ac9e28efe241 Linux 7.0.11-xanmod1
ac9562c2da8d Merge tag 'v7.0.11' into 7.0
bb532bfaf791 Linux 7.0.11
66288dcadf80 security/keys: fix missed RCU read section on lookup
277b03a518bd drm/msm: Restore second parameter name in purge() and evict()
c832a00c9b92 platform/x86: uniwill-laptop: Do not enable the charging limit even when forced
7886b0915817 Documentation: laptops: Update documentation for uniwill laptops
a03a5de7ea26 block: avoid use-after-free in disk_free_zone_resources()
b6b3c52400ca LoongArch: kprobes: Fix handling of fatal unrecoverable recursions
6cb0b9385320 ksmbd: fix durable reconnect error path file lifetime
388468f7e7d1 blk-mq: pop cached request if it is usable
fa29b57fc265 io_uring/nop: pass all errors to userspace
efd739bf8e31 net: enetc: fix missing error code when pf->vf_state allocation fails
44bea2032af0 net: gro: don't merge zcopy skbs
b4f4c8120dd1 pds_core: ensure null-termination for firmware version strings
a4fd129c0148 net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback
05305e832be7 tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR
355e9f2b2a78 net: mana: validate rx_req_idx to prevent out-of-bounds array access
b496926b28f4 octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs
e50db059ec8e nvme-pci: fix dma mapping leak on data setup error
24ea0de233d9 nvme-pci: fix dma_vecs leak on p2p memory
6876fa95b611 selftests: net: Fix checksums in xdp_native
39869f487a0b ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup()
c83f9320c04d ASoC: cs-amp-lib: Fix wrong sizeof() in _cs_amp_set_efi_calibration_data()
4b0c4f0c1b13 drm/xe/oa: Fix exec_queue leak on width check in stream open
feec26aecf41 ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()
030f061fbe83 gpio: aggregator: lock device when calling device_is_bound()
9870ea9a4a25 gpio: aggregator: remove the software node when deactivating the aggregator
cb7075c8602e gpio: aggregator: stop using dev-sync-probe
7ac4183a41ba gpio: aggregator: fix a potential use-after-free
769f70699371 gpio: cdev: check if uAPI v2 config attributes are correctly zeroed
5f3b70bae50a net: stmmac: eswin: validate RGMII delay values
92287f785c15 net: stmmac: eswin: correct RGMII delay granularity to 20 ps
8e0ca4b3a47d net: stmmac: eswin: clear TXD and RXD delay registers during initialization
1b39fc07d5a3 net: stmmac: eswin: fix HSP CSR init ordering after clock enable
4affe063fa56 tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
8a52139560f8 bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
26266d99b32f net: ag71xx: check error for platform_get_irq
c58008774371 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg
9217017f4bce crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks
96ea960dd40f net: shaper: rework the VALID marking (again)
6516e38ebd54 net: shaper: annotate the data races
ecafd8284e52 net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
c10fecc60305 udp: Fix UDP length on last GSO_PARTIAL segment
8886312cc164 udp: gso: Fix handling checksum in __udp_gso_segment
0d2572bafea3 Bluetooth: btmtk: fix urb->setup_packet leak in error paths
68ab66ef0192 Bluetooth: btintel_pcie: Fix incorrect MAC access programming
9af5ad457ed3 Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE
915c1254fe07 tracing: Avoid NULL return from hist_field_name() on truncation
a48eca30d9a2 cgroup: rstat: relax NMI guard after switch to try_cmpxchg
ef46b616a4c2 ALSA: seq: Serialize UMP output teardown with event_input
32d7584441b9 wifi: wilc1000: fix dma_buffer leak on bus acquire failure
c5b319da94d5 wifi: mac80211: fix multi-link element inheritance
722b3f86df80 wifi: mac80211: fix MLE defragmentation
863f1f02a3bd wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs
492c73b21fef erofs: fix metabuf leak in inode xattr initialization
a4356c3b784a erofs: harden h_shared_count in erofs_init_inode_xattrs()
038166f873c4 erofs: fix managed cache race for unaligned extents
d7f4dd4c8fb3 pds_core: fix debugfs_lookup dentry leak and error handling
560d55932416 pds_core: fix error handling in pdsc_devcmd_wait
1e65a7e69a39 net: airoha: Fix NPU RX DMA descriptor bits
7ffde0a75d9b net: phy: honor eee_disabled_modes in phy_advertise_eee_all()
9798a7ea5398 net: phy: honor eee_disabled_modes in phy_support_eee()
7213256c91ed bridge: mcast: Fix a possible use-after-free when removing a bridge port
b0e9706fb285 RDMA/rtrs: Fix use-after-free in path file creation cleanup
e1c8b1512eba RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port
ce0de178ef08 drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets
89ea749336ca drm/amdgpu/vce1: Check that the GPU address is < 128 MiB
35b07a6762a7 drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2)
1a974051f091 ASoC: soc-utils: Add missing va_end in snd_soc_ret()
9c6c06a0f9d7 platform/x86: asus-armoury: fix mini-LED mode get/set on MODE2 devices
0c39a0f205dc platform/x86: uniwill-laptop: Fix behavior of "force" module param
96408ca6525f platform/x86: uniwill-laptop: Accept charging threshold of 0
4a8450a2d3e7 platform/x86: uniwill-laptop: Properly initialize charging threshold
675f0eacddbe platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL
a69c84369d01 platform/x86: intel_sar: Check ACPI_HANDLE() against NULL
f652e52a2d6f platform/x86: intel-hid: Check ACPI_HANDLE() against NULL
82aff5b08e4d platform/x86: hp_accel: Check ACPI_COMPANION() against NULL
ea94715eae17 platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL
99a592daacfb platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7
3c4db56ccd13 net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
e6edebb5ac70 net: dsa: mt7530: preserve VLAN tags on trapped link-local frames
7d72715a435a net: dsa: mt7530: fix FDB entries not aging out with short timeout
0e992cb9acd3 kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme
cb35af6e7f3d phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config
3cc3c70770ee drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP
1c8587bd0252 igc: set tx buffer type for SMD frames
177a2a6c8256 ice: ptp: use primary NAC semaphore on E825
3d9d95904af8 ice: ptp: serialize E825 PHY timer start with PTP lock
76886ba48140 cifs: Fix undefined variables
8d3b91e7d810 net/mlx5e: xsk: Fix unlocked writing to ICOSQ
fd2bd9fa7700 cgroup/rstat: validate cpu before css_rstat_cpu() access
a4153538fcd2 srcu: Don't queue workqueue handlers to never-online CPUs
4ab2fc15cbb5 io_uring: propagate array_index_nospec opcode into req->opcode
aa6652263ddc drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable
207a80a090da drm/mediatek: mtk_cec: Fix non-static global variable
782cfc5a9149 drm/mediatek: mtk_hdmi_v2: Fix non-static global variable
ac963cd870a0 drm/mediatek: mtk_hdmi_ddc_v2: Fix non-static global variable
36a222d8e9f0 wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only parsing
32c1f4631030 wifi: ath11k: fix peer resolution on rx path when peer_id=0
72c4b6cd22a2 drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4
aad838731edf drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p
64bbac33d8ad drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1
986a69e2a2ab drm/xe: Consolidate workaround entries for Wa_18033852989
5758fa346aa7 drm/xe: Consolidate workaround entries for Wa_14019988906
9fba83e404e6 drm/xe/pf: Fix CFI failure in debugfs access
a0b154d60043 drm/xe/vf: Fix signature of print functions
889f70de2b51 drm/xe/gsc: Fix double-free of managed BO in error path
6e13c85cac3b drm/gem: Make the GEM LRU lock part of drm_device
004a777879ff dma-mapping: move dma_map_resource() sanity check into debug code
b6b4db85c7ba wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it
cbe1c8245e44 wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled
b0b66aae8a94 hwmon: (lm90) Add lock protection to lm90_alert
479e297526ae hwmon: (lm90) Stop work before releasing hwmon device
0c90ececfad3 drm/msm/snapshot: fix dumping of the unaligned regions
94468a4c0f22 ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5
6fecd39c6401 netfilter: nft_inner: release local_lock before re-enabling softirqs
cd299cb83b52 spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()
0794f84c92e4 ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging
5c277bd21e83 btrfs: fix squota accounting during enable generation
ce337b5a5e37 btrfs: check for subvolume before deleting squota qgroup
b3155f2b78db vsock/virtio: fix zerocopy completion for multi-skb sends
8b599068146a io_uring/net: punt IORING_OP_BIND async if it needs file create
0940108d27c6 cachefiles: Fix error return when vfs_mkdir() fails
2f4c15a991d0 ALSA: hda/ca0132: Disable auto-detect on manual output select
a41b4620fa85 ALSA: scarlett2: Add missing error check when initialise Autogain Status
a121bda16914 iommupt: Fix the end_index calculation in __map_range_leaf()
00850f41da24 iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap
0cd028806efc iommu: Handle unmap error when iommu_debug is enabled
60d5ec29c19a iommu: Fix up map/unmap debugging for iommupt domains
e41da0e8e23d iommu: Fix loss of errno on map failure for classic ops
92ec4e9185f3 iommupt: Avoid rewalking during map
edf82f7679d5 iommupt: Directly call iommupt's unmap_range()
6daefdf1cd3c ASoC: codecs: fs210x: fix possible buffer overflow
f85afc682cf3 scsi: sd: Fix return code handling in sd_spinup_disk()
07e70360badb net/mlx5: Skip disabled vports when setting max TX speed
1e924bcc21fe net/mlx5: Do not restore destination-less TC rules
3ef93800d3ca tls: Preserve sk_err across recvmsg() when data has been copied
8022d690bc62 ovpn: disable BHs when updating device stats
8443cd4497a4 vfio/pci: Check BAR resources before exporting a DMABUF
cad67bfa263f x86/xen: Fix xen_e820_swap_entry_with_ram()
a681367c3bbe gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE
73b167511976 phy: apple: atc: Fix typec switch/mux leak on unbind
45969cfc88ed cifs: client: stage smb3_reconfigure() updates and restore ctx on failure
de9fec2a6645 ovpn: fix race between deleting interface and adding new peer
0c3ef71879c0 ovpn: respect peer refcount in CMD_NEW_PEER error path
d3ef441907fc ovpn: tcp - use cached peer pointer in ovpn_tcp_close()
f901a63b8f0e net: phy: DP83TC811: add reading of abilities
b9c015ef1a7b net: tls: prevent chain-after-chain in plain text SG
2fb0dc7e0099 net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring
65edb3b0822c net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot
8079acc5ee52 powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()
b14b8a55b8a7 riscv: Docs: fix unmatched quote warning
87dfca8534e2 ASoC: sdw_utils: Check speaker component string allocation
a90d630daab3 ASoC: sdw_utils: cs42l43: allow spk component names to be combined
21a8e543c025 ASoC: intel: sof_sdw: Prepare for configuration without a jack
17c993bf44a5 drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table
3a45af377334 drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN
ffc132aecac9 drm/msm/a6xx: Restore sysprof_active
22fc33d9b676 drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx
2be24c945e76 drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()
b014b617698b drm/msm/a6xx: Add soft fuse detection support
82ccaa015539 drm/msm: Fix GMEM_BASE for A650
8fae83ad921d Documentation: intel_pstate: Fix description of asymmetric packing with SMT
760f67eb4ec7 x86/mce: Restore MCA polling interval halving
d46574b006e1 selftests: ublk: cap nthreads to kernel's actual nr_hw_queues
b91d56772268 block: fix handling of dead zone write plugs
e10ebf8f35ee block: allow submitting all zone writes from a single context
b744f2f670e3 block: rename struct gendisk zone_wplugs_lock field
95048a12f48c drm/msm/dpu: don't mix devm and drmm functions
ab871d588295 drm/msm/dsi: don't dump registers past the mapped region
9008d0b59e5f drm/msm/dpu: Fix Kaanapali CWB register configuration
d70b3b215774 drm/msm/dpu: fix UV scanlines calculation for YUV UBWC formats
271f2dc9bbd7 ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics
561cf66fa9b6 net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
8c795012d0e0 accel/qaic: Add overflow check to remap_pfn_range during mmap
8fa244738641 block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()
09e223113089 HID: quirks: really enable the intended work around for appledisplay
42929c98d044 block: recompute nr_integrity_segments in blk_insert_cloned_request
066be1439593 block: don't overwrite bip_vcnt in bio_integrity_copy_user()
6ba4988a0529 net: shaper: reject QUEUE scope handle with missing id
21796b949019 net: shaper: enforce singleton NETDEV scope with id 0
2c8266d6ed0f net: shaper: fix undersized reply skb allocation in GROUP command
03ad6096228b net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit
31767bf852b5 net: shaper: reject duplicate leaves in GROUP request
c9de14ad4073 net: shaper: fix trivial ordering issue in net_shaper_commit()
ff62038231af net: shaper: flip the polarity of the valid flag
892b06902754 wifi: ath10k: skip WMI and beacon transmission when device is wedged
a6517e74d0da wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()
d618d322b95c wifi: ath11k: fix error path leaks in some WMI WOW calls
5c428ebde2e3 net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference
46806096f35b net: ethernet: cortina: Carry over frag counter
341512934936 net: ethernet: cortina: Drop half-assembled SKB
67a35e7da7ef net: ethernet: cortina: Make RX SKB per-port
77ea917cbed6 afs: Fix the locking used by afs_get_link()
f91e10435c0d netfs, afs: Fix write skipping in dir/link writepages
b8271cccdd5e netfs: Fix netfs_read_folio() to wait on writeback
0969ea8370ba netfs: Fix folio->private handling in netfs_perform_write()
6a3d27116be2 netfs: Fix partial invalidation of streaming-write folio
3866d015f33a netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
28686d6d8b60 netfs: Fix leak of request in netfs_write_begin() error handling
412e8bad4896 netfs: Fix early put of sink folio in netfs_read_gaps()
7a9fa5b020a3 netfs: Fix write streaming disablement if fd open O_RDWR
a603e1913605 netfs: Fix read-gaps to remove netfs_folio from filled folio
e40e9cbf3ee4 netfs: Fix potential deadlock in write-through mode
cdae00e8e215 netfs: Fix streaming write being overwritten
bbf6bba95069 netfs: Defer the emission of trace_netfs_folio()
65ae8717abf3 netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone
f48b9157f0f6 netfs: Fix overrun check in netfs_extract_user_iter()
5ad05b6f5df2 netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call
5cd5207de519 netfs: Fix zeropoint update where i_size > remote_i_size
55970f238d49 netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
0256e79ce421 netfs: Fix netfs_read_to_pagecache() to pause on subreq failure
293a4532c36f netfs: Fix missing barriers when accessing stream->subrequests locklessly
393f3f0d7353 netfs: Fix missing locking around retry adding new subreqs
f73372a4c690 netfs: Fix cancellation of a DIO and single read subrequests
903409000a07 powerpc/hv-gpci: fix preempt count leak in sysfs show paths
2c2384d35b80 powerpc: fix dead default for GUEST_STATE_BUFFER_TEST
4179188b2d00 powerpc: 82xx: fix uninitialized pointers with free attribute
d6de9c227864 ASoC: SOF: amd: Fix error code handling in psp_send_cmd()
29cf64d128c9 tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().
4caef578ac86 zonefs: handle integer overflow in zonefs_fname_to_fno
7c89f474005d nvme-pci: fix use-after-free in nvme_free_host_mem()
51ec7fc4e10c nvme: fix bio leak on mapping failure
81b582784518 irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT
cefc3d1c1d82 nsfs: fix wrong error code returned for pidns ioctls
6d63a250b17d ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation
af8509414b83 fs: fix forced iversion increment on lazytime timestamp updates
537906b7b901 irqchip/ath79-cpu: Remove unused function
2cfd8dab2781 fs: Fix return in jfs_mkdir and orangefs_mkdir
93614949dc86 fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap
a4f6a9005ed6 fprobe: Fix unregister_fprobe() to wait for RCU grace period
9e8cb331601c ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC
f9506d9edb07 ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC
44e5e4eb3a07 NFSD: Fix infinite loop in layout state revocation
7a6062b3ef4c phy: spacemit: Remove incorrect clk_disable() in spacemit_usb2phy_init()
45556aafcad9 phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access
ca029dde6ad7 net: ti: icssm-prueth: fix eth_ports_node leak in probe
6dd3297e07d5 net: lan966x: avoid unregistering netdev on register failure
06f8a44a2774 ice: dpll: fix misplaced header macros
3b1f8d62d499 ice: dpll: fix rclk pin state get for E810
5ccf4b180f32 ice: fix locking in ice_dcb_rebuild()
2280cb4ec415 ice: fix setting RSS VSI hash for E830
3122d70b7c01 idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()
4e198301d6ae net: shaper: Reject reparenting of existing nodes
b9537976a0f0 net: napi: Avoid gro timer misfiring at end of busypoll
c433177fb75e tcp: Fix imbalanced icsk_accept_queue count.
96515819d79f test_kprobes: clear kprobes between test runs
d710031a3f90 kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist()
842997de42ba netfilter: nf_conntrack_expect: restore helper propagation via expectation
02d999dc69b3 netfilter: bridge: eb_tables: close module init race
4c9ae7eff794 netfilter: x_tables: close dangling table module init race
5c16a5583887 netfilter: ebtables: close dangling table module init race
ef395579a763 netfilter: ebtables: move to two-stage removal scheme
8026e5163cca netfilter: x_tables: add and use xtables_unregister_table_exit
673c27431b96 netfilter: x_tables: add and use xt_unregister_table_pre_exit
c604b5d762a8 netfilter: x_tables: unregister the templates first
2f92c5f92397 netfilter: x_tables: allocate hook ops while under mutex
03973ae18570 netfilter: x_tables: allow initial table replace without emitting audit log message
0a96d9a85cd2 btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()
fc7a9ddd922c ALSA: hda: cs35l41: Put ACPI device on missing physical node
1544c354fee0 ALSA: hda: cs35l56: Put ACPI device after setting companion
33ad014abec9 ARM: integrator: Fix early initialization
0f7f2ab0d1e7 firmware: arm_ffa: Fix sched-recv callback partition lookup
0e7be42ef249 firmware: arm_ffa: Snapshot notifier callbacks under lock
27fbbf4b0d31 firmware: arm_ffa: Align RxTx buffer size before mapping
76eb90e2b03d firmware: arm_ffa: Validate framework notification message layout
4586c052b689 firmware: arm_ffa: Keep framework RX release under lock
79d95c02ae0a firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
4c7f0211cc65 pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150
d7a53e6770b1 kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS
98a76cc13ebf kunit: config: Enable KUNIT_DEBUGFS by default
5cbe683ef809 riscv: mm: Fixup no5lvl failure when vaddr is invalid
9e020156833f riscv: Fix register corruption from uninitialized cregs on error
5ae8378080cd riscv: errata: Fix bitwise vs logical AND in MIPS errata patching
d76da4e5d1d9 firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0
1ba0476e178f firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue
e605a7824fd8 firmware: arm_ffa: Skip free_pages on RX buffer alloc failure
198f6c86d508 firmware: arm_ffa: Check for NULL FF-A ID table while driver registration
372dfc31257b HID: uclogic: Fix regression of input name assignment
2464d8f2cb27 HID: intel-thc-hid: Intel-quickspi: Fix some error codes
3c82d38a0c61 mm/memfd_luo: report error when restoring a folio fails mid-loop
a6ac6721326a kho: skip KHO for crash kernel
83ce84be23de pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615
744ac926c0e5 pinctrl: meson: amlogic-a4: fix deadlock issue
1eb4513fa953 pinctrl: renesas: rzg2l: Fix SMT register cache handling
dc0796007685 pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume
51f9875c3d74 ARM: dts: renesas: rskrza1: Drop superfluous cells
1120c34d79a8 ARM: dts: renesas: genmai: Drop superfluous cells
6ac94dcc9257 arm64: dts: renesas: r8a78000: Fix SCIF brg_int clocks
0f7c7500e5bf pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function
6a413df8a9dd pinctrl: mediatek: moore: implement gpio_chip::get_direction()
64fa9328948d hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors
5805fadf200d hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()
6c87982ca495 hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()
bee6e9cc7c5b hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple
2aef8f08c479 hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR
dd47b8c4a0a8 hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer
a6c802145a8d hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer
231db52a5b64 hwmon: (pmbus/adm1266) reject implausible blackbox record_count
79c760409c36 hwmon: (pmbus/adm1266) seed timestamp from the real-time clock
6a995f6321e3 batman-adv: tt: prevent TVLV entry number overflow
ed28ead3420c batman-adv: tt: fix negative tt_buff_len
d29abf70c665 batman-adv: tt: fix negative last_changeset_len
ab26e3463226 batman-adv: tt: avoid empty VLAN responses
1933d9d16763 batman-adv: tt: reject oversized local TVLV buffers
9a9c859457bc batman-adv: tt: fix TOCTOU race for reported vlans
a3ea26d9bc13 batman-adv: tp_meter: avoid role confusion in tp_list
821b894c60bc batman-adv: tp_meter: fix race condition in send error reporting
d078501dde9b batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown
933880a8bc9b batman-adv: tp_meter: directly shut down timer on cleanup
85397e48afe6 batman-adv: tp_meter: avoid use of uninit sender vars
555b8d3f5c31 batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface
65497ad155a3 batman-adv: bla: avoid double decrement of bla.num_requests
95a703466127 batman-adv: bla: fix report_work leak on backbone_gw purge
7138c35c9ad3 batman-adv: frag: disallow unicast fragment in fragment
aeae11c5dad9 batman-adv: fix tp_meter counter underflow during shutdown
fdb2c96efb2b batman-adv: fix fragment reassembly length accounting
cf48e75fc4fe batman-adv: dat: handle forward allocation error
17e3a441111c batman-adv: clear current gateway during teardown
edfb1e094104 batman-adv: mcast: fix use-after-free in orig_node RCU release
9e18a85de27a batman-adv: iv: recover OGM scheduling after forward packet error
94a3d72cd9b2 batman-adv: tvlv: reject oversized TVLV packets
c3dfd913c96d batman-adv: tvlv: abort OGM send on tvlv append failure
4ff461af943e batman-adv: v: stop OGMv2 on disabled interface
1c8c6e912f29 drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async
f2a4827e980b drm/amd/display: Validate GPIO pin LUT table size before iterating
0d1aacbbe265 drm/amd/display: Fix integer overflow in bios_get_image()
3526e6297dd3 drm/bridge: megachips: remove bridge when irq request fails
95a6d5d3e2a9 drm/bridge: it66121: acquire reset GPIO in probe
5bb70a29c551 drm/amdgpu/vpe: Force collaborate sync after TRAP
9831e534853f drm/xe/multi_queue: Fix secondary queue error case
a2359a411b15 drm/virtio: use uninterruptible resv lock for plane updates
0c0f5ea9e3df drm/v3d: Release indirect CSD GEM reference on CPU job free
69c2a1fec2e7 drm/v3d: Fix use-after-free of CPU job query arrays on error path
928788566c79 drm/msm: Fix shrinker deadlock
1effd54b8d6b drm/i915/display: Copy color pipeline from plane in the primary joiner pipe
f59e686c778c device property: set fwnode->secondary to NULL in fwnode_init()
1d1546027b6a cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E
c227a316f1bf LoongArch: Remove unused code to avoid build warning
6b365829c7d2 LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions
0d470d365510 fwctl: pds: Validate RPC input size before parsing
b972d9b0f8c1 s390/pai: Fix missing PAI counter increments under heavy load
8d176ace3508 s390/pai: Disable duplicate read of kernel PAI counter value
f96283994afd s390/cio: Restore GFP_DMA for CHSC allocation
775b4dc9618a RDMA/siw: Reject MPA FPDU length underflow before signed receive math
fd5d03cab3ee mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache()
178b9b570c0f spi: ti-qspi: fix use-after-free after DMA setup failure
c33b4496e95d spi: sprd: fix error pointer deref after DMA setup failure
0e2189ab095e spi: ep93xx: fix error pointer deref after DMA setup failure
6d40f2f103bb scsi: isci: Fix use-after-free in device removal path
a47f70c5f0ea phy: qcom: edp: Fix AUX_CFG8 programming for DP mode
644ece5427aa phy: qcom: edp: Add eDP/DP mode switch support
5b0c352a5809 phy: qcom: edp: Unify generic DP/eDP swing and pre-emphasis tables
ddcbdf40ce0e phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix
605a4cb80179 phy: tegra: xusb: Fix per-pad high-speed termination calibration
11a8219fcf60 phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870
4f4051e9d644 spi: qup: fix error pointer deref after DMA setup failure
e27ae0c00329 drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe
8f7ed203b390 i2c: tegra: fix pm_runtime leak on mutex_lock failure
3d0cd0065dee virt: sev-guest: Explicitly leak pages in unknown state
c2e786fb9139 riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM
4121b43d595f riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM
9560e6fee887 KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)
e690caa54a61 KVM: arm64: vgic: Free private_irqs when init fails after allocation
8bcd15b690a3 KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits
0baaec17b34e arm64: probes: Handle probes on hinted conditional branch instructions
285159ca199c ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put()
b67233397363 tracing: Do not call map->ops->elt_free() if elt_alloc() fails
e1ffa6cf6623 cifs: Fix busy dentry used after unmounting
c4b8c5d51632 octeontx2-pf: avoid double free of pool->stack on AQ init failure
2becaaeebe23 wifi: mac80211: consume only present negotiated TTLM maps
5f162f95a958 af_unix: Fix UAF read of tail->len in unix_stream_data_wait()
1343a480f84b wifi: cfg80211: advance loop vars in cfg80211_merge_profile()
65c6ee5bad97 ice: restore PTP Rx timestamp config after ethtool set-channels
5db390d68bcd ice: fix setting promisc mode while adding VID filter
b9a84be3bb3e ice: fix locking around wait_event_interruptible_locked_irq
3ebf05655613 igc: fix potential skb leak in igc_fpe_xmit_smd_frame()
eb72a65f2bb2 octeontx2-pf: fix double free in rvu_rep_rsrc_init()
2c3d26b4a624 octeontx2-af: CGX: add bounds check to cgx_speed_mbps index
a010cadaf572 lsm: hold cred_guard_mutex for lsm_set_self_attr()
327d797ddb4c mptcp: reset rcv wnd on disconnect
c59a5f555e9e mptcp: do not drop partial packets
9400efc76b42 rbd: eliminate a race in lock_dwork draining on unmap
e8768bcbe5cd ixgbevf: fix use-after-free in VEPA multicast source pruning
bbe0be67de29 ipv4: raw: reject IP_HDRINCL packets with ihl < 5
13f1786395db wifi: iwlwifi: mld: stop TX during firmware restart
6b58a79f2cd9 wifi: iwlwifi: mvm: fix driver-set TX rates on old devices
f3ace45146f4 wifi: ath11k: clear shared SRNG pointer state on restart
aab2344f68bb ice: fix VF queue configuration with low MTU values
a89ca8b776e1 vsock/virtio: reset connection on receiving queue overflow
9fe74e42914c vsock/vmci: fix UAF when peer resets connection during handshake
331d66688d04 mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient
6013af250269 selftests: mptcp: drop nanoseconds width specifier
cf75eb661704 ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
2fb64f94f9af wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb
d8d66d20cfee ring-buffer: Flush and stop persistent ring buffer on panic
fbbc72db89a5 ring-buffer: Fix reporting of missed events in iterator
a04c207f0801 qed: fix double free in qed_cxt_tables_alloc()
acab6314bb75 l2tp: use list_del_rcu in l2tp_session_unhash
57e19ba3f58a sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path
4e17caa0e2a3 sched_ext: Fix missing warning in scx_set_task_state() default case
612ddab8fce0 ACPI: driver: Check ACPI_COMPANION() against NULL during probe
17fe2381f967 net: ethtool: phy: avoid NULL deref when PHY driver is unbound
3dbe20a38093 net: ethtool: fix NULL pointer dereference in phy_reply_size
d0f98a3617f6 netfilter: nft_inner: Fix IPv6 inner_thoff desync
0b530efb2cc9 netfilter: ipset: stop hash:* range iteration at end
3fb0f5c0f641 netfilter: nf_queue: hold bridge skb->dev while queued
6feb43c0995a netfilter: ip6t_hbh: reject oversized option lists
4ac66c0c36a8 net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()
2638e1773904 net: ifb: report ethtool stats over num_tx_queues
152295aa7dc2 net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover
8c3af18bb0d7 net: hsr: defer node table free until after RCU readers
f0efaf401984 net: phy: skip EEE advertisement write when autoneg is disabled
d5008e4e4ee6 net: devmem: reject dma-buf bind with non-page-aligned size or SG length
49bdf6bbb21b net: bcmgenet: keep RBUF EEE/PM disabled
a3fc8f2dacd1 phonet/pep: disable BH around forwarded sk_receive_skb()
a218bf69eb51 Bluetooth: serialize accept_q access
0bc1a5a69f54 Bluetooth: MGMT: validate Add Extended Advertising Data length
c36d9808ad8e Bluetooth: hci_qca: Convert timeout from jiffies to ms
356c9d1a1cba Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer
7338031946bd Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
e7578529b97e Bluetooth: bnep: Fix UAF read of dev->name
e3a799881c12 Bluetooth: ISO: drop ISO_END frames received without prior ISO_START
a5ca86a6097a Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
8f764a7810a9 net: wwan: iosm: fix potential memory leaks in ipc_imem_init()
dfdf5bfde255 mm/damon: fix damos_stat tracepoint format for sz_applied
16d461f4e48f selftests/mm: run_vmtests.sh: fix destructive tests invocation
c715f7ccf7a2 mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page
2f2aec5120b9 mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free
df64c0d21c3f mm/memory_hotplug: fix memory block reference leak on remove
9052ea2ee223 mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()
52f72b3f8f6f mm/memory: fix spurious warning when unmapping device-private/exclusive pages
5af905aa8e91 ipv6: ioam: refresh hdr pointer before ioam6_event()
8502e2c2d063 drivers/base/memory: fix memory block reference leak in poison accounting
4d2a0de611ab io_uring/waitid: clear waitid info before copying it to userspace
9ac941b31897 spi: amd: Set correct bus number in ACPI probe path
e871549f7894 efi: Allocate runtime workqueue before ACPI init
dc084c1a0644 ACPI: battery: Fix system wakeup on critical battery status
2d9e7fed5a56 ALSA: scarlett2: Allow flash writes ending at segment boundary
7d1072399357 ALSA: asihpi: Fix potential OOB array access at reading cache
c9f676851581 ALSA: pcm: Don't setup bogus iov_iter for silencing
6ab2244db0dd ALSA: ua101: Reject too-short USB descriptors
7f705e581ef3 hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX
ed04116d630d smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close
f556ad0283c4 smb: client: use data_len for SMB2 READ encrypted folioq copy
e374f4e496fe smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
c2397b93fbb6 smb: client: require net admin for CIFS SWN netlink
722903f07fed scripts/gdb: mm: cast untyped symbols in x86_page_ops
d2d6d2128671 x86/mm: Disable broadcast TLB flush when PCID is disabled
b986f88b22a5 regulator: tps65219: fix irq_data.rdev not being assigned
1c9d0646a995 ksmbd: validate SID in parent security descriptor during ACL inheritance
eced48cb08f0 ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow
8eab081627b6 ksmbd: fix null pointer dereference in proc_show_files()
af86896ca323 ksmbd: fix null pointer dereference in compare_guid_key()
1bd31386ec3b mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
708f6926f61f sysfs: don't remove existing directory on update failure
67232384fc1c ata: libata-scsi: do not needlessly defer commands when using PMP with FBS
c8a72867ea68 ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS
5dc585d58847 ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT
48e35ae06cdf ata: libata-scsi: improve readability of ata_scsi_qc_issue()
0aece6685fc8 smb: client: reject userspace cifs.spnego descriptions
1f8f3246d55f ksmbd: close durable scavenger races against m_fp_list lookups
62f9dfbf1ace iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs
59ce14cb6eee iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs