455a2bf911e2 Linux 7.2.10-xanmod1
b78eabea547d Merge tag 'v7.2.10' into 7.2
7b20d05fd38d Linux 7.2.10
26d4c36d318c ipv4: free inet_opt and ireq_opt after an RCU grace period
593ca827e167 iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs
e2b721bc30f4 xen/netfront: drop RX packets with a short Ethernet header
b5c0c7fc5571 net: usb: qmi_wwan: add Quectel EG120K-EA
4cb916d6060e smb: client: only require read lease for size-extending preallocate
0916566923c9 arm64: errata: Add Cortex-A725 erratum 3821522 workaround
c1dff02ab453 arm64: errata: Factor out broken AMU const counter cap
677d0b51ac1a perf: Require kernel access for text poke events
6e187281f978 perf/core: Check kernel access when kernel callchains are requested
63501889a803 drm/amdgpu: reset VI ASIC on MacBookPro14,3
026b93f7eb79 drm/amdgpu: reset VI ASIC on MacBookPro15,1
d422a66847a9 drm/amd/display: map PWM brightness through custom backlight curve
9a7931e847f3 rust: irq: pass RegistrationInner as cookie to request_irq
719c40d4fb6f mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages
44d0619fa4e5 mptcp: fix msk->timer_ival reset
882d0011c59f iio: trigger: cancel reenable_work before freeing trigger
e79dded3084e iio: proximity: vl53l0x-i2c: claim direct mode for raw reads
ecb9bed69f61 iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler
ce109a2619ad iio: proximity: sx9324: Correct proximity channel resolution
e462b47b9637 iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure
dd5dfd033cc9 iio: proximity: isl29501: Fix return type of isl29501_register_write
815ae0b73b69 iio: proximity: aw96103: validate firmware data length
6280d15f0860 iio: pressure: rohm-bm1390: Return error when read fails
7dbb518f3328 iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup
6a27402a8ff1 iio: light: rohm-bu27034: Fix infinite delay on error
a1769877ff52 iio: light: gp2ap020a00f: drain irq_work after free_irq
396b83106f5e iio: imu: adis16480: fix unprotected debugfs reads
f501302ebb9e iio: imu: adis16400: fix unprotected debugfs reads
8d6f98972fe2 iio: health: max30102: fix NULL dereference in interrupt handler
b05e76842035 iio: gyro: adis16136: fix unprotected debugfs reads
7e3a09c3a1bc iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw()
6564f394a4a9 iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data
50174e873f89 iio: cdc: ad7150: fix OF matching and publish module aliases
3a87212b1a09 iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
e63188d77e10 iio: buffer: serialize buffer teardown with mode claims
4aa2f001807c iio: admv1013: initialize callback mutex before registering notifier
49ea8a359e36 iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind
4c17cd7cdf9e iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls
feae7e0f40d6 iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure
ab4e57adead2 iio: adc: stm32-adc: fix possible division by zero in processed channel
b92e7e373e8d iio: adc: stm32-adc: fix check on internal channel availability
0695ee7b8feb iio: adc: rohm-bd79124: Fix rising alarm
bb4a68d3ef19 iio: adc: rohm-bd79124: Fix GPIO mask check
b2a23b732aaf iio: adc: rohm-bd79124: Fix channel initialization
1a904eb70107 iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop
7996557c6b7d iio: adc: pac1934: check ACPI label duplication
efcd55eff289 iio: adc: max1363: sign-extend bipolar differential channel reads
4d72c397c160 iio: adc: axp288: Add TS bias override for Haier HV103H
4884f4a5dec8 iio: adc: aspeed: propagate reset deassert errors
dec6193cef07 iio: adc: adi-axi-adc: Initialize state mutex
c99350a1ebc6 iio: adc: ade9000: request interrupts after powering the device
d338af069f08 iio: adc: ade9000: handle Phase C dip events in IRQ1 handler
7b565e5ac955 iio: adc: ade9000: fix overlapping scan_index for current and voltage channels
134aa31a8d4e iio: adc: ade9000: fix NULL pointer dereference in clkout registration
5663c72bf400 iio: adc: ad_sigma_delta: fix use-after-free on unbind
e96490d30d04 iio: adc: ad7173: Fix digital filter configuration
6ca6dcbaa68c iio: adc: ad4030: fix invalid oversampling_ratio validation
28c561b53706 iio: accel: sca3000: fix frequency divider condition check
aa94a37b5a3e iio: accel: kxcjk-1013: reject duplicate event disable
2ef953f7b54e iio: accel: kionix-kx022a: Prevent memory leak and fix state
d9d23d115610 smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races
1b9334c2e085 smb: client: require stable pages for signed connections
dc71660f11ef smb: client: drain and invalidate before server-side copy/clone
c33261ffbf52 smb: client: distinguish real EOF from a stale remote_i_size on read
e8ba21c7e6ef smb: client: flush dirty data before zeroing a range
8f21e4b79507 smb: client: only require read lease for size-extending zero range
bf84e44ff0ed smb: client: flush and commit data before querying allocated ranges
15bb9f1d3e96 smb: client: discard post-EOF pagecache when extending a file via clone range
fbbb399f4c7a smb: client: discard post-EOF pagecache when extending a file via copy range
6a8279c98ad2 smb: client: discard post-EOF pagecache when extending a file via zero range
737a1d2e9642 thunderbolt: Reject oversized XDomain properties responses
733aba776a5c thunderbolt: Disable CL states for the Anker Prime TB5 dock
2f4cd43faa9d thunderbolt: Fix NULL dereference in tb_remove_work()
2c2fd6a7fd5e thunderbolt: Don't access a DP tunnel after its DPRX read was canceled
7739b02129b2 thunderbolt: Fix domain reference leak when DPRX read is canceled
cbd2abb85ea3 thunderbolt: Tear down inactive DP tunnels when the domain is stopped
4cca0a5250ee thunderbolt: Mark discovered tunnels as active
47d60ea801fc thunderbolt: Make the DP tunnel activation callback mandatory
2b5f976119d8 thunderbolt: Hold a router reference for each allocated HopID
08287212b622 thunderbolt: Fix KASAN reported use-after-free when request is canceled
4c4f7cde6a02 USB: serial: option: add Compal EXC-T1 support
5d34ced50e77 USB: serial: option: add Quectel RG660QB
83b932375b91 USB: serial: option: add Compal EXM-G1x support
602a7ea0fb3c USB: serial: option: add Quectel EG060W
63b813fa112f USB: serial: option: add support for SIMCom SIM8260C
7912a95d1345 USB: serial: fix ioctl hangup race
428d479a0d31 USB: serial: fix driver deregistration order
380f57cd58e2 USB: serial: fix dynamic id driver deregistration race
b77880815b9c USB: serial: ssu100: fix baud rate overflow
1600930b81e7 USB: serial: quatech2: fix baud rate overflow
0917201017b6 USB: serial: cp210x: add Corsair AX1500i Power Supply
20f939b0c151 wifi: mac80211: handle empty FILS association request payload
93da3ec938bf wifi: mac80211: fix mesh fast xmit path deletion UAF
2d9c5525bbc1 wifi: mac80211: set info->band for 802.3 encap offload frames
a59eca4557c7 wifi: mac80211: release mesh path quota on failed additions
79b3ce0d881c wifi: mac80211: reject invalid 320 MHz CSA bandwidth
43082d604a99 wifi: mac80211: minstrel_ht: validate fixed rate index
0878594c5806 wifi: mac80211: keep fallback association elements alive
5a32409ed34a wifi: mac80211: account proxy paths against the mesh path limit
097460fcdd8a wifi: mac80211: drain PS delivery work during station teardown
09b7d5e4f885 wifi: mac80211: shut down RX BA session timer on teardown
afd1cdd16a25 wifi: mac80211: keep paired old chanctx alive
5cc54a000960 wifi: mac80211: count only matching reservations in reserved switch
89f9d6186dc7 wifi: iwlegacy: 3945: free EEPROM data on remove
678c8f4ba285 wifi: cw1200: fix TX padding OOB read leaking heap data to device
58ddd8e3ed6d wifi: cfg80211: fix RTS threshold setting for single-radio PHY
31c399c94b2e KVM: arm64: Use stage-1 leaf size for VM_PFNMAP
91e28dd8eedb KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor
8b25393d16a5 KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq
9ce6c9ebc56a KVM: arm64: vgic: Allow last_lr_irq to be NULL when LRs are not overflowing
af3300b3a6ba KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT
3da3279a44df KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs
8676b29d186f KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded
fd873c3d1b52 KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN
55865b3ae037 KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted
681e31f03ec9 KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy
de83ff6a4d8f KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state
0fbc7fec2242 KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it
1e497e3bdab6 KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified
d1de1703fe36 mtd: spinand: Do not update the QE bit on devices without one
fc278060f5d6 mtd: spinand: fix zero oobavail when no ECC engine is used
fc2f651f5203 mtd: spinand: fix NULL pointer dereference with no ECC engine
ecc0f73dbe83 mtd: spinand: Enable QE on all dies
d8147cc0c8c2 mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive()
1ac34039fd39 mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB
bbd87eca5407 mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
a07073946e94 mtd: mtd_intel_dg: reset poll counter for each erase
21d0f05989bf mtd: block2mtd: Fix divide error when erase_size is zero
23194531595c nvmet: copy the hostid into the ctrl before creating PR pc_refs
472df1d103db nvmet: pci-epf: reject too-short SGL segments
8a9b4c0eef19 nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()
02cd0d372b16 nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT
e5cdb0c0a51e nvme-multipath: fix underflow in ANA log bounds checks
8b85838c1fdb nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known
42bb6216b861 tpm: fix off-by-four bounds check in tpm2_get_random()
f38c57a28ebb x86/mm: Drop unnecessary PMD page copy when freeing
b46b2e2de47c x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
9806a748f9ab Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()
b2cb5ea1dc8c Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()
673f707518e8 Bluetooth: btintel: fix buffer over-read in btintel_hw_error()
a7161730a3ab Bluetooth: hci_core: Serialize fragmented ISO packet queueing
ecdb1c66d8e1 Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown
4fda8f0abeea Bluetooth: hci_core: Serialize ACL scheduling with channel deletion
f2e7bd6baf66 Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems
93a737e4e042 Bluetooth: hci_conn: Lock parent access during enhanced SCO setup
a642f498f0b0 Bluetooth: hci_sync: Fix inquiry cache use-after-free
df5162eeb10e Bluetooth: Serialize SMP remote OOB data access
e5aa7fbf7a44 Bluetooth: RFCOMM: Fix initial port reference race
314a2c63879e i2c: xiic: don't clobber msg->len to signal block-read completion
5d1f0adecdfb i2c: xiic: preserve PEC byte length in SMBus block read setup
a68979b6ceb4 EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup
87364b19b3fe EDAC/altera: Fix use-after-free in error paths
552bb479027e EDAC/altera: Fix memory leak on dci allocation failure
4ec26cb79847 EDAC/altera: Drop __init from ECC setup paths for re-probe safety
97c1f5b482c3 EDAC/altera: Do not allow driver unbinding
9f86099af05a EDAC/versalnet: Drop remote processor handle refcount on driver removal
07a97fba1c84 ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72
3e148e498d82 ALSA: hda/realtek: Fix silent speaker on Higole F9B
25219d1fc75e ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR
4294fe570485 ALSA: ua101: reject mismatched capture/playback packet sizes
702d92f361f6 ALSA: seq: Serialize compat port-info ioctls
9e3d43a1c644 ALSA: hda/tegra: Re-enable SDO workaround for Tegra194
f11336e6d3cd ASoC: qcom: lpass-cpu: use DAI table index for playback constraints
7791ebf56eb4 ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type
f44ba04c7a32 ASoC: codecs: max98363: fix uninitialized stream_config->type
c374d710a3b7 ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks
4ceb275ce192 arm64: mm: Fix the break-before-make flush range for erratum 2645198
88c1c611552b arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems
04a77b14f0b1 serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL
0e0d96bd980d serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around
16abbcd15adb serial: vt8500: Fix clock reference leak in vt8500_serial_probe()
0c4a277aac26 serial: tegra: don't clear the Tx FIFO on an Rx-only reset
1b303d383089 serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()
298b4e3c65d2 serial: fix TIOCMIWAIT race
cbe4709d4d0c serial: revert guards in uart_wait_modem_status()
54abbb862366 serial: core: fix NULL pointer dereference in serial_core_unregister_port()
4673adec2c63 serial: 8250_omap: fix wake irq cleared during suspend
0794ba533275 serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()
9acf2e564d3d perf: Replace perf_event_header__init_id with full header init
247b8f680876 tty: serial: max3100: shut down timer before freeing port
dcaf0251f847 tty: fix saved termios reset race
c8ccd3b2013d tty: abort break signalling on hangup
ce9fa2357694 tty: serial: qcom_geni_serial: Keep console RX functional after deep idle
017b18addbe8 tty: port: fix tty_port_tty_vhangup() race
6388409b711e tty: tty_port: restore TTY_IO_ERROR on activation failure
26a885ecfd02 tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2
1a9fb9eaeb69 tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup
399aa38af1d7 tty: vcc: zero-initialize control packet in vcc_send_ctl()
7d81a8dc947e tty: amiserial: fix broken TIOCMIWAIT
390b28153a93 tty: vt: fix memory leak in vc_allocate()
45b606418bae usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe
159dada48ee2 usb: cdns3: fix use-after-free in cdns3_gadget_exit()
2c9e8d1527fe usb: typec: ucsi: displayport: Current CAM OOB index fixup
d4fef69d4171 usb: typec: ucsi: Get the connector fwnode based on reg value
de7b557b2584 usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41
ee8577de01c6 usb: typec: ucsi: glink: fix use-after-free of ucsi on remove
5414144e202a usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()
dac0c073c6ad usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()
a2b95607926d usb: typec: tipd: don't send GAID when probe fails in APP mode
d6b0cce61263 usb: typec: tcpm: recover after failure to start the frs ams
79ba37dd38a3 USB: dwc2: shut down wakeup timer before freeing HCD state
c50413ecb662 usb: core: clear both ep_in and ep_out for non-ep0 control endpoints
c0d23c4201bc usb: chipidea: tegra: disable runtime PM on resume failure
35ab269602e1 usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC
3070806a7bc7 USB: gadget: dummy-hcd: Fix wait for outstanding request completions
c81504dfd2d9 usb: gadget: aspeed-vhub: cancel wake work on device removal
f51cadb02b43 usb: dwc3: gadget: fix IRQ storm on invalid event buffer count
f80ec4a636af usb: dwc3: am62: Fix runtime PM usage count leak on probe error path
5a8809025c43 usb: typec: port-mapper: Only match USB4 port if host interface is available
cb6bf2c70780 usb: typec: anx7411 - stop the IRQ before destroying the workqueue
697cfe6e53b6 usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
223c3bd02a58 usb: gadget: midi2: Fix the jack descriptor array sizes
136bac9724d1 usb: ohci-st: disable controller wakeup on removal
0f4673de449f usb: ohci-spear: disable controller wakeup on removal
af9b5552c80d usb: ohci-s3c2410: disable controller wakeup on removal
523814cea1e3 usb: ohci-da8xx: disable controller wakeup on cleanup
0cb708e252b8 usb: octeon-hcd: fix the FIFO-flush timeout computation
d7c4a49b4158 usb: hub: use shorter 120ms post resume hold for SS root hubs
db9d3be156ba usb: storage: sierra_ms: reject short SWoC info transfers
e80ee74206f2 USB: serial: fix port tear down use-after-free
420ca35af891 USB: cdc-acm: skip URB restart in port_shutdown if disconnected
24e98de44d24 USB: cdc-acm: fix racy TIOCMIWAIT implementation
0b293e202bfd soc: qcom: geni-se: Correct QUP Core ICC vote constants
98dc9fababd1 rust_binder: cancel deferred work items in thread exit
43f78b328f39 nitro_enclaves: fix use-after-free on SLOT_ALLOC failure
984c35ee7085 Input: synaptics - limit T440p InterTouch quirk to LEN0036
2449f5c9c843 Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490
4cd725b0eaa0 Input: s6sy761 - fix resume ordering and restore sensing
5042665c52c9 Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410
35085bb734ea Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11
e491fc201d4f kgdboc: Fix tty driver reference leak in configure_kgdboc()
52332a61bf47 hrtimer: Use the mask to clear TIF_HRTIMER_REARM from the exit work
e826e849e00e clk: spacemit: k3: add CPU PLL rate tables
885bbbe52d31 binderfs: fix UAF write in binder_add_device
6673f4f21e2f binder: fix leaked fd fixups on TF_UPDATE_TXN supersede
1ab671b50714 binder: fix is_failure flag for superseded transaction cleanup
6b28918f2b28 drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU
abf854513bc1 drm/amdgpu: fix ACP MFD device leak on init failure
109e0005bd68 drm/amdgpu: drop userq callback assignment for sdma 7.1
13074da71ad8 drm/amdgpu: implement workaround for sdma dcc corruption
c05bbcc263d6 drm/amdgpu: fix IP instance memory leak on kobject add failure
cb3e0244514d drm/mediatek: Fix pdev reference leak in mtk_drm_bind()
8e3a350075b5 drm/mediatek: Fix ovl adaptor platform device leak
aeef8a8537bc drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
85d8c3c0ccc1 drm/radeon: Read the VRAM VBIOS signature with readb()
1c0506525565 drm/i915/vrr: Disable DC balance by default
67d68622668d drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub()
7a4e35a05469 drm/amdgpu/gmc12.1: properly pass flush_type to gmc_v12_1_flush_vm_hub()
4b70c6b34912 drm/amdgpu/gfx6: fix firmware leak on teardown
7f94a706aa47 drm/amd/pm/si: Fix updating clock limits on AC/DC
4e0482f7d9d6 drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC
2b383a50e8f6 drm/amd/display: Mark DCE 6.4 as not APU
8f8835094341 drm/amd/display: Fix stale replay_events after mod_power stream removal
32059834642c drm/amd/display: Fix fast updates on DCE 8.1
b8cbda33632d drm/amd/display: Fix fast updates on DCE 6.x
7283b78ca07c drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend
b1e1884a4563 drm/amd/display: Preserve eDP mode on initial ASSR failure
daa0437fe5e4 drm/amd/display: guard dc_sink dereferences in MST mode validation
f7451f59990c PCI: Accept AtomicOps already enabled by the hypervisor
94f41ec5fa57 bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()
5d5dc18b3a9a futex: Fix private hash use-after-free on resize
fbba0b7a4c9c drm/mediatek: Fix runtime PM leak in mtk_hdmi_ddc_v2_probe()
33d0a5d2fee0 bpf: Fix objects stuck in free_by_rcu_ttrace
b9818bd1a592 bpf: Factor out __do_call_rcu_ttrace()
b73c20cd7b87 spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260
ba6cd9f0b337 ALSA: ice1712: Fix the error handling via auto-cleanup at probe
f01cfe7e8174 ALSA: core: Define auto-cleanup for snd_card_free()
81e61e3f8bef perf: Fix race between perf_event_exit_task() and perf_pending_task()
cee25e14333b i2c: at91: release DMA channels when probe defers
4d6a628c671c net: mvneta: clear XDP pfmemalloc flag between frames
086e8acb3a0e ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()
63df0ef4c6e3 net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
b4d6ab56b27d net: sparx5: make ports inherit the switch base mac address type
796f49e74553 of: Put coreboot node after compatibility check
59cb923a82c3 net: microchip: vcap: stop scanning after deleting key field
a2cac45848d1 netfilter: flowtable: generalize pending status bit
58108f05b050 netfilter: bpf: reject invalid NAT manipulation types
45a93111835c ipvs: filter some flags received in the backup server
ea397f425be1 ipvs: do not create invisible templates
f9abe0a0befb ipvs: fix missing counter decrement in lblc
07188a3c2baf tcp: refresh TS.Recent for accepted old ACKs
2879b65bfa54 net: sparx5: skip ptp deinit if init was skipped
8b4a790ef9be net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values
17eafd74de5a net: ethernet: mtk_eth_soc: allocate dummy netdev sooner
f99de42f5c6f net: cap skb->queue_mapping when the tx queue is picked
d870102b5425 net: bcmgenet: fix NULL dereference in set_coalesce before first open
a616189d75c7 net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence
f583cfe64bd3 virtio_blk: set the zone write granularity
c60e775d235b ALSA: usb-audio: Apply boot quirk for Behringer models generically
e2f747071782 ALSA: usb-audio: Add boot quirk for Behringer CM1A
269a62e242b8 net/sched: sch_codel: match the no-drop threshold to the packet size
172dff7703d4 net/sched: fq_codel: match the no-drop threshold to the packet size
f91817a8d54a gve: DQO: accept TSO packets with non-protocol gso_type bits
967566ad325b bpf: Skip detached progs in trampoline images that are still in use
40955f6512a0 bpf: Wait for an RCU tasks grace period before freeing trampoline progs
a467b05b201b net: restrict SO_RESERVE_MEM to TCP sockets and cap max value
dce32bd7d887 net: ethtool: let tsconfig reach a PHY-only timestamp provider
e9141fdb7a2e seg6: ensure packet data is writable before modifying SRH and IPv6 DA
a7cff44543f6 net: stmmac: fix rx Scatter-Gather support
0b105f4eb78e net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()
60e0c2aeaa60 tipc: prevent GCM nonce reuse on peer key changes
2f21aaec8373 octeontx2-af: mcs: Fix SC resource cleanup loop
59fbbded05e5 octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled
8117cbc504cb net/mlx5: Fix slab-out-of-bounds when handling team device events
df8e7029aea6 net: systemport: Fix RUNT MIB counter register offset calculation
faba9fdde480 net: systemport: Fix buffer overflow in bcm_sysport_get_stats()
d01a52060063 drm/mediatek: mtk_hdmi_v2: fix VID_DOWNSAMPLE_CONFIG register offset
e8ba8c9c74d1 Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister
dd6c3da23d54 drm/xe/pf: Keep VF LMEM BAR size low if no VFs enabled
e7602a7c34ea drm/xe/pf: Refactor VF LMEM BAR resize helper function
6ec39ab6be54 ALSA: hda/realtek - Add headset mode for Dell Pro QC1255
63e7064b4c1c wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()
5ffc2f704d88 netfilter: ipset: do not update comments from kernel-side adds
0498e7abd956 ipv6: fix prefix route expiry in modify_prefix_route()
f4f634098593 net: bcmgenet: allocate RX buffers as page fragments
570141625d21 net/sched: cls_api: reclaim an empty proto on the error path
f37f42e6e039 net/mctp: publish the mctp_dev only after it is initialised
b506f5699e14 bpf: Hold map BTF for the memory allocator destructor record
351d1c47e45b nvme: fix command effects log lifetime for multipath heads
45d16ffbc9b6 nvme: work around -Wformat-security warning
98b09ad79344 nvme: fix cdev lifetime
3fc78337706a nvme: add nvme_get_ns_head()
9bc8fe8af379 ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer
443328237113 bpf: Fix overflow of jump offset in constant blinding
1107c7e29a0f drbd: remove unused drbd_nl_mcgrps[] array
1f90c62a2412 ASoC: SDCA: Add better pm_runtime error handling in func probe
1769d8924848 ASoC: SDCA: Set suspended flag after resuming within system suspend
48eb9ee6f52c arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz
46545c86b54f mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()
e26322e44c66 mm/slab: handle the !allow_spin case in kfree_rcu_sheaf()
f3617369fbb3 Bluetooth: btintel: validate DDC record lengths
423576458001 Bluetooth: hci_core: free the HCI ID if naming fails
2c47ebc27fa7 blk-mq: set RQF_USE_SCHED when the operation is known
dd33c03cefcc block: reject polled dio with user integrity metadata
64804ed8fad4 ASoC: codecs: rt274: Fix format setting for 44100 rate
9446cc221e09 ASoC: codecs: rt286: Revert delay value for jack setup
ad61b9a5febb wifi: mac80211: prevent AP VLAN tx from other interfaces
5f27581c176f wifi: cfg80211: preserve hidden-group beacon IE ownership
b1961a61ab6f wifi: mac80211: validate TX status rate metadata
8a03f8422fa0 rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()
55ca60ba3366 rtc: ac100: Fix clock provider use-after-free on probe failure
2838d7bbb551 rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak
e73a619f91b6 wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE
a3b0137c855a wifi: ath9k: reject short WMI command responses
5fde5e25f512 wifi: ath9k: Clean up device initialisation guards
c27779d3679c wifi: ath11k: reset ar->num_stations on hardware start
870b8cb9baa9 wifi: mac80211: drop oversized fragments to avoid extra_len overflow
f3405fe6e107 ASoC: tegra: Fix ASRC Stream6 input threshold control
7acb36fd60a3 wifi: wfx: validate MIB read length before copying to caller
ce05ab5fb6ec ASoC: wm8903: Move the DRC QR threshold to the register that holds it
4ec22c9b8c0f of/overlay: don't create "//" paths for fragments targeting the root
3a23fb158ba5 of/overlay: don't leak fragment references when changeset init fails
39b9f4149638 random: fix vgetrandom_opaque_params kernel-doc
9fcf4317384c blk-cgroup: save IRQ state in blkg_tryget_closest()
f4274a918bb5 nvmet: preserve device path on allocation failure
dc482a281a19 mtd: core: call _get_device() with the master MTD
cecf007418b9 mtd: core: avoid double-free of OTP NVMEM device
22d377178de2 iio: accel: kionix-kx022a: Fix array boundary check
43d294b02c88 iio: light: rohm-bu27034: Fix error return
3781cb06b787 iio: dac: rohm-bd79703: Do not allow writing SCALE
40554d1221e3 ext4: don't enable large folios on encrypted inodes
b78748424f29 ALSA: line6: reject oversized playback packets
1a0a0d881e04 ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270)
2e5a413cc2a4 ALSA: caiaq: unregister the input device when probe fails
e45e93538da1 wifi: wlcore: Fix runtime PM leak in wlcore_remove()
0ee53081425a vt: skip screen update for DEC alignment test on backgroup consoles
619c6d7dd76f vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()
9dfcadc5e003 vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF
ebf22e2ac2c8 mm: shmem: ignore sysfs configs for shmem forced collapse
a0375b5e51d0 mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc
35104391d566 mm/damon/core: don't skip damos_adjust_quota() while esz is not zero
8f42954ad8bf virt: vmgenid: set driver_data before registering notification handlers
88752b97fe69 virt: vmgenid: remap memory as decrypted
bfc721eef5c1 module: fix lost error code from codetag_load_module()
915be8668c60 netfs: zero the tail of a short DIO/unbuffered read
2a62fe628a87 netfs: zero gaps in read-gaps folio to avoid writing back stale data
a7036a73671f netfs: clear post-EOF pagecache when extending a file via write
f6599d8830fe tpm: Disable TPM on null key name mismatch
54fd86bb4926 time/jiffies: Saturate in mult_hz() instead of wrapping
e68ac524e938 sysctl: Negate before converting in the int read path
222c41e0f50f sctp: check RCV_SHUTDOWN after the sendmsg connect wait
cb6d6a7fbff0 rtc: spear: initialize IRQ state before requesting alarm IRQ
ad1bf77039cb rtc: ac100: Assign .num before accessing .hws
b36052c45707 random: vDSO: avoid call to memset() when zeroing reserved parameter
c5c096b13445 r8169: disable EEE on RTL8168h/8111h
2cee3603ec1d pfcp: fix socket lifetime on netdevice registration failure
9fd63d284e25 net/packet: prevent TX_RING byte count overflow
4cd378423a33 netfilter: nft_flow_offload: drop flowtable reference on init error path
65812d6a5aee net: phy: aquantia: fix system interface type not updated in forced mode
dd2b3e0a5f96 net: fix checksum offsets in skb_splice_from_iter()
cabacdf98e09 net: extend IPv6 exthdr detection of tunneled packets
c949646c900e net: gso: limit recursive IP-in-IP segmentation
c875407c34da of/overlay: only treat a positive changeset id as registered
5857035a3b53 of/overlay: put property on deadprops only after changeset add succeeds
239fa8196b51 of/irq: Fix remaining refcount leaks in of_irq_init()
b0825e3a5247 octeontx2-pf: Fix RSS indirection table size
526fac219e8b kprobes: Skip disarmed probes when checking optkprobe overlap
c59b210af84d kasan: unpoison task stack below watermark only in generic mode
16c83c047ecf ipvs: bound LBLCR and LBLC cache growth
395b25968fe8 io_uring: fix task_work add use-after-free with SQPOLL
5e508d304f2a io_uring/zcrx: requeue multishot receives stopped by a local resource
7cac9ee939e4 io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full
a0125ca86e40 HID: multitouch: stop the release timer from being rearmed on remove
f9f808227554 HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request
dd4a0d499363 fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()
fa392baf00e6 crypto: x86/aes-gcm - fix always true check for last AAD segment
f2cc5462b785 audit: fix exe mark UAF in kill_rules()
3b0860792282 ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices
0a6d9e67aeaf KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths
f7c862054609 Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table
ea219e93ca75 ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture
942192dbcd3a KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails
43457bf65500 sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task
fe499ae9da46 sched_ext: Don't run ops.dequeue() with a DSQ lock held
5f950cfce1ef sched_ext: Add a size argument to scx_bpf_cid_topo() so struct scx_cid_topo can grow
0e1a74369bdb sched_ext: Build the cid tables privately and publish them with RCU
08513d998581 sched/cache: Skip kernel threads for cache aware scheduling to rubustify the code
9436130e6da7 sched/cache: Introduce task_struct->sched_cache_grp to fix UAF
d3bb1bfc83f3 sched/cache: Honor migrate_llc_task semantics in active load balance, to fix LLC mis-scheduling bug
450d1d9e046d sched/cache: Keep nr_pref_llc_running in the runnable domain, to fix LLC mis-scheduling bug
6f7d978dc7cf sched/fair: Avoid creating misfits during cache-aware balancing
ce4fb8d3e21b selftests/cgroup: account for zswap shrinker writeback
d85a1f285151 drm/xe/i2c: Keep the i2c controller always enabled
104497032000 dm-pcache: bound the logical key offset from persistent memory
96e2863b1f81 dm-pcache: reject a kset that overruns its segment