4f7ecb3fce0a Linux 6.18.10-xanmod1 0c50d8e763d9 Merge tag 'v6.18.10' into 6.18 41cec610f690 Linux 6.18.10 31b593fbece6 riscv: Add intermediate cast to 'unsigned long' in __get_user_asm ecd164120c24 ALSA: usb-audio: Use the right limit for PCM OOB check 24ad4cfac0b8 ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. 57bac0805678 spi: tegra114: Preserve SPI mode bits in def_command1_reg b8eec12aa666 spi: tegra: Fix a memory leak in tegra_slink_probe() 2ac3a105e514 spi: tegra210-quad: Protect curr_xfer check in IRQ handler d51554dc0569 spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer 3bc293d5b565 spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer 2d3c0122e961 spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one 51013068438a spi: tegra210-quad: Move curr_xfer read inside spinlock e1777c400b7a spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer b767cf2d4efc regulator: spacemit-p1: Fix n_voltages for BUCK and LDO regulators 3f9b508b3eec i2c: imx: preserve error state in block data length handler e71e3fa90a15 gpio: loongson-64bit: Fix incorrect NULL check after devm_kcalloc() 279cb9180510 ASoC: amd: fix memory leak in acp3x pdm dma ops 8434b351cd4e ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() 01d2fb15f15c firmware: cs_dsp: rate-limit log messages in KUnit builds abd66845227c firmware: cs_dsp: Factor out common debugfs string read b8ad2d53f706 ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF f3ed399e9aa6 nvme-pci: handle changing device dma map requirements 3c58f6121863 drm/xe/guc: Fix CFI violation in debugfs access. 8b68a45f9722 netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() 32ddd09d1103 hwmon: (occ) Mark occ_init_attribute() as __printf 8abb71d4a1dc drm/xe/pm: Disable D3Cold for BMG only on specific platforms 7c5db0957a23 drm/xe/query: Fix topology query pointer advance 184a84f03b5e drm/mgag200: fix mgag200_bmc_stop_scanout() 2e5edb69e5d0 net: gro: fix outer network offset 589a530ae44d net: add proper RCU protection to /proc/net/ptype 9f42cb8fafd6 net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() 100f3bf91461 drm/amd/display: fix wrong color value mapping on MCM shaper LUT 0031f8829c7f wifi: iwlwifi: mvm: pause TCM on fast resume 9b9f52f052f4 wifi: iwlwifi: mld: cancel mlo_scan_start_wk 5a2b4b0e9c00 net: enetc: Convert 16-bit register reads to 32-bit for ENETC v4 566ea5769ec2 net: enetc: Convert 16-bit register writes to 32-bit for ENETC v4 f346253e5fd9 net: enetc: Remove CBDR cacheability AXI settings for ENETC v4 d98745c68023 net: enetc: Remove SI/BDR cacheability AXI settings for ENETC v4 c175b1eaf729 tipc: use kfree_sensitive() for session key material f3931416cbdd net: rss: fix reporting RXH_XFRM_NO_CHANGE as input_xfrm for contexts 2718ae6af744 linkwatch: use __dev_put() in callers to prevent UAF 64cf3016234c io_uring/zcrx: fix page array leak fad7334082cd net: don't touch dev->stats in BPF redirect paths 8860ddf0e07b hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() 1b2efc593dca net: usb: r8152: fix resume reset deadlock cdedcd5aa3f3 macvlan: fix error recovery in macvlan_common_newlink() c9e4daf62ca0 net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module 8553bf2e0982 i40e: drop udp_tunnel_get_rx_info() call from i40e_open() 07bb882485f8 ice: drop udp_tunnel_get_rx_info() call from ndo_open() 7565d4df66b6 ice: Fix PTP NULL pointer dereference during VSI rebuild ef72678c9df0 ice: PTP: fix missing timestamps on E825 hardware 6801ef140fc3 ice: fix missing TX timestamps interrupts on E825 devices 1b381a638e18 dpaa2-switch: add bounds check for if_id in IRQ handler 4640fa5ad5e1 net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup 293eaad0d6d6 net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup d028147ae064 net: liquidio: Initialize netdev pointer before queue setup 155eb99aff29 dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero 8a672f177ebe net/sched: cls_u32: use skb_header_pointer_careful() 9b186feb7526 net: add skb_header_pointer_careful() helper f8611a7981cd hwmon: (dell-smm) Add Dell G15 5510 to fan control whitelist 9ee608a64e37 smb/client: fix memory leak in smb2_open_file() faff38ebbfe6 platform/x86/intel/tpmi/plr: Make the file domain/status writeable 9029ccfab2ca platform/x86: hp-bioscfg: Skip empty attribute names 6c45a5a7e1e3 platform/x86: intel_telemetry: Fix PSS event register mask f93ae43780b7 platform/x86: toshiba_haps: Fix memory leaks in add/remove routines 245ff08e261c Revert "drm/amd/display: pause the workload setting in dm" 98bf5bc8cb8c tracing: Avoid possible signed 64-bit truncation 6dd87f6afe9e ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio 3228b2eceb6c btrfs: reject new transactions if the fs is fully read-only b4b065a88099 wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice ccb3c75d5703 btrfs: sync read disk super and set block size 7a1bec39c014 wifi: mac80211: correctly check if CSA is active 990e40fb1d11 btrfs: fix Wmaybe-uninitialized warning in replay_one_buffer() 3835e49e146a scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() 108cbf2b7d29 ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU 1d5f2329ab4d io_uring/rw: free potentially allocated iovec on cache put failure c65a1a72a41e riscv: Use 64-bit variable for output in __get_user_asm 4530f4e4d0e6 scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() 8a7ef96e6af9 wifi: cfg80211: Fix bitrate calculation overflow for HE rates 36e88bd40a8c spi: intel-pci: Add support for Nova Lake SPI serial flash 7178b36de185 ALSA: usb-audio: Add delay quirk for MOONDROP Moonriver2 Ti f08f2d290767 regmap: maple: free entry on mas_store_gfp() failure 7d4c9c448c2b spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization 66b73d3f2cfc ALSA: hda/tas2781: Add newly-released HP laptop e6ce61e01c9a ASoC: tlv320adcx140: Propagate error codes during probe 3ba3d959c17a ASoC: amd: yc: Fix microphone on ASUS M6500RE 1c90f930e7b4 nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() 62932d9ed639 ALSA: usb-audio: Prevent excessive number of frames e810b290922c nvme-fc: release admin tagset if init fails a883080063f9 ASoC: simple-card-utils: Check device node before overwrite direction 61fa85497c7b ASoC: davinci-evm: Fix reference leak in davinci_evm_probe 9f665b3c3d9a dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() 921903d73967 ASoC: Intel: sof_sdw: Add new quirks for PTL on Dell with CS42L43 74309a4b0ffc wifi: mac80211: collect station statistics earlier when disconnect da1880c7b6b8 HID: Elecom: Add support for ELECOM M-XT3DRBK (018C) 71434e45bf12 HID: logitech: add HID++ support for Logitech MX Anywhere 3S b1f8285bc8e3 riscv: trace: fix snapshot deadlock with sbi ecall 151589d15ee8 ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free cd7ff7fd3e4b drm/amd/pm: Disable MMIO access during SMU Mode 1 reset ecb8653a8fe9 HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) 1e84a807c98a HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer 2124279f1f8c HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() 6e2108daed94 HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list 645671377158 drm/amd/display: Reduce number of arguments of dcn30's CalculatePrefetchSchedule() eb5d6dedadd6 netfilter: replace -EEXIST with -EBUSY ddab2d0f9320 PCI: qcom: Remove ASPM L0s support for MSM8996 SoC 3210077ed264 ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk 5b9bbe3d7bb9 x86/sev: Disable GCOV on noinstr object 75f1f512b156 ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 747b9a7d4c71 HID: playstation: Center initial joystick axes to prevent spurious events 7ae5b3514811 HID: intel-ish-hid: Reset enum_devices_done before enumeration 8b44e7537951 riscv: Sanitize syscall table indexing under speculation 28768bd3abf9 btrfs: fix reservation leak in some error paths when inserting inline extent a206870513cd HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL ea5ef771f3c2 HID: intel-ish-hid: Update ishtp bus match to support device ID table 6de3a371a8b9 btrfs: do not free data reservation in fallback from inline due to -ENOSPC 70dd3513ed6a smb/server: fix refcount leak in parse_durable_handle_context() c2ed4f71e928 LoongArch: Enable exception fixup for specific ADE subcode 2bb9c8a77df5 io_uring: use GFP_NOWAIT for overflow CQEs on legacy rings 4665e52bde3b smb/server: fix refcount leak in smb2_open() 0107b18cd8ac md: suspend array while updating raid_disks via sysfs 9531210f348a LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED fdda836fcee6 smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() f309b2c7df65 block,bfq: fix aux stat accumulation destination 86acdc179194 platform/x86: dell-lis3lv02d: Add Latitude 5400 ff6892ea544c wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP 6b7c60feab3c net: usb: sr9700: support devices with virtual driver CD 10d3ff7e5812 wifi: mac80211: don't WARN for connections on invalid channels 689a7980e478 wifi: wlcore: ensure skb headroom before skb_push e0bd226804f8 wifi: mac80211: ocb: skip rx_no_sta when interface is not joined abd219fd48b1 tracing: Fix ftrace event field alignments 116ffca92dc4 binderfs: fix ida_alloc_max() upper bound e9bcfe865188 binder: fix BR_FROZEN_REPLY error log a6050dedb6f1 binder: fix UAF in binder_netlink_report() 287221c5e070 rust_binderfs: fix ida_alloc_max() upper bound 685bb05d307a rust_binder: add additional alignment checks 598fe3ff32e4 rust_binder: correctly handle FDA objects of length zero 13de38aa3ea7 sched/fair: Have SD_SERIALIZE affect newidle balancing de7cb4282daf sched/fair: Skip sched_balance_running cmpxchg when balance is not due 3a15c519d2b0 bus: mhi: host: pci_generic: Add Telit FE990B40 modem support fa2274bb17a4 treewide: Drop pci_save_state() after pci_restore_state() 71c50e60421b PCI/ERR: Ensure error recoverability at all times 1a893bd71912 hwmon: (gpio-fan) Allow to stop FANs when CONFIG_PM is disabled 37751b6d0b6b hwmon: (gpio-fan) Fix set_rpm() return value 4385b2f28435 KVM: Don't clobber irqfd routing type when deassigning irqfd 7a245ef476ff KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures a82647e1a949 net: spacemit: k1-emac: fix jumbo frame support d5b3a6698669 net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue 488009aa62bb net: cpsw: Execute ndo_set_rx_mode callback in a work queue ef763b480a3d nouveau/gsp: fix suspend/resume regression on r570 firmware a20887d5239a nouveau/gsp: use rpc sequence numbers properly. 9cc8caba82c2 nouveau: add a third state to the fini handler. 5f645222eb30 Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" 7b6a0f121d50 mm, shmem: prevent infinite loop on truncate race 41a7b9ab855c gve: Correct ethtool rx_dropped calculation 11f8311f69e4 gve: Fix stats report corruption on queue count change e9cdd54797dc drm/amd: Set minimum version for set_hw_resource_1 on gfx11 to 0x52 d3081353acaa cgroup/dmem: avoid pool UAF 5c38604abbfa cgroup/dmem: avoid rcu warning when unregister region c13816e8fa23 cgroup/dmem: fix NULL pointer dereference when setting max e258ed369c9e ceph: fix oops due to invalid pointer for kfree() in parse_longname() 35e6fd0d5bc3 ARM: 9468/1: fix memset64() on big-endian 46dfdb6f7a79 rbd: check for EOD after exclusive lock is ensured to be held 57b36ffc8881 ceph: fix NULL pointer dereference in ceph_mds_auth_match() e8af57e09079 mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single cbc03ce3e6ce procfs: avoid fetching build ID while holding VMA lock eb54ce033b34 pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains 11ca03ce17d7 pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup 5171a3dddf42 pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset 72129d55be9c pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup d72563e402ba pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state 5727ccf9d19c ALSA: aloop: Fix racy access at PCM trigger 21816bbc8492 platform/x86: intel_telemetry: Fix swapped arrays in PSS output b5a02290ee3a KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() a94b956bb727 x86/kfence: fix booting on 32bit non-PAE systems feb603a69f83 x86/vmware: Fix hypercall clobbers ab200d71553b nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec