98ed74f6f890 Linux 7.3.4-xanmod1
38d72a3b07ec mm: Add working set protection for anon and clean file pages [v7.3.4+]
84c2e20fff38 Merge tag 'v7.3.4' into 7.3
b911362a187c Revert "mm: Add working set protection for anon and clean file pages"
7595a62d45ee Linux 7.3.4
e7ba61734d6a xen-netback: Zero out sring pointers on unmap
07aca7d25ce8 xen-netback: Fix XenBus connection failure cleanup
5de6a41199e2 x86/bugs: Mitigate TSA on AMD Zen5
768e47c0b7b7 apparmor: on failed load ensure profile files are removed before parent
95aa24bcb760 apparmor: fix uninitialized variable warning in aa_inherit_files
91eecb7d1cd3 ocfs2: read the xattr entry hash before defragmenting the bucket
8086088f2138 init/bootconfig: pass init arguments in documented order
269fee7c58a1 fs: don't fail __d_obtain_alias() for unlinked inodes
e0efb02fd551 ns: don't add init_ipc_ns and init_net without namespace support
0cb46288f23b fs: skip copy_file_range write limits when there is no data
cee09adbabd1 fs: let backing files inherit FMODE_NONOTIFY from the user file
9802608232a6 splice: avoid stale f_pos writeback on error
501ed625cdd2 backing-file: always end a queued write
5c38de5f536e iov_iter: fix NULL deref in iov_iter_alignment()
6e68116a8559 backing-file: enforce append-only and immutable backing inodes
e1f58c0f5b89 aio: fix NULL deref when a fault races ring truncation
9af2f7e0994a arm64/gcs: release GCS on failed fork
2390625ee60e apparmor: fix profile leak when a policy load fails
1ef534f49b19 apparmor: remove fs entries created by a failed policy load
64d601ac1887 apparmor: fix query_data() output overlapping the lookup key
7653d28a1b7d tcp: fix reordering addition overflow in MTU probing
a7b2e3bac0e1 net/packet: check TX_RING fragments before memory accounting
92ab39831d69 apparmor: check accept index + 1 is in bounds
8d41718618ed apparmor: avoid potential double free when remapping DFA tables
dabd6ac70aca apparmor: fix refcount leak in aa_get_newest_profile()
830ff89b391e pidfs: don't let PIDFD_GET_INFO miss a reaped task
5ceae3d2c5e4 nstree: don't end listns() at an inactive namespace
2dea9ba94bc2 tcp: check congestion control restriction first
aece5f74f1e4 proc: don't let an entry below /proc/<pid>/net be a mountpoint
4c24ed7a2653 blk-iocost: abort weight transfer on invalid donation weights
a0da1ee51f1d userns: don't drop the exec securebits
06ec699318fe mount: refuse setns() with a shared fs_struct again
3ace65e1001e iomap: keep large chunks from defeating the bio cap
526d31b2b579 iomap: don't mark unwritten parts of a folio uptodate
84c85fd001b8 tg3: Invert restart quirk logic to restrict SNP power-down bypass
82117f3e6680 r8152: Use BMSR to detect the link state
43aba2eeaa34 apparmor: don't revalidate inherited files under files->file_lock
0968d98e7235 apparmor: fix NULL ctx->peer derefs in unix socket ctx updates
a9e814560674 Revert "net: advertise TCP MSS from the configured MTU, not the learned PMTU"
13ee3f157a46 irqchip/irq-msi-lib: Free wired MSI descriptors
8c754fe99714 irqchip/riscv-imsic: Report successful hardware retrigger
5f0436428b87 fsverity: Tell LSMs about signature only after verity is enabled
1ea9efcbeb49 fsverity: Be more careful with return value of ->get_verity_descriptor()
c4b9b5e0cac4 fsverity: Explicitly require FMODE_READ to retrieve hashes
3da6acf8387e kgdb: Fix buffer overflow in the qRcmd packet handler
73649d488e6e kgdb: Fix buffer overflow in the 'M' and 'X' packet handlers
61485a6e004e kgdb: Fix buffer overflow in the 'm' packet handler
d8dfde4f7a7b nvme-tcp: validate the TLS handshake timeout
4e24e3f24923 nvmet-tcp: validate the TLS handshake timeout
21a812abcc98 nvmet: Free the old negotiation state when restarting authentication
c0b4e770ec74 nvmet: Finish the blk plug when integrity allocation fails
6aba58adb5ff nvme-tcp: fix io_work priority inversion when send_mutex is held
9998d585bd09 nvme-tcp: start error recovery when read_sock fails
142aff2ead90 nvmet-fc: Tear down the association when the admin queue allocation fails
9713fd7ca452 nvmet-auth: fix error handling on CHALLENGE failure
ca67ea4f8356 nvmet: pci-epf: require SGLs to match the command data length
9274d3aa39dd nvmet: pci-epf: report transport errors in command completions
c32b169fb13c nvmet-fc: only send read data for successful commands
6ce60c9226ca nvmet-rdma: fix out-of-bounds write in nvmet_rdma_map_sgl_inline()
c17d443d1e98 nvmet-rdma: reject short connection requests
87d9db801d7a ppp: fix stale pointer access after pskb_may_pull in ppp_ccp_peek
191db8421453 inet: frags: prevent acceptance of partially authenticated reassembly
1bd329d8486f ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe
3fe9fe9e3580 soc: loongson: loongson2_pm: Fix build warnings for 32BIT
77edec56cd5c ntfs3: fix mapping pairs bounds check for alignment
81e354bc1e55 fs/ntfs3: bound DeleteAttribute asize against rec->used in do_action
119ab8d9dd61 fs/ntfs3: bound CreateAttribute asize against record_size in do_action
a89cd92f8a52 net: hisilicon: hisi_femac: Stop the receiver before releasing the RX ring
62f5a53cc643 macvlan: fix passthru promiscuity accounting while down
e9e219cc9f54 net: limit priority VLAN untag depth
d014a7a61d19 drm/amd/display: Poll passive DVI sinks for EDID readiness
e566ee7fd40a drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO
c82c35882df4 drm/amdgpu: drop the gang leader reference when freeing gang jobs
b1be57298de6 drm/amdkfd: send SMI process and VM fault events only to allowed clients
437fa225f646 drm/amdkfd: validate SRAT subtables before parsing
77b5960eed8a drm/amd/pm: preserve committed OD features for SMU 14.0.2
e4cd2648bd4b drm/amd/pm: preserve committed OD features for SMU 13.0.0/13.0.7
761f2c927c36 drm/amd/display: Initialize missing TD-LUT programming inputs
72360c3c34ef drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping
d2de9c385d5e drm/amdgpu: reject CS chunks too large for kvmalloc()
bdea56cbdfd9 drm/amd/display: take a runtime PM reference only when a CRTC turns on
4a7b3618f6b9 drm/amdgpu: guard VCE/UVD sched entity teardown on failed probe
3ffe956b3923 drm/amdkfd: stop restore retries on device unplug
6a0eed6acab0 drm/amdkfd: tear down KFD processes before early fini_sw on disconnect
9cfce679d88f drm/amdkfd: Validate the control stack of a restored queue
7035fc8f561e perf machine: Fix NULL deref in thread__resolve_callchain_sample()
6c4f82c4fb95 clocksource: Prevent immediate watchdog rerun after a delay
2465a3c31b39 arm64/mm: restrict transparent contpte mappings to valid PTEs
c93782c73786 cpufreq: stats: Fix potential out-of-bounds access in deferred reset
b1b6de9a02f8 LoongArch: Fix one-shot limitation for perf hardware breakpoints
27021f37ea72 LoongArch: Fix perf hardware breakpoint failure via installation
ab0fb9ea282f LoongArch: Only send SIGTRAP signal if necessary in do_watch()
b2561dc6c550 LoongArch: Fix architectural naming typo for CSR_FWPS_SKIP
5f80062adefd LoongArch: Fix bitmask corruption in update_bp_registers()
f7f597c501cd LoongArch: Remove redundant call in update_bp_registers()
0b131557b0e3 LoongArch: Remove arch-specific __smp_mb__{before,after}_atomic()
bca3689dd637 LoongArch: Use pa_to_nid()/nid_to_addrbase() rather than hard-code
fc880e991481 LoongArch: Don't init & online empty nodes
5e21c66b352f LoongArch: Call cpu_final_simd() with pure_initcall()
0c17a5ac6486 ASoC: hdac_hda: Balance the runtime PM disable in codec remove
185c817447fe ixgbe: reserve TX timestamp after skb preparation
be351c87b120 ALSA: hda: Reject codec reset on ASoC (ext_ops) buses
2a66353afb99 ALSA: ua101: Bound packet copies by the PCM buffer size
22247f502468 ALSA: usb-audio: Bound packet copies by the PCM buffer size
6fe40c314fa0 loop: check for read-write open mode on LOOP_SET_STATUS in lo_compat_ioctl()
47195a2c27d5 xsk: restore UMEM flags after failed pool assignment
9e4f9ce581b7 tcp: limit tcp_tso_rtt_log to a valid shift count
dc22f1e25852 dt-bindings: clock: ma35d1: Document the missing crystal inputs
dd74203cbafa ipmr: drop packets with unknown ingress VIF
1f6cb0614d17 ipmr, ip6mr: validate packets injected into the register vif on xmit
17463fef04b1 ipmr: fully initialize the synthetic IP header in ipmr_get_route()
46f1631f9ccb bonding: fix out-of-bounds read of arp_ip_target
c160b4490d5e net: usb: pegasus: check rx pkt_len against the received length
b63b117492e8 ASoC: SDCA: drop pm_runtime reference on probe failure path
523e71cccfd8 ASoC: SDCA: propagate sdw_slave_read_prop() failure in class_read_prop
584e73776b19 ASoC: codecs: wsa883x: Accept temperatures across the full trim range
40826ebf8e12 ASoC: codecs: wsa884x: Accept temperatures across the full trim range
1465af8fcc7c ASoC: qcom: audioreach: fix module cfg blob size handling
a2c410365bcf ASoC: qcom: q6apm: Unmap DSP buffers before removing the topology
a99feace2d2f ASoC: qcom: q6apm: Clear the right handle on pos buffer unmap
e564eef02b69 ASoC: qcom: q6apm: Fix unmap regions response handling
4322459cc7a1 ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch
2018dbba8a5c f2fs: fix to update superblock crc in sanity_check_area_boundary()
d2f96029c08a ceph: fix uninitialized err in ceph_netfs_issue_read()
4348550560ec ceph: validate encoded xattr name lengths
1ae16bb199d5 ceph: validate MDS reply fragtree split array length
bd04d73a0d6e ceph: bound name skips in ceph_mdsmap_decode() by the message end
87cba8ebbaa7 ceph: validate fscrypt auth blob length
9c0852f3cb02 ceph: don't fail write_begin with -EAGAIN after flushing old snapc
6eaba9183c35 ceph: clamp MDS reply result code to the errno range
458e9e293016 libceph: initialize CRUSH choose argument weights
3ac5e7f512ef libceph: fix out-of-bounds reads from repeated CRUSH bucket entries
b898407535b1 ceph: fix 32-bit overflow in readdir reply count check
68db0112f366 ceph: Fix mds session leak in __open_export_target_session()
dabe2280fa8d ceph: Fix xattr buffer leak in __send_cap()
25ae51760b75 ceph: fix integer overflow in the snap trace bounds check
0c0dfc2b238c libceph: reject an initial monmap with no monitors
cab954c67668 libceph: reject mismatched CRUSH weight-set sizes
dd7efad37e5e libceph: Fix multiple unsafe decodes in ceph_oloc_decode()
762860805a14 libceph: Fix unsafe decode in ceph_redirect_decode()
f7e0d6d3de29 libceph: only set read_from_replica on read requests
058e1c38722a ceph: require the dentry lease record to cover struct ceph_mds_reply_lease
0574e4aff8e4 ceph: reject mdsmaps that claim more than CEPH_MAX_MDS ranks
0e1bc95bdda8 ceph: fix out-of-bounds read in ceph_netfs_issue_op_inline()
0c162c18a774 ceph: fix longname buffer overflow in ceph_fname_to_usr()
740fdcbc94f8 ceph: avoid pending truncate during nonblocking cap acquire
e69875c7ec22 KVM: arm64: Sanitise ID_AA64MMFR3_EL1.S1P[IO]E
4e4a3ec623ad tracing/remotes: Fix TRACE_REMOTE build when TRACING=n
9dde819b182c KVM: arm64: Set HCR_EL2.BSU to Inner Shareable for guests
6da98212658b tick/nohz: Reevaluate the tick for kicks flushed outside hardirq
fbfee2e29499 posix-timers: Report zero remaining time for disarmed SIGEV_NONE timers
6d1d9b7ec6d0 time/namespace: Fix overflow when converting absolute deadlines
d60dc9a450cb timers/itimer: Keep a nonzero value at CPU timer expiry
654aea6cb1f7 posix-timers: Accept NULL clock_getres() output in stubs
6d5225432209 erofs: hold real inodes for shared files
ebb6525ee7df fbdev: atmel_lcdfb: fix list_first_entry() on possibly empty modelist in probe
cb98da5dff7b ext4: reject encrypted inodes when block size > page size
1541e7eb656d ext4: refuse encryption when block size > page size
e9520ef59b30 fscrypt: Fix missing barrier in fscrypt_find_mode_key()
27afd2719525 mm: multi-gen LRU: fix NULL lruvec->pgdat deref with memcg disabled on cmdline
682104ab8ef8 mm/vma: avoid broken uffd merge on mremap
d1078b473e55 riscv: mm: exclude invalid THP PMDs from page table check
f87e72ed8ab1 mm/damon/core: filter out damos address filter-split failed region
b2f3840012e1 mm/mempolicy: apply bind policies against the scoped allocation zone
dcd875496a32 mm/vmscan: reclaim every zone in per-node proactive reclaim
22464b99348b mm/mremap: correctly uncharge accountable VMAs in error path
b6d9bee0f6b9 mm/mremap: populate calculated fields in vrm state correctly
d067e7b3728c mm/page_vma_mapped: continue past nonmatching huge PMDs
f899e3c62666 mm/truncate: fix the zeroing end of pagecache_isize_extended()
41e679a7e719 mm/page_alloc: count guard pages as free again when their buddy merges
5368a82b7c4d mm/swap: fix swap_cache_get_folio() returning a folio that left the swap cache
8d2d328892cd mm: vmscan: don't count per-node proactive reclaim as memory pressure
37be8c5c4c18 ipc/shm: fix RSS accounting for hugetlb shared memory
5a4d557c0204 mm/madvise: atomically clear the young bit on THP MADV_COLD
64e9e983605f mm/percpu: account full object size for percpu memory allocations
285b62e0b489 userfaultfd: fix UFFDIO_MOVE livelock on large folio with extra references
b0f3684537dd mm/mlock: use a long for the page count in mlock_fixup()
8ef19c9bdc29 mm: page_alloc: make defrag_mode retries follow the promoted order
6a63aa1580ce mm/madvise: add cond_resched() in THP branch of madvise_cold_or_pageout_pte_range()
90f2f099e69b mm/memfd: fix hugetlb reservation accounting in error paths
2e88c42d7d3e mm: disallow ioremap'ing ordinary RAM in generic_access_phys()
f5db3a1025c5 mm/damon/core: prevent size quota overflow in the temporal goal tuner
23b6d1098a22 mm/damon/core: preserve the quota passed to damon_new_scheme()
85bea4ef3915 mm/memcg: migrate per-node hugetlb lruvec stat together with hugetlb folio
576134c74c96 mm/hugetlb: account migration target folio in per-node NR_HUGETLB vmstat
f240a59a02f7 mm/mremap: fix calling fixup_hugetlb_reservations() on the wrong VMA
3269ad108e9f mm/hugetlb: don't leave a uffd-wp marker when zapping an RWP entry
cb0565e375d2 mm/hugetlb: tolerate UFFD_WP markers outside uffd-wp VMAs
49e58b223494 mm/hugetlb: tolerate uffd bits set without uffd for PROT_NONE PTEs
746a3094ec2a mm/hugetlb: fix endless write fault on a leftover uffd bit
090e028cd37a mm/hugetlb: don't clear the resv_map of a VMA whose lock is held
681592e5d7de mm/hugetlb: unmap the page where the other VMA maps it
ff9df387ea19 mm/vma: don't leak the commit charge on mmap failure
b0aa8efbcaa8 ocfs2/cluster: remove zero-address nodes from IP tree on teardown
65312c458b2d ocfs2: snapshot the dentry name while tracing file release
b727f18ccc43 stackdepot: stop preallocating after the final pool
b26799167322 compat: avoid double rounding in times()
53d975c6dc84 scsi: ufs: core: Do not release a reserved request in ufshcd_abort()
2edb62384a06 scsi: ufs: core: Remove completed-without-interrupt path in ufshcd_abort()
d57db743a4a5 scsi: ufs: core: Fix double release in ufshcd_eh_timed_out()
e320bbd2a26f scsi: ufs: core: Fix double completion in ufshcd_clear_lu_cmds()
44f4b65877f9 scsi: ufs: core: Add a helper for clearing hba->outstanding_reqs
5b2f8086523f scsi: ufs: core: Remove an always-false WARN_ONCE()
5855ed19d78d scsi: handle out-of-range SG_SET_TIMEOUT values
5276c3501f87 scsi: sd: Mark the disk dead if runtime resume fails in sd_remove()
9a6aa08dccb4 scsi: libiscsi_tcp: Prevent R2T range check overflow
c378d4fdb6c7 scsi: ufs: core: Fix a deadlock between clock scaling and device commands
c86ad7924cdb scsi: ufs: core: Clear stale UIC result byte before peer DME retries
fab642b4b94e scsi: ufs: bsg: Reject UIC commands with a non-zero result byte
0fcf2c7ace5f scsi: ufs: bsg: Validate request_len before accessing request
230b5c5c3621 scsi: ufs: bsg: Clear the reply buffer before use
b75af28847a4 scsi: ufs: bsg: Complete the job on error
e6d4b73a20b9 veth: fix stale peer max_mtu on XDP program replacement
11ea17b41670 genirq/kexec: Do not take the bus lock of an interrupt chip on the crash path
3b90249fcec9 gve: fix out-of-bounds read in gve_get_flow_rule_entry()
91139c72c3e0 cgroup: don't kill migrated processes through their exiting threads
ab32bad9df6f timekeeping: Update offsets on sequence counter retry in ktime_get_update_offsets_now()
427810d79c66 timekeeping: Require permission to set auxiliary clocks
5f80c43b1eee posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() signal path
936d3aa096a9 ipmr: only copy pktinfo to cache reports
37c51b2e2658 spi: zynq-qspi: fix address buffer corruption and support 4-byte address
983c8aa696c0 sched: fix stale get_pref_llc() stub for !CONFIG_SCHED_CACHE
f237a79af833 sched/cache: Honor asym packing over cache aware scheduling on hybrid systems
3172b2bddc32 i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len
bef087dd5453 ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks
ca12eac24875 parisc: eisa_enumerator: Fix out-of-bounds reads of the EEPROM buffer
ed99cc40d65a gpiolib: don't report -ENOMEM for a requested line without a label
29807241a05f tpm: fix zero-length read discarding the pending response
d94fa66c1b9f tpm: tpm_nsc: stop using the cleanup callback as dev.release
8e1a34694eff tpm: tpm_nsc: fix NULL pointer dereference on init failure
f43962764569 tpm: tpm2_probe: propagate transport errors
963db85cbe0a i2c: designware: queue only one read command for block reads
14f3be0ba056 i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode()
0588052542ab PM: EM: allocate the cpumask for every perf domain
bab8c554ad43 cpufreq: intel_pstate: cancel HWP notify work in driver cleanup
98813eecf755 ucount: take the rlimit reference before checking the limit
d855919d745e listns: don't wrap around with a U64_MAX cursor
cd0e590ad13a fs: don't lose inodes that another LRU walker is isolating
b399a48c1ee7 listmount: don't wrap around with a U64_MAX cursor
a522c991eb26 statmount: don't copy the reserved empty string past the buffer
0242cf173e41 exportfs: Release the get_name() directory file synchronously
791bbd305155 writeback: keep cleanup_offline_cgwb()'s scan out of syncs
4005fb67dee0 fs: rotate inodes whose page cache could not be dropped
9626137bb929 cgroup/cpuset: Fix task checking when enabling a partition
3fd5792b3ddc tipc: fix broadcast sender hang on last acker departure
6ff5288c7a5d ata: libata-sff: fix race between IRQ deferral and ata_sff_flush_pio_task()
3f57fc88f13d net: wwan: iosm: validate msg_head before indexing msg_ring
a49133d06bd2 pppoe: delete session hash entries by pointer match
ff6db2332643 mshv_vtl: reject poll files with multiple waitqueues
7aa18e5dbc29 nvmet: take subsys->lock while force-reconnecting in nvmet_subsys_attr_qid_max_store()
d994a3768b2b PCI/pwrctrl: Only destroy devices created by pwrctrl core
a888975330ad PCI/pwrctrl: generic: Fix leaking array from of_regulator_bulk_get_all()
734c6cd3b253 sh: maple: Use the matching IRQ cookie when invoking free_irq()
171b31ca9952 ALSA: aloop: Update the PCM Slave controls for a matching playback
7d9c3b7098ed writeback: clear old wb dirty state after inode switches
0a42e7a1927f writeback: reset dirtied_when when switching wbs
b5b3ac5af0e9 platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming
66ebb38d832e Documentation: hyperv: Update documentation for sending VMBus packets
6ac797d3f55b ocfs2/cluster: initialize heartbeat regions before publishing them
d4297b169d5c ocfs2: deal with legacy signed xattr name hash values
0b245e3609a7 ocfs2: use the stored hash when checking xattr bucket collision
e76582674942 ocfs2: deal with legacy signed dir index name hash values
e7d7b75ed161 lib/cmdline: fix get_options() count and overflow with large ranges
38c3894b2873 ocfs2: reserve value tree metadata when moving an xattr into the inode
a12657044a31 ocfs2: reserve metadata for a new xattr block and its value tree
32416509150f alpha: determine tininess after rounding in the FP emulation
1a27709c1ea0 net/smc: queue the copied chunk when smc_tx_sendmsg() faults
4ba9402fd010 exfat: fix reading a directory whose FAT chain is longer than its size
ea6fbcebee22 exfat: free clusters beyond EOF when a write fails or is short
c071f2bb3887 exfat: mark straddling folio RO and zero the post-EOF range
498931762569 exfat: fix a large buffered write failing when the volume is nearly full
bdada3fb46d6 exfat: zero invalid tail on partial overwrites
5ef4adf964ad exfat: drain in-flight DIO before buffered writes
6192bc0a98ec exfat: make valid_size and zeroed_size atomic
8f37990a1a23 exfat: dirty all new pages when extending valid_size
9c8d01c802b8 exfat: hold the invalidate lock while truncating
8aecb67c8a89 exfat: advance valid_size to EOF for append writes
bf71eb3b19d1 mlxsw: Initialize register query payloads
2e40fd804952 net: unix: reject negative max_dgram_qlen values
cae22ada1f14 net/rds: ib: don't enable IRQs in rds_ib_conn_free()
a41b46605662 PCI: qcom-ep: Deinitialize endpoint on remove
d0626a2bbc00 fbcon: Retry rotated font allocation after failure
e1f7e1f9e739 fbcon: Rebuild rotated font buffer on font change
e19f246141af fbcon: Include font geometry in the rotated font cache
e5e13dd6dc04 fbdev: bitblit: Fix glyph clipping when fbcon pans
6c90b7568b41 ipv6: do not restart DAD for a dead ifaddr
d4e3ab19ddd2 ipv6: initialize temporary ifaddr before publication
65dc6b153b65 ipv6: serialize address publication with device teardown
310a2a825a91 ipv6: remove ifaddr from hash during ifdown list cleanup
964b693376ff netdev: Hide the netdev_priv() origin from GCC in netdev_from_priv()
677ecf5c4a94 drm/amdkfd: correct vram_available calculation
e6a0acabf6c1 amdkfd: Fix memory availability double accounting of kfd pinned objects
3ae32ed4d83e drm/amd/pm:restate all customized OD features on every table upload for smu 13.0.0/smu 14.0.2
eb8cfa911806 drm/amdgpu: wait for pending page table updates before switching a VM to CPU updates
96da420b053b drm/amdkfd: wait for a GPU reset before freeing a BO
dbe6b6663634 drm/amd/display: Fix swap in median3() for DSC rate control
fedc363a2b67 drm/amdgpu/gmc9: add extra type-2 TLB flush for gfx942/gfx950
b01c68b7f1ec drm/amdkfd: fix NULL deref in SDMA HQD debugfs dump on GC 12.1
861337bf1a6a drm/amdkfd: don't drop an SVM CWSR reference that was never taken
f7022f6de313 drm/amd/pm: reapply umd profile state after recovery
6555c8d7b2a0 drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs
bbfdf51b1290 drm/amd/display: don't WARN when removing an unallocated MST payload
84d62591d343 drm/amdkfd: fix doorbell allocation race creating duplicate allocations
cebd4f1c3870 drm/amdgpu: reset VI ASIC on Apple boards with VRAM at 0
5464462de927 drm/amdgpu: reset CIK ASIC on Apple boards with VRAM at 0
291d1ff17454 drm/amdgpu: reset SI ASIC on MacBookPros with VRAM at 0
2b0762c47cce drm/amdgpu: require _PR3 for BOCO
d4f7d5aeb091 f2fs: don't use truncate_inode_pages_final() on live inodes
8cd2d8c0a98b selftests/landlock: Fix snprintf truncation checks in test files
70e33cc6ae56 blk-mq: clear stale inactive flag on hctx reuse
6f16dd733d54 gpio: pca953x: Handle direction register read errors in IRQ paths
6aeb8ae96931 gpio: pca953x: Preserve wakeup accounting on parent IRQ failure
cb6078432fab gpio: davinci: Clear interrupt status in every bank on suspend
43baee8a998b ALSA: line6: Handle period elapsed calls outside the locks
63f3307bc290 gpiolib: Free chip resources when allocating the label fails
b3538947880c platform/x86: lenovo-wmi-capdata: Do not stop the AC notifier chain on error
16a74918f183 ALSA: emux: Stop voices before freeing zones in all cases
c0634d1a1591 ALSA: mtpav: restore negation dropped in guard() conversion
bcc90f9fe12a ntfs: roll back the ACL xattr commit when the WSL mode update fails
4858bf00a628 ntfs: flush the block device when syncing a directory
656ba7ff3757 ntfs: report block device flush failures from fsync
f45b6993d70d ntfs: fix kmap_local leak in ntfs_check_logfile()
a441c72351cc ntfs: fix kunmap_local() of advanced pointers in check_mft_mirror()
68879bf28ba6 ntfs: balance the $MFT runlist lock in data extension error paths
0b81032b9273 ntfs: add a runlist merge that leaves the source runlist to the caller
387a7e579d84 ntfs: do not use a stale runlist pointer when undoing $MFT extension
bebc7db05867 ntfs: hold the runlist lock while expanding a non-resident attribute
6aa650510f66 ntfs: fail the mount when $MFT's data size exceeds its allocation
ce91fe5137a4 ntfs: do not map a vcn as a hole when its runlist lookup failed
ccdb67f6bd08 ntfs: fail the mount when $MFT needs its own extent records
6b956c9b8553 ntfs: do not turn an unmappable runlist fragment into delalloc on write
7721a5eacab2 ntfs: do not map an unmappable runlist fragment as a hole
b5bd03b9ca1d ntfs: validate attribute-list sizes before allocation
b0a4eefbb2a1 ntfs: mount hibernated volumes read-only regardless of errors=
bc3c7da859f2 ntfs: include the final partial cluster in sync writes
a3ac83cb2298 ntfs: fail remount on sync errors and keep the dirty bit on SB_FORCE
12b699af6679 ntfs: check the dirty-state commit on remount and unmount
02d032b552c5 ntfs: do not clear the volume dirty bit during sync
05cedea3e1d9 ntfs: persist the dirty state after the final put_super() commits
2254d06b1795 ntfs: sync the volume dirty bit with the recorded error state
6d39bee71241 ntfs: set the volume dirty bit unconditionally on metadata changes
a3f524d24310 ntfs: fix volume flag update races
e24ee790c71e ntfs: avoid truncate and writeback deadlock
aa80108cac4d ntfs: use fatal_signal_pending() for fallocate interruption checks
afc851c95939 ntfs: NULL vol->vol_ino in the load_system_files() error teardown
e867437ea95f ntfs: wait for attribute folio writeback before update
5771ee7e3118 ntfs: trigger page_mkwrite for native 4Kn size extension
824e32d5616f ntfs: use sync flag for direct MFT writes
121ab44b9dee ntfs: write MFT records through containing I/O units
1581461a0b4f ntfs: write MFT folios through mapped I/O units
84a59367a7b1 ntfs: track direct MFT writes until BIO completion
4a224bbb67f1 ntfs: serialize raw MFT updates against folio writeback
85a1c6cb2401 ntfs: write MFT mirror data in mapped I/O units
ca97bf19490d ntfs: validate the MFT I/O geometry
aaecfeddac07 ntfs: read MFT writeback bounds under size_lock
69effda293eb l2tp: snapshot sequencing state when building transmit headers
8b6d5f144ce9 ALSA: compress: reject restarting an ACTIVE task via origin_seqno
673808c5c093 ALSA: compress: add missing OPEN-state gate to SET_METADATA
eadf0118ab29 ALSA: compress: reject buffer geometry change on gapless next_track
612109762a80 ALSA: compress: fix buffer leak on failed SET_PARAMS
b732d57875d8 ALSA: usb-audio: Skip sample-rate read-back on PreSonus AudioBox USB
15257bdfbdc2 net: gro: don't chain linear parts larger than gso_size into frag_list
6b48deba1968 netdevsim: reject cls_bpf programs bound to another device
d148bc1f49ac cgroup: fix cgroup.kill for exited thread group leader
73f7fd0f75dd sched_ext: Reset runnable_at when a task leaves its scheduler
fe067d394fbe Revert "Input: matrix_keypad - force switch rows to input mode"
523b2387d786 Input: always accept EV_SYN in input_event()
2d500347683e hwmon: (acpi_power_meter) Fix 18.45 TW bug
2c80a9f2f233 hwmon: (sht3x) Return the consumed count for heater writes
e4b6095ced8f hwmon: (mcp9982) Update the interval cache only after successful writes
f711f8f5af0b rtc: pcf8563: pass the driver data to the alarm interrupt handler
6565df5ee31b platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc()
0732fb95a1dc rtc: cmos: Honor explicit use_acpi_alarm parameter value
ad59f4c708da rtc: cmos: Disable ACPI RTC event before handling it
720e0cabd0c8 dax: fix wrong error code returned from dax_dedupe_file_range_compare()
8404b970efa3 f2fs: fix submit accounting for IPU writeback
01632055d967 f2fs: flush SIT journal during filesystem resize
04ffad0d08eb bnxt_en: don't leave an XDP program installed when the open fails
92cd44de2d26 hwmon: (gigabyte_waterforce) reject short input reports
521f00ac9ed2 hwmon: (coretemp) Fix handling of isolated SMT siblings
b5ed456d3b47 netfilter: nf_reject: initialize IPCB at inet ingress
60a352da1064 ALSA: usb-audio: Fix missing sample-rate control for PreSonus AudioBox USB
7c0b34f98b0a ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3402VA
efd613a43c27 gpiolib: cdev: don't set GPIOD_FLAG_IS_OUT
34bd3e5f44a3 lib/buildid: reject file offsets that do not fit in pgoff_t
11e2624fff7a hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe
9690846c8981 hwmon: (sht4x) Reject incomplete heater command transfers
27ea77509ce8 hwmon: (coretemp) Return -ENODATA for invalid temperature readings
979ebd599c5c hwmon: (sht4x) Fix jiffies wraparound in heater-ready check
f1e1d3a1014a spi: ch341: handle transfers without a TX or RX buffer
28435e18a0dc RDMA/uverbs: Fix uobject leak in DMABUF release
d5e8a40ea93d ALSA: hda/via: Apply runtime PM workaround for ASUS X55A
643c1e591259 alpha: do not skip TLB shootdown IPIs for kthread-borrowed mms
e4134f6fd005 alpha: do not clear remote MMU contexts in migrate_flush_tlb_page()
f624f3506ce9 alpha: invalidate the local context in flush_icache_user_page()
f763165bb711 alpha: invalidate the local context in flush_tlb_mm()
023d39b78a88 alpha: fix the local TLB invalidate in the UP flush_tlb_page()
8f7524673fcd alpha: fix the local TLB invalidate in flush_tlb_page()
393cdca8e239 alpha: invalidate the local context in flush_tlb_page()
3726ffa1e710 alpha: only use a targeted tbi() when the target mm is really current
1460d772e2f2 alpha: run check_mmu_context() from finish_arch_post_lock_switch()
1af35afb40a3 alpha: load the MMU context when switch_mm() switches the current task
8685a6e72d1f alpha: handle VM_FAULT_HWPOISON in do_page_fault()
eb1460c71da2 sched_ext: Don't queue balance callbacks from a core-sched pick
af22b4f7f60a power: supply: qcom_battmgr: Notify charger supplies of online changes
ba9c850c647e power: supply: generic-adc-battery: fix status with no supplier
cf4fb2083cac power: supply: cros_charge-control: restore EC state on resume
01cff42c34b2 power: supply: qcom_smbx: set the charge enable after software control
35bf00f2356f sched_ext: Don't leave balance callbacks queued across a pick retry
ba69d35dfdf6 perf python: Free the parse error entries when parsing fails
5d8167f64801 KVM: arm64: vgic-its: Don't map an LPI from more than one event
4d7046b68b9c ALSA: hda/realtek: Fix internal speakers on Acer Aspire AL16-31P
be792ac5a63e ALSA: hda/realtek: Enable mute LEDs on HP OmniBook X Flip 14-fm0xxx
fe221b7537a7 ALSA: seq: oss: Skip events until fully initialized
0bbd666d019b mptcp: fix subflow bitfield misuse
fe046bec1787 mptcp: reset msk state on early connect failure
9aa68be2b198 ipc, msg: Account msg_msg allocations with GFP_KERNEL_ACCOUNT again
20b5467b1295 ublk: pin module while release work is pending
0d503ae69249 fuse: fix copy_file_range reply handling race
19f130156940 ASoC: amd: acp-config: force SoundWire probe on Dell 14S DS14265
0602ba498ff4 virtiofs: validate fixed-output response length
378807887efc virtio_fs: read the vring size under virtio_fs_mutex in ->get_tree
5f8b531d751c fuse: don't launder folios of a bad inode
1e2420644db8 cpufreq: loongson3: Replace IOCSR read/write with MMIO ones
4f3dd4bf2350 cpufreq: loongson3: Use global physical CPU ID in get/target callbacks
adc736adbbb6 cpufreq: loongson3: Replace per-package mutex with per-node
8dab06f17af4 cpufreq: loongson3: Adjust the width of id and val in smc_message
99da78307bfb cpufreq: loongson3: Make this driver depend on MACH_LOONGSON64
f11bd78beaaa net: bgmac: enable interrupts only after NAPI is ready
c6adad6d0e4d RDS/IB: validate receive fragment completions
98cafb9310ee sctp: hold transport reference across connect wait
230fc648e85b ipv6: defrag: orphan skb before queuing
1402ffd54f2f rds: fix out-of-bounds conn_path walks via handshake exthdrs
5fe6757584ab net: skbuff: don't BUG() on a bad csum_start in skb_copy_and_csum_dev()
301e34ccf9a6 ublk: let STOP_DEV cancel the server's commands before its release
f6dca20655bf ublk: reset the FETCH round under ub->mutex
30638a05c163 ublk: reset the FETCH round in release also without a disk
de0967c9aa6b ublk: mark the batch fetch command cancelable before linking it
9a735ee97f7f ublk: mark the io command cancelable before publishing it
1f866a06b65e ublk: keep a canceled FETCH round canceling until the server is gone
60a8dd118843 net: erspan: set lltx to avoid sch_direct_xmit deadlock
672edf91f760 dax: fix dax_range_compare_iter() to use correct size and address offset
5f5800d075bf dax: Return errors from dax_core_init()
04162e64f014 ring-buffer: Take cpus_read_lock() when changing the subbuf order
f6ce7362b698 erofs: use on-disk blkszbits for lz4 max pcluster bound
aed497051d5c spi: amd: validate FIFO usage before executing message
f64e8fccdf73 spi: amd: fix len==0 underflow and FIFO overflow
2be7a1a3af06 PCI/PM: Restore BARs after powering up during enumeration
25ce0404c9f7 spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op
b81d6ed1e542 iommupt: Do not allow PTEs to be split when dirty logging
833cfd0e4a7b ASoC: qcom: q6asm-dai: wrap the position of a full ring to 0
de31979f3169 ASoC: qcom: q6apm: reset the hw pointer with the fragment queue
b009e247f27d ASoC: qcom: q6apm-dai: wrap the position of a full ring to 0
9be904fdb42e mfd: tps65217: Use devres for IRQ domain and wake teardown
afa8760725ff mfd: tps65217: Check return value when masking interrupt sources
63d3cd481057 mfd: tps65217: Fix NULL pointer dereference on IRQ init failure
f000f7c016e8 cxl/events: Test CME counter expiry with equality, not bitwise AND
0f4e9b6b9013 mfd: bq257xx: Mark self-modifying BQ25792 registers volatile
07b9c1c9c9ca spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer
ce46af845eb2 KVM: arm64: Turn vcpu->arch.pause into a counter
38f27e0f70f8 KVM: arm64: Move IN_GUEST_MODE ahead of state being loaded
da4d9aecba3c KVM: arm64: Move OUTSIDE_GUEST_MODE publication past context being saved
8a5f8c37e242 KVM: arm64: nv: Move L2->L1 switch on interrupt early
9c3e64f21856 efi/libstub: Don't replace an existing LINUX_EFI_MEMRESERVE table
5e6191a21eb4 efi/libstub: arm64: Don't use the platform register x18
1b8f9d14d296 spi: jcore: fix divide-by-zero when speed_hz is zero
128ddc3d25fb gfs2: fix the escaped block copy in gfs2_before_commit()
d6c8accea384 ALSA: ump: Correct return size of fill_rpn()
a2a15ed9442a irqchip/renesas-rzv2h: Preserve TIEN state in rzv2h_tint_set_type()
7c34aa8067fa irqchip/jcore-aic: Fix lost IPIs on SMP
508cb3b25e0d irqchip/atmel-aic[5]: Disable interrupts in the irq_pm_shutdown() callbacks
4f650d3593cf irqchip/mchp-eic: Fix clock reference leak in mchp_eic_probe()
75badbcc1d85 irqchip/imx-intmux: Fix runtime PM teardown on remove
46b4c2e599ca irqchip/gic-v3-its: Don't clamp nvecs to zero when id_bits is 32
0ef0d14f1b26 crypto: qat - fix use of destroyed vf2pf_lock on VF restart
486ed582d83a crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev()
e23a825dcd53 ALSA: hda/realtek: Fix quirk for HP Laptop 15-fc0xxx
ea425c003697 iommufd: Reject a zero-length dirty bitmap request
41a4026054ce iommufd: Keep dmabuf PFNs MMIO when filling another domain
ac7f472073dc kbuild: AutoFDO: Update split machine function argument for upstream rename
ed418a016661 PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain()
0edbb8c8f86b cpufreq: schedutil: Serialize sugov_start() against rate limit updates
ad9fe095e539 Bluetooth: L2CAP: Use default TxWindow for zero socket option
a6a8d864fc71 Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests
9d4586b14357 Bluetooth: L2CAP: Reject mode changes on connected channels
cd90c2ddfb09 Bluetooth: selftest: Pin module for selftest debugfs file operations
a7bfa8581b16 Bluetooth: hci_debugfs: Pin module for debugfs file operations
84b394b08479 Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file
5e0ac62635fe Bluetooth: btusb: Add device ID for Realtek RTL8761BUE (StarTech AV53C1)
9364131a08b4 Input: xpad - add GameSir Nova Lite support
c0b372282f98 PCI: Set supported_speeds in set_pcie_port_type()
2c5e9d8f59b7 ARM: 9523/1: topology: allocate the cacheinfo early on the boot CPU
15af74af69b3 ARM: 9522/1: cacheinfo: guard the CLIDR read in populate_cache_leaves()
3bf57313aff0 ARM: 9521/1: cacheinfo: count external caches in early_cache_level()
5f30d0345976 ARM: 9520/1: cacheinfo: avoid out-of-bounds write in populate_cache_leaves()
20b068579077 ARM: 9491/1: alignment: restore uaccess state on emulation fault
574b38e22803 ARM: 9488/1: smp: set current pointer in assembly before jumping into C
6dd268f4d8f3 spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path
3e66dd2aafe8 spi: cadence-xspi: reject SDMA transfers larger than the requested length
4d99432f944b mfd: ab8500: Fix child device leaks on probe failure
d13aa384a56e nvme: make the DH-HMAC-CHAP secret attributes readable by root only
9e76fa6165f4 iommu/amd: Don't allocate kdump device table from DMA32
f165d50c106f iommu/amd: Program device table when kdump reuse fails
3f1195712274 serial: pmac_zilog: push received data to the port that received it
7a74f375e55d serial: amba-pl011: keep transmitter enabled when disabling RS485
86e5bd2e911a serial: amba-pl011: honour delay_rts_before_send for every write
37fcc4cb3620 Revert "serial: 8250_port: Drop duplicate NULL check"
3a58b317d7f3 serial: 8250_omap: set priv->line before enabling the IRQ
3d213f8b4d01 serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit()
16ca1aac1c3d platform/x86: hp-bioscfg: NUL-terminate the SPM auth token
fc919c299012 platform/x86: hp-bioscfg: allow clearing current_password
7050557f467b platform/x86: hp-bioscfg: return -E2BIG from validate_password_input()
05d4e475dd20 platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer()
c32fadf0c7b3 platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer()
7f0c621d6a94 ALSA: cs46xx: fix unit mismatch in DSP code area bounds check
8c3b84ec0545 platform/x86/tuxedo: Fix keyboard LED map ordering
bbdfd2dbb2e4 PCI: imx6: Avoid dereferencing a NULL clock name
f380b4b0765f ALSA: hda/realtek: keep headset mic on Acer SSID 0x1640
c5df526d244a ALSA: hda/tas2781: Skip invalid TAS2563 UEFI calibration data
94fdb7fd31f9 ALSA: hda/tas2781: Assign total_sz at the end of the function
543c0f3386e4 tmpfs: fix unicode_map leaks in casefold option handling
bf8a21fb049f ocfs2: fix array out of bound access in __ocfs2_find_path()
ff2d64cb1fc1 ocfs2: update xattr count before moving bucket entries
f79c63b27cb6 lib: decompress_bunzip2: fix integer overflow in run-length decoding
7197e6716813 panic: kill the "buffer unavailable" redirect fallback
f56c76fb74d9 panic: allow force_cpu redirect from an NMI
912204859fba panic: restore variable arguments to nmi_panic()
0c3771d172c1 panic: fix va_list reuse in panic_try_force_cpu()
433d9ba7cac1 panic: flatten nmi_panic control flow
1a694b4ad42d panic: fix redirect CPU race in panic_try_force_cpu()
2470ce3d321d lib/decompress_bunzip2: fix off-by-one in run-length bounds check
f7c1d0411335 pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank()
a8eed441fdee spi: ljca: Don't require data in write replies
baea448d4900 spi: ljca: validate the response length before copying the data
f0abf244bcbb f2fs: fix to use bio_in_atomic() in f2fs_read_end_io()
41f17fbbd219 f2fs: disallow mmap write and data-modifying fallocate on atomic files
ff39a2d5d66e f2fs: fix defragment writeback range truncation on 32-bit
a6b2c74ca755 f2fs: allow empty strings for journaled quota options
2061dcbb7750 f2fs: check every cur_*_segno[] entry on readonly images
cfdb4aee913c f2fs: read i_size once in f2fs_vm_page_mkwrite
a985443275a0 f2fs: allow pinning empty compressed files
6b63eb440a19 f2fs: remove mappedtodisk flag usage in mmap write path
64e80d187ccf accel/qaic: Cancel Sahara read data work on removal
b46e228b2a10 sh: intc: Sort the prio and sense lists after filling them
2f85b0f394a0 PCI: rockchip: Drive at 2.5 GT/s, error other speeds
83ff55c3bae1 PCI: rockchip-host: Do not attempt 5.0 GT/s retraining
f27fdfd4c414 PCI: rockchip-ep: Do not attempt 5.0 GT/s retraining
e14dbb9eda4a f2fs: convert inline quota files when turning quota on
06afe122a65a nvmet: zns: don't leak stale memory in zone management receive
bd85055ca4cd nvme: bound FDP config log reads to the received buffer
68f15bd32d74 nvmet: require authentication before property set
19c237734e1f nvmet: free the bvec on file namespace range errors
fba302332547 nvme-auth: fail when the controller does not authenticate itself
53e5b0b2a2be nvmet: fix preempt of another registrant by the reservation holder
08e4d674c109 nvme-rdma: don't complete a request after a bogus remote invalidation
289dd8db5fdb iomap: don't lose a failed direct I/O bio's error when zeroing the tail
5d6f21538389 iomap: don't lose a fiemap iteration error when emitting the last extent
61ec383a943a clk: qcom: ipq5210: add 24MHz rate for USB UTMI clock
09cab6107636 clk: qcom: ipq5332: add 24MHz rate for USB UTMI clock
5c4b9317d159 clk: qcom: ipq5018: add 24MHz rate for USB UTMI clock
324cc3d6fafe clk: qcom: ipq-cmn-pll: Assign .num before accessing .hws
cb1b95b98b63 speakup: Fix NULL pointer dereference on VT switch + selection
fd8690793882 mei: vsc: Fix packet CRC computed over pointer size
f1e465275afb misc: tifm: don't clear dev->driver in tifm_device_remove()
ddc98a9d4096 misc: issei: Fix issei architecture deps
22f893e03317 dm-bufio: fix a race leading to an unsigned integer underflow
700f670ddbdc dm-bufio: fix non-working memory limit
3279fe10b300 serial: 8250_exar: store the GPIO platform device in struct exar8250
6db03320399a serial: sc16is7xx: declare MCR and IER as volatile registers
e99f04fe63fa serial: sc16is7xx: fix data corruption due to unexpected xon/xoff
3fa143a890e0 tools/dma: fix building from the top level with O=
542651d0ad02 arm64/mm: Treat faults taken by EFI runtime firmware as kernel faults
5252ad294556 fbdev: nvidia: Release write-combining handle on probe failure
bd6e0222a85b fbdev: kyro: Release WC setup on registration failure
3ec236beefaf fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error
4310425b130e fbdev: smscufx: check for fb_deferred_io_init() error
b8d058d95203 fbdev: udlfb: check for fb_deferred_io_init() error
4f511fa01d68 fbdev: xen-fbfront: check for fb_deferred_io_init() error
a760b504abf3 fbdev: ssd1307fb: check for fb_deferred_io_init() error
439dcd4dce38 fbdev: core: Initialize modelist in framebuffer_alloc()
0fa0e681da02 fbdev: sh_mobile_lcdcfb: Restore the per-overlay sysfs attributes
1f48406c1d94 platform/x86/intel/vsec: Fix inverted walk_header() test in get_features()
27171859d5c5 platform/x86/intel-uncore-freq: Continue restoring limits on resume
2a70ce6a3168 platform/x86/amd: hfi: Fix out-of-bounds reads when parsing ranking data
0f2d5dac7b6d platform/x86: simatic-ipc: fix platform device leak on registration failure
8b6c2c832b99 platform/x86: oxpec: Fix Apex charge limit control
7fb5483040ab platform/x86: asus-wmi: Serialize WMI method evaluations with a mutex
7e24cff8bb81 platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop()
d2f87a7eb3de platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query()
6d5ff41da9f7 platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token
d3d7755af4b7 platform/x86: asus-wmi: fix screenpad power state detection
20f8b615d98c platform/x86: asus-wmi: fix unclear usage of bd->props.power
dbbf052832f1 platform/x86/amd: Stop counting intermediate cycles with metrics table
c83b7320a4a3 platform/x86/amd/pmf: Validate the APTS state index
8fa8bffe0879 platform/x86/amd/pmf: Add AMDI0112 ACPI ID
40edd83f22aa mm/damon/core: charge only the part of a region the filter left
477c6e65a18a mm/shmem: don't release a swapin-error marker as a swap entry
dd14cc2bb808 mm/alloc_tag: account for reserved tag ids in the kernel tag check
9f8f6a2df0f9 mm/shmem: report RCU-tasks quiescent states while undoing a range
7cce1d49123b mm/hugetlb_cgroup: move per-node usage on cgroup reparenting
71c389c2dc0c mm/hugetlb_cgroup: move per-node usage on cross node migration
5b0b34b6958b mm/page_alloc: do not boost watermarks in kdump capture kernels
898226bf9794 mm/madvise: use folio_trylock() in the cold/pageout PMD split
380fbb3a4322 mm/madvise: reclaim isolated folios if PTE restart fails
ce52ddfe0617 proc/task_mmu: handle special PMDs in clear_refs and pagemap
1a0ef02d9f5a mm/damon/sysfs-schemes: read sysfs_filter->addr_range only once
2254b01bbac7 PCI: vmd: Flush DMA writes before handling MSI on Arrow Lake
fd7042aee0b7 PCI: vmd: Flush DMA writes before handling MSI on Meteor Lake
dce23938b5aa PCI: Avoid D3 on PLX PEX 8532/8533/8548 downstream ports
7589b3a3d006 xprtrdma: trim head iovec when the payload arrives via a Write chunk
15d285b15e15 xprtrdma: prevent disconnect feedback during endpoint teardown
3c58952202b7 mtd: parsers: qcom: fix offset/size overflow on large partitions
542963c2c0c5 mtd: rawnand: qcom: fix read location register usage in config_nand_cw_read()
d8235db8427d btrfs: return -ENOTTY for unknown ioctls on the control device
58e2a11eaa2a btrfs: zoned: fix block group reference leak in btrfs_repair_one_zone()
74a80eab32bc arm64/efi: Clear PTE_WRITE when applying EFI_MEMORY_RO
2fff1193c699 ACPI: APEI: accumulate the queued flag across error sections
aeb3f73ece04 ALSA: hda: cs35l41: Fix ACPI device reference leak on probe failure
e7729f8e7f77 dm-snapshot: fix crash if dm_io_client_create fails
38b4b9fb1183 selftests/filesystems: Fix idmapped_tmpfile layer dir ownership
57cfd597be44 USB: serial: sierra: fix urb leak on write completion
faf008eaf133 m68k: Fix seccomp filtering on ColdFire and 68000
6cfb1529c539 mailbox: qcom-ipcc: Guard against NULL con_priv in send_data()
b840ba611e00 mailbox: mtk-cmdq: Fix runtime PM leak in cmdq_mbox_flush()
a0fff512d8fc mailbox: bcm74110: Cap rx_svc_init_list growth to prevent PMC-induced OOM
1e61a7ac9e2d mailbox: altera: shut down RX polling timer on channel teardown
cce884b10b81 usb: typec: ucsi_ccg: Add retry mechanism in ccg_read
06da0cdf2346 usb: xhci-pci: Add AMD 600 series to xhci-pci-prom21
9428026a1e82 xhci: Prevent invalid vdev dereference during sideband unregister
e95ace4abebd usb: xhci: Fix bounce buffer overflow
8e3cb6de2c51 usb: typec: ucsi: ccg: Validate altmode index in GET_CURRENT_CAM response
9082097814c7 usb: typec: ucsi: Skip CAM query when partner has no alt modes
812908687769 USB: quirks: add USB_QUIRK_WINDOWS_CONFIG_REQ_SIZE for GameSir G7 SE
f47dc077510d USB: cdc-acm: add VeriFone VX820 device ID
c9b60cda84fa usb: octeon-hcd: keep SOF interrupts while a pipe needs them
19c5bf57355c usb: octeon-hcd: release the USB block when initialization fails
c460161d0810 usb: core: don't set drvdata to NULL in usb_unbind_interface()
65f1c9838921 lib/plist: fix plist_requeue() corrupting order in the last bucket
3391418509d1 KVM: arm64: Prevent 64-bit overflow when computing hyp clock rate
04bdd085d674 ALSA: hda/realtek: Enable all four speaker amps on Lenovo ThinkBook X G2 IAH
3fd39ef87eee cxl/acpi: Convert QTG _DSM latencies to picoseconds
44a4aca21bd7 cxl: Account for link width in latency calculation
2a943b8c4613 cxl/port: Convert PCIe link latency to nanoseconds
251c71e0d06f cxl/pci: Program the Port GPF timeouts before caching the DVSEC
993809012afa cxl/pci: Use the Device GPF DVSEC for restricted endpoints
988997e24b4f cxl/port: Clear cached dport pointers when a dport is removed
283fd5c240c0 vfio/mlx5: Fix boundary check in set_report_output()
0ca20b815b76 RISC-V: KVM: Fix IPI delivery for out-of-order vcpu_id
5522da98153e xen-blkfront: Fix IO race during unplug
fd3c45407873 slimbus: messaging: fix leaked PM vote on tid allocation failure
287d09b1911b nvmem: rockchip-otp: Serialize reads
827cf4797be4 misc: fastrpc: Allocate entire reserved memory for Audio PD in probe
51731e49fe9a misc: fastrpc: fix double-free in fastrpc_map_attach() error path
d67122a7a4eb USB: serial: usb_wwan: fix urb leak on disconnect
ed81b5ad5903 USB: serial: option: add support for ASR 1286:4e3c modem
a73f8b6f08df USB: serial: option: add Rolling Wireless RN947R
62e8367b36e9 USB: cdc-acm: fix urb leak on disconnect
3ba642864653 wifi: ath12k: validate MAC/PHY capability count before saving
658109ba3930 ALSA: usb-audio: Add mic resolution quirk for Logitech Webcam C200
5c1cbd955fae drm/ttm: return an error when kmapping a BO without pages
621e1976d48b iommu/dma: Catch scatterlist length overflows
1f5d212c5cec xen-pciback: Fix pcistub_device ref leak in pcistub_get_gsi_from_sbdf()
5e3df51d4699 xen/pcifront: check that an AER callback exists before calling it
90aa20dcd085 xen/gntdev: Fix gntdev_dmabuf ref leak in dmabuf_exp_wait_released()
085c0bf53f30 xen/privcmd: Only claim ioreqs matching an ioeventfd
bf413f565ad9 soc: fsl: dpio: Free the IRQ before releasing the I/O object
49ae55c52765 soc: fsl: dpio: Fix cleanup on IRQ registration failure
c074497c77c1 soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms()
f4a35345d97e xen/gntdev: prevent private mappings from becoming writable
8dc1c898dc8d clk: imx: Fix clock reference leak in imx_obtain_fixed_clock_hw()
68beb72a47e7 clk: imx: Fix clock reference leak in imx_get_clk_hw_by_name()
2f1fb19b3506 mm/madvise: use vm_normal_folio_pmd() in cold/pageout PMD range
8565957d9047 mm/mempolicy: use vm_normal_folio_pmd() in queue_folios_pmd()
189f030cf8e2 mm/zswap: enable zswap_ever_enabled in zswap_pool_create()
269a9370df2c mm/mglru: fix ineffective memory protection for non-kswapd reclaim
2748bfeb1c12 mm/page_counter: avoid integer overflow in effective_protection()
49f45ab63696 mm/memcg: clear folio memcg after changing per memcg stats
be83045ebb7d mm/zswap: publish the initial pool with list_add_rcu()
156cd6874ed9 mm/hugetlb: fix subpool minimum reservation rollback
0f92664251dd mm/nommu: reject wrapping ranges in access_remote_vm()
8c60564f03e0 mm/execmem: free ROX cache chunks only when they span an entire vm area
427a41a9363b mm: memcg: reparent non-hierarchical lruvec stats on cgroup v2
268d1c7fbbca mm: memcg: skip the RCU lock when the memcg is not dying
d008e783d7eb mm: workingset: use lruvec_page_state_local() to count lru pages
3b0734f79240 mm: memcg: redirect stats updates of dying memcgs for all hierarchies
94a138ce5bae mm/memory: constrain generic_access_phys() to page boundary
ce8381ddd387 mm/hugetlb: charge folios to the target mm's memcg
147a2a108156 md: don't hand out the array before md_alloc() has added mddev->kobj
029c47cc4762 riscv: cfi: Only write envcfg CSR when task is current
34dbcdd05624 riscv: cfi: Bounds check restore token before swap
fbcbb54a4898 nilfs2: validate directory position after llseek in readdir
425add03ad9a ext4: fix out-of-bounds read in ext4_get_group_info()
6a6a991a34ec ext4: fix ABBA deadlock in ext4_rmdir()
aca0862b91dd ext4: don't report delalloc data as a hole on indirect-mapped inodes
ec3c1b42566e ext4: skip extra isize expansion while unmounting
8c2401753d2c jbd2: don't advance j_fc_off before the buffer is recorded
6c0bb2ad0894 ext4: reject delalloc to nodelalloc before applying remount options
33a29d9cdf7d ext4: fix fast commit replay failing on a read-only mount
1a1a6773c96b ext4: only update tune mount options when requested
dba1adf68bc6 fanotify: report names longer than NAME_MAX
dcdfd7ae6ad1 ALSA: hda/hdmi: clamp sad_count in ELD proc write handler
d68390d9859c ALSA: hda/hdmi: clamp num_cvts against cvt_nids[] in hdmi_read_pin_conn
6bc3e7aa73fb crypto: algif_skcipher - rewind rounded output bytes
7fb9168a25c4 ALSA: hda/realtek: Fix silent speakers on Lenovo Legion S7 15IMH05
074a1738f21d wifi: rtw89: usb: shorten the RX aggregation hold on RTL8922AU over USB 3
1d8cd3c8de8c wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM
f014772e79cc PCI/sysfs: Pass the device name length in UTF-16 code units
4b47d1c4af6b aoe: pull in the headers each received packet type reads
fa00fa501717 spi: stm32: fix double free of SRAM buffer on MDMA fallback
b361082ce275 clocksource/drivers/digicolor: Fix clk reference leak on request_irq failure
abd42823f88c clocksource/drivers/fttmr010: Fix clk reference leak in error paths
efd6cb0f3c91 wifi: mt76: mt7996: fix PCI device reference leak in mt7996_pci_init_hif2()
8275a14a3384 wifi: mt76: mt792x: fix negative errno truncation in offload capability
3db878dff2c5 wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits()
c48e280d1000 wifi: mt76: mt7615: cancel reset work during unregister
d681a3aee651 wifi: mt76: move the channel survey when the channel changes
f3bc13045e36 wifi: mt76: mt7925: cancel mlo_pm_work on the USB stop path
e31af818bf5b wifi: mt76: take rcu_read_lock in the USB/SDIO tx completion path
ef03f7b02d5d wifi: mt76: mt7615: restore DBDC state after ext PHY failure
ad626a35bd78 wifi: mt76: fix memory leak in USB TX path
ec6d03d8b21c wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory
ec2f830e698b wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs
ba6e31ad27f0 wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff
f1a53935d5bc KVM: arm64: timers: Compute an offset-applied CVAL from the current count
6b8252034796 ocfs2: skip uninitialized lockres in ocfs2_mark_lockres_freeing()
c55809688e4a ocfs2: restrict OCFS2_INVALID_SLOT suballoc slot to system inodes
7d1dee223950 fork: honor task_struct's declared alignment
ef96efd3fc90 raid6: add missing vzeroupper to AVX-512 code
2b5dcbb81593 raid6: add missing vzeroupper to AVX2 code
2b90fb345504 xor: add missing vzeroupper to AVX code
38e26bd35926 selftests/core: fix unshare_test with large fs.nr_open
13c2a268eac3 ocfs2: free replay slots in ocfs2_recovery_exit()
0cd83f04e340 ocfs2: exit recovery thread on mount error path
4b935a9de79e init: fix early boot crash with bare hostname parameter
1e482527aeb0 USB: gadgetfs: do not WARN about excessively large memory allocations
0237ca9810cf fault-inject: fix dentry leak
4f0fb378416e fat: fix fat_ent_write() for reverting the value
60ea6ea084c6 resource: fix lost wakeup when waiting for a muxed region
3f87063217ef mm: hugetlb: drop refcount before freeing on memcg charge failure
11afc840288a mm: hugetlb: return -ENOSPC on memcg charge failure
211d4a6f1767 mm/damon/sysfs: set next refresh jiffies per sysfs context
cf2193daffa7 mm/damon/core: copy nid for eligible_mem_bp damos quota goal commit
6ce4f6041f0a mm/damon/core: keep the temporal tuner quota over an unmeasured PSI round
02ec9946b060 mm/damon/core: handle uninitialized damos_quota_goal->last_psi_total
f1cd1c0a363f mm/damon/tests/core-kunit: test committing psi goal to psi goal
83584cc1f14d mm/list_lru: don't copy stale shrinker id from non-memcg-aware shrinkers
181d9c05e1f3 mm/damon/core: handle extreme memory state in get_in_active_mem_bp()
6bc8eabed3cc mm/damon/core: handle extreme memory state in get_node_memcg_used_bp()
dd5f65687419 mm/damon/core: handle extreme memory state in damon_get_node_mem_bp()
d846270bcf4c mm/damon/vaddr: respect folio end for DAMOS_MIGRATE_{HOT,COLD}
96ebab42a735 mm/damon/vaddr: respect folio end for DAMOS_STAT
fb83418139f5 mm/damon/paddr: respect folio end for DAMOS actions except STAT
b627fe68f02d mm/damon/paddr: respect folio end for DAMOS_STAT
ae1231a51308 mm/damon/core: skip applying scheme if region split for quota fails
85acfd8dba81 mm/page_table_check: skip zero pages
b12effba7f01 mm/huge_memory: do not touch frozen folios in deferred_split_isolate()
f1a578ad1d0c mm: memcontrol: raise MEMCG_MAX for charges that fail without reclaiming
5972c107438a mm/mempolicy: skip zone device folios when queueing folios
c30bf2e8df83 mm/madvise: skip zone device folios in cold/pageout PMD range
79b8838922c0 mm/huge_memory: skip zone device folios in madvise_free_huge_pmd()
8645813dad5b mm/mempolicy: take a cpuset cookie for the interleave node count
736429415fbd mm/memcontrol: fix stuck FLUSHING_CACHED_CHARGE bit on isolated cpus
be590f68f4c6 zram: fix idle age_sec underflow in idle_store()
129d1347b476 mm/page_isolation: guard compound_order() against racing
ff51185900dd mm/page_isolation: fix UBSAN shift-out-of-bounds warning
5c7804c729df mm/memcontrol: fix data-race on reading jiffies_64
ccc0b9d03b5c mm/ksm: mark migration stores with WRITE_ONCE()
d3467070187d wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz
6c0948bbd244 PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow
5ad79778884b PCI/DOE: Fix double free of a duplicate feature's sysfs name
14291f4c2599 dlm: fix send buffer backpressure handling
a78ce86d1300 dmaengine: sh: rz-dmac: Fix off-by-one in residue lmdesc lookup
f7bdf4668a70 floppy: return the drive state flags from the 32-bit FDGETDRVSTAT
74319a568e8e floppy: don't store a stack buffer in timeout_message
0532109cf4b5 dmaengine: loongson2-apb-cmc: fix descriptor leak in prep_slave_sg()
4771f7d61e06 ASoC: codecs: rt5682s: disable jack detection work on shutdown
72bde69388e8 ASoC: stm: stm32_i2s: request IRQ after regmap initialization
04123ffb1859 xfarray: don't crash when sorting if array element crosses a folio
e99f09c7bc15 svcrdma: Grant credits from the clamped sc_max_requests
f06ab53fbb19 perf: xgene: initialize lock before requesting IRQ
9241db627f3a spi: atmel-quadspi: balance runtime PM and pclk across system sleep
c26641b4d046 power: supply: ab8500_fg: Report sub-percent charge changes
dac7ab558329 power: supply: ab8500_fg: Accept status from supplied power
116e2d03da1e ALSA: aloop: Don't constrain playback params in notify mode
7583b4cffa9c fsverity: hoist statx reporting of fs-verity flag
396a98fa8213 power: supply: ltc2941: Fix of_node reference leak in ltc294x_i2c_probe()
8d9c49185c1f power: supply: core: Honor supplied-from with CONFIG_OF=y
670d40b24612 media: hantro: disable runtime PM before hardware teardown
d1c1f7ed7f5d media: amphion: fix runtime PM imbalance on probe failure
90896a3a833e media: hantro: Harden MPEG-2 control access against NULL
b6f62366bc01 media: vicodec: fix NULL deref on oversized frame
43ab03caf378 media: mediatek: jpeg: retry HW selection after successful wait
4e7f4f372e0b media: verisilicon: rockchip: Fix leaks in init
a2455ad533b1 media: mediatek: jpeg: Avoid context access after job finish
9a308be40420 media: mediatek: vpu: release reserved memory on remove
5fcb8302045b media: mediatek: vcodec: destroy core workqueue on remove
54e5aa1854d2 media: rkvdec: do not destroy borrowed SRAM pool
f760e5c5e838 media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker()
be02c5649ce7 media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker()
7c7c65f48ca8 media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init()
df79221ab69e media: mediatek: vpu: free IRQ before destroying watchdog workqueue
70e8f46a3af1 media: amphion: prevent unbind while video instances are open
8124688da256 media: amphion: drain message work before releasing core state
4f3eddcb5d59 media: rockchip: rga: fix rotation on rev0 hardware
2f643182e4fe media: meson: vdec: size capture planes from the aligned canvas
cc038c90213d media: chips-media: wave5: Check decoder qbuf runtime resume
7c67c2c59d81 media: chips-media: wave5: Balance runtime PM on encoder close errors
b98124185222 media: chips-media: wave5: Handle polling IRQ thread failure
9c8fb069ed97 media: rockchip: rga: quiesce IRQ before releasing m2m state
5af696ab3427 media: sti: delta: use unaligned accessors for MJPEG SOF fields
541d9baaaddd media: v4l2-common: Fix P010 format info
da167462dc9e media: imagination: Fix value clamping in calculate_qp_tables
e1c9b86e9b19 KVM: arm64: vgic-v3: Roll back assignments from the new region
6bc133d64056 phy: apple: atc: Support DUMMY PIPEHANDLER state in configure_pipehandler
577f30068f40 soc: samsung: exynos-pmu: fix error paths in cpuhotplug/idle states setup
55dff8c5cc0a KVM: arm64: vgic-v3: Undo assignment on iodev registration failure
813bda74277e x86/bugs: Fix CONFIG_MITIGATION_RETPOLINE=n mitigation reporting
cc87321f8a13 KVM: arm64: Pin the host vCPU before adjusting its PC under pKVM
71b0d6f36840 KVM: arm64: Validate the host vCPU's VM before reading it under pKVM
bc810c2401e5 drm/panel: simple: Add Raystar RFF500F-AWH-DNN enable delay
52ff769d770e crypto: ecc - Handle exceptional points in Shamir multiplication
043e094c5550 crypto: nx - validate 'ignore' before subtracting in decompress
39f06c168e6e hwrng: core - reject unknown RNG names
0b9f7ad25e72 hwrng: ba431 - fix reported byte count
3b3310d34e22 hwrng: amd - report partial reads in non-blocking mode
523eb58df5c1 crypto: caam - fix double-free in caam_rsa_set_priv_key_form()
09da3a7fe795 crypto: sa2ul - Fix HMAC key preparation
2de2a3831765 media: uvcvideo: Fix NULL deref on events for uninitialized controls
866538c31296 PCI: Disable MSI for ULi M1575 EHCI controller
3e24599daf61 arm64: dts: qcom: shikra: Remove cdsp compute-cb@9
f1cfbb02bf8d block: amiflop: synchronize flush timer before track flush
ddcd471e8a91 block: drop the cached plug time when blk_add_rq_to_plug() flushes
de19ed83caaa pps: generators: stop the generator on unregister
60656af31876 KVM: arm64: Fix MMFR0 TGRAN advertisement for pVMs
73e821b4b5ee dm-writecache: fix REQ_FUA processing
2a064e7057ef dm-writecache: fix uncommitted_blocks underflow
8625014a393b dm-writecache: fix a crash if we attempt to use non-dax device
465428dd89a7 dm-writecache: fix a quirk in statistics
3a8d9af96642 dm-writecache: report I/O error if flush failed
16802c8e3d7f dm: fix a bug in dm_accept_partial_bio
d4855cfbaf1c media: em28xx: fix inverted tuner capability check for VBI device
660c91b3100c media: em28xx: fix double free in em28xx_alloc_urbs
7eafaaf044f5 media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler
dd3af412de04 media: rtl28xxu: fix SDR platform device leak
158c67f31448 media: pvrusb2: Fix USB parent device leak in class_dev_create()
546536807ad4 media: tw686x: fix V4L2 device lifetime on probe failure
f037f88eedce media: mali-c55: Ignore disconnected queues when checking readiness
fe430842befe media: mali-c55: Check the statistics buffer address before filling
d9be08094c52 media: mali-c55: Check the parameters buffer address before copying
60ce0c7ad666 media: mali-c55: Free the ISP control handler on unregister
a899494a8f6e media: mali-c55: fail power-on when safe stop times out
db7fce6eb2a7 media: v4l2-isp: reject zero-sized parameter blocks
29f8b5142ef6 media: renesas: rzv2h-ivc: manage runtime PM with devres
2fa18d965e22 media: mali-c55: add padding to mali_c55_params_ccm structure
ced1565397dd staging: rtl8723bs: fix RX buffer OOB write from device-reported length
c3ada827db09 staging: greybus: uart: fix racy TIOCMIWAIT implementation
419c7a3d1dcb drm/msm/dsi: Fix VM leak in dsi_tx_buf_alloc_6g()
86765e3827c5 drm/msm/hdmi_bridge: Correct poweroff/audio cleanup order in post_disable
a659248c3312 drm/msm/hdmi: Handle msm_hdmi_power_on() errors during .atomic_pre_enable()
b06d40781705 drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure
1d9f1c71725d i3c: master: adi: free the IRQ before unregistering the master
2c7e53207f48 arm64: dts: freescale: imx95-aquila: Enable I2C_3_DSI1 on Clover board
baa8b3891a62 IB/hfi1: Shutdown self-rearming timers before freeing
9dbe5fe5c243 pwm: tiehrpwm: Clear period on disable to allow reconfiguration
ed5ef3f88c23 nilfs2: ignore non-fatal signals during synchronous log write wait
2edc057609a0 vfio/pci: Restore 8-byte ioeventfd support
5265aef398cf clk: tenstorrent: Fix refcount leak on shared gate clk enable failure
46a0b522242d clk: tenstorrent: Assign .num before accessing .hws
4dfa8994b708 nilfs2: clear dirty flag on bdev buffers on log write failure
02cb989b1066 ASoC: pcm6240: do not free an unrequested IRQ
71a98fc0691d powerpc/pseries/iommu: Add TCEs for 16GB pages when RAM is pre-mapped
bd366a8cd94a pseries/plpks: hide wrapping_features when unsupported
a9ac83078b2a pseries/plpks: fix self-reference in plpks_var initializer
d16d652ff50d pseries/plpks: clear SED key data after use
cffc9fee6df5 pseries/plpks: clear signed update authentication buffer
d4d9c131624d pseries/plpks: clear sensitive buffers in wrapping operations
995849e64c03 pseries/plpks: clear sensitive PLPKS buffers
29ea547fa05e pseries/plpks: validate input to plpks_signed_update_var()
53f960a9523a pseries/plpks: fix error code for wrapping key reads
f6af47c9b04f pseries/plpks: fix error handling in plpks_read_var()
764eaae4a779 powerpc/bpf: fix alignment of long branch trampoline address
0e7ec5fe2fc9 powerpc/bpf: fix buffer overflow in JIT for large BPF programs
67511cced5a1 powerpc64/bpf: fix percpu private stack leak on JIT failure
1dca563f49b2 clk: starfive: jh7110-isp: fix refcount leak in jh7110_ispcrg_probe()
730c62d68cbc ALSA: core: Check shutdown flag at D0 power-state, too
014c2c79599b m68k: dmasound: Keep the Q40 IRQ handler registered
3d481c056453 ALSA: sgio2audio: Only free successfully requested IRQs
f9a8f00bdd6d media: iris: Fix frame interval enumeration for non-divisor framerates
212eac2cbb2b media: iris: Fix power-off ordering to disable power domain after clocks
b1f044531d9c media: iris: Fix bus_info prefix in VIDIOC_QUERYCAP
190082e89a42 media: iris: Fix iova allocation from restrict region
be3d96d7e6fa media: iris: avoid bit depth validation for capture formats
5bc84a24b90d media: iris: reset AHB bridge before enabling HW mode
c2ffe9ae9db1 media: venus: Fix iova allocation from restrict region
07f3f2b69bf7 media: qcom: camss: Add "gcc_axi_hf" to 8775p VFE lite clock lists
bb1d103df3c3 media: qcom: camss: vfe: Fix VFE reset while another line is streaming
71ae636d274f media: qcom: camss: vfe-17x: Fix write master selection for RDI lines
270868567f87 media: qcom: camss: vfe-17x: Fix write master buffer done being dropped
416531e8b3fe ALSA: timer: Handle userspace-driven timer ioctls from 32-bit tasks
f0dd015ed8ce cxl/acpi: Check ACPI companion before use
69945942b122 fs/ntfs3: reject an oversized resident attribute on the inline iomap path
3d5dbe7706a9 fs/ntfs3: fix integer overflow in find_log_rec() causing OOB read
1b72aab9d658 spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup()
8e98d2c933de iio: pressure: dps310: fix CFG_REG bit definitions
58d5c8c7df8d iio: adc: stm32: fix minimum sampling time values
dcb2e7ad23ac iio: dac: mcp47feb02: Avoid unjustified probe error on missing label
250a6a02dd76 iio: accel: sca3000: reject devices without match data
e5f828765e23 iio: accel: adxl380: reject devices without match data
003b5a5bf031 iio: accel: adxl372: reject devices without match data
30dc79cebd92 iio: accel: adxl313: reject devices without match data
ca56df9fda43 iio: adc: ti-ads7950: validate SPI match data
3a34bf7c1fa8 iio: adc: ti-ads131m02: reject devices without match data
a98835b8d366 iio: adc: ti-ads1018: reject devices without match data
5db6a2fda705 iio: adc: ti-adc128s052: validate SPI match data
f3a10618b0b3 iio: adc: mcp3911: reject devices without match data
fac39c779d14 iio: adc: max11205: reject devices without match data
38702d00195c iio: adc: ad7768-1: reject devices without match data
864f9a04801a iio: adc: ad7606: reject devices without match data
30e229f0e12b iio: adc: ad7192: reject devices without match data
b17204122845 iio: pressure: bmp280: validate SPI match data
83fd3f6d2899 iio: potentiometer: x9250: reject devices without match data
d0bca431e488 iio: imu: adis16400: validate SPI match data
8b3c634781f9 iio: frequency: adf4377: reject devices without match data
d694eabcc913 iio: dac: mcp4821: reject devices without match data
d1b39462450a iio: dac: ad5755: validate SPI match data
718f33eb441d iio: amplifiers: ad8366: reject devices without match data
dcffada9bf32 iio: adc: ad4080: enable address ascension for chip identification
9705fdc22edb ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status()
80d81ab3f019 ALSA: mpu401: shut down timer before freeing MPU
2d49843e7f37 fuse: fix GCC 8 build with CONFIG_PROFILE_ALL_BRANCHES
675c26291463 iommu/vt-d: Avoid out-of-range shift in qi_desc_dev_iotlb_pasid()
2c843edd0e07 arm64: dts: qcom: ipq9574: Wire up USB3 PHY PIPE clock to GCC
3300a0eb3a39 arm64: dts: qcom: sdm845-xiaomi-polaris: Extend the xbl_mem region
d680391e0530 arm64: dts: qcom: sdm845-xiaomi-beryllium: Extend the xbl_mem region
034f2d8d18a2 netfilter: ctnetlink: fix inverted IPv6 address match in dump filter
0a75547e1909 MIPS: mm: do not write a huge TLB entry when the probe misses
93ed028d8fbd MIPS: mm: align hugetlb mappings in arch_get_unmapped_area()
4fd207f60873 hwmon: (tmp108) Fix jiffies wraparound in conversion-ready check
d6675d774a96 hwmon: (tmp102) Fix jiffies wraparound in conversion-ready check
4ae66b04206f peci: npcm: Initialize state before requesting IRQ
8b5d12700e23 peci: aspeed: Initialize state before requesting IRQ
92047ab3be68 ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status()
1a75ff14062d ASoC: sdw_utils: clear stale RT711 device reference on exit
e8bcf91b7929 dcache: report a Tasks-RCU quiescent state in dentry_kill()
08a8c59e5c4f hwmon: (coretemp) Refresh the temperature on the first read
da78982c1b06 mtd: Call get_wunit() on the master partition
9b0f176126b9 mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb()
2a22243c1247 mtd: maps: l440gx: Fix double put of the PM device in init_l440gx()
c312ee756e74 mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx()
6195e15f4480 mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one()
7ac5b43cc863 mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device
0ae6ab2bfeba mtd: maps: pci: balance PCI enable on cleanup
e352c29fbdcd mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init()
b75a082e860d mtd: rawnand: nuvoton: fix clock cleanup on probe failure
a85fffa36244 platform/x86/intel/pmt: Block mmap when callback is present
ac8661910ebe fuse: don't drop destination page cache on a zero byte copy reply
5b3da0a784f8 fuse: don't shorten the folio descriptor at LLONG_MAX
127a22646c87 hwmon: (lm70) Fix rounding of negative temperatures
c9e68bc75465 hwmon: (lm95245) Fix negative temperature conversion
53b3a80c7169 regulator: core: Fix coupled regulators reference leak on removal
99193298f592 KVM: arm64: ptdump: Fix shadow ptdump sleep-in-atomic-context problem
942fdac99284 KVM: arm64: ptdump: Check the page tables aren't freed when accessing
604f050c77c3 clk: mvebu: ap-cpu-clk: Assign .num before accessing .hws
7aa3c1063c91 ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls
8642f08c3286 ASoC: Intel: atom: Fix platform device leak on probe failure
b72dc670cbbc kobject: fix out-of-bounds access in kobject_action_type()
d0613a385afd nilfs2: fix deadlock between nilfs_evict_inode() and find_inode()
96c3e4bd194d perf loongarch: Fix discarded const qualifier in _get_field()
5b172740c73f mfd: twl-core: Unregister the auxiliary platform device on unbind
8c2eaff3553b mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral
e7976a539c06 mfd: wcd934x: set DMA mask on parent to silence "DMA mask not set"
86063f89c7db mfd: Fix MAX77705 dependency on regmap
2f76c8c74f30 mfd: da903x: Cancel IRQ work during teardown
0a08168d2ddb drm/panel: ebbg-ft8719: Set prepare_prev_first
02f2d78510dc clk: qcom: gcc-ipq5018: mark 'gpll0_main' clock as critical
863b476122a5 arm64: dts: freescale: imx95-toradex-smarc: enable Wi-Fi SD interface
998e99e7fe12 arm64: dts: freescale: imx8mp-verdin-yavia: fix external GPIOs
ee7178d53d07 arm64: dts: freescale: imx8mp-toradex-smarc: fix SMARC_SLEEP# gpio-line-names typo
a2a803455cfd arm64: dts: freescale: imx95-aquila: fix gpio-line-names padding
021ef9b57a4c arm64: dts: freescale: imx8mp-verdin-ivy: fix DIGI_1/DIGI_2 gpio-line-names
018529140ef9 arm64: dts: freescale: imx8mm-verdin-ivy: fix DIGI_1/DIGI_2 gpio-line-names
efd624f5a1e2 memory: stm32_omm: fix child clock leak on set_amcr() error path
e6b68b789b16 ASoC: fsl_xcvr: free IRQ before canceling reset work
fc317f0e7d6a media: atmel-isi: release unregistered video device on remove
38034c83a1b2 media: i2c: ov5647: fix power cleanup on remove
d054be8f7860 media: synopsys: hdmirx: fetch colordepth before calculating pixelclock
d277c0545b06 media: vpif_display: Fix i2c adapter reference leak in vpif_probe()
52d2e75c912d media: vpif_capture: Fix i2c adapter reference leak in vpif_probe()
463aa906b957 media: au0828: Fix media device leak in au0828_usb_probe()
d46312123b01 media: adv7180: Initialize mutex before ancillary clients
067dea99ed1d media: tw68: balance PCI enable on cleanup
a6d5137091c1 media: cx18: Disable PCI device on probe failure
b00698d4ad64 media: go7007: unregister the I2C adapter on USB probe failure
660a415b17e2 media: marvell: manage the MMP camera clock provider
f96d56761c93 media: adv748x: Fix endpoint reference leaks on probe failure
e6f3ebe63ce8 media: v4l2-ctrls: do nothing if controls[0] == NULL in cluster functions
3a56392d3d93 media: cec: extron: clear response tail before dispatch
ee68976efd5b crypto: qat - zero the VF migration state buffer on save
431c925a7c7e crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent
b0bfde2bdc71 crypto: hisilicon/hpre - fix ECDH destination DMA mapping
f54f23bff0b1 crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer
e766903726a1 crypto: hisilicon/hpre - fix pointer dereference before length check
66a509b34f4f crypto: amlogic - Fix IRQ handler return value and fallthrough logic
2638b5133af4 crypto: qat - fix error source for QAT GEN6 transmit interface faults
ed89d13541c8 md: validate bblog_size when loading v1.x badblocks metadata
5a68359865e7 EDAC/i10nm: Fix mdev reference leak in i10nm_get_ddr_munits()
ae118e79c6a2 nilfs2: fix checkpoint root lifetime on sysfs errors
1aa28cba80ce cpufreq/amd-pstate: Skip auto_sel write when it already matches the mode
f0292aae74b2 drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable()
f1d57fa2f755 arm64: dts: ti: k3-am62p5-verdin: build zinnia dtbs
06ea36bcbff2 arm64: dts: ti: k3-am62x-phyboard-lyra: Set SD clock pin as OUTPUT
b9562a46769c arm64: dts: ti: k3-am625-var-som: Set MMC clock pins as OUTPUT
109c4367e24c arm64: dts: ti: k3-am625-var-som-symphony: Set SD clock pins as OUTPUT
94a4963c18bd arm64: dts: ti: k3-am625-tqma62xx: Set MMC clock pins as OUTPUT
e29d4dfb6cca arm64: dts: ti: k3-am62-phycore-som: Set eMMC clock pin as OUTPUT
804fa0c3ade5 arm64: dts: ti: k3-am625-sk-common: Set eMMC clock pin as OUTPUT
0405573349c8 arm64: dts: ti: k3-am62x-sk-common: Set SD clock pin as OUTPUT
fdb974fb485d arm64: dts: ti: k3-am625-beagleplay: Set MMC clock pins as OUTPUT
389fc38db3e9 arm64: dts: ti: k3-am62-pocketbeagle2: Set SD clock pin as OUTPUT
707a64f15ea5 arm64: dts: ti: k3-am62-lp-sk: Set eMMC clock pins as OUTPUT
4a3dad68fa35 arm64: dts: ti: k3-am62a-phycore-som: Set eMMC clock pin as OUTPUT
784d076fb722 arm64: dts: ti: k3-am62a7-sk: Set SD clock pin as OUTPUT
0dbb4a8fe98c arm64: dts: ti: k3-am62a7-sk: Set eMMC clock pin as OUTPUT
451df5ff9287 arm64: dts: ti: k3-am62a: Fix MMC0_CLK register address
448975bdced1 ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv()
474270892ac8 media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse()
926abc5ff330 media: ir_toy: Validate the maximum tx carrier
0dff83de4fd6 media: serial_ir: Fix race condition where timer can be re-armed
555f1af1e2a9 media: ene_ir: Ensure teardown is done in the correct order
ae1b1eb10dcf leds: ktd2692: Pass context to regulator cleanup
8539a01b3021 staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error
71a0eaa2ac84 seccomp: restore knotif->state when SECCOMP_ADDFD_FLAG_SEND is interrupted
bd3a2fe8da23 signalfd: don't dequeue the forced fatal signals
d68766d1592e i3c: mipi-i3c-hci-pci: Set drvdata before creating LTR sysfs attribute
d8fedfe669a5 i3c: mipi-i3c-hci: Bounce short reads irrespective of the IOMMU
3ce1ae37eeb6 i3c: master: Fix out-of-bounds read in DMA bounce buffer setup
ee58af5c816b PCI: pciehp: Make 'pciehp_poll_mode' parameter read-only
ce74798da24b ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0
d86aa60c1428 iio: light: apds9306: fix default sampling frequency definition
9d73c672e278 iio: imu: inv_icm42600: force accel odr change when switching power mode
5a2aa105da1a iio: accel: adis16201: fix channel order for buffer mode
d724b9a358cd iio: dac: mcp47feb02: Increase EEPROM Programming Write Cycle Time
248ce16dc1d0 iio: dac: mcp47feb02: Return len when disabling EEPROM store
5bba34c8b853 iio: dac: mcp47feb02: Fix gain field initialization for active channels
d8bc148275a8 iio: dac: mcp47feb02: initialize dac_data field in channel data struct at probe
4cffc04b7afa regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable()
00828bbe72a8 fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs
0cd432165ad7 ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect()
9f76d748fcda cpufreq: CPPC: Create the FIE worker before enabling PCC callbacks
011569ece30d ACPI: CPPC: Propagate errors from cross-CPU FFH calls
0e791eeb12df crypto: omap-sham - fix crypto engine cleanup
05f3200e0b4b crypto: omap-des - fix crypto engine cleanup
9ff83aa42805 crypto: xilinx - clear AES key buffer before freeing it
1f0575f4fc4f crypto: zynqmp-sha - fix NULL pointer dereference in init_tfm
6ef8cc5c3441 PCI: Skip Target Speed quirk on clamped ports with no link
446caa07b43b regulator: core: Fix rdev reference leak in regulator_resolve_supply()
e01ebf57f3f2 regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling()
09a47eb430d1 nilfs2: force clear dirty state when restoring from the shadow map
9c57e2e7976a cpufreq: conservative: Restrict deferred downscaling to low load
432fd21eec8b spi: spi-qpic-snand: publish the ECC context to snandc->qspi
3817e6da1b05 media: imx219: The horizontal blanking step is 8
d9aed4d3e1fa media: imx219: Account for rate_factor in control steps
17ac52e0c02d media: imx219: Account rate_factor in setting upper exposure limit
fe3dcbd26122 media: i2c: cvs: Get the wake IRQ without claiming the GPIO
8b9494dc0f4a drm/panic: Test address from kmap op for NULL
d167818266d2 drm/panic: Do not use un-escaped URL as format string
708060d87b09 md/raid5: validate payload size before calculating payload_len
8b8435630e45 md/raid5: fix NULL pointer dereference in raid5_free_percpu
a0401d7e0aa3 md/raid5: track disks array size to fix extra_page leak on error paths
0c9859590281 iio: adc: at91-sama5d2: disable autosuspend on remove
6ee8dc4fcc38 iio: accel: mma9553: disable autosuspend on remove
23043237c339 iio: accel: mma9551: disable autosuspend on remove
d492d0b5ae0f iio: accel: kxcjk-1013: Disable autosuspend on remove
a564237d4e8d ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id()
45b3faff0061 ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe()
90140d30ee7b usb: fotg210: validate endpoint index in ep0 handlers
5047bb843a03 crypto: atmel-tdes - sync output bounce buffer before DMA
5b57b7aaddd9 ntfs3: bound index head insertions by buffer capacity
9868246e6323 ntfs3: reject empty iomap before reading its LCN
43562e40e0b2 platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str()
5306d8b45013 media: i2c: ov2735: fix power cleanup on remove
2d771a3f7178 media: i2c: og01a1b: power off sensor on remove
fbc832800bc8 media: i2c: alvium-csi2: balance runtime PM usage count on remove
1a27d5b8124a ata: libata: Do not leave ata_host_stop() registered when activation fails
2a17652b3450 ata: libahci: Free the IRQs when activating a multi-IRQ host fails
c051f39412cb ata: ahci_st: Assert the power down reset in the probe() error path
f7ca8124dc2a ata: ahci_st: Do not ignore errors when getting the reset controls
6291e4900ae0 pinctrl: renesas: rzt2h: Fix reading pin value in IRQ function
7942009b3bcd pinctrl: renesas: rzt2h: Setup IRQ in .irq_{request,release}_resources()
74d45cfc027b pinctrl: renesas: rzt2h: Restore correct pin mode on IRQ free
8f736095da82 ata: sata_inic162x: remove dangerous broken driver
95eb501ca345 ACPI: SBS: Fix NULL pointer dereference on allocation failure
3e82f85a40e7 f2fs: compress: fix to handle race between truncate and writeback
1af1d75f3cf0 f2fs: force out-place update for all writes on compressed file
2702225f565a f2fs: drop pending discard commands before reserving device alias
c43b7bede95e dm vdo indexer: validate record page numbers better
519fb5f02e84 dm vdo indexer: prevent delta list overflow on load
9a79e3a2753f affs: validate blocks before freeing them
80137a68e77a iio: adc: max14001: add missing MODULE_DEVICE_TABLE macro
49d318ee82d0 iio: light: isl29028: fix runtime PM reference leak on error paths
df46b452097b PCI: endpoint: pci-epf-vntb: Manage virtual NTB and PCI bus lifetime
27c2ecf6c2e3 iommu/arm-smmu-v3-iommufd: Reject unsupported bits in invalidation commands
0a24ad2b5024 PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier()
3f749d1755c1 gfs2: reject invalid inode sizes
21b865ea576e crypto: ccp - Initialize DBC ioctl mutex before registering device
4919ab024e02 lib/842: require a complete history block for repeat templates
b9652248b8d7 lib/842: reject output overflows from index and short data
14e874b971ad crypto: atmel-aes - fix AADLENR for standalone GHASH
150c8b52be2a crypto: atmel-tdes - zero-initialize device state
f56fab89da73 media: vicodec: zero-initialize stateful decoder heap buffers
8ae62dd7e3b9 media: vivid: cancel svid ctrl work on release
af77a46d2303 media: cx231xx: preserve I2C transfer length
e9115c139cad media: vivid: round the height down to the vertical subsampling factor
e17d9c889b6a PCI: rzg3s: Fix IRQ domain initialization error handling
975ed11492bf PCI: rzg3s: Propagate platform_get_irq_byname() errors
9f5b2652f779 PCI: rzg3s: Disable refclk on probe failure
c6da20a6466f sched/fair: Reset NUMA fault locality after scan period update
e1de95a73d3d iio: imu: inv_icm42600: fix odr change not caught in certain cases
bc717d870fb6 power: supply: bq27xxx: Ensure poll work is cancelled on remove
a5ed5aa7236f power: supply: bq27xxx: synchronize work cancellation on suspend
3c1d17a81462 power: supply: qcom_smbx: notify battery overvoltage recovery
6c20971609a7 power: supply: qcom_smbx: validate battery float voltage
e85d38ecc6aa power: supply: qcom_smbx: fix float voltage selector
7a2194be2ab6 power: supply: qcom_smbx: test battery health status bits
509735e930c8 power: supply: qcom_smbx: include base when petting watchdog
a3919fa30c2e hte: tegra194-test: shut down timer before GPIO release
76701b325e42 ACPI: pfr_update: zero-initialize capability query result
25329f2b10cf dmaengine: altera-msgdma: initialize state before requesting IRQ
e89c7b08cffc drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties
1bdc4854b6b0 media: require two-byte Cypress type 04 records
a8e300890923 media: v4l2-ctrls: default HEVC SPS chroma format to 4:2:0
c39241f34edf media: nuvoton: npcm-video: quiesce VCD IRQ before teardown
ecb28e53fe85 media: synopsys: hdmirx: use request_any_context_irq() for 5V detection IRQ
d8dbd8de9334 media: stv0900: bound DiSEqC reply length to msg[] size
02d9c31a3f64 media: stv090x: bound DiSEqC reply length to msg[] size
8e8b1298193e media: adv7604: avoid negative array index in log_status when cp_read fails
d58472758df8 pinctrl: renesas: rzt2h: Fix used_irqs indexing in clear path
a9a1b36f05c1 mtd: rawnand: sunxi: fix free OOB section offsets
4915c08a122a mtd: rawnand: sunxi: reject ECC maximization on small pages
979d7a2f16eb media: stm32: csi: unregister async notifier on cleanup
fa24f2f62d16 media: stm32: csi: correct remote pad retrieval
d04353654fab media: microchip-isc: don't sleep in the clk .is_enabled callback
bc2589c917eb media: microchip-isc: fix PM runtime leak in AWB work handler
3954e37821eb media: microchip-isc: do not touch WB registers when not streaming
77496797f854 media: microchip-isc: disable histogram and flush AWB work on teardown
040debc49539 media: microchip-isc: synchronize the IRQ before disabling clocks on stop
14a0532b2044 media: microchip-isc: fix awb_mutex and lock lifecycle
2930780b2fa5 perf powerpc-vpadtl: Fix off-by-one in auxtrace_info minimum size check
95931666f543 ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+
b62486881df4 wifi: mac80211: queue frames while off-channel
bc06ead5badf media: m2m-deinterlace: fix default capture field
8c7a8fc987cd staging: media: av7110: fix sp8870 initialization failure state
e2e7fe5b1102 staging: media: av7110: fix corrupted BER reporting in sp8870
a3db968f1741 media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA
7368f8cc3600 media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail
f438de68eb13 media: vidtv: fix frontend reference leak on unbind
f4bb5d4f446b media: vicodec: make encoder CAPTURE dimensions read-only
805d4167f7cc media: vicodec: fix out-of-bounds write on under-rounded coded dimensions
fcabdb0364c2 media: vimc: sensor: fix pixel_rate type to resolve do_div() warning
e511ec0459c5 media: vim2m: keep transaction buffer count stable while streaming
a711436838b4 media: saa7146: Initialize interrupt lock before requesting IRQ
37630129efa1 media: go7007: bound EZ-USB I2C transfers to the usb_buf size
370da00b0002 media: i2c: tc358743: add missing color-space strings
c6225311418c media: au0828: Free URBs when starting DVB streaming fails
bef138010dad firewire: core: fix source bus ID detection for AT context in big-endian systems
617b0c111521 media: cx231xx: Fix cleanup path on failure
450f37994eb3 media: cx231xx-audio: drain wq_trigger before audio fini
079615bb524a media: pci: hws: only init channels the device actually has
9be75b4b0b37 media: hws: Wait for IRQ handler before returning buffers
ce6b17de65f8 media: hws: report measured colorimetry
08f76235edcf arm64: dts: mediatek: mt7986: correct timer frequency
fc00d3bf8edf isofs: fix Rock Ridge CE extent validation on multisession media
f6cdb40f4b2f riscv: dts: spacemit: k3: fix IMSIC num-guest-ids
c72b7b9cf073 mtd: rawnand: ndfc: use devm_platform_ioremap_resource()
88797cada290 thermal: intel: int340x: Fix temperature selection around 0 C
bb999fc09e47 thermal: intel: powerclamp: Reject invalid window_size values
a5c2fd5d1ad0 arm64: dts: ti: k3-am62-verdin: Set MMC clock pins as OUTPUT
18ba0295bd43 fs: make sure to call fsnotify_inoderemove() only once when inode is dead
cc980ef537d4 fs_pin: publish pins with RCU list helpers
3cc28e51ea3c mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption
db4a2da55ca4 mtd: spi-nor: sfdp: check the length of the SCCR map
a5de200ac41b mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table
f44903fd5463 PCI: rcar-gen4: Limit Max_Read_Request_Size to 256 Bytes
3943cc7b6400 media: i2c: ov8856: fix debug message to report actual CSI-2 lane count
c30905f0a53a media: i2c: ov8856 : remove ACPI node bypass mechanism
5d48c1959ced wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup()
200418136724 clk: mediatek: Add missing depend for COMMON_CLK_MT8173
89d1e9ef79d6 arm64: dts: qcom: sdm845-google: Set i2c3 frequency to 400 kHz
706f6ad40abe media: i2c: cvs: Add sensor node in bound callback
6c0c04f4b5c5 hte: tegra194: Initialize slice locks before registering chip
53ac20d3abe7 bpf: Fix queue/stack map u32 index overflow
bc439f8c590e ARM: imx: Fix suspend/resume crash with Clang CFI
698119b61439 clk: mstar: msc313-mpll: fix off-by-one in clock array allocation
aa6c2e1ab3b4 platform/x86: int3472: Increase handshake GPIO delay to 200 ms
18be38d3ac80 platform/x86: int3472: Fix uninitialised variable warning
05900047061f wifi: rtw89: cap firmware section_num before parsing
d7ba97ea9e4f wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields
aa33d8dae0b4 wifi: rtw88: fix out-of-bounds CAM write when key table is full
d6ac588011cf memory: renesas-rpc-if: Mark XSPI_CDD1BUF0 as volatile
621858d07760 memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT
d0e60dcada94 memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset
daf124d46c9b PCI: aspeed: Fix clk and PHY leak in aspeed_pcie_port_init() error paths
560fb159ad7b microblaze: preserve the MSR carry flags across signals
60fa983bcf4e microblaze: restore the ABI argument home area below pt_regs (PTO)
3f11e9ef8441 microblaze: don't clobber r3/r4 restored by rt_sigreturn
60351dccca23 microblaze: reserve the ABI argument-home area in the signal frame
2959cb1fceb4 udf: validate the device specification EA before using it
0965f82b99bb PCI: qcom: Only check bridge nodes for PERST# GPIOs
608664dfb2a3 soc: qcom: pmic_glink: Fix device access from worker during suspend
f2bc9dc41b5a soc: qcom: geni-se: Fix write to read-only firmware buffer
8337359748cc soc: qcom: geni-se: Fix fw_end computed before round-up; propagate size to caller
d1709448962f soc: qcom: geni-se: Widen fw_size to u32 to prevent wrap-around
fb684c428c8a soc: qcom: geni-se: Fix endian conversion for serial_protocol comparison
fe4a7f89cbf2 remoteproc: elf_loader: Bound the section header table
fd1fa7d85f5b kho: do not reserve scratch memory in the kdump kernel
abdce0f17b8b ipc/mqueue: release notification resources during inode eviction
75484c58a1b7 aio: prevent eventfd/epoll recursion on poll
51f8743fc795 udf: Make sure there's enough space for LVID implementation use field
6cd03176a1c8 devtmpfs: restore mount option reconfiguration on get_tree
3813a3a89ce0 microblaze: Fix MB_MANAGER build with older binutils
301b5e14f18e media: imx-jpeg: finish the job on device_run() error paths
f47ae8023820 media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled
9b01eb250056 media: meson-ir-tx: Ensure probe error is propagated
ff7c71738339 media: meson-ir-tx: Ensure rc_free_device() is called on unbind
ef9a0883b7e9 media: meson-ir-tx: Ensure clock is disabled on unbind
9ef05df57654 media: sunxi-cir: Ensure no more interrupts can occur before free
70bb00b16ce4 media: redrat3: Error path leaves device in transmitting state
a3eb5aa54ec7 media: redrat3: Ensure all urbs are suspended
6c13445133b6 media: redrat3: Ensure we don't read beyond the end of the packet
44414b196a0c media: streamzap: Add missing rc_unregister_device()
f3253b91ef0b cpufreq: airoha: fix probe failure with correct error check
1852374816e0 iio: light: ltr501: Power down chip if request irq fails
74536340dbd2 iio: adc: ti-ads1100: Fix incorrect reading when datarate changed in single mode
db4b7b8f9233 drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG
ec67981c87d5 drm/amdgpu: recompute the dw estimate after allocating a new VM update job
998378828857 drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq
16fd45596851 drm/nouveau: cancel the DP IRQ work before freeing the connector
bf09cf3e0501 drm/nouveau: disable the fence uevent work instead of just cancelling it
878556222f10 drm/nouveau/pci: use config-space MSI rearm on MCP79/MCP7A (NVAC)
08d221ba8756 drm/nouveau/svm: drain fault handler before freeing svmm
f1ef16495b49 drm/nouveau: reject zero-size notifier object allocation
d690c7847212 alpha: honor force_successful_syscall_return() again
77a3708e5ca3 media: rc: Add missing locking for keymap
843cb5580911 media: rc: Replace open coded krealloc() for keymap
8b2b6e138f20 rust: dma: declare cfi_encoding for dma_data_direction
996cf1b7115f rust: hrtimer: declare cfi_encoding for hrtimer_restart
08fafee643dc rust: irq: declare cfi_encoding for irqreturn
eb8a2d156f2c inet: reject unhashed sockets during established lookups
733a4f28a88c x86/mm/pat: Use pr_warn() for early W^X warnings
7f3ea4dc4217 mptcp: fix MP_CAPABLE token migration when cloning reqsk
a79d563900e4 media: saa7134: Specify rc type at rc_allocate_type()
46dcd5184da2 media: cx88: Specify rc type at rc_allocate_type()
c760e6b0cb7c drm/xe: Implement Wa_22016122933