* [PATCH 7.2 000/713] 7.2.4-rc1 review
@ 2026-09-04 4:49 Greg Kroah-Hartman
2026-09-04 4:51 ` [PATCH 7.2 095/713] debugfs: Fix lockdown check for mmap_prepare Greg Kroah-Hartman
` (10 more replies)
0 siblings, 11 replies; 12+ messages in thread
From: Greg Kroah-Hartman @ 2026-09-04 4:49 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
This is the start of the stable review cycle for the 7.2.4 release.
There are 713 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sun, 06 Sep 2026 04:56:59 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.4-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 7.2.4-rc1
Tzung-Bi Shih <tzungbi@kernel.org>
platform/chrome: sensorhub: Fix dropped timestamp events and log spam
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: scan: Do not combine resources that overlap completely
Injae Ryou <injaeryou@gmail.com>
selftests/mm: fix on-fault-limit false failure under sudo-rs
Zhan Xusheng <zhanxusheng1024@gmail.com>
udf: Fix i_lenExtents truncation on 32-bit kernels
Thomas Gleixner <tglx@kernel.org>
timer: Keep debugobjects state consistent in migrate_timer_list()
Thomas Weißschuh (Schneider Electric) <thomas.weissschuh@linutronix.de>
timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()
Bradley Morgan <include@grrlz.net>
taskstats: fix cpumask parsing cutting off the last character
Jann Horn <jannh@google.com>
smack: fix cred UAF in smack_file_send_sigiotask()
Bradley Morgan <include@grrlz.net>
signal: avoid shared siginfo namespace rewrites
Helge Deller <deller@gmx.de>
sticon/parisc: Detect default STI graphics card for console output
Oleg Nesterov <oleg@redhat.com>
sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]
Myeonghun Pak <mhun512@gmail.com>
tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout
Xu Rao <raoxu@uniontech.com>
zloop: truncate finished zones to zone capacity
Zi Yan <ziy@nvidia.com>
xarray: honor XA_FLAGS_ACCOUNT in xas_split_alloc()
Maoyi Xie <maoyixie.tju@gmail.com>
w1: ds28e17: reject an oversize length on an I2C block read
Chengfeng Ye <nicoyip.dev@gmail.com>
vsock/virtio: flush works in dependency order
Laxman Acharya Padhya <acharyalaxman8848@gmail.com>
wifi: mt76: mt7996: validate default EEPROM firmware size
Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames
Bryam Vargas <hexlabsecurity@proton.me>
wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy
Devin Wittmayer <lucid_duck@justthetip.ca>
wifi: mt76: mt7925: cancel mlo_pm_work on stop
Bryam Vargas <hexlabsecurity@proton.me>
wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy
Runyu Xiao <runyu.xiao@seu.edu.cn>
wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex
Yuhang.chen <yhchen312@gmail.com>
wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot
Dawei Feng <dawei.feng@seu.edu.cn>
wifi: rtw88: pci: fix resource leak on failed NAPI setup
Abdun Nihaal <nihaal@cse.iitm.ac.in>
wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars()
Runyu Xiao <runyu.xiao@seu.edu.cn>
wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids
Stanislaw Gruszka <stf_xl@wp.pl>
wifi: rtl818x: initialize eeprom_93cx6 struct to zero
Fabio Estevam <festevam@nabladev.com>
wifi: mwifiex: Detach sync cmd buffer on interrupted wait
Breno Leitao <leitao@debian.org>
mm/kmemleak: report RCU-tasks quiescent states during the scan
Breno Leitao <leitao@debian.org>
mm/kmemleak: stop the task stack scan early when interrupted
Thorsten Blum <thorsten.blum@linux.dev>
crypto: atmel-ecc - avoid stale fallback key after set_secret failure
Thorsten Blum <thorsten.blum@linux.dev>
crypto: atmel-ecc - clean up and improve ECDH comments
Vinicius Costa Gomes <vinicius.gomes@intel.com>
crypto: iaa - unmap dst before software fallback on decompress
Xiang Mei <xmei5@asu.edu>
fuse: copy request headers via a stack buffer for io-uring
Joanne Koong <joannelkoong@gmail.com>
fuse: decouple fuse_ring creation from ent registration
Fan Wu <fanwu01@zju.edu.cn>
wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop
Dawei Feng <dawei.feng@seu.edu.cn>
wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()
Claudiu Beznea <claudiu.beznea.uj@bp.renesas.com>
i3c: renesas: Perform Dynamic Address Assignment on resume
Claudiu Beznea <claudiu.beznea.uj@bp.renesas.com>
i3c: renesas: Restore STDBR and EXTBR registers on resume
Claudiu Beznea <claudiu.beznea.uj@bp.renesas.com>
i3c: renesas: Reset the controller on resume
Claudiu Beznea <claudiu.beznea.uj@bp.renesas.com>
i3c: renesas: Reconfigure the DATBAS register on re-attach
Claudiu Beznea <claudiu.beznea.uj@bp.renesas.com>
i3c: renesas: Follow the reset deassert order used in probe
Claudiu Beznea <claudiu.beznea.uj@bp.renesas.com>
i3c: renesas: Clean DATBAS register on detach
Claudiu Beznea <claudiu.beznea.uj@bp.renesas.com>
i3c: renesas: Check that the transfer is valid before accessing it
Adrian Hunter <adrian.hunter@intel.com>
i3c: master: Fix potential UAF in i3c_device_uevent()
Maoyi Xie <maoyixie.tju@gmail.com>
i3c: master: svc: bound IBI payload to the requested max_payload_len
Adrian Hunter <adrian.hunter@intel.com>
i3c: master: Fix info leak and UAF in device unregister path
Runyu Xiao <runyu.xiao@seu.edu.cn>
i3c: master: adi: initialize the lock before enabling interrupts
Adrian Hunter <adrian.hunter@intel.com>
i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()
Jianyun Gao <jianyungao89@gmail.com>
dm-pcache: fix use-after-free and invalid seg operations in kset_replay()
Jianyun Gao <jianyungao89@gmail.com>
dm-pcache: fix implicit u8 truncation of gc_percent in message handler
Bryam Vargas <hexlabsecurity@proton.me>
dm-pcache: only hand out initialized cache segments
Bryam Vargas <hexlabsecurity@proton.me>
dm-pcache: detect a cycle in the last-kset chain during replay
Bryam Vargas <hexlabsecurity@proton.me>
dm-pcache: clamp the tail kset read to the segment data region
Bryam Vargas <hexlabsecurity@proton.me>
dm-pcache: bound the persisted tail-position offset
Bryam Vargas <hexlabsecurity@proton.me>
dm-pcache: validate on-media seg_num against the cache device size
Bryam Vargas <hexlabsecurity@proton.me>
dm-pcache: validate kset key_num and intra-segment bounds
Bryam Vargas <hexlabsecurity@proton.me>
dm-pcache: validate geometry fields from on-disk cache_info
Haotian Zhang <vulab@iscas.ac.cn>
dm-switch: use WRITE_ONCE() in switch_region_table_write()
Mikulas Patocka <mpatocka@redhat.com>
dm-stats: fix a crash if allocation of per-cpu data fails
Nathan Chancellor <nathan@kernel.org>
arch_numa: avoid false positive fortify warning in setup_node_to_cpumask_map()
Eliot Courtney <ecourtney@nvidia.com>
rust: num: reject Bounded::shr overshifts at build time
Zhang Heng <zhangheng@kylinos.cn>
ALSA: hda/realtek: Fix Lenovo Yoga Slim 7 14AKP10 quirk ordering
Denis Batishchev <ii343hbka@gmail.com>
ALSA: hda/realtek: Enable micmute LED on HP EliteBook 6 G1a p/n: AD3Q9ET#UUG
Ajrat Makhmutov <rauty@altlinux.org>
ALSA: hda/realtek: Enable headset mic on F+ FLAPTOP r
Eckhart Mohr <e.mohr@tuxedocomputers.com>
ALSA: hda/realtek: Add quirk for TongFang XxAF5xxx
Takashi Iwai <tiwai@suse.de>
ALSA: virmidi: Check card index validity at probe
Takashi Iwai <tiwai@suse.de>
ALSA: serial-u16550: Check card index validity at probe
Takashi Iwai <tiwai@suse.de>
ALSA: portman2x4: Check card index validity at probe
Runyu Xiao <runyu.xiao@seu.edu.cn>
ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
Takashi Iwai <tiwai@suse.de>
ALSA: mts64: Check card index validity at probe
Takashi Iwai <tiwai@suse.de>
ALSA: mpu401: Check card index validity at probe
Xu Rao <raoxu@uniontech.com>
ALSA: hda/ext: preserve PPLCCTL bits when clearing reset
Baul Lee <baul.lee@xbow.com>
ALSA: FCP: do not copy out an uninitialised init response
Baul Lee <baul.lee@xbow.com>
ALSA: bcd2000: clear the URB pointers on disconnect
Takashi Iwai <tiwai@suse.de>
ALSA: aloop: Check card index validity at probe
Baul Lee <baul.lee@xbow.com>
ALSA: 6fire: bound the MIDI event length from the device
Abdun Nihaal <nihaal@cse.iitm.ac.in>
mfd: sm501: Fix potential memory leaks during remove
Ali Ahmet Memis <ali@iusegentoo.com>
mfd: qnap-mcu: keep the reply buffer alive past a command timeout
Thomas Richard <thomas.richard@bootlin.com>
mfd: cgbc: Fix teardown ordering in cgbc_remove()
Can Peng <pengcan@kylinos.cn>
hwrng: stm32 - Fix runtime PM cleanup on registration failure
Zhiling Zou <zhilinz@nebusec.ai>
seg6: reset IP6CB after IPv6 decapsulation
Norbert Szetei <norbert@doyensec.com>
net: skbuff: don't touch shared zerocopy state in skb_tx_error()
Breno Leitao <leitao@debian.org>
net: fix spurious TX timeout after dev_activate()
Zhiling Zou <zhilinz@nebusec.ai>
net: cap advertised IP tunnel headroom
Bryam Vargas <hexlabsecurity@proton.me>
net/smc: unregister the connection before draining the rx tasklet
Hidayath Khan <hidayath@linux.ibm.com>
net/smc: stop killed, freed and out_of_sync sharing a byte
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()
Hidayath Khan <hidayath@linux.ibm.com>
net/smc: fix use-after-free in smc_rx_pipe_buf_release()
Hidayath Khan <hidayath@linux.ibm.com>
net/smc: fix socket refcount leak in smc_switch_conns()
Bryam Vargas <hexlabsecurity@proton.me>
net/smc: do not dereference an unset send buffer on the SMC-D teardown path
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages
Glenn Judd <gmj@meta.com>
net/mlx5e: do not HW-GRO coalesce small frames
Koichiro Den <den@valinux.co.jp>
net: ntb_netdev: Count packets dropped on RX refill failure
Koichiro Den <den@valinux.co.jp>
net: ntb_netdev: Avoid double-accounting netif_rx() drops
Koichiro Den <den@valinux.co.jp>
net: ntb_netdev: Fix TX busy and drop handling
Koichiro Den <den@valinux.co.jp>
NTB: ntb_transport: Reject oversized TX buffers
Koichiro Den <den@valinux.co.jp>
NTB: ntb_transport: Fail TX enqueue when the QP link is down
Koichiro Den <den@valinux.co.jp>
NTB: ntb_transport: Recycle TX entries before client callbacks
Fan Ye <fy15309206903@gmail.com>
net: thunderbolt: Mark the connection down when bringing it up fails
Fan Ye <fy15309206903@gmail.com>
net: thunderbolt: Release the Rx HopID that was handed out on mismatch
Xuanqiang Luo <luoxuanqiang@kylinos.cn>
net: ravb: serialize PTP clock teardown
Xuanqiang Luo <luoxuanqiang@kylinos.cn>
net: ravb: avoid dereferencing an invalid PTP clock
Christian Marangi <ansuelsmth@gmail.com>
net: phylink: correctly validate returned PCS in phylink_inband_caps
Ruoyu Wang <ruoyuw560@gmail.com>
net: openvswitch: fix nf_connlabels leak in ovs_ct_init
Ilya Maximets <i.maximets@ovn.org>
net: openvswitch: fix flow mask use-after-free on flow deletion
Aldo Ariel Panzardo <qwe.aldo@gmail.com>
net: mctp: hold a reference to the route device in mctp_route_lookup()
Zihan Xi <zihanx@nebusec.ai>
net: l2tp: do not propagate multicast notification errors
Jorijn van der Graaf <jorijnvdgraaf@catcrafts.net>
net: ipa: fix stalled modem TX queue after runtime resume
Runyu Xiao <runyu.xiao@seu.edu.cn>
net: ibm: emac: mal: fix NAPI locking
Joe Damato <joe@dama.to>
net: bnxt: ring the doorbell when SW USO exits early
Ahmad Fatoum <a.fatoum@pengutronix.de>
net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO
Asim Viladi Oglu Manizada <manizada@pm.me>
net: tun: bound receive headroom
Fabio Porcedda <fabio.porcedda@gmail.com>
net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition
Aleksandr Khromov <haa@amicon.ru>
slip: fix use-after-free in sl_sync()
Weiming Shi <bestswngs@gmail.com>
xdp: fix zero-copy frame layout
Alexandra Winter <wintera@linux.ibm.com>
net/iucv: filter frames in afiucv_hs_rcv() by ingress device
Corey Minyard <corey@minyard.net>
ipmi:msghandler: Cancel work cleanly on an error
Seiji Nishikawa <snishika@redhat.com>
ipmi: si: Fix NULL pointer dereference after failed registration
Yuho Choi <dbgh9129@gmail.com>
ipmi: Remove all sysfs files on registration failure
Yousef Alhouseen <alhouseenyousef@gmail.com>
ipmi: ipmb: validate write message length
Kuan-Wei Chiu <visitorckw@gmail.com>
interconnect: Fix use after free in icc_get() and of_icc_get_by_index()
Laxman Acharya Padhya <acharyalaxman8848@gmail.com>
io_uring/query: cap user size passed to copy_struct_to_user
Hui Su <sh_def@163.com>
io_uring/waitid: avoid siginfo copy during ring teardown
Hui Su <sh_def@163.com>
io_uring/waitid: honor task_work cancellation
Muhammad Bilal <meatuni001@gmail.com>
platform/x86: hp-bioscfg: warn on element type mismatch instead of failing
Muhammad Bilal <meatuni001@gmail.com>
platform/x86: hp-bioscfg: pass validated element count to package parsers
Muhammad Bilal <meatuni001@gmail.com>
platform/x86: hp-bioscfg: fix ORD_LIST_ELEMENTS never being parsed
Muhammad Bilal <meatuni001@gmail.com>
platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()
Muhammad Bilal <meatuni001@gmail.com>
platform/x86: hp-bioscfg: fix new_password_store() overwriting current_password
Muhammad Bilal <meatuni001@gmail.com>
platform/x86: hp-bioscfg: fix heap OOB read on empty password write
Muhammad Bilal <meatuni001@gmail.com>
platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store()
Muhammad Bilal <meatuni001@gmail.com>
platform/x86: hp-bioscfg: bound ordered-list parsing by the package count
Muhammad Bilal <meatuni001@gmail.com>
platform/x86: hp-bioscfg: advance elem past consumed array elements
Muhammad Bilal <meatuni001@gmail.com>
platform/x86: hp-bioscfg: accept reduced ACPI packages from older HP BIOS
Mario Limonciello <mario.limonciello@amd.com>
platform/x86/amd/pmc: Fix msg_port restoration in amd_stb_debugfs_open_v2()
Mario Limonciello <mario.limonciello@amd.com>
platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails
Mario Limonciello <mario.limonciello@amd.com>
platform/x86/amd/pmc: Propagate SMU errors and validate S2D address
Mario Limonciello <mario.limonciello@amd.com>
platform/x86/amd/pmc: Restore msg_port on amd_stb_s2d_init() error paths
Bryam Vargas <hexlabsecurity@proton.me>
platform/chrome: sensorhub: Bound the EC-reported sensor number
Thorsten Blum <thorsten.blum@linux.dev>
platform/x86: think-lmi: Fix current password length check
Thorsten Blum <thorsten.blum@linux.dev>
platform/x86: think-lmi: Free system certificate signatures
Thorsten Blum <thorsten.blum@linux.dev>
platform/x86: think-lmi: Fix certificate thumbprint sysfs output
Hilgad Montelo <hilgad.montelo@gmail.com>
platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[]
Julian Haarmann <julian.haarmann@student.kit.edu>
platform/x86: lenovo/ymc: Only match lower byte in WMI lid switch query response
Ma Ke <make_ruc2021@163.com>
platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path
Abdun Nihaal <nihaal@cse.iitm.ac.in>
platform/x86: int1092: Fix potential memory leak in sar_probe()
Krishna Chomal <krishna.chomal108@gmail.com>
platform/x86: hp-wmi: Add support for OMEN MAX 16-ak0xxx (8DD6)
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
platform/x86: ISST: Return error during profile addition
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
platform/x86: ISST: Validate parameter for frequency and priority
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
platform/x86: ISST: Validate parameter for core power state
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
platform/x86: ISST: Validate max level for set feature
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
platform/x86: ISST: Validate logical CPU id and clos id
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
platform/x86: ISST: Use PP level enable mask
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
platform/x86: ISST: Just allow 2 bits for SST feature enable
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
platform/x86: ISST: Add a NULL check for sst_inst[]
Fan Wu <fanwu01@zju.edu.cn>
mmc: via-sdmmc: stop card-detect handling on probe failure
Fan Wu <fanwu01@zju.edu.cn>
mmc: via-sdmmc: cancel card-detect work on remove
HyeongJun An <sammiee5311@gmail.com>
platform/x86: ISST: Validate socket ID in clos_assoc ioctl
HyeongJun An <sammiee5311@gmail.com>
platform/x86: ISST: Validate level in perf mask ioctls
HyeongJun An <sammiee5311@gmail.com>
platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer
Peiyang He <peiyang_he@smail.nju.edu.cn>
iommufd: Fix UAF in selftest IOPF reporting
Shuai Xue <xueshuai@linux.alibaba.com>
iommufd: Release current IOAS on xa_store() failure
Shuai Xue <xueshuai@linux.alibaba.com>
iommufd: Avoid locking internal accesses during unmap
Shuai Xue <xueshuai@linux.alibaba.com>
iommupt: Return zero for invalid iova_to_phys() ranges
Kevin Tian <kevin.tian@intel.com>
iommu/vt-d: Force requesting ACS when tboot is enabled
Kevin Tian <kevin.tian@intel.com>
iommu/vt-d: Fix no_iommu to disable platform opt-in
Peiyang He <peiyang_he@smail.nju.edu.cn>
iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add
Shameer Kolothum <skolothumtho@nvidia.com>
iommu/arm-smmu-v3: Manage teardown with devm
Robin Murphy <robin.murphy@arm.com>
iommu/arm-smmu-v3: Add HAFT support for SVA
Nicolin Chen <nicolinc@nvidia.com>
iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field
Shuai Xue <xueshuai@linux.alibaba.com>
iommu/sva: Set handle->dev before the SVA handle is visible
Weimin Xiong <xiongwm2026@163.com>
iommu/msm: Unwind probe state on registration failure
Shuai Xue <xueshuai@linux.alibaba.com>
iommu/amd: Put PCI device after handling PPR faults
Krzysztof Wilczyński <kwilczynski@kernel.org>
PCI/proc: Warn on writes to kernel-exclusive config space regions
Krzysztof Wilczyński <kwilczynski@kernel.org>
PCI/proc: Use file_ns_capable() when checking config space read access
Krzysztof Wilczyński <kwilczynski@kernel.org>
PCI/proc: Avoid spurious runtime PM wakeup on config space accesses
Farhan Ali <alifm@linux.ibm.com>
PCI/MSI: Enable memory decoding before restoring MSI-X messages
Darshit Shah <darnshah@amazon.de>
PCI/DPC: Allow DPC on all Downstream Ports when OS controls AER
Max Lee <max.lee@canonical.com>
PCI/ASPM: Avoid L0s for Realtek RTS525A
Lukas Wunner <lukas@wunner.de>
PCI/AER: Fix mapping of errors to agent & layer
Lukas Wunner <lukas@wunner.de>
PCI/AER: Emit TLP Log only for unmasked errors
Krzysztof Wilczyński <kwilczynski@kernel.org>
PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses
Krzysztof Wilczyński <kwilczynski@kernel.org>
PCI/sysfs: Fix read byte order in pci_read_legacy_io()
Tim Harvey <tharvey@gateworks.com>
PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608]
Ali Tariq <alitariq45892@gmail.com>
PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()
Ali Tariq <alitariq45892@gmail.com>
PCI: plda: Fix use-after-free of event IRQs during teardown
Ali Tariq <alitariq45892@gmail.com>
PCI: starfive: Fix resource leaks on error paths in host_init()
Ronald Claveau <linux-kernel-dev@aliel.fr>
PCI: meson: Fix GPIO state while requesting PERST#
Mohamad Raizudeen <raizudeen.kerneldev@gmail.com>
PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk
Naman Jain <namjain@linux.microsoft.com>
PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip
Stefan Haberland <sth@linux.ibm.com>
s390/dasd: Propagate partial completion length across ERP recovery
Stefan Haberland <sth@linux.ibm.com>
s390/dasd: Guard sysfs discipline callbacks against unallocated private data
Stefan Haberland <sth@linux.ibm.com>
s390/dasd: Do not complete a failed ESE read as successful
Karl Mehltretter <kmehltretter@gmail.com>
s390/percpu: Fix MVIY_PERCPU() with older binutils
Thomas Richter <tmricht@linux.ibm.com>
s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks
Jianing Li <m13940358460@163.com>
power: supply: max17040: synchronize work cancellation on suspend
Jianing Li <m13940358460@163.com>
power: supply: max17040: drop incorrect I2C functionality check
Jianing Li <m13940358460@163.com>
power: supply: max17040: propagate register read errors
Fan Wu <fanwu01@zju.edu.cn>
power: supply: ucs1002: fix use-after-free on remove
Maoyi Xie <maoyixie.tju@gmail.com>
power: supply: twl4030_charger: cancel workers via devm
Fan Wu <fanwu01@zju.edu.cn>
power: supply: rt9455: quiesce delayed work before teardown
HyeongJun An <sammiee5311@gmail.com>
power: supply: qcom_battmgr: terminate the strings from firmware
Fan Wu <fanwu01@zju.edu.cn>
power: supply: qcom_battmgr: fix use-after-free
Xu Rao <raoxu@uniontech.com>
power: supply: pf1550: enable charging when battery profile exists
Fan Wu <fanwu01@zju.edu.cn>
power: supply: lp8788-charger: fix use-after-free on remove
Fan Wu <fanwu01@zju.edu.cn>
power: supply: lp8727: fix use-after-free in lp8727_release_irq()
Jameson Thies <jthies@google.com>
power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS
Bryam Vargas <hexlabsecurity@proton.me>
power: supply: cros_usbpd-charger: bound the EC-reported port count
Fan Wu <fanwu01@zju.edu.cn>
power: supply: charger-manager: register regulators before exposing sysfs
Ma Ke <make_ruc2021@163.com>
power: supply: bq25890: Fix power_supply reference leak
Fan Wu <fanwu01@zju.edu.cn>
power: supply: bq256xx: drain usb_work before freeing the charger
Fan Wu <fanwu01@zju.edu.cn>
power: supply: bq24257: fix use-after-free on remove
Jun Yang <junvyyang@tencent.com>
sctp: fix stream->outcnt underflow on duplicate RECONF responses
Jun Yang <junvyyang@tencent.com>
sctp: distinguish sequence zero from wildcard in reconf lookup
Weiming Shi <bestswngs@gmail.com>
sctp: fix NULL deref on untransmitted RECONF completion
Hyunwoo Kim <imv4bel@gmail.com>
sctp: drop a chunk if its transport was removed
Hyunwoo Kim <imv4bel@gmail.com>
sctp: stop processing a packet once its association is deleted
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
nvme-tcp: reject a read that transferred too few bytes
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
nvme-tcp: fix host memory disclosure on R2T for a read command
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone
Myeonghun Pak <mhun512@gmail.com>
nvme-pci: disable controller on admin queue IRQ setup failure
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
nvme: zero the discard fallback page
Ewan D. Milne <emilne@redhat.com>
nvme: nvme-fc: Fix nvme_fc_create_hw_io_queues() queue deletion in error path
Oscar Ou <oscarou@synology.com>
lockd: fix swapped arguments in nlmsvc_match_ip()
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
lockd: fix NULL dereference on lockowner allocation failure
Olga Kornievskaia <okorniev@redhat.com>
lockd: fix NLMv4 GRANTED_MSG handling
Michael Bommarito <michael.bommarito@gmail.com>
lockd: pin next file across nlm_inspect_file lock-drop
Yifei Gao <gyf161023@gmail.com>
ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user()
Ruoyu Wang <ruoyuw560@gmail.com>
i2c: mxs: fix DMA channel leak on probe error
Cong Nguyen <congnt264@gmail.com>
hwmon: (max6621) fix temperature clamp range
Cong Nguyen <congnt264@gmail.com>
hwmon: (max6621) fix negative temperature offset and crit readings
Alexander Graf <graf@amazon.com>
dma-contiguous: fix truncation of numa_cma / cma_pernuma sizes >= 2G
Jorijn van der Graaf <jorijnvdgraaf@catcrafts.net>
ASoC: codecs: aw88261: only check PLL and clock state at power-up
Christopher Tolang <christophertolang@gmail.com>
ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC
Karl Mehltretter <kmehltretter@gmail.com>
arm64: proton-pack: Restore the nospectre_bhb command-line option
Karl Mehltretter <kmehltretter@gmail.com>
arm64: compat: Fix decrementing LDM/STM alignment emulation
HyeongJun An <sammiee5311@gmail.com>
ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion
Norbert Szetei <norbert@doyensec.com>
openvswitch: only skb_tx_error() a packet we are about to drop
Yuqi Xu <xuyuqiabc@gmail.com>
openvswitch: Fix CT limit teardown use-after-free
Ali Ahmet Memis <ali@iusegentoo.com>
openrisc: fix arbitrary kernel memory access via or1k_atomic syscall
Zhan Xusheng <zhanxusheng1024@gmail.com>
ocfs2: fix readdir position truncation on 32-bit kernels
Matthias Goergens <matthias.goergens@gmail.com>
ocfs2: fix cached cluster count after suballocator reclaim
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: cluster: fix o2hb_dependent_users leak on pin failure
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: cluster: avoid lock order inversion in o2hb_region_pin() from drop_item
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()
Doruk Tan Ozturk <doruk@0sec.ai>
ocfs2: validate directory-index entry counts when reading metadata
Ibrahim Hashimov <security@auditcode.ai>
ocfs2: validate rl_used against rl_count in refcount block validator
Bryam Vargas <hexlabsecurity@proton.me>
ocfs2: validate lengths in dlm_mig_lockres_handler
Bryam Vargas <hexlabsecurity@proton.me>
ocfs2: bound namelen in dlm_migrate_request_handler
Dmitry Antipov <dmantipov@yandex.ru>
ocfs2: always run deallocs on copy-on-write completion
Zhiling Zou <zhilinz@nebusec.ai>
orangefs: skip leading spaces before parsing client debug masks
Yifei Gao <gyf161023@gmail.com>
orangefs: fix double-free of trailer_buf on readdir copy failure
Shibo Zhu <3499129952@qq.com>
PM: sleep: Unblock runtime PM when device prepare fails
Ivan Immanuel Shaji <ivanimmanuel1234@gmail.com>
ring-buffer: Stop remote reader update when page swap fails
Vincent Donnefort <vdonnefort@google.com>
ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page
Vincent Donnefort <vdonnefort@google.com>
ring-buffer: Hold cpu_buffer::lock when resizing a subbuf
Vincent Donnefort <vdonnefort@google.com>
ring-buffer: Free cpu_buffer::free_page with subbuf_order
Vincent Donnefort <vdonnefort@google.com>
ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()
Kathiravan Thirumoorthy <kathiravan.thirumoorthy@oss.qualcomm.com>
regulator: qcom-refgen: correct the regulator type to CURRENT
WenTao Liang <vulab@iscas.ac.cn>
regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata
WenTao Liang <vulab@iscas.ac.cn>
regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
Yuhang Pan <242270054@hdu.edu.cn>
RDMA/uverbs: Guard legacy bundles without method_elm
Jason Gunthorpe <jgg@ziepe.ca>
RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR
Norbert Szetei <norbert@doyensec.com>
RDMA/ucma: Lock the handler in ucma_write_cm_event()
Norbert Szetei <norbert@doyensec.com>
RDMA/ucma: Lock the handler in ucma_set_ib_path()
Abhijit Gangurde <abhijit.gangurde@amd.com>
RDMA/ionic: Embed counter driver data in rdma_counter allocation
Brett Creeley <brett.creeley@amd.com>
RDMA/ionic: Cap eq_count to the eth driver's interrupt vector budget
Fan Wu <fanwu01@zju.edu.cn>
RDMA/cxgb4: Cancel reg_work before freeing device on remove
Vaibhav Nagare <nagarevaibhav@gmail.com>
qede: Fix NULL pointer dereference in TPA fragment processing
Abdifatah Suruur <suruurism@gmail.com>
ptp: vmclock: prevent read-only mappings from becoming writable
Johan Hovold <johan@kernel.org>
remoteproc: scp: Fix device reference leak on failed lookup
Nam Cao <namcao@linutronix.de>
riscv: unaligned: stop using kthread for check_vector_unaligned_access()
Peixin Xie <peixin.xie@linux.spacemit.com>
riscv: acpi: Handle LPI architectural context loss flags
Guidong Han <2045gemini@gmail.com>
RISC-V: KVM: Fix PMU event info array size overflow
Aurelien Jarno <aurelien@aurel32.net>
riscv: dts: spacemit: k1-orangepi-rv2: fix maximum CPU core voltage
Aurelien Jarno <aurelien@aurel32.net>
riscv: dts: spacemit: k1-orangepi-r2s: fix maximum CPU core voltage
Aurelien Jarno <aurelien@aurel32.net>
riscv: dts: spacemit: k1-musepi-pro: fix maximum CPU core voltage
Aurelien Jarno <aurelien@aurel32.net>
riscv: dts: spacemit: k1-milkv-jupiter: fix maximum CPU core voltage
Aurelien Jarno <aurelien@aurel32.net>
riscv: dts: spacemit: k1-bananapi-f3: fix maximum CPU core voltage
Fabio Estevam <festevam@nabladev.com>
arm64: dts: rockchip: Fix rk3588s-roc-pc audio description
Fabio Estevam <festevam@nabladev.com>
arm64: dts: rockchip: Fix rk3399-roc-pc-plus analog audio
Jakob Unterwurzacher <jakob.unterwurzacher@cherry.de>
arm64: dts: rockchip: fix emmc reset polarity on px30-cobra
Quentin Schulz <quentin.schulz@cherry.de>
arm64: dts: rockchip: fix eMMC reset polarity on PX30 Ringneck
Quentin Schulz <quentin.schulz@cherry.de>
arm64: dts: rockchip: fix eMMC reset polarity on PP-1516
Michael Scott <mike.scott@oss.qualcomm.com>
arm64: dts: qcom: x1-dell-thena: mark l12b and l15b always-on
Krzysztof Kozlowski <krzysztof.kozlowski@oss.qualcomm.com>
arm64: dts: qcom: sm6115-pro1x: Correct touchscreen GPIO flags
Jianping Li <jianping.li@oss.qualcomm.com>
arm64: dts: qcom: kodiak: avoid EFI overlap for ADSP remote heap
Oren Klopfer <oklopfer37@gmail.com>
Revert "arm64: dts: rockchip: Further describe the WiFi for the Pinephone Pro"
Chunkai Deng <chunkai.deng@oss.qualcomm.com>
rpmsg: glink: smem: order FIFO read after availability check
Linkai Gong <gonglinkai@kylinos.cn>
scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock
Petr Vaganov <p.vaganov@ideco.ru>
scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()
Tejun Heo <tj@kernel.org>
sched_ext: Keep kick_sync waiting on the rq's own CPU
Tejun Heo <tj@kernel.org>
sched_ext: Fix scx_bpf_dsq_reenq___compat kfunc extern prototype
Tao Cui <cuitao@kylinos.cn>
sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users
Tejun Heo <tj@kernel.org>
sched_ext: Fix inverted ops.core_sched_before() invocation
fangqiurong <fangqiurong@kylinos.cn>
sched_ext: Fix exit_task leak on fork failure during enable
fangqiurong <fangqiurong@kylinos.cn>
sched_ext: Fix scx_bpf_dsq_move_to_local___v2 compat detection
Tejun Heo <tj@kernel.org>
sched_ext: Count rq lock releases in rq->scx.lock_drop_seq
Tejun Heo <tj@kernel.org>
sched_ext: Fix rq->core_pick corruption under core scheduling
Tejun Heo <tj@kernel.org>
sched_ext: Fix this_rq() assumptions in dispatch kfuncs
Tejun Heo <tj@kernel.org>
sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return
Tejun Heo <tj@kernel.org>
sched/core: Make core-sched flips wait for in-flight selections
Tejun Heo <tj@kernel.org>
sched/core: Handle pick_task() releasing the rq lock
Cong Nguyen <congnt264@gmail.com>
media: staging/ipu7: fix async notifier UAF on probe error path
Hao-Qun Huang <alvinhuang0603@gmail.com>
staging: media: tegra-video: vi: fix probe failure on skipped last port
Hao-Qun Huang <alvinhuang0603@gmail.com>
staging: media: tegra-video: fix of_node_put() on VIP parse errors
Wentao Guan <guanwentao@uniontech.com>
wifi: mt76: mt7925: cancel pending mlo_pm_work
Doruk Tan Ozturk <doruk@0sec.ai>
wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets
David Lee <david.lee@trailofbits.com>
udf: reject VAT indexes equal to the entry count
Chuck Lever <cel@kernel.org>
svcrdma: Validate Read chunk positions before reconstruction
Chuck Lever <cel@kernel.org>
svcrdma: Use svc_xprt_put to free listener on create failure
Chris Mason <clm@meta.com>
svcrdma: Reject Write/Reply chunks with segcount 0
Chuck Lever <cel@kernel.org>
svcrdma: Reject Read lists that exceed the page budget
Chuck Lever <cel@kernel.org>
svcrdma: Reject oversized Read segments at decode time
Chuck Lever <cel@kernel.org>
svcrdma: Reject inline replies that overflow the pull-up buffer
Chuck Lever <cel@kernel.org>
svcrdma: Reject connection when transport allocation fails
Chris Mason <clm@meta.com>
svcrdma: Fix unmatched rn_unregister on failed accept
Chris Mason <clm@meta.com>
svcrdma: Fix pcl_for_each_segment for empty chunks
Chris Mason <clm@meta.com>
svcrdma: Fix offset arithmetic in read_chunk_range
Chuck Lever <cel@kernel.org>
svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails
Chuck Lever <cel@kernel.org>
svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
SUNRPC: wait for in-flight client TLS handshake callback
Chuck Lever <cel@kernel.org>
SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2
Chuck Lever <cel@kernel.org>
SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field
Chris Mason <clm@meta.com>
SUNRPC: reject duplicate CREDS_VALUE options
Chris Mason <clm@meta.com>
sunrpc: init gssp_lock before publishing proc entry
Chris Mason <clm@meta.com>
SUNRPC: harden gss_unwrap_resp_priv length checks
Chris Mason <clm@meta.com>
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
Chris Mason <clm@meta.com>
SUNRPC: Guard svcauth_gss_release() dispatch on rq_auth_stat
Luxiao Xu <rakukuip@gmail.com>
sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
Chris Mason <clm@meta.com>
SUNRPC: fix gssx_dec_option_array error path bugs
Jeff Layton <jlayton@kernel.org>
sunrpc: defer rq_argp and rq_resp free until after RCU grace period
Chuck Lever <cel@kernel.org>
SUNRPC: close backchannel before destroying callback service
Chuck Lever <cel@kernel.org>
SUNRPC: Check svc pool percpu counter allocation
Jeff Layton <jlayton@kernel.org>
SUNRPC: always drain cache_cleaner before destroying a cache_detail
Ameer Hamza <ameer.hamza@truenas.com>
SUNRPC: Restore NUMA_NO_NODE for svc thread allocations in global mode
Jeff Layton <jlayton@kernel.org>
sunrpc: route to a populated pool in svc_pool_for_cpu()
Chris Mason <clm@meta.com>
SUNRPC: svcauth_gss: enforce krb5 token minimum length
Chris Mason <clm@meta.com>
SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
Chris Mason <clm@meta.com>
SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow
Felix Gu <ustc.gu@gmail.com>
phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
Jiacheng Yu <yujiacheng3@huawei.com>
params: fix charp corruption on allocation failure
Dave Airlie <airlied@redhat.com>
nouveau/gem: reserve the bo in the info ioctl around the vma lookup
Stanislaw Gruszka <stf_xl@wp.pl>
module/kallsyms: fix nextval for data symbol lookup
Harshit Varu <harshitvaru666@gmail.com>
mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction
Qing Ming <a0yami@mailbox.org>
mpls: reload header after pskb_may_pull()
Thiébaud Weksteen <tweek@google.com>
module: validate string table section types
Coly Li <colyli@fygo.io>
md: do overflow check for sb->bblog_shift in super_1_load()
Yunye Zhao <yunye.zhao@linux.alibaba.com>
md/raid10: fix still_degraded being inverted in raid10_sync_request()
Anup Vishwakarma <anup.vishwakarma@oss.qualcomm.com>
mailbox: qcom-ipcc: fix duplicate channel allocation across holes
Bryam Vargas <hexlabsecurity@proton.me>
libnvdimm/labels: Prevent integer overflow in __nd_label_validate()
Günther Noack <gnoack@google.com>
landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
Yuyang Huang <sigefriedhyy@gmail.com>
ipv6: use RCU iterator to dump route exceptions
Andrea Mayer <andrea.mayer@uniroma2.it>
ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()
Zhiling Zou <zhilinz@nebusec.ai>
ip6_gre: fix hardware header length for NBMA tunnels
Zhiling Zou <zhilinz@nebusec.ai>
ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()
Zhiling Zou <zhilinz@nebusec.ai>
ip: orphan prefetched skbs before multicast forwarding
Anton Danilov <littlesmilingcloud@gmail.com>
ipip: fix skb leak in collect_md mode when metadata_dst allocation fails
Max Kellermann <max.kellermann@ionos.com>
jbd2: check need_resched() when skipping busy checkpoint buffers
Max Kellermann <max.kellermann@ionos.com>
jbd2: bound shrinker scans by examined checkpoint buffers
Pratyush Yadav (Google) <pratyush@kernel.org>
kho: fix size calculation in kho_preserved_memory_reserve()
Hui Su <sh_def@163.com>
kasan: fix cache shrink race with CPU hotplug
Ibrahim Abdelkader <iabdelka@qti.qualcomm.com>
Bluetooth: hci_sync: Clear HCI_CMD_PENDING when dropping the last request
Guangshuo Li <lgs201920130244@gmail.com>
Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative
Guangshuo Li <lgs201920130244@gmail.com>
Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative
Valentin Kindschi <valentin.kindschi@fiveco.ch>
Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection
Xin Chen <xin.chen2@oss.qualcomm.com>
Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb
Valentin Kindschi <valentin.kindschi@fiveco.ch>
Bluetooth: hci_conn: re-enable advertising only for peripheral role
Chengfeng Ye <nicoyip.dev@gmail.com>
Bluetooth: RFCOMM: serialize security confirmation handling
Hang Nan <2122295973@qq.com>
Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
Gongwei Li <ligongwei@kylinos.cn>
Bluetooth: hci_uart: Fix false success return in hci_uart_setup()
Guangshuo Li <lgs201920130244@gmail.com>
Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative
Lorenzo Stoakes (ARM) <ljs@kernel.org>
Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4378
Terry Bowman <terry.bowman@amd.com>
cxl/ras: Fix cxl_rch_get_aer_severity() wrong severity register
Alison Schofield <alison.schofield@intel.com>
cxl/pmem: Format the nvdimm serial number as unsigned decimal
Dave Jiang <dave.jiang@intel.com>
cxl/mce: Make the MCE notifier per-region
Zhenhao Wan <whi4ed0g@gmail.com>
cxl/features: bound fwctl command payload to the input buffer
Hui Su <sh_def@163.com>
cpufreq: schedutil: Fix rate limit overflow
Haoxiang Li <haoxiang_li2024@163.com>
cpufreq: apple-soc: Fix OPP table cleanup
Kuan-Wei Chiu <visitorckw@gmail.com>
coresight: etm3x: Fix cntr_val_show() to match cntr_val_store() behavior
Bryam Vargas <hexlabsecurity@proton.me>
dm array: reject an array block whose value size is not the caller's
Bryam Vargas <hexlabsecurity@proton.me>
dm array: validate array block headers on read
Ilya Krutskih <devsec@tpz.ru>
dm raid1: reserve space for NUL-terminator in build_constructor_string()
liyouhong <liyouhong@kylinos.cn>
dm-era: fix shadowed superblock leak on take-snap failure
Mikulas Patocka <mpatocka@redhat.com>
dm-io: report non-retryable errors separatedly
Keith Busch <kbusch@kernel.org>
dm-io: clone the source bio instead of copying its biovec
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
bpf: Harden bloom filter sizing and indexing on 32-bit kernels
Jia Zhu <zhujia.zj@bytedance.com>
buffer: avoid tail commit walk for uptodate folios
Daniel Borkmann <borkmann@iogearbox.net>
bpf: Disable preemption in __bpf_get_stack
Vineet Gupta <vineet.gupta@linux.dev>
bpf, x86: Fix per-CPU address resolution into an extended register
Joe Damato <joe@dama.to>
bnxt_en: Write doorbell when linearizing skb fails
Jiangshan Yi <yijiangshan@kylinos.cn>
bnx2x: fix double free in bnx2x_init_firmware() error path
HyeongJun An <sammiee5311@gmail.com>
Bluetooth: eir: Fix OOB read in eir_get_service_data()
Junjie Cao <junjie.cao@intel.com>
Bluetooth: btusb: limit RTL8761B BROKEN_EXT_SCAN quirk to 0bda:a728
Christoph Zwerschke <cito@online.de>
Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU
Christoph Zwerschke <cito@online.de>
Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU
胡连勤 <hulianqin@vivo.com>
block: set QUEUE_FLAG_DYING unconditionally in blk_mark_disk_dead()
Keith Busch <kbusch@kernel.org>
block: validate user space vectors during extraction
Junjie Cao <junjie.cao@linux.dev>
backlight: aw99706: Honor the core blank state in update_status()
Junjie Cao <junjie.cao@linux.dev>
backlight: aw99706: Fix DT property names to match binding
Hongyan Xu <getshell@seu.edu.cn>
auxdisplay: charlcd: cancel backlight work on registration failure
Niklas Cassel <cassel@kernel.org>
ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes
Ethan Nelson-Moore <enelsonmoore@gmail.com>
ARM: 9477/1: Disable broken eBPF JIT on the Risc PC
Matt Turner <mattst88@gmail.com>
alpha: marvel: Fix lock ordering in init_io7_irqs()
Matt Turner <mattst88@gmail.com>
alpha: marvel: Fix irq_set_status_flags to use correct IRQ number
Krzysztof Wilczyński <kwilczynski@kernel.org>
alpha/PCI: Fix I/O port accessor argument order in pci_legacy_write()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: TAD: Add locking around AML evaluations
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: scan: Avoid registering platform devices with resource overlaps
Anirudh Prasad <icarus@a0rg.com>
ACPI: pfr_update: fix stack buffer overflow in query_capability()
Christian Loehle <christian.loehle@arm.com>
ACPI: CPPC: Skip desired_perf read in cppc_get_perf()
Christian Loehle <christian.loehle@arm.com>
ACPI: CPPC: Reject desired_perf reads on _CPC revision 4+
TanZheng <tanzheng@kylinos.cn>
ACPI: APEI: GHES: fix ARM section length accounting after header
Nirmoy Das <nirmoyd@nvidia.com>
ACPI: APEI: Fix ERST timeout unit conversion
Terry Bowman <terry.bowman@amd.com>
acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks
ZhaoJinming <zhaojinming@uniontech.com>
accel/rocket: Fix error path handling in rocket_job_run()
Shuvam Pandey <shuvampandey1@gmail.com>
accel/rocket: initialize job domain before cleanup paths
Muhammad Bilal <meatuni001@gmail.com>
accel/rocket: fix NULL dereference and integer overflow in rocket_job_push()
Guillaume Morin <guillaume@morinfr.org>
hugetlb: only adjust reservation during unmapping if mapcount is 0
Ivaylo Dimitrov <ivo.g.dimitrov.75@gmail.com>
hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device
Youngjae Kwon <yjkwon0026@snu.ac.kr>
fsnotify: Fix stale object mask after concurrent mark updates
Tien Sung Ang <tien.sung.ang@altera.com>
fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration
Marek Czernohous <marek@czernohous.de>
forcedeth: fix off-by-one when saving/restoring non-PCI config space
Randy Dunlap <rdunlap@infradead.org>
fonts: fixup font.h kernel-doc warnings
Myeonghun Pak <mhun512@gmail.com>
fbdev: uvesafb: unregister connector callback on init failure
Hui Su <sh_def@163.com>
fbdev: ssd1307fb: defer I2C transfers from damage callbacks
Florian Fuchs <fuchsfl@gmail.com>
fbdev: pvr2fb: correct user pointer annotation and sentinel initializer
Runyu Xiao <runyu.xiao@seu.edu.cn>
fbdev: omapfb: panel-dsi-cm: initialize lock before registering display
Yemu Lu <prcups@krgm.moe>
fat: restore original value when fat_ent_write failed
Chengfeng Ye <nicoyip.dev@gmail.com>
fanotify: fix use-after-free of file range info
Jan Kara <jack@suse.cz>
ext2: Fix lost inode updates for IS_SYNC inodes
Nikhil Gurudasani <nikhilgurudasani314@gmail.com>
erofs: skip sufficiently large global buffers when resizing
Jinjie Ruan <ruanjinjie@huawei.com>
entry: Fix seccomp bypass after ptrace with TSYNC
Ard Biesheuvel <ardb@kernel.org>
efivarfs: Rate limit statfs() handler
Yichong Chen <chenyichong@uniontech.com>
ecryptfs: show filename encryption options
Yichong Chen <chenyichong@uniontech.com>
ecryptfs: release message context on send failure
Yichong Chen <chenyichong@uniontech.com>
ecryptfs: reject too-small tag 70 packets
HanQuan <eilaimemedsnaimel@gmail.com>
ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
Yichong Chen <chenyichong@uniontech.com>
ecryptfs: pass packet set buffer size to parser
Yichong Chen <chenyichong@uniontech.com>
ecryptfs: hold msg ctx list lock when cleaning daemon queue
Yichong Chen <chenyichong@uniontech.com>
ecryptfs: fix tag 11 packet exact-fit size check
Pengpeng Hou <pengpeng@iscas.ac.cn>
eCryptfs: bound the packet-length peek to the user buffer
Hongling Zeng <zenghongling@kylinos.cn>
ntfs: verify run length exceeding volume boundary
Hongling Zeng <zenghongling@kylinos.cn>
ntfs: validate non-resident attribute offsets
Hyunchul Lee <hyc.lee@gmail.com>
ntfs: reject invalid MFT LCNs from boot sector
Hyunchul Lee <hyc.lee@gmail.com>
ntfs: reject invalid empty mapping pairs
Bryam Vargas <hexlabsecurity@proton.me>
ntfs: bound the free-cluster bitmap scan to the volume
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: bound page_lcns[] index by the log record
Samuel Page <sam@bynar.io>
fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()
Xiang Mei <xmei5@asu.edu>
fs/ntfs3: validate dirty page table on log replay
Deepanshu Kartikey <kartikey406@gmail.com>
eventfs: Initialize ei->children and ei->list in init_ei()
Guangshuo Li <lgs201920130244@gmail.com>
HID: intel-thc-hid: intel-quickspi: fix autosuspend cleanup during teardown
Guangshuo Li <lgs201920130244@gmail.com>
HID: intel-thc-hid: intel-quicki2c: fix autosuspend cleanup during teardown
HyeongJun An <sammiee5311@gmail.com>
HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer
HyeongJun An <sammiee5311@gmail.com>
HID: intel-thc-hid: intel-quickspi: validate report size before copy
Jiangshan Yi <yijiangshan@kylinos.cn>
HID: mcp2221: validate report size in mcp2221_raw_event()
Jiangshan Yi <yijiangshan@kylinos.cn>
HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes
Jiangshan Yi <yijiangshan@kylinos.cn>
HID: mcp2221: stop device IO before hid_hw_stop
Baul Lee <baul.lee@xbow.com>
HID: universal-pidff: stop the device when force-feedback init fails
Doruk Tan Ozturk <doruk@0sec.ai>
HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
Haoxiang Li <haoxiang_li2024@163.com>
HID: sensor: custom: Fix field sysfs group cleanup on failure
Xu Rao <raoxu@uniontech.com>
HID: roccat: free buffered reports when destroying device
Ibrahim Hashimov <security@auditcode.ai>
HID: picolcd: clamp eeprom debugfs read to bytes actually received
Stuart Hayhurst <stuart.a.hayhurst@gmail.com>
HID: corsair-void: Check size of status and firmware events before reading them
Andre Eikmeyer <dev@deq.rocks>
HID: apple: preserve keyboard backlight across T2 resume
Bryam Vargas <hexlabsecurity@proton.me>
smb: client: restore the data_offset bound in is_valid_oplock_break()
Bryam Vargas <hexlabsecurity@proton.me>
smb: client: reject a tree connect response whose byte count is too small
Fredric Cover <fredric.cover.lkernel@gmail.com>
smb: client: harden DFS cache against invalid target hints
Frank Sorenson <sorenson@redhat.com>
smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()
Frank Sorenson <sorenson@redhat.com>
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()
Frank Sorenson <sorenson@redhat.com>
smb: client: fix copy-paste error in WSL EA length accounting for $LXDEV
Frank Sorenson <sorenson@redhat.com>
smb: client: fix ALIGN() overflow in symlink_data() error context loop
Aldo Ariel Panzardo <qwe.aldo@gmail.com>
ksmbd: only rebind the reopened file's own oplock on durable reconnect
Fredric Cover <fredric.cover.lkernel@gmail.com>
smb: client: clear ce->tgthint in free_tgts()
Frank Sorenson <sorenson@redhat.com>
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2
Jiangshan Yi <yijiangshan@kylinos.cn>
smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions
Frank Sorenson <sorenson@redhat.com>
cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC
Frank Sorenson <sorenson@redhat.com>
cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0
Frank Sorenson <sorenson@redhat.com>
cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()
Frank Sorenson <sorenson@redhat.com>
cifs: call pagecache_isize_extended() in cifs_setsize() when extending
Frank Sorenson <sorenson@redhat.com>
cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
audit: avoid dropping live tree ref on fsnotify rule autoremove
Qu Wenruo <wqu@suse.com>
btrfs: do not overwrite NODATASUM flag when removing NODATACOW flag
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
btrfs: fix extent map leak in NOCOW direct I/O write
Guanghui Yang <3497809730@qq.com>
btrfs: drop recovered reloc root refs on recovery failure
Matthew Brown <matthew@bargrove.com>
ceph: fix leaked inode reference on writeback abort at umount
Max Kellermann <max.kellermann@ionos.com>
ceph: do not repeat ceph_trim_dentries() if no progress possible
Michael Bommarito <michael.bommarito@gmail.com>
ceph: cap delegated inode count in ceph_parse_deleg_inos()
Michael Bommarito <michael.bommarito@gmail.com>
ceph: bound xattr value length in __build_xattrs()
Michael Bommarito <michael.bommarito@gmail.com>
ceph: bound num_export_targets array for mds info v2/v3
Michael Bommarito <michael.bommarito@gmail.com>
ceph: bound MDSCapAuth path and fs_name decode in handle_session()
Michael Bommarito <michael.bommarito@gmail.com>
ceph: bound copied dentry name length in NFS export get_name
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
Max Kellermann <max.kellermann@ionos.com>
ceph: force a cap message when a deferred revoke can't be acked immediately
Xiubo Li <xiubo.li@clyso.com>
ceph: fix UAF in check_new_map() on session freed during unlock
Xiubo Li <xiubo.li@clyso.com>
ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
libceph: reject buckets with mismatched CRUSH ids
Michael Bommarito <michael.bommarito@gmail.com>
libceph: validate OSD extent maps before cursor advance
Jeff Layton <jlayton@kernel.org>
nfsd: use test_and_clear_bit for somebody_reclaimed to prevent lost update
Chuck Lever <cel@kernel.org>
NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup
Chuck Lever <cel@kernel.org>
NFSD: Prevent client use-after-free during delegation revoke
Chuck Lever <cel@kernel.org>
NFSD: Prevent client use-after-free during admin state revocation
Chuck Lever <cel@kernel.org>
NFSD: Prevent post-shutdown use-after-free in unlock_filesystem
Chuck Lever <cel@kernel.org>
NFSD: Prevent lock owner use-after-free during client teardown
Jeff Layton <jlayton@kernel.org>
nfsd: revoke copy-notify stateids before dropping their reference
Jeff Layton <jlayton@kernel.org>
nfsd: release OPEN-decoded posix ACLs via op_release
Jeff Layton <jlayton@kernel.org>
nfsd: reject reclaim LOCK after RECLAIM_COMPLETE
Robbie Ko <robbieko@synology.com>
nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE
Robbie Ko <robbieko@synology.com>
nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops
Jeff Layton <jlayton@kernel.org>
nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache
Jeff Layton <jlayton@kernel.org>
nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
Jeff Layton <jlayton@kernel.org>
nfsd: initialize DRC hash table before registering shrinker
Jeff Layton <jlayton@kernel.org>
nfsd: initialize copy-notify stateid before publishing it
Chris Mason <clm@meta.com>
nfsd: hold rcu across localio cmpxchg retry
Chris Mason <clm@meta.com>
nfsd: gate nfs3 setacl by argp->mask
Chuck Lever <cel@kernel.org>
nfsd: gate nfs2 setacl by argp->mask
Jeff Layton <jlayton@kernel.org>
nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
Jeff Layton <jlayton@kernel.org>
nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget
Jeff Layton <jlayton@kernel.org>
nfsd: fix version mismatch loops in nfsd_acl_init_request()
Jeff Layton <jlayton@kernel.org>
nfsd: fix UAF in async copy cancel and shutdown
Jeff Layton <jlayton@kernel.org>
nfsd: fix stale s2s_cp_stateids IDR entry for async COPY
Jeff Layton <jlayton@kernel.org>
nfsd: fix reply size estimate for GET_DIR_DELEGATION
Jeff Layton <jlayton@kernel.org>
nfsd: fix refcount leak in nfsd_file_lru_add on insertion failure
NeilBrown <neil@brown.name>
nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()
Chris Mason <clm@meta.com>
nfsd: fix partial-write detection in nfsd_direct_write
Nikol Kuklev <nikolk202@gmail.com>
nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs
Jeff Layton <jlayton@kernel.org>
nfsd: fix nfsd_file leak on inter-server COPY setup failure
Jeff Layton <jlayton@kernel.org>
nfsd: fix netlink dumpit error handling for rpc_status_get
Jeff Layton <jlayton@kernel.org>
nfsd: fix layout fence worker double-reference race
Jeff Layton <jlayton@kernel.org>
nfsd: fix FL_SLEEP being set unconditionally for all LOCK types
Jeff Layton <jlayton@kernel.org>
nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net
Jeff Layton <jlayton@kernel.org>
nfsd: fix dentry ref leak on V4ROOT export filehandle lookup
Chris Mason <clm@meta.com>
nfsd: fix cpntf publish race in nfs4_init_cp_state
Jeff Layton <jlayton@kernel.org>
nfsd: fix clock domain mismatch in clients_still_reclaiming()
Jeff Layton <jlayton@kernel.org>
nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
NeilBrown <neil@brown.name>
nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file
Jeff Layton <jlayton@kernel.org>
nfsd: drop the stateid, not the stateowner, on seqid_op replay retry
Jeff Layton <jlayton@kernel.org>
nfsd: don't free session slots that are still in use
Jeff Layton <jlayton@kernel.org>
nfsd: defer vfree of compound ops to fix rpc_status UAF
Jeff Layton <jlayton@kernel.org>
nfsd: defer setting NFSD4_CALLBACK_RUNNING in deleg_reaper
Jeff Layton <jlayton@kernel.org>
nfsd: dedup nfs4_client_to_reclaim inserts
Chris Mason <clm@meta.com>
nfsd: convert nfsd_net boolean flags to unsigned long flags word
Jeff Layton <jlayton@kernel.org>
nfsd: clear opcnt on compound arg release to prevent OOB read
Jeff Layton <jlayton@kernel.org>
nfsd: clear CALLBACK_RUNNING on failed delegation recall queue
Jeff Layton <jlayton@kernel.org>
nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()
Jeff Layton <jlayton@kernel.org>
nfsd: check client ownership when cancelling a copy-notify stateid
Chris Mason <clm@meta.com>
nfsd: cap decoded POSIX ACL count to bound sort cost
Jeff Layton <jlayton@kernel.org>
nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
Jeff Layton <jlayton@kernel.org>
nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry
Jeff Layton <jlayton@kernel.org>
nfsd: add filehandle match check to nfsd4_delegreturn()
Jeff Layton <jlayton@kernel.org>
nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
Jeff Layton <jlayton@kernel.org>
nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage
Jeff Layton <jlayton@kernel.org>
nfsd: validate symlink target length in NFSv4 CREATE
Jeff Layton <jlayton@kernel.org>
nfsd: validate sockaddr length per family in listener_set
Jeff Layton <jlayton@kernel.org>
nfsd: validate nseconds in TIME_DELEG decode paths
Chris Mason <clm@meta.com>
nfsd: size fh_verify server sockaddr slot by xpt_locallen
Zhenghang Xiao <kipreyyy@gmail.com>
nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations
Chuck Lever <cel@kernel.org>
nfsd: sample writeback error cursor before async COPY loop
Jeff Layton <jlayton@kernel.org>
nfsd: return NFS4ERR_NOTSUPP for unsupported netloc4 types
Jeff Layton <jlayton@kernel.org>
nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths
Chuck Lever <cel@kernel.org>
nfsd: Reset write verifier when async COPY writeback fails
Chris Mason <clm@meta.com>
nfsd: release path refs on follow_down() error
Jeff Layton <jlayton@kernel.org>
nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
Jeff Layton <jlayton@kernel.org>
lockd, nfsd: RCU-protect nlmsvc_ops dispatch
Tim Menninger <tmenninger@everpuredata.com>
pNFS: Fix EBUSY check in pnfs_layout_need_return
Junrui Luo <moonafterrain@outlook.com>
NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
Chris Mason <clm@meta.com>
nfsd: guard nfsd_serv deref in nfsd_file_net_dispose
Mike Snitzer <snitzer@kernel.org>
NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check
Michael Bommarito <michael.bommarito@gmail.com>
NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock
Scott Mayhew <smayhew@redhat.com>
NFSD: fix up error returned by write_threads()
Chuck Lever <cel@kernel.org>
NFSD: Fix off-by-one in DRC bucket pruning limit
Chuck Lever <cel@kernel.org>
NFSD: Encode only the status in NFS-ACL v2 GETACL error replies
Chuck Lever <cel@kernel.org>
NFSD: check truncate permission under inode lock
Nate Prodromou <nate@prodromou.com>
NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails
Chris Mason <clm@meta.com>
NFS/localio: fix ref leak on nfs_uuid_add_file failure
Longlong Xia <xialonglong@kylinos.cn>
zsmalloc: account for handle size in class lookup
Sergey Senozhatsky <senozhatsky@chromium.org>
zram: validate deflate params
Sergey Senozhatsky <senozhatsky@chromium.org>
zram: set default primary compressor in zram_destroy_comps()
Longlong Xia <xialonglong@kylinos.cn>
zram: fix out-of-bounds access in writeback_store()
Longlong Xia <xialonglong@kylinos.cn>
zram: fix out-of-bounds access in read_block_state()
Ibrahim Hashimov <security@auditcode.ai>
ubifs: fix out-of-bounds read in signature length check
Jason Yang <jason98166@gmail.com>
phy: rockchip-samsung-dcphy: fix out-of-range max_register
Krzysztof Wilczyński <kwilczynski@kernel.org>
PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()
Abdurrahman Hussain <abdurrahman@nexthop.ai>
of: fix out-of-bounds read in of_alias_scan() stem parser
Ryusuke Konishi <konishi.ryusuke@gmail.com>
nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation
Junrui Luo <moonafterrain@outlook.com>
media: vicodec: fix out-of-bounds write in FWHT encoder
Weigang He <geoffreyhe2@gmail.com>
media: cec: stm32: prevent out-of-bounds write on RX overflow
Vincent Mailhol <mailhol@kernel.org>
lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()
Karl Mehltretter <kmehltretter@gmail.com>
KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID
Claudiu Beznea <claudiu.beznea.uj@bp.renesas.com>
i3c: renesas: Fix out-of-bounds access for newdevs mask
Xingrui Li <baka9@bakabaka9.tech>
HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature
Daisuke Matsuda <matsuda@preferred.jp>
fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write
Terry Bowman <terry.bowman@amd.com>
cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read
Neill Kapron <nkapron@google.com>
usb: gadget: f_fs: Prevent deadlock during ep0 read loop
Jeffin Philip <jeffinphilip14@gmail.com>
usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()
Jeffin Philip <jeffinphilip14@gmail.com>
usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()
Yun Zhou <yun.zhou@windriver.com>
usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
Joshua Crofts <joshua.crofts1@gmail.com>
usb: gadget: midi2: remove default configfs groups on teardown
Myeonghun Pak <mhun512@gmail.com>
usb: gadget: snps_udc_plat: clean up PHY on probe deferral
Sonali Pradhan <sonalipradhan@google.com>
usb: gadget: u_audio: Fix use-after-free on sound card disconnect
Huang Wei <huangwei@kylinos.cn>
usb: typec: ucsi: use UCSI_TIMEOUT_MS for sync command completion
Fan Wu <fanwu01@zju.edu.cn>
usb: typec: thunderbolt: Disable work before freeing tbt on remove
Xu Yang <xu.yang_2@nxp.com>
usb: typec: tcpci: pass correct rx_type to tcpm_pd_receive()
Xu Rao <raoxu@uniontech.com>
usb: typec: hd3ss3220: fix VBUS regulator error message
Johan Hovold <johan@kernel.org>
USB: phy: fsl-usb: fix missing static keywords
Fan Wu <fanwu01@zju.edu.cn>
usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed
Pei Xiao <xiaopei01@kylinos.cn>
usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition
Francesco Lavra <flavra@baylibre.com>
usb: dwc2: gadget: Exit partial power down state when changing USB pull-up
Hao-Qun Huang <alvinhuang0603@gmail.com>
staging: greybus: hid: fix SET_REPORT return value
Karl Mehltretter <kmehltretter@gmail.com>
serial: imx: serialize imx_uart_ports[] lifetime
Hans Verkuil <hverkuil+cisco@kernel.org>
Revert "media: v4l2-dev: fix error handling in __video_register_device()"
James Kim <james010kim@gmail.com>
rapidio: mport_cdev: fix use-after-free in dma_req_free()
Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
powerpc/powermac: fix OF node refcount
Bryam Vargas <hexlabsecurity@proton.me>
misc: nsm: bound the device-reported response length
Xu Yang <xu.yang_2@nxp.com>
device property: fix infinite loop in fwnode_for_each_child_node()
Chun-Yi Lee <jlee@suse.com>
debugfs: Fix lockdown check for mmap_prepare
Prasanna Kumar T S M <ptsm@linux.microsoft.com>
cdx: Fix double free when sysfs file creation fails
Hui Su <sh_def@163.com>
tracing: Fix use-after-free with same-name named triggers
Deepanshu Kartikey <kartikey406@gmail.com>
tracing: Fix use-after-free in trace_pipe read on sub-buffer order change
Ivan Immanuel Shaji <ivanimmanuel1234@gmail.com>
tracing: Fix retry exhaustion in simple ring buffer reader swap
Vincent Donnefort <vdonnefort@google.com>
tracing: Fix logged instance name on creation failure
Hui Su <sh_def@163.com>
tracing: Fix crash passing ERR_PTR to kthread_stop()
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
tracing/user_events: Clear copied tracing state before fork duplication
Sanman Pradhan <psanman@juniper.net>
hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start()
Roger Pau Monne <roger@xenproject.org>
x86/xen: fix init of balloon stats again
Kiryl Shutsemau (Meta) <kas@kernel.org>
x86/tdx: Fix zero-extension for 32-bit port I/O
Kiryl Shutsemau (Meta) <kas@kernel.org>
x86/tdx: Fix off-by-one in port I/O handling
Kiryl Shutsemau (Meta) <kas@kernel.org>
x86/insn-eval: Move assign_register() out of KVM as insn_assign_reg()
Yao Zi <me@ziyao.cc>
x86/locking: Use sfence for wmb() if SSE is available
Joy H.J. Lee <rkr0k0r@gmail.com>
tools/compiler: match glibc 2.42 definition of __attribute_const__
Ridong Chen <chenridong@xiaomi.com>
mm: vmscan: fix node reclaim ignoring swappiness parameter
Johannes Weiner <hannes@cmpxchg.org>
mm: page_alloc: fix non-movable reclaim storm in defrag_mode
Vlastimil Babka (SUSE) <vbabka@kernel.org>
mm: page_alloc: move capture_control to the page allocator
Johannes Weiner <hannes@cmpxchg.org>
mm: page_alloc: __GFP_FS lockdep annotation for direct compaction
Johannes Weiner <hannes@cmpxchg.org>
mm: mempolicy: fix automatic numa balancing for shmem
Guopeng Zhang <zhangguopeng@kylinos.cn>
mm: memcontrol: update state_local when flushing NMI stats
Guopeng Zhang <zhangguopeng@kylinos.cn>
mm: memcg: stop reclaim when a limit update is superseded
Guopeng Zhang <zhangguopeng@kylinos.cn>
mm: memcg-v1: fix memsw and TCP failcnt accounting
Guopeng Zhang <zhangguopeng@kylinos.cn>
mm: memcg-v1: fix wrong linux-mm list address in deprecation warnings
Johannes Weiner <hannes@cmpxchg.org>
mm: compaction: support non-movable compaction for pageblock requests
Hao Jia <jiahao1@lixiang.com>
mm/zswap: fix global shrinker when memory cgroup is disabled
Breno Leitao <leitao@debian.org>
mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()
Artem Lytkin <iprintercanon@gmail.com>
mm/vmalloc: make vm_struct.nr_pages an unsigned long
Shengming Hu <hu.shengming@zte.com.cn>
mm/slub: prevent pfmemalloc objects from entering the barn
Li Xiasong <lixiasong1@huawei.com>
mm/slub: fix missing debugfs entries for caches created before sysfs init
Dev Jain <dev.jain@arm.com>
mm/rmap: use huge_ptep_get() in try_to_migrate_one()
Dev Jain <dev.jain@arm.com>
mm/rmap: use huge_ptep_get() in try_to_unmap_one()
Hyunwoo Kim <imv4bel@gmail.com>
mm/pagewalk: fix stale walk->action escaping walk_pmd_range()
Dev Jain <dev.jain@arm.com>
mm/page_vma_mapped: use huge_ptep_get() for hugetlb
Ye Liu <ye.liu@linux.dev>
mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()
Alexander Graf <graf@amazon.com>
mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn
Arvind Yadav <arvind.yadav@intel.com>
mm/migrate_device: clear stale mapping after freeing swapcache
Dev Jain <dev.jain@arm.com>
mm/migrate: use huge_ptep_get() in remove_migration_pte()
Breno Leitao <leitao@debian.org>
mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()
Kairui Song <kasong@tencent.com>
mm/mglru: fix and remove redundant unevictable folio handling
Usama Arif <usama.arif@linux.dev>
mm/mempolicy: skip non-present PMDs when queueing folios
Usama Arif <usama.arif@linux.dev>
mm/madvise: skip device-private PMDs in cold and pageout walks
Breno Leitao <leitao@debian.org>
mm/kmemleak: avoid soft lockup when scanning task stacks
Muchun Song <muchun.song@linux.dev>
mm/hugetlb_vmemmap: fix __hugetlb_vmemmap_optimize_folios()
Muchun Song <muchun.song@linux.dev>
mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier
Muchun Song <muchun.song@linux.dev>
mm/hugetlb: fix boot panic with CONFIG_DEBUG_VM and HVO bootmem pages
Zi Yan <ziy@nvidia.com>
mm/huge_memory: use folio's memcg inside __folio_split()
Usama Arif <usama.arif@linux.dev>
mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd
David Hildenbrand (Arm) <david@kernel.org>
mm/gup: fix always draining LRU caches in collect_longterm_unpinnable_folios()
Breno Leitao <leitao@debian.org>
mm, swap: ratelimit bad swap entry reports
Youngjun Park <youngjun.park@lge.com>
mm, swap: don't free a hibernation slot that is in the swap cache
Jordan R Abrahams-Whitehead <ajordanr@google.com>
include/linux/list.h: mark list_add and __list_add as __always_inline
Hyunwoo Kim <imv4bel@gmail.com>
apparmor: fix out-of-bounds write when null terminating a label vec
Jann Horn <jannh@google.com>
apparmor: fix cred UAF caused by begin_current_label_crit_section()
Chengfeng Ye <nicoyip.dev@gmail.com>
KEYS: trusted: Fix TPM teardown ordering
Miguel Ojeda <ojeda@kernel.org>
kbuild: rust: keep Rust objects out of Clang LTO with inline helpers
Miguel Ojeda <ojeda@kernel.org>
kbuild: rust: preserve unreachable traps with inline helpers
Gary Guo <gary@garyguo.net>
rust: cfi: disable function merging if CFI is enabled
Younes Akhouayri <git@younes.io>
rust: num: restrict bool conversion to unsigned Bounded
Miguel Ojeda <ojeda@kernel.org>
objtool/rust: add one more `noreturn` Rust function
Nikolai Grlica <nikolai@nikolaigrlica.dev>
rust: kernel: list: fix incorrect pop_back example comment
Miguel Ojeda <ojeda@kernel.org>
rust: kbuild: disambiguate `zerocopy_derive` for `rusttest`
Danilo Krummrich <dakr@kernel.org>
rust: devres: ensure revocation is complete before device finishes unbinding
Danilo Krummrich <dakr@kernel.org>
rust: devres: fix race between concurrent revokers
Younes Akhouayri <git@younes.io>
rust: dma: return zero for Coherent reads past EOF
Miguel Ojeda <ojeda@kernel.org>
rust: rust_is_available: warn for `bindgen` < 0.72.1 && libclang >= 22
FUJITA Tomonori <fujita.tomonori@gmail.com>
rust: bug: prevent dead_code warning from warn_on!'s flags constant
FUJITA Tomonori <fujita.tomonori@gmail.com>
rust: bug: fix warn_on macro build error on UML
FUJITA Tomonori <fujita.tomonori@gmail.com>
rust: bug: skip arch-specific asm in `testlib` builds
Antoni Boucher <bouanto@zoho.com>
rust: kbuild: disambiguate `zerocopy` for `rusttest`
Miguel Ojeda <ojeda@kernel.org>
objtool/rust: add one more `noreturn` Rust function for Rust 1.99.0
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
timers/itimer: Zero-init old itimerval before copy to userspace
Ke Sun <sunke@kylinos.cn>
rust: fmt: fix {:p} printing stack addresses
Gaurav Batra <gbatra@linux.ibm.com>
powerpc/pseries/iommu: switch to Default DMA window during kdump
Chen Linxuan <me@black-desk.cn>
pidfd: hold exec_update_lock around namespace ioctl
Vivek Parikh <vivek.parikh@breachx.ai>
ovl: fix double end_creating() on the casefold-mismatch path
Baokun Li <libaokun@linux.alibaba.com>
fs: fix user path of nested backing files
Felix Yan <felixonmars@archlinux.org>
clocksource/drivers/timer-sun4i: Advertise a real minimum delta
WenTao Liang <vulab@iscas.ac.cn>
clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path
Matt Turner <mattst88@gmail.com>
alpha: don't leak hardware-fabricated FP exception bits to user space
FUJITA Tomonori <fujita.tomonori@gmail.com>
rust: time: fix as_micros_ceil() rounding near i64::MAX
Christoph Hellwig <hch@lst.de>
iomap: don't free integrity payload that doesn't exist
Matt Turner <mattst88@gmail.com>
alpha: fix ieee_swcr_to_fpcr setting FPCR_DNOD unconditionally
Fangzhi Zuo <jerry.zuo@amd.com>
drm/amd/display: Prune per-tile Timing from Apple Studio Display Primary Tile
Jerry Zuo <jerry.zuo@amd.com>
drm/amd/display: hide Apple Studio Display secondary tile
Vincent Donnefort <vdonnefort@google.com>
ring-buffer: Fix subbuf resize race with ring buffer readers
Boris Burkov <boris@bur.io>
btrfs: write-protect folios during data writeback
Jon Hunter <jonathanh@nvidia.com>
ASoC: tegra: Sort MBDRC register defaults
Jon Hunter <jonathanh@nvidia.com>
ASoC: tegra: Sort ADMAIF register defaults
Jon Hunter <jonathanh@nvidia.com>
ASoC: tegra: Fix the MIXER enable default value
Jon Hunter <jonathanh@nvidia.com>
ASoC: tegra: Fix the I2S enable default value
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: tegra210_mixer: sort the register default table
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: tegra210_i2s: sort the Tegra264 register default table
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: tegra210_i2s: sort the register default table
Fangzhi Zuo <Jerry.Zuo@amd.com>
drm/amd/display: Skip Update HDCP Config In Transition State
-------------
Diffstat:
Documentation/ABI/testing/sysfs-bus-nvdimm | 3 +-
Documentation/admin-guide/blockdev/zoned_loop.rst | 9 +-
Makefile | 17 +-
arch/alpha/include/uapi/asm/fpu.h | 8 +-
arch/alpha/kernel/pci-sysfs.c | 6 +-
arch/alpha/kernel/sys_marvel.c | 25 +-
arch/alpha/kernel/traps.c | 6 +-
arch/alpha/math-emu/math.c | 88 ++++-
arch/arm/Kconfig | 2 +-
arch/arm64/boot/dts/qcom/kodiak.dtsi | 9 +-
arch/arm64/boot/dts/qcom/sm6115-fxtec-pro1x.dts | 2 +-
arch/arm64/boot/dts/qcom/x1-dell-thena.dtsi | 2 +
arch/arm64/boot/dts/rockchip/px30-cobra.dtsi | 2 +-
arch/arm64/boot/dts/rockchip/px30-pp1516.dtsi | 2 +-
arch/arm64/boot/dts/rockchip/px30-ringneck.dtsi | 2 +-
.../boot/dts/rockchip/rk3399-pinephone-pro.dts | 18 -
.../arm64/boot/dts/rockchip/rk3399-roc-pc-plus.dts | 12 +
arch/arm64/boot/dts/rockchip/rk3588s-roc-pc.dts | 23 +-
arch/arm64/kernel/compat_alignment.c | 4 +-
arch/arm64/kernel/proton-pack.c | 9 +-
arch/arm64/kvm/vgic/vgic-v2.c | 3 +-
arch/openrisc/kernel/entry.S | 43 ++-
arch/powerpc/kernel/pci-common.c | 9 +-
arch/powerpc/platforms/powermac/low_i2c.c | 2 +-
arch/powerpc/platforms/pseries/iommu.c | 23 +-
arch/riscv/boot/dts/spacemit/k1-bananapi-f3.dts | 4 +-
arch/riscv/boot/dts/spacemit/k1-milkv-jupiter.dts | 4 +-
arch/riscv/boot/dts/spacemit/k1-musepi-pro.dts | 4 +-
arch/riscv/boot/dts/spacemit/k1-orangepi-r2s.dts | 4 +-
arch/riscv/boot/dts/spacemit/k1-orangepi-rv2.dts | 4 +-
arch/riscv/include/asm/acpi.h | 19 +
arch/riscv/kernel/unaligned_access_speed.c | 19 +-
arch/riscv/kvm/vcpu_pmu.c | 14 +-
arch/s390/include/asm/percpu.h | 4 +-
arch/s390/kernel/perf_cpum_cf.c | 221 ++++++++----
arch/x86/coco/tdx/tdx.c | 10 +-
arch/x86/include/asm/barrier.h | 2 +-
arch/x86/include/asm/insn-eval.h | 36 ++
arch/x86/kvm/emulate.c | 26 +-
arch/x86/net/bpf_jit_comp.c | 2 +-
block/bio.c | 56 ++-
block/blk-map.c | 2 +-
block/fops.c | 2 +-
block/genhd.c | 1 +
drivers/accel/rocket/rocket_job.c | 32 +-
drivers/acpi/acpi_platform.c | 45 ++-
drivers/acpi/acpi_tad.c | 46 ++-
drivers/acpi/apei/erst.c | 2 +-
drivers/acpi/apei/ghes.c | 52 ++-
drivers/acpi/cppc_acpi.c | 24 +-
drivers/acpi/pfr_update.c | 45 +--
drivers/ata/libata-scsi.c | 28 +-
drivers/auxdisplay/charlcd.c | 21 +-
drivers/base/arch_numa.c | 12 +
drivers/base/power/main.c | 1 +
drivers/base/property.c | 19 +-
drivers/block/zloop.c | 3 +-
drivers/block/zram/backend_deflate.c | 10 +-
drivers/block/zram/zram_drv.c | 14 +-
drivers/bluetooth/btrtl.c | 13 -
drivers/bluetooth/btusb.c | 14 +
drivers/bluetooth/hci_bcm.c | 1 +
drivers/bluetooth/hci_bcm4377.c | 1 +
drivers/bluetooth/hci_h5.c | 4 +-
drivers/bluetooth/hci_intel.c | 1 +
drivers/bluetooth/hci_ldisc.c | 2 +-
drivers/bluetooth/hci_serdev.c | 2 +-
drivers/cdx/cdx.c | 7 +-
drivers/char/hw_random/stm32-rng.c | 10 +-
drivers/char/ipmi/ipmb_dev_int.c | 5 +-
drivers/char/ipmi/ipmi_msghandler.c | 4 +
drivers/char/tpm/tpm_i2c_nuvoton.c | 6 +-
drivers/clocksource/timer-nxp-pit.c | 4 +-
drivers/clocksource/timer-sun4i.c | 2 +-
drivers/cpufreq/apple-soc-cpufreq.c | 36 +-
drivers/cpufreq/cppc_cpufreq.c | 2 +-
drivers/crypto/atmel-ecc.c | 46 +--
drivers/crypto/intel/iaa/iaa_crypto_main.c | 27 +-
drivers/cxl/core/features.c | 8 +-
drivers/cxl/core/mbox.c | 8 -
drivers/cxl/core/mce.c | 27 +-
drivers/cxl/core/pmem.c | 10 +-
drivers/cxl/core/ras.c | 1 -
drivers/cxl/core/ras_rch.c | 27 +-
drivers/cxl/core/region.c | 43 +--
drivers/cxl/cxl.h | 11 +-
drivers/cxl/cxlmem.h | 2 -
drivers/cxl/pci.c | 1 -
drivers/cxl/pmem.c | 2 +-
drivers/fpga/altera-cvp.c | 10 +-
drivers/fpga/stratix10-soc.c | 21 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 79 ++++
.../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c | 28 +-
.../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 11 +
drivers/gpu/drm/amd/display/dc/dc_types.h | 1 +
drivers/gpu/drm/nouveau/nouveau_gem.c | 11 +-
drivers/hid/hid-apple.c | 18 +-
drivers/hid/hid-corsair-void.c | 17 +
drivers/hid/hid-mcp2221.c | 17 +-
drivers/hid/hid-picolcd_debugfs.c | 9 +
drivers/hid/hid-roccat.c | 13 +-
drivers/hid/hid-sensor-custom.c | 9 +-
drivers/hid/hid-sensor-hub.c | 46 ++-
drivers/hid/hid-sony.c | 4 +-
drivers/hid/hid-universal-pidff.c | 4 +-
.../intel-thc-hid/intel-quicki2c/pci-quicki2c.c | 1 +
.../intel-thc-hid/intel-quickspi/pci-quickspi.c | 10 +-
.../intel-thc-hid/intel-quickspi/quickspi-dev.h | 1 +
.../intel-thc-hid/intel-quickspi/quickspi-hid.c | 2 +-
.../intel-quickspi/quickspi-protocol.c | 19 +-
.../intel-quickspi/quickspi-protocol.h | 2 +-
drivers/hsi/controllers/omap_ssi_core.c | 6 +
drivers/hwmon/max6621.c | 8 +-
.../hwtracing/coresight/coresight-etm3x-sysfs.c | 15 +-
drivers/hwtracing/ptt/hisi_ptt.c | 20 +-
drivers/i2c/busses/i2c-mxs.c | 5 +-
drivers/i3c/device.c | 2 +-
drivers/i3c/internals.h | 5 +
drivers/i3c/master.c | 18 +-
drivers/i3c/master/adi-i3c-master.c | 15 +-
drivers/i3c/master/renesas-i3c.c | 142 +++++---
drivers/i3c/master/svc-i3c-master.c | 10 +-
drivers/infiniband/core/ib_core_uverbs.c | 3 +
drivers/infiniband/core/ucma.c | 14 +-
drivers/infiniband/core/uverbs_main.c | 1 +
drivers/infiniband/core/uverbs_std_types_mr.c | 6 +-
drivers/infiniband/hw/cxgb4/device.c | 6 +
drivers/infiniband/hw/ionic/ionic_hw_stats.c | 95 +++--
drivers/infiniband/hw/ionic/ionic_ibdev.h | 11 +-
drivers/infiniband/hw/ionic/ionic_lif_cfg.c | 2 +-
drivers/interconnect/core.c | 7 +-
drivers/iommu/amd/ppr.c | 3 +-
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c | 24 +-
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 65 +++-
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 3 +
drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c | 8 +-
drivers/iommu/generic_pt/iommu_pt.h | 2 +-
drivers/iommu/intel/dmar.c | 15 +-
drivers/iommu/intel/iommu.c | 8 +-
drivers/iommu/intel/iommu.h | 2 +
drivers/iommu/iommu-sva.c | 2 +-
drivers/iommu/iommu.c | 2 +-
drivers/iommu/iommufd/device.c | 4 +-
drivers/iommu/iommufd/ioas.c | 2 +
drivers/iommu/iommufd/selftest.c | 31 +-
drivers/iommu/msm_iommu.c | 10 +-
drivers/mailbox/qcom-ipcc.c | 17 +-
drivers/md/dm-bufio.c | 10 +-
drivers/md/dm-era-target.c | 5 +
drivers/md/dm-integrity.c | 32 +-
drivers/md/dm-io.c | 96 +++--
drivers/md/dm-kcopyd.c | 10 +-
drivers/md/dm-log-userspace-base.c | 1 +
drivers/md/dm-log.c | 4 +-
drivers/md/dm-pcache/cache.c | 18 +
drivers/md/dm-pcache/cache.h | 21 ++
drivers/md/dm-pcache/cache_dev.c | 22 +-
drivers/md/dm-pcache/cache_gc.c | 10 +-
drivers/md/dm-pcache/cache_key.c | 32 +-
drivers/md/dm-pcache/cache_segment.c | 12 +-
drivers/md/dm-pcache/cache_writeback.c | 10 +-
drivers/md/dm-pcache/dm_pcache.c | 4 +-
drivers/md/dm-raid1.c | 26 +-
drivers/md/dm-snap-persistent.c | 4 +-
drivers/md/dm-stats.c | 6 +-
drivers/md/dm-switch.c | 2 +-
drivers/md/dm-verity-target.c | 2 +-
drivers/md/dm-writecache.c | 14 +-
drivers/md/md.c | 7 +
drivers/md/persistent-data/dm-array.c | 53 ++-
drivers/md/raid10.c | 2 +-
drivers/media/cec/platform/stm32/stm32-cec.c | 3 +-
drivers/media/test-drivers/vicodec/vicodec-core.c | 4 +-
drivers/media/v4l2-core/v4l2-dev.c | 14 +-
drivers/mfd/cgbc-core.c | 4 +-
drivers/mfd/qnap-mcu.c | 13 +-
drivers/mfd/sm501.c | 2 +
drivers/misc/nsm.c | 2 +-
drivers/mmc/host/via-sdmmc.c | 12 +-
drivers/net/dsa/realtek/rtl83xx.c | 4 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 3 +
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 17 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_gso.c | 4 +-
drivers/net/ethernet/ibm/emac/mal.c | 13 +-
drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 5 +
drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
drivers/net/ethernet/qlogic/qede/qede.h | 8 +-
drivers/net/ethernet/qlogic/qede/qede_fp.c | 1 +
drivers/net/ethernet/renesas/ravb.h | 3 +
drivers/net/ethernet/renesas/ravb_main.c | 9 +-
drivers/net/ethernet/renesas/ravb_ptp.c | 44 ++-
drivers/net/ipa/ipa_modem.c | 18 +-
drivers/net/ntb_netdev.c | 38 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/slip/slip.c | 11 +-
drivers/net/thunderbolt/main.c | 12 +
drivers/net/tun.c | 21 +-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/ath/ath6kl/cfg80211.c | 5 +
.../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 3 +-
drivers/net/wireless/intel/iwlwifi/dvm/main.c | 4 +-
drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 12 +
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 5 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 11 +-
drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 1 +
drivers/net/wireless/mediatek/mt76/mt7925/main.c | 12 +-
drivers/net/wireless/mediatek/mt76/mt7925/pci.c | 2 +
drivers/net/wireless/mediatek/mt76/mt7925/usb.c | 1 +
drivers/net/wireless/mediatek/mt76/mt7996/eeprom.c | 6 +
drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 26 +-
drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 9 +-
drivers/net/wireless/realtek/rtl818x/rtl8180/dev.c | 2 +-
drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c | 2 +-
drivers/net/wireless/realtek/rtl8xxxu/core.c | 19 +-
.../net/wireless/realtek/rtlwifi/rtl8192du/sw.c | 12 +-
.../net/wireless/realtek/rtlwifi/rtl8192du/trx.c | 3 +-
drivers/net/wireless/realtek/rtw88/pci.c | 4 +-
drivers/net/wireless/realtek/rtw88/tx.c | 1 +
drivers/net/wireless/realtek/rtw89/core.h | 1 +
drivers/net/wireless/realtek/rtw89/mac80211.c | 3 +-
drivers/net/wireless/realtek/rtw89/pci.c | 13 +
drivers/net/wireless/realtek/rtw89/pci.h | 1 +
drivers/net/wireless/realtek/rtw89/rtw8851be.c | 1 +
drivers/net/wireless/realtek/rtw89/rtw8852ae.c | 1 +
drivers/net/wireless/realtek/rtw89/rtw8852be.c | 1 +
drivers/net/wireless/realtek/rtw89/rtw8852bte.c | 1 +
drivers/net/wireless/realtek/rtw89/rtw8852ce.c | 1 +
drivers/net/wireless/realtek/rtw89/rtw8922ae.c | 1 +
drivers/net/wireless/realtek/rtw89/rtw8922de.c | 1 +
drivers/ntb/ntb_transport.c | 38 +-
drivers/nvdimm/label.c | 2 +-
drivers/nvme/host/core.c | 2 +-
drivers/nvme/host/fc.c | 2 +-
drivers/nvme/host/pci.c | 1 +
drivers/nvme/host/tcp.c | 45 ++-
drivers/of/base.c | 2 +-
drivers/pci/controller/dwc/pci-meson.c | 2 +-
drivers/pci/controller/pci-hyperv.c | 1 +
drivers/pci/controller/plda/pcie-plda-host.c | 52 ++-
drivers/pci/controller/plda/pcie-starfive.c | 13 +-
drivers/pci/msi/msi.c | 10 +
drivers/pci/pci-sysfs.c | 42 ++-
drivers/pci/pcie/aer.c | 29 +-
drivers/pci/pcie/portdrv.c | 2 +-
drivers/pci/proc.c | 16 +-
drivers/pci/quirks.c | 9 +-
drivers/phy/freescale/phy-fsl-imx8mq-usb.c | 21 +-
drivers/phy/rockchip/phy-rockchip-samsung-dcphy.c | 2 +-
drivers/platform/chrome/cros_ec_sensorhub_ring.c | 19 +-
drivers/platform/x86/amd/pmc/mp1_stb.c | 66 ++--
drivers/platform/x86/amd/pmc/pmc.c | 6 +-
.../x86/dell/dell-wmi-sysman/biosattr-interface.c | 1 -
drivers/platform/x86/hp/hp-bioscfg/bioscfg.c | 18 +-
drivers/platform/x86/hp/hp-bioscfg/bioscfg.h | 8 +
.../platform/x86/hp/hp-bioscfg/enum-attributes.c | 15 +-
.../platform/x86/hp/hp-bioscfg/int-attributes.c | 6 +-
.../x86/hp/hp-bioscfg/order-list-attributes.c | 14 +-
.../x86/hp/hp-bioscfg/passwdobj-attributes.c | 14 +-
.../platform/x86/hp/hp-bioscfg/spmobj-attributes.c | 4 +-
.../platform/x86/hp/hp-bioscfg/string-attributes.c | 6 +-
drivers/platform/x86/hp/hp-wmi.c | 4 +
drivers/platform/x86/intel/int1092/intel_sar.c | 32 +-
drivers/platform/x86/intel/ishtp_eclite.c | 5 +-
.../x86/intel/speed_select_if/isst_tpmi_core.c | 80 ++++-
drivers/platform/x86/lenovo/think-lmi.c | 19 +-
drivers/platform/x86/lenovo/ymc.c | 8 +-
drivers/platform/x86/panasonic-laptop.c | 11 +-
drivers/power/supply/bq24257_charger.c | 16 +-
drivers/power/supply/bq256xx_charger.c | 29 +-
drivers/power/supply/bq25890_charger.c | 12 +
drivers/power/supply/charger-manager.c | 54 ++-
drivers/power/supply/cros_usbpd-charger.c | 17 +-
drivers/power/supply/lp8727_charger.c | 4 +-
drivers/power/supply/lp8788-charger.c | 2 +-
drivers/power/supply/max17040_battery.c | 32 +-
drivers/power/supply/pf1550-charger.c | 2 +-
drivers/power/supply/qcom_battmgr.c | 9 +-
drivers/power/supply/rt9455_charger.c | 21 +-
drivers/power/supply/twl4030_charger.c | 12 +-
drivers/power/supply/ucs1002_power.c | 6 +-
drivers/ptp/ptp_vmclock.c | 6 +
drivers/rapidio/devices/rio_mport_cdev.c | 10 +-
drivers/regulator/as3722-regulator.c | 1 -
drivers/regulator/max8998.c | 1 -
drivers/regulator/qcom-refgen-regulator.c | 4 +-
drivers/remoteproc/mtk_scp.c | 9 +-
drivers/rpmsg/qcom_glink_smem.c | 7 +
drivers/s390/block/dasd.c | 6 +-
drivers/s390/block/dasd_eckd.c | 40 ++-
drivers/s390/block/dasd_erp.c | 3 +
drivers/scsi/fnic/fip.c | 2 +-
drivers/scsi/scsi_lib.c | 2 +
drivers/staging/greybus/hid.c | 2 +-
drivers/staging/media/ipu7/ipu7-isys.c | 1 +
drivers/staging/media/tegra-video/vi.c | 9 +-
drivers/staging/media/tegra-video/vip.c | 10 +-
drivers/tty/serial/imx.c | 20 +-
drivers/usb/dwc2/gadget.c | 11 +-
drivers/usb/dwc3/gadget.c | 1 +
drivers/usb/gadget/function/f_fs.c | 14 +-
drivers/usb/gadget/function/f_midi2.c | 2 +
drivers/usb/gadget/function/f_tcm.c | 23 +-
drivers/usb/gadget/function/f_uvc.c | 7 +-
drivers/usb/gadget/function/u_audio.c | 24 +-
drivers/usb/gadget/function/uvc_video.c | 2 +-
drivers/usb/gadget/udc/at91_udc.c | 20 +-
drivers/usb/gadget/udc/snps_udc_plat.c | 5 +-
drivers/usb/phy/phy-fsl-usb.c | 52 +--
drivers/usb/phy/phy-fsl-usb.h | 6 +-
drivers/usb/typec/altmodes/thunderbolt.c | 2 +
drivers/usb/typec/hd3ss3220.c | 2 +-
drivers/usb/typec/tcpm/tcpci.c | 12 +-
drivers/usb/typec/ucsi/ucsi.c | 3 +-
drivers/video/backlight/aw99706.c | 10 +-
.../fbdev/omap2/omapfb/displays/panel-dsi-cm.c | 4 +-
drivers/video/fbdev/pvr2fb.c | 4 +-
drivers/video/fbdev/ssd1307fb.c | 72 +++-
drivers/video/fbdev/uvesafb.c | 2 +
drivers/video/sticore.c | 22 +-
drivers/w1/slaves/w1_ds28e17.c | 8 +
drivers/xen/balloon.c | 29 +-
fs/backing-file.c | 2 +-
fs/btrfs/direct-io.c | 19 +-
fs/btrfs/extent_io.c | 31 ++
fs/btrfs/extent_io.h | 5 +
fs/btrfs/inode.c | 23 +-
fs/btrfs/ioctl.c | 23 +-
fs/btrfs/relocation.c | 31 +-
fs/buffer.c | 3 +
fs/ceph/addr.c | 11 +
fs/ceph/caps.c | 74 +++-
fs/ceph/dir.c | 10 +-
fs/ceph/export.c | 26 +-
fs/ceph/mds_client.c | 73 +++-
fs/ceph/mds_client.h | 1 +
fs/ceph/mdsmap.c | 11 +-
fs/ceph/super.h | 14 +
fs/ceph/xattr.c | 1 +
fs/debugfs/file.c | 3 +-
fs/ecryptfs/crypto.c | 2 +-
fs/ecryptfs/ecryptfs_kernel.h | 3 +-
fs/ecryptfs/keystore.c | 45 ++-
fs/ecryptfs/messaging.c | 11 +-
fs/ecryptfs/miscdev.c | 5 +-
fs/ecryptfs/super.c | 7 +
fs/efivarfs/super.c | 30 +-
fs/erofs/zutil.c | 2 +
fs/ext2/inode.c | 7 +-
fs/ext2/xattr.c | 4 +-
fs/fat/misc.c | 4 +
fs/fuse/dev.c | 8 +-
fs/fuse/dev.h | 2 +-
fs/fuse/dev_uring.c | 38 +-
fs/fuse/dev_uring_i.h | 5 +
fs/fuse/inode.c | 4 +-
fs/iomap/bio.c | 2 +-
fs/iomap/direct-io.c | 1 +
fs/jbd2/checkpoint.c | 28 +-
fs/lockd/clntproc.c | 3 +
fs/lockd/lockd.h | 2 +-
fs/lockd/svc.c | 4 +-
fs/lockd/svc4proc.c | 7 +-
fs/lockd/svcproc.c | 4 +-
fs/lockd/svcsubs.c | 107 ++++--
fs/nfs/callback.c | 4 +-
fs/nfs/nfs4client.c | 17 +-
fs/nfs/pnfs.c | 3 +-
fs/nfs_common/nfslocalio.c | 16 +-
fs/nfsd/filecache.c | 143 ++++----
fs/nfsd/flexfilelayoutxdr.c | 20 +-
fs/nfsd/localio.c | 8 +-
fs/nfsd/lockd.c | 6 +-
fs/nfsd/netns.h | 35 +-
fs/nfsd/nfs2acl.c | 52 +--
fs/nfsd/nfs3acl.c | 17 +-
fs/nfsd/nfs3proc.c | 40 +++
fs/nfsd/nfs4callback.c | 113 +++++-
fs/nfsd/nfs4layouts.c | 39 +-
fs/nfsd/nfs4proc.c | 225 ++++++++----
fs/nfsd/nfs4recover.c | 48 ++-
fs/nfsd/nfs4state.c | 399 ++++++++++++++++-----
fs/nfsd/nfs4xdr.c | 40 ++-
fs/nfsd/nfscache.c | 6 +-
fs/nfsd/nfsctl.c | 156 ++++++--
fs/nfsd/nfsfh.c | 12 +-
fs/nfsd/nfsproc.c | 7 +
fs/nfsd/nfssvc.c | 49 ++-
fs/nfsd/nfsxdr.c | 32 +-
fs/nfsd/state.h | 4 +-
fs/nfsd/trace.h | 18 +-
fs/nfsd/vfs.c | 39 +-
fs/nilfs2/bmap.c | 2 +-
fs/nilfs2/bmap.h | 2 +-
fs/nilfs2/btree.c | 39 +-
fs/nilfs2/direct.c | 4 +-
fs/notify/fanotify/fanotify.c | 3 +-
fs/notify/fanotify/fanotify.h | 6 +-
fs/notify/fanotify/fanotify_user.c | 17 +-
fs/notify/inotify/inotify_user.c | 15 +-
fs/ntfs/attrib.c | 24 +-
fs/ntfs/lcnalloc.c | 7 +-
fs/ntfs/runlist.c | 48 +++
fs/ntfs/super.c | 12 +-
fs/ntfs3/frecord.c | 9 +
fs/ntfs3/fslog.c | 34 ++
fs/ocfs2/cluster/heartbeat.c | 150 ++++++--
fs/ocfs2/cluster/nodemanager.c | 6 +
fs/ocfs2/cluster/nodemanager.h | 1 +
fs/ocfs2/dir.c | 47 ++-
fs/ocfs2/dlm/dlmmaster.c | 6 +
fs/ocfs2/dlm/dlmrecovery.c | 9 +
fs/ocfs2/refcounttree.c | 47 ++-
fs/ocfs2/suballoc.c | 2 +-
fs/ocfs2/xattr.c | 5 +-
fs/orangefs/devorangefs-req.c | 1 +
fs/orangefs/orangefs-debugfs.c | 1 +
fs/overlayfs/dir.c | 1 -
fs/pidfs.c | 43 ++-
fs/smb/client/cifsfs.c | 15 +-
fs/smb/client/cifsfs.h | 1 +
fs/smb/client/cifssmb.c | 6 +
fs/smb/client/dfs_cache.c | 33 +-
fs/smb/client/file.c | 1 +
fs/smb/client/inode.c | 56 ++-
fs/smb/client/smb1misc.c | 3 +-
fs/smb/client/smb1ops.c | 2 +-
fs/smb/client/smb1transport.c | 35 +-
fs/smb/client/smb2file.c | 5 +-
fs/smb/client/smb2inode.c | 6 +-
fs/smb/client/smb2ops.c | 9 +-
fs/smb/client/trace.h | 3 +-
fs/smb/server/vfs_cache.c | 2 +-
fs/tracefs/event_inode.c | 7 +-
fs/ubifs/auth.c | 2 +-
fs/udf/inode.c | 2 +-
fs/udf/partition.c | 2 +-
include/linux/bio.h | 2 +-
include/linux/compaction.h | 3 +-
include/linux/dm-io.h | 6 +-
include/linux/entry-common.h | 3 +
include/linux/font.h | 4 +-
include/linux/hugetlb.h | 7 +
include/linux/list.h | 15 +-
include/linux/lockd/bind.h | 12 +-
include/linux/sunrpc/bc_xprt.h | 5 +
include/linux/sunrpc/svc_rdma_pcl.h | 2 +-
include/linux/uio.h | 10 +-
include/linux/usb/tcpci.h | 1 +
include/linux/vmalloc.h | 2 +-
include/net/ip_tunnels.h | 11 +-
include/net/sctp/structs.h | 2 +-
include/uapi/linux/landlock.h | 1 +
io_uring/query.c | 3 +
io_uring/waitid.c | 33 +-
kernel/auditfilter.c | 6 +-
kernel/bpf/bloom_filter.c | 19 +-
kernel/bpf/stackmap.c | 3 +
kernel/dma/contiguous.c | 16 +-
kernel/liveupdate/kexec_handover.c | 2 +-
kernel/module/kallsyms.c | 24 +-
kernel/module/main.c | 14 +-
kernel/params.c | 14 +-
kernel/pid.c | 31 --
kernel/reboot.c | 29 ++
kernel/sched/core.c | 49 ++-
kernel/sched/cpufreq_schedutil.c | 15 +-
kernel/sched/ext/ext.c | 342 +++++++++++++-----
kernel/sched/sched.h | 5 +-
kernel/signal.c | 4 +
kernel/taskstats.c | 3 +-
kernel/time/itimer.c | 2 +-
kernel/time/timekeeping.c | 8 +-
kernel/time/timer.c | 1 +
kernel/trace/ring_buffer.c | 202 +++++++----
kernel/trace/simple_ring_buffer.c | 4 +-
kernel/trace/trace.c | 6 +-
kernel/trace/trace_events.c | 2 +
kernel/trace/trace_events_hist.c | 4 +-
kernel/trace/trace_events_user.c | 3 +
lib/iov_iter.c | 9 +-
lib/ucs2_string.c | 2 +-
lib/xarray.c | 3 +
mm/compaction.c | 98 ++---
mm/gup.c | 10 +-
mm/huge_memory.c | 24 +-
mm/hugetlb.c | 38 +-
mm/hugetlb_vmemmap.c | 23 +-
mm/internal.h | 10 +-
mm/kasan/quarantine.c | 7 +-
mm/kmemleak.c | 77 ++--
mm/madvise.c | 4 +-
mm/memcontrol-v1.c | 6 +-
mm/memcontrol.c | 13 +
mm/mempolicy.c | 29 +-
mm/migrate.c | 8 +-
mm/migrate_device.c | 13 +
mm/mm_init.c | 10 +-
mm/page_alloc.c | 76 +++-
mm/page_owner.c | 10 +-
mm/page_vma_mapped.c | 8 +-
mm/pagewalk.c | 6 +-
mm/rmap.c | 31 +-
mm/slub.c | 80 +++--
mm/sparse-vmemmap.c | 4 +-
mm/swapfile.c | 15 +-
mm/vmalloc.c | 58 ++-
mm/vmscan.c | 40 +--
mm/zsmalloc.c | 11 +-
mm/zswap.c | 13 +-
net/bluetooth/eir.c | 3 +-
net/bluetooth/hci_conn.c | 3 +-
net/bluetooth/hci_core.c | 2 +-
net/bluetooth/hci_event.c | 7 +-
net/bluetooth/hci_sync.c | 2 +
net/bluetooth/iso.c | 8 +
net/bluetooth/rfcomm/core.c | 8 +-
net/ceph/osd_client.c | 30 ++
net/ceph/osdmap.c | 2 +
net/core/skbuff.c | 5 +-
net/core/xdp.c | 4 +-
net/ipv4/ip_tunnel.c | 2 +-
net/ipv4/ipip.c | 2 +-
net/ipv4/ipmr.c | 3 +
net/ipv6/exthdrs.c | 26 +-
net/ipv6/ip6_gre.c | 14 +-
net/ipv6/ip6_input.c | 1 +
net/ipv6/ip6_tunnel.c | 22 +-
net/ipv6/route.c | 2 +-
net/ipv6/seg6_local.c | 9 +
net/ipv6/sit.c | 2 +-
net/iucv/af_iucv.c | 2 +
net/l2tp/l2tp_netlink.c | 16 +-
net/mctp/route.c | 19 +-
net/mpls/af_mpls.c | 2 +
net/mptcp/syncookies.c | 1 +
net/openvswitch/conntrack.c | 128 ++++---
net/openvswitch/conntrack.h | 6 +-
net/openvswitch/datapath.c | 60 ++--
net/openvswitch/datapath.h | 8 +-
net/sched/sch_generic.c | 2 +-
net/sctp/inqueue.c | 7 +-
net/sctp/sm_sideeffect.c | 4 +
net/sctp/stream.c | 48 ++-
net/smc/af_smc.c | 3 +-
net/smc/smc.h | 6 +-
net/smc/smc_core.c | 27 +-
net/smc/smc_llc.c | 122 +++++--
net/smc/smc_rx.c | 11 +-
net/smc/smc_tx.h | 6 +-
net/smc/smc_wr.c | 6 +-
net/sunrpc/auth_gss/auth_gss.c | 6 +-
net/sunrpc/auth_gss/gss_krb5_unseal.c | 3 +
net/sunrpc/auth_gss/gss_krb5_wrap.c | 13 +-
net/sunrpc/auth_gss/gss_rpc_upcall.c | 6 -
net/sunrpc/auth_gss/gss_rpc_upcall.h | 1 -
net/sunrpc/auth_gss/gss_rpc_xdr.c | 15 +-
net/sunrpc/auth_gss/svcauth_gss.c | 8 +-
net/sunrpc/backchannel_rqst.c | 38 +-
net/sunrpc/cache.c | 7 +-
net/sunrpc/clnt.c | 22 +-
net/sunrpc/sunrpc_syms.c | 1 +
net/sunrpc/svc.c | 93 ++++-
net/sunrpc/xdr.c | 2 +-
net/sunrpc/xprtrdma/ib_client.c | 24 +-
net/sunrpc/xprtrdma/svc_rdma_pcl.c | 2 +-
net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 21 +-
net/sunrpc/xprtrdma/svc_rdma_rw.c | 52 ++-
net/sunrpc/xprtrdma/svc_rdma_sendto.c | 47 ++-
net/sunrpc/xprtrdma/svc_rdma_transport.c | 69 +++-
net/sunrpc/xprtsock.c | 12 +-
net/vmw_vsock/virtio_transport.c | 2 +-
rust/Makefile | 6 +-
rust/kernel/bug.rs | 34 +-
rust/kernel/devres.rs | 25 +-
rust/kernel/dma.rs | 6 +-
rust/kernel/fmt.rs | 9 +-
rust/kernel/list.rs | 2 +-
rust/kernel/num/bounded.rs | 31 +-
rust/kernel/time.rs | 17 +-
scripts/Makefile.build | 3 +-
scripts/rust_is_available.sh | 14 +
scripts/rust_is_available_bindgen_libclang_22.h | 5 +
scripts/rust_is_available_test.py | 30 +-
security/apparmor/include/cred.h | 6 +-
security/apparmor/include/label.h | 6 +-
security/apparmor/include/task.h | 15 +-
security/apparmor/task.c | 27 ++
security/keys/trusted-keys/trusted_tpm1.c | 2 +-
security/landlock/errata/abi-1.h | 23 ++
security/landlock/fs.c | 41 ++-
security/smack/smack_lsm.c | 2 +-
sound/core/ump_convert.c | 1 +
sound/drivers/aloop.c | 6 +
sound/drivers/mpu401/mpu401.c | 6 +
sound/drivers/mts64.c | 6 +
sound/drivers/portman2x4.c | 6 +
sound/drivers/serial-u16550.c | 6 +
sound/drivers/virmidi.c | 6 +
sound/hda/codecs/realtek/alc269.c | 7 +-
sound/hda/codecs/realtek/alc662.c | 1 +
sound/hda/core/ext/stream.c | 4 +-
sound/pci/pcxhr/pcxhr.c | 14 +-
sound/soc/amd/yc/acp6x-mach.c | 7 +
sound/soc/codecs/aw88261.c | 6 +-
sound/soc/codecs/aw88261.h | 6 -
sound/soc/tegra/tegra210_admaif.c | 210 +++++++----
sound/soc/tegra/tegra210_i2s.c | 24 +-
sound/soc/tegra/tegra210_i2s.h | 1 +
sound/soc/tegra/tegra210_mbdrc.c | 42 +--
sound/soc/tegra/tegra210_mixer.c | 10 +-
sound/usb/6fire/comm.c | 9 +-
sound/usb/bcd2000/bcd2000.c | 11 +-
sound/usb/fcp.c | 4 +-
tools/include/linux/compiler.h | 2 +-
tools/objtool/check.c | 2 +
tools/sched_ext/include/scx/compat.bpf.h | 12 +-
tools/sched_ext/include/scx/enum_defs.autogen.h | 1 -
tools/sched_ext/include/scx/enums.autogen.bpf.h | 3 -
tools/sched_ext/include/scx/enums.autogen.h | 1 -
tools/sched_ext/scx_qmap.bpf.c | 2 +-
tools/testing/selftests/mm/run_vmtests.sh | 2 +-
621 files changed, 7838 insertions(+), 3129 deletions(-)
^ permalink raw reply [flat|nested] 12+ messages in thread
* [PATCH 7.2 095/713] debugfs: Fix lockdown check for mmap_prepare
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
@ 2026-09-04 4:51 ` Greg Kroah-Hartman
2026-09-04 8:48 ` [PATCH 7.2 000/713] 7.2.4-rc1 review Takeshi Ogasawara
` (9 subsequent siblings)
10 siblings, 0 replies; 12+ messages in thread
From: Greg Kroah-Hartman @ 2026-09-04 4:51 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, Chun-Yi Lee, David Howells,
Lorenzo Stoakes, Andy Shevchenko, Thomas Gleixner,
Rafael J. Wysocki, Matthew Garrett, Danilo Krummrich,
driver-core, linux-kernel, Disha Goel
7.2-stable review patch. If anyone has any objections, please let me know.
------------------
From: Chun-Yi Lee <jlee@suse.com>
commit f81808de37338aac8e167f99bfae647b1b835c70 upstream.
Commit 651fdda8406d ("relay: update relay to use mmap_prepare")
changed the `mmap` file operation to `mmap_prepare` for relayfs, but
the lockdown check in debugfs was not updated accordingly.
This prevents debugfs from being locked down when the kernel is in
integrity mode if a file uses `mmap_prepare` but not `mmap`.
Since the conversion to `mmap_prepare` across the kernel is not yet
complete, update the lockdown check to look for both `mmap` and
`mmap_prepare` to ensure comprehensive coverage.
Fixes: 651fdda8406d ("relay: update relay to use mmap_prepare")
Signed-off-by: Chun-Yi Lee <jlee@suse.com>
Cc: David Howells <dhowells@redhat.com>
Cc: Lorenzo Stoakes <ljs@kernel.org>
Cc: Andy Shevchenko <andy.shevchenko@gmail.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Rafael J. Wysocki <rafael@kernel.org>
Cc: Matthew Garrett <mjg59@srcf.ucam.org>
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: Danilo Krummrich <dakr@kernel.org>
Cc: driver-core@lists.linux.dev
Cc: linux-kernel@vger.kernel.org
Cc: stable@vger.kernel.org
Tested-by: Disha Goel <disgoel@linux.ibm.com>
Reviewed-by: Lorenzo Stoakes <ljs@kernel.org>
Link: https://patch.msgid.link/20260615104750.1000-1-jlee@suse.com
Signed-off-by: Danilo Krummrich <dakr@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
fs/debugfs/file.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
--- a/fs/debugfs/file.c
+++ b/fs/debugfs/file.c
@@ -273,7 +273,8 @@ static int debugfs_locked_down(struct in
(!real_fops ||
(!real_fops->unlocked_ioctl &&
!real_fops->compat_ioctl &&
- !real_fops->mmap)))
+ !real_fops->mmap &&
+ !real_fops->mmap_prepare)))
return 0;
if (security_locked_down(LOCKDOWN_DEBUGFS))
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: [PATCH 7.2 000/713] 7.2.4-rc1 review
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
2026-09-04 4:51 ` [PATCH 7.2 095/713] debugfs: Fix lockdown check for mmap_prepare Greg Kroah-Hartman
@ 2026-09-04 8:48 ` Takeshi Ogasawara
2026-09-04 9:31 ` Ronald Warsow
` (8 subsequent siblings)
10 siblings, 0 replies; 12+ messages in thread
From: Takeshi Ogasawara @ 2026-09-04 8:48 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: stable, patches, linux-kernel, torvalds, akpm, linux, shuah,
patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
Hi Greg
On Fri, Sep 4, 2026 at 2:09 PM Greg Kroah-Hartman
<gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 7.2.4 release.
> There are 713 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sun, 06 Sep 2026 04:56:59 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.4-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
Linux version 7.2.4-rc1 tested.
Build successfully completed.
Boot successfully completed.
No dmesg regressions.
Video output normal.
Sound output normal.
Lenovo ThinkPad X1 Carbon Gen10(Intel i7-1260P(x86_64) arch linux)
[ 0.000000] Linux version 7.2.4-rc1rv-ga5fdedcba898
(takeshi@ThinkPadX1Gen10J0764) (gcc (GCC) 16.2.1 20260810, GNU ld (GNU
Binutils) 2.47) #1 SMP PREEMPT_DYNAMIC Fri Sep 4 17:16:05 JST 2026
Thanks
Tested-by: Takeshi Ogasawara <takeshi.ogasawara@futuring-girl.com>
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: [PATCH 7.2 000/713] 7.2.4-rc1 review
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
2026-09-04 4:51 ` [PATCH 7.2 095/713] debugfs: Fix lockdown check for mmap_prepare Greg Kroah-Hartman
2026-09-04 8:48 ` [PATCH 7.2 000/713] 7.2.4-rc1 review Takeshi Ogasawara
@ 2026-09-04 9:31 ` Ronald Warsow
2026-09-04 12:52 ` Brett A C Sheffield
` (7 subsequent siblings)
10 siblings, 0 replies; 12+ messages in thread
From: Ronald Warsow @ 2026-09-04 9:31 UTC (permalink / raw)
To: Greg Kroah-Hartman, stable
Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee,
conor, hargar, broonie, achill, sr
Hi
kernel build / boot test on x86_64 (Intel).
No regressions here.
Thanks
Tested-by: Ronald Warsow <rwarsow@gmx.de>
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: [PATCH 7.2 000/713] 7.2.4-rc1 review
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
` (2 preceding siblings ...)
2026-09-04 9:31 ` Ronald Warsow
@ 2026-09-04 12:52 ` Brett A C Sheffield
2026-09-04 16:08 ` Markus Reichelt
` (6 subsequent siblings)
10 siblings, 0 replies; 12+ messages in thread
From: Brett A C Sheffield @ 2026-09-04 12:52 UTC (permalink / raw)
To: gregkh
Cc: stable, patches, linux-kernel, torvalds, akpm, linux, shuah,
patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr,
Brett A C Sheffield
# Librecast Test Results
020/020 [ OK ] liblcrq
010/010 [ OK ] libmld
120/120 [ OK ] liblibrecast
CPU/kernel: Linux auntie 7.2.4-rc1-ga5fdedcba898 #2 SMP PREEMPT_DYNAMIC Fri Sep 4 12:50:10 -00 2026 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux
Tested-by: Brett A C Sheffield <bacs@librecast.net>
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: [PATCH 7.2 000/713] 7.2.4-rc1 review
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
` (3 preceding siblings ...)
2026-09-04 12:52 ` Brett A C Sheffield
@ 2026-09-04 16:08 ` Markus Reichelt
2026-09-04 21:08 ` Shuah Khan
` (5 subsequent siblings)
10 siblings, 0 replies; 12+ messages in thread
From: Markus Reichelt @ 2026-09-04 16:08 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: stable, patches, linux-kernel, torvalds, akpm, linux, shuah,
patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
* Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote:
> This is the start of the stable review cycle for the 7.2.4 release.
> There are 713 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sun, 06 Sep 2026 04:56:59 +0000.
> Anything received after that time might be too late.
7.2.4-rc1 compiles on x86_64 (Xeon E5-1620 v2, Slackware64-15.0),
and boots & runs on x86_64 (AMD Ryzen 5 7520U, Slackware64-current).
No regressions observed during boot & my custom tests.
Tested-by: Markus Reichelt <lkt+2023@mareichelt.com>
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: [PATCH 7.2 000/713] 7.2.4-rc1 review
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
` (4 preceding siblings ...)
2026-09-04 16:08 ` Markus Reichelt
@ 2026-09-04 21:08 ` Shuah Khan
2026-09-05 11:45 ` Miguel Ojeda
` (4 subsequent siblings)
10 siblings, 0 replies; 12+ messages in thread
From: Shuah Khan @ 2026-09-04 21:08 UTC (permalink / raw)
To: Greg Kroah-Hartman, stable
Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee,
rwarsow, conor, hargar, broonie, achill, sr, Shuah Khan
On 9/3/26 22:49, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 7.2.4 release.
> There are 713 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sun, 06 Sep 2026 04:56:59 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.4-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
>
Compiled and booted on my test system. No dmesg regressions.
Tested-by: Shuah Khan <skhan@linuxfoundation.org>
thanks,
-- Shuah
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: [PATCH 7.2 000/713] 7.2.4-rc1 review
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
` (5 preceding siblings ...)
2026-09-04 21:08 ` Shuah Khan
@ 2026-09-05 11:45 ` Miguel Ojeda
2026-09-05 13:00 ` Barry K. Nathan
` (3 subsequent siblings)
10 siblings, 0 replies; 12+ messages in thread
From: Miguel Ojeda @ 2026-09-05 11:45 UTC (permalink / raw)
To: gregkh
Cc: achill, akpm, broonie, conor, f.fainelli, hargar, jonathanh,
linux-kernel, linux, lkft-triage, patches, patches, pavel,
rwarsow, shuah, sr, stable, sudipm.mukherjee, torvalds,
Miguel Ojeda
On Fri, 04 Sep 2026 06:49:28 +0200 Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 7.2.4 release.
> There are 713 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sun, 06 Sep 2026 04:56:59 +0000.
> Anything received after that time might be too late.
Boot-tested under QEMU for Rust x86_64, arm64 and riscv64; built-tested
for loongarch64 and arm32:
Tested-by: Miguel Ojeda <ojeda@kernel.org>
Thanks!
Cheers,
Miguel
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: [PATCH 7.2 000/713] 7.2.4-rc1 review
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
` (6 preceding siblings ...)
2026-09-05 11:45 ` Miguel Ojeda
@ 2026-09-05 13:00 ` Barry K. Nathan
2026-09-05 18:07 ` Peter Schneider
` (2 subsequent siblings)
10 siblings, 0 replies; 12+ messages in thread
From: Barry K. Nathan @ 2026-09-05 13:00 UTC (permalink / raw)
To: Greg Kroah-Hartman, stable
Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee,
rwarsow, conor, hargar, broonie, achill, sr
On 9/3/26 9:49 PM, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 7.2.4 release.
> There are 713 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sun, 06 Sep 2026 04:56:59 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.4-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
Tested on 3 amd64 systems (my DIY home NAS, my Lenovo ThinkPad T14 Gen
1, and an Apple MacBook Air 13" 2017). Working well, no regressions
observed.
Tested-by: Barry K. Nathan <barryn@pobox.com>
--
-Barry K. Nathan <barryn@pobox.com>
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: [PATCH 7.2 000/713] 7.2.4-rc1 review
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
` (7 preceding siblings ...)
2026-09-05 13:00 ` Barry K. Nathan
@ 2026-09-05 18:07 ` Peter Schneider
2026-09-05 18:33 ` Ron Economos
2026-09-05 20:27 ` Benjamin Boortz
10 siblings, 0 replies; 12+ messages in thread
From: Peter Schneider @ 2026-09-05 18:07 UTC (permalink / raw)
To: Greg Kroah-Hartman, stable
Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee,
rwarsow, conor, hargar, broonie, achill, sr
Am 04.09.2026 um 06:49 schrieb Greg Kroah-Hartman:
> This is the start of the stable review cycle for the 7.2.4 release.
> There are 713 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
Builds, boots and works on my 2-socket Ivy Bridge Xeon E5-2697v2 server. No dmesg oddities or regressions found.
Tested-by: Peter Schneider <pschneider1968@googlemail.com>
Beste Grüße,
Peter Schneider
--
Climb the mountain not to plant your flag, but to embrace the challenge,
enjoy the air and behold the view. Climb it so you can see the world,
not so the world can see you. -- David McCullough Jr.
OpenPGP: 0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244
Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc
https://keys.mailvelope.com/pks/lookup?op=get&search=pschneider1968@googlemail.com
https://keys.mailvelope.com/pks/lookup?op=get&search=pschneider1968@gmail.com
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: [PATCH 7.2 000/713] 7.2.4-rc1 review
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
` (8 preceding siblings ...)
2026-09-05 18:07 ` Peter Schneider
@ 2026-09-05 18:33 ` Ron Economos
2026-09-05 20:27 ` Benjamin Boortz
10 siblings, 0 replies; 12+ messages in thread
From: Ron Economos @ 2026-09-05 18:33 UTC (permalink / raw)
To: Greg Kroah-Hartman, stable
Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee,
rwarsow, conor, hargar, broonie, achill, sr
On 9/3/26 21:49, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 7.2.4 release.
> There are 713 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sun, 06 Sep 2026 04:56:59 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.4-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
Built and booted successfully on RISC-V RV64 (HiFive Unmatched).
Tested-by: Ron Economos <re@w6rz.net>
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: [PATCH 7.2 000/713] 7.2.4-rc1 review
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
` (9 preceding siblings ...)
2026-09-05 18:33 ` Ron Economos
@ 2026-09-05 20:27 ` Benjamin Boortz
10 siblings, 0 replies; 12+ messages in thread
From: Benjamin Boortz @ 2026-09-05 20:27 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: stable, patches, linux-kernel, torvalds, akpm, linux, shuah,
patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
On Fri, Sep 04, 2026 at 06:49:28AM +0200, Greg Kroah-Hartman wrote:
>This is the start of the stable review cycle for the 7.2.4 release.
>There are 713 patches in this series, all will be posted as a response
>to this one. If anyone has any issues with these being applied, please
>let me know.
Build and boot tested with QEMU for x86_64, i386, arm64, and riscv
across multiple configurations, and boots on AMD Ryzen 7 5800H.
No regressions observed.
Tested-by: Benjamin Boortz <bennib@mailbox.org>
^ permalink raw reply [flat|nested] 12+ messages in thread
end of thread, other threads:[~2026-09-05 20:28 UTC | newest]
Thread overview: 12+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-04 4:49 [PATCH 7.2 000/713] 7.2.4-rc1 review Greg Kroah-Hartman
2026-09-04 4:51 ` [PATCH 7.2 095/713] debugfs: Fix lockdown check for mmap_prepare Greg Kroah-Hartman
2026-09-04 8:48 ` [PATCH 7.2 000/713] 7.2.4-rc1 review Takeshi Ogasawara
2026-09-04 9:31 ` Ronald Warsow
2026-09-04 12:52 ` Brett A C Sheffield
2026-09-04 16:08 ` Markus Reichelt
2026-09-04 21:08 ` Shuah Khan
2026-09-05 11:45 ` Miguel Ojeda
2026-09-05 13:00 ` Barry K. Nathan
2026-09-05 18:07 ` Peter Schneider
2026-09-05 18:33 ` Ron Economos
2026-09-05 20:27 ` Benjamin Boortz
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®