0c250811b6c5 Linux 6.19.13-xanmod1 7b2edd7b5066 Merge tag 'v6.19.13' into 6.19 c37bbb1b5317 Linux 6.19.13 e6af5286efe5 x86/CPU: Fix FPDSS on Zen1 474e00b935db net: skb: fix cross-cache free of KFENCE-allocated skb head 10ebed83f9f6 rxrpc: proc: size address buffers for %pISpc output 03fd2ef73cb4 rxrpc: only handle RESPONSE during service challenge 1c4422d8be81 rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() 1bd3d01378c1 rxrpc: Fix leak of rxgk context in rxgk_verify_response() c1e242beb6b1 rxrpc: Fix integer overflow in rxgk_verify_response() 5cdf57eda01a rxrpc: Fix missing error checks for rxkad encryption/decryption failure 895e1e48b750 rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) 139c750bf066 rxrpc: fix reference count leak in rxrpc_server_keyring() e2f1a80d8b1e rxrpc: fix oversized RESPONSE authenticator length check 20a188775a9a rxrpc: fix RESPONSE authenticator parser OOB read 58fcd1b15615 rxrpc: reject undecryptable rxkad response tickets 9fb09861e2b8 rxrpc: Only put the call ref if one was acquired 5b2ce26d254b rxrpc: Fix to request an ack if window is limited 978108902ee4 rxrpc: Fix key reference count leak from call->key eefa0102bfcb rxrpc: Fix rack timer warning to report unexpected mode 20386e7f8d97 rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial 49875b360c2b rxrpc: Fix RxGK token loading to check bounds ac5f54691be0 rxrpc: Fix call removal to use RCU safe deletion 4a4a60fe1b1b rxrpc: Fix anonymous key handling 01f51318feb6 rxrpc: Fix key parsing memleak 182b061ac8a0 rxrpc: Fix key quota calculation for multitoken keys 9950e9199b3d net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() 4941e234cfd6 net: lan966x: fix page pool leak in error paths 7caf90d9ab97 net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() fbe9540607ac idpf: set the payload size before calling the async handler 1259bf14ee29 idpf: improve locking around idpf_vc_xn_push_free() 3bb632c6b6d8 idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling 9316a820b9aa mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() 10d12b9240eb net: stmmac: fix integer underflow in chain mode 51e47a41632a net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure ef0448c569b3 mmc: vub300: fix use-after-free on disconnect 8d09e75759cb mmc: vub300: fix NULL-deref on disconnect 16c92e9bf55f mm/damon/stat: deallocate damon_call() failure leaking damon_ctx 0655f5cf1735 mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails 29ef28e9c3a5 mm/memory_hotplug: maintain N_NORMAL_MEMORY during hotplug 61fc8eaf2ab2 mm/vma: fix memory leak in __mmap_region() 27f5997686ee igb: remove napi_synchronize() in igb_down() d1ef779d02b5 pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled 2ab1e9617899 net/mlx5: Update the list of the PCI supported devices 4a77da71d1e7 drm/i915/psr: Do not use pipe_src as borders for SU area 455d98ed527f drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat 1f2dc36c297d batman-adv: hold claim backbone gateways by reference 3aca300e88af net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() 2694d408b0e5 net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption 75825648ce98 EDAC/mc: Fix error path ordering in edac_mc_alloc() 7fb4dadc2734 X.509: Fix out-of-bounds access when parsing extensions cf2199171ef7 batman-adv: reject oversized global TT response buffers 7e37da42eda4 nfc: pn533: allocate rx skb before consuming bytes 22fea6e42374 liveupdate: propagate file deserialization failures 78bcb1ed957e arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges d443a69a5af9 arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity f76326243078 arm64: dts: renesas: sparrow-hawk: Reserve first 128 MiB of DRAM 2650aac65c93 arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V 660d69fc5133 Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" 800437220807 Revert "arm64: dts: rockchip: Further describe the WiFi for the Pinebook Pro" fe680540baac platform/x86/intel-uncore-freq: Handle autonomous UFS status bit 19fdabec995c platform/x86: ISST: Reset core count to 0 15b590e37bd2 x86/mce/amd: Filter bogus hardware errors on Zen3 clients 01f1330d3d1b wifi: brcmsmac: Fix dma_free_coherent() size f8a5f40d0310 ASoC: SOF: Intel: hda: modify period size constraints for ACE4 9ee7e4fd413e kbuild: modules-cpio-pkg: Respect INSTALL_MOD_PATH e0bb732eaf77 tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG 5002beda5cac xfrm: hold dev ref until after transport_finish NF_HOOK e1af65c669eb xfrm: clear trailing padding in build_polexpire() 283df9807cdf modpost: Declare extra_warn with unused attribute f6667aa4284f workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works bd15a5deb5a7 firmware: thead: Fix buffer overflow and use standard endian macros d0983b48c10d netfilter: nft_ct: fix use-after-free in timeout object destroy 2980bf3e23c7 i2c: imx: zero-initialize dma_slave_config for eDMA ab1e022379c3 btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() 32a2dcd5550b btrfs: remove pointless out labels from extent-tree.c 1a24c731aa5f MIPS: mm: Rewrite TLB uniquification for the hidden bit feature bf53cead5841 MIPS: mm: Suppress TLB uniquification on EHINV hardware 5427c325d016 MIPS: Always record SEGBITS in cpu_data.vmbits 260cf64b572d Input: uinput - take event lock when submitting FF request "event" 1534661043c4 Input: uinput - fix circular locking dependency with ff-core 17d87d42874f seg6: separate dst_cache for input and output paths in seg6 lwtunnel b313e9037d98 mptcp: fix slab-use-after-free in __inet_lookup_established 1e2468e97195 Revert "mptcp: add needs_id for netlink appending addr" d8b74b7913bd ALSA: hda/intel: enforce stricter period-size alignment for Intel NVL c17b75c4abbc Revert "ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone" 80ce4cb026f0 net: rfkill: prevent unlimited numbers of rfkill events from being created 0a30dceb0e1f xfrm_user: fix info leak in build_report() c99f198841b4 wifi: rt2x00usb: fix devres lifetime cb0047fadb0a usb: typec: ucsi: skip connector validation before init