a910cdb94b70 Linux 7.0.2-xanmod1 b37b23bb2470 Merge tag 'v7.0.2' into 7.0 bff90486aa66 Linux 7.0.2 a142ca4b6481 mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER a1be1c9ece26 rxrpc: Fix missing validation of ticket length in non-XDR key preparsing 06f06d88c05c crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed 50808c13452d crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed 3b4fd8f15765 crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed 48a6ef291a17 net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() 59b622a043cf ALSA: caiaq: take a reference on the USB device in create_card() 3b0fa5530a0e ALSA: hda/realtek: Add quirk for Legion S7 15IMH 4adfe29b022b ALSA: usb-audio: apply quirk for MOONDROP JU Jiu 2c97dcb6147c f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() 9223e5f30403 writeback: Fix use after free in inode_switch_wbs_work_fn() 211c46d4b44f ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() ef7902be3f21 ksmbd: use check_add_overflow() to prevent u16 DACL size overflow 922d48fe8c19 ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment 59c32abaaec9 ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() 99c631d0366c ksmbd: validate response sizes in ipc_validate_msg() 85fd46ee26a1 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path b78db9bddc84 smb: client: validate the whole DACL before rewriting it in cifsacl f8488c07bea2 smb: client: require a full NFS mode SID before reading mode bits 002a3de980a9 smb: server: fix max_connections off-by-one in tcp accept path fbbfcf35e1ee smb: client: fix dir separator in SMB1 UNIX mounts fb48185bcd94 smb: server: fix active_num_conn leak on transport allocation failure 151b1799861f ksmbd: require minimum ACE size in smb_check_perm_dacl() 31031aa38ba2 fuse: fuse_dev_ioctl_clone() should wait for device file to be initialized 15cae29f66a6 fuse: quiet down complaints in fuse_conn_limit_write a47c99f60fcb fuse: Check for large folio with SPLICE_F_MOVE 300e812b882a fuse: abort on fatal signal during sync init 474ce83c96a5 fuse: reject oversized dirents in page cache a10b89343d41 f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer 369eb2016d8e f2fs: fix to avoid memory leak in f2fs_rename() 188bb65f247a f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() aae24891663c f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally f79d0403ea20 fs/ntfs3: validate rec->used in journal-replay file record check eff87ab17c4e scripts/dtc: Remove unused dts_version in dtc-lexer.l 6a0bb890d2e3 scripts: generate_rust_analyzer.py: define scripts c908c853f304 ksmbd: validate owner of durable handle on reconnect b34fc42cfe92 ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger e51f42114abb crypto: krb5enc - fix async decrypt skipping hash verification 61ead364677c crypto: krb5enc - fix sleepable flag handling in encrypt dispatch edc3f51a5923 drm/amdgpu: replace PASID IDR with XArray 41a3849dc56e pwm: th1520: fix `CLIPPY=1` warning 9f641baf918a crypto: authencesn - Fix src offset when decrypting in-place