ca927d28dad3 Linux 7.2.8-xanmod1
4d358e06b74e netfilter: xt_FLOWOFFLOAD: fix dev_fill_forward_path() API change
4cd011074ce8 x86/build/64: Fix kconfig recursive dependency
483b66795810 XANMOD: Makefile: Move x86 instruction set selection to kernel-wide build [v7.2.8+]
e03573b6d4cb x86/kconfig: more x86-64 ISA levels and uarches [v7.2.8+]
399c427c66aa Merge tag 'v7.2.8' into 7.2
a43577698c73 Revert "x86/kconfig: more x86-64 ISA levels and uarches"
a54d77bd1f5d Revert "XANMOD: Makefile: Move x86 instruction set selection to kernel-wide build"
9a66fdc0d7fd Linux 7.2.8
070cfdcabe8a ksmbd: fix partial normalized name responses
5612934c255a drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only
1169fe8c11ca drm/ttm: fix swapped-out resources never leaving their bulk_move range
6971a8a7acf1 ntsync: reject wait ioctls with zero owner
9a7b2bd59025 drm/amdgpu: Fix GPU PCIe link capability reporting
95eccb9be68d drm/amdgpu: reduce early full GPU access during SR-IOV init
085264d580bc scsi: fnic: Fix missed link-up when critical IRQ targets offline CPU
fb6b90807d59 scsi: fnic: Bump up version number
cb2781062c3c scsi: fnic: Make debug logging protocol independent
7e218f10253a fs: fix missed removal of super_fs_objects_eligible()
cb1848884445 fs/super: skip non-memcg-aware nr_cached_objects in memcg slab shrink
eac6917a4289 smb: client: fix missing iov bounds check in parse_posix_sids()
f03178db2c26 smb: client: fix missing lower-bound check on DFS referral string offsets
282b72f9a7ef smb: client: fix server->total_read for compound encrypted PDUs
8dc5db3a0e58 smb: client: fix reparse buffer bounds in cifs_query_reparse_point()
dbe452a905df smb: client: fix potential OOB read in smb3_enum_snapshots()
13efcd37a9b3 smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()
858d5ac22cb8 smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
3630dfc729b1 smb: client: fix fattr leaking on wsl_to_fattr() failure
13e43cf5e47e smb: client: fix unaligned access in WSL reparse point parser
b26a3fcf2f1c smb: client: fix smbd_connection leak on cifs_get_tcp_session() error
1e6be99a50e8 smb: client: reject short Next offsets in parse_server_interfaces()
ec36b38e6559 smb: client: fix use-after-free of iface in cifs_try_adding_channels()
c037d6bde3dd smb: client: fix rlist race and missing initialization
73df937d9cb9 smb/client: send lease break ACKs thru correct session for multiuser mounts
2e5103e11a17 smb: client: cancel reconnect work in clean_demultiplex_info()
6f5319bbaef2 drm/amdkfd: implement restore_mqd callbacks for GFX12/12.1
82e1b8299c6d drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc
287a34c4d712 drm/amdkfd: Avoid integer underflow in EOP ring size calculation.
157d3f1db7e7 drm/amdgpu: Skip KFD mapping clear before initialization
1b63348329e0 drm/amdgpu: hold a runtime PM reference for P2P dma-buf attachments
a645584c3ccc drm/amdgpu: fix rmmio iounmap skipped on device removal
e89900c441fe drm/sched: Fix virtual runtime race
713abac5c04c drm/msm: RCU-free the scheduler-containing ring and VM objects
ad4fd6cfac9d drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure
fd25668f96ff drm/msm/dpu: clear pending peripheral flush state
ebc273b45d58 drm/msm/adreno: fix autosuspend cleanup during teardown
1826bbee68f9 drm/gud: Ignore damage clips in full update mode
ea57100955c1 drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
46c223468537 wifi: mac80211: refuse to make a monitor active when it has no queue
3beddbd56946 wifi: mac80211: avoid out-of-bounds read for empty PREQ elements
c4ee5685af44 wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver
4832e202c6b6 wifi: mwifiex: validate action frame fixed fields
877b61a67d5e wifi: mwifiex: prevent authentication frame length truncation
7106ad8b74f5 wifi: mwifiex: validate scan response extents
46cda9d42f0d wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
d82492fd0a3f wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST
b0c906107150 wifi: p54: validate curve data length in the calibration curve converters
14dcf4c3d74c wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()
6fbe76eb2796 wifi: wilc1000: fix out-of-bounds read in P2P public action frames
a6bb6ad517a0 wifi: wlcore: release runtime PM ref on regdomain config failure
c0df0878e911 wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown
8dab6ee020b2 wifi: rsi: fix heap OOB write on key removal
bb7ae8910cc8 wifi: libipw: reject TKIP frames without a full MIC
04c837d413dc wifi: libertas_tf: fix UAF in lbtf_free_adapter()
a9176fe666af wifi: iwlegacy: fix broadcast stations deallocation
777cb6bba59e wifi: brcmsmac: fix UAF in brcms_free_timer()
fbc3b55175a1 watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start()
cbd298c2dcd5 watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init()
0dd78d9d9b54 watchdog: rzv2h: Avoid division by zero
8a12e049d517 watchdog: rtd119x: Avoid division by zero
68a7e322a56b watchdog: msc313e: Propagate error code in resume()
57ebb0cb6e6f watchdog: msc313e: Fix premature reset during timeout update
fae3b59f4b71 watchdog: digicolor: Avoid division by zero
1db134d0d2a5 watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog
89dda34123a7 hwmon: (cgbc-hwmon) Add missing sensors
1eaf83055f65 hwmon: (cgbc-hwmon) Fix current sensors ID lookup
62f6df2038ed hwmon: (w83793) release probe data through kref
583e04e88e75 hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
b48339b0a577 hwmon: (pwm-fan) Stop RPM timer before freeing tach data
b5e6f3477e4d hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676
36f9b74bd970 hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding
b49f100a15b8 hwmon: (pmbus/core) increase number of phases and add new mask
9c1e65bc79ff hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()
ed0406e490f4 Input: zero ff_effect before compat copy in input_ff_effect_from_user
942b06a19252 Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound
6614868f1a78 Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722)
12d80e635155 Input: soc_button_array - check btns_desc->package.count
74607b440aa3 Input: soc_button_array - fix MS Surface Pro 11 probe failure
9f0ce5e162ee Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()
e098a019e994 Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P
d012dc31f911 Input: hp_sdc - shut down kicker timer on module exit
3dfe48d5307a Input: evdev - zero absinfo before partial copy in EVIOCSABS
495955feb577 Input: cyttsp5 - clamp the HID report size before memcpy
f9be4db0281b Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026
ccd6b7003cd5 Input: adp5588-keys - cache GPIO state before registering the gpiochip
be402133d111 mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure
3aaeacf8e995 mmc: sdhci_am654: Clear ITAPDLY on tuning failure
4e5d765f4582 mmc: sdhci_am654: Reset command and data lines on failed tuning
d62d03755724 mmc: sdhci_am654: Move tuning_loop to local variable
3ae80c1fb7de mmc: spi: reset bytes_xfered before retrying CRC failures
22f2d28a92ee mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt
5e142adbbdc5 mmc: sdio_uart: fix xmit_fifo leak when the port table is full
356b4b3b28a8 mmc: sdhci-of-aspeed: Remove children before releasing SDC resources
4f2867a29d60 mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260
e2948c423220 mmc: mxcmmc: cancel data work and watchdog on remove
432b98c1f5da mmc: mmci: Fix use-after-free in busy-timeout work
45341b341642 mmc: hsq: Fix use-after-free in retry work
dac0895c2062 mmc: core: Fix OF node reference leak on card add failure
2a863458828a mmc: core: Cancel SDIO IRQ work before freeing host
efe21a5c5bfe power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
6e571aea60de power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()
ffa52ec238ea power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed
835133337c2c selinux: always fill AVC decision in avc_has_perm_noaudit()
c2bbb905af22 selinux: recheck intermediate backing files on mprotect()
ff20d16b2e82 selinux: preserve user SID across nested backing files
bafeac9ce5d1 IB/hfi1: Fix the PIO_CRED credit-return mmap
dab8b64fbd9a IB/hfi1: Resolve the credit-return buffer through the send context's node
ced1186fea7c IB/mlx4: Fix use-after-free on pkey sysfs registration failure
657ef16c6a3d i2c: imx: disable autosuspend on remove
f1cc745295bc i2c: imx: release DMA channels on probe error
d45306b574a2 i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove()
a57d95927145 i2c: atr: fix dangling adapter pointer on add failure
5a9d85a2f4ca i2c: at91: release DMA channels on remove and probe error
959c66dc4a91 sched_ext: Close the pre-enable ops error claim window
589f0945bf3e sched_ext: Fix NULL sched deref in kfunc sub-sched error paths
134825dfc971 KEYS: trusted: Fix tpm2_load_cmd() boundary check
60f381111937 keys: translate request_key_auth pid for the reading procfs instance
cca38f2102a4 KEYS: encrypted: fix integer overflow of datablob_len
77c0fade37c8 mm: filemap: retain mapped dropbehind folios
8fdc521d438f mm/vma: correctly unaccount on mmap_prepare() failure
469c12a69ab1 mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem
d9d3ed93d792 mm/mremap: account mm->locked_vm correctly for MREMAP_DONTUNMAP
5f3f71941c3a mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio()
244185c31b9a mm/huge_memory: bypass THP tuneables for huge pfnmap mappings
7c0d0d6de460 mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count
f222bb8c30cf memstick: ms_block: destroy io_queue workqueue on removal
ecc03877b1b0 memcg: avoid charging the root memcg from obj_cgroup_charge_pages()
3f017c2ca8c3 mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ
164313e24cb0 soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
537a5ae18b2b xfrm: save input state data before secpath resets
9b74a47a4cbd xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
84e378395494 xfrm: serialize state GC with device state flush
99a6e4a9176d scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()
a0ff05906ebc net/packet: avoid truncating TPACKET_V3 private size
693209a237fc net/packet: clear RX owner on VNET header error
f6547d27ce20 net/sched: hhf: cap hh_flows_limit at change time
57b477e46ef2 net/sched: act_api: release tail references on DELACTION failure
7e98216e9da0 net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value
829fec45122d net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain
d28aa2de9654 net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()
0ee66c62c4e9 net: phy: mediatek: do not report link and per-speed LED rules together
161a403c8625 net: lan743x: fix RX checksum use-after-free
0f6a6beb01c0 net: ip_tunnel: initialize `options_len` before referencing options
c21f3f7fbfed ipv6: xfrm: use full sockets in local error paths
c383815568b6 dma-buf: Split sgl by largest page-aligned chunk
6b98fd7106d4 dma-buf: Fix silent overflow for phys vec to sgt
a4db25b8949d dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3
5b2d92b7b177 dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()
e2c46d25c13b dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status
9eb91f821db9 dmaengine: sun6i: fix non-atomic read of DMA position registers
877bfe1b236d gpiolib: of: don't mark hog nodes OF_POPULATED before a chip is found
274c73769bc1 gpiolib: Put fwnode reference on failure
b1df2997d0cd btrfs: clear free space tree creation state on rebuild failure
5132f05d3c7b btrfs: derive f_fsid with dev_t only when temp_fsid is active
93dd8226e598 btrfs: fix creation of compressed inline extents that don't save space
c32490c6d3f3 btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()
aae553129ff7 Bluetooth: keep dst_type with dst when reusing an LE connection
1276c2fafd18 Bluetooth: hci_sync: Serialize local codec list cleanup
12a82819b0ca Bluetooth: hci_codec: validate vendor codec count length
2e4f594a2bae Bluetooth: eir: validate service data length before reading UUID
e34ec86ee024 Bluetooth: btusb: fix NXP IW610 composite device handling
843ace1d0a39 arm64: percpu: Fix LSE operations on {8,16}-bit types
39c1cfbe9b1e arm64: percpu: Fix this_cpu_and() mask generation
2f85540c561a arm64: percpu: Fix this_cpu_write() casting
cc32bef6f7fe arm64: dts: socfpga: change access permission from 755 to 644
e94f9c07ced3 arm64: dts: renesas: r8a779f0: Set UFS lane count
d3f8f773312a arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc
502130544a89 kselftest/arm64: Fix size of thread_data values for pthread_join()
206f396f4614 net: xfrm: reject unrepresentable espintcp transport headers
30335038d4e2 nfsd: fix handling of NFSEXP_PNFS in the netlink codepath
8c9fcc6c3395 openvswitch: avoid reallocating confirmed conntrack labels
117871cdb892 RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
83610ee5e498 RDMA/ucma: Serialize join and leave on copy_to_user failure
e06c431afd26 spi: virtio: Use the per-transfer bits per word
2c9baaf03e9d spi: spi-zynqmp-gqspi: stop the controller on shutdown
bf3e3ba6dd54 spi: fsl-qspi: Reprogram the clock rate when the operation frequency changes
96bb28b3f28f soundwire: dmi-quirks: Disable ghost Realtek on Asus GX651AX
0219b72f5c20 swiotlb: use the adjusted address for the highmem page lookup
8205ac5ddb42 tcp: exclude old ACKs from tcp fast path
00e0cb1c2916 x86/microcode/intel: Reject problematic loading on Granite Rapids systems
c961ce3ac142 x86/build/64: Prevent native builds from generating EGPR use
82a15e57ee02 drm/nouveau/gsp/r570: Enable S/R Display workaround in GSP
1e7f89e7c67c drm/nouveau/gsp/r570: Set GcOff = 0 in fbsr
b66bc6fc7799 drm/nouveau/gsp: Increase delay for magic sleep in r535_gsp_fini()
db87c5b8957a Revert "nouveau/gsp: fix suspend/resume regression on r570 firmware"
09f78e638768 rust: net: phy: fix off-by-one bit positions in device status accessors
934bd95f1a64 signal: Prevent exec() race
7d8c22cb2cb1 rds: ib: use rds_conn_drop() on protocol version mismatch
4336e3f47d9d posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
5895cebc8b20 phy: renesas: rcar-gen3-usb2: Avoid long delay in atomic context
848297e6121e PCI: imx6: Move clock enable after core reset assertion
185cd2f5fe1e fs/dax: check zero or empty entry before converting xarray entry
d602877baf36 exec: Cleanup POSIX timers right after de_thread()
7a1b27780b11 cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
cec7cfb57dc6 ata: libahci_platform: Fix device reference leak in ahci_platform_get_resources()
7912ad8fb523 ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY
828938118d6c cgroup: Avoid iteration of dying tasks with zero refcount
a318ee718e74 ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
f070cce7cb36 ALSA: virtio: reset device before deleting virtqueues
ab77e3f453c5 ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity
398b21608955 ALSA: core: Fix potential UAF after asynchronous card release
9cd92e3392bd 9p: Fix v9fs_issue_write() to update i_size and remote_i_size
e8c6f660f352 Input: xpad - fix PDP Marvel Xbox 360 controller
a3ce17bea1fe Input: xpad - add support for Azeron devices
f55d5503a739 Input: xpad - add support for Victrix Pro BFG Controller
797ca8906d42 watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog
feaffce0a440 hwmon: (hp-wmi-sensors) Improve raw WMI string handling
0758b77ed24e hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler
39236f046205 Input: eeti_ts - publish the OF module alias
00fe76665d88 x86/fred: Reconstruct the #GP context for rejected INT instructions
e4a442da49ff sched/core: Avoid false migration warning for proxy donors
7fa9a465ae8f perf: Fix null pointer access in is_include_guest_event()
cf8c95d79b54 btrfs: check if there is space for chunk item when validating sys chunk array
36c68dc90984 btrfs: abort transaction on failure to update inode for hole punching and reflinking
8fa32e7a2165 drm/amd/display: fix MALL hysteresis timer underflow at high refresh rates
315c22712715 drm/amdgpu: check ras and obj before dereference
12929ed66a51 net: skbuff: do not leave stale header offsets after pskb_carve()
1734c3fc0066 net: mvpp2: prevent buffer overflow in page_pool allocation
1fe8df0141e2 net: macb: fix ordering around PTP timestamp read
d8c6a18c0552 x86/kprobes: Fix crash when probing CS CALL instructions
c8c8c1886233 net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()
175683534383 net: stmmac: preserve real_num_tx_queues on mqprio setup failure
ff8c49b2760a net: prevent torn reads in netdev_tc_txq
c0ad9a0aa8eb net: stmmac: propagate FPE preemption-class mapping errors
d4bd67045439 net: ethernet: cortina: Ack RX overrun interrupt correctly
899650bbf985 net: lock the socket in sock_gettstamp()
28fb764d670a eth: fbnic: ring the doorbell if a burst ends in a drop
c87c82e40824 net: netsec: fix device_node reference leak on phy_np
d8eb177632da net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check
3c33b7feadd4 net: pass net_device_path_ctx to dev_fill_forward_path()
b6a0451b0968 net: pass dst via net_device_path in dev_fill_forward_path()
17f528ffa754 net: do not advance stack index from dev_fwd_path()
bacd72289d34 net/sched: codel: bound the dropping loop per dequeue call
70561730726b ASoC: amd: acp: fix ffs() operator precedence for SoundWire link ID
255c391c7135 ASoC: amd: acp: refactor codec config count in SOF SoundWire machine driver
83ce3fb63171 ASoC: sdw_utils: tidyup asoc_sdw_parse_sdw_endpoints()
b34214b6c962 ASoC: sdw_utils: tidyup .count_sidecar
0bd12e2ab205 ASoC: amd: acp: bounds-check SoundWire link ID in machine drivers
03588d05a105 ASoC: cs-amp-lib: Prevent NULL pointer if efi variable is zero length
165ab330321f ASoC: hdmi-codec: Report a change when the channel status moves
d9803c64bb1b ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments
efa5780b84f0 btrfs: handle lack of space when cleaning up verity items
571ccbc801aa drm/xe/i2c: Disable IRQ on unbind
eecbafa8cabb futex: Also allocate private hash on vfork()
41ed0080181c Revert "drm/i915/display: Clear SEL_FETCH_PLANE_CTL on plane disable"
314091243159 powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
fcbff8008b0e KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure
ec2d7a52b399 KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
22f313e211d5 netlink: do not free nlk->groups while lockless readers can use it
ed3ea86db736 net: bridge: vlan: fix bugs caused by switchdev deletion errors
d09c51ce28e4 net: stmmac: do not overwrite phc_index when no PTP clock is registered
03b672eba493 drop_monitor: fix out-of-bounds write in reset_per_cpu_data()
f4a621946395 drop_monitor: use raw_cpu_ptr() in tracepoint probes
bda4d9525fb9 drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown
d0d6d65637e1 drop_monitor: synchronize tracepoint unregistration on error path
30992fe39e65 pppoatm: ensure a writable skb header and linear data
bcf6013c2b4d net: stmmac: fix TSO header length truncation
be550ee108ad af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().
18174b166547 Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup
de4c3c72bcc6 Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit
9f74bc9e17a2 Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown
5a5cfd8488c9 Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access
805f2ca09d62 Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events
502c1024f1bc Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync
f016daabd4fe Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()
15754e4ec47a Bluetooth: hci_qca: Do not write to the serial port after it is closed
a552b4bc058b Bluetooth: put the peer's on-air address on air when we cannot resolve
82699d1b727b Bluetooth: coredump: Quiesce dump work on unregister
c298a61e1802 Bluetooth: btintel_pcie: validate TX skb length in send_sync
cbb325bc150e Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained
54ccc01012a2 dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()
ea06930907de ksmbd: keep compound responses on query info errors
054a35a90c07 ksmbd: fix partial file information responses
fd8bc313b9eb ksmbd: return buffer overflow for partial filesystem info
1c4bb940c3bb tcp: do not let tcp_rmem be set below 4096
56d38839ef0b tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().
c40ed3e884c8 net: bridge: mst: move switchdev call outside rcu
c5f73cde72f4 wifi: brcmfmac: fix lost 802.1x TX completion wakeup
438131e7ae84 net: fddi: skfp: fix NULL deref when setting the MAC address while down
fda3000147dc ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup
1c23dba51dbf sysctl: Check range in proc_dointvec_ms_jiffies_minmax
906140955c8d net: bcmgenet: restore the hardware filters on open
97df811a11d4 net: dsa: mxl862xx: disable the stats poll on teardown
8c16e1ccc082 seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation
c59e4a90780f drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL
0382d1384640 btrfs: tree-checker: print dev extent offset in error message
be1d5e95ec49 wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()
3db8afba2d21 ALSA: hda: trace PCM open only after assigning a stream
7f9780df6773 drm/vc4: Use managed KMS polling to fix UAF on unbind
b7f4d2588b13 drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory
bff42b0d1d90 drm/xe/shrinker: Return the freed page count through a parameter
a6b8b3ce9b48 drm/xe/mmio_gem: Revoke drm_vma_node on xe_mmio_gem destroy
ec99748122b2 drm/xe/mmio_gem: use write-back mapping for dummy page
b5849031cfae drm/xe/mmio_gem: forbid VMA split
b808a9af5fd2 wifi: virt_wifi: don't transfer operstate before register
c99ea7855124 ksmbd: follow SMB2 session expiration semantics
e8d3bc459112 ksmbd: extend procfs server statistics
f0d3dba61b36 ksmbd: fix malformed procfs status output
cdc31537012b ALSA: 6fire: fix OOB write from device-reported iso length
d181434549b3 ALSA: usb: 6fire: Avoid embedded URBs
00a316a7a36f gpio: virtuser: skip free_irq when no IRQ is installed
c692919e8f57 objtool: Validate disassembler headers in libopcodes probe
d75f640789ad Input: trackpoint - fix the inertia attribute name in the ABI document
022f1cb8f4ee spi: spi-qpic-snand: avoid writing QPIC_EBI2_ECC_BUF_CFG register
65e766848773 ASoC: soc-pcm: Apply snd_soc_dai_link_ch_map.codec_ch_mask to codec params
2df594738686 ASoC: Add codec_ch_mask to snd_soc_dai_link_ch_map
2997440f36a1 ASoC: Rename snd_soc_dai_link_ch_map.ch_mask to cpu_ch_mask
4483604a4fd6 drm/msm/dp: fix link bandwidth check when wide bus is enabled
5e97d117b79c drm/msm/dp: skip PUSH_IDLE when the link was never enabled
0b349249d572 ALSA: pcm: set timer->private_data before registering the PCM timer
117d19438af5 phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting
f2d482c6ae17 phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow
c4b0f48ddf7b ntfs: ignore interrupted inode reads as corruption
6137d60a03df ntfs: propagate folio errors
742797432e8c ntfs: protect runlist updates with the runlist lock
47aa2ab6391d ntfs: account for MFT records added during allocation
eaa27b088540 ntfs: repack $MFT/$ATTRIBUTE LIST
fa4cca0a9804 ntfs: use dynamic MFT tail reservation
9c8b6eff6e75 ALSA: bcd2000: Fix race between rawmidi and disconnect
a265524cdd6b neighbour: Skip default parms when resumed in neightbl_dump_info().
001f9b3df58c neighbour: Don't render blackhole_netdev via RTM_GETNEIGHTBL.
8550b50e49b0 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.
043cb1f7e0ce neighbour: Add missing RCU annotation for neightbl_dump_info().
44cf11a29719 keys: fix lost wakeup when reaping a dead key type
6913ff607c2b smb: client: validate absolute native symlink targets before NT fixups
b9a68a9ccaad drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr
62a9d7fc1c7f arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation
100887892b1d arm64: hibernate: clone only the linear map that exists at runtime
4e31aa6cf1d6 perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations
d9e6175a3ee4 netfilter: flowtable: hold reference on ct until flow is released
df80342f4bfc netfilter: nf_nat: unregister and release hooks on error
c8cd6d3463e5 netfilter: nf_tables: fix device name and prefix match in hook lookup
1c43f5db482f netfilter: nft_nat: fully initialise new_addr in netmap setup
bd6f234e7016 drm/msm/adreno: Fix the skip_gpu parameter description
cebb1748c3df drm/msm: Fix the separate_gpu_kms parameter description
fd7be7e8b34f x86/div64: Fix addition of large constants in mul_u64_add_u64_div_u64()
e6bdfdf3bcb0 RDMA/siw: Bound fragmented header copies by the remaining length
9ecd3dcbdf1f RDMA/efa: Keep EQ resources alive while IRQ is registered
cf5520d1c931 RDMA/efa: Keep admin queues alive while IRQ is registered
bd4f8c894634 dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA
1de93785f32b dmaengine: pxa: fix double counting of the hw descriptors
e71fc80d7d38 dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order
43b3e8fc153b scsi: qla2xxx: Fix the ql2xfc2target parameter description
ae75153f0a9f scsi: pm80xx: Fix the use_msix, use_tasklet and read_wwn parameter descriptions
db1ca0ffc56b mm: memblock: show all region flags in debugfs
03d67414bd05 wifi: mac80211: set up the TX info early to fix failure paths
4a4e3fa77ea3 wifi: mac80211: mesh: release the channel if start fails
ba5bf83a81e8 wifi: mac80211: mesh: reset the CSA state when leaving
9d83c08dcce8 wifi: mac80211: add HE 6 GHz capability in the scan elems len
c68c947e3489 wifi: mac80211: don't access the TSF of a down interface
15c408bae4f1 wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set
1cf42768fa08 wifi: mac80211: don't allow link changes when iface is down
1c0a5c96473b wifi: mac80211: require a peer station for TDLS setup confirm
875835377d8d wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown
c69718519a81 wifi: mac80211: don't allow injecting frames wider than the chanctx
d7fa45d8123a wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
b949b2720688 wifi: cfg80211: get the wiphy out of a dying network namespace
821bab0456df wifi: mac80211: unlist vifs when their netdev is unregistered
739b7bf3942d wifi: cfg80211: undo netns switch if renaming the wiphy fails
e6660383ebf5 wifi: cfg80211: restore netns_immutable on failures
0cd452ccaa5c wifi: mac80211: only operate on TDLS peers in the TDLS code
de6f9561db57 wifi: mac80211: reset the LED state when ifup fails
6eac225f59c1 wifi: mac80211: reset state when starting AP fails
d222fdc973bb wifi: mac80211: abort chanswitch when leaving a mesh
7aca529c0d8d wifi: mac80211: suppress chanctx warning for debugfs reset
ea3ef2165e47 wifi: mac80211: don't offload TC setup on AP_VLAN interfaces
23d51c0bc18f wifi: mac80211: don't warn when an IBSS has no channel to scan
58b806f69905 wifi: mac80211: don't start a ROC while scanning
9580c87b0210 wifi: cfg80211: fix NAN regulatory enforcement
b0e3f019e461 wifi: cfg80211: ibss: ref BSS entry for joined event
0aa44982125c wifi: cfg80211: don't filter by BSS type when removing stale entries
332ea1502c46 wifi: cfg80211: only group hidden BSSes with beacon entries
cf6da29d1799 wifi: cfg80211: don't free driver-owned scan requests
4aed7e47a10b dmaengine: wait for RCU readers before releasing dma_device
02bd02c58529 dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()
77906ac448d2 dmaengine: Fix device kref underflow in dma_chan_put()
b49a8488a46c dma-mapping: don't trace the DMA address when the allocation fails
d50277d6c193 dma-coherent: report a failed reserved memory assignment
5a6ecf5e2e52 MIPS: Octeon: apply USB FDT fixups also when USB is modular
1632b98df417 mips: econet: fix unmet dependencies for ECONET
d6dd59a15809 soundwire: cadence_master: wait and cancel cdns->work before clock stop
65893c8d28f2 wifi: cfg80211: check IP header size in cfg80211_classify8021d()
7166da84a7fe wifi: cfg80211: don't get the radio mask for netdev-less wdevs
1ff3add37c32 IB/IPoIB: Avoid restoring OPER_UP after multicast flush
af1b69be19c3 wifi: libipw: reject too-short association responses
19959fb60228 wifi: libipw: reject too-short beacon and probe responses
6fba6233e9ca wifi: brcmfmac: cyw: pass PMKID to firmware if present
03d5e4776e8b wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
46371442847a wifi: virt_wifi: free skb when disconnected
9f04f9b14416 wifi: mac80211: include TIM bitmap control for buffered S1G mcast traffic
bea1739bf3e9 dmaengine: sprd: Fix runtime PM reference leak in probe
b82dfc06d324 dmaengine: mmp_pdma: fix wrong extended DRCMR base for SpacemiT K3
bf88ac486705 RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted
6ff94b263d17 RDMA/irdma: Enforce local fence for IB_WR_REG_MR
74d4085221a7 RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables
c0d8df85db14 RDMA/mad: Fix receive buffer leak when PKey enforcement fails
9149e05699f7 RDMA/uverbs: Fix potential leak of resources->collection in flow_resources_alloc()
dab479a77b65 RDMA/bnxt_re: Avoid exposing umdbr to userspace
f79cf42ff23f RDMA/rtrs: guard against null kobj name
727bbda37d97 RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup
7908fbc597a6 IB/isert: wait for deferred control PDU completions before releasing the connection
ceecf3f9c322 IB/iser: reject a remote invalidation of an unregistered direction
92711389ceed arm64: dts: renesas: r9a09g087: Switch GBETH TX queue scheduling to WRR
853306d94812 arm64: dts: renesas: r9a09g077: Switch GBETH TX queue scheduling to WRR
287437678a70 arm64: dts: renesas: r9a09g047: Switch GBETH TX queue scheduling to WRR
f2042a2bb43b arm64: dts: renesas: r9a09g056: Switch GBETH TX queue scheduling to WRR
c674261743ee arm64: dts: renesas: r9a09g057: Switch GBETH TX queue scheduling to WRR
173a9164d901 power: sequencing: Fix build issue with COMPILE_TEST
426f54f20b79 RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency
5bd42f74ec3b RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
f121721dc631 RDMA/mlx5: Remove warn on missing representor in query_port_speed
d4fc4e37f8a1 RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds
2d6c6f94d3e1 RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths
3988cd49adc3 clk: scpi: register scpi-cpufreq once and clear on failure
108c46e8dacc clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate
cc563a59aded firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS
8d85d6bc9c46 xfrm: hold net_device reference under RCU in bundle creation
3431f525718f RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access
4dd7a53f1c5b RDMA/rxe: validate access flags before swapping the MR's PD
bfdc744bf20a RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept
e4f0d2f6bdc7 ARM: socfpga: select the PL310 erratum 753970 workaround
3b298e27c3da arm64: dts: amlogic: t7: fix the pin groups of the vsync PWM
08194b1c7dfd arm64: dts: amlogic: t7: khadas-vim4: add the PWM-driven supplies
6a458c1d6e2e arm64: dts: amlogic: t7: fix the pin groups of two PWM outputs
40332d03f6c6 arm64: dts: amlogic: t7: khadas-vim4: allow the SD card to be power cycled
d8724cb6a2d1 arm64: dts: amlogic: t7: use the real UART pclk
0d0845ee61c5 esp: downgrade zerocopy managed frags before mutating skb frags
664fc0941df7 xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()
e70f639aee2f xfrm: fix compat ALLOCSPI request use-after-free
5b8afb56ccb7 xfrm: iptfs: fix runt reassembly panic from short inner tot_len
5b31ed6c0941 xfrm: add missing RCU read lock in xfrm_send_migrate_state()
da56d0ee93d1 xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()
c43da1dd08cd sunvdc: fix -EIO issue due to lack of retries
162059472038 selftests/landlock: Add audit test for whiteout object creation
7c233eabb89f selftests/landlock: Add tests for whiteout object creation
bb45f6d4b890 selftests/landlock: Use an actual chardev for MAKE_CHAR audit test