9ed50b728578 Linux 6.18.32-xanmod1
28b6603dc6cc Merge tag 'v6.18.32' into 6.18
52386a7b1beb Linux 6.18.32
271cd5429513 drm/amdgpu/vcn4: Avoid overflow on msg bound check
016b64a0313e drm/amdgpu/vcn3: Avoid overflow on msg bound check
e9edf9893cf2 vsock/virtio: fix accept queue count leak on transport mismatch
52da6a74ca3d vsock/virtio: fix empty payload in tap skb for non-linear buffers
a534e1f985b6 vsock/virtio: fix length and offset in tap skb for split packets
2602f7bb5818 vsock: fix buffer size clamping order
8be786053797 batman-adv: tp_meter: fix tp_num leak on kmalloc failure
5e9dfc07d061 tracing/fprobe: Remove fprobe from hash in failure path
a2181464a4a7 tracing/fprobe: Unregister fprobe even if memory allocation fails
d83e51202fec tracing: fprobe: optimization for entry only case
52277410cbed tracing: fprobe: use rhltable for fprobe_ip_table
5d12e0ab009a btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
dfd05a16b5c9 btrfs: fix double free in create_space_info_sub_group() error path
a4b5c5d2f8c5 btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type()
d784865ce48f usb: dwc3: Move GUID programming after PHY initialization
476ee6389120 usb: dwc3: Add dwc pointer to dwc3_readl/writel
e63942da5e96 usb: dwc3: Remove of dep->regs
ce9aaa3af445 sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters
30cf8e05d635 sched/ext: Implement cgroup_set_idle() callback
dc34f8d8240f Bluetooth: hci_conn: fix potential UAF in create_big_sync
c0a8dca8d556 spi: zynq-qspi: fix controller deregistration
ed822a569645 spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled()
33e5ce64b817 spi: tegra114: fix controller deregistration
65eafad7a600 spi: tegra20-sflash: fix controller deregistration
fafa9a4e831b spi: uniphier: fix controller deregistration
b0a97cb0b9ba spi: uniphier: Simplify clock handling with devm_clk_get_enabled()
6542e180fa6e pseries/papr-hvpipe: Fix race with interrupt handler
09c15bbbed53 papr-hvpipe: convert papr_hvpipe_dev_create_handle() to FD_PREPARE()
24d2912962d0 EDAC/versalnet: Fix device name memory leak
d281f3ac0d00 block: fix zone write plug removal
7105d9f1387d fbcon: Avoid OOB font access if console rotation fails
1817dd0c350f fbcon: Rename struct fbcon_ops to struct fbcon_par
f0d3bb6f5125 drm/amdgpu: rework how we handle TLB fences
13e9ea445191 Revert "drm/amdgpu: don't attach the tlb fence for SI"
576b73b24656 drm/amdgpu: Fix validating flush_gpu_tlb_pasid()
fd78e63459ab drm/amdgpu: validate the flush_gpu_tlb_pasid()
a9591e4083cc mm/damon/core: disallow time-quota setting zero esz
377c3d5dc952 usb: typec: tcpm: reset internal port states on soft reset AMS
d893804e9e3b mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values
4697ed7be9b9 mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values
679e65ae721c mm/damon/core: implement damon_kdamond_pid()
20048f0b38cd LoongArch: KVM: Compile switch.S directly into the kernel
f49a00180dfc io_uring/zcrx: warn on freelist violations
1a516d19100e io_uring/zcrx: use guards for locking
0baf4b659cdc batman-adv: bla: put backbone reference on failed claim hash insert
b65365d2b1e6 batman-adv: bla: only purge non-released claims
00155f336a5e batman-adv: bla: prevent use-after-free when deleting claims
09dc0d1a1222 batman-adv: stop caching unowned originator pointers in BAT IV
03660dab86f9 batman-adv: stop tp_meter sessions during mesh teardown
e1e2194cc725 batman-adv: reject new tp_meter sessions during teardown
bf872db54f91 batman-adv: fix integer overflow on buff_pos
c9dadb31f360 sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
cd39452498e2 arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22
3eb7d0e2d4a0 arm64: dts: qcom: lemans: Correct QUP interrupt numbers
f8f546883e87 drm/amdgpu/pm: align Hawaii mclk workaround with radeon
6fed6e9f1062 drm/amdgpu/pm: add missing revision check for CI
0b91ea46bb68 drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
6fbd52d210c1 drm/amdkfd: Make all TLB-flushes heavy-weight
46bc180e6ede drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds
73af14be7645 drm/bridge: tda998x: Use __be32 for audio port OF property pointer
71614ab2a683 drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
f6dbec5bee72 drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds
ed21d6e4ce03 drm/exynos: remove bridge when component_add fails
b17175d0a375 drm/amdgpu: zero-initialize GART table on allocation
264ee64cf867 drm/radeon: add missing revision check for CI
672464dd5323 drm: Set old handle to NULL before prime swap in change_handle
87f9b1528e1f drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise
fa449b88706e drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked()
0afa8b1ef582 drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
cd38e1503e67 drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked()
f9ad21b90162 drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure
2b5ba326f9d0 drm/udl: Increase GET_URB_TIMEOUT
db9530a9873a drm/amdkfd: validate SVM ioctl nattr against buffer size
a7735b491a2d drm/appletbdrm: Use kvzalloc for big allocations
1a17ea9861e8 drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
158def957199 drm/amd/display: Change dither policy for 10 bpc output back to dithering
638e48ee39d0 drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
63b51e8a9d54 drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
b3d1a0a45c4a drm/amdgpu/vce: Prevent partial address patches
a6d5563ba1f0 drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
fec8b11b55e5 drm/amdgpu: Add bounds checking to ib_{get,set}_value
44d5a450c04d drm/amdkfd: Add upper bound check for num_of_nodes
de137adccf7a drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x
f34eda3ff33d drm/amdgpu: gate VM CPU HDP flush on reset lock
2795d325bb5c drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count.
77d0b5d11387 drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
48fb2213e2c2 drm/i915/psr: Init variable to avoid early exit from et alignment loop
132b8d51f0ff drm/msm: always recover the gpu
c5b5a0e418b1 drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property
c57c861956b8 drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()
e9ae6590405d spi: cadence: fix clock imbalance on probe failure
6ac380a0071d spi: cadence: fix unclocked access on unbind
59701f07b19e spi: cadence: fix controller deregistration
6c3e413919a1 spi: mpc52xx: fix use-after-free on unbind
28f28a0f4e32 spi: mpc52xx: fix controller deregistration
336d9ad7560b spi: mpc52xx: fix use-after-free on registration failure
07dc76d31be4 spi: orion: fix clock imbalance on registration failure
b809b8d2a114 spi: orion: fix runtime pm leak on unbind
ec7a4cff8355 spi: orion: fix controller deregistration
5c03d52ee6ce spi: mxic: fix controller deregistration
2a2973cb3682 spi: imx: fix runtime pm leak on probe deferral
6a405d594207 spi: mpfs: fix controller deregistration
b2bdbe293012 spi: img-spfi: fix controller deregistration
4b0fe572a8ea spi: slave-mt27xx: fix controller deregistration
0df72db5a13c spi: sh-msiof: fix controller deregistration
aee76c1dd189 spi: rspi: fix controller deregistration
229cc70e4e90 spi: sprd: fix controller deregistration
cdbf6baefff0 spi: pic32-sqi: fix controller deregistration
82a95eca235b spi: cavium-thunderx: fix controller deregistration
e84a84209b3f spi: npcm-pspi: fix controller deregistration
ee2100d08094 spi: coldfire-qspi: fix controller deregistration
047f939c602c spi: bcmbca-hsspi: fix controller deregistration
ca3195c7b883 spi: fsl: fix controller deregistration
d78c5ca1563c spi: sh-hspi: fix controller deregistration
4422fc2411cb spi: ch341: fix devres lifetime
af4f58c18c4c spi: pl022: fix controller deregistration
cc8a904cbe6d spi: mtk-nor: fix controller deregistration
894d761a3a85 spi: pic32: fix controller deregistration
4ed7de898bbb spi: omap2-mcspi: fix controller deregistration
09ceedcebc77 spi: fsl-espi: fix controller deregistration
b99939bccae9 spi: s3c64xx: fix controller deregistration
c74ba7340010 spi: dln2: fix controller deregistration
724520793a2e spi: mt65xx: fix controller deregistration
cc525debdfc8 spi: mxs: fix controller deregistration
22ee38cbf536 media: qcom: camss: Add missing clocks for VFE lite on sa8775p
696ac7c49c27 media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init()
095c51bc86d3 media: venus: fix QCOM_MDT_LOADER dependency
e56a25247860 media: qcom: iris: increase H265D_MAX_SLICE to fix H.265 decoding on SC7280
9d6217429cd4 media: qcom: camss: Fix csid IRQ offset for sa8775p
8744fd0835dd media: qcom: camss: Fix csid clock configuration for sa8775p
dd24998a4a40 media: iris: Fix use-after-free in iris_release_internal_buffers()
1920b4602ec9 media: iris: fix QCOM_MDT_LOADER dependency
d172bb82f70c media: omap3isp: drop the use count of v4l2 pipeline
cedfde9f45b1 media: i2c: ov08d10: fix runtime PM handling in probe
d9e678e8c633 media: i2c: ov08d10: fix image vertical start setting
ea91dee38b4e media: staging: imx: request mbus_config in csi_start
731d7ab8dfa2 media: i2c: imx412: Assert reset GPIO during probe
34fe9c3c594e media: dib8000: avoid division by 0 in dib8000_set_dds()
def939175ab8 media: pci: zoran: fix potential memory leak in zoran_probe()
84d781069294 arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt
65d7b2aecdfe arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon
5167575b79e2 vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy
75c38af4d919 platform/x86: hp-wmi: Ignore backlight and FnLock events
45890a035e2b spi: aspeed-smc: fix controller deregistration
07938829cc11 spi: amlogic-spisg: fix controller deregistration
6047dc542fa4 media: saa7164: add ioremap return checks and cleanups
d6f56e66e8f4 spi: at91-usart: fix controller deregistration
5d707cf9c138 spi: qup: fix controller deregistration
4eccd83f228f spi: meson-spicc: fix controller deregistration
6ca3eaa82812 spi: lantiq-ssc: fix controller deregistration
184dcecc9521 regulator: bd9571mwv: fix OF node reference imbalance
037bcca27835 regulator: s2dos05: fix OF node reference imbalance
890a8bcef309 regulator: act8945a: fix OF node reference imbalance
41ef27dcaa12 media: i2c: imx283: Fix hang when going from large to small resolution
f43e30646fc9 media: intel/ipu6: fix error pointer dereference
21fade52ab9f media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
dd681c102b4b regulator: rk808: fix OF node reference imbalance
e7374c142169 regulator: bq257xx: fix OF node reference imbalance
6c5d4c819d92 media: i2c: imx283: Enter full standby when stopping streaming
ecd0c501bd63 media: rc: streamzap: Error handling in probe
63a960b39de9 media: rc: xbox_remote: heed DMA restrictions
a8ada5b76115 regulator: max77650: fix OF node reference imbalance
8993d307cf2c spi: st-ssc4: fix controller deregistration
2d51cfca8482 regulator: mt6357: fix OF node reference imbalance
c7848b67ef10 staging: media: atomisp: Disallow all private IOCTLs
af2dc8b8460c arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux
72972aba49df spi: atmel: fix controller deregistration
c66a6f226a5f spi: bcm63xx: fix controller deregistration
7fbb3b4bef02 drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages
ea28b33e1b15 media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change()
d71fc6874fce media: chips-media: wave5: add missing spinlock protection for send_eos_event()
b40ec65e0926 media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init()
6261d5fd172b media: dt-bindings: rockchip,vdec: Mark reg-names required for RK35{76,88}
361e66fb431d media: dt-bindings: rockchip,vdec: Add alternative reg-names order for RK35{76,88}
791598484fd5 media: i2c: ov8856: free control handler on error in ov8856_init_controls()
b6e5c80cc2b2 media: renesas: vin: Fix RAW8 (again)
bfb2081ba00a media: renesas: vsp1: Fix NULL pointer deref on module unload
4d6e8496486d media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
0ac9ec121d89 drm/msm/hdmi: Fix wrong CTRL1 register used in writing info frames
06d99af8db11 media: uvcvideo: Enable VB2_DMABUF for metadata stream
80d8cc29d3b6 HID: pidff: Fix integer overflow in pidff_rescale
5c0830323689 HID: appletb-kbd: run inactivity autodim from workqueues
59a79938ca55 HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
7812694752a5 HID: playstation: Clamp num_touch_reports