b7e7f36157eb Linux 6.18.25-xanmod1 3dac54db8c6c Merge tag 'v6.18.25' into 6.18 a256b1e6892e Linux 6.18.25 ce383ba61533 rxrpc: Fix missing validation of ticket length in non-XDR key preparsing 2937f17bbeef crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed 051e51aa55fd crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed 111dcc6d0f01 crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed 28324a3b62d9 net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() 6473ed16df1f ALSA: caiaq: take a reference on the USB device in create_card() f8397fc0ff9a ALSA: hda/realtek: Add quirk for Legion S7 15IMH 1d30e8d4a07c ALSA: usb-audio: apply quirk for MOONDROP JU Jiu c76cf339b879 f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() 028103656b84 writeback: Fix use after free in inode_switch_wbs_work_fn() feefd5d5b5ee ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() 5e7b8f3c539d ksmbd: use check_add_overflow() to prevent u16 DACL size overflow 790304c02bf9 ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment 3e5360b422dd ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() 299db777ea0c ksmbd: validate response sizes in ipc_validate_msg() 078fae8f50ad smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path 38a69f08ee82 smb: client: require a full NFS mode SID before reading mode bits 3943e4565aae smb: server: fix max_connections off-by-one in tcp accept path 283027aa9338 smb: server: fix active_num_conn leak on transport allocation failure 90089584b2e2 ksmbd: require minimum ACE size in smb_check_perm_dacl() 3fa185e32019 fuse: fuse_dev_ioctl_clone() should wait for device file to be initialized 9ef130452eaf fuse: quiet down complaints in fuse_conn_limit_write 1381635aeb7f fuse: Check for large folio with SPLICE_F_MOVE 0c7fca880a40 fuse: abort on fatal signal during sync init 7de93abfaae1 fuse: reject oversized dirents in page cache 59970b2586fe f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer 047c0aef6af3 f2fs: fix to avoid memory leak in f2fs_rename() 963d2e24d9d9 f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() 748c5d08f1a9 f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally 0112e6279420 fs/ntfs3: validate rec->used in journal-replay file record check f218fb82877b scripts/dtc: Remove unused dts_version in dtc-lexer.l c846ed5ac80f lib/crypto: tests: Drop the default to CRYPTO_SELFTESTS ca47b87f2457 kunit: configs: Enable all crypto library tests in all_tests.config 95c05443aa34 lib/crypto: tests: Introduce CRYPTO_LIB_ENABLE_ALL_FOR_KUNIT b0ca42c01883 lib/crypto: tests: Add a .kunitconfig file 05f723be4d64 kunit: configs: Enable all CRC tests in all_tests.config 04c61029a3b7 lib/crc: tests: Add a .kunitconfig file 6897bdfa505f lib/crc: tests: Add CRC_ENABLE_ALL_FOR_KUNIT e70c01412893 lib/crc: tests: Make crc_kunit test only the enabled CRC variants 28f77fca4449 sched/debug: Fix avg_vruntime() usage c6c87a23de4b arm64: errata: Work around early CME DVMSync acknowledgement ee5ce483d428 arm64: cputype: Add C1-Pro definitions 456d6040bb3b arm64: tlb: Pass the corresponding mm to __tlbi_sync_s1ish() e785d2751b1d arm64: tlb: Introduce __tlbi_sync_s1ish_{kernel,batch}() for TLB maintenance 243cec136a74 arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI 609624576b6f arm64: tlb: Allow XZR argument to TLBI ops 00ce8d6789da ksmbd: validate owner of durable handle on reconnect 3d6682726c2d ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger 377bbec04e16 scripts: generate_rust_analyzer.py: define scripts 07cbb1bd4243 crypto: krb5enc - fix async decrypt skipping hash verification 41d151254caa crypto: krb5enc - fix sleepable flag handling in encrypt dispatch b7cddf6c0175 drm/amdgpu: replace PASID IDR with XArray e97593f32bd5 net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers c5cedee5d973 ipv6: add NULL checks for idev in SRv6 paths ecc0eb147806 crypto: authencesn - Fix src offset when decrypting in-place