* [PATCH 7.3 000/547] 7.3.2-rc1 review
@ 2026-11-04 21:03 Greg Kroah-Hartman
2026-11-05 0:27 ` Ronald Warsow
2026-11-05 3:08 ` SJ Park
0 siblings, 2 replies; 3+ messages in thread
From: Greg Kroah-Hartman @ 2026-11-04 21:03 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
This is the start of the stable review cycle for the 7.3.2 release.
There are 547 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri, 06 Nov 2026 21:07:23 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.3.2-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.3.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 7.3.2-rc1
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: keep retry timeout clamp bounds constant
Sean Young <sean@mess.org>
media: rc: Fix build failure with CONFIG_LIRC disabled
Alice Ryhl <aliceryhl@google.com>
rust_binder: wake epoll on self-work queued to poll thread
Ian Bridges <icb@fastmail.org>
ksmbd: fix use-after-free after a failed durable reconnect
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: rebind completed CREATE replays without draining the old channel
DaeMyung Kang <charsyam@gmail.com>
ksmbd: fix named stream write and EOF handling
DaeMyung Kang <charsyam@gmail.com>
ksmbd: use the existing xattr name for a named stream
Henry Hu <huhai@kylinos.cn>
ksmbd: fix invalid pointer dereference when get_inode_acl() fails
Ian Bridges <icb@fastmail.org>
ksmbd: fix app-instance non-durable supersede session UAF
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: retry break notifications on another connection
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: track delivery of queued TCP writes
Daijiamu <3058704216@qq.com>
ksmbd: use clear_and_wake_up_bit() directly
Ian Bridges <icb@fastmail.org>
ksmbd: fix out-of-bounds read when padding the final compound response
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
ksmbd: fix SMB2 CREATE response buffer overflow
Cheng Yongkang <teel4res@gmail.com>
io_uring/net: fix multishot recv length limit accounting
Cheng Yongkang <teel4res@gmail.com>
io_uring/timeout: count cancelled timeouts in cq_timeouts
Kyle Zeng <kylebot@openai.com>
io_uring: defer foreign io-wq enqueues to task_work
Chris Mason <mason@kernel.org>
io_uring/sqpoll: don't wait for the thread to exit
Chris Mason <mason@kernel.org>
io_uring: free the task context after a grace period
Chris Mason <mason@kernel.org>
io_uring/bpf-ops: clear bpf_ctx while submitting SQEs
Chris Mason <mason@kernel.org>
io_uring: free XArray nodes left by a failed store
Chris Mason <mason@kernel.org>
io_uring: charge tctx nodes and personalities
Chris Mason <mason@kernel.org>
io_uring/rsrc: charge buffer arrays and nodes to memcg
Josef Bacik <josef@toxicpanda.com>
io_uring/io-wq: no new workers once the exit has begun
Jens Axboe <axboe@kernel.dk>
io_uring: keep the drain active when a deferred drain request is started
Daan De Meyer <daan@amutable.com>
io_uring/net: don't retry a non-blocking connect() that fails with -EAGAIN
Dominik Maier <dmnk@google.com>
io_uring/register: enforce per-task restrictions in io_uring_register_blind()
Dominik Maier <dmnk@google.com>
io_uring/net: mask socket type with SOCK_TYPE_MASK in io_socket_bpf_populate()
Yichong Chen <chenyichong@uniontech.com>
io_uring/net: keep recvmsg buffer select length within MAX_RW_COUNT
Yichong Chen <chenyichong@uniontech.com>
io_uring/kbuf: advance head when a pickup empties the buffer ring
Lizhi Hou <lizhi.hou@amd.com>
accel/amdxdna: Add support for AIE2 revision 9
Derek J. Clark <derekjohn.clark@gmail.com>
HID: hid-lenovo-go-s: Use devm_kzalloc for drvdata
Derek J. Clark <derekjohn.clark@gmail.com>
HID: hid-lenovo-go-s: Move static led_classdev_mc to drvdata struct
Derek J. Clark <derekjohn.clark@gmail.com>
HID: hid-lenovo-go-s: Add kobject_uevent notify during reset-resume
Derek J. Clark <derekjohn.clark@gmail.com>
HID: hid-lenovo-go-s: Reorganize and rename hid_gos_cfg
Derek J. Clark <derekjohn.clark@gmail.com>
HID: hid-lenovo-go-s: Move attribute init to after device query
Derek J. Clark <derekjohn.clark@gmail.com>
HID: hid-lenovo-go-s: Bound stale reply window before reusing send_cmd_complete
Derek J. Clark <derekjohn.clark@gmail.com>
HID: hid-lenovo-go-s: Add suspend function and gate access under bool.
Derek J. Clark <derekjohn.clark@gmail.com>
HID: hid-lenovo-go-s: Use pm_ptr for reset_resume callback
Derek J. Clark <derekjohn.clark@gmail.com>
HID: hid-lenovo-go-s: Return ret instead of 0 in mcu_property_out()
Derek J. Clark <derekjohn.clark@gmail.com>
HID: hid-lenovo-go-s: Prevent deadlock if device removed during setup
Jiale Yao <yaojiale02@163.com>
HID: roccat: savu: reject short special reports
Jiale Yao <yaojiale02@163.com>
HID: roccat: ryos: reject short special reports
Jiale Yao <yaojiale02@163.com>
HID: roccat: pyra: reject short button reports
Jiale Yao <yaojiale02@163.com>
HID: roccat: kovaplus: reject short button reports
Jiale Yao <yaojiale02@163.com>
HID: roccat: konepure: reject short button reports
Jiale Yao <yaojiale02@163.com>
HID: roccat: koneplus: reject short button reports
Jiale Yao <yaojiale02@163.com>
HID: roccat: isku: reject short button reports
Gabor Tanz <gabor.tanz@gmail.com>
HID: quirks: Always poll the Anne Pro 2 with product ID a292
Jiale Yao <yaojiale02@163.com>
HID: pxrc: reject short input reports
Jiale Yao <yaojiale02@163.com>
HID: prodikeys: validate fixed-format MIDI reports
Lorenzo Stoakes (ARM) <ljs@kernel.org>
HID: picoLCD: check for fb_deferred_io_init() error
Jiale Yao <yaojiale02@163.com>
HID: mcp2221: validate response report length
Myeonghun Pak <mhun512@gmail.com>
HID: mcp2221: always initialize and cancel init_work
Jiale Yao <yaojiale02@163.com>
HID: mcp2200: validate READ_ALL response length
Jiale Yao <yaojiale02@163.com>
HID: logitech-dj: validate unnumbered keyboard reports
Jiale Yao <yaojiale02@163.com>
HID: elo: reject short touchscreen reports
Jiale Yao <yaojiale02@163.com>
HID: cp2112: validate response report lengths
Jiale Yao <yaojiale02@163.com>
HID: cougar: reject short special-key reports
Alan Stern <stern@rowland.harvard.edu>
HID: core: Fix out-of-bounds left shift by 32 in s32ton()
Panz Dev <panz.development@gmail.com>
HID: asus: do not send keyboard init reports to touchpads
Basavaraj Natikar <Basavaraj.Natikar@amd.com>
HID: amd_sfh: Use report type from request node
Basavaraj Natikar <Basavaraj.Natikar@amd.com>
HID: amd_sfh: Remove unsupported motion-state field from accelerometer report
Jiale Yao <yaojiale02@163.com>
HID: zydacron: validate key report length
Ahmed Yaseen <yaseen@ghoul.dev>
HID: usbhid: skip interrupt IN polling for devices with no input reports
Amit Machhiwal <amachhiw@linux.ibm.com>
KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form
Amit Machhiwal <amachhiw@linux.ibm.com>
KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users
Sean Christopherson <seanjc@google.com>
KVM: guest_memfd: Establish memslot<=>guest_memfd bindings *after* memslot is ready
Shivank Garg <shivankg@amd.com>
KVM: guest_memfd: take the invalidate lock when unbinding a dying file
Sean Christopherson <seanjc@google.com>
KVM: guest_memfd: Split bind() into prepare()+commit() phases
Xiaoyao Li <xiaoyao.li@intel.com>
KVM: TDX: Enable Bus Lock VM exit
Xiaoyao Li <xiaoyao.li@intel.com>
KVM: TDX: Don't assume exit_reason[31:16] is all-0 in tdx_to_vmx_exit_reason()
Xiaoyao Li <xiaoyao.li@intel.com>
KVM: TDX: Stuff exit_reason with UNDEFINED on wait_for_sept_zap return
Xiaoyao Li <xiaoyao.li@intel.com>
KVM: TDX: Set bits 31:16 to 0 and use UNDEFINED when synthesizing exit reason
Xiaoyao Li <xiaoyao.li@intel.com>
KVM: TDX: Enable Notify VM exit
Xiaoyao Li <xiaoyao.li@intel.com>
KVM: TDX: Check if there is valid exit infos based on vp_enter_ret
Sean Christopherson <seanjc@google.com>
KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak
Chengfeng Ye <nicoyip.dev@gmail.com>
KVM: x86: Take SRCU in kvm_zap_gfn_range()
Loc Nguyen <loc@ryzome.com>
KVM: x86: Request event processing for exception VM-Exits
Sean Christopherson <seanjc@google.com>
KVM: x86: Preserve DR6.BLD (Bus Lock Detect) when delivering #DB payload
Keqiang Duan <duankeqiangcym@gmail.com>
KVM: x86: Clear hardware HLT state when userspace makes a vCPU not-halted
David Woodhouse <dwmw@amazon.co.uk>
KVM: x86/xen: Take kvm->srcu in __kvm_xen_has_interrupt()
David Woodhouse <dwmw@amazon.co.uk>
KVM: x86/xen: Enforce 4-byte alignment of vcpu_info registration
Sean Christopherson <seanjc@google.com>
KVM: x86/mmu: Bug the VM if KVM calcs a CPU role with EFER.LMA=1 && CR4.PAE=0
Sean Christopherson <seanjc@google.com>
KVM: x86/mmu: Bug the VM if KVM attempts to walk more levels than the MMU has
Xiaoyao Li <xiaoyao.li@intel.com>
KVM: VMX: Preserve negative return value in vmx_handle_exit() with bus lock detected
Xiaoyao Li <xiaoyao.li@intel.com>
KVM: VMX: Make handle_bus_lock_vmexit() a shared helper
Sean Christopherson <seanjc@google.com>
KVM: VMX: Formally define KVM's "0xdead" exit reason used for failed VM-Enter
Sean Christopherson <seanjc@google.com>
KVM: VMX: Disallow using to_vmx() in common VT code
Sean Christopherson <seanjc@google.com>
KVM: Use goto to handle errors during memslot preparation
Sean Christopherson <seanjc@google.com>
KVM: nSVM: Ignore EFER.LMA if EFER.LME=0 when preparing L2 state
Sean Christopherson <seanjc@google.com>
KVM: nSVM: Reject KVM_SET_NESTED_STATE if L1 has EFER.LMA=1 && EFER.LME=0
Yosry Ahmed <yosry@kernel.org>
KVM: SVM: Trigger new ASID allocation in both VMCBs on pCPU switch
Sean Christopherson <seanjc@google.com>
KVM: Only bind memslot to guest_memfd instance for CREATE operations
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ALSA: x86: hdmi: fix chmap array missing terminator entry
Mike Rapoport (Microsoft) <rppt@kernel.org>
x86/mm/pat: Fix effective RW computation in lookup_address_in_pgd_attr()
Sean Christopherson <seanjc@google.com>
x86/cpuid: Mark CPUID function 0x23 as being indexed
David Howells <dhowells@redhat.com>
rxrpc: Fix return in rxrpc_recvmsg_data() for service calls
David Howells <dhowells@redhat.com>
rxrpc: Fix double IRQ enablement
David Howells <dhowells@redhat.com>
afs: Fix afs to abort the rxrpc call on send error
David Howells <dhowells@redhat.com>
rxrpc: Fix lack of short-send handling in rxrpc_kernel_send_data()
David Howells <dhowells@redhat.com>
rxrpc: Fix update of call->tx_pending without holding lock
Chuck Lever <cel@kernel.org>
SUNRPC: Treat every TLS error alert as fatal
Ameer Hamza <ameer.hamza@truenas.com>
sunrpc: treat empty auth.unix.gid replies as negative entries
Zhiling Zou <zhilinz@nebusec.ai>
SUNRPC: trace an accepted transport before publishing it
Chuck Lever <cel@kernel.org>
SUNRPC: Resume receiving after a TLS control record
Chuck Lever <cel@kernel.org>
SUNRPC: Reject a TLS alert record that is not two octets
Chuck Lever <cel@kernel.org>
SUNRPC: Reject a socket that already has an svc_sock attached
Chris Mason <clm@meta.com>
sunrpc: pin gss module across auth_domain RCU free
Jeff Layton <jlayton@kernel.org>
SUNRPC: keep the first error in svc_register()
Ameer Hamza <ameer.hamza@truenas.com>
sunrpc: honor the netlink unix_gid NEGATIVE flag
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
SUNRPC: fix oversized GSS proxy token copy
Chuck Lever <cel@kernel.org>
SUNRPC: Do not credit control-record octets to the RPC stream
Chuck Lever <cel@kernel.org>
SUNRPC: Copy the deferred RPC Call from the head buffer
Aldo Ariel Panzardo <qwe.aldo@gmail.com>
nfsd: zero NFSv4 COMPOUND tag padding
Jeff Layton <jlayton@kernel.org>
NFSD: validate transport name in listener_set before serv creation
Chuck Lever <cel@kernel.org>
NFSD: Set nn->cld_net before registering the cld pipe
Chuck Lever <cel@kernel.org>
NFSD: Return NFSERR_ISDIR for NFSv2 READ and WRITE on a non-regular file
Chuck Lever <cel@kernel.org>
NFSD: Resolve the recall-any mask names in the trace format
Chuck Lever <cel@kernel.org>
NFSD: Reject an oversized principal hash from nfsdcld
Aldo Ariel Panzardo <qwe.aldo@gmail.com>
nfsd: propagate SETXATTR value decode errors
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
nfsd: preflight SEQUENCE replies before accepting a slot
Chuck Lever <cel@kernel.org>
NFSD: Map flex file layout IDs through the request's user namespace
Chuck Lever <cel@kernel.org>
NFSD: map fh_verify() status codes for NFS_ACLv3 replies
NeilBrown <neil@brown.name>
nfsd: honour client-provided attributes for NFS4_CREATE_EXCLUSIVE4_1
Cen Zhang (Microsoft Security FORGE Labs) <blbllhy@gmail.com>
nfsd: hold cl_lock in client_has_openowners()
Chuck Lever <cel@kernel.org>
NFSD: Fix out-of-bounds read in the rpc_status dump
Wentao Liang <vulab@iscas.ac.cn>
nfsd: Fix id-to-name cache entry leak in idtoname_parse()
David Flynn <david.flynn@hammerspace.com>
nfsd: fetch direct I/O alignment for files handed to the filecache
Chuck Lever <cel@kernel.org>
NFSD: Fail a pool_threads read whose reply does not fit
Jeff Layton <jlayton@kernel.org>
nfsd: don't offer flexfiles layouts when NFSv3 isn't being served
Ameer Hamza <ameer.hamza@truenas.com>
nfsd: don't modify a session slot when replaying its cached reply
Chuck Lever <cel@kernel.org>
NFSD: Don't complete a cld upcall the daemon has not read
Chuck Lever <cel@kernel.org>
NFSD: Do not send CB_RECALL_ANY to NFSv4.0 clients
Chuck Lever <cel@kernel.org>
NFSD: Destroy a recalled delegation the client does not hold
Aldo Ariel Panzardo <qwe.aldo@gmail.com>
NFSD: copy SETXATTR data from all XDR buffer segments
Aldo Ariel Panzardo <qwe.aldo@gmail.com>
nfsd: clear XDR padding in GETXATTR replies
Jeff Layton <jlayton@kernel.org>
NFSD: cap the number of listeners accepted in listener_set
Mike Snitzer <snitzer@kernel.org>
NFS/localio: report the stability a DIO WRITE actually has
Mike Snitzer <snitzer@kernel.org>
NFS/localio: fix nfs_local_dio_misaligned tracepoint
Mike Snitzer <snitzer@kernel.org>
NFS/localio: detect a short read or write before the iterator has moved
Jimmy Zuber <jamz@amazon.com>
NFS: Fix stale negative cache on failed nfs_mkdir()
Benjamin Coddington <ben.coddington@hammerspace.com>
NFSv4/flexfiles: Bound page coalescing on the absolute stripe offset
Benjamin Coddington <ben.coddington@hammerspace.com>
NFSv4/flexfiles: Use the full 64-bit stripe_unit
Benjamin Coddington <ben.coddington@hammerspace.com>
NFSv4/flexfiles: Use the full 64-bit offset for read DS selection
Benjamin Coddington <bcodding@hammerspace.com>
NFSv4/flexfiles: fail I/O to the data server once a lock is lost
Benjamin Coddington <ben.coddington@hammerspace.com>
NFSv4/filelayout: Anchor page coalescing on pattern_offset
Benjamin Coddington <ben.coddington@hammerspace.com>
NFSv4.1/pnfs: suspend pNFS on NFS4ERR_TOOSMALL from LAYOUTGET
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in the handling of CB_RECALL_ANY
Benjamin Coddington <ben.coddington@hammerspace.com>
NFSv4/pnfs: Free the netid when draining a data-server address list
Benjamin Coddington <ben.coddington@hammerspace.com>
NFSv4/pnfs: bound the CB_NOTIFY_DEVICEID array count before allocating
Chuck Lever <cel@kernel.org>
pnfs/blocklayout: Complete a device upcall when the pipe is closed
Chuck Lever <cel@kernel.org>
pnfs/blocklayout: Complete a device upcall only on its own reply
Benjamin Coddington <ben.coddington@hammerspace.com>
pNFS: Fix CB_NOTIFY_DEVICEID CHANGE to consume ndc_immediate
Shakeel Butt <shakeel.butt@linux.dev>
kernfs: don't lose IN_DELETE_SELF when decoding a file handle
Daejun Park <daejun7.park@samsung.com>
xfs: map pNFS layouts to the end of the extent again
Abdifatah Suruur <suruurism@gmail.com>
smb: client: validate the data area in SMB2_read()
Ratnaker Gautam <ratnaker.gautam@kuleuven.be>
smb: client: validate SMB1 EA list bounds before parsing
Ratnaker Gautam <ratnaker.gautam@kuleuven.be>
smb: client: validate NT transaction response layout and offsets
Paulo Alcantara <pc@manguebit.org>
smb: client: require stable pages for SMB compression
Abdifatah Suruur <suruurism@gmail.com>
smb: client: reject short SESSION_SETUP responses
Diego Oliva <diego@bynar.io>
smb: client: reject short or out-of-range FIND response parameters
Diego Oliva <diego@bynar.io>
smb: client: reject FIND data areas that run past the received response
Paulo Alcantara <pc@manguebit.org>
smb: client: reclaim credits for decrypted reads with no matching mid
Dominik Maier <dmnk@google.com>
smb: client: fix slab-out-of-bounds write in id_mode_to_cifs_acl()
Diego Oliva <diego@bynar.io>
smb: client: fix OOB read in the SMB_FIND_FILE_UNIX name scan
Diego Oliva <diego@bynar.io>
smb: client: fix OOB read of the resume name sent in TRANS2_FIND_NEXT2
Abdifatah Suruur <suruurism@gmail.com>
smb: client: fix fiemap wild read on empty truncated response
Luxiao Xu <rakukuip@gmail.com>
smb: client: fix buffer overflow in SMB2_tcon()
Paulo Alcantara <pc@manguebit.org>
smb: client: don't resurrect an exiting tcon from cached dir workers
Ratnaker Gautam <ratnaker.gautam@kuleuven.be>
smb: client: bound POSIX lock data area by response length
Stefan Metzmacher <metze@samba.org>
smb: smbdirect: fix buffer length underflow in RDMA transfers
VeroFess <coderzeng@hotmail.com>
smb: server: size directory name conversion buffer correctly
Borislav Petkov (AMD) <bp@alien8.de>
x86/bugs: Adapt SRSO mitigation to Zen6
Darrick J. Wong <djwong@kernel.org>
xfs: reattach dquots after changing inode ids
Darrick J. Wong <djwong@kernel.org>
xfs: range-check bc_levels array access in scrub tracepoints
Darrick J. Wong <djwong@kernel.org>
xfs: propagate errors while checking null siblings
Darrick J. Wong <djwong@kernel.org>
xfs: opportunistically skip btree block checks
Darrick J. Wong <djwong@kernel.org>
xfs: only written file data blocks can be shared
Darrick J. Wong <djwong@kernel.org>
xfs: never reset the default quota timer
Darrick J. Wong <djwong@kernel.org>
xfs: init inode number for tracepoint
Darrick J. Wong <djwong@kernel.org>
xfs: fix data fork block count check in xrep_inode_blockcounts
Darrick J. Wong <djwong@kernel.org>
xfs: fix correction of unwritten extents in quota file data fork
Darrick J. Wong <djwong@kernel.org>
xfs: don't try to scrub self-referential dirent in metapath checker
Darrick J. Wong <djwong@kernel.org>
xfs: don't try to repair rtsummary if the summary file isn't computed
Darrick J. Wong <djwong@kernel.org>
xfs: don't subtract excess usage twice when computing agf_btreeblks
Darrick J. Wong <djwong@kernel.org>
xfs: don't set a metadata directory's parent to sb_rootino
Darrick J. Wong <djwong@kernel.org>
xfs: don't scan across metadata/regular directory trees for dirents
Darrick J. Wong <djwong@kernel.org>
xfs: don't rescan ifree and icount when frozen
Darrick J. Wong <djwong@kernel.org>
xfs: don't queue rmap update twice when reaping a fork
Darrick J. Wong <djwong@kernel.org>
xfs: don't overrun incore inode when cleaning attr forks
Darrick J. Wong <djwong@kernel.org>
xfs: don't clear COWEXTSIZE on directories on reflink filesystems
Darrick J. Wong <djwong@kernel.org>
xfs: don't allow sm_agno for non-group metadir path checking
Darrick J. Wong <djwong@kernel.org>
xfs: complain loudly when dirtree checker finds broken links
Darrick J. Wong <djwong@kernel.org>
xfs: clear set[ug]id mode bits when zapping attr fork
Darrick J. Wong <djwong@kernel.org>
xfs: clarify various parts of the bitmap API
Darrick J. Wong <djwong@kernel.org>
xfs: check for termination during rmap btree walk
Darrick J. Wong <djwong@kernel.org>
xfs: check for fragments when full-extent sharing matches
Aldo Ariel Panzardo <qwe.aldo@gmail.com>
xfs: bound inode fork length against the fork size during log recovery
Aldo Ariel Panzardo <qwe.aldo@gmail.com>
xfs: bound da-node entry count against the correct geometry
Darrick J. Wong <djwong@kernel.org>
xfs: always zero the whole shortform header when zeroing attr fork
Darrick J. Wong <djwong@kernel.org>
xfs: always report scrub errors in tracepoints
Darrick J. Wong <djwong@kernel.org>
xfs: always report inode repair setup failures
Darrick J. Wong <djwong@kernel.org>
xfs: always forget cached ACLs if the attr fork swap succeeds
Darrick J. Wong <djwong@kernel.org>
xfs: abort directory tree repair whenever dl->aborted is set
Darrick J. Wong <djwong@kernel.org>
xfs: update quota flags on secondary supers when metadir enabled
Darrick J. Wong <djwong@kernel.org>
xfs: rescan the AGs if incore delalloc counter is negative
Darrick J. Wong <djwong@kernel.org>
xfs: release ip after unlinked list store failure
Aldo Ariel Panzardo <qwe.aldo@gmail.com>
xfs: reject remote xattr entries with an out-of-range value length
Aldo Ariel Panzardo <qwe.aldo@gmail.com>
xfs: reject out-of-range attribute value lengths in xfs_attr_copy_value
Darrick J. Wong <djwong@kernel.org>
xfs: reject absurdly large xattr value lengths in xchk_xattr_actor
Darrick J. Wong <djwong@kernel.org>
xfs: reduce new btree slack factor if free space is negative
Andrea Parri <parri.andrea@gmail.com>
rtnetlink: wait for RCU readers in rtnl_link_unregister()
Florian Westphal <fw@strlen.de>
netfilter: nft_payload: restrict checksum offsets to known values
Darrick J. Wong <djwong@kernel.org>
xfs: fix xchk_stats_estimate_bufsize to allow for the trailing null
Darrick J. Wong <djwong@kernel.org>
xfs: actually check XFS_DIFLAG2_METADATA for metadata btree data forks
Darrick J. Wong <djwong@kernel.org>
xfs: adjust checks for cross-AG reaping issues
Darrick J. Wong <djwong@kernel.org>
xfs: cross-reference the primary superblock
Darrick J. Wong <djwong@kernel.org>
xfs: jump out of xchk_bmap_check_rmap if fatal signals
Darrick J. Wong <djwong@kernel.org>
xfs: mark overfull dabtree node blocks as corrupt
Darrick J. Wong <djwong@kernel.org>
xfs: check fork type against dabtree block magic number
Darrick J. Wong <djwong@kernel.org>
xfs: abort dirtree repair if the live update hook dies
Darrick J. Wong <djwong@kernel.org>
xfs: fix revalidation of xchk_dquot_iter cached mappings
Darrick J. Wong <djwong@kernel.org>
xfs: bail out of directory tree repairs on error
Darrick J. Wong <djwong@kernel.org>
xfs: assign an owner to scrub_stats_fops
Darrick J. Wong <djwong@kernel.org>
xfs: allow softlimit with no hardlimit in quota scrub
Darrick J. Wong <djwong@kernel.org>
xfs: fix lost errno returned from xfarray_foliosort
Darrick J. Wong <djwong@kernel.org>
xfs: don't repair fs summary counters with garbage
Darrick J. Wong <djwong@kernel.org>
xfs: fix skipped inode mask handling in iscan
Darrick J. Wong <djwong@kernel.org>
xfs: don't proceed with xattr repair if the live update fails
Eric Sandeen <sandeen@redhat.com>
xfs: validate rc_domain in xchk_rtrefcount_mergeable
Darrick J. Wong <djwong@kernel.org>
xfs: don't fix the directory tree if live update fails
Darrick J. Wong <djwong@kernel.org>
xfs: flag excessive delalloc rt extents as corruption
Darrick J. Wong <djwong@kernel.org>
xfs: zero out di_metatype when removing the metadir file iflag
Darrick J. Wong <djwong@kernel.org>
xfs: don't pass iget failures up when marking ondisk inodes
Darrick J. Wong <djwong@kernel.org>
xfs: always reset incore attr fork buffer when resetting fork
Darrick J. Wong <djwong@kernel.org>
xfs: fix inode btree repair when a cluster is larger than a chunk
Darrick J. Wong <djwong@kernel.org>
xfs: actually report corrupt xattrs as XFAIL during cross-referencing
Darrick J. Wong <djwong@kernel.org>
xfs: fix buffer overflow in corrupt inline attr structure
Darrick J. Wong <djwong@kernel.org>
xfs: fix unnecessary dapos truncation in xchk_dir_walk
Darrick J. Wong <djwong@kernel.org>
xfs: actually lock the metafile reservation when adjusting after repair
Darrick J. Wong <djwong@kernel.org>
xfs: avoid cross-rtgroup reaping after a repair
Darrick J. Wong <djwong@kernel.org>
xfs: online quotacheck must dirty dquot if enforcement adjustments needed
Darrick J. Wong <djwong@kernel.org>
xfs: fix buffer overruns in xfs_ioc_attr_list
Darrick J. Wong <djwong@kernel.org>
xfs: fix missing xfs_qm_adjust_dqlimits call in quotacheck repair
Darrick J. Wong <djwong@kernel.org>
xfs: fix xfs_rename_space_res for non-pptr filesystems
Darrick J. Wong <djwong@kernel.org>
xfs: fix ondisk symlink target validation in xrep_dinode_check_dfork
Darrick J. Wong <djwong@kernel.org>
xfs: compute the correct fdblocks/frextents for repair when they're negative
Darrick J. Wong <djwong@kernel.org>
xfs: mark cow extents bad if there's no rmap mapping for them
Darrick J. Wong <djwong@kernel.org>
xfs: clear the symlink zapped flag if inline symlink is ok
Amir Goldstein <amir73il@gmail.com>
ovl: skip copy up of empty security.capability
Chris Mason <mason@kernel.org>
ovl: set the revalidate flags after d_instantiate()
Hungyu Lin <dennylin0707@gmail.com>
ovl: reserve space for the casefolded name terminator
Chris Mason <mason@kernel.org>
ovl: read the nlink xattr of every indexed non-dir
Amir Goldstein <amir73il@gmail.com>
ovl: fortify ovl_copy_xattr() against underlying layer modifications
Amir Goldstein <amir73il@gmail.com>
ovl: fix mount setup failing when override_creds drops CAP_SYS_ADMIN
Chris Mason <mason@kernel.org>
ovl: fix a torn path in ovl_get_redirect()
Chris Mason <mason@kernel.org>
ovl: do not copy up an xattr value that was never read
Chris Mason <mason@kernel.org>
ovl: do not copy up a dentry that was removed
Chris Mason <mason@kernel.org>
ovl: check the casefold flag of directories only
Chris Mason <mason@kernel.org>
ovl: check that the parents of volatile/dirty are dirs
Chris Mason <mason@kernel.org>
ovl: always encode the origin fh when index is enabled
Chris Mason <mason@kernel.org>
ovl: use the pinned upper dir in ovl_fix_origin()
Chris Mason <mason@kernel.org>
ovl: take a snapshot of the name for copy up
Chris Mason <mason@kernel.org>
ovl: set OVL_WHITEOUTS before publishing the upper dir
Chris Mason <mason@kernel.org>
ovl: hold a reference on the parent in readdir
Weiming Shi <bestswngs@gmail.com>
smb: client: stop processing a read response after a receive error
Eduard Zateev <hackerowskiy@gmail.com>
smb: client: hold server info until cifsd exits
Diego Oliva <diego@bynar.io>
smb: client: fix OOB last_entry pointer from unbounded LastNameOffset
Cen Zhang <zzzccc427@gmail.com>
ocfs2: snapshot dentry names in file and setattr traces
Cen Zhang <zzzccc427@gmail.com>
ocfs2: pin refcount trees before dropping the lookup lock
Jiaming Zhang <r772577952@gmail.com>
ocfs2: fix chunk number of the first chunk in a local quota file
Cen Zhang <zzzccc427@gmail.com>
ocfs2: cancel quota sync work before freeing quota info
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2/dlm: hold the lookup reference across convert AST enqueue
Cen Zhang <zzzccc427@gmail.com>
ocfs2/dlm: hold a lock reference across grant AST enqueue
Cen Zhang <zzzccc427@gmail.com>
ocfs2/heartbeat: unlink live slots when their node is missing
Sean Young <sean@mess.org>
media: rc: Fix ABBA deadlock by making locks more fine grained
Sean Young <sean@mess.org>
media: rc: Fix use after free in bpf progs
Sean Young <sean@mess.org>
media: rc: After rc_unregister_device() timers can be re-armed
Sean Young <sean@mess.org>
media: rc: Use after free in ir_raw_event_handle()
Sean Young <sean@mess.org>
media: rc: mce_kbd: Fix inconsistent locking of keylock
Sean Young <sean@mess.org>
media: rc: Fix race condition during rc_register_device()
Sean Young <sean@mess.org>
media: rc: Fix race between bpf(BPG_PROG_ATTACH) and device unregister
Weigang He <geoffreyhe2@gmail.com>
media: rc: fintek-cir: process a full RX buffer instead of overflowing it
Sean Young <sean@mess.org>
media: rc: Ensure registered is cleared in error path
Sean Young <sean@mess.org>
media: rc: Ensure that rc_unregister_device() does not free input device
Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
nvmet-auth: serialize access to DH-HMAC-CHAP state to fix UAF
Janne Grunau <j@jannau.net>
nvmem: core: Fix OOB read for bit offsets of more than one byte
Danish Khateeb <danishkhateeb03@gmail.com>
pps: generators: don't use the driver's info after unregister
Myeonghun Pak <mhun512@gmail.com>
power: supply: sbs-battery: disable polling before supply teardown
Myeonghun Pak <mhun512@gmail.com>
power: supply: pf1550: drain IRQ work before unregistering supplies
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
phy: core: Fix race-condition between _of_phy_get() and try_module_get()
Nickolai Zeldovich <nickolai@csail.mit.edu>
resource: report a devm_request_resource() conflict under the lock
Weibin Liu <liuwb@xiaopeng.com>
spi: spi-pci1xxxx: quiesce DMA engines on transfer timeout
YANXIN LI <fadouse@pm.me>
ufs: use u64 for directory size in ufs_last_byte
Nguyen Quang Le Kien <khiemtranzo532001@gmail.com>
usb: gadget: fix refcount underflow in gadgetfs_bind() error path
Andrea Parri <parri.andrea@gmail.com>
vfio/nvgrace-gpu: Use a core-only open_device in fallback mode
Weiming Shi <bestswngs@gmail.com>
virtio_net: atomically disable rx mode work
Zhao Li <enderaoelyther@gmail.com>
wifi: mt76: mt7996: unlink TWT flow if the MCU rejects the agreement
Rosen Penev <rosenp@gmail.com>
wifi: ath9k: delete channel-context timers on deinit
Yuchao Zhang <ndaugoing@gmail.com>
xen-blkfront: unbind irq before tearing down ring and shadow requests
Tianchu Chen <flynnnchen@tencent.com>
staging: rtl8723bs: fix protected RX frame validation in decrypt path
Igor Putko <igorpetindev@gmail.com>
serial: core: shut down initialized port on removal
Fan Wu <fanwu01@zju.edu.cn>
scsi: dc395x: sync the waiting_timer before freeing the host
Kyle Zeng <kylebot@openai.com>
net: sched: prevent scheduling deactivated qdiscs
Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com>
mtd: virt-concat: unlink discarded items before freeing
Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com>
mtd: virt-concat: unlink concat node before freeing it
Daehyeon Ko <4ncienth@gmail.com>
mshv_vtl: detach poll waiter on POLLFREE
Ruide Cao <caoruide123@gmail.com>
mptcp: hold MP_JOIN msk ref when cloning reqsk
Vernon Yang <yanglincheng@kylinos.cn>
mm: khugepaged: fix swap entry value to folio_pfn()
Vernon Yang <yanglincheng@kylinos.cn>
mm: khugepaged: fix folio is used after pte_unmap_unlock()
Vernon Yang <yanglincheng@kylinos.cn>
mm: khugepaged: fix folio is used after folio_put/unlock()
Zhang Yi <yi.zhang@huawei.com>
mm/truncate: look up the end-edge straddler by index
Imre Kaloz <kaloz@kernel.org>
mm/slab: sample slab_state once in kmem_cache_destroy()
Zi Yan <ziy@nvidia.com>
mm/rmap: don't discard lazyfree THPs at PMD level
Fan Wu <fanwu01@zju.edu.cn>
media: s5p-mfc: use timer_shutdown_sync() for the self-rearming watchdog
Rik van Riel <riel@surriel.com>
media: redrat3: fix UAF in probe error path leaving rc device registered
Balakrishnan Sambath <balakrishnan.s@microchip.com>
media: microchip-isc: take a reference on the parsed endpoints
Cong Nguyen <congnt264@gmail.com>
media: microchip-csi2dc: fix async notifier leak on probe error path
Fan Wu <fanwu01@zju.edu.cn>
media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers
Fan Wu <fanwu01@zju.edu.cn>
media: imx-jpeg: cancel timeout worker when streaming stops
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
media: gspca: use vb2_video_unregister_device() on disconnect
Myeonghun Pak <mhun512@gmail.com>
media: cx23885: unregister DVB bus when SP2 CI setup fails
Amit Machhiwal <amachhiw@linux.ibm.com>
KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls
David Woodhouse <dwmw@amazon.co.uk>
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
Sean Christopherson <seanjc@google.com>
KVM: guest_memfd: Gracefully handle xarray errors when binding a memslot
Nicolin Chen <nicolinc@nvidia.com>
iommu/arm-smmu-v3: Disable the impl before disabling the SMMU on shutdown
Andrea Parri <parri.andrea@gmail.com>
iomap: don't resubmit an ioend after ->writeback_submit() failed
Kyle Zeng <kylebot@openai.com>
io_uring/io-wq: save worker type before dropping its reference
Yousef Alhouseen <alhouseenyousef@gmail.com>
HID: hiddev: keep state alive through disconnect unlock
Richard Patel <ripatel@wii.dev>
genirq: Move interrupt thread exit_work object to irqaction
Richard Patel <ripatel@wii.dev>
genirq: Defer kfree(irqaction) until irq_thread_dtor() finishes
Eric Biggers <ebiggers@kernel.org>
fsverity: Set S_VERITY only after rollback is no longer possible
Ngoc Quy <ngocquy0700@gmail.com>
fs/proc/task_mmu: pin mm_users in do_pagemap_scan()
Zhao Gongyi <zhaogongyi@bytedance.com>
filelock: keep superblock active through delegation wait
Xiang Mei <xmei5@asu.edu>
fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use
Yibo Tan <lhfff@tju.edu.cn>
fbdev: atmel_lcdfb: Prevent FIFO work after removal
Osama Abdelkader <osama.abdelkader@gmail.com>
drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase
Bui Viet Dung <dungvn2345@gmail.com>
Bluetooth: hci_vhci: Pin module for debugfs file operations
Fan Wu <fanwu01@zju.edu.cn>
ASoC: amd: ps: fix snd_acp63_remove() teardown ordering
Sung Byeongchan <tjdqudcks0424@naver.com>
ALSA: pcmtest: handle multiple wraps in random capture fill
Takashi Iwai <tiwai@suse.de>
ALSA: emux: Fix UAF of soundfont zones at note-on
Takashi Iwai <tiwai@suse.de>
ALSA: control: Fix UAF in snd_ctl_elem_add() on card disconnect
Eva Crystal <0xiviel@gmail.com>
accel/amdxdna: clear the mailbox channel pointer when starting it fails
Frank Zhang <rmxpzlb@gmail.com>
rust: rcpufreq_dt: add module alias
Priya Bala Govindasamy <pgovind2@uci.edu>
rust: module_param: Fix potentially incorrect access of `SetOnce<T>`
Alice Ryhl <aliceryhl@google.com>
rust: fwctl: declare cfi_encoding for fwctl_rpc_scope
Mehmet Koseoglu <mehmet.mkoseoglu@gmail.com>
rust: cpufreq: reject NULL from cpufreq_cpu_get()
Andreas Hindborg <a.hindborg@kernel.org>
rust: configfs: fix data offset calculation for subsystem callbacks
FUJITA Tomonori <fujita.tomonori@gmail.com>
rust: bug: update the SAFETY comment for warn_slowpath_fmt() on UML
FUJITA Tomonori <fujita.tomonori@gmail.com>
rust: bug: pass TAINT_WARN to warn_slowpath_fmt() on UML
Andreas Hindborg <a.hindborg@kernel.org>
rust: block: require `Sync` for `Operations::QueueData`
Andreas Hindborg <a.hindborg@kernel.org>
rust: block: fix `Send` bound for `GenDisk`
Eliot Courtney <ecourtney@nvidia.com>
rust: bitmap: restrict bitmap length to at most i32::MAX
Lorenzo Stoakes <ljs@kernel.org>
rust: bindings: fix VM_MAYSHARE value
Miguel Ojeda <ojeda@kernel.org>
rust: bindings: fix `VM_MAYSHARE` blocklist entry
Miguel Ojeda <ojeda@kernel.org>
objtool/rust: add one more `noreturn` Rust function for Rust 1.101.0
Karl Mehltretter <kmehltretter@gmail.com>
klist: avoid accesses after waking klist_remove()
Ping Cheng <ping.cheng@wacom.com>
HID: wacom: Write shared touch initial status only once
Ping Cheng <ping.cheng@wacom.com>
HID: wacom: Setup SW_MUTE_DEVICE according to the order of input registration
Lee Jones <lee@kernel.org>
HID: wacom: Redesign shared sibling data lifecycle
Lee Jones <lee@kernel.org>
HID: wacom: Fix Use-After-Free in wacom_bamboo_pad
Lee Jones <lee@kernel.org>
HID: wacom: Fix Use-After-Free in wacom_intuos_pad
Lee Jones <lee@kernel.org>
HID: wacom: Advertise SW_MUTE_DEVICE capability prior to registration
Lee Jones <lee@kernel.org>
HID: wacom: Use hdev->product in wacom_setup_touch_input_capabilities
Harald Freudenberger <freude@linux.ibm.com>
s390/zcrypt: Guard domain index uses against speculative bypass
Harald Freudenberger <freude@linux.ibm.com>
s390/zcrypt: Fix out-of-bounds ptr advance in cca_query_crypto_facility()
Harald Freudenberger <freude@linux.ibm.com>
s390/zcrypt: Fix and improve zcrypt reply message verification checks
Christian Borntraeger <borntraeger@linux.ibm.com>
s390/vmcp: Initialize full session info to zero
Heiko Carstens <hca@linux.ibm.com>
s390/signal: Fix incorrect return address in signal frame
Heiko Carstens <hca@linux.ibm.com>
s390/probes: Fix wrong opcode for cgrb fixup
Heiko Carstens <hca@linux.ibm.com>
s390/kprobes: Prevent kprobes on instructions with exception table entry
Heiko Carstens <hca@linux.ibm.com>
s390/extable: Fix mvcos instruction decoding
Sumanth Korikkar <sumanthk@linux.ibm.com>
s390/cpum_cf: Check session mask before cpu offline
Tobias Schumacher <ts@linux.ibm.com>
s390/pci: Add error cleanup in zpci_directed_irq_init()
Tobias Schumacher <ts@linux.ibm.com>
s390/pci: Fix use-after-free race in zpci floating interrupt cleanup
Tobias Schumacher <ts@linux.ibm.com>
s390/pci: Fix resource leak in zpci MSI setup
Tobias Schumacher <ts@linux.ibm.com>
s390/pci: Fix MSI directed-mode teardown IRQ bit count
Tobias Schumacher <ts@linux.ibm.com>
s390/pci: Fix double-free and NULL deref in zpci MSI domain cleanup
Wentao Liang <vulab@iscas.ac.cn>
drm/msm: Fix vm_bo use-after-free in with_vm_locks()
Niklas Cassel <cassel@kernel.org>
ata: sata_fsl: Fix use-after-free of host_priv on probe() failure
Wentao Liang <vulab@iscas.ac.cn>
ASoC: audio-graph-card2: Fix use-after-free in audio_graph2_link_c2c()
Binbin Deng <18983559317@163.com>
apparmor: fix a use-after-free in aa_lookupn_ns()
Josef Bacik <josef@toxicpanda.com>
mm/hugetlb: fix use-after-free of a new anon folio
David Hildenbrand (Arm) <david@kernel.org>
mm/hugetlb: fix use-after-free in hugetlb_mfill_atomic_pte()
Yibo Tan <lhfff@tju.edu.cn>
media: ipu-bridge: Fix use-after-free in IVSC error path
Deepanshu Kartikey <kartikey406@gmail.com>
media: imon: fix use-after-free in display_close via dev_dbg
Anuj Bolewar <bolewara@gmail.com>
media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path
Pei Xiao <xiaopei01@kylinos.cn>
media: cx23885: Fix use-after-free in cx23885_finidev due to race condition
Fan Wu <fanwu01@zju.edu.cn>
media: au0828: fix use-after-free in bulk_timeout timer on disconnect
Chuck Lever <cel@kernel.org>
lockd: Fix use-after-free in nlmsvc_retry_blocked
Günther Noack <gnoack@google.com>
landlock: Fix superblock use-after-free in release_inode()
Nirmoy Das <nirmoyd@nvidia.com>
iommufd: Fix event queue release use-after-free
Yehyeong Lee <yhlee@isslab.korea.ac.kr>
nvmet-fc: fix use-after-free in nvmet_fc_ls_create_connection()
Daejun Park <daejun7.park@samsung.com>
nvmet: fix use-after-free of the old registrant in nvmet_pr_preempt()
Mario Limonciello <mario.limonciello@amd.com>
platform/x86/amd: hfi: Fix a use-after-free when unloading the driver
Denis Benato <denis.benato@linux.dev>
platform/x86: asus-wmi: fix use-after-free unregistering kbd_led led
Fan Wu <fanwu01@zju.edu.cn>
PM: EM: Fix use-after-free of perf domain in netlink doit handlers
Danish Khateeb <danishkhateeb03@gmail.com>
pps: generators: fix use-after-free when closing a removed device
James Kim <james010kim@gmail.com>
rapidio: mport_cdev: fix use-after-free in mport_mm_close()
Guangshuo Li <lgs201920130244@gmail.com>
RDMA/irdma: avoid use-after-free in icrdma_remove
Deep Shah <deepshah146@gmail.com>
RDMA/uverbs: Fix DMABUF use-after-free during ufile cleanup
Tejun Heo <tj@kernel.org>
sched_ext: Fix use-after-free of a local reenq node left on an inactive cpu
Henry Martin <bsdhenrymartin@gmail.com>
smb: client: fix use-after-free in cifs_ses_add_channel()
Diego Oliva <diego@bynar.io>
smb: client: fix use-after-free infoleak via the readdir resume name
AngeloGioacchino Del Regno <angelogioacchino.delregno@collabora.com>
spmi: Fix potential use-after-free by grabbing of_node reference
Zijing Yin <yzjaurora@gmail.com>
SUNRPC: fix netns use-after-free in write_gssp()
Andreas Wendleder <gonsolo@gmail.com>
wifi: b43: fix use-after-free in b43_bcma_remove()
Daehyeon Ko <4ncienth@gmail.com>
cgroup: serialize migrations of newly forked processes
Eric Dumazet <edumazet@kernel.org>
vlan: restore HW VLAN tag insertion with reorder_hdr off
Dairui Zhang <zhangdairui@gmail.com>
ksmbd: verify transform SessionId matches the decrypted header
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: validate security descriptor offsets before pointer arithmetic
Sung Byeongchan <tjdqudcks0424@naver.com>
ksmbd: validate AppInstanceId takeover target
Karl Mehltretter <kmehltretter@gmail.com>
ksmbd: use u8 for SMB2 oplock level values
DaeMyung Kang <charsyam@gmail.com>
ksmbd: return end of file for reads past a named stream's data
Michail Andreas Michalopoulos <mike.michalo@gmail.com>
ksmbd: restore Kerberos logins with released ksmbd-tools
Abdifatah Suruur <suruurism@gmail.com>
ksmbd: reserve space for the UTF-16 terminator in stream info
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: reclaim ended sessions on logoff and expiration
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: prevent stale data from being written by SMB2 WRITE requests
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: prevent share root removal through empty paths
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: prevent session binding in compound requests
DaeMyung Kang <charsyam@gmail.com>
ksmbd: preserve unreadable named streams on open
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: limit sessions on each connection
Jan Koester <j.koester@act-marketing.de>
ksmbd: ignore network devices of other namespaces
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: hold a connection reference for each session channel
Ian Bridges <icb@fastmail.org>
ksmbd: fix session reference leak on compounded SESSION_SETUP
Cen Zhang (Microsoft) <cenzhang@linux.microsoft.com>
ksmbd: fix parent dentry lifetime in directory enumeration
Giorgi Kobakhia <gkobakhi@asu.edu>
ksmbd: fix overflow in dacloffset bounds check in build_sec_desc()
Dairui Zhang <zhangdairui@gmail.com>
ksmbd: fix OOB read and cross-share confusion in ksmbd_validate_name_reconnect()
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: fix extended session security negotiation for raw NTLMSSP
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: drain session procfs readers before dropping table references
Aamir Ahmed <elb12345@hotmail.co.uk>
ksmbd: deny access for an empty DACL instead of granting the request
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: defer connection scavenging while session locks are busy
DaeMyung Kang <charsyam@gmail.com>
ksmbd: avoid restoring only in-memory EOF after allocation change
Michail Andreas Michalopoulos <mike.michalo@gmail.com>
ksmbd: accept share config responses from ksmbd-tools before 3.5.3
David Heidelberg <david@ixit.cz>
backlight: qcom-wled: Fix WLED3 brightness register stride
David Heidelberg <david@ixit.cz>
backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe
David Heidelberg <david@ixit.cz>
backlight: qcom-wled: Fix NULL pointer dereference in wled_remove()
Myeonghun Pak <mhun512@gmail.com>
backlight: lm3630a: Cancel delayed work before destroying workqueue
Kameron Carr <kameroncarr@linux.microsoft.com>
Drivers: hv: vmbus: Bounds check the shared ring buffer indices
Mario Peter <mario.peter@leica-geosystems.com>
driver core: take parent lock in async device attach
Johan Hovold <johan@kernel.org>
driver core: fix parent lock use-after-free on USB disconnect
Josef Bacik <josef@toxicpanda.com>
driver core: Limit the messages on a refused uevent
Johan Hovold <johan@kernel.org>
driver core: take parent lock on deferred probe
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: act_ife: do not consume the inner header on egress
Antonio Quartulli <antonio@mandelbit.com>
net/sched: fix packet reordering on requeue
owen kwan <owen@verialabs.com>
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: sch_teql: fix slaves_lock IRQ deadlock
Yuhang Zheng <z1652074432@gmail.com>
net/sched: cls_flower: avoid stale mask references after delete
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: cls_bpf: accept dev-bound programs on shared blocks
Hengyu Liang <hengyul@cs.unc.edu>
serial: core: fix TIOCSSERIAL and TIOCSERCONFIG on uninitialised ports
Lorenzo Pieralisi <lpieralisi@kernel.org>
irqchip/gic-v5: Fix standalone IRSes OF probe
Lorenzo Pieralisi <lpieralisi@kernel.org>
dt-bindings: interrupt-controller: gicv5: Relax IRS properties constraints
Darrick J. Wong <djwong@kernel.org>
xfs: fix integer overflow problem when setting large free areas
Bui Viet Dung <dungvn2345@gmail.com>
wwan: wwan_hwsim: Pin module for debugfs file operations
Giorgi Kobakhia <gkobakhi@asu.edu>
udf: fix return value for non-recorded-allocated extents in udf_map_block()
Jonathan Gopel <jgopel@gmail.com>
thunderbolt: Do not RPM complete unrelated subtrees on unplug
Fredric Cover <fredric.cover.lkernel@gmail.com>
smb: client: fix early procfs exposure race
Zikang Gao <2715417602@qq.com>
smb: client: do not pass a NULL buf to is_oplock_break()
Cen Zhang <zzzccc427@gmail.com>
ocfs2: publish the filecheck owner before adding sysfs attributes
Cen Zhang <zzzccc427@gmail.com>
ocfs2: pin owning modules for open debugfs files
Cen Zhang <zzzccc427@gmail.com>
ocfs2: drain quorum work before removing the cluster
Cen Zhang <zzzccc427@gmail.com>
ocfs2/dlm: drain join handlers before releasing module text
Ameer Hamza <ameer.hamza@truenas.com>
nfsd: fix race between client_info_show() and free_client()
Wei Jie Law <law.wei.jie@gt.tech.gov.sg>
net: usb: pegasus: do not advance rx_skb->data on dropped frames
Kaho Jiang <kj2864@nyu.edu>
net: ipv4: add zero check for snd_cwnd_clamp
Aleksandr Nogikh <nogikh@google.com>
media: usbtv: fix null-pointer dereference on disconnect
Xiang Mei <xmei5@asu.edu>
media: go7007: only set audio_enabled if go7007_snd_init() succeeded
Xiang Mei <xmei5@asu.edu>
media: em28xx: reject audio endpoint with zero packet size
Myeonghun Pak <mhun512@gmail.com>
media: cx88: Disable PCI device on MPEG initialization failure
Xiang Mei <xmei5@asu.edu>
libceph: bound mon_command ack decode to front len
Yongjun Gwon <d3bugee@gmail.com>
ksmbd: serialize directory emptiness checks with readdir
Andrea Parri <parri.andrea@gmail.com>
kcsan: Avoid division by zero in kcsan_prandom_u32_max()
Fang Xieyan <fangxy@xiaopeng.com>
kcov: ignore an out-of-range comparison count in write_comp_data()
Xiang Mei <xmei5@asu.edu>
fuse: don't BUG when the copy buffer is exhausted
Yuanfu Xie <yuanfuxie@stu.pku.edu.cn>
ceph: fail readdir when the MDS reply carries no dirfrag
Baokun Li <libaokun@linux.alibaba.com>
blk-crypto: fix NULL deref and UAF in __blk_crypto_evict_key()
Karl Mehltretter <kmehltretter@gmail.com>
ARM: 9524/1: mm: align hugetlb mappings to the huge page size
ck.chang <ck.chang@mediatek.com>
wifi: mt76: mt7925: fix reset panic caused by the WM2 rx irq mask
Radek Podgorny <radek@podgorny.cz>
Bluetooth: forget a peer's RPA once it advertises its identity address
YuanZhe Liu <25031212351@stu.xidian.edu.cn>
ALSA: line6: Clear prev_fbuf on capture buffer release
Biju Das <biju.das.jz@bp.renesas.com>
clk: renesas: r9a08g046: Propagate clk rate for ETH TX mux clocks
Christian Brauner <brauner@kernel.org>
fork: don't create io threads once PF_POSTCOREDUMP is set
Christian Brauner <brauner@kernel.org>
fork: move the coredump and exec checks into create_io_thread()
Christian Brauner <brauner@kernel.org>
exec: cancel io_uring requests before de_thread()
Jens Axboe <axboe@kernel.dk>
io_uring/timeout: don't lose a cancel as io-wq arms a timeout
Jens Axboe <axboe@kernel.dk>
io_uring/timeout: don't flush with the sequence behind the last flush
Jens Axboe <axboe@kernel.dk>
io_uring/timeout: don't put a sequence target behind the last flush
Josef Bacik <josef@toxicpanda.com>
io_uring: look up the file before queueing to io-wq
Josef Bacik <josef@toxicpanda.com>
io_uring/timeout: don't end a linked timeout with 1
Josef Bacik <josef@toxicpanda.com>
io_uring/timeout: no ABS update of multishot timeouts
Josef Bacik <josef@toxicpanda.com>
io_uring/net: don't retry recv on uncommitted buffers
Josef Bacik <josef@toxicpanda.com>
io_uring: don't pass restart error codes to userspace
Josef Bacik <josef@toxicpanda.com>
io_uring/openclose: keep the lock in io_pipe_fixed()
Josef Bacik <josef@toxicpanda.com>
io_uring/sqpoll: let the thread sleep on disabled rings
Josef Bacik <josef@toxicpanda.com>
io_uring/kbuf: handle index wrap in last buffer check
Josef Bacik <josef@toxicpanda.com>
io_uring/zcrx: fix buffer offsets in areas above 4GB
Josef Bacik <josef@toxicpanda.com>
io_uring/napi: don't busy poll past an expired timeout
Josef Bacik <josef@toxicpanda.com>
io_uring/napi: make stale entries time out after 60s
Josef Bacik <josef@toxicpanda.com>
io_uring/wait: no early -ETIME if min_wait finds work
Josef Bacik <josef@toxicpanda.com>
io_uring/timeout: use the right clock for ABS updates
Josef Bacik <josef@toxicpanda.com>
io_uring/timeout: keep repeat count on multishot update
Josef Bacik <josef@toxicpanda.com>
io_uring/timeout: don't skip over reached sequences
Josef Bacik <josef@toxicpanda.com>
io_uring/fdinfo: fix CQE dump of CQE32 rings
Josef Bacik <josef@toxicpanda.com>
io_uring/register: keep 128b SQEs intact on resize
Josef Bacik <josef@toxicpanda.com>
io_uring/register: handle index wrap when resizing
Josef Bacik <josef@toxicpanda.com>
io_uring/register: don't wrap 32b CQEs when resizing
Josef Bacik <josef@toxicpanda.com>
io_uring: don't split 128b SQEs at the SQPOLL cap
Josef Bacik <josef@toxicpanda.com>
io_uring: drop the CQE cache if a refill fails
Josef Bacik <josef@toxicpanda.com>
io_uring/futex: allocate private hash before waiting
Josef Bacik <josef@toxicpanda.com>
io_uring/poll: drop stale double poll entry on rearm
Josef Bacik <josef@toxicpanda.com>
io_uring/wait: look at all CQ waiters on wake up
Josef Bacik <josef@toxicpanda.com>
io_uring: wake ring pollers for local task_work
Josef Bacik <josef@toxicpanda.com>
io_uring/cancel: let CANCEL_ALL find parked requests
Josef Bacik <josef@toxicpanda.com>
io_uring/cancel: recognize "no timeout" on 32-bit
Josef Bacik <josef@toxicpanda.com>
io_uring/cancel: don't forget that the work was running
Josef Bacik <josef@toxicpanda.com>
io_uring: don't lose a cancel as io-wq parks a request
Josef Bacik <josef@toxicpanda.com>
io_uring/poll: don't lose a cancel as io-wq arms poll
Josef Bacik <josef@toxicpanda.com>
io_uring/io-wq: let cancel find picked up hashed work
Josef Bacik <josef@toxicpanda.com>
io_uring/io-wq: don't exit with a creation pending
Josef Bacik <josef@toxicpanda.com>
io_uring/io-wq: don't strand work when a worker exits
Josef Bacik <josef@toxicpanda.com>
io_uring/io-wq: don't go to sleep on pending work
Josef Bacik <josef@toxicpanda.com>
io_uring/mpscq: disable preemption while pushing
Josef Bacik <josef@toxicpanda.com>
io_uring/cancel: rearm local work wake up before sleep
Josef Bacik <josef@toxicpanda.com>
io_uring: don't lose the DEFER_TASKRUN wake up
Josef Bacik <josef@toxicpanda.com>
io_uring: don't flood a cancelling task with task_work
Josef Bacik <josef@toxicpanda.com>
io_uring/io-wq: don't hide a link from cancellations
Josef Bacik <josef@toxicpanda.com>
io_uring/io-wq: don't lose the signal that ends work
Josef Bacik <josef@toxicpanda.com>
io_uring/wait: don't spin on a stuck overflow list
Josef Bacik <josef@toxicpanda.com>
io_uring/cmd: don't leave list poison in ->hash_node
Josef Bacik <josef@toxicpanda.com>
io_uring/waitid: own the request before clearing ->head
Ridham Khurana <khurana.ridham222@gmail.com>
platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE()
Pavankumar Nandeshwar <pavankumar.nandeshwar@oss.qualcomm.com>
wifi: ath12k: Increase RXDMA buffer ring size for default memory profile
Aaradhana Sahu <aaradhana.sahu@oss.qualcomm.com>
wifi: ath12k: Make RXDMA buffer ring size configurable per memory profile
Aaradhana Sahu <aaradhana.sahu@oss.qualcomm.com>
wifi: ath12k: convert DP_RX_RELEASE_RING_SIZE to inline helper
Aaradhana Sahu <aaradhana.sahu@oss.qualcomm.com>
wifi: ath12k: convert ATH12K_RX_DESC_COUNT to inline helper
Aaradhana Sahu <aaradhana.sahu@oss.qualcomm.com>
wifi: ath12k: convert ATH12K_NUM_POOL_TX_DESC to inline helper
Aaradhana Sahu <aaradhana.sahu@oss.qualcomm.com>
wifi: ath12k: convert DP_RXDMA_MONITOR_DST_RING_SIZE to inline helper
Aaradhana Sahu <aaradhana.sahu@oss.qualcomm.com>
wifi: ath12k: convert DP_RXDMA_MONITOR_BUF_RING_SIZE to inline helper
Aaradhana Sahu <aaradhana.sahu@oss.qualcomm.com>
wifi: ath12k: convert DP_TX_COMP_RING_SIZE to inline helper
Aaradhana Sahu <aaradhana.sahu@oss.qualcomm.com>
wifi: ath12k: move dp_profile_params to dp.h
Lee Seong Hyeon <ihopenre@gmail.com>
ksmbd: reject FSCTL_SET_ZERO_DATA on a directory handle
Stefan Metzmacher <metze@samba.org>
smb: smbdirect: don't hand out already failed sockets in smbdirect_socket_accept()
Stefan Metzmacher <metze@samba.org>
smb: smbdirect: release failed pending sockets of a listener
Stefan Metzmacher <metze@samba.org>
smb: smbdirect: don't wait for RDMA_CM_EVENT_DISCONNECTED in smbdirect_socket_destroy_sync()
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: wait for negotiation before receiving another PDU
Zizhen Liu <pointerliu@126.com>
net: skbuff: propagate shared-frag marker in skb_zerocopy()
-------------
Diffstat:
.../bindings/interrupt-controller/arm,gic-v5.yaml | 9 +-
Documentation/networking/rxrpc.rst | 21 +-
Makefile | 4 +-
arch/arm/mm/mmap.c | 11 +-
arch/powerpc/kvm/book3s_hv.c | 76 +-
arch/powerpc/kvm/book3s_paired_singles.c | 7 +-
arch/s390/kernel/kprobes.c | 3 +
arch/s390/kernel/perf_cpum_cf.c | 3 +
arch/s390/kernel/process.c | 12 +-
arch/s390/kernel/signal.c | 6 +-
arch/s390/lib/probes.c | 2 +-
arch/s390/mm/extable.c | 4 +-
arch/s390/pci/pci_irq.c | 93 ++-
arch/x86/include/asm/cpufeatures.h | 1 +
arch/x86/include/asm/cpuid/api.h | 1 +
arch/x86/include/asm/kvm-x86-ops.h | 1 +
arch/x86/include/asm/kvm_host.h | 7 +
arch/x86/include/asm/vmx.h | 8 +
arch/x86/kernel/cpu/bugs.c | 18 +-
arch/x86/kernel/cpu/scattered.c | 1 +
arch/x86/kvm/hyperv.c | 2 +
arch/x86/kvm/mmu/mmu.c | 5 +
arch/x86/kvm/mmu/paging_tmpl.h | 13 +-
arch/x86/kvm/svm/nested.c | 6 +
arch/x86/kvm/svm/svm.c | 19 +-
arch/x86/kvm/vmx/common.h | 20 +
arch/x86/kvm/vmx/main.c | 26 +
arch/x86/kvm/vmx/posted_intr.c | 2 +
arch/x86/kvm/vmx/tdx.c | 92 ++-
arch/x86/kvm/vmx/vmx.c | 37 +-
arch/x86/kvm/vmx/x86_ops.h | 1 +
arch/x86/kvm/x86.c | 69 +-
arch/x86/kvm/xen.c | 18 +
arch/x86/mm/pat/set_memory.c | 8 +-
block/blk-crypto-fallback.c | 6 +
drivers/accel/amdxdna/aie2_message.c | 1 +
drivers/accel/amdxdna/aie2_msg_priv.h | 1 +
drivers/accel/amdxdna/npu4_regs.c | 1 +
drivers/android/binder/thread.rs | 38 +-
drivers/ata/sata_fsl.c | 20 +-
drivers/base/base.h | 1 +
drivers/base/bus.c | 32 +-
drivers/base/core.c | 4 +-
drivers/base/dd.c | 90 ++-
drivers/block/xen-blkfront.c | 12 +-
drivers/bluetooth/hci_vhci.c | 4 +
drivers/clk/renesas/r9a08g046-cpg.c | 6 +-
drivers/cpufreq/rcpufreq_dt.rs | 1 +
drivers/gpu/drm/msm/msm_gem_shrinker.c | 3 +-
drivers/gpu/drm/panthor/panthor_sched.c | 14 +-
drivers/hid/amd-sfh-hid/amd_sfh_client.c | 4 +-
.../amd-sfh-hid/hid_descriptor/amd_sfh_hid_desc.h | 2 -
.../hid_descriptor/amd_sfh_hid_report_desc.h | 7 -
drivers/hid/hid-asus.c | 14 +-
drivers/hid/hid-core.c | 4 +-
drivers/hid/hid-cougar.c | 3 +
drivers/hid/hid-cp2112.c | 9 +-
drivers/hid/hid-elo.c | 3 +
drivers/hid/hid-ids.h | 1 +
drivers/hid/hid-lenovo-go-s.c | 663 ++++++++++-----
drivers/hid/hid-logitech-dj.c | 3 +
drivers/hid/hid-mcp2200.c | 5 +
drivers/hid/hid-mcp2221.c | 10 +-
drivers/hid/hid-picolcd_fb.c | 12 +-
drivers/hid/hid-prodikeys.c | 7 +-
drivers/hid/hid-pxrc.c | 3 +
drivers/hid/hid-quirks.c | 1 +
drivers/hid/hid-roccat-isku.c | 3 +
drivers/hid/hid-roccat-koneplus.c | 3 +
drivers/hid/hid-roccat-konepure.c | 3 +
drivers/hid/hid-roccat-kovaplus.c | 3 +
drivers/hid/hid-roccat-pyra.c | 3 +
drivers/hid/hid-roccat-ryos.c | 3 +
drivers/hid/hid-roccat-savu.c | 3 +
drivers/hid/hid-zydacron.c | 3 +
drivers/hid/usbhid/hid-core.c | 9 +-
drivers/hid/usbhid/hiddev.c | 37 +-
drivers/hid/wacom_sys.c | 198 +++--
drivers/hid/wacom_wac.c | 99 ++-
drivers/hid/wacom_wac.h | 6 +-
drivers/hv/mshv_vtl_main.c | 28 +-
drivers/hv/ring_buffer.c | 29 +-
drivers/infiniband/core/ib_core_uverbs.c | 10 +-
drivers/infiniband/core/uverbs.h | 37 +
drivers/infiniband/core/uverbs_std_types_dmabuf.c | 39 +-
drivers/infiniband/hw/irdma/icrdma_if.c | 9 +-
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 2 +-
drivers/iommu/iommufd/eventq.c | 4 +-
drivers/irqchip/irq-gic-v5-irs.c | 4 +
drivers/media/pci/cx23885/cx23885-core.c | 4 +
drivers/media/pci/cx23885/cx23885-dvb.c | 14 +-
drivers/media/pci/cx88/cx88-mpeg.c | 9 +-
drivers/media/pci/intel/ipu-bridge.c | 2 +-
drivers/media/platform/marvell/mcam-core.c | 14 +-
.../media/platform/microchip/microchip-csi2dc.c | 1 +
.../media/platform/microchip/microchip-isc-base.c | 6 +
.../platform/microchip/microchip-sama5d2-isc.c | 17 +-
.../platform/microchip/microchip-sama7g5-isc.c | 17 +-
drivers/media/platform/nxp/imx-jpeg/mxc-jpeg.c | 2 +
drivers/media/platform/samsung/s5p-mfc/s5p_mfc.c | 4 +-
drivers/media/rc/bpf-lirc.c | 18 +-
drivers/media/rc/fintek-cir.c | 4 +
drivers/media/rc/imon.c | 5 -
drivers/media/rc/ir-mce_kbd-decoder.c | 5 +-
drivers/media/rc/lirc_dev.c | 3 +
drivers/media/rc/rc-ir-raw.c | 86 +-
drivers/media/rc/rc-main.c | 61 +-
drivers/media/rc/redrat3.c | 4 +
drivers/media/usb/au0828/au0828-dvb.c | 1 +
drivers/media/usb/em28xx/em28xx-audio.c | 7 +
drivers/media/usb/go7007/go7007-driver.c | 5 +-
drivers/media/usb/gspca/gspca.c | 3 +-
drivers/media/usb/hackrf/hackrf.c | 7 +-
drivers/media/usb/usbtv/usbtv-core.c | 2 -
drivers/media/usb/usbtv/usbtv-video.c | 4 +
drivers/mtd/mtd_virt_concat.c | 2 +
drivers/net/usb/pegasus.c | 6 +-
drivers/net/virtio_net.c | 26 +-
drivers/net/wireless/ath/ath12k/core.c | 2 +
drivers/net/wireless/ath/ath12k/core.h | 9 -
drivers/net/wireless/ath/ath12k/dp.c | 81 +-
drivers/net/wireless/ath/ath12k/dp.h | 108 ++-
drivers/net/wireless/ath/ath12k/dp_rx.c | 14 +-
drivers/net/wireless/ath/ath12k/mac.c | 5 +-
drivers/net/wireless/ath/ath12k/wifi7/dp_tx.c | 12 +-
drivers/net/wireless/ath/ath9k/channel.c | 2 +
drivers/net/wireless/broadcom/b43/main.c | 5 +-
drivers/net/wireless/mediatek/mt76/mt7925/pci.c | 1 -
drivers/net/wireless/mediatek/mt76/mt7925/regs.h | 3 +-
drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 4 +-
drivers/net/wwan/wwan_hwsim.c | 4 +
drivers/nvme/target/auth.c | 1 +
drivers/nvme/target/fabrics-cmd-auth.c | 32 +-
drivers/nvme/target/fc.c | 8 +-
drivers/nvme/target/nvmet.h | 2 +
drivers/nvme/target/pr.c | 2 +-
drivers/nvmem/core.c | 4 +-
drivers/phy/phy-core.c | 45 +-
drivers/platform/cznic/turris-omnia-mcu-base.c | 1 +
drivers/platform/x86/amd/hfi/hfi.c | 5 +
drivers/platform/x86/asus-wmi.c | 12 +
drivers/power/supply/pf1550-charger.c | 32 +-
drivers/power/supply/sbs-battery.c | 11 +
drivers/pps/generators/pps_gen.c | 94 ++-
drivers/rapidio/devices/rio_mport_cdev.c | 5 +-
drivers/s390/char/vmcp.c | 4 +-
drivers/s390/crypto/zcrypt_api.c | 35 +-
drivers/s390/crypto/zcrypt_ccamisc.c | 22 +-
drivers/s390/crypto/zcrypt_msgtype50.c | 95 ++-
drivers/s390/crypto/zcrypt_msgtype6.c | 208 +++--
drivers/scsi/dc395x.c | 10 +-
drivers/spi/spi-pci1xxxx.c | 71 ++
drivers/spmi/spmi.c | 3 +-
drivers/staging/rtl8723bs/core/rtw_recv.c | 21 +-
drivers/thunderbolt/icm.c | 6 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/usb/core/driver.c | 1 -
drivers/usb/core/message.c | 1 +
drivers/usb/gadget/legacy/inode.c | 3 +-
drivers/vfio/pci/nvgrace-gpu/main.c | 17 +-
drivers/video/backlight/lm3630a_bl.c | 1 +
drivers/video/backlight/qcom-wled.c | 35 +-
drivers/video/fbdev/atmel_lcdfb.c | 11 +-
drivers/video/fbdev/udlfb.c | 5 +
fs/afs/rxrpc.c | 57 +-
fs/btrfs/verity.c | 7 +-
fs/ceph/dir.c | 4 +
fs/exec.c | 11 +-
fs/ext4/verity.c | 4 +-
fs/fuse/dev.c | 3 +-
fs/iomap/ioend.c | 10 +-
fs/kernfs/mount.c | 34 +-
fs/lockd/svclock.c | 2 +
fs/nfs/blocklayout/blocklayout.h | 5 -
fs/nfs/blocklayout/rpc_pipefs.c | 79 +-
fs/nfs/callback_xdr.c | 9 +-
fs/nfs/delegation.c | 3 +-
fs/nfs/dir.c | 2 +
fs/nfs/filelayout/filelayout.c | 8 +-
fs/nfs/filelayout/filelayoutdev.c | 17 +-
fs/nfs/flexfilelayout/flexfilelayout.c | 52 +-
fs/nfs/flexfilelayout/flexfilelayout.h | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 17 +-
fs/nfs/localio.c | 31 +-
fs/nfs/netns.h | 5 +-
fs/nfs/nfs4_fs.h | 2 +
fs/nfs/nfs4proc.c | 8 +
fs/nfs/nfs4state.c | 38 +-
fs/nfs/nfstrace.h | 5 +-
fs/nfs/pnfs.c | 2 +
fs/nfs/pnfs.h | 1 +
fs/nfs/pnfs_nfs.c | 21 +-
fs/nfsd/filecache.c | 4 +-
fs/nfsd/flexfilelayout.c | 20 +-
fs/nfsd/flexfilelayoutxdr.c | 4 +-
fs/nfsd/flexfilelayoutxdr.h | 5 +-
fs/nfsd/nfs3acl.c | 15 +
fs/nfsd/nfs4idmap.c | 4 +-
fs/nfsd/nfs4layouts.c | 4 +-
fs/nfsd/nfs4proc.c | 4 +-
fs/nfsd/nfs4recover.c | 42 +-
fs/nfsd/nfs4state.c | 250 +++++-
fs/nfsd/nfs4xdr.c | 26 +-
fs/nfsd/nfsctl.c | 73 +-
fs/nfsd/nfsproc.c | 19 +-
fs/nfsd/state.h | 13 +-
fs/nfsd/xdr4.h | 1 +
fs/ocfs2/cluster/heartbeat.c | 13 +-
fs/ocfs2/cluster/netdebug.c | 4 +
fs/ocfs2/cluster/nodemanager.c | 3 +
fs/ocfs2/cluster/quorum.c | 7 +-
fs/ocfs2/cluster/quorum.h | 1 +
fs/ocfs2/dlm/dlmconvert.c | 10 +-
fs/ocfs2/dlm/dlmdebug.c | 5 +
fs/ocfs2/dlm/dlmdomain.c | 3 +-
fs/ocfs2/dlm/dlmlock.c | 8 +-
fs/ocfs2/dlmglue.c | 2 +
fs/ocfs2/file.c | 100 ++-
fs/ocfs2/filecheck.c | 5 +-
fs/ocfs2/quota_local.c | 12 +-
fs/ocfs2/refcounttree.c | 15 +-
fs/ocfs2/super.c | 1 +
fs/overlayfs/copy_up.c | 110 ++-
fs/overlayfs/dir.c | 22 +-
fs/overlayfs/inode.c | 16 +-
fs/overlayfs/namei.c | 11 +-
fs/overlayfs/overlayfs.h | 8 +-
fs/overlayfs/readdir.c | 40 +-
fs/overlayfs/super.c | 31 +-
fs/proc/task_mmu.c | 9 +-
fs/smb/client/cached_dir.c | 30 +-
fs/smb/client/cifsacl.c | 9 +-
fs/smb/client/cifsfs.c | 20 +-
fs/smb/client/cifsglob.h | 2 +
fs/smb/client/cifsproto.h | 1 +
fs/smb/client/cifssmb.c | 152 +++-
fs/smb/client/connect.c | 40 +-
fs/smb/client/inode.c | 4 +-
fs/smb/client/readdir.c | 69 +-
fs/smb/client/sess.c | 6 +-
fs/smb/client/smb2misc.c | 16 +
fs/smb/client/smb2ops.c | 37 +-
fs/smb/client/smb2pdu.c | 46 +-
fs/smb/client/trace.h | 3 +
fs/smb/client/transport.c | 2 +
fs/smb/common/smbglob.h | 1 +
fs/smb/server/auth.c | 6 +-
fs/smb/server/compress.c | 1 +
fs/smb/server/connection.c | 55 +-
fs/smb/server/connection.h | 26 +-
fs/smb/server/ksmbd_netlink.h | 8 +-
fs/smb/server/ksmbd_work.c | 19 +
fs/smb/server/ksmbd_work.h | 2 +
fs/smb/server/mgmt/user_session.c | 204 ++++-
fs/smb/server/mgmt/user_session.h | 12 +-
fs/smb/server/misc.c | 8 +-
fs/smb/server/oplock.c | 885 ++++++++++++---------
fs/smb/server/oplock.h | 14 +-
fs/smb/server/proc.c | 2 +
fs/smb/server/server.c | 23 +
fs/smb/server/server.h | 3 +
fs/smb/server/smb2misc.c | 8 +
fs/smb/server/smb2ops.c | 33 +
fs/smb/server/smb2pdu.c | 374 +++++++--
fs/smb/server/smb2pdu.h | 1 +
fs/smb/server/smb_common.c | 6 +-
fs/smb/server/smbacl.c | 49 +-
fs/smb/server/transport_ipc.c | 23 +-
fs/smb/server/transport_tcp.c | 308 ++++++-
fs/smb/server/vfs.c | 107 ++-
fs/smb/server/vfs.h | 3 +-
fs/smb/server/vfs_cache.c | 263 +++---
fs/smb/server/vfs_cache.h | 12 +-
fs/smb/smbdirect/accept.c | 227 ++++--
fs/smb/smbdirect/connection.c | 12 +-
fs/smb/smbdirect/internal.h | 2 +
fs/smb/smbdirect/listen.c | 137 +++-
fs/smb/smbdirect/rw.c | 1 -
fs/smb/smbdirect/socket.c | 113 ++-
fs/smb/smbdirect/socket.h | 42 +
fs/udf/inode.c | 2 +-
fs/ufs/dir.c | 2 +-
fs/verity/enable.c | 12 +-
fs/xfs/libxfs/xfs_attr_leaf.c | 13 +
fs/xfs/libxfs/xfs_da_btree.c | 14 +
fs/xfs/libxfs/xfs_inode_fork.c | 4 +-
fs/xfs/libxfs/xfs_symlink_remote.c | 8 +-
fs/xfs/libxfs/xfs_symlink_remote.h | 2 +-
fs/xfs/libxfs/xfs_trans_space.c | 6 +-
fs/xfs/scrub/agheader.c | 15 +-
fs/xfs/scrub/agheader_repair.c | 13 +-
fs/xfs/scrub/alloc_repair.c | 11 +-
fs/xfs/scrub/attr.c | 17 +-
fs/xfs/scrub/attr_repair.c | 18 +-
fs/xfs/scrub/bitmap.c | 20 +
fs/xfs/scrub/bmap.c | 7 +
fs/xfs/scrub/btree.c | 16 +-
fs/xfs/scrub/common.c | 7 +-
fs/xfs/scrub/cow_repair.c | 84 +-
fs/xfs/scrub/dabtree.c | 27 +-
fs/xfs/scrub/dir.c | 2 +
fs/xfs/scrub/dir_repair.c | 9 +-
fs/xfs/scrub/dirtree.c | 4 +-
fs/xfs/scrub/dirtree_repair.c | 76 +-
fs/xfs/scrub/dqiterate.c | 1 +
fs/xfs/scrub/fscounters.c | 38 +-
fs/xfs/scrub/ialloc_repair.c | 8 +-
fs/xfs/scrub/inode.c | 2 +-
fs/xfs/scrub/inode_repair.c | 181 ++++-
fs/xfs/scrub/iscan.c | 2 +-
fs/xfs/scrub/metapath.c | 17 +-
fs/xfs/scrub/newbt.c | 15 +-
fs/xfs/scrub/newbt.h | 1 -
fs/xfs/scrub/parent_repair.c | 4 +
fs/xfs/scrub/quota.c | 8 +-
fs/xfs/scrub/quota_repair.c | 39 +-
fs/xfs/scrub/quotacheck_repair.c | 54 +-
fs/xfs/scrub/readdir.c | 2 +-
fs/xfs/scrub/reap.c | 65 +-
fs/xfs/scrub/refcount.c | 17 +-
fs/xfs/scrub/repair.c | 18 +-
fs/xfs/scrub/repair.h | 2 +-
fs/xfs/scrub/rtbitmap_repair.c | 2 +-
fs/xfs/scrub/rtrefcount.c | 2 +
fs/xfs/scrub/rtsummary.c | 9 +-
fs/xfs/scrub/rtsummary.h | 1 +
fs/xfs/scrub/rtsummary_repair.c | 2 +-
fs/xfs/scrub/stats.c | 5 +-
fs/xfs/scrub/symlink.c | 17 +-
fs/xfs/scrub/trace.c | 13 +
fs/xfs/scrub/trace.h | 10 +-
fs/xfs/scrub/xfarray.c | 4 +-
fs/xfs/xfs_dquot.c | 20 +-
fs/xfs/xfs_dquot.h | 2 +-
fs/xfs/xfs_handle.c | 2 +-
fs/xfs/xfs_inode_item_recover.c | 20 +-
fs/xfs/xfs_mount.c | 9 +-
fs/xfs/xfs_pnfs.c | 19 +-
fs/xfs/xfs_qm.c | 42 +-
fs/xfs/xfs_quota.h | 9 +
fs/xfs/xfs_trans_dquot.c | 6 +-
include/linux/device.h | 5 +
include/linux/device/bus.h | 3 -
include/linux/filelock.h | 13 +-
include/linux/fsverity.h | 12 +-
include/linux/hiddev.h | 2 +
include/linux/interrupt.h | 2 +
include/linux/io_uring_types.h | 6 +
include/linux/kvm_host.h | 2 +
include/linux/pps_gen_kernel.h | 4 +-
include/net/af_rxrpc.h | 5 +-
include/net/mptcp.h | 9 +
include/trace/events/huge_memory.h | 18 +-
include/trace/events/rxrpc.h | 2 +-
include/trace/misc/nfs.h | 10 +
io_uring/bpf-ops.c | 16 +-
io_uring/cancel.c | 43 +-
io_uring/cancel.h | 2 +
io_uring/fdinfo.c | 14 +-
io_uring/futex.c | 32 +-
io_uring/io-wq.c | 138 +++-
io_uring/io_uring.c | 174 +++-
io_uring/io_uring.h | 44 +-
io_uring/kbuf.c | 6 +-
io_uring/loop.c | 8 +-
io_uring/mpscq.h | 14 +-
io_uring/napi.c | 4 +-
io_uring/net.c | 49 +-
io_uring/openclose.c | 11 +-
io_uring/poll.c | 21 +
io_uring/register.c | 61 +-
io_uring/rsrc.c | 7 +-
io_uring/rw.c | 18 -
io_uring/sqpoll.c | 35 +-
io_uring/sqpoll.h | 3 +-
io_uring/tctx.c | 9 +-
io_uring/timeout.c | 105 ++-
io_uring/tw.c | 36 +-
io_uring/uring_cmd.c | 2 +-
io_uring/wait.c | 32 +-
io_uring/wait.h | 15 +
io_uring/waitid.c | 12 +-
io_uring/zcrx.c | 2 +-
kernel/cgroup/cgroup.c | 28 +
kernel/fork.c | 4 +
kernel/irq/internals.h | 2 +
kernel/irq/manage.c | 31 +-
kernel/kcov.c | 8 +
kernel/kcsan/core.c | 7 +-
kernel/power/em_netlink.c | 126 +--
kernel/power/em_netlink.h | 8 +-
kernel/power/energy_model.c | 8 +-
kernel/resource.c | 9 +-
kernel/sched/ext/ext.c | 15 +-
lib/klist.c | 16 +-
lib/kobject_uevent.c | 6 +-
mm/hugetlb.c | 15 +-
mm/khugepaged.c | 21 +-
mm/rmap.c | 11 -
mm/slab_common.c | 17 +-
mm/truncate.c | 30 +-
net/8021q/vlan_dev.c | 33 +-
net/bluetooth/hci_event.c | 9 +
net/ceph/mon_client.c | 2 +-
net/core/dev.c | 3 +
net/core/rtnetlink.c | 4 +
net/core/skbuff.c | 2 +
net/ipv4/inet_connection_sock.c | 4 +
net/ipv4/metrics.c | 5 +
net/mptcp/subflow.c | 35 +-
net/netfilter/nft_payload.c | 40 +-
net/rxrpc/recvmsg.c | 22 +-
net/rxrpc/rxperf.c | 41 +-
net/rxrpc/sendmsg.c | 86 +-
net/sched/act_ife.c | 4 +
net/sched/cls_bpf.c | 28 +-
net/sched/cls_flower.c | 50 +-
net/sched/sch_generic.c | 14 +-
net/sched/sch_teql.c | 60 +-
net/sunrpc/auth_gss/svcauth_gss.c | 29 +-
net/sunrpc/svc.c | 9 +-
net/sunrpc/svc_xprt.c | 24 +-
net/sunrpc/svcauth_unix.c | 9 +
net/sunrpc/svcsock.c | 86 +-
rust/bindgen_parameters | 4 +-
rust/bindings/bindings_helper.h | 2 +-
rust/kernel/bitmap.rs | 70 +-
rust/kernel/block/mq/gen_disk.rs | 10 +-
rust/kernel/block/mq/operations.rs | 2 +-
rust/kernel/bug.rs | 9 +-
rust/kernel/configfs.rs | 43 +-
rust/kernel/cpufreq.rs | 22 +-
rust/kernel/fwctl.rs | 12 +-
rust/kernel/module_param.rs | 9 +-
security/apparmor/include/policy_ns.h | 16 +
security/apparmor/policy_ns.c | 2 +-
security/landlock/fs.c | 10 +-
sound/core/control.c | 2 +
sound/drivers/pcmtest.c | 42 +-
sound/soc/amd/ps/acp63.h | 8 +
sound/soc/amd/ps/pci-ps.c | 2 +
sound/soc/amd/ps/ps-common.c | 2 +
sound/soc/generic/audio-graph-card2.c | 3 +-
sound/synth/emux/emux_synth.c | 3 +
sound/synth/emux/soundfont.c | 9 +-
sound/usb/line6/pcm.c | 8 +
sound/x86/intel_hdmi_audio.c | 9 +-
tools/objtool/check.c | 1 +
virt/kvm/guest_memfd.c | 120 +--
virt/kvm/guest_memfd.h | 19 +-
virt/kvm/kvm_main.c | 75 +-
virt/kvm/pfncache.c | 18 +-
452 files changed, 8695 insertions(+), 3181 deletions(-)
^ permalink raw reply [flat|nested] 3+ messages in thread* Re: [PATCH 7.3 000/547] 7.3.2-rc1 review
2026-11-04 21:03 [PATCH 7.3 000/547] 7.3.2-rc1 review Greg Kroah-Hartman
@ 2026-11-05 0:27 ` Ronald Warsow
2026-11-05 3:08 ` SJ Park
1 sibling, 0 replies; 3+ messages in thread
From: Ronald Warsow @ 2026-11-05 0:27 UTC (permalink / raw)
To: Greg Kroah-Hartman, stable
Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee,
conor, hargar, broonie, achill, sr
Hi
kernel build / boot test on x86_64 (11th Gen Intel Core i5-11400).
not bisected, just "visual grepped" on the linux-stable-rc.git log !
I need to revert:
"x86/mm/pat: Fix effective RW computation in lookup_address_in_pgd_attr()"
commit 7f85bfd44bcccf315eb30145e9c2a2fd9f6f8a87
otherwise I get:
[ 0.105981] x86/fpu: Enabled xstate features 0x2ff, context size is
2568 bytes, using 'compacted' format.
[ 0.108036] ------------[ cut here ]------------
[ 0.108037] CPA detected W^X violation: 8000000000000123 ->
0000000000000123 range: 0xffffffffc0400000 - 0xffffffffc0400fff PFN 101000
[ 0.108039] WARNING: arch/x86/mm/pat/set_memory.c:722 at
__change_page_attr_set_clr+0xc4c/0x11f0, CPU#0: swapper/0/0
[ 0.108043] Modules linked in:
[ 0.108045] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted
7.3.2-rc1_MY-g75eaee7a6465 #1 PREEMPT(lazy)
[ 0.108047] Hardware name: ASUS System Product Name/ROG STRIX B560-G
GAMING WIFI, BIOS 2501 05/22/2026
[ 0.108048] RIP: 0010:__change_page_attr_set_clr+0xc65/0x11f0
[ 0.108050] Code: 7c 24 4c 00 0f 85 e9 03 00 00 48 8d 3d a4 78 01 03
48 8b 34 24 4d 89 e9 4d 8d 84 24 ff 0f 00 00 4c 89 e1 48 89 c2 48 89 04
24 <67> 48 0f b9 3a 48 8b 04 24 48 ba 00 f0 ff ff ff ff 0f 00 48 21 d3
[ 0.108052] RSP: 0000:ffffffff85203c40 EFLAGS: 00010246
[ 0.108053] RAX: 0000000000000123 RBX: 8000000101000123 RCX:
ffffffffc0400000
[ 0.108054] RDX: 0000000000000123 RSI: 8000000000000123 RDI:
ffffffff857c8f70
[ 0.108055] RBP: 8000000101000123 R08: ffffffffc0400fff R09:
0000000000101000
[ 0.108056] R10: 0000000000000123 R11: 0000000000000000 R12:
ffffffffc0400000
[ 0.108056] R13: 0000000000101000 R14: 000ffffffffff000 R15:
ffffffff85203d40
[ 0.108057] FS: 0000000000000000(0000) GS:ffff97940910f000(0000)
knlGS:0000000000000000
[ 0.108058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.108059] CR2: ffff979067570000 CR3: 0000000126238001 CR4:
0000000000770ef0
[ 0.108060] PKRU: 55555554
[ 0.108061] Call Trace:
[ 0.108062] <TASK>
[ 0.108064] ? _vm_unmap_aliases+0x229/0x2a0
[ 0.108067] change_page_attr_set_clr+0x154/0x5a0
[ 0.108070] ? perf_get_hw_event_config+0x28/0x30
[ 0.108072] set_memory_x+0x39/0x50
[ 0.108073] apply_retpolines+0x695/0x710
[ 0.108077] ? perf_get_hw_event_config+0x28/0x30
[ 0.108078] ? __pfx_x86_pmu_filter+0x7/0x10
[ 0.108080] ? perf_get_hw_event_config+0x2d/0x30
[ 0.108081] alternative_instructions+0x37/0xc0
[ 0.108086] arch_cpu_finalize_init+0x11b/0x170
[ 0.108087] start_kernel+0x9ae/0xa50
[ 0.108089] x86_64_start_reservations+0x24/0x30
[ 0.108091] x86_64_start_kernel+0x121/0x130
[ 0.108092] common_startup_64+0x13e/0x158
[ 0.108095] </TASK>
[ 0.108095] ---[ end trace 0000000000000000 ]---
Thanks
Tested-by: Ronald Warsow <rwarsow@gmx.de>
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [PATCH 7.3 000/547] 7.3.2-rc1 review
2026-11-04 21:03 [PATCH 7.3 000/547] 7.3.2-rc1 review Greg Kroah-Hartman
2026-11-05 0:27 ` Ronald Warsow
@ 2026-11-05 3:08 ` SJ Park
1 sibling, 0 replies; 3+ messages in thread
From: SJ Park @ 2026-11-05 3:08 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: SJ Park, stable, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
On Wed, 4 Nov 2026 16:03:04 -0500 Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote:
> This is the start of the stable review cycle for the 7.3.2 release.
> There are 547 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Fri, 06 Nov 2026 21:07:23 +0000.
> Anything received after that time might be too late.
This rc kernel passes DAMON functionality test [1] on my test machine.
Tested-by: SJ Park <sj@kernel.org>
[1] https://github.com/damonitor/damon-tests/tree/next/corr
Thanks,
SJ
[...]
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2026-11-05 3:08 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-11-04 21:03 [PATCH 7.3 000/547] 7.3.2-rc1 review Greg Kroah-Hartman
2026-11-05 0:27 ` Ronald Warsow
2026-11-05 3:08 ` SJ Park
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®