Changelog
in Linux kernel
6.12.75
9p/xen:
protect xen_9pfs_front_free against concurrent calls
ACPI:
battery: fix incorrect charging status when current is zero
ACPI:
CPPC: Fix remaining for_each_possible_cpu() to use online CPUs
ACPI:
PM: Add unused power resource quirk for THUNDEROBOT ZERO
ACPI:
processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
ACPI:
resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[]
ACPI:
x86: Force enabling of PWM2 on the Yogabook YB1-X90
ACPI:
x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display)
ACPICA:
Abort AML bytecode execution when executing AML_FATAL_OP
ACPICA:
Fix NULL pointer dereference in acpi_ev_address_space_dispatch()
alpha:
fix user-space corruption during memory compaction
ALSA:
hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro
ALSA:
hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx
ALSA:
hda/realtek: add HP Victus 16-e0xxx mute LED quirk
ALSA:
hda/realtek: fix LG Gram Style 14 speakers
ALSA:
mixer: oss: Add card disconnect checkpoints
ALSA:
pcm: Relax __free() variable declarations
ALSA:
pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl()
ALSA:
pcm: use new array-copying-wrapper
ALSA:
usb-audio: Add iface reset and delay quirk for AB13X USB Audio
ALSA:
usb-audio: Add sanity check for OOB writes at silencing
ALSA:
usb-audio: Update the number of packets properly at receiving
ALSA:
vmaster: Relax __free() variable declarations
APEI/GHES:
ARM processor Error: don't go past allocated memory
APEI/GHES:
ensure that won't go past CPER allocated record
AppArmor:
Allow apparmor to handle unaligned dfa tables
apparmor:
avoid per-cpu hold underflow in aa_get_buffer
apparmor:
Fix & Optimize table creation from possibly unaligned memory
apparmor:
fix aa_label to return state from compount and component match
apparmor:
fix invalid deref of rawdata when export_binary is unset
apparmor:
fix NULL sock in aa_sock_file_perm
apparmor:
fix rlimit for posix cpu timers
apparmor:
make label_match return a consistent value
apparmor:
remove apply_modes_to_perms from label_match
apparmor:
return -ENOMEM in unpack_perms_table upon alloc failure
arm64:
Add support for TSV110 Spectre-BHB mitigation
arm64:
Disable branch profiling for all arm64 code
arm64:
dts: amlogic: axg: assign the MMC signal clocks
arm64:
dts: amlogic: c3: assign the MMC signal clocks
arm64:
dts: amlogic: g12: assign the MMC A signal clock
arm64:
dts: amlogic: g12: assign the MMC B and C signal clocks
arm64:
dts: amlogic: gx: assign the MMC signal clocks
arm64:
dts: amlogic: s4: assign mmc b clock to 24MHz
arm64:
dts: amlogic: s4: fix mmc clock assignment
arm64:
dts: apple: t8112-j473: Keep the HDMI port powered on
arm64:
dts: mediatek: mt8183-jacuzzi-pico6: Fix typo in pinmux node
arm64:
dts: qcom: agatti: Add CX_MEM/DBGC GPU regions
arm64:
dts: qcom: msm8994-octagon: Fix Analog Devices vendor prefix of AD7147
arm64:
dts: qcom: qrb4210-rb2: Fix UART3 wakeup IRQ storm
arm64:
dts: qcom: sdm630: fix gpu_speed_bin size
arm64:
dts: qcom: sdm845-db845c: drop CS from SPIO0
arm64:
dts: qcom: sdm845-db845c: specify power for WiFi CH1
arm64:
dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on
arm64:
dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on
arm64:
dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions
arm64:
dts: qcom: x1e80100: Add missing TCSR ref clock to the DP PHYs
arm64:
dts: qcom: x1e80100: Fix USB combo PHYs SS1 and SS2 ref clocks
arm64:
dts: qcom: x1e: bus is 40-bits (fix 64GB models)
arm64:
dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro
arm64:
dts: ti: k3-j784s4-j742s2-main-common.dtsi: Refactor watchdog instances for j784s4
arm64:
dts: ti: k3-j784s4-main.dtsi: Move c71_3 node to appropriate order
arm64:
dts: tqma8mpql-mba8mp-ras314: Fix HDMI CEC pad control settings
arm64:
dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings
arm64:
Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
arm64:
Fix sampling the "stable" virtual counter in preemptible section
arm64:
Force the use of CNTVCT_EL0 in __delay()
arm64:
hugetlbpage: avoid unused-but-set-parameter warning (gcc-16)
arm64:
poe: fix stale POR_EL0 values for ptrace
arm64:
tegra: smaug: Add usb-role-switch support
ARM:
9467/1: mm: Don't use %pK through printk
ARM:
dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property
arm:
dts: lpc32xx: add clocks property to Motor Control PWM device tree node
ARM:
dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells
ARM:
omap2: Fix reference count leaks in omap_control_init()
ARM:
VDSO: Patch out __vdso_clock_getres() if unavailable
ASoC:
amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
ASoC:
codecs: aw88261: Fix erroneous bitmask logic in Awinic init
ASoC:
codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe()
ASoC:
dt-bindings: asahi-kasei,ak4458: Fix the supply names
ASoC:
dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false
ASoC:
dt-bindings: asahi-kasei,ak5558: Fix the supply names
ASoC:
es8328: Add error unwind in resume
ASoC:
fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe
ASoC:
fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
ASoC:
nau8821: Avoid unnecessary blocking in IRQ handler
ASoC:
nau8821: Consistently clear interrupts before unmasking
ASoC:
nau8821: Fixup nau8821_enable_jack_detect()
ASoC:
rockchip: i2s-tdm: Use param rate if not provided by set_sysclk
ASoC:
soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated
ASoC:
SOF: Intel: hda: Fix NULL pointer dereference
ASoC:
SOF: ipc4-control: If there is no data do not send bytes update
ASoC:
SOF: ipc4-control: Keep the payload size up to date
ASoC:
SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data
ASoC:
SOF: ipc4-topology: Correct the allocation size for bytes controls
ASoC:
SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET
ASoC:
sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio
ASoC:
wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
ASoC:
wm8962: Don't report a microphone if it's shorted to ground on plug
ata:
libata-scsi: refactor ata_scsi_translate()
ata:
libata: avoid long timeouts on hot-unplugged SATA DAS
ata:
pata_ftide010: Fix some DMA timings
atm:
fore200e: fix use-after-free in tasklets during device removal
audit:
add fchmodat2() to change attributes class
audit:
add missing syscalls to read class
audit:
move the compat_xxx_class[] extern declarations to audit_arch.h
auxdisplay:
arm-charlcd: fix release_mem_region() size
backlight:
qcom-wled: Change PM8950 WLED configurations
backlight:
qcom-wled: Support ovp values for PMI8994
binder:
don't use %pK through printk
blk-mq-debugfs:
add missing debugfs_mutex in blk_mq_debugfs_register_hctxs()
block:
add a bio_add_virt_nofail helper
block:
decouple secure erase size limit from discard size limit
Bluetooth:
btintel_pcie: Use IRQF_ONESHOT and default primary handler
Bluetooth:
btusb: Add device ID for Realtek RTL8761BU
Bluetooth:
btusb: Add new VID/PID for RTL8852CE
Bluetooth:
btusb: Add support for MediaTek7920 0489:e158
Bluetooth:
hci_conn: Set link_policy on incoming ACL connections
Bluetooth:
hci_conn: use mod_delayed_work for active mode timeout
Bluetooth:
hci_qca: Cleanup on all setup failures
Bluetooth:
L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
Bluetooth:
L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
Bluetooth:
L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ
Bluetooth:
L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
Bluetooth:
L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short
bnxt_en:
Allow ntuple filters for drops
bnxt_en:
Fix deleting of Ntuple filters
bnxt_en:
Fix RSS context delete logic
bonding:
alb: fix UAF in rlb_arp_recv during bond up/down
bonding:
only set speed/duplex to unknown, if getting speed failed
bpf, sockmap:
Fix FIONREAD for sockmap
bpf, sockmap:
Fix incorrect copied_seq calculation
bpf:
crypto: Use the correct destructor kfunc type
bpf:
Fix bpf_xdp_store_bytes proto for read-only arg
bpf:
Preserve id of register in sync_linked_regs()
bpf:
Recognize special arithmetic shift in the verifier
bpf:
verifier improvement in 32bit shift sign extension pattern
bpftool:
Fix truncated netlink dumps
btrfs:
continue trimming remaining devices on failure
btrfs:
fallback to buffered IO if the data profile has duplication
btrfs:
fix block_group_tree dirty_list corruption
btrfs:
fix invalid leaf access in btrfs_quota_enable() if ref key not found
btrfs:
handle user interrupt properly in btrfs_trim_fs()
btrfs:
qgroup: return correct error when deleting qgroup relation item
btrfs:
replace BUG() with error handling in __btrfs_balance()
btrfs:
use the correct type to initialize block reserve for delayed refs
bus:
fsl-mc: fix an error handling in fsl_mc_device_add()
bus:
omap-ocp2scp: fix OF populate on driver rebind
ceph:
supply snapshot context in ceph_uninline_data()
ceph:
supply snapshot context in ceph_zero_partial_object()
char:
tpm: cr50: Remove IRQF_ONESHOT
cifs:
Fix locking usage for tcon fields
cifs:
some missing initializations on replay
clk:
clk-apple-nco: Add "apple,t8103-nco" compatible
clk:
mediatek: Fix error handling in runtime PM setup
clk:
meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
clk:
microchip: core: correct return value on *_get_parent()
clk:
Move clk_{save,restore}_context() to COMMON_CLK section
clk:
qcom: dispcc-sdm845: Enable parents for pixel clocks
clk:
qcom: dispcc-sm7150: Fix dispcc_mdss_pclk1_clk_src
clk:
qcom: gcc-ipq5018: flag sleep clock as critical
clk:
qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc
clk:
qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
clk:
qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops
clk:
qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops
clk:
qcom: gcc-sm4450: Update the SDCC RCGs to use shared_floor_ops
clk:
qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops
clk:
qcom: gcc-sm8550: Use floor ops for SDCC RCGs
clk:
qcom: gcc-sm8650: Use floor ops for SDCC RCGs
clk:
qcom: gcc-x1e80100: Update the SDCC RCGs to use shared_floor_ops
clk:
qcom: gfx3d: add parent to parent request map
clk:
qcom: rcg2: compute 2d using duty fraction directly
clk:
qcom: Return correct error code in qcom_cc_probe_by_index()
clk:
renesas: rzg2l: Fix intin variable size
clk:
renesas: rzg2l: Select correct div round macro
clk:
rs9: Reserve 8 struct clk_hw slots for for 9FGV0841
clk:
tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc()
clocksource/drivers/sh_tmu:
Always leave device running after probe
clocksource/drivers/timer-integrator-ap:
Add missing Kconfig dependency on OF
coresight:
etm3x: Fix cpulocked warning on cpuhp
cpufreq:
dt-platdev: Block the driver from probing on more QC platforms
cpufreq:
intel_pstate: Enable asym capacity only when CPU SMT is not possible
cpufreq:
scmi: Fix device_node reference leak in scmi_cpu_domain_id()
cpuidle:
governors: menu: Always check timers with tick stopped
cpuidle:
Skip governor when only one idle state is available
crypto:
caam - fix netdev memory leak in dpaa2_caam_probe
crypto:
cavium - fix dma_free_coherent() size
crypto:
ccp - Add an S4 restore flow
crypto:
ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails
crypto:
ccp - Ensure implicit SEV/SNP init and shutdown in ioctls
crypto:
ccp - Factor out ring destroy handling to a helper
crypto:
ccp - narrow scope of snp_range_list
crypto:
ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails
crypto:
hisilicon/qm - move the barrier before writing to the mailbox register
crypto:
hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable
crypto:
hisilicon/trng - support tfms sharing the device
crypto:
hisilicon/zip - adjust the way to obtain the req in the callback function
crypto:
octeontx - fix dma_free_coherent() size
crypto:
qat - fix warning on adf_pfvf_pf_proto.c
crypto:
starfive - Fix memory leak in starfive_aes_aead_do_one_req()
cxl:
Fix premature commit_end increment on decoder commit failure
dlm:
validate length in dlm_search_rsb_tree
dm mpath:
make pg_init_delay_msecs settable
dm-integrity:
fix a typo in the code for write/discard race
dm-integrity:
fix recalculation in bitmap mode
dm-unstripe:
fix mapping bug when there are multiple targets in a table
dm-verity:
correctly handle dm_bufio_client_create() failure
dm:
clear cloned request bio pointer when last clone bio completes
dm:
fix unlocked test for dm_suspended_md
dm:
remove fake timeout to avoid leak request
dm:
replace -EEXIST with -EBUSY
dm:
use bio_clone_blkg_association
dm:
use READ_ONCE in dm_blk_report_zones
dma:
dma-axi-dmac: fix HW scatter-gather not looking at the queue
dma:
dma-axi-dmac: fix SW cyclic transfers
dmaengine:
fsl-edma: don't explicitly disable clocks in .remove()
dmaengine:
mediatek: uart-apdma: Fix above 4G addressing TX/RX
dmaengine:
stm32-dma3: use module_platform_driver
dmaengine:
stm32-mdma: initialize m2m_hw_period and ccr to fix warnings
dmaengine:
sun6i: Choose appropriate burst length under maxburst
docs:
fix WARNING document not included in any toctree
Documentation:
PCI: endpoint: Fix ntb/vntb copy & paste errors
Documentation:
trace: Refactor toctree
Documentation:
tracing: Add PCI tracepoint documentation
dpaa2-switch:
validate num_ifs to prevent out-of-bounds write
drbd:
always set BLK_FEAT_STABLE_WRITES
Drivers:
hv: vmbus: Use kthread for vmbus interrupts on PREEMPT_RT
drivers:
iio: mpu3050: use dev_err_probe for regulator request
drm/amd/display:
Add signal type check for dcn401 get_phyd32clk_src
drm/amd/display:
Add USB-C DP Alt Mode lane limitation in DCN32
drm/amd/display:
avoid dig reg access timeout on usb4 link training fail
drm/amd/display:
Avoid updating surface with the same surface under MPO
drm/amd/display:
bypass post csc for additional color spaces in dal
drm/amd/display:
Disable FEC when powering down encoders
drm/amd/display:
Fix dsc eDP issue
drm/amd/display:
Fix GFX12 family constant checks
drm/amd/display:
Fix out-of-bounds stream encoder index v3
drm/amd/display:
Fix system resume lag issue
drm/amd/display:
Fix writeback on DCN 3.2+
drm/amd/display:
Increase DCN35 SR enter/exit latency
drm/amd/display:
only power down dig on phy endpoints
drm/amd/display:
Reject cursor plane on DCE when scaled differently than primary
drm/amd/display:
Remove conditional for shaper 3DLUT power-on
drm/amd/display:
Use same max plane scaling limits for all 64 bpp formats
drm/amd:
Drop "amdgpu kernel modesetting enabled" message
drm/amdgpu:
Add HAINAN clock adjustment
drm/amdgpu:
add support for HDP IP version 6.1.1
drm/amdgpu:
Adjust usleep_range in fence wait
drm/amdgpu:
avoid a warning in timedout job handler
drm/amdgpu:
Fix memory leak in amdgpu_acpi_enumerate_xcc()
drm/amdgpu:
Fix memory leak in amdgpu_ras_init()
drm/amdgpu:
fix NULL pointer issue buffer funcs
drm/amdgpu:
fix sync handling in amdgpu_dma_buf_move_notify
drm/amdgpu:
keep vga memory on MacBooks with switchable graphics
drm/amdgpu:
Skip loading SDMA_RS64 in VF
drm/amdgpu:
Use explicit VCN instance 0 in SR-IOV init
drm/amdgpu:
Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()
drm/amdkfd:
Fix GART PTE for non-4K pagesize in svm_migrate_gart_map()
drm/amdkfd:
Fix out-of-bounds write in kfd_event_page_set()
drm/amdkfd:
Fix signal_eviction_fence() bool return value
drm/amdkfd:
Fix watch_id bounds checking in debug address watch v2
drm/amdkfd:
Handle GPU reset and drain retry fault race
drm/amdkfd:
Relax size checking during queue buffer get
drm/atmel-hlcdc:
don't reject the commit if the src rect has fractional parts
drm/atmel-hlcdc:
fix memory leak from the atomic_destroy_state callback
drm/atmel-hlcdc:
fix use-after-free of drm_crtc_commit after release
drm/bridge:
anx7625: Fix invalid EDID size
drm/buddy:
Prevent BUG_ON by validating rounded allocation
drm/buddy:
release free_trees array on buddy mm teardown
drm/display/dp_mst:
Add protection against 0 vcpi
drm/i915/acpi:
free _DSM package when no connectors
drm/i915/wakeref:
clean up INTEL_WAKEREF_PUT_* flag macros
drm/msm/a2xx:
fix pixel shader start on A225
drm/msm/disp/dpu:
add merge3d support for sc7280
drm/msm/disp:
set num_planes to 1 for interleaved YUV formats
drm/msm/dpu:
fix CMD panels on DPU 1.x - 3.x
drm/msm/dpu:
fix WD timer handling on DPU 8.x
drm/msm/dpu:
Set vsync source irrespective of mdp top support
drm/panel:
Fix a possible null-pointer dereference in jdi_panel_dsi_remove()
drm/panel:
sw43408: Remove manual invocation of unprepare at remove
drm/panthor:
Evict groups before VM termination
drm/panthor:
Fix immediate ticking on a disabled tick
drm/panthor:
Fix the full_tick check
drm/panthor:
Fix the group priority rotation logic
drm/panthor:
Fix the logic that decides when to stop ticking
drm/panthor:
Make sure we resume the tick when new jobs are submitted
drm/panthor:
Recover from panthor_gpu_flush_caches() failures
drm/radeon:
Add HAINAN clock adjustment
drm/tests:
shmem: Swap names of export tests
drm/v3d:
Set DMA segment size to avoid debug warnings
drm/xe/mmio:
Avoid double-adjust in 64-bit reads
drm/xe/ptl:
Apply Wa_13011645652
drm/xe/xe2_hpg:
Add set of workarounds
drm/xe/xe2_hpg:
Fix handling of Wa_14019988906 & Wa_14019877138
drm/xe:
Add xe_tile backpointer to xe_mmio
drm/xe:
Adjust mmio code to pass VF substructure to SRIOV code
drm/xe:
Clarify size of MMIO region
drm/xe:
Create dedicated xe_mmio structure
drm/xe:
Move forcewake to 'gt.pm' substructure
drm/xe:
Move GSI offset adjustment fields into 'struct xe_mmio'
drm/xe:
Only toggle scheduling in TDR if GuC is running
drm/xe:
Populate GT's mmio iomap from tile during init
drm/xe:
Switch MMIO interface to take xe_mmio instead of xe_gt
drm/xe:
Switch mmio_ext to use 'struct xe_mmio'
drm/xe:
Unregister drm device on probe error
drm:
Account property blob allocations to memcg
drm:
of: drm_of_panel_bridge_remove(): fix device_node leak
dt-bindings:
phy: qcom-edp: Add missing clock for X Elite
EDAC/altera:
Remove IRQF_ONESHOT
EDAC/i5000:
Fix snprintf() size calculation in calculate_dimm_size()
EDAC/i5400:
Fix snprintf() limit calculation in calculate_dimm_size()
EFI/CPER:
don't dump the entire memory region
EFI/CPER:
don't go past the ARM processor CPER record buffer
efi:
Fix reservation of unaccepted memory table
erofs:
get rid of raw bi_end_io() usage
erofs:
handle end of filesystem properly for file-backed mounts
espintcp:
Fix race condition in espintcp_close()
evm:
Use ordered xattrs list to calculate HMAC in evm_init_hmac()
ext4:
don't cache extent during splitting extent
ext4:
don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1
ext4:
drop extent cache after doing PARTIAL_VALID1 zeroout
ext4:
drop extent cache when splitting extent fails
ext4:
fix dirtyclusters double decrement on fs shutdown
ext4:
fix e4b bitmap inconsistency reports
ext4:
fix memory leak in ext4_ext_shift_extents()
ext4:
mark group add fast-commit ineligible
ext4:
mark group extend fast-commit ineligible
ext4:
move ext4_percpu_param_init() before ext4_mb_init()
ext4:
propagate flags to convert_initialized_extent()
ext4:
subdivide EXT4_EXT_DATA_VALID1
ext4:
use optimized mballoc scanning regardless of inode format
ext4:
use reserved metadata blocks when splitting extent on endio
fat:
avoid parent link count underflow in rmdir
fbcon:
check return value of con2fb_acquire_newinfo()
fbcon:
Remove struct fbcon_display.inverse
fbdev:
au1200fb: Fix a memory leak in au1200fb_drv_probe()
fbdev:
ffb: fix corrupted video output on Sun FFB1
fbdev:
of: display_timing: fix refcount leak in of_get_display_timings()
fbdev:
of_display_timing: Fix device node reference leak in of_get_display_timings()
fbdev:
vt8500lcdfb: fix missing dma_free_coherent()
fgraph:
Do not call handlers direct when not using ftrace_ops
fgraph:
Replace fgraph_ret_regs with ftrace_regs
firmware:
arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET
firmware:
arm_ffa: Unmap Rx/Tx buffers on init failure
Linux:
fix it87_wdt early reboot by reporting running timer
fpga:
dfl: use subsys_initcall to allow built-in drivers to be added
fpga:
of-fpga-region: Fail if any bridge is missing
fs/buffer:
add alert in try_to_free_buffers() for folios without buffers
fs/nfs:
Fix readdir slow-start regression
fs/ntfs3:
avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra()
fs/ntfs3:
drop preallocated clusters for sparse and compressed files
fs/ntfs3:
Fix slab-out-of-bounds read in DeleteIndexEntryRoot
fs/ntfs3:
Initialize new folios before use
fs/ntfs3:
prevent infinite loops caused by the next valid being the same
fs/tests:
exec: drop duplicate bprm_stack_limits test vectors
fs:
add
for 'init_fs'
fs:
ntfs3: check return value of indx_find to avoid infinite loop
fs:
ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
fs:
ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
ftrace:
Consolidate ftrace_regs accessor functions for archs using pt_regs
ftrace:
Make ftrace_regs abstract from direct use
ftrace:
Rename ftrace_regs_return_value to ftrace_regs_get_return_value
ftrace:
Use arch_ftrace_regs() for ftrace_regs_*() macros
function_graph:
Restore direct mode when callbacks drop to one
genirq:
Set IRQF_COND_ONESHOT in devm_request_irq().
gfs2:
fiemap page fault fix
gfs2:
Fix slab-use-after-free in qd_put
gfs2:
Fix use-after-free in iomap inline data write path
gfs2:
Retries missing in gfs2_{rename,exchange}
gpio:
aspeed-sgpio: Change the macro to support deferred probe
gpu/panel-edp:
add AUO panel entry for B140HAN06.4
gro:
change the BUG_ON() in gro_pull_from_frag0()
hfsplus:
fix volume corruption issue for generic/498
hfsplus:
pretend special inodes as regular files
hfsplus:
return error when node already exists in hfs_bnode_create
HID:
apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards
HID:
elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
HID:
hid-pl: handle probe errors
HID:
i2c-hid: Add FocalTech FT8112
HID:
intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients
HID:
logitech-hidpp: Add support for Logitech K980
HID:
logitech-hidpp: Check maxfield in hidpp_get_report_length()
HID:
magicmouse: Do not crash on missing msc->input
HID:
multitouch: add eGalaxTouch EXC3188 support
HID:
playstation: Add missing check for input_ff_create_memless
HID:
prodikeys: Check presence of pm->input_ep82
hisi_acc_vfio_pci:
update status after RAS error
hrtimer:
Fix trace oddity
hwmon:
(dell-smm) Add support for Dell OptiPlex 7080
hwmon:
(f71882fg) Add F81968 support
hwmon:
(nct6775) Add ASUS Pro WS WRX90E-SAGE SE
hwmon:
(pmbus/mpq8785) fix VOUT_MODE mismatch during identification
hwmon:
pmbus: mpq8785: Add support for MPM82504
hwmon:
pmbus: mpq8785: Implement VOUT feedback resistor divider ratio configuration
hwmon:
pmbus: mpq8785: Prepare driver for multiple device support
hwrng:
core - Allow runtime disabling of the HW RNG
hwrng:
core - use RCU and work_struct to fix race condition
hwspinlock:
omap: Handle devm_pm_runtime_enable() errors
hyper-v:
Mark inner union in hv_kvp_exchg_msg_value as packed
i3c:
dw: Fix memory leak in dw_i3c_master_i2c_xfers()
i3c:
dw: Initialize spinlock to avoid upsetting lockdep
i3c:
master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()
i3c:
master: Update hot-join flag only on success
i3c:
mipi-i3c-hci: Reset RING_OPERATION1 fields during init
i3c:
Move device name assignment after i3c_bus_init
IB/cache:
update gid cache on client reregister event
IB/mlx5:
Fix port speed query for representors
icmp:
prevent possible overflow in icmp_global_allow()
iio:
accel: adxl380: Avoid reading more entries than present in FIFO
iio:
gyro: itg3200: Fix unchecked return value in read_raw
iio:
magnetometer: Remove IRQF_ONESHOT
iio:
pressure: mprls0025pa: fix interrupt flag
iio:
pressure: mprls0025pa: fix pressure calculation
iio:
pressure: mprls0025pa: fix scan_type struct
iio:
pressure: mprls0025pa: fix SPI CS delay violation
iio:
pressure: mprls0025pa: fix spi_transfer struct initialisation
iio:
sca3000: Fix a resource leak in sca3000_probe()
iio:
test: drop dangling symbol in gain-time-scale helpers
iio:
Use IRQF_NO_THREAD
include:
uapi: netfilter_bridge.h: Cover for musl libc
inet:
move icmp_global_{credit,stamp} to a separate cache line
inet:
RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
interconnect:
mediatek: Aggregate bandwidth with saturating add
interconnect:
mediatek: Don't hijack parent device
io_uring/cancel:
de-unionize file and user_data in struct io_cancel_data
io_uring/filetable:
clamp alloc_hint to the configured alloc range
io_uring/net:
don't continue send bundle if poll was required for retry
io_uring/sync:
validate passed in offset
io_uring:
use release-acquire ordering for IORING_SETUP_R_DISABLED
iomap:
fix submission side handling of completion side errors
iommu/amd:
move wait_on_sem() out of spinlock
iommu/arm-smmu-v3:
Improve CMDQ lock fairness and efficiency
iommu/vt-d:
Avoid draining PRQ in sva mm release path
iommu/vt-d:
Clear Present bit before tearing down PASID entry
iommu/vt-d:
Drain PRQs when domain removed from RID
iommu/vt-d:
Flush cache for PASID table before using it
iommu/vt-d:
Flush dev-IOTLB only when PCIe device is accessible in scalable mode
iommu/vt-d:
Separate page request queue from SVM
ionic:
Rate limit unknown xcvr type messages
ipc:
don't audit capability check in ipc_permissions()
ipmi:
ipmb: initialise event handler read bytes
ipv4:
fib: Annotate access to struct fib_alias.fa_state.
ipv4:
igmp: annotate data-races around idev->mr_maxdelay
ipv6:
annotate data-races in ip6_multipath_hash_{policy,fields}()
ipv6:
annotate data-races over sysctl.flowlabel_reflect
ipv6:
exthdrs: annotate data-race over multiple sysctl
ipv6:
fix a race in ip6_sock_set_v6only()
ipv6:
Fix out-of-bound access in fib6_add_rt2node().
ipv6:
ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
ipvs:
do not keep dest_dst if dev is going down
jfs:
Add missing set_freezable() for freezable kthread
jfs:
nlink overflow in jfs_rename
kallsyms/ftrace:
set module buildid in ftrace_mod_address_lookup()
kbuild:
Add objtool to top-level clean target
kcm:
fix zero-frag skb in frag_list on partial sendmsg error
kcsan, compiler_types:
avoid duplicate type issues in BPF Type Format
kexec:
derive purgatory entry from symbol
KVM:
nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
KVM:
nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
KVM:
x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
KVM:
x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR
leds:
qcom-lpg: Check the return value of regmap_bulk_write()
libbpf:
Fix OOB read in btf_dump_get_bitfield_value
libceph:
define and enforce CEPH_MAX_KEY_LEN
libperf build:
Always place libperf includes first
libperf:
Don't remove -g when EXTRA_CFLAGS are used
libsubcmd:
Fix null intersection case in exclude_cmds()
Linux:
Linux 6.12.75
LoongArch:
Disable instrumentation for setup_ptwalker()
LoongArch:
Guard percpu handler under !CONFIG_PREEMPT_RT
LoongArch:
Make cpumask_of_node() robust against NUMA_NO_NODE
LoongArch:
Prefer top-down allocation after arch_mem_init()
LoongArch:
Use %px to print unmodified unwinding address
m68k:
nommu: fix memmove() with differently aligned src and dest for 68000
macvlan:
observe an RCU grace period in macvlan_common_newlink() error path
mailbox:
bcm-ferxrm-mailbox: Use default primary handler
mailbox:
imx: Skip the suspend flag for i.MX7ULP
mailbox:
pcc: Remove spurious IRQF_ONESHOT usage
mailbox:
sprd: clear delivery flag before handling TX done
mailbox:
sprd: mask interrupts that are not handled
mctp i2c:
initialise event handler read bytes
md-cluster:
fix NULL pointer dereference in process_metadata_update
md/bitmap:
fix GPF in write_page caused by resize race
md/raid10:
fix any_working flag handling in raid10_sync_request
md/raid1:
fix memory leak in raid1_run()
md/raid1:
fix memory leak in raid1_run() if no active rdev
md/raid5:
fix raid5_run() to return error when log_init() fails
media:
adv7180: fix frame interval in progressive mode
media:
amphion: Clear last_buffer_dequeued flag for DEC_CMD_START
media:
amphion: Drop min_queued_buffers assignment
media:
ccs: Accommodate C-PHY into the calculation
media:
ccs: Avoid possible division by zero
media:
ccs: Fix setting initial sub-device state
media:
chips-media: wave5: Fix conditional in start_streaming
media:
chips-media: wave5: Fix device cleanup order to prevent kernel panic
media:
chips-media: wave5: Fix kthread worker destruction in polling mode
media:
chips-media: wave5: Fix memory leak on codec_info allocation failure
media:
chips-media: wave5: Process ready frames when CMD_STOP sent to Encoder
media:
cx23885: Add missing unmap in snd_cx23885_hw_params()
media:
cx25821: Add missing unmap in snd_cx25821_hw_params()
media:
cx25821: Fix a resource leak in cx25821_dev_setup()
media:
cx88: Add missing unmap in snd_cx88_hw_params()
media:
dvb-core: dmxdevfilter must always flush bufs
media:
i2c/tw9903: Fix potential memory leak in tw9903_probe()
media:
i2c/tw9906: Fix potential memory leak in tw9906_probe()
media:
i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls
media:
i2c: ov01a10: Fix analogue gain range
media:
i2c: ov01a10: Fix digital gain range
media:
i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format()
media:
i2c: ov01a10: Fix reported pixel-rate value
media:
i2c: ov01a10: Fix test-pattern disabling
media:
i2c: ov01a10: Fix the horizontal flip control
media:
i2c: ov5647: Correct minimum VBLANK value
media:
i2c: ov5647: Correct pixel array offset
media:
i2c: ov5647: Fix PIXEL_RATE value for VGA mode
media:
i2c: ov5647: Initialize subdev before controls
media:
i2c: ov5647: Sensor should report RAW color space
media:
i2c: ov5647: use our own mutex for the ctrl lock
media:
ipu6: Always close firmware stream
media:
ipu6: Close firmware streams on streaming enable failure
media:
ipu6: Ensure stream_mutex is acquired when dealing with node list
media:
ipu6: Fix RPM reference leak in probe error paths
media:
ipu6: Fix typo and wrong constant in ipu6-mmu.c
media:
mediatek: encoder: Fix uninitialized scalar variable issue
media:
mediatek: vcodec: Don't try to decode 422/444 VP9
media:
mt9m114: Avoid a reset low spike during probe()
media:
mt9m114: Return -EPROBE_DEFER if no endpoint is found
media:
mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
media:
mtk-mdp: Fix error handling in probe function
media:
omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
media:
omap3isp: isppreview: always clamp in preview_try_format()
media:
omap3isp: set initial format
media:
pci: mg4b: Use IRQF_NO_THREAD
media:
pvrusb2: fix URB leak in pvr2_send_request_ex
media:
qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()
media:
radio-keene: fix memory leak in error path
media:
rkisp1: Fix filter mode register configuration
media:
rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()
media:
solo6x10: Check for out of bounds chip_id
media:
stm32: dcmipp: bytecap: clear all interrupts upon stream stop
media:
uvcvideo: Fix allocation for small frame sizes
media:
v4l2-async: Fix error handling on steps after finding a match
media:
venus: vdec: fix error state assignment for zero bytesused
media:
venus: vdec: restrict EOS addr quirk to IRIS2 only
media:
verisilicon: AV1: Fix enable cdef computation
media:
verisilicon: AV1: Fix tile info buffer size
media:
verisilicon: AV1: Fix tx mode bit setting
media:
verisilicon: AV1: Set IDR flag for intra_only frame type
mfd:
arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure
mfd:
core: Add locking around 'mfd_of_node_list'
mfd:
intel-lpss: Add Intel Nova Lake-S PCI IDs
mfd:
omap-usb-host: Fix OF populate on driver rebind
mfd:
qcom-pm8xxx: Fix OF populate on driver rebind
mfd:
simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA
mfd:
simple-mfd-i2c: Add Delta TN48M CPLD support
mfd:
simple-mfd-i2c: Add MAX77705 support
mfd:
simple-mfd-i2c: Add SpacemiT P1 support
mfd:
simple-mfd-i2c: Keep compatible strings in alphabetical order
mfd:
wm8350-core: Use IRQF_ONESHOT
minix:
Add required sanity checking to minix_check_superblock()
MIPS:
Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE
MIPS:
rb532: Fix MMIO UART resource registration
MIPS:
Work around LLVM bug when gp is used as global register variable
misc:
bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()
misc:
eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
mm, page_alloc, thp:
prevent reclaim for __GFP_THISNODE THP allocations
mm/highmem:
fix __kmap_to_page() build error
mm/slab:
use unsigned long for orig_size to ensure proper metadata align
mm/vmalloc:
prevent RCU stalls in kasan_release_vmalloc_node
mm:
numa_memblks: Identify the accurate NUMA ID of CFMW
mmc:
rtsx_pci_sdmmc: increase power-on settling delay to 5ms
modpost:
Amend ppc64 save/restfpr symnames for -Os build
module:
add helper function for reading module_buildid()
most:
core: fix leak on early registration failure
most:
core: fix resource leak in most_register_interface error paths
mptcp:
fix receive space timestamp initialization
mtd:
parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()
mtd:
parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions()
mtd:
rawnand: cadence: Fix return type of CDMA send-and-wait helper
mtd:
rawnand: pl353: Fix software ECC support
mtd:
spinand: Disable continuous read during probe
mtd:
spinand: Fix kernel doc
myri10ge:
avoid uninitialized variable use
net/mlx5:
DR, Fix circular locking dependency in dump
net/mlx5:
E-switch, Clear legacy flag when moving to switchdev
net/mlx5:
Fix missing devlink lock in SRIOV enable error path
net/mlx5:
Fix multiport device check over light SFs
net/mlx5e:
Fix "scheduling while atomic" in IPsec MAC address query
net/mlx5e:
Separate address related variables to be in struct
net/mlx5e:
Support routed networks during IPsec MACs initialization
net/mlx5e:
Use unsigned for mlx5e_get_max_num_channels
net/rds:
Clear reconnect pending bit
net/rds:
No shortcut out of RDS_CONN_ERROR
net/rds:
rds_sendmsg should not discard payload_len
net/sched:
act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
net:
Add skb_dstref_steal and skb_dstref_restore
net:
atm: fix crash due to unvalidated vcc pointer in sigd_send()
net:
bridge: mcast: always update mdb_n_entries for vlan contexts
net:
consume xmit errors of GSO frames
net:
cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path
net:
ethernet: ec_bhf: Fix dma_free_coherent() dma handle
net:
ethernet: marvell: skge: remove incorrect conflicting PCI ID
net:
ethernet: xscale: Check for PTP support properly
net:
hns3: extend HCLGE_FD_AD_QID to 11 bits
net:
hns3: fix double free issue for tx spare buffer
net:
intel: fix PCI device ID conflict between i40e and ipw2200
net:
ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
net:
macb: Fix tx/rx malfunction after phy link down and up
net:
mctp-i2c: fix duplicate reception of old data
net:
mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()
net:
mscc: ocelot: extract ocelot_xmit_timestamp() helper
net:
mscc: ocelot: split xmit into FDMA and register injection paths
net:
nfc: nci: Fix parameter validation for packet data
net:
remove WARN_ON_ONCE when accessing forward path array
net:
sfp: add quirk for Lantech 8330-265D
net:
sparx5/lan969x: fix DWRR cost max to match hardware register width
net:
sparx5/lan969x: fix PTP clock max_adj value
net:
sunhme: Fix sbus regression
net:
Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers
net:
ti: icssg-prueth: Add optional dependency on HSR
net:
usb: catc: enable basic endpoint checking
net:
usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
net:
usb: lan78xx: scan all MDIO addresses on LAN7801
net:
usb: pegasus: enable basic endpoint checking
net:
usb: r8152: fix transmit queue timeout
net:
usb: sr9700: remove code to drive nonexistent multicast filter
net:
wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
net:
wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
net:
wwan: mhi: Add network support for Foxconn T99W760
netfilter:
nf_conncount: fix tracking of connections from localhost
netfilter:
nf_conncount: increase the connection clean up limit to 64
netfilter:
nf_conncount: make nf_conncount_gc_list() to disable BH
netfilter:
nf_conntrack: Add allow_clash to generic protocol handler
netfilter:
nf_conntrack_h323: don't pass uninitialised l3num value
netfilter:
nf_conntrack_h323: fix OOB read in decode_choice()
netfilter:
nf_tables: fix use-after-free in nf_tables_addchain()
netfilter:
nf_tables: reset table validation state on abort
netfilter:
nfnetlink_queue: do shared-unconfirmed check before segmentation
netfilter:
nfnetlink_queue: optimize verdict lookup with hash table
netfilter:
nft_compat: add more restrictions on netlink attributes
netfilter:
nft_counter: fix reset of counters on 32bit archs
netfilter:
nft_set_hash: fix get operation on big endian
netfilter:
nft_set_rbtree: check for partial overlaps in anonymous sets
netfilter:
nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval
netfilter:
xt_tcpmss: check remaining length before reading optlen
nfc:
hci: shdlc: Stop timers and work before freeing context
nfc:
nxp-nci: remove interrupt trigger type
nfs/localio:
eliminate unnecessary kref in nfs_local_fsync_ctx
NFS/localio:
use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit
NFS:
NFSERR_INVAL is not defined by NFSv2
nfsd:
fix return error code for nfsd_map_name_to_[ug]id
nfsd:
never defer requests during idmap lookup
ntb:
ntb_hw_switchtec: Fix array-index-out-of-bounds access
ntb:
ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
NTB:
ntb_transport: Fix too small buffer for debugfs_name
nvdimm:
virtio_pmem: serialize flush requests
nvmem:
Drop OF node reference on nvmem_add_one_cell() failure
objpool:
fix the overestimation of object pooling metadata size
ocfs2:
fix reflink preserve cleanup issue
octeon_ep:
disable per ring interrupts
octeon_ep:
ensure dbell BADDR updation
octeon_ep_vf:
ensure dbell BADDR updation
octeontx2-af:
CGX: fix bitmap leaks
octeontx2-af:
Fix default entries mcam entry action
octeontx2-af:
Fix PF driver crash with kexec kernel booting
octeontx2-af:
Workaround SQM/PSE stalls by disabling sticky
octeontx2-pf:
Unregister devlink on probe failure
of:
unittest: fix possible null-pointer dereferences in of_unittest_property_copy()
openrisc:
define arch-specific version of nop()
OPP:
Return correct value in dev_pm_opp_get_level
ovl:
Fix uninit-value in ovl_fill_real
parisc:
kernel: replace kfree() with put_device() in create_tree_node()
parisc:
Prevent interrupts during reboot
Partial revert "x86/xen:
fix balloon target initialization for PVH dom0"
PCI/ACPI:
Restrict program_hpx_type2() to AER bits
PCI/AER:
Clear stale errors on reporting agents upon probe
PCI/IOV:
Fix race between SR-IOV enable/disable and hotplug
PCI/MSI:
Unmap MSI-X region on error
PCI/P2PDMA:
Release per-CPU pgmap ref when vm_insert_page() fails
PCI/PM:
Avoid redundant delays on D3hot->D3cold
PCI/portdrv:
Fix potential resource leak
PCI:
Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404]
PCI:
Add ACS quirk for Qualcomm Hamoa & Glymur
PCI:
Add defines for bridge window indexing
PCI:
Add Intel Nova Lake audio Device ID
PCI:
Check parent for NULL in of_pci_bus_release_domain_nr()
PCI:
Do not attempt to set ExtTag for VFs
PCI:
dwc: Fix msg_atu_index assignment
PCI:
Enable ACS after configuring IOMMU for OF platforms
PCI:
endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions
PCI:
Fix pci_slot_lock () device locking
PCI:
Fix pci_slot_trylock() error handling
PCI:
Initialize RCB from pci_configure_device()
PCI:
Mark 3ware-9650SA Root Port Extended Tags as broken
PCI:
Mark ASM1164 SATA controller to avoid bus reset
PCI:
Mark Nvidia GB10 to avoid bus reset
PCI:
mediatek: Fix IRQ domain leak when MSI allocation fails
perf annotate:
Fix memcpy size in arch__grow_instructions()
perf callchain:
Fix srcline printing with inlines
perf maps:
Fix reference count leak in maps__find_ams()
perf test stat tests:
Fix for virtualized machines
perf test stat:
Update test expectations and events
perf unwind-libdw:
Fix invalid reference counts
perf vendor events amd:
Fix Zen 5 MAB allocation events
perf/arm-cmn:
Reject unsupported hardware configurations
perf/arm-cmn:
Support CMN-600AE
perf/cxlpmu:
Replace IRQF_ONESHOT with IRQF_NO_THREAD
perf/x86/core:
Do not set bit width for unavailable counters
perf/x86/cstate:
Add Airmont NP
perf/x86/msr:
Add Airmont NP
perf:
arm_spe: Properly set hw.state on failures
phy:
cadence-torrent: restore parent clock for refclk during resume
phy:
freescale: imx8qm-hsio: fix NULL pointer dereference
phy:
fsl-imx8mq-usb: disable bind/unbind platform driver feature
phy:
mvebu-cp110-utmi: fix dr_mode property read from dts
phy:
qcom: edp: Make the number of clocks flexible
phy:
ti: phy-j721e-wiz: restore mux selection during resume
pinctrl:
equilibrium: Fix device node reference leak in pinbank_init()
pinctrl:
intel: Add code name documentation
pinctrl:
qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
pinctrl:
single: fix refcount leak in pcs_add_gpio_func()
ping:
annotate data-races in ping_lookup()
platform/chrome:
cros_ec_lightbar: Fix response size initialization
platform/chrome:
cros_typec_switch: Don't touch struct fwnode_handle::dev
platform/x86/amd/pmf:
Prevent TEE errors after hibernate
platform/x86:
int0002: Remove IRQF_ONESHOT from request_irq()
platform/x86:
ISST: Add missing write block check
PM:
sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
PM:
wakeup: Handle empty list in wakeup_sources_walk_start()
pNFS:
fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
power:
reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write
power:
sequencing: fix missing state_lock in pwrseq_power_on() error path
power:
supply: ab8500: Fix use-after-free in power_supply_changed()
power:
supply: act8945a: Fix use-after-free in power_supply_changed()
power:
supply: bq256xx: Fix use-after-free in power_supply_changed()
power:
supply: bq25980: Fix use-after-free in power_supply_changed()
power:
supply: bq27xxx: fix wrong errno when bus ops are unsupported
power:
supply: cpcap-battery: Fix use-after-free in power_supply_changed()
power:
supply: goldfish: Fix use-after-free in power_supply_changed()
power:
supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed()
power:
supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler
power:
supply: pm8916_lbc: Fix use-after-free in power_supply_changed()
power:
supply: qcom_battmgr: Recognize "LiP" as lithium-polymer
power:
supply: rt9455: Fix use-after-free in power_supply_changed()
power:
supply: sbs-battery: Fix use-after-free in power_supply_changed()
power:
supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()
powercap:
intel_rapl: Add PL4 support for Ice Lake
powercap:
intel_rapl_tpmi: Remove FW_BUG from invalid version check
powerpc/eeh:
fix recursive pci_lock_rescan_remove locking in EEH event handling
powerpc/smp:
Add check for kcalloc() failure in parse_thread_groups()
powerpc/uaccess:
Move barrier_nospec() out of allow_read_{from/write}_user()
procfs:
fix missing RCU protection when reading real_parent in do_task_stat()
procfs:
fix possible double mmput() in do_procmap_query()
pstore/ram:
fix buffer overflow in persistent_ram_save_old()
pstore:
ram_core: fix incorrect success return when vmap() fails
quota:
fix livelock between quotactl and freeze_super
rapidio:
replace rio_free_net() with kfree() in rio_scan_alloc_net()
rcu:
Fix rcu_read_unlock() deadloop due to softirq
rcu:
Refactor expedited handling check in rcu_read_unlock_special()
rcu:
Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler()
RDMA/core:
add rdma_rw_max_sge() helper for SQ sizing
RDMA/core:
Fix stale RoCE GIDs during netdev events at registration
RDMA/efa:
Fix typo in efa_alloc_mr()
RDMA/hns:
Fix RoCEv1 failure due to DSCP
RDMA/hns:
Fix WQ_MEM_RECLAIM warning
RDMA/hns:
Notify ULP of remaining soft-WCs during reset
RDMA/iwcm:
Fix workqueue list corruption by removing work_list
RDMA/mlx5:
Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler
RDMA/mlx5:
Fix UMR hang in LAG error state unload
RDMA/rtrs-clt:
For conn rejection use actual err number
RDMA/rtrs-srv:
fix SG mapping
RDMA/rtrs:
server: remove dead code
RDMA/rxe:
Fix double free in rxe_srq_from_init
RDMA/rxe:
Fix race condition in QP timer handlers
RDMA/siw:
Fix potential NULL pointer dereference in header processing
RDMA/umad:
Reject negative data_len in ib_umad_write
RDMA/umem:
Fix double dma_buf_unpin in failure path
RDMA/uverbs:
Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc
RDMA/uverbs:
Validate wqe_size before using it in ib_uverbs_post_send
regulator:
core: move supply check earlier in set_machine_constraints()
remoteproc:
imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized
remoteproc:
imx_rproc: Fix invalid loaded resource table detection
remoteproc:
mediatek: Break lock dependency to `prepare_lock`
Linux:
Remove WARN_ALL_UNSEEDED_RANDOM kernel config option
reset:
gpio: suppress bind attributes in sysfs
Revert "arm64:
zynqmp: Add an OP-TEE node to the device tree"
Revert "hwmon:
(ibmpex) fix use-after-free in high/low store"
Revert "mfd:
da9052-spi: Change read-mask to write-mask"
Revert "mmc:
rtsx_pci_sdmmc: increase power-on settling delay to 5ms"
Revert "PCI/IOV:
Add PCI rescan-remove locking when enabling/disabling SR-IOV"
Revert "PCI:
qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported"
riscv:
vector: init vector context with proper vlenb
rnbd-srv:
Fix server side setting of bi_size for special IOs
rnbd-srv:
use bio_add_virt_nofail
rnbd-srv:
Zero the rsp buffer before using it
rpmsg:
core: fix race in driver_override_show() and use core helper
rtc:
interface: Alarm race handling should not discard preceding error
rtc:
zynqmp: correct frequency value
rust:
kbuild: pass `-Zunstable-options` for Rust 1.95.0
s390/cio:
Fix device lifecycle handling in css_alloc_subchannel()
s390/kexec:
Make KEXEC_SIG available when CONFIG_MODULES=n
s390/pci:
Handle futile config accesses of disabled devices directly
s390/perf:
Disable register readout on sampling events
s390/purgatory:
Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
sched/deadline:
Clear the defer params
sched/debug:
Fix updating of ppos on server write ops
sched/rt:
Skip currently executing CPU in rto_next_cpu()
scsi:
buslogic: Reduce stack usage
scsi:
csiostor: Fix dereference of null pointer rn
scsi:
efct: Use IRQF_ONESHOT and default primary handler
scsi:
smartpqi: Fix memory leak in pqi_report_phys_luns()
scsi:
ufs: core: Flush exception handling work when RPM level is zero
scsi:
ufs: host: mediatek: Require CONFIG_PM
scsi:
ufs: mediatek: Fix page faults in ufs_mtk_clk_scale() trace event
selftests/bpf:
Fix resource leak in serial_test_wq on attach failure
selftests/bpf:
veristat: fix printing order in output_stats()
selftests/memfd:
use IPC semaphore instead of SIGSTOP/SIGCONT
selftests/mm/charge_reserved_hugetlb:
drop mount size for hugetlbfs
selftests/mm:
convert page_size to unsigned long
selftests/mm:
pagemap_ioctl: Fix types mismatches shown by compiler options
selftests:
forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled
selftests:
forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled
selftests:
mlxsw: tc_restrictions: Fix test failure with new iproute2
serial:
8250: 8250_omap.c: Add support for handling UART error conditions
serial:
8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done
serial:
8250_dw: handle clock enable errors in runtime_resume
serial:
caif: fix use-after-free in caif_serial ldisc_close()
serial:
imx: change SERIAL_IMX_CONSOLE to bool
serial:
SH_SCI: improve "DMA support" prompt
smack:
/smack/doi must be > 0
smack:
/smack/doi: accept previously used values
smb:
client: add proper locking around ses->iface_last_update
smb:
client: correct value for smbd_max_fragmented_recv_size
smb:
client: fix potential UAF and double free in smb2_open_file()
smb:
client: prevent races in ->query_interfaces()
soc:
mediatek: svs: Fix memory leak in svs_enable_debug_write()
soc:
qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe
soc:
qcom: smem: handle ENOMEM error during probe
soc:
rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition
soc:
rockchip: grf: Support multiple grf to be handled
soc:
ti: k3-socinfo: Fix regmap leak on probe failure
soc:
ti: pruss: Fix double free in pruss_clk_mux_setup()
soundwire:
dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15)
soundwire:
intel_ace2x: add SND_HDA_CORE dependency
soundwire:
intel_auxdevice: add cs42l45 codec to wake_capable_list
sparc:
don't reference obsolete termio struct for TC* constants
sparc:
Synchronize user stack on fork and clone
spi-geni-qcom:
initialize mode related registers to 0
spi-geni-qcom:
use xfer->bits_per_word for can_dma()
spi:
geni-qcom: Fix abort sequence execution for serial engine errors
spi:
spi-mem: Limit octal DTR constraints to octal DTR situations
spi:
spi-mem: Protect dirmap_create() with spi_mem_access_start/end
spi:
spidev: fix lock inversion between spi_lock and buf_lock
spi:
stm32: fix Overrun issue at < 8bpw
spi:
tools: Add include folder to .gitignore
spi:
wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe()
staging:
greybus: lights: avoid NULL deref
staging:
rtl8723bs: fix memory leak on failure path
staging:
rtl8723bs: fix missing status update on sdio_alloc_irq() failure
staging:
rtl8723bs: fix null dereference in find_network
statmount:
permission check should return EPERM
SUNRPC:
auth_gss: fix memory leaks in XDR decoding error paths
SUNRPC:
fix gss_auth kref leak in gss_alloc_msg error path
tcp:
tcp_tx_timestamp() must look at the rtx queue
thermal/of:
Fix reference leak in thermal_of_cm_lookup()
thermal:
int340x: Fix sysfs group leak on DLVR registration failure
thermal:
intel: x86_pkg_temp_thermal: Handle invalid temperature
tipc:
fix duplicate publication key in tipc_service_insert_publ()
tipc:
fix RCU dereference race in tipc_aead_users_dec()
tls:
Fix race condition in tls_sw_cancel_work_tx()
tools/power cpupower:
Reset errno before strtoull()
tools/power/x86/intel-speed-select:
Fix file descriptor leak in isolate_cpus()
tools:
Fix bitfield dependency failure
tpm:
st33zp24: Fix missing cleanup on get_burstcount() error
tpm:
tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
tracing:
Add a comment about ftrace_regs definition
tracing:
Add ftrace_fill_perf_regs() for perf event
tracing:
Add ftrace_partial_regs() for converting ftrace_regs to pt_regs
tracing:
Fix checking of freed trace_event_file for hist files
tracing:
Fix false sharing in hwlat get_sample()
tracing:
Fix to set write permission to per-cpu buffer_size_kb
tracing:
Properly process error handling in event_hist_trigger_parse()
tracing:
Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros
tracing:
ring-buffer: Fix to check event length before using
tracing:
Wake up poll waiters for hist files when removing an event
ublk:
Validate SQE128 flag before accessing the cmd
ucount:
check for CAP_SYS_RESOURCE using ns_capable_noaudit()
usb:
bdc: fix sleep during atomic
usb:
chipidea: udc: fix DMA and SG cleanup in _ep_nuke()
usb:
dwc2: fix resume failure if dr_mode is host
usb:
dwc3: gadget: Move vbus draw to workqueue context
usb:
gadget: f_fs: fix DMA-BUF OUT queues
usb:
gadget: f_fs: Fix ioctl error handling
usb:
gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
usb:
typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs
vfio/pci:
Lock upstream bridge for vfio_pci_core_disable()
vhost:
fix caching attributes of MMIO regions by setting them explicitly
vhost:
move vdpa group bound check to vhost_vdpa
virt:
vbox: uapi: Mark inner unions in packed structs as packed
vmw_vsock:
bypass false-positive Wnonnull warning with gcc-16
watchdog/softlockup:
fix sample ring index wrap in need_counting_irqs()
watchdog:
imx7ulp_wdt: handle the nowayout option
watchdog:
starfive-wdt: Fix PM reference leak in probe error path
wifi:
ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg()
wifi:
ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump()
wifi:
ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
wifi:
ath11k: Fix failure to connect to a 6 GHz AP
wifi:
ath12k: fix preferred hardware mode calculation
wifi:
cfg80211: allow only one NAN interface, also in multi radio
wifi:
cfg80211: Fix use_for flag update on BSS refresh
wifi:
cfg80211: stop NAN and P2P in cfg80211_leave
wifi:
cfg80211: wext: fix IGTK key ID off-by-one
wifi:
iwlegacy: add missing mutex protection in il3945_store_measurement()
wifi:
iwlegacy: add missing mutex protection in il4965_store_tx_power()
wifi:
iwlwifi: mvm: check the validity of noa_len
wifi:
libertas: fix WARNING in usb_tx_block
wifi:
rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
wifi:
rtw88: fix DTIM period handling when conf->dtim_period is zero
wifi:
rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data
wifi:
rtw88: rtw8821cu: Add ID for Mercusys MU6H
wifi:
rtw88: Use devm_kmemdup() in rtw_set_supported_band()
wifi:
rtw89: 8922a: add digital compensation for 2GHz
wifi:
rtw89: 8922a: set random mac if efuse contains zeroes
wifi:
rtw89: fix unable to receive probe responses under MLO connection
wifi:
rtw89: mac: correct page number for CSI response
wifi:
rtw89: pci: restore LDO setting after device resume
wifi:
rtw89: ser: enable error IMR after recovering from L1
wifi:
rtw89: wow: add reason codes for disassociation in WoWLAN mode
workqueue:
Factor out assign_rescuer_work()
workqueue:
Only assign rescuer work when really needed
workqueue:
Process rescuer work items one-by-one using a cursor
x86/fgraph,bpf:
Fix stack ORC unwind from kprobe_multi return probe
x86/fgraph,bpf:
Switch kprobe_multi program stack unwind to hw_regs path
x86/hyperv:
Fix error pointer dereference
x86/kexec:
add a sanity check on previous kernel's ima kexec buffer
x86/kexec:
Copy ACPI root pointer address from config table
x86/xen/pvh:
Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set
xdrgen:
Fix struct prefix for typedef types in program wrappers
xdrgen:
Initialize data pointer for zero-length items
xen-netback:
reject zero-queue configuration from guest
xen/virtio:
Don't use grant-dma-ops when running as Dom0
xenbus:
Use .freeze/.thaw to handle xenbus devices
xfrm6:
fix uninitialized saddr in xfrm6_get_saddr()
xfrm:
always flush state and policy upon NETDEV_UNREGISTER event
xfrm:
fix ip_rt_bug race in icmp_route_lookup reverse path
xfrm:
skip templates check for packet offload tunnel mode
xfs:
check for deleted cursors when revalidating two btrees
xfs:
check return value of xchk_scrub_create_subord
xfs:
delete attr leaf freemap entries when empty
xfs:
fix copy-paste error in previous fix
xfs:
fix freemap adjustments when adding xattrs to leaf blocks
xfs:
fix remote xattr valuelblk check
xfs:
fix the xattr scrub to detect freemap/entries array collisions
xfs:
mark data structures corrupt on EIO and ENODATA
xfs:
only call xf{array,blob}_destroy if we have a valid pointer
xfs:
remove xfs_attr_leaf_hasname