ef8a086f4efd Linux 6.19.10-xanmod1
11666d00b28a Merge tag 'v6.19.10' into 6.19
271f8eab9590 Linux 6.19.10
916c52aed0cb xen/privcmd: add boot control for restricted usage in domU
cbede2e833da xen/privcmd: restrict usage in unprivileged domU
6f11461f882c hwmon: (max6639) Fix pulses-per-revolution implementation
50802d40964f drm/xe/guc: Fail immediately on GuC load error
c92738fdbe74 arm64: realm: Fix PTE_NS_SHARED for 52bit PA support
16515a053b72 tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure
68c0ae8399bf lib/bootconfig: check xbc_init_node() return in override path
bbf791cffb63 fs/tests: exec: Remove bad test vector
1a16150729db drm/i915/gt: Check set_default_submission() before deferencing
9b0792c3eacf ksmbd: fix use-after-free in durable v2 replay of active file handles
a5929c2020ce ksmbd: fix use-after-free of share_conf in compound request
240dfd2dd6d8 drm/bridge: dw-hdmi-qp: fix multi-channel audio output
301f2e65e4ad drm/amd: fix dcn 2.01 check
f8c54602b3fb drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr()
3fd27dfd8a6f iommu/amd: Block identity domain when SNP enabled
f5daaa2c959d iommu/sva: Fix crash in iommu_sva_unbind_device()
6fd867fabd65 iommu: Fix mapping check for 0x0 to avoid re-mapping it
354c8bbf8d1e drm/vmwgfx: Don't overwrite KMS surface dirty tracker
8e28a01b69f7 spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()
8c809b6199f9 spi: amlogic: spifc-a4: Remove redundant clock cleanup
34861bdc0c01 mshv: Fix use-after-free in mshv_map_user_memory error path
ac3e12bc1957 arm_mpam: Fix null pointer dereference when restoring bandwidth counters
a29e002edc5a x86/hyperv: Use __naked attribute to fix stackless C function
2a49ed6d14c8 mtd: rawnand: brcmnand: skip DMA during panic write
f25446e2c289 mtd: rawnand: serialize lock/unlock against other NAND operations
b0c5e4f699f2 binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3 and ELF_HWCAP4
c1cf2218d2fa x86/platform/uv: Handle deconfigured sockets
fd8e016e631b x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs
cc267e4b4302 tracing: Fix trace_marker copy link list updates
cf74d1973c79 tracing: Fix failure to read user space from system call trace events
30adc50c3e95 ring-buffer: Fix to update per-subbuf entries of persistent ring buffer
c1dd1e2b722d perf/x86: Move event pointer setup earlier in x86_pmu_enable()
6aa65279b70a perf/x86/intel: Add missing branch counters constraint apply
bdfc09748d67 irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in rpmi_sysmsi_probe()
36c73339ac68 i2c: pxa: defer reset on Armada 3700 when recovery is used
8578bc4bdc02 i2c: fsi: Fix a potential leak in fsi_i2c_probe()
efe996bcfe50 i2c: cp2615: fix serial string NULL-deref at probe
a6b518e58b76 hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()
e71309e62c94 hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before using its return value
fb35ea5b50b0 hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value
df4b00b0b150 hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data() return value
f5cef51b578d MPTCP: fix lock class name family in pm_nl_create_listen_socket
1e4e2f5e48ce icmp: fix NULL pointer dereference in icmp_tag_validation()
993afb7edc86 net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths
d22921727023 net: shaper: protect from late creation of hierarchy
348758ba74e6 net: shaper: protect late read accesses to the hierarchy
8baced53a35f net: mvpp2: guard flow control update with global_tx_fc in buffer switching
4c6aa008b913 nfnetlink_osf: validate individual option lengths in fingerprints
e78a2dcc7cfb netfilter: nf_tables: release flowtable after rcu grace period on error
54244d54a971 netfilter: bpf: defer hook memory release until rcu readers are done
ec9762f0df2f net: bonding: fix NULL deref in bond_debug_rlb_hash_show
12aa4b73a67d udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
8d625c15471f net/mlx5e: Fix race condition during IPSec ESN update
6834d196107d net/mlx5e: Prevent concurrent access to IPSec ASO context
3420276b41fc net/mlx5: qos: Restrict RTNL area to avoid a lock cycle
a25853c9feea ipv6: add NULL checks for idev in SRv6 paths
af97c5116230 net: macb: fix uninitialized rx_fs_lock
8f08a890b5c4 netdevsim: drop PSP ext ref on forward failure
8583f62259e1 ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
50f1b690b486 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
f2c06d718a7b wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
7c55a3deaf7e wifi: mac80211: fix NULL deref in mesh_matches_local()
6a6428990e00 libie: prevent memleak in fwlog code
171298954839 iavf: fix VLAN filter lost on add/delete race
b02fa17d1744 igc: fix page fault in XDP TX timestamps handling
4c6cfe1fd7bf igc: fix missing update of skb->tail in igc_xmit_frame()
4d3d6a4b2ade ACPICA: Update the format of Arg3 of _DSM
98e8aed64614 net: usb: aqc111: Do not perform PM inside suspend callback
0509b762bc5e clsact: Fix use-after-free in init/destroy rollback asymmetry
de70da1fb1d1 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
dce9dda0e370 net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
b9cb2b7dc390 net: airoha: Remove airoha_dev_stop() in airoha_remove()
4a233447b941 net/sched: teql: Fix double-free in teql_master_xmit
1fab5ece76fb net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
9b49c854f14f bonding: prevent potential infinite loop in bond_header_parse()
cf65a77c0f95 PM: runtime: Fix a race condition related to device removal
81de6f8509a9 sched: idle: Consolidate the handling of two special cases
d16d57dedcb6 net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode
05d345719d85 net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
438893149407 net: bcmgenet: increase WoL poll timeout
b4d3be542deb crypto: ccp - Fix leaking the same page twice
b652b05d5100 netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
9e1bf0966094 netfilter: xt_time: use unsigned int for monthday bit shift
777d02efe3d6 netfilter: xt_CT: drop pending enqueued packets on template removal
77da55dee677 netfilter: nft_ct: drop pending enqueued packets on removal
c88a9fd26cee nf_tables: nft_dynset: fix possible stateful expression memleak in error path
fb6c3596823e netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
5c4ff7a56c81 netfilter: nf_flow_table_ip: reset mac header before vlan push
d4f17256544c netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
0fbae1e74493 netfilter: conntrack: add missing netlink policy validations
cd541f15b60e netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
9cadd263f8d5 mpls: add missing unregister_netdevice_notifier to mpls_init
0d087d00161f ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS
a12254050e30 net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
1fd81151f659 bridge: cfm: Fix race condition in peer_mep deletion
37dd7ab33239 af_unix: Give up GC if MSG_PEEK intervened.
2c8ea42758de Bluetooth: qca: fix ROM version reading on WCN3998 chips
71030f3b3015 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
4d37fa7582aa Bluetooth: HIDP: Fix possible UAF
02023ff760cc Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers
fe445fff65e7 Bluetooth: hci_sync: Fix hci_le_create_conn_sync
147788a486e8 Bluetooth: ISO: Fix defer tests being unstable
9a55970e4a59 Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy
a6dd1ed695a2 Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU
cd0e0c5d221b Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU
8414d2800c34 firmware: arm_scmi: Fix NULL dereference on notify error path
6441904cc63f firmware: arm_scpi: Fix device_node reference leak in probe path
45a0f7c27f1a firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap()
e5b0c769a0a4 arm64: dts: renesas: r8a78000: Fix out-of-range SPI interrupt numbers
e8f4c5db95df arm64: dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2
09ed98d9d00d arm64: dts: renesas: r9a09g087: Fix CPG register region sizes
59ed2346c841 arm64: dts: renesas: r9a09g077: Fix CPG register region sizes
634ddb32d4a7 arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes
acf1e35f805e arm64: dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0 regulator
b34ec868f78f arm64: dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0 card regulator
72b7ea786b8e wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
b24763d32d5b wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
a369485bda91 wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times
2e3bbf5c51cf wifi: mac80211: remove keys after disabling beaconing
04532034ebf8 tee: shm: Remove refcounting of kernel pages
44351db607df soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources()
265e56714635 soc: fsl: qbman: fix race condition in qman_destroy_fq
05669450e732 soc: rockchip: grf: Add missing of_node_put() when returning
40468a224a5d cache: ax45mp: Fix device node reference leak in ax45mp_cache_init()
8194692f4ed0 cache: starfive: fix device node leak in starlink_cache_init()
17c84fb7cf39 soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()
387a163570fd btrfs: tree-checker: fix misleading root drop_level error message
6f5a51969b1d btrfs: log new dentries when logging parent dir of a conflicting inode
e72ee455297b Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
76326dc06d87 drm/xe: Open-code GGTT MMIO access protection
c409ecce9adc drm/xe: Fix missing runtime PM reference in ccs_mode_store
29fa23e60e31 drm/xe: Always kill exec queues in xe_guc_submit_pause_abort
5baf166227a6 drm/xe/oa: Allow reading after disabling OA stream
8b8c4a290746 drm/xe/guc: Ensure CT state transitions via STOP before DISABLED
21f831bd33da drm/i915/psr: Disable PSR on update_m_n and update_lrr
2bbc09c991c4 drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state
631317825d44 drm/i915/dmc: Fix an unlikely NULL pointer deference at probe
d73bf55bec76 drm/amdgpu: rework how we handle TLB fences
f462624a6e4b drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
08275ca70b1c drm/amdgpu: apply state adjust rules to some additional HAINAN vairants
0b7316046ea0 drm/radeon: apply state adjust rules to some additional HAINAN vairants
8e0c15e426a0 drm/imagination: Synchronize interrupts before suspending the GPU
6f39b48a2d3b drm/imagination: Fix deadlock in soft reset sequence
6ebf1f7fcfee drm/amdgpu/mmhub4.1.0: add bounds checking for cid
381bb6b30a46 drm/amdgpu/mmhub3.0: add bounds checking for cid
1504dcae42c2 drm/amdgpu/mmhub3.0.2: add bounds checking for cid
1f72a35a6254 drm/amdgpu/mmhub3.0.1: add bounds checking for cid
369df8268e18 drm/amdgpu/mmhub2.3: add bounds checking for cid
3f6e4a402046 drm/amdgpu/mmhub2.0: add bounds checking for cid
c109e854a452 drm/amdgpu/gmc9.0: add bounds checking for cid
0f8098034042 drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END}
e493c135980f drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug
d8d375b8250e serial: uartlite: fix PM runtime usage count underflow on probe
bc70f2b36cf4 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
310c18612432 serial: 8250_dw: Ensure BUSY is deasserted
be4fd04f3eeb serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY
c8a2241bc79c serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm
7e444baea930 serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling
aa26f0e4ba2f serial: 8250: Add serial8250_handle_irq_locked()
0ead4be6e61e serial: 8250_dw: Avoid unnecessary LCR writes
71ae5523f036 serial: 8250: Protect LCR write in shutdown
e324462c2006 serial: 8250: always disable IRQ during THRE test
b5ad88733950 serial: 8250: Fix TX deadlock when using DMA
ccd3a469cc73 serial: 8250_pci: add support for the AX99100
1cf66bd91274 vt: save/restore unicode screen buffer for alternate screen
788fc59b245b io_uring/kbuf: propagate BUF_MORE through early buffer commit path
c9105481bd40 io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF
bf33554b6abf io_uring/poll: fix multishot recv missing EOF on wakeup race
46461dabb952 iommu/vt-d: Only handle IOPF for SVA when PRI is supported
e024840cedc7 iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry
75a4d8cfe778 mtd: Avoid boot crash in RedBoot partition table parser
4bafef1abd13 mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init()
7217869ffa8d mtd: rawnand: pl353: make sure optimal timings are applied
1b3c2731d117 mtd: spi-nor: Fix RDCR controller capability core check
118ce777d39f spi: fix statistics allocation
23b51bad2eb8 spi: fix use-after-free on controller registration failure
572f17180f26 pmdomain: bcm: bcm2835-power: Increase ASB control timeout
960779130157 pmdomain: mediatek: Fix power domain count
cb06ecc96362 mmc: sdhci: fix timing selection for 1-bit bus width
45ca56d003da mmc: sdhci-pci-gli: fix GL9750 DMA write corruption
c008f8c03c6e ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in()
e7c6e71e7719 ata: libata-core: disable LPM on ADATA SU680 SSD
5199fc5dc9c5 ipmi:msghandler: Handle error returns from the SMI sender
9b40d74e11b3 ipmi: Consolidate the run to completion checking for xmit msgs lock
1c87b48a0ff0 drm/xe: Fix memory leak in xe_vm_madvise_ioctl
30afc6ea72cc cifs: open files should not hold ref on superblock
fd262dc6d758 crypto: atmel-sha204a - Fix OOM ->tfm_count leak
ce18d9fe7b69 netconsole: fix sysdata_release_enabled_show checking wrong flag
59b5b6e26d7a firmware: stratix10-svc: Add Multi SVC clients support
d99ed6a44d71 firmware: stratix10-svc: Delete some stray tabs
da5c94139bb6 net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume
722aa28f6fb7 net: macb: Introduce gem_init_rx_ring()
80ee2ccffdb8 LoongArch: Check return values for set_memory_{rw,rox}
ecd3eddae8dc drm/i915/psr: Write DSC parameters on Selective Update in ET mode
c77019137b14 drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters
9887acefe3d9 drm/i915/dsc: Add Selective Update register definitions
c283a6ffe6d5 ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
6260fc85ed12 ksmbd: unset conn->binding on failed binding request
6e9ff1eb7fee smb: client: fix krb5 mount with username option
9d74324b99aa drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected()
db2872d054e4 Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
f110b8f58b25 Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
2f9d76f08f8b crypto: padlock-sha - Disable for Zhaoxin processor
3c6629e859a2 mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations
eda89a1bae06 batman-adv: avoid OGM aggregation when skb tailroom is insufficient
e309b6b2f34e parisc: Flush correct cache in cacheflush() syscall
b7c7a275447c bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler
eb652535e9ec net: macb: fix use-after-free access to PTP clock
783f05e560d7 NFC: nxp-nci: allow GPIOs to sleep
b9536aebac01 LoongArch: No need to flush icache if text copy failed
ed306a48d0ea LoongArch: Give more information if kmem access failed
565f274edf80 mm/huge_memory: fix early failure try_to_migrate() when split huge pmd for shared THP
e3133d0986dc mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()
a0911ccdba41 mm/rmap: fix incorrect pte restoration for lazyfree folios
ed8d91f46984 crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying
84af19855d1a nvdimm/bus: Fix potential use after free in asynchronous initialization
373457de1428 sunrpc: fix cache_request leak in cache_release
eb57dae20fdf HID: bpf: prevent buffer overflow in hid_hw_request
dfadfa93c1a4 selftests/hid: fix compilation when bpf_wq and hid_device are not exported
ae8498337dfd nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
6a8d70e2ad6a NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
f5ab1bec5fa1 NFSD: Defer sub-object cleanup in export put callbacks