dfcdacd1d25b Linux 6.18.63-xanmod1
c66867ef86e3 Merge tag 'v6.18.63' into 6.18
1cdda838e847 Linux 6.18.63
c5f54af611ff xen-netback: Zero out sring pointers on unmap
a97aa838903d xen-netback: Fix XenBus connection failure cleanup
5d68f3fd958b apparmor: on failed load ensure profile files are removed before parent
26d2534b6f1e apparmor: fix uninitialized variable warning in aa_inherit_files
99c09b6a5ebe ocfs2: read the xattr entry hash before defragmenting the bucket
337783277c0b init/bootconfig: pass init arguments in documented order
662ac91c9ffd fs: don't fail __d_obtain_alias() for unlinked inodes
f4acf474e4dc fs: skip copy_file_range write limits when there is no data
0da582bda88a fs: let backing files inherit FMODE_NONOTIFY from the user file
8bceb6034544 splice: avoid stale f_pos writeback on error
325b62c95822 iov_iter: fix NULL deref in iov_iter_alignment()
4a70894450cb backing-file: enforce append-only and immutable backing inodes
7d0e4a0f1aed aio: fix NULL deref when a fault races ring truncation
a08cef6d1aea apparmor: remove fs entries created by a failed policy load
464df36ba29d tcp: fix reordering addition overflow in MTU probing
7d6eccadf776 net/packet: check TX_RING fragments before memory accounting
e5b1fefc2dcd apparmor: check accept index + 1 is in bounds
4971c6f821ff apparmor: avoid potential double free when remapping DFA tables
8c054c71d47d apparmor: fix refcount leak in aa_get_newest_profile()
f021ba9c6f5e tcp: check congestion control restriction first
594a389f9068 proc: don't let an entry below /proc/<pid>/net be a mountpoint
bf04f8bdd6f0 blk-iocost: abort weight transfer on invalid donation weights
24705093eeb2 userns: don't drop the exec securebits
0aba8e759cfc mount: refuse setns() with a shared fs_struct again
f8cd83f7b7ea r8152: Use BMSR to detect the link state
a20f98ffe158 apparmor: don't revalidate inherited files under files->file_lock
084a9234681e apparmor: fix NULL ctx->peer derefs in unix socket ctx updates
6ad9711f4fec Revert "net: advertise TCP MSS from the configured MTU, not the learned PMTU"
4d4bd7bcc14e irqchip/irq-msi-lib: Free wired MSI descriptors
74cc51e2f1bf irqchip/riscv-imsic: Report successful hardware retrigger
b80b417d864b fsverity: Be more careful with return value of ->get_verity_descriptor()
61e7228c5329 kgdb: Fix buffer overflow in the qRcmd packet handler
009c3d488595 kgdb: Fix buffer overflow in the 'M' and 'X' packet handlers
129119bb1c3d kgdb: Fix buffer overflow in the 'm' packet handler
189043749627 nvmet: Free the old negotiation state when restarting authentication
13ebf8ef96ac nvmet: Finish the blk plug when integrity allocation fails
32bfe3eddb18 nvme-tcp: fix io_work priority inversion when send_mutex is held
80b1428dbf81 nvme-tcp: start error recovery when read_sock fails
5e4325c515dc nvmet-fc: Tear down the association when the admin queue allocation fails
d6792894711a nvmet-auth: fix error handling on CHALLENGE failure
868a29f30f15 nvmet: pci-epf: require SGLs to match the command data length
5dc1fa00e67e nvmet: pci-epf: report transport errors in command completions
224aa110632e nvmet-fc: only send read data for successful commands
36c3af0e94b6 nvmet-rdma: reject short connection requests
63c2733ed1fc ppp: fix stale pointer access after pskb_may_pull in ppp_ccp_peek
9a048334a7dc ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe
241fed9fa149 ntfs3: fix mapping pairs bounds check for alignment
61329755f281 fs/ntfs3: bound DeleteAttribute asize against rec->used in do_action
2ebe4f073612 fs/ntfs3: bound CreateAttribute asize against record_size in do_action
5e3cdfc8554d net: hisilicon: hisi_femac: Stop the receiver before releasing the RX ring
33e747a4822b macvlan: fix passthru promiscuity accounting while down
3646b7c04717 net: limit priority VLAN untag depth
7f695fb47b40 drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO
7f1ed723c198 drm/amdkfd: validate SRAT subtables before parsing
48f413a3999a drm/amd/display: Initialize missing TD-LUT programming inputs
08a3f27f91a9 drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping
cfa7fd53ed06 drm/amdgpu: reject CS chunks too large for kvmalloc()
ec01397e6c40 drm/amd/display: take a runtime PM reference only when a CRTC turns on
03bb7b94d6e4 drm/amdkfd: stop restore retries on device unplug
1916c2f2d1bd perf machine: Fix NULL deref in thread__resolve_callchain_sample()
1e70a9c88381 arm64/mm: restrict transparent contpte mappings to valid PTEs
f5841241474f cpufreq: stats: Fix potential out-of-bounds access in deferred reset
4e4c9733886d LoongArch: Fix perf hardware breakpoint failure via installation
815c31e67f3f LoongArch: Only send SIGTRAP signal if necessary in do_watch()
eef4bbc5174d LoongArch: Fix architectural naming typo for CSR_FWPS_SKIP
18de2985eb99 LoongArch: Fix bitmask corruption in update_bp_registers()
53e0ad94f3da LoongArch: Remove redundant call in update_bp_registers()
a307ab34e323 LoongArch: Remove arch-specific __smp_mb__{before,after}_atomic()
45d58b3dcb3d LoongArch: Use pa_to_nid()/nid_to_addrbase() rather than hard-code
a6a76018c2d6 LoongArch: Call cpu_final_simd() with pure_initcall()
66995f75c592 ASoC: hdac_hda: Balance the runtime PM disable in codec remove
4d8169226406 ixgbe: reserve TX timestamp after skb preparation
db13dbefa22e ALSA: hda: Reject codec reset on ASoC (ext_ops) buses
834ca8b916c7 ALSA: usb-audio: Bound packet copies by the PCM buffer size
9e48dbf6841e loop: check for read-write open mode on LOOP_SET_STATUS in lo_compat_ioctl()
a6814a094d3b xsk: restore UMEM flags after failed pool assignment
a3d1e34ce128 tcp: limit tcp_tso_rtt_log to a valid shift count
01c9e3038a39 dt-bindings: clock: ma35d1: Document the missing crystal inputs
0cc5459983d1 ipmr: fully initialize the synthetic IP header in ipmr_get_route()
b124b5a2d82f bonding: fix out-of-bounds read of arp_ip_target
1179a864db9d net: usb: pegasus: check rx pkt_len against the received length
9189524229c3 ASoC: codecs: wsa883x: Accept temperatures across the full trim range
e4ab85f273f4 ASoC: codecs: wsa884x: Accept temperatures across the full trim range
a55460a33402 ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch
2431c46f95a3 f2fs: fix to update superblock crc in sanity_check_area_boundary()
c94e08ae4ad3 ceph: fix uninitialized err in ceph_netfs_issue_read()
6f8082c1fb88 ceph: validate encoded xattr name lengths
fa6e5325278c ceph: validate MDS reply fragtree split array length
ff6e8ae28b52 ceph: bound name skips in ceph_mdsmap_decode() by the message end
512b5cf725d5 ceph: validate fscrypt auth blob length
32da9f494080 ceph: don't fail write_begin with -EAGAIN after flushing old snapc
5f4eda68e318 ceph: clamp MDS reply result code to the errno range
e1cf4b41bfbe libceph: fix out-of-bounds reads from repeated CRUSH bucket entries
813221c8bbc9 ceph: fix 32-bit overflow in readdir reply count check
410855d5e5b6 ceph: Fix mds session leak in __open_export_target_session()
112f3dba7af4 ceph: Fix xattr buffer leak in __send_cap()
f0dbd6b9b05e ceph: fix integer overflow in the snap trace bounds check
de314d21f7ad libceph: reject an initial monmap with no monitors
23e0bbd385b1 libceph: reject mismatched CRUSH weight-set sizes
ab62a3677aad libceph: Fix multiple unsafe decodes in ceph_oloc_decode()
7f4f3e6fe58c libceph: Fix unsafe decode in ceph_redirect_decode()
046d542cd77b libceph: only set read_from_replica on read requests
5ab17ed54e8b ceph: require the dentry lease record to cover struct ceph_mds_reply_lease
e9d72cf5d1bf ceph: reject mdsmaps that claim more than CEPH_MAX_MDS ranks
acaec29310a6 ceph: fix out-of-bounds read in ceph_netfs_issue_op_inline()
5c4d3a1f5054 ceph: avoid pending truncate during nonblocking cap acquire
2da8a5e6c0ab KVM: arm64: Set HCR_EL2.BSU to Inner Shareable for guests
4c4c4a69cc2d time/namespace: Fix overflow when converting absolute deadlines
035b7372117f timers/itimer: Keep a nonzero value at CPU timer expiry
fa12106f9928 fbdev: atmel_lcdfb: fix list_first_entry() on possibly empty modelist in probe
e87cd6f7507f fscrypt: Fix missing barrier in fscrypt_find_mode_key()
482a6e8ab6ae mm: multi-gen LRU: fix NULL lruvec->pgdat deref with memcg disabled on cmdline
cb24274f7d30 riscv: mm: exclude invalid THP PMDs from page table check
41a885c81a18 mm/mempolicy: apply bind policies against the scoped allocation zone
a402a7a7dea7 mm/vmscan: reclaim every zone in per-node proactive reclaim
e251079d676c mm/mremap: correctly uncharge accountable VMAs in error path
38efa986446b mm/mremap: populate calculated fields in vrm state correctly
5b040ba4b592 mm/truncate: fix the zeroing end of pagecache_isize_extended()
abdf941e5662 mm/page_alloc: count guard pages as free again when their buddy merges
98e52d6946a9 mm/swap: fix swap_cache_get_folio() returning a folio that left the swap cache
f48ad207e5b6 mm: vmscan: don't count per-node proactive reclaim as memory pressure
1900cb440198 ipc/shm: fix RSS accounting for hugetlb shared memory
be6be6707c29 mm/madvise: atomically clear the young bit on THP MADV_COLD
695d0c95c13f mm/percpu: account full object size for percpu memory allocations
87f6bb4b82ac userfaultfd: fix UFFDIO_MOVE livelock on large folio with extra references
fe6e10174491 mm/mlock: use a long for the page count in mlock_fixup()
6dddcb5b8bf8 mm/madvise: add cond_resched() in THP branch of madvise_cold_or_pageout_pte_range()
e9d4d0f7d9ca mm: disallow ioremap'ing ordinary RAM in generic_access_phys()
7ea08a7ca9e1 mm/hugetlb: account migration target folio in per-node NR_HUGETLB vmstat
fb307eadea56 mm/mremap: fix calling fixup_hugetlb_reservations() on the wrong VMA
1b6f6cf3a78d mm/hugetlb: don't clear the resv_map of a VMA whose lock is held
fa5ee143d0e6 ocfs2/cluster: remove zero-address nodes from IP tree on teardown
03ea1f756ecf ocfs2: snapshot the dentry name while tracing file release
4dd4043fcfa0 stackdepot: stop preallocating after the final pool
e93fbad317c8 compat: avoid double rounding in times()
5e208e3883fd scsi: ufs: core: Remove completed-without-interrupt path in ufshcd_abort()
3c9620afa608 scsi: ufs: core: Remove an always-false WARN_ONCE()
e89d8e7c00ec scsi: libiscsi_tcp: Prevent R2T range check overflow
657a3f18227d scsi: ufs: core: Clear stale UIC result byte before peer DME retries
a3e6b9d63f45 scsi: ufs: bsg: Clear the reply buffer before use
6252388f4ee9 scsi: ufs: bsg: Complete the job on error
9a62816f8891 veth: fix stale peer max_mtu on XDP program replacement
57492dac0edf genirq/kexec: Do not take the bus lock of an interrupt chip on the crash path
ca59f6aa7c29 gve: fix out-of-bounds read in gve_get_flow_rule_entry()
5244ac2547e5 cgroup: don't kill migrated processes through their exiting threads
5ba40b5a2d62 timekeeping: Update offsets on sequence counter retry in ktime_get_update_offsets_now()
a1028ed2d71d posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() signal path
2e98c0261fc6 spi: zynq-qspi: fix address buffer corruption and support 4-byte address
20661adcee87 i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len
0a71f66c8f3e ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks
d9c558a9a047 parisc: eisa_enumerator: Fix out-of-bounds reads of the EEPROM buffer
930132f707c7 gpiolib: don't report -ENOMEM for a requested line without a label
532570df1ea0 tpm: fix zero-length read discarding the pending response
160acc23dea8 tpm: tpm_nsc: stop using the cleanup callback as dev.release
5ce06b8a03a7 tpm: tpm_nsc: fix NULL pointer dereference on init failure
25a82a597385 i2c: designware: queue only one read command for block reads
2fec4e4547ee i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode()
55441fd25257 cpufreq: intel_pstate: cancel HWP notify work in driver cleanup
4429d405124e ucount: take the rlimit reference before checking the limit
848ca02a4a39 listmount: don't wrap around with a U64_MAX cursor
0be8ba845e49 statmount: don't copy the reserved empty string past the buffer
d14b8b4bad5c exportfs: Release the get_name() directory file synchronously
3402ea1ee81c tipc: fix broadcast sender hang on last acker departure
7511c1c4baa9 net: wwan: iosm: validate msg_head before indexing msg_ring
62518ed062b5 nvmet: take subsys->lock while force-reconnecting in nvmet_subsys_attr_qid_max_store()
e204d8b84f97 sh: maple: Use the matching IRQ cookie when invoking free_irq()
5ec6159e99f1 ALSA: aloop: Update the PCM Slave controls for a matching playback
0a4c515925cc writeback: clear old wb dirty state after inode switches
7ad9304dbef1 writeback: reset dirtied_when when switching wbs
d84a3fde13fb platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming
ade5975527b7 Documentation: hyperv: Update documentation for sending VMBus packets
ff7cf939ebe9 ocfs2/cluster: initialize heartbeat regions before publishing them
9d74fa5c7b7d ocfs2: deal with legacy signed xattr name hash values
bd188a034bb1 ocfs2: use the stored hash when checking xattr bucket collision
be9f94763239 ocfs2: deal with legacy signed dir index name hash values
aea3d821519b ocfs2: reserve value tree metadata when moving an xattr into the inode
16452d2c1452 ocfs2: reserve metadata for a new xattr block and its value tree
6d1ca6232ed3 alpha: determine tininess after rounding in the FP emulation
ea1c50e9f136 net/smc: queue the copied chunk when smc_tx_sendmsg() faults
bea16873a071 net: unix: reject negative max_dgram_qlen values
80ee045485b9 net/rds: ib: don't enable IRQs in rds_ib_conn_free()
fbeb004b0965 PCI: qcom-ep: Deinitialize endpoint on remove
83babb400486 fbdev: bitblit: Fix glyph clipping when fbcon pans
9e93f41a3483 ipv6: do not restart DAD for a dead ifaddr
1ca1ed1e5752 ipv6: initialize temporary ifaddr before publication
ff386540eef6 ipv6: serialize address publication with device teardown
ac01bab1bff8 ipv6: remove ifaddr from hash during ifdown list cleanup
58d07ddaa5f3 drm/amdkfd: correct vram_available calculation
c2a3bef88fe1 amdkfd: Fix memory availability double accounting of kfd pinned objects
2368f9aed09c drm/amdgpu: wait for pending page table updates before switching a VM to CPU updates
2cbdce3fdf92 drm/amdkfd: wait for a GPU reset before freeing a BO
38bb73854a4a drm/amd/display: Fix swap in median3() for DSC rate control
b260effe83a6 drm/amdgpu/gmc9: add extra type-2 TLB flush for gfx942/gfx950
1436e441ad19 drm/amdkfd: don't drop an SVM CWSR reference that was never taken
01d08b4de4b1 drm/amd/pm: reapply umd profile state after recovery
b900cb2316ff drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs
87a531b56f2b drm/amd/display: don't WARN when removing an unallocated MST payload
2081dc291247 drm/amdkfd: fix doorbell allocation race creating duplicate allocations
7c43b9c2e9f8 drm/amdgpu: reset VI ASIC on Apple boards with VRAM at 0
6130c38c3e73 drm/amdgpu: reset CIK ASIC on Apple boards with VRAM at 0
94b703ea1438 drm/amdgpu: reset SI ASIC on MacBookPros with VRAM at 0
d72ea8b65513 drm/amdgpu: require _PR3 for BOCO
1c2c129c4e7f blk-mq: clear stale inactive flag on hctx reuse
2d12e5db3317 gpio: pca953x: Handle direction register read errors in IRQ paths
e27d2775f9db gpio: davinci: Clear interrupt status in every bank on suspend
0f3f389215cb ALSA: line6: Handle period elapsed calls outside the locks
0fad7fba30c8 gpiolib: Free chip resources when allocating the label fails
7dff4e2578fe ALSA: emux: Stop voices before freeing zones in all cases
7986ac275e14 ALSA: mtpav: restore negation dropped in guard() conversion
6d379def894e ALSA: compress: reject restarting an ACTIVE task via origin_seqno
50eb0b68ff64 ALSA: compress: add missing OPEN-state gate to SET_METADATA
bda1fb7c15d9 ALSA: compress: reject buffer geometry change on gapless next_track
f82eafe282ea ALSA: compress: fix buffer leak on failed SET_PARAMS
d43792f4263a net: gro: don't chain linear parts larger than gso_size into frag_list
c59b5fcbc7b7 netdevsim: reject cls_bpf programs bound to another device
dba866148602 cgroup: fix cgroup.kill for exited thread group leader
8126595cc9ab Revert "Input: matrix_keypad - force switch rows to input mode"
880359334771 Input: always accept EV_SYN in input_event()
fdb8628449f3 hwmon: (acpi_power_meter) Fix 18.45 TW bug
6ffb37e91e6b hwmon: (sht3x) Return the consumed count for heater writes
5cc7fddfce17 rtc: pcf8563: pass the driver data to the alarm interrupt handler
45e57ee17b8a platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc()
5e2b198a2384 rtc: cmos: Disable ACPI RTC event before handling it
4b6177c53f05 dax: fix wrong error code returned from dax_dedupe_file_range_compare()
f78eff4218be f2fs: fix submit accounting for IPU writeback
9738228aeaf2 f2fs: flush SIT journal during filesystem resize
e1db6d1f020e hwmon: (gigabyte_waterforce) reject short input reports
9e4af1fa6eb1 hwmon: (coretemp) Fix handling of isolated SMT siblings
306a7db6aaa1 netfilter: nf_reject: initialize IPCB at inet ingress
c2b9c053512e ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3402VA
167772769547 gpiolib: cdev: don't set GPIOD_FLAG_IS_OUT
78b8738d6656 lib/buildid: reject file offsets that do not fit in pgoff_t
2affbfaa1db5 hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe
6ad77a47904e hwmon: (sht4x) Reject incomplete heater command transfers
580203eaebaa hwmon: (sht4x) Fix jiffies wraparound in heater-ready check
90cc16ecf4a7 spi: ch341: handle transfers without a TX or RX buffer
ccda4439445c ALSA: hda/via: Apply runtime PM workaround for ASUS X55A
1ded6b545bad alpha: do not skip TLB shootdown IPIs for kthread-borrowed mms
7e2ff6da9ecf alpha: do not clear remote MMU contexts in migrate_flush_tlb_page()
42c4ea225521 alpha: invalidate the local context in flush_icache_user_page()
4f2aa02c8865 alpha: invalidate the local context in flush_tlb_mm()
8002dacea470 alpha: fix the local TLB invalidate in the UP flush_tlb_page()
be818ec671db alpha: fix the local TLB invalidate in flush_tlb_page()
5aa85f90a825 alpha: invalidate the local context in flush_tlb_page()
a26392e2fde8 alpha: only use a targeted tbi() when the target mm is really current
07b4cbae2060 alpha: run check_mmu_context() from finish_arch_post_lock_switch()
bc958129a573 alpha: load the MMU context when switch_mm() switches the current task
11452dc2e6bb alpha: handle VM_FAULT_HWPOISON in do_page_fault()
935f03f98883 power: supply: qcom_battmgr: Notify charger supplies of online changes
7ba7ddbf458c power: supply: generic-adc-battery: fix status with no supplier
b66d83f86183 power: supply: cros_charge-control: restore EC state on resume
69c4e9c13afa power: supply: qcom_smbx: set the charge enable after software control
6c8413f5412d ALSA: hda/realtek: Fix internal speakers on Acer Aspire AL16-31P
3c4c6b318e7f ALSA: seq: oss: Skip events until fully initialized
8975faca8c9d mptcp: fix subflow bitfield misuse
e07db95b63a1 mptcp: reset msk state on early connect failure
ab36779bedcf ipc, msg: Account msg_msg allocations with GFP_KERNEL_ACCOUNT again
448dba9b2af3 ublk: pin module while release work is pending
0e49fbd593ed fuse: fix copy_file_range reply handling race
6bbdb8bf46ef virtio_fs: read the vring size under virtio_fs_mutex in ->get_tree
d75a44d360b6 fuse: don't launder folios of a bad inode
c51d1779ff5a cpufreq: loongson3: Replace IOCSR read/write with MMIO ones
24288c516442 cpufreq: loongson3: Use global physical CPU ID in get/target callbacks
e22aba38a54f cpufreq: loongson3: Replace per-package mutex with per-node
e4d2571effd1 cpufreq: loongson3: Adjust the width of id and val in smc_message
409efb4f12b9 cpufreq: loongson3: Make this driver depend on MACH_LOONGSON64
4980879032bb RDS/IB: validate receive fragment completions
a3203fbd9bf6 sctp: hold transport reference across connect wait
6f511bbaa33b ipv6: defrag: orphan skb before queuing
818fb17d609b net: skbuff: don't BUG() on a bad csum_start in skb_copy_and_csum_dev()
dfa1499fdca9 ublk: reset the FETCH round under ub->mutex
44322a7293f1 ublk: reset the FETCH round in release also without a disk
50e8c09605b4 dax: fix dax_range_compare_iter() to use correct size and address offset
faef48ba4286 dax: Return errors from dax_core_init()
2c5a807800b5 ring-buffer: Take cpus_read_lock() when changing the subbuf order
7fe49d46b305 erofs: use on-disk blkszbits for lz4 max pcluster bound
01c73963d83b spi: amd: validate FIFO usage before executing message
bf56e0e3cd67 spi: amd: fix len==0 underflow and FIFO overflow
95b03c926dcc PCI/PM: Restore BARs after powering up during enumeration
67221e6133a9 spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op
258d92898ea3 ASoC: qcom: q6apm: reset the hw pointer with the fragment queue
42e39e25b62e mfd: tps65217: Use devres for IRQ domain and wake teardown
081e702e1a4a mfd: tps65217: Check return value when masking interrupt sources
c4ac68d07c81 mfd: tps65217: Fix NULL pointer dereference on IRQ init failure
4a8f333446c1 spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer
a2045078fe85 KVM: arm64: Turn vcpu->arch.pause into a counter
cbf52d6ce1d9 KVM: arm64: Move IN_GUEST_MODE ahead of state being loaded
4c5b129a5449 KVM: arm64: Move OUTSIDE_GUEST_MODE publication past context being saved
d93e70dca09a efi/libstub: Don't replace an existing LINUX_EFI_MEMRESERVE table
e9c140e50661 efi/libstub: arm64: Don't use the platform register x18
9c9bbb6a8780 spi: jcore: fix divide-by-zero when speed_hz is zero
a59760cefb24 gfs2: fix the escaped block copy in gfs2_before_commit()
443730e39b1b ALSA: ump: Correct return size of fill_rpn()
ce6abad3ea47 irqchip/atmel-aic[5]: Disable interrupts in the irq_pm_shutdown() callbacks
537b8eabc1c3 irqchip/mchp-eic: Fix clock reference leak in mchp_eic_probe()
aa309d71afdf irqchip/imx-intmux: Fix runtime PM teardown on remove
d7c633ef3527 irqchip/gic-v3-its: Don't clamp nvecs to zero when id_bits is 32
335a0eaaa0d7 crypto: qat - fix use of destroyed vf2pf_lock on VF restart
741ac7c9673e crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev()
db4829040548 iommufd: Reject a zero-length dirty bitmap request
72e298e41885 kbuild: AutoFDO: Update split machine function argument for upstream rename
9e9554d3906c PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain()
c48802c7cc66 cpufreq: schedutil: Serialize sugov_start() against rate limit updates
eb8668848468 Bluetooth: L2CAP: Use default TxWindow for zero socket option
c00719deed5b Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests
ef5743bd6ede Bluetooth: L2CAP: Reject mode changes on connected channels
967b028e2d39 Bluetooth: hci_debugfs: Pin module for debugfs file operations
658da2402f4b Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file
c63c5e1d19ad Bluetooth: btusb: Add device ID for Realtek RTL8761BUE (StarTech AV53C1)
b60a589783eb Input: xpad - add GameSir Nova Lite support
8073652f5c22 PCI: Set supported_speeds in set_pcie_port_type()
9d71a347dcee ARM: 9523/1: topology: allocate the cacheinfo early on the boot CPU
9c6cd241d67f ARM: 9522/1: cacheinfo: guard the CLIDR read in populate_cache_leaves()
d75ac6be6915 ARM: 9521/1: cacheinfo: count external caches in early_cache_level()
e9eb621dc62b ARM: 9520/1: cacheinfo: avoid out-of-bounds write in populate_cache_leaves()
06d167658ab5 ARM: 9491/1: alignment: restore uaccess state on emulation fault
014e83749f5e ARM: 9488/1: smp: set current pointer in assembly before jumping into C
874ed54f09c6 spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path
1927f66f8ca6 nvme: make the DH-HMAC-CHAP secret attributes readable by root only
5819b86e0624 iommu/amd: Don't allocate kdump device table from DMA32
c043a0aa8125 iommu/amd: Program device table when kdump reuse fails
f69cfb5188bf serial: pmac_zilog: push received data to the port that received it
b0c1eed0e69d serial: amba-pl011: keep transmitter enabled when disabling RS485
57c22a5b141d serial: amba-pl011: honour delay_rts_before_send for every write
0517d5fa233b serial: 8250_omap: set priv->line before enabling the IRQ
fb0e78bacda6 serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit()
c04cd1d08182 platform/x86: hp-bioscfg: NUL-terminate the SPM auth token
b4b1bd4e0c1e platform/x86: hp-bioscfg: allow clearing current_password
3da998f09826 platform/x86: hp-bioscfg: return -E2BIG from validate_password_input()
341ec94586d0 platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer()
e7e97446125b platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer()
15e36dc9be7b ALSA: cs46xx: fix unit mismatch in DSP code area bounds check
149024365092 platform/x86/tuxedo: Fix keyboard LED map ordering
3648e9257696 ALSA: hda/tas2781: Skip invalid TAS2563 UEFI calibration data
075a08d5160c tmpfs: fix unicode_map leaks in casefold option handling
664ef4223002 lib: decompress_bunzip2: fix integer overflow in run-length decoding
0c30c5acdfd9 panic: flatten nmi_panic control flow
da262f1e8a4d lib/decompress_bunzip2: fix off-by-one in run-length bounds check
58e931c3b18e pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank()
91ff04f52138 spi: ljca: Don't require data in write replies
3c50eeaf05d5 spi: ljca: validate the response length before copying the data
5e93214d8ccb f2fs: disallow mmap write and data-modifying fallocate on atomic files
16cb21f3f992 f2fs: fix defragment writeback range truncation on 32-bit
7f0504592062 f2fs: check every cur_*_segno[] entry on readonly images
eb87db3cdf26 f2fs: read i_size once in f2fs_vm_page_mkwrite
eb9b8c03d260 f2fs: allow pinning empty compressed files
d16d2bb0141c f2fs: remove mappedtodisk flag usage in mmap write path
35acdbaaddd2 sh: intc: Sort the prio and sense lists after filling them
6a590ce873e0 PCI: rockchip: Drive at 2.5 GT/s, error other speeds
2e7f6ad5e0c2 PCI: rockchip-host: Do not attempt 5.0 GT/s retraining
611201814601 PCI: rockchip-ep: Do not attempt 5.0 GT/s retraining
1f49d6a95e95 f2fs: convert inline quota files when turning quota on
124db30f332f nvmet: zns: don't leak stale memory in zone management receive
88d7fce496e6 nvme: bound FDP config log reads to the received buffer
b0c652a11e53 nvmet: require authentication before property set
ef062530729f nvmet: free the bvec on file namespace range errors
81b9f5916706 nvme-auth: fail when the controller does not authenticate itself
7a4ee76f0e8f nvmet: fix preempt of another registrant by the reservation holder
5564d7a654a7 nvme-rdma: don't complete a request after a bogus remote invalidation
d6c4a5d2cc6a iomap: don't lose a fiemap iteration error when emitting the last extent
d8e8a00721a2 clk: qcom: ipq5332: add 24MHz rate for USB UTMI clock
deea3afb1aca clk: qcom: ipq5018: add 24MHz rate for USB UTMI clock
29d810702de0 clk: qcom: ipq-cmn-pll: Assign .num before accessing .hws
1a40cbb9d83a speakup: Fix NULL pointer dereference on VT switch + selection
4180ff588438 mei: vsc: Fix packet CRC computed over pointer size
ac188323d333 dm-bufio: fix a race leading to an unsigned integer underflow
0f39d51bd5f3 dm-bufio: fix non-working memory limit
55265c0f41eb serial: 8250_exar: store the GPIO platform device in struct exar8250
df083198ddca fbdev: kyro: Release WC setup on registration failure
8e21bbb7c2ce fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error
db62efc3ecbd fbdev: smscufx: check for fb_deferred_io_init() error
b4165e730e78 fbdev: udlfb: check for fb_deferred_io_init() error
99059dc7ee7b fbdev: xen-fbfront: check for fb_deferred_io_init() error
51d8437aff71 fbdev: ssd1307fb: check for fb_deferred_io_init() error
2e4f453c3c19 platform/x86/intel/vsec: Fix inverted walk_header() test in get_features()
74eee7cc1aea platform/x86/intel-uncore-freq: Continue restoring limits on resume
70ef07bf8427 platform/x86/amd: hfi: Fix out-of-bounds reads when parsing ranking data
4a5b0194b8d8 platform/x86: simatic-ipc: fix platform device leak on registration failure
5d82777974b1 platform/x86: oxpec: Fix Apex charge limit control
3857d41c7d4d platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop()
d904db0a4d32 platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query()
b34024fae1d6 platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token
16114eb40778 platform/x86: asus-wmi: fix screenpad power state detection
4b003a2ab677 platform/x86: asus-wmi: fix unclear usage of bd->props.power
d43e5fc381a9 platform/x86/amd: Stop counting intermediate cycles with metrics table
0beb6ba8c6b5 platform/x86/amd/pmf: Validate the APTS state index
42d4192fa904 mm/damon/core: charge only the part of a region the filter left
528d332bb864 mm/alloc_tag: account for reserved tag ids in the kernel tag check
b5b95b517604 mm/shmem: report RCU-tasks quiescent states while undoing a range
08ff60709252 mm/hugetlb_cgroup: move per-node usage on cgroup reparenting
42dd1e6f1b09 mm/hugetlb_cgroup: move per-node usage on cross node migration
a4bd35798a34 mm/page_alloc: do not boost watermarks in kdump capture kernels
45555f91acf8 mm/madvise: use folio_trylock() in the cold/pageout PMD split
06eebc180008 mm/madvise: reclaim isolated folios if PTE restart fails
ebc5521bed88 mm/damon/sysfs-schemes: read sysfs_filter->addr_range only once
a1aaab4ae87a PCI: Avoid D3 on PLX PEX 8532/8533/8548 downstream ports
85eaf4758849 xprtrdma: trim head iovec when the payload arrives via a Write chunk
aa7065b8c699 xprtrdma: prevent disconnect feedback during endpoint teardown
d05766991f87 mtd: parsers: qcom: fix offset/size overflow on large partitions
caacd77e93d9 mtd: rawnand: qcom: fix read location register usage in config_nand_cw_read()
acc0ad90eefb btrfs: return -ENOTTY for unknown ioctls on the control device
3c61ac2bec9c btrfs: zoned: fix block group reference leak in btrfs_repair_one_zone()
36e0970b8217 arm64/efi: Clear PTE_WRITE when applying EFI_MEMORY_RO
6b84be6acf4a dm-snapshot: fix crash if dm_io_client_create fails
f5a35fc0dcac USB: serial: sierra: fix urb leak on write completion
f1f969a19035 mailbox: qcom-ipcc: Guard against NULL con_priv in send_data()
35ee206bdab6 mailbox: mtk-cmdq: Fix runtime PM leak in cmdq_mbox_flush()
9db206e80d08 mailbox: bcm74110: Cap rx_svc_init_list growth to prevent PMC-induced OOM
e763f0231776 mailbox: altera: shut down RX polling timer on channel teardown
dfe2627f25b1 usb: typec: ucsi_ccg: Add retry mechanism in ccg_read
857ba63871a0 xhci: Prevent invalid vdev dereference during sideband unregister
d0d15d7a11f2 usb: xhci: Fix bounce buffer overflow
5d254d1e59da usb: typec: ucsi: ccg: Validate altmode index in GET_CURRENT_CAM response
a0234e0c052c USB: quirks: add USB_QUIRK_WINDOWS_CONFIG_REQ_SIZE for GameSir G7 SE
d585cf76296c USB: cdc-acm: add VeriFone VX820 device ID
6c3de683d73d lib/plist: fix plist_requeue() corrupting order in the last bucket
97c37dff8da7 cxl/acpi: Convert QTG _DSM latencies to picoseconds
e5ab68567bcf cxl: Account for link width in latency calculation
f4b79f221d62 cxl/port: Convert PCIe link latency to nanoseconds
93658e949bca cxl/pci: Program the Port GPF timeouts before caching the DVSEC
03c8debe8594 vfio/mlx5: Fix boundary check in set_report_output()
bb8ff1e7c85a RISC-V: KVM: Fix IPI delivery for out-of-order vcpu_id
24f7f97d3051 xen-blkfront: Fix IO race during unplug
f307ab1738e7 slimbus: messaging: fix leaked PM vote on tid allocation failure
778aa24d400e USB: serial: usb_wwan: fix urb leak on disconnect
1a95eef28e3a USB: serial: option: add support for ASR 1286:4e3c modem
f8b51537bad3 USB: serial: option: add Rolling Wireless RN947R
6a206ea1cfce USB: cdc-acm: fix urb leak on disconnect
ada2a9bcb9c4 wifi: ath12k: validate MAC/PHY capability count before saving
c2cbf1f5c535 ALSA: usb-audio: Add mic resolution quirk for Logitech Webcam C200
428eeed252ba drm/ttm: return an error when kmapping a BO without pages
0ec1d83baa7b iommu/dma: Catch scatterlist length overflows
8ddf9f17929d xen-pciback: Fix pcistub_device ref leak in pcistub_get_gsi_from_sbdf()
01ed474a5287 xen/pcifront: check that an AER callback exists before calling it
b766cd114640 xen/privcmd: Only claim ioreqs matching an ioeventfd
c3575058ef57 soc: fsl: dpio: Free the IRQ before releasing the I/O object
e3b893069672 soc: fsl: dpio: Fix cleanup on IRQ registration failure
7bc4323b464d soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms()
a0e83ac1d99e xen/gntdev: prevent private mappings from becoming writable
2b637d3f1d22 clk: imx: Fix clock reference leak in imx_obtain_fixed_clock_hw()
e5a02a186b46 clk: imx: Fix clock reference leak in imx_get_clk_hw_by_name()
fac98d283c77 mm/zswap: enable zswap_ever_enabled in zswap_pool_create()
18223e4783fe mm/zswap: publish the initial pool with list_add_rcu()
4b10d04a68b8 mm/hugetlb: fix subpool minimum reservation rollback
67c5a7bef45e mm/nommu: reject wrapping ranges in access_remote_vm()
e4dcde9709a2 mm/execmem: free ROX cache chunks only when they span an entire vm area
61b405ef3e35 mm/memory: constrain generic_access_phys() to page boundary
49f6bd347a7b md: don't hand out the array before md_alloc() has added mddev->kobj
7bcffd24502d nilfs2: validate directory position after llseek in readdir
02eea74948bd ext4: fix out-of-bounds read in ext4_get_group_info()
eb69dba4610f ext4: fix ABBA deadlock in ext4_rmdir()
16c511466a87 ext4: don't report delalloc data as a hole on indirect-mapped inodes
2de6fe298096 ext4: skip extra isize expansion while unmounting
ab41325c105d jbd2: don't advance j_fc_off before the buffer is recorded
d8c47fba16b9 ext4: reject delalloc to nodelalloc before applying remount options
9e7b9a6cb744 ext4: fix fast commit replay failing on a read-only mount
c8835d955dc6 ext4: only update tune mount options when requested
82c9bc868b49 fanotify: report names longer than NAME_MAX
4bc8cef2303f ALSA: hda/hdmi: clamp sad_count in ELD proc write handler
d37861288c5d ALSA: hda/hdmi: clamp num_cvts against cvt_nids[] in hdmi_read_pin_conn
ca4d514d32a9 crypto: algif_skcipher - rewind rounded output bytes
92eb10d78d07 wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM
3d1e0085b5d2 PCI/sysfs: Pass the device name length in UTF-16 code units
deea0b755ccb aoe: pull in the headers each received packet type reads
66cb7a60e0aa spi: stm32: fix double free of SRAM buffer on MDMA fallback
5dc170af5367 clocksource/drivers/digicolor: Fix clk reference leak on request_irq failure
61cde0b5c127 clocksource/drivers/fttmr010: Fix clk reference leak in error paths
b63fac9e76ca wifi: mt76: mt7996: fix PCI device reference leak in mt7996_pci_init_hif2()
79bebd5637d4 wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits()
de7a5fdb2586 wifi: mt76: mt7615: cancel reset work during unregister
ff57cd58c75d wifi: mt76: mt7925: cancel mlo_pm_work on the USB stop path
09c14715c6c2 wifi: mt76: mt7615: restore DBDC state after ext PHY failure
001c88ed4a17 wifi: mt76: fix memory leak in USB TX path
2fff1ca283f1 wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory
9d67b9bf659f wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs
ffbb00ff33fe wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff
8463ea8d471e ocfs2: skip uninitialized lockres in ocfs2_mark_lockres_freeing()
de648cd4c54e ocfs2: restrict OCFS2_INVALID_SLOT suballoc slot to system inodes
68bcb60fcbba fork: honor task_struct's declared alignment
70ba414a149b selftests/core: fix unshare_test with large fs.nr_open
407e148354ac ocfs2: free replay slots in ocfs2_recovery_exit()
4db843206154 ocfs2: exit recovery thread on mount error path
46e0c9c62927 init: fix early boot crash with bare hostname parameter
afc4b6380525 USB: gadgetfs: do not WARN about excessively large memory allocations
de69081c154e fault-inject: fix dentry leak
50f237e8fcf9 fat: fix fat_ent_write() for reverting the value
a1b937d0e196 resource: fix lost wakeup when waiting for a muxed region
4a73bd9f0b78 mm/damon/sysfs: set next refresh jiffies per sysfs context
34902f2cbcc8 mm/damon/core: handle extreme memory state in damon_get_node_mem_bp()
eea4e41924e8 mm/damon/vaddr: respect folio end for DAMOS_STAT
9511b63a1f0d mm/damon/paddr: respect folio end for DAMOS actions except STAT
3f70cd14b0aa mm/damon/paddr: respect folio end for DAMOS_STAT
5025b3035b74 mm/page_table_check: skip zero pages
da32aae50922 mm: memcontrol: raise MEMCG_MAX for charges that fail without reclaiming
1140b3a60d9d mm/mempolicy: take a cpuset cookie for the interleave node count
21550a58fa02 mm/page_isolation: guard compound_order() against racing
a793ea58f4a0 mm/page_isolation: fix UBSAN shift-out-of-bounds warning
ad72cc6babdd mm/ksm: mark migration stores with WRITE_ONCE()
9c925a7c4dcd wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz
bbcd20a34215 PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow
5ed7a6aed407 PCI/DOE: Fix double free of a duplicate feature's sysfs name
dabc4681985f dlm: fix send buffer backpressure handling
6bf6bf2db6e2 floppy: return the drive state flags from the 32-bit FDGETDRVSTAT
79c9a5bb4b3c floppy: don't store a stack buffer in timeout_message
097a336a2dcd ASoC: codecs: rt5682s: disable jack detection work on shutdown
8e7e5b7b10da svcrdma: Grant credits from the clamped sc_max_requests
59ab22bedd52 perf: xgene: initialize lock before requesting IRQ
3eeae9c6d55e power: supply: ab8500_fg: Report sub-percent charge changes
8bc833472436 power: supply: ab8500_fg: Accept status from supplied power
c1c3af460337 ALSA: aloop: Don't constrain playback params in notify mode
35af27e6cdef fsverity: hoist statx reporting of fs-verity flag
a99338df4ab9 power: supply: core: Honor supplied-from with CONFIG_OF=y
6c01b58b23f9 media: hantro: disable runtime PM before hardware teardown
48969667d004 media: amphion: fix runtime PM imbalance on probe failure
b7dcd99be024 media: hantro: Harden MPEG-2 control access against NULL
855012e5e1bb media: vicodec: fix NULL deref on oversized frame
b747b30491bf media: mediatek: jpeg: retry HW selection after successful wait
1c1507214f15 media: verisilicon: rockchip: Fix leaks in init
7251a4a129f3 media: mediatek: vpu: release reserved memory on remove
2ebeb7f74276 media: mediatek: vcodec: destroy core workqueue on remove
f3cef7132743 media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker()
a210840ed709 media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker()
5a603c6e1a87 media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init()
bf8913279f3e media: mediatek: vpu: free IRQ before destroying watchdog workqueue
eb0a592ae662 media: amphion: prevent unbind while video instances are open
4fc56ebae1e1 media: amphion: drain message work before releasing core state
b186accb1d7d media: meson: vdec: size capture planes from the aligned canvas
bdc3f5859be5 media: chips-media: wave5: Check decoder qbuf runtime resume
df569382cf48 media: chips-media: wave5: Balance runtime PM on encoder close errors
b683d0501f8b media: chips-media: wave5: Handle polling IRQ thread failure
11b788b55f92 media: sti: delta: use unaligned accessors for MJPEG SOF fields
aaa44163b04f media: v4l2-common: Fix P010 format info
22f5872567c5 media: imagination: Fix value clamping in calculate_qp_tables
6d8da67c1c0e KVM: arm64: vgic-v3: Roll back assignments from the new region
513f62c10418 soc: samsung: exynos-pmu: fix error paths in cpuhotplug/idle states setup
94829b123513 KVM: arm64: vgic-v3: Undo assignment on iodev registration failure
8f8319e45493 x86/bugs: Fix CONFIG_MITIGATION_RETPOLINE=n mitigation reporting
21b1af61dafd KVM: arm64: Validate the host vCPU's VM before reading it under pKVM
8e9628f42c7c crypto: ecc - Handle exceptional points in Shamir multiplication
5ecd94581c32 crypto: nx - validate 'ignore' before subtracting in decompress
5393887ab975 hwrng: core - reject unknown RNG names
99cfdc371584 hwrng: ba431 - fix reported byte count
987b7053bde1 hwrng: amd - report partial reads in non-blocking mode
f3e503a31d3c crypto: caam - fix double-free in caam_rsa_set_priv_key_form()
72af96b39afd media: uvcvideo: Fix NULL deref on events for uninitialized controls
3c379310c8b8 PCI: Disable MSI for ULi M1575 EHCI controller
59e69a73f9b2 block: amiflop: synchronize flush timer before track flush
9a3288b2380d block: drop the cached plug time when blk_add_rq_to_plug() flushes
aaed8f7c2a65 pps: generators: stop the generator on unregister
2ea73c70014f KVM: arm64: Fix MMFR0 TGRAN advertisement for pVMs
bfef7c3b8be1 dm-writecache: fix REQ_FUA processing
33fedef97da9 dm-writecache: fix uncommitted_blocks underflow
6f3e29d421de dm-writecache: fix a crash if we attempt to use non-dax device
8b8734f39f52 dm-writecache: fix a quirk in statistics
a05de3e14079 dm-writecache: report I/O error if flush failed
affc1ebd65f5 dm: fix a bug in dm_accept_partial_bio
ecf511b8157e media: em28xx: fix double free in em28xx_alloc_urbs
84ec20151163 media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler
e4686b15bb97 media: rtl28xxu: fix SDR platform device leak
f8f37e179859 media: pvrusb2: Fix USB parent device leak in class_dev_create()
c1b1e81ed8b2 media: tw686x: fix V4L2 device lifetime on probe failure
07a1b080c5a5 staging: rtl8723bs: fix RX buffer OOB write from device-reported length
d28f100d9975 staging: greybus: uart: fix racy TIOCMIWAIT implementation
c4a692585615 drm/msm/dsi: Fix VM leak in dsi_tx_buf_alloc_6g()
fd021c57e2c6 drm/msm/hdmi_bridge: Correct poweroff/audio cleanup order in post_disable
96c66a1ef823 drm/msm/hdmi: Handle msm_hdmi_power_on() errors during .atomic_pre_enable()
41f7b9cd503e drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure
d4e9b82ddc6f i3c: master: adi: free the IRQ before unregistering the master
6266517f52b6 IB/hfi1: Shutdown self-rearming timers before freeing
9313727ad7f0 pwm: tiehrpwm: Clear period on disable to allow reconfiguration
5906e880cdf5 nilfs2: ignore non-fatal signals during synchronous log write wait
1a84e432d442 nilfs2: clear dirty flag on bdev buffers on log write failure
be094322526a ASoC: pcm6240: do not free an unrequested IRQ
19f0f175168e pseries/plpks: clear SED key data after use
7e149d710569 pseries/plpks: clear signed update authentication buffer
7a7140990a00 pseries/plpks: clear sensitive PLPKS buffers
3cc77e135802 pseries/plpks: validate input to plpks_signed_update_var()
4e535f895275 pseries/plpks: fix error handling in plpks_read_var()
77f1aeef96b9 clk: starfive: jh7110-isp: fix refcount leak in jh7110_ispcrg_probe()
35530d26230b ALSA: core: Check shutdown flag at D0 power-state, too
a14c5fffca88 m68k: dmasound: Keep the Q40 IRQ handler registered
e6bceb2fb629 ALSA: sgio2audio: Only free successfully requested IRQs
6aa325b8aea6 media: iris: Fix frame interval enumeration for non-divisor framerates
4b1e1db849f7 media: iris: Fix bus_info prefix in VIDIOC_QUERYCAP
5880a91e8119 media: venus: Fix iova allocation from restrict region
8e1efcccc828 media: qcom: camss: Add "gcc_axi_hf" to 8775p VFE lite clock lists
f73b13bd811b media: qcom: camss: vfe: Fix VFE reset while another line is streaming
eef4734a50d6 media: qcom: camss: vfe-17x: Fix write master selection for RDI lines
01cc89543a13 media: qcom: camss: vfe-17x: Fix write master buffer done being dropped
b0f54c804cc0 cxl/acpi: Check ACPI companion before use
5352e7447219 fs/ntfs3: fix integer overflow in find_log_rec() causing OOB read
6cea6cc1731b spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup()
621cb2fe38d5 iio: adc: stm32: fix minimum sampling time values
f5977b135962 iio: accel: adxl380: reject devices without match data
5381f1c9be61 iio: accel: adxl313: reject devices without match data
8953416b6218 iio: adc: ti-adc128s052: validate SPI match data
e5290017ad1c iio: adc: mcp3911: reject devices without match data
3c35aa8d9ead iio: adc: max11205: reject devices without match data
f4ca846273cf iio: adc: ad7606: reject devices without match data
2d3d960463e0 iio: pressure: bmp280: validate SPI match data
b46ccd625f99 iio: potentiometer: x9250: reject devices without match data
aafccd547ea2 iio: imu: adis16400: validate SPI match data
a39788189566 iio: frequency: adf4377: reject devices without match data
1b8bf0871205 iio: dac: ad5755: validate SPI match data
757e0634790e ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status()
ef6d993762b2 ALSA: mpu401: shut down timer before freeing MPU
e8168221d3c7 iommu/vt-d: Avoid out-of-range shift in qi_desc_dev_iotlb_pasid()
ae75a827b6fd arm64: dts: qcom: ipq9574: Wire up USB3 PHY PIPE clock to GCC
2597827c1f9b arm64: dts: qcom: sdm845-xiaomi-polaris: Extend the xbl_mem region
36c552012451 arm64: dts: qcom: sdm845-xiaomi-beryllium: Extend the xbl_mem region
f373581d5422 netfilter: ctnetlink: fix inverted IPv6 address match in dump filter
6407390b5aa1 MIPS: mm: do not write a huge TLB entry when the probe misses
b37f9d7dbb25 MIPS: mm: align hugetlb mappings in arch_get_unmapped_area()
22ab75285466 peci: npcm: Initialize state before requesting IRQ
730424642a17 peci: aspeed: Initialize state before requesting IRQ
10867cbc902e ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status()
e2f717de9bf3 ASoC: sdw_utils: clear stale RT711 device reference on exit
07d54cfeba41 dcache: report a Tasks-RCU quiescent state in dentry_kill()
08e9f9476a80 hwmon: (coretemp) Refresh the temperature on the first read
2b8b388320fa mtd: Call get_wunit() on the master partition
23852ad0f72a mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb()
9544576610d5 mtd: maps: l440gx: Fix double put of the PM device in init_l440gx()
433fe9882bef mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx()
9975c8d2d03e mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one()
b0d4ff46a219 mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device
d977046bcfbf mtd: maps: pci: balance PCI enable on cleanup
42e84c6ec7a1 mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init()
b93e351abe15 mtd: rawnand: nuvoton: fix clock cleanup on probe failure
1cf4c1c5ab6e platform/x86/intel/pmt: Block mmap when callback is present
81f311ccfd77 fuse: don't drop destination page cache on a zero byte copy reply
7350d86fe198 hwmon: (lm95245) Fix negative temperature conversion
07909b53a81e regulator: core: Fix coupled regulators reference leak on removal
aba82b403719 clk: mvebu: ap-cpu-clk: Assign .num before accessing .hws
e043acd7535f ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls
9ce18befc894 ASoC: Intel: atom: Fix platform device leak on probe failure
f622c427fab0 kobject: fix out-of-bounds access in kobject_action_type()
582a0631a00d nilfs2: fix deadlock between nilfs_evict_inode() and find_inode()
239d333dedc2 perf loongarch: Fix discarded const qualifier in _get_field()
f2a360ec9f6c mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral
845d3107c2fa mfd: wcd934x: set DMA mask on parent to silence "DMA mask not set"
95e47d590f04 mfd: Fix MAX77705 dependency on regmap
7990fad78c39 mfd: da903x: Cancel IRQ work during teardown
eea47a6e5b84 drm/panel: ebbg-ft8719: Set prepare_prev_first
23091956b969 clk: qcom: gcc-ipq5018: mark 'gpll0_main' clock as critical
bdd8930eb741 arm64: dts: freescale: imx8mp-verdin-yavia: fix external GPIOs
0d1d31a3e35c arm64: dts: freescale: imx8mp-toradex-smarc: fix SMARC_SLEEP# gpio-line-names typo
f2c6b74e201d arm64: dts: freescale: imx8mp-verdin-ivy: fix DIGI_1/DIGI_2 gpio-line-names
f9077408c765 arm64: dts: freescale: imx8mm-verdin-ivy: fix DIGI_1/DIGI_2 gpio-line-names
423c58547179 memory: stm32_omm: fix child clock leak on set_amcr() error path
d0e442548113 ASoC: fsl_xcvr: free IRQ before canceling reset work
4f5219843098 media: atmel-isi: release unregistered video device on remove
76e42a29a8b5 media: synopsys: hdmirx: fetch colordepth before calculating pixelclock
38a49d04e16f media: vpif_display: Fix i2c adapter reference leak in vpif_probe()
163306dbd27e media: vpif_capture: Fix i2c adapter reference leak in vpif_probe()
638d1d3b9d61 media: au0828: Fix media device leak in au0828_usb_probe()
fe100b9f57a6 media: adv7180: Initialize mutex before ancillary clients
dafdecfc883d media: tw68: balance PCI enable on cleanup
3f87db958c38 media: cx18: Disable PCI device on probe failure
50983f142403 media: go7007: unregister the I2C adapter on USB probe failure
d7a14af8ba0f media: marvell: manage the MMP camera clock provider
90379d750ee6 media: v4l2-ctrls: do nothing if controls[0] == NULL in cluster functions
5c474f8dea04 media: cec: extron: clear response tail before dispatch
dd443f07c3fd crypto: qat - zero the VF migration state buffer on save
97be63f3e99e crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent
ccfb1d79e90d crypto: hisilicon/hpre - fix ECDH destination DMA mapping
d6612d2b94c4 crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer
2ea0ae7e5122 crypto: hisilicon/hpre - fix pointer dereference before length check
4b13c56f7896 crypto: amlogic - Fix IRQ handler return value and fallthrough logic
15357a5ca072 crypto: qat - fix error source for QAT GEN6 transmit interface faults
750960f85f54 md: validate bblog_size when loading v1.x badblocks metadata
91559a37ab89 EDAC/i10nm: Fix mdev reference leak in i10nm_get_ddr_munits()
435a2d476c0f nilfs2: fix checkpoint root lifetime on sysfs errors
e35f9b354d97 cpufreq/amd-pstate: Skip auto_sel write when it already matches the mode
f49376986b09 drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable()
2014f2ee032b arm64: dts: ti: k3-am62x-phyboard-lyra: Set SD clock pin as OUTPUT
2b7e78230f32 arm64: dts: ti: k3-am62-phycore-som: Set eMMC clock pin as OUTPUT
87b48de7876b arm64: dts: ti: k3-am625-sk-common: Set eMMC clock pin as OUTPUT
7a78d631d33a arm64: dts: ti: k3-am62x-sk-common: Set SD clock pin as OUTPUT
8f4c66278277 arm64: dts: ti: k3-am625-beagleplay: Set MMC clock pins as OUTPUT
a4506f5cdcaf arm64: dts: ti: k3-am62-pocketbeagle2: Set SD clock pin as OUTPUT
76d64e229e8d arm64: dts: ti: k3-am62-lp-sk: Set eMMC clock pins as OUTPUT
a1af1d48b4e8 arm64: dts: ti: k3-am62a-phycore-som: Set eMMC clock pin as OUTPUT
91b895087d4f arm64: dts: ti: k3-am62a7-sk: Set SD clock pin as OUTPUT
9fec0d09d72c arm64: dts: ti: k3-am62a7-sk: Set eMMC clock pin as OUTPUT
2cd49b55c4a5 arm64: dts: ti: k3-am62a: Fix MMC0_CLK register address
a8c3c92d4ad4 ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv()
979378aa6272 media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse()
ea6f38bc01df media: ir_toy: Validate the maximum tx carrier
2c10ecb1205c media: serial_ir: Fix race condition where timer can be re-armed
dee516099187 media: ene_ir: Ensure teardown is done in the correct order
63e6c760dab0 leds: ktd2692: Pass context to regulator cleanup
cf46d521bcb9 staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error
872bd917485f seccomp: restore knotif->state when SECCOMP_ADDFD_FLAG_SEND is interrupted
c94b8c634a50 signalfd: don't dequeue the forced fatal signals
8c5f9461559f i3c: mipi-i3c-hci: Bounce short reads irrespective of the IOMMU
2f6a32c7a313 i3c: master: Fix out-of-bounds read in DMA bounce buffer setup
97bc751cfc38 PCI: pciehp: Make 'pciehp_poll_mode' parameter read-only
2c4be2b6248f ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0
7cec392ed369 iio: light: apds9306: fix default sampling frequency definition
dbdd30ac4a41 iio: imu: inv_icm42600: force accel odr change when switching power mode
00080c627a74 iio: accel: adis16201: fix channel order for buffer mode
5f3092b2fa08 regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable()
af9a4f6f5791 fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs
a8d2a980f12a ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect()
dc6d28fd849c crypto: omap-des - fix crypto engine cleanup
27c110a6bed2 crypto: zynqmp-sha - fix NULL pointer dereference in init_tfm
a3048a0145db PCI: Skip Target Speed quirk on clamped ports with no link
973f2d4bc9be regulator: core: Fix rdev reference leak in regulator_resolve_supply()
48381e8b82b7 regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling()
4811e90d8e25 nilfs2: force clear dirty state when restoring from the shadow map
2c2b173c873b cpufreq: conservative: Restrict deferred downscaling to low load
fc00ea2413ee spi: spi-qpic-snand: publish the ECC context to snandc->qspi
c7683b4db5a2 drm/panic: Test address from kmap op for NULL
1bf651ae05d0 drm/panic: Do not use un-escaped URL as format string
9e2913245294 md/raid5: validate payload size before calculating payload_len
45ceac48961d md/raid5: fix NULL pointer dereference in raid5_free_percpu
e4e9104f9ce4 md/raid5: track disks array size to fix extra_page leak on error paths
ca766a199f45 iio: adc: at91-sama5d2: disable autosuspend on remove
de73e70146b1 iio: accel: mma9553: disable autosuspend on remove
615dfc9c1094 iio: accel: mma9551: disable autosuspend on remove
da2591872e9a iio: accel: kxcjk-1013: Disable autosuspend on remove
4b67a0a7615b ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id()
9e1878d7f4c6 ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe()
0d9e9643b93d usb: fotg210: validate endpoint index in ep0 handlers
800e6b3394f5 crypto: atmel-tdes - sync output bounce buffer before DMA
c51c7e46b98c ntfs3: bound index head insertions by buffer capacity
a7e2d7c8aef3 platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str()
daa8a3cde7c8 media: i2c: ov2735: fix power cleanup on remove
1f5409c10ffa media: i2c: alvium-csi2: balance runtime PM usage count on remove
1b2d819c09f0 ata: libata: Do not leave ata_host_stop() registered when activation fails
6fe2e3756522 ata: libahci: Free the IRQs when activating a multi-IRQ host fails
9135a4ba98db ata: ahci_st: Assert the power down reset in the probe() error path
225230b90698 ata: ahci_st: Do not ignore errors when getting the reset controls
c0d77acef537 f2fs: compress: fix to handle race between truncate and writeback
241fcc1d7f98 f2fs: force out-place update for all writes on compressed file
9e6fc70c7ad4 dm vdo indexer: validate record page numbers better
1af45c0daaff dm vdo indexer: prevent delta list overflow on load
dc4724be77c9 affs: validate blocks before freeing them
58492634b043 PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier()
a1bcadec1deb crypto: ccp - Initialize DBC ioctl mutex before registering device
ec3bb0b9bb79 lib/842: require a complete history block for repeat templates
a7c9d73df048 lib/842: reject output overflows from index and short data
05c0ae1f3d3c crypto: atmel-aes - fix AADLENR for standalone GHASH
f3e35f116d69 crypto: atmel-tdes - zero-initialize device state
f82d80f7b6f7 media: vicodec: zero-initialize stateful decoder heap buffers
f16b697c9475 media: vivid: cancel svid ctrl work on release
876ba0c13671 media: cx231xx: preserve I2C transfer length
00dd4a5c2b8c media: vivid: round the height down to the vertical subsampling factor
946aa222b49d sched/fair: Reset NUMA fault locality after scan period update
90093af6a0b4 iio: imu: inv_icm42600: fix odr change not caught in certain cases
63181ae0a49b power: supply: bq27xxx: Ensure poll work is cancelled on remove
4f2e159190dd power: supply: bq27xxx: synchronize work cancellation on suspend
29601cf266ca power: supply: qcom_smbx: notify battery overvoltage recovery
3a476ea9a2f4 power: supply: qcom_smbx: validate battery float voltage
29aeb5ac7990 power: supply: qcom_smbx: fix float voltage selector
287619a6cd07 power: supply: qcom_smbx: test battery health status bits
8e91b6b73f18 power: supply: qcom_smbx: include base when petting watchdog
9b26d77f89ca hte: tegra194-test: shut down timer before GPIO release
2cb1b55431ae ACPI: pfr_update: zero-initialize capability query result
d56c604bae3a dmaengine: altera-msgdma: initialize state before requesting IRQ
0b39ce62d922 drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties
79800ff17a5f media: nuvoton: npcm-video: quiesce VCD IRQ before teardown
8b25a49e4bd7 media: synopsys: hdmirx: use request_any_context_irq() for 5V detection IRQ
8018d370be35 media: stv0900: bound DiSEqC reply length to msg[] size
de92aa70a36a media: stv090x: bound DiSEqC reply length to msg[] size
486eccf2f4be media: adv7604: avoid negative array index in log_status when cp_read fails
d2606c2c6d49 mtd: rawnand: sunxi: reject ECC maximization on small pages
ea3a418d73b0 media: stm32: csi: unregister async notifier on cleanup
de26b77e6e3a media: stm32: csi: correct remote pad retrieval
79058f692941 media: microchip-isc: don't sleep in the clk .is_enabled callback
da7a07ad6fe0 media: microchip-isc: fix PM runtime leak in AWB work handler
a517178cce67 media: microchip-isc: do not touch WB registers when not streaming
6dc8e17c26a9 media: microchip-isc: disable histogram and flush AWB work on teardown
d1d04f10ad77 media: microchip-isc: synchronize the IRQ before disabling clocks on stop
bd676daa6371 media: microchip-isc: fix awb_mutex and lock lifecycle
d1dbcb434687 perf powerpc-vpadtl: Fix off-by-one in auxtrace_info minimum size check
82cbf1a3e91a ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+
02b1ca9a3793 media: m2m-deinterlace: fix default capture field
17de34822aeb staging: media: av7110: fix sp8870 initialization failure state
228b1b7be79d staging: media: av7110: fix corrupted BER reporting in sp8870
f01bdf7f3fc2 media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA
b60a01c63970 media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail
b0f8a0f8058e media: vidtv: fix frontend reference leak on unbind
72b9c63beb01 media: vicodec: make encoder CAPTURE dimensions read-only
1b317507238b media: vicodec: fix out-of-bounds write on under-rounded coded dimensions
b64ea8c8e008 media: vim2m: keep transaction buffer count stable while streaming
0b0fbacea9a0 media: saa7146: Initialize interrupt lock before requesting IRQ
d208c267148f media: go7007: bound EZ-USB I2C transfers to the usb_buf size
2cdba0da8c13 media: i2c: tc358743: add missing color-space strings
5bb8c5b1727c media: au0828: Free URBs when starting DVB streaming fails
3fcfab4339c8 firewire: core: fix source bus ID detection for AT context in big-endian systems
c7091528ab21 media: cx231xx: Fix cleanup path on failure
5c8ecd9ebc95 media: cx231xx-audio: drain wq_trigger before audio fini
ced0704d1e0c arm64: dts: mediatek: mt7986: correct timer frequency
ec0ec2801281 isofs: fix Rock Ridge CE extent validation on multisession media
0a0fef460f20 thermal: intel: int340x: Fix temperature selection around 0 C
cb93d82e206c thermal: intel: powerclamp: Reject invalid window_size values
781364a1fb9d arm64: dts: ti: k3-am62-verdin: Set MMC clock pins as OUTPUT
ced6f89824f8 fs: make sure to call fsnotify_inoderemove() only once when inode is dead
3c21a1feaf89 fs_pin: publish pins with RCU list helpers
1545217ceadc mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption
7317c31a54bb mtd: spi-nor: sfdp: check the length of the SCCR map
8cbeaea4d325 mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table
06b4dabdc67a media: i2c: ov8856: fix debug message to report actual CSI-2 lane count
c42a610d5742 media: i2c: ov8856 : remove ACPI node bypass mechanism
c99e574764c3 wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup()
bef63213e208 hte: tegra194: Initialize slice locks before registering chip
f1f18007989b bpf: Fix queue/stack map u32 index overflow
6922b35cb2bb ARM: imx: Fix suspend/resume crash with Clang CFI
cfe382cbabf6 clk: mstar: msc313-mpll: fix off-by-one in clock array allocation
2c1fdcbb95bd platform/x86: int3472: Fix uninitialised variable warning
2bab8fa4826b wifi: rtw89: cap firmware section_num before parsing
a83e3e33b781 wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields
aa26d4a75f2c wifi: rtw88: fix out-of-bounds CAM write when key table is full
c408ff204a86 memory: renesas-rpc-if: Mark XSPI_CDD1BUF0 as volatile
77b641503ddd memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT
5aca21d18857 memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset
1f8722a7053f microblaze: preserve the MSR carry flags across signals
8237cd3e2fc2 microblaze: restore the ABI argument home area below pt_regs (PTO)
87f78edf4b3d microblaze: don't clobber r3/r4 restored by rt_sigreturn
ba4121a804ad microblaze: reserve the ABI argument-home area in the signal frame
ed48f8b0ec58 soc: qcom: geni-se: Fix write to read-only firmware buffer
bb6277d4f59e soc: qcom: geni-se: Fix fw_end computed before round-up; propagate size to caller
73c7e00cea7b soc: qcom: geni-se: Widen fw_size to u32 to prevent wrap-around
211532d38f7b soc: qcom: geni-se: Fix endian conversion for serial_protocol comparison
078cbede4db3 remoteproc: elf_loader: Bound the section header table
58291947b70a ipc/mqueue: release notification resources during inode eviction
96540793dd7e aio: prevent eventfd/epoll recursion on poll
7b6d1a6763e6 udf: Make sure there's enough space for LVID implementation use field
ae3bdd1941d7 microblaze: Fix MB_MANAGER build with older binutils
52f216b8784f media: imx-jpeg: finish the job on device_run() error paths
eae391f38210 media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled
7f8cd3cfcba7 media: meson-ir-tx: Ensure probe error is propagated
36c95ef77d43 media: meson-ir-tx: Ensure rc_free_device() is called on unbind
a842af958b4e media: meson-ir-tx: Ensure clock is disabled on unbind
ddaf428a0f8a media: sunxi-cir: Ensure no more interrupts can occur before free
7d7521a954ad media: redrat3: Ensure all urbs are suspended
4c443c088a37 media: redrat3: Ensure we don't read beyond the end of the packet
5f475e1c007b media: streamzap: Add missing rc_unregister_device()
fc075bead270 cpufreq: airoha: fix probe failure with correct error check
b59e31d1145d iio: adc: ti-ads1100: Fix incorrect reading when datarate changed in single mode
57a52158ca8c drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG
dc715d660d92 drm/amdgpu: recompute the dw estimate after allocating a new VM update job
ddae760f3997 drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq
3ea6031d2625 drm/nouveau: cancel the DP IRQ work before freeing the connector
f688ffe4a23a drm/nouveau: disable the fence uevent work instead of just cancelling it
e8c6be50fcae drm/nouveau/pci: use config-space MSI rearm on MCP79/MCP7A (NVAC)
812500ab5bb8 drm/nouveau/svm: drain fault handler before freeing svmm
c518337e597d drm/nouveau: reject zero-size notifier object allocation
c04b888b3955 rust: bitmap: fix intra-doc link
c4252273ead9 mm: khugepaged: fix swap entry value to folio_pfn()
a3dc612f05f4 rust: dma: declare cfi_encoding for dma_data_direction
5a13e8528e0b rust: hrtimer: declare cfi_encoding for hrtimer_restart
3809bde861d7 rust: irq: declare cfi_encoding for irqreturn
edb4f7bcffdb nvmet-auth: serialize access to DH-HMAC-CHAP state to fix UAF
10dc8299d1ff nvmet: replace use of system_wq with system_percpu_wq
a7ba1a5a0c16 pps: generators: don't use the driver's info after unregister
c05c367e7a99 virtio_net: atomically disable rx mode work
c290f8641e41 mptcp: hold MP_JOIN msk ref when cloning reqsk
fb3f7101fec5 tcp: accecn: unset ECT if receive or send ACE=0 in AccECN negotiaion
6cc288d84ef2 tcp: Remove timeout arg from reqsk_timeout().
33e8f5740319 staging: rtl8723bs: fix protected RX frame validation in decrypt path
aaaf89f4bca9 staging: rtl8723bs: fix spacing around operators in rtw_recv.c
0fab93d241cf mm/truncate: look up the end-edge straddler by index
1706461eb1af KVM: guest_memfd: Gracefully handle xarray errors when binding a memslot
e8660dc5713f drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
8e5172cbd227 inet: reject unhashed sockets during established lookups
a37727a99d00 x86/mm/pat: Use pr_warn() for early W^X warnings
f960356fa9ee KVM: VMX: Formally define KVM's "0xdead" exit reason used for failed VM-Enter
de5b233cfc33 x86/bugs: Mitigate TSA on AMD Zen5