812bbf165655 Linux 6.18.55-rt-xanmod1
0762182d02e9 Merge branch '6.18' into 6.18-rt
9c4e23d39c1a Linux 6.18.55-xanmod1
48efd6293fa7 Merge tag 'v6.18.55' into 6.18
725bd2f3c81d Linux 6.18.55
fa047f2a0250 bpf: Reject key-less BTF for hash maps
98fd50aaaeb2 rose: don't warn on stray CALL_ACCEPTED/CLEAR_CONFIRMATION in state 3
5454ea6e22e7 rose: use timer_shutdown_sync() for t0timer teardown
bcf4c43f797c rose: guard rose_transmit_link() against a NULL neighbour
7d10439345e2 rose: keep the route needed for routing loop detection
6c401ae426e2 sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags
d3c8fb7094c5 hfsplus: avoid double unload_nls() on mount failure
500c9259f5a6 mm/damon/core: fix unconditionally skip last region
f6660e9a3e1e rust: net: phy: fix off-by-one bit positions in device status accessors
d50418db3b86 Revert "rust: net: phy: fix off-by-one bit positions in device status accessors"
c525772c304c RISC-V: KVM: Serialize IMSIC attributes with vCPU migration
5fdc644a4fea RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_rw_attr()
4a04ed915758 net/sched: act_ct: avoid modifying shared unconfirmed ct entry
812c16a255e7 net/sched: act_ct: fix helper UAF due to extensions realloc
9ba16ce8f3fa x86/sev: Make vTPM SVSM calls preemption-safe
e43d42bd711e x86/sev: Remove redundant ghcbs_initialized checks around __sev_{get,put}_ghcb()
524becfebcd0 x86/sev: Carve out the SVSM code into a separate compilation unit
b2a9d6ff593b x86/sev: Add internal header guards
1cad4f235e15 x86/sev: Move the internal header
99607d955be3 perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints
7ba97aa16778 perf/x86/intel: Update event constraints and cache_extra_regsfor LNL
edc0309282aa perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification
51199c793bc0 perf/x86/intel: Update event constraints and cache_extra_regsfor ADL
24e79508b237 net: ipconfig: bound DHCP option construction
8fbfa861dfd4 net: ipconfig: Remove outdated comment and indent code block
bda487567d0b net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths
aa4845a710ae HID: alps: unregister DualPoint Stick input device on remove
48c5c02bf6fd HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM
d0f6244f4af4 PCI: Fix BAR resize for devices on a root bus
85b1112945f2 super: make iterate_supers_type() deletion-safe
ccf96a4b8626 mm/hugetlb: do not dissolve gigantic pages without runtime support
2ab4b6815d10 mm/hugetlb: create hstate_is_gigantic_no_runtime helper
4cef512a955e mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish
a56e5bcc4331 mm/rmap: allocate anon_vma_chain objects unlocked when possible
fcbedba553a9 drm/client: fix restore of partially initialized client
933145e2bbb4 drm/client: Pass force parameter to client restore
0589706ace3b drm/client: Remove holds_console_lock parameter from suspend/resume
817dd706ee61 drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc()
13f299763f6c drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1
97e40aa29c10 drm/i915/psr: Disable PSR2 on Xiaomi Book Pro 14 2026 as a quirk
66f814e8af46 drm/i915/psr: Fixes for Dell XPS DA14260 quirk
782b5210e89e drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk
5815329988ac i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL
f42562dd027d vlan: require the MAC header to be present in __vlan_insert_inner_tag()
241e67b60308 cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict
d186e0171c8a cgroup/cpuset: Ensure domain isolated CPUs stay in root or isolated partition
8a64ac9f03fc cgroup/cpuset: Move up prstate_housekeeping_conflict() helper
438bf73ca977 net: tls: fix silent data drop under pipe back-pressure
66a2179d0266 xfs: fix cursor and pointer handling when recovering iunlink buckets
86b17699bd0c xfs: fix blockgc group quota scanning when usrquota isn't enforced
930a9c1c321e xfs: don't let hidden_space go negative in xfs_metafile_resv_init
09ebf777ad4e xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits
d46492fb8018 xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots
543bc5fd7d8e xfs: fix rtgroup repair estimations
6aabf4f351cd xfs: check di_forkoff correctly in scrub
f99c67247179 xfs: use the correct reservations for rtrmap/refcount recovery
adb80d620dab xfs: don't call xfs_exchange_range_finish for a dry run
770d21b52c91 xfs: check padding field in xfs_ioc_commit_range
09b7a63e11c7 xfs: use correct jiffies comparison function in xchk_maybe_relax
6a65a68097a1 xfs: release orphanage dir inode if chown fails
ac76f8df5598 xfs: fix attr fork block count checks in xrep_inode_blockcounts
ef7a56c6630f xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption
c2ac475ddd73 smb: client: validate POSIX create context length
31107f79ad33 smb: client: preserve create-context parsing errors
abab661eed00 smb: client: clean up failed cached directory opens
05a7fd80024f smb: client: fix create context out-of-bounds reads
8f5b30cc12c4 Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO
416546cd6a54 Bluetooth: mgmt: fix race in read_unconf_index_list()
c6a288e6001b Bluetooth: L2CAP: validate frame length before control and FCS access
ed4c026cc409 Bluetooth: ISO: release unused CIS holds after channel attach
4e49206d9574 Bluetooth: ISO: balance the parent hold in hci_bind_bis()
173457fa3e99 Bluetooth: hci_sock: reject out-of-range OCF values
f894f6292d51 Bluetooth: hci_sock: validate event length before filtering
3ff5a8d949e3 Bluetooth: hci_conn: fix CIS hold ownership on reuse
57ccaa818307 RISC-V: KVM: Fix HSM hart status error propagation
5567ce11304d RISC-V: KVM: Propagate interrupted G-stage faults
ea91f05a55b8 RISC-V: KVM: Synchronize hrtimer callback during teardown
e5dd2a91a7ae KVM: arm64: Transfer the hyp stack pages out of the host stage-2
970de111c087 KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race
c23ed110d27b KVM: arm64: Fix spurious warning for benign stage 2 teardown race
8530a05b304d KVM: arm64: Fix AArch32 DBGBXVR<n> handling
37dfb676fafd KVM: SEV: Do cache maintenance on the source VM during intra-host migration
6aef7cf80009 KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV
066a53a0bc19 KVM: Don't treat reserved xarray entries as having memory attributes
7dcaf0107523 KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg
cf441a0db681 s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config
af295f0eab68 s390/pci: Don't report recovery success on skipped recovery
eef5c8e1cca6 s390/pci: Report SCLP status on error events when no pdev is associated
743a8458978d s390/pci: Fix missing device lock in zpci_report_status()
dd5ed64dadb0 s390/pci: Fix leak of struct pci_dev reference in zpci_report_status()
748ec2f7f5df s390/cmf: Fix virtual vs physical address confusion
c3bbcb32deec s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()
02664a8d8d59 pinctrl: sunxi: keep a shadow copy of the data register output latches
1deeeca89ea1 pinctrl: single: free the IRQ on domain creation failure
a23f9f9b56b7 perf/core: Run sched_task() for PMUs with only CPU-wide events
249a2bd87a0e perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()
5023c70853ad parisc: Increase kernel stack size to 32kb
ee56b5e18f56 scsi: libiscsi_tcp: Check the data direction of a Data-In PDU
cc444e4ad434 nfc: trf7970a: power down on startup RX gain failure
14b1467cfc66 nfc: port100: reject frames whose declared length exceeds the received data
810f204ef8f6 nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()
841af260ff47 nfc: fix use-after-free in nfc_get_local_general_bytes
12cf803edfff netfilter: nf_tables: skip expired catchall elements on insert and delete
191239b09396 netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
eafe081ea77d netfilter: ip6t_rpfilter: reject routes without inet6_dev
8a611f33216f net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs()
7d2377868feb net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist
43ff11501ea6 net: txgbe: fix FDIR filter restore for VF rules
9447ddd8b924 net: phy: micrel: Advance register data pointer in write loop
30ff01b4c7e4 net: ena: fix MMIO read buffer leak on probe failure
e8a2f48bbff1 net: ena: fix PHC cleanup on probe failure
ab3c4a4c85f2 net: bridge: mdb: restart port group walk after deletion
4b7161804d8f net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
586847400b11 net: atl1c: fix soft lockup on out-of-range tpd_cons read
5f23080a625d net: openvswitch: conntrack: fix helper UAF due to extensions realloc
caefcd433ecb net: openvswitch: conntrack: remove 'add_helper' dead code
e2829ae5459d net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry
729737267e7c net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy()
0f573b057625 net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read
ba664d836386 net: arp: terminate device name before lookup
aca91d8fa0ec net: airoha: npu: cancel wdt_work after releasing the WDT IRQ
968550a439f6 net/sched: reject IDR error pointers when deleting actions
3803dc8477f0 net/mlx5e: fix swapped IPv6 IPsec policy masks
0c336ecabaf9 net/mlx5e: advertise MACsec offload only when supported
99d8dc516637 net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()
c3129e6f26e1 HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()
5695ec5339d4 HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard
925da1d2a247 HID: alps: fix use-after-free on input2 registration failure
eda9bcb721f1 packet: use ubuf_info completion for TX_RING packets
879c911f77b8 PCI: of_property: Omit bus properties without a subordinate bus
e59cb7eda7c0 mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()
850cc4a84b36 mm/hugetlb: preserve mremap address delta when skipping page tables
b1db1ec5c894 gpio: tps65219: Fix TPS65214 GPIO direction programming
ac3c7eb6a44b gpio: tps65219: Use the variant-specific direction callback
fabe897e61e4 gpio: tps65219: Fix GPIO input value reads
f2f1683955b9 drm/virtio: fix NULL pointer dereference on fence allocation failure
8fa78900fd24 drm/virtio: fix memory leak of fence event on execbuffer failure
c2d4689c3ea9 drm/xe: Keep walking on SVM eviction failure
c306b6419fd0 drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV
2bcbfc5e7bfa drm/xe: harden adjust_idledly() against divide-by-zero and overflow
ba678c2b02e0 drm/xe/vm: nuke PTs only after unlinking contested VMAs
19f5a5839b30 drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()
35151e9a8274 drm/nouveau: RCU-free the scheduler-containing nouveau_sched
59aa1f8c9594 drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()
030e93fc91d5 drm/nouveau: Fix gem reference leak in validate_init()
109a8d2d5b7d drm/nouveau: fix double-free in nvif_vmm_dtor
6d497216c10a drm/nouveau: Fix bridge reference leak in nv1a_ram_new()
9132215d2c90 drm/nouveau: fix autosuspend cleanup during teardown
0d29bf51f8dd drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM
c83261854e19 drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init()
c28e74395ab0 drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()
0bfb0419a148 drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init()
d197b15d4beb drm/amd/display: Bump frame warning limit for clang builds of dml
89a11c7efe38 drm/amd/display: Fix dc stream excess put in dm_update_crtc_state()
fe933dda0bb1 drm/i915/dp_mst: Fix configuring TUs for a disconnected stream
369f4e326437 drm/i915/dp_mst: Fix configuring FEC for a disconnected stream
cc890d3f1b15 drm/i915: fix incorrect RCU teardown order
bbef7450e2b4 drm/imagination: Fix page count for page table for map() interface
afe5b4d66d45 drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()
e2ee06162600 rds: ib: Clear the sg list when mapping an MR fails
e35cb500dd14 mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()
e06f8b6e27cc llc: reserve device headroom for allocated frames
58a417a19d80 gpio: zynq: fix runtime PM leak on request error path
cf3d043582e1 gpio: cdev: fix kernel stack leak to user-space in error path
a9f738487c11 gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()
6fcfc362344e ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST
1d4282856588 ipv6: do not let ipv6_find_hdr() return an offset past the packet end
599d0498a393 ipe: protect the dm-verity root hash with RCU
48f7d0233c3c ipe: fix use-after-free when auditing a newly loaded policy
c2a5e5918586 fsl/fman: Fix clk reference leak in read_dts_node()
fd3bf32279df writeback: report a Tasks-RCU quiescent state per cgwb drain pass
1dccf5dc2f8f workqueue: Fix NULL current_pwq deref in flush dependency check
dd4b92067238 writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes
37ec7353f4ac fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
b1229b210ef5 fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT
2f7042429a8e cgroup/pids: Restore pids.events notifications in local mode
caf8b2d9b30c crypto: s390/hmac - Generate intermediate CV for API partial block handling
7504b677c437 bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir
4d97a141e85a bna: prevent IOC timer rearm during teardown
1603abb0c504 ata: libata-scsi: bound the ATA passthru sense descriptor writes
cdccb760be1f arm64: errata: match the target implementation CPU's own MIDR
071f51188a5d arm64/boot: Disable trapping of PMZR_EL0 writes to EL2
6279211e7d24 af_packet: fix integer overflow in prb_calc_retire_blk_tmo()
ec23855274a7 sctp: discard the rest of the packet on a stale-cookie error
7ba87509c54c tcp: prevent collapsing skbs across boundary in rtx queue
12cc3a1eac5a tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
ca40f4df4ab2 virtio_net: copy zerocopy frags in start_xmit without NAPI
33da1ff56f95 x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11
f50d2e8cc1f1 x86/mce: Fix hardware debug register corruption on task migration
a557816c6e38 netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase
7b32eba3fad8 rculist: add list_splice_rcu() for private lists
162bf5f73f1b mptcp: return sk_wait_data() errors from recvmsg()
9fe317b999aa sched/core: Account PSI IRQ time to the execution context, not the scheduling context
23250517cd47 perf/core: Fix a refcount leak in attach_perf_ctx_data()
654fc8445ca8 perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs()
068828975345 perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused
8cb5a01cb5f1 perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED
c205e3fc9962 perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits
4bcb37101909 autofs: fix sbi->pipe file reference leak in autofs_kill_sb()
c7ee4bea64f5 vlan: ensure sufficient headroom in vlan_dev_hard_header()
7f8b56c82919 net/sched: sch_teql: fix shadowed err in __teql_resolve()
15d00994a1bd bridge: check llc_mac_hdr_init() return value in br_send_bpdu()
41dcae82bece llc: fix skb UAF and leaks on llc_mac_hdr_init() failure
2dc3ae3942e1 gve: DQO: reject TSO packets with an out of range MSS
089e04db4475 gve: fix TX drop when GSO MSS is too small for hw
feab3880a72b gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO
2f855c52a2e1 gve: add support for UDP GSO for DQO format
6d4a5ce75b6e gve: Enable hw-gro by default if device supported
adbfc707ff6b gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO
6c7937db1d56 gve: Allow ethtool to configure rx_buf_len
bcaedb514a5d gve: Use extack to log xdp config verification errors
a0d644b8ff88 gve: Consolidate and persist ethtool ring changes
5f86408eba31 net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails
d990b786abfd tipc: Fix a data race on mon->peer_cnt in mon_timeout()
3d65a2eb4449 net/smc: fix UAF on lgr list traversal in smcr_port_err()
8468d05aa08d nfp: hold IPsec RX state under the XArray lock
4e7a4af364c2 net: phylink: record the PHY only once bringup cannot fail
631aa4cb4509 tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()
2357c682f6ea net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq
62c0e38b2e50 net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621
2b42adf3b8ee macsec: initialize SecY before registering the netdevice
dc106fe25e9a bonding: crypto offload enabled, non-offload slave failover, rekey failed
e0560db0ea6e drm/imagination: clamp freelist reconstruction requests
2cc1c3977acb net: xps: reject an out of range traffic class
a3c5eb6e382d vxlan: use one headroom snapshot for neighbour replies
bdd41b96e814 ip_gre: Reject enabling collect metadata through changelink
c3fab2f1d8a6 net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT
d68899b50caf net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr
b3ebe8983d86 net: bcmgenet: do not skip WoL power up on GENET V1
21a0de485877 net: bcmgenet: initialize u64 stats seq counter for all queues
aefa837c2667 net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems
501baaeca7d1 net: stmmac: clear stale buf->page after recycling on skb build failure
0f7ed27586ac tg3: use random MAC address when tg3_get_device_address fails
e40990861074 bpf: Fix BSWAP 32 and 16 on MIPS64
876ef04c75c2 bpf: Fix immediate JMP JEQ/JNE on MIPS32
6d76ddce4f1b vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets
cfa643f2ca36 net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()
25bb7c362252 veth: manage XDP program pointers during channel resize
63bcc2fee641 net: bcmgenet: stop Tx NAPI before disabling the queues
284166f34b8f net/sched: act_gate: budget the per-entry list in get_fill_size
e72cbedc4596 nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()
8978dff63251 nfc: llcp: fix slab-out-of-bounds reads when logging service names
f234197f3bda nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()
2386d107df6d nfc: llcp: fix -ENOMEM on connect with zero-length service name
fdd95e819d82 nfc: st21nfca: validate ISO15693 inventory length
cbde7f5d3261 nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure
0b32dcc8a3f9 nfc: virtual_ncidev: Add missing ioctl compat handler
27cf04ba4e7e selftests/nci: Fix out-of-bounds store on thread join
f9cbe5c68d93 selftests: nci: Fix uninitialized family ID on missing attribute
da8a07757383 nfc: llcp: Fix race condition in accept_queue lifecycle
3316903fdc3a selftests: nci: Correct pthread_create return value check
b94cf0972054 nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()
57919d0662d8 nfc: st21nfca: validate received frame size
ed2e00bb22c7 nfc: nfcmrvl: validate helper command length before pull
940b626854de bpf: Reject dev-bound-only programs on other devices
9923e1c537f9 net/sched: fix potential stack infoleak in em_text_dump()
92c9f2ea634d eth: fbnic: Avoid rounding zero ring sizes
3ea177bdba25 net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test
b17959fb4d55 net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K
4c4217aaa5e4 net: stmmac: selftests: Capture all packets for vlan checks
e7a8bbb6149b net: stmmac: selftests: Check the dev->features for S-TAG offload testing
74da0c1cede8 net: stmmac: selftests: Support running selftests on DSA conduits
d18cb8fd1b6b sctp: hold asoc or transport before mod_timer() in timer handlers
650dcd938e56 net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports
cdeca5de4e18 net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports
cea597519b9c bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc
d95dd5a6c6cd bpf: Fix bpf_sock context code generation
1196903a27ca bpf: Fix bounds check for skb-backed dynptrs
fb1e2df8e2e2 thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds
0f5d8953cb63 net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure
54e98316ce5c genetlink: report the real command id for dump-only ops in policy dumps
41e444535c60 net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error
ca9986cc824f net: spacemit: clear TX descriptor on fragment mapping failure
9c6af88fbefb s390/debug: Fix NULL pointer dereference in debug_info_copy()
36831afe8eba s390/debug: Do not register views for failed static debug areas
8b661a045082 drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable
6515c41503ee tg3: clean up PHYLIB resources on probe failure
c21daf37d5ce udp: remove a disconnected socket from the 4-tuple hash table
7a0bbe5654ec udp: relocate a connected socket in the 4-tuple hash table on re-connect
ed902d5546fb ipv6: Fix dst leak for uncached routes.
6ab6c9d120b3 net: usb: sr9700: include receive overhead in the length check
e3c21e8b5390 dpll: use exact lookup for reference sync pin id
649ffc76ed54 ipv6: Prevent rt6_insert_exception() for dying fib6_info.
ff8cff3aff67 octeontx2-af: Fix memory scaling limitation in SR-IOV mode
be00deee6004 Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()
8ec5838a35b0 Bluetooth: btintel_pcie: validate device-supplied DMA indices
8f3103132699 Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough
a8f3a829f3a5 ovpn: reject invalid peer VPN addresses
7efbc134253c ovpn: reject multipeer peers without VPN addresses
daab972893ae ovpn: reject duplicate peer VPN addresses
12ee72319805 ovpn: always unhash old VPN addresses before rehashing
c44a04722f7d ovpn: replace bind when clearing stale local source
21dbc9f4d0bd ovpn: replace bind when learning local endpoint
324ebbde06cd ovpn: validate peer state before caching UDP dst
db97cfe9a507 ovpn: track UDP socket route key for peer dst cache
ba3877bdcc9a ovpn: skip UDP source validation for unspecified addresses
8c1d7994a18e ovpn: preserve IPv6 scope id for netlink peer endpoints
ebffd70e4877 drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach
d6b59a9fece4 drm/virtio: sync shmem backing on guest-bound transfers
e7df00bb036e Revert "drm/virtio: Allow importing prime buffers when 3D is enabled"
5c2cb3dd1447 drm/virtio: release the GEM object on virtio_gpu_vram_create() errors
81c6769e069d drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()
b516446a25bf drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()
a93dce15dfef drm/virtio: fix object leak when drm_gem_handle_create() fails
0fa25ba50a38 net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget
cd12d3e08620 bpf: Check params size before reading reserved fields
dd9c6f8f0517 net: usb: catc: bound the RX packet length in catc_rx_done()
9c11e543fec3 bpf: Bound ownership depth through local kptrs and graph roots
c9338057df10 sctp: avoid livelock while updating retransmit path
c7a254c16c6f eth: fbnic: Handle FW mailbox completions flagged with an error
a85a019b3011 eth fbnic: Add debugfs hooks for firmware mailbox
6a112552d305 eth: fbnic: Reuse RX mailbox pages
8a052cd4b2ca eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox
c5b5aee41b9f eth: fbnic: reset num_napi when the napi vectors are freed
6c903188b676 eth: fbnic: Handle maximum standalone channels
8dc566777091 ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink().
7254b702e556 net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure
40aeafbcbc7b net: gue: reject invalid REMCSUM offsets
00734f3684fc net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure
ca29834c8c14 drm/nouveau/disp: don't reject HDMI config on cards without SCDC
40afa1f7a5c7 drm/nouveau/clk: don't clobber reclock status when restoring volt/fan
0d096a7f7d79 drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update
f2e9005aadb6 ocfs2: make ocfs2_calc_xattr_init() return void
b17aa4955e3a arm64: io: Reject non-user protection in ioremap_prot()
0994c3e3b4e3 netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name
f100578039b3 ipvs: revalidate ihl before icmp_send
302477c9ffef netfilter: nft_synproxy: use the family-aware checksum helper
07a3ec8fdc5a netfilter: nfnetlink_queue: hold nfnl mutex in event notifier
b0ef9450e93f netfilter: flowtable: publish HW_DEAD after worker is done
1363c71be27a ipv4: fib: fix data-race and stale genid check around nh->nh_saddr
5be5ccd3a556 libbpf: Reject truncated ldimm64 CO-RE relocations
2d7d04357c41 bpf: Restrict CO-RE poisoning to relocatable instructions
2fe1569e32dd net/mlx5: devcom, Base component size on linked devices
8ebfd34fef75 octeontx2-af: use seq_file for rsrc_alloc debugfs
6127164efa94 net: pcs: rzn1-miic: Fix config array initialization
f6696481eedf net/sched: cls_u32: fix manual hash table handle IDR aliasing
f4277b19edbc eth: fbnic: Fix payload page pool error cleanup
6e271f093d15 bpf: Skip unsettled links in link iterator
b5c0cff0c533 xsk: Use a 32-bit compare in xsk_map_gen_lookup
e4f3e476cd40 fs: avoid repeated scans in evict_inodes()
22225cd612b2 s390/cio: Guard PMCW field accesses with dnv check
5eae708cca8f s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points
591ba131193e s390/cio: Fix cio_update_schib() to not cache invalid schib
8bd9905dfbd9 s390/pci/docs: Fix sriov_numvfs attribute name
e163f1dccede docs: s390/pci: Improve and update PCI documentation
6675f801b0d6 scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume()
0117e731435b selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode
2189a219397d Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel
8a36598050cd Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()
6fdabd654578 Bluetooth: SMP: reject Security Request over BR/EDR
9c051b12ca10 pinctrl: sunxi: A523: fix voltage withstand encoding
0af16d8be3ec scsi: sd_zbc: Reject disks with too many zones
0cb85377daae squashfs: Add dictionary size range check to prevent shift-out-of-bounds
5d54693bc457 KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP
cb68b5589318 KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0
4efda2040871 KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2
f12695216714 KVM: arm64: Include VM type when checking VM capabilities in pKVM
bbcd7e851d57 KVM: arm64: Fix MTE flag initialization for protected VMs
c142034ad3a8 KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode
bd46b41f412f KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure
faf66e55e874 KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()
65bffaf100df KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save
80a6b712dc19 KVM: arm64: vgic-its: Free the caches when GITS_BASER changes
c2230cd14950 RISC-V: KVM: Fix perf-backed counter accounting across stop and read
f6f1d27e0c89 RISC-V: KVM: Report snapshot write failure to the guest
f4363eede3e7 RISC-V: KVM: Preserve firmware counter value across stop/start
d6de766d8d26 KVM: riscv: Fix NACL hfence entry update order
5c221f33a518 HID: bpf: fix __hid_bpf_hw_check_params report length
5f9e2ecb725a HID: amd_sfh: Validate PCI BAR size before mapping
905d1a40f34f pinctrl: meson: Fix typo in s4 group name
b67b4c763f21 bpf, arm64: set up the frame pointer for the exception callback
ae1ffd04e98b bpf, sockmap: Fix self-redirect copied_seq double-counting
1d6581b544a8 bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk
51a17f0ce19c bpf: Register dtor for freeing special fields
6785313d4fac bpf: Fix out-of-bounds read of rtt_min in sock_ops
44f9bcb5ab2b bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()
5ad116c23f14 KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr()
08a4d55b2672 HID: elecom: fix bus type for M-XGL20DLBK
49688a0d1ac6 HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio
55bbebf2829c tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context
91a482a81eab bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()
8eb4cd72daad bpf: Fix divide-by-zero in btf_struct_walk()
5334c609bf92 selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc
37b18688cd18 bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL
69fe51a3bd78 bpf: Fix bpf_skb_change_tail wrt csum partial skbs
04bb5b2eb9f1 s390/uv: Prevent potential out-of-bounds read
018e137ac1da s390/uv: Fix loop condition in uv_find_secrets
a379ac504fcb KVM: s390: Fix IRQ injection with SIGP Stop and Store Status
7c7a6ba6128f remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage
50d844aead62 ALSA: hda/realtek: Add StarFighter HDA SSID
56b321df2863 ALSA: hda/realtek: Limit Star Labs internal mic boost
2945d3eb73d6 drm/amd/display: Atomize IRQ register read/modify/write ops
d1079deec828 erofs: fix large folio race in erofs_fscache_req_complete
14ae74db795a xfs: don't stash removename operations with unknown ftype
8bab3e07b105 Linux 6.18.54-xanmod1
867f462b0bcd x86/build/64: Fix kconfig recursive dependency
cfeec564ed59 XANMOD: Makefile: Move x86 instruction set selection to kernel-wide build [v6.18.54+]
b0eb53a7822e x86/kconfig: more x86-64 ISA levels and uarches [v6.18.54+]
327603557267 Merge tag 'v6.18.54' into 6.18
f3b5493c81ab Revert "x86/kconfig: more x86-64 ISA levels and uarches"
1313bbcb930e Revert "XANMOD: Makefile: Move x86 instruction set selection to kernel-wide build"
1b357ecb3213 Linux 6.18.54
c8c7639aa324 smb/client: send lease break ACKs thru correct session for multiuser mounts
024eb5c4cea0 Revert "ksmbd: Fix to handle removal of rfc1002 header from smb_hdr"
74f179e75ab0 Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device
8a143f91f1f7 ASoC: sdw_utils: subtract the endpoint that is not present
3c8f0ae0d3b0 wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor()
5a93dbeb555d ksmbd: fix partial normalized name responses
d1152c96a300 smb: client: fix reparse buffer bounds in cifs_query_reparse_point()
ac7c08626f67 wifi: libipw: reject TKIP frames without a full MIC
87b9893107ea wifi: ipw2x00: Use michael_mic() from cfg80211
dcbb37bb1f1e wifi: mac80211, cfg80211: Export michael_mic() and move it to cfg80211
47e09d6fd0bf wifi: ipw2x00: Rename michael_mic() to libipw_michael_mic()
aeaa7bdc0ea2 drm/amdgpu: hold a runtime PM reference for P2P dma-buf attachments
801d8647dcb0 drm/amdgpu: lock bo before calling amdgpu_vm_bo_update_shared
b8f46ca5cbd6 xfs: fix under-reservation of blocks when repairing sf directories
24beea233aae xfs: remove the i_ino field in struct xfs_inode
1e0a34f690e5 xfs: convert xchk_inode_xref_set_corrupt to xchk_ip_xref_set_corrupt
34b3b32fb1a9 xfs: add a xfs_rmap_inode_owner helper
a6767712902b smb: client: fix cifsFileInfo reference leak in deferred close
226e066932b5 scsi: fnic: Fix missed link-up when critical IRQ targets offline CPU
d2494dc0d9de scsi: fnic: Bump up version number again
8118e473d7a1 scsi: fnic: Make debug logging protocol independent
d1b7ca587d81 scsi: fnic: Bump up version number
822214913b12 scsi: fnic: Rename fnic_scsi_fcpio_reset()
abe15e643e57 wifi: mac80211: refuse to make a monitor active when it has no queue
07c78e1b1690 wifi: mac80211: track MU-MIMO configuration on disabled interfaces
fb5400bff669 mm/vma: correctly unaccount on mmap_prepare() failure
88871ab548c1 9p: Fix v9fs_issue_write() to update i_size and remote_i_size
a548c7abf65b mm/huge_memory: bypass THP tuneables for huge pfnmap mappings
148db154066b xfrm: save input state data before secpath resets
1acd93259b6b xfrm: Fix dev use-after-free in xfrm async resumption
e29d6ab39ea3 xfrm: Refactor xfrm_input lock to reduce contention with RSS
621c36573982 signal: Prevent exec() race
9eeb282ae6d5 signal: Move MMCID exit out of sighand lock
79c55a7b5d71 ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity
722ee726148e ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling
9fc87899276a smb: client: fix busy dentry warning on unmount after DIO
4cc1bb956993 ntsync: reject wait ioctls with zero owner
fe474ad6dc48 ntsync: Honour caller's time namespace for absolute MONOTONIC timeouts
29bd40e11126 time/namespace: Export init_time_ns and do_timens_ktime_to_host()
36981ba106d9 HID: asus: fortify keyboard handshake
2f8ed71aaaba smb: client: fix missing iov bounds check in parse_posix_sids()
62b50ebc5ded smb: client: fix missing lower-bound check on DFS referral string offsets
ebb8a075fdc7 smb: client: fix server->total_read for compound encrypted PDUs
1cdf0d304d82 smb: client: fix potential OOB read in smb3_enum_snapshots()
34a3942e787b smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()
96c436e4b010 smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
a1d2a407fdc1 smb: client: fix unaligned access in WSL reparse point parser
928edc4bd6a6 smb: client: fix smbd_connection leak on cifs_get_tcp_session() error
a3e4c288e933 smb: client: reject short Next offsets in parse_server_interfaces()
e99040e5e9c6 smb: client: fix use-after-free of iface in cifs_try_adding_channels()
04082b183385 smb: client: fix rlist race and missing initialization
7ab9ceedd860 smb: client: cancel reconnect work in clean_demultiplex_info()
cd55dde2b637 drm/amdgpu: fix rmmio iounmap skipped on device removal
d81bf4581903 drm/msm: RCU-free the scheduler-containing ring and VM objects
f41e64aca2e6 drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure
7b7b590d721f drm/msm/dpu: clear pending peripheral flush state
57322415b079 drm/msm/adreno: fix autosuspend cleanup during teardown
e84425f789fa drm/gud: Ignore damage clips in full update mode
2c92af27ad23 drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
432c8532d5cc wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver
71612bda2115 wifi: mwifiex: validate action frame fixed fields
5747eaa38a7f wifi: mwifiex: prevent authentication frame length truncation
9cff2f39ed38 wifi: mwifiex: validate scan response extents
8bbef2b1ebfb wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
d2fb6b588dc5 wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST
3bdcc4d61212 wifi: p54: validate curve data length in the calibration curve converters
4f86fb6f9dce wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()
68b786691ce2 wifi: wilc1000: fix out-of-bounds read in P2P public action frames
7f1f25b2db14 wifi: wlcore: release runtime PM ref on regdomain config failure
2bddc5d088cf wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown
f4f2852b664c wifi: rsi: fix heap OOB write on key removal
e82536aad653 wifi: libertas_tf: fix UAF in lbtf_free_adapter()
55d34422c0d9 wifi: iwlegacy: fix broadcast stations deallocation
1edb3ddd261e wifi: brcmsmac: fix UAF in brcms_free_timer()
405e575444b7 watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start()
0e2302dc2324 watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init()
eb14ee406e1d watchdog: rzv2h: Avoid division by zero
b4ede87765a2 watchdog: rtd119x: Avoid division by zero
efb76b8ba522 watchdog: msc313e: Propagate error code in resume()
61bcb2403bde watchdog: msc313e: Fix premature reset during timeout update
1e995d1eef00 watchdog: digicolor: Avoid division by zero
960d1c85381b watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog
8319a4142f7d hwmon: (cgbc-hwmon) Add missing sensors
3a5bfc3145c0 hwmon: (cgbc-hwmon) Fix current sensors ID lookup
1fd330df340c hwmon: (w83793) release probe data through kref
2c381e6e0f03 hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
a5ce3fe5335a hwmon: (pwm-fan) Stop RPM timer before freeing tach data
d84769ab7aae hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676
ec7443983cab hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding
9558fc1e042a hwmon: (pmbus/core) increase number of phases and add new mask
72c85149794a hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()
0d05b43b55d4 Input: zero ff_effect before compat copy in input_ff_effect_from_user
fa1713dc3d43 Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound
f16f62b7462f Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722)
8a70a192e3e5 Input: soc_button_array - check btns_desc->package.count
518c9f2b8ab4 Input: soc_button_array - fix MS Surface Pro 11 probe failure
dc05ec97b829 Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()
8202e2cb3db2 Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P
d1704059be95 Input: hp_sdc - shut down kicker timer on module exit
71e5619db11d Input: evdev - zero absinfo before partial copy in EVIOCSABS
9eb261092d4c Input: cyttsp5 - clamp the HID report size before memcpy
143330cc00d5 Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026
a0a73ae16b57 Input: adp5588-keys - cache GPIO state before registering the gpiochip
bb8c4aa9a0dc mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure
818ec2ffc985 mmc: sdhci_am654: Clear ITAPDLY on tuning failure
bf1e2c818559 mmc: sdhci_am654: Reset command and data lines on failed tuning
f6bf12758013 mmc: sdhci_am654: Move tuning_loop to local variable
4885e587f1af mmc: spi: reset bytes_xfered before retrying CRC failures
ba4118e164ab mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt
ac866db277a4 mmc: sdio_uart: fix xmit_fifo leak when the port table is full
15b5ffd8af2d mmc: sdhci-of-aspeed: Remove children before releasing SDC resources
58c1a7a41c3f mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260
23383e0578b5 mmc: mxcmmc: cancel data work and watchdog on remove
7fecf79f3156 mmc: mmci: Fix use-after-free in busy-timeout work
8439bf262ce3 mmc: hsq: Fix use-after-free in retry work
2d48c5a611b7 mmc: core: Fix OF node reference leak on card add failure
4553b5004eca mmc: core: Cancel SDIO IRQ work before freeing host
a2890c1eb96d power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
859880b07a75 power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()
244aacaa5e31 power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed
24e00850bcff selinux: always fill AVC decision in avc_has_perm_noaudit()
d127c7e1f3e1 selinux: recheck intermediate backing files on mprotect()
9d99b770e7b6 selinux: preserve user SID across nested backing files
180752deb727 IB/hfi1: Fix the PIO_CRED credit-return mmap
352eab79c004 IB/hfi1: Resolve the credit-return buffer through the send context's node
ffb80872617b IB/mlx4: Fix use-after-free on pkey sysfs registration failure
66c7c59cb74e i2c: imx: disable autosuspend on remove
a114c27eb5a9 i2c: imx: release DMA channels on probe error
8b6230a17439 i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove()
eabf7a3d33cd i2c: atr: fix dangling adapter pointer on add failure
48285f272770 i2c: at91: release DMA channels on remove and probe error
9ddbc5f4bb49 KEYS: trusted: Fix tpm2_load_cmd() boundary check
cdc17d8ab62a keys: translate request_key_auth pid for the reading procfs instance
a1a98eca102b KEYS: encrypted: fix integer overflow of datablob_len
2897601dffe5 mm: filemap: retain mapped dropbehind folios
6e3fe3102005 mm/mremap: account mm->locked_vm correctly for MREMAP_DONTUNMAP
f5d0e92e2354 mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio()
0a41a46859df mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count
6611f78ec3fd memstick: ms_block: destroy io_queue workqueue on removal
d5cdff14c385 memcg: avoid charging the root memcg from obj_cgroup_charge_pages()
4450102d6aa2 soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
4748c27e2e6a xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
75fc4561772e xfrm: serialize state GC with device state flush
6233d0b3ef46 scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()
2d432d59f10a net/packet: avoid truncating TPACKET_V3 private size
805edbdcb868 net/packet: clear RX owner on VNET header error
1731ff1d2048 net/sched: hhf: cap hh_flows_limit at change time
1be63e4579af net/sched: act_api: release tail references on DELACTION failure
02eba5f36d20 net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value
8dad70ff7e25 net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain
9dbf13de4edf net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()
21b231c11275 net: phy: mediatek: do not report link and per-speed LED rules together
5c216bfa9fb7 net: lan743x: fix RX checksum use-after-free
9907325257b4 net: ip_tunnel: initialize `options_len` before referencing options
4c030a0400eb ipv6: xfrm: use full sockets in local error paths
b14e6c528725 dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()
3c42546d6c7a dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status
31396d731b28 dmaengine: sun6i: fix non-atomic read of DMA position registers
a32bedab8ece btrfs: clear free space tree creation state on rebuild failure
709f6a5e9865 btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()
4dc1ae5ff75b Bluetooth: hci_sync: Serialize local codec list cleanup
f49a543d76d4 Bluetooth: hci_codec: validate vendor codec count length
4eb614045056 Bluetooth: eir: validate service data length before reading UUID
684d7252dc4e Bluetooth: btusb: fix NXP IW610 composite device handling
390742871a72 arm64: percpu: Fix LSE operations on {8,16}-bit types
d575e0079149 arm64: percpu: Fix this_cpu_and() mask generation
0dd78559c144 arm64: percpu: Fix this_cpu_write() casting
169b53d64a94 arm64: dts: renesas: r8a779f0: Set UFS lane count
e80ea8118a07 arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc
8eaf3c3a994f kselftest/arm64: Fix size of thread_data values for pthread_join()
4ed6f5d94cc8 HID: logitech-hidpp: fix race condition when accessing stale stack pointer
cce630c75127 net: xfrm: reject unrepresentable espintcp transport headers
d16f089bd700 openvswitch: avoid reallocating confirmed conntrack labels
e15eb536be4f RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
01cbdb724c58 RDMA/ucma: Serialize join and leave on copy_to_user failure
8fc1eaae65f5 spi: virtio: Use the per-transfer bits per word
6eeecd941f4e spi: spi-zynqmp-gqspi: stop the controller on shutdown
ebeff6e7133a spi: fsl-qspi: Reprogram the clock rate when the operation frequency changes
aa4709813b29 swiotlb: use the adjusted address for the highmem page lookup
ff037920c688 tcp: exclude old ACKs from tcp fast path
857559b83c81 x86/microcode/intel: Reject problematic loading on Granite Rapids systems
e0fbc37f09b1 x86/build/64: Prevent native builds from generating EGPR use
526d8f45c6ef drm/nouveau/gsp/r570: Enable S/R Display workaround in GSP
80b8a76823de drm/nouveau/gsp/r570: Set GcOff = 0 in fbsr
28b898b5c700 drm/nouveau/gsp: Increase delay for magic sleep in r535_gsp_fini()
b0bd757f910a Revert "nouveau/gsp: fix suspend/resume regression on r570 firmware"
f22d349940cb rust: net: phy: fix off-by-one bit positions in device status accessors
65ca0a503715 rds: ib: use rds_conn_drop() on protocol version mismatch
9971dac1a778 posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
8a15369ad1da phy: renesas: rcar-gen3-usb2: Avoid long delay in atomic context
44ab7420ab52 fs/dax: check zero or empty entry before converting xarray entry
75aa08b93c65 exec: Cleanup POSIX timers right after de_thread()
fcc0a935bb6e cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
7ab7aea170bc ata: libahci_platform: Fix device reference leak in ahci_platform_get_resources()
b691a3e24427 ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY
d93988c9e58d ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
3e24b4a6acfd ALSA: virtio: reset device before deleting virtqueues
2dec4642589a ALSA: core: Fix potential UAF after asynchronous card release
c03fb163a885 Input: xpad - fix PDP Marvel Xbox 360 controller
3e6dcea0e12f Input: xpad - add support for Azeron devices
e97d781ec9c8 Input: xpad - add support for Victrix Pro BFG Controller
55ca2a79ebd7 wifi: rtw88: TX QOS Null data the same way as Null data
aeab608c9700 ACPI: processor: Update cpuidle driver check in __acpi_processor_start()
38024286029f watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog
984e18de4fcf hwmon: (hp-wmi-sensors) Improve raw WMI string handling
63a31916448f hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler
7ddff1a7cc8a Input: eeti_ts - publish the OF module alias
63c3d0435f2c x86/fred: Reconstruct the #GP context for rejected INT instructions
b2faf2cafd14 btrfs: check if there is space for chunk item when validating sys chunk array
9588850bfa75 btrfs: abort transaction on failure to update inode for hole punching and reflinking
37583946d875 drm/amdgpu: check ras and obj before dereference
bff8a8e53a6d net: skbuff: do not leave stale header offsets after pskb_carve()
f0e7d62c1eb9 net: mvpp2: prevent buffer overflow in page_pool allocation
748b7a5aca24 net: macb: fix ordering around PTP timestamp read
cfc1af3d054a x86/kprobes: Fix crash when probing CS CALL instructions
1977c843c577 x86/alternative: Refactor INT3 call emulation selftest
a13cca5ba537 net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()
598814c24620 net: stmmac: propagate FPE preemption-class mapping errors
4f33e036e827 net: ethernet: cortina: Ack RX overrun interrupt correctly
d9f96bc2d822 net: lock the socket in sock_gettstamp()
60ef74357a36 eth: fbnic: ring the doorbell if a burst ends in a drop
647b0ff3bdef net: netsec: fix device_node reference leak on phy_np
9ba5cd743002 ASoC: amd: acp: fix ffs() operator precedence for SoundWire link ID
a1b0456c90b1 ASoC: amd: acp: refactor codec config count in SOF SoundWire machine driver
32e85888af46 ASoC: sdw_utils: tidyup asoc_sdw_parse_sdw_endpoints()
a4d56b384f82 ASoC: sdw_utils: tidyup .count_sidecar
91c2615e4dac ASoC: intel: sof_sdw: Add ability to have auxiliary devices
7939a4028c39 ASoC: sdw_utils: Add codec_conf for every DAI
d1cb686d9ff1 ASoC: amd: acp: bounds-check SoundWire link ID in machine drivers
944e1a2c0225 ASoC: hdmi-codec: Report a change when the channel status moves
6d1c95803e1a ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments
4b7ecabd87dc btrfs: handle lack of space when cleaning up verity items
4a4294fe7cf7 btrfs: more trivial BTRFS_PATH_AUTO_FREE conversions
5468a4855b63 futex: Also allocate private hash on vfork()
0543813753ef powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
dfb842749327 KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure
fbf69b7d0555 KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
82d4e43c6261 net: stmmac: do not overwrite phc_index when no PTP clock is registered
530ae0a14580 drop_monitor: fix out-of-bounds write in reset_per_cpu_data()
9616b0c67fbd drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown
1da515f2e3b2 drop_monitor: synchronize tracepoint unregistration on error path
e2f5529b0016 pppoatm: ensure a writable skb header and linear data
b8f71d69380a af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().
bfce253f039e Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup
18464860ce27 Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit
80f7bb41b0a8 Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown
d42c798a14a3 Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events
49520ae0f292 Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync
e2b156a8d259 Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()
a5414b0a9464 Bluetooth: hci_qca: Do not write to the serial port after it is closed
18a9e9f0070f Bluetooth: qca: enable pwrseq support for WCN39xx devices
aa7aba716456 Bluetooth: qca: Refactor code on the basis of chipset names
7812a441617a Bluetooth: hci_qca: Refactor HFP hardware offload capability handling
dcaf10ef27f9 Bluetooth: coredump: Quiesce dump work on unregister
84f353256e17 Bluetooth: btintel_pcie: validate TX skb length in send_sync
e220c1242a64 Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained
bae65e492592 dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()
b0024111e4c2 ksmbd: keep compound responses on query info errors
f86a9f901a94 ksmbd: fix partial file information responses
bc616390103d ksmbd: return buffer overflow for partial filesystem info
7898bda1ebc1 tcp: do not let tcp_rmem be set below 4096
619bfbaacbff tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().
d5c4ee1fa4e8 net: bridge: mst: move switchdev call outside rcu
72206aff346f wifi: brcmfmac: fix lost 802.1x TX completion wakeup
d6f63fdb298d net: fddi: skfp: fix NULL deref when setting the MAC address while down
1af2d87964d8 ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup
56db7ec462d6 net: bcmgenet: restore the hardware filters on open
2077a6997c45 net: bcmgenet: convert RX path to page_pool
ddf60220c925 seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation
78cb2ee98159 drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL
441f80df6022 btrfs: tree-checker: print dev extent offset in error message
57bc3cd46458 wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()
8477643cb91c ALSA: hda: trace PCM open only after assigning a stream
ee507691c18f drm/vc4: Use managed KMS polling to fix UAF on unbind
5d6c49d74a17 drm/xe/shrinker: Return the freed page count through a parameter
fb2027f7e58c drm/xe/mmio_gem: Revoke drm_vma_node on xe_mmio_gem destroy
2a4555ed7571 drm/xe/mmio_gem: use write-back mapping for dummy page
6d726f1689cc drm/xe/mmio_gem: forbid VMA split
293c56a66510 wifi: virt_wifi: don't transfer operstate before register
ea11ade10583 ALSA: 6fire: fix OOB write from device-reported iso length
999f433c09e4 ALSA: usb: 6fire: Avoid embedded URBs
84bfead4d4a1 gpio: virtuser: skip free_irq when no IRQ is installed
80f620951727 Input: trackpoint - fix the inertia attribute name in the ABI document
74b77820f923 spi: spi-qpic-snand: avoid writing QPIC_EBI2_ECC_BUF_CFG register
e9aea0962697 ASoC: soc-pcm: Apply snd_soc_dai_link_ch_map.codec_ch_mask to codec params
2d3bc8ffb52f ASoC: Add codec_ch_mask to snd_soc_dai_link_ch_map
72f5fde1285d ASoC: Rename snd_soc_dai_link_ch_map.ch_mask to cpu_ch_mask
438f0ba25bb6 drm/msm/dp: fix link bandwidth check when wide bus is enabled
dc57147549a1 drm/msm/dp: skip PUSH_IDLE when the link was never enabled
d63f5a9f8121 ALSA: pcm: set timer->private_data before registering the PCM timer
3388f3b76ed0 phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting
7aa1360aca37 phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow
812ca56867be ALSA: bcd2000: Fix race between rawmidi and disconnect
17ac813d4b78 neighbour: Skip default parms when resumed in neightbl_dump_info().
8de873ba128f neighbour: Add missing RCU annotation for neightbl_dump_info().
b9d00ccdb40b neighbour: Convert RTM_GETNEIGHTBL to RCU.
982c7f66c041 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.
151c5a1e4fff keys: fix lost wakeup when reaping a dead key type
daefd7ff159b drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr
739208827c0b arm64: hibernate: clone only the linear map that exists at runtime
7974314fe4cd perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations
12c1ac230f4c netfilter: flowtable: hold reference on ct until flow is released
79084567cd08 netfilter: nf_nat: unregister and release hooks on error
197a03f5fa9d netfilter: nf_tables: fix device name and prefix match in hook lookup
0ce42c7b8403 netfilter: nft_nat: fully initialise new_addr in netmap setup
ea2789490445 drm/msm/adreno: Fix the skip_gpu parameter description
c30c774c2fa6 drm/msm: Fix the separate_gpu_kms parameter description
b72dcfb9bf1f RDMA/siw: Bound fragmented header copies by the remaining length
38871ff47e2a RDMA/efa: Keep EQ resources alive while IRQ is registered
d2a1c0bf4139 RDMA/efa: Keep admin queues alive while IRQ is registered
320bf29481fd dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA
c2337cb6d6f3 dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order
57537562b026 scsi: qla2xxx: Fix the ql2xfc2target parameter description
f824f6b83b72 mm: memblock: show all region flags in debugfs
0fb37d2b6cb8 wifi: mac80211: set up the TX info early to fix failure paths
41bee71112db wifi: mac80211: mesh: release the channel if start fails
bd3b21145ae2 wifi: mac80211: mesh: reset the CSA state when leaving
ad5bd0f6a0c3 wifi: mac80211: add HE 6 GHz capability in the scan elems len
c53040cf8bbd wifi: mac80211: don't access the TSF of a down interface
7ef5774db0ed wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set
30c59052fe60 wifi: mac80211: don't allow link changes when iface is down
fce36d242a18 wifi: mac80211: require a peer station for TDLS setup confirm
4b54d01b4844 wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown
73f48f7e16ca wifi: mac80211: don't allow injecting frames wider than the chanctx
5c79ef616aa1 wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
caa02072b298 wifi: cfg80211: get the wiphy out of a dying network namespace
d45bf731ec70 wifi: mac80211: unlist vifs when their netdev is unregistered
96bef5667b0c wifi: cfg80211: undo netns switch if renaming the wiphy fails
fe50844cf94b wifi: cfg80211: restore netns_immutable on failures
5d5ff5b36f57 wifi: mac80211: reset state when starting AP fails
2e1d6e801484 wifi: mac80211: abort chanswitch when leaving a mesh
ae40190b7c5f wifi: mac80211: suppress chanctx warning for debugfs reset
9c34f01b8f21 wifi: mac80211: don't offload TC setup on AP_VLAN interfaces
5f139e17f5bd wifi: mac80211: don't warn when an IBSS has no channel to scan
81baab8b645e wifi: mac80211: don't start a ROC while scanning
6d2fd2618567 wifi: cfg80211: don't filter by BSS type when removing stale entries
86235be78809 wifi: cfg80211: only group hidden BSSes with beacon entries
e8c75736cfd0 wifi: cfg80211: don't free driver-owned scan requests
fc1f4884f1d4 dmaengine: wait for RCU readers before releasing dma_device
6cf31716b77a dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()
1a0d9b406feb dmaengine: Fix device kref underflow in dma_chan_put()
3b8633cae8b4 dma-coherent: report a failed reserved memory assignment
80aafcce8de2 MIPS: Octeon: apply USB FDT fixups also when USB is modular
fa9ff3bb85a9 soundwire: cadence_master: wait and cancel cdns->work before clock stop
a2cdb4a675ca wifi: cfg80211: check IP header size in cfg80211_classify8021d()
693d777846d5 wifi: cfg80211: don't get the radio mask for netdev-less wdevs
188b334a6db3 IB/IPoIB: Avoid restoring OPER_UP after multicast flush
14cb425ba1f3 wifi: libipw: reject too-short association responses
2c87bbc00dc9 wifi: libipw: reject too-short beacon and probe responses
c2cf589c7d54 wifi: brcmfmac: cyw: pass PMKID to firmware if present
0969c9688389 wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
4f266738af45 wifi: virt_wifi: free skb when disconnected
b96bc9784a61 wifi: mac80211: include TIM bitmap control for buffered S1G mcast traffic
afc048e4d2ac dmaengine: sprd: Fix runtime PM reference leak in probe
8f253d5893f9 RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted
8433a15e414a RDMA/irdma: Enforce local fence for IB_WR_REG_MR
5091e25ec503 RDMA/mad: Fix receive buffer leak when PKey enforcement fails
a0fb2007d00b RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup
b96b8b3e41c3 IB/isert: wait for deferred control PDU completions before releasing the connection
6ed3ebaff334 IB/iser: reject a remote invalidation of an unregistered direction
89d0406f7759 arm64: dts: renesas: r9a09g047: Switch GBETH TX queue scheduling to WRR
9d84572a2f7c arm64: dts: renesas: r9a09g056: Switch GBETH TX queue scheduling to WRR
4a2cdf631dfb arm64: dts: renesas: r9a09g057: Switch GBETH TX queue scheduling to WRR
77ea927d924f power: sequencing: Fix build issue with COMPILE_TEST
a219459fbd1b RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
9cd08fdca43f RDMA/mlx5: Remove warn on missing representor in query_port_speed
02c0a2fa69c1 RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds
c6f56982ec5c RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths
e1188332a911 clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate
69ec03cd4819 firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS
2f3b705144e3 RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access
fe602c91a52e RDMA/rxe: validate access flags before swapping the MR's PD
9dcc0f4e488b RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept
593436d6e69f ARM: socfpga: select the PL310 erratum 753970 workaround
6cab554f2c0f esp: downgrade zerocopy managed frags before mutating skb frags
6eb3b071be8e xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()
248433942155 xfrm: fix compat ALLOCSPI request use-after-free
c2c6e6f45f30 xfrm: avoid RCU warnings around the per-netns netlink socket
a7018ee0ea86 xfrm: iptfs: fix runt reassembly panic from short inner tot_len
7e1c6884a0b4 xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()
e62a16848bf2 ipv6: Honor oif when choosing nexthop for locally generated traffic
94671f802bb0 ipv6: Select best matching nexthop object in fib6_table_lookup()
ba9d1d352466 media: video-i2c: fix buffer queue ordering
06724dd3da2e sunvdc: fix -EIO issue due to lack of retries
38984b41f995 selftests/landlock: Add audit test for whiteout object creation
ea9965b9474b selftests/landlock: Add tests for whiteout object creation
74bdf27404c2 selftests/landlock: Use an actual chardev for MAKE_CHAR audit test
ac0a0d7696aa selftests/landlock: Add disconnected leafs and branch test suites
f289962f0045 selftests/landlock: Add tests for access through disconnected paths
cdc543c9eceb selftests/landlock: Explicitly disable audit in teardowns
3d6f8e2556d5 selftests/landlock: Increase default audit socket timeout
1be91aa4f5dc selftests/landlock: Fix socket file descriptor leaks in audit helpers
d54c0ec29dfa selftests/landlock: Add missing connect(minimal AF_UNSPEC) test
ab115d19fb2c selftests/landlock: Add test for TCP fast open
27d09eaa8b5f landlock: Fix TCP Fast Open connection bypass
8c3b2bf7f39c Revert "perf annotate: Fix build with NO_SLANG=1"
a19ed53fdc4d Linux 6.18.53-xanmod1
cc9618ddfa4f Merge tag 'v6.18.53' into 6.18
e8694cdbd7db Linux 6.18.53
a0a64525f341 mptcp: fix bad accounting in __mptcp_subflow_push_pending()
a09c87abf10a mptcp: close race between scheduler and state change
b2dbcc1ed48b mptcp: avoid unneeded actions on subflow reset
97e684ddf082 mptcp: move the stale logic out of retrans scheduler
74a2626044de x86/mm: Fix and document DEBUG_PAGEALLOC
100b6b39fe20 misc: amd-sbi: Add null check for devm_kasprintf()
73867f253670 drm/ttm: Fix bo resource use-after-free
329ddc5d438f drm/ttm: Drop tt->restore after successful restore
b21c971e4cb1 drm/ttm: Tidy usage of local variables a little bit
9d9f6e061230 smb: client: use atomic_t for mnt_cifs_flags
2ef532a01f44 smb: client: fail DACL rewrite when the new DACL exceeds 64K
7de073bbfed4 smb/client: fix security flag calculation when setting security descriptors
16971cac56f2 smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl()
374da2b9be12 mptcp: prevent race between disconnect() and rtx
e2e10b5a45e1 mptcp: do not reschedule the RTX timer for fallback sockets
2b27760d6b9d tcp: remove icsk->icsk_retransmit_timer
1f4f1db8794b tcp: introduce icsk->icsk_keepalive_timer
d87f96c0d779 tcp: rename icsk_timeout() to tcp_timeout_expires()
4a17c73c8379 bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()
a534569b5cd7 Reapply "bnxt_en: bring back rtnl_lock() in the bnxt_open() path"
08dd1b268b4b fwctl/bnxt_en: Move common definitions to include/linux/bnxt/
4d5834f38b72 mptcp: pm: reset retrans_time when ADD_ADDR entry is reused
379efd2ce8b2 landlock: Fix use-after-free of the source's parent directory
c0c40a8f5dc4 landlock: Use mem_is_zero() in is_layer_masks_allowed()
8e4cc46aa847 landlock: Transpose the layer masks data structure
b4e4655ba601 landlock: Add access_mask_subset() helper
726264e266e1 landlock: Clarify documentation for the IOCTL access right
7e4312953788 idpf: disable DIM work before freeing q_vectors
524b781d6553 idpf: introduce idpf_q_vec_rsrc struct and move vector resources to it
f21cc1e6b734 idpf: introduce local idpf structure to store virtchnl queue chunks
1d98a5327fae idpf: Fix kernel-doc descriptions to avoid warnings
e9acb45de851 erofs: add sysfs feature entry for xattr prefixes
b734ae4b0d89 erofs: separate plain and compressed filesystems formally
a7d52d8fd501 net: macb: initialize PTP state before registering clock
a9e3ae205f7e net: macb: unify device pointer naming convention
482c1c7e8fcb net: macb: Use netif_napi_add_tx() instead of netif_napi_add() for TX NAPI
061d8ae82c29 net: macb: Replace open-coded implementation with napi_schedule()
bcb0936862f2 exit: hold a reference to thread_pid across proc_flush_pid
34d66c6cf3b5 ns: rename to exit_nsproxy_namespaces()
4567df9e2d91 ns: add __ns_ref_read()
a7fdd86c386b netfilter: cttimeout: prevent UAF during module unload
44583fd5735c netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount
2cf03ada0353 EDAC/altera: Use parent device for devres in altr_portb_setup()
962d03bd349c EDAC/altera: Use ECC manager compatible to select A10/S10 IRQ layout
51b07104d563 tracing: Undo the registration when enabling the histogram trigger fails
2ffaade3611b tracing: Take the reference before publishing the named histogram trigger
cfad128171f8 tracing: Set the trace clock before registering the histogram trigger
3caff4fff988 tracing: Merge struct event_trigger_ops into struct event_command
22eb27cdede6 tracing: Remove get_trigger_ops() and add count_func() from trigger ops
c66e138af626 xfs: initialise args->total for parent pointer updates
a0c559454172 drm/bridge: ti-sn65dsi83: Fix error handling in sn65dsi83_reset_work()
037a00dfd583 drm/amd/display: Honor Broadcast RGB for BT.2020 RGB output
6194e1b536dc drm/amd/display: Propagate HDMI RGB quantization selectability
fab569a69c3a drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches
925d9aa99a69 drm/amd/display: Rebuild InfoFrames on output color space changes
cc580cee4dfa io_uring/rw: end write accounting from ->ki_complete
508387ad95ef genetlink: pin family module during policy dump
8d4343a411ea bootconfig: Fix integer overflow in initrd size check
6ac44525905e init/main: read bootconfig header with get_unaligned_le32()
84e0cd79d57f x86/mm/pat: Allocate split page tables as kernel page tables
e21a9ea81426 x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF
5029589bb773 x86/mm/pat: Don't gate cpa_lock on debug_pagealloc_enabled()
e164f4a25e23 x86/mm/pat: Convert split_large_page() to use ptdescs
5d7cbfb65e47 configfs: unhash the dentry before dropping the item in rmdir
0264b3ee09b1 ipmr: account multicast table and route memory
e4331c6644db drm/pagemap: dma-unmap pages before handling migration errors
8d1adc3a058f drm/xe/i2c: Keep the i2c controller always enabled
f87259781afc i2c: designware: Global register definitions
dc136795f999 drm/amdgpu: avoid force-completing uninitialized UVD rings
a335084eae7a drm/amdgpu: plumb timedout fence through to force completion
f90d671463de drm/amdgpu: Make amdgpu_vm_flush() non-failing in submission path
aa0136206cea drm/amdgpu: reorder IB schedule sequence
3d0162c5be36 drm/amdgpu: add a helper to calculate ring distance
015a7b68166c drm/amdgpu: Fix missing unwind in amdgpu_ib_schedule() error path
e3c417ad50e6 f2fs: reject setattr size changes on large folio files
e7a068672b4c Revert: "f2fs: check in-memory block bitmap"
9042867d4701 fou: Fix use-after-free in fou_create()
ca31116fad09 f2fs: accurately adjust free_sections during free_segment_range
172dbcf81303 f2fs: fix to reclaim space in f2fs_allocate_pinning_section()
23eee01c732e f2fs: embed f2fs_gc_kthread in f2fs_sb_info
35c5abccd092 f2fs: limit recovery filename logging to stored length
db1306466952 f2fs: validate MOVE_RANGE destination size
740f3458a479 scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]
b211d138cad8 scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock
a95fc5f1c12b scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error
359be8dd92a8 scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity
6e6c2ba9022e scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature
6ee6dfd922fa scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot
78dada069bb4 scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs
d61e8de98c5a scsi: qla2xxx: Skip vport under deletion in report ID acquisition
20b51ce08239 scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate
48a44e19746e scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size
1710a69fd74d scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown
f35cb67f2092 scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking
a57570229edb scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path
fff1ae8d0c8c media: qcom: iris: fix runtime PM reference leaks
a91f4445077f media: remove conditional return with no effect
0454bf9b89c2 media: iris: turn platform data into constants
d6e2411516bb scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
c343348473e7 media: chips-media: wave5: Add timeout while stop_streaming
83899a056aeb net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
c4b478bc50b7 i2c: smbus: reject oversized block transfers in the common path
7654812b6504 net: usb: pegasus: don't rely on id table pointer arithmetic
41a52d7e5f19 media: as102: do not rely on id table address comparison
3236431de8e5 usb: serial: spcp8x5: don't store usb_device_id
7442ff49371a usb: usbtmc: don't store usb_device_id
9d5e39657809 wifi: ath9k_htc: don't store usb_device_id
8944ef1bfda5 usb: xusbatm: don't rely on id table pointer arithmetic
101c68f6aed4 xdrgen: Fix union declarations
095e8d6e183e Revert "arm64: dts: qcom: kodiak: Fix the PCIe iommu-map entries"
d6e796c6ee72 Revert "arm64: dts: qcom: sar2130p: Fix the PCIe iommu-map entries"
c2be076fa3ea Revert "arm64: dts: qcom: sc8180x: Fix the PCIe iommu-map entries"
3922eef51fb7 Revert "arm64: dts: qcom: sdm845: Fix the PCIe iommu-map entries"
2708a8804d78 Revert "arm64: dts: qcom: sm8150: Fix the PCIe iommu-map entries"
1c58d6d3ebc3 Revert "arm64: dts: qcom: sm8250: Fix the PCIe iommu-map entries"
2b1d21337b37 Revert "arm64: dts: qcom: sm8350: Fix the PCIe iommu-map entries"
c100af5dca42 Revert "arm64: dts: qcom: sm8450: Fix the PCIe iommu-map entries"
8ecf63859a17 Revert "arm64: dts: qcom: sm8550: Fix the PCIe iommu-map entries"
bf61c869a626 Revert "arm64: dts: qcom: sm8650: Fix the PCIe iommu-map entries"
e0a03ff2cc81 Revert "arm64: dts: qcom: sm8750: Fix the PCIe iommu-map entries"
e3a0e9a69f24 Revert "arm64: dts: qcom: talos: Fix the PCIe iommu-map entries"
7cca135e071e Revert "arm64: dts: qcom: lemans: Fix the PCIe iommu-map entries"
7fdedca1d7bf Revert "arm64: dts: qcom: qcs6490-rb3gen2: Fix the PCIe iommu-map entries"
ffd3a3df92be crypto: ccp - Fix possible deadlock in SEV init failure path
868c9038ffd4 ksmbd: don't hold ci->m_lock while waiting for a lease break ack
26d271aeb294 hwmon: (sht4x) Add missing locks
3f3f0f2d9847 smb: client: fix UBSAN array-index-out-of-bounds in smb2_copychunk_range
3889bfff07eb xfs: actually check internal-rtdev fields in the superblock
01b369500819 xfs: actually recover intended file sizes in xfs_xmi_item_recover_intent
0d51c607d80a xfs: advance the findparent inode scan cursor while holding ILOCK
82a0fd3fe908 xfs: bail out on bitmap errors in xrep_agfl_fill
2828fa1b5124 xfs: compute dquot checksum after resetting dd_lsn in repair
7418db04b8cc xfs: count escaped corruption errors in scrub stats
e1c9eba9ba78 xfs: cross-reference the rtgroup superblock extent, not block
0b756de8167f xfs: destroy seen inode bitmap when we fail to add a dirpath
7791970a76a3 xfs: don't leak dqacct if rhashtable insertion fails
176a53af77b4 xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails
b7bf0cffd41b xfs: don't modify file attributes or poke fsnotify for dry runs
08754ebfa5c2 xfs: don't spin forever on zero-length dirents when salvaging them
6428adc1f884 xfs: fix backwards mergeability logic in refcount scrubber
7756adee4e5a xfs: fix backwards skipping logic in xrep_quota_block
9417c1ecabc9 xfs: fix bnobt repair space reservation disposal failure
fac32b9950a2 xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
97fb5eb106f7 xfs: fix name string recording in slowpath pptr tracepoints
e4e9ff719d51 xfs: fix parent rec lookup initialization in xrep_metapath_unlink
aafc5bd3b014 xfs: fix reclaimed page accounting in xfs_buf_free
0040931d8b6f xfs: fix replaying dirent removals into the temporary directory
0f35ecedbef4 xfs: fix rtrefcount btree block counting in scrub
725ac9b344f7 xfs: fix rtrmap cross-referencing elision logic
044e1d972ecb xfs: fix short ifork reaping computation in xreap_bmapi_binval
108114437915 xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions
b5089a328acc xfs: fix unit conversions in per_binval computation
260835444737 xfs: fix xfs_rtrmapbt_mem_cursor for non-rmap filesystems
ba949a14446b xfs: initialise error in xfs_defer_finish_one()
14ee7065cec6 xfs: log the tempip after we convert it to extents format
34c680b30466 xfs: make the rtsummary repair fix the file size too
6c12138eb088 xfs: preserve owner on in-memory btree creation
11c88bda09a3 xfs: release alleged child inode on metapath unlink error
57571fc7d983 xfs: report healthy filesystem events in scrub stats
5c0e09d2e7aa xfs: report nonexistent parents as a filesystem corruption
afc5d6a24e14 xfs: reset parent pointer args before each dir tree unlink repair
058fc52fe461 xfs: signal inode btree xref error if get_rec returns an error
10b36be799c2 xfs: snapshot old AGFL before rewriting it
e119d04706c9 xfs: snapshot scrub stats when rendering them
5a2c84b85ab8 xfs: strengthen the "is cow staging" helpers in scrub
f268dd1cff0a xfs: truncate quota file correctly when repairing quota file
9f31c752733f xfs: use the rtgroup extent count to find rtrefcount gaps
7fa84c9ca690 smb: client: fix heap overflow in DACL owner/group rewrite
dd03fd658ea5 smb: client: avoid leaking refcount when cifs_sb_tlink() fails
2ed2c29dd959 smb: client: avoid leaking refcount in cifs_queue_oplock_break()
99daf7535445 smb: client: fix file type corruption in wsl_to_fattr()
de54fde4c186 smb: client: fix file type corruption in posix_reparse_to_fattr()
73bd76e223e8 smb: client: fix file type corruption in cifs_reparse_point_to_fattr()
d1f173d28e96 smb: client: fix one-byte OOB read in smb2_parse_native_symlink()
a6b656152221 smb: client: pin DFS superblock in iterator callback
0f1f77b82150 smb: client: reject short READ responses in CIFSSMBRead()
96751028c0d4 smb: client: reject userspace cifs.idmap descriptions
78304f78c095 mptcp: pm: userspace: fix address ID overflow
d4a67a880654 mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0
b193ecbd35c2 selftests: mptcp: fix an UAF in mptcp_connect.c
00b2bd518911 mptcp: syncookies: remember the request backup flag
109c192f906b mptcp: subflow: no need to copy thmac during ulp_clone
75f58acf5feb mptcp: options: handle MPC data + csum reqd + no csum
c8050386a220 bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()
b4c40f2c80d7 bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
8ade95619cbf bnxt_en: Don't free the live ring's TPA state on queue restart failure
cc647816fe6a bnxt_en: Only restore LRO if the device supports TPA
c8891da0186f media: v4l2-ctrls: validate AV1 tile counts
c7b1ef6dc57f media: v4l2-ctrls: validate HEVC tile counts
a41babf528f7 media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity
8f19d869a9f6 media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer
000b2a6eae2e media: v4l2-h264: Fix memcmp() size in B1 reference list comparison
7992059c0457 media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity
4f654c9bc954 media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
05720a828096 media: hevc: add bounded tile-count helpers
02d647428ab1 hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS
30755d3a5782 hwmon: (gpio-fan) Fix use-after-free in alarm work
21d2b1111abf hwmon: (chipcap2) fix channels in humidity alarm notifications
4d4ce5c3a136 hwmon: (applesmc) fix key backlight workqueue leak on register failure
c7f77a11a1e7 afs: Clear stale peer app data after address list changes
e5bc0fa9959d afs: Fix incorrect free in candidate cleanup in afs_lookup_server()
9d6c703e24da afs: Fix double-unmap of directory block
c5fa4eb9c4b2 afs: Fix missing kunmap in afs_dir_search_bucket()
d508312d12ca perf: RISC-V: use BIT_ULL for u64 overflow masks
9bec7beaed07 perf: RISC-V: store available counter mask as bitmap
f6b263679aa7 s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly
972e0d9b7d1d s390/crypto: Fix wrong return code to engine in asynch callbacks
7d1456d54b3c s390/crypto: Fix missing scrub of temp buffers with PAES algorithm
203702f0013f s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine
2ea6c036bb92 s390/crypto: Fix missing cra_flags in paes_s390
8b90a47c4fba s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm
d72241019138 s390/crypto: Fix use of mutex in atomic context
35c3f9756930 s390/crypto: Fix skcipher_walk return code handling in aes_s390
8407815ae637 s390/qeth: allow bridgeport queries despite OS_MISMATCH
d0502ed0a1aa iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX
5aa22d76c193 KVM: PPC: Book3S HV: Set irqfd->producer only on success
07f0214018d7 mac802154: fix use-after-free of sdata via queued RX frames
50c3f06222ea ipvs: reject invalid states in connection template sync records
2f1a6dd5c80c ipv6: flowlabel: cap duplicate leases per socket
fe9a906d2bff ipv4: fib: bound automatic table ID allocation
d3b8f264ce09 ieee802154: hwsim: serialize pib updates to fix double-free
c68fd52c73b6 ieee802154: cc2520: fix FIFOP work use-after-free
98ce5a42cde7 ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink
7cb5f4643a7f inet: frags: invalidate queues before flushing them
5ff1effb047e fbdev: vfb: defer cleanup until the last reference
0b3c8c39e502 erofs: preserve LZMA decoders on resize failure
9933ad1c4ff6 fs: autofs: fix memory leak in autofs_fill_super()
746651190366 scripts/sorttable: Mark long_size as __maybe_unused
1efc978dc626 vdpa: solidrun: Free IRQs after request failure
5ae2dab5d88e vdpa: ifcvf: Put device on unsupported feature error
669fb1593635 netfilter: report NLM_F_DUMP_FILTERED when all is filtered out
64803ba0a057 netfilter: nf_log: unregister loggers before per-net teardown
3d038eebdbd4 netfs: Fix uninitialized return value in netfs_unbuffered_write()
ca5d2cbd7a30 net: phy: dp83td510: handle the active-high LED polarity mode
a0d18d21d48a net: openvswitch: fix use-after-free of the flow table mask array
da8c3a7f5d31 net: mpls: clear inner_protocol when the last label is popped
1e43c407624d net: mana: Reserve extra CQ slot for the fence completion CQE
49d592d5fd4d net: hso: fix TIOCMIWAIT race
709451db123d net: dsa: tag_brcm: legacy FCS: request needed tailroom
994fd705ca49 net: bridge: use option bits for CFM/MRP frame handlers
64b36eaef6ea net/sched: act_api: release all action references on NEWACTION failure
9fd4ea952e6a ring-buffer: Check resize_disabled before publishing the new subbuf order
136b443a69fb ring-buffer: Acquire the lock with irqsave in rb_wake_up_waiters()
927d96f91c58 io_uring/net: don't overconsume buffers when using MSG_TRUNC
fa5c0449f5fa io_uring/net: let io_recv_buf_select return the length of the buffer region
25dceb2c326e drm/sched: Create a fake device for KUnit tests
49f5268f43a7 drm/rockchip: analogix_dp: fix unchecked bound endpoint name length
9ac6db531abe drm/i915: Fix memory leak in query_perf_config_list()
f3e74866018d drm/drm_exec: fix up contended obj when num_objects is 0
2831917ace19 drm/bridge: tc358768: Enforce input bus flags via atomic_check
fc105d2621cd function_graph: Use the saved entry's size when reprinting it
76e478499913 fs: don't return -EINVAL for successful nested thaw
19ddef61ee0a exec: do_close_on_exec() before taking exec_update_lock
27c9b491bf76 cpufreq: initialize policy rwsem before sysfs publication
6e166b9281de cpufreq: zero-initialize policy cpumask before sysfs publication
422f65472596 Bluetooth: btrtl: Don't leak return code when parsing firmware format v2
2dcc2240b4e5 Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev
998ca92f69bc ASoC: sti: initialize IRQ lock before requesting IRQ
ff63b0adc4f6 ASoC: sprd: validate compress buffer sizes against fixed allocations
5d06257359c9 accel/ivpu: Limit firmware log name prints to field size
40868f80a891 accel/ivpu: Validate firmware log buffer metadata
43c68f52aecd accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
c80b2a8067d5 tracing: Keep the entry count when the histogram stats allocation fails
37b09bf1dbd9 tracing: Let histogram values keep the percent and graph modifiers
b22dc0add7d7 tracing: Free histogram the field rejected for a bad modifier
4cff53bb1941 tracing: Free histogram var refs regardless of how often they are referenced
222abcbe7866 tracing: Free histogram the var ref when its initialization fails
0892da2272ec tracing/user_events: Don't destroy fields when event removal fails
fb40c5a7eae8 tools/bootconfig: Fix integer overflow and truncation in size checks
3525b94b2f25 tick/broadcast: Plug clockevents replacement race
04b943f8756b tunnels: Drop stale dst when building an ICMP error for PMTUD
87b12dc360a0 ufs: validate cylinder group metadata before caching it
785e523b6c19 ufs: create the root dentry after loading cylinder metadata
d60a3dbf176b virtio_mmio: disable IRQ wake before free_irq
e1daf1ef08e7 watchdog: sunxi_wdt: preserve boot-enabled watchdog
054022c8e74f drm/amdgpu: skip gfx switch_power_profile during GPU reset
784f4e9a0bd6 dm/amdgpu: fix malformed link_settings debugfs output
26a9a55b5874 Revert "riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set"
b0c30fe6c0d5 ALSA: usbusx2y: validate URB actual_length in interrupt callback
381495b5b3da ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf
d9c537b14f49 ALSA: us122l: Prevent write upgrades for read mappings
dba9369467af ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough
fec447017356 drm/panic: clean new `clippy::needless_range_loop` lint for Rust 1.100.0
f1bc7c7cfbc9 rust: allow `unknown_lints` in generated bindings for Rust < 1.88
d6e72b82f214 rust: allow `clippy::as_underscore` in the generated bindings
9e026a91fe79 tracing: Fix memory corruption from a "STACKTRACE" histogram key
141f7ddee571 tracing: Restore :mod: trailer after parsing in ftrace_set_clr_event()
57bfc2a17954 tracing: Fix memory corruption from the histogram stacktrace modifier
ad72e2566643 reboot: fix cad_pid use-after-free race
b89b691dd00b ipv6: fix fib6 walker UAF on seq stop
281e6f536f2f x86/alternatives: Exclude text poking against change_page_attr()
35820cf8dd52 x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF
cd9b4595d628 x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash()
55ddbc2ca6d5 x86/mm: Fix user-space data loss with MADV_FREE and THP
84e3a71d11d8 x86/amd_node: Fix PCI device reference counting in amd_smn_init()
5206e1b65a49 crypto: x86/aria - add missing vzeroupper in AVX-512 code
8764a17eab6b crypto: x86/aria - add missing vzeroupper in AVX2 code
fcd19bc829ec x86/amd_node: Fix potential NULL pointer dereference
9273a90465d5 x86/amd_node: Avoid divide by zero on virtualized systems
eb47c2e85d6b powerpc: pci-ioda: Fix the stale irq chip reference
2920af33d097 powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver
05ae635ca64e powerpc/ps3: Fix repository.c build failure
4f54beb2e7f6 configfs: pin the symlink target's dirent instead of chasing ->ci_dentry
cd2bcee450bc ksmbd: prevent out-of-bounds reads in share config responses
f6f6351e98c7 scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands
7c3d16e2d70c scripts/mksysmap: fix escape of '$' in the __pi_ pattern
1bc4b322209f scripts/mksysmap: drop the MODULE_INFO() symbols from kallsyms
6bf73fc588da erofs: add missing buf->off in erofs_bread()
57835952566f sunvdc: unmap LDC cookies when the descriptor send fails
447a4c362d9c openvswitch: fix wrong flag value in get_ipv6_ext_hdrs()
709eb0aad071 net: hsr: enable promiscuous mode on interlink port with fwd offload
c28175220f80 net: stmmac: fix TX descriptor availability check for TSO traffic
29bc25bdfbbe net: stmmac: add TSO check for header length
bd658b924bef net: stmmac: add stmmac_tso_header_size()
47411c548936 net: stmmac: fix TSO support when some channels have TBS available
8cbfeb54bf78 net/rds: fix tcp stream corruption with large pages
5b3cdc9abd82 net: mana: restore the XDP program pointer when pre-allocation fails
f1fd43ada27e net: phy: dp83867: handle the active-high LED polarity mode
13b79c347595 octeontx2-af: fix PF/CGX debugfs PCI bus lookup
4b20e66d2e52 net: net_failover: Fix the deadlock in net_failover_slave_name_change()
63756bdb693b net: phy: mediatek-ge: disable EEE on the MT7530 PHY
9edd64486478 net: ethernet: mtk_eth_soc: populate lpi_interfaces to fix EEE support
c364e9232680 net: ethernet: mtk_eth_soc: fix supported_interface set after phylink_create
3bfd924b4c41 net: ethernet: mtk_eth_soc: avoid writing to ESW registers on MT7628
3c367198e2e2 net: dsa: mt7530: populate lpi_interfaces to fix EEE support
fe997254b17d net: dsa: mt7530: add EN7528 support
9f6ad383901d net: hinic: fix mailbox segment buffer overflow
7aa02f2d8828 net: sun4i-emac: fix missing of_node_put() for phy_node
503ba58481e3 net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain().
6cb09c50e695 net/sched: cls_route: Fix in-place replace
84a02ebd1af2 net/sched: cls_route: Reject handle aliasing
f8495d67434e net/sched: cls_route: free emptied bucket on filter move
a7bdefb1e009 sched/core: Call wq_worker_tick() for the execution context
abb62a1cde7a sched: Account cgroup CPU time to the execution context
17eac15a45c5 sched/eevdf: Fix rb augmented with multi fields
0ac7bc0c06fe sched/eevdf: Fix augmented max_slice
a5fe19dd8b3e perf/x86/intel: Prevent drain_pebs() reentry
84874ffde459 perf/x86/intel: Correct pt_regs->flags update for PEBS path
997a27ce79b7 perf/x86/intel/ds: Factor out PEBS group processing code to functions
6d0b9ce3be22 perf/core: Allow list_del during perf_event_overflow()
5f1c9972cb27 selftests/powerpc/tm: Fix tcheck() reading uninitialised CR value
dcaba72c85c1 net/mlx5e: Move representor vnic reporter to eswitch devlink port
eab1eec4fd04 net/mlx5: Register SF resource on PF port representor
95e281451039 devlink: Add port-level resource registration infrastructure
0ae06df01c92 devlink: Refactor resource functions to be generic
25cc0096efba net: stmmac: initialize ptp_lock at probe time
0996c3e6bcc6 ppp_synctty: ensure a writeable skb header
bfb74c48ac2d vxlan: initialize _md in vxlan_xmit_one()
621c99be42e3 octeontx2-pf: reset HTB scheduler topology before freeing queues
2231c7f0067b hwmon: (nct6694) do not expose enable on DTIN temperature channels
a5de53b08cc3 hwmon: (corsair-cpro) Remove debugfs entries when probe fails
6f0c3c5fcfd9 hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors
9c237c7eb0e8 hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown()
a58a966a4400 hwmon: (corsair-cpro) Create debugfs entries after hwmon registration
74bab088a715 net: ks8851: Fix receiver error in 100BASE-TX mode following software power-down
c0870eeb5234 net/micrel: Fix typos in micrel driver code comments
312a6da9f42a net: dsa: lantiq_gswip: fix GSWIP_MDIO_PHY_FCONTX_EN value
f324ff4f69c3 watchdog: msc313e: Sync timeout value if WDT was running at boot
abda3de18478 watchdog: msc313e: Fix undefined behavior
037a82b74597 watchdog: msc313e: Fix spurious reset on suspend
cf078e4322f1 watchdog: msc313e: Enable clock before accessing hardware registers
2abf99a57b0b watchdog: msc313e: Fix clock leak and spurious timer in settimeout()
47eae41c630b watchdog: msc313e: Avoid division by zero
a67224b15bd2 watchdog: fix hrtimer start when pretimeout is zero
d1fcb4c69f7e mptcp: remove unneeded READ_ONCE() annotation
5fba30080d29 net: macb: put the "mdio" child node reference on success
e92a45b872b0 net: macb: destroy the phylink instance on the probe error path
e7ff91f19c1a ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings()
03da1d13b0c0 net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe()
8b28ff3728e4 Bluetooth: btusb: Fix leaked runtime PM reference in btusb_reset
61e9bf51c6df Bluetooth: btusb: mediatek: Fix leaked runtime PM reference in reset
eeabdb25c320 Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()
115d94b4ffe2 Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware
932a87444107 Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one
73a50c636425 Bluetooth: btintel_pcie: validate packet_len before skb_put_data
93b59937bda3 Bluetooth: btusb: Fix UAF of btusb_data by rx_work
0b0d2f9db240 eth: ice: don't dereference pointers from TP_printk()
f5463bc124c0 ice: add missing xa_destroy for sched_node_ids
325ed97a7551 idpf: account for VLAN header when parsing RSC packet header
b3c5dcf9ae70 ALSA: hda: Report a change when only the channel status bytes move
89a5a885e45c drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER
be638c93d0a3 drm/adp: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER
34b968b0f912 net: ethernet: cortina: Count RX descriptors for freeq refill
adc42c548c25 net: ethernet: cortina: Count RX drops once per frame
2368a3636634 net: ethernet: cortina: No mapping is a dropped rx
cceb6cd7f0e5 net: ethernet: cortina: Count dropped frames as NAPI work
8b1330a10208 net: ethernet: cortina: Finish RX updates before NAPI completion
0ef8eaef5806 net: ethernet: cortina: Fix budget accounting
561ec9bd6eef net: ipv6: Clamp to IP6_MAX_MTU in ip6_dst_mtu_maybe_forward
ce66352d3eb2 net: ipv6: Fix UDP length overflow with PMTU discover and big MTU
83fedc474121 net: ipv4: Fix UDP length overflow with PMTU discover and big MTU
d5dd55b316ca af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.
f1816b3d7ce8 af_unix: Update last skb marker in manage_oob().
a3ba86a270dd virtio_input: stop callbacks before unregistering input device
8407da897432 virtio_input: reset device if input_register_device() fails
345dd8023955 virtio-pci: return IRQ_HANDLED after non-zero ISR
3af20238a09c vdpa_sim_net: check TX pull result before RX copy
a8a1413a2cfd vdpa_sim_blk: reject out-of-range sector starts
5a075ee23989 vhost-vdpa: protect config_ctx from being freed under the config callback
65faf9eaa00e vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx
68232102f20f vhost/vdpa: reject VRING_NUM larger than device max
a80c33488e0b virtio_console: do not free control-out buffers on remove
77dbd10a701a virtio: fix use-after-free in unregister_virtio_device()
42ccf20c5318 irqchip/gic-v5: Preserve ICC_CR0_EL1 state
f76e4622ad03 ASoC: mt6351: Publish the OF module alias
465dba4a4380 netfilter: ip6_tables: set F_PROTO when proto value is nonzero
1a7a8ac9a9f0 netfilter: nfnetlink_log: cope with concurrent instance destruction
d082265bb2c6 ASoC: Intel: SST: Publish the PCI module aliases
32ca4438c15d ASoC: bcm: bcm63xx: Publish the OF module aliases
267f7f78205c hwmon: (sht4x) Fix return value from heater_enable_store()
97fe73223167 hwmon: (sht4x) Rely on subsystem locking
d54d0b6766b7 Documentation: hwmon: replace full-width colon by a standard ASCII colon
ec894ec755fd hwmon: (ina2xx) Decouple in0 and curr1 alarms
73f86661d5c1 hwmon: (ina2xx) Replace masks with enum in alert functions
c95160c296c8 hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read()
75824defbb6c hwmon: (ina2xx) Rely on subsystem locking
1961b2fe8e68 hwmon: (ina2xx) Acquire hwmon_lock in shunt_resistor_show()
8afab57bcdbc hwmon: Fix potential UAF in pec_store
7d72088801e7 Documentation/hwmon: Document hwmon_notify_event()
80b46a3d066d hwmon: (ltc4282) Make sure clk_init_data is fully initialized
01536047c2b7 iommu/amd: Fix premature break in init_iommu_one() again
94458b80d3b2 iommu/amd: Do not reallocate GA log buffers on resume
b575a8fe6d64 iommu/amd: Add NUMA node affinity for IOMMU log buffers
13fbbb2a8caf iommu/riscv: Disable SADE
36b08f2f009e iommu/riscv: Add command queue lock
0c1b907d5db2 ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev
e2e1161e03fe bpf: Reject non-scalar bpf_loop iteration counts
5710f6a74f63 net: macb: fix NULL pointer dereference on unbind with fixed-link
3ec7974b3f3e net: macb: rename bp->sgmii_phy field to bp->phy
8f80b113dea0 net/sched: ets: clamp quantum in parse and fallback paths
d43cded350fe net/sched: drr: clamp quantum in change class
e2a9a08303e5 net/sched: pie: clamp psched_mtu in pie_drop_early
b9f96ce6eb4f net/sched: dualpi2: clamp psched_mtu at all call sites
2e77947bbf6c net/sched: hhf: clamp quantum in change and init paths
534cd7ecbbc6 net/sched: sfq: clamp quantum in change path
c11e3a39807e net/sched: fq_pie: clamp quantum in change path
4d3f907dc2b7 net/mlx5e: Keep HW timestamp stats monotonic across reconfiguration
72cfcb79026c net/mlx5: E-Switch, prevent mc_list repopulation during vport disable
e393789e9231 net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put
72324da8eeca net/mlx5e: Fix use-after-free race in sample_restore_put()
9f23cf6dcb3a net/mlx5e: Fix ETS zero BW reporting when one TC holds 100%
b3f2e71cb9ea net/mlx5: LAG, use local tracker to update active ports
50de5ca2210c net/mlx5e: Fix setting RS FEC after remapping
a00bcb277e0c net/mlx5e: Fix missing FEC mode mapping for RS_544_514_INTERLEAVED_QUAD
156a3bab6974 net/sched: defer qdisc freeing after failed creation
765c5e357e67 net: mctp: i3c: serialize probe with bus removal
1a01c88f51f1 powerpc/kexec_file: Use inclusive range checks for excluded memory
67b4df34f893 powerpc/kexec_file: Use inclusive range checks in add_usable_mem()
641020979680 pds_core: don't release PCI regions for VFs on reset
fa31bd14c504 pds_core: fix cmd_regs access racing BAR unmap on reset
2fd0880f0272 net: reject oversized tx_queue_len at netlink parse time
081340cf70a7 net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations
53359916ceb6 vxlan: reject dynamic fdb entries that reference a nexthop id
eebb6a9017b5 s390/ism: folio_put() after error
2afd5c230e72 dibs: Unregister dibs_class after error
a1f77c6c7d8d dibs: change dibs_class to a const struct
0e079bbdcee7 dibs: Remove reset of static vars in dibs_init()
659654654eb1 net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow
5a0d7f40624a ionic: use netif_txq_maybe_stop() in ionic_tx()
0866936086cf octeontx2-af: mcs: Clear stale X2P calibration state before calibration
38ab2a435001 net: bridge: mcast: properly convert mglist to rcu
7a683c2b0628 net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size
edaec279f59f eth: nfp: drop the replaced rule from the list when reprogramming fails
a7e023c63e85 eth: nfp: bound the ntuple rule dump by the caller's buffer size
fd1a78c16b1f net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size
f27ac16357cf bonding: use skb_cow_head() in bond_do_alb_xmit() and rlb_arp_xmit()
d643cea42486 nexthop: Initialize extack in remove_nh_grp_entry()
fc204636300b selftests/bpf: Fix flaky bpf_nf test when random NAT port is 0
d6917eebe179 tracing: Fix to avoid creating trace instances with duplicate names
96e2a8ab8058 tracing: Add boot-time backup of persistent ring buffer
135d542b97fa bpf: Reject untrusted allocated-object pointers
0bdd6121c8dd bpf: Require MEM_PERCPU for percpu kptr stores
5dc188b19151 thermal: sysfs: switch to use scnprintf() to suppress truncation warning
e2ae33247e8b bpf: Don't predict JMP32 pointer vs zero comparisons
3484a9930391 bpf: Reject legacy packet loads from callbacks
3014e8a8bdad bpf: Mark faultable stack helpers as sleepable
4d8784226bd3 bpf: Mark bpf_btf_find_by_name_kind() as sleepable
b545fa447e09 bpf: Check ancestor frames for rbtree callbacks
4965cf277006 bpf: Track verifier instruction stats for each subprogram
f9b36239f3a7 bpf: Report maximum combined stack depth
81a8cc0f81a6 bpf: Print breakdown of insns processed by subprogs
2b3abe0e9004 bpf: share several utility functions as internal API
ba3c4c447fed bpf: Only enforce 8 frame call stack limit for all-static stacks
4375b3d1c289 mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context
a8bddab54aa6 net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times
47a5cecca925 net: bcmasp: clear txcb->last before writing each descriptor
75bd5ea9c858 ASoC: Intel: avs: Refactor and fix init_config access
b199e3db839b ASoC: Intel: avs: Honor NHLT override when setting up a path
5ba5da884238 ASoC: Intel: avs: Allow the topology to carry NHLT data
23ebd4ed5799 ASoC: Intel: avs: Fix unbalanced module reference count
b230b2219e42 ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology
498bf26639e9 ASoC: Intel: avs: Clean up the bus when fetching ML caps fails
cdaa2e829c4e nvme-tcp: defer TLS inline send to io_work
f56b2bb4b18b nvme: remove stale namespaces by NSID range during scan
3c03a1b8ded8 bpf: Mark sched_process_wait argument as nullable
cc2e065ed206 bpf: Reject resilient lock operations in rbtree callbacks
617c8266e49f bpf: Reject tail calls directly from callback frames
0e78cb242a57 bpf: Mark signal tracepoint siginfo arguments as scalar
ca086264e981 bpf: Fix NULL-ptr-deref in btf_var_show()
98f1cb952213 bpf: Fix NULL-ptr-deref when showing a void BTF type
d9952b0ba20f drm/rockchip: rk3066_hdmi: Add missing Kconfig selects
df7c96e390ff drm/rockchip: dw_dp: Select DRM_BRIDGE_CONNECTOR
1dd715ca0568 ALSA: caiaq: Fix potential double-free at error path
7a0f287d7131 selftests/alsa: Fix the step check for INTEGER controls
ec52dfed7b14 erofs: disable LZ4 rolling decompression for now
a259c26061fa arm64: trans_pgd: clone only the linear map that exists at runtime
2c2b229d439a net: gro: Fix nesting of TCP GSO SKBs in skb_gro_receive_list()
364b6e4327f7 net: stmmac: reconfigure RX packet parser table in stmmac_hw_setup() after reset
19811a68a766 net: airoha: enable RX_DONE interrupt for RX queue 31
4cb9b6d3d31a net/rds: don't let rds_conn_shutdown() consume a concurrent drop
900e96c9749a net/rds: acquire the fastpath locks in rds_conn_shutdown()
8e4c3b7844c9 net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()
47a1cb4d194e net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown
6b8d7563c28b net/rds: clear cp_flags bits individually in rds_conn_path_reset()
ea6f65c4f9fe net/rds: use clear_bit_unlock() in release_refill()
a269795107f4 net/rds: use wq_has_sleeper() in release_in_xmit()
a29ea5b50346 net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().
19ba7ecfade1 bonding: do not clear curr_active_slave prematurely when releasing all slaves
d6c39774ae09 bpf: reject BPF_PSEUDO_FUNC reference to the main program
411c9080a776 tracing/probes: Fix use-after-free on field name/type of events with multiple probes
4be8380e3af0 netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
524599714558 ipvs: fix reversed sequence option serialization
66c08e5ee8f9 drm/amdgpu/userq: fix struct drm_amdgpu_info_device padding for 32bit compile
d8f570495219 btrfs: zstd: fix lost wakeup when waiting for a workspace
203cbfb4fba5 btrfs: do not force reloc root creation during qgroup_account_snapshot()
c9e0aa996706 btrfs: send: fix lost error return value in will_overwrite_ref()
40370f02a1ca btrfs: zoned: finish active block group cleanup if call_zone_finish() fails
d9b42f553c81 btrfs: return proper negative error code for update_raid_extent_item()
1b4d4e890c2c btrfs: fix the possible bioc_list memory leak during error
2fbfd02bdfe1 btrfs: fix transaction use-after-free in raid stripe insertion
b6711a77aed3 btrfs: scrub: report the failing sector's address, not the stripe base
3c948b894fb0 ASoC: ux500: Program the MSP FIFO watermarks
271bb038cf19 ASoC: ux500: Allow repeated MSP prepare calls
1af5676c80aa ASoC: ux500: Remove obsolete PRCMU QoS calls
4c31f08819ed ASoC: ux500: Request the MSP MMIO resource
a1e61026f035 ASoC: ux500: Deassert the MSP reset during probe
23f993e6cdc1 mfd: db8500-prcmu: Fold dbx500 header into db8500
dafe8e402ace ASoC: ux500: Validate MSP DAI configuration
23e8d82fa7a2 ASoC: ux500: Correct MSP frame and bit clock setup
44f34dfd80e4 ASoC: ux500: Propagate MSP setup errors
25556165cec1 ASoC: ux500: Fix MSP stream lifecycle handling
64c605f7af90 printk/nbcon: Change nbcon_irq_work to IRQ_WORK_LAZY
228075f31b14 ALSA: ump: do not touch legacy_rmidi before it exists
aa8e82904d4b octeontx2-af: Fix limiting SRIOV VF count logic
c7acfb04c7e2 locking/lockdep: Invalidate stale class_cache entries for zapped classes
e5cf7a689197 perf/core: Skip empty AUX records with only format flags
0953b2ad67c4 x86/itmt: Don't make ITMT enablement depend on debugfs
755476d7ba92 sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate
6a1a15d86ba6 sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr()
7b23144c3ff6 scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues()
6af253bccc36 perf: RISC-V: check cpu_hw_evt before dereference in overflow IRQ
27314f96d29b bonding: alb: fix uninitialized transport header access in alb_determine_nd()
e127ac29a521 btrfs: restore active device pointers after failed sprout
8b001df2b37c btrfs: detach failed sprout device from transaction update list
b99621d17145 ALSA: dummy: Report a change when one capture switch channel moves
b13dba708ca0 drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl()
ecd88ef5f1d2 ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()
4ec48a321a0e ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits
470db2026a43 ASoC: fsl_micfil: balance mclk enable/disable
73eec5a0d559 s390/boot: Avoid IPL parameter append past command line
17c25ee98eba s390/boot: Fix physical memory search range
4c9d9cd4d888 ALSA: hda: restore MFG widget enumeration after core split
f0c869df2c33 staging: fbtft: make dirty_lock IRQ-safe
72abe77e88c3 af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().
97b21ef57dfa ipv6: sr: restore network header before routing and forwarding
4ab2977323d5 tipc: Dont send random pad bytes in RESET/ACTIVATE messages
ad805326d874 tipc: fix NULL deref in tipc_named_node_up() on empty publication list
35a575df905b ip6_gre: check tunnel info before xmit in ip6gre_tunnel_xmit
2c2091e2ee93 ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()
8d4fe5c13f50 ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()
335e50c8abe0 ppp: ppp_synctty: simplify tty disc_data access
152e946133e8 ppp: ppp_async: simplify tty disc_data access
d3011d1f2934 igmp: convert struct ip_sf_list to RCU
feab9261b537 net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted
ada82338765c net: ethernet: oa_tc6: Fix for the wrong data type
f690f83225b4 net: ethernet: oa_tc6: Disable tx queues on fatal error
9d3f6e714d5f net: ethernet: oa_tc6: Improve the error recovery
0deefb86f777 net: ethernet: oa_tc6: Protect skb pointer used by two different kernel instances
3e0ff19d0c4d net: ethernet: oa_tc6: Add the OA_TC6_ prefix to standard registers
dfc4343e1212 net: ethernet: oa_tc6: Export standard defined registers
d09613516013 net: ethernet: oa_tc6: Handle the OA TC6 SPI protected mode
4481f0b8384d net: ethernet: oa_tc6: Interrupt is active low, level triggered.
161abd6cefc8 ASoC: ab8500: Validate and program TDM slots correctly
353659d11a34 ASoC: ab8500: Correct digital interface format setup
4edc96d4184a ASoC: ab8500: Repair the DAPM capture graph
c842af2c8370 ASoC: ab8500: Reset the audio block before configuring it
eb1b43ec5d6b Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout()
3d9fb936d8d9 Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM
6da5c0331fc3 Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect
5d5a625cbc85 Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan
a11ebe8dc033 Bluetooth: hci_core: Fix race condition during device registration
058f56de5f48 Bluetooth: btintel: bound firmware ID by TLV length
76948d207d09 Bluetooth: btintel: validate version TLV value lengths
e9c2864ec4cf workqueue: reject watchdog thresholds that overflow jiffies
2f6ca6581ef1 Bluetooth: btintel_pcie: Clear automask on spurious interrupts
09d16f858022 sched_ext: Fix vtime delta loss in scx_flatcg cgroup migration
5dff82f1aa96 sched_ext: Update demo schedulers and selftests to use scx_bpf_task_set_dsq_vtime()
7271eeb2935c sched_ext: Fix timer pinning and return value in scx_central
88a31c716450 s390/diag324: Preserve -EBUSY return code
8d7988e8116c s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block
50f9c40768e8 s390/ipl: Fix NULL deref in kdump without re-IPL parm block
77cc8e8e882e s390/time: Use jiffies instead of jiffies_64
33c7fba9f9b1 s390/vtime: Use __this_cpu_read() / get rid of READ_ONCE()
30dbb08777b9 ksmbd: rate limit unmapped SID errors
37952f03d517 ksmbd: propagate DACL parsing errors
fd137bf8149b ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF
68d459e6e609 cachefiles: Fix potential UAF/KASAN warning
cf6f93b8b06a netfs: break unbuffered write when netfs_alloc_subrequest() fails
ebefb12122d1 netfs: Fix subreq ref leak
5d280d9cc289 netfs: Fix i_size update for partial transfer
b706527a90e2 netfs: Fix error vs transferred passed to ->ki_complete()
9bd43226f450 netfs: Fix unbuffered/DIO write partial transfer error return
cda45c3474f2 perf powerpc-vpadtl: Fix raw_size of DTL samples
31ba77e9001f OPP: of: Fix potential multiplication overflow when calculating freq
d64300f3409d perf symbol: Do not use debug file as the binary type
744b25040d82 watchdog: msc313e: Fix NULL pointer dereference in PM callbacks
74e2a56c8220 vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()
9be61da9d7c4 net: amd-xgbe: discard rx packets with bad FCS
0370abbc75b9 raw: annotate disconnect-side IPv4 match writers
3be02999ab91 sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration
b66b9df8e651 smb: client: transport: Fix debug printing in __release_mid()
75e85379a08a smb/client: fix integer truncation in collapse range
50c4f40a221e smb/client: fix data corruption in emulated insert range
716dc2b391de smb: move copychunk definitions to common/smb2pdu.h
430d0f002ce9 smb/client: mark file sparse before emulating insert range
06a4f9049cb6 smb/client: validate new EOF for zero range
bc7602b9082e smb/client: validate new EOF for insert range
06a7073b33b8 scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()
2f69ed909de9 scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()
00b841bac102 sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START
10b5483278c1 net/sched: act_api: fix skb sizing and action leak on reoffload delete
fe2bec63fa99 net/sched: act_api: size the RTM_GETACTION reply from the actions
bbdc058b971f net/sched: act_api: budget all shared attributes in notify skbs
e4a5b01e59f7 net: iptunnel: fix stale transport header during tunnel decapsulation
c6bdc97ffd65 tcp: use GFP_ATOMIC in tcp_send_active_reset()
04c0d35bac51 net: icmp: avoid invalid transport header access in icmp_send tracepoint
26bd90c88621 drm/cirrus-qemu: Validate BAR0 size during probe
f8dcbbf843d2 ufs: do not treat unreadable directory blocks as empty
93fa3e925b15 accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain
b2cd682324b8 drm/gud: validate GUD_ROTATION_0 is present in supported rotations
d623a4a58bb2 bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic
13cf95d19e84 selftests/cgroup: Fix cg_run_in_subcgroups ignoring arg parameter
a204cfe4c829 sched_ext: Fix nonexistent field in sched-ext.rst example
4f7cf573cdf0 nvmet-rdma: fix queue leak when connect backlog is exceeded
cf3e706963ff nvme-rdma: fix -EIO cleanup order in queue_rq
12deeade460d accel/qaic: Address potential out-of-bounds read in resp_worker()
93c557e947ef drm/virtio: use the DMA API for resource backing on Xen
45dc2788a5b0 drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()
528052af901d EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation
6890f18448f9 EDAC/igen6: Fix channel address decode for non-hash mode
f6e326963e9d EDAC/igen6: Fix channel selection hash
c9ebaf08e2f5 EDAC/igen6: Fix interleave boundary condition
fda123f9e7c1 RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed
8ee846bd854e ARM: ensure interrupts are enabled in __do_user_fault()
8a98ed4f7b70 ARM: 9484/1: enable interrupts when unhandled user faults are triggered
9811e2c321f7 rtc: cmos: Use platform_get_irq_optional() in cmos_platform_probe()
fe198b077864 af_unix: Unlink scc_entry in unix_del_edge().
8c4fde01bcf9 l2tp: fix tunnel and session refcount leak on seq_file release
a386c8304301 ksmbd: use memcmp() to compare ClientGUIDs
6dd3701facc0 wifi: ath11k: cancel SSR work items during PCI shutdown
96f5b92d958b ASoC: meson: aiu: Validate written enum values
5c2537cf24d6 ASoC: topology: Check PCM and DAI name strings before use
bea03e887db5 ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().
4c03275bc443 bnxt: fix head underflow on XDP head-grow
a9f1395028c2 bpf: Guard __get_user acesss with access_ok for uprobe_multi data
f956477c343a RDMA/bnxt_re: Proper rollback if the ioremap fails
706591cccdd3 RDMA/irdma: Replace waitqueue and flag with completion
09c44549820d coresight: platform: defer connection counter increment until alloc succeeds
11b35d1906a7 md/raid10: fix writes_pending and barrier reference leaks on discard failures
1cae40d423a2 sctp: fix err_chunk memory leaks in INIT handling
b96cb1235fca bpf: Mask pseudo pointer values in verifier logs
4cca4b44e561 netfs: Fix barriering when walking subrequest list
5e53e285f8c9 Bluetooth: ISO: fix malformed ISO_END/CONT handling
aafb093adffa bpf: Reject redirect helpers without a bpf_net_context
708688ec31ac drm/vc4: hvs/v3d: Fix null dereference in unbind
7364014fdc28 tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()
89178ffe5bdd net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD
925669d4cfd4 drop_monitor: fix size calculations for 64-bit attributes
7d857cf5f012 drop_monitor: perform u64_stats updates under IRQ-disabled section
0c53eb14975f ppp_async: drop the errored frame instead of resetting its headroom
f60cd3867cb6 Bluetooth: btrtl: Add the support for RTL8761CUV
cb64f655c5f8 leds: st1202: Validate pattern input before stopping the sequence
4400aa20fe93 wifi: mt76: mt7921: skip unknown CLC firmware records
3896be051e92 wifi: mt76: mt7921: validate CLC firmware records
e15b21a10d57 iommu/arm-smmu-v3: Disable implementations during devm teardown
a15cae16f443 ksmbd: remove stale channels from all sessions on teardown
bac4120fd815 bpftool: Strip all -Wformat* flags from bootstrap libbpf build
dc20050b6b12 netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
bb462621968e ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx
dc9e1b6b9080 scsi: core: Do not block on tag allocation in scsi_eh_lock_door()
daa0eae8c858 ASoC: rt5645: Perform the initial jack detect at probe
cd60b758dba6 spi: dw: fix wrong RX_SAMPLE_DLY setting after resume
985250453b77 ata: libata-core: Disable LPM on WDC WD141KFGX-68FH9N0
f7750422ebc0 hwmon: (corsair-psu) Fix linear11 calculation
6c1b802e36b0 vhost-scsi: flush backend after device ioctls
dfad7293b900 ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx
ceb19f46e475 Drivers: hv: vmbus: add VTL2 redirect connection ID
23d478fd5ab4 ata: libata-core: Disable LPM on WD Green 2.5 480GB
4e4de08510cd ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED)
def08a529009 ata: libata-core: Disable LPM on some WD drives
5144ddfb71c1 ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision)
bbc310caa2b6 Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame
01cc395cecfa wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
8b12f65d7caf cifs: validate idmap key payload length
d1148f03edea powerpc/pseries: Ensure vpa,slb_shadow & dtl are unregistered during crash
ca9b1ac1bb99 ice: pass the return value of skb_checksum_help()
45f25ac3e317 ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx
0fbfc59f7a71 ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4
9f0243ca8e25 phonet: check register_netdevice_notifier() error in phonet_device_init()
c268df0653ab drm/gma500: return errors from Oaktrail HDMI I2C reads
0093909becbd ksmbd: preserve VFS inherited POSIX ACL mask
13edd8ea7ff2 wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO
7d984d68150a regulator: core: clamp voltage constraints before applying apply_uV
03003506c86f smb: client: bound dirent name against end of SMB response in cifs_filldir
dfbb9db16497 wifi: mwifiex: replace one-element arrays with flexible array members
0ba8608dd2d8 ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE
346a55849124 wifi: iwlwifi: acpi: validate WGDS table revision index
042d21f6db33 ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless
7aa9097623af wifi: iwlwifi: bound aligned TLV advance in FW parser
414560cd623d ALSA: hda/realtek: Add quirk for HP Pavilion x360
52c4c623474d drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized
a21bf9cb8931 arm64: kprobes: Allow reentering kprobes while single-stepping
e8ac5e91b129 wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif
59f64c283902 wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
3967499c6ed8 arm64: fixmap: Allow 256K early_ioremap() at any offset
83f32942a501 wifi: iwlwifi: mvm: fix a possible underflow
4d942dfc13ae wifi: iwlwifi: mvm: validate TX_CMD response layout
898e74a9115e ASoC: Intel: sof_sdw: Add quirks for new Dell laptops
39562a56cdb5 smb/client: flush dirty data before punching a hole
4c0d150fb98e blk-cgroup: fix leaks and online flag on radix_tree_insert failure
d16e1dcb260f ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs
3456c5bcc987 wifi: iwlwifi: pcie: null RX pointers after free
0a63f98e5163 wifi: iwlwifi: mvm: fix sched scan IE sizing
fa7249d1f324 wifi: iwlwifi: mvm: parse beacon notif per layout
4d6033238733 wifi: iwlwifi: mvm: fix an off-by-1 boundary check
cad3665dee62 wifi: iwlwifi: mvm: validate mac_link_id in session protect notif
63d6b1f04cd9 btrfs: fix reloc root cleanup in merge_reloc_roots()
e35ae757c646 wifi: iwlwifi: mvm: validate sta_id in BA window status notif
61b46ba803b4 spi: dw-dma: Wait for controller idle before completing Tx
fda1b6636ff1 btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()
c7a2dc9aa076 btrfs: only account delalloc bytes for regular file inodes in btrfs_getattr()
6e04cc5a30f4 cifs: Fix support for creating SFU fifo
7cf1d7c23ee5 ALSA: hda: cs35l56: Fail if wmfw file is missing
749f54ff3408 ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50)
bf8eab0aa48d ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series
22532dd88694 smb/client: zero-initialize stack-allocated cifs_open_info_data
54b6a5c615a0 cifs: Fix support for creating SFU socket
c16dd04955df ASoC: rt712-sdca: reset codec at io_init to fix silent headphone
266f195d5a14 wifi: rsi: validate beacon length before fixed buffer copy
ca9fab1ca155 netfilter: ipset: mark the rcu locked areas properly
c54b643e9a09 wifi: libipw: fix key index receive bound checks
169e172130ee gpio: dwapb: Mask interrupts at hardware initialization
b3451e697124 wifi: mac80211: ibss: wait for in-flight TX on disconnect
8f4127a93cf6 wifi: cfg80211: validate rx/tx MLME callback frame lengths before access
2360acb45a8e ksmbd: validate SID namespace before mapping IDs
27768ff26c86 ksmbd: mark invalid session responses as signed
5a5b0b7a01fe ksmbd: find bound sessions during reauthentication
78ac450ad462 wifi: cfg80211: validate assoc response length before status and IE access
cdcfd662c678 wifi: libertas: reject short monitor TX frames
55b86ef6c2e6 wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers
9df64ad43e1f wifi: mac80211: validate deauth frame length before reason access
9c8bfc99ef18 wifi: ralink: RT2X00: init EEPROM properly
74f3c639f64f ALSA: usb-audio: caiaq: validate EP1 reply lengths
150afb1941f1 ksmbd: fix credit charge calculation for SMB2 QUERY_INFO
27d43ad57759 drm/amdgpu: flush pending RCU callbacks on module unload
b9b79d6e7fa2 ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table
6cc7d711b8d9 netfs: Fix decision whether to disallow write-streaming due to fscache use
90b306eee037 cachefiles: Fix double fput
231542f4e43c xen/gntalloc: validate grant count before allocation
405f13d7b270 freevxfs: don't BUG() on unknown typed-extent type
6cbaea8ab703 xen/front-pgdir-shbuf: free grant reference head on errors
6e6329322ad7 ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling
4bc2e7259810 ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr
350b966d39f1 drm/arm/komeda: fix error handling for clk_prepare_enable() and callers
99901c249aed ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED
c521dd78e036 ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr
a39ecb856514 netfilter: nf_conntrack_expect: zero at allocation time
f31c61369f4b drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend
8f75c1989226 btrfs: tree-checker: validate INODE_REF's namelen
f6a0cafa265c spi: core: Abort active target transfer on controller suspend
ac759ec8fbd8 ASoC: tas2781: Update default register address to TAS2563
f1e3691195c2 fbdev: pm2fb: unwind WC setup on probe failure
6b3d24620ed7 ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk
95d725736a3d eth: mlx5: fix macsec dependency
5af7d1f55afc rtc: bq32000: add delay between RTC reads
cbb97fe2053e blk-cgroup: protect iterating blkgs with blkcg->lock in blkcg_print_stat()
fc2233f1ab2a net: au1000: move free_irq out of the close-time spinlocked section
632dadecba13 regulator: da9121: Use subvariant ids in the I2C table
ef6db657f4bf PCI/sysfs: Use kstrtobool() to parse the ROM attribute input
bc544b61889d PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device()
bc4c5f0784ae ksmbd: treat read-control opens as stat opens only for leases
7015f0e5973c ksmbd: break RH leases before delete-on-close
34603ca51c2b ksmbd: start file id allocation at 1
66775ee3c139 ksmbd: deny renaming directory with open children
7821c9816cad ksmbd: apply create security descriptor first
a5366ea6b148 ksmbd: treat unnamed DATA stream as base file
2c777b09e2be ksmbd: use connection ClientGUID for lease lookup
23b8be9aab0b ksmbd: align SMB2 oplock break ack handling
7410f21f01e3 ksmbd: validate SMB2 lease create contexts
fba4653a0b4d ksmbd: fix lease break and ack state handling
80d99549bb59 rtc: aspeed: add AST2700 compatible
85a3b2c632ca rtc: mv: add suspend/resume support for wakeup
7caa8a0ae94b f2fs: validate inline dentry name lengths before conversion
7510513be24d ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7
cc8eb1715673 md/raid5: let stripe batch bm_seq comparison wrap-safe
25c1debf4dc8 mailbox: imx: use devm_of_platform_populate()
944d8509c222 mailbox: imx: Add a channel shutdown field
a5e9a81e7e47 md/raid5: account discard IO
adcaa21d50c3 mailbox: imx: Use devm_pm_runtime_enable()
6f1853b2b9f3 perf: Fix addr_filter_ranges lifetime
cb78a1d7a278 PCI: plda: Protect root bus removal with rescan lock
a568939487dc PCI: mediatek: Protect root bus removal with rescan lock
9b19201f57d8 PCI: rockchip: Protect root bus removal with rescan lock
7cbb8f2750d9 PCI: altera: Protect root bus removal with rescan lock
ee06aafc2d76 PCI: iproc: Protect root bus removal with rescan lock
c6c290e408fe drm/amdkfd: Properly acquire queue buffers in CRIU restore
7a3b9c73ec96 ALSA: usb-audio: Add quirk for YAMAHA CDS3000
34c20c79e2a4 drm/amdgpu: Use system unbound workqueue for soft IH ring
a7a2333f45b1 drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap
2d9fd0f01550 drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl
8c09528b9ea6 mfd: rsmu: Add 8a34002 support
f27b4f6b0fb1 leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE
f71b6f970a2c mfd: tps65219: Make poweroff handler conditional on system-power-controller
80141441dcef leds: pca9532: Don't stop blinking for non-zero brightness
1cf3b01582e9 leds: uleds: Return -EFAULT on copy_to_user() failure
641161f2c48d ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10
a08e780b6cc1 tls: reject the combination of TLS and sockmap
e8d895eb5483 ALSA: usb-audio: Add quirk flags for SC13A
72cc9c6d6fba spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()
2c9a956278ce gpio: pisosr: Read "ngpios" as u32
da2d1a61fea8 scsi: bfa: Reduce kernel stack usage in bfa_fcs_lport_fdmi_build_portattr_block()
37ad4cd204de fuse: set ff->flock only on success
3303398cc2aa HID: hidpp: fix potential UAF in hidpp_connect_event()
20ef4739b329 virtio-fs: avoid double-free on failed queue setup
0933634b4a69 ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT
2cc0b6123436 exfat: fix handling of damaged volume in exfat_create_upcase_table()
a2adb52cf644 sparc: Disable compat support with LLD
b1cbbde23215 bpftool: Pass host flags to bootstrap libbpf
35a83ea4b709 i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA
0eee1e6cddd1 smb: client: fix races in cifsd thread creation
e7f217bc6641 net/sched: act_csum: don't mangle UDP tunnel GSO packets
0de429ddd525 apparmor: propagate -ENOMEM correctly in unpack_table
45757484d1d2 net: hns3: improve the unused_tuple parameter setting
6a3f7fb3e15c e1000e: limit endianness conversion to boundary words
d6e12544ddb0 vsock: use sk_acceptq_is_full() helper in all transports
1ae3c612a272 ptp: ocp: add shutdown callback
87e2826ed205 net: stmmac: xgmac2: disable RBUE in default RX interrupt mask
a17fce56882e sparc64: uprobes: add missing break
b85ef6483d5b Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923
adb5b79b2cae ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure
131b18787f2d ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence
b2b5c2ca5a49 ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt
1280db765ca8 Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW
ae69dca122f6 Bluetooth: L2CAP: validate connectionless PSM length
a14ad2929f56 Bluetooth: btusb: Add support for TP-Link TL-UB250
4eb5a1ed6e1b Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38
a1fd0b931c74 Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925
0f7f58ea6296 Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV
e80184cf7274 Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922
d40f3b5eb9f3 Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040)
c305c37da249 Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c
0f15f3036d01 spi: xilinx: let transfers timeout in case of no IRQ
c9cebac67359 hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i
626e080d297d dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc
7e0e7cd4364a dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes
0d72270b5e7e PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems
b199c6d13261 hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist
fcd72403e65f HID: multitouch: Honor ContactCount for Yoga Book 9 to suppress ghost contacts
a20ff930866d sctp: Unwind address notifier registration on failure
dd39064d2948 nvme-fc: Do not cancel requests in io target before it is initialized
d3f35b584b09 platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table
0a45107c416d ata: libata-pmp: add JMicron JMS562 quirk
489b23e15a82 ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8
1afbf16dc3da ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC
ebed7211ba7a vdpa/octeon_ep: Use 4 bytes for mailbox signature
e70d47fba657 vdpa/ifcvf: handle dev_set_name() failure in ifcvf_vdpa_dev_add()
b5a6462f4646 net: lan966x: restore RX state on reload failure
a726cc53424a net: dsa: qca8k: Add support for force mode for fixed link topology
30ec6e0c97a8 btrfs: use lockless read in nr_cached_objects shrinker callback
991ed1e019bc btrfs: use on-disk uuid for s_uuid in temp_fsid mounts
89288dc01c7c hwmon: (adt7462) Add of_match_table to support devicetree
78d830dd0cc0 hwmon: (raspberrypi) Fix delayed-work teardown race
41dee2dc8347 PCI: Avoid FLR for MediaTek MT7925 WiFi
8e536d8624cd fbcon: don't suspend/resume when vc is graphics mode
80cd97c5e900 btrfs: protect sb_write_pointer() with invalidate lock
fe8e6c0a2f28 netconsole: take target_cleanup_list_lock in drop_netconsole_target()
7d177cad4df5 wifi: mt76: transform aspm_conf for pci_disable_link_state
9d38a188fa1a wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv
cfde1b6d67a7 wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec
cde306add3bf wifi: mt76: mt7925: add Netgear A8500 USB device ID
67b05e2d22ad platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen
26c4e981525b wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS
d1017cf3c471 platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table
6ad679fcddcd tls: Flush backlog before waiting for a new record
c4cb9a728df6 net: ibm: emac: mal: fix potential system hang in mal_remove()
9eee6b90bee3 pds_core: quiesce DMA before freeing resources
1b788fa4cf54 configfs_depend_prep(): pass configfs_dirent instead of dentry
5094ea022e2f RDMA/mlx5: Create ODP EQ for non-pinned dmabuf MRs
f8862e9c74b9 xprtrdma: Add request-pool slack for delayed recycling
c76e9123ab91 RDMA/rtrs-srv: Fix integer underflow in process_read and process_write
1094d83ad325 ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend()
d48cf0288f1a NFS: fix eof updates after NFSv4.2 fallocate/zero-range
74f577c722c9 btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF
59f75e0c8724 btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()
662b064911db riscv: panic if IRQ handler stacks cannot be allocated
4abc1af7ac20 netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()
d88c24b76f28 ALSA: es18xx: check control allocation before private data setup
640c1bd8d359 net: microchip: sparx5: clean up PSFP resources on flower setup failure
24b3f1a9982c hsr: broadcast netlink notifications in the device's net namespace
0a44945b0d34 net: cpsw_new: unregister devlink on port registration failure
3b2814dd842a bpf: NUL-terminate replaced sysctl value
73fc151ab09a RDMA/mlx5: Fix state and counter desync on loopback enable failure
dff6980fe10e firmware: stratix10-svc: fix FCS SMC call kernel-doc
1234db6e41bf RDMA/umem: Make ib_umem_is_contiguous() safe on 32 bit
5fc5b7310954 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()
0c6a4f8a0d43 wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications
125ed82d5b59 ipv6: use READ_ONCE() for bindv6only default in inet6_create()
1b39f46eec2f drm/amdkfd: Unwind debug trap enable on copy_to_user failure
5bb2dfa65d8d drm/amdkfd: fix SMI event cross-process information leak
8bf884a35686 net: ethtool: cmis_cdb: hold instance lock for ops locked devices
22814e3504b8 x86/microcode/AMD: Move the no-revision fixup to get_patch_level()
06322da06116 cxl/region: Validate partition index before array access
eeacf9909028 ipmi: si: Use platform_get_irq_optional() to retrieve interrupt
ac2c9384e2b8 perf/x86/intel/uncore: Guard against invalid box control address
12fb4ff2dda8 ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP
c92611b4ea97 ALSA: hda/realtek: ALC882: Fixup for Clevo P775TM1
e5f28e0bed58 clk: keystone: don't cache clock rate
3d177f46ce3d net: ibm: emac: fix unchecked platform_get_irq return value
489d7ec35bd8 net/mlx5: E-Switch, align disable sequence with switchdev-to-legacy transition
001824103f2f drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq
d572215973e6 RDMA/irdma: Fix typo in SQ completions generation
c8f268e7d6c7 net/mlx5e: Verify unique vhca_id count instead of range
805f11fb10dd drm/amdgpu: validate RAS EEPROM tbl_size before record count
29fef371331e drm/amdgpu: fix buffer overflow during vBIOS update
95e13b251962 drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error
3334985f8b4c drm/amd/pm: bound pp_dpm_set_pp_table() memcpy
4396d74b0c73 drm/amdgpu: harden FRU PIA parsing with bounded helpers
d98c8032c299 drm/amdkfd: fix UAF race in destroy_queue_cpsch
9bde188793a7 drm/amd/display: Check for sharpening case when calculating max vtaps for scaler
a05e54c1eeab xhci: Prevent queuing new commands if xhci is inaccessible
f2463fc246d3 drm/amd/display: Avoid DPMS-on for phantom stream
388dd5c97778 usb: xhci: remove legacy 'num_trbs_free' tracking
23078553cee1 usb: xhci: Improve Soft Retries after short transfers
5983bfe3caa7 wifi: iwlwifi: add support for AX231
7be2fc679c8f wifi: iwlwifi: mvm: fix P2P-Device binding handling
d4158bc784f4 wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect
adc126a24ab2 wifi: cfg80211: harden cfg80211_defragment_element()
47bf1db8ef59 wifi: mac80211: unify link STA removal in vif link removal
176e9c96326e wifi: mac80211: clarify beacon parsing with MBSSID/EMA
97efd7a41aac nvme: validate FDP configuration descriptor sizes
9ad5697fd344 thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries
f31c415b539f wifi: rtw89: 8851bu: add Mercusys MA60XNB (2c4e:0128)
6518f87771c8 dpaa2-switch: fix handling of NAPI on the remove path
abd7511e12b2 net: dsa: sja1105: flower: reject cross-chip redirect
fa232b4496cb dpaa2-switch: fix the error path in dpaa2_switch_rx()
5adbc4d02d7d dpaa2-switch: rework FDB management on the bridge leave path
20b8520d1ef9 ALSA: seq: oss: Reject reads that cannot fit the next event
2e333a222479 ASoC: codecs: rk3328: Use managed GPIO and clock helpers
6a8149a20e46 ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()
0257e3ea00e1 fs/ntfs3: validate index entry key bounds
bc8cfef261c9 nvme: refresh multipath head zoned limits from path limits
407ee19828a7 fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib
9299e7d1c793 powerpc/fadump: Add timeout to RTAS busy-wait loops
08003cc005c8 iommu/rockchip: disable fetch dte time limit
e766cc0911ce net: txgbe: fix phylink leak on AML init failure
9461d11ce1ad net: wwan: t7xx: Add delay between MD and SAP suspend
9d969c98732a net: qrtr: fix node refcount leak on ctrl packet alloc failure
a3b3c69a24bb ppc/fadump: invoke kmsg_dump in fadump panic path
7d976afcb513 ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach
d404bb88ca37 ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge
f2e291043c37 ata: ahci: fail probe if BAR too small for claimed ports
9fed6a780635 wifi: ath12k: Prevent incorrect vif chanctx switch when handling multi-radio contexts
54c2414359fc ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive
2738d52a96d9 ASoC: qcom: q6apm: return error code to consumers on failures
1cec9da75a5b ASoC: codecs: pcm3168a: Prevent regulator double-disable in S4
00738665c875 wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi
cab5bfff2e3c net: ibm: emac: Reserve VLAN header in MJS limit
99e6c057f1e5 spi: tegra210-quad: Allocate DMA memory for DMA engine
4bc0c443d7df libbpf: Also reset {insn,data}_cur on realloc failure
aa3e2c5ce5d5 iio: accel: mma8452: switch to non-devm request_threaded_irq()
7f845820afaa perf/ftrace: Fix WARNING in __unregister_ftrace_function
61ede56199da iio: light: stk3310: Deal with the ps interrupt issue in PM
fe63db3544b9 media: qcom: camss: vfe-340: Proper client handling
d6c51f3e6040 clk: samsung: exynos990: Fix PERIC0/1 USI clock types
4626eebf35dc mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC
d6787ea5d7a9 tracing: Disable KCOV instrumentation for trace_irqsoff.o
31250800177a ARM: tegra: p880: Lower CPU thermal limit
e38226d30882 mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC
49ee15b11db6 ARM: tegra: tf600t: Invert accelerometer calibration matrix
41c72b3d627f mmc: davinci: fix mmc_add_host order in probe
971ba53c1174 soundwire: only handle alert events when the peripheral is attached
33ca906f7992 gfs2: page poisoning fix
0300131f0a92 soundwire: dmi-quirks: Disable ghost Realtek devices
de81bc4f3243 soc/tegra: fuse: Register nvmem lookups at probe
08dc8e55bd72 libbpf: Add __NR_bpf definition for LoongArch
ca5f986eb459 drm/nouveau/bios: skip the IFR header if present
c11edd2975c9 ASoC: Intel: catpt: Complete coredump handling
4283835e918e x86/topology: Add missing struct declaration and attribute dependency
f29267ace042 drm/nouveau/gsp: add SEC2 to GA100 chip table
29338bd2e233 scripts: modpost: detect and report truncated buf_printf() output
29375e071ea2 host1x: bus: Fix missing ops null check in error teardown
d5d7c6a3b715 pinctrl: renesas: rzv2m: Use -ENOTSUPP instead of -EOPNOTSUPP
c19e9e549302 net: sfp: add quirk for OEM 2.5G optical modules
0f35d48ded79 hfs: rework hfsplus_readdir() logic
4de2cffef5e6 ACPICA: add boundary checks in two places
d0fb1973f705 ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()
3cbf096a478f ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()
d15c574022e0 ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op()
21a73528579f ACPICA: Add validation for node in acpi_ns_build_normalized_path()
1cac04312b77 ACPICA: Add package limit checks in parser functions
4c977d57a784 ACPICA: validate handler object type in two places
293171dae723 ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg()
b96401812cbf ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)
a6cd2fc2d542 ACPICA: Prevent adding invalid references
9bc0e8c3df68 ACPICA: validate byte_count in acpi_ps_get_next_package_length()
bc5b2158c762 ACPICA: add boundary checks in acpi_ps_get_next_field()
ef5a8d939c1e ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()
5d16f40b019e ACPICA: Fix condition check in acpi_ps_parse_loop()
00814fb7a08a drm/amd/display: Initialize dsc_caps to 0
79527ce8d343 drm/amd/pm/si: Fix updating clock limits from power states
1429524673ac drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device
971852291bfa ALSA: hda: cs35l41: imply SERIAL_MULTI_INSTANTIATE
916d74343cd6 net: thunderx: fix PTP device ref leak in nicvf_probe()
a0788aa9875f net: napi: Skip last poll when arming gro timer in busy poll
4df5597c6544 ipv6: addrconf: fix temp address generation after prefix deprecation
5883aae0a555 net: hsr: require valid EOT supervision TLV
eb833b94286d ALSA: usb-audio: Add quirk for Novation Mininova
c8a911b3b07b irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed
70c26330a8df iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind
83e5973b4164 mips: cps: Assemble jr.hb with an R2 ISA level
e7d0deecf55d drm/panel: simple: Add AM-1280800W8TZQW-T00H
0583639ce8d2 genirq/manage: Make NMI cleanup RT safe
992c60771749 powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()
cb2da9960414 wifi: iwlwifi: mld: keep healthy link on EMLSR missed beacon exit
1b3b7b521041 wifi: iwlwifi: mld: purge async notifications upon nic error
ed183461c327 wifi: iwlwifi: mld: disallow puncturing in US/CA for WH
1412c8714c63 wifi: iwlwifi: pcie: add two LNL PCI IDs
e960f690a3f6 wifi: iwlwifi: Transition to basic uAPSD with MAC_PM_POWER_TABLE API VER_3
e59b7cd59573 wifi: iwlwifi: mld: call iwl_mld_free_ap_early_key() for AP only
043c2c469c2b wifi: iwlwifi: pcie: fix ACPI DSM check
54c811bef719 wifi: iwlwifi: mld: honor BSS_CHANGED_BEACON_ENABLED
76ad89baf854 wifi: iwlwifi: fix the access to CNVR TOP registers
deaeb7be8e6b thermal/drivers/tegra/soctherma: Switch to devm cooling device registration
19fa3e00f7f4 clk: socfpga: agilex: implement l3_main_free_clk
bffae18ba048 s390/zcore: Removed unused variables
b946e246ede9 rds: annotate data-race around rs_seen_congestion
c4081e49ebe0 rds: filter RDS_INFO_* getsockopt by caller's netns
9fe33b272d7d ALSA: seq: Remove arbitrary prioq insertion limit
da95cb016812 RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()
607492b1b38e netlabel: fix IPv6 unlabeled address add error handling
295c1b184d01 wifi: rtw89: pci: enable LTR based on pcie control register
d8156aacfcab virt: acrn: Fix irqfd use-after-free during eventfd shutdown
508e28930a16 rcu-tasks: Fix possible boot-time tests failed for the call_rcu_tasks()
b3674e8c01b3 pwm: mediatek: set mt7628 pwm45_fixup flag to false
c29bb5acd0ca irqchip/gic-v5: Immediately exec priority drop following activate
ffb493032c6d gpib: Suppress setting END on error from NI_USB dongle
9c44f4169960 char/nvram: Remove redundant nvram_mutex
182bec9f9e37 crypto: atmel-sha204a - remove sysfs group before hwrng
73ea4ec0ec46 driver core: Avoid warning when removing a device while its supplier is unbinding
5cbab666721d tty: serial: 8250: protect against NULL uart->port.dev in register
a5ff304195ca usb: host: add ARCH_AIROHA in XHCI MTK dependency
4295c58990b7 serial: 8250: fix possible ISR soft lockup
05171ef06546 usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue
45829816ef00 USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set
28d78783a871 usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log
549672a3fb6b usb: core: hcd: fix possible deadlock in rh control transfers
dacd7c317ba1 usbip: vhci_hcd: fix NULL deref in status_show_vhci
89097c138061 drm/panel-edp: Add LG LP129WT232166 panel
9c18399327c3 HID: bpf: Add Huion Inspiroy Frego M button quirk
9584ab628372 isofs: handle set_blocksize failures
fd4d6593c512 omfs: handle set_blocksize failures
f27e21cf3c04 hpfs: handle set_blocksize failures
153374ee67a4 jfs: handle set_blocksize failures
60f7ccf66988 qnx4: handle set_blocksize failures
cc30a36f9dd1 minix: handle set_blocksize failures
ab1d6160d26e bfs: handle set_blocksize failures
e01af5aa6410 affs: handle set_blocksize failures
78e10082f3e9 ntfs3: handle set_blocksize failures
28e4a2224c31 befs: handle set_blocksize failures
23a0b6d6a19b spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs
15fd44bc870c net/mlx5: Switch vport HCA cap helpers to kvzalloc
caa51e6da596 net/rds: Don't sleep inside rds_ib_conn_path_shutdown
7c1e87907b40 net/sched: sch_drr: make cl->quantum lockless
39679927fa7a net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()
c84cdea5684a net: usb: qmi_wwan: add MeiG SRM813Q
fd45359dacb3 nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl
ebd9e64e92f7 bitfield: wire __bf_shf to __builtin_ctzll
eef9c7072eec thunderbolt: Verify Router Ready bit is set after router enumeration
6fb64029457c wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed
caf8b9216f6d thunderbolt: Increase timeout for Configuration Ready bit
cb77a50d1114 firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size
767789a58ae0 firmware: arm_scmi: Validate SENSOR_UPDATE payload size
8e11ea1401c5 thunderbolt: Verify PCIe adapter in detect state before tunnel setup
66f0196439aa thunderbolt: Improve multi-display DisplayPort tunnel allocation
ef9ea99efae4 thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host()
4b65a3f6ca86 bridge: Add missing READ_ONCE() annotations around FDB destination port
8f62aa442b20 drm/amdgpu: check and drop invalid bad page records
054d856ce49f drm/amdgpu: avoid integer overflow in VA range check
f8f0985375c3 drm/amdgpu: Bound GPIO I2C table entry count from VBIOS
fc84416de710 drm/amdgpu: add first record offset check
1aa55af304a2 drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
b1d2b29d3115 drm/amdgpu: cap ATOM command table nesting depth
a98d0d49757a drm/amd/ras: reset CPER ring on corrupt entry size
4486de65eb5e 9p: use kvzalloc for readdir buffer
6d40846b8aa3 drm/imagination: Populate FW common context ID before passing to the FW
94bb5f46f117 arm64/daifflags: Make local_daif_*() helpers __always_inline
4953290c7186 arm64: panic from init_IRQ if IRQ handler stacks cannot be allocated
3e7b07202b35 9p: invalidate readdir buffer on seek
2d607646909a drm/imagination: Don't timeout job if its fence has been signaled
ea8bc0ea637a iommu: arm-smmu-qcom: Ensure smmu is powered up in set_ttbr0_cfg
ab909a7ae272 sched/fair: Reject misfit pulls onto busy SMT siblings on asym-capacity
08e9e131aa16 drm/amdgpu: use atomic operation to achieve lockless serialization
7bb22751f72e ALSA: usx2y: Drain pending US-428 pipe-4 output commands
db36881139b6 ALSA: ice1724: Fix blocking open for independent surround PCMs
70ff472d51f5 ALSA: hda/ca0132: add QUIRK_GENERIC path for Gigabyte GA-Z170X-Gaming G1
c2c89118c27c drm/amdkfd: Check bounds on allocate_doorbell
ec646686613d drm/amdkfd: Fix OOB memory exposure in get_wave_state()
dd2870ca036e drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id
d215e6dbe53b PCI: Wait for device readiness after D3hot -> D0uninitialized transition
a16d9986b7b2 drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction
2bcae59fa1b6 mailbox: Make mbox_send_message() return error code when tx fails
b20a70bd6a3d iomap: don't make REQ_POLLED imply REQ_NOWAIT
a078b5165aa7 drm/mediatek: dsi: Add compatible for mt8167-dsi
14072fc75ee6 coresight: Disable source helpers in coresight_disable_path()
0f4cb08f3001 coresight: perf: Retrieve path and source from event data
ef9ba2b33450 RDMA/mlx5: Use QP port when decoding responder CQEs
c4606e9ba9fd media: imon: Add iMON VFD HID OEM v1.2 key mappings
f137ae837690 clk: qcom: clk-rpmh: Make all VRMs optional
20f46d0077f7 net: airoha: Reserve RX headroom to avoid skb reallocation
99e7269a9152 crypto: atmel-ecc - add support for atecc608b
d6fdc93b3711 ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally
7fb387afd60c crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y
5b42cc975a90 scsi: pm8001: Reject non-fatal dump when controller is crashed
c37923acd67a scsi: pm8001: Reject firmware update in fatal error state
4b569c3cc05b clk: samsung: exynos850: mark APM I3C clocks as critical
c5b3326d12a9 soundwire: intel: Move suspend tracking from trigger to pm suspend
a76f6e078274 drivers/of: validate status properties in reconfig state changes
6b99feda4b85 drivers/of: validate live-tree string properties before string use
d56cc5a92141 integrity: Check for NULL returned by asymmetric_key_public_key
f3e0f9c64a85 net: dsa: realtek: rtl8365mb: add support for RTL8367SB
98e5720afd74 wifi: rtw89: phy: check length before parsing PHY status IE
7fe2e6867587 HID: multitouch: Fix Yoga Book 9 14IAH10 touchscreen misclassification
2583d6dcbf50 drm/panel-edp: Add AUO B133HAN06.6 and BOE NV133FHM-N4F V8.0
05b9953e40d5 bus: mhi: host: pci_generic: Round up nr_irqs to power of two
82e432c9ebfa media: video-i2c: use vb2_video_unregister_device on driver removal
144f24ec0fc1 media: chips-media: wave5: Add range checks for dec_output_info
34830acec129 drm/gud: Add RCade Display Adapter VID/PID pair
f38d02e9f881 net: phy: motorcomm: use device properties for firmware tuning
3e7a6f588913 hfsplus: rework hfsplus_readdir() logic
9e13495e4e3e PCI: intel-gw: Enable clock before PHY init
e1023aac607c drm/amd/ras: Fix CPER ring debugfs read overflow
986b034b0592 pinctrl: mediatek: common-v1: bypass pinctrl GPIO layer in set GPIO direction
428b031dad39 pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction
fcec938ce172 drm/amd/display: Fix CRC open failure during active rendering
546b3d523484 platform/x86: sel3350-platform: Retain LED state on load and unload
5b7e151fe9ea mmc: davinci: avoid NULL deref of host->data in IRQ handler
9f67997353ca serial: 8250_port: recognize UPIO_AU
d4b22fbae700 genirq/proc: Size interrupt directory names for 10-digit interrupt numbers
b037c2f7794a mmc: core: Add validation for host-provided max_segs
ac96ea0f0378 drm/panel/tdo-tl070wsh30: Use refcounted allocation in place of devm_kzalloc()
f545ca99785c platform/chrome: Resolve kb_wake_angle visibility race
6efdc212627c net/mlx5: HWS, Handle destroying table that has a miss table
7031801eb328 net/mlx5: HWS, Check if device is down while polling for completion
c9f1fb556465 watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk
df4509a4ffb1 watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94
af2b6638a3dd watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform
b16f07aaad1b ASoC: ti: omap3pandora: update board check to use DT compatible
c9f82e7c2a44 phy: qcom: m31-eusb2: Make USB repeater optional
bafdd6284f1b drm/panel-edp: Add BOE NT140WHM-N4T, BOE NT140WHM-T05, BOE NV140FHM-N40
ed713c88b6bf drm/panel-edp: Add AUO B140XTN07.5, AUO B140HAK03.5, AUO B116XTN02.3, AUO B140XTK02.4, AUO B140HAN07.7
70af8451ceef net/mlx5: Relax capability check for eswitch query paths
d8c46c89d2cd media: qcom: camss: avoid format string warning
cbf0628c0b7d PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()
64760629b216 dlm: add usercopy whitelist to dlm_cb cache
73eecf62219f drm/bridge: tc358768: Set pre_enable_prev_first for reverse order
f22ee3d2ce5b clk: renesas: cpg-mssr: Add number of clock cells check
1931e06034c7 crypto: omap - add omap_des_unregister_algs helper
028a7f4f3d69 crypto: ixp4xx - fix buffer chain unwind on allocation failure
d6d4b118c1e3 rtase: Fix flow control configuration
0a58cb718363 wifi: mac80211: explicitly disable FTM responder on AP stop
cb662a328a36 media: em28xx-video: fix missing res_free() on init_usb_xfer failure
8a630b1037fa net: dsa: mv88e6xxx: enable .rmu_disable() for 6320 family
222b03a6e095 media: v4l2-common: Always register clock with device-specific name
5f793ee869d0 net: dsa: mv88e6xxx: define .pot_clear() for 6321
7f626e4a3403 PCI: switchtec: Add Gen6 Device IDs
a3e749c48fa9 net: dsa: mv88e6xxx: fix number of g1 interrupts for 6320 family
f3f135c4fac6 media: dm1105: fix missing error check for dma_alloc_coherent
b2a75ce2af88 drm/panel: Enable GPIOLIB for panels which uses functions from it
a513f711e086 drm/amdgpu: Prefer ROM BAR for default VGA device
223ceba837ad drm/amd/display: Find link encoder for flexible DIG mapping cases
3e6ac4f692c0 thunderbolt: Don't create multiple DMA tunnels on firmware connection manager
99f019d2e9eb thunderbolt: Set tb->root_switch to NULL when domain is stopped
0a87af3b1e3a thunderbolt: Keep the domain reference while processing hotplug
ea60ae6233ca thunderbolt: Keep XDomain reference during the lifetime of a service
0325d017bf43 thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()
077fe3211479 thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible
1ca6a345248b thunderbolt: Avoid reserved fields in path config space for USB4 routers
7f087f70e020 wifi: mac80211: avoid out-of-bounds access in monitor
a5a7253924d2 media: platform: cros-ec: Add Kulnex and Moxoe to the match table
655b925ed193 s390/cio: Purge based on the cdev's online status
cc8c940e52da net: mana: hardening: Reject zero max_num_queues from MANA_QUERY_VPORT_CONFIG
b85d356b51c3 media: rc: mceusb: Add support for 04eb:e033
bb18a346271f spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM
00f16aa8fbae dm-raid: only requeue bios when dm is suspending
04cda0b5c4ca media: chips-media: wave5: Release m2m_ctx after Instance Removed from List
072beef6a19f media: chips-media: wave5: Fix Reports from Kernel Lock Validator
87d6911f469c soundwire: validate DT compatible before parsing it
8bdd1ccd055f soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list
7d83f33c0990 bridge: Do not suppress ARP probes and DAD NS unconditionally
64862b78bb17 firmware: stratix10-svc: change get provision data to async SMC call
38cc5e49708c kcsan: Silence -Wmaybe-uninitialized when calling __kcsan_check_access()
1d9352c31bed ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit
e9b139c4684e i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845
2bef8ba66c62 psp: validate IPv4 header fields in psp_dev_rcv()
958837ce5348 wifi: rtw89: disable CSI STBC for VHT 160MHz
a910d2ba69d9 wifi: rtw89: disable HTC field in AP mode
290d37c09d9c wifi: rtw89: suspend DIG when remain-on-channel
1d1f250432cd wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result()
1583636e0c53 clk: clk-axi-clkgen: Add support versal timings
7f52d554c4c8 wifi: mac80211: use chandef in ieee80211_get_sta_bw()
5780fdc944d1 wifi: mac80211: always allow transmitting null-data on TXQs
e50965c702cf wifi: nl80211: check link is beaconing for color change
0d635f0b4a63 wifi: nl80211: reject beacons with bad HE operation
09aa75bdd7c9 hfsplus: fix issue of direct writes beyond end-of-file
4cbb2360f4d8 wifi: cfg80211: reject duplicate wiphy cipher suite entries
2e7a4a7f5ebc PCI: Stop setting cached power state to 'unknown' on unbind
367b14b35a05 tools/nolibc: avoid call to wcslen() in _start_c() inserted by clang
c33764acee65 tee: optee: Allow MT_NORMAL_TAGGED shared memory
961b88063210 usb: gadget: udc: skip pullup() if already connected
2f29f880e98b ima: return error early if file xattr cannot be changed
4e28591d0854 pinctrl: renesas: rzg2l: Add SR register cache for PM suspend/resume
cea5a8ba374f ALSA: usb-audio: Propagate write errors in generic mixer put callbacks
8988e30c005d pinctrl: renesas: rzg2l: Handle RZ/V2H(P) IOLH configuration in PM cache
edc70f451084 iio: adc: rtq6056: add i2c_device_id support
ce28e0aa2370 driver core: Replace dev->can_match with dev_can_match()
f5c3144f783f drm/xe: Fix null pointer dereference in devcoredump cleanup
21a50a9373ad gfs2: move quota_init qc iterator increment
87baeb91c0e1 gpio: usbio: Add ACPI device-id for NVL platforms
812a766e2b0a gfs2: fix quota init duplicate scan
70d472076ce4 wifi: ath9k: Obtain system GPIOS from descriptors
7b6b9fc260b1 drm/amd/pm: Check SMUv13.0.6/12 metrics integrity
db10ba9e7748 drm/panel: jadard-jd9365da-h3: set prepare_prev_first
c54ef628c74c drm/amd/display: Fix DPMS using partially updated pipe context
b1a5775e9043 drm: renesas: rzg2l_mipi_dsi: Fix deassert/assert of CMN_RSTB signal
eb94c9719918 drm: rz-du: Ensure correct suspend/resume ordering with VSP
39a846d1a3a0 drm/xe/guc: Add support for NO_RESPONSE_BUSY in CTB
803eb90226fa bus: fsl-mc: wait for the MC firmware to complete its boot
ba03f486672f drm/gem: Consider GEM object reclaimable if shrinking fails
7eeefe23a819 drm/panel-edp: Add CSW PNB601LS1-2 and LGD LP116WHA-SPB1
50a7a5aec1aa mm/damon/core: avoid infinite kdamond_merge_regions() internal loop
f2cf7c75d16b drm/amd/display: Set gpuvm min page size to 4K on dcn35/36