: guard the ll header push in packet_rcv_spkt() 3a1caa886d41d mmc: sdhci-sprd: disable runtime PM on remove 46e75703ca3f0 mmc: mtk-sd: Cancel request timeout work on remove 9ac3fd9dc917d mmc: cavium-thunderx: destroy slot platform devices on remove 8668f432a9bf7 mmc: cavium-octeon: destroy slot platform devices on remove e3bf232c913b7 dm: fix reading free memory in do_resume c86f80cd246c0 dm-snap: reject the transient exception store for snapshot-merge 4f0ee735dc68e dm-integrity: fix buffer overflow in inline mode with large tag size a1a875614dae4 dm-crypt: reject the lmk IV mode with AEAD ciphers 7a25ca170c12a mm: don't schedule deferred kernel page table freeing while booting d7e811c3a49cd memstick: rtsx_usb_ms: complete requests after eject instead of dropping them f2795c50144d5 memstick: core: wait for request completion before freeing card 11516a0c402a6 KEYS: Fix add_key() race with keyring restriction 955b1f75c4001 keys: finalize persistent keyring timeout after link attempt beb05f484a1e4 ice: fix metadata_dst refcount handling on representor teardown ca8a6285b11d0 ice: fix use-after-free in dynamic port cleanup bb8f6b89587d0 ibmveth: fix TX LTB and filter unwind on open-fail a065bd31ec462 ibmveth: h_free logical LAN on open-fail after register 06656aaa7e43a gve: fix XSK buffer leak on error descriptor 506f9de069d07 gve: fix XSK buffer leak when rings are stopped 42935a6100192 gve: fix napi_disable deadlock when attempting to disable XSK pools a027e0d7765d1 gpio: xilinx: fix runtime PM leak on request error path 76390ac0bca7e gpio: mpsse: fix race when arming the IRQ poll worker 1eb70d10bbb8a EDAC/amd64: Mask UMC chip select to the four implemented selects 2d79ddc9a0cc0 sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute 5509d498e1b9e selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts 5a41bcc5057dc selinux: fix data race on AVC latest_notif 215c29f7f4606 Revert "wifi: libertas: reject short monitor TX frames" 1428c5f1d346a tipc: hold a reference to nodes found by link name 0af8780bdfdfc tipc: destroy topsrv workqueues before closing connections 1c7463ac0e99c tcp: reject net_iov in zerocopy receive mapping hints 3d555c31b0d27 swiotlb: fix default_swiotlb_limit() for non-growable default pool d2b5f637b9b67 strparser: make sure __strp_recv isn't running before tearing down the parser 65cb86860a80f tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() 086944c1c2cbb xen/netfront: don't leak the skb when xennet_fill_frags() fails b12a25fb2b9d5 workqueue: Fix NULL current_pwq deref in chained work check 4d64a3d6e96aa wireguard: noise: reject response consumption after intermediate initiation 38da24fd5c9d0 wireguard: queueing: preserve tstamp_type when encapsulating packet d730b466496ce wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init() dd117d17e8aa2 wifi: mt76: mt7603: initialize global station WCID eef16a74ff8ed wifi: brcmfmac: fix P2P device removal race in brcmf_detach() 38bad3930b118 vsock/virtio: account only unread bytes in read_skb() 6139c710d8bee usb: f81604: fix struct f81604_int_data size mismatch 5680b6fb30546 dm ioctl: don't let data_start run past the buffer 2200fe1d6148b cipso: adjust cached option offsets when removing CIPSO 8d88d3221204f cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() 12ba7d8b9cd45 btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() a768b88cd157b ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) 13bbcfe755d46 arm64: irq: exclude the softirq stack switch from KCOV 1ea7241101753 ALSA: hda/tas2781: Accept V1 calibration data without CRC f7dc71c1ce885 ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers 0b0278e760d7b Input: xpad - add support for Corsair Novablade Pro 2e4f80c023119 Input: xpad - add support for 8BitDo Pro 2 Wired Controller for Xbox d738e51bf2c21 Input: ati_remote2 - fix type confusion in device attribute handlers 4ac7d92a4698e ipv6: do not warn on route notification size race 7dfa7ca97f3ac ipv4: do not warn on route notification size race c1f48d1c2d5e9 ipv4: stop route notification sizing when nexthop group shrinks 21cba134c30c1 ipv4: stop exception dump when nexthop group shrinks c6d670ac656ba ipv4: stop PMTU walk when nexthop group shrinks 71cbad138969e rust_binder: reschedule node refcount update on thread exit f3e835af6226f ipv4: validate checksum_start before completing checksum fa1bceba169b1 ipv6: Fix redirect exception creation for UDP/RAW sockets 61a32face36f7 crypto: drbg - Fix ineffective sanity check af98611ad109e net: dsa: mt7530: fix .get_stats64 sleeping in atomic context 4d8ed219b1921 f2fs: fix to reset all pinned status during fggc b2cf17d39dd2c f2fs: fix to shrink gc_lock coverage in f2fs_gc_range() 3f63f071bf82b accel/amdxdna: Bound the sync_bo flush range to the BO size d7b9770a487e1 ynl: fix schema check errors 3a49853272bd3 doc/netlink: netlink-raw: Add max check 56760e83aa4e8 netfs: zero the tail of a short DIO/unbuffered read 61519a5a1d70f net: mana: Skip WQ object destruction for uninitialized RXQ b5aa7f1773f80 net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() 867119b4b5880 net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry 639522e5056ca net/mlx5e: Prevent stale XSK buffer release on refill retry 50cff3f112d64 fs: Free any excess xarray nodes in clear_inode() fbd977e513971 bnxt_en: fix DMA mapping length for padded small packets 17ad2612c11a7 Linux 6.18.56 a47406c769f72 ipv4: free inet_opt and ireq_opt after an RCU grace period b473ee29aa0d3 iio: adc: adi-axi-adc: Initialize state mutex bb29dd90885b4 iio: adc: adi-axi-adc: Make use of dev_err_probe() e05c55de819b4 iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs 845c959178cca net: mana: Sync page pool RX frags for CPU 55aa2774323e7 net: mana: remove double CQ cleanup in mana_create_rxq error path 72d2f54367895 xen/netfront: drop RX packets with a short Ethernet header 626deff23b544 net: usb: qmi_wwan: add Quectel EG120K-EA 525694a6021ec KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails 81d7875515906 KVM: x86: Add static calls for nested virtualization ops 69f1d46341c28 KVM: x86: Reject nested CAP enablement if nested virtualization is disabled 9a4605ac9045d KVM: move TSS constants from kvm_host.h to tss.h 318ef696fa3c7 KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted 267c586a090a4 KVM: arm64: Use stage-1 leaf size for VM_PFNMAP 1113374a17d7f KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT e4f086a7d7074 KVM: arm64: Always populate FGT masks at boot time a014b1a377e45 KVM: x86: Move IRQ-related helper declarations from kvm_host.h => irq.h cf0654248c87f arm64: errata: Add Cortex-A725 erratum 3821522 workaround 424e851050f47 arm64: errata: Factor out broken AMU const counter cap 277c4d8eac0ba arm64: mm: Fix the break-before-make flush range for erratum 2645198 e506333d1b9f4 perf: Require kernel access for text poke events 2581b43e162cf perf/core: Check kernel access when kernel callchains are requested a16986dac7be5 perf: Replace perf_event_header__init_id with full header init 624370942abd3 unwind: Shorten lines 08bf919f041af tty: fix saved termios reset race 9e8595cbd31db usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41 100f92cc90149 tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2 ba927133b3018 usb: dwc3: gadget: fix IRQ storm on invalid event buffer count 9b995b757a87d drm/amd/display: Fix fast updates on DCE 8.1 6f36088234647 drm/amdgpu: reset VI ASIC on MacBookPro14,3 d12b62677fb48 drm/amdgpu: reset VI ASIC on MacBookPro15,1 0e0fd96b26263 drm/amd/display: Preserve eDP mode on initial ASSR failure 8786c5bc77375 drm/amd/display: Mark DCE 6.4 as not APU 6b0cc4e32599f iio: adc: ad4030: fix invalid oversampling_ratio validation 23222e50948a2 iio: adc: ad4030: Use BIT macro to improve code readability 9c8158ef4ccce units: Add HZ_PER_GHZ a0a1929d66d6b smb: client: only require read lease for size-extending preallocate aec958676fb75 iio: adc: aspeed: propagate reset deassert errors 49c97ba1a3a3f iio: adc: aspeed: Simplify with dev_err_probe 74d723eee7296 smb: client: distinguish real EOF from a stale remote_i_size on read cecf4114069fc smb: client: flush dirty data before zeroing a range 405a969c0b335 thunderbolt: Don't access a DP tunnel after its DPRX read was canceled 9cedbfde14500 wifi: mac80211: set info->band for 802.3 encap offload frames cbdcf80683f53 wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() 03525b632908b wifi: mac80211: count only matching reservations in reserved switch 80e8b0ea73ba2 mtd: spinand: fix NULL pointer dereference with no ECC engine 2d86abd280714 nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known d3d6d7efdacc0 nvmet: copy the hostid into the ctrl before creating PR pc_refs dd053fc01eefa nvmet-tcp: Don't error if TLS is enabed on a reset 889c61e3d0f10 Bluetooth: Serialize SMP remote OOB data access e887e43bd5aa7 fsverity: add dependency on 64K or smaller pages b4c0c41b952c2 fs,fsverity: remove check for fsverity being enabled in setattr_prepare() 2efdeec99ca09 fs,fsverity: reject size changes on fsverity files in setattr_prepare 8f317daa50fe1 rust: irq: pass RegistrationInner as cookie to request_irq 333fa4bb5dbbe rust: devres: ensure revocation is complete before device finishes unbinding e7930d857cc79 rust: devres: fix race between concurrent revokers 5017fdcb5ad73 rust: devres: add 'static bound to Devres 8ae7e5dec4f34 rust: devres: fix race condition due to nesting 946ae2e1669b6 mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc 60f3b22d501dd mm/vma: rename __mmap_prepare() function to avoid confusion 98f6a4589e0f5 netfs: clear post-EOF pagecache when extending a file via write 4b8ce1686dea1 pfcp: fix socket lifetime on netdevice registration failure 8bed333470a1b mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages 0a6c9b3801903 drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read e68380710fc97 svcrdma: Use svc_xprt_put to free listener on create failure d1d9694ae47da mptcp: fix msk->timer_ival reset e64703280ce7a iio: trigger: cancel reenable_work before freeing trigger e113bac1d5e72 iio: proximity: vl53l0x-i2c: claim direct mode for raw reads 28e76a775c304 iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler a70d84d2f6c32 iio: proximity: sx9324: Correct proximity channel resolution 20ebd7f4e35c0 iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure 58237debc18dd iio: proximity: isl29501: Fix return type of isl29501_register_write 6501b032be217 iio: proximity: aw96103: validate firmware data length 493e743ea1b59 iio: pressure: rohm-bm1390: Return error when read fails 4fd5a61e61d68 iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup 10a958e76c737 iio: light: rohm-bu27034: Fix infinite delay on error cc71400bc965c iio: light: gp2ap020a00f: drain irq_work after free_irq ce308ce18dedc iio: imu: adis16480: fix unprotected debugfs reads 50e8d70ba0743 iio: imu: adis16400: fix unprotected debugfs reads 60699102827fd iio: health: max30102: fix NULL dereference in interrupt handler b53dc6e15aead iio: gyro: adis16136: fix unprotected debugfs reads 786f0162fe6d2 iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() d6a83a5015071 iio: cdc: ad7150: fix OF matching and publish module aliases b134ef820610b iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. b466db9e68b47 iio: buffer: serialize buffer teardown with mode claims 8aef1e8bdd86d iio: admv1013: initialize callback mutex before registering notifier a5fe2d1b55fab iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind f44e2ac2fb114 iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls d74c2489acc5f iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure 6dd3bf785d030 iio: adc: stm32-adc: fix possible division by zero in processed channel 2754d336af34b iio: adc: stm32-adc: fix check on internal channel availability 56e8e9d9992b4 iio: adc: rohm-bd79124: Fix rising alarm 2a3fd11fd0e19 iio: adc: rohm-bd79124: Fix GPIO mask check 02a9e6a95a3bf iio: adc: rohm-bd79124: Fix channel initialization 1d8beaae5a745 iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop 2eb7f097e15dc iio: adc: pac1934: check ACPI label duplication fe0ceff995d91 iio: adc: max1363: sign-extend bipolar differential channel reads f87d392bb4ebf iio: adc: axp288: Add TS bias override for Haier HV103H ed1a6230155fd iio: adc: ade9000: request interrupts after powering the device f73b94acc7ec8 iio: adc: ade9000: handle Phase C dip events in IRQ1 handler fddb6cc28134b iio: adc: ade9000: fix overlapping scan_index for current and voltage channels d2400175228fb iio: adc: ade9000: fix NULL pointer dereference in clkout registration f20b94a7dc1ff iio: adc: ad_sigma_delta: fix use-after-free on unbind 0633f83c4caa9 iio: adc: ad7173: Fix digital filter configuration d2261795797bc iio: accel: sca3000: fix frequency divider condition check 3365209e758c8 iio: accel: kxcjk-1013: reject duplicate event disable 5c7ca8fe72064 iio: accel: kionix-kx022a: Prevent memory leak and fix state 4165641d06ef4 smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races f82242fe3109a smb: client: flush and commit data before querying allocated ranges dce9bca8afcbd smb: client: discard post-EOF pagecache when extending a file via copy range b75dadb50a25e smb: client: discard post-EOF pagecache when extending a file via zero range 2f97f929dad9e thunderbolt: Reject oversized XDomain properties responses 58cb2aa1d29f7 thunderbolt: Disable CL states for the Anker Prime TB5 dock 2f5893172fc61 thunderbolt: Fix domain reference leak when DPRX read is canceled 34a6e27c954e5 thunderbolt: Tear down inactive DP tunnels when the domain is stopped e09cbad4db58a thunderbolt: Mark discovered tunnels as active c444d2c17dc23 thunderbolt: Hold a router reference for each allocated HopID f18faa3d3b810 thunderbolt: Fix KASAN reported use-after-free when request is canceled 29664699216c6 USB: serial: option: add Compal EXC-T1 support af4224809ea1b USB: serial: option: add Quectel RG660QB 3ef1b5c9a7194 USB: serial: option: add Compal EXM-G1x support 8b495843267b9 USB: serial: option: add Quectel EG060W 02e1112182d8a USB: serial: option: add support for SIMCom SIM8260C 4597ddd6168ae USB: serial: fix ioctl hangup race a1aa474768f69 USB: serial: fix driver deregistration order 4d6da6867b4ac USB: serial: fix dynamic id driver deregistration race 02fc7a87f0291 USB: serial: ssu100: fix baud rate overflow 4e18c175cea26 USB: serial: quatech2: fix baud rate overflow 25a5f7239a43a USB: serial: cp210x: add Corsair AX1500i Power Supply 452f1c9b76f7a wifi: mac80211: handle empty FILS association request payload 128e800a41270 wifi: mac80211: fix mesh fast xmit path deletion UAF a613c891906b5 wifi: mac80211: release mesh path quota on failed additions 1892e71aa2e5e wifi: mac80211: reject invalid 320 MHz CSA bandwidth 42aa9feb27b60 wifi: mac80211: minstrel_ht: validate fixed rate index d0183cd1f6a2d wifi: mac80211: keep fallback association elements alive 3b75831ceee76 wifi: mac80211: account proxy paths against the mesh path limit 772bd89304ecf wifi: mac80211: drain PS delivery work during station teardown 481f9230284c2 wifi: mac80211: shut down RX BA session timer on teardown 1c82d0c5d5091 wifi: mac80211: keep paired old chanctx alive cd8f8f45d81aa wifi: iwlegacy: 3945: free EEPROM data on remove b0e97bd40e0c2 wifi: cw1200: fix TX padding OOB read leaking heap data to device 4c9a32a808104 wifi: cfg80211: fix RTS threshold setting for single-radio PHY 98abf374e5096 KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor b37ae6e65a1dc KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs 97c1dcce17ef2 KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy 8b7d4f68fef96 KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state b1de3ebf59507 KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it f6189e26d0237 KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified 1a62eb293f60a mtd: spinand: Do not update the QE bit on devices without one b28120197cc15 mtd: spinand: fix zero oobavail when no ECC engine is used 23cef33571b19 mtd: spinand: Enable QE on all dies 2bbaa3f8df83f mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive() 875c57f2df09f mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB 1ed0ccd564915 mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ cadf42f22438f mtd: mtd_intel_dg: reset poll counter for each erase a991c28066e7b mtd: block2mtd: Fix divide error when erase_size is zero 2423a05dd0f21 nvmet: pci-epf: reject too-short SGL segments 7fd3c363eba4f nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() 21ffcae171d11 nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT 49e8a3224c91f nvme-multipath: fix underflow in ANA log bounds checks e30a2406408d2 tpm: fix off-by-four bounds check in tpm2_get_random() aa480f05aed7a net: extend IPv6 exthdr detection of tunneled packets 6316d17324bd4 ipvs: bound LBLCR and LBLC cache growth 891bd8335a0de io_uring: fix task_work add use-after-free with SQPOLL a85d0f00671b4 fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() bdbc8e78aa96d tracing: fprobe: fix suspicious rcu usage in fprobe_entry b0f76d4cb9be5 mm/damon/core: do non-safe region walk on kdamond_apply_schemes() d3c2d2692bdf4 x86/mm: Drop unnecessary PMD page copy when freeing fe23680e6f1d5 x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h 84df222de86ea Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() c3b5e6da4ba64 Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() c42ce5373405c Bluetooth: btintel: fix buffer over-read in btintel_hw_error() 708cdd203d0bb Bluetooth: hci_core: Serialize fragmented ISO packet queueing 1681f97afdf92 Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown 86e9708f9d19a Bluetooth: hci_core: Serialize ACL scheduling with channel deletion dd4db9f808ac2 Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems cabd58d9bb66d Bluetooth: hci_conn: Lock parent access during enhanced SCO setup 333257e6e4a7b Bluetooth: hci_sync: Fix inquiry cache use-after-free 0a554901bd227 Bluetooth: RFCOMM: Fix initial port reference race 4230d65032fcf i2c: xiic: don't clobber msg->len to signal block-read completion 51e1125ff7d63 i2c: xiic: preserve PEC byte length in SMBus block read setup ba0632683728e EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup 865f3bdebbc9b EDAC/altera: Fix use-after-free in error paths 74eeb95c0478b EDAC/altera: Fix memory leak on dci allocation failure 9846b85c2eb8b EDAC/altera: Drop __init from ECC setup paths for re-probe safety 0c03cb91b5698 EDAC/altera: Do not allow driver unbinding 9d2d3b3dfe897 EDAC/versalnet: Drop remote processor handle refcount on driver removal e561c2740b628 ALSA: hda/realtek: Fix silent speaker on Higole F9B d8986de05cc6c ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR eb0c7fda59cf6 ALSA: ua101: reject mismatched capture/playback packet sizes fc5c52848e405 ALSA: seq: Serialize compat port-info ioctls 9590d16791625 ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 69d2b7a4c1151 ASoC: qcom: lpass-cpu: use DAI table index for playback constraints d195c8c763fdd ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type 7df8c39a50f36 ASoC: codecs: max98363: fix uninitialized stream_config->type 2bce6f006cfe0 arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems 1c17db14f2c23 serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL 8f9103651d6ab serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around 48e09369839fb serial: vt8500: Fix clock reference leak in vt8500_serial_probe() f895ed664cb7a serial: tegra: don't clear the Tx FIFO on an Rx-only reset d8233d6b391b4 serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() 7019a84c23c1f serial: fix TIOCMIWAIT race 3f151c2e86f5d serial: revert guards in uart_wait_modem_status() c3ba14c29d55b serial: 8250_omap: fix wake irq cleared during suspend e32440fa536af serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() 2c8614981d3e6 tty: serial: max3100: shut down timer before freeing port 94af6cd832e9b tty: abort break signalling on hangup c110c6eed54fb tty: serial: qcom_geni_serial: Keep console RX functional after deep idle 6b7be3b9b8579 tty: port: fix tty_port_tty_vhangup() race 7021acc84c2e0 tty: tty_port: restore TTY_IO_ERROR on activation failure 821050631750e tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup 4335278d0e753 tty: vcc: zero-initialize control packet in vcc_send_ctl() 3551bdf843a1f tty: amiserial: fix broken TIOCMIWAIT e8615dfe80cf5 tty: vt: fix memory leak in vc_allocate() d16046f1ace26 usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe 95160fe606e68 usb: cdns3: fix use-after-free in cdns3_gadget_exit() 072535f26dc5c usb: typec: ucsi: displayport: Current CAM OOB index fixup f5ed186d0cf38 usb: typec: ucsi: Get the connector fwnode based on reg value 41934f92e7a54 usb: typec: ucsi: glink: fix use-after-free of ucsi on remove 75dc6cb377efd usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() 282be6ae8be79 usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() 30dbaf3c6696b usb: typec: tipd: don't send GAID when probe fails in APP mode b2ed8643face2 usb: typec: tcpm: recover after failure to start the frs ams 4333174ea52c8 USB: dwc2: shut down wakeup timer before freeing HCD state 1da16c46b8d71 usb: core: clear both ep_in and ep_out for non-ep0 control endpoints bd89c4f42f564 usb: chipidea: tegra: disable runtime PM on resume failure 7811d8e26c77f usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC 5298c96bf0068 USB: gadget: dummy-hcd: Fix wait for outstanding request completions 474e9e1852fb5 usb: gadget: aspeed-vhub: cancel wake work on device removal 9f0321e8e9afb usb: dwc3: am62: Fix runtime PM usage count leak on probe error path 7b5ed2d30ccc6 usb: typec: port-mapper: Only match USB4 port if host interface is available 50a92c02551c1 usb: typec: anx7411 - stop the IRQ before destroying the workqueue 8c611876c002d usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd 87f2185423e01 usb: gadget: midi2: Fix the jack descriptor array sizes 772149e7badba usb: ohci-st: disable controller wakeup on removal ec69932b45585 usb: ohci-spear: disable controller wakeup on removal dc1b196ad5956 usb: ohci-s3c2410: disable controller wakeup on removal 83e8bd42bd17b usb: ohci-da8xx: disable controller wakeup on cleanup a12e803d22551 usb: octeon-hcd: fix the FIFO-flush timeout computation e9545dd8bc625 usb: hub: use shorter 120ms post resume hold for SS root hubs e2d62928f2666 usb: storage: sierra_ms: reject short SWoC info transfers 5e8980a81af19 USB: serial: fix port tear down use-after-free a0ed07b5bbb2d USB: cdc-acm: skip URB restart in port_shutdown if disconnected 108af6f585ddc USB: cdc-acm: fix racy TIOCMIWAIT implementation 9b5b83ca2a668 soc: qcom: geni-se: Correct QUP Core ICC vote constants d54df2de22f9a rust_binder: cancel deferred work items in thread exit f7fb6c2835ede nitro_enclaves: fix use-after-free on SLOT_ALLOC failure c5504e179135d Input: synaptics - limit T440p InterTouch quirk to LEN0036 fc92d4499f3fa Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 95e8d0a7b22fa Input: s6sy761 - fix resume ordering and restore sensing d79caaf07875c Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 bcfd26841471a Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 0278c68c59b94 kgdboc: Fix tty driver reference leak in configure_kgdboc() 1299cb3fb0615 binder: fix leaked fd fixups on TF_UPDATE_TXN supersede 86cdcc87d4ba6 binder: fix is_failure flag for superseded transaction cleanup 5b113e8ee3268 drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU 587469076e4ff drm/amdgpu: fix ACP MFD device leak on init failure 7ca44cb14d024 drm/amdgpu: fix IP instance memory leak on kobject add failure b84f1386d84b3 drm/mediatek: Fix pdev reference leak in mtk_drm_bind() 629458b7e4955 drm/mediatek: Fix ovl adaptor platform device leak 88f8a92dcb0cb drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device 4d12b763c2c55 drm/radeon: Read the VRAM VBIOS signature with readb() 652f631e2e3a8 drm/amdgpu/gfx6: fix firmware leak on teardown 36fa4159d0054 drm/amd/pm/si: Fix updating clock limits on AC/DC e67aef159f430 drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC 197946faa1b79 drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend f3db2853e2a28 PCI: Accept AtomicOps already enabled by the hypervisor f3eaf31910087 spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260 d5a81039adc6a ALSA: ice1712: Fix the error handling via auto-cleanup at probe fc34dd95d3baa ALSA: core: Define auto-cleanup for snd_card_free() 524063fea29f8 perf: Fix race between perf_event_exit_task() and perf_pending_task() 7648757145aa9 i2c: at91: release DMA channels when probe defers efd0d161b0cb7 net: mvneta: clear XDP pfmemalloc flag between frames 53b21bc2df6e8 ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() f81d40e2eb695 net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference 9a76ae59fd637 net: sparx5: make ports inherit the switch base mac address type e3630ff89b777 of: Put coreboot node after compatibility check 47c5ac61e6fb6 net: microchip: vcap: stop scanning after deleting key field 4033e1a9262c5 netfilter: flowtable: generalize pending status bit f6143ae109df5 netfilter: bpf: reject invalid NAT manipulation types 55d033324f67a ipvs: filter some flags received in the backup server 7151f14d59155 ipvs: do not create invisible templates 60e9a6e2ba718 ipvs: fix missing counter decrement in lblc e5633d81b2daf tcp: refresh TS.Recent for accepted old ACKs 35c706d6eb196 net: sparx5: skip ptp deinit if init was skipped 297769d75dc67 net: sparx5: move PTP IRQ handling out of sparx5_start() 728138dcfc92f net: sparx5: move stats initialization and add deinit function 387478e9e9861 net: sparx5: move MAC table initialization and add deinit function a0a8687eb7878 net: sparx5: move VCAP initialization to probe ebb164ae76ad9 net: sparx5: move netdev and notifier block registration to probe a01c71ab74ea4 net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values 82be3d08de9e1 net: ethernet: mtk_eth_soc: allocate dummy netdev sooner 2f581814e4e3e net: cap skb->queue_mapping when the tx queue is picked 2294b62eaec6f net: bcmgenet: fix NULL dereference in set_coalesce before first open 507c895019a81 net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence a4b63808f99a5 virtio_blk: set the zone write granularity ac4827cf96532 net/sched: sch_codel: match the no-drop threshold to the packet size ab6842a1c7bdd net/sched: fq_codel: match the no-drop threshold to the packet size e94970076d293 gve: DQO: accept TSO packets with non-protocol gso_type bits 5069ce898148b net: restrict SO_RESERVE_MEM to TCP sockets and cap max value 358d5ac5a5d57 net: stmmac: fix rx Scatter-Gather support 5847b60561a31 net: stmmac: convert priv->sph* to boolean and rename f78d45d5f1ac4 net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() f74f100e49588 tipc: prevent GCM nonce reuse on peer key changes adad3ff80e50c octeontx2-af: mcs: Fix SC resource cleanup loop 3a6e67ff267af net/mlx5: Fix slab-out-of-bounds when handling team device events 8438b4f65a179 net: systemport: Fix RUNT MIB counter register offset calculation 96d8b26be5bc4 net: systemport: Fix buffer overflow in bcm_sysport_get_stats() 7f16443a30f4e Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister 70d2afb554015 netfilter: ipset: do not update comments from kernel-side adds e50eaba0b34be ipv6: fix prefix route expiry in modify_prefix_route() 6598215a1d8e2 net: bcmgenet: allocate RX buffers as page fragments ebc9611ab154c net/sched: cls_api: reclaim an empty proto on the error path 63120572edde8 net/mctp: publish the mctp_dev only after it is initialised 380acb097059c ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer a85823b074f9f arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz b0fce76873a5e Bluetooth: btintel: validate DDC record lengths 8ba754621f105 Bluetooth: hci_core: free the HCI ID if naming fails 790730e4d95de blk-mq: set RQF_USE_SCHED when the operation is known 2e8f3fdb0825c blk-mq: factor out a helper blk_mq_limit_depth() c97ef13ad96be block: reject polled dio with user integrity metadata ed389554fe22c ASoC: codecs: rt274: Fix format setting for 44100 rate eb04ba7d97809 ASoC: codecs: rt286: Revert delay value for jack setup 88e96d902efee wifi: mac80211: prevent AP VLAN tx from other interfaces 227ebe48704be wifi: mac80211: Add 802.3 multicast encapsulation offload support 9f4e5abe6bf72 wifi: mac80211: Add multicast to unicast support for 802.3 path dd7973a4130b0 wifi: cfg80211: preserve hidden-group beacon IE ownership cfd70c9b19846 rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() 9cff19ddd7f90 rtc: ac100: Fix clock provider use-after-free on probe failure 00dc50cede967 rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak 345ce265cf604 wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE e0c21130c1c77 wifi: ath9k: reject short WMI command responses 9a9467f7cc633 wifi: ath11k: reset ar->num_stations on hardware start 9338b2dea74cb wifi: mac80211: drop oversized fragments to avoid extra_len overflow f9d075fa9fba9 wifi: mac80211: remove RX_DROP f41735133943b ASoC: tegra: Fix ASRC Stream6 input threshold control 71d140099165d wifi: wfx: validate MIB read length before copying to caller 9091199beced3 ASoC: wm8903: Move the DRC QR threshold to the register that holds it b8cbeda043e47 of/overlay: don't create "//" paths for fragments targeting the root 7a46f1917b320 of/overlay: don't leak fragment references when changeset init fails 2222a8b7dfeb3 random: fix vgetrandom_opaque_params kernel-doc 541d61d59f19a nvmet: preserve device path on allocation failure f971f1c63cf71 mtd: core: call _get_device() with the master MTD 4c73c1859fa64 iio: accel: kionix-kx022a: Fix array boundary check 489e51034910f iio: light: rohm-bu27034: Fix error return 09a9a2a9548f2 iio: dac: rohm-bd79703: Do not allow writing SCALE 7899d0530b411 mm/damon/core: don't skip damos_adjust_quota() while esz is not zero 122b8541f511d random: vDSO: avoid call to memset() when zeroing reserved parameter 3f75da1e4ee69 ALSA: line6: reject oversized playback packets 84727facd8506 ALSA: caiaq: unregister the input device when probe fails 9cec23424c598 wifi: wlcore: Fix runtime PM leak in wlcore_remove() ad06f7312d3f6 vt: skip screen update for DEC alignment test on backgroup consoles 037d7e3ca5c59 vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() 233a2e190b128 vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF 90c29158159e4 net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone 7d2ff870f0cf1 rds_tcp: close NULL deref window in rds_tcp_set_callbacks dc87b56b43c91 mm/huge_memory: initialise workingset state before folio split 9ebb974773bfa mm: shmem: ignore sysfs configs for shmem forced collapse 7a1e8daeaa466 virt: vmgenid: set driver_data before registering notification handlers 0af47cb2575d4 virt: vmgenid: remap memory as decrypted 258310d59a82e module: fix lost error code from codetag_load_module() 512eaf01ffabf netfs: zero gaps in read-gaps folio to avoid writing back stale data 96c46c75b0d47 tpm: Disable TPM on null key name mismatch e701345d886e8 sctp: check RCV_SHUTDOWN after the sendmsg connect wait e0cabda9b6f4d rtc: spear: initialize IRQ state before requesting alarm IRQ 160619b387072 rtc: ac100: Assign .num before accessing .hws 37286a49cc744 r8169: disable EEE on RTL8168h/8111h 69ca64bbb5288 net/packet: prevent TX_RING byte count overflow c5f91098edee9 netfilter: nft_flow_offload: drop flowtable reference on init error path ba56d6f9f1a8d net: phy: aquantia: fix system interface type not updated in forced mode ed997f875d03d net: fix checksum offsets in skb_splice_from_iter() 0d1525fdcd335 of/overlay: only treat a positive changeset id as registered 7dc6a769153c0 of/overlay: put property on deadprops only after changeset add succeeds 42f6d682e0ab5 of/irq: Fix remaining refcount leaks in of_irq_init() f7ea1916e8a80 octeontx2-pf: Fix RSS indirection table size 6745fa65f4115 kprobes: Skip disarmed probes when checking optkprobe overlap c2733ea2c15a1 kasan: unpoison task stack below watermark only in generic mode 2ebeba4f9e815 io_uring/zcrx: requeue multishot receives stopped by a local resource 4e9e016c4f498 io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full 0c19a6c1d25fd HID: multitouch: stop the release timer from being rearmed on remove 97be6396817bd HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request 308db93de666a crypto: x86/aes-gcm - fix always true check for last AAD segment 88633025f20ba audit: fix exe mark UAF in kill_rules() 745e83328dd69 ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices 224b56b7c02b2 smb: client: close completed creates on compound wait errors 78e718c5aa146 cifs: Remove the RFC1002 header from smb_hdr f09875ff901e9 smb: client: close handle after create-context parsing failure 080573f419506 smb/client: pass cifs_open_info_data to SMB2_open() 7bdc4b7d99a82 smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() 605ef5bd74d02 cifs: on replayable errors back-off before replay, not after 178820984f2cd Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table 60ba99f910b76 ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture f44d5d3b7e344 neighbour: Annotate access to neigh_parms fields. 3b91cdacb16b7 neighbour: Use RCU list helpers for neigh_parms.list writers. df057d89e0cc2 RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_has_attr() b15c79fca2806 xfs: don't let memory failures leak blocks and kill repairs 70a7918fda54a smb: client: use finish_no_open() for non-regular inodes 677aeec9783c8 mm/execmem: make the populate and alloc atomic 7ad8b185dd7e9 selftests/mm: hugetlb-mremap: add setup of HugeTLB pages 22e82acec93a6 KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction 81e3f065a6485 KVM: arm64: nv: Fix life cycle of the nested_mmus array e18b8236c57fc btrfs: initialize inode mapping flags for cached inodes 725bd2f3c81d5 Linux 6.18.55 fa047f2a02500 bpf: Reject key-less BTF for hash maps 98fd50aaaeb2a rose: don't warn on stray CALL_ACCEPTED/CLEAR_CONFIRMATION in state 3 5454ea6e22e7d rose: use timer_shutdown_sync() for t0timer teardown bcf4c43f797ce rose: guard rose_transmit_link() against a NULL neighbour 7d10439345e2b rose: keep the route needed for routing loop detection 6c401ae426e20 sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags d3c8fb7094c53 hfsplus: avoid double unload_nls() on mount failure 500c9259f5a66 mm/damon/core: fix unconditionally skip last region f6660e9a3e1e6 rust: net: phy: fix off-by-one bit positions in device status accessors d50418db3b862 Revert "rust: net: phy: fix off-by-one bit positions in device status accessors" c525772c304c9 RISC-V: KVM: Serialize IMSIC attributes with vCPU migration 5fdc644a4fea4 RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_rw_attr() 4a04ed9157581 net/sched: act_ct: avoid modifying shared unconfirmed ct entry 812c16a255e77 net/sched: act_ct: fix helper UAF due to extensions realloc 9ba16ce8f3faa x86/sev: Make vTPM SVSM calls preemption-safe e43d42bd711e7 x86/sev: Remove redundant ghcbs_initialized checks around __sev_{get,put}_ghcb() 524becfebcd0f x86/sev: Carve out the SVSM code into a separate compilation unit b2a9d6ff593b5 x86/sev: Add internal header guards 1cad4f235e150 x86/sev: Move the internal header 99607d955be3b perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints 7ba97aa16778e perf/x86/intel: Update event constraints and cache_extra_regsfor LNL edc0309282aab perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification 51199c793bc05 perf/x86/intel: Update event constraints and cache_extra_regsfor ADL 24e79508b237d net: ipconfig: bound DHCP option construction 8fbfa861dfd4f net: ipconfig: Remove outdated comment and indent code block bda487567d0b7 net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths aa4845a710ae9 HID: alps: unregister DualPoint Stick input device on remove 48c5c02bf6fde HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM d0f6244f4af44 PCI: Fix BAR resize for devices on a root bus 85b1112945f21 super: make iterate_supers_type() deletion-safe ccf96a4b8626a mm/hugetlb: do not dissolve gigantic pages without runtime support 2ab4b6815d10e mm/hugetlb: create hstate_is_gigantic_no_runtime helper 4cef512a955e4 mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish a56e5bcc43310 mm/rmap: allocate anon_vma_chain objects unlocked when possible fcbedba553a9c drm/client: fix restore of partially initialized client 933145e2bbb4c drm/client: Pass force parameter to client restore 0589706ace3bd drm/client: Remove holds_console_lock parameter from suspend/resume 817dd706ee616 drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc() 13f299763f6c0 drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1 97e40aa29c10c drm/i915/psr: Disable PSR2 on Xiaomi Book Pro 14 2026 as a quirk 66f814e8af462 drm/i915/psr: Fixes for Dell XPS DA14260 quirk 782b5210e89e7 drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk 5815329988acf i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL f42562dd027dc vlan: require the MAC header to be present in __vlan_insert_inner_tag() 241e67b60308c cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict d186e0171c8a4 cgroup/cpuset: Ensure domain isolated CPUs stay in root or isolated partition 8a64ac9f03fc9 cgroup/cpuset: Move up prstate_housekeeping_conflict() helper 438bf73ca9775 net: tls: fix silent data drop under pipe back-pressure 66a2179d02668 xfs: fix cursor and pointer handling when recovering iunlink buckets 86b17699bd0c2 xfs: fix blockgc group quota scanning when usrquota isn't enforced 930a9c1c321ef xfs: don't let hidden_space go negative in xfs_metafile_resv_init 09ebf777ad4e2 xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits d46492fb8018d xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots 543bc5fd7d8ec xfs: fix rtgroup repair estimations 6aabf4f351cd8 xfs: check di_forkoff correctly in scrub f99c672471797 xfs: use the correct reservations for rtrmap/refcount recovery adb80d620dabe xfs: don't call xfs_exchange_range_finish for a dry run 770d21b52c91b xfs: check padding field in xfs_ioc_commit_range 09b7a63e11c7c xfs: use correct jiffies comparison function in xchk_maybe_relax 6a65a68097a19 xfs: release orphanage dir inode if chown fails ac76f8df55980 xfs: fix attr fork block count checks in xrep_inode_blockcounts ef7a56c6630ff xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption c2ac475ddd737 smb: client: validate POSIX create context length 31107f79ad33b smb: client: preserve create-context parsing errors abab661eed00f smb: client: clean up failed cached directory opens 05a7fd80024ff smb: client: fix create context out-of-bounds reads 8f5b30cc12c40 Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO 416546cd6a54e Bluetooth: mgmt: fix race in read_unconf_index_list() c6a288e6001bc Bluetooth: L2CAP: validate frame length before control and FCS access ed4c026cc4094 Bluetooth: ISO: release unused CIS holds after channel attach 4e49206d9574a Bluetooth: ISO: balance the parent hold in hci_bind_bis() 173457fa3e99e Bluetooth: hci_sock: reject out-of-range OCF values f894f6292d512 Bluetooth: hci_sock: validate event length before filtering 3ff5a8d949e3a Bluetooth: hci_conn: fix CIS hold ownership on reuse 57ccaa818307b RISC-V: KVM: Fix HSM hart status error propagation 5567ce11304db RISC-V: KVM: Propagate interrupted G-stage faults ea91f05a55b80 RISC-V: KVM: Synchronize hrtimer callback during teardown e5dd2a91a7ae3 KVM: arm64: Transfer the hyp stack pages out of the host stage-2 970de111c0874 KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race c23ed110d27ba KVM: arm64: Fix spurious warning for benign stage 2 teardown race 8530a05b304d3 KVM: arm64: Fix AArch32 DBGBXVR handling 37dfb676fafd1 KVM: SEV: Do cache maintenance on the source VM during intra-host migration 6aef7cf800098 KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV 066a53a0bc19e KVM: Don't treat reserved xarray entries as having memory attributes 7dcaf0107523f KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg cf441a0db681d s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config af295f0eab683 s390/pci: Don't report recovery success on skipped recovery eef5c8e1cca6f s390/pci: Report SCLP status on error events when no pdev is associated 743a8458978d1 s390/pci: Fix missing device lock in zpci_report_status() dd5ed64dadb07 s390/pci: Fix leak of struct pci_dev reference in zpci_report_status() 748ec2f7f5df9 s390/cmf: Fix virtual vs physical address confusion c3bbcb32deecc s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() 02664a8d8d592 pinctrl: sunxi: keep a shadow copy of the data register output latches 1deeeca89ea12 pinctrl: single: free the IRQ on domain creation failure a23f9f9b56b79 perf/core: Run sched_task() for PMUs with only CPU-wide events 249a2bd87a0e5 perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() 5023c70853ad9 parisc: Increase kernel stack size to 32kb ee56b5e18f566 scsi: libiscsi_tcp: Check the data direction of a Data-In PDU cc444e4ad4346 nfc: trf7970a: power down on startup RX gain failure 14b1467cfc663 nfc: port100: reject frames whose declared length exceeds the received data 810f204ef8f61 nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() 841af260ff477 nfc: fix use-after-free in nfc_get_local_general_bytes 12cf803edfffe netfilter: nf_tables: skip expired catchall elements on insert and delete 191239b093969 netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read eafe081ea77d2 netfilter: ip6t_rpfilter: reject routes without inet6_dev 8a611f33216f4 net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() 7d2377868feb7 net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist 43ff11501ea6a net: txgbe: fix FDIR filter restore for VF rules 9447ddd8b9242 net: phy: micrel: Advance register data pointer in write loop 30ff01b4c7e41 net: ena: fix MMIO read buffer leak on probe failure e8a2f48bbff1f net: ena: fix PHC cleanup on probe failure ab3c4a4c85f2e net: bridge: mdb: restart port group walk after deletion 4b7161804d8f3 net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read 586847400b116 net: atl1c: fix soft lockup on out-of-range tpd_cons read 5f23080a625dd net: openvswitch: conntrack: fix helper UAF due to extensions realloc caefcd433ecb2 net: openvswitch: conntrack: remove 'add_helper' dead code e2829ae5459dd net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry 729737267e7c1 net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() 0f573b0576252 net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read ba664d8363864 net: arp: terminate device name before lookup aca91d8fa0ecb net: airoha: npu: cancel wdt_work after releasing the WDT IRQ 968550a439f64 net/sched: reject IDR error pointers when deleting actions 3803dc8477f08 net/mlx5e: fix swapped IPv6 IPsec policy masks 0c336ecabaf9d net/mlx5e: advertise MACsec offload only when supported 99d8dc5166374 net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() c3129e6f26e18 HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() 5695ec5339d4d HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard 925da1d2a2478 HID: alps: fix use-after-free on input2 registration failure eda9bcb721f15 packet: use ubuf_info completion for TX_RING packets 879c911f77b8a PCI: of_property: Omit bus properties without a subordinate bus e59cb7eda7c06 mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() 850cc4a84b36a mm/hugetlb: preserve mremap address delta when skipping page tables b1db1ec5c8941 gpio: tps65219: Fix TPS65214 GPIO direction programming ac3c7eb6a44ba gpio: tps65219: Use the variant-specific direction callback fabe897e61e45 gpio: tps65219: Fix GPIO input value reads f2f1683955b95 drm/virtio: fix NULL pointer dereference on fence allocation failure 8fa78900fd242 drm/virtio: fix memory leak of fence event on execbuffer failure c2d4689c3ea92 drm/xe: Keep walking on SVM eviction failure c306b6419fd00 drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV 2bcbfc5e7bfa9 drm/xe: harden adjust_idledly() against divide-by-zero and overflow ba678c2b02e0d drm/xe/vm: nuke PTs only after unlinking contested VMAs 19f5a5839b308 drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() 35151e9a82741 drm/nouveau: RCU-free the scheduler-containing nouveau_sched 59aa1f8c95941 drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() 030e93fc91d55 drm/nouveau: Fix gem reference leak in validate_init() 109a8d2d5b7d2 drm/nouveau: fix double-free in nvif_vmm_dtor 6d497216c10af drm/nouveau: Fix bridge reference leak in nv1a_ram_new() 9132215d2c90e drm/nouveau: fix autosuspend cleanup during teardown 0d29bf51f8ddd drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM c83261854e19a drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() c28e74395ab09 drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() 0bfb0419a1480 drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() d197b15d4beb9 drm/amd/display: Bump frame warning limit for clang builds of dml 89a11c7efe387 drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() fe933dda0bb18 drm/i915/dp_mst: Fix configuring TUs for a disconnected stream 369f4e3264374 drm/i915/dp_mst: Fix configuring FEC for a disconnected stream cc890d3f1b15b drm/i915: fix incorrect RCU teardown order bbef7450e2b42 drm/imagination: Fix page count for page table for map() interface afe5b4d66d45b drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() e2ee061626008 rds: ib: Clear the sg list when mapping an MR fails e35cb500dd148 mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() e06f8b6e27cc6 llc: reserve device headroom for allocated frames 58a417a19d801 gpio: zynq: fix runtime PM leak on request error path cf3d043582e10 gpio: cdev: fix kernel stack leak to user-space in error path a9f738487c11f gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() 6fcfc362344ed ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST 1d42828565889 ipv6: do not let ipv6_find_hdr() return an offset past the packet end 599d0498a3931 ipe: protect the dm-verity root hash with RCU 48f7d0233c3cc ipe: fix use-after-free when auditing a newly loaded policy c2a5e59185862 fsl/fman: Fix clk reference leak in read_dts_node() fd3bf32279df9 writeback: report a Tasks-RCU quiescent state per cgwb drain pass 1dccf5dc2f8fe workqueue: Fix NULL current_pwq deref in flush dependency check dd4b920672387 writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes 37ec7353f4ac4 fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga b1229b210ef5a fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT 2f7042429a8e9 cgroup/pids: Restore pids.events notifications in local mode caf8b2d9b30c3 crypto: s390/hmac - Generate intermediate CV for API partial block handling 7504b677c4370 bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir 4d97a141e85a0 bna: prevent IOC timer rearm during teardown 1603abb0c5042 ata: libata-scsi: bound the ATA passthru sense descriptor writes cdccb760be1f1 arm64: errata: match the target implementation CPU's own MIDR 071f51188a5d8 arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 6279211e7d245 af_packet: fix integer overflow in prb_calc_retire_blk_tmo() ec23855274a73 sctp: discard the rest of the packet on a stale-cookie error 7ba87509c54cd tcp: prevent collapsing skbs across boundary in rtx queue 12cc3a1eac5a2 tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow ca40f4df4ab2f virtio_net: copy zerocopy frags in start_xmit without NAPI 33da1ff56f955 x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 f50d2e8cc1f1d x86/mce: Fix hardware debug register corruption on task migration a557816c6e38e netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase 7b32eba3fad84 rculist: add list_splice_rcu() for private lists 162bf5f73f1b4 mptcp: return sk_wait_data() errors from recvmsg() 9fe317b999aa8 sched/core: Account PSI IRQ time to the execution context, not the scheduling context 23250517cd475 perf/core: Fix a refcount leak in attach_perf_ctx_data() 654fc8445ca8d perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs() 0688289753450 perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused 8cb5a01cb5f12 perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED c205e3fc9962c perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits 4bcb371019097 autofs: fix sbi->pipe file reference leak in autofs_kill_sb() c7ee4bea64f55 vlan: ensure sufficient headroom in vlan_dev_hard_header() 7f8b56c82919c net/sched: sch_teql: fix shadowed err in __teql_resolve() 15d00994a1bd2 bridge: check llc_mac_hdr_init() return value in br_send_bpdu() 41dcae82bece9 llc: fix skb UAF and leaks on llc_mac_hdr_init() failure 2dc3ae3942e15 gve: DQO: reject TSO packets with an out of range MSS 089e04db44754 gve: fix TX drop when GSO MSS is too small for hw feab3880a72b4 gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO 2f855c52a2e1d gve: add support for UDP GSO for DQO format 6d4a5ce75b6e3 gve: Enable hw-gro by default if device supported adbfc707ff6b9 gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO 6c7937db1d561 gve: Allow ethtool to configure rx_buf_len bcaedb514a5d2 gve: Use extack to log xdp config verification errors a0d644b8ff883 gve: Consolidate and persist ethtool ring changes 5f86408eba31b net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails d990b786abfd6 tipc: Fix a data race on mon->peer_cnt in mon_timeout() 3d65a2eb4449f net/smc: fix UAF on lgr list traversal in smcr_port_err() 8468d05aa08dc nfp: hold IPsec RX state under the XArray lock 4e7a4af364c20 net: phylink: record the PHY only once bringup cannot fail 631aa4cb45099 tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() 2357c682f6eaf net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq 62c0e38b2e503 net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 2b42adf3b8ee9 macsec: initialize SecY before registering the netdevice dc106fe25e9a8 bonding: crypto offload enabled, non-offload slave failover, rekey failed e0560db0ea6e1 drm/imagination: clamp freelist reconstruction requests 2cc1c3977acbf net: xps: reject an out of range traffic class a3c5eb6e382dd vxlan: use one headroom snapshot for neighbour replies bdd41b96e8143 ip_gre: Reject enabling collect metadata through changelink c3fab2f1d8a6e net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT d68899b50caf8 net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr b3ebe8983d86f net: bcmgenet: do not skip WoL power up on GENET V1 21a0de4858779 net: bcmgenet: initialize u64 stats seq counter for all queues aefa837c26674 net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems 501baaeca7d12 net: stmmac: clear stale buf->page after recycling on skb build failure 0f7ed27586acf tg3: use random MAC address when tg3_get_device_address fails e40990861074a bpf: Fix BSWAP 32 and 16 on MIPS64 876ef04c75c27 bpf: Fix immediate JMP JEQ/JNE on MIPS32 6d76ddce4f1ba vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets cfa643f2ca36c net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() 25bb7c3622522 veth: manage XDP program pointers during channel resize 63bcc2fee6419 net: bcmgenet: stop Tx NAPI before disabling the queues 284166f34b8fb net/sched: act_gate: budget the per-entry list in get_fill_size e72cbedc4596e nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() 8978dff632519 nfc: llcp: fix slab-out-of-bounds reads when logging service names f234197f3bda3 nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() 2386d107df6d2 nfc: llcp: fix -ENOMEM on connect with zero-length service name fdd95e819d828 nfc: st21nfca: validate ISO15693 inventory length cbde7f5d32617 nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure 0b32dcc8a3f94 nfc: virtual_ncidev: Add missing ioctl compat handler 27cf04ba4e7ef selftests/nci: Fix out-of-bounds store on thread join f9cbe5c68d93a selftests: nci: Fix uninitialized family ID on missing attribute da8a077573836 nfc: llcp: Fix race condition in accept_queue lifecycle 3316903fdc3a3 selftests: nci: Correct pthread_create return value check b94cf09720543 nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() 57919d0662d88 nfc: st21nfca: validate received frame size ed2e00bb22c73 nfc: nfcmrvl: validate helper command length before pull 940b626854de2 bpf: Reject dev-bound-only programs on other devices 9923e1c537f91 net/sched: fix potential stack infoleak in em_text_dump() 92c9f2ea634d9 eth: fbnic: Avoid rounding zero ring sizes 3ea177bdba25f net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test b17959fb4d55f net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K 4c4217aaa5e4b net: stmmac: selftests: Capture all packets for vlan checks e7a8bbb6149b4 net: stmmac: selftests: Check the dev->features for S-TAG offload testing 74da0c1cede8a net: stmmac: selftests: Support running selftests on DSA conduits d18cb8fd1b6ba sctp: hold asoc or transport before mod_timer() in timer handlers 650dcd938e563 net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports cdeca5de4e186 net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports cea597519b9ca bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc d95dd5a6c6cd0 bpf: Fix bpf_sock context code generation 1196903a27cac bpf: Fix bounds check for skb-backed dynptrs fb1e2df8e2e28 thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds 0f5d8953cb63a net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure 54e98316ce5c1 genetlink: report the real command id for dump-only ops in policy dumps 41e444535c60f net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error ca9986cc824f2 net: spacemit: clear TX descriptor on fragment mapping failure 9c6af88fbefbe s390/debug: Fix NULL pointer dereference in debug_info_copy() 36831afe8eba0 s390/debug: Do not register views for failed static debug areas 8b661a045082c drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable 6515c41503eef tg3: clean up PHYLIB resources on probe failure c21daf37d5ce9 udp: remove a disconnected socket from the 4-tuple hash table 7a0bbe5654ecb udp: relocate a connected socket in the 4-tuple hash table on re-connect ed902d5546fb9 ipv6: Fix dst leak for uncached routes. 6ab6c9d120b30 net: usb: sr9700: include receive overhead in the length check e3c21e8b53906 dpll: use exact lookup for reference sync pin id 649ffc76ed548 ipv6: Prevent rt6_insert_exception() for dying fib6_info. ff8cff3aff673 octeontx2-af: Fix memory scaling limitation in SR-IOV mode be00deee60044 Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() 8ec5838a35b03 Bluetooth: btintel_pcie: validate device-supplied DMA indices 8f31031326994 Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough a8f3a829f3a53 ovpn: reject invalid peer VPN addresses 7efbc134253c1 ovpn: reject multipeer peers without VPN addresses daab972893aec ovpn: reject duplicate peer VPN addresses 12ee72319805a ovpn: always unhash old VPN addresses before rehashing c44a04722f7da ovpn: replace bind when clearing stale local source 21dbc9f4d0bdd ovpn: replace bind when learning local endpoint 324ebbde06cd5 ovpn: validate peer state before caching UDP dst db97cfe9a5070 ovpn: track UDP socket route key for peer dst cache ba3877bdcc9aa ovpn: skip UDP source validation for unspecified addresses 8c1d7994a18ec ovpn: preserve IPv6 scope id for netlink peer endpoints ebffd70e4877b drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach d6b59a9fece4d drm/virtio: sync shmem backing on guest-bound transfers e7df00bb036e0 Revert "drm/virtio: Allow importing prime buffers when 3D is enabled" 5c2cb3dd14477 drm/virtio: release the GEM object on virtio_gpu_vram_create() errors 81c6769e069d7 drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() b516446a25bf3 drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() a93dce15dfef2 drm/virtio: fix object leak when drm_gem_handle_create() fails 0fa25ba50a382 net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget cd12d3e086202 bpf: Check params size before reading reserved fields dd9c6f8f05170 net: usb: catc: bound the RX packet length in catc_rx_done() 9c11e543fec32 bpf: Bound ownership depth through local kptrs and graph roots c9338057df102 sctp: avoid livelock while updating retransmit path c7a254c16c6fb eth: fbnic: Handle FW mailbox completions flagged with an error a85a019b3011a eth fbnic: Add debugfs hooks for firmware mailbox 6a112552d3055 eth: fbnic: Reuse RX mailbox pages 8a052cd4b2cae eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox c5b5aee41b9f5 eth: fbnic: reset num_napi when the napi vectors are freed 6c903188b6761 eth: fbnic: Handle maximum standalone channels 8dc5667770912 ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). 7254b702e5561 net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure 40aeafbcbc7bc net: gue: reject invalid REMCSUM offsets 00734f3684fce net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure ca29834c8c146 drm/nouveau/disp: don't reject HDMI config on cards without SCDC 40afa1f7a5c77 drm/nouveau/clk: don't clobber reclock status when restoring volt/fan 0d096a7f7d792 drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update f2e9005aadb67 ocfs2: make ocfs2_calc_xattr_init() return void b17aa4955e3a6 arm64: io: Reject non-user protection in ioremap_prot() 0994c3e3b4e3e netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name f100578039b31 ipvs: revalidate ihl before icmp_send 302477c9ffefa netfilter: nft_synproxy: use the family-aware checksum helper 07a3ec8fdc5a1 netfilter: nfnetlink_queue: hold nfnl mutex in event notifier b0ef9450e93f2 netfilter: flowtable: publish HW_DEAD after worker is done 1363c71be27a7 ipv4: fib: fix data-race and stale genid check around nh->nh_saddr 5be5ccd3a5563 libbpf: Reject truncated ldimm64 CO-RE relocations 2d7d04357c41a bpf: Restrict CO-RE poisoning to relocatable instructions 2fe1569e32ddf net/mlx5: devcom, Base component size on linked devices 8ebfd34fef750 octeontx2-af: use seq_file for rsrc_alloc debugfs 6127164efa94e net: pcs: rzn1-miic: Fix config array initialization f6696481eedfd net/sched: cls_u32: fix manual hash table handle IDR aliasing f4277b19edbc6 eth: fbnic: Fix payload page pool error cleanup 6e271f093d15d bpf: Skip unsettled links in link iterator b5c0cff0c5331 xsk: Use a 32-bit compare in xsk_map_gen_lookup e4f3e476cd406 fs: avoid repeated scans in evict_inodes() 22225cd612b26 s390/cio: Guard PMCW field accesses with dnv check 5eae708cca8f4 s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points 591ba131193ee s390/cio: Fix cio_update_schib() to not cache invalid schib 8bd9905dfbd97 s390/pci/docs: Fix sriov_numvfs attribute name e163f1dccede7 docs: s390/pci: Improve and update PCI documentation 6675f801b0d60 scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume() 0117e731435bd selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode 2189a219397d8 Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel 8a36598050cd1 Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() 6fdabd654578e Bluetooth: SMP: reject Security Request over BR/EDR 9c051b12ca106 pinctrl: sunxi: A523: fix voltage withstand encoding 0af16d8be3ec7 scsi: sd_zbc: Reject disks with too many zones 0cb85377daaef squashfs: Add dictionary size range check to prevent shift-out-of-bounds 5d54693bc457c KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP cb68b5589318f KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0 4efda20408714 KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 f126952167146 KVM: arm64: Include VM type when checking VM capabilities in pKVM bbcd7e851d57d KVM: arm64: Fix MTE flag initialization for protected VMs c142034ad3a84 KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode bd46b41f412fb KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure faf66e55e8749 KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() 65bffaf100df8 KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save 80a6b712dc193 KVM: arm64: vgic-its: Free the caches when GITS_BASER changes c2230cd149507 RISC-V: KVM: Fix perf-backed counter accounting across stop and read f6f1d27e0c893 RISC-V: KVM: Report snapshot write failure to the guest f4363eede3e74 RISC-V: KVM: Preserve firmware counter value across stop/start d6de766d8d26d KVM: riscv: Fix NACL hfence entry update order 5c221f33a5183 HID: bpf: fix __hid_bpf_hw_check_params report length 5f9e2ecb725ad HID: amd_sfh: Validate PCI BAR size before mapping 905d1a40f34f7 pinctrl: meson: Fix typo in s4 group name b67b4c763f211 bpf, arm64: set up the frame pointer for the exception callback ae1ffd04e98be bpf, sockmap: Fix self-redirect copied_seq double-counting 1d6581b544a88 bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk 51a17f0ce19c4 bpf: Register dtor for freeing special fields 6785313d4fac9 bpf: Fix out-of-bounds read of rtt_min in sock_ops 44f9bcb5ab2b2 bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() 5ad116c23f149 KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() 08a4d55b26724 HID: elecom: fix bus type for M-XGL20DLBK 49688a0d1ac69 HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio 55bbebf2829c3 tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context 91a482a81eabd bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() 8eb4cd72daad3 bpf: Fix divide-by-zero in btf_struct_walk() 5334c609bf927 selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc 37b18688cd18f bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL 69fe51a3bd78d bpf: Fix bpf_skb_change_tail wrt csum partial skbs 04bb5b2eb9f1d s390/uv: Prevent potential out-of-bounds read 018e137ac1da2 s390/uv: Fix loop condition in uv_find_secrets a379ac504fcb8 KVM: s390: Fix IRQ injection with SIGP Stop and Store Status 7c7a6ba6128f2 remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage 50d844aead62c ALSA: hda/realtek: Add StarFighter HDA SSID 56b321df2863d ALSA: hda/realtek: Limit Star Labs internal mic boost 2945d3eb73d61 drm/amd/display: Atomize IRQ register read/modify/write ops d1079deec828d erofs: fix large folio race in erofs_fscache_req_complete 14ae74db795ab xfs: don't stash removename operations with unknown ftype Signed-off-by: Bruce Ashfield --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend index 4069130..4ac68ca 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v6.18/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "039bab427f128d1b655a6dc15c4d52e936a2b4fe" +SRCREV_machine:genericarm64 ?= "be5c5b2879fa33294d498a2cafdaf012bda1f21e" From patchwork Thu Oct 29 03:25:24 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102303 Received: from mail-qv1-f45.google.com (mail-qv1-f45.google.com [209.85.219.45]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4417.1793244354339422315 for ; Wed, 28 Oct 2026 20:25:54 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=erFwByGg; spf=pass (domain: gmail.com, ip: 209.85.219.45, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qv1-f45.google.com with SMTP id 6a1803df08f44-91c6ce60697so23572796d6.3 for ; Wed, 28 Oct 2026 20:25:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244353; x=1793849153; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=1GajgOYUfrqNb49YVyf2ixv2jgu+gmmodRUNkQhtmG0=; b=erFwByGgxpQlBEma3ybsPMb1QHQ+k/r1uL/x8K4Htq30WHhj7wVL5j5Lkad2RZx/r2 9kvWOjCX5VeUEJf3DQ1eRIi5EqjiEmIJae6PlR6OENH1Q0Bs457Nm277MwxLnkRnkfwj IKwmQnH8C9dfPeNZWwMbRlPkDlDemx4O0KLKyufyOb1tPcgtdxDJ4cd66fY7FMBHlHkP a0xtqaORd+nCAFyTRFyOuS6NurDgRzdNJFKq/Tr5O2HcGZLHIJ4kLku0DJ8YAWaX06Ro bZhzAwp74qqfUTTTqjZyEl4wwqqD8Dn8zLNgVjbvv94hYdNITf0lKXc8SxFYKkAl+2qi Uvgg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244353; x=1793849153; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=1GajgOYUfrqNb49YVyf2ixv2jgu+gmmodRUNkQhtmG0=; b=w7TO66FMNiQGHL7CmVoWxIiHudmBPFI7LDcRn8wunoJ8mxOYVfxuFnWt3knwgeHYMb u1GIOse5ZfZCE8qTVfZnGW1A+9z0xeJdcZia19xSIvqWzzPrI/mgwCGVo8DL/u/n1m0Q BStj8pbMptq+IlmScGTowC4bBs57Ieo5ga6xcMVOaP3jm4cgcf9R8YlMB/NZy7AFE8PH xb3pYMCHwfHv1DIZyPETgsOhfo/gM3+UnnnciWFjYNqPp+X109xqrYsQVzlvwD2RKci/ GKvbr3WcKQHYH6ALMJKdQlol2CsHTcpE51M1oDoEmL9+7lRGsxwExN0FaoV9WkPS4TD9 p1YQ== X-Gm-Message-State: AFq9FYJDEHNo5AvFkjxJn1MsVtz74nvCXr8pxqrqek5mElsRJdrDDnio fBzXx7YZuoHc2SJidb945V6Om1rkzII6GeWp+z54eSzg/4DhWLFftvUKVz/VPpy5 X-Gm-Gg: AYBFou0ybsyMtc9++WbD3JKF2ohGEwgZROVhZq9gATHkntwz3JcBC/HQkbiiPF0q9YJ bECD8aFOO+6BbtiHI+5ygepSbe7S+C2q2v1HT+M/3sQFW9kR+HfF0na2fqZIddoxAHMf6MfUVBR oGjBeLBcj7/8/u5QPU3Hpd/Mv+FO/6/ltAYU9ZwpJhUJI1jKOY5Py7/evmCn34kVWzlL1vPUhFz ZTebLKgRqqtI7dd7D2A+PUa1y1myDLUdPV78KMi3kZdcyL9Xld7V46leeE57XrNfPBaZZGabb4S R7LRdrfAUUQGzBTKIK97xuRZ48+FSmD5VxUcgT2L2ZZQ7b9G7FJs42RnupGlNSlE1BngecnA7KP Jj5/gZXoKX+SoPSaEPTcm6ZncroxifKFHQM9sbc801sWCpxHfYkO+FpnoN+D7cJT/3Yb7tWCdmq K7j2LTv3aXqeRbn5nJgIwB/ukyfYb26yLWdMJShWxK4JP0TXqMFo33HS78ZkLsj5u1CRaY2tAdQ 0DKa3lPDhoPTOFWMZ5yXQ2YCtmqE11uoKC0dTNcR1hH0yL8O80ZyOgexsqh28OTzCjKTukh4d63 7lV2Uw/e7/2G500OGs2vTKPWm/5OjP094OkUUhAnbJx9hbFAwVJyxtISV7sxQ6vOEgav6bwZTgS IlHjldJl+2CPxv89mPfMw6LoZ/nlauRxUcI4Ty7xpWbSan4znGlvctrYbEFoStuJnR8P0EBFXML JiUowlhmWzNW/l0iBFAZ8YDkvKnyYDGkY7cBzcq/tL36D8clYARxQTcIBxSc0tDELxASKj X-Received: by 2002:a05:620a:2720:b0:93f:26f6:6bab with SMTP id af79cd13be357-94408a80789mr612121985a.18.1793244352639; Wed, 28 Oct 2026 20:25:52 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.49 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:49 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta-yocto-bsp][PATCH 09/11] yocto-bsps: update to v7.2.11 Date: Wed, 28 Oct 2026 23:25:24 -0400 Message-ID: <20261029032527.3150782-10-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:26:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248866 From: Bruce Ashfield Updating linux-yocto/7.2 to the latest korg -stable release that comprises the following commits: a2de78ee6ed8b Linux 7.2.11 6c714d6691515 HID: steam: Clean up locking c06cf54fe99b8 HID: steam: Refactor registration b5ea938ff7763 HID: steam: Rearrange teardown sequence 7511a6696ba17 HID: steam: Fully unregister controller when hidraw is opened 2f807570bc045 mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge 1f62b83e94338 io_uring/kbuf: don't charge provided buffer rings to RLIMIT_MEMLOCK 061c25b5e45d8 io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCK 0879e115d2e89 io_uring/memmap: account the pages a compound region really uses 9d7715bf742b8 drm/amd/display: Don't replace a sink mode that shares the native totals 85653fed87b3f sched_ext: Call ops.dequeue() when a task arrives on a remote local DSQ db83b53b580ae sched_ext: Generate qseq from a per-task counter bf8940f1c0eb3 drm/vc4: Fix binner slot allocation failing on an idle GPU e81402c3d4204 drm/vc4: Disable the V3D interrupt across runtime suspend 9907db2b8e7ba vsock: Fix memory leak in vmci_transport_recv_dgram_cb() 6b8897ba0733f net: openvswitch: validate transport header presence in set_ipv6_addr 59abc1b61026e ptp: ocp: fix PCIe delay estimation calculation b1dadf6847bee net/packet: call packet_parse_headers after virtio_net_hdr_to_skb 4eaf1285b5c1e mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() b8171b764a4af net/mlx5e: Order ICOSQ cc update after CQ doorbell 9d136b7ce24e7 veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down 784356aa88b82 drm/imagination: Fix reference and vm_bo handling in remap() 7363e10ad2448 bareudp: set the inner protocol to the protocol of the packet 61b43a51a5592 flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() fabecda2b0c17 bnxt_en: Re-write the BARs following any type of PCIe errors de8b85ac09707 bnxt_en: Fix driver init in kdump kernel c6d6dfda4a52c bnxt_en: Add bnxt_clear_bars() helper 89fc70d73f4ac riscv: ptrace: Zero-initialize regset buffers before copyin fd6898cdd7a8d riscv: fix NR_CPUS range leaking 64-bit default onto 32-bit builds bf7a3ce1d563a ASoC: sdw_utils: Switch CS35L56/57/62/63 to use OT25 DAI 8962696f8dd20 ASoC: sdw_utils: Add codec info for CS35L62 2fb6d05f706d7 pfcp: make sure the SEID is linear before reading it 454593bcd6c4a net: bcmgenet: if UMAC was suspended in SW_RESET, restore it to SW_RESET 88efb0fe529ce Revert "net/mlx5: E-Switch, preserve max tx speed on vport state modification" 6260143fcc2cf net/sched: cls_route: reject change with no routing attribute dc2e787b5fb47 devlink: fix devlink_rel reference leak when notify work is pending 21cbe0b3a30e5 net: sparx5: start the TOD counters on non-PTP lan969x variants 5f4dfdf007773 net: always dissect GSO packets in __virtio_net_hdr_to_skb() 52efce4755a4b flow_dissector: avoid u16 truncation of skb->len when computing thoff 34a84a76d7837 cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug() c1a1338fe01ef spi: sg2044-nor: Honor SPI clock limits 25bb46843d20c spi: sg2044-nor: Return transfer errors a728c12f8bd89 ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM eca70d840cbe5 ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes 65cd0e21746b8 ASoC: adau1372: allow sleepy powerdown GPIOs aa5cb877716ba Revert "wifi: ath12k: add panic handler" 9d40dbf8d45e3 drm/xe/sysctrl: Fix mailbox header handling b21596ace95fc wifi: mt76: mt792x: pick the SAR table layout from the table itself 9208b32b10826 wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit b07c47a189f7a wifi: mt76: mt7925: don't put the band auto marker in TGID 7199ee4b47de0 wifi: mt76: mt7915: disable rx napi when removing device 75b3051db5332 wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout 5ac236af9e036 wifi: mt76: mt7925: restore the legacy BSS after MLO teardown eb6d2f82d01ff wifi: mt76: use ALTX queue for packets to disassociated stations e0f2ae4a75394 wifi: mt76: account non-AQL frames per peer rather than per link 2ee38971c0902 wifi: mt76: add PS buffering support for HW-managed TIM drivers ee50d5027dba5 wifi: mac80211: add ieee80211_txq_aql_pending() b17568ba7ee64 wifi: mac80211: add AQL support for multicast packets d9fc220b9b411 wifi: mt76: mt7996: take over connection monitoring 3c26759269fd4 scsi: ufs: mediatek: Handle mPHY power-on failures c428a7f1ea01e Revert "net: stmmac: propagate PTP addend and system time programming errors" e2be0d537c158 riscv: vector: Fix output operands in context save e1a0f618f986f riscv: vector: Fix data pointer constraints in context save/restore 50a84d34700d0 net: airoha: Add retry mechanism to airoha_qdma_set_trtcm_param() d10437cf17800 net: stmmac: Disable S-Tag processing on dwmac4 83846f0e0bb41 net: stmmac: Do not advertise S-VLAN stripping when it is disabled 27747cc19f40e net/mlx5: Lag, split aggregate speed into oper and max helpers 1365f994de94e net: make dev_xdp_sb_prog_count() see programs attached through a link 75e2ecc1e9dda drm/xe: Do not emit Wa_16010904313 twice 7e1a34f648bc7 drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums 607a6d0be341f btrfs: fix lost error return value in btrfs_listxattr() c1803697a60f2 btrfs: fix xattr replace when multiple xattrs are packed in the same item 4d9c1e0a7fb2c btrfs: don't stash io_uring encoded data across -EAGAIN ada1fc725a4db btrfs: unlock inode and extent in caller when io_uring read extent fails 578ef51714242 btrfs: free iov when btrfs_uring_read_extent() fails a449433b0e3d4 btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio a7d6c89f51fd0 zloop: zero out only the unread tail of short reads 4b572dcb2ad38 spi: spi-nxp-fspi: exit stop mode before waiting for DLL lock 17aa3eb1fc09f arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 73bf0f9579633 nvmet: use the local P2P device on metadata allocation failure 4e01c6e28f1ad nvmet: return Invalid Field for invalid NSIDs feature 82h f94ab1fffd009 ice: Restore Ordered MMIO Writes for Tx Doorbells bba6b1b086f9f bonding: fix the program leak when XDP is replaced 5537e902da640 tee: optee: ffa: support shared memory offsets on large-page kernels 5d3bd67674c86 net: stmmac: propagate PTP addend and system time programming errors a9f81c99a0f47 wifi: mt76: mt7996: program a link again if the driver holds it bea736a2b8c6d cxgb4/ch_ktls: disable softirqs around tid_list erases 865eb579b33dc lib/dim: fix 32-bit overflow in dim_calc_stats() rates e7ea63b4195a1 amt: send the relay's General Query directly from the receive path b627c6ba20be2 net/sched: em_text: reject unterminated algo before autoload 7ecb0f6be0a74 drm/vc4: Use kvmalloc_objs() for the BO cache size list 40870a0290cd9 drm/vc4: Free the BO cache size list on teardown e281dd69236d3 drm/aspeed: Balance the display clock enable on teardown f7ec4dbd2a073 gpio: exar: initialize the ID before registering its cleanup d4a6ad9fc6e94 drm/dp: don't mark the AUX backlight enabled when enabling failed 988bf67a13890 cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() a258d8af2bb88 drm/bridge: Fix unlocked list access in drm_bridge_attach() f469d85085410 drm/bridge: Fix unlocked list_del in drm_bridge_add() dcf617c90ea69 Bluetooth: btintel_pcie: Add shared HW reset for clean start 2669567615215 Bluetooth: btintel_pcie: fix TX descriptor bounds check ab664eb1ce6e4 scsi: ufs: core: Hold a clock reference across the probe 24d098f915234 fs: don't let a migrating task hide its reference from do_umount() c141e6c5d2a8f mount: refuse MOVE_MOUNT_SET_GROUP on an unbindable mount a010ae1a9afca iommu/dma: skip swiotlb bounce for DMA_ATTR_MMIO in iommu_dma_map_phys 8f86e3a595af0 arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value a3f8afd546789 arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single 9b4a665e53000 arm64: dts: lx2160a: fix incorrect pinmux c86077791d779 clk: qcom: gpucc-kaanapali: Mark the GPU CX GDSC as votable 43fd38cf1441f clk: qcom: gpucc-glymur: Mark the GPU CX GDSC as votable 836b36b0b2745 clk: qcom: gcc-kaanapali: Fix always-enabling PCIE_RSCC clocks 4751652e44f41 clk: qcom: gcc-eliza: Fix always-enabling PCIE_RSCC clocks 952b5c99a840c xfs: fix exchange-range-to-eof file size exchange 4756c94260e69 xfs: stop exchanging reflink flags when exchanging mappings f1f0c24ca701d namespace: keep the lock on a mount that a propagated copy is moved beneath 6ab37fae14196 namespace: handle mount locking for automounts correctly d23265a12e499 namespace: never expire a locked mount 2d498080c02d1 nullfs: don't update the access time 776e20e4fdc23 namespace: refuse an automount below a mount that is in no namespace aaabd31085506 fcntl: refuse F_SET_RW_HINT on an immutable inode b43ff2deef482 namei: don't reveal overmounted entries in refwalk 8300de4aa5d09 namespace: unhash a dentry before detaching the mounts on it 00287afa7cd98 namespace: don't let a pseudo dentry become the root of a mount 56fe03a0c05db unshare: don't drop active namespace references that were never taken 30a1625022411 dcache: don't put a mountpoint on a dentry that's being removed 3dad2330c8934 namespace: check the mounts before reading their parents in pivot_root() 9e820a6becdd9 namespace: remove the fsnotify marks of a mount namespace in process context 5a1310bd90cdc namespace: don't reconfigure internal superblocks via remount and umount 87ecd4c6da146 namespace: look at the topmost mount for a mount namespace file b8a94a405ddcf namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE 37a82f400efa4 namespace: check a recursive bind mount for mount namespace loops 18902a23ef36f namespace: check a submount for references right before unmounting it 702ff3fe49987 namespace: queue a mount only once for mount notifications f8fceeef1e1fe namespace: check the target before walking it in do_mount_setattr() fc100afdd0630 fs: refuse fspick() on internal superblocks 8d3527457e183 namespace: don't copy an unmounted mount tree 5077b52e9e4d7 namespace: don't inherit MNT_UMOUNT in clone_mnt() 98fc6c7b6ca67 statmount: read the parent of an unmounted mount under mount_lock 08d575ee89393 namespace: reset the old parent's ->overmount in mnt_change_mountpoint() a210ac218c307 fs: don't silently unmount busy mounts da408eb521702 mount: keep a copied mount unbindable 04ee82fec4891 drm/amd/display: disable self-refresh on tearing flips ab13a7b90d8b0 drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs 1fb745806e9be drm/amdgpu/userq: return the memdup_user() error for the user MQD 8640b3f961d74 drm/amdgpu/userq: only accept doorbell BOs as queue doorbell 24285f4eb2686 drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks cb4425e1474f0 drm/amdgpu: make Mac FB workaround generic f4a0a1ce147d1 drm/amdgpu: serialize vblank counter reads against GPU reset 68b9a10821cc2 drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info b8809ff3c3846 drm/amdkfd: align SDMA doorbell base for shader doorbell writes d7cd43c2f5461 drm/bridge: th1520-dw-hdmi: Fix remove() callback 7642255eed9a0 drm/bridge: th1520-dw-hdmi: Fix error check on dw_hdmi_probe() return value b3eaff982839e drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin ab39bc55cf082 drm/xe: Fix shrinker accounting double-subtraction on nested external pins 175d654cd4832 drm/xe/i2c: cancel the client work on remove fcb137f6e7ed7 drm/vmwgfx: validate pitch coming from userspace 981eb78f7fa44 drm/vc4: Fix firmware reference leak in vc4_drm_bind() ade226dfd28cf drm/vc4: drain the hangcheck timer and works on V3D unbind 9be126be5f78b drm/panthor: validate userspace queue count against initialized firmware slot count 7f73da0facf86 drm/imagination: Size page table preallocation by device address 49d349c42cf5e drm/i915/gt: Unmask interrupts only when ACTIVE is true 72d5cbb10d491 drm/i915/gem: Prevent overstepping exec array boundary ad3cf897bd6b1 drm/gud: don't keep a connector without a CRTC as connector_state d510ed2738541 drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN d0aef0b037467 Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown f492de11b3254 Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex b8814161b14c6 Bluetooth: RFCOMM: free the skb when the DLC has no owner 8a98d58f6cfe7 Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() 07976405a3c71 Bluetooth: MGMT: Fix status of pending commands flushed on power off 3728f6b0d5990 Bluetooth: ISO: Serialize concurrent connect calls 79993e9919a87 Bluetooth: ISO: Reject concurrent BIS listener setup 762850c203fab Bluetooth: hci_sync: Fix command skb lifetime during scan setup e660a22402944 Bluetooth: hci_sock: Serialize dead-device detachment 3c5d12a2c6f33 Bluetooth: btintel_pcie: use managed IRQ teardown 8123990c45fec riscv: ptrace: reject CFI regset access when extensions are absent f71d6ea3843c8 riscv: patch: fix handling of bpf-jit execmem addresses 4a62302698c92 riscv: lib: Fix ZBB strnlen wrap-around regression on huge counts 3a6d3d20ef246 riscv: hwprobe: use _BITULL() rather than BIT() in MIPS vendor uapi header 8e48d8d51ab37 riscv: futex: untag the user pointer before the atomic access 958034078c5f6 riscv: fix load_unaligned_zeropad() fixup for RV32 7fee577a2fa78 riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE 37b4401ee6fa0 riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp b84bc3a64d8bf scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ 96b1ae2c7db19 scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock() 991f3527a635a scsi: qedi: Initialize callback state before registration 1d35a17f1c2ed scsi: ch: Do not keep references to data transfer element devices 9ff26d26973e2 pmdomain: rockchip: propagate subdomain add errors a2f3e21d58f79 pmdomain: rockchip: fix clock leak on domain probe failure ca26c42fa30f3 pmdomain: rockchip: don't ignore clock lookup errors on attach 70db811ddb55d pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains f3423b56be122 regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 a3384ec2516a7 regulator: of: fill in supply names in of_regulator_bulk_get_all() ca5d85335a8fa regulator: ltc3676: don't read the write-only HRST and CLIRQ registers 5cd2354ebfbd3 power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all() 2f7240f0a6fd8 optee: register TEE devices only once fully initialized 80db24f3c16fd openvswitch: fix soft lockup in the netlink flow dump 1b472d00b274a nvme: fix swapped ZRASF zone state values for full and read only f34b1bcac4581 net: team: free skb when broadcast has no txable port bed63353341d2 net: team: stop reusing skb after queue override 5e5cf3ad7c099 net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop c336fe2a40442 net: usb: ax88179_178a: fix rx frame length for non-last packets 44efb6d92dd5a net: sparx5: free the matchall entry on destroy 39d1a6b601831 net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() 283caf4406e21 net: dsa: microchip: fix KSZ8765 fiber detection 7931fb9181421 net: bridge: avoid recursive multicast port cleanup c223da71abfae net/smc: protect clcsock lifetime in smc_getname 00fbf71e74115 net/packet: guard the ll header push in packet_rcv_spkt() dbad91a31c482 mmc: sdhci-sprd: disable runtime PM on remove edef1355224c0 mmc: mtk-sd: Cancel request timeout work on remove 56ead289265fe mmc: cavium-thunderx: destroy slot platform devices on remove 167251cac699f mmc: cavium-octeon: destroy slot platform devices on remove 301691c32b8ad dm: fix reading free memory in do_resume 6d8bb768a865b dm-snap: reject the transient exception store for snapshot-merge f49cd7820cd0a dm-integrity: fix buffer overflow in inline mode with large tag size 40ea7dfa8cd5f dm-crypt: reject the lmk IV mode with AEAD ciphers df6c704a08bc0 mm: don't schedule deferred kernel page table freeing while booting badefd43eca32 mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP 5616da0f92339 memstick: rtsx_usb_ms: complete requests after eject instead of dropping them 3af81770e2011 memstick: core: wait for request completion before freeing card da0b595d8e6e2 KEYS: Fix add_key() race with keyring restriction 5e6fb00b0c35d keys: finalize persistent keyring timeout after link attempt 8f27260b989f4 ip6_gre: remove obsolete ERSPAN PMTU update 596a955d2d01b io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6 f55c240192ded io_uring/register: don't exempt disabled rings from task restrictions 5e4d20db5179e ice: fix metadata_dst refcount handling on representor teardown b98eb58ba2f8f ice: fix use-after-free in dynamic port cleanup bca153f1d0754 ibmveth: fix TX LTB and filter unwind on open-fail d24fdec1413c6 ibmveth: h_free logical LAN on open-fail after register 889f763874855 gve: fix XSK buffer leak on error descriptor 7a7e6bbbf0586 gve: fix XSK buffer leak when rings are stopped 3d377911ce81f gve: fix napi_disable deadlock when attempting to disable XSK pools 0bc91eda694a1 iavf: send MAC change request synchronously 2fd6ecda5d1f4 gpio: xilinx: fix runtime PM leak on request error path c0071ee496e12 gpio: mpsse: fix race when arming the IRQ poll worker fa84f091a8e7f fsverity: RCU-delay the freeing of struct fsverity_info 79da5abcac1c8 EDAC/amd64: Mask UMC chip select to the four implemented selects 31729932c72c3 e1000e: add system to disable K1 list fb10c9c606611 selftests/mm: cleanup -Wformat issues in hugetlb-mmap c4867092976f6 sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute c997832414f1d selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts 36a559b3f40ba selinux: fix data race on AVC latest_notif b8d5c678a405e Revert "wifi: libertas: reject short monitor TX frames" 3c3b308ee6e25 tipc: hold a reference to nodes found by link name fb717c536af2a tipc: destroy topsrv workqueues before closing connections 3aa6f536a95eb tcp: reject net_iov in zerocopy receive mapping hints 753d4c15d9f85 swiotlb: fix default_swiotlb_limit() for non-growable default pool eaa3a29004c06 strparser: make sure __strp_recv isn't running before tearing down the parser c2a97703359e2 tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() 84e3ea6502b5f xen/netfront: don't leak the skb when xennet_fill_frags() fails 098d80b04d0fe x86/CPU/AMD: Fix AMD TLBI Erratum #1718 1a2668682e998 workqueue: Fix NULL current_pwq deref in chained work check 3bec3d32c2a3a wireguard: noise: reject response consumption after intermediate initiation c8b60ba3bc870 wireguard: queueing: preserve tstamp_type when encapsulating packet e4ce326b4ce27 wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init() 19d6fa087dcf2 wifi: mt76: mt7603: initialize global station WCID 47ca6395a1d91 wifi: brcmfmac: fix P2P device removal race in brcmf_detach() dd4b2f88ee517 vsock/virtio: account only unread bytes in read_skb() 2ae87402e6748 usb: f81604: fix struct f81604_int_data size mismatch 725b49c689bbb dm ioctl: don't let data_start run past the buffer 6e49d611a9cfb cipso: adjust cached option offsets when removing CIPSO a21c255159bfe cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() 1c2e571e4caeb can: fix unique skb identifier regression under RPS 8078375dfd0ba can: dev: init_can_skb(): restore skb header initialization a7e5992bc3708 btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() 28dd88c4a4c21 ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands fda141e41f524 ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) cc5511324044b arm64: irq: exclude the softirq stack switch from KCOV c1b708f712f57 ALSA: hda/tas2781: Accept V1 calibration data without CRC 0919d8dd19f92 ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers 6c2772fa311fd Input: xpad - add support for Corsair Novablade Pro 2b0c5671e858e Input: xpad - add support for 8BitDo Pro 2 Wired Controller for Xbox 2caae9d1977be Input: ati_remote2 - fix type confusion in device attribute handlers 291fe0bafee78 ipv6: do not warn on route notification size race 221ef5e1e44a0 ipv4: do not warn on route notification size race ad2b3a68b8a7d ipv4: stop route notification sizing when nexthop group shrinks b9a30bb7b831e ipv4: stop exception dump when nexthop group shrinks f27483f9975b5 ipv4: stop PMTU walk when nexthop group shrinks fb0f8dfc5a030 rust_binder: reschedule node refcount update on thread exit c3e3346474616 ipv4: validate checksum_start before completing checksum 8c9b310c958be ipv6: udp: Create exceptions before socket matching be4fd05398f2b ipv4: udp: Create exceptions before socket matching 4446752655c98 ipv6: Fix redirect exception creation for UDP/RAW sockets 3d73a1164a8c6 net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry 655f47477054d net/mlx5e: Prevent stale XSK buffer release on refill retry 43f830e2bb84b fs: Free any excess xarray nodes in clear_inode() 5213f65a9667d bnxt_en: fix DMA mapping length for padded small packets 7b20d05fd38de Linux 7.2.10 26d4c36d318cf ipv4: free inet_opt and ireq_opt after an RCU grace period 593ca827e1676 iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs e2b721bc30f40 xen/netfront: drop RX packets with a short Ethernet header b5c0c7fc55718 net: usb: qmi_wwan: add Quectel EG120K-EA 4cb916d6060e3 smb: client: only require read lease for size-extending preallocate 0916566923c98 arm64: errata: Add Cortex-A725 erratum 3821522 workaround c1dff02ab4532 arm64: errata: Factor out broken AMU const counter cap 677d0b51ac1a0 perf: Require kernel access for text poke events 6e187281f978a perf/core: Check kernel access when kernel callchains are requested 63501889a8034 drm/amdgpu: reset VI ASIC on MacBookPro14,3 026b93f7eb799 drm/amdgpu: reset VI ASIC on MacBookPro15,1 d422a66847a9c drm/amd/display: map PWM brightness through custom backlight curve 9a7931e847f33 rust: irq: pass RegistrationInner as cookie to request_irq 719c40d4fb6fe mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages 44d0619fa4e5a mptcp: fix msk->timer_ival reset 882d0011c59ff iio: trigger: cancel reenable_work before freeing trigger e79dded3084e1 iio: proximity: vl53l0x-i2c: claim direct mode for raw reads ecb9bed69f61d iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler ce109a2619ada iio: proximity: sx9324: Correct proximity channel resolution e462b47b9637b iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure dd5dfd033cc9d iio: proximity: isl29501: Fix return type of isl29501_register_write 815ae0b73b69a iio: proximity: aw96103: validate firmware data length 6280d15f08603 iio: pressure: rohm-bm1390: Return error when read fails 7dbb518f3328e iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup 6a27402a8ff1f iio: light: rohm-bu27034: Fix infinite delay on error a1769877ff52a iio: light: gp2ap020a00f: drain irq_work after free_irq 396b83106f5e7 iio: imu: adis16480: fix unprotected debugfs reads f501302ebb9e1 iio: imu: adis16400: fix unprotected debugfs reads 8d6f98972fe2b iio: health: max30102: fix NULL dereference in interrupt handler b05e768420352 iio: gyro: adis16136: fix unprotected debugfs reads 7e3a09c3a1bcb iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() 6564f394a4a95 iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data 50174e873f897 iio: cdc: ad7150: fix OF matching and publish module aliases 3a87212b1a09a iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. e63188d77e10c iio: buffer: serialize buffer teardown with mode claims 4aa2f001807cf iio: admv1013: initialize callback mutex before registering notifier 49ea8a359e362 iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind 4c17cd7cdf9ed iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls feae7e0f40d60 iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure ab4e57adead25 iio: adc: stm32-adc: fix possible division by zero in processed channel b92e7e373e8d9 iio: adc: stm32-adc: fix check on internal channel availability 0695ee7b8febd iio: adc: rohm-bd79124: Fix rising alarm bb4a68d3ef19c iio: adc: rohm-bd79124: Fix GPIO mask check b2a23b732aaf0 iio: adc: rohm-bd79124: Fix channel initialization 1a904eb70107f iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop 7996557c6b7d3 iio: adc: pac1934: check ACPI label duplication efcd55eff289c iio: adc: max1363: sign-extend bipolar differential channel reads 4d72c397c160b iio: adc: axp288: Add TS bias override for Haier HV103H 4884f4a5dec83 iio: adc: aspeed: propagate reset deassert errors dec6193cef07e iio: adc: adi-axi-adc: Initialize state mutex c99350a1ebc6b iio: adc: ade9000: request interrupts after powering the device d338af069f086 iio: adc: ade9000: handle Phase C dip events in IRQ1 handler 7b565e5ac9557 iio: adc: ade9000: fix overlapping scan_index for current and voltage channels 134aa31a8d4e7 iio: adc: ade9000: fix NULL pointer dereference in clkout registration 5663c72bf4002 iio: adc: ad_sigma_delta: fix use-after-free on unbind e96490d30d040 iio: adc: ad7173: Fix digital filter configuration 6ca6dcbaa68c5 iio: adc: ad4030: fix invalid oversampling_ratio validation 28c561b537064 iio: accel: sca3000: fix frequency divider condition check aa94a37b5a3e5 iio: accel: kxcjk-1013: reject duplicate event disable 2ef953f7b54e1 iio: accel: kionix-kx022a: Prevent memory leak and fix state d9d23d115610e smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races 1b9334c2e0854 smb: client: require stable pages for signed connections dc71660f11ef2 smb: client: drain and invalidate before server-side copy/clone c33261ffbf525 smb: client: distinguish real EOF from a stale remote_i_size on read e8ba21c7e6ef3 smb: client: flush dirty data before zeroing a range 8f21e4b79507f smb: client: only require read lease for size-extending zero range bf84e44ff0ed8 smb: client: flush and commit data before querying allocated ranges 15bb9f1d3e967 smb: client: discard post-EOF pagecache when extending a file via clone range fbbb399f4c7a7 smb: client: discard post-EOF pagecache when extending a file via copy range 6a8279c98ad28 smb: client: discard post-EOF pagecache when extending a file via zero range 737a1d2e9642d thunderbolt: Reject oversized XDomain properties responses 733aba776a5c9 thunderbolt: Disable CL states for the Anker Prime TB5 dock 2f4cd43faa9d6 thunderbolt: Fix NULL dereference in tb_remove_work() 2c2fd6a7fd5e1 thunderbolt: Don't access a DP tunnel after its DPRX read was canceled 7739b02129b22 thunderbolt: Fix domain reference leak when DPRX read is canceled cbd2abb85ea32 thunderbolt: Tear down inactive DP tunnels when the domain is stopped 4cca0a5250ee7 thunderbolt: Mark discovered tunnels as active 47d60ea801fc3 thunderbolt: Make the DP tunnel activation callback mandatory 2b5f976119d8f thunderbolt: Hold a router reference for each allocated HopID 08287212b6220 thunderbolt: Fix KASAN reported use-after-free when request is canceled 4c4f7cde6a023 USB: serial: option: add Compal EXC-T1 support 5d34ced50e772 USB: serial: option: add Quectel RG660QB 83b932375b911 USB: serial: option: add Compal EXM-G1x support 602a7ea0fb3c3 USB: serial: option: add Quectel EG060W 63b813fa112f9 USB: serial: option: add support for SIMCom SIM8260C 7912a95d1345c USB: serial: fix ioctl hangup race 428d479a0d314 USB: serial: fix driver deregistration order 380f57cd58e26 USB: serial: fix dynamic id driver deregistration race b77880815b9c7 USB: serial: ssu100: fix baud rate overflow 1600930b81e7a USB: serial: quatech2: fix baud rate overflow 0917201017b63 USB: serial: cp210x: add Corsair AX1500i Power Supply 20f939b0c151d wifi: mac80211: handle empty FILS association request payload 93da3ec938bfd wifi: mac80211: fix mesh fast xmit path deletion UAF 2d9c5525bbc1a wifi: mac80211: set info->band for 802.3 encap offload frames a59eca4557c74 wifi: mac80211: release mesh path quota on failed additions 79b3ce0d881cd wifi: mac80211: reject invalid 320 MHz CSA bandwidth 43082d604a993 wifi: mac80211: minstrel_ht: validate fixed rate index 0878594c5806d wifi: mac80211: keep fallback association elements alive 5a32409ed34a1 wifi: mac80211: account proxy paths against the mesh path limit 097460fcdd8ab wifi: mac80211: drain PS delivery work during station teardown 09b7d5e4f8850 wifi: mac80211: shut down RX BA session timer on teardown afd1cdd16a25c wifi: mac80211: keep paired old chanctx alive 5cc54a000960b wifi: mac80211: count only matching reservations in reserved switch 89f9d6186dc74 wifi: iwlegacy: 3945: free EEPROM data on remove 678c8f4ba2856 wifi: cw1200: fix TX padding OOB read leaking heap data to device 58ddd8e3ed6d3 wifi: cfg80211: fix RTS threshold setting for single-radio PHY 31c399c94b2e5 KVM: arm64: Use stage-1 leaf size for VM_PFNMAP 91e28dd8eedb9 KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor 8b25393d16a5c KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq 9ce6c9ebc56a8 KVM: arm64: vgic: Allow last_lr_irq to be NULL when LRs are not overflowing af3300b3a6bac KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT 3da3279a44df1 KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs 8676b29d186fc KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded fd873c3d1b524 KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN 55865b3ae0370 KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted 681e31f03ec92 KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy de83ff6a4d8f3 KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state 0fbc7fec2242d KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it 1e497e3bdab69 KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified d1de1703fe36f mtd: spinand: Do not update the QE bit on devices without one fc278060f5d6f mtd: spinand: fix zero oobavail when no ECC engine is used fc2f651f52039 mtd: spinand: fix NULL pointer dereference with no ECC engine ecc0f73dbe83d mtd: spinand: Enable QE on all dies d8147cc0c8c2e mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive() 1ac34039fd394 mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB bbd87eca54072 mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ a07073946e94b mtd: mtd_intel_dg: reset poll counter for each erase 21d0f05989bf0 mtd: block2mtd: Fix divide error when erase_size is zero 23194531595c5 nvmet: copy the hostid into the ctrl before creating PR pc_refs 472df1d103dbe nvmet: pci-epf: reject too-short SGL segments 8a9b4c0eef19c nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() 02cd0d372b161 nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT e5cdb0c0a51e8 nvme-multipath: fix underflow in ANA log bounds checks 8b85838c1fdba nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known 42bb6216b861e tpm: fix off-by-four bounds check in tpm2_get_random() f38c57a28ebbd x86/mm: Drop unnecessary PMD page copy when freeing b46b2e2de47ca x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h 9806a748f9ab2 Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() b2cb5ea1dc8cf Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() 673f707518e8e Bluetooth: btintel: fix buffer over-read in btintel_hw_error() a7161730a3ab3 Bluetooth: hci_core: Serialize fragmented ISO packet queueing ecdb1c66d8e14 Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown 4fda8f0abeea9 Bluetooth: hci_core: Serialize ACL scheduling with channel deletion f2e7bd6baf660 Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems 93a737e4e042f Bluetooth: hci_conn: Lock parent access during enhanced SCO setup a642f498f0b08 Bluetooth: hci_sync: Fix inquiry cache use-after-free df5162eeb10e6 Bluetooth: Serialize SMP remote OOB data access e5aa7fbf7a444 Bluetooth: RFCOMM: Fix initial port reference race 314a2c63879e0 i2c: xiic: don't clobber msg->len to signal block-read completion 5d1f0adecdfbe i2c: xiic: preserve PEC byte length in SMBus block read setup a68979b6ceb48 EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup 87364b19b3fe4 EDAC/altera: Fix use-after-free in error paths 552bb479027e7 EDAC/altera: Fix memory leak on dci allocation failure 4ec26cb798474 EDAC/altera: Drop __init from ECC setup paths for re-probe safety 97c1f5b482c31 EDAC/altera: Do not allow driver unbinding 9f86099af05a4 EDAC/versalnet: Drop remote processor handle refcount on driver removal 07a97fba1c842 ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72 3e148e498d82f ALSA: hda/realtek: Fix silent speaker on Higole F9B 25219d1fc75e4 ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR 4294fe5704859 ALSA: ua101: reject mismatched capture/playback packet sizes 702d92f361f65 ALSA: seq: Serialize compat port-info ioctls 9e3d43a1c6441 ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 f11336e6d3cd9 ASoC: qcom: lpass-cpu: use DAI table index for playback constraints 7791ebf56eb4a ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type f44ba04c7a32b ASoC: codecs: max98363: fix uninitialized stream_config->type c374d710a3b76 ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks 4ceb275ce192d arm64: mm: Fix the break-before-make flush range for erratum 2645198 88c1c611552b2 arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems 04a77b14f0b13 serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL 0e0d96bd980d4 serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around 16abbcd15adb9 serial: vt8500: Fix clock reference leak in vt8500_serial_probe() 0c4a277aac263 serial: tegra: don't clear the Tx FIFO on an Rx-only reset 1b303d383089a serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() 298b4e3c65d2c serial: fix TIOCMIWAIT race cbe4709d4d0c8 serial: revert guards in uart_wait_modem_status() 54abbb862366d serial: core: fix NULL pointer dereference in serial_core_unregister_port() 4673adec2c639 serial: 8250_omap: fix wake irq cleared during suspend 0794ba5332754 serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() 9acf2e564d3df perf: Replace perf_event_header__init_id with full header init 247b8f6808763 tty: serial: max3100: shut down timer before freeing port dcaf0251f847a tty: fix saved termios reset race c8ccd3b2013da tty: abort break signalling on hangup ce9fa23576941 tty: serial: qcom_geni_serial: Keep console RX functional after deep idle 017b18addbe8d tty: port: fix tty_port_tty_vhangup() race 6388409b711eb tty: tty_port: restore TTY_IO_ERROR on activation failure 26a885ecfd026 tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2 1a9fb9eaeb69b tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup 399aa38af1d78 tty: vcc: zero-initialize control packet in vcc_send_ctl() 7d81a8dc947e5 tty: amiserial: fix broken TIOCMIWAIT 390b28153a932 tty: vt: fix memory leak in vc_allocate() 45b606418bae7 usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe 159dada48ee2d usb: cdns3: fix use-after-free in cdns3_gadget_exit() 2c9e8d1527fe3 usb: typec: ucsi: displayport: Current CAM OOB index fixup d4fef69d4171f usb: typec: ucsi: Get the connector fwnode based on reg value de7b557b25846 usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41 ee8577de01c6b usb: typec: ucsi: glink: fix use-after-free of ucsi on remove 5414144e202a3 usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() dac0c073c6ad5 usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() a2b95607926d5 usb: typec: tipd: don't send GAID when probe fails in APP mode d6b0cce612636 usb: typec: tcpm: recover after failure to start the frs ams 79ba37dd38a32 USB: dwc2: shut down wakeup timer before freeing HCD state c50413ecb662e usb: core: clear both ep_in and ep_out for non-ep0 control endpoints c0d23c4201bcb usb: chipidea: tegra: disable runtime PM on resume failure 35ab269602e1f usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC 3070806a7bc7b USB: gadget: dummy-hcd: Fix wait for outstanding request completions c81504dfd2d93 usb: gadget: aspeed-vhub: cancel wake work on device removal f51cadb02b439 usb: dwc3: gadget: fix IRQ storm on invalid event buffer count f80ec4a636af5 usb: dwc3: am62: Fix runtime PM usage count leak on probe error path 5a8809025c43b usb: typec: port-mapper: Only match USB4 port if host interface is available cb6bf2c707805 usb: typec: anx7411 - stop the IRQ before destroying the workqueue 697cfe6e53b66 usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd 223c3bd02a582 usb: gadget: midi2: Fix the jack descriptor array sizes 136bac9724d19 usb: ohci-st: disable controller wakeup on removal 0f4673de449fe usb: ohci-spear: disable controller wakeup on removal af9b5552c80d7 usb: ohci-s3c2410: disable controller wakeup on removal 523814cea1e33 usb: ohci-da8xx: disable controller wakeup on cleanup 0cb708e252b8d usb: octeon-hcd: fix the FIFO-flush timeout computation d7c4a49b41583 usb: hub: use shorter 120ms post resume hold for SS root hubs db9d3be156bac usb: storage: sierra_ms: reject short SWoC info transfers e80ee74206f26 USB: serial: fix port tear down use-after-free 420ca35af891d USB: cdc-acm: skip URB restart in port_shutdown if disconnected 24e98de44d24b USB: cdc-acm: fix racy TIOCMIWAIT implementation 0b293e202bfda soc: qcom: geni-se: Correct QUP Core ICC vote constants 98dc9fababd1b rust_binder: cancel deferred work items in thread exit 43f78b328f390 nitro_enclaves: fix use-after-free on SLOT_ALLOC failure 984c35ee7085d Input: synaptics - limit T440p InterTouch quirk to LEN0036 2449f5c9c8439 Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 4cd725b0eaa0b Input: s6sy761 - fix resume ordering and restore sensing 5042665c52c91 Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 35085bb734ead Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 e491fc201d4fb kgdboc: Fix tty driver reference leak in configure_kgdboc() 52332a61bf47f hrtimer: Use the mask to clear TIF_HRTIMER_REARM from the exit work e826e849e00e3 clk: spacemit: k3: add CPU PLL rate tables 885bbbe52d318 binderfs: fix UAF write in binder_add_device 6673f4f21e2fd binder: fix leaked fd fixups on TF_UPDATE_TXN supersede 1ab671b50714a binder: fix is_failure flag for superseded transaction cleanup 6b28918f2b28c drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU abf854513bc19 drm/amdgpu: fix ACP MFD device leak on init failure 109e0005bd680 drm/amdgpu: drop userq callback assignment for sdma 7.1 13074da71ad8c drm/amdgpu: implement workaround for sdma dcc corruption c05bbcc263d67 drm/amdgpu: fix IP instance memory leak on kobject add failure cb3e0244514d1 drm/mediatek: Fix pdev reference leak in mtk_drm_bind() 8e3a350075b55 drm/mediatek: Fix ovl adaptor platform device leak aeef8a8537bcf drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device 85d8c3c0ccc1c drm/radeon: Read the VRAM VBIOS signature with readb() 1c05065255652 drm/i915/vrr: Disable DC balance by default 67d68622668d6 drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub() 7a4e35a054699 drm/amdgpu/gmc12.1: properly pass flush_type to gmc_v12_1_flush_vm_hub() 4b70c6b34912c drm/amdgpu/gfx6: fix firmware leak on teardown 7f94a706aa473 drm/amd/pm/si: Fix updating clock limits on AC/DC 4e0482f7d9d6e drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC 2b383a50e8f63 drm/amd/display: Mark DCE 6.4 as not APU 8f88350943414 drm/amd/display: Fix stale replay_events after mod_power stream removal 32059834642c6 drm/amd/display: Fix fast updates on DCE 8.1 b8cbda33632d2 drm/amd/display: Fix fast updates on DCE 6.x 7283b78ca07ce drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend b1e1884a45639 drm/amd/display: Preserve eDP mode on initial ASSR failure daa0437fe5e45 drm/amd/display: guard dc_sink dereferences in MST mode validation f7451f59990c4 PCI: Accept AtomicOps already enabled by the hypervisor 94f41ec5fa578 bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() 5d5dc18b3a9ac futex: Fix private hash use-after-free on resize fbba0b7a4c9c2 drm/mediatek: Fix runtime PM leak in mtk_hdmi_ddc_v2_probe() 33d0a5d2fee06 bpf: Fix objects stuck in free_by_rcu_ttrace b9818bd1a592d bpf: Factor out __do_call_rcu_ttrace() b73c20cd7b870 spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260 ba6cd9f0b337c ALSA: ice1712: Fix the error handling via auto-cleanup at probe f01cfe7e81748 ALSA: core: Define auto-cleanup for snd_card_free() 81e61e3f8befa perf: Fix race between perf_event_exit_task() and perf_pending_task() cee25e14333b6 i2c: at91: release DMA channels when probe defers 4d6a628c671ca net: mvneta: clear XDP pfmemalloc flag between frames 086e8acb3a0e5 ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() 63df0ef4c6e31 net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference b4d6ab56b27d9 net: sparx5: make ports inherit the switch base mac address type 796f49e745531 of: Put coreboot node after compatibility check 59cb923a82c38 net: microchip: vcap: stop scanning after deleting key field a2cac45848d1c netfilter: flowtable: generalize pending status bit 58108f05b0502 netfilter: bpf: reject invalid NAT manipulation types 45a93111835cc ipvs: filter some flags received in the backup server ea397f425be14 ipvs: do not create invisible templates f9abe0a0befb1 ipvs: fix missing counter decrement in lblc 07188a3c2baf7 tcp: refresh TS.Recent for accepted old ACKs 2879b65bfa548 net: sparx5: skip ptp deinit if init was skipped 8b4a790ef9be3 net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values 17eafd74de5a3 net: ethernet: mtk_eth_soc: allocate dummy netdev sooner f99de42f5c6f8 net: cap skb->queue_mapping when the tx queue is picked d870102b54253 net: bcmgenet: fix NULL dereference in set_coalesce before first open a616189d75c74 net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence f583cfe64bd37 virtio_blk: set the zone write granularity c60e775d235b2 ALSA: usb-audio: Apply boot quirk for Behringer models generically e2f7470717823 ALSA: usb-audio: Add boot quirk for Behringer CM1A 269a62e242b84 net/sched: sch_codel: match the no-drop threshold to the packet size 172dff7703d4a net/sched: fq_codel: match the no-drop threshold to the packet size f91817a8d54af gve: DQO: accept TSO packets with non-protocol gso_type bits 967566ad325b4 bpf: Skip detached progs in trampoline images that are still in use 40955f6512a03 bpf: Wait for an RCU tasks grace period before freeing trampoline progs a467b05b201b5 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value dce32bd7d8879 net: ethtool: let tsconfig reach a PHY-only timestamp provider e9141fdb7a2ea seg6: ensure packet data is writable before modifying SRH and IPv6 DA a7cff44543f66 net: stmmac: fix rx Scatter-Gather support 0b105f4eb78e5 net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() 60e0c2aeaa605 tipc: prevent GCM nonce reuse on peer key changes 2f21aaec8373f octeontx2-af: mcs: Fix SC resource cleanup loop 59fbbded05e55 octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled 8117cbc504cb0 net/mlx5: Fix slab-out-of-bounds when handling team device events df8e7029aea62 net: systemport: Fix RUNT MIB counter register offset calculation faba9fdde4803 net: systemport: Fix buffer overflow in bcm_sysport_get_stats() d01a52060063b drm/mediatek: mtk_hdmi_v2: fix VID_DOWNSAMPLE_CONFIG register offset e8ba8c9c74d10 Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister dd6c3da23d54c drm/xe/pf: Keep VF LMEM BAR size low if no VFs enabled e7602a7c34ea6 drm/xe/pf: Refactor VF LMEM BAR resize helper function 6ec39ab6be542 ALSA: hda/realtek - Add headset mode for Dell Pro QC1255 63e7064b4c1c4 wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() 5ffc2f704d88f netfilter: ipset: do not update comments from kernel-side adds 0498e7abd9560 ipv6: fix prefix route expiry in modify_prefix_route() f4f6340985932 net: bcmgenet: allocate RX buffers as page fragments 570141625d212 net/sched: cls_api: reclaim an empty proto on the error path f37f42e6e039a net/mctp: publish the mctp_dev only after it is initialised b506f5699e145 bpf: Hold map BTF for the memory allocator destructor record 351d1c47e45b2 nvme: fix command effects log lifetime for multipath heads 45d16ffbc9b65 nvme: work around -Wformat-security warning 98b09ad793448 nvme: fix cdev lifetime 3fc78337706a8 nvme: add nvme_get_ns_head() 9bc8fe8af3797 ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer 443328237113e bpf: Fix overflow of jump offset in constant blinding 1107c7e29a0f2 drbd: remove unused drbd_nl_mcgrps[] array 1f90c62a2412b ASoC: SDCA: Add better pm_runtime error handling in func probe 1769d8924848d ASoC: SDCA: Set suspended flag after resuming within system suspend 48eb9ee6f52c6 arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz 46545c86b54ff mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() e26322e44c66a mm/slab: handle the !allow_spin case in kfree_rcu_sheaf() f3617369fbb30 Bluetooth: btintel: validate DDC record lengths 4235764580013 Bluetooth: hci_core: free the HCI ID if naming fails 2c47ebc27fa72 blk-mq: set RQF_USE_SCHED when the operation is known dd33c03cefccd block: reject polled dio with user integrity metadata 64804ed8fad4b ASoC: codecs: rt274: Fix format setting for 44100 rate 9446cc221e098 ASoC: codecs: rt286: Revert delay value for jack setup ad61b9a5febb4 wifi: mac80211: prevent AP VLAN tx from other interfaces 5f27581c176f8 wifi: cfg80211: preserve hidden-group beacon IE ownership b1961a61ab6fb wifi: mac80211: validate TX status rate metadata 8a03f8422fa08 rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() 55ca60ba33663 rtc: ac100: Fix clock provider use-after-free on probe failure 2838d7bbb5518 rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak e73a619f91b6c wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE a3b0137c855a6 wifi: ath9k: reject short WMI command responses 5fde5e25f5126 wifi: ath9k: Clean up device initialisation guards c27779d3679c6 wifi: ath11k: reset ar->num_stations on hardware start 870b8cb9baa9b wifi: mac80211: drop oversized fragments to avoid extra_len overflow f3405fe6e1073 ASoC: tegra: Fix ASRC Stream6 input threshold control 7acb36fd60a3e wifi: wfx: validate MIB read length before copying to caller ce05ab5fb6ec2 ASoC: wm8903: Move the DRC QR threshold to the register that holds it 4ec22c9b8c0fe of/overlay: don't create "//" paths for fragments targeting the root 3a23fb158ba51 of/overlay: don't leak fragment references when changeset init fails 39b9f41496382 random: fix vgetrandom_opaque_params kernel-doc 9fcf4317384ce blk-cgroup: save IRQ state in blkg_tryget_closest() f4274a918bb57 nvmet: preserve device path on allocation failure dc482a281a19a mtd: core: call _get_device() with the master MTD cecf007418b93 mtd: core: avoid double-free of OTP NVMEM device 22d377178de28 iio: accel: kionix-kx022a: Fix array boundary check 43d294b02c88e iio: light: rohm-bu27034: Fix error return 3781cb06b787e iio: dac: rohm-bd79703: Do not allow writing SCALE 40554d1221e3d ext4: don't enable large folios on encrypted inodes b78748424f29f ALSA: line6: reject oversized playback packets 1a0a0d881e043 ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270) 2e5a413cc2a48 ALSA: caiaq: unregister the input device when probe fails e45e93538da14 wifi: wlcore: Fix runtime PM leak in wlcore_remove() 0ee53081425a1 vt: skip screen update for DEC alignment test on backgroup consoles 619c6d7dd76ff vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() 9dfcadc5e003f vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF ebf22e2ac2c8e mm: shmem: ignore sysfs configs for shmem forced collapse a0375b5e51d07 mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc 35104391d566a mm/damon/core: don't skip damos_adjust_quota() while esz is not zero 8f42954ad8bf9 virt: vmgenid: set driver_data before registering notification handlers 88752b97fe69b virt: vmgenid: remap memory as decrypted bfc721eef5c13 module: fix lost error code from codetag_load_module() 915be8668c60d netfs: zero the tail of a short DIO/unbuffered read 2a62fe628a877 netfs: zero gaps in read-gaps folio to avoid writing back stale data a7036a73671fc netfs: clear post-EOF pagecache when extending a file via write f6599d8830fe7 tpm: Disable TPM on null key name mismatch 54fd86bb49265 time/jiffies: Saturate in mult_hz() instead of wrapping e68ac524e9383 sysctl: Negate before converting in the int read path 222c41e0f50f1 sctp: check RCV_SHUTDOWN after the sendmsg connect wait cb6d6a7fbff04 rtc: spear: initialize IRQ state before requesting alarm IRQ ad1bf77039cba rtc: ac100: Assign .num before accessing .hws b36052c457079 random: vDSO: avoid call to memset() when zeroing reserved parameter c5c096b134450 r8169: disable EEE on RTL8168h/8111h 2cee3603ec1d9 pfcp: fix socket lifetime on netdevice registration failure 9fd63d284e251 net/packet: prevent TX_RING byte count overflow 4cd378423a331 netfilter: nft_flow_offload: drop flowtable reference on init error path 65812d6a5aee4 net: phy: aquantia: fix system interface type not updated in forced mode dd2b3e0a5f968 net: fix checksum offsets in skb_splice_from_iter() cabacdf98e09e net: extend IPv6 exthdr detection of tunneled packets c949646c900e8 net: gso: limit recursive IP-in-IP segmentation c875407c34dad of/overlay: only treat a positive changeset id as registered 5857035a3b53a of/overlay: put property on deadprops only after changeset add succeeds 239fa8196b518 of/irq: Fix remaining refcount leaks in of_irq_init() b0825e3a52474 octeontx2-pf: Fix RSS indirection table size 526fac219e8b7 kprobes: Skip disarmed probes when checking optkprobe overlap c59b210af84da kasan: unpoison task stack below watermark only in generic mode 16c83c047ecfa ipvs: bound LBLCR and LBLC cache growth 395b25968fe85 io_uring: fix task_work add use-after-free with SQPOLL 5e508d304f2a1 io_uring/zcrx: requeue multishot receives stopped by a local resource 7cac9ee939e49 io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full a0125ca86e405 HID: multitouch: stop the release timer from being rearmed on remove f9f808227554b HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request dd4a0d4993633 fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() fa392baf00e66 crypto: x86/aes-gcm - fix always true check for last AAD segment f2cc5462b7855 audit: fix exe mark UAF in kill_rules() 3b0860792282a ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices 0a6d9e67aeaff KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths f7c8620546091 Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table ea219e93ca752 ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture 942192dbcd3a0 KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails 43457bf655004 sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task fe499ae9da46e sched_ext: Don't run ops.dequeue() with a DSQ lock held 5f950cfce1ef8 sched_ext: Add a size argument to scx_bpf_cid_topo() so struct scx_cid_topo can grow 0e1a74369bdbc sched_ext: Build the cid tables privately and publish them with RCU 08513d9985814 sched/cache: Skip kernel threads for cache aware scheduling to rubustify the code 9436130e6da72 sched/cache: Introduce task_struct->sched_cache_grp to fix UAF d3bb1bfc83f37 sched/cache: Honor migrate_llc_task semantics in active load balance, to fix LLC mis-scheduling bug 450d1d9e046da sched/cache: Keep nr_pref_llc_running in the runnable domain, to fix LLC mis-scheduling bug 6f7d978dc7cf4 sched/fair: Avoid creating misfits during cache-aware balancing ce4fb8d3e21b8 selftests/cgroup: account for zswap shrinker writeback d85a1f2851518 drm/xe/i2c: Keep the i2c controller always enabled 1044970320007 dm-pcache: bound the logical key offset from persistent memory 96e2863b1f81e dm-pcache: reject a kset that overruns its segment 5fce161649b4d Linux 7.2.9 82339215fc00b i2c: qcom-geni: release DMA channels on probe error f0c1fb7e96b3c accel/ivpu: Drop IRQF_ONESHOT to allow IPC IRQ threading on PREEMPT_RT bf5266d912c07 KVM: x86: Add static calls for nested virtualization ops 7f0a727723a0e KVM: x86: Reject nested CAP enablement if nested virtualization is disabled ac1dc205accae KVM: move TSS constants from kvm_host.h to tss.h 42dd578c3c8fb KVM: x86/mmu: Move kvm_mmu_do_page_fault() from mmu_internal.h => mmu.c d54c173828ea1 KVM: x86/mmu: Move kvm_arch_async_page_ready() below kvm_tdp_page_fault() a0d29482f3ff8 KVM: x86: Move IRQ-related helper declarations from kvm_host.h => irq.h 5bf1c9175e657 KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction 512c93f4461b9 KVM: arm64: nv: Fix life cycle of the nested_mmus array b097d9d7a5b09 net/sched: act_ct: avoid modifying shared unconfirmed ct entry 8988f4d11f3fb net/sched: act_ct: fix helper UAF due to extensions realloc 9355bf2b26a65 drm/amd/display: Relax DML frame limit with UBSAN 93664ce254c78 super: make iterate_supers_type() deletion-safe e4c644e2ef8eb super: take lock after last reference count 499f144ae5d1d super: convert s_count to refcount_t s_passive 139efdb3ee6e4 i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL 6c3420d6ba34d i2c: qcom-geni: Store of_device_id data in driver private struct 4edab037132b8 i2c: qcom-geni: Move resource initialization to separate function fb54df3645d8a i2c: qcom-geni: Isolate serial engine setup 3aede00c681a9 accel/ivpu: Use separate flag for job timeout a19900a0ed08e accel/ivpu: Use threaded IRQ for IPC callback processing 63fc6312d39d5 landlock: Work around gcc-16 -Wuninitialized warning d6efcfd5cd8f8 drm/xe: Add wa_14025941587 to xe2, xe3 and xe3p platforms 961c717e6bf0e xfs: fix cursor and pointer handling when recovering iunlink buckets b39ce66ab47cb xfs: fix blockgc group quota scanning when usrquota isn't enforced 41bc624377f08 xfs: drop dquot flush lock when we can't find a buffer to flush f1f7bc739a891 xfs: don't merge different file IO error types 0e0d3372a8402 xfs: don't let memory failures leak blocks and kill repairs f0d8352a39f4a xfs: don't let hidden_space go negative in xfs_metafile_resv_init b4b9928ee54f4 xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits 2703b954d306e xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots 26ba0c5482d95 xfs: fix rtgroup repair estimations 0f3f707b5478d xfs: check di_forkoff correctly in scrub 1fd8a33bbd0ba xfs: use the correct reservations for rtrmap/refcount recovery 34e600858fc35 xfs: only flag zero padding for dir3 data blocks, not dir3 block blocks 445cb918169a5 xfs: don't call xfs_exchange_range_finish for a dry run dfb84f25e7750 xfs: check padding field in xfs_ioc_commit_range fbf850345ff74 xfs: use correct jiffies comparison function in xchk_maybe_relax f813aefd9e09c xfs: release orphanage dir inode if chown fails 4cb89cd1ac1d3 xfs: fix attr fork block count checks in xrep_inode_blockcounts da172e10613d0 xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption 70783946f3b5d smb: client: delete compound mids on send failure before unlock 253612499ce9b smb: client: close completed creates on compound wait errors b01f4f85817c6 smb: client: validate POSIX create context length 3c07deb262731 smb: client: use finish_no_open() for non-regular inodes f09b5f972eca1 smb: client: preserve create-context parsing errors 7c1509598a4fd smb: client: clean up failed cached directory opens cdb36b09fb1f8 smb: client: close handle after create-context parsing failure cecc5399987e7 smb: client: fix create context out-of-bounds reads 005b23d9e324f Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO 2e8bba0360d13 Bluetooth: mgmt: fix race in read_unconf_index_list() f557274af7b94 Bluetooth: L2CAP: validate frame length before control and FCS access e5fcca51177f2 Bluetooth: ISO: release unused CIS holds after channel attach bbcd723ee7a84 Bluetooth: ISO: balance the parent hold in hci_bind_bis() 47d67ec424e63 Bluetooth: hci_sock: reject out-of-range OCF values 1a92763c2ba72 Bluetooth: hci_sock: validate event length before filtering 947eb2f41f70d Bluetooth: hci_conn: fix CIS hold ownership on reuse df59474a0a857 sched/cache: Refresh LLC capacity across CPU hotplug, to fix capacity underestimation bug 852ecb6bc0bc0 sched/cache: Decouple sched_cache_group from mm to fix UAF 3fdf2ceb31e8a sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags c942d0d46049d RISC-V: KVM: Fix HSM hart status error propagation e9c89ca5f145c RISC-V: KVM: Propagate interrupted G-stage faults f475f4d78def6 RISC-V: KVM: Release unused page after MMU invalidation 3cc6184bd5920 RISC-V: KVM: Synchronize hrtimer callback during teardown 71acbea44e786 RISC-V: KVM: Serialize IMSIC attributes with vCPU migration 22df195bff843 KVM: arm64: Transfer the hyp stack pages out of the host stage-2 3cefc1ab511fa KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race 330346dda3bf5 KVM: arm64: Fix spurious warning for benign stage 2 teardown race af6813d16ace2 KVM: arm64: Fix AArch32 DBGBXVR handling cc53eb5c6515e KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode d4cc2dff12116 KVM: SEV: Do cache maintenance on the source VM during intra-host migration 9784e5ca91b37 KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV 4e4d2ae5ad394 KVM: Don't treat reserved xarray entries as having memory attributes 9a5eec7bdd3fc KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg 3c3433657c82f s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config fa0cccea92502 s390/pci: Don't report recovery success on skipped recovery d47272ceaab8f s390/pci: Report SCLP status on error events when no pdev is associated 1b957d5c2f737 s390/pci: Fix missing device lock in zpci_report_status() 1cd0b7a08dc83 s390/pci: Fix leak of struct pci_dev reference in zpci_report_status() 7f78226eb743b s390/cmf: Fix virtual vs physical address confusion 44b16b0260805 s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() 7274abc88dda6 pinctrl: sunxi: keep a shadow copy of the data register output latches db451df3dc17e pinctrl: single: free the IRQ on domain creation failure 742be6976ebd6 pinctrl: qcom: nord: Split QUP1 SE2/SE3 into lane-pair functions ff77310ea0bf7 pinctrl: mpfs-mssio: use correct regmap function to set bank voltage 897e39973c26a pinctrl: mpfs-mssio: fix width of unused bank voltage setting c45b783d57c23 perf/x86/intel: Constrain Panther Cove UOPS_DISPATCHED events to PMCs 0-3 991113857d31a perf/x86/intel: Remove incorrect Panther Cove PEBS data-source constraints 6ec90c2a7bd97 perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints 40f6fd75cc22a perf/x86/intel: Fix Panther Cove PEBS data-source snoop states eefb89f251873 perf/x86/intel: Fix DKT PEBS load/store direction for latency events, to fix sample classification 684a72b20c006 perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification d07b3fd6df84e perf/x86/intel: Fix CMT PEBS load/store direction for latency events, to fix sample classification f0be081114dae perf/core: Run sched_task() for PMUs with only CPU-wide events ec15f6a50183f perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() 8a20dbb31020d parisc: parse early parameters in setup_arch() db45f02b7a5f7 parisc: Increase kernel stack size to 32kb b92d5f31d4667 scsi: ufs: pltfrm: Add quirk for R-Car S4 lacking lanes-per-direction 9f6f4840def93 scsi: ufs: core: Keep internal commands dispatchable during error handling 24ffc919467d2 scsi: libiscsi_tcp: Check the data direction of a Data-In PDU 6ef70d790425e nfc: trf7970a: power down on startup RX gain failure 035056e07ea65 nfc: port100: reject frames whose declared length exceeds the received data 744e61bd06188 nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() 9ede11e12f965 nfc: fix use-after-free in nfc_get_local_general_bytes 4fb8b1ccc4756 netfilter: nf_tables: skip expired catchall elements on insert and delete d9cf4ac6f3263 netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read 3a7384bc2e662 netfilter: ip6t_rpfilter: reject routes without inet6_dev e27b51822681a net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() f2379110d05df net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist b03b8ed983df1 net: txgbe: fix FDIR filter restore for VF rules f0105a92289d8 net: phy: micrel: Advance register data pointer in write loop a0cb48c6418d1 net: phy: intel-xway: workaround 100BASE-TX Link-Up issue 47785f9f638b0 net: ena: fix MMIO read buffer leak on probe failure e32f6c0e0d626 net: ena: fix PHC cleanup on probe failure fe2a42789c12e net: bridge: mdb: restart port group walk after deletion 3a7d9271b37c8 net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read d4ab263e40fcf net: atl1c: fix soft lockup on out-of-range tpd_cons read e02a83bb0b7a2 net: openvswitch: conntrack: fix helper UAF due to extensions realloc ec8f12f46f07b net: openvswitch: conntrack: remove 'add_helper' dead code 457e0df1b5711 net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry 259e6cbb6a097 net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths cbaad2922bd5d net: ipconfig: bound DHCP option construction deed332a8dd6b net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() 6285919d4c062 net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read 35e716a707334 net: arp: terminate device name before lookup da9d42531f3a6 net: airoha: npu: cancel wdt_work after releasing the WDT IRQ a9551f26287de net/sched: reject IDR error pointers when deleting actions e73f832f0a7b2 net/mlx5e: fix swapped IPv6 IPsec policy masks 2b2a207ef975b net/mlx5e: advertise MACsec offload only when supported 1f13989a0704b net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() 4b09b7c84b863 HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() 723983a774f14 HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard eed737d89fa36 HID: hid-oxp: use cancel_delayed_work_sync() in remove 443f6b93442b1 HID: alps: fix use-after-free on input2 registration failure 978e801750c7b HID: alps: unregister DualPoint Stick input device on remove 2a0c9afefc0ec packet: use ubuf_info completion for TX_RING packets aee774588abd7 PCI: of_property: Omit bus properties without a subordinate bus 75be9cc462134 PCI: Fix BAR resize for devices on a root bus 655690f370e2d mm/damon/core: reset invalid quota->charge_target_from 27adca087f25c mm/damon/core: allow esz to be set to zero 2ecc56fb6a58a mm/damon/core: fix unconditionally skip last region d5208de0799c5 mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold() 6e74ffc9ecf6e mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() 480a39b0a12c9 mm/hugetlb: preserve mremap address delta when skipping page tables 443628f755b35 mm/hugetlb: do not dissolve gigantic pages without runtime support d348a715380bf mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish fcedc256a1eb7 gpio: tps65219: Fix TPS65214 GPIO direction programming d5313d51c6e62 gpio: tps65219: Use the variant-specific direction callback eafce3255b271 gpio: tps65219: Fix GPIO input value reads ecced0076b700 drm/virtio: fix NULL pointer dereference on fence allocation failure ae583668f16d4 drm/virtio: fix memory leak of fence event on execbuffer failure 9f71d6b6bdb7a drm/xe: Keep walking on SVM eviction failure 599c17ac1c6ac drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV 531d4cd031182 drm/xe: harden adjust_idledly() against divide-by-zero and overflow bddaa5e4094c1 drm/xe/vm: nuke PTs only after unlinking contested VMAs 189ffc7b6cad6 drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() cd6e11b6ebe04 drm/nouveau: RCU-free the scheduler-containing nouveau_sched 780ad8e4df9f7 drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() 9e13c398a2344 drm/nouveau: Fix gem reference leak in validate_init() 872a5473c02a2 drm/nouveau: fix double-free in nvif_vmm_dtor 3e0861ebb9ecf drm/nouveau: Fix bridge reference leak in nv1a_ram_new() eed63b6137255 drm/nouveau: fix autosuspend cleanup during teardown 5b2fffbba290e drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM 06c69c64686a3 drm/nouveau/dmem: pin VRAM for the whole registered range 18f1cb48a7992 drm/amdgpu: move userq fence wait out of signalling section 8372eea98082e drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() 2556dd3a36beb drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() d9bc9e5a356c6 drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() 25901f180bde2 drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc() 7963b4d2445af drm/amdgpu/vcn5.0.1: fix video_timeout unit mismatch in jpeg reset wait ca51e225a554f drm/amdgpu/vcn4.0.3: fix video_timeout unit mismatch in jpeg reset wait 545a1c8792893 drm/amdgpu/userq: fix double jiffies conversion in hang detect timeout 707474d1d8619 drm/amd/display: Bump frame warning limit for clang builds of dml d111fde7b12f8 drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() 02b74891624e0 drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping 168e41173a9e6 drm/i915/dp_mst: Fix configuring TUs for a disconnected stream 67da63b54ced3 drm/i915/dp_mst: Fix configuring FEC for a disconnected stream a9047237769cc drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1 2dd0190e397ec drm/i915: fix incorrect RCU teardown order eb4af14672870 drm/imagination: Fix page count for page table for map() interface d30ea27471649 drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() a69c4b678db80 drm/client: fix restore of partially initialized client b36d32f30c3f1 rds: ib: Clear the sg list when mapping an MR fails f178300e2f56c mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() 3361c93e41738 llc: reserve device headroom for allocated frames 6e20dabffbcd7 gpio: zynq: fix runtime PM leak on request error path 60a466f231905 gpio: cdev: fix kernel stack leak to user-space in error path 39748357db26b gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() f05a01fc7d4f7 kprobes: Fix permanent hang when flushing the kprobe optimizer 94214cf0a08dd ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST 4254d5878c320 ipv6: do not let ipv6_find_hdr() return an offset past the packet end d7c5bd3159235 ipe: protect the dm-verity root hash with RCU e9015d32752fa ipe: fix use-after-free when auditing a newly loaded policy cb52f9f188c31 fsl/fman: Fix clk reference leak in read_dts_node() 260f586a80e7f writeback: report a Tasks-RCU quiescent state per cgwb drain pass f97e6d0572d1b workqueue: Fix NULL current_pwq deref in flush dependency check 9dac137bf77e0 writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes 37a2042748bc8 netfs: Fix missing alloc tagging of direct mempool allocations 1ae2a242c15b0 fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga b7459fddcb27a fprobe: Terminate the fgraph_data list when the reservation is not filled 520cf06b8ea0b fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT dfacf401f83dc cgroup/pids: Restore pids.events notifications in local mode 0751ab665cb3d cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict 9daa00445928d crypto: s390/hmac - Generate intermediate CV for API partial block handling 640d37fbd34d0 bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir e09d1c6729ee4 bna: prevent IOC timer rearm during teardown 80fbb0bc4d116 ata: libata-scsi: bound the ATA passthru sense descriptor writes 590395db53594 arm64: errata: match the target implementation CPU's own MIDR ce71865bf43f8 arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 218a944b9e035 af_packet: fix integer overflow in prb_calc_retire_blk_tmo() 6df536c5acbc0 sctp: discard the rest of the packet on a stale-cookie error 08e835f5ec6e2 tcp: prevent collapsing skbs across boundary in rtx queue b0e517961f09b tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow 31e3ef800705a virtio_net: copy zerocopy frags in start_xmit without NAPI 0f035ce43acd3 vsock: ignore empty child namespace mode writes 64da377e83d75 x86/sev: Make vTPM SVSM calls preemption-safe 61d4c3b002505 x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 51c17a944e3f0 x86/mce: Fix hardware debug register corruption on task migration 59af43ccece4d vlan: require the MAC header to be present in __vlan_insert_inner_tag() 415f5a755cec5 drm/pagemap: dma-unmap pages before handling migration errors 283550b74db33 mptcp: return sk_wait_data() errors from recvmsg() ee4d5818a9ecc sched/core: Account PSI IRQ time to the execution context, not the scheduling context c7de8521947a5 perf/core: Fill branch entries with a single assignment 5286d4eb5cd7e perf/core: Fix a refcount leak in attach_perf_ctx_data() 841410754a71c perf/x86/intel: Delete dead NVL PEBS data-source initcall 074eee0bf0d6d perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs() 050c4b962184e perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused 67f0ef3b5ff6e perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED 23e769520fb8e perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits fc4fd0281ac80 autofs: fix sbi->pipe file reference leak in autofs_kill_sb() 719bd33ab359c ovl: fix UAF in ovl_do_mkdir() debug print 90d51095371d9 vlan: ensure sufficient headroom in vlan_dev_hard_header() 43e3c3773b435 net/sched: sch_teql: fix shadowed err in __teql_resolve() 39de64a284fe5 bridge: check llc_mac_hdr_init() return value in br_send_bpdu() cb3528ad8bb46 llc: fix skb UAF and leaks on llc_mac_hdr_init() failure c517e8755960c gve: DQO: reject TSO packets with an out of range MSS 4de58b27f3ada gve: fix TX drop when GSO MSS is too small for hw dc9e8964a21f2 gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO c68f415746344 net: flush skb_defer_nodes in dev_cpu_dead() 1993c8745f852 net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails 24ca932b612b6 tipc: Fix a data race on mon->peer_cnt in mon_timeout() a9b968e42690d net/smc: fix UAF on lgr list traversal in smcr_port_err() 670f303169d2d net/rds: size a connection's path set by the transport it ends up with fe6c8ea8bfd5d nfp: hold IPsec RX state under the XArray lock e78b95cfd5df2 net: libwx: fix races in Tx timestamp handling e461e9e495643 net: wangxun: implement soft quiesce for PCIe error recovery 671a68654a9d3 net: phylink: record the PHY only once bringup cannot fail 0f87720c7e4bc tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() f306e465b5a20 net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq aae2a1f1e3a0a net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 9173f503c9591 bpf: Zero-fill other CPUs when BPF_F_CPU creates a per-cpu hash element c664cca8f622e net: emac: move setting of netops to fix crash 062b56c0986fd net/sched: act_ife: validate metadata length before decoding b07bea42bf590 macsec: initialize SecY before registering the netdevice fa1bdd972dd76 bonding: crypto offload enabled, non-offload slave failover, rekey failed eabd0ae361176 drm/imagination: clamp freelist reconstruction requests 930318290d850 net: xps: reject an out of range traffic class ff022fd9d0f02 vxlan: use one headroom snapshot for neighbour replies 63c5e48d6f7f5 ip_gre: Reject enabling collect metadata through changelink 027d9debeaede net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT 81c38c7426519 net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr 780f373ae5d04 net: bcmgenet: do not skip WoL power up on GENET V1 006c7cce35e35 net: bcmgenet: initialize u64 stats seq counter for all queues eeed00e40e24d net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems 36c07127924f1 net: ipv6: keep room for the mac header in dst_dev_overhead() 298673397ea3f net: stmmac: clear stale buf->page after recycling on skb build failure 8b7aae8f0e96f tg3: use random MAC address when tg3_get_device_address fails b3373c33c7b7d bpf: Fix BSWAP 32 and 16 on MIPS64 1bd91670966a7 bpf: Fix immediate JMP JEQ/JNE on MIPS32 ee17e21bc4964 net: mdio: realtek-rtl9300: fix RTL931x C22 extended page selection c8dad411b82da net: dsa: mv88e6xxx: 88E6191X and 88E6193X have no PTP 06f8310798ece vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets d7f4742268094 net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() 43f6b647f2095 veth: manage XDP program pointers during channel resize f329d42423089 net: bcmgenet: stop Tx NAPI before disabling the queues 7cdbc5768b932 net/sched: act_gate: budget the per-entry list in get_fill_size 2450a38836723 nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() 4262b12277a3e nfc: llcp: fix slab-out-of-bounds reads when logging service names 0a0412745c86a nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() 9e51b24f684ff nfc: llcp: fix -ENOMEM on connect with zero-length service name a86987d03a4d3 nfc: st21nfca: validate ISO15693 inventory length 0b01a946b0f23 nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure 779e13c0fa7fa nfc: virtual_ncidev: Add missing ioctl compat handler 6c488ec3e0106 selftests/nci: Fix out-of-bounds store on thread join 1aefc05d7bcf5 selftests: nci: Fix uninitialized family ID on missing attribute d5e1c92d09cae nfc: llcp: Fix race condition in accept_queue lifecycle ead3daa724a81 selftests: nci: Correct pthread_create return value check 320a2ff49bdce nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() 7b996cc06dda5 nfc: st21nfca: validate received frame size 6a17a5806e9fc nfc: nfcmrvl: validate helper command length before pull bb375f3c5990e bpf: Reject dev-bound-only programs on other devices 0b160417826d2 net/sched: fix potential stack infoleak in em_text_dump() 491aa3167ae02 eth: fbnic: Avoid rounding zero ring sizes 212d21e669212 net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test ec351284780a8 net: stmmac: size the RX buffers from the frame length, not the MTU fa47a0487b48d net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K 849cb2ba03418 net: stmmac: selftests: Capture all packets for vlan checks adff25039a1f5 net: stmmac: selftests: Check the dev->features for S-TAG offload testing ca0f523acf36c net: stmmac: selftests: Validate EEE based on the actual LPI timer value 2efadd72b95f9 net: stmmac: selftests: Support running selftests on DSA conduits 35bf3b23c9a87 sctp: hold asoc or transport before mod_timer() in timer handlers 25e31481f739d net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports b5b3fcb335e09 net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports ee1df60a0d0e8 firewire: cdev: fix back-transition for iso_resource_auto client resource ba7d627dbc67d bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc 0b6b2bb9b90ad bpf: Reject pkt arguments in mutating subprogs 84ebb991ae985 bpf: Fix bpf_sock context code generation 39ffceaddb107 bpf: Fix bounds check for skb-backed dynptrs 37dbcadd7683e thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds 1aca79e5cda2e PM: hibernate: Freeze kernel threads after image preallocation 61ee40a3f2c0d net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure 45b4701ab2626 genetlink: report the real command id for dump-only ops in policy dumps 986ec9602ee8c net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error 3001a103a367c net: spacemit: clear TX descriptor on fragment mapping failure c593f38e1cdb9 s390/debug: Fix NULL pointer dereference in debug_info_copy() b42ca15649e73 s390/debug: Do not register views for failed static debug areas 9cb99c37d03a4 drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable b6c0c757c6589 tg3: clean up PHYLIB resources on probe failure d1b5fd969cc53 udp: remove a disconnected socket from the 4-tuple hash table f7b3d38dd7c47 udp: relocate a connected socket in the 4-tuple hash table on re-connect f9722746df13a ipv6: Fix dst leak for uncached routes. 05b442709bd52 net: usb: sr9700: include receive overhead in the length check 0ad83979a0fd2 dpll: use exact lookup for reference sync pin id 3950b9ec5e125 net: don't require the hwtstamp NDOs when a PHY provides timestamping e03e77071e75c ipv6: Prevent rt6_insert_exception() for dying fib6_info. 696baf868e230 octeontx2-af: Fix memory scaling limitation in SR-IOV mode 89a7241fc7ecc bpf: Reject non-negative offsets in stack_slot_obj_get_spi() 9240fc1f2cde5 Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() b29b70bfa1213 Bluetooth: btintel_pcie: validate device-supplied DMA indices ad0d2d4ada513 Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough c777431395a4a drm/xe/gt_throttle: Report power brake as a throttle reason on CRI 7f9ba0b023876 ovpn: reject invalid peer VPN addresses 57fd86c10acbd ovpn: reject multipeer peers without VPN addresses 47dd2b6819118 ovpn: reject duplicate peer VPN addresses 2b09b0b13a8be ovpn: always unhash old VPN addresses before rehashing 72bd1bea37ea2 ovpn: replace bind when clearing stale local source e283009151d3d ovpn: replace bind when learning local endpoint 400f3cd8ff053 ovpn: validate peer state before caching UDP dst 2149f81ffd4c6 ovpn: track UDP socket route key for peer dst cache 5cdb2076fbe2b ovpn: skip UDP source validation for unspecified addresses ae754c2b702a9 ovpn: preserve IPv6 scope id for netlink peer endpoints 9b796251c3cca drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach 8910994f4d12f pinctrl: tegra238: Fix register bank for AON pin groups 49762b1b881b9 drm/virtio: sync shmem backing on guest-bound transfers bed76f2c0f9e4 Revert "drm/virtio: Allow importing prime buffers when 3D is enabled" 7c8deb77d05bc drm/virtio: release the GEM object on virtio_gpu_vram_create() errors 02df4e24dc4c0 drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() 749d8bb964b34 drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() f75066c79d1ee drm/virtio: fix object leak when drm_gem_handle_create() fails 1301a1292c674 net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget 86a0e945fb645 bpf: Check params size before reading reserved fields 9d4be026bdff2 net: usb: catc: bound the RX packet length in catc_rx_done() 4105870a4b8af bpf: Bound ownership depth through local kptrs and graph roots b34ae23eb7818 net: allow IFLA_INET_CONF messages when NLA_F_NESTED unset ddc34cc0834c8 sctp: avoid livelock while updating retransmit path ce93f8561f87a eth: fbnic: Handle FW mailbox completions flagged with an error a969db6548a1b eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox 4f4b767ffea76 eth: fbnic: reset num_napi when the napi vectors are freed 1fb569cf3bf97 eth: fbnic: use the Rx queue napi pointer to find the napi vector 16ff1023213cc eth: fbnic: Handle maximum standalone channels 4ca1503491f1f net: ethtool: keep rtnl_lock for the ioctl self test b0afb7c7ca272 ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). 0fdb944d4df02 net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure c20f755338ca2 net: gue: reject invalid REMCSUM offsets 650787233c2fd net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure cdf9203b168ab drm/nouveau/disp: don't reject HDMI config on cards without SCDC b862c332bfa81 drm/nouveau/clk: don't clobber reclock status when restoring volt/fan 391517da7fd54 drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update 253a27ae7afee pinctrl: qcom: ipq5210: Publish the OF module alias 9f80910a87a9e ocfs2: make ocfs2_calc_xattr_init() return void 9b583795feb51 arm64: io: Reject non-user protection in ioremap_prot() 0321f3c891f3a netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name 5ad109938f0d5 ipvs: revalidate ihl before icmp_send 70a725baef910 netfilter: nft_synproxy: use the family-aware checksum helper 8137a39e08e83 netfilter: nfnetlink_queue: hold nfnl mutex in event notifier f26652e99f519 netfilter: flowtable: publish HW_DEAD after worker is done e2ccbbb270f87 gpiolib: use of_node_name if line-name is missing 06b78f3c925fe ipv4: fib: fix data-race and stale genid check around nh->nh_saddr 0d449edab5b17 libbpf: Reject truncated ldimm64 CO-RE relocations 8e4cbcca1e0a2 bpf: Restrict CO-RE poisoning to relocatable instructions 091b40845bd3c bpf: Preserve packet pointer class displacement in regsafe() 56dc616d7a1f7 bpf: Make post-verification instruction rewrites killable 688fd49e2dfec net/mlx5: LAG, reload IB reps of LAG master before the rest efa4cfabced0f net/mlx5: SD, unload reps on shared FDB create error path bd4dcb9955746 net/mlx5: devcom, Base component size on linked devices 5d2f913258ba7 octeontx2-af: use seq_file for rsrc_alloc debugfs ab14b5bbb871e net: pcs: rzn1-miic: Fix config array initialization 2f898f9ec7c73 net/sched: cls_u32: fix manual hash table handle IDR aliasing 4bab07f7b74e5 eth: fbnic: Fix payload page pool error cleanup 87ce4b53b7436 bpf: Skip unsettled links in link iterator 3c1e0a4bc156b xsk: Use a 32-bit compare in xsk_map_gen_lookup 3cdc6e12ff79f fs: avoid repeated scans in evict_inodes() 9a86ff5e1bf32 netfs, afs: Fix symlink reading 71ab3046a73b9 netfs: Fix netfs_read_gaps() to use separate sink folios 5af61cd2b5958 s390/cio: Guard PMCW field accesses with dnv check 7b0ae882b8618 s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points 1b8e7661d07bd s390/cio: Fix cio_update_schib() to not cache invalid schib 704f1ce7fe7f4 s390/pci/docs: Fix sriov_numvfs attribute name 09d610f7a9720 scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume() 2ef65974d0401 selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode 03ced4687fb79 Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel edcb84ee607a9 Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() 800c28b0c25d0 Bluetooth: SMP: reject Security Request over BR/EDR 7ed50d2b2fc0a pinctrl: sunxi: A523: fix voltage withstand encoding 3ddf8383b5445 scsi: sd_zbc: Reject disks with too many zones ca688bb207957 scsi: block: Fix zones_cond out-of-bounds write on zone report e1ca4e3a380ef squashfs: Add dictionary size range check to prevent shift-out-of-bounds bb79f2334ab8d KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP 33135c7653f62 KVM: selftests: fix steal_time for arm64 with host page size > 4K 7a6b9d829f13a KVM: arm64: Match hyp text by physical address in fix_host_ownership() 166d27b5908d8 KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0 7b5e99d286747 KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 f0cd8ffae092c KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure bae3e4493046d KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() 0895f04f763dd KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save 318354021fea3 KVM: arm64: vgic-its: Free the caches when GITS_BASER changes f3514b599eeae RISC-V: KVM: Fix perf-backed counter accounting across stop and read ca5f939b49b58 RISC-V: KVM: Report snapshot write failure to the guest c4ff5b02120c5 RISC-V: KVM: Preserve firmware counter value across stop/start 6da4665026213 KVM: riscv: Fix NACL hfence entry update order 650b2606b1343 RISC-V: KVM: Fix the conversion between vsip and hvip 0b69a3c24a06c HID: bpf: fix __hid_bpf_hw_check_params report length ee25833f037fa HID: amd_sfh: Validate PCI BAR size before mapping f3a0ceb68003a pinctrl: generic: serialise pinctrl_generic_dt_node_to_map() 0602f3e9eebda pinctrl: meson: Fix typo in s4 group name d7cd5ebe13989 bpf, arm64: set up the frame pointer for the exception callback cb3f6c0c211e9 bpf: Fix u32 overflow issue in map batch operations 8894205419118 bpf, sockmap: Fix self-redirect copied_seq double-counting f101602415fb3 bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk cba54d142c43e bpf: Fix out-of-bounds read of rtt_min in sock_ops 4e48fe9b1c779 bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() 413f72ce8c829 bpf: Allow terminal gotox instructions 032d037c42c05 KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() 45f3f248297c4 HID: elecom: fix bus type for M-XGL20DLBK 2b25f11ec52ea HID: winwing: fix use-after-free in force feedback teardown 86ed8ca0bb3db HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio ee7246bccb9da tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context 2534a5e5d360c bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() b8fa56722e9c4 bpf: Fix divide-by-zero in btf_struct_walk() ff94a50f1eb14 selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc fca71ead7a202 bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL 707567d2edf6b bpf: Fix bpf_skb_change_tail wrt csum partial skbs 116bba758533a s390/uv: Prevent potential out-of-bounds read 91867f46cfb6c s390/uv: Fix loop condition in uv_find_secrets 90bd832b2bc36 KVM: s390: Fix race in _destroy_pages_crste() c958f04988912 KVM: s390: Fix potential races in dat skey functions 75867536746ab KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key() 7a33007b95c89 KVM: s390: Add missing srcu in kvm_s390_set_irq_state() d0e3bf633f058 KVM: s390: Fix IRQ injection with SIGP Stop and Store Status 94c43c7df4643 KVM: s390: Fix _gaccess_shadow_fault() 66db037037f67 KVM: s390: Fix dirty marking in adapter_indicators_set*() 63d2ecad81aa5 remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage 0b1eebd359685 drm/amd/display: Remove sink usage from DPMS df064aea8f239 ALSA: hda/realtek: Add StarFighter HDA SSID 84332282a7ea9 ALSA: hda/realtek: Limit Star Labs internal mic boost d55c308af33f9 drm/amd/display: Atomize IRQ register read/modify/write ops Signed-off-by: Bruce Ashfield --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_7.2.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_7.2.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_7.2.bbappend index 269a8b0..fb46379 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_7.2.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_7.2.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v7.2/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "ea2659d14fd8d9e43875d96e11a5f3c377e1ba16" +SRCREV_machine:genericarm64 ?= "e4323ef8c241ed533d213f156a340083a8cdb92d" From patchwork Thu Oct 29 03:25:25 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102304 Received: from mail-qk1-f181.google.com (mail-qk1-f181.google.com [209.85.222.181]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4369.1793244359376647842 for ; Wed, 28 Oct 2026 20:25:59 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=pVlIBqqJ; spf=pass (domain: gmail.com, ip: 209.85.222.181, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qk1-f181.google.com with SMTP id af79cd13be357-93f20c3aaa5so149092085a.2 for ; Wed, 28 Oct 2026 20:25:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244358; x=1793849158; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=U/cNMYWjNjBTERPCzRbK78L3m+kTWOHVMKMRmb7LCUQ=; b=pVlIBqqJe+D1WfTnCTDT4H+4RBhcOsPf972cHWh0n2aeonghYf9ueiCHEPJ6ANFwRr 4Xcax/wxOERTt2jEMRB0QYKMluPzaiqZtKcPCWIIJGwCuZhjxDCrCUTkSFWOyLZgc2Md SRTxNW8rfJ1zmI4cRM6uS8JAlSIPSLaXofVAENrPwfyWZ4W5x57rVk6KIcHK6dLLaqRH 2nX17rtWqfsSjSkwEqo3d9lbvil6C8xT+y2YMxIkTi6SfLUW9z59rGC5HKL7SgMf7eJh ggBis2jwFnrWULNmel1wTiMr53TqGcFrFVRRsuyv5bmTx80NlIMzA76Il/4C9DLPTM3s XiKw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244358; x=1793849158; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=U/cNMYWjNjBTERPCzRbK78L3m+kTWOHVMKMRmb7LCUQ=; b=Uro8Ysh8T7Cc8m8LyN0J62dgQh33YdX5sjmb0rvzdkXWSWX/ca78t23S/URDu0HCcs V3FhANkSM0uiwPjtAlDDsR7RP840tRkOvjTbrKgjfz02A5jW9tftIORjleZWbGUa6b3v Z6Dw9H6RezRZeJfi5owSTGkTeI2Q8ajNqHCjABZPOrFClWSzOpyjBmvmZlzhCnvkZ2l/ UvUPdf005BybQ2cZLgLtBXUh49OqAlulNEzTU4kmFlmIqFj/Y38h4wHBYf7473SXHBAG WfSIjmRYs6NX4lhkwRQ+8942ioMMP5OZ8a4PZtFgtWvq3VxZK6Y4jeqFQlkL59HQPcUC LdPg== X-Gm-Message-State: AFq9FYKlzz6hEqLjrW98dcJBrYWZnpcW4VGJbMzOoC3AWP0tDNWl/WOj F9loxLKh3R8wjeO1tj62xirWeTWDDpKitnjYOrxXhoVH4ccXeu41GZlpuBdj3m2Q X-Gm-Gg: AYBFou2TzpeV2JehxefixAxSgV4p2qLTGBoKTkC1AzsmqPLSeirCBKTSg6GIiHawwu4 ynsXNeORGoeUPeQuIKJwhR3VsBC4c6dmIsEnCBkG9d3u2IdLE3tY5iQTt0PuHusZmPHcWVuFpNo 9yjJaFn6Foy2qhPBOOzg0ujb4mjrC3w1JfUv05FLz2BalmtMPcGTm+6CtE2l4jB4mDm/ofeFNXf XeeBJG5BEq1Y2XIZi73KAcGkWEMhnOqP8HJEKvlE26iyoxQbnaQ6okwJeTUNICRK6gMXPgYTK8m hJbRqeadzc12XBLHqk8sxjb9sxg89SA1HlxQl3/BfpiLI4o7gE9aHyvkKq6XvQoG7rfZyqJbHS8 L+yUDOqZWecORRUzfqqv9mRDoeGGUao/64tfr5m556c6ROdR+Z+TYCMkH2eSsbKMcBYP7tUvk+1 ikjOKGvMCgTIeVizMbPcDYYLqxbp2pS2JxN2DCKpZlAvK0P/eLxDuV7+KyF9aK61MI+9ulmlg+F pweJCjN8AM7TN7kBuWI/s1b++AaILDgsxEqClICOFxyDsM9Jl4s/fd6sV44+UFLaPIgjzmLYuDp 1daUMCXdMXinEGImOSfQzX3BGJef6+HP+0e6rpbeFerJdZ9aPzD/mOkAumA9BP4jC8+J7TogWEt 99rsneQjh4mXkb6HZOz/vRAreZkvhPoNROmxk/1rO7pjlQdIMcZjzH+FblCdL0aglh8W8GSR8OP D5yCYl87csORoRCiMy0fVMemzd+ZVKLcx5s3CP2IW2QqGhJg== X-Received: by 2002:a05:620a:f06:b0:93f:c7d:1340 with SMTP id af79cd13be357-94408e0bc94mr626877685a.79.1793244358086; Wed, 28 Oct 2026 20:25:58 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.52 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:53 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta-yocto-bsp][PATCH 10/11] yocto-bsps: update to v6.18.59 Date: Wed, 28 Oct 2026 23:25:25 -0400 Message-ID: <20261029032527.3150782-11-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:26:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248867 From: Bruce Ashfield Updating linux-yocto/6.18 to the latest korg -stable release that comprises the following commits: 1253a6aa5d104 Linux 6.18.59 9a5d65b06dc33 smb: client: drain outstanding I/O before truncating on O_TRUNC open a4c584ea79d95 ice: fix crash in ethtool offline loopback test 9f158a9b10e1e ice: fix broken Rx on VFs f4a25618c3683 ice: switch to Page Pool 0026267561bc6 ice: drop page splitting and recycling c8bd04221f6a8 ice: remove legacy Rx and construct SKB 4d143608a0445 smb: client: fix data corruption with concurrent writes and O_TRUNC c027f8b429dbb vsock/vmci: validate packet source for connected sockets ecd7ead4bf05e ipv4: udp: Create exceptions before socket matching 6cd829de69efd vsock/virtio: validate packet source for connected sockets 569c34a35fbc9 virtio: set skb owner of virtio_transport_reset_no_sock() reply f320b85c90fe5 workqueue: Fix unbound pool lifetime for pending pwqs 299912bbc6455 workqueue: release pwq pools by pool type 94d13387b96e5 io_uring/cancel: don't spin on local work the task can't run 7123c79206e49 io_uring/cancel: move cancelation code from io_uring.c to cancel.c 76cb14d6f1433 io_uring/cancel: move __io_uring_cancel() into cancel.c 755e88e78beaf io_uring/cancel: move request/task cancelation logic into cancel.c de477667b890b cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() 242c7b3a71ddf smb/client: refresh allocation size after duplicate extents 8d891c218016b sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ 6ac46ae5ac561 drm/amdgpu: free the userptr ranges when a CS fails after parser_bos 2058a1fe791bb tracing: Keep the predicate limit separate from program capacity 07180a910e9d0 tracing: Fix ignored return value of resize_buffer_duplicate_size() a425e1c687595 sched_ext: idle: Respect task affinity in restricted CPU selection dfcfe2874e7c1 drm/i915/dmc: Harden DMC firmware payload parsing c8b1a48404679 ntfs3: free the sbi after a grace period d977b979081ef fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super() 129b0a64fe9ac ntfs3: fix double free of sbi->options->nls and clarify ownership of fc->fs_private e0ab437276575 ntfs3: fix use-after-free of sbi->options in cmp_fnames a1647b653549f scsi: st: Fix use-after-free race between st_remove() and st_open() d2f591e6c7304 smb: client: fix multiuser mount with krb5 d96f3365ce61c smb: client: fix heap overflow in cifs_do_set_acl() 45e60747a9db2 net/sched: cls_flower: validate mask pointer after nla_next() 898cb4f2e12a5 ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in d8c450ad0d089 ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION beba2ef6f66a7 ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION a9f14ea73e82d net: psp: do not inherit the Rx association on clone 8243d587a081e net: bridge: mcast: don't truncate the port group walk on teardown 80d5db1686b05 ext4: free the sbi after a grace period cad63a7798d6a ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture c17cc2027773e futex: Fix mm reuse handling for FUT_OFF_MMSHARED dce8f7f03a47b drm/amdgpu: keep the eviction fence until the last handle is closed 0caeefed99b37 KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes 7786dde1b5001 KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots dc29c0478b856 netfilter: nft_byteorder: remove multi-register support 61f376654fb9d drm/amdgpu: Fix VCE 3 ring align_mask d49fa454c2869 KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc 5dac5c7ba8f5f ipv4: avoid divide by zero in fib_rebalance ba5001db9bb23 s390/pci: Fix leak of uninitialized kernel data in SCLP report 34fa3607b7604 s390/ctcm: Prevent XID null dereference 813a72beaa5d3 page_pool: keep frag_offset aligned for odd-sized requests 40507f59f230d sctp: validate chunk length in the inqueue parser b8b7d28dc2b74 tipc: protect node reset trace dump with node lock f7e82f72b90ce workqueue: Annotate cb_lock nesting when draining a dead BH pool 6b26b3d39904c workqueue: Use raise_softirq() to trigger softirq in irq_work handler b6a0e5faf0dca netlink: specs: add missing mask attributes for conntrack dump 62ed32a1d4499 netlink: specs: fix the conntrack filter type e20e6b14e3b5c xfs: fix zoned write iomap flags assignments 19a1a22029ad3 xfs: fix capability check in xfs e5456dec79c71 xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf 8f2efa742f4cf net/iucv: fix the recvmsg window update 3cdd8b1abddeb mac802154: fix data race and NULL deref on local->assoc_dev c8922e7afb058 dm-integrity: require stable writes for internal hash modes fc512700f1413 dm-integrity: fix infinite loop on discard with large tag size 40791f07bad61 dm-ebs: fix incorrect device offset check in ebs_ctr() ac5d887ab9359 dm-crypt: fix a tiny race condition in crypt_dec_pending 73df2ff409f3d dm cache: fix issue with background work locking de9e8e587c07b dm cache: fix demotion stats in passthrough mode 04d020b3d0b58 cifs: don't update i_size in cifs_do_truncate without a cached handle 2f9dd8214d421 cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children 86814e5370068 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) c1804ef016392 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) f641066b0ddcd wifi: p54: validate firmware record lengths 09c7cce2e59e6 tracing: Fix hist trigger timestamps for buffered events 813e18881c647 tracing: Do not initialize tracefs work if tracing is disabled a866a8a753922 tracing: Check operator stack capacity before pushing 7c0c6d88a232a tracing: Take trace_types_lock when dropping the buffer_meta reference c4918c28b1baf tracing: Fix the shift out of bounds in the log2 histogram modifier 3a3c4503ba1b4 drm/xe: Bump LRU for external objects on exec and rebind ef82b4d5cb4a3 drm/i915/dmc: Add sanity check for DMC load address 22fd3f760845f drm/i915/cx0_phy: Fix ARL-S host bridge detection 96d9996e5dbcf drm/exec: don't immediately add prelocked obj to array of locked objs 07002a326c7cc drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES 652b1f26125fe drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr 05507b9b19f95 drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang 6cfc4a25d4f02 drm/amd/pm: add zero fan stop temperature support on smu 14.0.2 55a65ef61e277 scsi: libiscsi: Validate the task named by a management response 7215a69b6456f scsi: libiscsi: Validate the ITT reflected in a Reject PDU 6cadfa6f1f589 scsi: libiscsi: Reject a negative task index from parse_pdu_itt 1d91ec793d6c8 scsi: xen/scsifront: Check for a NULL shadow entry on a backend response 2effbe746452c scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies 029770f5baded ring-buffer: Fix false warning in ring_buffer_map_get_reader() 2f1248b728b56 ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx() 8512d0312cc0e ring-buffer: Do not show buffer_meta for CPUs without a buffer 29469305a9390 perf: Update cgroup time when rotating multiplexed events b67fb3955b07d perf: Track the perf mlock gift separately 5d476bb76b7d7 i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() d2cb4d7451491 i2c: qcom-cci: Fix HALT_ACK reset request being dropped 1f36e4ddd05d5 tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields 13735c2cf4849 tools: gpio: fix building from the top level with O= 77a63d1b813b0 sctp: revalidate output stream after association connect wait 6232e93c3036c pinctrl: amd: Clear S4 wake bits when firmware has _AEI 5f23e4e3a31da net: rds: fix uninitialized trans dereference in CM event handler 2465d27ef90de net/sched: fix use-after-free in __tcf_action_put() 568323cddd54f lib/crypto: poly1305: Use memzero_explicit() in poly1305_final() ae6584eaaa4f1 lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state 492c10662177f namei: test for a negative dentry the way traverse_mounts() does 4586ef24ce390 eventfs: Free the eventfs_inode after an rcu grace period too 2e10b8a74f55b pid_namespace: make zap_pid_ns_processes() freezable 952501bfc6e5e fsnotify: prevent mark additions during connector teardown d00d5f534a823 KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry b77e9622bbade x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context 811fb6d0b0760 watch_queue: Fix note pool publication race in watch_queue_set_size() 2b54d3c971a1e unicode: free the map after a grace period d518fc5cced10 bootconfig: give the footer size static_assert a message 1a177064f501e autofs: ignore notification errors from a replaced pipe debb0f36bfe3d afs: free the super info after a grace period 5078c91f5c84b accel/rocket: search every core slot when a core is removed 7249a442ab261 PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV 7595bacee48bc printk: Postpone kthread startup 3eb08f09bfb36 perf: Fix perf_pmu_migrate_context() leaving events behind d0ffb0dc01166 gpio: mxc: fix race between gpiochip registration and IRQ domain setup 238f93bd1d063 gpio: mxc: fix wakeup_pads bit operations dab5c228a8468 gpio: mxc: use BIT() macro 911f606dd05d7 gpio: mxc: fix both_edges bit operations 261802c14e1a3 gpio: mxc: fix race between chained IRQ handler install and probe completion 78189c0e35abb gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths 1c9fcfca51e3c calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() e221a7d6f7c91 net/ipv6: Introduce payload_len helpers 40c04abcbc34e net: bcmgenet: unshare the skb before writing the control block bdd55b8a8acbf netlink: avoid hashing the network namespace pointer c9fb89246d992 scsi: libsas: Fix SMP IO deadlock during HA resume fbb5a6f0b06fb tracing: probes: error if BTF is required but unavailable 4c42ce499ce4b pipe: preserve existing fasync readers on writer setup failure 7780f9e828da0 samples: pidfd: fix userprogs typo 04d4571c00db6 ocfs2/dlm: Protect the recovery list during debugfs reads de3923caf0772 drm/panthor: fix immortalis condition 9b07828b133b3 scsi: target: iscsi: Fix race in discovery auth updates 71e12d43ef37e scsi: st: Save the visited block for the partition the drive is in e3bf250a2fda6 nios2: fix __wsum type degradation in csum_fold() e4d45c651d19f spi: tegra114: assert CS GPIO for every transfer in a message 21f41b6daf0db drm/xe/oa: Zero OA buffer at allocation 6046bb9cb2859 drm/xe: skip eviction of a BO with no resource 8d15821aa2de1 ASoC: amd: yc: disable MSI on resume efe1393e783f2 net/mlx5: HWS, fix flow meter offset within its bulk a3516f0704b96 net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool 79071b67182e1 accel/rocket: clear rdev on device init failure 06791594274f8 netlink: reset skb headers before unicast and multicast filtering 4a9fb8122a19d regmap: Drop map lock during cache init and exit bae057687f615 regcache: Do not overwrite error code when finalizing cache after error b498b70a8174b regcache: Add ->populate() callback to separate from ->init() 0a9a172d4cbfc ASoC: nau8822: Fix the 128x oversampling switch bits 9a87917b8f3d5 ASoC: wm8978: Fix the 128x oversampling switch bits 9b1a72628f125 ASoC: max98371: Fix the Speaker DHT Min Volume bits 384e00dd8908b ASoC: pcm3168a: Fix the DAC zero flag polarity bit db3a7a70cc214 ASoC: cs42l52: Fix the NG Type Switch bit 856ecf3c600af ASoC: cs42l56: Put the Limiter Cushion control on the limiter register 4528f8d38d893 ASoC: stm32: spdifrx: fix synchronization state check d3239b8f4fc46 ASoC: Intel: avs: Reset the stream unless it is already prepared a7c7d0ff87637 net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure c2c5359ef2c33 vsock: treat TCP_CLOSING as once-established fb5fb74fb4fff gpio: nct6694: Mark the GPIO controller as sleeping 6b03e354526f6 drm/vc4: hdmi: Move packet RAM enable to PM runtime 47b725c17dcb2 pinctrl: sunxi: dt: do not accumulate npins across probe attempts 9d0508bcf6743 pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 2ac0256a28e15 power: supply: core: prevent unregistering a power supply while a callback runs dda0df37aabd8 power: supply: generic-adc-battery: Fix temperature IIO channel conversion 06e3e6dc2688f tools/power turbostat: Fix add_counter issue if > 24 counters. f573d257aad5a tools/power turbostat: Fix PMT error path fd handling b2af180dbc5f5 tools/power turbostat: Fix CWF PMT off-by-one e2c86984ccc0b tools/power turbostat: Fix fd_perf leak on reset e76e6284de2ba pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 54e54a690bf13 pinctrl: qcom: qcs8300: Fix intr_target_width f47ce27af80b8 Drivers: hv: Don't reset VMBus connection state on error/exit paths 2b561786c9076 x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() 7141331f2d245 Drivers: hv: Avoid infinite retry loop in init_vp_index() c3e5854b2e8b6 power: supply: ds2780: Fix ds2780_get_capacity() returning raw value 7de3a5a49410a power: supply: Fix maintenance charge table kernel-doc ea9c08c33d57c ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition 0992d03e55e5a soc/tegra: fuse: Add missing newline to APBMISC error message 07fa8baa78d64 kho: free phys_bits bitmaps using free_page() in __kho_abort() 96d2abaa2e328 i2c: qcom-geni: Restore the source-clock selection policy cd3c05651d04b rose: purge rose_neigh->queue on final teardown 6b450cf6dd419 ax25: bound REJ-driven fast retransmits with the existing N2 counter c7bdc88b27cc6 ALSA: ctxfi: Use correct DAIO type for da_desc fb5e2dd6565a9 ALSA: ctxfi: Rename SPDIFI1 to SPDIFI_BAY 7fca3600e79e9 ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization b48ebe399b4e7 drm/ttm: fix swapped-out resources never leaving their bulk_move range 2926d88bb7fc4 Linux 6.18.58 2566780c684c9 KVM: x86: Use active memslots for the per-vCPU MMIO cache 517404e157395 ksmbd: fix heap out-of-bounds write in krb5_authenticate() 88c7c3aa8d0ff wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" 5c0940abe76c9 bpf, sockmap: Account for receive queue in FIONREAD without a verdict program 8b7748e9904f8 kho: free chunks using free_page() instead of kfree() a6d84b420a848 io_uring/kbuf: don't charge provided buffer rings to RLIMIT_MEMLOCK e46794d1936ca io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCK 314b72d5e8273 rose: hold a reference on incoming sockets queued for accept() 30ec3025b7715 USB: iowarrior: fix use-after-free on disconnect race e8ed9a1dfc74f usb: iowarrior: remove inherent race with minor number c24d2e190b955 selinux: allow multiple opens of /sys/fs/selinux/policy 93a7f297362de mm/damon/core: fix damos_walk() vs kdamond_fn() exit race 7e54ed8a780c8 mm/damon/core: cancel damos_walk() before damon_ctx->kdamond reset 7ea3850b9ce00 xfs: close crash window in attr dabtree inactivation 4b963fddf470f xfs: factor out xfs_attr3_leaf_init 50144efd23ad9 xfs: factor out xfs_attr3_node_entry_remove 0f39d936a3493 ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec() 265ca3f6524be ima: Access decompressed kernel module to verify appended signature 7d6fd50746482 fat: stop reading directory entries past the end-of-directory marker f6c1e709a4f91 cifs: fix time_last_write stamp placement in setattr/truncate paths 2efa187fd4c9b drm/xe/i2c: cancel the client work on remove 97e736000731f scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock() ee01d48f0f086 scsi: ufs: core: Add a comment block above ufshcd_mcq_compl_all_cqes_lock() e36bac5923a3b scsi: ufs: core: Add debug log for MCQ command timeout d12c834b97c36 scsi: ufs: core: Move an assignment in ufshcd_mcq_process_cqe() a34a230ccea1b scsi: ch: Do not keep references to data transfer element devices 8176ec7e36987 scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ 9e8fc7972b398 riscv: patch: fix handling of bpf-jit execmem addresses 420bf39a22a73 riscv: patch: Avoid early phys_to_page() 08275dcfbfc3b net: mana: reserve RX buffer headroom to fix forwarding performance eececf7c3a679 net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop cc7732b8549ec Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex 638ee6bca1975 sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler 454b67fcc28c1 dm-integrity: validate the superblock on resume 2e25842f0e442 dm-integrity: fix NULL pointer dereference when the 'R' flag is used 0c9d4f9c66ca7 wifi: mt76: connac: tolerate inactive BSS deactivation 22732b0f290ac nfsd: fix all-zero stateid in CB_OFFLOAD for async COPY 0c5595cba7224 mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge 5720bf6b91295 mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP fdf4f011c6004 iavf: send MAC change request synchronously 5aa9efb559174 iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test b030fde644501 drm/amd: Create a device link between APU display and XHCI devices 2d06cb25a497d ip6_gre: remove obsolete ERSPAN PMTU update 903a2ab8325a2 PCI: dwc: Return -EIO from dw_pcie_wait_for_link() if device is not active adc0d81b4d415 PCI: dwc: Return -ENODEV from dw_pcie_wait_for_link() if device is not found e32aa1d85126e RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables 3c03f6f7c6f2d usb: gadget: f_hid: Add missing error code 7820bca8cb207 spi: mpc52xx: clean up interrupt handling Signed-off-by: Bruce Ashfield --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend index 4ac68ca..38c920f 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_6.18.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v6.18/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "be5c5b2879fa33294d498a2cafdaf012bda1f21e" +SRCREV_machine:genericarm64 ?= "12c82799f6285726ff94453e5cdcad7e753c30c5" From patchwork Thu Oct 29 03:25:26 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bruce Ashfield X-Patchwork-Id: 102302 Received: from mail-qv1-f41.google.com (mail-qv1-f41.google.com [209.85.219.41]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4371.1793244362223060161 for ; Wed, 28 Oct 2026 20:26:02 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=IGKqcHzG; spf=pass (domain: gmail.com, ip: 209.85.219.41, mailfrom: bruce.ashfield@gmail.com) Received: by mail-qv1-f41.google.com with SMTP id 6a1803df08f44-91791ec1b83so13534696d6.1 for ; Wed, 28 Oct 2026 20:26:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793244361; x=1793849161; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=wEEcf7Ck+VWVhQAjQiF/kXXr9iPhKFbvY801wDyWKIY=; b=IGKqcHzGRjibq1kUSBKOtzY2H+Rkpc9IppvHFH13JBHW4/bVY0dJUla2ZInrXGSzmB tHoNaQShjRYIvjcOOa8ctOm/loHFk6O97QAPJr7SpYrHJFSmCaJtVePbE9ogrskb5/Zl Me44/RVbeOgbDwC96RxAAT88iwjt4DiaU6SagHM8mtdRFS9/nEShny31GjPPDQsxS0Oe WpTew+1sNdNz536Wd4zLopGY5BJNahpExWEY4REEOFZv13mAPCUT5OwZ5b62njFYwM1u zuU0N9cR4aZbSKQFtI+li9CKEo/1WNBWT2tSNskPihSD0q7IWx69BHSkNFSjU9tjIepE 5Pqg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793244361; x=1793849161; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=wEEcf7Ck+VWVhQAjQiF/kXXr9iPhKFbvY801wDyWKIY=; b=kMKeheWNVVYPxB+DNjvBHAK1V6ktK8sI+RvoIm72a/BrUFqT5qs+mjq/GippvKaqpM ZopKNU0CTerCiJg6XaZy2UCZiNgKBYKqKjm6Tc8Seq0ybHu498NjjCAhtd0CRmYxMf7a TdIZiwyDpkWp/qJhBTwOiIgQQRDPdamCziFE0TnC+5UWUcrAB6vhdwvxPNrhPL69a51V wRVR/yin7mWE2+MLk6FaBifwpitMwbnTpuzfJ2//6+RHVpZ/h92/Q0uv2bxCnDYT/Eqy IbCO2+Cr/xWbGR0eazvxvWaIv1Ef02e11trDthM/zl3agkpYtbHbKm9AaO/AGkCvmoKZ Oq6g== X-Gm-Message-State: AFq9FYIDkBP/urpP//Y9x/oAk/e/IZ1+9NZ4Z40W1lvD8oianRsAylo0 /y45l58OwiWdiwQNB4BZmtlA3m22RuwXaNCK2uRR9PsFhm7ukIXmNPyB0HJtIN+O X-Gm-Gg: AYBFou02OJmhLATLby6nrEBfeGZFpNBy3SDS7QnywFIbGNRuzGt0Ahpeg9fuXVn1tD5 4D8k9Zg7QWgWiSZGTnpGRGf2Pw6RJj9/TT4b/TD3kForI4lLci+QYzxCdaRyS5vDNBfPNUKSPfG NQWfZ1VCk73eA4yX5WmaGiiRyx9lCC3j7lErbieMWVesVjouJ/YUsC00ewbuNoxqjZQhrBRdXRa DCfChOR29HOOQ9h6ao91WzhWp1/QoIEi4Aam6pnChBTWpl7WwySCvAzF4bWSkISsJVy7i094Vfs 6zfZvnj26C0eHepLcH+y9ueMqUXJ+Om2RWdqgnC8sMTtmVdpMWap4oBXwIKU0S4KoUJSePwc5hX t2R7//aSgZ7gtIHOWcOApZqGoFcTFiW2ENx4ZFRHGHgmtrjLeR7bnYCanOhR1Js1pmP47+kqjTL FqRbcZnuxAiNvj6BArJ6EllxCpl3uzWrsqPvmu4pQ1yoJj5VfRNjFSx9d/959szbqgxo/xQAjqD acvm2wdu95mc8DWMO8CZbbxdcO6kSqWSBLisgkujzMs3C6BNIT+aqupztk93k/ibidpv44n8cw1 zMNLtjaMvLD0Y7oxWFvhKzbZ5TGLZKVSRqy+b8erHPQNp/e+d6a6JLrmXdfUsmncVwUjfir8nDr 5Ln7h3/yut1DSk4Tpcr4YROuzIjE0wqx7uAetGWHFVr5gkyefzzFpmeDf/+qB2KeqHzOIpft/B8 P5Go4cTBL+prLhNeHy/HN1Xc/pWe9RCOYef9ida/y2IEJ+ww== X-Received: by 2002:a05:6214:5987:b0:91b:8b44:d4be with SMTP id 6a1803df08f44-91c7cf72dc6mr66329856d6.28.1793244360844; Wed, 28 Oct 2026 20:26:00 -0700 (PDT) Return-Path: Received: from bruce-XPS-8940.localdomain (pool-174-112-35-248.cpe.net.cable.rogers.com. [174.112.35.248]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91c47bda586sm147529056d6.8.2026.10.28.20.25.58 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 20:25:58 -0700 (PDT) From: bruce.ashfield@gmail.com To: richard.purdie@linuxfoundation.org Cc: openembedded-core@lists.openembedded.org Subject: [meta-yocto-bsp][PATCH 11/11] yocto-bsps: update to v7.2.13 Date: Wed, 28 Oct 2026 23:25:26 -0400 Message-ID: <20261029032527.3150782-12-bruce.ashfield@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261029032527.3150782-1-bruce.ashfield@gmail.com> References: <20261029032527.3150782-1-bruce.ashfield@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 03:26:02 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248868 From: Bruce Ashfield Updating linux-yocto/7.2 to the latest korg -stable release that comprises the following commits: 3c172eede0d6b Linux 7.2.13 924fe47419fff smb: client: drain outstanding I/O before truncating on O_TRUNC open dedb4aa2c3a95 ntfs: fix memmove overlap in ntfs_new_attr_flags 7dc2c52460803 ntfs: move attribute payload before shrinking its record c5434e86d6c53 ntfs: fix resident conversion in ntfs_new_attr_flags f0b0738ba9573 ntfs: take invalidate_lock in ntfs_setattr_size() 5c581a59bcce3 ntfs: use pagecache_isize_extended() on size extension 3d2ef2b9f4c08 workqueue: Fix unbound pool lifetime for pending pwqs f0f18075e45d4 sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor 396ba6f04da3f sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ 2d9d24385201f drm/amdgpu: free the userptr ranges when a CS fails after parser_bos 62ebf3310eeb1 drm/amdgpu: Remove the bo list mutex 357061da006f2 genirq/proc: Fix missing CPU header in /proc/interrupts 2c4d5de1b6827 ntfs: fix undefined behavior in mft/index record size calculation 0a9122cada749 ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize 5e87da8ba8d3d ntfs: fix FITRIM range alignment ad096ce2923cf ntfs: handle signal interruption in fallocate 9efbd764ab80f smb: client: reject SetEA requests that do not fit the request buffer 23ee613f831b0 smb: client: fix multiuser mount with krb5 596b4062e6c75 smb: client: fix heap overflow in cifs_do_set_acl() ffa66fdc7d35b smb: client: fix data corruption with concurrent writes and O_TRUNC bb187146c7e5c net/sched: cls_flower: validate mask pointer after nla_next() 015fffa48e96c ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in 03bb4338c3a7c ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION ab057f271ef60 ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION c962695467d3a net: psp: do not inherit the Rx association on clone 7afab9846120c net: ntb_netdev: Fix statistics races b45e8c24608c9 net: bridge: mcast: don't truncate the port group walk on teardown 05f7a2f712f8b drm/i915/dmc: Harden DMC firmware payload parsing d1d6b859e89dd drm/amdgpu/userq: actually validate userq BOs 76acfb84973bd drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction d6e08ec2fff45 KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes ad50f41e4f047 drm/amdgpu: Fix VCE 3 ring align_mask d5520e815c4b1 ipv4: avoid divide by zero in fib_rebalance 90c423b62ec9b vsock/vmci: validate packet source for connected sockets e9bf92de436ba vsock/virtio: validate packet source for connected sockets 126a7c227d854 s390/pci: Fix leak of uninitialized kernel data in SCLP report cf348ec613f75 s390/pai: Handle multiple PMU stop callback invocations 8a2f7a4ad1d81 s390/ctcm: Prevent XID null dereference dca1b51693c81 page_pool: keep frag_offset aligned for odd-sized requests 9ac57e4c62e93 sctp: validate chunk length in the inqueue parser e1ef306ba20eb selinux: fix BPF token permission checks fa8c78c0e49aa tipc: protect node reset trace dump with node lock bc48075278e46 workqueue: Annotate cb_lock nesting when draining a dead BH pool 3c2928f1ed195 workqueue: Use raise_softirq() to trigger softirq in irq_work handler 3005459e0ddfc io_uring/cancel: don't spin on local work the task can't run a1b9b87f45ea6 netlink: specs: add missing mask attributes for conntrack dump 64a55488a3685 netlink: specs: fix the conntrack filter type fca6b33b8a607 xfs: fix zoned write iomap flags assignments 7809ac0161c7c xfs: fix capability check in xfs 6353e5cd8c43d xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf fe7393a627db2 net/iucv: fix the recvmsg window update a585901bb8cd2 mac802154: fix data race and NULL deref on local->assoc_dev 74e4ecc08c3d1 dm-integrity: require stable writes for internal hash modes 251b44b424920 dm-integrity: fix infinite loop on discard with large tag size 2fe1e2fe3170d dm-ebs: fix incorrect device offset check in ebs_ctr() 4f16bb982b27b dm-crypt: fix a tiny race condition in crypt_dec_pending 104f09e02038b dm cache: fix issue with background work locking 96fb82b38a555 dm cache: fix demotion stats in passthrough mode 88a51743cd809 cifs: don't update i_size in cifs_do_truncate without a cached handle bcd2ba4cc245f cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() 71154fc2e351f cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children 39aa489e85752 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) a8e45471afa23 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) 8c4f962f368d5 wifi: p54: validate firmware record lengths 135a0cdac6c96 tracing: Fix ignored return value of resize_buffer_duplicate_size() 89e90b16aadd6 tracing: Fix hist trigger timestamps for buffered events b1547c6ba93b8 tracing: Fix crash in print_graph_function_event() 7539c61f522ff tracing: Do not initialize tracefs work if tracing is disabled 75e894f924173 tracing: Check operator stack capacity before pushing 5f6175281ec22 tracing: Take trace_types_lock when dropping the buffer_meta reference 68ecc9510bb82 tracing: Keep the predicate limit separate from program capacity e0298fcb8555c tracing: Fix the shift out of bounds in the log2 histogram modifier 2f8b49b415cdc sched_ext: Propagate every bypass depth change to the descendants 3e6672f0a5a51 sched_ext: idle: Respect task affinity in restricted CPU selection 633f586329bfd sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue 135e998dd1e66 drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change 49e59f9bcc946 drm/xe: Bump LRU for external objects on exec and rebind 2fbd099b4e7c8 drm/i915/dmc: Add sanity check for DMC load address 326ceaa896972 drm/i915/cx0_phy: Fix ARL-S host bridge detection 7a10cd79c4d9a drm/exec: don't immediately add prelocked obj to array of locked objs ba76082b1b812 drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES 6467c4cc83b94 drm/amdgpu: keep the eviction fence until the last handle is closed 5d9c2d3e67f1e drm/amdgpu: fix sched entity leak in ttm buffer entity init 64a6d40156ae9 drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl 253555a9bacce drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr 42bd6e4538464 drm/amdgpu: destroy mutex when tearing down ttm buffer entity 123e1d47db26d drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set c65ea712a6918 drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang 1f1750d474643 drm/amd/pm: add zero fan stop temperature support on smu 14.0.2 4c8b5e5b9776a drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions f721487523d45 scsi: libiscsi: Validate the task named by a management response d79343ae3223b scsi: libiscsi: Validate the ITT reflected in a Reject PDU 35b60549a9562 scsi: libiscsi: Reject a negative task index from parse_pdu_itt 15791e57f57f7 scsi: xen/scsifront: Check for a NULL shadow entry on a backend response 18a0e3733ce38 scsi: st: Fix use-after-free race between st_remove() and st_open() 7a755f6d47b81 scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies 68e6ab180cfb6 ring-buffer: Fix false warning in ring_buffer_map_get_reader() 7469b3585ef5f ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx() ae670c1a24fb5 ring-buffer: Do not show buffer_meta for CPUs without a buffer 329e1a230741c perf: Update cgroup time when rotating multiplexed events 5c9a86256c559 perf: Track the perf mlock gift separately 47e105bdc863f i2c: xiic: restore non-managed runtime PM to fix clk WARN flood 1875de656370c i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() bb39720dbd05a i2c: qcom-cci: Fix HALT_ACK reset request being dropped 7f9eb6aaf9a3a gpio: shared: gracefully handle no-device lookup of shared GPIOs 8861491f85015 gpio: shared: fix use-after-free bug when adding shared proxies deb336ae7c7b3 tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields 425976fc4886e tools: gpio: fix building from the top level with O= 8163c6fdd510b tools/power turbostat: Read complete CPU lists 2777f6637da02 spi: imx: fix slab corruption from undersized DMA bounce buffers fd56ac95ec31a sctp: revalidate output stream after association connect wait e3318dd73b235 riscv: dts: microchip: beaglev-fire: remove double definition of gpio interrupts 1d7a731ddb163 power: sequencing: qcom-wcn: power off WLAN at probe db531fa89c775 pinctrl: amd: Clear S4 wake bits when firmware has _AEI ca14c289ed9ff net: rds: fix uninitialized trans dereference in CM event handler 2e012e431aa27 net/sched: fix use-after-free in __tcf_action_put() 5c0757b065fbd mshv_vtl: Check per-CPU register page before mmap 9b016f25f7178 lib/crypto: poly1305: Use memzero_explicit() in poly1305_final() 414e60bbca2e3 lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state 2855ddc6844f5 futex: Fix mm reuse handling for FUT_OFF_MMSHARED 92c9171f95eef namei: test for a negative dentry the way traverse_mounts() does bd71d33923b9d namespace: a mount that copy_tree() leaves out can't take over a lock 7abecef26a9be ntfs3: free the sbi after a grace period c0620b648321f ipc: drop the mqueue mount with kern_unmount() on setup failure 45fcfd5d9c10e eventfs: Free the eventfs_inode after an rcu grace period too 87d29b8b84973 ext4: free the sbi after a grace period 7deb577084033 pid_namespace: make zap_pid_ns_processes() freezable 472589eacdf10 fsnotify: prevent mark additions during connector teardown c9716f956216e KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry 184382f9852d4 KVM: SEV: Fix page dirtying in sev_gmem_post_populate() f45ee1ff6358a x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context 9e73a6754457f watch_queue: Fix note pool publication race in watch_queue_set_size() 6560c3d9a6925 unicode: free the map after a grace period 0fa258819abba bootconfig: give the footer size static_assert a message fb296391f685d autofs: ignore notification errors from a replaced pipe a761789d657a5 ASoC: SOF: sof-client: Use event-handler mutex consistently 5e1322787c5e4 ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture 7cd3019e8924c afs: free the super info after a grace period c137756469d5b accel/rocket: search every core slot when looking up a scheduler 134451cf95cb6 accel/rocket: search every core slot when a core is removed 69f9de644f9c7 9p: free the session after a grace period a8caee0e623ca firewire: core: fix race condition in split transaction handling 0efe927053f7e x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx() 581fb47389fc4 PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV 938ff9c0e8586 PCI: Ignore Immediate Readiness on Samsung 990 PRO and 990 EVO Plus NVMe 792acd173da08 printk: Postpone kthread startup f5f0028764de3 perf: Fix perf_pmu_migrate_context() leaving events behind cfc707a0a49f4 perf/x86/intel/uncore: Fix DMR CXL CM invert filter affc6d5729352 net: stmmac: dwmac1000: clear the RGMII status interrupt 21596ceb63749 ring-buffer: Use subbuf_order in available memory estimation 04228a1d47b87 gpio: mxc: fix race between gpiochip registration and IRQ domain setup 31a797762ca7c gpio: mxc: fix wakeup_pads bit operations df6395fe5d4cb gpio: mxc: fix both_edges bit operations 6c1e035d88157 gpio: mxc: fix race between chained IRQ handler install and probe completion 890c3bf08e0fc gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths 8ee0e03663826 calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() 7939ad3b4db9e net: bcmgenet: unshare the skb before writing the control block e7694aab7ad00 net: ti: icssm-prueth: Move setting of netops to fix crash 5293e376e9d6c net: ethernet: aeroflex: move setting of netops to fix crash c51b13299b4d4 net: ethoc: move setting of netops to fix crash cfc11024fc061 net: au1000: move setting of netops to fix crash bfb1ca89e9f6e net: mv643xx: move setting of netops to fix crash d2eca3a54f415 net: ethernet: actions: Move setting of netops to fix crash 1c2f9c3a63baa net: hisilicon: hip04_eth: Move setting of netops to fix crash 06ef5b084b150 net: hisilicon: hisi_femac: Move setting of netops to fix crash 078deff25f8a8 netlink: avoid hashing the network namespace pointer 08b95ef36a64c scsi: libsas: Fix SMP IO deadlock during HA resume dc6c7cf2090a3 tracing: probes: error if BTF is required but unavailable ef398f6715f41 ring-buffer: Skip si_mem_available() for persistent and remote buffers 17c424d9d28de tracing: Fix simple_ring_buffer undef check on sparc64 9f533ae516089 tracing: Fix simple_ring_buffer undef check on parisc 75a6278ddb38e tracing: Fix empty symbol names in simple_ring_buffer undef check 2259809e5b704 pipe: preserve existing fasync readers on writer setup failure 3d3a7390e24ce exit: fix lost-update race on the child_subreaper bitfields 460dbf8495212 samples: pidfd: fix userprogs typo 2bc426a32bfb7 ocfs2/dlm: Protect the recovery list during debugfs reads eabb519d45fc8 drm/panthor: fix immortalis condition 7cadb8d82ee43 iommupt/kunit: Use if_changed_rule for the kunit 2557eb2d8bfd0 entry: Account the deferred hrtimer rearm as hardirq context for lockdep ae89744c5ebf2 sched/core: Call wakeup_preempt() for queued tasks during class change 6caa2b3edb7da scsi: target: iscsi: Fix race in discovery auth updates 7563650522732 scsi: target: Disable interrupts while holding delayed_cmd_lock 67defb87a0a6c scsi: st: Save the visited block for the partition the drive is in c01068a1944be nios2: fix __wsum type degradation in csum_fold() c6ab64c4786a0 spi: tegra114: assert CS GPIO for every transfer in a message cd3e2918c247d drm/xe/oa: Zero OA buffer at allocation b6499d19ade1f drm/xe: skip eviction of a BO with no resource e01b5d143e241 ASoC: amd: yc: disable MSI on resume b993de8eb8931 net/mlx5: HWS, fix flow meter offset within its bulk 374b28a462392 net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool dd47a6c920083 accel/rocket: clear rdev on device init failure 06935da5de83a netlink: reset skb headers before unicast and multicast filtering a87481103d4f0 regmap: Drop map lock during cache init and exit f98e96f937a82 ASoC: nau8822: Fix the 128x oversampling switch bits 26beeefbce5d0 ASoC: wm8978: Fix the 128x oversampling switch bits 40cc9bf395c83 ASoC: max98371: Fix the Speaker DHT Min Volume bits f31f55e4823bf ASoC: pcm3168a: Fix the DAC zero flag polarity bit 784a5b8b91b5d ASoC: cs42l52: Fix the NG Type Switch bit 565a1a2f50dee ASoC: cs42l56: Put the Limiter Cushion control on the limiter register 5764664840732 ASoC: stm32: spdifrx: fix synchronization state check f92aa855f017b ASoC: Intel: avs: Reset the stream unless it is already prepared 20de4c4393643 accel/amdxdna: Fix Kconfig invalid configuration 91ece3efa064f net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure 44d1ca05d6094 vsock: treat TCP_CLOSING as once-established ac9132f3c0f26 gpio: nct6694: Mark the GPIO controller as sleeping 6a987992c78e2 drm/vc4: hdmi: Move packet RAM enable to PM runtime 4f2321b30670c pinctrl: sunxi: dt: do not accumulate npins across probe attempts 21ddf976f204e pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 45388e50d14bc power: supply: core: prevent unregistering a power supply while a callback runs 57ff289505fb0 power: supply: generic-adc-battery: Fix temperature IIO channel conversion 74784f1ead355 tools/power turbostat: Fix add_counter issue if > 24 counters. 429bcb67630dc tools/power turbostat: Fix PMT error path fd handling 0bea622befdf1 tools/power turbostat: Fix CWF PMT off-by-one 3513b9d7cc35a tools/power turbostat: Fix fd_perf leak on reset 35f1cce2ff382 tools/power turbostat: Warn, but don't Err on out-dated perf systems c8b8326aa5477 pinctrl: qcom: spmi-gpio: make direction changes exclusive 096e20372476c pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 51f935a7e9284 ARM: configs: sama5: enable current Microchip KSZ DSA symbols 6b662f6e6a562 pinctrl: qcom: qcs8300: Fix intr_target_width a723b4dd99f48 pinctrl: qcom: hawi: Fix intr_target_width d68d5e430b311 pinctrl: qcom: nord: fix GPIO interrupt target width 3195546a377c2 Drivers: hv: Don't reset VMBus connection state on error/exit paths bc8ca0f476962 x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() 95fec47cdbf74 Drivers: hv: Avoid infinite retry loop in init_vp_index() 43bc7d5707bbb soc/tegra: pmc: Fix uninitialised clock rate a6f95263d9f33 power: supply: ds2780: Fix ds2780_get_capacity() returning raw value f93a54e83e3f1 power: supply: Fix maintenance charge table kernel-doc cea6e3e7a9903 ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition 44f272f6cba06 soc/tegra: fuse: Add missing newline to APBMISC error message 2bd56a2de8312 i2c: qcom-geni: Restore the source-clock selection policy d41b9735881a3 ksmbd: exempt FSCTL_PIPE_TRANSCEIVE from the generic file-id lookup cc9de5d4b5ab6 Linux 7.2.12 e792a9ace39d2 KVM: x86: Use active memslots for the per-vCPU MMIO cache 4722d06b29075 ksmbd: fix heap out-of-bounds write in krb5_authenticate() 7ce5d94246de8 ASoC: cs35l56: Add DAI for SDCA OT25 stream 40c9216390eb0 wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" e2e2fc0663b38 net: mana: reserve RX buffer headroom to fix forwarding performance 5c380dfecbf9d net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch 6d30b399ae28e readdir: take no inode lock on an immutable directory e58253e87d0a9 nullfs: refuse file locks 173ff9d03ec63 sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler e9ec5cbbaf4dd dm-integrity: validate the superblock on resume 69ed43ed8a174 dm-integrity: fix NULL pointer dereference when the 'R' flag is used 8e42aeb5b39f7 nfsd: fix all-zero stateid in CB_OFFLOAD for async COPY Signed-off-by: Bruce Ashfield --- meta-yocto-bsp/recipes-kernel/linux/linux-yocto_7.2.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_7.2.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_7.2.bbappend index fb46379..4584b4b 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_7.2.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_7.2.bbappend @@ -8,4 +8,4 @@ KMACHINE:genericx86 ?= "common-pc" KMACHINE:genericx86-64 ?= "common-pc-64" KBRANCH:genericarm64 ?= "v7.2/standard/genericarm64" -SRCREV_machine:genericarm64 ?= "e4323ef8c241ed533d213f156a340083a8cdb92d" +SRCREV_machine:genericarm64 ?= "278328a7e4f0b7d4ccaea67b55951e8b7551d166"